dnssec-tools-2.0/0000775000237200023720000000000012111172601014110 5ustar hardakerhardakerdnssec-tools-2.0/podmantex0000775000237200023720000003266312071065274016063 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2007-2013 SPARTA, Inc. All rights reserved. See the COPYING # file distributed with this software for details # # podmantex # # This script converts a pod man page into latex. # Read the pod for more details. # # podmantex [output-file] # use strict; my $ME = "podmantex"; # ID card. my $inpod = 0; # Pod-processing flag. my $nopod = 1; # No-pod-found flag. my $intrans = 0; # In =begin translator section flag. my $linecnt = 0; # Input line counter. my $translator = ""; # Translator name for directives. my $verbatim; # Verbatim flag. main(); exit(0); #--------------------------------------------------------------------------- # # Routine: main() # sub main { my $argc = @ARGV; # Argument count. my $infile = $ARGV[0]; # Input filename. my $outfile; # Output filename. # # Set up our output file. If it wasn't given on the command line, # we'll write to stdout. # if($argc == 1) { $outfile = "/dev/stdout"; } elsif($argc == 2) { $outfile = $ARGV[1]; } else { usage(); } # # Open our input and output files. # open(IN,"< $infile") || die("unable to open \"$infile\"\n"); open(OUT,"> $outfile") || die("unable to open \"$outfile\"\n"); # # Create a header. # header($infile); # # Read our input file and translate the pod. We'll start with # pod directives, then move to the pod markups. # while() { my $line = $_; chomp $line; $linecnt++; $verbatim = 0; # # If the line isn't empty, we'll handle the directives and # markups. If the line becomes empty as a result directive # handling, there's nothing more to do with the line. # if($line ne "") { $line = directives($line); next if($line eq ""); $line = markups($line) if(!$verbatim); $line = charconv($line) if(!$verbatim); } print OUT "$line\n" if($inpod); } # # Make sure we found some pod. # if($nopod) { print STDERR "warning: no pod was found\n"; } # # Make sure the pod is nice 'n tidy. # if($inpod) { print STDERR "warning: EOF reached without an =cut to close the pod\n"; } # # Release our files. # close(IN); close(OUT); } #--------------------------------------------------------------------------- # # Routine: header() # sub header { my $fn = shift; # Input filename. print OUT "\\clearpage\n\n"; print OUT "\\subsection{$fn}\n\n"; } #--------------------------------------------------------------------------- # # Routine: directives() # # Purpose: This routine translates the pod directives into LaTeX. # # =back closes a description environment # =begin translator process if we're the translator # =cut turn off pod processing # =end translator stop translator processing # =for translator process paragraph if trans is us # =head1 heading wraps heading in a bold context # =head2 heading wraps heading in a bold context # =item text adds description item # =over N starts a description environment # =pod turn on pod processing # # Literal text, strictly speaking, isn't a pod directive. # However, we will recognize it here and arrange for it to # remain unprocessed. Pod literal text is any whose line # starts with whitespace. # sub directives { my $line = shift; # Line to fix. # # If this is the pod initialization marker, mark us as being # in the pod-handling state. # if($line =~ /^=pod/) { $inpod = 1; $nopod = 0; return(""); } # # If we aren't in a pod-blob, don't do anything further. # if(!$inpod) { return(""); } if($line =~ /^[ \t]/) # Look for literal text. { $line =~ s/(.*)/\\begin{verbatim}$1\\end{verbatim}/; $line =~ s/\t/ /g; $verbatim = 1; } elsif($line =~ /^=back/) { $line = "\\end{description}"; } elsif($line =~ /^=begin/) { do_begin($line); return(""); } elsif($line =~ /^=cut/) { $inpod = 0; return(""); } elsif($line =~ /^=end/) { do_end($line); return(""); } elsif($line =~ /^=for/) { do_for($line); return(""); } elsif($line =~ /^=head1/) { $line =~ s/=head1\W(.*)/{\\bf $1}/; } elsif($line =~ /^=head2/) { $line =~ s/=head2\W(.*)/{\\bf $1}/; } elsif($line =~ /^=item/) { $line =~ s/=item\W(.*)/\\item $1\\verb" "/; } elsif($line =~ /^=over/) { $line = "\\begin{description}"; } return($line); } #--------------------------------------------------------------------------- # # Routine: markups() # # Purpose: Translate pod markups into LaTeX equivalents. # # # pod meaning LaTeX translation # --- ------- ----------------- # B bold bold context # C literal verbatim environment # E escape converts a few sequences # F filename bold context # I italics italics context # L<[text|]ref> cross-reference converts to plaintext # S non-breaking space changes spaces to tildes # X index ignored # Z<> zero-width character ignored # sub markups { my $line = shift; # Line to fix. # # Handle the bold and code-quote commands. # $line =~ s/B<(.*?)>/{\\bf $1}/g; $line =~ s/C<(.*?)>/\\begin{verbatim}$1\\end{verbatim}/g; if($line =~ /E<.*?>/) { $line =~ s/E/\/\>/g; $line =~ s/E/\//g; $line =~ s/E/\|/g; } # # Handle the file, italics, and cross-reference commands. # $line =~ s/F<(.*?)>/{\\bf $1}/g; $line =~ s/I<(.*?)>/{\\it $1}/g; $line =~ s/L<(.*?)>/$1/g; while($line =~ /S<(.*?)>/) { my $pre; my $match; my $pst; $line =~ /S<(.*?)>/; $pre = $`; $match = $1; $pst = $'; $match =~ s/ /~/g; $line = $pre . $match . $pst; } # # Ignore the commands for which we don't have an action. # $line =~ s/X<(.*?)>//g; $line =~ s/Z<(.*?)>//g; return($line); } #--------------------------------------------------------------------------- # # Routine: charconv() # # Purpose: Translate LaTeX special characters into escaped equivalents. # # # character LaTeX translation # --- ----------------- # _ \_ # sub charconv { my $line = shift; # Line to fix. # $line =~ s/_/\\_/g; $line =~ s/#/\\#/g; $line =~ s/@/\\@/g; $line =~ s//\$>\$/g; return($line); } #--------------------------------------------------------------------------- # # Routine: do_begin() # # Purpose: Handle the =begin directive. # # If we find that we're the translator for this block, we'll # set the $intrans flag and return. This will allow us to # deal with the pod in this section. # # If we aren't the block's translator, we'll read until the # end of the block. Or EOF. # sub do_begin { my $line = shift; # =begin line to parse. my $translator; # Name of section's translator. # # Get the section's translator. # $line =~ /=begin\W(.*)/; $translator = $1; # # If I'm the translator, we'll continue onwards. # if($translator eq $ME) { $intrans = 1; return; } # # Since I'm not the translator, we'll ignore everything until # we reach the end of the section. # while() { my $line = $_; $linecnt++; return if($line =~ /^=end\W$translator/); } return; } #--------------------------------------------------------------------------- # # Routine: do_end() # # Purpose: Handle the =end directive. We'll make sure we're in a # =begin section and that we've hit the =end we're expecting. # sub do_end { my $line = shift; # =end line to parse. my $translator; # Name of section's translator. # # Get the section's translator. # $line =~ /=end\W(.*)/; $translator = $1; # # Whine if we aren't in a =begin section. # if(!$intrans) { print STDERR "line $linecnt: unexpected =end found\n"; return; } # # Whine if I'm not the translator. # if($translator ne $ME) { print STDERR "line $linecnt: unexpected =end translator \"$translator\" found\n"; return; } $intrans = 0; } #--------------------------------------------------------------------------- # # Routine: do_for() # # Purpose: Handle the =for directive. If we're the translator, we'll # keep going as if nothing happened. If not, we'll read and # discard everything until the next empty line. # sub do_for { my $line = shift; # =for line to parse. my $translator; # Name of section's translator. # # Get the section's translator. # $line =~ /=for\W(.*)/; $translator = $1; # # If I'm the translator, we'll continue onwards. # return if($translator eq $ME); # # If I'm not the translator, we'll ignore everything until # we reach the next blank line. # while() { my $line = $_; $linecnt++; last if($line =~ /^(\W*)$/); } } #--------------------------------------------------------------------------- # # Routine: usage() # sub usage { print STDERR "usage: $ME [output-file]\n"; exit(1); } 1; #--------------------------------------------------------------------------- =pod =head1 NAME podmantex - Translate a Perl pod manpage into LaTeX. =head1 SYNOPSIS podmantex [output-file] =head1 DESCRIPTION I translates a "man page" written in Perl pod into simple LaTeX. The translated pod is put in a single LaTeX subsection, with everything being kept at the same LaTeX division level. I was written to use in collecting a large set of man pages into a single LaTeX document, but it will translate any Perl pod into LaTeX. The excellent I command also may be used to translate pod into LaTeX. However, it divides the translated pod into appropriate LaTeX divisions,respecting the B<=head1> and B<=head2> directives. Given I's purpose of collecting many man pages, having numerous sections and subsections overly complicates the document's structure. I is the Perl file to be translated. I is the output file. If this is not given, the translated pod will be written to standard output. =head1 DIRECTIVE HANDLING The pod directives (commands that start with '=') are handled in various ways. None of them start a new LaTeX division (section, subsection, paragraph, etc.) All text is assumed to be in the same division. =over 4 =item B<=back> Closes a LaTeX I environment. =item B<=begin> I Performs translator-specific processing. If I is I, then translation will continue as normal. If it isn't, everything will be ignored until the next B<=end> (with matching I) is reached. =item B<=cut> Turns off pod processing. An error is given if the end of the input file is reached without this directive being found. No LaTeX output is given specifically for this directive. =item B<=end> I Stops translator-specific processing. =item B<=for> I Performs translator-specific processing on the following paragraph only. If I is I, then translation will continue as normal. If not, everything will be ignored until the next empty line is reached. =item B<=head1> I Wraps I in a bold context. Since the resultant LaTeX will all be at the same division level, and may be inserted at any division level, no attempt is made to distinguish this heading from a B<=head2> heading. =item B<=head2> I Wraps I in a bold context. Since the resultant LaTeX will all be at the same division level, and may be inserted at any division level, no attempt is made to distinguish this heading from a B<=head1> heading. =item B<=item> I Adds an item to a LaTeX I environment. The I parameter is used as the LaTeX list item's label. =item B<=over> I Starts a LaTeX I environment. The items in this section may be intended to be bulleted or enumerated. This is a simple single-pass translator, though, and all B<=over> lists are translated into lists in the LaTeX I environment. The I parameter is ignored. =item B<=pod> Starts pod processing. No LaTeX output is given specifically for this directive. =back =head1 MARKUP HANDLING The pod directives (commands that start with '=') are handled in various ways. None of them start a new LaTeX division (section, subsection, paragraph, etc.) All text is assumed to be in the same division. =over 4 =item B I I will be enclosed in a bold context. =item B I I will be enclosed in a verbatim environment. This will cause I to be offset and the paragraph split up. =item B I Several I sequences are translated as shown below. E < E > E / E | =item B I I will be enclosed in a bold context. =item B I I will be enclosed in an italics context. =item B I I will be converted to plaintext. =item B I Any spaces within the I are replaced by tildes. =item B I I will be ignored. =item B Anything enclosed within the markup is ignored. =back =head1 CAVEATS This is a simple translator. Users would be well-advised to examine the resulting LaTeX to ensure the translation was performed as desired. Multiple angle brackets as markup delimiters may not be handled properly by I. A tab in pod verbatim text are converted into eight spaces. No attempt is made to calculate the proper number of spaces to insert in order to simulate tabstops. Consequently, space-formatting must be done by hand. =head1 COPYRIGHT Copyright 2004-2013 SPARTA, Inc. All rights reserved. See the COPYING file included with the DNSSEC-Tools package for details. =head1 AUTHOR Wayne Morrison, tewok@users.sourceforge.net =head1 SEE ALSO B =cut dnssec-tools-2.0/INSTALL0000664000237200023720000001313312071065274015156 0ustar hardakerhardaker DNSSEC-Tools Is your domain secure? TABLE OF CONTENTS ================= Table Of Contents Instructions Patching Other Applications (mozilla, sendmail, libspf, ...) Gnu CONFIGURE Instructions INSTRUCTIONS ================== 1) Get and install the following required perl modules: Net::DNS Net::DNS::SEC These can be easily done via the perl CPAN shell. For example: # perl -MCPAN -e shell [...] cpan> install Net::DNS [ CPAN will start the install process and hopefully install it ] cpan> install Net::DNS::SEC [...] [... optionally continue with other perl modules in step 2 below ...] 2) Install the optional software and perl modules Software needed if you want to sign zones using zonesigner: bind 9.3.1 or later. ( http://www.isc.org/sw/bind/ ) openssl and its development libraries ( http://www.openssl.org ) Extra perl modules needed for various tools: Text::Wrap Date::Parse ExtUtils::MakeMaker MailTools Test::Builder String::Diff Software for displaying zone maps, tcpdump traces, validator traces: graphviz [ http://www.graphviz.org/ ] Perl modules needed for displaying zone maps: GraphViz Perl modules (optional) that provides a GUI interface to some tools: Gtk2 QWizard Getopt::GUI::Long Perl Tk Perl module needed for running tests: Text::Diff 3) Run ./configure (type "./configure --help" for a quick usage summary.) (--prefix=PATH will change the default /usr/local installation path.) (--without-validator will turn off the C-code library and applications if they're not needed or don't compile and you still want to install the rest of the useful scripts) 4) make p 5) make install [as root] 6) install the logwatch extensions for parsing DNSSEC related reports from syslog messages (note: these patches are included in recent versions of logwatch, so you only need to enable them) See tools/logwatch/README 7) If you want to use automatic dynamic DNS securely on linux systems, see the tools/linux/ifup-dyn-dns/README file. 8) Before using zonesigner and other DNSSEC-Tools commands, the dtinitconf script should be run. This will create a new configuration file that will be used by the DNSSEC-Tools programs. It is also a good idea to read the README and INFO files in the dnssec-tools/tools/scripts directory, as well as the man pages for the commands you wish to use. PATCHING OTHER APPLICATIONS ============================================= Patches for the other applications can be found in the apps directory. See the apps/README file for details on those applications and patches. GNU CONFIGURE INSTRUCTIONS ============================================= The `configure' shell script attempts to guess correct values for various system-dependent variables used during compilation. It uses those values to create a `Makefile' in each directory of the package. It may also create one or more `.h' files containing system-dependent definitions. Finally, it creates a shell script `config.status' that you can run in the future to recreate the current configuration, a file `config.cache' that saves the results of its tests to speed up reconfiguring, a file `config.log' containing compiler output (useful mainly for debugging `configure') and a file `configure-summary' containing the summary displayed at the end of the `configure' run. As the `configure' invocation often gets lengthy and difficult to type or if you have several different ways you want to configure a system, you may want to create a shell script containing your invocation. If you need to do unusual things to compile the package, please try to figure out how `configure' could check whether to do them, and mail diffs or instructions to the address given in the `README' so they can be considered for the next release. If at some point `config.cache' contains results you don't want to keep, you may remove or edit it. The file `configure.in' is used to create `configure' by a program called `autoconf'. You only need `configure.in' if you want to change it or regenerate `configure' using a newer version of `autoconf'. The simplest way to compile this package is: 1. `cd' to the directory containing the package's source code and type `./configure' to configure the package for your system. If you're using `csh' on an old version of System V, you might need to type `sh ./configure' instead to prevent `csh' from trying to execute `configure' itself. Running `configure' takes awhile. While running, it prints some messages telling which features it is checking for. When it completes it prints a short message (also available in configure-summary) indicating what functionality will be available when compiled. 2. Type `make' to compile the package. 3. Type `make install' to install the programs and any data files and documentation. 4. You can remove the program binaries and object files from the source code directory by typing `make clean'. To also remove the files that `configure' created (so you can compile the package for a different kind of computer), type `make distclean'. There may be additional installation issues discussed in the README's for various platforms such as README.solaris. # Copyright 2004-2013 SPARTA, Inc. All rights reserved. # See the COPYING file included with the DNSSEC-Tools package for details. dnssec-tools-2.0/.cvsignore0000664000237200023720000000011410437422114016112 0ustar hardakerhardakerMakefile aclocal.m4 autom4te.cache config.log config.status libtool stamp-h dnssec-tools-2.0/COPYING0000664000237200023720000001114512107536543015163 0ustar hardakerhardakerCopyright (c) 2013-2013, Parsons, Inc. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. * Neither the name of SPARTA, Inc nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Copyright (c) 2004-2012, SPARTA, Inc. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. * Neither the name of SPARTA, Inc nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Portions (timesub macro) use this license: Copyright (c) 1982, 1986, 1993 The Regents of the University of California. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. 3. Neither the name of the University nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF dnssec-tools-2.0/podtrans0000775000237200023720000002213612071065274015710 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2007-2013 SPARTA, Inc. All rights reserved. See the COPYING # file distributed with this software for details # # podtrans # # This script searches a file hierarchy for files containing pod # and converts them into a readable form. The readable form is # saved into an output directory. # use strict; use File::Basename; use Getopt::Long; # # Data required for command line options. # my %options = (); # Filled option hash. my @opts = ( "translator=s", # Specific translation command. "help", # Give a usage message. ); # # Set a few "constants." # my $ME = "$0"; my $FIND = "/usr/bin/find"; my $MV = "/bin/mv"; my $RM = "/bin/rm"; # # Translation commands. # my $PERLDOC = "perldoc"; my $POD2HTML = "pod2html"; my $POD2LATEX = "pod2latex"; my $POD2MAN = "pod2man"; my $translator = ""; # # Variables needed here and there. # my @podfiles; # Files which contain pod. my %nodes; # Pod-file/output-file hash. main(); exit(0); ####################################################################### # # Routine: checkdir() # sub main { my $startdir; # Hierarchy to search. my $outdir; # Output directory. my $method; # Translation method. # # Parse the options. # opts(); # # Get the arguments. # $startdir = checkdir($ARGV[0]); $outdir = checkdir($ARGV[1]); $method = checkmethod($ARGV[2]); # # Find all the files that seem to contain pod. # print "searching for pod files\t(this may take a few moments)\n"; @podfiles = `$FIND $startdir -type f -exec egrep -l =pod \\{\\} \\\;`; # # Save off the valid names. Skip several specific file types. # sortpod($outdir); # # Translate the pod into something else. # podtrans($method); } ####################################################################### # # Routine: opts() # sub opts { my $argc; # Argument count. GetOptions(\%options,@opts) || usage(); $argc = @ARGV; usage() if(defined($options{'help'})); # # Save any user-specified translator program. # $translator = $options{'translator'} if(defined($options{'translator'})); # # Ensure we've got the right number of arguments, even if we # have to fake a few of them. # if($argc == 1) { push(@ARGV,"/dev/stdout"); push(@ARGV,"text"); } elsif($argc == 2) { # # Add a default translation method, if needed. # push(@ARGV,"text"); } $argc = @ARGV; # # Ensure we have arguments. # usage() if($argc != 3); } ####################################################################### # # Routine: checkdir() # sub checkdir { my $dir = shift; # Directory to check. # # Make sure the name exists. If not, we'll create it. # If it exists and isn't a directory, we'll whine and exit. # if(! -e $dir) { print "directory \"$dir\" does not exist; creating...\n"; mkdir($dir); } elsif(! -d $dir) { print STDERR "\"$dir\" is not a directory\n"; exit(1); } return($dir); } ####################################################################### # # Routine: checkmethod() # sub checkmethod { my $method = shift; # Method to check. return("ucmd") if($translator ne ""); if(($method ne "latex") && ($method ne "text") && ($method ne "html") && ($method ne "man")) { print STDERR "invalid translation method \"$method\"\n"; exit(1); } return($method); } ####################################################################### # # Routine: sortpod() # sub sortpod { my $outdir = shift; # Output directory. print "sorting the pod-enabled files\n"; foreach my $pf (@podfiles) { my $node; # Basename of found file. my $outfile; # Output filename. $pf =~ s/\n//; # Delete trailing newlines. # # Skip several known files and types. # next if(($pf =~ /^Makefile/) || ($pf =~ /\/blib\//) || ($pf =~ /\.bz2$/) || ($pf =~ /\.gz$/) || ($pf =~ /\.key$/) || ($pf =~ /\.o$/) || ($pf =~ /\.private$/) || ($pf =~ /\.tar$/) || ($pf =~ /\.zip$/) ); # # Don't do anything with our own self. # $node = basename($pf); next if($node eq $ME); # # Build and save the output filename. # $outfile = $pf; $outfile =~ s/\//::/g; $nodes{$pf} = "$outdir/$outfile"; } } ####################################################################### # # Routine: podtrans() # sub podtrans { my $method = shift; # Translation method. print "converting pod files\n"; foreach my $node (sort(keys(%nodes))) { my $out = $nodes{$node}; print "\t$node\n"; trans_latex($node,$out) if($method eq "latex"); trans_text($node,$out) if($method eq "text"); trans_html($node,$out) if($method eq "html"); trans_man($node,$out) if($method eq "man"); trans_ucmd($node,$out) if($method eq "ucmd"); } } ####################################################################### # # Routine: trans_html() # sub trans_html { my $node = shift; # File to translate. my $out = shift; # Translated file's name. system("$POD2HTML --outfile $out.html $node"); system("$RM -f pod2htm?.tmp"); } ####################################################################### # # Routine: trans_latex() # sub trans_latex { my $node = shift; # File to translate. my $out = shift; # Translated file's name. system("$POD2LATEX -out $out.tex $node"); } ####################################################################### # # Routine: trans_man() # sub trans_man { my $node = shift; # File to translate. my $out = shift; # Translated file's name. system("$POD2MAN $node $out.man"); } ####################################################################### # # Routine: trans_text() # sub trans_text { my $node = shift; # File to translate. my $out = shift; # Translated file's name. system("$PERLDOC -t $node > $out.txt"); } ####################################################################### # # Routine: trans_ucmd() # sub trans_ucmd { my $node = shift; # File to translate. my $out = shift; # Translated file's name. system("$translator $node > $out"); } ####################################################################### # # Routine: usage() # sub usage { print STDERR "usage: podtrans [-translator transcmd] [translation-method]\n"; exit(1); } 1; ############################################################################## # =pod =head1 NAME podtrans - Converts all pod files in a file hierarchy and saves the converted text. =head1 SYNOPSIS podtrans [-translator transcmd] [translation-method] =head1 DESCRIPTION I searches a file hierarchy for files containing POD and translates the POD into a readable form. The readable form is saved into an output directory. The conversion is performed by I. Files are ignored if the fit any of these characteristics: - start with "Makefile" - contain "/blib/" - end with: ".bz2", ".gz", ".key", ".o", ".private", ".tar", or ".zip" - the final filename is "podtrans" The I argument is the path from which I starts searching for POD files. The I argument is the path in which I stores its translated POD files. The output directory will be created if it does not exist. Any path separators in the found files are converted into a pair of colons for the output filename. If the I<-translator> option is not given, the I method must be one of the following: =over 4 =item B The file is translated into HTML using B. The output file is given a file extension of B<.html>. =item B The file is translated into LaTeX using B. The output file is given a file extension of B<.tex>. =item B The file is translated into a man page using B. The output file is given a file extension of B<.man>. =item B The file is translated into LaTeX using B. The output file is given a file extension of B<.txt>. This is the default method. =back If the I option is given, then the specified translation command will be used. =head1 EXAMPLES For these examples, B contains pod. =head2 Default Translator If no translation method or translator is specified: podtrans src outdir then I will convert the pod in B into text and place it in the file B. =head2 HTML Translator If the HTML translation method is specified: podtrans src outdir html then I will convert the pod in B into html and place it in the file B. =head2 Special-purpose Translator If a non-standard translator is specified: podtrans -translator foo-trans src outdir then I will execute the I translator, passing B as the only argument. The output will be redirected into B. =head1 COPYRIGHT Copyright 2004-2013 SPARTA, Inc. All rights reserved. See the COPYING file included with the DNSSEC-Tools package for details. =head1 AUTHOR Wayne Morrison, tewok@users.sourceforge.net =head1 SEE ALSO B =cut dnssec-tools-2.0/mkinstalldirs0000775000237200023720000000132210354615202016722 0ustar hardakerhardaker#! /bin/sh # mkinstalldirs --- make directory hierarchy # Author: Noah Friedman # Created: 1993-05-16 # Public domain # $Id: mkinstalldirs 1261 2005-12-28 23:06:42Z hardaker $ errstatus=0 for file do set fnord `echo ":$file" | sed -ne 's/^:\//#/;s/^://;s/\// /g;s/^#/\//;p'` shift pathcomp= for d do pathcomp="$pathcomp$d" case "$pathcomp" in -* ) pathcomp=./$pathcomp ;; esac if test ! -d "$pathcomp"; then echo "mkdir $pathcomp" mkdir "$pathcomp" || lasterr=$? if test ! -d "$pathcomp"; then errstatus=$lasterr fi fi pathcomp="$pathcomp/" done done exit $errstatus # mkinstalldirs ends here dnssec-tools-2.0/config.sub0000775000237200023720000007305510670362421016116 0ustar hardakerhardaker#! /bin/sh # Configuration validation subroutine script. # Copyright (C) 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, # 2000, 2001, 2002, 2003 Free Software Foundation, Inc. timestamp='2003-06-18' # This file is (in principle) common to ALL GNU software. # The presence of a machine in this file suggests that SOME GNU software # can handle that machine. It does not imply ALL GNU software can. # # This file is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 59 Temple Place - Suite 330, # Boston, MA 02111-1307, USA. # As a special exception to the GNU General Public License, if you # distribute this file as part of a program that contains a # configuration script generated by Autoconf, you may include it under # the same distribution terms that you use for the rest of that program. # Please send patches to . Submit a context # diff and a properly formatted ChangeLog entry. # # Configuration subroutine to validate and canonicalize a configuration type. # Supply the specified configuration type as an argument. # If it is invalid, we print an error message on stderr and exit with code 1. # Otherwise, we print the canonical config type on stdout and succeed. # This file is supposed to be the same for all GNU packages # and recognize all the CPU types, system types and aliases # that are meaningful with *any* GNU software. # Each package is responsible for reporting which valid configurations # it does not support. The user should be able to distinguish # a failure to support a valid configuration from a meaningless # configuration. # The goal of this file is to map all the various variations of a given # machine specification into a single specification in the form: # CPU_TYPE-MANUFACTURER-OPERATING_SYSTEM # or in some cases, the newer four-part form: # CPU_TYPE-MANUFACTURER-KERNEL-OPERATING_SYSTEM # It is wrong to echo any other type of specification. me=`echo "$0" | sed -e 's,.*/,,'` usage="\ Usage: $0 [OPTION] CPU-MFR-OPSYS $0 [OPTION] ALIAS Canonicalize a configuration name. Operation modes: -h, --help print this help, then exit -t, --time-stamp print date of last modification, then exit -v, --version print version number, then exit Report bugs and patches to ." version="\ GNU config.sub ($timestamp) Copyright (C) 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE." help=" Try \`$me --help' for more information." # Parse command line while test $# -gt 0 ; do case $1 in --time-stamp | --time* | -t ) echo "$timestamp" ; exit 0 ;; --version | -v ) echo "$version" ; exit 0 ;; --help | --h* | -h ) echo "$usage"; exit 0 ;; -- ) # Stop option processing shift; break ;; - ) # Use stdin as input. break ;; -* ) echo "$me: invalid option $1$help" exit 1 ;; *local*) # First pass through any local machine types. echo $1 exit 0;; * ) break ;; esac done case $# in 0) echo "$me: missing argument$help" >&2 exit 1;; 1) ;; *) echo "$me: too many arguments$help" >&2 exit 1;; esac # Separate what the user gave into CPU-COMPANY and OS or KERNEL-OS (if any). # Here we must recognize all the valid KERNEL-OS combinations. maybe_os=`echo $1 | sed 's/^\(.*\)-\([^-]*-[^-]*\)$/\2/'` case $maybe_os in nto-qnx* | linux-gnu* | freebsd*-gnu* | netbsd*-gnu* | storm-chaos* | os2-emx* | rtmk-nova*) os=-$maybe_os basic_machine=`echo $1 | sed 's/^\(.*\)-\([^-]*-[^-]*\)$/\1/'` ;; *) basic_machine=`echo $1 | sed 's/-[^-]*$//'` if [ $basic_machine != $1 ] then os=`echo $1 | sed 's/.*-/-/'` else os=; fi ;; esac ### Let's recognize common machines as not being operating systems so ### that things like config.sub decstation-3100 work. We also ### recognize some manufacturers as not being operating systems, so we ### can provide default operating systems below. case $os in -sun*os*) # Prevent following clause from handling this invalid input. ;; -dec* | -mips* | -sequent* | -encore* | -pc532* | -sgi* | -sony* | \ -att* | -7300* | -3300* | -delta* | -motorola* | -sun[234]* | \ -unicom* | -ibm* | -next | -hp | -isi* | -apollo | -altos* | \ -convergent* | -ncr* | -news | -32* | -3600* | -3100* | -hitachi* |\ -c[123]* | -convex* | -sun | -crds | -omron* | -dg | -ultra | -tti* | \ -harris | -dolphin | -highlevel | -gould | -cbm | -ns | -masscomp | \ -apple | -axis) os= basic_machine=$1 ;; -sim | -cisco | -oki | -wec | -winbond) os= basic_machine=$1 ;; -scout) ;; -wrs) os=-vxworks basic_machine=$1 ;; -chorusos*) os=-chorusos basic_machine=$1 ;; -chorusrdb) os=-chorusrdb basic_machine=$1 ;; -hiux*) os=-hiuxwe2 ;; -sco5) os=-sco3.2v5 basic_machine=`echo $1 | sed -e 's/86-.*/86-pc/'` ;; -sco4) os=-sco3.2v4 basic_machine=`echo $1 | sed -e 's/86-.*/86-pc/'` ;; -sco3.2.[4-9]*) os=`echo $os | sed -e 's/sco3.2./sco3.2v/'` basic_machine=`echo $1 | sed -e 's/86-.*/86-pc/'` ;; -sco3.2v[4-9]*) # Don't forget version if it is 3.2v4 or newer. basic_machine=`echo $1 | sed -e 's/86-.*/86-pc/'` ;; -sco*) os=-sco3.2v2 basic_machine=`echo $1 | sed -e 's/86-.*/86-pc/'` ;; -udk*) basic_machine=`echo $1 | sed -e 's/86-.*/86-pc/'` ;; -isc) os=-isc2.2 basic_machine=`echo $1 | sed -e 's/86-.*/86-pc/'` ;; -clix*) basic_machine=clipper-intergraph ;; -isc*) basic_machine=`echo $1 | sed -e 's/86-.*/86-pc/'` ;; -lynx*) os=-lynxos ;; -ptx*) basic_machine=`echo $1 | sed -e 's/86-.*/86-sequent/'` ;; -windowsnt*) os=`echo $os | sed -e 's/windowsnt/winnt/'` ;; -psos*) os=-psos ;; -mint | -mint[0-9]*) basic_machine=m68k-atari os=-mint ;; esac # Decode aliases for certain CPU-COMPANY combinations. case $basic_machine in # Recognize the basic CPU types without company name. # Some are omitted here because they have special meanings below. 1750a | 580 \ | a29k \ | alpha | alphaev[4-8] | alphaev56 | alphaev6[78] | alphapca5[67] \ | alpha64 | alpha64ev[4-8] | alpha64ev56 | alpha64ev6[78] | alpha64pca5[67] \ | arc | arm | arm[bl]e | arme[lb] | armv[2345] | armv[345][lb] | avr \ | c4x | clipper \ | d10v | d30v | dlx | dsp16xx \ | fr30 | frv \ | h8300 | h8500 | hppa | hppa1.[01] | hppa2.0 | hppa2.0[nw] | hppa64 \ | i370 | i860 | i960 | ia64 \ | ip2k \ | m32r | m68000 | m68k | m88k | mcore \ | mips | mipsbe | mipseb | mipsel | mipsle \ | mips16 \ | mips64 | mips64el \ | mips64vr | mips64vrel \ | mips64orion | mips64orionel \ | mips64vr4100 | mips64vr4100el \ | mips64vr4300 | mips64vr4300el \ | mips64vr5000 | mips64vr5000el \ | mipsisa32 | mipsisa32el \ | mipsisa32r2 | mipsisa32r2el \ | mipsisa64 | mipsisa64el \ | mipsisa64sb1 | mipsisa64sb1el \ | mipsisa64sr71k | mipsisa64sr71kel \ | mipstx39 | mipstx39el \ | mn10200 | mn10300 \ | msp430 \ | ns16k | ns32k \ | openrisc | or32 \ | pdp10 | pdp11 | pj | pjl \ | powerpc | powerpc64 | powerpc64le | powerpcle | ppcbe \ | pyramid \ | s390 | s390x \ | sh | sh[1234] | sh[23]e | sh[34]eb | shbe | shle | sh[1234]le | sh3ele \ | sh64 | sh64le \ | sparc | sparc64 | sparc86x | sparclet | sparclite | sparcv8 | sparcv9 | sparcv9b \ | strongarm \ | tahoe | thumb | tic4x | tic80 | tron \ | v850 | v850e \ | we32k \ | x86 | xscale | xstormy16 | xtensa \ | z8k) basic_machine=$basic_machine-unknown ;; m6811 | m68hc11 | m6812 | m68hc12) # Motorola 68HC11/12. basic_machine=$basic_machine-unknown os=-none ;; m88110 | m680[12346]0 | m683?2 | m68360 | m5200 | v70 | w65 | z8k) ;; # We use `pc' rather than `unknown' # because (1) that's what they normally are, and # (2) the word "unknown" tends to confuse beginning users. i*86 | x86_64) basic_machine=$basic_machine-pc ;; # Object if more than one company name word. *-*-*) echo Invalid configuration \`$1\': machine \`$basic_machine\' not recognized 1>&2 exit 1 ;; # Recognize the basic CPU types with company name. 580-* \ | a29k-* \ | alpha-* | alphaev[4-8]-* | alphaev56-* | alphaev6[78]-* \ | alpha64-* | alpha64ev[4-8]-* | alpha64ev56-* | alpha64ev6[78]-* \ | alphapca5[67]-* | alpha64pca5[67]-* | arc-* \ | arm-* | armbe-* | armle-* | armeb-* | armv*-* \ | avr-* \ | bs2000-* \ | c[123]* | c30-* | [cjt]90-* | c4x-* | c54x-* | c55x-* | c6x-* \ | clipper-* | cydra-* \ | d10v-* | d30v-* | dlx-* \ | elxsi-* \ | f30[01]-* | f700-* | fr30-* | frv-* | fx80-* \ | h8300-* | h8500-* \ | hppa-* | hppa1.[01]-* | hppa2.0-* | hppa2.0[nw]-* | hppa64-* \ | i*86-* | i860-* | i960-* | ia64-* \ | ip2k-* \ | m32r-* \ | m68000-* | m680[012346]0-* | m68360-* | m683?2-* | m68k-* \ | m88110-* | m88k-* | mcore-* \ | mips-* | mipsbe-* | mipseb-* | mipsel-* | mipsle-* \ | mips16-* \ | mips64-* | mips64el-* \ | mips64vr-* | mips64vrel-* \ | mips64orion-* | mips64orionel-* \ | mips64vr4100-* | mips64vr4100el-* \ | mips64vr4300-* | mips64vr4300el-* \ | mips64vr5000-* | mips64vr5000el-* \ | mipsisa32-* | mipsisa32el-* \ | mipsisa32r2-* | mipsisa32r2el-* \ | mipsisa64-* | mipsisa64el-* \ | mipsisa64sb1-* | mipsisa64sb1el-* \ | mipsisa64sr71k-* | mipsisa64sr71kel-* \ | mipstx39-* | mipstx39el-* \ | msp430-* \ | none-* | np1-* | nv1-* | ns16k-* | ns32k-* \ | orion-* \ | pdp10-* | pdp11-* | pj-* | pjl-* | pn-* | power-* \ | powerpc-* | powerpc64-* | powerpc64le-* | powerpcle-* | ppcbe-* \ | pyramid-* \ | romp-* | rs6000-* \ | s390-* | s390x-* \ | sh-* | sh[1234]-* | sh[23]e-* | sh[34]eb-* | shbe-* \ | shle-* | sh[1234]le-* | sh3ele-* | sh64-* | sh64le-* \ | sparc-* | sparc64-* | sparc86x-* | sparclet-* | sparclite-* \ | sparcv8-* | sparcv9-* | sparcv9b-* | strongarm-* | sv1-* | sx?-* \ | tahoe-* | thumb-* \ | tic30-* | tic4x-* | tic54x-* | tic55x-* | tic6x-* | tic80-* \ | tron-* \ | v850-* | v850e-* | vax-* \ | we32k-* \ | x86-* | x86_64-* | xps100-* | xscale-* | xstormy16-* \ | xtensa-* \ | ymp-* \ | z8k-*) ;; # Recognize the various machine names and aliases which stand # for a CPU type and a company and sometimes even an OS. 386bsd) basic_machine=i386-unknown os=-bsd ;; 3b1 | 7300 | 7300-att | att-7300 | pc7300 | safari | unixpc) basic_machine=m68000-att ;; 3b*) basic_machine=we32k-att ;; a29khif) basic_machine=a29k-amd os=-udi ;; adobe68k) basic_machine=m68010-adobe os=-scout ;; alliant | fx80) basic_machine=fx80-alliant ;; altos | altos3068) basic_machine=m68k-altos ;; am29k) basic_machine=a29k-none os=-bsd ;; amd64) basic_machine=x86_64-pc ;; amdahl) basic_machine=580-amdahl os=-sysv ;; amiga | amiga-*) basic_machine=m68k-unknown ;; amigaos | amigados) basic_machine=m68k-unknown os=-amigaos ;; amigaunix | amix) basic_machine=m68k-unknown os=-sysv4 ;; apollo68) basic_machine=m68k-apollo os=-sysv ;; apollo68bsd) basic_machine=m68k-apollo os=-bsd ;; aux) basic_machine=m68k-apple os=-aux ;; balance) basic_machine=ns32k-sequent os=-dynix ;; c90) basic_machine=c90-cray os=-unicos ;; convex-c1) basic_machine=c1-convex os=-bsd ;; convex-c2) basic_machine=c2-convex os=-bsd ;; convex-c32) basic_machine=c32-convex os=-bsd ;; convex-c34) basic_machine=c34-convex os=-bsd ;; convex-c38) basic_machine=c38-convex os=-bsd ;; cray | j90) basic_machine=j90-cray os=-unicos ;; crds | unos) basic_machine=m68k-crds ;; cris | cris-* | etrax*) basic_machine=cris-axis ;; da30 | da30-*) basic_machine=m68k-da30 ;; decstation | decstation-3100 | pmax | pmax-* | pmin | dec3100 | decstatn) basic_machine=mips-dec ;; decsystem10* | dec10*) basic_machine=pdp10-dec os=-tops10 ;; decsystem20* | dec20*) basic_machine=pdp10-dec os=-tops20 ;; delta | 3300 | motorola-3300 | motorola-delta \ | 3300-motorola | delta-motorola) basic_machine=m68k-motorola ;; delta88) basic_machine=m88k-motorola os=-sysv3 ;; dpx20 | dpx20-*) basic_machine=rs6000-bull os=-bosx ;; dpx2* | dpx2*-bull) basic_machine=m68k-bull os=-sysv3 ;; ebmon29k) basic_machine=a29k-amd os=-ebmon ;; elxsi) basic_machine=elxsi-elxsi os=-bsd ;; encore | umax | mmax) basic_machine=ns32k-encore ;; es1800 | OSE68k | ose68k | ose | OSE) basic_machine=m68k-ericsson os=-ose ;; fx2800) basic_machine=i860-alliant ;; genix) basic_machine=ns32k-ns ;; gmicro) basic_machine=tron-gmicro os=-sysv ;; go32) basic_machine=i386-pc os=-go32 ;; h3050r* | hiux*) basic_machine=hppa1.1-hitachi os=-hiuxwe2 ;; h8300hms) basic_machine=h8300-hitachi os=-hms ;; h8300xray) basic_machine=h8300-hitachi os=-xray ;; h8500hms) basic_machine=h8500-hitachi os=-hms ;; harris) basic_machine=m88k-harris os=-sysv3 ;; hp300-*) basic_machine=m68k-hp ;; hp300bsd) basic_machine=m68k-hp os=-bsd ;; hp300hpux) basic_machine=m68k-hp os=-hpux ;; hp3k9[0-9][0-9] | hp9[0-9][0-9]) basic_machine=hppa1.0-hp ;; hp9k2[0-9][0-9] | hp9k31[0-9]) basic_machine=m68000-hp ;; hp9k3[2-9][0-9]) basic_machine=m68k-hp ;; hp9k6[0-9][0-9] | hp6[0-9][0-9]) basic_machine=hppa1.0-hp ;; hp9k7[0-79][0-9] | hp7[0-79][0-9]) basic_machine=hppa1.1-hp ;; hp9k78[0-9] | hp78[0-9]) # FIXME: really hppa2.0-hp basic_machine=hppa1.1-hp ;; hp9k8[67]1 | hp8[67]1 | hp9k80[24] | hp80[24] | hp9k8[78]9 | hp8[78]9 | hp9k893 | hp893) # FIXME: really hppa2.0-hp basic_machine=hppa1.1-hp ;; hp9k8[0-9][13679] | hp8[0-9][13679]) basic_machine=hppa1.1-hp ;; hp9k8[0-9][0-9] | hp8[0-9][0-9]) basic_machine=hppa1.0-hp ;; hppa-next) os=-nextstep3 ;; hppaosf) basic_machine=hppa1.1-hp os=-osf ;; hppro) basic_machine=hppa1.1-hp os=-proelf ;; i370-ibm* | ibm*) basic_machine=i370-ibm ;; # I'm not sure what "Sysv32" means. Should this be sysv3.2? i*86v32) basic_machine=`echo $1 | sed -e 's/86.*/86-pc/'` os=-sysv32 ;; i*86v4*) basic_machine=`echo $1 | sed -e 's/86.*/86-pc/'` os=-sysv4 ;; i*86v) basic_machine=`echo $1 | sed -e 's/86.*/86-pc/'` os=-sysv ;; i*86sol2) basic_machine=`echo $1 | sed -e 's/86.*/86-pc/'` os=-solaris2 ;; i386mach) basic_machine=i386-mach os=-mach ;; i386-vsta | vsta) basic_machine=i386-unknown os=-vsta ;; iris | iris4d) basic_machine=mips-sgi case $os in -irix*) ;; *) os=-irix4 ;; esac ;; isi68 | isi) basic_machine=m68k-isi os=-sysv ;; m88k-omron*) basic_machine=m88k-omron ;; magnum | m3230) basic_machine=mips-mips os=-sysv ;; merlin) basic_machine=ns32k-utek os=-sysv ;; mingw32) basic_machine=i386-pc os=-mingw32 ;; miniframe) basic_machine=m68000-convergent ;; *mint | -mint[0-9]* | *MiNT | *MiNT[0-9]*) basic_machine=m68k-atari os=-mint ;; mips3*-*) basic_machine=`echo $basic_machine | sed -e 's/mips3/mips64/'` ;; mips3*) basic_machine=`echo $basic_machine | sed -e 's/mips3/mips64/'`-unknown ;; mmix*) basic_machine=mmix-knuth os=-mmixware ;; monitor) basic_machine=m68k-rom68k os=-coff ;; morphos) basic_machine=powerpc-unknown os=-morphos ;; msdos) basic_machine=i386-pc os=-msdos ;; mvs) basic_machine=i370-ibm os=-mvs ;; ncr3000) basic_machine=i486-ncr os=-sysv4 ;; netbsd386) basic_machine=i386-unknown os=-netbsd ;; netwinder) basic_machine=armv4l-rebel os=-linux ;; news | news700 | news800 | news900) basic_machine=m68k-sony os=-newsos ;; news1000) basic_machine=m68030-sony os=-newsos ;; news-3600 | risc-news) basic_machine=mips-sony os=-newsos ;; necv70) basic_machine=v70-nec os=-sysv ;; next | m*-next ) basic_machine=m68k-next case $os in -nextstep* ) ;; -ns2*) os=-nextstep2 ;; *) os=-nextstep3 ;; esac ;; nh3000) basic_machine=m68k-harris os=-cxux ;; nh[45]000) basic_machine=m88k-harris os=-cxux ;; nindy960) basic_machine=i960-intel os=-nindy ;; mon960) basic_machine=i960-intel os=-mon960 ;; nonstopux) basic_machine=mips-compaq os=-nonstopux ;; np1) basic_machine=np1-gould ;; nv1) basic_machine=nv1-cray os=-unicosmp ;; nsr-tandem) basic_machine=nsr-tandem ;; op50n-* | op60c-*) basic_machine=hppa1.1-oki os=-proelf ;; or32 | or32-*) basic_machine=or32-unknown os=-coff ;; OSE68000 | ose68000) basic_machine=m68000-ericsson os=-ose ;; os68k) basic_machine=m68k-none os=-os68k ;; pa-hitachi) basic_machine=hppa1.1-hitachi os=-hiuxwe2 ;; paragon) basic_machine=i860-intel os=-osf ;; pbd) basic_machine=sparc-tti ;; pbb) basic_machine=m68k-tti ;; pc532 | pc532-*) basic_machine=ns32k-pc532 ;; pentium | p5 | k5 | k6 | nexgen | viac3) basic_machine=i586-pc ;; pentiumpro | p6 | 6x86 | athlon | athlon_*) basic_machine=i686-pc ;; pentiumii | pentium2 | pentiumiii | pentium3) basic_machine=i686-pc ;; pentium4) basic_machine=i786-pc ;; pentium-* | p5-* | k5-* | k6-* | nexgen-* | viac3-*) basic_machine=i586-`echo $basic_machine | sed 's/^[^-]*-//'` ;; pentiumpro-* | p6-* | 6x86-* | athlon-*) basic_machine=i686-`echo $basic_machine | sed 's/^[^-]*-//'` ;; pentiumii-* | pentium2-* | pentiumiii-* | pentium3-*) basic_machine=i686-`echo $basic_machine | sed 's/^[^-]*-//'` ;; pentium4-*) basic_machine=i786-`echo $basic_machine | sed 's/^[^-]*-//'` ;; pn) basic_machine=pn-gould ;; power) basic_machine=power-ibm ;; ppc) basic_machine=powerpc-unknown ;; ppc-*) basic_machine=powerpc-`echo $basic_machine | sed 's/^[^-]*-//'` ;; ppcle | powerpclittle | ppc-le | powerpc-little) basic_machine=powerpcle-unknown ;; ppcle-* | powerpclittle-*) basic_machine=powerpcle-`echo $basic_machine | sed 's/^[^-]*-//'` ;; ppc64) basic_machine=powerpc64-unknown ;; ppc64-*) basic_machine=powerpc64-`echo $basic_machine | sed 's/^[^-]*-//'` ;; ppc64le | powerpc64little | ppc64-le | powerpc64-little) basic_machine=powerpc64le-unknown ;; ppc64le-* | powerpc64little-*) basic_machine=powerpc64le-`echo $basic_machine | sed 's/^[^-]*-//'` ;; ps2) basic_machine=i386-ibm ;; pw32) basic_machine=i586-unknown os=-pw32 ;; rom68k) basic_machine=m68k-rom68k os=-coff ;; rm[46]00) basic_machine=mips-siemens ;; rtpc | rtpc-*) basic_machine=romp-ibm ;; sa29200) basic_machine=a29k-amd os=-udi ;; sb1) basic_machine=mipsisa64sb1-unknown ;; sb1el) basic_machine=mipsisa64sb1el-unknown ;; sei) basic_machine=mips-sei os=-seiux ;; sequent) basic_machine=i386-sequent ;; sh) basic_machine=sh-hitachi os=-hms ;; sh64) basic_machine=sh64-unknown ;; sparclite-wrs | simso-wrs) basic_machine=sparclite-wrs os=-vxworks ;; sps7) basic_machine=m68k-bull os=-sysv2 ;; spur) basic_machine=spur-unknown ;; st2000) basic_machine=m68k-tandem ;; stratus) basic_machine=i860-stratus os=-sysv4 ;; sun2) basic_machine=m68000-sun ;; sun2os3) basic_machine=m68000-sun os=-sunos3 ;; sun2os4) basic_machine=m68000-sun os=-sunos4 ;; sun3os3) basic_machine=m68k-sun os=-sunos3 ;; sun3os4) basic_machine=m68k-sun os=-sunos4 ;; sun4os3) basic_machine=sparc-sun os=-sunos3 ;; sun4os4) basic_machine=sparc-sun os=-sunos4 ;; sun4sol2) basic_machine=sparc-sun os=-solaris2 ;; sun3 | sun3-*) basic_machine=m68k-sun ;; sun4) basic_machine=sparc-sun ;; sun386 | sun386i | roadrunner) basic_machine=i386-sun ;; sv1) basic_machine=sv1-cray os=-unicos ;; symmetry) basic_machine=i386-sequent os=-dynix ;; t3e) basic_machine=alphaev5-cray os=-unicos ;; t90) basic_machine=t90-cray os=-unicos ;; tic54x | c54x*) basic_machine=tic54x-unknown os=-coff ;; tic55x | c55x*) basic_machine=tic55x-unknown os=-coff ;; tic6x | c6x*) basic_machine=tic6x-unknown os=-coff ;; tx39) basic_machine=mipstx39-unknown ;; tx39el) basic_machine=mipstx39el-unknown ;; toad1) basic_machine=pdp10-xkl os=-tops20 ;; tower | tower-32) basic_machine=m68k-ncr ;; udi29k) basic_machine=a29k-amd os=-udi ;; ultra3) basic_machine=a29k-nyu os=-sym1 ;; v810 | necv810) basic_machine=v810-nec os=-none ;; vaxv) basic_machine=vax-dec os=-sysv ;; vms) basic_machine=vax-dec os=-vms ;; vpp*|vx|vx-*) basic_machine=f301-fujitsu ;; vxworks960) basic_machine=i960-wrs os=-vxworks ;; vxworks68) basic_machine=m68k-wrs os=-vxworks ;; vxworks29k) basic_machine=a29k-wrs os=-vxworks ;; w65*) basic_machine=w65-wdc os=-none ;; w89k-*) basic_machine=hppa1.1-winbond os=-proelf ;; xps | xps100) basic_machine=xps100-honeywell ;; ymp) basic_machine=ymp-cray os=-unicos ;; z8k-*-coff) basic_machine=z8k-unknown os=-sim ;; none) basic_machine=none-none os=-none ;; # Here we handle the default manufacturer of certain CPU types. It is in # some cases the only manufacturer, in others, it is the most popular. w89k) basic_machine=hppa1.1-winbond ;; op50n) basic_machine=hppa1.1-oki ;; op60c) basic_machine=hppa1.1-oki ;; romp) basic_machine=romp-ibm ;; rs6000) basic_machine=rs6000-ibm ;; vax) basic_machine=vax-dec ;; pdp10) # there are many clones, so DEC is not a safe bet basic_machine=pdp10-unknown ;; pdp11) basic_machine=pdp11-dec ;; we32k) basic_machine=we32k-att ;; sh3 | sh4 | sh[34]eb | sh[1234]le | sh[23]ele) basic_machine=sh-unknown ;; sh64) basic_machine=sh64-unknown ;; sparc | sparcv8 | sparcv9 | sparcv9b) basic_machine=sparc-sun ;; cydra) basic_machine=cydra-cydrome ;; orion) basic_machine=orion-highlevel ;; orion105) basic_machine=clipper-highlevel ;; mac | mpw | mac-mpw) basic_machine=m68k-apple ;; pmac | pmac-mpw) basic_machine=powerpc-apple ;; *-unknown) # Make sure to match an already-canonicalized machine name. ;; *) echo Invalid configuration \`$1\': machine \`$basic_machine\' not recognized 1>&2 exit 1 ;; esac # Here we canonicalize certain aliases for manufacturers. case $basic_machine in *-digital*) basic_machine=`echo $basic_machine | sed 's/digital.*/dec/'` ;; *-commodore*) basic_machine=`echo $basic_machine | sed 's/commodore.*/cbm/'` ;; *) ;; esac # Decode manufacturer-specific aliases for certain operating systems. if [ x"$os" != x"" ] then case $os in # First match some system type aliases # that might get confused with valid system types. # -solaris* is a basic system type, with this one exception. -solaris1 | -solaris1.*) os=`echo $os | sed -e 's|solaris1|sunos4|'` ;; -solaris) os=-solaris2 ;; -svr4*) os=-sysv4 ;; -unixware*) os=-sysv4.2uw ;; -gnu/linux*) os=`echo $os | sed -e 's|gnu/linux|linux-gnu|'` ;; # First accept the basic system types. # The portable systems comes first. # Each alternative MUST END IN A *, to match a version number. # -sysv* is not here because it comes later, after sysvr4. -gnu* | -bsd* | -mach* | -minix* | -genix* | -ultrix* | -irix* \ | -*vms* | -sco* | -esix* | -isc* | -aix* | -sunos | -sunos[34]*\ | -hpux* | -unos* | -osf* | -luna* | -dgux* | -solaris* | -sym* \ | -amigaos* | -amigados* | -msdos* | -newsos* | -unicos* | -aof* \ | -aos* \ | -nindy* | -vxsim* | -vxworks* | -ebmon* | -hms* | -mvs* \ | -clix* | -riscos* | -uniplus* | -iris* | -rtu* | -xenix* \ | -hiux* | -386bsd* | -netbsd* | -openbsd* | -freebsd* | -riscix* \ | -lynxos* | -bosx* | -nextstep* | -cxux* | -aout* | -elf* | -oabi* \ | -ptx* | -coff* | -ecoff* | -winnt* | -domain* | -vsta* \ | -udi* | -eabi* | -lites* | -ieee* | -go32* | -aux* \ | -chorusos* | -chorusrdb* \ | -cygwin* | -pe* | -psos* | -moss* | -proelf* | -rtems* \ | -mingw32* | -linux-gnu* | -uxpv* | -beos* | -mpeix* | -udk* \ | -interix* | -uwin* | -mks* | -rhapsody* | -darwin* | -opened* \ | -openstep* | -oskit* | -conix* | -pw32* | -nonstopux* \ | -storm-chaos* | -tops10* | -tenex* | -tops20* | -its* \ | -os2* | -vos* | -palmos* | -uclinux* | -nucleus* \ | -morphos* | -superux* | -rtmk* | -rtmk-nova* | -windiss* \ | -powermax* | -dnix* | -nx6 | -nx7 | -sei*) # Remember, each alternative MUST END IN *, to match a version number. ;; -qnx*) case $basic_machine in x86-* | i*86-*) ;; *) os=-nto$os ;; esac ;; -nto-qnx*) ;; -nto*) os=`echo $os | sed -e 's|nto|nto-qnx|'` ;; -sim | -es1800* | -hms* | -xray | -os68k* | -none* | -v88r* \ | -windows* | -osx | -abug | -netware* | -os9* | -beos* \ | -macos* | -mpw* | -magic* | -mmixware* | -mon960* | -lnews*) ;; -mac*) os=`echo $os | sed -e 's|mac|macos|'` ;; -linux*) os=`echo $os | sed -e 's|linux|linux-gnu|'` ;; -sunos5*) os=`echo $os | sed -e 's|sunos5|solaris2|'` ;; -sunos6*) os=`echo $os | sed -e 's|sunos6|solaris3|'` ;; -opened*) os=-openedition ;; -wince*) os=-wince ;; -osfrose*) os=-osfrose ;; -osf*) os=-osf ;; -utek*) os=-bsd ;; -dynix*) os=-bsd ;; -acis*) os=-aos ;; -atheos*) os=-atheos ;; -386bsd) os=-bsd ;; -ctix* | -uts*) os=-sysv ;; -nova*) os=-rtmk-nova ;; -ns2 ) os=-nextstep2 ;; -nsk*) os=-nsk ;; # Preserve the version number of sinix5. -sinix5.*) os=`echo $os | sed -e 's|sinix|sysv|'` ;; -sinix*) os=-sysv4 ;; -triton*) os=-sysv3 ;; -oss*) os=-sysv3 ;; -svr4) os=-sysv4 ;; -svr3) os=-sysv3 ;; -sysvr4) os=-sysv4 ;; # This must come after -sysvr4. -sysv*) ;; -ose*) os=-ose ;; -es1800*) os=-ose ;; -xenix) os=-xenix ;; -*mint | -mint[0-9]* | -*MiNT | -MiNT[0-9]*) os=-mint ;; -aros*) os=-aros ;; -kaos*) os=-kaos ;; -none) ;; *) # Get rid of the `-' at the beginning of $os. os=`echo $os | sed 's/[^-]*-//'` echo Invalid configuration \`$1\': system \`$os\' not recognized 1>&2 exit 1 ;; esac else # Here we handle the default operating systems that come with various machines. # The value should be what the vendor currently ships out the door with their # machine or put another way, the most popular os provided with the machine. # Note that if you're going to try to match "-MANUFACTURER" here (say, # "-sun"), then you have to tell the case statement up towards the top # that MANUFACTURER isn't an operating system. Otherwise, code above # will signal an error saying that MANUFACTURER isn't an operating # system, and we'll never get to this point. case $basic_machine in *-acorn) os=-riscix1.2 ;; arm*-rebel) os=-linux ;; arm*-semi) os=-aout ;; c4x-* | tic4x-*) os=-coff ;; # This must come before the *-dec entry. pdp10-*) os=-tops20 ;; pdp11-*) os=-none ;; *-dec | vax-*) os=-ultrix4.2 ;; m68*-apollo) os=-domain ;; i386-sun) os=-sunos4.0.2 ;; m68000-sun) os=-sunos3 # This also exists in the configure program, but was not the # default. # os=-sunos4 ;; m68*-cisco) os=-aout ;; mips*-cisco) os=-elf ;; mips*-*) os=-elf ;; or32-*) os=-coff ;; *-tti) # must be before sparc entry or we get the wrong os. os=-sysv3 ;; sparc-* | *-sun) os=-sunos4.1.1 ;; *-be) os=-beos ;; *-ibm) os=-aix ;; *-wec) os=-proelf ;; *-winbond) os=-proelf ;; *-oki) os=-proelf ;; *-hp) os=-hpux ;; *-hitachi) os=-hiux ;; i860-* | *-att | *-ncr | *-altos | *-motorola | *-convergent) os=-sysv ;; *-cbm) os=-amigaos ;; *-dg) os=-dgux ;; *-dolphin) os=-sysv3 ;; m68k-ccur) os=-rtu ;; m88k-omron*) os=-luna ;; *-next ) os=-nextstep ;; *-sequent) os=-ptx ;; *-crds) os=-unos ;; *-ns) os=-genix ;; i370-*) os=-mvs ;; *-next) os=-nextstep3 ;; *-gould) os=-sysv ;; *-highlevel) os=-bsd ;; *-encore) os=-bsd ;; *-sgi) os=-irix ;; *-siemens) os=-sysv4 ;; *-masscomp) os=-rtu ;; f30[01]-fujitsu | f700-fujitsu) os=-uxpv ;; *-rom68k) os=-coff ;; *-*bug) os=-coff ;; *-apple) os=-macos ;; *-atari*) os=-mint ;; *) os=-none ;; esac fi # Here we handle the case where we know the os, and the CPU type, but not the # manufacturer. We pick the logical manufacturer. vendor=unknown case $basic_machine in *-unknown) case $os in -riscix*) vendor=acorn ;; -sunos*) vendor=sun ;; -aix*) vendor=ibm ;; -beos*) vendor=be ;; -hpux*) vendor=hp ;; -mpeix*) vendor=hp ;; -hiux*) vendor=hitachi ;; -unos*) vendor=crds ;; -dgux*) vendor=dg ;; -luna*) vendor=omron ;; -genix*) vendor=ns ;; -mvs* | -opened*) vendor=ibm ;; -ptx*) vendor=sequent ;; -vxsim* | -vxworks* | -windiss*) vendor=wrs ;; -aux*) vendor=apple ;; -hms*) vendor=hitachi ;; -mpw* | -macos*) vendor=apple ;; -*mint | -mint[0-9]* | -*MiNT | -MiNT[0-9]*) vendor=atari ;; -vos*) vendor=stratus ;; esac basic_machine=`echo $basic_machine | sed "s/unknown/$vendor/"` ;; esac echo $basic_machine$os exit 0 # Local variables: # eval: (add-hook 'write-file-hooks 'time-stamp) # time-stamp-start: "timestamp='" # time-stamp-format: "%:y-%02m-%02d" # time-stamp-end: "'" # End: dnssec-tools-2.0/Makefile.in0000664000237200023720000000670511412654740016201 0ustar hardakerhardakerprefix=@prefix@ exec_prefix=@exec_prefix@ sysconfdir=@sysconfdir@ bindir=@bindir@ sbindir=@sbindir@ libdir=@libdir@ datarootdir=@datarootdir@ datadir=@datadir@ includedir=@includedir@ mandir=@mandir@ top_srcdir=@top_srcdir@ man1dir=man1 #man3dir=@man3dir@ #man5dir=@man5dir@ #man8dir=@man8dir@ BUILDDIR=@abs_top_builddir@ PERLDIRS=tools/modules tools/donuts tools/mapper tools/scripts tools/convertar \ tools/dnspktflow tools/maketestzone tools/etc tools/drawvalmap PERLARGS=@PERLARGS@ SUBDIRS=@DNSSEC_SUBDIRS@ MKPATH=$(top_srcdir)/mkinstalldirs INSTALLDIRS=$(prefix) $(exec_prefix) $(bindir) $(sbindir) $(libdir) $(datadir) $(includedir) $(mandir) $(mandir)/$(man1dir) $(mandir)/$(man3dir) $(mandir)/$(man5dir) $(mandir)/$(man8dir) DOCINSTALL=@INSTALL@ @INSTALL_DATA@ QUIET=@ MAN1PAGES=\ dnssec-tools.1 all: makeit libs: subdirmake makeit: subdirmake perlmake install: all makedirectories perlinstall subdirinstall maninstall nextstepinstructions clean: perlclean subdirclean distclean: subdirdistclean clean configclean nextstepinstructions: subdirinstall $(QUIET)echo "" $(QUIET)echo "**********************************************************************" $(QUIET)echo "** NEXT: Please run 'dtinitconf' in order to set up the required" $(QUIET)echo "** $(sysconfdir)/dnssec-tools/dnssec-tools.conf file" $(QUIET)echo "**********************************************************************" $(QUIET)echo "" maninstall: $(MKPATH) $(mandir)/$(man1dir) for i in $(MAN1PAGES) ; do \ $(DOCINSTALL) docs/$$i $(DESTDIR)/$(mandir)/$(man1dir) ; \ done makedirectories: $(QUIET)for i in $(INSTALLDIRS) ; do \ if test ! -d $(DESTDIR)/$$i ; then \ echo "creating directory $(DESTDIR)/$$i/" ;\ $(MKPATH) $(DESTDIR)/$$i ; \ fi \ done # # Subdir build rules # subdirmake: $(QUIET)if test "x$(SUBDIRS)" != "xnone" ; then \ for i in $(SUBDIRS) ; do \ (cd $$i ; make ) ; \ if test $$? != 0 ; then \ exit 1 ; \ fi \ done \ fi subdirinstall: makedirectories $(QUIET)if test "x$(SUBDIRS)" != "xnone" ; then \ for i in $(SUBDIRS) ; do \ (cd $$i ; make install DESTDIR=$(DESTDIR) ) ; \ if test $$? != 0 ; then \ exit 1 ; \ fi \ done \ fi subdirclean: $(QUIET)if test "x$(SUBDIRS)" != "xnone" ; then \ for i in $(SUBDIRS) ; do \ (cd $$i ; make clean ) ; \ done \ fi subdirdistclean: $(QUIET)if test "x$(SUBDIRS)" != "xnone" ; then \ for i in $(SUBDIRS) ; do \ (cd $$i ; make distclean ) ; \ done \ fi # # Perl system build rules # perlmake: subdirmake perlmakefiles $(QUIET)for i in $(PERLDIRS) ; do \ (cd $$i ; make ) ; \ if test $$? != 0 ; then \ exit 1 ; \ fi \ done perlmakefiles: $(QUIET)for i in $(PERLDIRS) ; do \ if test ! -f $$i/Makefile ; then \ (cd $$i ; perl Makefile.PL $(PERLARGS) --topdir $(BUILDDIR) --sysconfdir $(sysconfdir)); \ fi ; \ done perlinstall: makedirectories $(QUIET)for i in $(PERLDIRS) ; do \ (cd $$i ; make install ) ; \ if test $$? != 0 ; then \ exit 1 ; \ fi \ done perlclean: $(QUIET)for i in $(PERLDIRS) ; do \ (cd $$i ; make clean ; ) ; \ done # # Config system rules # configclean: rm -f config.cache config.status config.log \ Makefile stamp-h *.core .PHONY: all libs makeit install clean distclean nextstepinstructions makedirectories subdirmake subdirinstall subdirclean perlmake perlmakefiles perlinstall perlclean configclean dnssec-tools-2.0/config.guess0000775000237200023720000012206510236716567016463 0ustar hardakerhardaker#! /bin/sh # Attempt to guess a canonical system name. # Copyright (C) 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, # 2000, 2001, 2002, 2003 Free Software Foundation, Inc. timestamp='2003-06-17' # This file is free software; you can redistribute it and/or modify it # under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU # General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. # # As a special exception to the GNU General Public License, if you # distribute this file as part of a program that contains a # configuration script generated by Autoconf, you may include it under # the same distribution terms that you use for the rest of that program. # Originally written by Per Bothner . # Please send patches to . Submit a context # diff and a properly formatted ChangeLog entry. # # This script attempts to guess a canonical system name similar to # config.sub. If it succeeds, it prints the system name on stdout, and # exits with 0. Otherwise, it exits with 1. # # The plan is that this can be called by configure scripts if you # don't specify an explicit build system type. me=`echo "$0" | sed -e 's,.*/,,'` usage="\ Usage: $0 [OPTION] Output the configuration name of the system \`$me' is run on. Operation modes: -h, --help print this help, then exit -t, --time-stamp print date of last modification, then exit -v, --version print version number, then exit Report bugs and patches to ." version="\ GNU config.guess ($timestamp) Originally written by Per Bothner. Copyright (C) 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE." help=" Try \`$me --help' for more information." # Parse command line while test $# -gt 0 ; do case $1 in --time-stamp | --time* | -t ) echo "$timestamp" ; exit 0 ;; --version | -v ) echo "$version" ; exit 0 ;; --help | --h* | -h ) echo "$usage"; exit 0 ;; -- ) # Stop option processing shift; break ;; - ) # Use stdin as input. break ;; -* ) echo "$me: invalid option $1$help" >&2 exit 1 ;; * ) break ;; esac done if test $# != 0; then echo "$me: too many arguments$help" >&2 exit 1 fi trap 'exit 1' 1 2 15 # CC_FOR_BUILD -- compiler used by this script. Note that the use of a # compiler to aid in system detection is discouraged as it requires # temporary files to be created and, as you can see below, it is a # headache to deal with in a portable fashion. # Historically, `CC_FOR_BUILD' used to be named `HOST_CC'. We still # use `HOST_CC' if defined, but it is deprecated. # Portable tmp directory creation inspired by the Autoconf team. set_cc_for_build=' trap "exitcode=\$?; (rm -f \$tmpfiles 2>/dev/null; rmdir \$tmp 2>/dev/null) && exit \$exitcode" 0 ; trap "rm -f \$tmpfiles 2>/dev/null; rmdir \$tmp 2>/dev/null; exit 1" 1 2 13 15 ; : ${TMPDIR=/tmp} ; { tmp=`(umask 077 && mktemp -d -q "$TMPDIR/cgXXXXXX") 2>/dev/null` && test -n "$tmp" && test -d "$tmp" ; } || { test -n "$RANDOM" && tmp=$TMPDIR/cg$$-$RANDOM && (umask 077 && mkdir $tmp) ; } || { tmp=$TMPDIR/cg-$$ && (umask 077 && mkdir $tmp) && echo "Warning: creating insecure temp directory" >&2 ; } || { echo "$me: cannot create a temporary directory in $TMPDIR" >&2 ; exit 1 ; } ; dummy=$tmp/dummy ; tmpfiles="$dummy.c $dummy.o $dummy.rel $dummy" ; case $CC_FOR_BUILD,$HOST_CC,$CC in ,,) echo "int x;" > $dummy.c ; for c in cc gcc c89 c99 ; do if ($c -c -o $dummy.o $dummy.c) >/dev/null 2>&1 ; then CC_FOR_BUILD="$c"; break ; fi ; done ; if test x"$CC_FOR_BUILD" = x ; then CC_FOR_BUILD=no_compiler_found ; fi ;; ,,*) CC_FOR_BUILD=$CC ;; ,*,*) CC_FOR_BUILD=$HOST_CC ;; esac ;' # This is needed to find uname on a Pyramid OSx when run in the BSD universe. # (ghazi@noc.rutgers.edu 1994-08-24) if (test -f /.attbin/uname) >/dev/null 2>&1 ; then PATH=$PATH:/.attbin ; export PATH fi UNAME_MACHINE=`(uname -m) 2>/dev/null` || UNAME_MACHINE=unknown UNAME_RELEASE=`(uname -r) 2>/dev/null` || UNAME_RELEASE=unknown UNAME_SYSTEM=`(uname -s) 2>/dev/null` || UNAME_SYSTEM=unknown UNAME_VERSION=`(uname -v) 2>/dev/null` || UNAME_VERSION=unknown ## for Red Hat Linux if test -f /etc/redhat-release ; then VENDOR=redhat ; else VENDOR= ; fi # Note: order is significant - the case branches are not exclusive. case "${UNAME_MACHINE}:${UNAME_SYSTEM}:${UNAME_RELEASE}:${UNAME_VERSION}" in *:NetBSD:*:*) # NetBSD (nbsd) targets should (where applicable) match one or # more of the tupples: *-*-netbsdelf*, *-*-netbsdaout*, # *-*-netbsdecoff* and *-*-netbsd*. For targets that recently # switched to ELF, *-*-netbsd* would select the old # object file format. This provides both forward # compatibility and a consistent mechanism for selecting the # object file format. # # Note: NetBSD doesn't particularly care about the vendor # portion of the name. We always set it to "unknown". sysctl="sysctl -n hw.machine_arch" UNAME_MACHINE_ARCH=`(/sbin/$sysctl 2>/dev/null || \ /usr/sbin/$sysctl 2>/dev/null || echo unknown)` case "${UNAME_MACHINE_ARCH}" in armeb) machine=armeb-unknown ;; arm*) machine=arm-unknown ;; sh3el) machine=shl-unknown ;; sh3eb) machine=sh-unknown ;; *) machine=${UNAME_MACHINE_ARCH}-unknown ;; esac # The Operating System including object format, if it has switched # to ELF recently, or will in the future. case "${UNAME_MACHINE_ARCH}" in arm*|i386|m68k|ns32k|sh3*|sparc|vax) eval $set_cc_for_build if echo __ELF__ | $CC_FOR_BUILD -E - 2>/dev/null \ | grep __ELF__ >/dev/null then # Once all utilities can be ECOFF (netbsdecoff) or a.out (netbsdaout). # Return netbsd for either. FIX? os=netbsd else os=netbsdelf fi ;; *) os=netbsd ;; esac # The OS release # Debian GNU/NetBSD machines have a different userland, and # thus, need a distinct triplet. However, they do not need # kernel version information, so it can be replaced with a # suitable tag, in the style of linux-gnu. case "${UNAME_VERSION}" in Debian*) release='-gnu' ;; *) release=`echo ${UNAME_RELEASE}|sed -e 's/[-_].*/\./'` ;; esac # Since CPU_TYPE-MANUFACTURER-KERNEL-OPERATING_SYSTEM: # contains redundant information, the shorter form: # CPU_TYPE-MANUFACTURER-OPERATING_SYSTEM is used. echo "${machine}-${os}${release}" exit 0 ;; amiga:OpenBSD:*:*) echo m68k-unknown-openbsd${UNAME_RELEASE} exit 0 ;; arc:OpenBSD:*:*) echo mipsel-unknown-openbsd${UNAME_RELEASE} exit 0 ;; hp300:OpenBSD:*:*) echo m68k-unknown-openbsd${UNAME_RELEASE} exit 0 ;; mac68k:OpenBSD:*:*) echo m68k-unknown-openbsd${UNAME_RELEASE} exit 0 ;; macppc:OpenBSD:*:*) echo powerpc-unknown-openbsd${UNAME_RELEASE} exit 0 ;; mvme68k:OpenBSD:*:*) echo m68k-unknown-openbsd${UNAME_RELEASE} exit 0 ;; mvme88k:OpenBSD:*:*) echo m88k-unknown-openbsd${UNAME_RELEASE} exit 0 ;; mvmeppc:OpenBSD:*:*) echo powerpc-unknown-openbsd${UNAME_RELEASE} exit 0 ;; pmax:OpenBSD:*:*) echo mipsel-unknown-openbsd${UNAME_RELEASE} exit 0 ;; sgi:OpenBSD:*:*) echo mipseb-unknown-openbsd${UNAME_RELEASE} exit 0 ;; sun3:OpenBSD:*:*) echo m68k-unknown-openbsd${UNAME_RELEASE} exit 0 ;; wgrisc:OpenBSD:*:*) echo mipsel-unknown-openbsd${UNAME_RELEASE} exit 0 ;; *:OpenBSD:*:*) echo ${UNAME_MACHINE}-unknown-openbsd${UNAME_RELEASE} exit 0 ;; alpha:OSF1:*:*) if test $UNAME_RELEASE = "V4.0"; then UNAME_RELEASE=`/usr/sbin/sizer -v | awk '{print $3}'` fi # According to Compaq, /usr/sbin/psrinfo has been available on # OSF/1 and Tru64 systems produced since 1995. I hope that # covers most systems running today. This code pipes the CPU # types through head -n 1, so we only detect the type of CPU 0. ALPHA_CPU_TYPE=`/usr/sbin/psrinfo -v | sed -n -e 's/^ The alpha \(.*\) processor.*$/\1/p' | head -n 1` case "$ALPHA_CPU_TYPE" in "EV4 (21064)") UNAME_MACHINE="alpha" ;; "EV4.5 (21064)") UNAME_MACHINE="alpha" ;; "LCA4 (21066/21068)") UNAME_MACHINE="alpha" ;; "EV5 (21164)") UNAME_MACHINE="alphaev5" ;; "EV5.6 (21164A)") UNAME_MACHINE="alphaev56" ;; "EV5.6 (21164PC)") UNAME_MACHINE="alphapca56" ;; "EV5.7 (21164PC)") UNAME_MACHINE="alphapca57" ;; "EV6 (21264)") UNAME_MACHINE="alphaev6" ;; "EV6.7 (21264A)") UNAME_MACHINE="alphaev67" ;; "EV6.8CB (21264C)") UNAME_MACHINE="alphaev68" ;; "EV6.8AL (21264B)") UNAME_MACHINE="alphaev68" ;; "EV6.8CX (21264D)") UNAME_MACHINE="alphaev68" ;; "EV6.9A (21264/EV69A)") UNAME_MACHINE="alphaev69" ;; "EV7 (21364)") UNAME_MACHINE="alphaev7" ;; "EV7.9 (21364A)") UNAME_MACHINE="alphaev79" ;; esac # A Vn.n version is a released version. # A Tn.n version is a released field test version. # A Xn.n version is an unreleased experimental baselevel. # 1.2 uses "1.2" for uname -r. echo ${UNAME_MACHINE}-dec-osf`echo ${UNAME_RELEASE} | sed -e 's/^[VTX]//' | tr 'ABCDEFGHIJKLMNOPQRSTUVWXYZ' 'abcdefghijklmnopqrstuvwxyz'` exit 0 ;; Alpha*:OpenVMS:*:*) echo alpha-hp-vms exit 0 ;; Alpha\ *:Windows_NT*:*) # How do we know it's Interix rather than the generic POSIX subsystem? # Should we change UNAME_MACHINE based on the output of uname instead # of the specific Alpha model? echo alpha-pc-interix exit 0 ;; 21064:Windows_NT:50:3) echo alpha-dec-winnt3.5 exit 0 ;; Amiga*:UNIX_System_V:4.0:*) echo m68k-unknown-sysv4 exit 0;; *:[Aa]miga[Oo][Ss]:*:*) echo ${UNAME_MACHINE}-unknown-amigaos exit 0 ;; *:[Mm]orph[Oo][Ss]:*:*) echo ${UNAME_MACHINE}-unknown-morphos exit 0 ;; *:OS/390:*:*) echo i370-ibm-openedition exit 0 ;; arm:RISC*:1.[012]*:*|arm:riscix:1.[012]*:*) echo arm-acorn-riscix${UNAME_RELEASE} exit 0;; SR2?01:HI-UX/MPP:*:* | SR8000:HI-UX/MPP:*:*) echo hppa1.1-hitachi-hiuxmpp exit 0;; Pyramid*:OSx*:*:* | MIS*:OSx*:*:* | MIS*:SMP_DC-OSx*:*:*) # akee@wpdis03.wpafb.af.mil (Earle F. Ake) contributed MIS and NILE. if test "`(/bin/universe) 2>/dev/null`" = att ; then echo pyramid-pyramid-sysv3 else echo pyramid-pyramid-bsd fi exit 0 ;; NILE*:*:*:dcosx) echo pyramid-pyramid-svr4 exit 0 ;; DRS?6000:unix:4.0:6*) echo sparc-icl-nx6 exit 0 ;; DRS?6000:UNIX_SV:4.2*:7*) case `/usr/bin/uname -p` in sparc) echo sparc-icl-nx7 && exit 0 ;; esac ;; sun4H:SunOS:5.*:*) echo sparc-hal-solaris2`echo ${UNAME_RELEASE}|sed -e 's/[^.]*//'` exit 0 ;; sun4*:SunOS:5.*:* | tadpole*:SunOS:5.*:*) echo sparc-sun-solaris2`echo ${UNAME_RELEASE}|sed -e 's/[^.]*//'` exit 0 ;; i86pc:SunOS:5.*:*) echo i386-pc-solaris2`echo ${UNAME_RELEASE}|sed -e 's/[^.]*//'` exit 0 ;; sun4*:SunOS:6*:*) # According to config.sub, this is the proper way to canonicalize # SunOS6. Hard to guess exactly what SunOS6 will be like, but # it's likely to be more like Solaris than SunOS4. echo sparc-sun-solaris3`echo ${UNAME_RELEASE}|sed -e 's/[^.]*//'` exit 0 ;; sun4*:SunOS:*:*) case "`/usr/bin/arch -k`" in Series*|S4*) UNAME_RELEASE=`uname -v` ;; esac # Japanese Language versions have a version number like `4.1.3-JL'. echo sparc-sun-sunos`echo ${UNAME_RELEASE}|sed -e 's/-/_/'` exit 0 ;; sun3*:SunOS:*:*) echo m68k-sun-sunos${UNAME_RELEASE} exit 0 ;; sun*:*:4.2BSD:*) UNAME_RELEASE=`(sed 1q /etc/motd | awk '{print substr($5,1,3)}') 2>/dev/null` test "x${UNAME_RELEASE}" = "x" && UNAME_RELEASE=3 case "`/bin/arch`" in sun3) echo m68k-sun-sunos${UNAME_RELEASE} ;; sun4) echo sparc-sun-sunos${UNAME_RELEASE} ;; esac exit 0 ;; aushp:SunOS:*:*) echo sparc-auspex-sunos${UNAME_RELEASE} exit 0 ;; # The situation for MiNT is a little confusing. The machine name # can be virtually everything (everything which is not # "atarist" or "atariste" at least should have a processor # > m68000). The system name ranges from "MiNT" over "FreeMiNT" # to the lowercase version "mint" (or "freemint"). Finally # the system name "TOS" denotes a system which is actually not # MiNT. But MiNT is downward compatible to TOS, so this should # be no problem. atarist[e]:*MiNT:*:* | atarist[e]:*mint:*:* | atarist[e]:*TOS:*:*) echo m68k-atari-mint${UNAME_RELEASE} exit 0 ;; atari*:*MiNT:*:* | atari*:*mint:*:* | atarist[e]:*TOS:*:*) echo m68k-atari-mint${UNAME_RELEASE} exit 0 ;; *falcon*:*MiNT:*:* | *falcon*:*mint:*:* | *falcon*:*TOS:*:*) echo m68k-atari-mint${UNAME_RELEASE} exit 0 ;; milan*:*MiNT:*:* | milan*:*mint:*:* | *milan*:*TOS:*:*) echo m68k-milan-mint${UNAME_RELEASE} exit 0 ;; hades*:*MiNT:*:* | hades*:*mint:*:* | *hades*:*TOS:*:*) echo m68k-hades-mint${UNAME_RELEASE} exit 0 ;; *:*MiNT:*:* | *:*mint:*:* | *:*TOS:*:*) echo m68k-unknown-mint${UNAME_RELEASE} exit 0 ;; powerpc:machten:*:*) echo powerpc-apple-machten${UNAME_RELEASE} exit 0 ;; RISC*:Mach:*:*) echo mips-dec-mach_bsd4.3 exit 0 ;; RISC*:ULTRIX:*:*) echo mips-dec-ultrix${UNAME_RELEASE} exit 0 ;; VAX*:ULTRIX*:*:*) echo vax-dec-ultrix${UNAME_RELEASE} exit 0 ;; 2020:CLIX:*:* | 2430:CLIX:*:*) echo clipper-intergraph-clix${UNAME_RELEASE} exit 0 ;; mips:*:*:UMIPS | mips:*:*:RISCos) eval $set_cc_for_build sed 's/^ //' << EOF >$dummy.c #ifdef __cplusplus #include /* for printf() prototype */ int main (int argc, char *argv[]) { #else int main (argc, argv) int argc; char *argv[]; { #endif #if defined (host_mips) && defined (MIPSEB) #if defined (SYSTYPE_SYSV) printf ("mips-mips-riscos%ssysv\n", argv[1]); exit (0); #endif #if defined (SYSTYPE_SVR4) printf ("mips-mips-riscos%ssvr4\n", argv[1]); exit (0); #endif #if defined (SYSTYPE_BSD43) || defined(SYSTYPE_BSD) printf ("mips-mips-riscos%sbsd\n", argv[1]); exit (0); #endif #endif exit (-1); } EOF $CC_FOR_BUILD -o $dummy $dummy.c \ && $dummy `echo "${UNAME_RELEASE}" | sed -n 's/\([0-9]*\).*/\1/p'` \ && exit 0 echo mips-mips-riscos${UNAME_RELEASE} exit 0 ;; Motorola:PowerMAX_OS:*:*) echo powerpc-motorola-powermax exit 0 ;; Motorola:*:4.3:PL8-*) echo powerpc-harris-powermax exit 0 ;; Night_Hawk:*:*:PowerMAX_OS | Synergy:PowerMAX_OS:*:*) echo powerpc-harris-powermax exit 0 ;; Night_Hawk:Power_UNIX:*:*) echo powerpc-harris-powerunix exit 0 ;; m88k:CX/UX:7*:*) echo m88k-harris-cxux7 exit 0 ;; m88k:*:4*:R4*) echo m88k-motorola-sysv4 exit 0 ;; m88k:*:3*:R3*) echo m88k-motorola-sysv3 exit 0 ;; AViiON:dgux:*:*) # DG/UX returns AViiON for all architectures UNAME_PROCESSOR=`/usr/bin/uname -p` if [ $UNAME_PROCESSOR = mc88100 ] || [ $UNAME_PROCESSOR = mc88110 ] then if [ ${TARGET_BINARY_INTERFACE}x = m88kdguxelfx ] || \ [ ${TARGET_BINARY_INTERFACE}x = x ] then echo m88k-dg-dgux${UNAME_RELEASE} else echo m88k-dg-dguxbcs${UNAME_RELEASE} fi else echo i586-dg-dgux${UNAME_RELEASE} fi exit 0 ;; M88*:DolphinOS:*:*) # DolphinOS (SVR3) echo m88k-dolphin-sysv3 exit 0 ;; M88*:*:R3*:*) # Delta 88k system running SVR3 echo m88k-motorola-sysv3 exit 0 ;; XD88*:*:*:*) # Tektronix XD88 system running UTekV (SVR3) echo m88k-tektronix-sysv3 exit 0 ;; Tek43[0-9][0-9]:UTek:*:*) # Tektronix 4300 system running UTek (BSD) echo m68k-tektronix-bsd exit 0 ;; *:IRIX*:*:*) echo mips-sgi-irix`echo ${UNAME_RELEASE}|sed -e 's/-/_/g'` exit 0 ;; ????????:AIX?:[12].1:2) # AIX 2.2.1 or AIX 2.1.1 is RT/PC AIX. echo romp-ibm-aix # uname -m gives an 8 hex-code CPU id exit 0 ;; # Note that: echo "'`uname -s`'" gives 'AIX ' i*86:AIX:*:*) echo i386-ibm-aix exit 0 ;; ia64:AIX:*:*) if [ -x /usr/bin/oslevel ] ; then IBM_REV=`/usr/bin/oslevel` else IBM_REV=${UNAME_VERSION}.${UNAME_RELEASE} fi echo ${UNAME_MACHINE}-ibm-aix${IBM_REV} exit 0 ;; *:AIX:2:3) if grep bos325 /usr/include/stdio.h >/dev/null 2>&1; then eval $set_cc_for_build sed 's/^ //' << EOF >$dummy.c #include main() { if (!__power_pc()) exit(1); puts("powerpc-ibm-aix3.2.5"); exit(0); } EOF $CC_FOR_BUILD -o $dummy $dummy.c && $dummy && exit 0 echo rs6000-ibm-aix3.2.5 elif grep bos324 /usr/include/stdio.h >/dev/null 2>&1; then echo rs6000-ibm-aix3.2.4 else echo rs6000-ibm-aix3.2 fi exit 0 ;; *:AIX:*:[45]) IBM_CPU_ID=`/usr/sbin/lsdev -C -c processor -S available | sed 1q | awk '{ print $1 }'` if /usr/sbin/lsattr -El ${IBM_CPU_ID} | grep ' POWER' >/dev/null 2>&1; then IBM_ARCH=rs6000 else IBM_ARCH=powerpc fi if [ -x /usr/bin/oslevel ] ; then IBM_REV=`/usr/bin/oslevel` else IBM_REV=${UNAME_VERSION}.${UNAME_RELEASE} fi echo ${IBM_ARCH}-ibm-aix${IBM_REV} exit 0 ;; *:AIX:*:*) echo rs6000-ibm-aix exit 0 ;; ibmrt:4.4BSD:*|romp-ibm:BSD:*) echo romp-ibm-bsd4.4 exit 0 ;; ibmrt:*BSD:*|romp-ibm:BSD:*) # covers RT/PC BSD and echo romp-ibm-bsd${UNAME_RELEASE} # 4.3 with uname added to exit 0 ;; # report: romp-ibm BSD 4.3 *:BOSX:*:*) echo rs6000-bull-bosx exit 0 ;; DPX/2?00:B.O.S.:*:*) echo m68k-bull-sysv3 exit 0 ;; 9000/[34]??:4.3bsd:1.*:*) echo m68k-hp-bsd exit 0 ;; hp300:4.4BSD:*:* | 9000/[34]??:4.3bsd:2.*:*) echo m68k-hp-bsd4.4 exit 0 ;; 9000/[34678]??:HP-UX:*:*) HPUX_REV=`echo ${UNAME_RELEASE}|sed -e 's/[^.]*.[0B]*//'` case "${UNAME_MACHINE}" in 9000/31? ) HP_ARCH=m68000 ;; 9000/[34]?? ) HP_ARCH=m68k ;; 9000/[678][0-9][0-9]) if [ -x /usr/bin/getconf ]; then sc_cpu_version=`/usr/bin/getconf SC_CPU_VERSION 2>/dev/null` sc_kernel_bits=`/usr/bin/getconf SC_KERNEL_BITS 2>/dev/null` case "${sc_cpu_version}" in 523) HP_ARCH="hppa1.0" ;; # CPU_PA_RISC1_0 528) HP_ARCH="hppa1.1" ;; # CPU_PA_RISC1_1 532) # CPU_PA_RISC2_0 case "${sc_kernel_bits}" in 32) HP_ARCH="hppa2.0n" ;; 64) HP_ARCH="hppa2.0w" ;; '') HP_ARCH="hppa2.0" ;; # HP-UX 10.20 esac ;; esac fi if [ "${HP_ARCH}" = "" ]; then eval $set_cc_for_build sed 's/^ //' << EOF >$dummy.c #define _HPUX_SOURCE #include #include int main () { #if defined(_SC_KERNEL_BITS) long bits = sysconf(_SC_KERNEL_BITS); #endif long cpu = sysconf (_SC_CPU_VERSION); switch (cpu) { case CPU_PA_RISC1_0: puts ("hppa1.0"); break; case CPU_PA_RISC1_1: puts ("hppa1.1"); break; case CPU_PA_RISC2_0: #if defined(_SC_KERNEL_BITS) switch (bits) { case 64: puts ("hppa2.0w"); break; case 32: puts ("hppa2.0n"); break; default: puts ("hppa2.0"); break; } break; #else /* !defined(_SC_KERNEL_BITS) */ puts ("hppa2.0"); break; #endif default: puts ("hppa1.0"); break; } exit (0); } EOF (CCOPTS= $CC_FOR_BUILD -o $dummy $dummy.c 2>/dev/null) && HP_ARCH=`$dummy` test -z "$HP_ARCH" && HP_ARCH=hppa fi ;; esac if [ ${HP_ARCH} = "hppa2.0w" ] then # avoid double evaluation of $set_cc_for_build test -n "$CC_FOR_BUILD" || eval $set_cc_for_build if echo __LP64__ | (CCOPTS= $CC_FOR_BUILD -E -) | grep __LP64__ >/dev/null then HP_ARCH="hppa2.0w" else HP_ARCH="hppa64" fi fi echo ${HP_ARCH}-hp-hpux${HPUX_REV} exit 0 ;; ia64:HP-UX:*:*) HPUX_REV=`echo ${UNAME_RELEASE}|sed -e 's/[^.]*.[0B]*//'` echo ia64-hp-hpux${HPUX_REV} exit 0 ;; 3050*:HI-UX:*:*) eval $set_cc_for_build sed 's/^ //' << EOF >$dummy.c #include int main () { long cpu = sysconf (_SC_CPU_VERSION); /* The order matters, because CPU_IS_HP_MC68K erroneously returns true for CPU_PA_RISC1_0. CPU_IS_PA_RISC returns correct results, however. */ if (CPU_IS_PA_RISC (cpu)) { switch (cpu) { case CPU_PA_RISC1_0: puts ("hppa1.0-hitachi-hiuxwe2"); break; case CPU_PA_RISC1_1: puts ("hppa1.1-hitachi-hiuxwe2"); break; case CPU_PA_RISC2_0: puts ("hppa2.0-hitachi-hiuxwe2"); break; default: puts ("hppa-hitachi-hiuxwe2"); break; } } else if (CPU_IS_HP_MC68K (cpu)) puts ("m68k-hitachi-hiuxwe2"); else puts ("unknown-hitachi-hiuxwe2"); exit (0); } EOF $CC_FOR_BUILD -o $dummy $dummy.c && $dummy && exit 0 echo unknown-hitachi-hiuxwe2 exit 0 ;; 9000/7??:4.3bsd:*:* | 9000/8?[79]:4.3bsd:*:* ) echo hppa1.1-hp-bsd exit 0 ;; 9000/8??:4.3bsd:*:*) echo hppa1.0-hp-bsd exit 0 ;; *9??*:MPE/iX:*:* | *3000*:MPE/iX:*:*) echo hppa1.0-hp-mpeix exit 0 ;; hp7??:OSF1:*:* | hp8?[79]:OSF1:*:* ) echo hppa1.1-hp-osf exit 0 ;; hp8??:OSF1:*:*) echo hppa1.0-hp-osf exit 0 ;; i*86:OSF1:*:*) if [ -x /usr/sbin/sysversion ] ; then echo ${UNAME_MACHINE}-unknown-osf1mk else echo ${UNAME_MACHINE}-unknown-osf1 fi exit 0 ;; parisc*:Lites*:*:*) echo hppa1.1-hp-lites exit 0 ;; C1*:ConvexOS:*:* | convex:ConvexOS:C1*:*) echo c1-convex-bsd exit 0 ;; C2*:ConvexOS:*:* | convex:ConvexOS:C2*:*) if getsysinfo -f scalar_acc then echo c32-convex-bsd else echo c2-convex-bsd fi exit 0 ;; C34*:ConvexOS:*:* | convex:ConvexOS:C34*:*) echo c34-convex-bsd exit 0 ;; C38*:ConvexOS:*:* | convex:ConvexOS:C38*:*) echo c38-convex-bsd exit 0 ;; C4*:ConvexOS:*:* | convex:ConvexOS:C4*:*) echo c4-convex-bsd exit 0 ;; CRAY*Y-MP:*:*:*) echo ymp-cray-unicos${UNAME_RELEASE} | sed -e 's/\.[^.]*$/.X/' exit 0 ;; CRAY*[A-Z]90:*:*:*) echo ${UNAME_MACHINE}-cray-unicos${UNAME_RELEASE} \ | sed -e 's/CRAY.*\([A-Z]90\)/\1/' \ -e y/ABCDEFGHIJKLMNOPQRSTUVWXYZ/abcdefghijklmnopqrstuvwxyz/ \ -e 's/\.[^.]*$/.X/' exit 0 ;; CRAY*TS:*:*:*) echo t90-cray-unicos${UNAME_RELEASE} | sed -e 's/\.[^.]*$/.X/' exit 0 ;; CRAY*T3E:*:*:*) echo alphaev5-cray-unicosmk${UNAME_RELEASE} | sed -e 's/\.[^.]*$/.X/' exit 0 ;; CRAY*SV1:*:*:*) echo sv1-cray-unicos${UNAME_RELEASE} | sed -e 's/\.[^.]*$/.X/' exit 0 ;; *:UNICOS/mp:*:*) echo nv1-cray-unicosmp${UNAME_RELEASE} | sed -e 's/\.[^.]*$/.X/' exit 0 ;; F30[01]:UNIX_System_V:*:* | F700:UNIX_System_V:*:*) FUJITSU_PROC=`uname -m | tr 'ABCDEFGHIJKLMNOPQRSTUVWXYZ' 'abcdefghijklmnopqrstuvwxyz'` FUJITSU_SYS=`uname -p | tr 'ABCDEFGHIJKLMNOPQRSTUVWXYZ' 'abcdefghijklmnopqrstuvwxyz' | sed -e 's/\///'` FUJITSU_REL=`echo ${UNAME_RELEASE} | sed -e 's/ /_/'` echo "${FUJITSU_PROC}-fujitsu-${FUJITSU_SYS}${FUJITSU_REL}" exit 0 ;; i*86:BSD/386:*:* | i*86:BSD/OS:*:* | *:Ascend\ Embedded/OS:*:*) echo ${UNAME_MACHINE}-pc-bsdi${UNAME_RELEASE} exit 0 ;; sparc*:BSD/OS:*:*) echo sparc-unknown-bsdi${UNAME_RELEASE} exit 0 ;; *:BSD/OS:*:*) echo ${UNAME_MACHINE}-unknown-bsdi${UNAME_RELEASE} exit 0 ;; *:FreeBSD:*:*|*:GNU/FreeBSD:*:*) # Determine whether the default compiler uses glibc. eval $set_cc_for_build sed 's/^ //' << EOF >$dummy.c #include #if __GLIBC__ >= 2 LIBC=gnu #else LIBC= #endif EOF eval `$CC_FOR_BUILD -E $dummy.c 2>/dev/null | grep ^LIBC=` echo ${UNAME_MACHINE}-unknown-freebsd`echo ${UNAME_RELEASE}|sed -e 's/[-(].*//'`${LIBC:+-$LIBC} exit 0 ;; i*:CYGWIN*:*) echo ${UNAME_MACHINE}-pc-cygwin exit 0 ;; i*:MINGW*:*) echo ${UNAME_MACHINE}-pc-mingw32 exit 0 ;; i*:PW*:*) echo ${UNAME_MACHINE}-pc-pw32 exit 0 ;; x86:Interix*:[34]*) echo i586-pc-interix${UNAME_RELEASE}|sed -e 's/\..*//' exit 0 ;; [345]86:Windows_95:* | [345]86:Windows_98:* | [345]86:Windows_NT:*) echo i${UNAME_MACHINE}-pc-mks exit 0 ;; i*:Windows_NT*:* | Pentium*:Windows_NT*:*) # How do we know it's Interix rather than the generic POSIX subsystem? # It also conflicts with pre-2.0 versions of AT&T UWIN. Should we # UNAME_MACHINE based on the output of uname instead of i386? echo i586-pc-interix exit 0 ;; i*:UWIN*:*) echo ${UNAME_MACHINE}-pc-uwin exit 0 ;; p*:CYGWIN*:*) echo powerpcle-unknown-cygwin exit 0 ;; prep*:SunOS:5.*:*) echo powerpcle-unknown-solaris2`echo ${UNAME_RELEASE}|sed -e 's/[^.]*//'` exit 0 ;; *:GNU:*:*) echo `echo ${UNAME_MACHINE}|sed -e 's,[-/].*$,,'`-unknown-gnu`echo ${UNAME_RELEASE}|sed -e 's,/.*$,,'` exit 0 ;; i*86:Minix:*:*) echo ${UNAME_MACHINE}-pc-minix exit 0 ;; arm*:Linux:*:*) echo ${UNAME_MACHINE}-unknown-linux-gnu exit 0 ;; cris:Linux:*:*) echo cris-axis-linux-gnu exit 0 ;; ia64:Linux:*:*) echo ${UNAME_MACHINE}-${VENDOR:-unknown}-linux-gnu exit 0 ;; m68*:Linux:*:*) echo ${UNAME_MACHINE}-unknown-linux-gnu exit 0 ;; mips:Linux:*:*) eval $set_cc_for_build sed 's/^ //' << EOF >$dummy.c #undef CPU #undef mips #undef mipsel #if defined(__MIPSEL__) || defined(__MIPSEL) || defined(_MIPSEL) || defined(MIPSEL) CPU=mipsel #else #if defined(__MIPSEB__) || defined(__MIPSEB) || defined(_MIPSEB) || defined(MIPSEB) CPU=mips #else CPU= #endif #endif EOF eval `$CC_FOR_BUILD -E $dummy.c 2>/dev/null | grep ^CPU=` test x"${CPU}" != x && echo "${CPU}-unknown-linux-gnu" && exit 0 ;; mips64:Linux:*:*) eval $set_cc_for_build sed 's/^ //' << EOF >$dummy.c #undef CPU #undef mips64 #undef mips64el #if defined(__MIPSEL__) || defined(__MIPSEL) || defined(_MIPSEL) || defined(MIPSEL) CPU=mips64el #else #if defined(__MIPSEB__) || defined(__MIPSEB) || defined(_MIPSEB) || defined(MIPSEB) CPU=mips64 #else CPU= #endif #endif EOF eval `$CC_FOR_BUILD -E $dummy.c 2>/dev/null | grep ^CPU=` test x"${CPU}" != x && echo "${CPU}-unknown-linux-gnu" && exit 0 ;; ppc:Linux:*:*) echo powerpc-${VENDOR:-unknown}-linux-gnu exit 0 ;; ppc64:Linux:*:*) echo powerpc64-${VENDOR:-unknown}-linux-gnu exit 0 ;; alpha:Linux:*:*) case `sed -n '/^cpu model/s/^.*: \(.*\)/\1/p' < /proc/cpuinfo` in EV5) UNAME_MACHINE=alphaev5 ;; EV56) UNAME_MACHINE=alphaev56 ;; PCA56) UNAME_MACHINE=alphapca56 ;; PCA57) UNAME_MACHINE=alphapca56 ;; EV6) UNAME_MACHINE=alphaev6 ;; EV67) UNAME_MACHINE=alphaev67 ;; EV68*) UNAME_MACHINE=alphaev68 ;; esac objdump --private-headers /bin/sh | grep ld.so.1 >/dev/null if test "$?" = 0 ; then LIBC="libc1" ; else LIBC="" ; fi echo ${UNAME_MACHINE}-unknown-linux-gnu${LIBC} exit 0 ;; parisc:Linux:*:* | hppa:Linux:*:*) # Look for CPU level case `grep '^cpu[^a-z]*:' /proc/cpuinfo 2>/dev/null | cut -d' ' -f2` in PA7*) echo hppa1.1-unknown-linux-gnu ;; PA8*) echo hppa2.0-unknown-linux-gnu ;; *) echo hppa-unknown-linux-gnu ;; esac exit 0 ;; parisc64:Linux:*:* | hppa64:Linux:*:*) echo hppa64-unknown-linux-gnu exit 0 ;; s390:Linux:*:* | s390x:Linux:*:*) echo ${UNAME_MACHINE}-${VENDOR:-ibm}-linux-gnu exit 0 ;; sh64*:Linux:*:*) echo ${UNAME_MACHINE}-unknown-linux-gnu exit 0 ;; sh*:Linux:*:*) echo ${UNAME_MACHINE}-unknown-linux-gnu exit 0 ;; sparc:Linux:*:* | sparc64:Linux:*:*) echo ${UNAME_MACHINE}-unknown-linux-gnu exit 0 ;; x86_64:Linux:*:*) echo x86_64-${VENDOR:-unknown}-linux-gnu exit 0 ;; i*86:Linux:*:*) # The BFD linker knows what the default object file format is, so # first see if it will tell us. cd to the root directory to prevent # problems with other programs or directories called `ld' in the path. # Set LC_ALL=C to ensure ld outputs messages in English. ld_supported_targets=`cd /; LC_ALL=C ld --help 2>&1 \ | sed -ne '/supported targets:/!d s/[ ][ ]*/ /g s/.*supported targets: *// s/ .*// p'` case "$ld_supported_targets" in elf32-i386) TENTATIVE="${UNAME_MACHINE}-pc-linux-gnu" ;; a.out-i386-linux) echo "${UNAME_MACHINE}-pc-linux-gnuaout" exit 0 ;; coff-i386) echo "${UNAME_MACHINE}-pc-linux-gnucoff" exit 0 ;; "") # Either a pre-BFD a.out linker (linux-gnuoldld) or # one that does not give us useful --help. echo "${UNAME_MACHINE}-pc-linux-gnuoldld" exit 0 ;; esac # Determine whether the default compiler is a.out or elf eval $set_cc_for_build sed 's/^ //' << EOF >$dummy.c #include #ifdef __ELF__ # ifdef __GLIBC__ # if __GLIBC__ >= 2 LIBC=gnu # else LIBC=gnulibc1 # endif # else LIBC=gnulibc1 # endif #else #ifdef __INTEL_COMPILER LIBC=gnu #else LIBC=gnuaout #endif #endif EOF eval `$CC_FOR_BUILD -E $dummy.c 2>/dev/null | grep ^LIBC=` test x"${LIBC}" != x && echo "${UNAME_MACHINE}-${VENDOR:-pc}-linux-${LIBC}" && exit 0 test x"${TENTATIVE}" != x && echo "${TENTATIVE}" && exit 0 ;; i*86:DYNIX/ptx:4*:*) # ptx 4.0 does uname -s correctly, with DYNIX/ptx in there. # earlier versions are messed up and put the nodename in both # sysname and nodename. echo i386-sequent-sysv4 exit 0 ;; i*86:UNIX_SV:4.2MP:2.*) # Unixware is an offshoot of SVR4, but it has its own version # number series starting with 2... # I am not positive that other SVR4 systems won't match this, # I just have to hope. -- rms. # Use sysv4.2uw... so that sysv4* matches it. echo ${UNAME_MACHINE}-pc-sysv4.2uw${UNAME_VERSION} exit 0 ;; i*86:OS/2:*:*) # If we were able to find `uname', then EMX Unix compatibility # is probably installed. echo ${UNAME_MACHINE}-pc-os2-emx exit 0 ;; i*86:XTS-300:*:STOP) echo ${UNAME_MACHINE}-unknown-stop exit 0 ;; i*86:atheos:*:*) echo ${UNAME_MACHINE}-unknown-atheos exit 0 ;; i*86:LynxOS:2.*:* | i*86:LynxOS:3.[01]*:* | i*86:LynxOS:4.0*:*) echo i386-unknown-lynxos${UNAME_RELEASE} exit 0 ;; i*86:*DOS:*:*) echo ${UNAME_MACHINE}-pc-msdosdjgpp exit 0 ;; i*86:*:4.*:* | i*86:SYSTEM_V:4.*:*) UNAME_REL=`echo ${UNAME_RELEASE} | sed 's/\/MP$//'` if grep Novell /usr/include/link.h >/dev/null 2>/dev/null; then echo ${UNAME_MACHINE}-univel-sysv${UNAME_REL} else echo ${UNAME_MACHINE}-pc-sysv${UNAME_REL} fi exit 0 ;; i*86:*:5:[78]*) case `/bin/uname -X | grep "^Machine"` in *486*) UNAME_MACHINE=i486 ;; *Pentium) UNAME_MACHINE=i586 ;; *Pent*|*Celeron) UNAME_MACHINE=i686 ;; esac echo ${UNAME_MACHINE}-unknown-sysv${UNAME_RELEASE}${UNAME_SYSTEM}${UNAME_VERSION} exit 0 ;; i*86:*:3.2:*) if test -f /usr/options/cb.name; then UNAME_REL=`sed -n 's/.*Version //p' /dev/null >/dev/null ; then UNAME_REL=`(/bin/uname -X|grep Release|sed -e 's/.*= //')` (/bin/uname -X|grep i80486 >/dev/null) && UNAME_MACHINE=i486 (/bin/uname -X|grep '^Machine.*Pentium' >/dev/null) \ && UNAME_MACHINE=i586 (/bin/uname -X|grep '^Machine.*Pent *II' >/dev/null) \ && UNAME_MACHINE=i686 (/bin/uname -X|grep '^Machine.*Pentium Pro' >/dev/null) \ && UNAME_MACHINE=i686 echo ${UNAME_MACHINE}-pc-sco$UNAME_REL else echo ${UNAME_MACHINE}-pc-sysv32 fi exit 0 ;; pc:*:*:*) # Left here for compatibility: # uname -m prints for DJGPP always 'pc', but it prints nothing about # the processor, so we play safe by assuming i386. echo i386-pc-msdosdjgpp exit 0 ;; Intel:Mach:3*:*) echo i386-pc-mach3 exit 0 ;; paragon:*:*:*) echo i860-intel-osf1 exit 0 ;; i860:*:4.*:*) # i860-SVR4 if grep Stardent /usr/include/sys/uadmin.h >/dev/null 2>&1 ; then echo i860-stardent-sysv${UNAME_RELEASE} # Stardent Vistra i860-SVR4 else # Add other i860-SVR4 vendors below as they are discovered. echo i860-unknown-sysv${UNAME_RELEASE} # Unknown i860-SVR4 fi exit 0 ;; mini*:CTIX:SYS*5:*) # "miniframe" echo m68010-convergent-sysv exit 0 ;; mc68k:UNIX:SYSTEM5:3.51m) echo m68k-convergent-sysv exit 0 ;; M680?0:D-NIX:5.3:*) echo m68k-diab-dnix exit 0 ;; M68*:*:R3V[567]*:*) test -r /sysV68 && echo 'm68k-motorola-sysv' && exit 0 ;; 3[34]??:*:4.0:3.0 | 3[34]??A:*:4.0:3.0 | 3[34]??,*:*:4.0:3.0 | 3[34]??/*:*:4.0:3.0 | 4400:*:4.0:3.0 | 4850:*:4.0:3.0 | SKA40:*:4.0:3.0 | SDS2:*:4.0:3.0 | SHG2:*:4.0:3.0) OS_REL='' test -r /etc/.relid \ && OS_REL=.`sed -n 's/[^ ]* [^ ]* \([0-9][0-9]\).*/\1/p' < /etc/.relid` /bin/uname -p 2>/dev/null | grep 86 >/dev/null \ && echo i486-ncr-sysv4.3${OS_REL} && exit 0 /bin/uname -p 2>/dev/null | /bin/grep entium >/dev/null \ && echo i586-ncr-sysv4.3${OS_REL} && exit 0 ;; 3[34]??:*:4.0:* | 3[34]??,*:*:4.0:*) /bin/uname -p 2>/dev/null | grep 86 >/dev/null \ && echo i486-ncr-sysv4 && exit 0 ;; m68*:LynxOS:2.*:* | m68*:LynxOS:3.0*:*) echo m68k-unknown-lynxos${UNAME_RELEASE} exit 0 ;; mc68030:UNIX_System_V:4.*:*) echo m68k-atari-sysv4 exit 0 ;; TSUNAMI:LynxOS:2.*:*) echo sparc-unknown-lynxos${UNAME_RELEASE} exit 0 ;; rs6000:LynxOS:2.*:*) echo rs6000-unknown-lynxos${UNAME_RELEASE} exit 0 ;; PowerPC:LynxOS:2.*:* | PowerPC:LynxOS:3.[01]*:* | PowerPC:LynxOS:4.0*:*) echo powerpc-unknown-lynxos${UNAME_RELEASE} exit 0 ;; SM[BE]S:UNIX_SV:*:*) echo mips-dde-sysv${UNAME_RELEASE} exit 0 ;; RM*:ReliantUNIX-*:*:*) echo mips-sni-sysv4 exit 0 ;; RM*:SINIX-*:*:*) echo mips-sni-sysv4 exit 0 ;; *:SINIX-*:*:*) if uname -p 2>/dev/null >/dev/null ; then UNAME_MACHINE=`(uname -p) 2>/dev/null` echo ${UNAME_MACHINE}-sni-sysv4 else echo ns32k-sni-sysv fi exit 0 ;; PENTIUM:*:4.0*:*) # Unisys `ClearPath HMP IX 4000' SVR4/MP effort # says echo i586-unisys-sysv4 exit 0 ;; *:UNIX_System_V:4*:FTX*) # From Gerald Hewes . # How about differentiating between stratus architectures? -djm echo hppa1.1-stratus-sysv4 exit 0 ;; *:*:*:FTX*) # From seanf@swdc.stratus.com. echo i860-stratus-sysv4 exit 0 ;; *:VOS:*:*) # From Paul.Green@stratus.com. echo hppa1.1-stratus-vos exit 0 ;; mc68*:A/UX:*:*) echo m68k-apple-aux${UNAME_RELEASE} exit 0 ;; news*:NEWS-OS:6*:*) echo mips-sony-newsos6 exit 0 ;; R[34]000:*System_V*:*:* | R4000:UNIX_SYSV:*:* | R*000:UNIX_SV:*:*) if [ -d /usr/nec ]; then echo mips-nec-sysv${UNAME_RELEASE} else echo mips-unknown-sysv${UNAME_RELEASE} fi exit 0 ;; BeBox:BeOS:*:*) # BeOS running on hardware made by Be, PPC only. echo powerpc-be-beos exit 0 ;; BeMac:BeOS:*:*) # BeOS running on Mac or Mac clone, PPC only. echo powerpc-apple-beos exit 0 ;; BePC:BeOS:*:*) # BeOS running on Intel PC compatible. echo i586-pc-beos exit 0 ;; SX-4:SUPER-UX:*:*) echo sx4-nec-superux${UNAME_RELEASE} exit 0 ;; SX-5:SUPER-UX:*:*) echo sx5-nec-superux${UNAME_RELEASE} exit 0 ;; SX-6:SUPER-UX:*:*) echo sx6-nec-superux${UNAME_RELEASE} exit 0 ;; Power*:Rhapsody:*:*) echo powerpc-apple-rhapsody${UNAME_RELEASE} exit 0 ;; *:Rhapsody:*:*) echo ${UNAME_MACHINE}-apple-rhapsody${UNAME_RELEASE} exit 0 ;; *:Darwin:*:*) case `uname -p` in *86) UNAME_PROCESSOR=i686 ;; powerpc) UNAME_PROCESSOR=powerpc ;; esac echo ${UNAME_PROCESSOR}-apple-darwin${UNAME_RELEASE} exit 0 ;; *:procnto*:*:* | *:QNX:[0123456789]*:*) UNAME_PROCESSOR=`uname -p` if test "$UNAME_PROCESSOR" = "x86"; then UNAME_PROCESSOR=i386 UNAME_MACHINE=pc fi echo ${UNAME_PROCESSOR}-${UNAME_MACHINE}-nto-qnx${UNAME_RELEASE} exit 0 ;; *:QNX:*:4*) echo i386-pc-qnx exit 0 ;; NSR-[DGKLNPTVW]:NONSTOP_KERNEL:*:*) echo nsr-tandem-nsk${UNAME_RELEASE} exit 0 ;; *:NonStop-UX:*:*) echo mips-compaq-nonstopux exit 0 ;; BS2000:POSIX*:*:*) echo bs2000-siemens-sysv exit 0 ;; DS/*:UNIX_System_V:*:*) echo ${UNAME_MACHINE}-${UNAME_SYSTEM}-${UNAME_RELEASE} exit 0 ;; *:Plan9:*:*) # "uname -m" is not consistent, so use $cputype instead. 386 # is converted to i386 for consistency with other x86 # operating systems. if test "$cputype" = "386"; then UNAME_MACHINE=i386 else UNAME_MACHINE="$cputype" fi echo ${UNAME_MACHINE}-unknown-plan9 exit 0 ;; *:TOPS-10:*:*) echo pdp10-unknown-tops10 exit 0 ;; *:TENEX:*:*) echo pdp10-unknown-tenex exit 0 ;; KS10:TOPS-20:*:* | KL10:TOPS-20:*:* | TYPE4:TOPS-20:*:*) echo pdp10-dec-tops20 exit 0 ;; XKL-1:TOPS-20:*:* | TYPE5:TOPS-20:*:*) echo pdp10-xkl-tops20 exit 0 ;; *:TOPS-20:*:*) echo pdp10-unknown-tops20 exit 0 ;; *:ITS:*:*) echo pdp10-unknown-its exit 0 ;; SEI:*:*:SEIUX) echo mips-sei-seiux${UNAME_RELEASE} exit 0 ;; esac #echo '(No uname command or uname output not recognized.)' 1>&2 #echo "${UNAME_MACHINE}:${UNAME_SYSTEM}:${UNAME_RELEASE}:${UNAME_VERSION}" 1>&2 eval $set_cc_for_build cat >$dummy.c < # include #endif main () { #if defined (sony) #if defined (MIPSEB) /* BFD wants "bsd" instead of "newsos". Perhaps BFD should be changed, I don't know.... */ printf ("mips-sony-bsd\n"); exit (0); #else #include printf ("m68k-sony-newsos%s\n", #ifdef NEWSOS4 "4" #else "" #endif ); exit (0); #endif #endif #if defined (__arm) && defined (__acorn) && defined (__unix) printf ("arm-acorn-riscix"); exit (0); #endif #if defined (hp300) && !defined (hpux) printf ("m68k-hp-bsd\n"); exit (0); #endif #if defined (NeXT) #if !defined (__ARCHITECTURE__) #define __ARCHITECTURE__ "m68k" #endif int version; version=`(hostinfo | sed -n 's/.*NeXT Mach \([0-9]*\).*/\1/p') 2>/dev/null`; if (version < 4) printf ("%s-next-nextstep%d\n", __ARCHITECTURE__, version); else printf ("%s-next-openstep%d\n", __ARCHITECTURE__, version); exit (0); #endif #if defined (MULTIMAX) || defined (n16) #if defined (UMAXV) printf ("ns32k-encore-sysv\n"); exit (0); #else #if defined (CMU) printf ("ns32k-encore-mach\n"); exit (0); #else printf ("ns32k-encore-bsd\n"); exit (0); #endif #endif #endif #if defined (__386BSD__) printf ("i386-pc-bsd\n"); exit (0); #endif #if defined (sequent) #if defined (i386) printf ("i386-sequent-dynix\n"); exit (0); #endif #if defined (ns32000) printf ("ns32k-sequent-dynix\n"); exit (0); #endif #endif #if defined (_SEQUENT_) struct utsname un; uname(&un); if (strncmp(un.version, "V2", 2) == 0) { printf ("i386-sequent-ptx2\n"); exit (0); } if (strncmp(un.version, "V1", 2) == 0) { /* XXX is V1 correct? */ printf ("i386-sequent-ptx1\n"); exit (0); } printf ("i386-sequent-ptx\n"); exit (0); #endif #if defined (vax) # if !defined (ultrix) # include # if defined (BSD) # if BSD == 43 printf ("vax-dec-bsd4.3\n"); exit (0); # else # if BSD == 199006 printf ("vax-dec-bsd4.3reno\n"); exit (0); # else printf ("vax-dec-bsd\n"); exit (0); # endif # endif # else printf ("vax-dec-bsd\n"); exit (0); # endif # else printf ("vax-dec-ultrix\n"); exit (0); # endif #endif #if defined (alliant) && defined (i860) printf ("i860-alliant-bsd\n"); exit (0); #endif exit (1); } EOF $CC_FOR_BUILD -o $dummy $dummy.c 2>/dev/null && $dummy && exit 0 # Apollos put the system type in the environment. test -d /usr/apollo && { echo ${ISP}-apollo-${SYSTYPE}; exit 0; } # Convex versions that predate uname can use getsysinfo(1) if [ -x /usr/convex/getsysinfo ] then case `getsysinfo -f cpu_type` in c1*) echo c1-convex-bsd exit 0 ;; c2*) if getsysinfo -f scalar_acc then echo c32-convex-bsd else echo c2-convex-bsd fi exit 0 ;; c34*) echo c34-convex-bsd exit 0 ;; c38*) echo c38-convex-bsd exit 0 ;; c4*) echo c4-convex-bsd exit 0 ;; esac fi cat >&2 < in order to provide the needed information to handle your system. config.guess timestamp = $timestamp uname -m = `(uname -m) 2>/dev/null || echo unknown` uname -r = `(uname -r) 2>/dev/null || echo unknown` uname -s = `(uname -s) 2>/dev/null || echo unknown` uname -v = `(uname -v) 2>/dev/null || echo unknown` /usr/bin/uname -p = `(/usr/bin/uname -p) 2>/dev/null` /bin/uname -X = `(/bin/uname -X) 2>/dev/null` hostinfo = `(hostinfo) 2>/dev/null` /bin/universe = `(/bin/universe) 2>/dev/null` /usr/bin/arch -k = `(/usr/bin/arch -k) 2>/dev/null` /bin/arch = `(/bin/arch) 2>/dev/null` /usr/bin/oslevel = `(/usr/bin/oslevel) 2>/dev/null` /usr/convex/getsysinfo = `(/usr/convex/getsysinfo) 2>/dev/null` UNAME_MACHINE = ${UNAME_MACHINE} UNAME_RELEASE = ${UNAME_RELEASE} UNAME_SYSTEM = ${UNAME_SYSTEM} UNAME_VERSION = ${UNAME_VERSION} EOF exit 1 # Local variables: # eval: (add-hook 'write-file-hooks 'time-stamp) # time-stamp-start: "timestamp='" # time-stamp-format: "%:y-%02m-%02d" # time-stamp-end: "'" # End: dnssec-tools-2.0/configure.in0000664000237200023720000001155411677177244016457 0ustar hardakerhardakerdnl Process this file with autoconf to produce a configure script. dnl dnl provide it a file to simply check for its existence. AC_INIT([dnssec-tools], [1.8], [dnssec-tools-users@lists.sourceforge.net]) AC_PREREQ([2.59]) dnl ---------------------------------------------------------------------- dnl catch mis-typed options as early as possible dnl AC_ARG_WITH(out-validator,, AC_MSG_ERROR([ Invalid option. Use --with-validator/--without-validator instead ]) ) AC_ARG_ENABLE(validator,, AC_MSG_ERROR([ Invalid option. Use --with-validator/--without-validator instead ]) ) dnl ---------------------------------------------------------------------- dnl check for programs dnl AC_PATH_PROG([PERLPROG],perl) AC_PATH_PROG(AR, ar) AC_PATH_PROG(RM, rm) # allow user to disable bind checks AC_ARG_ENABLE(bind-checks, [ --disable-bind-checks Disable checks for bind dnssec utilities]) if test "x$enable_bind_checks" != "xno"; then AC_PATH_PROG(BIND_DNSSEC_KEYGEN, dnssec-keygen) if test -z "$BIND_DNSSEC_KEYGEN"; then AC_ERROR([Could not locate dnssec-keygen. Please install BIND utilities.]) fi AC_PATH_PROG(BIND_DNSSEC_SIGNZONE, dnssec-signzone) if test -z "$BIND_DNSSEC_SIGNZONE"; then AC_ERROR([Could not locate dnssec-signzone. Please install BIND utilities.]) fi AC_PATH_PROG(BIND_DNSSEC_CHECKZONE, named-checkzone) if test -z "$BIND_DNSSEC_CHECKZONE"; then AC_ERROR([Could not locate named-checkzone. Please install BIND utilities.]) fi fi # ? rndc # libtool info AC_PROG_LIBTOOL # useful stuff for installation AC_PROG_INSTALL AC_PROG_LN_S AC_PROG_MAKE_SET dnl ---------------------------------------------------------------------- AC_ARG_WITH(validator, [ --without-validator Build without libsres, libval and binary apps (Disable if they fail to build on your platform). Validator specific options:] ) if test "x$with_validator" != "xno"; then AC_CONFIG_SUBDIRS(validator) DNSSEC_SUBDIRS="validator" PERLARGS="" else DNSSEC_SUBDIRS="none" PERLARGS="NOVALIDATOR" fi AC_SUBST(DNSSEC_SUBDIRS) # # these are bogus flags for this script but get passed down to validator/config* # AC_ARG_WITH(openssl, [ --with-openssl=PATH Look for openssl in PATH/{lib,include}.]) AC_ARG_WITH(ipv6, [ --with-ipv6 Enable IPv6 support.]) AC_ARG_WITH(nsec3, [ --with-nsec3 Enable nsec3 support.]) AC_ARG_WITH(dlv, [ --with-dlv Enable DLV support.]) AC_ARG_WITH(threads, [ --without-threads Don't use threads. ]) dnl ---------------------------------------------------------------------- dnl perl specific arguments dnl dnl ---------------------------------------------------------------------- if test "x$prefix" = "xNONE" ; then # if a default prefix is set then don't change perl's install # prefix from what *it* thinks is right, which may not be the # default system prefix prefix=$ac_default_prefix else # if a prefix was specificied, install everything into the # specified prefix, including all perl specific scripts and mans # ugh: this likely isn't perfect. if test "x$mandir" = "xNONE" ; then mandir="$datadir/man" fi if test "x$exec_prefix" = "xNONE" ; then exec_prefix="$prefix" fi PERLARGS="$PERLARGS INSTALLSCRIPT=$prefix/bin INSTALLSITESCRIPT=$prefix/bin INSTALLBIN=$exec_prefix/bin INSTALLSITEBIN=$exec_prefix/bin INSTALLSITEMAN1DIR=$mandir/man1 INSTALLSITEMAN3DIR=$mandir/man3 INSTALLMAN1DIR=$mandir/man1 INSTALLMAN3DIR=$mandir/man3" fi AC_ARG_WITH(perl-build-args, [ --with-perl-build-args=ARGS Add ARGS to building perl Makefiles.], PERLARGS="$PERLARGS $withval" ) AC_SUBST(PERLARGS) missing="" for module in ExtUtils::MakeMaker Net::DNS Net::DNS::SEC Date::Parse do AC_MSG_CHECKING(for perl module $module) $PERLPROG "-e 'require $module'" > /dev/null 2>&1 if test $? -ne 0; then AC_MSG_RESULT(no); missing="$missing $module" else AC_MSG_RESULT(ok); fi done if test -n "$missing" ; then AC_MSG_ERROR([Missing required perl modules: $missing]) fi missing="" for module in GraphViz Mail::Mailer::sendmail XML::Simple do AC_MSG_CHECKING(for recommended perl module $module) $PERLPROG -e "require $module" > /dev/null 2>&1 if test $? -ne 0; then AC_MSG_RESULT(no); missing="$missing $module" else AC_MSG_RESULT(ok); fi done if test -n "$missing" ; then AC_MSG_WARN([Missing recommended perl modules: $missing]) fi expanded_sysconfdir=`eval echo $sysconfdir` AC_SUBST(expanded_sysconfdir) expanded_localstatedir=`eval echo $localstatedir` AC_SUBST(expanded_localstatedir) AC_CONFIG_FILES([ Makefile:Makefile.in tools/modules/conf.pm:tools/modules/conf.pm.in testing/Makefile:testing/Makefile.in dist/rollerd.service:dist/rollerd.service.in dist/donutsd.service:dist/donutsd.service.in ]) AC_CONFIG_COMMANDS([default], echo timestamp > stamp-h) AC_OUTPUT dnssec-tools-2.0/ChangeLog0000664000237200023720001126405012111172462015700 0ustar hardakerhardaker------------------------------------------------------------------------ r7588 | tewok | 2013-02-19 15:36:05 -0800 (Tue, 19 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-2-installation.html Changed ".tbz2" to ".tar.gz". ------------------------------------------------------------------------ r7587 | tewok | 2013-02-19 15:35:01 -0800 (Tue, 19 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager-2-installation.html Changed ".tbz2" to ".tar.gz". ------------------------------------------------------------------------ r7528 | rstory | 2013-02-19 13:04:55 -0800 (Tue, 19 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0006-add-DNSSEC-preferences-to-browser.patch slight tweak to patch ------------------------------------------------------------------------ r7527 | hserus | 2013-02-19 11:32:11 -0800 (Tue, 19 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_debug.c Some more adjusting of definitions for OpenBSD ------------------------------------------------------------------------ r7526 | hserus | 2013-02-19 11:11:13 -0800 (Tue, 19 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in On some systems libcrypto is a dependency when linking against libssl ------------------------------------------------------------------------ r7525 | hserus | 2013-02-19 10:41:59 -0800 (Tue, 19 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator-compat.h M /trunk/dnssec-tools/validator/libsres/res_debug.c M /trunk/dnssec-tools/validator/libsres/res_debug.h Try to fix some openbsd oddities ------------------------------------------------------------------------ r7524 | tewok | 2013-02-19 10:29:08 -0800 (Tue, 19 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/README Added some text to the intro and expanded the contents descriptions. ------------------------------------------------------------------------ r7523 | tewok | 2013-02-19 07:50:41 -0800 (Tue, 19 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-guide.html M /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager-1-overview.html M /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager-2-installation.html M /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager-3-about-queries.html M /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager-4-adding-sensor.html M /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager-5-define-graphs.html M /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager-6-mod-queries.html M /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager-7-commands.html M /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager-full-toc.html M /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager.html M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-1-overview.html M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-2-installation.html M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-3-about-queries.html M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-4-adding-sensor.html M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-5-adding-queries.html M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-6-commands.html M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-full-toc.html M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor.html Added logo to Owl installation manual. ------------------------------------------------------------------------ r7522 | tewok | 2013-02-19 07:49:27 -0800 (Tue, 19 Feb 2013) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/owl-logo.jpg Logo for Owl documentation. ------------------------------------------------------------------------ r7521 | hserus | 2013-02-19 06:42:30 -0800 (Tue, 19 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/etc/root.hints Update new address for D.ROOT-SERVERS.NET. ------------------------------------------------------------------------ r7520 | hserus | 2013-02-15 16:18:48 -0800 (Fri, 15 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c For now don't enable MSG_DONTWAIT for TCP. ------------------------------------------------------------------------ r7519 | hardaker | 2013-02-15 14:57:39 -0800 (Fri, 15 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/COPYING A /trunk/dnssec-tools/apps/owl-monitor/COPYING M /trunk/dnssec-tools/validator/apps/dnssec-check/COPYING M /trunk/dnssec-tools/validator/apps/dnssec-nodes/COPYING M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/COPYING M /trunk/dnssec-tools/validator/apps/lookup/COPYING Add Parsons to all the 2013 COPING files ------------------------------------------------------------------------ r7518 | hardaker | 2013-02-15 14:57:22 -0800 (Fri, 15 Feb 2013) | 1 line Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/README Added a README file for OWL ------------------------------------------------------------------------ r7517 | tewok | 2013-02-15 14:09:54 -0800 (Fri, 15 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/check-zone-expiration M /trunk/dnssec-tools/tools/scripts/getds M /trunk/dnssec-tools/tools/scripts/lsdnssec Adjusted version numbers for new release. ------------------------------------------------------------------------ r7516 | tewok | 2013-02-15 14:08:54 -0800 (Fri, 15 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/common/perllib/owlutils.pm M /trunk/dnssec-tools/apps/owl-monitor/manager/bin/owl-archdata M /trunk/dnssec-tools/apps/owl-monitor/manager/bin/owl-archold M /trunk/dnssec-tools/apps/owl-monitor/manager/bin/owl-dataarch-mgr M /trunk/dnssec-tools/apps/owl-monitor/manager/bin/owl-initsensor M /trunk/dnssec-tools/apps/owl-monitor/manager/bin/owl-monthly M /trunk/dnssec-tools/apps/owl-monitor/manager/bin/owl-needs M /trunk/dnssec-tools/apps/owl-monitor/manager/bin/owl-newsensor M /trunk/dnssec-tools/apps/owl-monitor/manager/bin/owl-transfer-mgr M /trunk/dnssec-tools/apps/owl-monitor/manager/libexec/owl-dnswatch M /trunk/dnssec-tools/apps/owl-monitor/manager/libexec/owl-perfdata M /trunk/dnssec-tools/apps/owl-monitor/manager/libexec/owl-stethoscope M /trunk/dnssec-tools/apps/owl-monitor/manager/nagios-files/owl-sensor-heartbeat.cgi M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-archold M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-dataarch M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-dnstimer M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-heartbeat M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-needs M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-sensord M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-status M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-transfer Adjusted version numbers for new release. ------------------------------------------------------------------------ r7515 | tewok | 2013-02-15 14:08:27 -0800 (Fri, 15 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/zabbix/rollstate M /trunk/dnssec-tools/apps/zabbix/uemstats M /trunk/dnssec-tools/apps/zabbix/zonestate Fixed copyright dates. ------------------------------------------------------------------------ r7514 | tewok | 2013-02-15 14:07:00 -0800 (Fri, 15 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/zabbix/rollstate M /trunk/dnssec-tools/apps/zabbix/uemstats M /trunk/dnssec-tools/apps/zabbix/zonestate Adjusted version numbers for new release. ------------------------------------------------------------------------ r7513 | tewok | 2013-02-15 14:05:41 -0800 (Fri, 15 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/nagios/dt_donuts M /trunk/dnssec-tools/apps/nagios/dt_trustman M /trunk/dnssec-tools/apps/nagios/dt_zonestat M /trunk/dnssec-tools/apps/nagios/dt_zonetimer M /trunk/dnssec-tools/apps/nagios/dtnagobj Adjusted version numbers for new release. ------------------------------------------------------------------------ r7512 | tewok | 2013-02-15 13:49:55 -0800 (Fri, 15 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/demo-tools/makezones M /trunk/dnssec-tools/tools/demos/dtrealms-basic/mkconffiles M /trunk/dnssec-tools/tools/demos/rollerd-vastzones/makezones Adjusted version numbers for the new release. ------------------------------------------------------------------------ r7511 | hardaker | 2013-02-15 13:41:19 -0800 (Fri, 15 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/MainWindow.cpp rearrange the menus for more structure ------------------------------------------------------------------------ r7510 | hardaker | 2013-02-15 13:41:01 -0800 (Fri, 15 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS name bloodhound in the NEWS file ------------------------------------------------------------------------ r7509 | tewok | 2013-02-15 13:38:29 -0800 (Fri, 15 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm.in M /trunk/dnssec-tools/tools/modules/defaults.pm M /trunk/dnssec-tools/tools/modules/dnssectools.pm M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/realm.pm M /trunk/dnssec-tools/tools/modules/realmmgr.pm M /trunk/dnssec-tools/tools/modules/rolllog.pm M /trunk/dnssec-tools/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/modules/rollrec.pm M /trunk/dnssec-tools/tools/modules/timetrans.pm M /trunk/dnssec-tools/tools/modules/tooloptions.pm Fixed version number for new release. ------------------------------------------------------------------------ r7508 | tewok | 2013-02-15 13:32:24 -0800 (Fri, 15 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/bubbles M /trunk/dnssec-tools/tools/scripts/buildrealms M /trunk/dnssec-tools/tools/scripts/cleanarch M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtck M /trunk/dnssec-tools/tools/scripts/dtconf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/dtrealms M /trunk/dnssec-tools/tools/scripts/dtreqmods M /trunk/dnssec-tools/tools/scripts/dtupdkrf M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/grandvizier M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/keymod M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lights M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsrealm M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/realmchk M /trunk/dnssec-tools/tools/scripts/realmctl M /trunk/dnssec-tools/tools/scripts/realminit M /trunk/dnssec-tools/tools/scripts/realmset M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rolllog M /trunk/dnssec-tools/tools/scripts/rollrec-editor M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/rp-wrapper M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/trustman M /trunk/dnssec-tools/tools/scripts/zonesigner Adjusted version numbers to reflect the new release. ------------------------------------------------------------------------ r7507 | hardaker | 2013-02-15 13:21:13 -0800 (Fri, 15 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS more NEWS additions ------------------------------------------------------------------------ r7506 | hserus | 2013-02-15 13:19:01 -0800 (Fri, 15 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libsres/res_support.c Some more initialization of sockaddr memory to 0 ------------------------------------------------------------------------ r7505 | hserus | 2013-02-15 12:16:45 -0800 (Fri, 15 Feb 2013) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in Change the order in which -lssl and -lcrypto are linked into binaries since the order matters on some platforms ------------------------------------------------------------------------ r7504 | tewok | 2013-02-15 09:35:31 -0800 (Fri, 15 Feb 2013) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/dnssectools.pm Removed credit for Sebastien Schmidt, since it was moved to the NEWS file to cover the all his changes. ------------------------------------------------------------------------ r7503 | hserus | 2013-02-15 09:18:46 -0800 (Fri, 15 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/NEWS Change tabs to spaces ------------------------------------------------------------------------ r7502 | tewok | 2013-02-15 09:09:07 -0800 (Fri, 15 Feb 2013) | 3 lines Changed paths: M /trunk/dnssec-tools/NEWS Tweaked the Owl discussion. Added discussion of rollerd and rollrec.pm changes. ------------------------------------------------------------------------ r7501 | hserus | 2013-02-15 09:02:21 -0800 (Fri, 15 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/NEWS Add libval and validation-related NEWS items ------------------------------------------------------------------------ r7500 | hardaker | 2013-02-15 08:45:01 -0800 (Fri, 15 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS mention dnssec-check ------------------------------------------------------------------------ r7499 | hardaker | 2013-02-15 08:43:24 -0800 (Fri, 15 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS more updates to NEWS ------------------------------------------------------------------------ r7498 | tewok | 2013-02-15 08:39:09 -0800 (Fri, 15 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm.in M /trunk/dnssec-tools/tools/modules/defaults.pm M /trunk/dnssec-tools/tools/modules/dnssectools.pm M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/realm.pm M /trunk/dnssec-tools/tools/modules/realmmgr.pm M /trunk/dnssec-tools/tools/modules/rolllog.pm M /trunk/dnssec-tools/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/modules/rollrec.pm M /trunk/dnssec-tools/tools/modules/timetrans.pm M /trunk/dnssec-tools/tools/modules/tooloptions.pm Updated module version numbers to reflect imminent new release. ------------------------------------------------------------------------ r7497 | tewok | 2013-02-15 08:36:19 -0800 (Fri, 15 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/bubbles M /trunk/dnssec-tools/tools/scripts/buildrealms M /trunk/dnssec-tools/tools/scripts/cleanarch M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtck M /trunk/dnssec-tools/tools/scripts/dtconf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtrealms M /trunk/dnssec-tools/tools/scripts/dtreqmods M /trunk/dnssec-tools/tools/scripts/dtupdkrf M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/grandvizier M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/keymod M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lights M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsrealm M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/realmchk M /trunk/dnssec-tools/tools/scripts/realmctl M /trunk/dnssec-tools/tools/scripts/realminit M /trunk/dnssec-tools/tools/scripts/realmset M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rolllog M /trunk/dnssec-tools/tools/scripts/rollrec-editor M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/rp-wrapper M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/trustman M /trunk/dnssec-tools/tools/scripts/zonesigner Update the tool version number for the impending release. ------------------------------------------------------------------------ r7496 | hardaker | 2013-02-15 08:30:17 -0800 (Fri, 15 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS 2.0 starting template ------------------------------------------------------------------------ r7495 | tewok | 2013-02-15 08:30:15 -0800 (Fri, 15 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Added support for zonefile-parser config field. ------------------------------------------------------------------------ r7494 | hserus | 2013-02-15 08:28:31 -0800 (Fri, 15 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.c Replace record in cache based on credibility value alone. ------------------------------------------------------------------------ r7493 | tewok | 2013-02-15 07:58:42 -0800 (Fri, 15 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Added support for zonefile-parser config field. ------------------------------------------------------------------------ r7492 | tewok | 2013-02-15 07:33:25 -0800 (Fri, 15 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper Added support for zonefile-parser config field. ------------------------------------------------------------------------ r7491 | tewok | 2013-02-15 07:32:57 -0800 (Fri, 15 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts Added support for zonefile-parser config field. ------------------------------------------------------------------------ r7490 | tewok | 2013-02-15 07:32:27 -0800 (Fri, 15 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsdnssec Added support for zonefile-parser config field. ------------------------------------------------------------------------ r7489 | tewok | 2013-02-15 07:31:58 -0800 (Fri, 15 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollchk Added support for zonefile-parser config field. ------------------------------------------------------------------------ r7488 | tewok | 2013-02-15 07:31:28 -0800 (Fri, 15 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added support for zonefile-parser config field. ------------------------------------------------------------------------ r7487 | tewok | 2013-02-15 07:30:45 -0800 (Fri, 15 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/dnssectools.pm Added support for zonefile-parser config field. ------------------------------------------------------------------------ r7486 | tewok | 2013-02-15 07:30:20 -0800 (Fri, 15 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Added support for zonefile-parser config field. ------------------------------------------------------------------------ r7485 | tewok | 2013-02-15 07:29:57 -0800 (Fri, 15 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod Added support for zonefile-parser config field. ------------------------------------------------------------------------ r7484 | tewok | 2013-02-15 07:28:29 -0800 (Fri, 15 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf Added support for zonefile-parser config field. ------------------------------------------------------------------------ r7483 | hardaker | 2013-02-14 18:59:06 -0800 (Thu, 14 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/MainWindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewBox.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewBox.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h allow for permently toggled validation tab boxes ------------------------------------------------------------------------ r7482 | hardaker | 2013-02-14 17:22:03 -0800 (Thu, 14 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/Effect.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/SetSize.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/SetSize.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro M /trunk/dnssec-tools/validator/apps/dnssec-nodes/filtersAndEffects.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h Added a new effect to set the size of a node ------------------------------------------------------------------------ r7481 | hardaker | 2013-02-14 17:21:50 -0800 (Thu, 14 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/Effect.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/SetNodeColoring.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/SetNodeColoring.h allow null colors for border colors ------------------------------------------------------------------------ r7480 | hardaker | 2013-02-14 11:42:38 -0800 (Thu, 14 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/Effect.cpp D /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/SetBorderColor.cpp D /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/SetBorderColor.h A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/SetNodeColoring.cpp (from /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/SetBorderColor.cpp:7479) A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/SetNodeColoring.h (from /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/SetBorderColor.h:7479) M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/Filter.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/LogicalAndOr.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro M /trunk/dnssec-tools/validator/apps/dnssec-nodes/filtersAndEffects.h Renamed the border coloring class to node coloring, which is more accurate (and a few other bug fixes) ------------------------------------------------------------------------ r7479 | hardaker | 2013-02-14 11:42:20 -0800 (Thu, 14 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/Effect.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/SetBorderColor.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/SetBorderColor.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h change border coloring effect to handle node coloring as well ------------------------------------------------------------------------ r7478 | hardaker | 2013-02-14 10:01:40 -0800 (Thu, 14 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/SetBorderColor.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/SetBorderColor.h use a color selector for border colors ------------------------------------------------------------------------ r7477 | hardaker | 2013-02-14 10:01:30 -0800 (Thu, 14 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp fix alpha coloring so it affects everything about a node ------------------------------------------------------------------------ r7476 | hardaker | 2013-02-14 10:01:21 -0800 (Thu, 14 Feb 2013) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/LogicalAndOr.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/LogicalAndOr.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro M /trunk/dnssec-tools/validator/apps/dnssec-nodes/filtersAndEffects.h Added a logical and/or filter ------------------------------------------------------------------------ r7475 | hardaker | 2013-02-14 10:01:09 -0800 (Thu, 14 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/Filter.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/NameFilter.cpp emit filterChanged when appropriate ------------------------------------------------------------------------ r7474 | hardaker | 2013-02-14 10:00:59 -0800 (Thu, 14 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp display help text in the background ------------------------------------------------------------------------ r7473 | hserus | 2013-02-14 09:39:37 -0800 (Thu, 14 Feb 2013) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c Ifdef out debug statements for thread ID since different platforms represent the thread ID type differently. ------------------------------------------------------------------------ r7472 | hserus | 2013-02-14 09:33:40 -0800 (Thu, 14 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c Set exit code to 1 if validation failed for a single test ------------------------------------------------------------------------ r7470 | hserus | 2013-02-14 06:43:49 -0800 (Thu, 14 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/content/overlay.js Don't display error links ------------------------------------------------------------------------ r7469 | hardaker | 2013-02-14 06:43:03 -0800 (Thu, 14 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/Effect.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/Effect.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/MultiEffect.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/MultiEffect.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/SetAlphaEffect.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/SetAlphaEffect.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/SetBorderColor.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/SetBorderColor.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/SetZValue.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/SetZValue.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/FilterEditorWindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/FilterEditorWindow.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/DNSSECStatusFilter.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/DNSSECStatusFilter.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/Filter.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/Filter.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/NameFilter.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/NameFilter.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/NotFilter.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/NotFilter.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/TypeFilter.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/TypeFilter.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/MainWindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp first full implementation of a filter editor windows ------------------------------------------------------------------------ r7468 | hardaker | 2013-02-14 06:42:46 -0800 (Thu, 14 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h Show node info immediately on hover ------------------------------------------------------------------------ r7467 | hardaker | 2013-02-14 06:42:36 -0800 (Thu, 14 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp fix centering of new scaled graph ------------------------------------------------------------------------ r7466 | hardaker | 2013-02-14 06:42:27 -0800 (Thu, 14 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h fix the scroll bars to always calculate proper min/max scene sizes ------------------------------------------------------------------------ r7465 | hardaker | 2013-02-14 06:42:18 -0800 (Thu, 14 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp minor bug fix ------------------------------------------------------------------------ r7464 | hardaker | 2013-02-14 06:42:08 -0800 (Thu, 14 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp Fix the wait cursor in various spots to use the viewport ------------------------------------------------------------------------ r7463 | hardaker | 2013-02-14 06:41:59 -0800 (Thu, 14 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp set the busy cursor while loading files, names, etc ------------------------------------------------------------------------ r7462 | hardaker | 2013-02-14 06:41:49 -0800 (Thu, 14 Feb 2013) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/MainWindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/MainWindow.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp Add argument parsing to dnssec-nodes. --logfile FILE will load a log file --pcapfile will load a pcap dump file other arguments will be treated as names to lookup on startup ------------------------------------------------------------------------ r7461 | rstory | 2013-02-14 05:25:23 -0800 (Thu, 14 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/bloodhound/mozilla-central/dt-bloodhound-0002-branding-for-bloodhound.patch update for os x ------------------------------------------------------------------------ r7460 | rstory | 2013-02-14 05:09:43 -0800 (Thu, 14 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/bloodhound/mozilla-central/bloodhound-icons.tgz add icons for os x ------------------------------------------------------------------------ r7459 | tewok | 2013-02-13 20:28:35 -0800 (Wed, 13 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/demo-tools/makezones Add an info rollrec to the rollrec file. ------------------------------------------------------------------------ r7458 | tewok | 2013-02-13 20:20:32 -0800 (Wed, 13 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-vastzones/makezones Added an info rollrec to the constructed rollrec file. ------------------------------------------------------------------------ r7457 | tewok | 2013-02-12 17:35:48 -0800 (Tue, 12 Feb 2013) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-demo.rollrec M /trunk/dnssec-tools/tools/demos/rollerd-single/save-demo.rollrec M /trunk/dnssec-tools/tools/demos/rollerd-split-view/save-demo.rollrec M /trunk/dnssec-tools/tools/demos/rollerd-subdirs/save-demo.rollrec M /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/save-demo.rollrec Added info rollrec. ------------------------------------------------------------------------ r7456 | tewok | 2013-02-12 17:32:15 -0800 (Tue, 12 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/Makefile M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-dummy.com M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-example.com M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-test.com M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-woof.com M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-xorn.com M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-yowzah.com M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-zero.com Shrunk rollover times. ------------------------------------------------------------------------ r7455 | tewok | 2013-02-12 17:30:31 -0800 (Tue, 12 Feb 2013) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-demo.rollrec Added info rollrec. ------------------------------------------------------------------------ r7454 | tewok | 2013-02-12 17:26:20 -0800 (Tue, 12 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-demo-smallset.rollrec M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-demo.rollrec Added info rollrec. ------------------------------------------------------------------------ r7453 | tewok | 2013-02-12 17:22:26 -0800 (Tue, 12 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-demo.rollrec Added info rollrec. ------------------------------------------------------------------------ r7452 | tewok | 2013-02-12 17:18:13 -0800 (Tue, 12 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/Makefile Fixed -e arg for zonesigner. ------------------------------------------------------------------------ r7451 | tewok | 2013-02-12 17:12:27 -0800 (Tue, 12 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollchk Added checking of info rollrecs. ------------------------------------------------------------------------ r7450 | tewok | 2013-02-12 17:10:55 -0800 (Tue, 12 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Added -info to display the info rollrec. ------------------------------------------------------------------------ r7449 | tewok | 2013-02-12 17:10:15 -0800 (Tue, 12 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollinit Modified to add an info rollrec when creating a new file. ------------------------------------------------------------------------ r7448 | tewok | 2013-02-12 17:07:30 -0800 (Tue, 12 Feb 2013) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Modified to support info rollrecs and rollrec versions. ------------------------------------------------------------------------ r7447 | tewok | 2013-02-12 17:02:08 -0800 (Tue, 12 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pod Added a description of the info rollrec and rollrec versions. ------------------------------------------------------------------------ r7446 | hserus | 2013-02-11 11:10:32 -0800 (Mon, 11 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/gethost.c M /trunk/dnssec-tools/validator/apps/getname.c M /trunk/dnssec-tools/validator/libsres/ns_print.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_policy.c Initialize sockaddr_in structures before use ------------------------------------------------------------------------ r7445 | hserus | 2013-02-07 08:52:10 -0800 (Thu, 07 Feb 2013) | 5 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/content/overlay.js Use XPCOMUtils.generateQI to generate the query interface. Call dnssecprogresslistener() before dnssecstatusObserver(). Not clear why this is necessary, but the earlier ordering affected the way notification counters were being incremented. ------------------------------------------------------------------------ r7444 | hserus | 2013-02-07 08:48:14 -0800 (Thu, 07 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/install.rdf Minimum version supported is 5 ------------------------------------------------------------------------ r7443 | hardaker | 2013-02-06 17:19:29 -0800 (Wed, 06 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSResources.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSResources.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.cpp Save and print the resource records that we receive back ------------------------------------------------------------------------ r7442 | hardaker | 2013-02-06 17:19:15 -0800 (Wed, 06 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/FilterEditorWindow.cpp white space ------------------------------------------------------------------------ r7441 | hardaker | 2013-02-06 17:19:02 -0800 (Wed, 06 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator-compat.h M /trunk/dnssec-tools/validator/libsres/ns_print.c define a data printing function to sprint only the data of a record ------------------------------------------------------------------------ r7440 | hardaker | 2013-02-06 17:18:41 -0800 (Wed, 06 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/MultiEffect.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/MultiEffect.h A /trunk/dnssec-tools/validator/apps/dnssec-nodes/FilterEditorWindow.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/FilterEditorWindow.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/MainWindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro A /trunk/dnssec-tools/validator/apps/dnssec-nodes/filtersAndEffects.h Start building a filtereffect editor window ------------------------------------------------------------------------ r7438 | hserus | 2013-02-06 11:50:04 -0800 (Wed, 06 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/update.rdf Leave out trailing / in what's new page ------------------------------------------------------------------------ r7437 | hserus | 2013-02-06 11:49:24 -0800 (Wed, 06 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/install.rdf Leave out trailing / for info location ------------------------------------------------------------------------ r7436 | hserus | 2013-02-06 11:48:01 -0800 (Wed, 06 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/install.rdf Fix typo ------------------------------------------------------------------------ r7435 | hserus | 2013-02-06 11:24:46 -0800 (Wed, 06 Feb 2013) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/mozilla/dnssec-status/update.rdf Add the update meta-data for the extension ------------------------------------------------------------------------ r7434 | hserus | 2013-02-06 11:24:10 -0800 (Wed, 06 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/install.rdf Support version 18.0 ------------------------------------------------------------------------ r7433 | hserus | 2013-02-06 11:23:30 -0800 (Wed, 06 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/content/overlay.js Enable the extension by default ------------------------------------------------------------------------ r7431 | hardaker | 2013-02-05 20:57:04 -0800 (Tue, 05 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp Add a new option to the right click menu to center the graph on a node.cpp ------------------------------------------------------------------------ r7430 | hardaker | 2013-02-05 20:56:52 -0800 (Tue, 05 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp arrow point cleanup ------------------------------------------------------------------------ r7429 | hardaker | 2013-02-05 20:56:41 -0800 (Tue, 05 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp increase arrow head size a touch ------------------------------------------------------------------------ r7428 | hardaker | 2013-02-05 14:03:27 -0800 (Tue, 05 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp fix a duplicate-data bug ------------------------------------------------------------------------ r7427 | hardaker | 2013-02-05 14:03:15 -0800 (Tue, 05 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp Sort keys on a line according to interest (ksks before zsk, eg). ------------------------------------------------------------------------ r7426 | hardaker | 2013-02-05 14:02:55 -0800 (Tue, 05 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewBox.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp Color code the arrow heads too ------------------------------------------------------------------------ r7425 | hardaker | 2013-02-05 14:02:36 -0800 (Tue, 05 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewBox.cpp make the lines thicker ------------------------------------------------------------------------ r7424 | hardaker | 2013-02-05 14:02:11 -0800 (Tue, 05 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp color the DS box lines too ------------------------------------------------------------------------ r7423 | hardaker | 2013-02-05 14:01:53 -0800 (Tue, 05 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewBox.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewBox.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp save the original line colors on mouse release ------------------------------------------------------------------------ r7422 | hardaker | 2013-02-05 14:01:29 -0800 (Tue, 05 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewBox.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewBox.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.h Make the box selections also act on arrow colors when selected ------------------------------------------------------------------------ r7421 | hardaker | 2013-02-05 14:01:15 -0800 (Tue, 05 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp move the zone label out of the box and only print one ------------------------------------------------------------------------ r7420 | hardaker | 2013-02-05 14:01:00 -0800 (Tue, 05 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewBox.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewBox.h Make the validation box blue when click-held ------------------------------------------------------------------------ r7419 | hardaker | 2013-02-05 14:00:29 -0800 (Tue, 05 Feb 2013) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewBox.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewBox.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro Move the box drawing into a separate class ------------------------------------------------------------------------ r7418 | hardaker | 2013-02-05 11:06:39 -0800 (Tue, 05 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSResources.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h Various warning squashes. ------------------------------------------------------------------------ r7417 | hardaker | 2013-02-05 11:06:24 -0800 (Tue, 05 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h save the straight validation line pref ------------------------------------------------------------------------ r7416 | hardaker | 2013-02-05 11:06:09 -0800 (Tue, 05 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h D /trunk/dnssec-tools/validator/apps/dnssec-nodes/qt_auto_properties.h A /trunk/dnssec-tools/validator/apps/dnssec-nodes/qtauto_properties.h (from /trunk/dnssec-tools/validator/apps/dnssec-nodes/qt_auto_properties.h:7415) rename qt_auto_properties ------------------------------------------------------------------------ r7415 | hardaker | 2013-02-05 11:05:50 -0800 (Tue, 05 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp minor improvements of drawing calculations ------------------------------------------------------------------------ r7414 | hardaker | 2013-02-05 11:05:37 -0800 (Tue, 05 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.h return a DSNOMATCH code on that status value ------------------------------------------------------------------------ r7413 | hardaker | 2013-02-05 11:05:14 -0800 (Tue, 05 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp remove debugging ------------------------------------------------------------------------ r7412 | hardaker | 2013-02-05 11:05:01 -0800 (Tue, 05 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp Much better arrow lines for validation diagrams ------------------------------------------------------------------------ r7411 | hardaker | 2013-02-05 11:04:48 -0800 (Tue, 05 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp minor cleanup ------------------------------------------------------------------------ r7410 | hardaker | 2013-02-05 11:04:34 -0800 (Tue, 05 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp slightly better lines with less overlap ------------------------------------------------------------------------ r7409 | hardaker | 2013-02-05 11:04:08 -0800 (Tue, 05 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/MainWindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidgetHolder.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidgetHolder.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h add a menu item for changing the line type ------------------------------------------------------------------------ r7408 | hardaker | 2013-02-05 10:50:09 -0800 (Tue, 05 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.h Use spline lines for drawing between validation boxes ------------------------------------------------------------------------ r7407 | tewok | 2013-02-04 17:51:45 -0800 (Mon, 04 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Deleted obsolete, commented-out 'viewimage' line. ------------------------------------------------------------------------ r7406 | tewok | 2013-02-04 17:50:36 -0800 (Mon, 04 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Deleted obsolete, commented-out 'viewimage' line. ------------------------------------------------------------------------ r7405 | tewok | 2013-02-04 17:50:19 -0800 (Mon, 04 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Deleted obsolete, commented-out 'viewimage' line. ------------------------------------------------------------------------ r7404 | tewok | 2013-02-04 17:32:39 -0800 (Mon, 04 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Modified comment for KSK rollover phases change. ------------------------------------------------------------------------ r7403 | tewok | 2013-02-04 17:27:53 -0800 (Mon, 04 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Modified KS rollover phases. ------------------------------------------------------------------------ r7402 | tewok | 2013-02-04 17:18:38 -0800 (Mon, 04 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lights Handle rollerd's new method of KSK rollover. ------------------------------------------------------------------------ r7401 | tewok | 2013-02-04 16:55:28 -0800 (Mon, 04 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/bubbles Deleted an obsolete pod warning. ------------------------------------------------------------------------ r7400 | tewok | 2013-02-04 16:50:29 -0800 (Mon, 04 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/demo-tools/README autods: KSK phase 5 instead of phase 6 ------------------------------------------------------------------------ r7399 | tewok | 2013-02-04 16:49:23 -0800 (Mon, 04 Feb 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/demo-tools/autods Look for KSK phase 5 instead of phase 6. ------------------------------------------------------------------------ r7398 | tewok | 2013-02-04 16:26:02 -0800 (Mon, 04 Feb 2013) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Handle rollerd's new method of KSK rollover. Removed some unused variables. ------------------------------------------------------------------------ r7397 | tewok | 2013-02-04 16:20:16 -0800 (Mon, 04 Feb 2013) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Modified step order of KSK rollover. - The key-rolling that used to take place in KSK phase 4 now takes place in KSK phase 7. - Old KSK phase 5 is new KSK phase 4. - Old KSK phase 6 is new KSK phase 5. ------------------------------------------------------------------------ r7394 | hardaker | 2013-02-01 10:22:49 -0800 (Fri, 01 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs.t test TLSA if Net::DNS > 0.72 ------------------------------------------------------------------------ r7393 | hardaker | 2013-02-01 10:22:35 -0800 (Fri, 01 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm parse TLSA ------------------------------------------------------------------------ r7392 | hardaker | 2013-02-01 10:22:22 -0800 (Fri, 01 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp change the data version and the DT version for submitting ------------------------------------------------------------------------ r7391 | hardaker | 2013-02-01 10:22:01 -0800 (Fri, 01 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/DnssecCheckVersion.h update to version 1.14.0.2 ------------------------------------------------------------------------ r7390 | hardaker | 2013-02-01 10:21:45 -0800 (Fri, 01 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml modify the submitted DT version number ------------------------------------------------------------------------ r7389 | hardaker | 2013-02-01 10:21:31 -0800 (Fri, 01 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.h M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.h M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml Add a DNAME check to the list of available tests. ------------------------------------------------------------------------ r7388 | hardaker | 2013-02-01 10:21:15 -0800 (Fri, 01 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone add dname records for each zone ------------------------------------------------------------------------ r7387 | hardaker | 2013-02-01 10:21:01 -0800 (Fri, 01 Feb 2013) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rr-dnssec.t ignore spacing issues for comparing rrsigs ------------------------------------------------------------------------ r7386 | hserus | 2013-01-31 18:45:23 -0800 (Thu, 31 Jan 2013) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_dane.c Return correct failure code when there is a DANE_SEL_PUBKEY and DANE_MATCH_EXACT mismatch. ------------------------------------------------------------------------ r7385 | rstory | 2013-01-31 11:02:28 -0800 (Thu, 31 Jan 2013) | 1 line Changed paths: A /trunk/dnssec-tools/apps/mozilla/bloodhound A /trunk/dnssec-tools/apps/mozilla/bloodhound/mozilla-central A /trunk/dnssec-tools/apps/mozilla/bloodhound/mozilla-central/bloodhound-dnssec-tools.tgz A /trunk/dnssec-tools/apps/mozilla/bloodhound/mozilla-central/bloodhound-icons.tgz A /trunk/dnssec-tools/apps/mozilla/bloodhound/mozilla-central/dt-bloodhound-0001-replace-mozilla-URLs.patch A /trunk/dnssec-tools/apps/mozilla/bloodhound/mozilla-central/dt-bloodhound-0002-branding-for-bloodhound.patch A /trunk/dnssec-tools/apps/mozilla/bloodhound/mozilla-central/dt-bloodhound-0003-update-bookmarks.patch patches, docs and icons for bloodhound ------------------------------------------------------------------------ r7384 | rstory | 2013-01-31 11:02:14 -0800 (Thu, 31 Jan 2013) | 1 line Changed paths: A /trunk/dnssec-tools/apps/mozilla/mozilla-firefox/mozilla-central/dt-browser-0001-update-browser-local-overrides-for-DNSSEC.patch (from /trunk/dnssec-tools/apps/mozilla/mozilla-firefox/mozilla-central/dt-browser-0015-update-browser-local-overrides-for-DNSSEC.patch:7383) D /trunk/dnssec-tools/apps/mozilla/mozilla-firefox/mozilla-central/dt-browser-0015-update-browser-local-overrides-for-DNSSEC.patch renumber patch ------------------------------------------------------------------------ r7383 | rstory | 2013-01-31 11:01:59 -0800 (Thu, 31 Jan 2013) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-nss-0001-DANE-patch-from-Suresh-2012-12-14.patch M /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-nss-0002-DANE-move-new-function-inside-braces.patch M /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-nss-0003-DANE-use-VAL_-CFLAGS-LDFLAGS-LIBS-as-needed.patch M /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-nss-0004-DANE-only-add-ssldane.c-for-MOZ_DNSSEC.patch M /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-nss-0005-DANE-keep-compiler-happy.patch M /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-nss-0006-DANE-patch-addendum-from-Suresh-130117.patch update to latest patches ------------------------------------------------------------------------ r7382 | rstory | 2013-01-31 11:01:46 -0800 (Thu, 31 Jan 2013) | 1 line Changed paths: D /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-dane-0016-nss-patch-from-Suresh-2012-12-14.patch D /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-dane-0017-manager-patch-from-Suresh-2012-12-14.patch D /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-dane-0018-move-new-function-inside-braces.patch D /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-dane-0019-use-VAL_-CFLAGS-LDFLAGS-LIBS-as-needed.patch D /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-dane-0020-only-add-ssldane.c-for-MOZ_DNSSEC.patch D /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-dane-0021-keep-compiler-happy.patch D /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-dane-0022-patch-addendum-from-Suresh-130117.patch A /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-nss-0001-DANE-patch-from-Suresh-2012-12-14.patch (from /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-dane-0016-nss-patch-from-Suresh-2012-12-14.patch:7381) A /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-nss-0002-DANE-move-new-function-inside-braces.patch (from /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-dane-0018-move-new-function-inside-braces.patch:7381) A /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-nss-0003-DANE-use-VAL_-CFLAGS-LDFLAGS-LIBS-as-needed.patch (from /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-dane-0019-use-VAL_-CFLAGS-LDFLAGS-LIBS-as-needed.patch:7381) A /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-nss-0004-DANE-only-add-ssldane.c-for-MOZ_DNSSEC.patch (from /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-dane-0020-only-add-ssldane.c-for-MOZ_DNSSEC.patch:7381) A /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-nss-0005-DANE-keep-compiler-happy.patch (from /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-dane-0021-keep-compiler-happy.patch:7381) A /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-nss-0006-DANE-patch-addendum-from-Suresh-130117.patch (from /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-dane-0022-patch-addendum-from-Suresh-130117.patch:7381) renumber patches, remove xulrunner patch ------------------------------------------------------------------------ r7381 | rstory | 2013-01-31 11:01:32 -0800 (Thu, 31 Jan 2013) | 1 line Changed paths: D /trunk/dnssec-tools/apps/mozilla/dane/mozilla-central/dt-dane-0016-nss-patch-from-Suresh-2012-12-14.patch D /trunk/dnssec-tools/apps/mozilla/dane/mozilla-central/dt-dane-0017-manager-patch-from-Suresh-2012-12-14.patch D /trunk/dnssec-tools/apps/mozilla/dane/mozilla-central/dt-dane-0018-move-new-function-inside-braces.patch D /trunk/dnssec-tools/apps/mozilla/dane/mozilla-central/dt-dane-0019-use-VAL_-CFLAGS-LDFLAGS-LIBS-as-needed.patch D /trunk/dnssec-tools/apps/mozilla/dane/mozilla-central/dt-dane-0020-only-add-ssldane.c-for-MOZ_DNSSEC.patch D /trunk/dnssec-tools/apps/mozilla/dane/mozilla-central/dt-dane-0021-keep-compiler-happy.patch D /trunk/dnssec-tools/apps/mozilla/dane/mozilla-central/dt-dane-0022-patch-addendum-from-Suresh-130117.patch A /trunk/dnssec-tools/apps/mozilla/mozilla-nss A /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central A /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-dane-0016-nss-patch-from-Suresh-2012-12-14.patch (from /trunk/dnssec-tools/apps/mozilla/dane/mozilla-central/dt-dane-0016-nss-patch-from-Suresh-2012-12-14.patch:7380) A /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-dane-0017-manager-patch-from-Suresh-2012-12-14.patch (from /trunk/dnssec-tools/apps/mozilla/dane/mozilla-central/dt-dane-0017-manager-patch-from-Suresh-2012-12-14.patch:7380) A /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-dane-0018-move-new-function-inside-braces.patch (from /trunk/dnssec-tools/apps/mozilla/dane/mozilla-central/dt-dane-0018-move-new-function-inside-braces.patch:7380) A /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-dane-0019-use-VAL_-CFLAGS-LDFLAGS-LIBS-as-needed.patch (from /trunk/dnssec-tools/apps/mozilla/dane/mozilla-central/dt-dane-0019-use-VAL_-CFLAGS-LDFLAGS-LIBS-as-needed.patch:7380) A /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-dane-0020-only-add-ssldane.c-for-MOZ_DNSSEC.patch (from /trunk/dnssec-tools/apps/mozilla/dane/mozilla-central/dt-dane-0020-only-add-ssldane.c-for-MOZ_DNSSEC.patch:7380) A /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-dane-0021-keep-compiler-happy.patch (from /trunk/dnssec-tools/apps/mozilla/dane/mozilla-central/dt-dane-0021-keep-compiler-happy.patch:7380) A /trunk/dnssec-tools/apps/mozilla/mozilla-nss/mozilla-central/dt-dane-0022-patch-addendum-from-Suresh-130117.patch (from /trunk/dnssec-tools/apps/mozilla/dane/mozilla-central/dt-dane-0022-patch-addendum-from-Suresh-130117.patch:7380) rename dane -> mozilla-nss ------------------------------------------------------------------------ r7380 | rstory | 2013-01-31 11:01:16 -0800 (Thu, 31 Jan 2013) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0001-add-dnssec-options-to-configure.patch M /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0002-use-NSPRs-new-DNSSEC-functionality.patch M /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0003-support-functions-in-preparation-for-async.patch M /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0004-use-NSPRs-new-async-functionality.patch M /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0005-make-netwerk-DNSSEC-validation-aware.patch M /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0006-add-DNSSEC-preferences-to-browser.patch A /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0007-add-DANE-checks-for-SSL-certs.patch update for f18, fixes, DANE ------------------------------------------------------------------------ r7379 | rstory | 2013-01-31 11:01:05 -0800 (Thu, 31 Jan 2013) | 1 line Changed paths: A /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0001-add-dnssec-options-to-configure.patch (from /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0009-add-dnssec-options-to-configure.patch:7378) A /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0002-use-NSPRs-new-DNSSEC-functionality.patch (from /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0010-use-NSPRs-new-DNSSEC-functionality.patch:7378) A /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0003-support-functions-in-preparation-for-async.patch (from /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0011-support-functions-in-preparation-for-async.patch:7378) A /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0004-use-NSPRs-new-async-functionality.patch (from /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0012-use-NSPRs-new-async-functionality.patch:7378) A /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0005-make-netwerk-DNSSEC-validation-aware.patch (from /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0013-make-netwerk-DNSSEC-validation-aware.patch:7378) A /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0006-add-DNSSEC-preferences-to-browser.patch (from /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0014-add-DNSSEC-preferences-to-browser.patch:7378) D /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0009-add-dnssec-options-to-configure.patch D /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0010-use-NSPRs-new-DNSSEC-functionality.patch D /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0011-support-functions-in-preparation-for-async.patch D /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0012-use-NSPRs-new-async-functionality.patch D /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0013-make-netwerk-DNSSEC-validation-aware.patch D /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0014-add-DNSSEC-preferences-to-browser.patch renumber patches ------------------------------------------------------------------------ r7378 | tewok | 2013-01-31 09:12:30 -0800 (Thu, 31 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Deleted some extraneous trailing spaces and tabs. ------------------------------------------------------------------------ r7377 | hserus | 2013-01-25 14:11:53 -0800 (Fri, 25 Jan 2013) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/curl A /trunk/dnssec-tools/apps/curl/README.curl A /trunk/dnssec-tools/apps/curl/curl-7.28.0.patch Add DANE patch for curl ------------------------------------------------------------------------ r7375 | hserus | 2013-01-25 13:22:13 -0800 (Fri, 25 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_dane.c Log the DANE usage value when validation fails. ------------------------------------------------------------------------ r7374 | hserus | 2013-01-25 13:20:37 -0800 (Fri, 25 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/dane_check.c Add log message for non-existant TLSA ------------------------------------------------------------------------ r7373 | hserus | 2013-01-25 08:30:05 -0800 (Fri, 25 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/dane_check.c Allow fallbacks to occur if a name server fails to respond ------------------------------------------------------------------------ r7372 | tewok | 2013-01-24 08:57:00 -0800 (Thu, 24 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added a note about DS records being included unless -nogends is given. ------------------------------------------------------------------------ r7371 | tewok | 2013-01-24 08:19:48 -0800 (Thu, 24 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager-2-installation.html Added note about multiple Owl users. ------------------------------------------------------------------------ r7370 | tewok | 2013-01-23 09:49:35 -0800 (Wed, 23 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-full-toc.html Valign rows to top. ------------------------------------------------------------------------ r7369 | tewok | 2013-01-23 09:49:11 -0800 (Wed, 23 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager-full-toc.html Valign rows to top. ------------------------------------------------------------------------ r7368 | tewok | 2013-01-23 09:44:42 -0800 (Wed, 23 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager.html Added link to toppedyest-level manual page. ------------------------------------------------------------------------ r7367 | tewok | 2013-01-23 09:40:00 -0800 (Wed, 23 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-full-toc.html Fixed a few section numbers. ------------------------------------------------------------------------ r7366 | tewok | 2013-01-23 09:39:13 -0800 (Wed, 23 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager.html Fixed link. ------------------------------------------------------------------------ r7365 | tewok | 2013-01-23 09:31:31 -0800 (Wed, 23 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager-6-mod-queries.html Adjusted titles. ------------------------------------------------------------------------ r7364 | tewok | 2013-01-23 09:24:11 -0800 (Wed, 23 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager-4-adding-sensor.html Minor title tweaks. ------------------------------------------------------------------------ r7363 | tewok | 2013-01-23 09:10:36 -0800 (Wed, 23 Jan 2013) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager-full-toc.html Full Table of Contents for Manager Installation Manual. ------------------------------------------------------------------------ r7362 | tewok | 2013-01-23 08:13:19 -0800 (Wed, 23 Jan 2013) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager-7-commands.html Brief descriptions of the Owl manager commands. ------------------------------------------------------------------------ r7361 | rstory | 2013-01-22 20:09:28 -0800 (Tue, 22 Jan 2013) | 1 line Changed paths: A /trunk/dnssec-tools/apps/mozilla/dane A /trunk/dnssec-tools/apps/mozilla/dane/mozilla-central A /trunk/dnssec-tools/apps/mozilla/dane/mozilla-central/dt-dane-0016-nss-patch-from-Suresh-2012-12-14.patch A /trunk/dnssec-tools/apps/mozilla/dane/mozilla-central/dt-dane-0017-manager-patch-from-Suresh-2012-12-14.patch A /trunk/dnssec-tools/apps/mozilla/dane/mozilla-central/dt-dane-0018-move-new-function-inside-braces.patch A /trunk/dnssec-tools/apps/mozilla/dane/mozilla-central/dt-dane-0019-use-VAL_-CFLAGS-LDFLAGS-LIBS-as-needed.patch A /trunk/dnssec-tools/apps/mozilla/dane/mozilla-central/dt-dane-0020-only-add-ssldane.c-for-MOZ_DNSSEC.patch A /trunk/dnssec-tools/apps/mozilla/dane/mozilla-central/dt-dane-0021-keep-compiler-happy.patch A /trunk/dnssec-tools/apps/mozilla/dane/mozilla-central/dt-dane-0022-patch-addendum-from-Suresh-130117.patch M /trunk/dnssec-tools/apps/mozilla/mozilla-firefox/mozilla-central/dt-browser-0015-update-browser-local-overrides-for-DNSSEC.patch M /trunk/dnssec-tools/apps/mozilla/mozilla-nspr/mozilla-central/dt-nspr-0001-getaddr-patch-for-mozilla-bug-699055.patch M /trunk/dnssec-tools/apps/mozilla/mozilla-nspr/mozilla-central/dt-nspr-0002-add-NSPR-log-module-for-DNS.patch M /trunk/dnssec-tools/apps/mozilla/mozilla-nspr/mozilla-central/dt-nspr-0003-add-dnssec-options-flags-to-configure-makefiles.patch M /trunk/dnssec-tools/apps/mozilla/mozilla-nspr/mozilla-central/dt-nspr-0004-add-DNSSEC-error-codes-and-text.patch M /trunk/dnssec-tools/apps/mozilla/mozilla-nspr/mozilla-central/dt-nspr-0005-factor-out-common-code-from-PR_GetAddrInfoByNam.patch M /trunk/dnssec-tools/apps/mozilla/mozilla-nspr/mozilla-central/dt-nspr-0006-header-definitions-for-new-APIs.patch M /trunk/dnssec-tools/apps/mozilla/mozilla-nspr/mozilla-central/dt-nspr-0007-add-dnssec-validation-to-prnetdb.patch M /trunk/dnssec-tools/apps/mozilla/mozilla-nspr/mozilla-central/dt-nspr-0008-update-getai-to-test-async-validation.patch A /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central A /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0009-add-dnssec-options-to-configure.patch A /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0010-use-NSPRs-new-DNSSEC-functionality.patch A /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0011-support-functions-in-preparation-for-async.patch A /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0012-use-NSPRs-new-async-functionality.patch A /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0013-make-netwerk-DNSSEC-validation-aware.patch A /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0014-add-DNSSEC-preferences-to-browser.patch update patches; add dane patches ------------------------------------------------------------------------ r7360 | rstory | 2013-01-22 20:08:56 -0800 (Tue, 22 Jan 2013) | 1 line Changed paths: A /trunk/dnssec-tools/apps/mozilla/mozilla-nspr A /trunk/dnssec-tools/apps/mozilla/mozilla-nspr/mozilla-central A /trunk/dnssec-tools/apps/mozilla/mozilla-nspr/mozilla-central/dt-nspr-0001-getaddr-patch-for-mozilla-bug-699055.patch (from /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/dt-nspr-0001-getaddr-patch-for-mozilla-bug-699055.patch:7359) A /trunk/dnssec-tools/apps/mozilla/mozilla-nspr/mozilla-central/dt-nspr-0002-add-NSPR-log-module-for-DNS.patch (from /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/dt-nspr-0002-add-NSPR-log-module-for-DNS.patch:7359) A /trunk/dnssec-tools/apps/mozilla/mozilla-nspr/mozilla-central/dt-nspr-0003-add-dnssec-options-flags-to-configure-makefiles.patch (from /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/dt-nspr-0003-add-dnssec-options-flags-to-configure-makefiles.patch:7359) A /trunk/dnssec-tools/apps/mozilla/mozilla-nspr/mozilla-central/dt-nspr-0004-add-DNSSEC-error-codes-and-text.patch (from /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/dt-nspr-0004-add-DNSSEC-error-codes-and-text.patch:7359) A /trunk/dnssec-tools/apps/mozilla/mozilla-nspr/mozilla-central/dt-nspr-0005-factor-out-common-code-from-PR_GetAddrInfoByNam.patch (from /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/dt-nspr-0005-factor-out-common-code-from-PR_GetAddrInfoByNam.patch:7359) A /trunk/dnssec-tools/apps/mozilla/mozilla-nspr/mozilla-central/dt-nspr-0006-header-definitions-for-new-APIs.patch (from /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/dt-nspr-0006-header-definitions-for-new-APIs.patch:7359) A /trunk/dnssec-tools/apps/mozilla/mozilla-nspr/mozilla-central/dt-nspr-0007-add-dnssec-validation-to-prnetdb.patch (from /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/dt-nspr-0007-add-dnssec-validation-to-prnetdb.patch:7359) A /trunk/dnssec-tools/apps/mozilla/mozilla-nspr/mozilla-central/dt-nspr-0008-update-getai-to-test-async-validation.patch (from /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/dt-nspr-0008-update-getai-to-test-async-validation.patch:7359) A /trunk/dnssec-tools/apps/mozilla/mozilla-nspr/nspr-spec.patch (from /trunk/dnssec-tools/apps/mozilla/nspr/nspr-spec.patch:7359) D /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/dt-nspr-0001-getaddr-patch-for-mozilla-bug-699055.patch D /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/dt-nspr-0002-add-NSPR-log-module-for-DNS.patch D /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/dt-nspr-0003-add-dnssec-options-flags-to-configure-makefiles.patch D /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/dt-nspr-0004-add-DNSSEC-error-codes-and-text.patch D /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/dt-nspr-0005-factor-out-common-code-from-PR_GetAddrInfoByNam.patch D /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/dt-nspr-0006-header-definitions-for-new-APIs.patch D /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/dt-nspr-0007-add-dnssec-validation-to-prnetdb.patch D /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/dt-nspr-0008-update-getai-to-test-async-validation.patch D /trunk/dnssec-tools/apps/mozilla/nspr/nspr-spec.patch rename nspr dir to mozilla-nspr to be consistent ------------------------------------------------------------------------ r7359 | rstory | 2013-01-22 20:08:31 -0800 (Tue, 22 Jan 2013) | 3 lines Changed paths: D /trunk/dnssec-tools/apps/mozilla/mozilla-base/mozilla-central/moz-base-0001-take-advantage-of-new-DNSSEC-functionality-in-NSPR.patch D /trunk/dnssec-tools/apps/mozilla/mozilla-base/mozilla-central/moz-base-0002-support-functions-in-preparation-for-async-support.patch D /trunk/dnssec-tools/apps/mozilla/mozilla-base/mozilla-central/moz-base-0003-take-advantage-of-new-async-functionality-in-NSPR.patch D /trunk/dnssec-tools/apps/mozilla/mozilla-base/mozilla-central/moz-base-0004-make-netwerk-DNSSEC-validation-aware.patch A /trunk/dnssec-tools/apps/mozilla/mozilla-firefox/mozilla-central/dt-browser-0015-update-browser-local-overrides-for-DNSSEC.patch (from /trunk/dnssec-tools/apps/mozilla/mozilla-firefox/mozilla-central/moz-firefox-0001-update-browser-local-overrides-for-DNSSEC.patch:7358) D /trunk/dnssec-tools/apps/mozilla/mozilla-firefox/mozilla-central/moz-firefox-0001-update-browser-local-overrides-for-DNSSEC.patch D /trunk/dnssec-tools/apps/mozilla/mozilla-firefox/mozilla-central/moz-firefox-0002-add-DNSSEC-preferences-to-browser.patch A /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/dt-nspr-0001-getaddr-patch-for-mozilla-bug-699055.patch (from /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/nspr-0001-getaddr-patch-for-mozilla-bug-699055.patch:7358) A /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/dt-nspr-0002-add-NSPR-log-module-for-DNS.patch (from /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/nspr-0002-add-NSPR-log-module-for-DNS.patch:7358) A /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/dt-nspr-0003-add-dnssec-options-flags-to-configure-makefiles.patch (from /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/nspr-0003-add-dnssec-options-flags-to-configure-and-makefiles.patch:7358) A /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/dt-nspr-0004-add-DNSSEC-error-codes-and-text.patch (from /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/nspr-0004-add-DNSSEC-error-codes-and-text.patch:7358) A /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/dt-nspr-0005-factor-out-common-code-from-PR_GetAddrInfoByNam.patch (from /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/nspr-0005-factor-out-common-code-from-PR_GetAddrInfoByName.patch:7358) A /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/dt-nspr-0006-header-definitions-for-new-APIs.patch (from /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/nspr-0006-header-definitions-for-Extended-DNSSEC-and-asynchron.patch:7358) A /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/dt-nspr-0007-add-dnssec-validation-to-prnetdb.patch (from /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/nspr-0007-add-dnssec-validation-to-prnetdb.patch:7358) A /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/dt-nspr-0008-update-getai-to-test-async-validation.patch (from /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/nspr-0008-update-getai-to-test-async-disable-validation.patch:7358) D /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/nspr-0001-getaddr-patch-for-mozilla-bug-699055.patch D /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/nspr-0002-add-NSPR-log-module-for-DNS.patch D /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/nspr-0003-add-dnssec-options-flags-to-configure-and-makefiles.patch D /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/nspr-0004-add-DNSSEC-error-codes-and-text.patch D /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/nspr-0005-factor-out-common-code-from-PR_GetAddrInfoByName.patch D /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/nspr-0006-header-definitions-for-Extended-DNSSEC-and-asynchron.patch D /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/nspr-0007-add-dnssec-validation-to-prnetdb.patch D /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/nspr-0008-update-getai-to-test-async-disable-validation.patch rename/delete patches - prep for more recent patches ------------------------------------------------------------------------ r7358 | hserus | 2013-01-22 18:24:05 -0800 (Tue, 22 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/dane_check.c Add capability to validate DANE record against SSL certificate ------------------------------------------------------------------------ r7357 | hserus | 2013-01-22 18:22:19 -0800 (Tue, 22 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_dane.c Update log level for certain log messages ------------------------------------------------------------------------ r7356 | tewok | 2013-01-22 17:46:58 -0800 (Tue, 22 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager-5-define-graphs.html Fixed section title. ------------------------------------------------------------------------ r7355 | tewok | 2013-01-22 17:42:09 -0800 (Tue, 22 Jan 2013) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager-6-mod-queries.html Info on modifying existing queries. ------------------------------------------------------------------------ r7354 | tewok | 2013-01-22 17:41:18 -0800 (Tue, 22 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-5-adding-queries.html Fixed forward reference. ------------------------------------------------------------------------ r7353 | tewok | 2013-01-22 17:24:50 -0800 (Tue, 22 Jan 2013) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager-5-define-graphs.html Provides information about defining graphs. ------------------------------------------------------------------------ r7352 | tewok | 2013-01-22 17:15:46 -0800 (Tue, 22 Jan 2013) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager-4-adding-sensor.html Gives steps needed to add a new sensor. ------------------------------------------------------------------------ r7351 | tewok | 2013-01-22 08:16:21 -0800 (Tue, 22 Jan 2013) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager-2-installation.html Installation procedures for Owl manager. ------------------------------------------------------------------------ r7350 | tewok | 2013-01-22 08:15:20 -0800 (Tue, 22 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-4-adding-sensor.html Removed extraneous article. ------------------------------------------------------------------------ r7349 | tewok | 2013-01-19 09:35:59 -0800 (Sat, 19 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-2-installation.html Added info on using rrsync for manager-pull. ------------------------------------------------------------------------ r7348 | tewok | 2013-01-19 08:46:26 -0800 (Sat, 19 Jan 2013) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager-3-about-queries.html Discussion on queries for Manager Install Manual. ------------------------------------------------------------------------ r7347 | tewok | 2013-01-19 08:44:18 -0800 (Sat, 19 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-2-installation.html M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-3-about-queries.html M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-4-adding-sensor.html Adjust section-specific TOCs. ------------------------------------------------------------------------ r7346 | tewok | 2013-01-18 16:38:09 -0800 (Fri, 18 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager.html Fixed a link. ------------------------------------------------------------------------ r7345 | tewok | 2013-01-18 16:34:34 -0800 (Fri, 18 Jan 2013) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager-1-overview.html Overview of manager and sensor for Manager Installation Manual. ------------------------------------------------------------------------ r7344 | tewok | 2013-01-18 16:25:34 -0800 (Fri, 18 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-1-overview.html Clarified manager's transfer comment. ------------------------------------------------------------------------ r7343 | tewok | 2013-01-18 16:11:11 -0800 (Fri, 18 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-1-overview.html Clarified sentence about data transfer. ------------------------------------------------------------------------ r7342 | tewok | 2013-01-18 16:02:07 -0800 (Fri, 18 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager.html Fixed a link. ------------------------------------------------------------------------ r7341 | tewok | 2013-01-18 15:56:00 -0800 (Fri, 18 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager.html Section title fixes. ------------------------------------------------------------------------ r7340 | tewok | 2013-01-18 15:51:14 -0800 (Fri, 18 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager.html Fixed a few section titles. ------------------------------------------------------------------------ r7339 | tewok | 2013-01-18 15:48:34 -0800 (Fri, 18 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager.html M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-1-overview.html M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-2-installation.html M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-3-about-queries.html M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-4-adding-sensor.html M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-5-adding-queries.html M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-6-commands.html M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor.html Guide -> Manual ------------------------------------------------------------------------ r7338 | tewok | 2013-01-18 15:46:08 -0800 (Fri, 18 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-guide.html Guide -> Manual ------------------------------------------------------------------------ r7337 | tewok | 2013-01-18 15:43:53 -0800 (Fri, 18 Jan 2013) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/install-manager.html Top-level page for manager installation guide. ------------------------------------------------------------------------ r7336 | tewok | 2013-01-18 15:24:55 -0800 (Fri, 18 Jan 2013) | 2 lines Changed paths: D /trunk/dnssec-tools/apps/owl-monitor/docs/install-full-toc.html Deleting this version in favor of the split sensor/manager version. ------------------------------------------------------------------------ r7335 | tewok | 2013-01-18 15:19:43 -0800 (Fri, 18 Jan 2013) | 2 lines Changed paths: D /trunk/dnssec-tools/apps/owl-monitor/docs/install-0-intro.html D /trunk/dnssec-tools/apps/owl-monitor/docs/install-1-overview.html D /trunk/dnssec-tools/apps/owl-monitor/docs/install-2-installation.html D /trunk/dnssec-tools/apps/owl-monitor/docs/install-3-about-queries.html D /trunk/dnssec-tools/apps/owl-monitor/docs/install-4-adding-sensor.html D /trunk/dnssec-tools/apps/owl-monitor/docs/install-5-define-graphs.html D /trunk/dnssec-tools/apps/owl-monitor/docs/install-6-adding-queries.html D /trunk/dnssec-tools/apps/owl-monitor/docs/install-7-commands.html Deleting these versions in favor of the split sensor/manager versions. ------------------------------------------------------------------------ r7334 | hserus | 2013-01-18 14:25:30 -0800 (Fri, 18 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Make some additional checks when checking for non-existence ------------------------------------------------------------------------ r7333 | tewok | 2013-01-18 10:19:22 -0800 (Fri, 18 Jan 2013) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-full-toc.html Full table of contents for sensor installation manual. ------------------------------------------------------------------------ r7332 | tewok | 2013-01-18 10:02:48 -0800 (Fri, 18 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-1-overview.html Clarified a reference to manager command section. ------------------------------------------------------------------------ r7331 | tewok | 2013-01-18 09:58:45 -0800 (Fri, 18 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-2-installation.html Fixed links. ------------------------------------------------------------------------ r7330 | tewok | 2013-01-18 09:52:42 -0800 (Fri, 18 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-4-adding-sensor.html Fixed links. ------------------------------------------------------------------------ r7329 | tewok | 2013-01-18 09:44:16 -0800 (Fri, 18 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-6-commands.html Fixed the title. ------------------------------------------------------------------------ r7328 | tewok | 2013-01-18 09:42:44 -0800 (Fri, 18 Jan 2013) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-5-adding-queries.html Describes how to add and delete queries. ------------------------------------------------------------------------ r7327 | hserus | 2013-01-18 09:39:06 -0800 (Fri, 18 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c Fix typo in function name ------------------------------------------------------------------------ r7326 | tewok | 2013-01-18 09:29:27 -0800 (Fri, 18 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-4-adding-sensor.html Fixed a link. ------------------------------------------------------------------------ r7325 | hserus | 2013-01-18 09:20:49 -0800 (Fri, 18 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_dane.c Ensure that shared lock on context is unlocked where necessary. ------------------------------------------------------------------------ r7324 | tewok | 2013-01-18 09:17:15 -0800 (Fri, 18 Jan 2013) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-4-adding-sensor.html Describes how to add a new sensor. ------------------------------------------------------------------------ r7323 | hserus | 2013-01-18 08:46:01 -0800 (Fri, 18 Jan 2013) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c Add debug code (ifdef'ed out for now) to display signature inception and expiration times ------------------------------------------------------------------------ r7322 | hserus | 2013-01-18 08:43:42 -0800 (Fri, 18 Jan 2013) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator-internal.h M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_context.h M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_resquery.h Probe for IPv6 and IPv4 enabled interfaces and cache the result in the context structure. Look for glue records of a particular type only if an interface of that type is enabled. ------------------------------------------------------------------------ r7321 | tewok | 2013-01-17 16:21:37 -0800 (Thu, 17 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-3-about-queries.html Added note about mixed configuration of transferring hosts. ------------------------------------------------------------------------ r7320 | tewok | 2013-01-17 15:36:25 -0800 (Thu, 17 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-3-about-queries.html Added a toc. ------------------------------------------------------------------------ r7319 | tewok | 2013-01-17 15:16:38 -0800 (Thu, 17 Jan 2013) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-3-about-queries.html Added a section on transferring data. Added a section on sensor heartbeat. ------------------------------------------------------------------------ r7316 | tewok | 2013-01-17 09:45:39 -0800 (Thu, 17 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-1-overview.html M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-2-installation.html M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-3-about-queries.html Fixed title. ------------------------------------------------------------------------ r7315 | tewok | 2013-01-16 16:41:57 -0800 (Wed, 16 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/manager/libexec/owl-perfdata M /trunk/dnssec-tools/apps/owl-monitor/manager/libexec/owl-stethoscope Fixed contact address. ------------------------------------------------------------------------ r7314 | tewok | 2013-01-16 16:35:26 -0800 (Wed, 16 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/manager/bin/owl-transfer-mgr Only transfer from sensors with a sensor data directory defined in config file. ------------------------------------------------------------------------ r7313 | tewok | 2013-01-16 16:30:42 -0800 (Wed, 16 Jan 2013) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/manager/bin/owl-transfer-mgr Daemon to transfer Owl data from sensors to manager. ------------------------------------------------------------------------ r7312 | tewok | 2013-01-16 16:27:50 -0800 (Wed, 16 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/manager/bin/owl-archold M /trunk/dnssec-tools/apps/owl-monitor/manager/bin/owl-dataarch-mgr Fixed contact address. ------------------------------------------------------------------------ r7311 | tewok | 2013-01-16 16:26:17 -0800 (Wed, 16 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-archold M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-dataarch M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-transfer Fixed contact address. ------------------------------------------------------------------------ r7310 | tewok | 2013-01-16 16:23:40 -0800 (Wed, 16 Jan 2013) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/common/manpages/owl-config.pod Added new 'data sensors' field. Added discussion of 'remote ssh-users' new third subfield. ------------------------------------------------------------------------ r7309 | tewok | 2013-01-16 16:01:43 -0800 (Wed, 16 Jan 2013) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/common/perllib/owlutils.pm Added the "data sensors" lines for the config file. This will be used by owl-transfer-mgr. ------------------------------------------------------------------------ r7308 | hserus | 2013-01-15 12:40:35 -0800 (Tue, 15 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_dane.c Handle aliases in the DANE checks ------------------------------------------------------------------------ r7301 | tewok | 2013-01-03 06:44:27 -0800 (Thu, 03 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/common/perllib/owlutils.pm Added transfer-mgr-args as a host subkey. ------------------------------------------------------------------------ r7300 | tewok | 2013-01-02 11:57:11 -0800 (Wed, 02 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-heartbeat Modified to use renamed values in owlutils.pm. ------------------------------------------------------------------------ r7299 | tewok | 2013-01-02 11:55:58 -0800 (Wed, 02 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-dnstimer Modified to use renamed values in owlutils.pm. ------------------------------------------------------------------------ r7298 | tewok | 2013-01-02 11:44:21 -0800 (Wed, 02 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-transfer Minor comment fix. Very minor. ------------------------------------------------------------------------ r7297 | tewok | 2013-01-02 11:43:18 -0800 (Wed, 02 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-status Cosmetic spacing fixes. ------------------------------------------------------------------------ r7296 | tewok | 2013-01-02 11:37:21 -0800 (Wed, 02 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/sensor/conf/owl.conf Generalized config lines. ------------------------------------------------------------------------ r7295 | tewok | 2013-01-02 11:35:11 -0800 (Wed, 02 Jan 2013) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/common/manpages (from /trunk/dnssec-tools/apps/owl-monitor/sensor/manpages:7289) A /trunk/dnssec-tools/apps/owl-monitor/common/perllib (from /trunk/dnssec-tools/apps/owl-monitor/sensor/perllib:7263) R /trunk/dnssec-tools/apps/owl-monitor/common/perllib/owlutils.pm (from /trunk/dnssec-tools/apps/owl-monitor/sensor/perllib/owlutils.pm:7290) Moved from sensor/ ------------------------------------------------------------------------ r7294 | tewok | 2013-01-02 11:34:22 -0800 (Wed, 02 Jan 2013) | 2 lines Changed paths: D /trunk/dnssec-tools/apps/owl-monitor/sensor/manpages Moved to common directory. ------------------------------------------------------------------------ r7293 | tewok | 2013-01-02 11:33:44 -0800 (Wed, 02 Jan 2013) | 2 lines Changed paths: D /trunk/dnssec-tools/apps/owl-monitor/sensor/perllib Moved to common directory. ------------------------------------------------------------------------ r7292 | hardaker | 2013-01-02 11:32:41 -0800 (Wed, 02 Jan 2013) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm Update Fast.pm Version Number: 1.18 ------------------------------------------------------------------------ r7291 | tewok | 2013-01-02 11:30:37 -0800 (Wed, 02 Jan 2013) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/common Adding new directory for files common to sensor and manager. ------------------------------------------------------------------------ r7290 | tewok | 2013-01-02 11:26:40 -0800 (Wed, 02 Jan 2013) | 10 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/sensor/perllib/owlutils.pm Generalized config file so it isn't sensor-specific: - "sensor" keyword changed to "host" keyword - "manager" keyword changed to "remote" keyword - "dnstimerargs" subkey changed to "dnstimer-args" - "transferargs" subkey changed to "transfer-args" - added "transfer-mgr-args" ------------------------------------------------------------------------ r7289 | tewok | 2013-01-02 11:22:03 -0800 (Wed, 02 Jan 2013) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/sensor/manpages/owl-config.pod Generalized the config file so it isn't sensor-specific. ------------------------------------------------------------------------ r7288 | hardaker | 2013-01-02 11:17:57 -0800 (Wed, 02 Jan 2013) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs.t allow for + characters in the SOA rname ------------------------------------------------------------------------ r7287 | hardaker | 2013-01-02 11:17:41 -0800 (Wed, 02 Jan 2013) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm don't use new_from_hash since it's no longer around (bug #81757) ------------------------------------------------------------------------ r7286 | hardaker | 2013-01-02 09:13:32 -0800 (Wed, 02 Jan 2013) | 1 line Changed paths: M /trunk/dnssec-tools/COPYING M /trunk/dnssec-tools/INSTALL M /trunk/dnssec-tools/README M /trunk/dnssec-tools/apps/README M /trunk/dnssec-tools/apps/mozilla/README.firefox M /trunk/dnssec-tools/apps/mozilla/README.nspr M /trunk/dnssec-tools/apps/mozilla/README.xulrunner M /trunk/dnssec-tools/apps/nagios/README M /trunk/dnssec-tools/apps/nagios/diff-status.c M /trunk/dnssec-tools/apps/nagios/dt_donuts M /trunk/dnssec-tools/apps/nagios/dt_trustman M /trunk/dnssec-tools/apps/nagios/dt_zonestat M /trunk/dnssec-tools/apps/nagios/dt_zonetimer M /trunk/dnssec-tools/apps/nagios/dtnagobj M /trunk/dnssec-tools/apps/owl-monitor/manager/bin/owl-archdata M /trunk/dnssec-tools/apps/owl-monitor/manager/bin/owl-archold M /trunk/dnssec-tools/apps/owl-monitor/manager/bin/owl-dataarch-mgr M /trunk/dnssec-tools/apps/owl-monitor/manager/bin/owl-initsensor M /trunk/dnssec-tools/apps/owl-monitor/manager/bin/owl-monthly M /trunk/dnssec-tools/apps/owl-monitor/manager/bin/owl-needs M /trunk/dnssec-tools/apps/owl-monitor/manager/bin/owl-newsensor M /trunk/dnssec-tools/apps/owl-monitor/manager/libexec/owl-dnswatch M /trunk/dnssec-tools/apps/owl-monitor/manager/libexec/owl-perfdata M /trunk/dnssec-tools/apps/owl-monitor/manager/libexec/owl-stethoscope M /trunk/dnssec-tools/apps/owl-monitor/manager/nagios-files/owl-sensor-heartbeat.cgi M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-archold M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-dataarch M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-dnstimer M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-heartbeat M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-needs M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-sensord M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-status M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-transfer M /trunk/dnssec-tools/apps/owl-monitor/sensor/conf/owl.conf M /trunk/dnssec-tools/apps/owl-monitor/sensor/manpages/owl-config.pod M /trunk/dnssec-tools/apps/owl-monitor/sensor/manpages/owl-data.pod M /trunk/dnssec-tools/apps/owl-monitor/sensor/perllib/owlutils.pm M /trunk/dnssec-tools/apps/sendmail/README M /trunk/dnssec-tools/apps/zabbix/README M /trunk/dnssec-tools/apps/zabbix/backup-zabbix M /trunk/dnssec-tools/apps/zabbix/item.fields M /trunk/dnssec-tools/apps/zabbix/rollstate M /trunk/dnssec-tools/apps/zabbix/uemstats M /trunk/dnssec-tools/apps/zabbix/zonestate M /trunk/dnssec-tools/podmantex M /trunk/dnssec-tools/podtrans M /trunk/dnssec-tools/testing/README M /trunk/dnssec-tools/tools/Makefile.PL M /trunk/dnssec-tools/tools/convertar/Makefile.PL M /trunk/dnssec-tools/tools/convertar/convertar M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Makefile.PL M /trunk/dnssec-tools/tools/demos/Makefile M /trunk/dnssec-tools/tools/demos/README M /trunk/dnssec-tools/tools/demos/demo-tools/README M /trunk/dnssec-tools/tools/demos/demo-tools/autods M /trunk/dnssec-tools/tools/demos/demo-tools/makezones M /trunk/dnssec-tools/tools/demos/demo-tools/phaser M /trunk/dnssec-tools/tools/demos/dtrealms-basic/Makefile M /trunk/dnssec-tools/tools/demos/dtrealms-basic/README M /trunk/dnssec-tools/tools/demos/dtrealms-basic/mkconffiles M /trunk/dnssec-tools/tools/demos/dtrealms-basic/phaser M /trunk/dnssec-tools/tools/demos/dtrealms-basic/rundemo M /trunk/dnssec-tools/tools/demos/dtrealms-basic/savefiles/example-Makefile M /trunk/dnssec-tools/tools/demos/dtrealms-basic/savefiles/test-Makefile M /trunk/dnssec-tools/tools/demos/rollerd-basic/Makefile M /trunk/dnssec-tools/tools/demos/rollerd-basic/README M /trunk/dnssec-tools/tools/demos/rollerd-basic/rundemo M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/Makefile M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/README M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/rundemo M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/Makefile M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/README M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/rundemo M /trunk/dnssec-tools/tools/demos/rollerd-single/Makefile M /trunk/dnssec-tools/tools/demos/rollerd-single/README M /trunk/dnssec-tools/tools/demos/rollerd-single/rundemo M /trunk/dnssec-tools/tools/demos/rollerd-split-view/Makefile M /trunk/dnssec-tools/tools/demos/rollerd-split-view/README M /trunk/dnssec-tools/tools/demos/rollerd-split-view/rundemo M /trunk/dnssec-tools/tools/demos/rollerd-subdirs/Makefile M /trunk/dnssec-tools/tools/demos/rollerd-subdirs/README M /trunk/dnssec-tools/tools/demos/rollerd-subdirs/rundemo M /trunk/dnssec-tools/tools/demos/rollerd-vastzones/Makefile M /trunk/dnssec-tools/tools/demos/rollerd-vastzones/README M /trunk/dnssec-tools/tools/demos/rollerd-vastzones/makezones M /trunk/dnssec-tools/tools/demos/rollerd-vastzones/rundemo M /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/Makefile M /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/README M /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/rundemo M /trunk/dnssec-tools/tools/dnspktflow/Makefile.PL M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/donuts/Makefile.PL M /trunk/dnssec-tools/tools/donuts/Rule.pm M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/donuts/donutsd M /trunk/dnssec-tools/tools/donuts/rules/check_nameservers.txt M /trunk/dnssec-tools/tools/donuts/rules/dns.errors.txt M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/nsec_check.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt M /trunk/dnssec-tools/tools/drawvalmap/Makefile.PL M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap M /trunk/dnssec-tools/tools/etc/Makefile.PL M /trunk/dnssec-tools/tools/etc/README M /trunk/dnssec-tools/tools/etc/dnssec-tools/blinkenlights.conf.pod M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod M /trunk/dnssec-tools/tools/logwatch/README M /trunk/dnssec-tools/tools/maketestzone/Makefile.PL M /trunk/dnssec-tools/tools/maketestzone/maketestzone M /trunk/dnssec-tools/tools/mapper/Makefile.PL M /trunk/dnssec-tools/tools/mapper/mapper M /trunk/dnssec-tools/tools/modules/BootStrap.pm M /trunk/dnssec-tools/tools/modules/Makefile.PL M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm M /trunk/dnssec-tools/tools/modules/README M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm M /trunk/dnssec-tools/tools/modules/conf.pm.in M /trunk/dnssec-tools/tools/modules/defaults.pm M /trunk/dnssec-tools/tools/modules/dnssectools.pm M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/keyrec.pod M /trunk/dnssec-tools/tools/modules/realm.pm M /trunk/dnssec-tools/tools/modules/realm.pod M /trunk/dnssec-tools/tools/modules/realmmgr.pm M /trunk/dnssec-tools/tools/modules/rolllog.pm M /trunk/dnssec-tools/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/modules/rollrec.pm M /trunk/dnssec-tools/tools/modules/rollrec.pod M /trunk/dnssec-tools/tools/modules/tests/Makefile.PL M /trunk/dnssec-tools/tools/modules/tests/README M /trunk/dnssec-tools/tools/modules/tests/test-conf M /trunk/dnssec-tools/tools/modules/tests/test-keyrec M /trunk/dnssec-tools/tools/modules/tests/test-rollmgr M /trunk/dnssec-tools/tools/modules/tests/test-rollrec M /trunk/dnssec-tools/tools/modules/tests/test-timetrans M /trunk/dnssec-tools/tools/modules/tests/test-toolopts1 M /trunk/dnssec-tools/tools/modules/tests/test-toolopts2 M /trunk/dnssec-tools/tools/modules/tests/test-toolopts3 M /trunk/dnssec-tools/tools/modules/timetrans.pm M /trunk/dnssec-tools/tools/modules/tooloptions.pm M /trunk/dnssec-tools/tools/scripts/Makefile.PL M /trunk/dnssec-tools/tools/scripts/README M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/bubbles M /trunk/dnssec-tools/tools/scripts/buildrealms M /trunk/dnssec-tools/tools/scripts/check-zone-expiration M /trunk/dnssec-tools/tools/scripts/cleanarch M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtck M /trunk/dnssec-tools/tools/scripts/dtconf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/dtrealms M /trunk/dnssec-tools/tools/scripts/dtreqmods M /trunk/dnssec-tools/tools/scripts/dtupdkrf M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/getds M /trunk/dnssec-tools/tools/scripts/grandvizier M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/keymod M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lights M /trunk/dnssec-tools/tools/scripts/lsdnssec M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsrealm M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/realmchk M /trunk/dnssec-tools/tools/scripts/realmctl M /trunk/dnssec-tools/tools/scripts/realminit M /trunk/dnssec-tools/tools/scripts/realmset M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rolllog M /trunk/dnssec-tools/tools/scripts/rollrec-editor M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/rp-wrapper M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/trustman M /trunk/dnssec-tools/tools/scripts/zonesigner M /trunk/dnssec-tools/validator/README M /trunk/dnssec-tools/validator/apps/README M /trunk/dnssec-tools/validator/apps/dane_check.c M /trunk/dnssec-tools/validator/apps/getaddr.c M /trunk/dnssec-tools/validator/apps/gethost.c M /trunk/dnssec-tools/validator/apps/getname.c M /trunk/dnssec-tools/validator/apps/getquery.c M /trunk/dnssec-tools/validator/apps/getrrset.c M /trunk/dnssec-tools/validator/apps/libsres_test.c M /trunk/dnssec-tools/validator/apps/libval_check_conf.c M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/apps/validator_driver.h M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod M /trunk/dnssec-tools/validator/doc/dt-getaddr.pod M /trunk/dnssec-tools/validator/doc/dt-gethost.pod M /trunk/dnssec-tools/validator/doc/dt-getname.pod M /trunk/dnssec-tools/validator/doc/dt-getquery.pod M /trunk/dnssec-tools/validator/doc/dt-getrrset.pod M /trunk/dnssec-tools/validator/doc/dt-libval_check_conf.pod M /trunk/dnssec-tools/validator/doc/dt-validate.pod M /trunk/dnssec-tools/validator/doc/libsres-implementation-notes M /trunk/dnssec-tools/validator/doc/libsres.pod M /trunk/dnssec-tools/validator/doc/libval-implementation-notes M /trunk/dnssec-tools/validator/doc/libval.pod M /trunk/dnssec-tools/validator/doc/libval_shim.pod M /trunk/dnssec-tools/validator/doc/val_get_rrset.pod M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.pod M /trunk/dnssec-tools/validator/doc/val_gethostbyname.pod M /trunk/dnssec-tools/validator/doc/val_res_query.pod M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/include/validator/val_dane.h M /trunk/dnssec-tools/validator/include/validator/val_errors.h M /trunk/dnssec-tools/validator/include/validator/validator-compat.h M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/include/validator-internal.h M /trunk/dnssec-tools/validator/libsres/res_mkquery.h M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libsres/res_support.c M /trunk/dnssec-tools/validator/libsres/res_support.h M /trunk/dnssec-tools/validator/libval/README M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_assertion.h M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_cache.h M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_context.h M /trunk/dnssec-tools/validator/libval/val_crypto.c M /trunk/dnssec-tools/validator/libval/val_crypto.h M /trunk/dnssec-tools/validator/libval/val_dane.c M /trunk/dnssec-tools/validator/libval/val_get_rrset.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_parse.c M /trunk/dnssec-tools/validator/libval/val_parse.h M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_resquery.h M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_support.h M /trunk/dnssec-tools/validator/libval/val_verify.c M /trunk/dnssec-tools/validator/libval/val_verify.h M /trunk/dnssec-tools/validator/libval/val_x_query.c copyright update ------------------------------------------------------------------------ r7282 | tewok | 2012-12-31 15:44:46 -0800 (Mon, 31 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-transfer Renamed a variable from $user to $sensor; reflected that view to comments. ------------------------------------------------------------------------ r7281 | tewok | 2012-12-31 15:37:56 -0800 (Mon, 31 Dec 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-transfer Improved construction of the rsync command line so the src/dest arguments are clearer. Improved an error message. ------------------------------------------------------------------------ r7280 | hardaker | 2012-12-31 06:43:10 -0800 (Mon, 31 Dec 2012) | 1 line Changed paths: M /trunk/dnssec-tools/testing/Makefile.in added new test invocations to the Makefile.in file ------------------------------------------------------------------------ r7279 | tewok | 2012-12-29 15:25:52 -0800 (Sat, 29 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-3-about-queries.html Discussion of Owl sensor queries. ------------------------------------------------------------------------ r7278 | tewok | 2012-12-29 15:19:09 -0800 (Sat, 29 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-2-installation.html Fixed two URLs. ------------------------------------------------------------------------ r7277 | tewok | 2012-12-29 15:15:58 -0800 (Sat, 29 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-6-commands.html Owl Sensor commands. ------------------------------------------------------------------------ r7276 | tewok | 2012-12-29 15:14:44 -0800 (Sat, 29 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-2-installation.html Sensor-installation instructions. ------------------------------------------------------------------------ r7275 | tewok | 2012-12-29 15:13:38 -0800 (Sat, 29 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor-1-overview.html Overview of Owl system. ------------------------------------------------------------------------ r7274 | tewok | 2012-12-29 15:12:34 -0800 (Sat, 29 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/install-sensor.html Main page for Owl Sensor Installation Manual. ------------------------------------------------------------------------ r7273 | tewok | 2012-12-29 15:10:25 -0800 (Sat, 29 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/install-guide.html Top-level page for the two Owl installation manuals. ------------------------------------------------------------------------ r7272 | tewok | 2012-12-28 17:37:17 -0800 (Fri, 28 Dec 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added a note that briefly mentions some of serialincr()'s limitations and abilities. ------------------------------------------------------------------------ r7271 | tewok | 2012-12-28 17:11:20 -0800 (Fri, 28 Dec 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Reworked big chunks of serialincr(). This now handles SOA lines that include the optional TTL value. It also does a *much* better job of handling parentheses on the SOA line. ------------------------------------------------------------------------ r7270 | hardaker | 2012-12-27 09:12:28 -0800 (Thu, 27 Dec 2012) | 1 line Changed paths: A /trunk/dnssec-tools/testing/zonesigner-soas A /trunk/dnssec-tools/testing/zonesigner-soas/example.com.basic A /trunk/dnssec-tools/testing/zonesigner-soas/example.com.commented A /trunk/dnssec-tools/testing/zonesigner-soas/example.com.multi-line A /trunk/dnssec-tools/testing/zonesigner-soas/example.com.withttl test files for zonesigner's serial number incrementing ------------------------------------------------------------------------ r7269 | hardaker | 2012-12-27 09:12:16 -0800 (Thu, 27 Dec 2012) | 1 line Changed paths: M /trunk/dnssec-tools/testing/t/011zonesigner-soa-tests.t display the last serial number it should be an increment from ------------------------------------------------------------------------ r7268 | hardaker | 2012-12-27 09:12:06 -0800 (Thu, 27 Dec 2012) | 1 line Changed paths: M /trunk/dnssec-tools/testing/t/011zonesigner-soa-tests.t Load the zone from Zonefile::Fast and check the serial number after each run ------------------------------------------------------------------------ r7267 | hardaker | 2012-12-27 09:11:55 -0800 (Thu, 27 Dec 2012) | 1 line Changed paths: M /trunk/dnssec-tools/testing/t/011zonesigner-soa-tests.t copy files into place, cd, and execute ZS and test exit status ------------------------------------------------------------------------ r7266 | hardaker | 2012-12-27 09:11:40 -0800 (Thu, 27 Dec 2012) | 1 line Changed paths: A /trunk/dnssec-tools/testing/t/011zonesigner-soa-tests.t initial template for a series of zonesigner soa tests ------------------------------------------------------------------------ r7265 | tewok | 2012-12-22 15:39:20 -0800 (Sat, 22 Dec 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner In serialincr(), account for the stuff preceding "IN SOA" in the line-finding regexp. ------------------------------------------------------------------------ r7264 | tewok | 2012-12-22 15:06:34 -0800 (Sat, 22 Dec 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed use of line copy in serialincr(). Don't need to delete lparens from it, and we'll actually use the copy in checking for SOA lines. ------------------------------------------------------------------------ r7263 | tewok | 2012-12-18 09:05:58 -0800 (Tue, 18 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/sensor/manpages/owl-data.pod Bolded SEE ALSO entry. ------------------------------------------------------------------------ r7262 | tewok | 2012-12-18 09:05:00 -0800 (Tue, 18 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/sensor/perllib/owlutils.pm Bolded pod SEE ALSO entries. ------------------------------------------------------------------------ r7261 | tewok | 2012-12-18 09:02:38 -0800 (Tue, 18 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-dnstimer M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-heartbeat M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-status Bolded entries in SEE ALSO section. ------------------------------------------------------------------------ r7260 | tewok | 2012-12-18 09:00:00 -0800 (Tue, 18 Dec 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-needs Clarified that this is for sensor. Bolded the "SEE ALSO" entries. ------------------------------------------------------------------------ r7259 | tewok | 2012-12-18 08:54:40 -0800 (Tue, 18 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/manager/bin/owl-needs Checks for necessary Perl modules on Owl manager. ------------------------------------------------------------------------ r7258 | tewok | 2012-12-18 08:43:58 -0800 (Tue, 18 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-needs Checks if the sensor host has all the required Perl modules. ------------------------------------------------------------------------ r7257 | tewok | 2012-12-17 14:31:02 -0800 (Mon, 17 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-2-installation.html Added a few installation examples. ------------------------------------------------------------------------ r7256 | tewok | 2012-12-17 13:31:27 -0800 (Mon, 17 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-2-installation.html Added example ssh-keygen command. ------------------------------------------------------------------------ r7255 | tewok | 2012-12-17 13:08:14 -0800 (Mon, 17 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/owl-manager-data.odp M /trunk/dnssec-tools/apps/owl-monitor/docs/owl-manager-data.png Fixed "X executes Y" arrowheads. ------------------------------------------------------------------------ r7254 | tewok | 2012-12-17 12:55:27 -0800 (Mon, 17 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-2-installation.html Added user-creation examples to 2.1.1. ------------------------------------------------------------------------ r7253 | tewok | 2012-12-17 12:23:46 -0800 (Mon, 17 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/owl-sensor-data.odp M /trunk/dnssec-tools/apps/owl-monitor/docs/owl-sensor-data.png Modified heads of "X executes Y" arrows. ------------------------------------------------------------------------ r7252 | tewok | 2012-12-17 12:05:37 -0800 (Mon, 17 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-2-installation.html Added several suggestions to 2.1.1 for possible names for the Owl user. ------------------------------------------------------------------------ r7251 | hardaker | 2012-12-17 10:37:10 -0800 (Mon, 17 Dec 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c check check for bytes < 0 rather than -1 ------------------------------------------------------------------------ r7250 | hardaker | 2012-12-17 10:36:57 -0800 (Mon, 17 Dec 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure run autoconf ------------------------------------------------------------------------ r7249 | hardaker | 2012-12-17 10:17:54 -0800 (Mon, 17 Dec 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c don't bother checking EAGAIN in complete_read() ------------------------------------------------------------------------ r7248 | hardaker | 2012-12-17 09:57:44 -0800 (Mon, 17 Dec 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator/validator-compat.h M /trunk/dnssec-tools/validator/include/validator/validator-config.h.in check for the size_t and ssize_t types and define something if they don't exist ------------------------------------------------------------------------ r7247 | hardaker | 2012-12-17 09:50:16 -0800 (Mon, 17 Dec 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c use a signed size_t for bytes returned from recv() and check it with signedness ------------------------------------------------------------------------ r7246 | hardaker | 2012-12-17 09:49:59 -0800 (Mon, 17 Dec 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qmlapplicationviewer/qmlapplicationviewer.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/qmlapplicationviewer/qmlapplicationviewer.h M /trunk/dnssec-tools/validator/apps/dnssec-check/qmlapplicationviewer/qmlapplicationviewer.pri new versions of the application viewer from a new qtcreator ------------------------------------------------------------------------ r7245 | tewok | 2012-12-14 09:56:45 -0800 (Fri, 14 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-full-toc.html Added new section 4.2.9. ------------------------------------------------------------------------ r7244 | tewok | 2012-12-14 09:56:17 -0800 (Fri, 14 Dec 2012) | 5 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-4-adding-sensor.html Added new section 4.2.9 for graphing modifications. Fixed path in owl-newsensor example. Clarified sentence in owl-hostgroups.cfg section. ------------------------------------------------------------------------ r7243 | tewok | 2012-12-14 09:53:14 -0800 (Fri, 14 Dec 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-2-installation.html Fixed pathnames in drraw.conf section. Fixed verb tense in a sentence. ------------------------------------------------------------------------ r7242 | rstory | 2012-12-13 08:11:41 -0800 (Thu, 13 Dec 2012) | 1 line Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-1-overview.html slight clarification of subject ------------------------------------------------------------------------ r7241 | rstory | 2012-12-12 20:47:55 -0800 (Wed, 12 Dec 2012) | 7 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c fine tune res_io source management - new res_io_retry_source: try source again immediately - new res_io_reset_source: try next address for server - res_io_cancel_source: try next server - update many places that used simple CLOSESOCK to use new routines, which should jumpstart retries ------------------------------------------------------------------------ r7240 | rstory | 2012-12-12 20:47:48 -0800 (Wed, 12 Dec 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c tweak socket reading instead of continue on socket error, continue on anything besides success. ------------------------------------------------------------------------ r7239 | rstory | 2012-12-12 20:47:40 -0800 (Wed, 12 Dec 2012) | 7 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c tweak tcp read function - use MSG_DONTWAIT if available - retry on EAGAIN - bail on any other error - log socket shutdown, incomplete reads, and error as appropriate ------------------------------------------------------------------------ r7238 | rstory | 2012-12-12 11:22:52 -0800 (Wed, 12 Dec 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c optional code to check for fd leaks ------------------------------------------------------------------------ r7237 | rstory | 2012-12-12 11:22:40 -0800 (Wed, 12 Dec 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c fix fd leak close config file fd for empty file case ------------------------------------------------------------------------ r7236 | tewok | 2012-12-12 10:42:56 -0800 (Wed, 12 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-2-installation.html Fixed a path. ------------------------------------------------------------------------ r7235 | tewok | 2012-12-10 17:08:07 -0800 (Mon, 10 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-4-adding-sensor.html Minor adjustments to the file's TOC. ------------------------------------------------------------------------ r7234 | tewok | 2012-12-10 16:08:36 -0800 (Mon, 10 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-0-intro.html Added a "sponsors" section to the bottom. ------------------------------------------------------------------------ r7233 | tewok | 2012-12-10 11:29:43 -0800 (Mon, 10 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-2-installation.html Removed an unneeded module from the modules list. ------------------------------------------------------------------------ r7232 | tewok | 2012-12-10 11:23:30 -0800 (Mon, 10 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-dnstimer Removed unnecessary log message. ------------------------------------------------------------------------ r7230 | rstory | 2012-12-09 19:43:23 -0800 (Sun, 09 Dec 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator-compat.h use internal namser defs on OpenBSD ------------------------------------------------------------------------ r7229 | rstory | 2012-12-09 19:42:50 -0800 (Sun, 09 Dec 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/Makefile.in M /trunk/dnssec-tools/validator/apps/Makefile.in move test/leaktest targets into apps makefile ------------------------------------------------------------------------ r7228 | rstory | 2012-12-09 19:41:44 -0800 (Sun, 09 Dec 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/getaddr.c test for macro before using it ------------------------------------------------------------------------ r7227 | tewok | 2012-12-08 18:07:58 -0800 (Sat, 08 Dec 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-dnstimer Removed the logging thread completely. It was burning huge amounts of computrons and wasn't actually needed. ------------------------------------------------------------------------ r7226 | tewok | 2012-12-08 16:25:43 -0800 (Sat, 08 Dec 2012) | 5 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-dnstimer Added better handling of log messages when threaded or forked. Added pod describing threaded/forked behavior. For the sake of generality, removed references to root nameservers. Renamed a couple routines for clarity. ------------------------------------------------------------------------ r7225 | hardaker | 2012-12-07 09:33:22 -0800 (Fri, 07 Dec 2012) | 1 line Changed paths: M /trunk/dnssec-tools/apps/qt/dnssec-test/DNSSECStatus.h M /trunk/dnssec-tools/apps/qt/dnssec-test/MainWindow.cpp M /trunk/dnssec-tools/apps/qt/dnssec-test/MainWindow.h M /trunk/dnssec-tools/apps/qt/dnssec-test/dnssec-test.pro revert the qt4 tests accidentially converted to qt5 headers ------------------------------------------------------------------------ r7224 | hardaker | 2012-12-07 09:33:08 -0800 (Fri, 07 Dec 2012) | 1 line Changed paths: A /trunk/dnssec-tools/apps/qt5/qml-test A /trunk/dnssec-tools/apps/qt5/qml-test/README A /trunk/dnssec-tools/apps/qt5/qml-test/test.qml qml test for qt5 ------------------------------------------------------------------------ r7223 | hardaker | 2012-12-07 09:32:54 -0800 (Fri, 07 Dec 2012) | 1 line Changed paths: M /trunk/dnssec-tools/apps/qt/dnssec-test/DNSSECStatus.h M /trunk/dnssec-tools/apps/qt/dnssec-test/MainWindow.cpp M /trunk/dnssec-tools/apps/qt/dnssec-test/MainWindow.h M /trunk/dnssec-tools/apps/qt/dnssec-test/dnssec-test.pro A /trunk/dnssec-tools/apps/qt5/dnssec-test A /trunk/dnssec-tools/apps/qt5/dnssec-test/DNSSECStatus.cpp A /trunk/dnssec-tools/apps/qt5/dnssec-test/DNSSECStatus.h (from /trunk/dnssec-tools/apps/qt/dnssec-test/DNSSECStatus.h:7222) A /trunk/dnssec-tools/apps/qt5/dnssec-test/MainWindow.cpp (from /trunk/dnssec-tools/apps/qt/dnssec-test/MainWindow.cpp:7222) A /trunk/dnssec-tools/apps/qt5/dnssec-test/MainWindow.h (from /trunk/dnssec-tools/apps/qt/dnssec-test/MainWindow.h:7222) A /trunk/dnssec-tools/apps/qt5/dnssec-test/MainWindow.ui A /trunk/dnssec-tools/apps/qt5/dnssec-test/README A /trunk/dnssec-tools/apps/qt5/dnssec-test/dnssec-test.pro (from /trunk/dnssec-tools/apps/qt/dnssec-test/dnssec-test.pro:7222) A /trunk/dnssec-tools/apps/qt5/dnssec-test/dnssec-tests.txt A /trunk/dnssec-tools/apps/qt5/dnssec-test/main.cpp A /trunk/dnssec-tools/apps/qt5/dnssec-test/ui_MainWindow.h qt5 version of dnssec-test ------------------------------------------------------------------------ r7222 | hardaker | 2012-12-07 09:32:33 -0800 (Fri, 07 Dec 2012) | 1 line Changed paths: A /trunk/dnssec-tools/apps/qt5 A /trunk/dnssec-tools/apps/qt5/README A /trunk/dnssec-tools/apps/qt5/qt5.patch Added a patch for doing dnssec lookups by default in qt5 ------------------------------------------------------------------------ r7221 | rstory | 2012-12-06 17:48:06 -0800 (Thu, 06 Dec 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in add tests for lib for ssl functions (used by dane) ------------------------------------------------------------------------ r7220 | rstory | 2012-12-06 17:47:59 -0800 (Thu, 06 Dec 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/Makefile.in don't hardcode validate app name in test targets ------------------------------------------------------------------------ r7219 | tewok | 2012-12-06 17:06:18 -0800 (Thu, 06 Dec 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-dnstimer When running unthreaded, each query process handles its own logging instead of sending it to a logging process. ------------------------------------------------------------------------ r7218 | tewok | 2012-12-06 10:58:40 -0800 (Thu, 06 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/docs/install-2-installation.html Added note about threaded vs. nonthreaded executions. ------------------------------------------------------------------------ r7217 | tewok | 2012-12-06 10:55:10 -0800 (Thu, 06 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/install-full-toc.html Full table of contents for Owl Installation Manual. ------------------------------------------------------------------------ r7216 | tewok | 2012-12-06 10:54:53 -0800 (Thu, 06 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/install-7-commands.html Owl command index. ------------------------------------------------------------------------ r7215 | tewok | 2012-12-06 10:54:37 -0800 (Thu, 06 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/install-6-adding-queries.html Instructions for adding new queries. ------------------------------------------------------------------------ r7214 | tewok | 2012-12-06 10:54:08 -0800 (Thu, 06 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/install-5-define-graphs.html Discussion of defining graphs for Owl. ------------------------------------------------------------------------ r7213 | tewok | 2012-12-06 10:53:30 -0800 (Thu, 06 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/install-4-adding-sensor.html Instructions for adding an Owl sensor. ------------------------------------------------------------------------ r7212 | tewok | 2012-12-06 10:53:11 -0800 (Thu, 06 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/install-3-about-queries.html Discussion of queries. ------------------------------------------------------------------------ r7211 | tewok | 2012-12-06 10:52:57 -0800 (Thu, 06 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/install-2-installation.html Installation instructions for Owl. ------------------------------------------------------------------------ r7210 | tewok | 2012-12-06 10:52:10 -0800 (Thu, 06 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/install-1-overview.html Overview of Owl. ------------------------------------------------------------------------ r7209 | tewok | 2012-12-06 10:51:09 -0800 (Thu, 06 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/install-0-intro.html Introduction to Owl installation guide. ------------------------------------------------------------------------ r7208 | tewok | 2012-12-06 10:43:16 -0800 (Thu, 06 Dec 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-dnstimer If Perl or the O/S isn't thread-enabled, then each query will be run in its own process. ------------------------------------------------------------------------ r7207 | tewok | 2012-12-06 10:35:07 -0800 (Thu, 06 Dec 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-transfer Added the -confdir option. Added logging. ------------------------------------------------------------------------ r7206 | tewok | 2012-12-06 09:27:25 -0800 (Thu, 06 Dec 2012) | 9 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-sensord Minor fixes: Deleted some unused variables. Used $NAME rather than hardcoded name. Modified a few log messages. Deleted some debugging code. Properly specified non-arg in owl_setup() call. Changed logging to log info messages instead of warnings. ------------------------------------------------------------------------ r7205 | tewok | 2012-12-06 09:22:25 -0800 (Thu, 06 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/sensor/perllib/owlutils.pm Allow better specification of non-args for owl_setup(). ------------------------------------------------------------------------ r7204 | tewok | 2012-12-06 09:18:28 -0800 (Thu, 06 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/sensor/conf/owl.conf Used full argument name in transferargs. ------------------------------------------------------------------------ r7203 | tewok | 2012-12-04 10:13:40 -0800 (Tue, 04 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-dnstimer Remove some obsolete testing code. ------------------------------------------------------------------------ r7202 | tewok | 2012-12-04 09:39:24 -0800 (Tue, 04 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-dnstimer Require that Perl threading be available. ------------------------------------------------------------------------ r7201 | tewok | 2012-12-03 13:20:26 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-archold M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-dataarch M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-dnstimer M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-heartbeat M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-sensord M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-status M /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-transfer Fixed program versions. ------------------------------------------------------------------------ r7200 | tewok | 2012-12-03 10:59:16 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/manager/libexec/owl-dnswatch Replaced another reference to site-specific directories with example names. ------------------------------------------------------------------------ r7199 | tewok | 2012-12-03 10:27:35 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/owl-sensor-data.odp A /trunk/dnssec-tools/apps/owl-monitor/docs/owl-sensor-data.png Diagram showing data flow on the Owl sensor. ------------------------------------------------------------------------ r7198 | tewok | 2012-12-03 10:26:54 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/owl-manager-data.odp A /trunk/dnssec-tools/apps/owl-monitor/docs/owl-manager-data.png Diagram showing dataflow on the Owl manager. ------------------------------------------------------------------------ r7197 | tewok | 2012-12-03 10:23:13 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs/owl-topography.odp A /trunk/dnssec-tools/apps/owl-monitor/docs/owl-topography.png Diagram showing the topography of two example Owl monitoring setups. ------------------------------------------------------------------------ r7196 | tewok | 2012-12-03 10:20:29 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/manager/nagios-files/example-side.php M /trunk/dnssec-tools/apps/owl-monitor/manager/nagios-files/owl-sensor-heartbeat.cgi Replaced references to site-specific directories with example names. ------------------------------------------------------------------------ r7195 | tewok | 2012-12-03 10:18:27 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/manager/libexec/owl-stethoscope Replaced references to site-specific directories with example names. ------------------------------------------------------------------------ r7194 | tewok | 2012-12-03 10:18:08 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/manager/libexec/owl-perfdata Replaced references to site-specific directories with example names. ------------------------------------------------------------------------ r7193 | tewok | 2012-12-03 10:17:26 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/manager/libexec/owl-dnswatch Replaced references to site-specific directories with example names. ------------------------------------------------------------------------ r7192 | tewok | 2012-12-03 10:14:30 -0800 (Mon, 03 Dec 2012) | 3 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/manager/nagios-objects/sensor42.cfg Example objects required for handling a single Owl sensor. These objects will normally be built by owl-newsensor. ------------------------------------------------------------------------ r7191 | tewok | 2012-12-03 10:12:13 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/manager/nagios-objects/owl-services.cfg Template service object required for monitoring DNS data for Owl Monitor. ------------------------------------------------------------------------ r7190 | tewok | 2012-12-03 10:11:39 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/manager/nagios-objects/owl-hosts.cfg Template host objects required for monitoring DNS data for Owl Monitor. ------------------------------------------------------------------------ r7189 | tewok | 2012-12-03 10:11:00 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/manager/nagios-objects/owl-hostgroups.cfg Example hostgroup object required for monitoring DNS data for Owl Monitor. ------------------------------------------------------------------------ r7188 | tewok | 2012-12-03 10:10:14 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/manager/nagios-objects/owl-contacts.cfg Contact objects required for monitoring DNS data for Owl Monitor. ------------------------------------------------------------------------ r7187 | tewok | 2012-12-03 10:09:14 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/manager/nagios-objects/owl-commands.cfg Command objects required for monitoring DNS data for Owl Monitor. ------------------------------------------------------------------------ r7186 | tewok | 2012-12-03 10:07:48 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/manager/nagios-objects/nagios.cfg-owl.mods Mods to nagios.cfg to include Owl object files. ------------------------------------------------------------------------ r7185 | tewok | 2012-12-03 09:59:31 -0800 (Mon, 03 Dec 2012) | 3 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/manager/nagios-files/owl-sensor-heartbeat.cgi Script run by the webserver in order to register that an Owl sensor has sent a "heartbeat" signal. ------------------------------------------------------------------------ r7184 | tewok | 2012-12-03 09:58:41 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/manager/nagios-files/example-side.php Example lines that may be added to Nagios' side.php file. ------------------------------------------------------------------------ r7183 | tewok | 2012-12-03 09:57:34 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/manager/nagios-files/README Briefly describes files in nagios-files directory. ------------------------------------------------------------------------ r7182 | tewok | 2012-12-03 09:56:09 -0800 (Mon, 03 Dec 2012) | 3 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/manager/nagiosgraph-files/ng-owl-map Code for nagiosgraph map file so it will do The Right Thing with Owl sensor data. ------------------------------------------------------------------------ r7181 | tewok | 2012-12-03 09:54:44 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/manager/nagiosgraph-files/ng-owl-conf Recommended settings for nagiosgraph config file. ------------------------------------------------------------------------ r7180 | tewok | 2012-12-03 09:51:55 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/manager/README Brief description of contents of manager source directory. ------------------------------------------------------------------------ r7179 | tewok | 2012-12-03 09:50:03 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/owl-monitor/manager/libexec/owl-dnswatch Small grammar fix in pod. ------------------------------------------------------------------------ r7178 | tewok | 2012-12-03 09:48:39 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/manager/libexec/owl-stethoscope Nagios plugin to retrieve Owl sensor's heartbeat data. ------------------------------------------------------------------------ r7177 | tewok | 2012-12-03 09:47:50 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/manager/libexec/owl-perfdata Front-end to handling Nagios performance data for the Owl Monitor. ------------------------------------------------------------------------ r7176 | tewok | 2012-12-03 09:46:44 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/manager/libexec/owl-dnswatch Nagios plugin to retrieve DNS response data from an Owl sensor. ------------------------------------------------------------------------ r7175 | tewok | 2012-12-03 09:37:52 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/manager/bin/owl-newsensor Builds Nagios objects for a new Owl sensor. ------------------------------------------------------------------------ r7174 | tewok | 2012-12-03 09:37:17 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/manager/bin/owl-monthly Makes monthly archives of previously archived Owl monitor data. ------------------------------------------------------------------------ r7173 | tewok | 2012-12-03 09:36:42 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/manager/bin/owl-initsensor Initializes files and directories for new Owl sensors. ------------------------------------------------------------------------ r7172 | tewok | 2012-12-03 09:36:10 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/manager/bin/owl-dataarch-mgr Archives Owl sensor data on an Owl manager. ------------------------------------------------------------------------ r7171 | tewok | 2012-12-03 09:35:24 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/manager/bin/owl-archold Archives archived Owl sensor data. ------------------------------------------------------------------------ r7170 | tewok | 2012-12-03 09:34:38 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/manager/bin/owl-archdata Archives DNS response data from Owl sensors. ------------------------------------------------------------------------ r7169 | tewok | 2012-12-03 08:46:41 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/manager/bin A /trunk/dnssec-tools/apps/owl-monitor/manager/libexec A /trunk/dnssec-tools/apps/owl-monitor/manager/nagios-files A /trunk/dnssec-tools/apps/owl-monitor/manager/nagios-objects A /trunk/dnssec-tools/apps/owl-monitor/manager/nagiosgraph-files Directories for Owl manager files. ------------------------------------------------------------------------ r7168 | tewok | 2012-12-03 08:36:53 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/sensor/perllib/owlutils.pm Utility routines for the Owl sensor. ------------------------------------------------------------------------ r7167 | tewok | 2012-12-03 08:36:15 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/sensor/manpages/owl-data.pod Manpage describing the data file format for the Owl sensor. ------------------------------------------------------------------------ r7166 | tewok | 2012-12-03 08:35:47 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/sensor/manpages/owl-config.pod Manpage describing the configuration file of the Owl sensor. ------------------------------------------------------------------------ r7165 | tewok | 2012-12-03 08:34:53 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/sensor/conf/owl.conf Example configuration file for an Owl sensor. ------------------------------------------------------------------------ r7164 | tewok | 2012-12-03 08:32:54 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-archold A /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-dataarch A /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-dnstimer A /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-heartbeat A /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-sensord A /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-status A /trunk/dnssec-tools/apps/owl-monitor/sensor/bin/owl-transfer Scripts for Owl sensor. ------------------------------------------------------------------------ r7163 | tewok | 2012-12-03 08:30:50 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/sensor/bin A /trunk/dnssec-tools/apps/owl-monitor/sensor/conf A /trunk/dnssec-tools/apps/owl-monitor/sensor/manpages A /trunk/dnssec-tools/apps/owl-monitor/sensor/perllib And here are a few subdirectories for the sensor. ------------------------------------------------------------------------ r7162 | tewok | 2012-12-03 08:29:43 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor/docs A /trunk/dnssec-tools/apps/owl-monitor/manager A /trunk/dnssec-tools/apps/owl-monitor/sensor Added a few more directories for Owl stuff. ------------------------------------------------------------------------ r7161 | tewok | 2012-12-03 08:26:21 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/owl-monitor Top-level directory for Owl Monitor software and documents. ------------------------------------------------------------------------ r7160 | tewok | 2012-12-03 08:03:59 -0800 (Mon, 03 Dec 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm M /trunk/dnssec-tools/tools/modules/dnssectools.pm M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/realm.pm M /trunk/dnssec-tools/tools/modules/realmmgr.pm M /trunk/dnssec-tools/tools/modules/rolllog.pm M /trunk/dnssec-tools/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/modules/rollrec.pm M /trunk/dnssec-tools/tools/modules/timetrans.pm M /trunk/dnssec-tools/tools/modules/tooloptions.pm Adjusted version number. ------------------------------------------------------------------------ r7157 | hserus | 2012-11-20 11:22:18 -0800 (Tue, 20 Nov 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/val_dane.h M /trunk/dnssec-tools/validator/libval/val_dane.c Rename VAL_DANE_MISSING_TLSA to VAL_DANE_IGNORE_TLSA ------------------------------------------------------------------------ r7156 | hserus | 2012-11-20 10:20:06 -0800 (Tue, 20 Nov 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/val_dane.h M /trunk/dnssec-tools/validator/libval/val_dane.c Add function to check DANE use-cases for openssl-based SSL objects ------------------------------------------------------------------------ r7154 | hserus | 2012-11-12 12:04:54 -0800 (Mon, 12 Nov 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/val_dane.h M /trunk/dnssec-tools/validator/libval/val_dane.c Properly handle internal to DER conversions. Add debugging output ------------------------------------------------------------------------ r7153 | hserus | 2012-11-12 12:01:09 -0800 (Mon, 12 Nov 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/dane_check.c Print queried name in output ------------------------------------------------------------------------ r7152 | hserus | 2012-11-08 10:27:08 -0800 (Thu, 08 Nov 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/dane_check.c Output selector, type and usage fields for the TLSA record ------------------------------------------------------------------------ r7151 | hserus | 2012-11-08 10:25:51 -0800 (Thu, 08 Nov 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/val_dane.h M /trunk/dnssec-tools/validator/libval/val_dane.c Add function to check selector and type fields for the TLSA record ------------------------------------------------------------------------ r7148 | hardaker | 2012-10-24 21:36:17 -0700 (Wed, 24 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/DNSSECStatusFilter.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Legend.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp check for authoritative answers ------------------------------------------------------------------------ r7147 | hardaker | 2012-10-24 21:36:05 -0700 (Wed, 24 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS NEWS reformatting ------------------------------------------------------------------------ r7146 | hardaker | 2012-10-24 21:35:56 -0700 (Wed, 24 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.cpp Catch NXDomains ------------------------------------------------------------------------ r7143 | hardaker | 2012-10-15 11:35:24 -0700 (Mon, 15 Oct 2012) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-check/DnssecCheckVersion.h added the version number file ------------------------------------------------------------------------ r7142 | hardaker | 2012-10-15 11:15:37 -0700 (Mon, 15 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.h M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.h M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml move all version numbers to a central header ------------------------------------------------------------------------ r7141 | hardaker | 2012-10-15 11:15:17 -0700 (Mon, 15 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml fix dnssec-check version modification ------------------------------------------------------------------------ r7140 | hardaker | 2012-10-15 11:09:22 -0700 (Mon, 15 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp fix the DNSSEC-Check version number ------------------------------------------------------------------------ r7139 | hardaker | 2012-10-15 11:09:12 -0700 (Mon, 15 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp version number fix ------------------------------------------------------------------------ r7138 | hardaker | 2012-10-15 11:09:00 -0700 (Mon, 15 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml fix spaces ------------------------------------------------------------------------ r7134 | hardaker | 2012-10-11 22:21:34 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/Makefile.top libtool update ------------------------------------------------------------------------ r7132 | hardaker | 2012-10-11 22:16:12 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/ChangeLog Update for verison 1.14 ------------------------------------------------------------------------ r7131 | hardaker | 2012-10-11 22:11:48 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp fix version number ------------------------------------------------------------------------ r7130 | hardaker | 2012-10-11 22:08:52 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/apps/nagios/dtnagobj M /trunk/dnssec-tools/tools/convertar/convertar M /trunk/dnssec-tools/tools/demos/demo-tools/makezones M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap M /trunk/dnssec-tools/tools/maketestzone/maketestzone M /trunk/dnssec-tools/tools/mapper/mapper M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/bubbles M /trunk/dnssec-tools/tools/scripts/buildrealms M /trunk/dnssec-tools/tools/scripts/check-zone-expiration M /trunk/dnssec-tools/tools/scripts/cleanarch M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtck M /trunk/dnssec-tools/tools/scripts/dtconf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/dtrealms M /trunk/dnssec-tools/tools/scripts/dtreqmods M /trunk/dnssec-tools/tools/scripts/dtupdkrf M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/getds M /trunk/dnssec-tools/tools/scripts/grandvizier M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/keymod M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lights M /trunk/dnssec-tools/tools/scripts/lsdnssec M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsrealm M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/realmchk M /trunk/dnssec-tools/tools/scripts/realmctl M /trunk/dnssec-tools/tools/scripts/realminit M /trunk/dnssec-tools/tools/scripts/realmset M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rolllog M /trunk/dnssec-tools/tools/scripts/rollrec-editor M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/rp-wrapper M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/trustman M /trunk/dnssec-tools/tools/scripts/zonesigner M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.cpp Update Version Number: 1.14 ------------------------------------------------------------------------ r7129 | hardaker | 2012-10-11 22:08:15 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml quote amp's properly ------------------------------------------------------------------------ r7128 | hardaker | 2012-10-11 22:07:21 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS minor update ------------------------------------------------------------------------ r7127 | hardaker | 2012-10-11 22:03:04 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS NEWS updates ------------------------------------------------------------------------ r7126 | hardaker | 2012-10-11 14:43:53 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp set a busy cursor during validation attempts ------------------------------------------------------------------------ r7125 | hardaker | 2012-10-11 14:10:04 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp Have color and edge color changes trigger an update ------------------------------------------------------------------------ r7124 | hardaker | 2012-10-11 14:02:34 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSResources.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSResources.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp show data found during validate calls ------------------------------------------------------------------------ r7123 | hardaker | 2012-10-11 14:02:25 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSResources.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSResources.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.cpp pull some resource data out of the packet stream ------------------------------------------------------------------------ r7122 | hardaker | 2012-10-11 14:02:15 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.cpp Only add data if the length of it is > 0 ------------------------------------------------------------------------ r7121 | hardaker | 2012-10-11 14:02:06 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.cpp Increase the column count ------------------------------------------------------------------------ r7120 | hardaker | 2012-10-11 14:01:57 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.h display the (empty) data ------------------------------------------------------------------------ r7119 | hardaker | 2012-10-11 14:01:47 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.h add the ability to collect real data to display ------------------------------------------------------------------------ r7118 | hardaker | 2012-10-11 13:53:55 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/MainWindow.cpp add ctl-q to quit ------------------------------------------------------------------------ r7117 | hardaker | 2012-10-11 13:53:46 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml Updated version number to 1.14 ------------------------------------------------------------------------ r7116 | hardaker | 2012-10-11 13:53:36 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.h A /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidgetHolder.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidgetHolder.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp added validation view scaling support ------------------------------------------------------------------------ r7115 | hardaker | 2012-10-11 13:53:25 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.h Implement a scroll-wheel scaling ------------------------------------------------------------------------ r7114 | hardaker | 2012-10-11 13:53:15 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp shrink the default validation scale a bit more ------------------------------------------------------------------------ r7113 | hserus | 2012-10-11 11:13:45 -0700 (Thu, 11 Oct 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Define NS_MAXDNAME in case we were not able to find it from another header file ------------------------------------------------------------------------ r7112 | hardaker | 2012-10-11 09:13:41 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp Fix node updates by having dnsdata get passed the node reference ------------------------------------------------------------------------ r7111 | hardaker | 2012-10-11 06:17:57 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h Implement the auto-validate on SERVFAIL ability ------------------------------------------------------------------------ r7110 | hardaker | 2012-10-11 06:17:47 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/MainWindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h Add an option for auto-verifying records after a servFail is seen ------------------------------------------------------------------------ r7109 | hardaker | 2012-10-11 06:17:37 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/DNSSECStatusFilter.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Legend.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp Handle parsing of servfails and color them pinkish ------------------------------------------------------------------------ r7108 | hardaker | 2012-10-11 06:17:26 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp update the node data for more signatures found during validation ------------------------------------------------------------------------ r7107 | hardaker | 2012-10-11 06:17:18 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.h Added a routine to convert astatus values too ------------------------------------------------------------------------ r7106 | hardaker | 2012-10-11 06:17:08 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.h Remove trailing dots from addNodeNames() too ------------------------------------------------------------------------ r7105 | hardaker | 2012-10-11 06:16:58 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp always check for trailing "."s and a root name of "" ------------------------------------------------------------------------ r7104 | hardaker | 2012-10-11 06:16:49 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp Make the validate button update the status in the detailsViewer ------------------------------------------------------------------------ r7103 | hardaker | 2012-10-11 06:16:39 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/MainWindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h pass the graphwidget object around to enable validation change updates ------------------------------------------------------------------------ r7102 | hardaker | 2012-10-11 06:16:27 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp Add the right type on validation ------------------------------------------------------------------------ r7101 | hardaker | 2012-10-11 06:16:17 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSResources.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSResources.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro Move the typeToName and nameToType routines into a support class ------------------------------------------------------------------------ r7100 | hardaker | 2012-10-11 06:16:06 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/MainWindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp Add an option to always update the lookup line ------------------------------------------------------------------------ r7099 | hardaker | 2012-10-11 06:15:56 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/MainWindow.cpp Fix typo ------------------------------------------------------------------------ r7098 | hardaker | 2012-10-11 06:15:47 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp fix the connection for new nodes creating during new lookups ------------------------------------------------------------------------ r7097 | hardaker | 2012-10-11 06:15:37 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.h slightly delay the validate call for a GUI update ------------------------------------------------------------------------ r7096 | hardaker | 2012-10-11 06:15:28 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp Add a context menu item to set the lineEdt text ------------------------------------------------------------------------ r7095 | hardaker | 2012-10-11 06:15:17 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/Effect.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp Warning fixes ------------------------------------------------------------------------ r7094 | hardaker | 2012-10-11 06:15:05 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/MainWindow.cpp Add a send button ------------------------------------------------------------------------ r7093 | hardaker | 2012-10-11 06:14:56 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h Add new data to the table if it comes in ------------------------------------------------------------------------ r7092 | hardaker | 2012-10-11 06:14:46 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/MainWindow.cpp Set the default lookup text to www.dnssec-tools.org ------------------------------------------------------------------------ r7091 | hardaker | 2012-10-11 06:14:37 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.h The DNSData object emits status changed signals and the viewer track changes ------------------------------------------------------------------------ r7090 | hardaker | 2012-10-11 06:14:27 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h Added the ability for DNSData nodes to emit status changed signals ------------------------------------------------------------------------ r7089 | hardaker | 2012-10-11 06:14:17 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.h create a setNode function to completely change the data out ------------------------------------------------------------------------ r7088 | hardaker | 2012-10-11 06:14:07 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.h Start to set up for adding and changing data on the fly ------------------------------------------------------------------------ r7087 | hardaker | 2012-10-11 06:13:57 -0700 (Thu, 11 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro link to the local libraries if possible ------------------------------------------------------------------------ r7086 | hserus | 2012-10-10 12:35:54 -0700 (Wed, 10 Oct 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/NEWS Clarify that we only have TLSA support, not full DANE support ------------------------------------------------------------------------ r7085 | hserus | 2012-10-10 07:59:36 -0700 (Wed, 10 Oct 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/NEWS Add initial list of newsworthy items for libval ------------------------------------------------------------------------ r7084 | hserus | 2012-10-10 07:29:26 -0700 (Wed, 10 Oct 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/NEWS Fix indentation of old news items ------------------------------------------------------------------------ r7083 | hserus | 2012-10-10 07:14:39 -0700 (Wed, 10 Oct 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Enable async validation to work with DLV ------------------------------------------------------------------------ r7081 | hserus | 2012-10-08 08:59:49 -0700 (Mon, 08 Oct 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_log.c Change definition of val_rrset_rec->val_rrset_server so that applications do not have a depdendency on the defintion of struct sockaddr_storage. ------------------------------------------------------------------------ r7080 | hserus | 2012-10-05 13:33:03 -0700 (Fri, 05 Oct 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/testing/dnssec-tools.conf M /trunk/dnssec-tools/testing/saved-example.rollrec M /trunk/dnssec-tools/testing/t/030trustman.t M /trunk/dnssec-tools/testing/t/040rollerd.t M /trunk/dnssec-tools/testing/t/050trustman-rollerd.t Adjust test case expected values to match actual values returned ------------------------------------------------------------------------ r7079 | hserus | 2012-10-05 13:29:42 -0700 (Fri, 05 Oct 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Fix couple of typos ------------------------------------------------------------------------ r7078 | hserus | 2012-10-05 05:04:44 -0700 (Fri, 05 Oct 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_get_rrset.c Fix typo in size used for strncpy ------------------------------------------------------------------------ r7077 | hserus | 2012-10-03 12:18:49 -0700 (Wed, 03 Oct 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/dane_check.c Call select() directly instead of calling val_async_check_wait() ------------------------------------------------------------------------ r7076 | hserus | 2012-10-03 12:16:04 -0700 (Wed, 03 Oct 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_dane.c Don't cancel pending queries when we invoke the callback function ------------------------------------------------------------------------ r7072 | hardaker | 2012-10-01 14:43:25 -0700 (Mon, 01 Oct 2012) | 1 line Changed paths: M /trunk/dnssec-tools/dist/dnssec-tools.spec latest copy of the rpm spec from the fedora tree ------------------------------------------------------------------------ r7071 | rstory | 2012-09-30 20:17:35 -0700 (Sun, 30 Sep 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/aclocal.m4 M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator/validator-config.h.in M /trunk/dnssec-tools/validator/libval/val_crypto.c M /trunk/dnssec-tools/validator/libval/val_verify.c test for openssl/ecdsa.h before using ecdsa ------------------------------------------------------------------------ r7070 | hserus | 2012-09-25 09:42:17 -0700 (Tue, 25 Sep 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/dane_check.c M /trunk/dnssec-tools/validator/libval/val_dane.c Initialize pointer variables ------------------------------------------------------------------------ r7069 | hserus | 2012-09-25 07:24:38 -0700 (Tue, 25 Sep 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_dane.c Fix wrong pointer argument ------------------------------------------------------------------------ r7067 | hserus | 2012-09-24 14:57:17 -0700 (Mon, 24 Sep 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/Makefile.in A /trunk/dnssec-tools/validator/apps/dane_check.c A /trunk/dnssec-tools/validator/include/validator/val_dane.h M /trunk/dnssec-tools/validator/libval/Makefile.in A /trunk/dnssec-tools/validator/libval/val_dane.c Add initial DANE implementation ------------------------------------------------------------------------ r7066 | hardaker | 2012-09-24 14:44:49 -0700 (Mon, 24 Sep 2012) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm Update Fast.pm Version Number: 1.17 ------------------------------------------------------------------------ r7065 | rstory | 2012-09-18 12:14:43 -0700 (Tue, 18 Sep 2012) | 1 line Changed paths: M /trunk/dnssec-tools/apps/ssh/ssh-dnssec.pat update patch ------------------------------------------------------------------------ r7064 | rstory | 2012-09-18 12:14:34 -0700 (Tue, 18 Sep 2012) | 1 line Changed paths: M /trunk/dnssec-tools/apps/ncftp/README update readme ------------------------------------------------------------------------ r7063 | rstory | 2012-09-18 12:14:26 -0700 (Tue, 18 Sep 2012) | 1 line Changed paths: M /trunk/dnssec-tools/apps/ssh/README.ssh slight tweaks to readme ------------------------------------------------------------------------ r7062 | rstory | 2012-09-18 12:14:17 -0700 (Tue, 18 Sep 2012) | 1 line Changed paths: M /trunk/dnssec-tools/apps/lftp/README update readme ------------------------------------------------------------------------ r7061 | rstory | 2012-09-18 12:14:08 -0700 (Tue, 18 Sep 2012) | 1 line Changed paths: M /trunk/dnssec-tools/apps/lftp/lftp-dnssec.patch fix typo ------------------------------------------------------------------------ r7024 | hserus | 2012-09-14 13:14:20 -0700 (Fri, 14 Sep 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator/validator-compat.h M /trunk/dnssec-tools/validator/include/validator/validator-config.h.in M /trunk/dnssec-tools/validator/libsres/res_debug.c M /trunk/dnssec-tools/validator/libval/val_support.c Recognize the TLSA type ------------------------------------------------------------------------ r7023 | hardaker | 2012-09-12 06:21:59 -0700 (Wed, 12 Sep 2012) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt Fix bug #166 by renaming the duplicate rule names with 1/2 suffixes ------------------------------------------------------------------------ r7022 | hardaker | 2012-09-12 06:21:49 -0700 (Wed, 12 Sep 2012) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm rework rrsig parsing code for making it a bit cleaner ------------------------------------------------------------------------ r7021 | hardaker | 2012-09-12 06:21:39 -0700 (Wed, 12 Sep 2012) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rr-dnssec.t enable parsing of rrsig's from bind 10's now () differences ------------------------------------------------------------------------ r7020 | hardaker | 2012-09-12 06:21:27 -0700 (Wed, 12 Sep 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro A /trunk/dnssec-tools/validator/apps/dnssec-nodes/qt_auto_properties.h Use auto-properties to track the data ------------------------------------------------------------------------ r7019 | hardaker | 2012-09-12 06:21:16 -0700 (Wed, 12 Sep 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.h Add a file dialog box to pick a dump file ------------------------------------------------------------------------ r7018 | hardaker | 2012-09-12 06:21:06 -0700 (Wed, 12 Sep 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.h Create an animate flag ------------------------------------------------------------------------ r7017 | hardaker | 2012-09-12 06:20:56 -0700 (Wed, 12 Sep 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.h Beginning of support to open a dump file ------------------------------------------------------------------------ r7016 | hardaker | 2012-09-12 06:20:45 -0700 (Wed, 12 Sep 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h Make the right click and details buttons pop up a complete menu of choices ------------------------------------------------------------------------ r7015 | hardaker | 2012-09-12 06:20:34 -0700 (Wed, 12 Sep 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h Call update on changes to the data ------------------------------------------------------------------------ r7014 | hardaker | 2012-09-12 06:20:22 -0700 (Wed, 12 Sep 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp slightly bigger default scale ------------------------------------------------------------------------ r7012 | hserus | 2012-09-03 09:04:06 -0700 (Mon, 03 Sep 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/python/dnsval/dnsval.py Update definition of val_rrset_rec structure ------------------------------------------------------------------------ r7011 | tewok | 2012-08-30 14:46:05 -0700 (Thu, 30 Aug 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Updated the program's version number. ------------------------------------------------------------------------ r7010 | tewok | 2012-08-30 14:21:17 -0700 (Thu, 30 Aug 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Fix bugs with split-views, as reported in bug #163. A few other bugs became known as a result of this, and they were also handled. ------------------------------------------------------------------------ r7009 | tewok | 2012-08-30 14:18:37 -0700 (Thu, 30 Aug 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Moved common code from cmd_dspub() and cmd_dspuball() into dspubber(). ------------------------------------------------------------------------ r7008 | tewok | 2012-08-30 14:14:59 -0700 (Thu, 30 Aug 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added chrrdir() to centralize cd'ing into a zone's directory. ------------------------------------------------------------------------ r7007 | hardaker | 2012-08-30 09:18:07 -0700 (Thu, 30 Aug 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js Better comment description ------------------------------------------------------------------------ r7006 | hardaker | 2012-08-30 09:17:57 -0700 (Thu, 30 Aug 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml Increase number of retries and decrease timer interval to 3s ------------------------------------------------------------------------ r7005 | hardaker | 2012-08-30 09:17:45 -0700 (Thu, 30 Aug 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/WaitCursor.qml Made the checks do manual restarts in attempt to complete ------------------------------------------------------------------------ r7004 | hserus | 2012-08-29 15:01:00 -0700 (Wed, 29 Aug 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/testing/t/010zonesigner.t Modify expected output to match latest output format ------------------------------------------------------------------------ r7003 | tewok | 2012-08-28 13:26:28 -0700 (Tue, 28 Aug 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added quotes to first argument in command lines from rollerd. This allows rollrec names to contain spaces. ------------------------------------------------------------------------ r7002 | tewok | 2012-08-28 13:25:09 -0700 (Tue, 28 Aug 2012) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added quotes to first argument in display() calls. This allows rollrec names to contain spaces. Added a comment explaining location of the LOG_PHASE phase message. ------------------------------------------------------------------------ r7001 | hserus | 2012-08-27 10:54:25 -0700 (Mon, 27 Aug 2012) | 7 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/include/validator-internal.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_get_rrset.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_support.h M /trunk/dnssec-tools/validator/libval/val_verify.c M /trunk/dnssec-tools/validator/libval/val_verify.h Re-define 'struct val_rrset_rec' so that it becomes easy to copy contents of the cached rrset information. The internal rrset data is now defined as a new 'struct rrset_rr' type. Also re-define copy_rr_rec_list() so that malloc operations are performed less frequently. These changes help speed up the clone_val_rrset() function significantly. ------------------------------------------------------------------------ r6999 | tewok | 2012-08-24 08:37:48 -0700 (Fri, 24 Aug 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-split-view/Makefile Fixed -e argument. ------------------------------------------------------------------------ r6998 | tewok | 2012-08-23 13:02:06 -0700 (Thu, 23 Aug 2012) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Overhauled (yet again) the handling of the serial number in a zonefile's SOA record. This properly handles non-standard uses of parens for multiline SOAs, as well as not using an '@' as the first token in the SOA line. This handles the SOA records given in bug reports 161 and 164. ------------------------------------------------------------------------ r6997 | hserus | 2012-08-23 09:44:29 -0700 (Thu, 23 Aug 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Add missing initializationf for variable. ------------------------------------------------------------------------ r6996 | hserus | 2012-08-23 09:34:17 -0700 (Thu, 23 Aug 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Initialize flock structure before use ------------------------------------------------------------------------ r6995 | hserus | 2012-08-23 07:57:41 -0700 (Thu, 23 Aug 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in Include additional header dependency while checking for ifaddr.h availability ------------------------------------------------------------------------ r6994 | hserus | 2012-08-23 06:58:52 -0700 (Thu, 23 Aug 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/getname.c Pass the correct struct sockaddr pointer to the inet_pton call. ------------------------------------------------------------------------ r6993 | hserus | 2012-08-22 10:40:07 -0700 (Wed, 22 Aug 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c While reading config files, don't wait to acquire the (shared read) lock over the file. Simply flag this error condition and keep using older config data. ------------------------------------------------------------------------ r6992 | hserus | 2012-08-22 06:46:20 -0700 (Wed, 22 Aug 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator/validator-compat.h M /trunk/dnssec-tools/validator/include/validator/validator-config.h.in M /trunk/dnssec-tools/validator/include/validator-internal.h M /trunk/dnssec-tools/validator/libval/val_crypto.c M /trunk/dnssec-tools/validator/libval/val_crypto.h M /trunk/dnssec-tools/validator/libval/val_verify.c Add support for SHA384 and ECDSA. This piece of code is completely untested. ------------------------------------------------------------------------ r6991 | hserus | 2012-08-16 06:51:24 -0700 (Thu, 16 Aug 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c Support build on OSX after changes related to checking for AI_ADDRCONFIG in getaddrinfo ------------------------------------------------------------------------ r6990 | rstory | 2012-08-15 21:56:25 -0700 (Wed, 15 Aug 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure update configure ------------------------------------------------------------------------ r6989 | rstory | 2012-08-15 21:56:18 -0700 (Wed, 15 Aug 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/getaddr.c add nodnssec option to getaddr ------------------------------------------------------------------------ r6988 | rstory | 2012-08-15 21:56:06 -0700 (Wed, 15 Aug 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/getaddr.c M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator/validator-config.h.in M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c implement checking for AI_ADDRCONFIG in getaddrinfo ------------------------------------------------------------------------ r6987 | hardaker | 2012-08-10 15:14:53 -0700 (Fri, 10 Aug 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp color code the nodes from the DS records to the DNSKEY records ------------------------------------------------------------------------ r6986 | hardaker | 2012-08-10 15:14:43 -0700 (Fri, 10 Aug 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/main.cpp merge fix ------------------------------------------------------------------------ r6985 | hardaker | 2012-08-10 15:14:30 -0700 (Fri, 10 Aug 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.h print better alg/digest/etc names in boxes ------------------------------------------------------------------------ r6983 | hserus | 2012-08-06 09:50:14 -0700 (Mon, 06 Aug 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/libsres/res_io_manager.c Actually reduce the EDNS0 size each time we try to fallback. Do away with ea_edns0_size; use ns_edns0_size in all places ------------------------------------------------------------------------ r6982 | hserus | 2012-08-06 09:48:06 -0700 (Mon, 06 Aug 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Use constant value instead of sizeof() within conditional expression ------------------------------------------------------------------------ r6981 | hserus | 2012-08-06 09:43:50 -0700 (Mon, 06 Aug 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Use create_name_server() instead of duplicating that code in other functions. ------------------------------------------------------------------------ r6980 | hserus | 2012-08-06 09:40:46 -0700 (Mon, 06 Aug 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_support.c initialize ns_addr while creating a new name_server structure ------------------------------------------------------------------------ r6978 | hardaker | 2012-07-23 13:49:13 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/Filter.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp debugging statement removals ------------------------------------------------------------------------ r6977 | hardaker | 2012-07-23 13:47:53 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.h make validation maps of all types work ------------------------------------------------------------------------ r6976 | hardaker | 2012-07-23 13:42:34 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/MainWindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/MainWindow.h Allow tabs to be closed ------------------------------------------------------------------------ r6975 | hardaker | 2012-07-23 13:42:23 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/MainWindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp Show new clicked on data in a new tab ------------------------------------------------------------------------ r6974 | hardaker | 2012-07-23 13:42:12 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/MainWindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/MainWindow.h Put the diagram into a tab ------------------------------------------------------------------------ r6973 | hardaker | 2012-07-23 13:42:02 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-nodes/MainWindow.cpp (from /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp:6972) A /trunk/dnssec-tools/validator/apps/dnssec-nodes/MainWindow.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro M /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp Move the mainwindow generation to a separate file from the main file ------------------------------------------------------------------------ r6972 | hardaker | 2012-07-23 13:41:51 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/SetBorderColor.cpp remove debugging statement ------------------------------------------------------------------------ r6971 | hardaker | 2012-07-23 13:41:41 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.h Color code the arrows based on validation status ------------------------------------------------------------------------ r6970 | hardaker | 2012-07-23 13:41:31 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp Make status code cleaner ------------------------------------------------------------------------ r6969 | hardaker | 2012-07-23 13:41:21 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.h Fix same-row signing arrows so they start/end at different spots ------------------------------------------------------------------------ r6968 | hardaker | 2012-07-23 13:41:11 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp Draw arrow lines in three segments ------------------------------------------------------------------------ r6967 | hardaker | 2012-07-23 13:41:02 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp Better comments describing the rrsig arrow generation ------------------------------------------------------------------------ r6966 | hardaker | 2012-07-23 13:40:52 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp for each rrsig draw arrows showing which keys signed what ------------------------------------------------------------------------ r6965 | hardaker | 2012-07-23 13:40:42 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.cpp make the viewing window bigger ------------------------------------------------------------------------ r6964 | hardaker | 2012-07-23 13:40:32 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp fix the arrow drawing so the line connects to the triangle base ------------------------------------------------------------------------ r6963 | hardaker | 2012-07-23 13:40:22 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.h display the validation status in the record box ------------------------------------------------------------------------ r6962 | hardaker | 2012-07-23 13:40:11 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp allow for multiple DS digest types ------------------------------------------------------------------------ r6961 | hardaker | 2012-07-23 13:40:02 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp Draw arrows from DS records to keys ------------------------------------------------------------------------ r6960 | hardaker | 2012-07-23 13:39:52 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.h Setup for drawing arrows between proper DS to DNSKEY records ------------------------------------------------------------------------ r6959 | hardaker | 2012-07-23 13:39:42 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp Display DNSKEY and DS information ------------------------------------------------------------------------ r6958 | hardaker | 2012-07-23 13:39:32 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp display the keyID in the dnskey boxes ------------------------------------------------------------------------ r6957 | hardaker | 2012-07-23 13:39:23 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp show the final answer in the request and change the root name ------------------------------------------------------------------------ r6956 | hardaker | 2012-07-23 13:39:13 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp reorganize drawing to have root at the top ------------------------------------------------------------------------ r6955 | hardaker | 2012-07-23 13:39:04 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp Draw multiple boxes, one per record ------------------------------------------------------------------------ r6954 | hardaker | 2012-07-23 13:38:54 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp initialize typeToName mapping and sanity check ------------------------------------------------------------------------ r6953 | hardaker | 2012-07-23 13:38:44 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp const-parameterize the drawing ------------------------------------------------------------------------ r6952 | hardaker | 2012-07-23 13:38:34 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp Draw arrows between the boxes ------------------------------------------------------------------------ r6951 | hardaker | 2012-07-23 13:38:24 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.h M /trunk/dnssec-tools/validator/doc/libval.3 display parts of the chain found. ------------------------------------------------------------------------ r6950 | hardaker | 2012-07-23 13:38:13 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.h A /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/ValidateViewWidget.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro Added a new class to hold the validation data view ------------------------------------------------------------------------ r6949 | hardaker | 2012-07-23 13:38:01 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.h Create a validate button to show a validation tree tab (incomplete) ------------------------------------------------------------------------ r6948 | hardaker | 2012-07-23 13:37:50 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp remove some early testing code ------------------------------------------------------------------------ r6947 | hardaker | 2012-07-23 13:37:38 -0700 (Mon, 23 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp emit a log message about collecting traffic too ------------------------------------------------------------------------ r6946 | tewok | 2012-07-20 09:50:10 -0700 (Fri, 20 Jul 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/realmmgr.pm Fixed the way a lot of routines get their arguments. ------------------------------------------------------------------------ r6945 | tewok | 2012-07-19 17:02:50 -0700 (Thu, 19 Jul 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Fixed the way a lot of routines get their arguments. ------------------------------------------------------------------------ r6944 | hardaker | 2012-07-19 06:02:33 -0700 (Thu, 19 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm remove accidentally committed debug code ------------------------------------------------------------------------ r6943 | hardaker | 2012-07-19 06:02:24 -0700 (Thu, 19 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/Makefile.top set the shell to @SHELL@ instead of forcing /bin/sh for systems with bash and small sh's ------------------------------------------------------------------------ r6942 | hardaker | 2012-07-19 06:02:16 -0700 (Thu, 19 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/doc/libval.pod podify the val_ac_status ------------------------------------------------------------------------ r6941 | hardaker | 2012-07-19 06:02:07 -0700 (Thu, 19 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/doc/libval.pod podify the val_rc_status ------------------------------------------------------------------------ r6940 | hardaker | 2012-07-19 06:01:58 -0700 (Thu, 19 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/doc/libval.pod pod typos ------------------------------------------------------------------------ r6939 | hardaker | 2012-07-19 06:01:47 -0700 (Thu, 19 Jul 2012) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/SetBorderColor.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/SetBorderColor.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h made a new filter effect to change the border color ------------------------------------------------------------------------ r6938 | hardaker | 2012-07-13 11:22:53 -0700 (Fri, 13 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/DNSSECStatusFilter.cpp Allow filtering by AD status ------------------------------------------------------------------------ r6937 | hardaker | 2012-07-13 11:22:41 -0700 (Fri, 13 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp Enable a submenu to sniff on each available interface ------------------------------------------------------------------------ r6936 | hardaker | 2012-07-13 11:22:24 -0700 (Fri, 13 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp make start/stop menu options for sniffing traffic work ------------------------------------------------------------------------ r6935 | hardaker | 2012-07-13 11:22:15 -0700 (Fri, 13 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp make a menu item to sniff traffic ------------------------------------------------------------------------ r6934 | hardaker | 2012-07-13 11:22:05 -0700 (Fri, 13 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Legend.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp color code verified AD bit responses ------------------------------------------------------------------------ r6933 | hardaker | 2012-07-13 11:21:55 -0700 (Fri, 13 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.cpp remove debugging statements ------------------------------------------------------------------------ r6932 | hardaker | 2012-07-13 11:21:46 -0700 (Fri, 13 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.cpp Actually report packets into the node tree from pcap ------------------------------------------------------------------------ r6931 | hardaker | 2012-07-13 11:21:35 -0700 (Fri, 13 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.h enable watching both udp and tcp, need to do ipv6 still ------------------------------------------------------------------------ r6930 | hardaker | 2012-07-13 11:21:24 -0700 (Fri, 13 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h create a signal to open the pcap device and call it ------------------------------------------------------------------------ r6929 | hardaker | 2012-07-13 11:21:13 -0700 (Fri, 13 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp remove debugging statement ------------------------------------------------------------------------ r6928 | hardaker | 2012-07-13 11:21:02 -0700 (Fri, 13 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp Added the ability to report names with data ------------------------------------------------------------------------ r6927 | hardaker | 2012-07-13 11:20:49 -0700 (Fri, 13 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h Convert the pcap watcher into a separate thread ------------------------------------------------------------------------ r6926 | hardaker | 2012-07-13 11:20:37 -0700 (Fri, 13 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.h close the pcap device before reopening ------------------------------------------------------------------------ r6925 | hardaker | 2012-07-13 11:20:28 -0700 (Fri, 13 Jul 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro Added sniffing structures ------------------------------------------------------------------------ r6924 | hardaker | 2012-07-13 11:20:18 -0700 (Fri, 13 Jul 2012) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/PcapWatcher.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro initial start at sniffing from libpcap ------------------------------------------------------------------------ r6922 | tewok | 2012-07-09 15:41:42 -0700 (Mon, 09 Jul 2012) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed a bug in serialincr() when an lparen was the end of the SOA line and the zone contained a number. This bug caused the number in the zone to be incremented, rather than the serial numbers should be is on the next line. This is from bug report #152, and was reported by mithro. ------------------------------------------------------------------------ r6921 | hardaker | 2012-06-29 14:06:09 -0700 (Fri, 29 Jun 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml version update ------------------------------------------------------------------------ r6920 | hardaker | 2012-06-29 14:05:58 -0700 (Fri, 29 Jun 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.cpp fix issue with OS X file descriptors being checked continuously ------------------------------------------------------------------------ r6919 | hardaker | 2012-06-27 10:59:40 -0700 (Wed, 27 Jun 2012) | 1 line Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml produce the html pages at release time ------------------------------------------------------------------------ r6918 | hardaker | 2012-06-27 10:59:29 -0700 (Wed, 27 Jun 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/doc/libval.pod added a (required) blank link between =back statements ------------------------------------------------------------------------ r6916 | hardaker | 2012-06-27 10:58:46 -0700 (Wed, 27 Jun 2012) | 1 line Changed paths: M /trunk/dnssec-tools/dist/update-web-docs fixed the libval html builds ------------------------------------------------------------------------ r6915 | hardaker | 2012-06-27 10:58:37 -0700 (Wed, 27 Jun 2012) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/check-zone-expiration added a full name title ------------------------------------------------------------------------ r6914 | hardaker | 2012-06-27 10:58:28 -0700 (Wed, 27 Jun 2012) | 1 line Changed paths: M /trunk/dnssec-tools/dist/update-web-docs add in validator docs ------------------------------------------------------------------------ r6913 | hardaker | 2012-06-27 10:58:19 -0700 (Wed, 27 Jun 2012) | 1 line Changed paths: M /trunk/dnssec-tools/dist/update-web-docs allow update-web-docs to be called from the root dir instead of inside dist ------------------------------------------------------------------------ r6909 | hardaker | 2012-06-25 12:42:25 -0700 (Mon, 25 Jun 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp fix the 1.13 update tag ------------------------------------------------------------------------ r6905 | hardaker | 2012-06-21 13:19:30 -0700 (Thu, 21 Jun 2012) | 1 line Changed paths: M /trunk/dnssec-tools/ChangeLog Update for verison 1.13 ------------------------------------------------------------------------ r6904 | hardaker | 2012-06-21 13:11:43 -0700 (Thu, 21 Jun 2012) | 1 line Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml Update Version Number: 1.13 ------------------------------------------------------------------------ r6903 | hardaker | 2012-06-21 13:10:13 -0700 (Thu, 21 Jun 2012) | 1 line Changed paths: M /trunk/dnssec-tools/apps/nagios/dtnagobj M /trunk/dnssec-tools/tools/convertar/convertar M /trunk/dnssec-tools/tools/demos/demo-tools/makezones M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap M /trunk/dnssec-tools/tools/maketestzone/maketestzone M /trunk/dnssec-tools/tools/mapper/mapper M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/bubbles M /trunk/dnssec-tools/tools/scripts/buildrealms M /trunk/dnssec-tools/tools/scripts/cleanarch M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtck M /trunk/dnssec-tools/tools/scripts/dtconf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/dtrealms M /trunk/dnssec-tools/tools/scripts/dtreqmods M /trunk/dnssec-tools/tools/scripts/dtupdkrf M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/getds M /trunk/dnssec-tools/tools/scripts/grandvizier M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/keymod M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lights M /trunk/dnssec-tools/tools/scripts/lsdnssec M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsrealm M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/realmchk M /trunk/dnssec-tools/tools/scripts/realmctl M /trunk/dnssec-tools/tools/scripts/realminit M /trunk/dnssec-tools/tools/scripts/realmset M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rolllog M /trunk/dnssec-tools/tools/scripts/rollrec-editor M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/rp-wrapper M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/trustman M /trunk/dnssec-tools/tools/scripts/zonesigner M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.cpp Update Version Number: 1.13 ------------------------------------------------------------------------ r6902 | hardaker | 2012-06-21 13:02:50 -0700 (Thu, 21 Jun 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h add sys/types.h for building dnssec-check on osx ------------------------------------------------------------------------ r6901 | hardaker | 2012-06-21 13:02:39 -0700 (Thu, 21 Jun 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/android/AndroidManifest.xml M /trunk/dnssec-tools/validator/apps/dnssec-check/android/build.xml M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml M /trunk/dnssec-tools/validator/apps/dnssec-nodes/android/build.xml M /trunk/dnssec-tools/validator/apps/lookup/src/src.pro build patches from android building ------------------------------------------------------------------------ r6900 | tewok | 2012-06-21 11:57:29 -0700 (Thu, 21 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/buildrealms Changed to have distinct error exit codes. ------------------------------------------------------------------------ r6899 | tewok | 2012-06-21 11:55:33 -0700 (Thu, 21 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/buildrealms Fixed an error message. ------------------------------------------------------------------------ r6898 | hardaker | 2012-06-21 11:13:00 -0700 (Thu, 21 Jun 2012) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS mentioned changes in dnssec-check ------------------------------------------------------------------------ r6896 | hardaker | 2012-06-20 05:45:42 -0700 (Wed, 20 Jun 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.h M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.h M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.h Misc fixes for building on windows ------------------------------------------------------------------------ r6895 | hardaker | 2012-06-20 05:45:31 -0700 (Wed, 20 Jun 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h include winsock2.h inside mingw32 ------------------------------------------------------------------------ r6894 | hardaker | 2012-06-20 05:45:22 -0700 (Wed, 20 Jun 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro win32 .pro fixes ------------------------------------------------------------------------ r6893 | hardaker | 2012-06-20 05:45:12 -0700 (Wed, 20 Jun 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in win32 library test fixes ------------------------------------------------------------------------ r6892 | tewok | 2012-06-19 12:36:27 -0700 (Tue, 19 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/NEWS Updated info rollerd, realms, zonesigner, trustman, and nagios monitors. ------------------------------------------------------------------------ r6891 | tewok | 2012-06-19 11:58:09 -0700 (Tue, 19 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Code clean-up and additional comments in serialincr(). ------------------------------------------------------------------------ r6890 | tewok | 2012-06-19 10:37:17 -0700 (Tue, 19 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Rewrote the serialincr() function to better handle all forms of SOA lines. ------------------------------------------------------------------------ r6889 | hserus | 2012-06-19 07:56:37 -0700 (Tue, 19 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap s/validate/dt-validate ------------------------------------------------------------------------ r6888 | hserus | 2012-06-19 07:25:50 -0700 (Tue, 19 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/webmin/bind8.images.dnssectools.gif Update icon for D-T functionality ------------------------------------------------------------------------ r6887 | hardaker | 2012-06-18 16:08:26 -0700 (Mon, 18 Jun 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js fix the give-up code ------------------------------------------------------------------------ r6886 | hardaker | 2012-06-18 16:08:16 -0700 (Mon, 18 Jun 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js remove debugging and fix a test submission bug ------------------------------------------------------------------------ r6885 | hardaker | 2012-06-18 16:08:06 -0700 (Mon, 18 Jun 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js fully functional again ------------------------------------------------------------------------ r6884 | hardaker | 2012-06-18 16:07:57 -0700 (Mon, 18 Jun 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js all but single-host-test working again ------------------------------------------------------------------------ r6883 | hardaker | 2012-06-18 16:07:47 -0700 (Mon, 18 Jun 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js always working rewrite of the JS storage components ------------------------------------------------------------------------ r6882 | hardaker | 2012-06-18 16:07:37 -0700 (Mon, 18 Jun 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js partial rewrite of javascript module ------------------------------------------------------------------------ r6881 | hardaker | 2012-06-18 16:07:28 -0700 (Mon, 18 Jun 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro small cleanup of parts of the qmake build system ------------------------------------------------------------------------ r6880 | hardaker | 2012-06-18 16:07:17 -0700 (Mon, 18 Jun 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/whatami.h updated harmattan define based on discussion on a Qt wmailing list ------------------------------------------------------------------------ r6879 | hserus | 2012-06-18 14:03:08 -0700 (Mon, 18 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/webmin/webmin-1.580-dt.patch Ensure that we support a recent-enough DNSSEC-Tools version ------------------------------------------------------------------------ r6878 | rstory | 2012-06-18 11:28:56 -0700 (Mon, 18 Jun 2012) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/mozilla-base/mozilla-central/moz-base-0003-take-advantage-of-new-async-functionality-in-NSPR.patch no callback for null async status ------------------------------------------------------------------------ r6877 | tewok | 2012-06-18 10:29:04 -0700 (Mon, 18 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Update the serial number for all SOA lines in the file. ------------------------------------------------------------------------ r6876 | hserus | 2012-06-18 10:16:46 -0700 (Mon, 18 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Set query state to Q_RESPONSE_ERROR when EDNS fallback fails ------------------------------------------------------------------------ r6875 | hserus | 2012-06-18 10:05:57 -0700 (Mon, 18 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/Makefile.in M /trunk/dnssec-tools/validator/doc/README A /trunk/dnssec-tools/validator/doc/dt-getaddr.1 A /trunk/dnssec-tools/validator/doc/dt-getaddr.pod A /trunk/dnssec-tools/validator/doc/dt-gethost.1 A /trunk/dnssec-tools/validator/doc/dt-gethost.pod A /trunk/dnssec-tools/validator/doc/dt-getname.1 A /trunk/dnssec-tools/validator/doc/dt-getname.pod A /trunk/dnssec-tools/validator/doc/dt-getquery.1 A /trunk/dnssec-tools/validator/doc/dt-getquery.pod A /trunk/dnssec-tools/validator/doc/dt-getrrset.1 A /trunk/dnssec-tools/validator/doc/dt-getrrset.pod A /trunk/dnssec-tools/validator/doc/dt-libval_check_conf.1 A /trunk/dnssec-tools/validator/doc/dt-libval_check_conf.pod A /trunk/dnssec-tools/validator/doc/dt-validate.1 A /trunk/dnssec-tools/validator/doc/dt-validate.pod D /trunk/dnssec-tools/validator/doc/getaddr.1 D /trunk/dnssec-tools/validator/doc/getaddr.pod D /trunk/dnssec-tools/validator/doc/gethost.1 D /trunk/dnssec-tools/validator/doc/gethost.pod D /trunk/dnssec-tools/validator/doc/getname.1 D /trunk/dnssec-tools/validator/doc/getname.pod D /trunk/dnssec-tools/validator/doc/getquery.1 D /trunk/dnssec-tools/validator/doc/getquery.pod D /trunk/dnssec-tools/validator/doc/getrrset.1 D /trunk/dnssec-tools/validator/doc/getrrset.pod D /trunk/dnssec-tools/validator/doc/libval_check_conf.1 D /trunk/dnssec-tools/validator/doc/libval_check_conf.pod M /trunk/dnssec-tools/validator/doc/libval_shim.3 M /trunk/dnssec-tools/validator/doc/libval_shim.pod D /trunk/dnssec-tools/validator/doc/validate.1 D /trunk/dnssec-tools/validator/doc/validate.pod Renamed binaries so that they now have a dt-prefix ------------------------------------------------------------------------ r6874 | hserus | 2012-06-18 10:02:36 -0700 (Mon, 18 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/NEWS Add placeholders for updates in 1.13 ------------------------------------------------------------------------ r6873 | tewok | 2012-06-18 10:01:34 -0700 (Mon, 18 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Changed serial number regexp to recognize non-parenthesized SOA lines. ------------------------------------------------------------------------ r6872 | hserus | 2012-06-18 08:51:13 -0700 (Mon, 18 Jun 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/python/dnsval/README Add README for dnsval python module ------------------------------------------------------------------------ r6871 | tewok | 2012-06-17 19:19:45 -0700 (Sun, 17 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec-tools/blinkenlights.conf.pod M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod Updated copyright date from 2008 to 2012. ------------------------------------------------------------------------ r6870 | tewok | 2012-06-17 19:16:41 -0700 (Sun, 17 Jun 2012) | 6 lines Changed paths: M /trunk/dnssec-tools/apps/zabbix/rollstate M /trunk/dnssec-tools/apps/zabbix/uemstats M /trunk/dnssec-tools/apps/zabbix/zonestate Adjusted script version to account for impending new release. This moves these scripts to having the same format of script version, rather than one of several. (This is not messing with the DNSSEC-Tools version, which is handled automatically during release build.) ------------------------------------------------------------------------ r6869 | tewok | 2012-06-17 19:14:23 -0700 (Sun, 17 Jun 2012) | 6 lines Changed paths: M /trunk/dnssec-tools/apps/nagios/dt_donuts M /trunk/dnssec-tools/apps/nagios/dt_trustman M /trunk/dnssec-tools/apps/nagios/dt_zonestat M /trunk/dnssec-tools/apps/nagios/dt_zonetimer M /trunk/dnssec-tools/apps/nagios/dtnagobj Adjusted script version to account for impending new release. This moves these scripts to having the same format of script version, rather than one of several. (This is not messing with the DNSSEC-Tools version, which is handled automatically during release build.) ------------------------------------------------------------------------ r6868 | tewok | 2012-06-17 19:10:47 -0700 (Sun, 17 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-vastzones/makezones M /trunk/dnssec-tools/tools/demos/rollerd-vastzones/rundemo Adjusted contact info. ------------------------------------------------------------------------ r6867 | tewok | 2012-06-17 19:09:23 -0700 (Sun, 17 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/demo-tools/autods M /trunk/dnssec-tools/tools/demos/demo-tools/makezones M /trunk/dnssec-tools/tools/demos/demo-tools/phaser Adjusted contact. ------------------------------------------------------------------------ r6866 | tewok | 2012-06-17 19:04:41 -0700 (Sun, 17 Jun 2012) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm.in M /trunk/dnssec-tools/tools/modules/defaults.pm M /trunk/dnssec-tools/tools/modules/dnssectools.pm M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/keyrec.pod M /trunk/dnssec-tools/tools/modules/realm.pm M /trunk/dnssec-tools/tools/modules/realmmgr.pm M /trunk/dnssec-tools/tools/modules/rolllog.pm M /trunk/dnssec-tools/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/modules/rollrec.pm M /trunk/dnssec-tools/tools/modules/rollrec.pod M /trunk/dnssec-tools/tools/modules/timetrans.pm M /trunk/dnssec-tools/tools/modules/tooloptions.pm Adjusted script version to account for impending new release. This moves these scripts to having the same format of script version, rather than one of several. (This is not messing with the DNSSEC-Tools version, which is handled automatically during release build.) ------------------------------------------------------------------------ r6865 | tewok | 2012-06-17 18:55:19 -0700 (Sun, 17 Jun 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/buildrealms Adjusted script version to account for impending new release. (This is not messing with the DNSSEC-Tools version, which is handled automatically during release build.) ------------------------------------------------------------------------ r6864 | tewok | 2012-06-17 18:53:35 -0700 (Sun, 17 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/README Added an entry for buildrealms. ------------------------------------------------------------------------ r6863 | tewok | 2012-06-17 18:53:02 -0700 (Sun, 17 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO Added an entry for buildrealms. ------------------------------------------------------------------------ r6862 | tewok | 2012-06-17 18:50:54 -0700 (Sun, 17 Jun 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/buildrealms Extensive additions to pod were made -- how to use, how to prepare, examples. Options added to usage message. ------------------------------------------------------------------------ r6861 | tewok | 2012-06-16 07:59:08 -0700 (Sat, 16 Jun 2012) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/bubbles M /trunk/dnssec-tools/tools/scripts/cleanarch M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtck M /trunk/dnssec-tools/tools/scripts/dtconf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/dtrealms M /trunk/dnssec-tools/tools/scripts/dtreqmods M /trunk/dnssec-tools/tools/scripts/dtupdkrf M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/grandvizier M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/keymod M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lights M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsrealm M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/realmchk M /trunk/dnssec-tools/tools/scripts/realmctl M /trunk/dnssec-tools/tools/scripts/realminit M /trunk/dnssec-tools/tools/scripts/realmset M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rolllog M /trunk/dnssec-tools/tools/scripts/rollrec-editor M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/rp-wrapper M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/trustman M /trunk/dnssec-tools/tools/scripts/zonesigner Adjusted script version to account for impending new release. This moves these scripts to having the same format of script version, rather than one of several. (This is not messing with the DNSSEC-Tools version, which is handled automatically during release build.) ------------------------------------------------------------------------ r6860 | tewok | 2012-06-16 07:55:34 -0700 (Sat, 16 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollchk Modified how dates are checked, to allow for GMT and localtimes. ------------------------------------------------------------------------ r6859 | tewok | 2012-06-14 16:56:55 -0700 (Thu, 14 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/buildrealms Additional bug fixes and more pod. ------------------------------------------------------------------------ r6858 | tewok | 2012-06-14 11:11:24 -0700 (Thu, 14 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/buildrealms Several bug fixes, pod additions, and routine reorgs. ------------------------------------------------------------------------ r6857 | tewok | 2012-06-14 09:03:01 -0700 (Thu, 14 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL Added an entry for buildrealms. ------------------------------------------------------------------------ r6856 | tewok | 2012-06-14 08:56:49 -0700 (Thu, 14 Jun 2012) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/buildrealms Initial check-in for safety's sake. Minimal pod at the moment, not all the functionality it will have, but that'll all change. ------------------------------------------------------------------------ r6855 | tewok | 2012-06-13 22:29:58 -0700 (Wed, 13 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/realm.pm Added an entry for the "hoard" field. ------------------------------------------------------------------------ r6854 | tewok | 2012-06-13 22:27:38 -0700 (Wed, 13 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/realm.pod Added an entry for the "hoard" field. ------------------------------------------------------------------------ r6853 | tewok | 2012-06-13 12:27:37 -0700 (Wed, 13 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtrealms Start rollerd with "-zone " option. ------------------------------------------------------------------------ r6852 | tewok | 2012-06-13 12:26:53 -0700 (Wed, 13 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added -realm option (for instance-identification purposes only.) ------------------------------------------------------------------------ r6851 | hserus | 2012-06-13 08:01:12 -0700 (Wed, 13 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/Makefile.in Rename executables in the validator/app directory to have a dt- prefix ------------------------------------------------------------------------ r6849 | rstory | 2012-06-07 09:55:12 -0700 (Thu, 07 Jun 2012) | 1 line Changed paths: D /trunk/dnssec-tools/apps/mozilla/comm-central.patch D /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch D /trunk/dnssec-tools/apps/mozilla/dnssec-firefox.patch D /trunk/dnssec-tools/apps/mozilla/dnssec-mozconfig.patch D /trunk/dnssec-tools/apps/mozilla/dnssec-pkgconfig.patch D /trunk/dnssec-tools/apps/mozilla/dnssec-thunderbird.patch D /trunk/dnssec-tools/apps/mozilla/firefox-spec.patch D /trunk/dnssec-tools/apps/mozilla/firefox.spec A /trunk/dnssec-tools/apps/mozilla/mozilla-base A /trunk/dnssec-tools/apps/mozilla/mozilla-base/mozilla-central A /trunk/dnssec-tools/apps/mozilla/mozilla-base/mozilla-central/moz-base-0001-take-advantage-of-new-DNSSEC-functionality-in-NSPR.patch A /trunk/dnssec-tools/apps/mozilla/mozilla-base/mozilla-central/moz-base-0002-support-functions-in-preparation-for-async-support.patch A /trunk/dnssec-tools/apps/mozilla/mozilla-base/mozilla-central/moz-base-0003-take-advantage-of-new-async-functionality-in-NSPR.patch A /trunk/dnssec-tools/apps/mozilla/mozilla-base/mozilla-central/moz-base-0004-make-netwerk-DNSSEC-validation-aware.patch D /trunk/dnssec-tools/apps/mozilla/mozilla-central.patch A /trunk/dnssec-tools/apps/mozilla/mozilla-firefox A /trunk/dnssec-tools/apps/mozilla/mozilla-firefox/firefox-spec.patch A /trunk/dnssec-tools/apps/mozilla/mozilla-firefox/mozilla-central A /trunk/dnssec-tools/apps/mozilla/mozilla-firefox/mozilla-central/moz-firefox-0001-update-browser-local-overrides-for-DNSSEC.patch A /trunk/dnssec-tools/apps/mozilla/mozilla-firefox/mozilla-central/moz-firefox-0002-add-DNSSEC-preferences-to-browser.patch A /trunk/dnssec-tools/apps/mozilla/mozilla-thunderbird A /trunk/dnssec-tools/apps/mozilla/mozilla-thunderbird/dnssec-thunderbird.patch (from /trunk/dnssec-tools/apps/mozilla/dnssec-thunderbird.patch:6848) A /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner A /trunk/dnssec-tools/apps/mozilla/mozilla-xulrunner/xulrunner-spec.patch D /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/0001-getaddr-patch-for-mozilla-bug-699055.patch D /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/0002-add-NSPR-log-module-for-DNS.patch D /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/0003-add-dnssec-options-flags-to-configure-and-makefiles.patch D /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/0004-add-DNSSEC-error-codes-and-text.patch D /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/0005-factor-out-common-code-from-PR_GetAddrInfoByName.patch D /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/0006-header-definitions-for-Extended-DNSSEC-and-asynchron.patch D /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/0007-add-dnssec-validation-to-prnetdb.patch D /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/0008-update-getai-to-test-async-disable-validation.patch A /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/nspr-0001-getaddr-patch-for-mozilla-bug-699055.patch (from /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/0001-getaddr-patch-for-mozilla-bug-699055.patch:6848) A /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/nspr-0002-add-NSPR-log-module-for-DNS.patch (from /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/0002-add-NSPR-log-module-for-DNS.patch:6848) A /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/nspr-0003-add-dnssec-options-flags-to-configure-and-makefiles.patch (from /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/0003-add-dnssec-options-flags-to-configure-and-makefiles.patch:6848) A /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/nspr-0004-add-DNSSEC-error-codes-and-text.patch (from /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/0004-add-DNSSEC-error-codes-and-text.patch:6848) A /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/nspr-0005-factor-out-common-code-from-PR_GetAddrInfoByName.patch (from /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/0005-factor-out-common-code-from-PR_GetAddrInfoByName.patch:6848) A /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/nspr-0006-header-definitions-for-Extended-DNSSEC-and-asynchron.patch (from /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/0006-header-definitions-for-Extended-DNSSEC-and-asynchron.patch:6848) A /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/nspr-0007-add-dnssec-validation-to-prnetdb.patch (from /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/0007-add-dnssec-validation-to-prnetdb.patch:6848) A /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/nspr-0008-update-getai-to-test-async-disable-validation.patch (from /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/0008-update-getai-to-test-async-disable-validation.patch:6848) M /trunk/dnssec-tools/apps/mozilla/nspr/nspr-spec.patch D /trunk/dnssec-tools/apps/mozilla/xulrunner-spec.patch update and reorganize patches and rpm spec files ------------------------------------------------------------------------ r6848 | rstory | 2012-06-07 09:54:46 -0700 (Thu, 07 Jun 2012) | 1 line Changed paths: M /trunk/dnssec-tools/apps/ssh/README.ssh M /trunk/dnssec-tools/apps/ssh/ssh-dnssec.pat update openssh patch for 6.0p1 ------------------------------------------------------------------------ r6846 | tewok | 2012-06-05 07:47:09 -0700 (Tue, 05 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtrealms Added an in-pod pointer to the realm-building wiki page. ------------------------------------------------------------------------ r6845 | tewok | 2012-06-04 12:52:45 -0700 (Mon, 04 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtrealms Fixed several problems with the pod. ------------------------------------------------------------------------ r6844 | tewok | 2012-06-04 10:02:22 -0700 (Mon, 04 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Modified -monitor option so it just does monitoring and doesn't update things. ------------------------------------------------------------------------ r6843 | tewok | 2012-06-04 09:59:56 -0700 (Mon, 04 Jun 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/nagios/dt_trustman Modified to use fewer arguments for trustman, since trustman's -M option has more meaning now. ------------------------------------------------------------------------ r6842 | tewok | 2012-06-04 09:25:19 -0700 (Mon, 04 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Move the monitoring report from main() to its own routine. ------------------------------------------------------------------------ r6841 | tewok | 2012-06-04 09:10:38 -0700 (Mon, 04 Jun 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Changed ordering of some routines. ------------------------------------------------------------------------ r6840 | tewok | 2012-06-01 14:02:13 -0700 (Fri, 01 Jun 2012) | 5 lines Changed paths: M /trunk/dnssec-tools/apps/zabbix/rollstate Decreased error values by an order of magnitude. As high as they were, the real rollover data were being lost in graphing. Added history section. Moved error numbers to constants. ------------------------------------------------------------------------ r6839 | tewok | 2012-05-31 09:43:51 -0700 (Thu, 31 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollset Deleted an unused variable. ------------------------------------------------------------------------ r6838 | tewok | 2012-05-31 09:41:36 -0700 (Thu, 31 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollset Alphabetized the options in the pod. ------------------------------------------------------------------------ r6837 | tewok | 2012-05-31 07:37:43 -0700 (Thu, 31 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO M /trunk/dnssec-tools/tools/scripts/README Added entries for realmset. ------------------------------------------------------------------------ r6836 | tewok | 2012-05-31 07:36:13 -0700 (Thu, 31 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL Added entry for realmset. ------------------------------------------------------------------------ r6835 | tewok | 2012-05-31 07:35:03 -0700 (Thu, 31 May 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/realmset New program for setting fields in realms files. ------------------------------------------------------------------------ r6834 | tewok | 2012-05-30 15:12:04 -0700 (Wed, 30 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Removed ability to change crypto algorithm. ------------------------------------------------------------------------ r6833 | tewok | 2012-05-30 15:10:53 -0700 (Wed, 30 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/keymod Removed ability to set a new algorithm. ------------------------------------------------------------------------ r6832 | tewok | 2012-05-30 15:08:04 -0700 (Wed, 30 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Removed new_algorithm as a valid keyrec field. ------------------------------------------------------------------------ r6831 | tewok | 2012-05-29 16:09:39 -0700 (Tue, 29 May 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Checks for usensec3, nsec3iter, and nsec3optout fields will happen only if they're defined. ------------------------------------------------------------------------ r6830 | tewok | 2012-05-29 14:49:17 -0700 (Tue, 29 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollset Fixed version number. ------------------------------------------------------------------------ r6829 | tewok | 2012-05-29 14:48:07 -0700 (Tue, 29 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL Added entry for keymod. ------------------------------------------------------------------------ r6828 | tewok | 2012-05-29 14:46:40 -0700 (Tue, 29 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO M /trunk/dnssec-tools/tools/scripts/README Added lines about keymod. ------------------------------------------------------------------------ r6827 | tewok | 2012-05-29 14:44:00 -0700 (Tue, 29 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/keymod Allow multiple keyrec files to be listed on the command line. ------------------------------------------------------------------------ r6826 | tewok | 2012-05-29 14:27:17 -0700 (Tue, 29 May 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added support for keymod changes to keyrecs. A couple small code simplifications. Fixed some comments. ------------------------------------------------------------------------ r6825 | tewok | 2012-05-29 14:22:55 -0700 (Tue, 29 May 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/keymod New command to modify key parameters for zonesigner-managed zones. ------------------------------------------------------------------------ r6824 | tewok | 2012-05-29 14:21:01 -0700 (Tue, 29 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pod Added a paragraph talking about keymod changes. ------------------------------------------------------------------------ r6823 | tewok | 2012-05-29 07:55:18 -0700 (Tue, 29 May 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added some new fields (prefixed by "new_") for use by zonesigner and keymod for modifying key parameters. ------------------------------------------------------------------------ r6822 | tewok | 2012-05-29 07:50:35 -0700 (Tue, 29 May 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Modified opts_zonekr() to get values from the kskpub, zskpub, and zsknew keys, as well as the kskcur and zskcur keys. The values are read such that newer values take precedence over older values. ------------------------------------------------------------------------ r6821 | tewok | 2012-05-26 11:17:58 -0700 (Sat, 26 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Report correct key lengths in message post sign/roll messages. ------------------------------------------------------------------------ r6820 | tewok | 2012-05-26 08:55:18 -0700 (Sat, 26 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO M /trunk/dnssec-tools/tools/scripts/README Fixed a typo in each file. Same line, different error. ------------------------------------------------------------------------ r6819 | tewok | 2012-05-25 10:09:24 -0700 (Fri, 25 May 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtrealms Lots of comment additions and modifications. Minor essage modifications. ------------------------------------------------------------------------ r6818 | tewok | 2012-05-25 10:05:24 -0700 (Fri, 25 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtrealms Minor code reorganization in validrealms(). ------------------------------------------------------------------------ r6817 | tewok | 2012-05-25 10:01:58 -0700 (Fri, 25 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtrealms Send properly formatted halt command to grandvizier. ------------------------------------------------------------------------ r6816 | tewok | 2012-05-25 09:59:54 -0700 (Fri, 25 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtrealms Use a better check to see if grandvizier is running. ------------------------------------------------------------------------ r6815 | tewok | 2012-05-25 09:56:41 -0700 (Fri, 25 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtrealms Deleted a few lines of dead code. ------------------------------------------------------------------------ r6814 | tewok | 2012-05-25 09:50:08 -0700 (Fri, 25 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtrealms Changed a few instances of '|' to '||' in startrealm(). ------------------------------------------------------------------------ r6813 | tewok | 2012-05-25 08:14:10 -0700 (Fri, 25 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Fixed the header comment for cmd_display(). ------------------------------------------------------------------------ r6812 | tewok | 2012-05-24 17:17:27 -0700 (Thu, 24 May 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtrealms Temporary moved an unused block from waiter() into the new-and-temporary deadcode_waiter(). This new-and-temporary function will be removed before long... ------------------------------------------------------------------------ r6811 | tewok | 2012-05-24 17:13:30 -0700 (Thu, 24 May 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtrealms Give better error message if realmmgr_channel() fails. Deleted an unused variable. Put a semi on the line it belongs to. ------------------------------------------------------------------------ r6810 | tewok | 2012-05-24 17:05:07 -0700 (Thu, 24 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtrealms Changed a few instances of '|' to '||'. ------------------------------------------------------------------------ r6809 | tewok | 2012-05-24 15:01:56 -0700 (Thu, 24 May 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtrealms Added the -foreground option to run dtrealms undaemonized. Removed notes saying -display is NYI. ------------------------------------------------------------------------ r6808 | hserus | 2012-05-24 14:34:31 -0700 (Thu, 24 May 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/webmin/webmin-1.580-dt.patch Don't enable DNSSEC tools support if certain config options have not been specified. ------------------------------------------------------------------------ r6807 | tewok | 2012-05-23 16:02:26 -0700 (Wed, 23 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/grandvizier Changed repaint limit. ------------------------------------------------------------------------ r6806 | tewok | 2012-05-23 12:53:25 -0700 (Wed, 23 May 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Send properly formatted halt command to blinkenlights. Better check for blinkenlights running. ------------------------------------------------------------------------ r6805 | tewok | 2012-05-23 12:51:29 -0700 (Wed, 23 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Ignore blank command lines from rollerd. ------------------------------------------------------------------------ r6804 | tewok | 2012-05-22 16:24:40 -0700 (Tue, 22 May 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/demos/dtrealms-basic/Makefile M /trunk/dnssec-tools/tools/demos/dtrealms-basic/README Added the "tmpdemo" target to the makefile to copy the demo environment into a directory in /tmp. Added a note to the README talking about this new target. ------------------------------------------------------------------------ r6803 | tewok | 2012-05-22 15:45:48 -0700 (Tue, 22 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Give a more descriptive error message if rollmgr_channel() fails. ------------------------------------------------------------------------ r6802 | hserus | 2012-05-21 07:54:58 -0700 (Mon, 21 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/webmin/webmin-1.580-dt.patch Fix indentation ------------------------------------------------------------------------ r6801 | hserus | 2012-05-21 07:10:48 -0700 (Mon, 21 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/webmin/webmin-1.580-dt.patch Restart rollerd when there are substantive changes in the rollrec file ------------------------------------------------------------------------ r6800 | tewok | 2012-05-19 21:13:28 -0700 (Sat, 19 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/bubbles Added about window and dspuball command. ------------------------------------------------------------------------ r6799 | tewok | 2012-05-19 21:13:13 -0700 (Sat, 19 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lights Added about window and dspuball command. ------------------------------------------------------------------------ r6798 | tewok | 2012-05-19 21:12:43 -0700 (Sat, 19 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added about window. ------------------------------------------------------------------------ r6796 | tewok | 2012-05-11 10:56:24 -0700 (Fri, 11 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added a few fields to status and boot messages. ------------------------------------------------------------------------ r6795 | tewok | 2012-05-11 10:38:24 -0700 (Fri, 11 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Only sign zones for -alwayssign if the zone wasn't already signed this pass. ------------------------------------------------------------------------ r6794 | tewok | 2012-05-11 10:03:02 -0700 (Fri, 11 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/README Added description of new rollerd-single zone. ------------------------------------------------------------------------ r6793 | tewok | 2012-05-11 10:01:20 -0700 (Fri, 11 May 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/demos/rollerd-single A /trunk/dnssec-tools/tools/demos/rollerd-single/Makefile A /trunk/dnssec-tools/tools/demos/rollerd-single/README A /trunk/dnssec-tools/tools/demos/rollerd-single/rc.blinkenlights A /trunk/dnssec-tools/tools/demos/rollerd-single/rundemo A /trunk/dnssec-tools/tools/demos/rollerd-single/save-demo.rollrec A /trunk/dnssec-tools/tools/demos/rollerd-single/save-example.com New single-zone demo. ------------------------------------------------------------------------ r6792 | tewok | 2012-05-11 08:42:23 -0700 (Fri, 11 May 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd In rollkeys(), removed restriction from -alwayssign that prevented signing from happening during [KZ]SK phase 1 and 3. ------------------------------------------------------------------------ r6791 | tewok | 2012-05-10 11:06:34 -0700 (Thu, 10 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/Makefile M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/README Removed unnecessary db.cache and fixed a zonesigner call. ------------------------------------------------------------------------ r6790 | tewok | 2012-05-10 10:46:31 -0700 (Thu, 10 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added a -zsargs option for a global set of zonesigner arguments. ------------------------------------------------------------------------ r6789 | tewok | 2012-05-10 08:13:18 -0700 (Thu, 10 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Minor fix for usage message. ------------------------------------------------------------------------ r6788 | hserus | 2012-05-09 12:39:58 -0700 (Wed, 09 May 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/webmin A /trunk/dnssec-tools/apps/webmin/bind8.images.dnssectools.gif A /trunk/dnssec-tools/apps/webmin/webmin-1.580-dt.patch Add patch for webmin ------------------------------------------------------------------------ r6787 | tewok | 2012-05-09 10:11:27 -0700 (Wed, 09 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-demo.rollrec Added display lines to rollrec entries. ------------------------------------------------------------------------ r6786 | tewok | 2012-05-09 09:33:58 -0700 (Wed, 09 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-demo.rollrec Add display flag to rollrec file template. ------------------------------------------------------------------------ r6785 | tewok | 2012-05-08 17:23:55 -0700 (Tue, 08 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Fixed the pod for rollrec_del(). ------------------------------------------------------------------------ r6784 | hardaker | 2012-05-07 16:40:19 -0700 (Mon, 07 May 2012) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL added check-zone-expiration ------------------------------------------------------------------------ r6783 | hardaker | 2012-05-07 16:39:46 -0700 (Mon, 07 May 2012) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/check-zone-expiration documentation for the tool ------------------------------------------------------------------------ r6782 | hardaker | 2012-05-07 16:39:36 -0700 (Mon, 07 May 2012) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/check-zone-expiration output formatting ------------------------------------------------------------------------ r6781 | hardaker | 2012-05-07 16:39:28 -0700 (Mon, 07 May 2012) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/check-zone-expiration exit if any zone is near the defined expiration tiem ------------------------------------------------------------------------ r6780 | hardaker | 2012-05-07 16:39:19 -0700 (Mon, 07 May 2012) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/check-zone-expiration implement the -m option functionality to only report for zones nearing time ------------------------------------------------------------------------ r6779 | hardaker | 2012-05-07 16:39:11 -0700 (Mon, 07 May 2012) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/check-zone-expiration process all zones on the command line ------------------------------------------------------------------------ r6778 | hardaker | 2012-05-07 16:39:02 -0700 (Mon, 07 May 2012) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/check-zone-expiration create standard argument parsing and error messages ------------------------------------------------------------------------ r6777 | hardaker | 2012-05-07 16:38:53 -0700 (Mon, 07 May 2012) | 1 line Changed paths: A /trunk/dnssec-tools/tools/scripts/check-zone-expiration initial working mini-version of a tool to check zone expiration times ------------------------------------------------------------------------ r6776 | tewok | 2012-05-07 10:34:08 -0700 (Mon, 07 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added some rollrec_close() and rollrec_unlock() calls on error returns. ------------------------------------------------------------------------ r6775 | tewok | 2012-05-03 18:04:08 -0700 (Thu, 03 May 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Fixed error handling of KSK and ZSK menu commands. In some cases, we'll capture the output and display a dialog box. Errors with rollksk and rollzsk will no longer pop the zone back to normal mode. ------------------------------------------------------------------------ r6774 | tewok | 2012-05-03 18:01:04 -0700 (Thu, 03 May 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Removed extraneous arguments from a few cmd_rollnow() calls. Removed a newline from a log message. Divided up a few error checks for more fine-grained log messages. ------------------------------------------------------------------------ r6773 | tewok | 2012-05-03 17:59:13 -0700 (Thu, 03 May 2012) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Changed most error messages from rollerd to go to stdout (instead of stderr.) There are errors, and then there are errors. This should allow other scripts and programs to easily capture these messages for their own purposes. ------------------------------------------------------------------------ r6771 | tewok | 2012-05-03 09:51:23 -0700 (Thu, 03 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added menu commands for rollksk and rollallksks. ------------------------------------------------------------------------ r6765 | tewok | 2012-05-03 09:23:43 -0700 (Thu, 03 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Added -rollallksks command. ------------------------------------------------------------------------ r6764 | tewok | 2012-05-03 09:22:05 -0700 (Thu, 03 May 2012) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added support for ROLLCMD_ROLLALLKSKS command. Made ROLLCMD_ROLLALLKSKS and ROLLCMD_ROLLALLZSKS not affect zones already in rollover. Moved bulk of cmd_rollallzsks() into rollemall(). ------------------------------------------------------------------------ r6763 | tewok | 2012-05-03 09:17:58 -0700 (Thu, 03 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added ROLLCMD_ROLLALLKSKS command. ------------------------------------------------------------------------ r6762 | tewok | 2012-05-03 08:13:48 -0700 (Thu, 03 May 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Assume that zones without a {ksk,zsk}_rollsecs field is newly created, and therefore doesn't immediately need to leap into rollover. ------------------------------------------------------------------------ r6761 | tewok | 2012-05-02 10:00:12 -0700 (Wed, 02 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/dtrealms-basic/phaser Adjusted copyrights. ------------------------------------------------------------------------ r6760 | tewok | 2012-05-02 09:59:21 -0700 (Wed, 02 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-vastzones/rundemo Added pod. ------------------------------------------------------------------------ r6759 | tewok | 2012-05-02 09:58:23 -0700 (Wed, 02 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-subdirs/rundemo Adjusted copyrights. ------------------------------------------------------------------------ r6758 | tewok | 2012-05-02 09:57:49 -0700 (Wed, 02 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-subdirs/Makefile M /trunk/dnssec-tools/tools/demos/rollerd-subdirs/README Adjusted copyrights. ------------------------------------------------------------------------ r6757 | tewok | 2012-05-02 09:56:58 -0700 (Wed, 02 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-demo.rollrec M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-example.com A /trunk/dnssec-tools/tools/demos/rollerd-basic/save-new.rollrec M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-test.com Adjusted demo values. ------------------------------------------------------------------------ r6756 | tewok | 2012-05-02 09:53:54 -0700 (Wed, 02 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/Makefile Adjusted copyrights. ------------------------------------------------------------------------ r6755 | tewok | 2012-05-02 09:29:28 -0700 (Wed, 02 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/Makefile M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/README M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/rc.blinkenlights M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/rundemo M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-demo.rollrec M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-dummy.com M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-example.com M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-test.com M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-yowzah.com Tweaked some timing values and updated copyrights. ------------------------------------------------------------------------ r6754 | tewok | 2012-05-01 17:45:20 -0700 (Tue, 01 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/Makefile Cleaned up makefile a bit. ------------------------------------------------------------------------ r6753 | tewok | 2012-05-01 17:11:33 -0700 (Tue, 01 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added support for "-signzones all" and "-signzones active" commands. ------------------------------------------------------------------------ r6752 | tewok | 2012-05-01 16:59:57 -0700 (Tue, 01 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Added -signzones commands. ------------------------------------------------------------------------ r6751 | tewok | 2012-05-01 16:54:36 -0700 (Tue, 01 May 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added support for -signzones command. Removed a few old, extraneous boot-time log messages. ------------------------------------------------------------------------ r6750 | tewok | 2012-05-01 16:48:34 -0700 (Tue, 01 May 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added the commands for signzone and signzones. ------------------------------------------------------------------------ r6749 | rstory | 2012-05-01 12:05:50 -0700 (Tue, 01 May 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c tweak log message ------------------------------------------------------------------------ r6748 | rstory | 2012-05-01 12:05:37 -0700 (Tue, 01 May 2012) | 1 line Changed paths: A /trunk/dnssec-tools/apps/mozilla/nspr/nspr-spec.patch (from /trunk/dnssec-tools/apps/mozilla/nspr-spec.patch:6747) D /trunk/dnssec-tools/apps/mozilla/nspr-spec.patch move nspr spec to nspr dir ------------------------------------------------------------------------ r6747 | rstory | 2012-05-01 12:05:24 -0700 (Tue, 01 May 2012) | 3 lines Changed paths: D /trunk/dnssec-tools/apps/mozilla/dnssec-nspr.patch A /trunk/dnssec-tools/apps/mozilla/nspr A /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central A /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/0001-getaddr-patch-for-mozilla-bug-699055.patch A /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/0002-add-NSPR-log-module-for-DNS.patch A /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/0003-add-dnssec-options-flags-to-configure-and-makefiles.patch A /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/0004-add-DNSSEC-error-codes-and-text.patch A /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/0005-factor-out-common-code-from-PR_GetAddrInfoByName.patch A /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/0006-header-definitions-for-Extended-DNSSEC-and-asynchron.patch A /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/0007-add-dnssec-validation-to-prnetdb.patch A /trunk/dnssec-tools/apps/mozilla/nspr/mozilla-central/0008-update-getai-to-test-async-disable-validation.patch update nspr dnssec patch - works with mozilla-central and nspr-4.9 ------------------------------------------------------------------------ r6746 | tewok | 2012-04-30 17:11:52 -0700 (Mon, 30 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Removed debugging bits from a log message. ------------------------------------------------------------------------ r6745 | tewok | 2012-04-30 16:54:20 -0700 (Mon, 30 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Moved a log message to accurately report the time for key expiration. ------------------------------------------------------------------------ r6744 | hserus | 2012-04-27 11:37:46 -0700 (Fri, 27 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm M /trunk/dnssec-tools/tools/modules/dnssectools.pm Enable default path for the lsdnssec command ------------------------------------------------------------------------ r6743 | tewok | 2012-04-27 11:34:17 -0700 (Fri, 27 Apr 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fix to the SOA regexp so that spaces between the email and the paren are optional. ------------------------------------------------------------------------ r6742 | tewok | 2012-04-27 09:51:51 -0700 (Fri, 27 Apr 2012) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Modified to continue running if it can't find a rollrec, it'll just sleep until it's available. It also will only log the missing rollrec once every five checks, in order to not fill up the log with too many extraneous messages. Five isn't a magic number; it was chosen as an assumed reasonable number. This can be increased or lowered if desired. ------------------------------------------------------------------------ r6741 | tewok | 2012-04-26 16:50:40 -0700 (Thu, 26 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Use the correct variable in an error message in zonemodified(). ------------------------------------------------------------------------ r6740 | hardaker | 2012-04-26 15:28:52 -0700 (Thu, 26 Apr 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/InfoBox.qml make the close-box mouse area bigger than the parent for finger friendliness ------------------------------------------------------------------------ r6739 | hardaker | 2012-04-26 15:28:37 -0700 (Thu, 26 Apr 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml update version to 1.12.4 ------------------------------------------------------------------------ r6738 | hardaker | 2012-04-26 15:28:23 -0700 (Thu, 26 Apr 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/DNSSECCheckThread.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/DNSSECTest.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js remove debugging statements ------------------------------------------------------------------------ r6737 | hardaker | 2012-04-26 15:28:07 -0700 (Thu, 26 Apr 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js document a future TODO ------------------------------------------------------------------------ r6736 | hardaker | 2012-04-26 15:27:51 -0700 (Thu, 26 Apr 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/DNSSECCheckThread.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/DNSSECTest.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.h Fix return codes for states run in the other thread ------------------------------------------------------------------------ r6735 | hardaker | 2012-04-26 15:27:37 -0700 (Thu, 26 Apr 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js fix removing hosts ------------------------------------------------------------------------ r6734 | hardaker | 2012-04-26 15:27:23 -0700 (Thu, 26 Apr 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/DNSSECCheckThread.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/DNSSECCheckThread.h M /trunk/dnssec-tools/validator/apps/dnssec-check/DNSSECTest.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.h M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js Run TCP tests in a separate thread ------------------------------------------------------------------------ r6733 | hardaker | 2012-04-26 15:26:51 -0700 (Thu, 26 Apr 2012) | 4 lines Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-check/DNSSECCheckThread.cpp A /trunk/dnssec-tools/validator/apps/dnssec-check/DNSSECCheckThread.h M /trunk/dnssec-tools/validator/apps/dnssec-check/DNSSECTest.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/DNSSECTest.h M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.h M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp Initial attempt at sticking connect() in a separate thread. - Still need to move actual object that gets created to the other thread. The signal must go to an object created in the other thread's run() function for it to be executed in a separate thread. ------------------------------------------------------------------------ r6732 | tewok | 2012-04-26 07:31:59 -0700 (Thu, 26 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Moved an option check so -help would actually work. ------------------------------------------------------------------------ r6731 | tewok | 2012-04-25 14:41:46 -0700 (Wed, 25 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added a command to initiate a mid-wait zone signing. ------------------------------------------------------------------------ r6730 | tewok | 2012-04-25 10:14:02 -0700 (Wed, 25 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added a comment warning against combining two menu commands into a toggle. ------------------------------------------------------------------------ r6729 | tewok | 2012-04-25 10:07:30 -0700 (Wed, 25 Apr 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Reorganized the if clauses in rollerdcmd(). Those used most often percolated to the top of the grand if/elsif/else block. Those used less frequently sunk to the bottom. ------------------------------------------------------------------------ r6728 | tewok | 2012-04-25 09:06:29 -0700 (Wed, 25 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Have the show-keys toggle only do a single update. ------------------------------------------------------------------------ r6727 | tewok | 2012-04-25 08:51:26 -0700 (Wed, 25 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Handled an undefined-value error. ------------------------------------------------------------------------ r6726 | tewok | 2012-04-25 08:31:34 -0700 (Wed, 25 Apr 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Fixed a formatting error in sets. The translated set type wasn't being used to calculate the column spacing. Fixed a few comments. ------------------------------------------------------------------------ r6725 | tewok | 2012-04-24 12:15:44 -0700 (Tue, 24 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added support for turning on/off the remaining-time status. ------------------------------------------------------------------------ r6724 | tewok | 2012-04-24 09:20:33 -0700 (Tue, 24 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Deleted a few commented-out lines. ------------------------------------------------------------------------ r6723 | tewok | 2012-04-24 09:19:10 -0700 (Tue, 24 Apr 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Fixed time display in status column. Combined two cases in rollerdcmd(). ------------------------------------------------------------------------ r6722 | tewok | 2012-04-24 09:18:31 -0700 (Tue, 24 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Better handling of messages to blinkenlights. ------------------------------------------------------------------------ r6721 | tewok | 2012-04-21 11:12:28 -0700 (Sat, 21 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Got remaining-time display in the status column working again. ------------------------------------------------------------------------ r6720 | rstory | 2012-04-21 05:57:47 -0700 (Sat, 21 Apr 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c no CTX_LOCK_COUNT check ifdef VAL_NO_THREADS ------------------------------------------------------------------------ r6718 | tewok | 2012-04-18 14:47:05 -0700 (Wed, 18 Apr 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Properly handle changes in $maxzones. Fixed a comment. ------------------------------------------------------------------------ r6717 | hardaker | 2012-04-18 14:11:47 -0700 (Wed, 18 Apr 2012) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Use -usezskpub during phase 3 too ------------------------------------------------------------------------ r6716 | hardaker | 2012-04-18 14:11:38 -0700 (Wed, 18 Apr 2012) | 1 line Changed paths: M /trunk/dnssec-tools/testing/rolltest.sh checking 1.7 supported and better error messages ------------------------------------------------------------------------ r6715 | hardaker | 2012-04-18 14:11:29 -0700 (Wed, 18 Apr 2012) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd fix the -alwayssign option in certain phase change cases ------------------------------------------------------------------------ r6714 | hardaker | 2012-04-18 14:11:19 -0700 (Wed, 18 Apr 2012) | 1 line Changed paths: M /trunk/dnssec-tools/testing/rolltest.sh pass -alwayssign to second test test ------------------------------------------------------------------------ r6713 | hardaker | 2012-04-18 14:11:10 -0700 (Wed, 18 Apr 2012) | 1 line Changed paths: M /trunk/dnssec-tools/testing/rolltest.sh move tests into a sub-function and call multiple times for testing it ------------------------------------------------------------------------ r6712 | hardaker | 2012-04-18 14:10:59 -0700 (Wed, 18 Apr 2012) | 1 line Changed paths: M /trunk/dnssec-tools/testing/rolltest.sh rework it so it doesn't call zonesigner for older versions ------------------------------------------------------------------------ r6711 | tewok | 2012-04-17 17:41:15 -0700 (Tue, 17 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Got the status column to give proper color on restarts. ------------------------------------------------------------------------ r6710 | tewok | 2012-04-17 10:25:58 -0700 (Tue, 17 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Clean-up and commenting. ------------------------------------------------------------------------ r6709 | tewok | 2012-04-17 09:04:06 -0700 (Tue, 17 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/nagios/diff-status.c D /trunk/dnssec-tools/apps/nagios/dt-trustman M /trunk/dnssec-tools/apps/nagios/dt_donuts M /trunk/dnssec-tools/apps/nagios/dt_trustman M /trunk/dnssec-tools/apps/nagios/dt_zonestat M /trunk/dnssec-tools/apps/nagios/dt_zonetimer Changed Cobhams references to Sparta. ------------------------------------------------------------------------ r6708 | tewok | 2012-04-17 08:51:58 -0700 (Tue, 17 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/nagios/dt_trustman Changed dt-trustman to dt_trustman in pod, comments, and strings. ------------------------------------------------------------------------ r6707 | tewok | 2012-04-17 08:50:12 -0700 (Tue, 17 Apr 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/nagios/dt_trustman (from /trunk/dnssec-tools/apps/nagios/dt-trustman:6706) Renamed dt-trustman to dt_trustman to match other monitors. ------------------------------------------------------------------------ r6706 | tewok | 2012-04-17 08:05:33 -0700 (Tue, 17 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Prettied up the window when we get down to small numbers of columns. ------------------------------------------------------------------------ r6705 | hserus | 2012-04-16 07:28:26 -0700 (Mon, 16 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Don't do fallback to root processing for a query that is being chased in the context of another query. ------------------------------------------------------------------------ r6704 | hardaker | 2012-04-13 11:15:27 -0700 (Fri, 13 Apr 2012) | 1 line Changed paths: A /trunk/dnssec-tools/testing/dnssec-tools.conf A /trunk/dnssec-tools/testing/example.com A /trunk/dnssec-tools/testing/rolltest.sh random starting files for testing rollerd/zonesigner behavior during rolling ------------------------------------------------------------------------ r6703 | hardaker | 2012-04-13 11:15:15 -0700 (Fri, 13 Apr 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.cpp zero the fd set when checking outstanding async requests ------------------------------------------------------------------------ r6702 | tewok | 2012-04-12 17:02:20 -0700 (Thu, 12 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsdnssec Sort the zones before printing their information. ------------------------------------------------------------------------ r6701 | tewok | 2012-04-12 16:52:30 -0700 (Thu, 12 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/nagios/dt_zonetimer Modified arguments to require a particular zone. ------------------------------------------------------------------------ r6700 | tewok | 2012-04-12 16:25:46 -0700 (Thu, 12 Apr 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsdnssec When parsing files, keyrec filenames will be taken from rollrec files and added to the list of files to load. ------------------------------------------------------------------------ r6699 | tewok | 2012-04-12 15:11:58 -0700 (Thu, 12 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/nagios/dt_zonetimer Fixed default times to match pod. ------------------------------------------------------------------------ r6698 | tewok | 2012-04-12 15:11:07 -0700 (Thu, 12 Apr 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/nagios/dt_zonetimer New Nagios plugin for finding zone's next rollover phase time. ------------------------------------------------------------------------ r6697 | tewok | 2012-04-12 15:08:45 -0700 (Thu, 12 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/nagios/README Added an entry for dt_zonetimer. ------------------------------------------------------------------------ r6696 | tewok | 2012-04-12 15:06:37 -0700 (Thu, 12 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/nagios/dt_donuts M /trunk/dnssec-tools/apps/nagios/dt_zonestat Fixed some poddy bits. ------------------------------------------------------------------------ r6695 | tewok | 2012-04-12 14:19:59 -0700 (Thu, 12 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsdnssec Added monitoring option. ------------------------------------------------------------------------ r6694 | tewok | 2012-04-12 14:17:26 -0700 (Thu, 12 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsdnssec Modified expand_files() to check for non-existent and unreadable files. ------------------------------------------------------------------------ r6693 | tewok | 2012-04-11 09:33:15 -0700 (Wed, 11 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsdnssec Pod fixed to mention .rrf files as well as .rollrec files. ------------------------------------------------------------------------ r6692 | tewok | 2012-04-11 08:05:40 -0700 (Wed, 11 Apr 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsdnssec Changed the phase line for -r to give the long phase message if the verbosity level is 6-9. Fixed a typo in a message. ------------------------------------------------------------------------ r6691 | tewok | 2012-04-11 07:53:57 -0700 (Wed, 11 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsdnssec A few minor fixes to the pod. ------------------------------------------------------------------------ r6690 | tewok | 2012-04-10 11:12:59 -0700 (Tue, 10 Apr 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm keyrec_keypaths() was fixed for revoked and obsolete keys. This was reported in bug #149. ------------------------------------------------------------------------ r6689 | tewok | 2012-04-07 11:48:26 -0700 (Sat, 07 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/nagios/README A /trunk/dnssec-tools/apps/nagios/dt-trustman dt-trustman is a Nagios plugin for running trustman on remote machines. ------------------------------------------------------------------------ r6688 | tewok | 2012-04-07 10:28:52 -0700 (Sat, 07 Apr 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Made exit values a bit more useful. Exit when new-key file can't be opened or isn't specified. Editted the pod, sorted conf entry section, added exit code section. ------------------------------------------------------------------------ r6687 | tewok | 2012-04-03 12:20:14 -0700 (Tue, 03 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Sorted options in pod, tweaked wording of some option text. ------------------------------------------------------------------------ r6685 | tewok | 2012-04-03 09:05:25 -0700 (Tue, 03 Apr 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Added -Monitor option to track a set of eight conditions. ------------------------------------------------------------------------ r6684 | tewok | 2012-03-30 10:34:20 -0700 (Fri, 30 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Buncha readability fixes. ------------------------------------------------------------------------ r6683 | tewok | 2012-03-30 09:34:35 -0700 (Fri, 30 Mar 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Moved an error check in checkzones() to its proper place. Previous location was okay, this is just more efficient in time and memory. Moved the save of a sleep-time into the calculating routine. ------------------------------------------------------------------------ r6682 | tewok | 2012-03-30 09:21:24 -0700 (Fri, 30 Mar 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Tightened up a bit of logic in a checkkey() loop. Added vnotify(), which calls notify() iff -v was given. Changed several notify() calls to use vnotify() instead. ------------------------------------------------------------------------ r6681 | tewok | 2012-03-30 08:20:51 -0700 (Fri, 30 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Moved code from checkkeys() into sched_remove(). ------------------------------------------------------------------------ r6680 | tewok | 2012-03-30 07:35:04 -0700 (Fri, 30 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman More code refactoring: code from checkkeys() to removecheck() ------------------------------------------------------------------------ r6679 | hserus | 2012-03-30 07:21:17 -0700 (Fri, 30 Mar 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs struct val_context was renamed to struct libval_context because of the conflict on Windows ------------------------------------------------------------------------ r6678 | hserus | 2012-03-30 07:20:13 -0700 (Fri, 30 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc Remove defines that are not constants ------------------------------------------------------------------------ r6677 | tewok | 2012-03-29 13:38:35 -0700 (Thu, 29 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Moved sleep-time calculation out of checkkeys() and into getsleeptime(). ------------------------------------------------------------------------ r6676 | tewok | 2012-03-29 13:29:29 -0700 (Thu, 29 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Moved a bunch of code from checkkeys() to timing_check(). ------------------------------------------------------------------------ r6675 | tewok | 2012-03-29 12:48:25 -0700 (Thu, 29 Mar 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Pulled all the seconds counts into one place and made them "constants". (Y'know, in case the number of seconds in a day or an hour ever changes.) ------------------------------------------------------------------------ r6674 | tewok | 2012-03-29 12:45:26 -0700 (Thu, 29 Mar 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Fixed seconds count for 15 days to have the correct number of zeroes. This was actually using 1.5 days. ------------------------------------------------------------------------ r6673 | tewok | 2012-03-29 12:32:26 -0700 (Thu, 29 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Modified resolve_and_check_dnskey() for a little more clarity in logic. ------------------------------------------------------------------------ r6672 | tewok | 2012-03-29 12:12:08 -0700 (Thu, 29 Mar 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Modified read_conf_file() and read_dnsval_file() to not turn the root zone into an empty string. Jiggled read_conf_file() and read_dnsval_file() for improved readability. ------------------------------------------------------------------------ r6671 | tewok | 2012-03-29 09:13:48 -0700 (Thu, 29 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Moved a bunch of code from checkkeys() into the new checkzones(). ------------------------------------------------------------------------ r6670 | rstory | 2012-03-28 13:52:40 -0700 (Wed, 28 Mar 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in move define LIBVAL_CONFIGURE to CFLAGS - instead of validator-config.h, where it isn't seen ------------------------------------------------------------------------ r6669 | rstory | 2012-03-28 12:52:26 -0700 (Wed, 28 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in use AC_SEARCH_LIBS to find openssl routines ------------------------------------------------------------------------ r6668 | tewok | 2012-03-28 12:33:04 -0700 (Wed, 28 Mar 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Pass hashrefs to remove_ta_dnsvalconf() and remove_ta_namedconf() instead of piles of fields. ------------------------------------------------------------------------ r6667 | tewok | 2012-03-28 10:26:28 -0700 (Wed, 28 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Step 1 in a (potentially) major reorganization of trustman. ------------------------------------------------------------------------ r6666 | tewok | 2012-03-28 10:15:08 -0700 (Wed, 28 Mar 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Added a timetrans() call to a message so it'd be clearer when hold-down timer expires. ------------------------------------------------------------------------ r6665 | tewok | 2012-03-27 15:03:46 -0700 (Tue, 27 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman When daemonizing, force the parent to exit with 0. ------------------------------------------------------------------------ r6664 | tewok | 2012-03-27 14:59:54 -0700 (Tue, 27 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Add some error checking when opening the new-keys file. ------------------------------------------------------------------------ r6663 | hserus | 2012-03-27 11:50:16 -0700 (Tue, 27 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/dev-util/find-dns-calls M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap A /trunk/dnssec-tools/tools/python A /trunk/dnssec-tools/tools/python/dnsval A /trunk/dnssec-tools/tools/python/dnsval/dnsval.py A /trunk/dnssec-tools/tools/python/dnsval/test_dnsval.py Add dns python wrapper contributed by Bob Novas. ------------------------------------------------------------------------ r6662 | hserus | 2012-03-27 10:37:42 -0700 (Tue, 27 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Check for wrap-around of NSEC nxt name for the wildcard proof ------------------------------------------------------------------------ r6661 | tewok | 2012-03-27 09:15:06 -0700 (Tue, 27 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Spelling fixes. ------------------------------------------------------------------------ r6660 | tewok | 2012-03-27 09:11:11 -0700 (Tue, 27 Mar 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Better error checking in load_newkeys() and save_newkeys(). Eminent domain pacing fixes. ------------------------------------------------------------------------ r6659 | tewok | 2012-03-27 08:57:24 -0700 (Tue, 27 Mar 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Fixed the function headers to meet my preferences. (Since I was named trustman's guardian, sort of an Alfred Pennyworth, I claim the privilege to make such changes.) ------------------------------------------------------------------------ r6648 | hardaker | 2012-03-27 07:19:35 -0700 (Tue, 27 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c return -1 on read error rather than any portional bytes read ------------------------------------------------------------------------ r6646 | hardaker | 2012-03-27 06:59:27 -0700 (Tue, 27 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c fix to not read endlessly from a TCP socket ------------------------------------------------------------------------ r6645 | hardaker | 2012-03-27 06:59:17 -0700 (Tue, 27 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml version update ------------------------------------------------------------------------ r6644 | tewok | 2012-03-26 14:55:52 -0700 (Mon, 26 Mar 2012) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/grandvizier Renamed "Control" menu to "Realm Control". Added "Realm Commands" menu. Added "DS Published for All Zones in All Realms" command. Added "DS Published for All Zones in Selected Realm" command. Added "Stop All Zones in Selected Realm" command. Added "Start All Zones in Selected Realm" command. ------------------------------------------------------------------------ r6643 | tewok | 2012-03-26 12:34:15 -0700 (Mon, 26 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/grandvizier Fixed row constants so row selection works properly. ------------------------------------------------------------------------ r6642 | tewok | 2012-03-26 10:33:01 -0700 (Mon, 26 Mar 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/grandvizier Added an exit after the windows are destroyed from a halt command. ------------------------------------------------------------------------ r6641 | hardaker | 2012-03-26 08:33:25 -0700 (Mon, 26 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/WantToSubmitInfo.qml submit box sizing ------------------------------------------------------------------------ r6640 | hardaker | 2012-03-26 08:33:13 -0700 (Mon, 26 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Help.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/InfoBox.qml infobox sizing ------------------------------------------------------------------------ r6639 | hardaker | 2012-03-26 06:02:46 -0700 (Mon, 26 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/InfoBox.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/WantToSubmitInfo.qml font sizing changes ------------------------------------------------------------------------ r6638 | hardaker | 2012-03-26 06:02:34 -0700 (Mon, 26 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js reset the wait bar ------------------------------------------------------------------------ r6637 | hardaker | 2012-03-26 06:02:24 -0700 (Mon, 26 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/WaitCursor.qml Cleanup of the wait bar and submit button fixes ------------------------------------------------------------------------ r6636 | hardaker | 2012-03-26 06:02:12 -0700 (Mon, 26 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/InfoBox.qml don't set the top state to "submitted" for generic info boxes ------------------------------------------------------------------------ r6635 | hardaker | 2012-03-26 06:02:01 -0700 (Mon, 26 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/InfoBox.qml Added a give-up timer and screen ------------------------------------------------------------------------ r6634 | hardaker | 2012-03-23 16:06:51 -0700 (Fri, 23 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js fix remove button ------------------------------------------------------------------------ r6633 | hardaker | 2012-03-23 16:06:37 -0700 (Fri, 23 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml up version to 1.12.2 ------------------------------------------------------------------------ r6632 | hardaker | 2012-03-23 16:06:24 -0700 (Fri, 23 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js fix grades ------------------------------------------------------------------------ r6631 | hardaker | 2012-03-23 16:06:10 -0700 (Fri, 23 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/WantToSubmitInfo.qml fix submit box height ------------------------------------------------------------------------ r6630 | tewok | 2012-03-23 10:28:16 -0700 (Fri, 23 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/dtrealms-basic/Makefile Divided up the realm construction into two separate targets, one per realm. ------------------------------------------------------------------------ r6629 | rstory | 2012-03-23 08:13:29 -0700 (Fri, 23 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure run autoconf ------------------------------------------------------------------------ r6628 | rstory | 2012-03-23 08:13:08 -0700 (Fri, 23 Mar 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/configure.in MinGW fixes - look for crypto stuff in -leay32 instead of -lcrypto ------------------------------------------------------------------------ r6627 | rstory | 2012-03-23 08:12:46 -0700 (Fri, 23 Mar 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/configure.in MinGW fixes - add --enable-stdcall-fixes to eliminate warning - add OpenSSL-Win32 path to search path for mingw32 ------------------------------------------------------------------------ r6626 | rstory | 2012-03-23 08:12:23 -0700 (Fri, 23 Mar 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/Makefile.in M /trunk/dnssec-tools/validator/Makefile.top M /trunk/dnssec-tools/validator/configure.in don't use hardcoded filename for config.cache - save user path, so make distclean will clean the cache ------------------------------------------------------------------------ r6625 | rstory | 2012-03-23 08:11:57 -0700 (Fri, 23 Mar 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/Makefile.in M /trunk/dnssec-tools/validator/apps/Makefile.in M /trunk/dnssec-tools/validator/libsres/Makefile.in M /trunk/dnssec-tools/validator/libval/Makefile.in M /trunk/dnssec-tools/validator/libval_shim/Makefile.in consistent use of DESTDIR - always use $(DESTDIR)xx, not $(DESTDIR)/x. MinGW chokes on paths that start with "//", treating them as network paths. ------------------------------------------------------------------------ r6624 | tewok | 2012-03-22 17:28:50 -0700 (Thu, 22 Mar 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/demos/dtrealms-basic/README Readme for the dtrealms-basic demo. ------------------------------------------------------------------------ r6623 | tewok | 2012-03-22 17:20:46 -0700 (Thu, 22 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/README Added an entry for the dtrealms-basic demo. ------------------------------------------------------------------------ r6622 | tewok | 2012-03-22 17:14:08 -0700 (Thu, 22 Mar 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/demos/dtrealms-basic A /trunk/dnssec-tools/tools/demos/dtrealms-basic/Makefile A /trunk/dnssec-tools/tools/demos/dtrealms-basic/mkconffiles A /trunk/dnssec-tools/tools/demos/dtrealms-basic/phaser A /trunk/dnssec-tools/tools/demos/dtrealms-basic/rundemo A /trunk/dnssec-tools/tools/demos/dtrealms-basic/savefiles A /trunk/dnssec-tools/tools/demos/dtrealms-basic/savefiles/demo.realm A /trunk/dnssec-tools/tools/demos/dtrealms-basic/savefiles/example-Makefile A /trunk/dnssec-tools/tools/demos/dtrealms-basic/savefiles/example-conf A /trunk/dnssec-tools/tools/demos/dtrealms-basic/savefiles/example-demo.com A /trunk/dnssec-tools/tools/demos/dtrealms-basic/savefiles/example-example.com A /trunk/dnssec-tools/tools/demos/dtrealms-basic/savefiles/example-rollrec A /trunk/dnssec-tools/tools/demos/dtrealms-basic/savefiles/example-test.com A /trunk/dnssec-tools/tools/demos/dtrealms-basic/savefiles/rc.blinkenlights A /trunk/dnssec-tools/tools/demos/dtrealms-basic/savefiles/test-Makefile A /trunk/dnssec-tools/tools/demos/dtrealms-basic/savefiles/test-conf A /trunk/dnssec-tools/tools/demos/dtrealms-basic/savefiles/test-dev.com A /trunk/dnssec-tools/tools/demos/dtrealms-basic/savefiles/test-rollrec A /trunk/dnssec-tools/tools/demos/dtrealms-basic/savefiles/test-test.com Basic, two-realm demo of dtrealms. ------------------------------------------------------------------------ r6621 | tewok | 2012-03-22 16:48:35 -0700 (Thu, 22 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Only check boolean values if they are defined in the config file. ------------------------------------------------------------------------ r6620 | tewok | 2012-03-22 16:47:10 -0700 (Thu, 22 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Ensure rollmgr_channel() returned success. ------------------------------------------------------------------------ r6619 | tewok | 2012-03-22 16:45:54 -0700 (Thu, 22 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtrealms Ensure that rollmgr_channel() returned success. ------------------------------------------------------------------------ r6618 | tewok | 2012-03-22 16:43:43 -0700 (Thu, 22 Mar 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtrealms If any of the directories in the realms file are relative, convert them to absolute. ------------------------------------------------------------------------ r6617 | tewok | 2012-03-22 16:37:49 -0700 (Thu, 22 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rolllog Ensure rollmgr_sendcmd() returned success. ------------------------------------------------------------------------ r6616 | tewok | 2012-03-22 16:36:11 -0700 (Thu, 22 Mar 2012) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/modules/realmmgr.pm Added checks in realmmgr_channel() to ensure Unix socket names aren't too long. Added an O/S based set in realmmgr_prepdep() to save the maximum Unix socket name length. Fixed the error returns if an internet socket could be bound or listened to. Added return codes to the realmmgr_channel() pod. ------------------------------------------------------------------------ r6615 | tewok | 2012-03-22 16:33:30 -0700 (Thu, 22 Mar 2012) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added checks in rollmgr_channel() to ensure Unix socket names aren't too long. Added an O/S based set in rollmgr_prepdep() to save the maximum Unix socket name length. Fixed the error returns if an internet socket could be bound or listened to. Added return codes to the rollmgr_channel() pod. ------------------------------------------------------------------------ r6614 | hserus | 2012-03-22 14:46:12 -0700 (Thu, 22 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator-internal.h Include validator-compat.h for windows ------------------------------------------------------------------------ r6613 | hserus | 2012-03-22 14:20:43 -0700 (Thu, 22 Mar 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator-internal.h M /trunk/dnssec-tools/validator/libsres/base64.c M /trunk/dnssec-tools/validator/libsres/ns_name.c M /trunk/dnssec-tools/validator/libsres/ns_netint.c M /trunk/dnssec-tools/validator/libsres/ns_parse.c M /trunk/dnssec-tools/validator/libsres/ns_print.c M /trunk/dnssec-tools/validator/libsres/ns_samedomain.c M /trunk/dnssec-tools/validator/libsres/ns_ttl.c M /trunk/dnssec-tools/validator/libsres/nsap_addr.c M /trunk/dnssec-tools/validator/libsres/res_comp.c M /trunk/dnssec-tools/validator/libsres/res_debug.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_mkquery.c M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libsres/res_support.c M /trunk/dnssec-tools/validator/libsres/res_tsig.c M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_crypto.c M /trunk/dnssec-tools/validator/libval/val_get_rrset.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_parse.c M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_verify.c M /trunk/dnssec-tools/validator/libval/val_x_query.c Move include for validator/validator-config.h to validator-internal.h Include validator-config.h only if we're not on windows or if configure has been run. ------------------------------------------------------------------------ r6612 | hserus | 2012-03-22 14:08:08 -0700 (Thu, 22 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator/validator-config.h.in Wrongly compiled out validator-compat.h. Fix 6611 still needs some work. ------------------------------------------------------------------------ r6611 | hserus | 2012-03-22 13:48:59 -0700 (Thu, 22 Mar 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in D /trunk/dnssec-tools/validator/include/validator/validator-config.h M /trunk/dnssec-tools/validator/include/validator/validator-config.h.in D /trunk/dnssec-tools/validator/libval/val_inline_conf.h M /trunk/dnssec-tools/validator/libval/val_policy.c Revert change 6573. We now include the validator-config.h and val_inline_conf.h headers only if we're not on Windows or we've run the configure script. ------------------------------------------------------------------------ r6610 | hardaker | 2012-03-22 11:17:02 -0700 (Thu, 22 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml minor wording changes ------------------------------------------------------------------------ r6609 | hardaker | 2012-03-22 11:16:48 -0700 (Thu, 22 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.h M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml Added an error message when a host name is invalid ------------------------------------------------------------------------ r6608 | hardaker | 2012-03-22 11:16:34 -0700 (Thu, 22 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/NewServerBox.qml Added a widget id ------------------------------------------------------------------------ r6607 | hardaker | 2012-03-22 11:16:21 -0700 (Thu, 22 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/NewServerBox.qml Add a widget id and remove a non-working debug test ------------------------------------------------------------------------ r6606 | hardaker | 2012-03-22 11:16:06 -0700 (Thu, 22 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml fix button centering during add ------------------------------------------------------------------------ r6605 | hardaker | 2012-03-22 11:15:53 -0700 (Thu, 22 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml Updated version and added a version display to the header ------------------------------------------------------------------------ r6604 | hardaker | 2012-03-22 11:15:40 -0700 (Thu, 22 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.cpp Last of the better error messages ------------------------------------------------------------------------ r6603 | hardaker | 2012-03-22 11:15:28 -0700 (Thu, 22 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.cpp better error descriptions and improved? error macros ------------------------------------------------------------------------ r6602 | hardaker | 2012-03-22 11:15:15 -0700 (Thu, 22 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp Allow VAL_NO_ASYNC to work (commenting out unavailable code) ------------------------------------------------------------------------ r6601 | hardaker | 2012-03-22 11:15:02 -0700 (Thu, 22 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js run dataAvailable() ------------------------------------------------------------------------ r6600 | hardaker | 2012-03-22 11:14:47 -0700 (Thu, 22 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro Add a define statement for syncronous-only if desired ------------------------------------------------------------------------ r6599 | hardaker | 2012-03-22 11:03:35 -0700 (Thu, 22 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.cpp change edns0 size minimum to 1480 ------------------------------------------------------------------------ r6598 | hserus | 2012-03-22 06:42:41 -0700 (Thu, 22 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/README add instructions for building on windows ------------------------------------------------------------------------ r6597 | tewok | 2012-03-21 10:21:56 -0700 (Wed, 21 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/genkrf Fixed to use proper signing-set prefix. ------------------------------------------------------------------------ r6596 | tewok | 2012-03-21 10:18:12 -0700 (Wed, 21 Mar 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added keyrec_signset_prefix() to build and return a zone's signing-set prefix. Fixed keyrec_signset_newname() to use proper signing-set prefix. ------------------------------------------------------------------------ r6595 | hserus | 2012-03-21 09:15:49 -0700 (Wed, 21 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c Use the renamed struct, libval_context instead of the older val_context ------------------------------------------------------------------------ r6594 | tewok | 2012-03-21 08:55:05 -0700 (Wed, 21 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollinit Fixed version number and a comment. ------------------------------------------------------------------------ r6593 | hserus | 2012-03-21 08:00:03 -0700 (Wed, 21 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator-compat.h Remove various SIZEOF defines for windows ------------------------------------------------------------------------ r6592 | hserus | 2012-03-21 07:53:34 -0700 (Wed, 21 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/libsres/libsres.def M /trunk/dnssec-tools/validator/libsres/res_support.c M /trunk/dnssec-tools/validator/libval/val_log.c Add a new convenience function to fill the current timestamp into a character buffer ------------------------------------------------------------------------ r6591 | rstory | 2012-03-21 06:54:28 -0700 (Wed, 21 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/Makefile.in add windows-install target ------------------------------------------------------------------------ r6590 | hserus | 2012-03-21 06:16:12 -0700 (Wed, 21 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator-compat.h Map freeaddrinfo to val_freeaddrinfo if the former is not available ------------------------------------------------------------------------ r6589 | hserus | 2012-03-21 06:15:43 -0700 (Wed, 21 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/getaddr.c M /trunk/dnssec-tools/validator/apps/lookup/src/lookup.cpp M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.3 M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.pod M /trunk/dnssec-tools/validator/doc/validator_api.xml M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c Replace freeaddrinfo() with val_freeaddrinfo() ------------------------------------------------------------------------ r6588 | tewok | 2012-03-20 17:09:20 -0700 (Tue, 20 Mar 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtrealms M /trunk/dnssec-tools/tools/scripts/grandvizier Added a warning about beta-quality. Fixed a couple commenty sort of things. ------------------------------------------------------------------------ r6587 | tewok | 2012-03-20 17:03:49 -0700 (Tue, 20 Mar 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/grandvizier Added a rollrec column to the display. rearranged the infostrip, as well as adjusting its spacing. ------------------------------------------------------------------------ r6586 | rstory | 2012-03-20 15:36:23 -0700 (Tue, 20 Mar 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/Makefile.top M /trunk/dnssec-tools/validator/apps/Makefile.in M /trunk/dnssec-tools/validator/libsres/Makefile.in M /trunk/dnssec-tools/validator/libval/Makefile.in M /trunk/dnssec-tools/validator/libval_shim/Makefile.in fixes for MinGW cross compile; DESTDIR install fix - use EXEEXT on executable names - use DESTDIR when running libtool finish ------------------------------------------------------------------------ r6585 | tewok | 2012-03-20 14:00:52 -0700 (Tue, 20 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Updated module version. ------------------------------------------------------------------------ r6584 | tewok | 2012-03-20 13:57:58 -0700 (Tue, 20 Mar 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Fixed some typos. Fixed the usage message. ------------------------------------------------------------------------ r6583 | tewok | 2012-03-20 13:52:15 -0700 (Tue, 20 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtrealms dtrealms will now daemonize itself upon start-up. ------------------------------------------------------------------------ r6582 | hserus | 2012-03-20 13:49:56 -0700 (Tue, 20 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c use #ifndef instead of #if ! ------------------------------------------------------------------------ r6581 | hserus | 2012-03-20 13:40:42 -0700 (Tue, 20 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator-compat.h On windows we need to pretend that we have freeaddrinfo() available. ------------------------------------------------------------------------ r6580 | tewok | 2012-03-20 13:35:51 -0700 (Tue, 20 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO M /trunk/dnssec-tools/tools/scripts/README Updated for realms commands. ------------------------------------------------------------------------ r6579 | hserus | 2012-03-20 13:34:29 -0700 (Tue, 20 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/windows.mak create 32-bit or 64-bit dlls ------------------------------------------------------------------------ r6578 | tewok | 2012-03-20 13:21:19 -0700 (Tue, 20 Mar 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/modules/realm.pod Description of realms files. ------------------------------------------------------------------------ r6577 | hserus | 2012-03-20 11:31:13 -0700 (Tue, 20 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_inline_conf.h Add missing semicolon ------------------------------------------------------------------------ r6576 | hserus | 2012-03-20 10:25:54 -0700 (Tue, 20 Mar 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/validator/windows.mak Add makefile for supporting windows build using nmake (courtesy Bob Novak) ------------------------------------------------------------------------ r6575 | hserus | 2012-03-20 10:23:46 -0700 (Tue, 20 Mar 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/validator/libsres/dllmain.c A /trunk/dnssec-tools/validator/libsres/libsres.def A /trunk/dnssec-tools/validator/libval/dllmain.c A /trunk/dnssec-tools/validator/libval/libval.def Add support files to enable creation of libval/libsres DLLs on windows ------------------------------------------------------------------------ r6574 | hserus | 2012-03-20 10:18:46 -0700 (Tue, 20 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/configure Regnerate configure script ------------------------------------------------------------------------ r6573 | hserus | 2012-03-20 10:15:10 -0700 (Tue, 20 Mar 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/validator/include/validator/validator-config.h A /trunk/dnssec-tools/validator/libval/val_inline_conf.h Provide default validator-config.h and val_inline_conf.h files for environments where running the configure script may not be possible. ------------------------------------------------------------------------ r6572 | tewok | 2012-03-20 10:08:25 -0700 (Tue, 20 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/realmctl Fixed pod for -command argument. ------------------------------------------------------------------------ r6571 | hserus | 2012-03-20 10:07:50 -0700 (Tue, 20 Mar 2012) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator-compat.h * Provide a custom set of #defines for windows for instances where the configure script will not be run * Do away with checks for wsock; we will default to using ws2 on windows * On windows #define localtime_r to _localtime32_s and swap arguments. * Define va_copy to do a simple assignment of arguments when a definition for this function does not exist. * Use WSAStringToAddressA instead of WSAStringToAddress ------------------------------------------------------------------------ r6569 | hserus | 2012-03-20 10:01:42 -0700 (Tue, 20 Mar 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator/validator-config.h.in * Do away with checks for wsock; we will default to using ws2 on windows * Add check for localtime_r * Include val-compat.h file from correct location ------------------------------------------------------------------------ r6568 | tewok | 2012-03-20 10:00:06 -0700 (Tue, 20 Mar 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtrealms Changed default log file to log.dtrealms. Deleted some debugging code. ------------------------------------------------------------------------ r6567 | hserus | 2012-03-20 09:54:45 -0700 (Tue, 20 Mar 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_support.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_resquery.c * Do away with checks for wsock; we will default to using ws2 on windows * Silence certain trivial compiler warnings/errors when building on windows * Use localtime_r when available. On windows, localtime_r gets mapped to _localtime32_s ------------------------------------------------------------------------ r6565 | hserus | 2012-03-20 09:34:52 -0700 (Tue, 20 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h val_context_t is a typedef around 'struct libval_context', not 'struct val_context' ------------------------------------------------------------------------ r6563 | tewok | 2012-03-20 09:30:49 -0700 (Tue, 20 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/dnssectools.pm Pod fix. ------------------------------------------------------------------------ r6561 | hserus | 2012-03-20 09:03:50 -0700 (Tue, 20 Mar 2012) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator-internal.h struct val_context is already defined in validator-internal. So rename to libval_context. This is only used within the validator codebase. All applications using libval use val_context_t, which luckily does not have any conflicts (yet). ------------------------------------------------------------------------ r6560 | hserus | 2012-03-20 08:58:30 -0700 (Tue, 20 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h Fix prototype for res_switch_all_to_tcp_tid ------------------------------------------------------------------------ r6559 | hserus | 2012-03-20 08:26:52 -0700 (Tue, 20 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/base64.c M /trunk/dnssec-tools/validator/libsres/ns_name.c M /trunk/dnssec-tools/validator/libsres/res_debug.c M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_parse.c M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_verify.c M /trunk/dnssec-tools/validator/libval/val_x_query.c Silence certain trivial compiler warnings/errors when building on windows ------------------------------------------------------------------------ r6558 | hserus | 2012-03-20 08:19:10 -0700 (Tue, 20 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c when switching to tcp, check for null before freeing up the ea response ------------------------------------------------------------------------ r6557 | tewok | 2012-03-20 08:18:11 -0700 (Tue, 20 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/grandvizier Deleted some debugging and unneeded code. ------------------------------------------------------------------------ r6556 | tewok | 2012-03-20 08:07:48 -0700 (Tue, 20 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Added default paths for realms commands. ------------------------------------------------------------------------ r6555 | tewok | 2012-03-20 08:03:42 -0700 (Tue, 20 Mar 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/dnssectools.pm Added realms commands to valid-commands list. Changed dquotes to squotes in valid-commands list. ------------------------------------------------------------------------ r6554 | tewok | 2012-03-20 06:54:39 -0700 (Tue, 20 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL Added entrie for realms commands. ------------------------------------------------------------------------ r6553 | tewok | 2012-03-19 22:47:26 -0700 (Mon, 19 Mar 2012) | 5 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/grandvizier GUI interface to dtrealms. (This is mostly done. The status display is working, but it still needs some additional commands added.) ------------------------------------------------------------------------ r6552 | tewok | 2012-03-19 22:45:36 -0700 (Mon, 19 Mar 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/realminit Create realm entries for realms files. ------------------------------------------------------------------------ r6551 | tewok | 2012-03-19 22:44:56 -0700 (Mon, 19 Mar 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/realmctl Control program for dtrealms. ------------------------------------------------------------------------ r6550 | tewok | 2012-03-19 22:43:58 -0700 (Mon, 19 Mar 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/realmchk Validates realms files. ------------------------------------------------------------------------ r6549 | tewok | 2012-03-19 22:43:30 -0700 (Mon, 19 Mar 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/lsrealm Lists contents of realms files. ------------------------------------------------------------------------ r6548 | tewok | 2012-03-19 22:42:43 -0700 (Mon, 19 Mar 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/dtrealms Realms manager. ------------------------------------------------------------------------ r6547 | tewok | 2012-03-19 22:40:24 -0700 (Mon, 19 Mar 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/modules/realmmgr.pm Control routines for realms manager. ------------------------------------------------------------------------ r6546 | tewok | 2012-03-19 22:38:59 -0700 (Mon, 19 Mar 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/modules/realm.pm Realm manipulation module. ------------------------------------------------------------------------ r6545 | hardaker | 2012-03-19 21:21:15 -0700 (Mon, 19 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js drop debugging print statments and use test names instead of hardcoded numbers ------------------------------------------------------------------------ r6544 | hardaker | 2012-03-19 21:21:01 -0700 (Mon, 19 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Grade.qml Color coded the grades ------------------------------------------------------------------------ r6543 | hardaker | 2012-03-19 21:20:46 -0700 (Mon, 19 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.qrc M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml A /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Grade.qml Implemented host grading ------------------------------------------------------------------------ r6542 | hardaker | 2012-03-19 21:20:30 -0700 (Mon, 19 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml Center the buttons ------------------------------------------------------------------------ r6541 | hardaker | 2012-03-19 21:20:16 -0700 (Mon, 19 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow check the array length to make sure it's > -1 ------------------------------------------------------------------------ r6540 | hardaker | 2012-03-19 21:20:04 -0700 (Mon, 19 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/ResultInfo.qml Small visual result improvements ------------------------------------------------------------------------ r6539 | hardaker | 2012-03-19 21:19:49 -0700 (Mon, 19 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.qrc M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Result.qml A /trunk/dnssec-tools/validator/apps/dnssec-check/qml/ResultInfo.qml Added an individual test result window ------------------------------------------------------------------------ r6538 | hardaker | 2012-03-19 21:19:28 -0700 (Mon, 19 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.h M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Result.qml Make the test manager keep track of if we're testeing everything or single ------------------------------------------------------------------------ r6536 | hardaker | 2012-03-16 16:23:53 -0700 (Fri, 16 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/WaitCursor.qml wait cursor brightening improvements ------------------------------------------------------------------------ r6535 | hardaker | 2012-03-16 16:23:31 -0700 (Fri, 16 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Header.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/HostLabel.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Result.qml gui cleanup ------------------------------------------------------------------------ r6534 | hardaker | 2012-03-16 16:23:13 -0700 (Fri, 16 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.qrc M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml A /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Header.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Result.qml rearrange the lights to put the text at the top ------------------------------------------------------------------------ r6533 | hardaker | 2012-03-16 16:22:56 -0700 (Fri, 16 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Result.qml drop error code in the display message ------------------------------------------------------------------------ r6532 | hardaker | 2012-03-16 16:22:42 -0700 (Fri, 16 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.h M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.h warning cleanups ------------------------------------------------------------------------ r6531 | hardaker | 2012-03-16 16:22:18 -0700 (Fri, 16 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/WaitCursor.qml Added a "testing..." text into the wait cursor ------------------------------------------------------------------------ r6530 | hardaker | 2012-03-16 16:22:04 -0700 (Fri, 16 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.qrc M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml A /trunk/dnssec-tools/validator/apps/dnssec-check/qml/ResolverMenu.qml Changed the clear resolvers button to a generic resolvers/menu button ------------------------------------------------------------------------ r6529 | hardaker | 2012-03-16 16:21:47 -0700 (Fri, 16 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/NewServerBox.qml Make the wait cursor replace the host submission box ------------------------------------------------------------------------ r6528 | hardaker | 2012-03-16 16:21:33 -0700 (Fri, 16 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/WaitCursor.qml Make the wait cursor a moving green bar now. ------------------------------------------------------------------------ r6527 | hardaker | 2012-03-16 16:21:18 -0700 (Fri, 16 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/DNSSECTest.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.h M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.h M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js M /trunk/dnssec-tools/validator/include/validator/resolver.h Added TCP/mostly-async support. ------------------------------------------------------------------------ r6526 | hardaker | 2012-03-16 16:20:57 -0700 (Fri, 16 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.h M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/WaitCursor.qml ad and do bit tests via async ------------------------------------------------------------------------ r6525 | hardaker | 2012-03-16 16:20:42 -0700 (Fri, 16 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.h dnskey and ds records checked by async ------------------------------------------------------------------------ r6524 | hardaker | 2012-03-16 16:20:24 -0700 (Fri, 16 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/DNSSECTest.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/DNSSECTest.h M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.h implemented edns0 checking asyncronously ------------------------------------------------------------------------ r6523 | hardaker | 2012-03-16 16:20:10 -0700 (Fri, 16 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/DNSSECTest.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.h nsec and nsec3 tests via async ------------------------------------------------------------------------ r6522 | hardaker | 2012-03-16 16:19:54 -0700 (Fri, 16 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/DNSSECTest.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/DNSSECTest.h M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.h M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Result.qml basic infrastructure and working version of a simple sres async test ------------------------------------------------------------------------ r6521 | hardaker | 2012-03-16 16:19:21 -0700 (Fri, 16 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/DNSSECTest.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/DNSSECTest.h M /trunk/dnssec-tools/validator/apps/dnssec-check/QStatusLight.h M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.h M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.h M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Result.qml initial implementation of a asynchronous test; need to fix the rest ------------------------------------------------------------------------ r6520 | hardaker | 2012-03-16 16:18:55 -0700 (Fri, 16 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Add return code information to val_async_check_wait ------------------------------------------------------------------------ r6519 | hardaker | 2012-03-16 16:18:39 -0700 (Fri, 16 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.cpp Added note that this is really a C file, not C++ ------------------------------------------------------------------------ r6518 | hardaker | 2012-03-16 16:18:25 -0700 (Fri, 16 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod M /trunk/dnssec-tools/validator/doc/getaddr.pod M /trunk/dnssec-tools/validator/doc/gethost.pod M /trunk/dnssec-tools/validator/doc/getname.pod M /trunk/dnssec-tools/validator/doc/getquery.pod M /trunk/dnssec-tools/validator/doc/getrrset.pod M /trunk/dnssec-tools/validator/doc/libsres.pod M /trunk/dnssec-tools/validator/doc/libval.pod M /trunk/dnssec-tools/validator/doc/libval_check_conf.pod M /trunk/dnssec-tools/validator/doc/val_get_rrset.pod M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.pod M /trunk/dnssec-tools/validator/doc/val_gethostbyname.pod M /trunk/dnssec-tools/validator/doc/val_res_query.pod M /trunk/dnssec-tools/validator/doc/validate.pod remove traces of sourceforge in the documentation ------------------------------------------------------------------------ r6517 | hardaker | 2012-03-16 16:17:58 -0700 (Fri, 16 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/images/xbox.svg export settings ------------------------------------------------------------------------ r6516 | hardaker | 2012-03-16 16:17:43 -0700 (Fri, 16 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.qrc A /trunk/dnssec-tools/validator/apps/dnssec-check/images/xbox.png A /trunk/dnssec-tools/validator/apps/dnssec-check/images/xbox.svg M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/InfoBox.qml Added a close button for info boxes ------------------------------------------------------------------------ r6515 | hardaker | 2012-03-16 16:17:26 -0700 (Fri, 16 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml disable the clear button when running ------------------------------------------------------------------------ r6514 | hardaker | 2012-03-16 16:17:12 -0700 (Fri, 16 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/WaitCursor.qml slight visibility improvements in the wait screen ------------------------------------------------------------------------ r6513 | hardaker | 2012-03-16 16:16:59 -0700 (Fri, 16 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/WaitCursor.qml change the wait box to opacity 0 at start ------------------------------------------------------------------------ r6512 | hardaker | 2012-03-16 16:16:45 -0700 (Fri, 16 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.qrc M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml Added a wait message when tests are running ------------------------------------------------------------------------ r6511 | hardaker | 2012-03-16 16:16:30 -0700 (Fri, 16 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Result.qml A /trunk/dnssec-tools/validator/apps/dnssec-check/qml/WaitCursor.qml shrink the circles just a bit ------------------------------------------------------------------------ r6510 | hardaker | 2012-03-16 16:16:14 -0700 (Fri, 16 Mar 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml - bug fixes: - shrink the application a touch to fit in a smaller android window - fix the submit button when the number of rows is exactly 1 ------------------------------------------------------------------------ r6509 | tewok | 2012-03-14 07:34:33 -0700 (Wed, 14 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtdefs Minor pod fix. ------------------------------------------------------------------------ r6508 | tewok | 2012-03-13 13:47:08 -0700 (Tue, 13 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Fixed a misplaced quote in a pod message. ------------------------------------------------------------------------ r6507 | tewok | 2012-03-13 13:26:31 -0700 (Tue, 13 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Convert a latex construct to a pod construct. ------------------------------------------------------------------------ r6506 | tewok | 2012-03-13 10:37:50 -0700 (Tue, 13 Mar 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Grammar fix. ------------------------------------------------------------------------ r6505 | rstory | 2012-03-12 12:43:56 -0700 (Mon, 12 Mar 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml fix syntax errs - remove missing reference - remove xml tag left over when scope appendix removed ------------------------------------------------------------------------ r6504 | rstory | 2012-03-12 12:43:48 -0700 (Mon, 12 Mar 2012) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml async tweaks - remove reference to polling for completion - add text/event type about interim callbacks - remove tbd ------------------------------------------------------------------------ r6503 | rstory | 2012-03-12 12:43:41 -0700 (Mon, 12 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml remove references to scope; contexts created with labels ------------------------------------------------------------------------ r6502 | rstory | 2012-03-12 12:43:33 -0700 (Mon, 12 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml turn on strict checking. set category to std ------------------------------------------------------------------------ r6501 | rstory | 2012-03-12 12:43:25 -0700 (Mon, 12 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml be consistent about using : in hangText ------------------------------------------------------------------------ r6500 | rstory | 2012-03-12 12:43:17 -0700 (Mon, 12 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/doc/Makefile.in add check target to makefile ------------------------------------------------------------------------ r6499 | rstory | 2012-03-12 12:43:09 -0700 (Mon, 12 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml remove undefined flag ------------------------------------------------------------------------ r6498 | rstory | 2012-03-12 12:43:01 -0700 (Mon, 12 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml tweak to references; add next step/refes to val_async_select_info ------------------------------------------------------------------------ r6497 | rstory | 2012-03-12 09:27:37 -0700 (Mon, 12 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/Makefile.bot M /trunk/dnssec-tools/validator/doc/Makefile.in add rules for generating rfc text from xml doc ------------------------------------------------------------------------ r6496 | rstory | 2012-03-12 09:27:29 -0700 (Mon, 12 Mar 2012) | 8 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml update api doc - fix date and comment about it - fix xml (postamble, figure, list) to eliminate warnings from xml2rfc - reformat some function prototypes and code exmpales to eliminate outdenting and long line warnings - add val_freeaddrinfo ------------------------------------------------------------------------ r6495 | rstory | 2012-03-11 21:03:19 -0700 (Sun, 11 Mar 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml update validator api spec to be closer to reality ------------------------------------------------------------------------ r6494 | tewok | 2012-03-02 16:41:19 -0800 (Fri, 02 Mar 2012) | 9 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added the -threshold option to specify a signing threshold. The option format describes determines whether it's a threshold relative to the last-sign date or the expiration date. Changed enddate argument to be in a number+timespec format. This is passed to dnssec-keygen as the -e argument, and it's forced to be in the "now+NNN" format. This is saved in the keyrec file as the number of seconds from keyrec_signsecs time. ------------------------------------------------------------------------ r6492 | tewok | 2012-02-21 12:52:53 -0800 (Tue, 21 Feb 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/nagios/diff-status.c Added copyright info. ------------------------------------------------------------------------ r6491 | tewok | 2012-02-21 11:04:57 -0800 (Tue, 21 Feb 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/genkrf Properly handle the -kskdir and -zskdir command-line options. ------------------------------------------------------------------------ r6490 | hserus | 2012-02-21 09:58:43 -0800 (Tue, 21 Feb 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/genkrf Specify the correct path for the key in the keyrec. ------------------------------------------------------------------------ r6489 | rstory | 2012-02-21 08:49:28 -0800 (Tue, 21 Feb 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c add -n/--no-dnssec option to validate - sets VAL_QUERY_DONT_VALIDATE in context qflags ------------------------------------------------------------------------ r6488 | rstory | 2012-02-21 08:49:21 -0800 (Tue, 21 Feb 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c res_nsfallback_ea tweaks - fix logic in bad argument checks - allow missing server ptr if only one ea ------------------------------------------------------------------------ r6487 | rstory | 2012-02-21 08:49:13 -0800 (Tue, 21 Feb 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c add val_getaddrinfo_cancel - pass VAL_AS_EVENT_CANCELED to callback in gai_rc so app knows event has been canceled ------------------------------------------------------------------------ r6486 | rstory | 2012-02-21 08:49:04 -0800 (Tue, 21 Feb 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c use context def_cflags and def_uflags for async queries ------------------------------------------------------------------------ r6485 | tewok | 2012-02-20 11:04:42 -0800 (Mon, 20 Feb 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/apps/nagios/README A /trunk/dnssec-tools/apps/nagios/diff-status.c This diff contains the mods for DNSSEC-Tools-enhanced version of status.c. The diff is required, as opposed to the actual file, due to copyright considerations. ------------------------------------------------------------------------ r6484 | tewok | 2012-02-20 10:59:58 -0800 (Mon, 20 Feb 2012) | 3 lines Changed paths: D /trunk/dnssec-tools/apps/nagios/status.c Deleting this file due to copyright issues. A diff containing the DNSSEC-Tools changes will be checked in. ------------------------------------------------------------------------ r6482 | tewok | 2012-02-15 13:30:41 -0800 (Wed, 15 Feb 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rolllog.pm Sorted the interface section alphabetically. ------------------------------------------------------------------------ r6481 | tewok | 2012-02-13 17:04:18 -0800 (Mon, 13 Feb 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/COPYING Moved the 2011 copyright date to 2012. ------------------------------------------------------------------------ r6480 | tewok | 2012-02-13 14:00:51 -0800 (Mon, 13 Feb 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/nagios/dt_zonestat Fixed copyright dates. Fixed some pod. ------------------------------------------------------------------------ r6479 | tewok | 2012-02-13 13:51:22 -0800 (Mon, 13 Feb 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/nagios/README A /trunk/dnssec-tools/apps/nagios/dt_donuts Added the dt_donuts plugin. ------------------------------------------------------------------------ r6478 | tewok | 2012-02-11 10:53:19 -0800 (Sat, 11 Feb 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/zabbix/README A /trunk/dnssec-tools/apps/zabbix/uemstats Added the uemstats Zabbix plugin. Modified the README to more generally describe all the plugins. ------------------------------------------------------------------------ r6467 | hserus | 2012-02-07 10:34:09 -0800 (Tue, 07 Feb 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs Include header from new location in the source tree ------------------------------------------------------------------------ r6466 | tewok | 2012-02-07 09:07:47 -0800 (Tue, 07 Feb 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Get the signed and unsigned zonefile names from the keyrec file, reading the keyrec file if necessary. Added a bit of input validation to ensure things look okay. ------------------------------------------------------------------------ r6465 | tewok | 2012-02-06 10:52:20 -0800 (Mon, 06 Feb 2012) | 10 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added autosigning of modified zone files. Zone files are considered modified when their "last modification" timestamp is more recent than that of the associated signed zone file. This functionality includes adding the -autosign option and config field. Moved the translation of KSK phase and ZSK phase from cmd_signzone() into the new phasestr(). Fixed typos in a few comments. ------------------------------------------------------------------------ r6464 | tewok | 2012-02-06 07:59:26 -0800 (Mon, 06 Feb 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Typo fix in a comment. ------------------------------------------------------------------------ r6462 | hardaker | 2012-02-03 16:51:16 -0800 (Fri, 03 Feb 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/main.cpp lock to landscape ------------------------------------------------------------------------ r6461 | hardaker | 2012-02-03 16:51:03 -0800 (Fri, 03 Feb 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/MeegoDnssecCheck.qml orientation lock to landscape ------------------------------------------------------------------------ r6460 | hardaker | 2012-02-03 16:50:50 -0800 (Fri, 03 Feb 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qmlapplicationviewer/qmlapplicationviewer.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/qmlapplicationviewer/qmlapplicationviewer.h M /trunk/dnssec-tools/validator/apps/dnssec-check/qmlapplicationviewer/qmlapplicationviewer.pri update from recent qtcreator ------------------------------------------------------------------------ r6459 | hardaker | 2012-02-03 16:50:16 -0800 (Fri, 03 Feb 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/main.cpp use QML always ------------------------------------------------------------------------ r6458 | tewok | 2012-02-03 11:57:45 -0800 (Fri, 03 Feb 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Added checks for the autosign config option. ------------------------------------------------------------------------ r6457 | tewok | 2012-02-03 11:56:27 -0800 (Fri, 03 Feb 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Added the -autosign and -noautosign options. Collapsed the -foo and -nofoo options into a single line in the usage message. ------------------------------------------------------------------------ r6456 | tewok | 2012-02-03 11:16:22 -0800 (Fri, 03 Feb 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Added an entry for the autosign default. ------------------------------------------------------------------------ r6455 | tewok | 2012-02-03 10:59:45 -0800 (Fri, 03 Feb 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod Added the autosign configuration option. This will tell rollerd whether or not it should automatically sign zonefiles that have been modified more recently than their unsigned zonefiles. ------------------------------------------------------------------------ r6454 | tewok | 2012-02-02 07:31:18 -0800 (Thu, 02 Feb 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/demo-tools/phaser Commented out some prints to reduce visual noise. ------------------------------------------------------------------------ r6453 | hserus | 2012-02-02 07:00:03 -0800 (Thu, 02 Feb 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c If validation is not being requested, don't enable EDNS0 ------------------------------------------------------------------------ r6452 | hserus | 2012-02-02 04:41:13 -0800 (Thu, 02 Feb 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_cache.h M /trunk/dnssec-tools/validator/libval/val_resquery.c Do proper caching of DS records in the response. Don't maintain a negative rrset cache. All soa's in the response now go into the answer cache. ------------------------------------------------------------------------ r6451 | hserus | 2012-02-02 04:36:14 -0800 (Thu, 02 Feb 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_support.h Change the macro FIX_ZONECUT to the function fix_zonecut_in_rrset. Provide better support for DNAMEs in the response. ------------------------------------------------------------------------ r6450 | hserus | 2012-02-02 04:25:16 -0800 (Thu, 02 Feb 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Change the query name to an alias target only after we have processed all rrsets in the response. ------------------------------------------------------------------------ r6449 | hserus | 2012-02-02 04:13:47 -0800 (Thu, 02 Feb 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.h Add ns_t_soa as another type that cannot match an alias. ------------------------------------------------------------------------ r6448 | hserus | 2012-02-02 04:12:28 -0800 (Thu, 02 Feb 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Revert earlier change since it had the wrong commit message ------------------------------------------------------------------------ r6447 | hserus | 2012-02-02 04:06:21 -0800 (Thu, 02 Feb 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Add ns_t_soa as another type that cannot match an alias. ------------------------------------------------------------------------ r6446 | hserus | 2012-02-02 04:04:03 -0800 (Thu, 02 Feb 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c If we cannot determine the zonecut through an SOA query, return the closest match that failed. ------------------------------------------------------------------------ r6444 | tewok | 2012-02-01 09:23:58 -0800 (Wed, 01 Feb 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Better handling when non-rollrec files are given. Add a missing use of rolllog. ------------------------------------------------------------------------ r6443 | tewok | 2012-02-01 08:02:36 -0800 (Wed, 01 Feb 2012) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Moved the infostripe from the first row of the zone table to its own widget. This reduces the number of table-consumed X windows by a single row and improves the zone table's look. Fixed the selection code so the selected zone will actually be found. Minor pod fix. ------------------------------------------------------------------------ r6442 | tewok | 2012-01-31 10:56:32 -0800 (Tue, 31 Jan 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Made layout more regular so things don't get quite so haphazard. Deleted some string .= assignments to add a bit of spacing in favor of adding it in a string variable reference. ------------------------------------------------------------------------ r6441 | tewok | 2012-01-30 17:08:04 -0800 (Mon, 30 Jan 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Allow zones to be signed while in the midst of a rollover wait. This included several new options (-rollmgr and -signonly). ------------------------------------------------------------------------ r6440 | tewok | 2012-01-30 16:53:30 -0800 (Mon, 30 Jan 2012) | 13 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd At startup, rollerd marks the domains as being under its control. Added support for the signzone command. The command may be sent by either zonesigner or rolctl. This causes zonesigner to be executed with the -signonly option, in order to sign the zonefile without generating any new keys or causing any rollover actions to occur. The "-rollmgr rollerd" option is added to all zonesigner executions. The pod description was rewritten to make this information more useful. Fixed a typo. ------------------------------------------------------------------------ r6439 | tewok | 2012-01-30 16:47:06 -0800 (Mon, 30 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Added the signzone command. ------------------------------------------------------------------------ r6438 | tewok | 2012-01-30 16:44:45 -0800 (Mon, 30 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added ROLLCMD_SIGNZONE as a valid rollerd command. ------------------------------------------------------------------------ r6437 | tewok | 2012-01-30 16:43:54 -0800 (Mon, 30 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added lastcmd and rollmgr to @ZONEFIELDS. ------------------------------------------------------------------------ r6436 | tewok | 2012-01-30 16:42:31 -0800 (Mon, 30 Jan 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pod Added entries for the rollmgr and lastcmd entries. Moved szopts to its proper place. ------------------------------------------------------------------------ r6435 | tewok | 2012-01-30 16:38:36 -0800 (Mon, 30 Jan 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Added opts_cmdline() to parse the command line and optionally restore the original after the parse. ------------------------------------------------------------------------ r6434 | tewok | 2012-01-30 16:36:11 -0800 (Mon, 30 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Comment out a debug print. ------------------------------------------------------------------------ r6433 | hserus | 2012-01-30 12:33:01 -0800 (Mon, 30 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_query.c Use namecmp() instead of memcmp for comparing names. ------------------------------------------------------------------------ r6430 | hardaker | 2012-01-26 21:43:10 -0800 (Thu, 26 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/ChangeLog Update for verison 1.12 ------------------------------------------------------------------------ r6429 | hardaker | 2012-01-26 21:36:52 -0800 (Thu, 26 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/apps/nagios/dtnagobj M /trunk/dnssec-tools/tools/convertar/convertar M /trunk/dnssec-tools/tools/demos/demo-tools/makezones M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap M /trunk/dnssec-tools/tools/maketestzone/maketestzone M /trunk/dnssec-tools/tools/mapper/mapper M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/bubbles M /trunk/dnssec-tools/tools/scripts/cleanarch M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtck M /trunk/dnssec-tools/tools/scripts/dtconf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/dtreqmods M /trunk/dnssec-tools/tools/scripts/dtupdkrf M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/getds M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lights M /trunk/dnssec-tools/tools/scripts/lsdnssec M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rolllog M /trunk/dnssec-tools/tools/scripts/rollrec-editor M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/rp-wrapper M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/trustman M /trunk/dnssec-tools/tools/scripts/zonesigner M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.cpp Update Version Number: 1.12 ------------------------------------------------------------------------ r6428 | hardaker | 2012-01-26 21:23:51 -0800 (Thu, 26 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml update to do creation and signing of multiple tar files ------------------------------------------------------------------------ r6427 | hardaker | 2012-01-26 20:50:15 -0800 (Thu, 26 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/INSTALL M /trunk/dnssec-tools/README M /trunk/dnssec-tools/apps/README M /trunk/dnssec-tools/apps/mozilla/README.firefox M /trunk/dnssec-tools/apps/mozilla/README.nspr M /trunk/dnssec-tools/apps/mozilla/README.xulrunner M /trunk/dnssec-tools/apps/nagios/README M /trunk/dnssec-tools/apps/nagios/dt_zonestat M /trunk/dnssec-tools/apps/nagios/dtnagobj M /trunk/dnssec-tools/apps/sendmail/README M /trunk/dnssec-tools/apps/zabbix/README M /trunk/dnssec-tools/apps/zabbix/backup-zabbix M /trunk/dnssec-tools/apps/zabbix/item.fields M /trunk/dnssec-tools/apps/zabbix/rollstate M /trunk/dnssec-tools/apps/zabbix/zonestate M /trunk/dnssec-tools/podmantex M /trunk/dnssec-tools/podtrans M /trunk/dnssec-tools/testing/README M /trunk/dnssec-tools/tools/Makefile.PL M /trunk/dnssec-tools/tools/convertar/Makefile.PL M /trunk/dnssec-tools/tools/convertar/convertar M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Makefile.PL M /trunk/dnssec-tools/tools/demos/demo-tools/autods M /trunk/dnssec-tools/tools/demos/demo-tools/makezones M /trunk/dnssec-tools/tools/demos/rollerd-basic/Makefile M /trunk/dnssec-tools/tools/demos/rollerd-basic/README M /trunk/dnssec-tools/tools/demos/rollerd-basic/rundemo M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/Makefile M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/README M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/rundemo M /trunk/dnssec-tools/tools/demos/rollerd-split-view/Makefile M /trunk/dnssec-tools/tools/demos/rollerd-split-view/README M /trunk/dnssec-tools/tools/demos/rollerd-split-view/rundemo M /trunk/dnssec-tools/tools/demos/rollerd-vastzones/Makefile M /trunk/dnssec-tools/tools/demos/rollerd-vastzones/README M /trunk/dnssec-tools/tools/demos/rollerd-vastzones/makezones M /trunk/dnssec-tools/tools/demos/rollerd-vastzones/rundemo M /trunk/dnssec-tools/tools/dnspktflow/Makefile.PL M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/donuts/Makefile.PL M /trunk/dnssec-tools/tools/donuts/Rule.pm M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/donuts/donutsd M /trunk/dnssec-tools/tools/donuts/rules/check_nameservers.txt M /trunk/dnssec-tools/tools/donuts/rules/dns.errors.txt M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/nsec_check.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt M /trunk/dnssec-tools/tools/drawvalmap/Makefile.PL M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap M /trunk/dnssec-tools/tools/etc/Makefile.PL M /trunk/dnssec-tools/tools/etc/README M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod M /trunk/dnssec-tools/tools/logwatch/README M /trunk/dnssec-tools/tools/maketestzone/Makefile.PL M /trunk/dnssec-tools/tools/maketestzone/maketestzone M /trunk/dnssec-tools/tools/mapper/Makefile.PL M /trunk/dnssec-tools/tools/mapper/mapper M /trunk/dnssec-tools/tools/modules/BootStrap.pm M /trunk/dnssec-tools/tools/modules/Makefile.PL M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm M /trunk/dnssec-tools/tools/modules/README M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm M /trunk/dnssec-tools/tools/modules/conf.pm.in M /trunk/dnssec-tools/tools/modules/defaults.pm M /trunk/dnssec-tools/tools/modules/dnssectools.pm M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/keyrec.pod M /trunk/dnssec-tools/tools/modules/rolllog.pm M /trunk/dnssec-tools/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/modules/rollrec.pm M /trunk/dnssec-tools/tools/modules/rollrec.pod M /trunk/dnssec-tools/tools/modules/tests/Makefile.PL M /trunk/dnssec-tools/tools/modules/tests/README M /trunk/dnssec-tools/tools/modules/tests/test-conf M /trunk/dnssec-tools/tools/modules/tests/test-keyrec M /trunk/dnssec-tools/tools/modules/tests/test-rollmgr M /trunk/dnssec-tools/tools/modules/tests/test-rollrec M /trunk/dnssec-tools/tools/modules/tests/test-timetrans M /trunk/dnssec-tools/tools/modules/tests/test-toolopts1 M /trunk/dnssec-tools/tools/modules/tests/test-toolopts2 M /trunk/dnssec-tools/tools/modules/tests/test-toolopts3 M /trunk/dnssec-tools/tools/modules/timetrans.pm M /trunk/dnssec-tools/tools/modules/tooloptions.pm M /trunk/dnssec-tools/tools/scripts/Makefile.PL M /trunk/dnssec-tools/tools/scripts/README M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/bubbles M /trunk/dnssec-tools/tools/scripts/cleanarch M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtck M /trunk/dnssec-tools/tools/scripts/dtconf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/dtreqmods M /trunk/dnssec-tools/tools/scripts/dtupdkrf M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/getds M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lights M /trunk/dnssec-tools/tools/scripts/lsdnssec M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rolllog M /trunk/dnssec-tools/tools/scripts/rollrec-editor M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/rp-wrapper M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/trustman M /trunk/dnssec-tools/tools/scripts/zonesigner M /trunk/dnssec-tools/validator/README M /trunk/dnssec-tools/validator/apps/README M /trunk/dnssec-tools/validator/apps/getaddr.c M /trunk/dnssec-tools/validator/apps/gethost.c M /trunk/dnssec-tools/validator/apps/getname.c M /trunk/dnssec-tools/validator/apps/getquery.c M /trunk/dnssec-tools/validator/apps/getrrset.c M /trunk/dnssec-tools/validator/apps/libsres_test.c M /trunk/dnssec-tools/validator/apps/libval_check_conf.c M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/apps/validator_driver.h M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod M /trunk/dnssec-tools/validator/doc/getaddr.pod M /trunk/dnssec-tools/validator/doc/gethost.pod M /trunk/dnssec-tools/validator/doc/getname.pod M /trunk/dnssec-tools/validator/doc/getquery.pod M /trunk/dnssec-tools/validator/doc/getrrset.pod M /trunk/dnssec-tools/validator/doc/libsres-implementation-notes M /trunk/dnssec-tools/validator/doc/libsres.pod M /trunk/dnssec-tools/validator/doc/libval-implementation-notes M /trunk/dnssec-tools/validator/doc/libval.pod M /trunk/dnssec-tools/validator/doc/libval_check_conf.pod M /trunk/dnssec-tools/validator/doc/libval_shim.pod M /trunk/dnssec-tools/validator/doc/val_get_rrset.pod M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.pod M /trunk/dnssec-tools/validator/doc/val_gethostbyname.pod M /trunk/dnssec-tools/validator/doc/val_res_query.pod M /trunk/dnssec-tools/validator/doc/validate.pod M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/include/validator/val_errors.h M /trunk/dnssec-tools/validator/include/validator/validator-compat.h M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/include/validator-internal.h M /trunk/dnssec-tools/validator/libsres/res_mkquery.h M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libsres/res_support.c M /trunk/dnssec-tools/validator/libsres/res_support.h M /trunk/dnssec-tools/validator/libval/README M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_assertion.h M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_cache.h M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_context.h M /trunk/dnssec-tools/validator/libval/val_crypto.c M /trunk/dnssec-tools/validator/libval/val_crypto.h M /trunk/dnssec-tools/validator/libval/val_get_rrset.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_parse.c M /trunk/dnssec-tools/validator/libval/val_parse.h M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_resquery.h M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_support.h M /trunk/dnssec-tools/validator/libval/val_verify.c M /trunk/dnssec-tools/validator/libval/val_verify.h M /trunk/dnssec-tools/validator/libval/val_x_query.c copyright update for 2012 ------------------------------------------------------------------------ r6426 | hardaker | 2012-01-26 20:47:51 -0800 (Thu, 26 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS more NEWS updates ------------------------------------------------------------------------ r6425 | hardaker | 2012-01-26 20:47:37 -0800 (Thu, 26 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS more news ------------------------------------------------------------------------ r6424 | hardaker | 2012-01-26 20:11:14 -0800 (Thu, 26 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS NEWS file update ------------------------------------------------------------------------ r6423 | hardaker | 2012-01-26 20:11:02 -0800 (Thu, 26 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.h Change the data submission destination to the dnssec-tools collection agent ------------------------------------------------------------------------ r6422 | hardaker | 2012-01-26 20:10:49 -0800 (Thu, 26 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/HostLabel.qml set the test status on resolver-mouse-over to explain you can click on it ------------------------------------------------------------------------ r6421 | hardaker | 2012-01-26 20:10:34 -0800 (Thu, 26 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/HostMenu.qml Cancel button added to the resolver options ------------------------------------------------------------------------ r6420 | hardaker | 2012-01-26 20:10:19 -0800 (Thu, 26 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Help.qml update help to include resolver-clicks ------------------------------------------------------------------------ r6419 | hserus | 2012-01-26 14:15:50 -0800 (Thu, 26 Jan 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c While checking for the provably insecure condition, handle the case where the DS query returns a name error (which tells us that the canditate zonecut did not actually exist) ------------------------------------------------------------------------ r6418 | tewok | 2012-01-26 12:32:51 -0800 (Thu, 26 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/NEWS Notes about rollerd's modifications for release 1.12. ------------------------------------------------------------------------ r6417 | hardaker | 2012-01-26 06:34:55 -0800 (Thu, 26 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js change to the ran state when all tests have been run by host buttons ------------------------------------------------------------------------ r6416 | hardaker | 2012-01-26 06:34:39 -0800 (Thu, 26 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.qrc M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/HostLabel.qml A /trunk/dnssec-tools/validator/apps/dnssec-check/qml/HostMenu.qml Added a new host menu to clear/test/remove resolvers ------------------------------------------------------------------------ r6415 | hardaker | 2012-01-25 13:09:45 -0800 (Wed, 25 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Help.qml better help text ------------------------------------------------------------------------ r6414 | hardaker | 2012-01-25 13:09:29 -0800 (Wed, 25 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml Show the info screen on each new version ------------------------------------------------------------------------ r6413 | hardaker | 2012-01-25 11:44:11 -0800 (Wed, 25 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml grid overlap onto square fixed ------------------------------------------------------------------------ r6412 | hardaker | 2012-01-25 11:37:23 -0800 (Wed, 25 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/HostLabel.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Result.qml Minor spacing changes ------------------------------------------------------------------------ r6411 | hardaker | 2012-01-25 11:37:09 -0800 (Wed, 25 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Button.qml shorten button a touch ------------------------------------------------------------------------ r6410 | hardaker | 2012-01-25 11:36:54 -0800 (Wed, 25 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml is your world ready yet sub-title ------------------------------------------------------------------------ r6409 | hardaker | 2012-01-25 11:10:12 -0800 (Wed, 25 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/main.cpp Set the window title properly for qml ------------------------------------------------------------------------ r6408 | hardaker | 2012-01-25 10:42:09 -0800 (Wed, 25 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml Make the clear hosts button enter a new disabled state ------------------------------------------------------------------------ r6407 | hardaker | 2012-01-25 09:56:17 -0800 (Wed, 25 Jan 2012) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-check/images/dnssec-check-512.png A /trunk/dnssec-tools/validator/apps/dnssec-check/images/dnssec-check-512.svg 512 sized icons ------------------------------------------------------------------------ r6406 | hardaker | 2012-01-25 09:56:02 -0800 (Wed, 25 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.qrc A /trunk/dnssec-tools/validator/apps/dnssec-check/images/arrow.png M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/InfoBox.qml Use an arrow instead of dots for too-much-text ------------------------------------------------------------------------ r6405 | hardaker | 2012-01-25 09:55:46 -0800 (Wed, 25 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Help.qml help text cleanups ------------------------------------------------------------------------ r6404 | hardaker | 2012-01-25 09:55:34 -0800 (Wed, 25 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml Added a clear servers button ------------------------------------------------------------------------ r6403 | hardaker | 2012-01-25 09:55:20 -0800 (Wed, 25 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Result.qml set the state to half on a single result click ------------------------------------------------------------------------ r6402 | hardaker | 2012-01-25 09:55:07 -0800 (Wed, 25 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/NewServerBox.qml make the reset button be there if in a half-ran state ------------------------------------------------------------------------ r6401 | hardaker | 2012-01-25 09:54:53 -0800 (Wed, 25 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/NewServerBox.qml moved the help button to the top inside the title bar ------------------------------------------------------------------------ r6400 | hardaker | 2012-01-25 09:54:40 -0800 (Wed, 25 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml Improved error messages and make status messages wrap properly ------------------------------------------------------------------------ r6399 | hardaker | 2012-01-25 09:54:26 -0800 (Wed, 25 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/NewServerBox.qml have the add button appear and don't leave a blank space till typing starts ------------------------------------------------------------------------ r6398 | hardaker | 2012-01-25 09:54:13 -0800 (Wed, 25 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js slight wording change ------------------------------------------------------------------------ r6397 | hardaker | 2012-01-25 09:54:00 -0800 (Wed, 25 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml only enable the run tests button if the number of servers > 0 ------------------------------------------------------------------------ r6396 | hardaker | 2012-01-25 09:53:47 -0800 (Wed, 25 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Button.qml Don't run the click function unless we're enabled ------------------------------------------------------------------------ r6395 | hardaker | 2012-01-25 09:53:34 -0800 (Wed, 25 Jan 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml Test status line updates: - indicate what it's doing on a new line - set a closing message when all the tests are completed ------------------------------------------------------------------------ r6394 | hardaker | 2012-01-25 09:53:21 -0800 (Wed, 25 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/InfoBox.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/WantToSubmitInfo.qml protect hover events in popup dialogs ------------------------------------------------------------------------ r6393 | hserus | 2012-01-25 08:53:02 -0800 (Wed, 25 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator-compat.h Support build on OpenBSD ------------------------------------------------------------------------ r6392 | hardaker | 2012-01-24 21:45:54 -0800 (Tue, 24 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.h M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js sha1 the ip addresses from the resolver list from the qml interface ------------------------------------------------------------------------ r6391 | hardaker | 2012-01-24 21:45:38 -0800 (Tue, 24 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/DNSSECTest.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/DNSSECTest.h M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.h M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/NewServerBox.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Result.qml display test results in a status line ------------------------------------------------------------------------ r6390 | hardaker | 2012-01-24 21:45:19 -0800 (Tue, 24 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/InfoBox.qml make top/bottom scroll indicators act on button presses ------------------------------------------------------------------------ r6389 | hardaker | 2012-01-24 21:45:04 -0800 (Tue, 24 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml gray out the reset button after use ------------------------------------------------------------------------ r6388 | hardaker | 2012-01-24 21:44:50 -0800 (Tue, 24 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Help.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/InfoBox.qml make the help box scrollable using the flickable model ------------------------------------------------------------------------ r6387 | hardaker | 2012-01-24 21:44:35 -0800 (Tue, 24 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.h M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/InfoBox.qml only show the info box on startup once, after that it isn't shown again ------------------------------------------------------------------------ r6386 | hardaker | 2012-01-24 21:44:20 -0800 (Tue, 24 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/NewServerBox.qml increase the text entry size a touch ------------------------------------------------------------------------ r6385 | hardaker | 2012-01-24 21:44:06 -0800 (Tue, 24 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/NewServerBox.qml added a "add" button to the right of the text entry box ------------------------------------------------------------------------ r6384 | hardaker | 2012-01-24 21:43:51 -0800 (Tue, 24 Jan 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.qrc M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Button.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml A /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Help.qml multiple gui improvements: - help text - link text is a whiter blue ------------------------------------------------------------------------ r6383 | hardaker | 2012-01-24 21:43:35 -0800 (Tue, 24 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml set a default status of idle when nothing is happening ------------------------------------------------------------------------ r6382 | hardaker | 2012-01-24 21:43:20 -0800 (Tue, 24 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/InfoBox.qml put the info box inside a flickable for long messages ------------------------------------------------------------------------ r6381 | hardaker | 2012-01-24 21:43:04 -0800 (Tue, 24 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/InfoBox.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/WantToSubmitInfo.qml Moved the click-prevention up a level to block more ------------------------------------------------------------------------ r6380 | hardaker | 2012-01-24 21:42:49 -0800 (Tue, 24 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/InfoBox.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/WantToSubmitInfo.qml Don't let clicks pass through to the lower areas ------------------------------------------------------------------------ r6379 | hardaker | 2012-01-24 21:42:34 -0800 (Tue, 24 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/NewServerBox.qml make the new hosts line more obvious you should click in it ------------------------------------------------------------------------ r6378 | hardaker | 2012-01-24 21:42:18 -0800 (Tue, 24 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/InfoBox.qml open link in intro box ------------------------------------------------------------------------ r6377 | rstory | 2012-01-24 08:26:19 -0800 (Tue, 24 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c fix unitialized variable ------------------------------------------------------------------------ r6376 | hserus | 2012-01-24 08:01:27 -0800 (Tue, 24 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_assertion.h When we're clearing the query structure for a query that we currently hold in our queries_for_query list, we need to check if the reference count is 1, not 0. ------------------------------------------------------------------------ r6375 | hserus | 2012-01-24 06:47:39 -0800 (Tue, 24 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/install.rdf Works with versions 10+ too ------------------------------------------------------------------------ r6374 | hardaker | 2012-01-23 14:51:25 -0800 (Mon, 23 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro osx specific lib modifications ------------------------------------------------------------------------ r6373 | hardaker | 2012-01-23 14:50:56 -0800 (Mon, 23 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/images/dnssec-check.icns new mac icon that works ------------------------------------------------------------------------ r6372 | hardaker | 2012-01-23 13:45:05 -0800 (Mon, 23 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro removed a no longer existing header ------------------------------------------------------------------------ r6371 | hardaker | 2012-01-23 13:43:27 -0800 (Mon, 23 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro added a missing backslash to the qmake list of extra files ------------------------------------------------------------------------ r6370 | hardaker | 2012-01-23 13:43:09 -0800 (Mon, 23 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro A /trunk/dnssec-tools/validator/apps/dnssec-check/images/dnssec-check.icns M /trunk/dnssec-tools/validator/apps/dnssec-check/main.cpp added an icon for qml and mac versions ------------------------------------------------------------------------ r6369 | hardaker | 2012-01-23 13:42:44 -0800 (Mon, 23 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/images/dnssec-check-64x64.png M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/InfoBox.qml added the icon to the info box and fixed the info box sizing ------------------------------------------------------------------------ r6368 | hserus | 2012-01-23 12:48:15 -0800 (Mon, 23 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/NEWS Added some newsworthy items for 1.12. ------------------------------------------------------------------------ r6367 | rstory | 2012-01-23 12:03:53 -0800 (Mon, 23 Jan 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/apps/validator_driver.h M /trunk/dnssec-tools/validator/apps/validator_selftest.c M /trunk/dnssec-tools/validator/include/validator/resolver.h Revert "validate: fprintf -> val_log" This reverts all changes from commits 6362 and 6365 ------------------------------------------------------------------------ r6366 | hserus | 2012-01-23 11:39:42 -0800 (Mon, 23 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Keep processing root.hints information even if IPv6 addresses could not be parsed. ------------------------------------------------------------------------ r6365 | rstory | 2012-01-23 09:52:59 -0800 (Mon, 23 Jan 2012) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/apps/validator_driver.h M /trunk/dnssec-tools/validator/apps/validator_selftest.c M /trunk/dnssec-tools/validator/include/validator/resolver.h more printf to val_log conversions - print_response is the odd man out, since it resides in libsres. updated to use log_response, which will use libsres logging, which, if configured appropriately, will pass through to libval logging instead of printing to stderr ------------------------------------------------------------------------ r6364 | rstory | 2012-01-23 09:52:47 -0800 (Mon, 23 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.h fix bad merge ------------------------------------------------------------------------ r6363 | rstory | 2012-01-23 09:52:34 -0800 (Mon, 23 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c merge two fprintfs into one ------------------------------------------------------------------------ r6362 | rstory | 2012-01-23 09:52:20 -0800 (Mon, 23 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/apps/validator_selftest.c validate: fprintf -> val_log ------------------------------------------------------------------------ r6361 | hardaker | 2012-01-22 08:22:47 -0800 (Sun, 22 Jan 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.qrc M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml A /trunk/dnssec-tools/validator/apps/dnssec-check/qml/InfoBox.qml (from /trunk/dnssec-tools/validator/apps/dnssec-check/qml/SubmitResults.qml:6360) M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Result.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/SubmitResults.qml Multiple usability improvements: - display an info box at start up per rstory's suggestion - make the lights go gray again if testing fresh from a single light click ------------------------------------------------------------------------ r6360 | hardaker | 2012-01-21 12:31:15 -0800 (Sat, 21 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/SubmitResults.qml show a status line when something is happening in the background ------------------------------------------------------------------------ r6359 | hardaker | 2012-01-21 12:31:01 -0800 (Sat, 21 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.cpp remove some debugging statements ------------------------------------------------------------------------ r6358 | hardaker | 2012-01-21 12:30:49 -0800 (Sat, 21 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/SubmitResults.qml disable the quit button while waiting for results ------------------------------------------------------------------------ r6357 | hardaker | 2012-01-21 12:30:33 -0800 (Sat, 21 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.h M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.qrc M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Button.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml A /trunk/dnssec-tools/validator/apps/dnssec-check/qml/SubmitResults.qml (from /trunk/dnssec-tools/validator/apps/dnssec-check/qml/WantToSubmitInfo.qml:6356) M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/WantToSubmitInfo.qml Added a new submitResults dialog that shows a message when the server gets the response. ------------------------------------------------------------------------ r6356 | hardaker | 2012-01-21 12:30:13 -0800 (Sat, 21 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.qrc M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Button.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/NewServerBox.qml A /trunk/dnssec-tools/validator/apps/dnssec-check/qml/WantToSubmitInfo.qml A new submit window for submitting data from QML ------------------------------------------------------------------------ r6355 | hardaker | 2012-01-21 12:29:56 -0800 (Sat, 21 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.h M /trunk/dnssec-tools/validator/apps/dnssec-check/main.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.h M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml support for submitting results from the QML interface ------------------------------------------------------------------------ r6354 | hardaker | 2012-01-21 12:29:40 -0800 (Sat, 21 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/android/build.xml case change the app name to DNSSEC ------------------------------------------------------------------------ r6353 | hardaker | 2012-01-21 12:29:25 -0800 (Sat, 21 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/android/build.xml case change the app name to DNSSEC ------------------------------------------------------------------------ r6352 | hardaker | 2012-01-21 12:29:10 -0800 (Sat, 21 Jan 2012) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-nodes/android A /trunk/dnssec-tools/validator/apps/dnssec-nodes/android/AndroidManifest.xml A /trunk/dnssec-tools/validator/apps/dnssec-nodes/android/build.xml A /trunk/dnssec-tools/validator/apps/dnssec-nodes/android/res A /trunk/dnssec-tools/validator/apps/dnssec-nodes/android/res/drawable-hdpi A /trunk/dnssec-tools/validator/apps/dnssec-nodes/android/res/drawable-hdpi/icon.png A /trunk/dnssec-tools/validator/apps/dnssec-nodes/android/res/drawable-ldpi A /trunk/dnssec-tools/validator/apps/dnssec-nodes/android/res/drawable-ldpi/icon.png A /trunk/dnssec-tools/validator/apps/dnssec-nodes/android/res/drawable-mdpi A /trunk/dnssec-tools/validator/apps/dnssec-nodes/android/res/drawable-mdpi/icon.png android build files ------------------------------------------------------------------------ r6351 | hardaker | 2012-01-21 08:04:58 -0800 (Sat, 21 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro M /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp android improvements for building ------------------------------------------------------------------------ r6350 | tewok | 2012-01-20 13:37:38 -0800 (Fri, 20 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Removed some code in favor of calling keyrec_settime(). ------------------------------------------------------------------------ r6349 | hserus | 2012-01-20 11:43:30 -0800 (Fri, 20 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c In val_get_nameservers(), return a copy of the context's name server list. ------------------------------------------------------------------------ r6348 | hserus | 2012-01-20 11:16:09 -0800 (Fri, 20 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c Release lock before destroying ------------------------------------------------------------------------ r6347 | tewok | 2012-01-20 11:02:06 -0800 (Fri, 20 Jan 2012) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Reworked how keyrec_setval() creates a new field line. This should result in a minor speed increase. Very minor. Slight modification to where keyrec_setval() inserts a new field line. Reordered some fields in @ZONEFIELDS. ------------------------------------------------------------------------ r6346 | hardaker | 2012-01-20 11:00:35 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro added more android files to the OTHER_FILES list ------------------------------------------------------------------------ r6345 | hardaker | 2012-01-20 11:00:22 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c move the val_as_tid usage inside the threads ifdef ------------------------------------------------------------------------ r6344 | hardaker | 2012-01-20 11:00:09 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-check/android/res A /trunk/dnssec-tools/validator/apps/dnssec-check/android/res/drawable-hdpi A /trunk/dnssec-tools/validator/apps/dnssec-check/android/res/drawable-hdpi/icon.png A /trunk/dnssec-tools/validator/apps/dnssec-check/android/res/drawable-ldpi A /trunk/dnssec-tools/validator/apps/dnssec-check/android/res/drawable-ldpi/icon.png A /trunk/dnssec-tools/validator/apps/dnssec-check/android/res/drawable-mdpi A /trunk/dnssec-tools/validator/apps/dnssec-check/android/res/drawable-mdpi/icon.png android icons ------------------------------------------------------------------------ r6343 | hardaker | 2012-01-20 10:59:50 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.h M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.h M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js new test to check for the AD bit for a validating server ------------------------------------------------------------------------ r6342 | hardaker | 2012-01-20 10:59:34 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/main.cpp include the QDeclarative header prefix ------------------------------------------------------------------------ r6341 | hardaker | 2012-01-20 10:59:21 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.cpp use the newer SR_ flags instead of the older RES_ flags ------------------------------------------------------------------------ r6340 | hardaker | 2012-01-20 10:59:08 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro more cleanup for proper support on multiple system types ------------------------------------------------------------------------ r6339 | hardaker | 2012-01-20 10:58:55 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro update for android specific paths ------------------------------------------------------------------------ r6338 | hardaker | 2012-01-20 10:58:43 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp turn back on results submission but hash the ip addresses ------------------------------------------------------------------------ r6337 | hardaker | 2012-01-20 10:58:30 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/NewServerBox.qml use a single for adding a new host so they get added to the global container ------------------------------------------------------------------------ r6336 | hardaker | 2012-01-20 10:58:16 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.h remove debugging function ------------------------------------------------------------------------ r6335 | hardaker | 2012-01-20 10:58:02 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml added a quit button ------------------------------------------------------------------------ r6334 | hardaker | 2012-01-20 10:57:49 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp use the new val_get_nameservers() public API ------------------------------------------------------------------------ r6333 | hardaker | 2012-01-20 10:57:37 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_policy.c added a val_get_nameservers function to return the list of nameservers being used. ------------------------------------------------------------------------ r6332 | hardaker | 2012-01-20 10:57:23 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-check/android A /trunk/dnssec-tools/validator/apps/dnssec-check/android/AndroidManifest.xml A /trunk/dnssec-tools/validator/apps/dnssec-check/android/build.xml android manifest and build files ------------------------------------------------------------------------ r6331 | hardaker | 2012-01-20 10:57:10 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro temporary android library path hacks; need to improve it eventually ------------------------------------------------------------------------ r6330 | hardaker | 2012-01-20 10:56:56 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Support for reading resolver information from android properties ------------------------------------------------------------------------ r6329 | hardaker | 2012-01-20 10:56:44 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/whatami.h don't define meego when on android ------------------------------------------------------------------------ r6328 | hardaker | 2012-01-20 10:56:32 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qmlapplicationviewer/qmlapplicationviewer.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/qmlapplicationviewer/qmlapplicationviewer.h M /trunk/dnssec-tools/validator/apps/dnssec-check/qmlapplicationviewer/qmlapplicationviewer.pri update from recent android version ------------------------------------------------------------------------ r6327 | hardaker | 2012-01-20 10:56:18 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp temporary hack to use libval's internal parser for pulling nameservers ------------------------------------------------------------------------ r6326 | hardaker | 2012-01-20 10:56:05 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.h added missing defines for non-thread devices ------------------------------------------------------------------------ r6325 | hardaker | 2012-01-20 10:55:53 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/libsres/res_support.c define a new function to create a generic name server ------------------------------------------------------------------------ r6324 | hardaker | 2012-01-20 10:55:39 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_debug.c Define res_sym_const the structure on android where it doesn't exist ------------------------------------------------------------------------ r6323 | hardaker | 2012-01-20 10:55:27 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in Only do file existence checks when not cross-compiling ------------------------------------------------------------------------ r6322 | hardaker | 2012-01-20 10:55:15 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.cpp header path fixes for validator-config.h ------------------------------------------------------------------------ r6321 | hardaker | 2012-01-20 10:55:02 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp android building changes ------------------------------------------------------------------------ r6320 | hardaker | 2012-01-20 10:54:48 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp M /trunk/dnssec-tools/validator/include/validator/validator-compat.h more android porting ------------------------------------------------------------------------ r6319 | hardaker | 2012-01-20 10:54:33 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_policy.c no-threading fixes ------------------------------------------------------------------------ r6318 | hardaker | 2012-01-20 10:54:18 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator-compat.h M /trunk/dnssec-tools/validator/libsres/ns_parse.c added eabi definitions for android usage ------------------------------------------------------------------------ r6317 | hardaker | 2012-01-20 10:54:05 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.cpp small bugs fixed with preferences ------------------------------------------------------------------------ r6316 | hardaker | 2012-01-20 10:53:52 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/DnssecSystemTrayPrefs.cpp M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.cpp M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.h Add support for watching unbound logs ------------------------------------------------------------------------ r6315 | hardaker | 2012-01-20 10:53:39 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.h Attempt to parse some of the unbound logs, but they're not very descriptive. ------------------------------------------------------------------------ r6314 | hardaker | 2012-01-20 10:53:26 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp increase the font size of the nodes to 6 ------------------------------------------------------------------------ r6313 | hardaker | 2012-01-20 10:53:13 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Button.qml move the mouse area out of the text so it affects the entire rectangle ------------------------------------------------------------------------ r6312 | hardaker | 2012-01-20 10:53:00 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Result.qml more flashies: make the name bigger on hover ------------------------------------------------------------------------ r6311 | hardaker | 2012-01-20 10:52:47 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml incrementally update the lights by using a timer (need to do async next) ------------------------------------------------------------------------ r6310 | hardaker | 2012-01-20 10:52:32 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro force add in /usr/local/lib on most systems ------------------------------------------------------------------------ r6309 | rstory | 2012-01-20 10:06:55 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c set closest event to 0 if an async_request is DONE ------------------------------------------------------------------------ r6308 | rstory | 2012-01-20 09:44:55 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c fix infinite loop accidentally introduced in 6294 ------------------------------------------------------------------------ r6307 | rstory | 2012-01-20 09:44:43 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c check outstanding queries even if no FDs were active ------------------------------------------------------------------------ r6306 | rstory | 2012-01-20 09:44:31 -0800 (Fri, 20 Jan 2012) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c run_suite_async: lots of tweaks after multithread testing - update sstats for error during submit - reduce default timeout to 60 seconds - add code to try and handle queries in flight with no active fd ------------------------------------------------------------------------ r6305 | rstory | 2012-01-20 09:44:19 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c res_io_select_info: don't set fd if it is already set ------------------------------------------------------------------------ r6304 | rstory | 2012-01-20 09:44:06 -0800 (Fri, 20 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c construct auth chain during submit if no missing data ------------------------------------------------------------------------ r6303 | rstory | 2012-01-20 09:43:54 -0800 (Fri, 20 Jan 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator-internal.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_resquery.c only select on async requests for current thread - add flags field to context to allow processing of all threads ------------------------------------------------------------------------ r6302 | hserus | 2012-01-19 14:03:25 -0800 (Thu, 19 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/Makefile.top Bump up LIBCURRENT ------------------------------------------------------------------------ r6301 | hserus | 2012-01-19 14:00:05 -0800 (Thu, 19 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/libval/val_resquery.c Set SR_QUERY_RECURSE in the default name server options. ------------------------------------------------------------------------ r6300 | hserus | 2012-01-19 13:36:48 -0800 (Thu, 19 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_mkquery.c Remove ifdef for obsoleted RES_USE_EDNS0 ------------------------------------------------------------------------ r6299 | hserus | 2012-01-19 13:28:54 -0800 (Thu, 19 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in Escape quotes embedded within configuration files ------------------------------------------------------------------------ r6298 | tewok | 2012-01-19 11:36:50 -0800 (Thu, 19 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner More minor option-display changes. ------------------------------------------------------------------------ r6297 | hserus | 2012-01-19 09:14:35 -0800 (Thu, 19 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc Substitute VAL_QUERY_REFRESH_QCACHE with VAL_QUERY_MARK_FOR_DELETION ------------------------------------------------------------------------ r6296 | hserus | 2012-01-19 08:56:01 -0800 (Thu, 19 Jan 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_policy.c Rename VAL_QUERY_REFRESH_QCACHE to VAL_QUERY_MARK_FOR_DELETION, in keeping with the main purpose of this flag. ------------------------------------------------------------------------ r6295 | hserus | 2012-01-19 08:40:36 -0800 (Thu, 19 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libsres.3 M /trunk/dnssec-tools/validator/doc/libsres.pod M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/include/validator/validator-compat.h M /trunk/dnssec-tools/validator/libsres/res_debug.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_mkquery.c M /trunk/dnssec-tools/validator/libsres/res_mkquery.h M /trunk/dnssec-tools/validator/libsres/res_support.c M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_resquery.c Replace legacy RES_ query options with libsres-specific SR_QUERY_ definitions. ------------------------------------------------------------------------ r6294 | hserus | 2012-01-19 08:24:48 -0800 (Thu, 19 Jan 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Correct misleading comment on the purpose of VAL_QUERY_REFRESH_QCACHE Log message about deletion of expired query only when we hit that condition. ------------------------------------------------------------------------ r6293 | tewok | 2012-01-19 07:47:04 -0800 (Thu, 19 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Prettied up the "-v -v -v" output a little. ------------------------------------------------------------------------ r6292 | rstory | 2012-01-18 12:52:26 -0800 (Wed, 18 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c check if we're done before trying to select again ------------------------------------------------------------------------ r6291 | hserus | 2012-01-18 07:33:54 -0800 (Wed, 18 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libsres.3 M /trunk/dnssec-tools/validator/doc/libsres.pod Fix typo in description of SR_QUERY_SET_CD ------------------------------------------------------------------------ r6289 | hserus | 2012-01-18 07:29:03 -0800 (Wed, 18 Jan 2012) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c In add_to_query_chain() don't continue to look for additional matching queries in the list if we already find a matching one with expired data. Don't explicitly check for (qc_refcount == 0) since we're already checking for this condition in clear_query_chain_structure() ------------------------------------------------------------------------ r6288 | rstory | 2012-01-17 12:25:20 -0800 (Tue, 17 Jan 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c separate suite test cases from runtime suite stats - test suites shared between threads - suite stats are local (per thread) ------------------------------------------------------------------------ r6287 | rstory | 2012-01-17 12:25:12 -0800 (Tue, 17 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_context.h add ASSERT_HAVE_AC_LOCK, used only when CTX_LOCK_COUNTS defined ------------------------------------------------------------------------ r6286 | rstory | 2012-01-17 12:25:03 -0800 (Tue, 17 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.h decr lock count before releasing lock ------------------------------------------------------------------------ r6285 | tewok | 2012-01-17 12:19:38 -0800 (Tue, 17 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/Makefile Added the zones-diff target. ------------------------------------------------------------------------ r6284 | tewok | 2012-01-17 12:18:34 -0800 (Tue, 17 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/Makefile Added the zonegroups demo to the demo list. ------------------------------------------------------------------------ r6283 | tewok | 2012-01-17 12:17:39 -0800 (Tue, 17 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/save-example-000.com M /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/save-example-001.com M /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/save-example-002.com M /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/save-example-003.com M /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/save-example-004.com M /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/save-example-005.com M /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/save-example-006.com M /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/save-example-007.com M /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/save-example-008.com M /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/save-example-009.com Use currently unassigned IP addresses. ------------------------------------------------------------------------ r6282 | tewok | 2012-01-17 11:45:23 -0800 (Tue, 17 Jan 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-demo.rollrec M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-example.com M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-test.com M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-dummy.com M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-example.com M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-test.com M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-woof.com M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-xorn.com M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-yowzah.com M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-zero.com M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-dummy.com M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-example.com M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-test.com M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-woof.com M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-xorn.com M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-yowzah.com M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-zero.com M /trunk/dnssec-tools/tools/demos/rollerd-vastzones/save-example.com Use IP addresses that are (currently) unassigned*. * At least according to "dig -x". ------------------------------------------------------------------------ r6281 | tewok | 2012-01-17 11:40:57 -0800 (Tue, 17 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/Makefile Make "clean" the default target. ------------------------------------------------------------------------ r6280 | tewok | 2012-01-17 11:33:49 -0800 (Tue, 17 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/Makefile D /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-db.cache Deleted db.cache since it isn't required for the demo. ------------------------------------------------------------------------ r6279 | tewok | 2012-01-17 08:46:07 -0800 (Tue, 17 Jan 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-subdirs/Makefile D /trunk/dnssec-tools/tools/demos/rollerd-subdirs/save-db.cache M /trunk/dnssec-tools/tools/demos/rollerd-subdirs/save-dummy.com M /trunk/dnssec-tools/tools/demos/rollerd-subdirs/save-example.com M /trunk/dnssec-tools/tools/demos/rollerd-subdirs/save-test.com Deleted save-db.cache because it isn't necessary for the demo. Modified zone files to work with current BIND. ------------------------------------------------------------------------ r6278 | tewok | 2012-01-17 07:30:59 -0800 (Tue, 17 Jan 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-split-view/Makefile A /trunk/dnssec-tools/tools/demos/rollerd-split-view/save-example.com A /trunk/dnssec-tools/tools/demos/rollerd-split-view/save-inside.example.com M /trunk/dnssec-tools/tools/demos/rollerd-split-view/save-test.com Adding two zone files that somehow got missed before. Fixed another zone file to work with current BIND tools. ------------------------------------------------------------------------ r6277 | hserus | 2012-01-16 12:31:08 -0800 (Mon, 16 Jan 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/ntp A /trunk/dnssec-tools/apps/ntp/README A /trunk/dnssec-tools/apps/ntp/ntp-dnssec.patch Add patch for DNSSEC support in NTP ------------------------------------------------------------------------ r6276 | hserus | 2012-01-16 11:06:13 -0800 (Mon, 16 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c Add more debug messages to indicate when query flags are modified on the flag. ------------------------------------------------------------------------ r6275 | hserus | 2012-01-16 11:03:29 -0800 (Mon, 16 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Include VAL_QUERY_IGNORE_SKEW within the user query mask. ------------------------------------------------------------------------ r6274 | hserus | 2012-01-16 11:02:39 -0800 (Mon, 16 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c Add debug message to indicate clock skew is being ignored through query flags. ------------------------------------------------------------------------ r6273 | hserus | 2012-01-16 08:38:06 -0800 (Mon, 16 Jan 2012) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Since we no longer manage EDNS0 in libval remove older hack used to determine DNSSEC capability of recursive name server. ------------------------------------------------------------------------ r6272 | hserus | 2012-01-16 08:35:22 -0800 (Mon, 16 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Tweak a log message ------------------------------------------------------------------------ r6271 | hserus | 2012-01-16 08:34:46 -0800 (Mon, 16 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/etc/root.hints Update to recent version ------------------------------------------------------------------------ r6270 | hserus | 2012-01-13 14:06:26 -0800 (Fri, 13 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/testing/t/010zonesigner.t M /trunk/dnssec-tools/testing/t/020donuts.t M /trunk/dnssec-tools/testing/t/040rollerd.t M /trunk/dnssec-tools/testing/t/050trustman-rollerd.t Update tests for latest expected output ------------------------------------------------------------------------ r6269 | hserus | 2012-01-13 10:50:14 -0800 (Fri, 13 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Disambiguate operator ------------------------------------------------------------------------ r6268 | hserus | 2012-01-13 10:48:55 -0800 (Fri, 13 Jan 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_assertion.h M /trunk/dnssec-tools/validator/libval/val_policy.c In clear_query_chain_structure() check the reference count for the query before reinitializing the query structure. Request, but don't force clearing of the query structure when trying to modify policy on the fly. ------------------------------------------------------------------------ r6267 | hserus | 2012-01-13 10:35:58 -0800 (Fri, 13 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Don't try to reset the query when it is being used by another thread. ------------------------------------------------------------------------ r6266 | rstory | 2012-01-13 08:36:21 -0800 (Fri, 13 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator-internal.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_context.h add optional counting on locks and contexts ------------------------------------------------------------------------ r6265 | rstory | 2012-01-13 08:35:49 -0800 (Fri, 13 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c add -m flag to help output ------------------------------------------------------------------------ r6264 | hardaker | 2012-01-12 10:30:36 -0800 (Thu, 12 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts minor documentation tweaks for -q/-v ------------------------------------------------------------------------ r6263 | rstory | 2012-01-11 13:28:49 -0800 (Wed, 11 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c bump log level to debug for edns0 message ------------------------------------------------------------------------ r6262 | rstory | 2012-01-11 13:28:42 -0800 (Wed, 11 Jan 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c tweak result checks - don't count extra results if no expected results passed - always check all results for trusted status ------------------------------------------------------------------------ r6261 | rstory | 2012-01-11 13:28:34 -0800 (Wed, 11 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c more parens; add line number to error message ------------------------------------------------------------------------ r6260 | rstory | 2012-01-11 12:33:11 -0800 (Wed, 11 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c use parens to ensure desired order of operation ------------------------------------------------------------------------ r6259 | rstory | 2012-01-11 12:00:11 -0800 (Wed, 11 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c fix usec to nsec conversion ------------------------------------------------------------------------ r6258 | rstory | 2012-01-11 12:00:03 -0800 (Wed, 11 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c set query state to response error when cancelling ------------------------------------------------------------------------ r6257 | rstory | 2012-01-11 11:59:55 -0800 (Wed, 11 Jan 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c revert r6191 "be less agressive about closing sockets" - also add comment that closing sockets ensures we use a different port, which makes spoofing harder for attackers ------------------------------------------------------------------------ r6256 | rstory | 2012-01-11 11:59:47 -0800 (Wed, 11 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator-compat.h change ifdef for not closing sockets to DEBUG_DONT_CLOSESOCK ------------------------------------------------------------------------ r6255 | rstory | 2012-01-11 11:59:39 -0800 (Wed, 11 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c don't free async status pointers ifdef DEBUG_DONT_RELEASE_ANYTHING ------------------------------------------------------------------------ r6254 | hardaker | 2012-01-10 15:29:00 -0800 (Tue, 10 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/apps/qt/README mention how to compile an application against an installation in another path ------------------------------------------------------------------------ r6253 | hardaker | 2012-01-10 15:28:50 -0800 (Tue, 10 Jan 2012) | 1 line Changed paths: A /trunk/dnssec-tools/apps/qt/README A /trunk/dnssec-tools/apps/qt/qt4.patch Added the qt4 patch ------------------------------------------------------------------------ r6252 | hardaker | 2012-01-10 15:28:40 -0800 (Tue, 10 Jan 2012) | 1 line Changed paths: A /trunk/dnssec-tools/apps/qt/dnssec-test/README Added a readme file to describe what it is about ------------------------------------------------------------------------ r6251 | hardaker | 2012-01-10 15:28:28 -0800 (Tue, 10 Jan 2012) | 1 line Changed paths: A /trunk/dnssec-tools/apps/qt/dnssec-test A /trunk/dnssec-tools/apps/qt/dnssec-test/.gitignore A /trunk/dnssec-tools/apps/qt/dnssec-test/DNSSECStatus.cpp A /trunk/dnssec-tools/apps/qt/dnssec-test/DNSSECStatus.h A /trunk/dnssec-tools/apps/qt/dnssec-test/MainWindow.cpp A /trunk/dnssec-tools/apps/qt/dnssec-test/MainWindow.h A /trunk/dnssec-tools/apps/qt/dnssec-test/MainWindow.ui A /trunk/dnssec-tools/apps/qt/dnssec-test/dnssec-test.pro A /trunk/dnssec-tools/apps/qt/dnssec-test/dnssec-tests.txt A /trunk/dnssec-tools/apps/qt/dnssec-test/main.cpp a GUI application to quickly test all the entries in the test.DT zone ------------------------------------------------------------------------ r6250 | hardaker | 2012-01-10 15:28:16 -0800 (Tue, 10 Jan 2012) | 1 line Changed paths: A /trunk/dnssec-tools/apps/qt A /trunk/dnssec-tools/apps/qt/qml-test A /trunk/dnssec-tools/apps/qt/qml-test/README A /trunk/dnssec-tools/apps/qt/qml-test/test.qml Files to test Qt QML support of loading the DD webpage with its dnssec test ------------------------------------------------------------------------ r6249 | hardaker | 2012-01-10 15:28:05 -0800 (Tue, 10 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/dist/rollerd.service.in DNS -> DNSSEC per tewok's suggestion ------------------------------------------------------------------------ r6248 | hardaker | 2012-01-10 15:27:55 -0800 (Tue, 10 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/NewServerBox.qml close the input panel (software keyboard) on completion ------------------------------------------------------------------------ r6247 | hardaker | 2012-01-10 15:27:45 -0800 (Tue, 10 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.qrc A /trunk/dnssec-tools/validator/apps/dnssec-check/qml/MeegoDnssecCheck.qml create a new high level meego screen wrapper ------------------------------------------------------------------------ r6246 | hardaker | 2012-01-10 15:27:33 -0800 (Tue, 10 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro link to a scratchbox lib when building for harmattan include path should include ../../include ------------------------------------------------------------------------ r6245 | hardaker | 2012-01-10 15:27:21 -0800 (Tue, 10 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/Makefile.in use the new source path for installation ------------------------------------------------------------------------ r6244 | hardaker | 2012-01-10 15:27:12 -0800 (Tue, 10 Jan 2012) | 1 line Changed paths: A /trunk/dnssec-tools/validator/include/validator/validator-compat.h added back missing -compat file ------------------------------------------------------------------------ r6243 | hardaker | 2012-01-10 15:26:58 -0800 (Tue, 10 Jan 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec_checks.c M /trunk/dnssec-tools/validator/apps/getaddr.c M /trunk/dnssec-tools/validator/apps/gethost.c M /trunk/dnssec-tools/validator/apps/getname.c M /trunk/dnssec-tools/validator/apps/getquery.c M /trunk/dnssec-tools/validator/apps/getrrset.c M /trunk/dnssec-tools/validator/apps/libsres_test.c M /trunk/dnssec-tools/validator/apps/libval_check_conf.c M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/apps/validator_selftest.c M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in A /trunk/dnssec-tools/validator/include/validator/validator-config.h.in (from /trunk/dnssec-tools/validator/include/validator-config.h.in:6242) D /trunk/dnssec-tools/validator/include/validator-compat.h D /trunk/dnssec-tools/validator/include/validator-config.h.in M /trunk/dnssec-tools/validator/libsres/base64.c M /trunk/dnssec-tools/validator/libsres/ns_name.c M /trunk/dnssec-tools/validator/libsres/ns_netint.c M /trunk/dnssec-tools/validator/libsres/ns_parse.c M /trunk/dnssec-tools/validator/libsres/ns_print.c M /trunk/dnssec-tools/validator/libsres/ns_samedomain.c M /trunk/dnssec-tools/validator/libsres/ns_ttl.c M /trunk/dnssec-tools/validator/libsres/nsap_addr.c M /trunk/dnssec-tools/validator/libsres/res_comp.c M /trunk/dnssec-tools/validator/libsres/res_debug.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_mkquery.c M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libsres/res_support.c M /trunk/dnssec-tools/validator/libsres/res_tsig.c M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_crypto.c M /trunk/dnssec-tools/validator/libval/val_get_rrset.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_parse.c M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_verify.c M /trunk/dnssec-tools/validator/libval/val_x_query.c M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c move the validator-config.h and -compat files to the validator/ subdirectory This lets all the code in the project compile either against the internal headers or against external ones so the code can be compiled inside or outside the project directory. ------------------------------------------------------------------------ r6242 | hardaker | 2012-01-10 15:26:26 -0800 (Tue, 10 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/main.cpp don't force QML now that a command line app exists ------------------------------------------------------------------------ r6241 | hardaker | 2012-01-10 15:26:16 -0800 (Tue, 10 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro A /trunk/dnssec-tools/validator/apps/dnssec-check/qtc_packaging/debian_harmattan A /trunk/dnssec-tools/validator/apps/dnssec-check/qtc_packaging/debian_harmattan/README A /trunk/dnssec-tools/validator/apps/dnssec-check/qtc_packaging/debian_harmattan/changelog A /trunk/dnssec-tools/validator/apps/dnssec-check/qtc_packaging/debian_harmattan/compat A /trunk/dnssec-tools/validator/apps/dnssec-check/qtc_packaging/debian_harmattan/control A /trunk/dnssec-tools/validator/apps/dnssec-check/qtc_packaging/debian_harmattan/copyright A /trunk/dnssec-tools/validator/apps/dnssec-check/qtc_packaging/debian_harmattan/manifest.aegis A /trunk/dnssec-tools/validator/apps/dnssec-check/qtc_packaging/debian_harmattan/rules Added harmattan packaging files ------------------------------------------------------------------------ r6240 | hardaker | 2012-01-10 15:26:03 -0800 (Tue, 10 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp only load the wlan0 file if on maemo or harmattan ------------------------------------------------------------------------ r6239 | hardaker | 2012-01-10 15:25:53 -0800 (Tue, 10 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/whatami.h define IS_HARMATTAN ------------------------------------------------------------------------ r6238 | hardaker | 2012-01-10 15:25:42 -0800 (Tue, 10 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/whatami.h added documentation to the header about what it defines, add symbian ------------------------------------------------------------------------ r6237 | hardaker | 2012-01-10 15:25:30 -0800 (Tue, 10 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/main.cpp allow command line options to influence which GUI interface is presented ------------------------------------------------------------------------ r6236 | tewok | 2012-01-06 13:10:47 -0800 (Fri, 06 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/README Deleted reference to local phaser. ------------------------------------------------------------------------ r6235 | tewok | 2012-01-06 13:10:38 -0800 (Fri, 06 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-subdirs/README Deleted reference to local phaser. ------------------------------------------------------------------------ r6234 | tewok | 2012-01-06 13:10:30 -0800 (Fri, 06 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-split-view/README Deleted reference to local phaser. ------------------------------------------------------------------------ r6233 | tewok | 2012-01-06 13:10:15 -0800 (Fri, 06 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/README Deleted reference to local phaser. ------------------------------------------------------------------------ r6232 | tewok | 2012-01-06 13:10:07 -0800 (Fri, 06 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/README Deleted reference to local phaser. ------------------------------------------------------------------------ r6231 | tewok | 2012-01-06 13:09:59 -0800 (Fri, 06 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/README Deleted reference to local phaser. ------------------------------------------------------------------------ r6230 | tewok | 2012-01-06 13:06:12 -0800 (Fri, 06 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/README Added a line about having demo-tools in your path. ------------------------------------------------------------------------ r6229 | tewok | 2012-01-06 13:04:52 -0800 (Fri, 06 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/demo-tools/README Added an entry for phaser. ------------------------------------------------------------------------ r6228 | tewok | 2012-01-06 13:03:30 -0800 (Fri, 06 Jan 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/demos/demo-tools/phaser Consolidated various demo phasers into this single copy. ------------------------------------------------------------------------ r6227 | tewok | 2012-01-06 13:01:04 -0800 (Fri, 06 Jan 2012) | 3 lines Changed paths: D /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/phaser Deleted the individual phaser scripts since it's moving to the demo-tools directory. ------------------------------------------------------------------------ r6226 | tewok | 2012-01-06 13:00:54 -0800 (Fri, 06 Jan 2012) | 3 lines Changed paths: D /trunk/dnssec-tools/tools/demos/rollerd-subdirs/phaser Deleted the individual phaser scripts since it's moving to the demo-tools directory. ------------------------------------------------------------------------ r6225 | tewok | 2012-01-06 13:00:44 -0800 (Fri, 06 Jan 2012) | 3 lines Changed paths: D /trunk/dnssec-tools/tools/demos/rollerd-split-view/phaser Deleted the individual phaser scripts since it's moving to the demo-tools directory. ------------------------------------------------------------------------ r6224 | tewok | 2012-01-06 13:00:24 -0800 (Fri, 06 Jan 2012) | 3 lines Changed paths: D /trunk/dnssec-tools/tools/demos/rollerd-manyzones/phaser Deleted the individual phaser scripts since it's moving to the demo-tools directory. ------------------------------------------------------------------------ r6223 | tewok | 2012-01-06 13:00:14 -0800 (Fri, 06 Jan 2012) | 3 lines Changed paths: D /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/phaser Deleted the individual phaser scripts since it's moving to the demo-tools directory. ------------------------------------------------------------------------ r6222 | tewok | 2012-01-06 12:59:25 -0800 (Fri, 06 Jan 2012) | 3 lines Changed paths: D /trunk/dnssec-tools/tools/demos/rollerd-basic/phaser Deleted the individual phaser scripts since it's moving to the demo-tools directory. ------------------------------------------------------------------------ r6221 | tewok | 2012-01-06 10:00:25 -0800 (Fri, 06 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/README Added a brief description of the rollerd-zonegroups demo. ------------------------------------------------------------------------ r6220 | tewok | 2012-01-06 09:58:48 -0800 (Fri, 06 Jan 2012) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/demos/rollerd-zonegroups A /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/Makefile A /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/README A /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/phaser A /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/rc.blinkenlights A /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/rundemo A /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/save-demo.rollrec A /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/save-example-000.com A /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/save-example-001.com A /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/save-example-002.com A /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/save-example-003.com A /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/save-example-004.com A /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/save-example-005.com A /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/save-example-006.com A /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/save-example-007.com A /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/save-example-008.com A /trunk/dnssec-tools/tools/demos/rollerd-zonegroups/save-example-009.com Added files for zonegroups demo. ------------------------------------------------------------------------ r6219 | tewok | 2012-01-06 08:51:27 -0800 (Fri, 06 Jan 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Re-enabled a few rollrec interfaces in order to get the KSK7 synchronization working. Added an error response for bad dspub and dspuball user commands. ------------------------------------------------------------------------ r6218 | hserus | 2012-01-05 13:07:07 -0800 (Thu, 05 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc Define new flags, remove deprecated flags ------------------------------------------------------------------------ r6217 | hserus | 2012-01-05 13:04:14 -0800 (Thu, 05 Jan 2012) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Add new flag definitions. Remove val_add_valpolicy/val_remove_policy since this is needless complexity for the API definition at this stage. Define new val_context_setqflags() function since this is likely closer to what someone might need. All of these are proposed changes, and subject to further fine-tuning as may be necessary. ------------------------------------------------------------------------ r6216 | hserus | 2012-01-05 12:57:50 -0800 (Thu, 05 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval-implementation-notes Update to be closer to reality. ------------------------------------------------------------------------ r6215 | hserus | 2012-01-05 12:52:25 -0800 (Thu, 05 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/Makefile.in M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod Document new flags and functions ------------------------------------------------------------------------ r6214 | hserus | 2012-01-05 12:50:37 -0800 (Thu, 05 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/include/validator-internal.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_context.h Add support for on-the-fly modification of default query flags for a context. ------------------------------------------------------------------------ r6213 | rstory | 2012-01-05 07:15:37 -0800 (Thu, 05 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c _async_check_one: rework count for remaining queries ------------------------------------------------------------------------ r6212 | rstory | 2012-01-05 07:15:23 -0800 (Thu, 05 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c _rseolver_submit: add param to return sent status ------------------------------------------------------------------------ r6211 | rstory | 2012-01-05 07:15:10 -0800 (Thu, 05 Jan 2012) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c res_io_check_ea_list tweaks - document net_change and active parameters - count/log cancelled/completed ea - count future/unsent queries as active ------------------------------------------------------------------------ r6210 | rstory | 2012-01-05 07:14:53 -0800 (Thu, 05 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c fix minor typo in comment ------------------------------------------------------------------------ r6209 | rstory | 2012-01-05 07:14:41 -0800 (Thu, 05 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c add p_query_status case for combined glue statuses ------------------------------------------------------------------------ r6208 | rstory | 2012-01-05 07:14:27 -0800 (Thu, 05 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c don't check for done if we already know we're done ------------------------------------------------------------------------ r6206 | tewok | 2012-01-03 17:26:19 -0800 (Tue, 03 Jan 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added a missing blank column to the infostripe. This once again allows zones to be selected. Fixed a few comments and typos. ------------------------------------------------------------------------ r6205 | rstory | 2012-01-03 12:04:30 -0800 (Tue, 03 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c fix off-by-one in -T processing.. ------------------------------------------------------------------------ r6204 | rstory | 2012-01-03 12:04:21 -0800 (Tue, 03 Jan 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c rework validate's result logging - log unexpected values - log missing values ------------------------------------------------------------------------ r6203 | tewok | 2012-01-02 17:44:58 -0800 (Mon, 02 Jan 2012) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Collapsed kskphase() and zskphase() into nextphase(). They did essentially the same thing, but with log messages and rollrec fields pointing to the specific keytype. nextphase() does The Right Thing for the different key types. ------------------------------------------------------------------------ r6202 | tewok | 2012-01-02 17:37:50 -0800 (Mon, 02 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added a menu separator above the Refresh. ------------------------------------------------------------------------ r6201 | tewok | 2012-01-02 15:51:50 -0800 (Mon, 02 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added a little extra description to the "refresh display" pod. ------------------------------------------------------------------------ r6200 | tewok | 2012-01-02 15:45:23 -0800 (Mon, 02 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added a "display refresh" command. ------------------------------------------------------------------------ r6199 | rstory | 2012-01-02 10:18:44 -0800 (Mon, 02 Jan 2012) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.h M /trunk/dnssec-tools/validator/libsres/res_query.c set ea debug info for sync queries - change query_queue to use res_async_query_create + new res_io_queue_ea ------------------------------------------------------------------------ r6198 | rstory | 2012-01-02 10:18:16 -0800 (Mon, 02 Jan 2012) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c res_io_accept: fix return code for servfail case ------------------------------------------------------------------------ r6197 | hserus | 2012-01-02 06:55:26 -0800 (Mon, 02 Jan 2012) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c Intialize structure before use. ------------------------------------------------------------------------ r6196 | rstory | 2011-12-31 07:42:03 -0800 (Sat, 31 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/apps/validator_driver.h M /trunk/dnssec-tools/validator/apps/validator_selftest.c add end/duration message for async tests too ------------------------------------------------------------------------ r6195 | rstory | 2011-12-31 07:41:55 -0800 (Sat, 31 Dec 2011) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/apps/validator_selftest.c check_results tweaks, proper rc check for finding failures - document return values - move multiple printfs to a single earlier printf - update checks of rc from check_results for new meanings ------------------------------------------------------------------------ r6194 | rstory | 2011-12-31 07:41:47 -0800 (Sat, 31 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c check/print if trusted in print_val_response ------------------------------------------------------------------------ r6193 | rstory | 2011-12-31 07:41:39 -0800 (Sat, 31 Dec 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c fix spin loop - sleep a while even if we have no active fds ------------------------------------------------------------------------ r6192 | rstory | 2011-12-31 07:41:31 -0800 (Sat, 31 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c jumpstart next nameserver when current one exhausted ------------------------------------------------------------------------ r6191 | rstory | 2011-12-31 07:41:23 -0800 (Sat, 31 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c be less agressive about closing sockets ------------------------------------------------------------------------ r6190 | rstory | 2011-12-31 07:41:15 -0800 (Sat, 31 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c log error string on socket error ------------------------------------------------------------------------ r6189 | rstory | 2011-12-31 07:41:07 -0800 (Sat, 31 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c set next_try/cancel together; new helper for resetting timeouts ------------------------------------------------------------------------ r6188 | rstory | 2011-12-31 07:40:59 -0800 (Sat, 31 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c cancel as when nothing checked and nothing remains ------------------------------------------------------------------------ r6187 | rstory | 2011-12-31 07:40:51 -0800 (Sat, 31 Dec 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libval/val_resquery.c more fallback fixes - return respondent even when dropping request - fallback not conditional on stream status ------------------------------------------------------------------------ r6186 | rstory | 2011-12-31 07:40:43 -0800 (Sat, 31 Dec 2011) | 21 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/libsres/res_io_manager.c lots of res_io_manager tweaks res_io_check_ea_list - cancel instead of retry when no remaining attempts - stricter checks for remaining count - don't skip other eas when we hit a non-active socket - don't count close sockets as active res_io_select_info - update timeouts for closed socket if remaining attempts res_io_get_a_response - check if response received even if no remaining attempts - use new res_response_check to check header/tsig - log message when dropping response, and set timer for immediate retry - return SR_IO_NO_ANSWER if no reponse and no remaining retries misc - move conditional debug code later - fix typo ------------------------------------------------------------------------ r6185 | rstory | 2011-12-31 07:40:34 -0800 (Sat, 31 Dec 2011) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libsres/res_support.c M /trunk/dnssec-tools/validator/libval/val_resquery.c new helper functions - new res_response_check to check header/tsig - new res_map_srio_to_sr to map SR_IO_* error codes to SR_* error codes ------------------------------------------------------------------------ r6184 | rstory | 2011-12-31 07:40:25 -0800 (Sat, 31 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator-internal.h M /trunk/dnssec-tools/validator/libval/val_log.c update p_query_status for missing statuses ------------------------------------------------------------------------ r6183 | rstory | 2011-12-31 07:40:16 -0800 (Sat, 31 Dec 2011) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.h M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/libsres/res_support.c fix compiler errors - use correct define when passing logs to libval - add prototype for check_results - fix prototype name for libsres debug functions ------------------------------------------------------------------------ r6182 | rstory | 2011-12-31 07:40:07 -0800 (Sat, 31 Dec 2011) | 10 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c validate async fixes - check for inverted range (eg 8-5) - max timeout 5 min - no relative timeout adjustment, library does that now - fix timeout in debug msg - check async results - add failed count to testsuite - new async callback struct to pass more params to callback - in callback, call compose_answer & check_results ------------------------------------------------------------------------ r6181 | rstory | 2011-12-31 07:39:58 -0800 (Sat, 31 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_assertion.c add retval to val_cb_params_t ------------------------------------------------------------------------ r6180 | rstory | 2011-12-31 07:39:49 -0800 (Sat, 31 Dec 2011) | 15 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_resquery.c - val_async_select - move abs/rel time adjustment to val_async_seclect_info - val_async_select_info - timeout value is relative, adjust internally for res_io absolute - _async_check_one - new param returns remaining queries - could counting be optimized - val_async_check_wait - check completed flag again after _async_check_one - only call _handle_completed when we see completed flag - return error on select error - val_async_submit - return error if can't create context - add details to debug message - add extern decl for res_print_ea ------------------------------------------------------------------------ r6179 | rstory | 2011-12-31 07:39:40 -0800 (Sat, 31 Dec 2011) | 16 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/include/validator-compat.h M /trunk/dnssec-tools/validator/libsres/res_io_manager.c tweaks to res_io_manager - conditionally add extra info to ea struct for debug output - conditionally don't release ea structs in free ro close sockets - so no ptr/socket reuse, making them unique in debug output - set_alarm: don't clear u_sec - res_print_ea - add relative time to debug - less debug for expired/cancelled events - res_io_select_info - only log final timeout if it changed - add remaining ried to debug - res_io_check_ea_list - count remaining requests - return SR_IO_NO_ANSWER if no remaining requests - add relative time to debug ------------------------------------------------------------------------ r6178 | rstory | 2011-12-31 07:39:31 -0800 (Sat, 31 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c avoid negative timeouts ------------------------------------------------------------------------ r6177 | rstory | 2011-12-31 07:39:23 -0800 (Sat, 31 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c log name/type in vgai callback ------------------------------------------------------------------------ r6176 | rstory | 2011-12-31 07:39:15 -0800 (Sat, 31 Dec 2011) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c async getaddrinfo fixes - save hints - get_addrinfo_from_results return code is not a validator error code, so don't treat it like one ------------------------------------------------------------------------ r6175 | hserus | 2011-12-30 14:14:04 -0800 (Fri, 30 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Add some more useful log messages ------------------------------------------------------------------------ r6174 | rstory | 2011-12-30 14:10:16 -0800 (Fri, 30 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/libsres/res_io_manager.c make edns0 size per expected arrival instead of per ns ------------------------------------------------------------------------ r6173 | rstory | 2011-12-30 12:22:52 -0800 (Fri, 30 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c more fallback fixes: reset timer for immediate retry ------------------------------------------------------------------------ r6172 | hserus | 2011-12-30 09:33:08 -0800 (Fri, 30 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_verify.c M /trunk/dnssec-tools/validator/libval/val_verify.h Add ability to ignore clock skew during validation for a given query, through a new query flag VAL_QUERY_IGNORE_SKEW ------------------------------------------------------------------------ r6171 | hserus | 2011-12-30 08:00:55 -0800 (Fri, 30 Dec 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_context.h Replace yet another val_create_context_with_foo() with val_create_context_ex(), which takes options passed within an (extensible) strucure. ------------------------------------------------------------------------ r6170 | rstory | 2011-12-30 07:37:25 -0800 (Fri, 30 Dec 2011) | 12 lines Changed paths: M /trunk/dnssec-tools/validator/apps/libsres_test.c M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_support.c update libsres debugging - previously used static level, LOG_WARNING. - remove boolean res_io_set_debug() - new res_set_debug(int) - validate sets res debug level iff val debug level is 7 or higher - test new level even when using libval logging (previously passed level directly to libval), and pass LOG_ERROR to libval is libsres level is met. This means that levels are (mostly) independent, so libsres debug can be enabled even if libval level is higher. [Well, once support is added to validate to specify separate debug levels. This is left as an exercise to the reader.] ------------------------------------------------------------------------ r6169 | hardaker | 2011-12-29 15:59:07 -0800 (Thu, 29 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rr-dnssec.t allow DS digests to have surrounding ()s and strip them ------------------------------------------------------------------------ r6168 | hardaker | 2011-12-29 15:58:54 -0800 (Thu, 29 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm cpan bug 72997: patch from mithro to add support for signed https certificates ------------------------------------------------------------------------ r6167 | hardaker | 2011-12-29 15:58:42 -0800 (Thu, 29 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm check the right type of DNSKEY ref ------------------------------------------------------------------------ r6166 | hardaker | 2011-12-29 15:58:28 -0800 (Thu, 29 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in A /trunk/dnssec-tools/dist/donutsd.service.in A /trunk/dnssec-tools/dist/rollerd.service.in added systemd service files for rollerd and donutsd ------------------------------------------------------------------------ r6165 | hardaker | 2011-12-29 15:58:14 -0800 (Thu, 29 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Result.qml added a reset button ------------------------------------------------------------------------ r6164 | hardaker | 2011-12-29 15:58:00 -0800 (Thu, 29 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Button.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml create a reset button and rearrange buttons to the bottom ------------------------------------------------------------------------ r6163 | hardaker | 2011-12-29 15:57:47 -0800 (Thu, 29 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js remove debugging ------------------------------------------------------------------------ r6162 | hardaker | 2011-12-29 15:57:33 -0800 (Thu, 29 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.qrc A /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Button.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/NewServerBox.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Result.qml outsourced the button and added a colorchange animation ------------------------------------------------------------------------ r6161 | hardaker | 2011-12-29 15:57:15 -0800 (Thu, 29 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.qrc M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/HostLabel.qml A /trunk/dnssec-tools/validator/apps/dnssec-check/qml/NewServerBox.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Result.qml cleaned up qml structure and formatted in black ------------------------------------------------------------------------ r6160 | hardaker | 2011-12-29 15:56:59 -0800 (Thu, 29 Dec 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-check/qmlapplicationviewer A /trunk/dnssec-tools/validator/apps/dnssec-check/qmlapplicationviewer/qmlapplicationviewer.cpp A /trunk/dnssec-tools/validator/apps/dnssec-check/qmlapplicationviewer/qmlapplicationviewer.h A /trunk/dnssec-tools/validator/apps/dnssec-check/qmlapplicationviewer/qmlapplicationviewer.pri forgot the application viewer object ------------------------------------------------------------------------ r6159 | hardaker | 2011-12-29 15:56:45 -0800 (Thu, 29 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/main.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml M /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Result.qml added a title and the ability to add new hosts ------------------------------------------------------------------------ r6158 | hardaker | 2011-12-29 15:56:30 -0800 (Thu, 29 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/DNSSECTest.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/DNSSECTest.h A /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.cpp A /trunk/dnssec-tools/validator/apps/dnssec-check/TestManager.h M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.qrc M /trunk/dnssec-tools/validator/apps/dnssec-check/main.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.h A /trunk/dnssec-tools/validator/apps/dnssec-check/qml A /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DNSSECCheck.js A /trunk/dnssec-tools/validator/apps/dnssec-check/qml/DnssecCheck.qml A /trunk/dnssec-tools/validator/apps/dnssec-check/qml/HostLabel.qml A /trunk/dnssec-tools/validator/apps/dnssec-check/qml/Result.qml qml interface start ------------------------------------------------------------------------ r6157 | hardaker | 2011-12-29 15:56:12 -0800 (Thu, 29 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/main.cpp QML setup ------------------------------------------------------------------------ r6156 | hardaker | 2011-12-29 15:55:59 -0800 (Thu, 29 Dec 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-check/DNSSECTest.cpp A /trunk/dnssec-tools/validator/apps/dnssec-check/DNSSECTest.h (from /trunk/dnssec-tools/validator/apps/dnssec-check/QStatusLight.h:6155) D /trunk/dnssec-tools/validator/apps/dnssec-check/DataSubmitter.cpp D /trunk/dnssec-tools/validator/apps/dnssec-check/DataSubmitter.h M /trunk/dnssec-tools/validator/apps/dnssec-check/QStatusLight.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/QStatusLight.h M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp split the StatusLight class along the gui and infrastructure lines ------------------------------------------------------------------------ r6155 | hardaker | 2011-12-29 15:55:43 -0800 (Thu, 29 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/README document the potential problems with missing MIME modules ------------------------------------------------------------------------ r6154 | hardaker | 2011-12-29 15:55:30 -0800 (Thu, 29 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm version bump ------------------------------------------------------------------------ r6153 | hardaker | 2011-12-29 15:55:16 -0800 (Thu, 29 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm Added a warning message when failing to load a DNSKEY ------------------------------------------------------------------------ r6152 | hardaker | 2011-12-29 15:55:04 -0800 (Thu, 29 Dec 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-check/whatami.h a new header to detect what type of interface to offer ------------------------------------------------------------------------ r6151 | hardaker | 2011-12-29 15:54:51 -0800 (Thu, 29 Dec 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-check/DataSubmitter.cpp A /trunk/dnssec-tools/validator/apps/dnssec-check/DataSubmitter.h M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp use newer libtool call ------------------------------------------------------------------------ r6150 | hardaker | 2011-12-29 15:54:36 -0800 (Thu, 29 Dec 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/man A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/man/dnssec-system-tray.1 added a basic manual page ------------------------------------------------------------------------ r6149 | hardaker | 2011-12-29 15:54:21 -0800 (Thu, 29 Dec 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/lookup/man A /trunk/dnssec-tools/validator/apps/lookup/man/lookup.1 added a basic manual page ------------------------------------------------------------------------ r6148 | hardaker | 2011-12-29 15:54:07 -0800 (Thu, 29 Dec 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-check/man A /trunk/dnssec-tools/validator/apps/dnssec-check/man/dnssec-check.1 added a basic manual page ------------------------------------------------------------------------ r6147 | hardaker | 2011-12-29 15:53:53 -0800 (Thu, 29 Dec 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-nodes/man A /trunk/dnssec-tools/validator/apps/dnssec-nodes/man/dnssec-nodes.1 added a basic manual page ------------------------------------------------------------------------ r6146 | hserus | 2011-12-28 11:41:01 -0800 (Wed, 28 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_policy.h Don't set default policies based on overrides ------------------------------------------------------------------------ r6145 | hserus | 2011-12-28 11:31:11 -0800 (Wed, 28 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c Do not attempt to free the default context when it may still be in use. ------------------------------------------------------------------------ r6144 | rstory | 2011-12-28 10:52:52 -0800 (Wed, 28 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/libsres/res_support.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_verify.c move label/name compare prototypes to resolver.h ------------------------------------------------------------------------ r6143 | rstory | 2011-12-28 10:38:31 -0800 (Wed, 28 Dec 2011) | 10 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.h M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_resquery.h fallback fixes. - NOTE: return codes from res_nsfallback/res_nsfallback_ea in libres have changed/expanded. - use server to find right ea when falling back - always return respondent from response_recv, even if message was dropped (e.g. SERVFAIL) - new utility function res_print_server to print name_server struct - reset edns0 size when moving to new address for a name_server ------------------------------------------------------------------------ r6142 | rstory | 2011-12-28 09:10:58 -0800 (Wed, 28 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_support.c add missing res_log_ap for when not using libval logging ------------------------------------------------------------------------ r6141 | hserus | 2011-12-28 08:40:37 -0800 (Wed, 28 Dec 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c Allow the user to free up the default context as long as they hold the handle to it and as long as noone else is using it. ------------------------------------------------------------------------ r6140 | hserus | 2011-12-28 08:38:29 -0800 (Wed, 28 Dec 2011) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c Don't free up the context associated with any async status object. If the user didn't supply a context, the default context is created (or re-used). If the user supplied a non-NULL context, it implies that the user created the context and will therefore also call val_free_context(). ------------------------------------------------------------------------ r6139 | hserus | 2011-12-28 08:24:56 -0800 (Wed, 28 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_context.h Add new function to enable creation of a validator context with specific default query flags ------------------------------------------------------------------------ r6138 | tewok | 2011-12-23 15:59:08 -0800 (Fri, 23 Dec 2011) | 13 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd This fixes a significant bug in KSK rollover, where the phase 3 wait wasn't happening. This was a very recent bug, probably introduced sometime in December, 2011. The first two fixes mentioned below take care of that problem. The others were minor bugs that affected the log and blinkenlights more than anything. Got the current rollrec ref, rather than use stale data. phasewait() Return the new phase number, rather than current phase number. phasecmd() Used a reference instead of copying the hash. ksk_phaser() Phase 1 is start of KSK rollover, not phase normal. kskphase() Deleted some dead code. Adjusted some comments. ------------------------------------------------------------------------ r6137 | rstory | 2011-12-22 12:52:48 -0800 (Thu, 22 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_support.c M /trunk/dnssec-tools/validator/libsres/res_support.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_support.h M /trunk/dnssec-tools/validator/libval/val_verify.c move label/name compare functions to libsres ------------------------------------------------------------------------ r6136 | rstory | 2011-12-22 12:52:39 -0800 (Thu, 22 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c fix compiler warning ------------------------------------------------------------------------ r6135 | rstory | 2011-12-22 12:52:31 -0800 (Thu, 22 Dec 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_debug.c M /trunk/dnssec-tools/validator/libsres/res_support.c M /trunk/dnssec-tools/validator/libsres/res_support.h add res_log_ap for use when we already have va_list ------------------------------------------------------------------------ r6134 | rstory | 2011-12-22 12:52:22 -0800 (Thu, 22 Dec 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/apps/getaddr.c add option to use libval async code for getaddr - primarily as a way to exercise that code. ------------------------------------------------------------------------ r6132 | hserus | 2011-12-21 09:39:53 -0800 (Wed, 21 Dec 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_resquery.c Remove all use of the VAL_QUERY_EDNS0 flag in libval. Let libsres handle all edns0 fallback for us. ------------------------------------------------------------------------ r6131 | hserus | 2011-12-20 16:12:14 -0800 (Tue, 20 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c Remove extra wait period between sending out query retries when we're already done with edns0 fallback processing. ------------------------------------------------------------------------ r6130 | hserus | 2011-12-20 09:37:24 -0800 (Tue, 20 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Clarify minor comment ------------------------------------------------------------------------ r6129 | hserus | 2011-12-20 09:34:46 -0800 (Tue, 20 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c Conditionally enable context refcount increments ------------------------------------------------------------------------ r6128 | hserus | 2011-12-20 09:30:59 -0800 (Tue, 20 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator-internal.h M /trunk/dnssec-tools/validator/libval/val_context.c Conditionally enable context refcounts ------------------------------------------------------------------------ r6127 | hserus | 2011-12-20 09:28:42 -0800 (Tue, 20 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Properly acquire the policy lock for async functions ------------------------------------------------------------------------ r6126 | hserus | 2011-12-20 09:20:45 -0800 (Tue, 20 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_resquery.c Use VAL_QUERY_EDNS0 instead of VAL_QUERY_NO_EDNS0. Semantics of setting this flag change according. ------------------------------------------------------------------------ r6125 | hserus | 2011-12-20 09:06:20 -0800 (Tue, 20 Dec 2011) | 8 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator-internal.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_assertion.h M /trunk/dnssec-tools/validator/libval/val_policy.c As long as we hold the context's assertion cache lock, it should be safe to reset the query structure as long as we don't refer back to the query chain till such time that we release the assertion cache lock. Replace the query lock within the query structure to a simple reference count. Modify the reference count only when we hold the context's assertion lock in order to ensure thread safety. ------------------------------------------------------------------------ r6124 | hserus | 2011-12-20 08:18:12 -0800 (Tue, 20 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Set appropriate ttl expiry for hand-crafted non-existence response and for query error conditions. ------------------------------------------------------------------------ r6123 | hserus | 2011-12-20 07:54:33 -0800 (Tue, 20 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c #ifdef out unused routines remove_and_free_query_chain() and _free_qfq_chain() ------------------------------------------------------------------------ r6122 | hserus | 2011-12-20 07:25:05 -0800 (Tue, 20 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.h M /trunk/dnssec-tools/validator/libval/val_resquery.c Handle EDNS fallback entirely within libsres ------------------------------------------------------------------------ r6121 | hserus | 2011-12-20 07:17:28 -0800 (Tue, 20 Dec 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Do not continue to look for glue if we don't have any partial NS information. Refine debug messages for glue-fetch logic. ------------------------------------------------------------------------ r6120 | hserus | 2011-12-20 07:04:05 -0800 (Tue, 20 Dec 2011) | 11 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_policy.c - hold the policy lock only when we are actively using a context, and not if we're merely creating one. - try to acquire an exclusive (non-blocking) lock on the polcy in val_refresh_context() instead of acquiring a (blocking) lock for each policy file. Since we hold an exclusive lock during the context refresh, we don't need to perform more granular locking of the context's query chain in order to reset its contents. - when adding or removing policy fragments from a context acquire the context's assertion lock (mutex) instead of an exclusive lock in the policy, since that is safe too and will likely return sooner. ------------------------------------------------------------------------ r6119 | hserus | 2011-12-19 19:40:34 -0800 (Mon, 19 Dec 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_get_rrset.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c Ensure that the context's policy lock is released upon exiting the high-level API functions. ------------------------------------------------------------------------ r6118 | tewok | 2011-12-19 12:29:48 -0800 (Mon, 19 Dec 2011) | 17 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added a column for zonegroups and allowed for hiding/showing the zone groups column. Also did proper enabling/disabling of the "Show All Keysets" menu items. Deleted most of the text from the help menu item. This was copied from the pod and reformatted for Tk. Rather than letting the one get out of day, which was all too often the case, the remaining text is relatively non-specific and refers the reader to the pod. Added a paint flag parameter to disp_menus(). This allows for only repainting the display during display-menu commands when it's actually needed, rather than having several choppy updates happening when a single menu command is actually handled by multiple calls to disp_menus(). Updated the pod to cover the current set of menu commands. ------------------------------------------------------------------------ r6117 | hserus | 2011-12-19 12:24:01 -0800 (Mon, 19 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.h Add new macro that wraps around pthread_rwlock_trywrlock ------------------------------------------------------------------------ r6116 | tewok | 2011-12-16 11:33:20 -0800 (Fri, 16 Dec 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Deleted -zonegroup as a synonym for -zg. Added -zonegroups to display just the names of defined zonegroups. ------------------------------------------------------------------------ r6115 | tewok | 2011-12-16 09:36:54 -0800 (Fri, 16 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor Added support for editing zonegroups. ------------------------------------------------------------------------ r6114 | tewok | 2011-12-16 07:44:52 -0800 (Fri, 16 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Added the -zonegroup and -zg options for specifying a zonegroup. ------------------------------------------------------------------------ r6113 | hserus | 2011-12-16 07:40:45 -0800 (Fri, 16 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator-compat.h M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_verify.c properly display timestamps ------------------------------------------------------------------------ r6112 | tewok | 2011-12-15 16:01:27 -0800 (Thu, 15 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollset Added the -zg option for setting the zonegroup. ------------------------------------------------------------------------ r6111 | tewok | 2011-12-15 12:51:59 -0800 (Thu, 15 Dec 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollinit Added the -zg option for specifying a zonegroup. Reworked big chunks o' pod. ------------------------------------------------------------------------ r6110 | tewok | 2011-12-14 16:08:31 -0800 (Wed, 14 Dec 2011) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Moved command parsing from commander() to singlecmd(). Added groupcmd() to expand group commands from zonegroup to zones. Added handling of zonegroup command. Removed some outdated pod. ------------------------------------------------------------------------ r6109 | tewok | 2011-12-14 16:00:57 -0800 (Wed, 14 Dec 2011) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Added -zonegroup command and -group option. Moved rollmgr_sendcmd() calls into new sendcmd(), in order to centralize handling of -group. Moved version() lower in the file. Fixed usage line for -pidfile. ------------------------------------------------------------------------ r6108 | tewok | 2011-12-14 16:00:06 -0800 (Wed, 14 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pod Added description of zonegroup field. ------------------------------------------------------------------------ r6107 | tewok | 2011-12-14 15:56:37 -0800 (Wed, 14 Dec 2011) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Added the rollrec_zonegroup(), rollrec_zonegroups(), rollrec_zonegroup_cmds() interfaces. When reading a rollrec file, a zone's zonegroup is added to the zonegroup list. Added the zonegroup field to rollrec entries. ------------------------------------------------------------------------ r6106 | tewok | 2011-12-14 14:54:02 -0800 (Wed, 14 Dec 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added support for the zonegroup command and group commands. Added an error code for bad zonegroups. ------------------------------------------------------------------------ r6105 | tewok | 2011-12-14 12:41:18 -0800 (Wed, 14 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added a comment to the setopt() header. ------------------------------------------------------------------------ r6104 | tewok | 2011-12-14 08:38:17 -0800 (Wed, 14 Dec 2011) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/rp-wrapper Example rollover phase program. This does the basic argument validation for a rollover phase program and not much else. ------------------------------------------------------------------------ r6103 | tewok | 2011-12-13 12:55:01 -0800 (Tue, 13 Dec 2011) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lights Added the "Halt Rollerd Now" command. Renamed the "Halt Rollerd" command to "Halt Rollerd After Current Operations". ------------------------------------------------------------------------ r6102 | tewok | 2011-12-13 12:54:23 -0800 (Tue, 13 Dec 2011) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/bubbles Added the "Halt Rollerd Now" command. Renamed the "Halt Rollerd" command to "Halt Rollerd After Current Operations". ------------------------------------------------------------------------ r6101 | tewok | 2011-12-13 12:53:16 -0800 (Tue, 13 Dec 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added the "Halt Rollerd Now" command. Renamed the "Halt Rollerd" command to "Halt Rollerd After Current Operations". ------------------------------------------------------------------------ r6100 | hserus | 2011-12-13 09:20:50 -0800 (Tue, 13 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp M /trunk/dnssec-tools/validator/apps/getaddr.c M /trunk/dnssec-tools/validator/apps/lookup/src/lookup.cpp Release validator context after use. ------------------------------------------------------------------------ r6099 | hserus | 2011-12-13 07:48:08 -0800 (Tue, 13 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Minor comment fixes. ------------------------------------------------------------------------ r6098 | tewok | 2011-12-13 07:28:04 -0800 (Tue, 13 Dec 2011) | 28 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Added %rollrecindex to map rollrec names to the index of the rollrec's first line in @rollreclines. This speeds up rollrec look-ups significantly. The changes are: rollrec lookups in @rollreclines are now done with rrindex(). This removed a lot of duplicated look-up code from a number of routines. buildrrindex() creates %rollrecindex. Added a line-number parameter to rollrec_newrec(). If rollrec_setval() creates a new rollrec, an index entry will be created. rollrec_add() creates an index entry. rollrec_del() deletes an index entry. rollrec_rename() deletes the index entry for the old name. Stopped exporting rollrec_newrec(). rollrec_readfile() forces there to be a blank line at the end of a rollrec file. Fixed some comments. ------------------------------------------------------------------------ r6097 | tewok | 2011-12-12 16:59:30 -0800 (Mon, 12 Dec 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Added -splitrrf command. Added now option to -halt and -shutdown. ------------------------------------------------------------------------ r6096 | tewok | 2011-12-12 16:51:56 -0800 (Mon, 12 Dec 2011) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Changed several hash values from \&unix_getid to \&unix_getpid to match the existing subroutine name. ------------------------------------------------------------------------ r6095 | tewok | 2011-12-12 16:48:15 -0800 (Mon, 12 Dec 2011) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added recognition of SIGINT to the zone processing loop for the soon queue.. Removed some unnecessary quotes from a log message. ------------------------------------------------------------------------ r6094 | tewok | 2011-12-12 16:39:04 -0800 (Mon, 12 Dec 2011) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added recognition of SIGINT to the zone processing loop. Moved some globals. ------------------------------------------------------------------------ r6093 | tewok | 2011-12-09 09:56:31 -0800 (Fri, 09 Dec 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Changed the default Soon Queue length from 100 seconds to 24 hours. Adjusted a number of comments. Fixed some phase-command pod. ------------------------------------------------------------------------ r6091 | hserus | 2011-12-07 08:59:08 -0800 (Wed, 07 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c Reduce debug level for reporting no data on socket ------------------------------------------------------------------------ r6090 | hserus | 2011-12-07 08:33:21 -0800 (Wed, 07 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_support.c Add missing format specifier for debug statement. ------------------------------------------------------------------------ r6089 | tewok | 2011-12-06 12:36:44 -0800 (Tue, 06 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Un-use'd a couple modules taht lsroll doesn't need. ------------------------------------------------------------------------ r6088 | tewok | 2011-12-06 10:22:34 -0800 (Tue, 06 Dec 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added two menu commands for restarting skipped zones. Fixed a misplaced command description in the pod. ------------------------------------------------------------------------ r6087 | tewok | 2011-12-06 08:18:36 -0800 (Tue, 06 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Consolidated ksk_phasewait() and zsk_phasewait() into phasewait(). ------------------------------------------------------------------------ r6086 | tewok | 2011-12-05 15:51:29 -0800 (Mon, 05 Dec 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Changed the command separator in "prog_*" from a semi to a bang. Fixed the regexp that strip blanks from the beginning and end of phase commands. ------------------------------------------------------------------------ r6085 | tewok | 2011-12-05 15:48:41 -0800 (Mon, 05 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Changed the command separator in "prog_*" from a semi to a bang. ------------------------------------------------------------------------ r6084 | tewok | 2011-12-05 15:47:32 -0800 (Mon, 05 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod Changed the command separator in "prog_*" from a semi to a bang. ------------------------------------------------------------------------ r6083 | tewok | 2011-12-05 15:46:20 -0800 (Mon, 05 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Changed the command separator in "prog_*" from a semi to a bang. ------------------------------------------------------------------------ r6082 | tewok | 2011-12-05 08:32:18 -0800 (Mon, 05 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod Added descriptions and example for phase processing commands. ------------------------------------------------------------------------ r6081 | tewok | 2011-12-05 08:28:03 -0800 (Mon, 05 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added a pod reference to rp-wrapper. ------------------------------------------------------------------------ r6080 | tewok | 2011-12-05 08:21:29 -0800 (Mon, 05 Dec 2011) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Added checks for phase command entries. Reorganized file-checking routine to accommodate new checks. Reordered a few option descriptions. ------------------------------------------------------------------------ r6079 | tewok | 2011-12-05 07:24:06 -0800 (Mon, 05 Dec 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Added defaults and pod descriptions for phase-processing commands. Alphabetized a few misplaced options in the pod. ------------------------------------------------------------------------ r6078 | tewok | 2011-12-05 07:10:53 -0800 (Mon, 05 Dec 2011) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added ability for admins to specify site-specific commands to be run in addition to or in place of the normal rollover actions. Added some error return values to phase-processing routines. Made a couple minor code optimizations and typo fixes. ------------------------------------------------------------------------ r6077 | hserus | 2011-12-04 09:40:22 -0800 (Sun, 04 Dec 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/ns_print.c M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_policy.c Fix compiler warnings ------------------------------------------------------------------------ r6076 | hserus | 2011-12-04 09:35:40 -0800 (Sun, 04 Dec 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_resquery.c For val_async_check_wait and val_async_select_info use default context when the application does not provide one. ------------------------------------------------------------------------ r6074 | hserus | 2011-11-21 07:36:43 -0800 (Mon, 21 Nov 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c Fix null pointer reference. ------------------------------------------------------------------------ r6073 | tewok | 2011-11-18 13:43:35 -0800 (Fri, 18 Nov 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd If there are keyrec errors while in ZSK phase 2, we'll stay in ZSK2 rather than quietly moving back to normal rollover. ------------------------------------------------------------------------ r6072 | tewok | 2011-11-17 16:59:18 -0800 (Thu, 17 Nov 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconf Deleted deprecated use of defined() on a hash. ------------------------------------------------------------------------ r6071 | tewok | 2011-11-17 16:54:23 -0800 (Thu, 17 Nov 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Deleted deprecated use of defined() on a hash. ------------------------------------------------------------------------ r6070 | tewok | 2011-11-17 16:52:25 -0800 (Thu, 17 Nov 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Tidying up function headers. ------------------------------------------------------------------------ r6069 | hserus | 2011-11-17 07:08:26 -0800 (Thu, 17 Nov 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_resquery.h Look for AAAA glue in addition to A glue. ------------------------------------------------------------------------ r6068 | hserus | 2011-11-17 07:06:46 -0800 (Thu, 17 Nov 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Distinguish between VAL_QUERY_REFRESH_QCACHE and VAL_QUERY_SKIP_CACHE. The former is to reset a query, the latter is to ignore the cache. Insist on EDNS0 every time we query for DNSSEC meta-data. ------------------------------------------------------------------------ r6067 | hserus | 2011-11-17 07:03:57 -0800 (Thu, 17 Nov 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Add yet another classification of query flags -- this time to represent flags that MUST match when they are requested, but MAY match at other times. ------------------------------------------------------------------------ r6066 | hserus | 2011-11-17 07:00:48 -0800 (Thu, 17 Nov 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libval/val_policy.c Add support for binding to and reading IPv6 addresses ------------------------------------------------------------------------ r6065 | hserus | 2011-11-17 06:58:03 -0800 (Thu, 17 Nov 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator-internal.h Change query state type to a bitmap value. Add new definitions to represent waiting for A and AAAA glue. ------------------------------------------------------------------------ r6064 | hserus | 2011-11-17 06:56:05 -0800 (Thu, 17 Nov 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/val_errors.h M /trunk/dnssec-tools/validator/include/validator-compat.h Wrap macro definitions using paranthesis to disambiguate during dereference ------------------------------------------------------------------------ r6063 | tewok | 2011-11-12 09:31:48 -0800 (Sat, 12 Nov 2011) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm When rollrec files are read, consecutive blank lines will be collapsed into a single blank line. When rollrec entries are deleted, newly consecutive blank lines as a result of the deletion will be collapsed into a single blank line. ------------------------------------------------------------------------ r6062 | tewok | 2011-11-11 16:52:03 -0800 (Fri, 11 Nov 2011) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Fixed a bug in rollrec_del() where skip records wouldn't be noticed. This could cause multiple rollrecs to be deleted rather than a single one. Made two minor changes to the pod for rollrec_merge(). ------------------------------------------------------------------------ r6061 | tewok | 2011-11-11 08:06:44 -0800 (Fri, 11 Nov 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added a note to the pod about -szopts using "-i local" as its default. ------------------------------------------------------------------------ r6060 | tewok | 2011-11-10 11:45:32 -0800 (Thu, 10 Nov 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Added "-i local" as the default for zonecheck-opts. ------------------------------------------------------------------------ r6059 | tewok | 2011-11-10 11:32:37 -0800 (Thu, 10 Nov 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Changed to use "-i local" as the default for zonecheck-opts. ------------------------------------------------------------------------ r6058 | tewok | 2011-11-10 11:25:47 -0800 (Thu, 10 Nov 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod Added the "-i local" option to the default config file. ------------------------------------------------------------------------ r6056 | hserus | 2011-11-07 14:26:06 -0800 (Mon, 07 Nov 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Handle responses that contain both nsec and nsec3 proofs ------------------------------------------------------------------------ r6055 | tewok | 2011-10-31 15:00:14 -0700 (Mon, 31 Oct 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/Makefile Changed "+25" to "now+25" in zonesigner calls in makefiles. ------------------------------------------------------------------------ r6054 | tewok | 2011-10-31 14:59:50 -0700 (Mon, 31 Oct 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/Makefile M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/Makefile M /trunk/dnssec-tools/tools/demos/rollerd-subdirs/Makefile Changed "+25" to "now+25" in zonesigner calls in makefiles. ------------------------------------------------------------------------ r6052 | hserus | 2011-10-27 13:40:44 -0700 (Thu, 27 Oct 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator-config.h.in M /trunk/dnssec-tools/validator/libval/val_inline_conf.h.in Allow hardcoded policies to be disabled using --without-inline-confs ------------------------------------------------------------------------ r6051 | hserus | 2011-10-27 10:56:29 -0700 (Thu, 27 Oct 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator-config.h.in LIBVAL_* defines are unnecessary for enabling inline validator configuration. Display the AC_MSG for inline files only if they are available. ------------------------------------------------------------------------ r6050 | hserus | 2011-10-27 10:37:11 -0700 (Thu, 27 Oct 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c while parsing tokens remove trailing spaces by default ------------------------------------------------------------------------ r6049 | hserus | 2011-10-27 09:47:08 -0700 (Thu, 27 Oct 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/libval_check_conf.c Fix typo ------------------------------------------------------------------------ r6048 | hserus | 2011-10-27 09:41:13 -0700 (Thu, 27 Oct 2011) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Allow libval to use hardcoded dnsval.conf, root.hints and resolv.conf configuration information if the configuration file is missing. The hardcoded information can be set at configure time using --with-inline-dnsval-conf=FILE dnsval config file. --with-inline-root-hints=FILE root.hints file. --with-inline-resolv-conf=FILE resolv.conf file. ------------------------------------------------------------------------ r6047 | hserus | 2011-10-27 09:22:38 -0700 (Thu, 27 Oct 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/aclocal.m4 M /trunk/dnssec-tools/validator/ltmain.sh Update after aclocal and glibtoolize -c ------------------------------------------------------------------------ r6046 | hserus | 2011-10-27 09:21:55 -0700 (Thu, 27 Oct 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator-config.h.in M /trunk/dnssec-tools/validator/libval/val_inline_conf.h.in Preserve newlines in file read to buffer ------------------------------------------------------------------------ r6045 | hardaker | 2011-10-26 15:23:30 -0700 (Wed, 26 Oct 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/COPYING copying/license file since this is packaged independently too ------------------------------------------------------------------------ r6044 | hardaker | 2011-10-26 15:23:15 -0700 (Wed, 26 Oct 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/lookup/COPYING copying/license file since this is packaged independently too ------------------------------------------------------------------------ r6043 | hardaker | 2011-10-26 15:23:01 -0700 (Wed, 26 Oct 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-check/COPYING copying/license file since this is packaged independently too ------------------------------------------------------------------------ r6042 | hardaker | 2011-10-26 15:22:39 -0700 (Wed, 26 Oct 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-nodes/COPYING copying/license file since this is packaged independently too ------------------------------------------------------------------------ r6041 | hserus | 2011-10-26 12:12:21 -0700 (Wed, 26 Oct 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator-config.h.in A /trunk/dnssec-tools/validator/libval/val_inline_conf.h.in allow user to specify resolv.conf, dnsval.conf and root.hints files that will be used as inline defaults if the relevant files don't exist. ------------------------------------------------------------------------ r6040 | hserus | 2011-10-26 12:08:29 -0700 (Wed, 26 Oct 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c Return EAI_FAIL when there are no results available ------------------------------------------------------------------------ r6039 | hardaker | 2011-10-25 13:45:48 -0700 (Tue, 25 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone added support for generating an nsec record that fails to validate ------------------------------------------------------------------------ r6038 | hardaker | 2011-10-25 13:45:35 -0700 (Tue, 25 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/lookup/src/lookup.h change the validator-config.h reference to be inside validator/ ------------------------------------------------------------------------ r6037 | hardaker | 2011-10-25 13:45:21 -0700 (Tue, 25 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone Added in a wildcard record for testing wildcards ------------------------------------------------------------------------ r6036 | hardaker | 2011-10-25 13:45:08 -0700 (Tue, 25 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Legend.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.pro windows fixes and added validated DNE to the legend ------------------------------------------------------------------------ r6035 | hardaker | 2011-10-25 13:44:49 -0700 (Tue, 25 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro fix the .pro file so that make installs with a different prefix work ------------------------------------------------------------------------ r6033 | hserus | 2011-10-25 07:56:05 -0700 (Tue, 25 Oct 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/apps/selftests.dist For test cases that would result in a NULL result structure, use an expected value of VAL_UNTRUSTED_ANSWER. Add various wildcard-related test cases ------------------------------------------------------------------------ r6032 | hserus | 2011-10-25 07:53:55 -0700 (Tue, 25 Oct 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Discard any extraneous proof of non-existance. This does the right thing by returning success for a validated responses where there are extra proofs of non-existance. However this will also mean that for certain non-existance error conditions we won't have a result structure encapsulating the (broken) proofs, instead we will get a NULL result structure. ------------------------------------------------------------------------ r6031 | hserus | 2011-10-25 07:48:48 -0700 (Tue, 25 Oct 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c while matching returned validation status values, treat a NULL response as an untrusted answer ------------------------------------------------------------------------ r6030 | hserus | 2011-10-25 07:46:56 -0700 (Tue, 25 Oct 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_x_query.c Initialize memory used for constructing response message. Allocate ans, auth and add buffers only if the result structure is not NULL. ------------------------------------------------------------------------ r6029 | hserus | 2011-10-25 07:44:35 -0700 (Tue, 25 Oct 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Add a log mesage when we're ignoring a duplicate option in the validator configuration file. ------------------------------------------------------------------------ r6028 | rstory | 2011-10-24 09:24:35 -0700 (Mon, 24 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/README fix typo in readme ------------------------------------------------------------------------ r6027 | rstory | 2011-10-24 09:24:25 -0700 (Mon, 24 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c don't allow negative indexing ------------------------------------------------------------------------ r6026 | hserus | 2011-10-24 06:49:52 -0700 (Mon, 24 Oct 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/selftests.dist Fix expected test case results to account for new wildcard at given name ------------------------------------------------------------------------ r6025 | hserus | 2011-10-21 10:43:31 -0700 (Fri, 21 Oct 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/NEWS replace tabs with spaces to keep formatting consistent ------------------------------------------------------------------------ r6024 | hserus | 2011-10-21 08:45:37 -0700 (Fri, 21 Oct 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm M /trunk/dnssec-tools/tools/modules/Net-addrinfo/const-c.inc M /trunk/dnssec-tools/tools/modules/Net-addrinfo/t/basic.t Export some missing types, fix test suite so that all tests pass ------------------------------------------------------------------------ r6022 | tewok | 2011-10-19 09:32:02 -0700 (Wed, 19 Oct 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/zabbix/README M /trunk/dnssec-tools/apps/zabbix/zabbix_agentd.conf A /trunk/dnssec-tools/apps/zabbix/zonestate Added zonestate and its associated info. ------------------------------------------------------------------------ r6021 | tewok | 2011-10-19 09:31:26 -0700 (Wed, 19 Oct 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/zabbix/rollstate Deleted an unnecessary comma from the pod. ------------------------------------------------------------------------ r6020 | tewok | 2011-10-19 09:25:14 -0700 (Wed, 19 Oct 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/zabbix/README A /trunk/dnssec-tools/apps/zabbix/backup-zabbix Added backup-zabbix. ------------------------------------------------------------------------ r6019 | hserus | 2011-10-19 07:26:00 -0700 (Wed, 19 Oct 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Fix checking of nonexisting type proof for nsec3 ------------------------------------------------------------------------ r6018 | hserus | 2011-10-19 07:01:31 -0700 (Wed, 19 Oct 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c take 2 at trying to support handling of wildcard proofs ------------------------------------------------------------------------ r6017 | hserus | 2011-10-19 06:16:08 -0700 (Wed, 19 Oct 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Revert previous change for validation of wildcard proofs, since this breaks validation of other names. ------------------------------------------------------------------------ r6016 | hserus | 2011-10-18 20:02:50 -0700 (Tue, 18 Oct 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Try to support handling of wildcard proofs. This needs to be cleaned up a bit. ------------------------------------------------------------------------ r6015 | tewok | 2011-10-18 12:02:26 -0700 (Tue, 18 Oct 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/zabbix/rollstate Added a pod caveat about this being a proof-of-concept prototype. ------------------------------------------------------------------------ r6014 | tewok | 2011-10-18 11:24:41 -0700 (Tue, 18 Oct 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/zabbix/rollstate Added a header comment. ------------------------------------------------------------------------ r6013 | tewok | 2011-10-18 09:43:47 -0700 (Tue, 18 Oct 2011) | 3 lines Changed paths: A /trunk/dnssec-tools/apps/zabbix A /trunk/dnssec-tools/apps/zabbix/README A /trunk/dnssec-tools/apps/zabbix/item.fields A /trunk/dnssec-tools/apps/zabbix/rollstate A /trunk/dnssec-tools/apps/zabbix/zabbix_agentd.conf Files for Zabbix monitoring -- a monitor plugin, example configuration lines, and example item configuration fields. ------------------------------------------------------------------------ r6012 | hardaker | 2011-10-14 15:58:37 -0700 (Fri, 14 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp ok, lets try .p1 instead ------------------------------------------------------------------------ r6011 | hardaker | 2011-10-14 15:46:55 -0700 (Fri, 14 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp mark the nodes version number as 1.11-2 ------------------------------------------------------------------------ r6010 | hardaker | 2011-10-14 15:45:44 -0700 (Fri, 14 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.cpp fix crashing when the details are presented ------------------------------------------------------------------------ r6008 | hardaker | 2011-10-14 15:45:18 -0700 (Fri, 14 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro set the install path based on a PREFIX variable ------------------------------------------------------------------------ r6007 | hardaker | 2011-10-14 15:44:59 -0700 (Fri, 14 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.cpp Don't inline function that is used by other classes too. ------------------------------------------------------------------------ r6006 | hardaker | 2011-10-14 15:44:42 -0700 (Fri, 14 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Legend.cpp talk about color precedence ------------------------------------------------------------------------ r6005 | hserus | 2011-10-12 10:58:24 -0700 (Wed, 12 Oct 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_get_rrset.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c Use unsigned int instead of u_int variants for functions exported from libval. ------------------------------------------------------------------------ r6003 | hardaker | 2011-10-11 22:21:40 -0700 (Tue, 11 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/ChangeLog Update for verison 1.11 ------------------------------------------------------------------------ r6002 | hardaker | 2011-10-11 22:17:27 -0700 (Tue, 11 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/Makefile.top lib version update ------------------------------------------------------------------------ r6001 | hardaker | 2011-10-11 22:15:41 -0700 (Tue, 11 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/apps/nagios/dtnagobj M /trunk/dnssec-tools/tools/convertar/convertar M /trunk/dnssec-tools/tools/demos/demo-tools/makezones M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap M /trunk/dnssec-tools/tools/maketestzone/maketestzone M /trunk/dnssec-tools/tools/mapper/mapper M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/bubbles M /trunk/dnssec-tools/tools/scripts/cleanarch M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtck M /trunk/dnssec-tools/tools/scripts/dtconf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/dtreqmods M /trunk/dnssec-tools/tools/scripts/dtupdkrf M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/getds M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lights M /trunk/dnssec-tools/tools/scripts/lsdnssec M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rolllog M /trunk/dnssec-tools/tools/scripts/rollrec-editor M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/trustman M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.cpp Update Version Number: 1.11 ------------------------------------------------------------------------ r6000 | hardaker | 2011-10-11 22:15:09 -0700 (Tue, 11 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS NEWS update for 2 of the Qt apps ------------------------------------------------------------------------ r5998 | hardaker | 2011-10-11 13:55:56 -0700 (Tue, 11 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Legend.cpp Added a note at the bottom about nodes containing multiple colors. ------------------------------------------------------------------------ r5997 | hardaker | 2011-10-11 13:55:43 -0700 (Tue, 11 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Legend.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp Display a legend with bubbles and colors ------------------------------------------------------------------------ r5996 | hardaker | 2011-10-11 13:55:30 -0700 (Tue, 11 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Legend.cpp Initial mostly working legend. ------------------------------------------------------------------------ r5995 | hardaker | 2011-10-11 13:55:16 -0700 (Tue, 11 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Legend.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Legend.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp Start of a Legend Dialog box ------------------------------------------------------------------------ r5994 | hardaker | 2011-10-11 11:41:38 -0700 (Tue, 11 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.cpp M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.h Open and watch multiple files ------------------------------------------------------------------------ r5993 | hardaker | 2011-10-11 11:41:25 -0700 (Tue, 11 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.cpp added file/quit to the menus ------------------------------------------------------------------------ r5992 | hardaker | 2011-10-11 11:41:12 -0700 (Tue, 11 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/DnssecSystemTrayPrefs.cpp Don't force files to exist; we'll watch newly arrived ones too. ------------------------------------------------------------------------ r5991 | hardaker | 2011-10-11 11:40:59 -0700 (Tue, 11 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/DnssecSystemTrayPrefs.cpp M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/DnssecSystemTrayPrefs.h Allow for multiple file names to be specified/accepted ------------------------------------------------------------------------ r5990 | rstory | 2011-10-11 10:04:52 -0700 (Tue, 11 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/getaddr.c remove debug code; fix param for previous api tweak ------------------------------------------------------------------------ r5989 | rstory | 2011-10-11 09:53:50 -0700 (Tue, 11 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c val_gai_callback is already a pointer ------------------------------------------------------------------------ r5988 | hardaker | 2011-10-10 17:03:37 -0700 (Mon, 10 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml upgrade the dnssec-check version ------------------------------------------------------------------------ r5987 | hardaker | 2011-10-10 17:03:24 -0700 (Mon, 10 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp submit the version number too to the data server ------------------------------------------------------------------------ r5986 | hardaker | 2011-10-10 14:14:58 -0700 (Mon, 10 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp create compile-time enabling of result submissions; default to off ------------------------------------------------------------------------ r5985 | hardaker | 2011-10-10 14:14:45 -0700 (Mon, 10 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/SubmitDialog.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/SubmitDialog.h M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.h add an optional short-location-message field for submitting data ------------------------------------------------------------------------ r5984 | hardaker | 2011-10-10 14:14:31 -0700 (Mon, 10 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp Change the wording slightly on the No Filters menu item ------------------------------------------------------------------------ r5983 | hardaker | 2011-10-10 12:55:28 -0700 (Mon, 10 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml added the new Qt tools to the version number replacement list ------------------------------------------------------------------------ r5982 | hardaker | 2011-10-10 12:55:18 -0700 (Mon, 10 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp added a DT version number to the about dialog ------------------------------------------------------------------------ r5981 | hardaker | 2011-10-10 12:43:36 -0700 (Mon, 10 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.cpp M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.h Added an about dialog box (with a version number). ------------------------------------------------------------------------ r5980 | hardaker | 2011-10-10 12:43:25 -0700 (Mon, 10 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp Add the DT version to the about dialog. ------------------------------------------------------------------------ r5979 | hardaker | 2011-10-10 12:29:16 -0700 (Mon, 10 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/DNSSECStatusFilter.cpp Added the ability to highlight nodes with an ignored status ------------------------------------------------------------------------ r5978 | hardaker | 2011-10-10 12:26:57 -0700 (Mon, 10 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/images/trianglewarning.png set the transparency ------------------------------------------------------------------------ r5977 | hardaker | 2011-10-10 12:26:47 -0700 (Mon, 10 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.cpp Change the tray icon when a new message is logged and the window is hidden ------------------------------------------------------------------------ r5976 | hardaker | 2011-10-10 12:26:37 -0700 (Mon, 10 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.cpp reset the isNew states on window close ------------------------------------------------------------------------ r5975 | hardaker | 2011-10-10 12:26:27 -0700 (Mon, 10 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.cpp M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.h clear highlights on window close ------------------------------------------------------------------------ r5974 | hardaker | 2011-10-10 12:26:17 -0700 (Mon, 10 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.cpp M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.h Highlight the rows with new data ------------------------------------------------------------------------ r5973 | hardaker | 2011-10-10 12:26:06 -0700 (Mon, 10 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.cpp M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.h Track an "isNew" state for new messages. ------------------------------------------------------------------------ r5972 | hardaker | 2011-10-10 12:25:56 -0700 (Mon, 10 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.cpp M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.h Changed from a dialog to a MainWindow and added a menu bar ------------------------------------------------------------------------ r5971 | hardaker | 2011-10-10 12:25:46 -0700 (Mon, 10 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.cpp M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.h Toggle visibility when taskbar is clicked ------------------------------------------------------------------------ r5970 | hardaker | 2011-10-10 12:25:35 -0700 (Mon, 10 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/DnssecSystemTrayPrefs.cpp M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/DnssecSystemTrayPrefs.h implement a file browser button ------------------------------------------------------------------------ r5969 | hardaker | 2011-10-10 12:25:25 -0700 (Mon, 10 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.cpp M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.h added a count column and collect data per-host for non-repeating log items ------------------------------------------------------------------------ r5968 | hardaker | 2011-10-10 12:25:14 -0700 (Mon, 10 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.cpp Hide the unused vertical header. ------------------------------------------------------------------------ r5967 | hardaker | 2011-10-10 12:24:58 -0700 (Mon, 10 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.cpp M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.h Headers for the summary table ------------------------------------------------------------------------ r5966 | hserus | 2011-10-10 11:55:51 -0700 (Mon, 10 Oct 2011) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Define a macro for matching query flags with cached flags. VAL_QFLAGS_CACHE_MASK is not sufficient, since VAL_QUERY_RECURSE and VAL_QUERY_NO_EDNS0 are special cased. Various fixes to provably insecure tests and zonecut determination logic. ------------------------------------------------------------------------ r5965 | hserus | 2011-10-10 11:49:44 -0700 (Mon, 10 Oct 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Fixes to (re-)enable fallback behavior in case of validation failure. Some more twiddling of the logic to determine if a given proof is relevant to the main query. ------------------------------------------------------------------------ r5964 | hserus | 2011-10-10 11:43:43 -0700 (Mon, 10 Oct 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_support.h Add a new function copy_rrset_rec_list_in_zonecut() that is essentially the same as copy_rrset_rec_list() but also checks if the zonecut is within the query name. ------------------------------------------------------------------------ r5963 | hserus | 2011-10-10 11:41:43 -0700 (Mon, 10 Oct 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Rearrange query flags based on how it will be matched in the query cache. ------------------------------------------------------------------------ r5962 | hardaker | 2011-10-07 07:24:02 -0700 (Fri, 07 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h Have the previous-log file menu open a dialog box to display the settings ------------------------------------------------------------------------ r5961 | hardaker | 2011-10-07 07:23:49 -0700 (Fri, 07 Oct 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogFilePicker.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogFilePicker.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h implement a file selection that allows you to skip till the end ------------------------------------------------------------------------ r5960 | hardaker | 2011-10-07 07:23:32 -0700 (Fri, 07 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp Only record files once, and make it first in the list ------------------------------------------------------------------------ r5959 | hardaker | 2011-10-07 07:23:19 -0700 (Fri, 07 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp Record previously open log files for a quick re-open menu entry ------------------------------------------------------------------------ r5958 | hardaker | 2011-10-07 07:23:06 -0700 (Fri, 07 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp Don't animate when loading a log-file ------------------------------------------------------------------------ r5957 | hardaker | 2011-10-07 07:22:52 -0700 (Fri, 07 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h Added a new option to disable animations ------------------------------------------------------------------------ r5956 | hardaker | 2011-10-07 07:22:38 -0700 (Fri, 07 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.h Turn the regexp matching into a list for cleaner processing ------------------------------------------------------------------------ r5955 | hardaker | 2011-10-07 07:22:25 -0700 (Fri, 07 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h Remove the "additional info" data which is no longer used. ------------------------------------------------------------------------ r5954 | hardaker | 2011-10-07 07:22:08 -0700 (Fri, 07 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.cpp squash a warning ------------------------------------------------------------------------ r5953 | hardaker | 2011-10-07 07:21:52 -0700 (Fri, 07 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp immediately issue a query on query-type-change ------------------------------------------------------------------------ r5952 | hardaker | 2011-10-07 07:21:37 -0700 (Fri, 07 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.cpp Use a table for displaying node data ------------------------------------------------------------------------ r5951 | hserus | 2011-10-06 17:35:13 -0700 (Thu, 06 Oct 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Ensure that we are asking for authentication chain details in our DS query, since we determine zonecut information from the RRSIGs ------------------------------------------------------------------------ r5950 | hserus | 2011-10-06 17:04:17 -0700 (Thu, 06 Oct 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Try to do a better job of identifying the proofs that are germane to the main query ------------------------------------------------------------------------ r5949 | hserus | 2011-10-06 17:01:13 -0700 (Thu, 06 Oct 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Print flag as hex, not decimal ------------------------------------------------------------------------ r5948 | hserus | 2011-10-06 09:47:41 -0700 (Thu, 06 Oct 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c While searching for zonecut information in the cache only look at answered queries. ------------------------------------------------------------------------ r5947 | hserus | 2011-10-06 07:40:14 -0700 (Thu, 06 Oct 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Add missing return type ------------------------------------------------------------------------ r5946 | hserus | 2011-10-06 07:38:34 -0700 (Thu, 06 Oct 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Generate different log messages for different error conditions. ------------------------------------------------------------------------ r5945 | hserus | 2011-10-06 07:20:19 -0700 (Thu, 06 Oct 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c While looking for cached zonecut information search for matching names of any type except DS. ------------------------------------------------------------------------ r5944 | hardaker | 2011-10-05 22:54:46 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp added a 'zoom layout' button ------------------------------------------------------------------------ r5943 | hardaker | 2011-10-05 22:54:32 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp add a type menu for selecting types to lookup ------------------------------------------------------------------------ r5942 | hardaker | 2011-10-05 22:54:18 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/TypeFilter.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/TypeFilter.h A /trunk/dnssec-tools/validator/apps/dnssec-nodes/TypeMenu.cpp (from /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/TypeFilter.cpp:5941) A /trunk/dnssec-tools/validator/apps/dnssec-nodes/TypeMenu.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro outsource the filter type list into a separate class ------------------------------------------------------------------------ r5941 | hardaker | 2011-10-05 22:54:02 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h reapply filters to nodes that get new data ------------------------------------------------------------------------ r5940 | hardaker | 2011-10-05 22:53:46 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/NameFilter.cpp set the focus on the dialog box ------------------------------------------------------------------------ r5939 | hardaker | 2011-10-05 22:53:33 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.cpp warning squash ------------------------------------------------------------------------ r5938 | hardaker | 2011-10-05 22:53:20 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp clean up debugging output and reenable loading a file from the CLI ------------------------------------------------------------------------ r5937 | hardaker | 2011-10-05 22:53:07 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/TypeFilter.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/TypeFilter.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro M /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h Create a new filter for filtering by type ------------------------------------------------------------------------ r5936 | hardaker | 2011-10-05 22:52:49 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/NameFilter.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp Lowercase all DNS names ------------------------------------------------------------------------ r5935 | hardaker | 2011-10-05 22:52:35 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp Don't show the data in the summary line that is now in the table ------------------------------------------------------------------------ r5934 | hardaker | 2011-10-05 22:52:19 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp zero out the center node pointer after deleting it. ------------------------------------------------------------------------ r5933 | hardaker | 2011-10-05 22:51:55 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp Change menu text to be more accurate: Filter by data status ------------------------------------------------------------------------ r5932 | hserus | 2011-10-05 20:50:26 -0700 (Wed, 05 Oct 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Add checks for NS existence when doing a type non-existance for a DS record. While checking for a provably insecure name ensure that the zonecut obtained DS non-existence proof links back to the previous zonecut in the chain. ------------------------------------------------------------------------ r5931 | hardaker | 2011-10-05 11:30:25 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp set message box titles and buttons ------------------------------------------------------------------------ r5930 | hardaker | 2011-10-05 11:30:09 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/SetZValue.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/SetZValue.h z values can be negative ------------------------------------------------------------------------ r5929 | hardaker | 2011-10-05 11:29:52 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp More -> Details ------------------------------------------------------------------------ r5928 | hardaker | 2011-10-05 11:29:34 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp Added a help menu with help and an about option. ------------------------------------------------------------------------ r5927 | hardaker | 2011-10-05 11:29:15 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/DNSSECStatusFilter.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/DNSSECStatusFilter.h Added a status type menu ------------------------------------------------------------------------ r5926 | hardaker | 2011-10-05 11:29:00 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp make the dnssec status type highlight as well ------------------------------------------------------------------------ r5925 | hardaker | 2011-10-05 11:28:45 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp We actually want to lower nodes that don't match a name ------------------------------------------------------------------------ r5924 | hardaker | 2011-10-05 11:28:27 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/Filter.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/NameFilter.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/NameFilter.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/NotFilter.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/NotFilter.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp Use signals/slots to connect filter changes to updating the screen ------------------------------------------------------------------------ r5923 | hardaker | 2011-10-05 11:27:53 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/Filter.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/NameFilter.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/NameFilter.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/NotFilter.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp Allow filters to create their own widgets ------------------------------------------------------------------------ r5922 | rstory | 2011-10-05 08:28:31 -0700 (Wed, 05 Oct 2011) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c validate tweaks - log async_status ptr on completion - break out of spin loop when in_flight gets out of whack (only seems to happen when both async and multithreaded) ------------------------------------------------------------------------ r5921 | rstory | 2011-10-05 08:13:56 -0700 (Wed, 05 Oct 2011) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c tweak val_async_check_wait - document return values - remove unused var - return number of async_status objects seen ------------------------------------------------------------------------ r5920 | rstory | 2011-10-05 08:13:48 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c allow async callbacks to claim results/answers/name memory ------------------------------------------------------------------------ r5919 | rstory | 2011-10-05 08:13:40 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c don't lock before calling function that also locks ------------------------------------------------------------------------ r5918 | rstory | 2011-10-05 08:13:31 -0700 (Wed, 05 Oct 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/apps/getaddr.c tweak apps/getaddr help - add long option --async - include async options in help output ------------------------------------------------------------------------ r5917 | rstory | 2011-10-05 08:13:22 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/getaddr.c M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c rename vgai_* val_gai_* ------------------------------------------------------------------------ r5916 | hardaker | 2011-10-05 07:01:19 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp create and color a new IGNORED state ------------------------------------------------------------------------ r5915 | hardaker | 2011-10-05 07:01:03 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.h function rename to pluralize it ------------------------------------------------------------------------ r5914 | hardaker | 2011-10-05 07:00:50 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp Deleted some older filter setup code. ------------------------------------------------------------------------ r5913 | hardaker | 2011-10-05 07:00:37 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.h Make the filter slots use the new filter/effect system. ------------------------------------------------------------------------ r5912 | hardaker | 2011-10-05 07:00:24 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/MultiEffect.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/MultiEffect.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro Allow for a list of multiple effects ------------------------------------------------------------------------ r5911 | hardaker | 2011-10-05 07:00:07 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.h Added an API for adding a filter/effect pair. ------------------------------------------------------------------------ r5910 | hardaker | 2011-10-05 06:59:53 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/DNSSECStatusFilter.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/Filter.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/NameFilter.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro applies created filters to nodes ------------------------------------------------------------------------ r5909 | hardaker | 2011-10-05 06:59:34 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/NotFilter.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/NotFilter.h A do-the-opposite filter ------------------------------------------------------------------------ r5908 | hardaker | 2011-10-05 06:59:19 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/DNSSECStatusFilter.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/DNSSECStatusFilter.h A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/Filter.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/Filter.h A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/NameFilter.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Filters/NameFilter.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro Starting filter classes ------------------------------------------------------------------------ r5907 | hardaker | 2011-10-05 06:59:03 -0700 (Wed, 05 Oct 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/Effect.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/Effect.h A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/SetAlphaEffect.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/SetAlphaEffect.h A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/SetZValue.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/Effects/SetZValue.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro new effect class and initial implementations ------------------------------------------------------------------------ r5906 | hserus | 2011-10-04 06:40:25 -0700 (Tue, 04 Oct 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Log different messages when we reach a trust anchor and when we have an assertion state that is already known. ------------------------------------------------------------------------ r5905 | hserus | 2011-10-03 12:40:57 -0700 (Mon, 03 Oct 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Add log messages to show that PI checks are waiting on zonecut detection. ------------------------------------------------------------------------ r5904 | hardaker | 2011-10-03 11:07:12 -0700 (Mon, 03 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.h Improved regexps to match more lines with potentially useful DNSSEC data ------------------------------------------------------------------------ r5903 | hardaker | 2011-10-03 11:06:59 -0700 (Mon, 03 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp prioritize trusted over validated in case both bits occur ------------------------------------------------------------------------ r5902 | hardaker | 2011-10-03 11:06:46 -0700 (Mon, 03 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp delete debugging output ------------------------------------------------------------------------ r5901 | hardaker | 2011-10-03 11:06:29 -0700 (Mon, 03 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.cpp use the (new) complete proof types ------------------------------------------------------------------------ r5900 | hardaker | 2011-10-03 11:06:06 -0700 (Mon, 03 Oct 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c use a full name/class/type statement for proof status results ------------------------------------------------------------------------ r5899 | tewok | 2011-09-30 13:12:19 -0700 (Fri, 30 Sep 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/NEWS Added date to the release-number line. ------------------------------------------------------------------------ r5898 | tewok | 2011-09-30 13:11:18 -0700 (Fri, 30 Sep 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/NEWS Added an entry about the changes to rollerd. ------------------------------------------------------------------------ r5897 | tewok | 2011-09-30 12:17:06 -0700 (Fri, 30 Sep 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Alphabetically sorted the option groups in the pod. ------------------------------------------------------------------------ r5896 | rstory | 2011-09-30 09:48:58 -0700 (Fri, 30 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS add libval news ------------------------------------------------------------------------ r5895 | hardaker | 2011-09-30 09:27:46 -0700 (Fri, 30 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS 1.11 news section ------------------------------------------------------------------------ r5894 | hardaker | 2011-09-30 09:27:34 -0700 (Fri, 30 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.cpp color code the DS record as provably DNE ------------------------------------------------------------------------ r5893 | hardaker | 2011-09-30 09:27:20 -0700 (Fri, 30 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.cpp white space readability changes ------------------------------------------------------------------------ r5892 | hardaker | 2011-09-30 09:27:06 -0700 (Fri, 30 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h Put coloring code into a common function ------------------------------------------------------------------------ r5891 | hardaker | 2011-09-30 09:26:51 -0700 (Fri, 30 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp Draw pie-based graphs for nodes that contain multiple records ------------------------------------------------------------------------ r5890 | hardaker | 2011-09-30 09:26:37 -0700 (Fri, 30 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp use a constant gradient across the whole scene ------------------------------------------------------------------------ r5889 | hardaker | 2011-09-30 09:26:22 -0700 (Fri, 30 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.h never add a new UNKNOWN flag when we already have known results ------------------------------------------------------------------------ r5888 | hardaker | 2011-09-30 09:26:08 -0700 (Fri, 30 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.h Added a bunch of bind-related regexps ------------------------------------------------------------------------ r5887 | hardaker | 2011-09-30 09:25:53 -0700 (Fri, 30 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp fix the time-based node checks for nodes less than the max count ------------------------------------------------------------------------ r5886 | hardaker | 2011-09-30 09:25:37 -0700 (Fri, 30 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.h beginning of bind log file matches ------------------------------------------------------------------------ r5885 | hserus | 2011-09-30 08:30:17 -0700 (Fri, 30 Sep 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c Don't acquire the policy lock exclusively if you're trying to destroy it. ------------------------------------------------------------------------ r5884 | hserus | 2011-09-30 08:28:36 -0700 (Fri, 30 Sep 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c M /trunk/dnssec-tools/validator/libval/val_assertion.c Initialize pointers to NULL to get rid of warnings. ------------------------------------------------------------------------ r5883 | hserus | 2011-09-30 07:16:46 -0700 (Fri, 30 Sep 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/libsres_test.c Replace %zd with %lu for windows portability ------------------------------------------------------------------------ r5882 | rstory | 2011-09-30 07:05:50 -0700 (Fri, 30 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_debug.c use res_log, not val_log_ap ------------------------------------------------------------------------ r5881 | hserus | 2011-09-30 06:44:32 -0700 (Fri, 30 Sep 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/getrrset.c Include validator/resolver.h ------------------------------------------------------------------------ r5880 | hserus | 2011-09-30 06:37:29 -0700 (Fri, 30 Sep 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_support.h Define prototype for log_response() ------------------------------------------------------------------------ r5879 | hserus | 2011-09-30 06:16:29 -0700 (Fri, 30 Sep 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c pthread_self() does not return a pointer on Windows, so don't attempt to print this value on WIN32. ------------------------------------------------------------------------ r5878 | hserus | 2011-09-30 06:13:50 -0700 (Fri, 30 Sep 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h Define each timer manipulation function within its own #ifndef block since some of them may be defined already. ------------------------------------------------------------------------ r5877 | rstory | 2011-09-29 22:34:48 -0700 (Thu, 29 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h define the rest of the timer manipulation functions ------------------------------------------------------------------------ r5876 | rstory | 2011-09-29 22:31:06 -0700 (Thu, 29 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c if MSG_DONTWAIT is defined, use it for recvfrom ------------------------------------------------------------------------ r5875 | hserus | 2011-09-29 20:44:29 -0700 (Thu, 29 Sep 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator-compat.h Define windows-equivalent for EWOULDBLOCK ------------------------------------------------------------------------ r5874 | rstory | 2011-09-29 19:44:09 -0700 (Thu, 29 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/COPYING M /trunk/dnssec-tools/validator/include/validator/resolver.h define timersub macro if not defined ------------------------------------------------------------------------ r5873 | rstory | 2011-09-29 12:30:31 -0700 (Thu, 29 Sep 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c revert non-blocking socket change - seemed to cause issues with synchronous requests. may be related to EDNS0 size. ------------------------------------------------------------------------ r5872 | tewok | 2011-09-29 07:19:29 -0700 (Thu, 29 Sep 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added -dsdir option. ------------------------------------------------------------------------ r5871 | rstory | 2011-09-28 23:28:20 -0700 (Wed, 28 Sep 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libval/val_resquery.c fix libval deadlock/segfaults - set sockets non-blocking, handle read w/no data.. - fix missing lock when using context as_list ------------------------------------------------------------------------ r5870 | rstory | 2011-09-28 13:01:23 -0700 (Wed, 28 Sep 2011) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/apps/validator_selftest.c validate: mulithread cleanup - don't use shared global testsuite struct for all threads - make number of threads a command line option instead of hardcoded ------------------------------------------------------------------------ r5869 | rstory | 2011-09-28 13:01:07 -0700 (Wed, 28 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c validate: calculate/display time for each individual query ------------------------------------------------------------------------ r5868 | tewok | 2011-09-28 10:34:13 -0700 (Wed, 28 Sep 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/keyrec.pod Added the dsdir field to zone keyrecs. ------------------------------------------------------------------------ r5867 | tewok | 2011-09-28 10:33:03 -0700 (Wed, 28 Sep 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Added the -dsdir option. ------------------------------------------------------------------------ r5866 | rstory | 2011-09-28 09:26:47 -0700 (Wed, 28 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator-internal.h M /trunk/dnssec-tools/validator/libval/val_context.c add reference count to context ------------------------------------------------------------------------ r5865 | tewok | 2011-09-27 16:17:35 -0700 (Tue, 27 Sep 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Writability checks for the config file's parent directory will not be performed if -outfile option is given. ------------------------------------------------------------------------ r5864 | tewok | 2011-09-27 15:59:29 -0700 (Tue, 27 Sep 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm.in Modified makelocalstatedir() to use err() for displaying an error message. ------------------------------------------------------------------------ r5863 | tewok | 2011-09-27 13:57:46 -0700 (Tue, 27 Sep 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Makefile.PL Added code to get the autoconfig'd files rebuilt when they change. ------------------------------------------------------------------------ r5861 | tewok | 2011-09-27 10:14:35 -0700 (Tue, 27 Sep 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Added code for genkrf and rollctl config entries. ------------------------------------------------------------------------ r5860 | tewok | 2011-09-27 09:07:05 -0700 (Tue, 27 Sep 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Added checks for the new genkrf and rollctl config fields. ------------------------------------------------------------------------ r5859 | tewok | 2011-09-27 09:00:31 -0700 (Tue, 27 Sep 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod Added entries for genkrf and rollctl. ------------------------------------------------------------------------ r5858 | tewok | 2011-09-27 08:42:40 -0700 (Tue, 27 Sep 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Modified keyrec_keypaths() to recognize "all", "ksk", and "zsk" as keyrec types. They do what you'd expect. ------------------------------------------------------------------------ r5857 | rstory | 2011-09-26 19:27:15 -0700 (Mon, 26 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c fix typo in log msg and possible select which won't ever return ------------------------------------------------------------------------ r5856 | rstory | 2011-09-26 19:27:05 -0700 (Mon, 26 Sep 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/apps/validator_driver.h M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libsres/ns_print.c M /trunk/dnssec-tools/validator/libsres/res_debug.c M /trunk/dnssec-tools/validator/libsres/res_mkquery.c M /trunk/dnssec-tools/validator/libsres/res_mkquery.h M /trunk/dnssec-tools/validator/libval/val_assertion.h M /trunk/dnssec-tools/validator/libval/val_get_rrset.c M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c consistently use class_h and type_h as var names - i.e. not qclass, q_class, class_q, etc ------------------------------------------------------------------------ r5855 | rstory | 2011-09-26 19:26:52 -0700 (Mon, 26 Sep 2011) | 9 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/include/validator-internal.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c revamp callback api - sync up async define names - make val_async_status struct private - callbacks now have event param (completed/cancelled) - rename val_cb_results -> val_async_event_cb - new val_cb_params and val_cb_event - add callback, cb_data to submit param list - use class_h/type_h (not qtype/qclass) - keep name, not name_n, in async status ------------------------------------------------------------------------ r5854 | tewok | 2011-09-26 10:27:23 -0700 (Mon, 26 Sep 2011) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/nameslash.t Test for allowing slashes in the SOA username. ------------------------------------------------------------------------ r5853 | tewok | 2011-09-26 10:15:27 -0700 (Mon, 26 Sep 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm Added the ability to have a backslash in the SOA username. This is to provide for the RFC-allowed "Joe\.Jones.example.com" construct to allow dots in usernames. ------------------------------------------------------------------------ r5852 | rstory | 2011-09-25 19:25:30 -0700 (Sun, 25 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_debug.c restore original format for libsres_pquery ------------------------------------------------------------------------ r5851 | rstory | 2011-09-25 16:36:56 -0700 (Sun, 25 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_debug.c M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libsres/res_support.c fix print_response; add new log_response for internal use ------------------------------------------------------------------------ r5850 | hardaker | 2011-09-25 08:13:43 -0700 (Sun, 25 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.h Added a second PI status check ------------------------------------------------------------------------ r5849 | hardaker | 2011-09-25 08:13:30 -0700 (Sun, 25 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Use consistent output formatting for name/class/type output ------------------------------------------------------------------------ r5848 | hardaker | 2011-09-25 08:13:18 -0700 (Sun, 25 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.cpp Make more items PI based on multiple types ------------------------------------------------------------------------ r5847 | hardaker | 2011-09-25 08:13:06 -0700 (Sun, 25 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.cpp Make the data-type tab the primary tab ------------------------------------------------------------------------ r5846 | hardaker | 2011-09-25 08:12:53 -0700 (Sun, 25 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.cpp Modified regexps to catch more query types properly. ------------------------------------------------------------------------ r5845 | hardaker | 2011-09-25 08:12:41 -0700 (Sun, 25 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp Lower the filtered-out alpha value ------------------------------------------------------------------------ r5844 | hardaker | 2011-09-25 08:12:29 -0700 (Sun, 25 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.cpp Mark a string as translatable ------------------------------------------------------------------------ r5843 | hardaker | 2011-09-25 08:12:17 -0700 (Sun, 25 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h Show Datatype validation results better. ------------------------------------------------------------------------ r5842 | hardaker | 2011-09-25 08:12:03 -0700 (Sun, 25 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.cpp Put the log details into a tab. ------------------------------------------------------------------------ r5841 | hardaker | 2011-09-25 08:11:50 -0700 (Sun, 25 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h Hide information and button properly on node-expiring ------------------------------------------------------------------------ r5840 | hardaker | 2011-09-25 08:11:37 -0700 (Sun, 25 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h Create a more button for showing more info from the info-bar ------------------------------------------------------------------------ r5839 | hardaker | 2011-09-25 08:11:22 -0700 (Sun, 25 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp mention in the label that it's a regexp ------------------------------------------------------------------------ r5838 | hardaker | 2011-09-25 08:11:10 -0700 (Sun, 25 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp Use radio buttons for the filter options ------------------------------------------------------------------------ r5837 | hardaker | 2011-09-25 08:10:57 -0700 (Sun, 25 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h Create a filter for searching for nodes by name ------------------------------------------------------------------------ r5836 | hardaker | 2011-09-25 08:10:43 -0700 (Sun, 25 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h Make nodes have an alpha channel. ------------------------------------------------------------------------ r5835 | hardaker | 2011-09-25 08:10:29 -0700 (Sun, 25 Sep 2011) | 2 lines Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.cpp (from /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogViewer.cpp:5834) A /trunk/dnssec-tools/validator/apps/dnssec-nodes/DetailsViewer.h (from /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogViewer.h:5834) D /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogViewer.cpp D /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogViewer.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro M /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h Renamed the LogViewer to DetailsViewer; laid groundwork for filters - included adding a basic filter for filtering bad nodes to the top ------------------------------------------------------------------------ r5834 | hardaker | 2011-09-25 08:10:10 -0700 (Sun, 25 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp Set the tool tip to be the node name ------------------------------------------------------------------------ r5833 | hardaker | 2011-09-23 10:56:32 -0700 (Fri, 23 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.c fix a cast warning ------------------------------------------------------------------------ r5832 | hardaker | 2011-09-23 10:56:19 -0700 (Fri, 23 Sep 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h Nodes don't store the color; just the data and then color themselves based on the data ------------------------------------------------------------------------ r5831 | hardaker | 2011-09-23 10:56:05 -0700 (Fri, 23 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h Store data by record type alone, and keep a bit-array of data types ------------------------------------------------------------------------ r5830 | hardaker | 2011-09-23 10:55:51 -0700 (Fri, 23 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp delete an older UNKNOWN for a given DNS type if we later determined its status ------------------------------------------------------------------------ r5829 | hardaker | 2011-09-23 10:55:38 -0700 (Fri, 23 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h Store only DNSData for a given combination ------------------------------------------------------------------------ r5828 | hardaker | 2011-09-23 10:55:24 -0700 (Fri, 23 Sep 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogViewer.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogViewer.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp Added a better dialog box for showing log message details. ------------------------------------------------------------------------ r5827 | hardaker | 2011-09-23 10:55:10 -0700 (Fri, 23 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp Make the node lookup routine use the proper addNode routine. ------------------------------------------------------------------------ r5826 | hardaker | 2011-09-23 10:54:57 -0700 (Fri, 23 Sep 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-nodes/DelayedDelete.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h Delete old node data after removing it from the graph. ------------------------------------------------------------------------ r5825 | hardaker | 2011-09-23 10:54:40 -0700 (Fri, 23 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp Use signals and slots to indicate data has changed and to relayout. ------------------------------------------------------------------------ r5824 | hardaker | 2011-09-23 10:54:26 -0700 (Fri, 23 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp Enable the removing of nodes based on time ------------------------------------------------------------------------ r5823 | hardaker | 2011-09-23 10:54:13 -0700 (Fri, 23 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodesPreferences.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodesPreferences.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp added enable/disable buttons for expiring options; added a expire-by-time option ------------------------------------------------------------------------ r5822 | hardaker | 2011-09-23 10:53:59 -0700 (Fri, 23 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h Added the ability to store an access time. ------------------------------------------------------------------------ r5821 | hardaker | 2011-09-23 10:53:45 -0700 (Fri, 23 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h add limiting by number capability ------------------------------------------------------------------------ r5820 | hardaker | 2011-09-23 10:53:30 -0700 (Fri, 23 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodesPreferences.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h set the preferences into the nodelist ------------------------------------------------------------------------ r5819 | hardaker | 2011-09-23 10:53:17 -0700 (Fri, 23 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodesPreferences.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp create and show the preference Cialog ------------------------------------------------------------------------ r5818 | hardaker | 2011-09-23 10:53:02 -0700 (Fri, 23 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodesPreferences.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodesPreferences.h adding the startings of a settings window ------------------------------------------------------------------------ r5817 | hardaker | 2011-09-23 10:52:49 -0700 (Fri, 23 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h added edge/node counts ------------------------------------------------------------------------ r5816 | hardaker | 2011-09-23 10:52:36 -0700 (Fri, 23 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp added a hasChildren API ------------------------------------------------------------------------ r5815 | hardaker | 2011-09-23 10:52:23 -0700 (Fri, 23 Sep 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodesPreferences.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodesPreferences.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h use a QSet for faster lookups ------------------------------------------------------------------------ r5814 | hardaker | 2011-09-23 10:52:08 -0700 (Fri, 23 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.h A /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/NodeList.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp move the node handling and memorization into a sub-class ------------------------------------------------------------------------ r5813 | hardaker | 2011-09-23 10:51:52 -0700 (Fri, 23 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp better menu text ------------------------------------------------------------------------ r5812 | hardaker | 2011-09-23 10:51:39 -0700 (Fri, 23 Sep 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/LogWatcher.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp Moved the log-watching management into a separate class ------------------------------------------------------------------------ r5811 | hardaker | 2011-09-23 10:51:24 -0700 (Fri, 23 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h store and read multiple log files ------------------------------------------------------------------------ r5810 | hardaker | 2011-09-23 10:51:11 -0700 (Fri, 23 Sep 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-nodes/deployment.pri M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro Added the deployment.pri include file and the hartmattan files ------------------------------------------------------------------------ r5809 | hardaker | 2011-09-23 10:50:57 -0700 (Fri, 23 Sep 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-nodes/qtc_packaging/debian_harmattan A /trunk/dnssec-tools/validator/apps/dnssec-nodes/qtc_packaging/debian_harmattan/README A /trunk/dnssec-tools/validator/apps/dnssec-nodes/qtc_packaging/debian_harmattan/changelog A /trunk/dnssec-tools/validator/apps/dnssec-nodes/qtc_packaging/debian_harmattan/compat A /trunk/dnssec-tools/validator/apps/dnssec-nodes/qtc_packaging/debian_harmattan/control A /trunk/dnssec-tools/validator/apps/dnssec-nodes/qtc_packaging/debian_harmattan/copyright A /trunk/dnssec-tools/validator/apps/dnssec-nodes/qtc_packaging/debian_harmattan/rules harmattan packaging ------------------------------------------------------------------------ r5808 | hardaker | 2011-09-23 10:50:41 -0700 (Fri, 23 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.h Only white-space ------------------------------------------------------------------------ r5807 | tewok | 2011-09-23 09:25:56 -0700 (Fri, 23 Sep 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fix the SOA regexp so that usernames in the SOA can contain dots. (Needed to allow backslashes.) ------------------------------------------------------------------------ r5806 | tewok | 2011-09-23 08:15:46 -0700 (Fri, 23 Sep 2011) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/modules/timetrans.pm Removed weeks from timetrans() results. This change is a result of a complaint on the users list that "4 weeks, 2 days" isn't intuitive. The original, weeks-inclusive functionality is still available with timetrans_weeks(). That routine is considered unsupported and will likely go away eventually. ------------------------------------------------------------------------ r5805 | rstory | 2011-09-21 09:13:13 -0700 (Wed, 21 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-nspr.patch M /trunk/dnssec-tools/apps/mozilla/mozilla-central.patch fix logic test in DNSSECFUNRETURN ------------------------------------------------------------------------ r5804 | rstory | 2011-09-20 08:24:49 -0700 (Tue, 20 Sep 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/apps/getaddr.c add option to use libval async code for getaddr - primarily as a way to exercise that code. ------------------------------------------------------------------------ r5803 | rstory | 2011-09-20 07:07:55 -0700 (Tue, 20 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/getaddr.c add -v, -i, -r support for alternate config paths ------------------------------------------------------------------------ r5802 | rstory | 2011-09-20 07:07:46 -0700 (Tue, 20 Sep 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c add asynchronous getaddrinfo: val_getaddrinfo_submit - see apps/getaddr.c for how to use it ------------------------------------------------------------------------ r5801 | rstory | 2011-09-20 07:07:37 -0700 (Tue, 20 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c mov duplicate code for callbacks to _call_callback ------------------------------------------------------------------------ r5800 | rstory | 2011-09-20 07:07:29 -0700 (Tue, 20 Sep 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c tweak log message in val_log_authentication_chain - add text version of class/type in addtion to numeric value ------------------------------------------------------------------------ r5799 | rstory | 2011-09-20 07:07:20 -0700 (Tue, 20 Sep 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_get_rrset.c create val_get_answer_from_result from val_get_rrset - needed in async val_getaddr ------------------------------------------------------------------------ r5798 | rstory | 2011-09-20 07:07:12 -0700 (Tue, 20 Sep 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c make get_addrinfo_from_dns more independent - hints may be NULL (use defaults for this case) ------------------------------------------------------------------------ r5797 | rstory | 2011-09-20 07:07:01 -0700 (Tue, 20 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c add function documentation for val_async_cancel/val_async_cancel_all ------------------------------------------------------------------------ r5796 | rstory | 2011-09-20 07:06:52 -0700 (Tue, 20 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c fix loop in val_async_cancel_all ------------------------------------------------------------------------ r5795 | rstory | 2011-09-20 07:06:44 -0700 (Tue, 20 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_assertion.c add val_async_check_wait, val_async_select; deprecate val_async_check ------------------------------------------------------------------------ r5794 | rstory | 2011-09-20 07:06:33 -0700 (Tue, 20 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libval/val_resquery.c tweak log levels for some debug messages ------------------------------------------------------------------------ r5793 | rstory | 2011-09-16 08:13:43 -0700 (Fri, 16 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libval/val_assertion.c don't ignore timeout usecs; user timer macros when possible ------------------------------------------------------------------------ r5792 | rstory | 2011-09-16 08:13:31 -0700 (Fri, 16 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_assertion.c add query flags to skip cache and/or resolver ------------------------------------------------------------------------ r5791 | hardaker | 2011-09-15 09:08:54 -0700 (Thu, 15 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd remove the -criticalsign option ------------------------------------------------------------------------ r5790 | rstory | 2011-09-14 09:27:25 -0700 (Wed, 14 Sep 2011) | 9 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_context.c async: rework locking; stubs for cancellation - use CTX_ACACHE_LOCK mutext to protect as_list manipulations - add val_async_cancel, val_async_cancel_all - move as_list manipulation into val_assertion.c so we can ensure proper locks are held; rename funcs and make static (e.g. for internal use only) - rename val_async_status_free and make it static (e.g. for internal use only) ------------------------------------------------------------------------ r5789 | rstory | 2011-09-14 09:27:14 -0700 (Wed, 14 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c unlock context pol lock between async calls ------------------------------------------------------------------------ r5787 | hardaker | 2011-09-09 10:13:58 -0700 (Fri, 09 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/scripts/zonesigner change the default time for a zone resigning from 30 days to 32 to allow cron signing ------------------------------------------------------------------------ r5786 | hardaker | 2011-09-09 10:13:44 -0700 (Fri, 09 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h more memorization of data objects ------------------------------------------------------------------------ r5785 | hardaker | 2011-09-09 10:13:29 -0700 (Fri, 09 Sep 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/DNSData.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h Added ability for nodes to store DNS data for later display ------------------------------------------------------------------------ r5784 | rstory | 2011-09-07 07:28:56 -0700 (Wed, 07 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c fix compilation with _getaddrinfo_local changes ------------------------------------------------------------------------ r5783 | rstory | 2011-09-07 07:28:42 -0700 (Wed, 07 Sep 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c move local checks in val_getaddrinfo into static _getaddrinfo_local (so it can be shared with async versin of val_getaddrinfo) ------------------------------------------------------------------------ r5782 | rstory | 2011-09-07 07:28:34 -0700 (Wed, 07 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c only get lock if we really need it ------------------------------------------------------------------------ r5781 | rstory | 2011-09-07 07:28:23 -0700 (Wed, 07 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_get_rrset.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_x_query.c document that val_create_or_refresh_context does CTX_LOCK_POL_SH ------------------------------------------------------------------------ r5780 | rstory | 2011-09-07 07:28:13 -0700 (Wed, 07 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-nspr.patch fix infinite recursion ------------------------------------------------------------------------ r5779 | rstory | 2011-09-07 07:28:04 -0700 (Wed, 07 Sep 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/logwatch/scripts/services/dnssec add no DS rec, insecure response, must be secure; ignore bad cache hit ------------------------------------------------------------------------ r5778 | hserus | 2011-09-06 11:45:51 -0700 (Tue, 06 Sep 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c Perform proper break-out from error condition while refreshing the context. ------------------------------------------------------------------------ r5777 | hserus | 2011-09-06 11:39:33 -0700 (Tue, 06 Sep 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval-implementation-notes Add description of some of the locks used in libval ------------------------------------------------------------------------ r5775 | hserus | 2011-08-26 07:35:04 -0700 (Fri, 26 Aug 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/mozilla-central.patch Ensure that we call PR_GetAddrInfoByNameExtended when we retry on failure ------------------------------------------------------------------------ r5774 | hserus | 2011-08-24 11:09:36 -0700 (Wed, 24 Aug 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-firefox.patch M /trunk/dnssec-tools/apps/mozilla/mozilla-central.patch Fixed typo ------------------------------------------------------------------------ r5773 | hserus | 2011-08-22 07:25:39 -0700 (Mon, 22 Aug 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/install.rdf Enable extension to work with nightly releases ------------------------------------------------------------------------ r5772 | hserus | 2011-08-22 07:24:36 -0700 (Mon, 22 Aug 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/comm-central.patch M /trunk/dnssec-tools/apps/mozilla/mozilla-central.patch Update patch for current mozilla source tree ------------------------------------------------------------------------ r5770 | tewok | 2011-08-09 14:05:54 -0700 (Tue, 09 Aug 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added support for rollctl's -splitrrf command. ------------------------------------------------------------------------ r5769 | tewok | 2011-08-08 15:09:35 -0700 (Mon, 08 Aug 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Renamed ROLLCMD_SPLITRRFS to ROLLCMD_SPLITRRF. Fixed a typo in the pod. ------------------------------------------------------------------------ r5768 | tewok | 2011-08-08 13:26:49 -0700 (Mon, 08 Aug 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/demo-tools/makezones Did a *proper* check for an argument that might potentially be zero. ------------------------------------------------------------------------ r5767 | tewok | 2011-08-05 13:22:43 -0700 (Fri, 05 Aug 2011) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Added rollrec_split() to move some rollrecs to another file. Spacing fixes. A few comment fixes. Pod fixes. ------------------------------------------------------------------------ r5766 | tewok | 2011-08-02 08:19:34 -0700 (Tue, 02 Aug 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added constants for ROLLCMD_MERGERRFS and ROLLCMD_SPLITRRFS. ------------------------------------------------------------------------ r5765 | tewok | 2011-08-02 08:13:54 -0700 (Tue, 02 Aug 2011) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Added -mergerrfs option to tell rollerd to merge the named rollrec file with its active rollrec file. Sorted option checking in doopts(). Deleted extraneous spaces. ------------------------------------------------------------------------ r5764 | tewok | 2011-08-02 08:02:51 -0700 (Tue, 02 Aug 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Provide ability to merge a rollrec file with the active rollrec file. ------------------------------------------------------------------------ r5763 | tewok | 2011-08-02 08:01:57 -0700 (Tue, 02 Aug 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Support merging of rollrec files. ------------------------------------------------------------------------ r5762 | tewok | 2011-08-01 16:12:24 -0700 (Mon, 01 Aug 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added pod describing the experimental ROLLCMD_QUEUELIST and ROLLCMD_QUEUESTATUS commands. ------------------------------------------------------------------------ r5761 | hserus | 2011-08-01 12:10:54 -0700 (Mon, 01 Aug 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c Don't unlock policy lock that shouldn't be locked ------------------------------------------------------------------------ r5760 | tewok | 2011-08-01 11:50:02 -0700 (Mon, 01 Aug 2011) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Moved the parsing guts of rollrec_read() into the new rollrec_readfiles(). Added rollrec_merge() to allow a set of rollrec files to be merged into one. Fixed a code comment. ------------------------------------------------------------------------ r5759 | hserus | 2011-08-01 10:58:58 -0700 (Mon, 01 Aug 2011) | 10 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator-internal.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_assertion.h M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_context.h M /trunk/dnssec-tools/validator/libval/val_get_rrset.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_x_query.c Refresh the context structure any time we call an entry-point function that contains a context argument. Use val_create_or_refresh_context() to access the correct context for all of the entry-point functions that contain a context argument. Acquire shared locks for resolver and validator policies within the val_create_or_refresh_context() function and release these locks when we're done with lookup processing. This ensures that we don't modify the default context in one thread while another thread is still using it. ------------------------------------------------------------------------ r5758 | tewok | 2011-08-01 08:26:07 -0700 (Mon, 01 Aug 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Added some commands for the experimental queue-soon method of handling the rollover queue. Fixed some spacing issues. ------------------------------------------------------------------------ r5757 | tewok | 2011-08-01 08:25:02 -0700 (Mon, 01 Aug 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added some commands for the experimental queue-soon method of handling the rollover queue. ------------------------------------------------------------------------ r5756 | tewok | 2011-07-31 15:55:31 -0700 (Sun, 31 Jul 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm In rollrec_read(), in "cmd" processing, only add the "rollrec_" prefix if it isn't there already. Add a period in a comment. ------------------------------------------------------------------------ r5755 | hserus | 2011-07-29 08:04:12 -0700 (Fri, 29 Jul 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c Use max-in-flight setting when sending queries from multiple threads. ------------------------------------------------------------------------ r5753 | tewok | 2011-07-22 12:41:17 -0700 (Fri, 22 Jul 2011) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Modified to run "zonesigner -genkeys" on zones for which it can't find keyrec files. This allows the zone files (as specified in the rollrec file) to be auto-generated by rollerd, and the user is no long required to manually run zonesigner for their zones before adding them to rollerd. ------------------------------------------------------------------------ r5752 | tewok | 2011-07-22 09:25:13 -0700 (Fri, 22 Jul 2011) | 13 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd This version contains the *experimental* "soon queue" processing. This processing method only looks at the subset of "soonest" rollover events, rather than the whole queue. rollerd wakes up to handle each event when the event comes due, rather than waking up every N seconds and checking its queue. The original "full list" method of processing is turned on by default. The rollerd code must be edited in order to use the "soon queue" processing. This is experimental code, use at your own risk! That said, testing and comments on the "soon queue" method are welcome. ------------------------------------------------------------------------ r5751 | tewok | 2011-07-22 08:55:40 -0700 (Fri, 22 Jul 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added some missing parens to a conditional. ------------------------------------------------------------------------ r5750 | tewok | 2011-07-22 08:45:01 -0700 (Fri, 22 Jul 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Fix a typo in the comments. ------------------------------------------------------------------------ r5749 | tewok | 2011-07-20 16:09:32 -0700 (Wed, 20 Jul 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Added default values for mailer-server and mailer-type. ------------------------------------------------------------------------ r5748 | tewok | 2011-07-20 16:09:14 -0700 (Wed, 20 Jul 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Added support for mailer-server and mailer-type. ------------------------------------------------------------------------ r5747 | tewok | 2011-07-20 11:43:06 -0700 (Wed, 20 Jul 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod Added entries for mailer-server and mailer-type. ------------------------------------------------------------------------ r5746 | hardaker | 2011-07-16 06:35:09 -0700 (Sat, 16 Jul 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp don't show green for an NSEC record. ------------------------------------------------------------------------ r5745 | hardaker | 2011-07-16 06:34:55 -0700 (Sat, 16 Jul 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp Made the DNE expression capture non-existent types too. ------------------------------------------------------------------------ r5744 | hserus | 2011-07-14 20:34:24 -0700 (Thu, 14 Jul 2011) | 7 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Never block while trying to hold the query lock. This will almost certainly result in a deadlock if one thread is trying to do fallback processing while a new thread issues a query for the same name. Instead we will have to be content with an imperfect fallback strategy, where we wont actually be able to reset the query if another thread holds a shared lock on the query, while we figure out a better strategy for query locking. ------------------------------------------------------------------------ r5743 | hserus | 2011-07-14 15:56:06 -0700 (Thu, 14 Jul 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Handle soa proofs in wildcard nonexistence cases in a slightly better manner ------------------------------------------------------------------------ r5742 | hserus | 2011-07-14 11:39:45 -0700 (Thu, 14 Jul 2011) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Ensure that no other thread has access to the query structure when a thread calls clear_query_chain_structure(). Allow clear_query_chain_structure() to silently return when it cannot acquire an exclusive lock over the query, for cases where resetting the query structure is not essential. ------------------------------------------------------------------------ r5741 | hserus | 2011-07-14 11:28:51 -0700 (Thu, 14 Jul 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.h Add prototype for free_qfq_chain() ------------------------------------------------------------------------ r5740 | hserus | 2011-07-14 10:59:57 -0700 (Thu, 14 Jul 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c For policy changes request a query referesh using the VAL_QUERY_REFRESH_QCACHE flag instead of directly resetting the query. ------------------------------------------------------------------------ r5739 | hserus | 2011-07-14 10:26:20 -0700 (Thu, 14 Jul 2011) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.h Add macros for locking operations on the query lock (this used to be present, but it was erroneously removed). Locks are needed since it is possible that two threads might be using the same query simultaneously. It should not be possible to overwrite the query from one thread while another is still using it. ------------------------------------------------------------------------ r5737 | hserus | 2011-07-07 20:17:04 -0700 (Thu, 07 Jul 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator-compat.h Move exten "C" to top of file. ------------------------------------------------------------------------ r5736 | hserus | 2011-07-07 20:16:13 -0700 (Thu, 07 Jul 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h Changed u_int16_t to unsigned short for portability. ------------------------------------------------------------------------ r5735 | hserus | 2011-07-07 16:38:40 -0700 (Thu, 07 Jul 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Ensure that we check trustworthyness of all proof components before using them to prove non-existence. ------------------------------------------------------------------------ r5734 | hserus | 2011-07-06 20:40:39 -0700 (Wed, 06 Jul 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/testing/README Add a note that the rec-fallback option must be 'no' for the trustman tests to succeed. ------------------------------------------------------------------------ r5733 | hserus | 2011-07-06 06:43:19 -0700 (Wed, 06 Jul 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/dnsval.conf.3 M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod Document the rec-fallback global policy. ------------------------------------------------------------------------ r5732 | hserus | 2011-07-06 06:35:44 -0700 (Wed, 06 Jul 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/testing/t/010zonesigner.t M /trunk/dnssec-tools/testing/t/030trustman.t M /trunk/dnssec-tools/testing/t/040rollerd.t M /trunk/dnssec-tools/testing/t/050trustman-rollerd.t Update test scripts to match current set of log messages. ------------------------------------------------------------------------ r5731 | hserus | 2011-07-06 06:30:54 -0700 (Wed, 06 Jul 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Comment debug line that was interfering with test suite processing in the testing directory. ------------------------------------------------------------------------ r5730 | hserus | 2011-07-06 06:27:39 -0700 (Wed, 06 Jul 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator-compat.h M /trunk/dnssec-tools/validator/libsres/ns_parse.c M /trunk/dnssec-tools/validator/libsres/res_debug.c M /trunk/dnssec-tools/validator/libval/val_policy.c Support OpenBSD build ------------------------------------------------------------------------ r5729 | hserus | 2011-07-06 06:24:12 -0700 (Wed, 06 Jul 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/include/validator-internal.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_policy.c Define new global policy flag 'rec-fallback yes/no' to allow disabling recursion from root as a fallback mechanism. ------------------------------------------------------------------------ r5725 | hardaker | 2011-07-03 17:20:48 -0700 (Sun, 03 Jul 2011) | 1 line Changed paths: M /trunk/dnssec-tools/ChangeLog Update for verison 1.10 ------------------------------------------------------------------------ r5724 | hardaker | 2011-07-03 17:17:59 -0700 (Sun, 03 Jul 2011) | 1 line Changed paths: M /trunk/dnssec-tools/apps/nagios/dtnagobj Update Version Number: 1.10 ------------------------------------------------------------------------ r5723 | hardaker | 2011-07-03 17:17:45 -0700 (Sun, 03 Jul 2011) | 1 line Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml fixed nagios re-versioning ------------------------------------------------------------------------ r5722 | hardaker | 2011-07-03 17:14:43 -0700 (Sun, 03 Jul 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/convertar M /trunk/dnssec-tools/tools/demos/demo-tools/makezones M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap M /trunk/dnssec-tools/tools/maketestzone/maketestzone M /trunk/dnssec-tools/tools/mapper/mapper M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/bubbles M /trunk/dnssec-tools/tools/scripts/cleanarch M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtck M /trunk/dnssec-tools/tools/scripts/dtconf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/dtreqmods M /trunk/dnssec-tools/tools/scripts/dtupdkrf M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/getds M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lights M /trunk/dnssec-tools/tools/scripts/lsdnssec M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rolllog M /trunk/dnssec-tools/tools/scripts/rollrec-editor M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/trustman M /trunk/dnssec-tools/tools/scripts/zonesigner Update Version Number: 1.10 ------------------------------------------------------------------------ r5721 | hardaker | 2011-07-03 16:37:19 -0700 (Sun, 03 Jul 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/README M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-xs.inc updated based on the latest header files; more work is needed for newer fns ------------------------------------------------------------------------ r5720 | hardaker | 2011-07-03 13:14:17 -0700 (Sun, 03 Jul 2011) | 1 line Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml comment about what type of script it is and where to get the tool ------------------------------------------------------------------------ r5719 | hardaker | 2011-07-02 07:58:31 -0700 (Sat, 02 Jul 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/convertar M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/maketestzone/maketestzone M /trunk/dnssec-tools/tools/mapper/mapper M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/defaults.pm M /trunk/dnssec-tools/tools/scripts/bubbles M /trunk/dnssec-tools/tools/scripts/getds M /trunk/dnssec-tools/tools/scripts/lights M /trunk/dnssec-tools/tools/scripts/lsdnssec M /trunk/dnssec-tools/tools/scripts/rollerd bumped the tool version numbers, or in the case of my tools: removed them ------------------------------------------------------------------------ r5718 | hardaker | 2011-07-02 07:55:40 -0700 (Sat, 02 Jul 2011) | 1 line Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml added new files to change ------------------------------------------------------------------------ r5717 | hardaker | 2011-07-02 06:59:58 -0700 (Sat, 02 Jul 2011) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS more NEWS snippets based on quickly scanning the diffs ------------------------------------------------------------------------ r5716 | hardaker | 2011-07-02 06:59:46 -0700 (Sat, 02 Jul 2011) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS more NEWS snippets based on quickly scanning the diffs ------------------------------------------------------------------------ r5715 | hardaker | 2011-07-02 06:59:34 -0700 (Sat, 02 Jul 2011) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS mention new apps ------------------------------------------------------------------------ r5714 | hserus | 2011-07-01 19:56:40 -0700 (Fri, 01 Jul 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/NEWS Update newsworthy items for libval ------------------------------------------------------------------------ r5713 | hardaker | 2011-07-01 14:20:37 -0700 (Fri, 01 Jul 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h add additional info in the status line when someone clicks on a node ------------------------------------------------------------------------ r5712 | hardaker | 2011-07-01 14:20:26 -0700 (Fri, 01 Jul 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h color code nodes that don't exist blue (proven) and cyan (trusted). ------------------------------------------------------------------------ r5711 | hardaker | 2011-07-01 14:20:16 -0700 (Fri, 01 Jul 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp match the new pinsecure statement that lists all portions ------------------------------------------------------------------------ r5710 | hardaker | 2011-07-01 14:20:04 -0700 (Fri, 01 Jul 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c insert the name into the pinsecure statement ------------------------------------------------------------------------ r5709 | hardaker | 2011-07-01 14:19:52 -0700 (Fri, 01 Jul 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/Makefile.top updated libtool library version number 9 -> 10 ------------------------------------------------------------------------ r5708 | hserus | 2011-07-01 13:44:57 -0700 (Fri, 01 Jul 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_debug.c Minor change to allow compilation on FreeBSD. ------------------------------------------------------------------------ r5707 | hserus | 2011-07-01 11:43:22 -0700 (Fri, 01 Jul 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator-internal.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_context.c Set VAL_QUERY_AC_DETAIL by default if the user has specified any log target. Also added log statement to display result of non-existance proof checking. ------------------------------------------------------------------------ r5706 | hserus | 2011-07-01 07:01:33 -0700 (Fri, 01 Jul 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c Test for invalid socket before calling FD_ISSET ------------------------------------------------------------------------ r5705 | hardaker | 2011-06-30 12:52:08 -0700 (Thu, 30 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.h make the Test button reset all the lights to UNKNOWN for better visual retests ------------------------------------------------------------------------ r5704 | hardaker | 2011-06-30 12:51:55 -0700 (Thu, 30 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.h M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp add a test for checking TCP support ------------------------------------------------------------------------ r5703 | hardaker | 2011-06-30 12:51:41 -0700 (Thu, 30 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/Makefile.in install the validator-compat.h file ------------------------------------------------------------------------ r5702 | hardaker | 2011-06-30 12:51:29 -0700 (Thu, 30 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro remove single-host specific include path ------------------------------------------------------------------------ r5701 | hardaker | 2011-06-30 12:51:14 -0700 (Thu, 30 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/doc/dnsval.conf.3 M /trunk/dnssec-tools/validator/doc/getaddr.1 M /trunk/dnssec-tools/validator/doc/libval_check_conf.1 M /trunk/dnssec-tools/validator/doc/val_gethostbyname.3 pod updates from a recent build ------------------------------------------------------------------------ r5700 | hardaker | 2011-06-30 12:51:00 -0700 (Thu, 30 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_log.c Change 'template' parameter to 'template_log' to avoid C++ keyword conflicts ------------------------------------------------------------------------ r5699 | hardaker | 2011-06-30 12:50:44 -0700 (Thu, 30 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/Makefile.in re-instate the broken installation of validator-config.h ------------------------------------------------------------------------ r5698 | hserus | 2011-06-30 12:34:04 -0700 (Thu, 30 Jun 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c Add windows compatibility. ------------------------------------------------------------------------ r5697 | hserus | 2011-06-30 10:46:38 -0700 (Thu, 30 Jun 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c Minor change to flag a todo item. ------------------------------------------------------------------------ r5696 | rstory | 2011-06-29 19:49:06 -0700 (Wed, 29 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml fix minor type in api draft ------------------------------------------------------------------------ r5695 | rstory | 2011-06-29 19:48:59 -0700 (Wed, 29 Jun 2011) | 7 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml rearrange and make slight updates to api draft - add my email - move asynchronous requests to start of async section, adding xrefs to items defined later - reword val_async_select_info blurb - minor tweaks fixes to async example in appendix ------------------------------------------------------------------------ r5694 | rstory | 2011-06-29 19:48:51 -0700 (Wed, 29 Jun 2011) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml update dnssec api draft - extracting answer/results from async status - reuse data structures from val_resolve_and_check - add VAL_AS_SAVE_STATUS flag for async submit function ------------------------------------------------------------------------ r5693 | rstory | 2011-06-29 19:48:42 -0700 (Wed, 29 Jun 2011) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml updates to async api docs - add user context to callback api and async submit functions - change list style for flags - tweak example code to shorten long lines ------------------------------------------------------------------------ r5692 | hserus | 2011-06-29 13:25:50 -0700 (Wed, 29 Jun 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Miscellaneous edits. ------------------------------------------------------------------------ r5689 | hserus | 2011-06-28 14:27:53 -0700 (Tue, 28 Jun 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/dnsval.conf.3 M /trunk/dnssec-tools/validator/doc/getaddr.1 M /trunk/dnssec-tools/validator/doc/gethost.1 M /trunk/dnssec-tools/validator/doc/getname.1 M /trunk/dnssec-tools/validator/doc/getquery.1 M /trunk/dnssec-tools/validator/doc/getrrset.1 M /trunk/dnssec-tools/validator/doc/libsres.3 M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval_check_conf.1 M /trunk/dnssec-tools/validator/doc/libval_shim.3 M /trunk/dnssec-tools/validator/doc/val_get_rrset.3 M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.3 M /trunk/dnssec-tools/validator/doc/val_gethostbyname.3 M /trunk/dnssec-tools/validator/doc/val_res_query.3 M /trunk/dnssec-tools/validator/doc/validate.1 man pages from pod ------------------------------------------------------------------------ r5688 | hserus | 2011-06-28 14:27:34 -0700 (Tue, 28 Jun 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Updated to document new query flags. Updated argument types. Miscellaneous edits. ------------------------------------------------------------------------ r5687 | hserus | 2011-06-28 14:24:12 -0700 (Tue, 28 Jun 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libsres-implementation-notes update copyright date ------------------------------------------------------------------------ r5686 | hserus | 2011-06-28 14:23:47 -0700 (Tue, 28 Jun 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod M /trunk/dnssec-tools/validator/doc/getaddr.pod M /trunk/dnssec-tools/validator/doc/gethost.pod M /trunk/dnssec-tools/validator/doc/getname.pod M /trunk/dnssec-tools/validator/doc/getquery.pod M /trunk/dnssec-tools/validator/doc/getrrset.pod M /trunk/dnssec-tools/validator/doc/libsres.pod M /trunk/dnssec-tools/validator/doc/libval.pod M /trunk/dnssec-tools/validator/doc/libval_check_conf.pod M /trunk/dnssec-tools/validator/doc/libval_shim.pod M /trunk/dnssec-tools/validator/doc/val_get_rrset.pod M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.pod M /trunk/dnssec-tools/validator/doc/val_gethostbyname.pod M /trunk/dnssec-tools/validator/doc/val_res_query.pod M /trunk/dnssec-tools/validator/doc/validate.pod Update documentation, copyright date ------------------------------------------------------------------------ r5685 | hserus | 2011-06-28 14:18:43 -0700 (Tue, 28 Jun 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval-implementation-notes Add some more libval implementation notes ------------------------------------------------------------------------ r5684 | hserus | 2011-06-28 14:15:15 -0700 (Tue, 28 Jun 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/gethost.c Remove the -n (don't validate) option to keep consistent with other cli tools ------------------------------------------------------------------------ r5683 | hserus | 2011-06-28 14:12:47 -0700 (Tue, 28 Jun 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/libval_check_conf.c Print ascii value of error condition if error status is returned. ------------------------------------------------------------------------ r5682 | hserus | 2011-06-28 14:11:16 -0700 (Tue, 28 Jun 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/val_errors.h Add minor comment. ------------------------------------------------------------------------ r5681 | rstory | 2011-06-26 13:15:54 -0700 (Sun, 26 Jun 2011) | 9 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_debug.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libsres/res_tsig.c M /trunk/dnssec-tools/validator/libval/val_assertion.c more debugging output; tweak debug levels - update res_debug functions to use res_log instead of fprintf - lets us dump response details - add debug for details of header errors - add debug details on nsfallback, use INFO instead of WARNING - change packet drop log msg to DEBUG instead of WARNING - log error on tsig failure - change "switch_to_root already recursing" log msg to debug ------------------------------------------------------------------------ r5680 | rstory | 2011-06-26 13:15:38 -0700 (Sun, 26 Jun 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libsres/res_support.c M /trunk/dnssec-tools/validator/libval/val_log.c fix (optional) res_log passthrough val_log - add val_log_ap, which accepts va_list, for res_log to call ------------------------------------------------------------------------ r5679 | rstory | 2011-06-26 13:15:19 -0700 (Sun, 26 Jun 2011) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml update for async api also: - bump to dratf-...-09 - update to 200902 ipr ------------------------------------------------------------------------ r5678 | rstory | 2011-06-26 13:15:05 -0700 (Sun, 26 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c set burst rate to in-flight max ------------------------------------------------------------------------ r5677 | hserus | 2011-06-24 11:41:27 -0700 (Fri, 24 Jun 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs Don't use val_getnameinfo_has_status for val_gethostbyname ------------------------------------------------------------------------ r5676 | hserus | 2011-06-24 11:21:45 -0700 (Fri, 24 Jun 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc Update Validator.pm for current set of dnsval exports ------------------------------------------------------------------------ r5675 | hserus | 2011-06-24 10:52:37 -0700 (Fri, 24 Jun 2011) | 7 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/include/validator-compat.h Move definitions that libval is not actually authoritative for to validator-compat.h. Applications that need these definitions must now also include validator-compat.h before including validator.h. validator-compat.h is not installed when 'make install' is invoked however. This will be fixed at some later point. Until then, validator/include must be added to the search path. ------------------------------------------------------------------------ r5674 | hserus | 2011-06-24 10:13:26 -0700 (Fri, 24 Jun 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/ns_parse.c Fix comment. ------------------------------------------------------------------------ r5673 | hserus | 2011-06-24 09:44:25 -0700 (Fri, 24 Jun 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Conditionally include sys/select.h. Minor rearrangement for various declarations. ------------------------------------------------------------------------ r5672 | hserus | 2011-06-24 09:41:56 -0700 (Fri, 24 Jun 2011) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h Minor rearrangement for various declarations. Also define NS_MAXCDNAME (even though it appears in validator-compat.h) since we refer to it in struct name_server. It does not make much sense to convert struct nameserver's member ns_name_n to a pointer since it is typically used with ns_name_pton and needs to be allocated to NS_MAXCDNAME in any case. ------------------------------------------------------------------------ r5671 | hserus | 2011-06-23 12:47:29 -0700 (Thu, 23 Jun 2011) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_assertion.c Change VAL_QUERY_NO_AC_DETAIL to VAL_QUERY_AC_DETAIL since it is more likely that apps (unless they are debug apps) will not want any of the authentication chain details by default. Set the flag only in places that we really need the authentication chain details. ------------------------------------------------------------------------ r5670 | hserus | 2011-06-23 11:29:15 -0700 (Thu, 23 Jun 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/Makefile.in Allow builds of only the libraries ------------------------------------------------------------------------ r5668 | hserus | 2011-06-22 12:03:57 -0700 (Wed, 22 Jun 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Use the correct flags value when creating an error result structure. ------------------------------------------------------------------------ r5667 | rstory | 2011-06-22 11:48:15 -0700 (Wed, 22 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/libsres_test.c update function call for new prototype (add missing args) ------------------------------------------------------------------------ r5666 | hserus | 2011-06-22 11:37:48 -0700 (Wed, 22 Jun 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c fix typo in val_log params. ------------------------------------------------------------------------ r5665 | hserus | 2011-06-22 11:10:33 -0700 (Wed, 22 Jun 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Don't look for an answer in the cache when we're specifically requesting recursion through VAL_QUERY_RECURSE. VAL_QUERY_REFRESH_QCACHE is ephemeral in that it gets reset as soon as the query gets issued. ------------------------------------------------------------------------ r5664 | rstory | 2011-06-22 09:49:37 -0700 (Wed, 22 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_resquery.c always print text class/type in log messages ------------------------------------------------------------------------ r5663 | rstory | 2011-06-22 09:49:24 -0700 (Wed, 22 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c tweak log msg level, remove unused var ------------------------------------------------------------------------ r5662 | hserus | 2011-06-22 09:26:46 -0700 (Wed, 22 Jun 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Try recursing from root if any of the final answers were bogus and we have not yet tried falling back to recursion. ------------------------------------------------------------------------ r5661 | rstory | 2011-06-22 08:00:14 -0700 (Wed, 22 Jun 2011) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libsres/res_support.c M /trunk/dnssec-tools/validator/libsres/res_support.h eliminate circular dependency caused by val_log in libsres - new res_log used instead - defaults to loggin WARNING and higher to stderr - defaults can be changed in libsres/res_support.c - define USE_LIBVAL_LOGGING to have res_log pass through to val_log ------------------------------------------------------------------------ r5660 | hserus | 2011-06-21 22:17:29 -0700 (Tue, 21 Jun 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_get_rrset.c M /trunk/dnssec-tools/validator/libval/val_x_query.c Return assertion chain details by default ------------------------------------------------------------------------ r5659 | rstory | 2011-06-15 10:35:48 -0700 (Wed, 15 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c add/tweak debug; minor code cleanup ------------------------------------------------------------------------ r5658 | rstory | 2011-06-15 10:35:40 -0700 (Wed, 15 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c make res_io_read_* static ------------------------------------------------------------------------ r5657 | rstory | 2011-06-10 07:57:03 -0700 (Fri, 10 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec_checks.c M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_assertion.c fix compiler warnings/errors ------------------------------------------------------------------------ r5656 | rstory | 2011-06-09 10:42:30 -0700 (Thu, 09 Jun 2011) | 7 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.h M /trunk/dnssec-tools/validator/libsres/res_query.c add support for sending queries via tcp - new get_tcp() - uses new query_queue() and res_switch_all_to_tcp_tid() - also new: - res_switch_all_to_tcp() - res_async_query_create() ------------------------------------------------------------------------ r5655 | rstory | 2011-06-09 10:42:23 -0700 (Thu, 09 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c fix unused var warnings ------------------------------------------------------------------------ r5654 | rstory | 2011-06-09 10:42:16 -0700 (Thu, 09 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c remove extraneous \n from log msg ------------------------------------------------------------------------ r5653 | rstory | 2011-06-09 10:42:08 -0700 (Thu, 09 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c fix scope of error return ------------------------------------------------------------------------ r5652 | rstory | 2011-06-09 10:42:01 -0700 (Thu, 09 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c clear socket in fdset when handled ------------------------------------------------------------------------ r5651 | rstory | 2011-06-09 10:41:54 -0700 (Thu, 09 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c init closest event to 0 ------------------------------------------------------------------------ r5650 | rstory | 2011-06-09 10:41:46 -0700 (Thu, 09 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c val_async_check: don't continue on error (need done check) ------------------------------------------------------------------------ r5649 | rstory | 2011-06-09 10:41:39 -0700 (Thu, 09 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c get_ac_trust: don't add qfq if query already in list ------------------------------------------------------------------------ r5648 | rstory | 2011-06-09 10:41:32 -0700 (Thu, 09 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c when checking ea_isset, check every ea; add res_asyn_tid_isset ------------------------------------------------------------------------ r5647 | rstory | 2011-06-09 10:41:22 -0700 (Thu, 09 Jun 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.h M /trunk/dnssec-tools/validator/libsres/res_query.c add new function res_io_queue, used in query_send - use to add multiple transactions without calling io_check after each. ------------------------------------------------------------------------ r5646 | rstory | 2011-06-09 10:41:15 -0700 (Thu, 09 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.h minor documentation tweaks (no code change) ------------------------------------------------------------------------ r5645 | rstory | 2011-06-09 10:41:04 -0700 (Thu, 09 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_resquery.c add/tweak lots of debug in libval ------------------------------------------------------------------------ r5644 | rstory | 2011-06-09 10:40:56 -0700 (Thu, 09 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.h res_io_count_ready: use in more places; add max_fd param ------------------------------------------------------------------------ r5643 | rstory | 2011-06-09 10:40:47 -0700 (Thu, 09 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libval/val_resquery.c add/tweak debug; minor code cleanup ------------------------------------------------------------------------ r5642 | rstory | 2011-06-09 10:40:39 -0700 (Thu, 09 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c don't cancel if not necessary ------------------------------------------------------------------------ r5641 | rstory | 2011-06-09 10:40:32 -0700 (Thu, 09 Jun 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/apps/libsres_test.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.h M /trunk/dnssec-tools/validator/libval/val_assertion.c add more specific io check/select functions add res_io_select_info_tid, res_io_check_ea_list, res_io_check_one_tid ------------------------------------------------------------------------ r5640 | rstory | 2011-06-09 10:40:20 -0700 (Thu, 09 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c libsres if(res_io_debug) printf -> val_log(NULL,LOG_DEBUG ------------------------------------------------------------------------ r5639 | rstory | 2011-06-09 10:40:12 -0700 (Thu, 09 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c printf -> val_log ------------------------------------------------------------------------ r5638 | rstory | 2011-06-09 10:40:05 -0700 (Thu, 09 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_support.c log 0 byte malloc and return NULL ------------------------------------------------------------------------ r5637 | rstory | 2011-06-09 10:39:57 -0700 (Thu, 09 Jun 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_query.c add/tweak debugging add res_io_count_ready, res_async_ea_count_active ------------------------------------------------------------------------ r5636 | rstory | 2011-06-09 10:39:49 -0700 (Thu, 09 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c libsres if(res_io_debug) printf -> val_log(NULL,LOG_DEBUG ------------------------------------------------------------------------ r5635 | rstory | 2011-06-09 10:39:41 -0700 (Thu, 09 Jun 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c printf -> val_log ------------------------------------------------------------------------ r5634 | rstory | 2011-06-09 10:39:33 -0700 (Thu, 09 Jun 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c only cancel current source on udp error new res_io_cancel_source defined and used on bad read from a source ------------------------------------------------------------------------ r5633 | hserus | 2011-06-09 05:53:23 -0700 (Thu, 09 Jun 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Back off from faulty assumption on when EDNS0 fallback should be avoided. ------------------------------------------------------------------------ r5632 | hserus | 2011-06-08 14:58:18 -0700 (Wed, 08 Jun 2011) | 8 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator-internal.h M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_cache.h M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_support.h Define new SR_CRED types to distinguish between answers that were found using the iterative lookup process versus those that were returned from a recursive name server. While looking up referral information from cache prefer NS records with better rrs_cred values, and ensure that the A/AAAA credibility is trustworthy enough. Treat referral information from cache that was obtained through the iterative lookup process at par with referral information that was found through the normal recursive lookup process. ------------------------------------------------------------------------ r5631 | hserus | 2011-06-08 14:46:33 -0700 (Wed, 08 Jun 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Set the VAL_QUERY_RECURSION bit if the recursive name server gives us a referral to root ------------------------------------------------------------------------ r5630 | hserus | 2011-06-08 11:49:19 -0700 (Wed, 08 Jun 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c Check for exact match of test case result string. ------------------------------------------------------------------------ r5629 | hserus | 2011-06-08 11:45:39 -0700 (Wed, 08 Jun 2011) | 7 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_resquery.h Add initial support for falling back to recursion from root when the local recursive name server returns a bogus response which may be indicative of lack of DNSSEC support. This feature also provides some protection against a trivial DoS through a spoofed response -- previously libval would have just returned the error condition. Now, it should re-attempt the lookup by doing recursion from root. ------------------------------------------------------------------------ r5628 | hserus | 2011-06-08 11:35:28 -0700 (Wed, 08 Jun 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator-internal.h M /trunk/dnssec-tools/validator/libval/val_support.c Store respondent name server flags in our rrset cache. ------------------------------------------------------------------------ r5627 | hserus | 2011-06-08 11:33:27 -0700 (Wed, 08 Jun 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Redefine values of various query bitmasks and flags in an attempt to bring more structure to these definitions. ------------------------------------------------------------------------ r5626 | hserus | 2011-06-08 11:31:28 -0700 (Wed, 08 Jun 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Keep ttl_x default value consistent. ------------------------------------------------------------------------ r5625 | hserus | 2011-05-31 08:10:04 -0700 (Tue, 31 May 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/comm-central.patch M /trunk/dnssec-tools/apps/mozilla/mozilla-central.patch Updated patch against mozilla nightly build tree ------------------------------------------------------------------------ r5624 | hserus | 2011-05-31 08:00:13 -0700 (Tue, 31 May 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lights Fix typo. ------------------------------------------------------------------------ r5623 | hserus | 2011-05-31 07:58:33 -0700 (Tue, 31 May 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/content/enabled.png M /trunk/dnssec-tools/apps/mozilla/dnssec-status/content/firefoxOverlay.xul M /trunk/dnssec-tools/apps/mozilla/dnssec-status/install.rdf Update for recent firefox editions ------------------------------------------------------------------------ r5622 | hserus | 2011-05-31 07:55:15 -0700 (Tue, 31 May 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Fix a loop condition, where edns0 fallback logic to no-edns0 state would trigger a requery with edns0 for certain NOANSWER responses. ------------------------------------------------------------------------ r5621 | hserus | 2011-05-31 07:46:04 -0700 (Tue, 31 May 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c val_getaddrinfo now takes size_t instead of socklen_t as the third parameter, since socklen_t may not be defined on all platforms ------------------------------------------------------------------------ r5620 | hserus | 2011-05-31 07:44:14 -0700 (Tue, 31 May 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Add pointer allocation/deallocation logic to reflect modification of val_as_domain_name_n type from array to pointer. ------------------------------------------------------------------------ r5619 | hserus | 2011-05-31 07:42:19 -0700 (Tue, 31 May 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/Makefile.in Fix clean target so that the sres test executable is also deleted ------------------------------------------------------------------------ r5618 | hserus | 2011-05-31 07:41:28 -0700 (Tue, 31 May 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.c Look at the correct closest zone name while searching the cache for the best nameserver to use while iteratively resolving a name. ------------------------------------------------------------------------ r5617 | hserus | 2011-05-31 07:39:11 -0700 (Tue, 31 May 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c Moved expected_arrival definition to resolver.h ------------------------------------------------------------------------ r5616 | hserus | 2011-05-31 07:37:51 -0700 (Tue, 31 May 2011) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/include/validator-compat.h In exported headers, forward declare types that the application MUST define. Modify other definitions so that they are stand-alone in that an application can safely include this file without needing to resolve any other dependencies. ------------------------------------------------------------------------ r5614 | hardaker | 2011-05-24 15:22:14 -0700 (Tue, 24 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp save the last watched file and offer it as the default ------------------------------------------------------------------------ r5613 | hardaker | 2011-05-24 15:22:01 -0700 (Tue, 24 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro M /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp watch for a file that hasn't yet been opened ------------------------------------------------------------------------ r5612 | hardaker | 2011-05-24 15:21:48 -0700 (Tue, 24 May 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-nodes/qtc_packaging A /trunk/dnssec-tools/validator/apps/dnssec-nodes/qtc_packaging/debian_fremantle A /trunk/dnssec-tools/validator/apps/dnssec-nodes/qtc_packaging/debian_fremantle/README A /trunk/dnssec-tools/validator/apps/dnssec-nodes/qtc_packaging/debian_fremantle/changelog A /trunk/dnssec-tools/validator/apps/dnssec-nodes/qtc_packaging/debian_fremantle/compat A /trunk/dnssec-tools/validator/apps/dnssec-nodes/qtc_packaging/debian_fremantle/control A /trunk/dnssec-tools/validator/apps/dnssec-nodes/qtc_packaging/debian_fremantle/copyright A /trunk/dnssec-tools/validator/apps/dnssec-nodes/qtc_packaging/debian_fremantle/rules qtcreator packaging files ------------------------------------------------------------------------ r5611 | hardaker | 2011-05-24 15:21:33 -0700 (Tue, 24 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.cpp Make the left-button bring up the log window. ------------------------------------------------------------------------ r5610 | hardaker | 2011-05-24 15:21:20 -0700 (Tue, 24 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/DnssecSystemTrayPrefs.cpp M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/DnssecSystemTrayPrefs.h M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.cpp M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.h added a show warning option for closing the log ------------------------------------------------------------------------ r5609 | hardaker | 2011-05-24 15:21:06 -0700 (Tue, 24 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.cpp M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/images/trianglewarning.png added a red-triangle warning icon ------------------------------------------------------------------------ r5608 | hardaker | 2011-05-24 15:20:53 -0700 (Tue, 24 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.qrc A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/images/trianglewarning.png added the triangle warning sign icon ------------------------------------------------------------------------ r5607 | hardaker | 2011-05-24 15:20:40 -0700 (Tue, 24 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/DnssecSystemTrayPrefs.cpp M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/DnssecSystemTrayPrefs.h M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.cpp a configurable number of log messages to keep ------------------------------------------------------------------------ r5606 | hardaker | 2011-05-24 15:20:26 -0700 (Tue, 24 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.cpp M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.h actually populate the log window with results ------------------------------------------------------------------------ r5605 | hardaker | 2011-05-24 15:20:14 -0700 (Tue, 24 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.cpp M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.h watch a preferenced logfile, even if it DNE. Clicking on message opens main ------------------------------------------------------------------------ r5604 | hardaker | 2011-05-24 15:20:01 -0700 (Tue, 24 May 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/DnssecSystemTrayPrefs.cpp A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/DnssecSystemTrayPrefs.h M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.cpp M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.h M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.pro added a preferences dialog ------------------------------------------------------------------------ r5603 | hardaker | 2011-05-24 15:19:46 -0700 (Tue, 24 May 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-check/qtc_packaging A /trunk/dnssec-tools/validator/apps/dnssec-check/qtc_packaging/debian_fremantle A /trunk/dnssec-tools/validator/apps/dnssec-check/qtc_packaging/debian_fremantle/README A /trunk/dnssec-tools/validator/apps/dnssec-check/qtc_packaging/debian_fremantle/changelog A /trunk/dnssec-tools/validator/apps/dnssec-check/qtc_packaging/debian_fremantle/compat A /trunk/dnssec-tools/validator/apps/dnssec-check/qtc_packaging/debian_fremantle/control A /trunk/dnssec-tools/validator/apps/dnssec-check/qtc_packaging/debian_fremantle/copyright A /trunk/dnssec-tools/validator/apps/dnssec-check/qtc_packaging/debian_fremantle/rules qtcreator packaging fles ------------------------------------------------------------------------ r5602 | hardaker | 2011-05-24 15:19:30 -0700 (Tue, 24 May 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/.gitignore ignore file ------------------------------------------------------------------------ r5601 | hardaker | 2011-05-24 15:19:16 -0700 (Tue, 24 May 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/.gitignore ignore files ------------------------------------------------------------------------ r5600 | hardaker | 2011-05-24 15:19:03 -0700 (Tue, 24 May 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.cpp (from /trunk/dnssec-tools/validator/apps/dnssec-system-tray/window.cpp:5599) A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.h (from /trunk/dnssec-tools/validator/apps/dnssec-system-tray/window.h:5599) A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.pro (from /trunk/dnssec-tools/validator/apps/dnssec-system-tray/systray.pro:5599) A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/dnssec-system-tray.qrc (from /trunk/dnssec-tools/validator/apps/dnssec-system-tray/systray.qrc:5599) M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/main.cpp D /trunk/dnssec-tools/validator/apps/dnssec-system-tray/systray D /trunk/dnssec-tools/validator/apps/dnssec-system-tray/systray.pro D /trunk/dnssec-tools/validator/apps/dnssec-system-tray/systray.qrc D /trunk/dnssec-tools/validator/apps/dnssec-system-tray/window.cpp D /trunk/dnssec-tools/validator/apps/dnssec-system-tray/window.h renamed files and project name ------------------------------------------------------------------------ r5599 | hardaker | 2011-05-24 15:18:44 -0700 (Tue, 24 May 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-nodes A /trunk/dnssec-tools/validator/apps/dnssec-nodes/debian A /trunk/dnssec-tools/validator/apps/dnssec-nodes/debian/README A /trunk/dnssec-tools/validator/apps/dnssec-nodes/debian/changelog A /trunk/dnssec-tools/validator/apps/dnssec-nodes/debian/compat A /trunk/dnssec-tools/validator/apps/dnssec-nodes/debian/control A /trunk/dnssec-tools/validator/apps/dnssec-nodes/debian/copyright A /trunk/dnssec-tools/validator/apps/dnssec-nodes/debian/dnssec-check.substvars A /trunk/dnssec-tools/validator/apps/dnssec-nodes/debian/files A /trunk/dnssec-tools/validator/apps/dnssec-nodes/debian/rules A /trunk/dnssec-tools/validator/apps/dnssec-nodes/dist A /trunk/dnssec-tools/validator/apps/dnssec-nodes/dist/makerelease.xml A /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.pro A /trunk/dnssec-tools/validator/apps/dnssec-nodes/dnssec-nodes.qrc A /trunk/dnssec-tools/validator/apps/dnssec-nodes/edge.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/edge.h A /trunk/dnssec-tools/validator/apps/dnssec-nodes/elasticnodes.desktop A /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/graphwidget.h A /trunk/dnssec-tools/validator/apps/dnssec-nodes/icons A /trunk/dnssec-tools/validator/apps/dnssec-nodes/icons/dnssec-nodes-32x32.png A /trunk/dnssec-tools/validator/apps/dnssec-nodes/icons/dnssec-nodes-48x48.png A /trunk/dnssec-tools/validator/apps/dnssec-nodes/icons/dnssec-nodes-64x64.png A /trunk/dnssec-tools/validator/apps/dnssec-nodes/icons/dnssec-nodes.png A /trunk/dnssec-tools/validator/apps/dnssec-nodes/icons/dnssec-nodes.svg A /trunk/dnssec-tools/validator/apps/dnssec-nodes/main.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.cpp A /trunk/dnssec-tools/validator/apps/dnssec-nodes/node.h copy of the dnssec-nodes source ------------------------------------------------------------------------ r5598 | hardaker | 2011-05-24 15:18:20 -0700 (Tue, 24 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/lookup/src/lookup.cpp don't use the save location unless its set ------------------------------------------------------------------------ r5597 | hardaker | 2011-05-24 15:18:06 -0700 (Tue, 24 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/lookup/src/LookupPrefs.cpp M /trunk/dnssec-tools/validator/apps/lookup/src/LookupPrefs.h M /trunk/dnssec-tools/validator/apps/lookup/src/lookup.cpp M /trunk/dnssec-tools/validator/apps/lookup/src/lookup.h create a preferences setting for where to save log file information to ------------------------------------------------------------------------ r5596 | hardaker | 2011-05-24 15:17:51 -0700 (Tue, 24 May 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/lookup/src/LookupPrefs.cpp A /trunk/dnssec-tools/validator/apps/lookup/src/LookupPrefs.h M /trunk/dnssec-tools/validator/apps/lookup/src/src.pro added a preference window class ------------------------------------------------------------------------ r5595 | hardaker | 2011-05-24 15:17:37 -0700 (Tue, 24 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/lookup/src/lookup.cpp M /trunk/dnssec-tools/validator/apps/lookup/src/lookup.h change the widget to a main window and add a menu ------------------------------------------------------------------------ r5594 | hardaker | 2011-05-24 15:17:23 -0700 (Tue, 24 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/lookup/src/lookup.cpp M /trunk/dnssec-tools/validator/apps/lookup/src/lookup.h more rearranging of init functionality into compartments ------------------------------------------------------------------------ r5593 | hardaker | 2011-05-24 15:17:10 -0700 (Tue, 24 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/lookup/src/lookup.cpp M /trunk/dnssec-tools/validator/apps/lookup/src/lookup.h rearrange lookup init segments ------------------------------------------------------------------------ r5592 | hardaker | 2011-05-24 15:16:57 -0700 (Tue, 24 May 2011) | 1 line Changed paths: D /trunk/dnssec-tools/validator/apps/dnssec-system-tray/systray.pro.user removed generated user file ------------------------------------------------------------------------ r5591 | hardaker | 2011-05-24 15:16:44 -0700 (Tue, 24 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/lookup/lookup.pro A /trunk/dnssec-tools/validator/apps/lookup/qtc_packaging A /trunk/dnssec-tools/validator/apps/lookup/qtc_packaging/debian_fremantle A /trunk/dnssec-tools/validator/apps/lookup/qtc_packaging/debian_fremantle/README A /trunk/dnssec-tools/validator/apps/lookup/qtc_packaging/debian_fremantle/changelog A /trunk/dnssec-tools/validator/apps/lookup/qtc_packaging/debian_fremantle/compat A /trunk/dnssec-tools/validator/apps/lookup/qtc_packaging/debian_fremantle/control A /trunk/dnssec-tools/validator/apps/lookup/qtc_packaging/debian_fremantle/copyright A /trunk/dnssec-tools/validator/apps/lookup/qtc_packaging/debian_fremantle/rules updated qtcreator created distribution files ------------------------------------------------------------------------ r5590 | hardaker | 2011-05-24 15:16:28 -0700 (Tue, 24 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/window.cpp M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/window.h minimal functioning version that watches a file and shows a message ------------------------------------------------------------------------ r5589 | hardaker | 2011-05-24 15:16:16 -0700 (Tue, 24 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/window.cpp M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/window.h Infastructure for parsing and reading files. ------------------------------------------------------------------------ r5588 | hardaker | 2011-05-24 15:16:03 -0700 (Tue, 24 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/window.cpp M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/window.h Start layout of DNSSEC specific table-based log. ------------------------------------------------------------------------ r5587 | hardaker | 2011-05-24 15:15:50 -0700 (Tue, 24 May 2011) | 1 line Changed paths: D /trunk/dnssec-tools/validator/apps/dnssec-system-tray/images/bad.svg D /trunk/dnssec-tools/validator/apps/dnssec-system-tray/images/heart.svg A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/images/justlock.png D /trunk/dnssec-tools/validator/apps/dnssec-system-tray/images/trash.svg M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/systray.qrc removed the default icons and created a lock icon ------------------------------------------------------------------------ r5586 | hardaker | 2011-05-24 15:15:35 -0700 (Tue, 24 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-system-tray/window.cpp remove doc comments ------------------------------------------------------------------------ r5585 | hardaker | 2011-05-24 15:15:22 -0700 (Tue, 24 May 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-system-tray A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/images A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/images/bad.svg A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/images/heart.svg A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/images/trash.svg A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/main.cpp A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/qtc_packaging A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/qtc_packaging/debian_fremantle A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/qtc_packaging/debian_fremantle/README A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/qtc_packaging/debian_fremantle/changelog A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/qtc_packaging/debian_fremantle/compat A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/qtc_packaging/debian_fremantle/control A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/qtc_packaging/debian_fremantle/copyright A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/qtc_packaging/debian_fremantle/rules A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/systray A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/systray.pro A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/systray.pro.user A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/systray.qrc A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/window.cpp A /trunk/dnssec-tools/validator/apps/dnssec-system-tray/window.h starting a systray application from the Qt systray tutorial code ------------------------------------------------------------------------ r5584 | hardaker | 2011-05-24 15:15:00 -0700 (Tue, 24 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp Added accelerators and a quit menu option. ------------------------------------------------------------------------ r5583 | hardaker | 2011-05-24 15:14:47 -0700 (Tue, 24 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/QStatusLight.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/QStatusLight.h M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.h send status for all current information to the server ------------------------------------------------------------------------ r5582 | hardaker | 2011-05-24 15:14:34 -0700 (Tue, 24 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp changed submission URL ------------------------------------------------------------------------ r5581 | hardaker | 2011-05-24 15:14:20 -0700 (Tue, 24 May 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec-check A /trunk/dnssec-tools/validator/apps/dnssec-check/QStatusLight.cpp (from /trunk/dnssec-tools/validator/apps/dnssec_check/QStatusLight.cpp:5580) A /trunk/dnssec-tools/validator/apps/dnssec-check/QStatusLight.h (from /trunk/dnssec-tools/validator/apps/dnssec_check/QStatusLight.h:5580) A /trunk/dnssec-tools/validator/apps/dnssec-check/README (from /trunk/dnssec-tools/validator/apps/dnssec_check/README:5580) A /trunk/dnssec-tools/validator/apps/dnssec-check/SubmitDialog.cpp (from /trunk/dnssec-tools/validator/apps/dnssec_check/SubmitDialog.cpp:5580) A /trunk/dnssec-tools/validator/apps/dnssec-check/SubmitDialog.h (from /trunk/dnssec-tools/validator/apps/dnssec_check/SubmitDialog.h:5580) A /trunk/dnssec-tools/validator/apps/dnssec-check/debian A /trunk/dnssec-tools/validator/apps/dnssec-check/debian/README (from /trunk/dnssec-tools/validator/apps/dnssec_check/debian/README:5580) A /trunk/dnssec-tools/validator/apps/dnssec-check/debian/changelog (from /trunk/dnssec-tools/validator/apps/dnssec_check/debian/changelog:5580) A /trunk/dnssec-tools/validator/apps/dnssec-check/debian/compat (from /trunk/dnssec-tools/validator/apps/dnssec_check/debian/compat:5580) A /trunk/dnssec-tools/validator/apps/dnssec-check/debian/control (from /trunk/dnssec-tools/validator/apps/dnssec_check/debian/control:5580) A /trunk/dnssec-tools/validator/apps/dnssec-check/debian/copyright (from /trunk/dnssec-tools/validator/apps/dnssec_check/debian/copyright:5580) A /trunk/dnssec-tools/validator/apps/dnssec-check/debian/rules (from /trunk/dnssec-tools/validator/apps/dnssec_check/debian/rules:5580) A /trunk/dnssec-tools/validator/apps/dnssec-check/deployment.pri (from /trunk/dnssec-tools/validator/apps/dnssec_check/deployment.pri:5580) A /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.desktop (from /trunk/dnssec-tools/validator/apps/dnssec_check/dnssec-check.desktop:5580) A /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.png (from /trunk/dnssec-tools/validator/apps/dnssec_check/dnssec-check.png:5580) A /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.pro (from /trunk/dnssec-tools/validator/apps/dnssec_check/dnssec-check.pro:5580) A /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec-check.qrc (from /trunk/dnssec-tools/validator/apps/dnssec_check/dnssec-check.qrc:5580) A /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.cpp (from /trunk/dnssec-tools/validator/apps/dnssec_check/dnssec_checks.cpp:5580) A /trunk/dnssec-tools/validator/apps/dnssec-check/dnssec_checks.h (from /trunk/dnssec-tools/validator/apps/dnssec_check/dnssec_checks.h:5580) A /trunk/dnssec-tools/validator/apps/dnssec-check/images A /trunk/dnssec-tools/validator/apps/dnssec-check/images/blank.png (from /trunk/dnssec-tools/validator/apps/dnssec_check/images/blank.png:5580) A /trunk/dnssec-tools/validator/apps/dnssec-check/images/dnssec-check-32x32.png (from /trunk/dnssec-tools/validator/apps/dnssec_check/images/dnssec-check-32x32.png:5580) A /trunk/dnssec-tools/validator/apps/dnssec-check/images/dnssec-check-48x48.png (from /trunk/dnssec-tools/validator/apps/dnssec_check/images/dnssec-check-48x48.png:5580) A /trunk/dnssec-tools/validator/apps/dnssec-check/images/dnssec-check-64x64.png (from /trunk/dnssec-tools/validator/apps/dnssec_check/images/dnssec-check-64x64.png:5580) A /trunk/dnssec-tools/validator/apps/dnssec-check/images/dnssec-check.svg (from /trunk/dnssec-tools/validator/apps/dnssec_check/images/dnssec-check.svg:5580) A /trunk/dnssec-tools/validator/apps/dnssec-check/images/green.png (from /trunk/dnssec-tools/validator/apps/dnssec_check/images/green.png:5580) A /trunk/dnssec-tools/validator/apps/dnssec-check/images/red.png (from /trunk/dnssec-tools/validator/apps/dnssec_check/images/red.png:5580) A /trunk/dnssec-tools/validator/apps/dnssec-check/main.cpp (from /trunk/dnssec-tools/validator/apps/dnssec_check/main.cpp:5580) A /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.cpp (from /trunk/dnssec-tools/validator/apps/dnssec_check/mainwindow.cpp:5580) A /trunk/dnssec-tools/validator/apps/dnssec-check/mainwindow.h (from /trunk/dnssec-tools/validator/apps/dnssec_check/mainwindow.h:5580) D /trunk/dnssec-tools/validator/apps/dnssec_check/QStatusLight.cpp D /trunk/dnssec-tools/validator/apps/dnssec_check/QStatusLight.h D /trunk/dnssec-tools/validator/apps/dnssec_check/README D /trunk/dnssec-tools/validator/apps/dnssec_check/SubmitDialog.cpp D /trunk/dnssec-tools/validator/apps/dnssec_check/SubmitDialog.h D /trunk/dnssec-tools/validator/apps/dnssec_check/debian/README D /trunk/dnssec-tools/validator/apps/dnssec_check/debian/changelog D /trunk/dnssec-tools/validator/apps/dnssec_check/debian/compat D /trunk/dnssec-tools/validator/apps/dnssec_check/debian/control D /trunk/dnssec-tools/validator/apps/dnssec_check/debian/copyright D /trunk/dnssec-tools/validator/apps/dnssec_check/debian/rules D /trunk/dnssec-tools/validator/apps/dnssec_check/deployment.pri D /trunk/dnssec-tools/validator/apps/dnssec_check/dnssec-check.desktop D /trunk/dnssec-tools/validator/apps/dnssec_check/dnssec-check.png D /trunk/dnssec-tools/validator/apps/dnssec_check/dnssec-check.pro D /trunk/dnssec-tools/validator/apps/dnssec_check/dnssec-check.qrc D /trunk/dnssec-tools/validator/apps/dnssec_check/dnssec_checks.cpp D /trunk/dnssec-tools/validator/apps/dnssec_check/dnssec_checks.h D /trunk/dnssec-tools/validator/apps/dnssec_check/images/blank.png D /trunk/dnssec-tools/validator/apps/dnssec_check/images/dnssec-check-32x32.png D /trunk/dnssec-tools/validator/apps/dnssec_check/images/dnssec-check-48x48.png D /trunk/dnssec-tools/validator/apps/dnssec_check/images/dnssec-check-64x64.png D /trunk/dnssec-tools/validator/apps/dnssec_check/images/dnssec-check.svg D /trunk/dnssec-tools/validator/apps/dnssec_check/images/green.png D /trunk/dnssec-tools/validator/apps/dnssec_check/images/red.png D /trunk/dnssec-tools/validator/apps/dnssec_check/main.cpp D /trunk/dnssec-tools/validator/apps/dnssec_check/mainwindow.cpp D /trunk/dnssec-tools/validator/apps/dnssec_check/mainwindow.h renamed dnssec_check dir to dnssec-check ------------------------------------------------------------------------ r5580 | hardaker | 2011-05-24 15:13:34 -0700 (Tue, 24 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec_check/dnssec-check.pro M /trunk/dnssec-tools/validator/apps/dnssec_check/mainwindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec_check/mainwindow.h First working version of submitting data to a remote server. ------------------------------------------------------------------------ r5579 | hardaker | 2011-05-24 15:13:20 -0700 (Tue, 24 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec_check/mainwindow.cpp Create an if clause for submitting the results only if ok was pressed ------------------------------------------------------------------------ r5578 | hardaker | 2011-05-24 15:13:06 -0700 (Tue, 24 May 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec_check/SubmitDialog.cpp A /trunk/dnssec-tools/validator/apps/dnssec_check/SubmitDialog.h M /trunk/dnssec-tools/validator/apps/dnssec_check/dnssec-check.pro M /trunk/dnssec-tools/validator/apps/dnssec_check/mainwindow.cpp Beginning dialog box for submitting results. ------------------------------------------------------------------------ r5577 | hardaker | 2011-05-24 15:11:53 -0700 (Tue, 24 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec_check/QStatusLight.cpp M /trunk/dnssec-tools/validator/apps/dnssec_check/mainwindow.cpp M /trunk/dnssec-tools/validator/apps/dnssec_check/mainwindow.h Added a new menu option for submitting results (currently a NOOP) ------------------------------------------------------------------------ r5576 | rstory | 2011-05-19 15:41:18 -0700 (Thu, 19 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_support.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c only define addrlen(4|6) if it will be used ------------------------------------------------------------------------ r5575 | tewok | 2011-05-19 10:10:04 -0700 (Thu, 19 May 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf Added some expansions to default times. ------------------------------------------------------------------------ r5574 | hardaker | 2011-05-19 09:17:58 -0700 (Thu, 19 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow start a new section on the answers packet portion ------------------------------------------------------------------------ r5573 | hardaker | 2011-05-18 13:16:38 -0700 (Wed, 18 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/include/validator-compat.h M /trunk/dnssec-tools/validator/include/validator-config.h.in move the ns_t typedefs back to resolver.h along with configure decl tests for them ------------------------------------------------------------------------ r5572 | hardaker | 2011-05-18 13:16:17 -0700 (Wed, 18 May 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec_check A /trunk/dnssec-tools/validator/apps/dnssec_check/QStatusLight.cpp A /trunk/dnssec-tools/validator/apps/dnssec_check/QStatusLight.h A /trunk/dnssec-tools/validator/apps/dnssec_check/README A /trunk/dnssec-tools/validator/apps/dnssec_check/debian A /trunk/dnssec-tools/validator/apps/dnssec_check/debian/README A /trunk/dnssec-tools/validator/apps/dnssec_check/debian/changelog A /trunk/dnssec-tools/validator/apps/dnssec_check/debian/compat A /trunk/dnssec-tools/validator/apps/dnssec_check/debian/control A /trunk/dnssec-tools/validator/apps/dnssec_check/debian/copyright A /trunk/dnssec-tools/validator/apps/dnssec_check/debian/rules A /trunk/dnssec-tools/validator/apps/dnssec_check/deployment.pri A /trunk/dnssec-tools/validator/apps/dnssec_check/dnssec-check.desktop A /trunk/dnssec-tools/validator/apps/dnssec_check/dnssec-check.png A /trunk/dnssec-tools/validator/apps/dnssec_check/dnssec-check.pro A /trunk/dnssec-tools/validator/apps/dnssec_check/dnssec-check.qrc A /trunk/dnssec-tools/validator/apps/dnssec_check/dnssec_checks.cpp A /trunk/dnssec-tools/validator/apps/dnssec_check/dnssec_checks.h A /trunk/dnssec-tools/validator/apps/dnssec_check/images A /trunk/dnssec-tools/validator/apps/dnssec_check/images/blank.png A /trunk/dnssec-tools/validator/apps/dnssec_check/images/dnssec-check-32x32.png A /trunk/dnssec-tools/validator/apps/dnssec_check/images/dnssec-check-48x48.png A /trunk/dnssec-tools/validator/apps/dnssec_check/images/dnssec-check-64x64.png A /trunk/dnssec-tools/validator/apps/dnssec_check/images/dnssec-check.svg A /trunk/dnssec-tools/validator/apps/dnssec_check/images/green.png A /trunk/dnssec-tools/validator/apps/dnssec_check/images/red.png A /trunk/dnssec-tools/validator/apps/dnssec_check/main.cpp A /trunk/dnssec-tools/validator/apps/dnssec_check/mainwindow.cpp A /trunk/dnssec-tools/validator/apps/dnssec_check/mainwindow.h copy from original source tree ------------------------------------------------------------------------ r5571 | hardaker | 2011-05-18 13:15:55 -0700 (Wed, 18 May 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/lookup A /trunk/dnssec-tools/validator/apps/lookup/README A /trunk/dnssec-tools/validator/apps/lookup/data A /trunk/dnssec-tools/validator/apps/lookup/data/48x48 A /trunk/dnssec-tools/validator/apps/lookup/data/48x48/lookup.png A /trunk/dnssec-tools/validator/apps/lookup/data/64x64 A /trunk/dnssec-tools/validator/apps/lookup/data/64x64/lookup.png A /trunk/dnssec-tools/validator/apps/lookup/data/maemo A /trunk/dnssec-tools/validator/apps/lookup/data/maemo/lookup.xpm A /trunk/dnssec-tools/validator/apps/lookup/debian A /trunk/dnssec-tools/validator/apps/lookup/debian/README.Debian A /trunk/dnssec-tools/validator/apps/lookup/debian/changelog A /trunk/dnssec-tools/validator/apps/lookup/debian/compat A /trunk/dnssec-tools/validator/apps/lookup/debian/control A /trunk/dnssec-tools/validator/apps/lookup/debian/copyright A /trunk/dnssec-tools/validator/apps/lookup/debian/dirs A /trunk/dnssec-tools/validator/apps/lookup/debian/docs A /trunk/dnssec-tools/validator/apps/lookup/debian/lookindns.doc-base.EX A /trunk/dnssec-tools/validator/apps/lookup/debian/lookup.substvars A /trunk/dnssec-tools/validator/apps/lookup/debian/rules A /trunk/dnssec-tools/validator/apps/lookup/lookup.pro A /trunk/dnssec-tools/validator/apps/lookup/src A /trunk/dnssec-tools/validator/apps/lookup/src/QDNSItemModel.cpp A /trunk/dnssec-tools/validator/apps/lookup/src/QDNSItemModel.h A /trunk/dnssec-tools/validator/apps/lookup/src/images A /trunk/dnssec-tools/validator/apps/lookup/src/images/bad.png A /trunk/dnssec-tools/validator/apps/lookup/src/images/bad.svgz A /trunk/dnssec-tools/validator/apps/lookup/src/images/convertthem A /trunk/dnssec-tools/validator/apps/lookup/src/images/trusted.png A /trunk/dnssec-tools/validator/apps/lookup/src/images/trusted.svgz A /trunk/dnssec-tools/validator/apps/lookup/src/images/unknown.png A /trunk/dnssec-tools/validator/apps/lookup/src/images/unknown.svgz A /trunk/dnssec-tools/validator/apps/lookup/src/images/validated.png A /trunk/dnssec-tools/validator/apps/lookup/src/images/validated.svgz A /trunk/dnssec-tools/validator/apps/lookup/src/lookup.cpp A /trunk/dnssec-tools/validator/apps/lookup/src/lookup.desktop A /trunk/dnssec-tools/validator/apps/lookup/src/lookup.h A /trunk/dnssec-tools/validator/apps/lookup/src/lookup.qrc A /trunk/dnssec-tools/validator/apps/lookup/src/qtmain.cpp A /trunk/dnssec-tools/validator/apps/lookup/src/src.pro A graphical lookup utility ------------------------------------------------------------------------ r5570 | hardaker | 2011-05-18 13:15:25 -0700 (Wed, 18 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Set the internal KSK and ZSK life to the 1y/3mo timing ------------------------------------------------------------------------ r5569 | hardaker | 2011-05-18 13:15:14 -0700 (Wed, 18 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf set the default KSK life to 1y, and the ZSK life to 3mo ------------------------------------------------------------------------ r5568 | hserus | 2011-05-18 12:40:19 -0700 (Wed, 18 May 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_debug.c Define RES_SYM_TYPE for fedora. However this change now results in a number of warning messages when building res_debug.c. Better fix is needed. ------------------------------------------------------------------------ r5567 | hserus | 2011-05-18 12:03:59 -0700 (Wed, 18 May 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/include/validator-compat.h Move (re-)definition of p_type to resolver.h ------------------------------------------------------------------------ r5566 | tewok | 2011-05-13 10:45:55 -0700 (Fri, 13 May 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lights Added a more descriptive label for the -labels argument. ------------------------------------------------------------------------ r5565 | hserus | 2011-05-13 07:13:01 -0700 (Fri, 13 May 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_crypto.c Fix argument transposition error in memset function call. ------------------------------------------------------------------------ r5563 | hserus | 2011-05-13 06:38:00 -0700 (Fri, 13 May 2011) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_assertion.h M /trunk/dnssec-tools/validator/libval/val_resquery.c - While following alias chains, treat cname targets as non-authoritative data (as they should be) and be prepared to reissue the query for the target with DO if required. - Do not save incomplete delegation information in cache while following referrals. This fixes a faulty assertion of referral loops. ------------------------------------------------------------------------ r5562 | hserus | 2011-05-10 13:49:05 -0700 (Tue, 10 May 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Check provably insecure status for the bottom-most element of the assertion chain. This ensures that we don't bypass a non-matching trust-anchor and reach a provably-insecure state for an element higher up in the chain. ------------------------------------------------------------------------ r5561 | hserus | 2011-05-10 13:43:24 -0700 (Tue, 10 May 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_support.c M /trunk/dnssec-tools/validator/libval/val_policy.c Only set the RD bit when we send queries to a recursive name server. ------------------------------------------------------------------------ r5560 | tewok | 2011-05-05 16:43:08 -0700 (Thu, 05 May 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/README A /trunk/dnssec-tools/apps/nagios A /trunk/dnssec-tools/apps/nagios/README A /trunk/dnssec-tools/apps/nagios/dt_zonestat A /trunk/dnssec-tools/apps/nagios/dtnagobj A /trunk/dnssec-tools/apps/nagios/sample.dnssec-tools.cfg A /trunk/dnssec-tools/apps/nagios/sample.rollrec A /trunk/dnssec-tools/apps/nagios/status.c Added Nagios-related files. ------------------------------------------------------------------------ r5559 | tewok | 2011-05-05 11:53:30 -0700 (Thu, 05 May 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pod Fixed a couple of typos. ------------------------------------------------------------------------ r5558 | tewok | 2011-05-05 08:27:18 -0700 (Thu, 05 May 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added keyrec_signsets_keys(). ------------------------------------------------------------------------ r5557 | hardaker | 2011-05-04 16:30:41 -0700 (Wed, 04 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/lsdnssec if there is no rollerd information, use the creation age for a key ------------------------------------------------------------------------ r5556 | hserus | 2011-05-04 12:15:53 -0700 (Wed, 04 May 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/Makefile.in M /trunk/dnssec-tools/validator/apps/dnssec_checks.c M /trunk/dnssec-tools/validator/apps/getaddr.c M /trunk/dnssec-tools/validator/apps/gethost.c M /trunk/dnssec-tools/validator/apps/getname.c M /trunk/dnssec-tools/validator/apps/getquery.c M /trunk/dnssec-tools/validator/apps/getrrset.c M /trunk/dnssec-tools/validator/apps/libsres_test.c M /trunk/dnssec-tools/validator/apps/libval_check_conf.c M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/apps/validator_driver.h M /trunk/dnssec-tools/validator/apps/validator_selftest.c M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in D /trunk/dnssec-tools/validator/include/arpa D /trunk/dnssec-tools/validator/include/val_ns_types.h M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/include/validator/val_errors.h D /trunk/dnssec-tools/validator/include/validator/validator-internal.h M /trunk/dnssec-tools/validator/include/validator/validator.h A /trunk/dnssec-tools/validator/include/validator-compat.h M /trunk/dnssec-tools/validator/include/validator-config.h.in A /trunk/dnssec-tools/validator/include/validator-internal.h M /trunk/dnssec-tools/validator/libsres/base64.c A /trunk/dnssec-tools/validator/libsres/base64.h M /trunk/dnssec-tools/validator/libsres/ns_name.c M /trunk/dnssec-tools/validator/libsres/ns_netint.c M /trunk/dnssec-tools/validator/libsres/ns_parse.c M /trunk/dnssec-tools/validator/libsres/ns_print.c M /trunk/dnssec-tools/validator/libsres/ns_samedomain.c A /trunk/dnssec-tools/validator/libsres/ns_samedomain.h M /trunk/dnssec-tools/validator/libsres/ns_ttl.c M /trunk/dnssec-tools/validator/libsres/nsap_addr.c M /trunk/dnssec-tools/validator/libsres/res_comp.c A /trunk/dnssec-tools/validator/libsres/res_comp.h M /trunk/dnssec-tools/validator/libsres/res_debug.c A /trunk/dnssec-tools/validator/libsres/res_debug.h M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_mkquery.c M /trunk/dnssec-tools/validator/libsres/res_mkquery.h M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libsres/res_support.c M /trunk/dnssec-tools/validator/libsres/res_support.h M /trunk/dnssec-tools/validator/libsres/res_tsig.c M /trunk/dnssec-tools/validator/libsres/res_tsig.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_crypto.c M /trunk/dnssec-tools/validator/libval/val_crypto.h M /trunk/dnssec-tools/validator/libval/val_get_rrset.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_parse.c M /trunk/dnssec-tools/validator/libval/val_parse.h M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_policy.h M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_verify.c M /trunk/dnssec-tools/validator/libval/val_verify.h M /trunk/dnssec-tools/validator/libval/val_x_query.c M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c Merge windows port by hand the from validator-winport branch to trunk. ------------------------------------------------------------------------ r5554 | rstory | 2011-05-02 13:39:29 -0700 (Mon, 02 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/libsres_test.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_assertion.h M /trunk/dnssec-tools/validator/libval/val_context.h M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_resquery.h M /trunk/dnssec-tools/validator/libval/val_support.c even more compiler fixes ------------------------------------------------------------------------ r5553 | rstory | 2011-05-02 12:47:31 -0700 (Mon, 02 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/libsres_test.c M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/include/validator/validator.h fix more compiler warnings ------------------------------------------------------------------------ r5552 | rstory | 2011-05-02 12:09:37 -0700 (Mon, 02 May 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/libval/val_resquery.c fix build warnings: missing prototypes; unused var ------------------------------------------------------------------------ r5550 | tewok | 2011-04-23 09:22:02 -0700 (Sat, 23 Apr 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Fixed a few more comments. Deleted a debugging print. Adjusted operator spacing in a calculation. ------------------------------------------------------------------------ r5549 | tewok | 2011-04-23 09:11:16 -0700 (Sat, 23 Apr 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Fixed a comment. ------------------------------------------------------------------------ r5548 | tewok | 2011-04-18 13:53:10 -0700 (Mon, 18 Apr 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Moved the main event loop into its own routine. This will allow for adding alternate queue-handling schemes. Fixed some improperly placed comments. ------------------------------------------------------------------------ r5546 | tewok | 2011-04-13 10:27:04 -0700 (Wed, 13 Apr 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/demo-tools/makezones Added the -blinkenlights, -bubbles, -lights, and -nodisplay options. ------------------------------------------------------------------------ r5545 | tewok | 2011-04-11 12:19:54 -0700 (Mon, 11 Apr 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/demo-tools/README A /trunk/dnssec-tools/tools/demos/demo-tools/autods Added the autods tool. ------------------------------------------------------------------------ r5544 | tewok | 2011-04-11 09:08:44 -0700 (Mon, 11 Apr 2011) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/demos/demo-tools A /trunk/dnssec-tools/tools/demos/demo-tools/README A /trunk/dnssec-tools/tools/demos/demo-tools/makezones Created a new demo directory specifically for tools common to DNSSEC-Tools demos. ------------------------------------------------------------------------ r5543 | tewok | 2011-04-11 07:25:56 -0700 (Mon, 11 Apr 2011) | 12 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added a means to specify the number of zones displayed: -maxzones on the command line and maxzones in the config file. Added the count of displayed zones to the infostripe. Deleted a few unused and unnecessary variables. Lowered the sleep count when a halt command is received. Modified the actions taken when rollerd was sending a "startroll" command -- which wasn't really happening anyway. (Probably should eventually delete the bypassed code.) There are some window-resizing issues that occasionally crop up when maxzones is reset. I'll be looking into those. ------------------------------------------------------------------------ r5542 | tewok | 2011-04-11 07:22:24 -0700 (Mon, 11 Apr 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Modified the "startroll" command (to blinkenlights) usage. A few code formatting fixes. ------------------------------------------------------------------------ r5541 | tewok | 2011-04-05 16:47:30 -0700 (Tue, 05 Apr 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Minor change: All the "rollctl -q" calls were changed to clearer "rollctl -quiet" calls. ------------------------------------------------------------------------ r5540 | tewok | 2011-04-05 16:43:34 -0700 (Tue, 05 Apr 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/bubbles Fixed some (cut-n-pasted) pod to refer to bubbles and not lights. ------------------------------------------------------------------------ r5539 | tewok | 2011-04-05 16:41:52 -0700 (Tue, 05 Apr 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lights Adjusted the pod description a bit. Changed the halting sleep time from 5 seconds to 2 seconds. ------------------------------------------------------------------------ r5538 | tewok | 2011-04-05 16:41:02 -0700 (Tue, 05 Apr 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/bubbles Added support for a "Halt Rollerd" command in the File menu. Added a binding of ^Q to quit the program. Removed a few unnecessary variables. ------------------------------------------------------------------------ r5537 | tewok | 2011-04-05 16:31:24 -0700 (Tue, 05 Apr 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lights Added support for a "halt rollerd" command in the File menu. Added a binding of ^Q to quit the program. Removed a few unnecessary variables. ------------------------------------------------------------------------ r5536 | tewok | 2011-04-05 16:09:09 -0700 (Tue, 05 Apr 2011) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lights Added -rrf to get zone data from a rollrec file instead of rollerd. Added function description to header of setlights(). Fix function description in maketable() header. ------------------------------------------------------------------------ r5535 | rstory | 2011-04-02 06:08:28 -0700 (Sat, 02 Apr 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/apps/validator_selftest.c M /trunk/dnssec-tools/validator/include/validator/validator-internal.h fix build issues when VAL_NO_ASYNC is defined ------------------------------------------------------------------------ r5534 | hardaker | 2011-04-01 05:22:42 -0700 (Fri, 01 Apr 2011) | 1 line Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml reminder to update the web page ------------------------------------------------------------------------ r5530 | hardaker | 2011-03-24 14:30:51 -0700 (Thu, 24 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/dist/makerelease.xml include the version number in the update message ------------------------------------------------------------------------ r5529 | hardaker | 2011-03-24 14:30:17 -0700 (Thu, 24 Mar 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/ChangeLog updated the validator ChangeLog ------------------------------------------------------------------------ r5528 | hardaker | 2011-03-24 14:28:21 -0700 (Thu, 24 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/dist/makerelease.xml update the changelog ------------------------------------------------------------------------ r5527 | hardaker | 2011-03-24 14:23:43 -0700 (Thu, 24 Mar 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/dist A /trunk/dnssec-tools/validator/dist/makerelease.xml added a makerelease script for libval ------------------------------------------------------------------------ r5526 | hardaker | 2011-03-24 14:23:32 -0700 (Thu, 24 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS mention the number of commits ------------------------------------------------------------------------ r5522 | tewok | 2011-03-24 13:59:24 -0700 (Thu, 24 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/NEWS More 1.9 mods. ------------------------------------------------------------------------ r5521 | hardaker | 2011-03-24 13:48:13 -0700 (Thu, 24 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/ChangeLog Update for verison 1.9 ------------------------------------------------------------------------ r5520 | hardaker | 2011-03-24 13:35:36 -0700 (Thu, 24 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/convertar M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap M /trunk/dnssec-tools/tools/maketestzone/maketestzone M /trunk/dnssec-tools/tools/mapper/mapper M /trunk/dnssec-tools/tools/scripts/lsdnssec update to version 1.9 ------------------------------------------------------------------------ r5519 | hardaker | 2011-03-24 13:22:47 -0700 (Thu, 24 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS Update based on reading the changelogs ------------------------------------------------------------------------ r5518 | hserus | 2011-03-24 06:24:03 -0700 (Thu, 24 Mar 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in change root.hints location specified from AC_PROMPT_USER_NO_DEFINE to AC_PROMPT_USER, since the defaults root.hints value is apparently set to NULL if this is not done ------------------------------------------------------------------------ r5517 | hardaker | 2011-03-23 13:19:51 -0700 (Wed, 23 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm change the default key-archive storage to PREFIX/var/key-archive to meet modern FSL requirements. ------------------------------------------------------------------------ r5516 | hardaker | 2011-03-23 13:19:25 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/getds put sha1 back in the default list. ------------------------------------------------------------------------ r5515 | hardaker | 2011-03-23 13:19:04 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added a note in the documentation about the -alwayssign behaviour. ------------------------------------------------------------------------ r5514 | hardaker | 2011-03-23 13:18:40 -0700 (Wed, 23 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd don't let -alwaysign sign when phases 1 or 3 are in progress (the waiting phases). ------------------------------------------------------------------------ r5513 | hardaker | 2011-03-23 13:18:26 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/getds change the default behavior of getds to only generate SHA256 records ------------------------------------------------------------------------ r5512 | hardaker | 2011-03-23 13:17:59 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/lsdnssec document the new flags ------------------------------------------------------------------------ r5511 | hardaker | 2011-03-23 13:17:29 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/lsdnssec minor -h formatting improvements ------------------------------------------------------------------------ r5510 | hardaker | 2011-03-23 13:17:08 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/lsdnssec Added a -p option to list only zones in a particular phase. ------------------------------------------------------------------------ r5509 | hardaker | 2011-03-23 13:16:48 -0700 (Wed, 23 Mar 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsdnssec - completely restructure the output based on the fact that rollerd considers (by default) the age of the key to be based on when it was rolled, not when it was created. - add a -K switch to allow for displaying the age based on key creation ------------------------------------------------------------------------ r5508 | hardaker | 2011-03-23 13:16:30 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/lsdnssec change default key type level (and capitalization fix). ------------------------------------------------------------------------ r5507 | hardaker | 2011-03-23 13:16:06 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/lsdnssec support printing of known key type counts for a zone ------------------------------------------------------------------------ r5506 | hardaker | 2011-03-23 13:15:50 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/lsdnssec Allow listing of other key types ------------------------------------------------------------------------ r5505 | hardaker | 2011-03-23 13:15:28 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/lsdnssec fix zone krf saving ------------------------------------------------------------------------ r5504 | hardaker | 2011-03-23 13:15:12 -0700 (Wed, 23 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsdnssec Deep copy all the data since the KRF routines wipe the records on every keyrec_read(). ------------------------------------------------------------------------ r5503 | hardaker | 2011-03-23 13:14:49 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/lsdnssec fix debugging output so --debug actually works ------------------------------------------------------------------------ r5502 | hardaker | 2011-03-23 13:14:27 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/gethost.c M /trunk/dnssec-tools/validator/apps/libval_check_conf.c M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_crypto.c M /trunk/dnssec-tools/validator/libval/val_get_rrset.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_verify.c include arpa/nameserv.h ahead of resolver.h ------------------------------------------------------------------------ r5501 | hardaker | 2011-03-23 13:14:02 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/Makefile.in install the validator-config.h file ------------------------------------------------------------------------ r5500 | hardaker | 2011-03-23 13:13:40 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h define USE_EDNS0 and libsres_msg_getflag ------------------------------------------------------------------------ r5499 | hardaker | 2011-03-23 13:13:24 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.c make the nameser.h and arpa header inclusions work. ------------------------------------------------------------------------ r5498 | hardaker | 2011-03-23 13:13:06 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h reinclude arpa/nameser.h ------------------------------------------------------------------------ r5497 | hardaker | 2011-03-23 13:12:47 -0700 (Wed, 23 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec_checks.c - return error strings with failures - fix tests to correct them ------------------------------------------------------------------------ r5496 | hardaker | 2011-03-23 13:12:26 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec_checks.c rev 1 of beginning framework ------------------------------------------------------------------------ r5495 | hardaker | 2011-03-23 13:12:10 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/doc/libsres.3 recent pod2man update ------------------------------------------------------------------------ r5494 | hardaker | 2011-03-23 13:11:47 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/configure recent autoconf version ------------------------------------------------------------------------ r5493 | hardaker | 2011-03-23 13:11:24 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/Makefile.in install the config.h file ------------------------------------------------------------------------ r5492 | hardaker | 2011-03-23 13:11:08 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h use correct current bit value for the DO bit if the system doesn't define it ------------------------------------------------------------------------ r5491 | hardaker | 2011-03-23 13:10:53 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/doc/libsres.pod libsres' get() does *not* have a edns0 arg ------------------------------------------------------------------------ r5490 | hardaker | 2011-03-23 13:10:42 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_support.c print IP addresses tested on a big screen ------------------------------------------------------------------------ r5489 | hardaker | 2011-03-23 13:10:30 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec_checks.c return a successful description of what was achieved ------------------------------------------------------------------------ r5488 | hardaker | 2011-03-23 13:10:19 -0700 (Wed, 23 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/dnssec_checks.c - return error strings with failures - fix tests to correct them ------------------------------------------------------------------------ r5487 | hardaker | 2011-03-23 13:10:08 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/Makefile.in compile dnssec_checks ------------------------------------------------------------------------ r5486 | hardaker | 2011-03-23 13:09:57 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/dnssec_checks.c rev 1 of beginning framework ------------------------------------------------------------------------ r5485 | hardaker | 2011-03-23 13:09:41 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure enable nsec3 by default ------------------------------------------------------------------------ r5484 | rstory | 2011-03-23 10:26:34 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c fix partially checked in fix ------------------------------------------------------------------------ r5483 | rstory | 2011-03-23 10:26:25 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c revert accidental checking of debug message ------------------------------------------------------------------------ r5482 | rstory | 2011-03-23 10:26:12 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_assertion.c add top_q to async_status to more closely mimic async flow ------------------------------------------------------------------------ r5481 | rstory | 2011-03-23 10:26:02 -0700 (Wed, 23 Mar 2011) | 15 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_support.c fix access to freed memory; various cleanup consolidate free functions - add free_val_rrset, val_free_authentication_chain_structure, clear_query_chain_structure - make free_query_chain_structure actually do free add log message when async query completes free incomplete results to prevent leak use printable name in log message instead of compressed name fix async check loop to handle current item being removed from list add various error checks clear copied ptrs before calling structure free clear next ptrs before calling structure free cancel outstanding queries when freeing query chain ------------------------------------------------------------------------ r5480 | rstory | 2011-03-23 10:25:50 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c fix in_flight count test, bump level of log msg ------------------------------------------------------------------------ r5479 | rstory | 2011-03-23 10:25:37 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c don't loop over queries, _free_qfq_chain does it recursively ------------------------------------------------------------------------ r5478 | rstory | 2011-03-23 10:25:28 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.c don't decompress/alloc 0 byte rdata ------------------------------------------------------------------------ r5477 | rstory | 2011-03-23 10:25:19 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c fix reversed logic test ------------------------------------------------------------------------ r5476 | rstory | 2011-03-23 10:25:06 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c don't try to read empty file ------------------------------------------------------------------------ r5475 | rstory | 2011-03-23 10:24:56 -0700 (Wed, 23 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c clear whole structure (not that it should matter) ------------------------------------------------------------------------ r5474 | tewok | 2011-03-23 08:26:23 -0700 (Wed, 23 Mar 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/Makefile M /trunk/dnssec-tools/tools/demos/README A /trunk/dnssec-tools/tools/demos/rollerd-vastzones A /trunk/dnssec-tools/tools/demos/rollerd-vastzones/Makefile A /trunk/dnssec-tools/tools/demos/rollerd-vastzones/README A /trunk/dnssec-tools/tools/demos/rollerd-vastzones/makezones A /trunk/dnssec-tools/tools/demos/rollerd-vastzones/rundemo A /trunk/dnssec-tools/tools/demos/rollerd-vastzones/save-example.com Added the rollerd-vastzones demo, for running a demo on a large number of zones. ------------------------------------------------------------------------ r5473 | tewok | 2011-03-23 08:06:02 -0700 (Wed, 23 Mar 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/dnssectools.pm If dt_adminmail() is given "nomail" as a recipient, then no message will be sent and success will be returned. ------------------------------------------------------------------------ r5472 | tewok | 2011-03-23 07:58:20 -0700 (Wed, 23 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/dnssectools.pm Fixd e misspleled wrod. ------------------------------------------------------------------------ r5471 | tewok | 2011-03-23 07:53:00 -0700 (Wed, 23 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Allowed for not sending email in KSK phase 5 (based on config settings.) ------------------------------------------------------------------------ r5470 | tewok | 2011-03-22 10:12:36 -0700 (Tue, 22 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/BootStrap.pm M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm Updated version numbers. ------------------------------------------------------------------------ r5469 | tewok | 2011-03-22 10:09:19 -0700 (Tue, 22 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm.in M /trunk/dnssec-tools/tools/modules/defaults.pm M /trunk/dnssec-tools/tools/modules/dnssectools.pm M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/rolllog.pm M /trunk/dnssec-tools/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/modules/rollrec.pm M /trunk/dnssec-tools/tools/modules/timetrans.pm M /trunk/dnssec-tools/tools/modules/tooloptions.pm Updated version numbers. ------------------------------------------------------------------------ r5468 | tewok | 2011-03-22 09:56:14 -0700 (Tue, 22 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lights Updated version numbers. ------------------------------------------------------------------------ r5467 | tewok | 2011-03-22 09:55:26 -0700 (Tue, 22 Mar 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lights Fixed to handle the new (-ish) output from "rollctl -zonestatus" that accounts for split zones. ------------------------------------------------------------------------ r5466 | tewok | 2011-03-22 08:58:25 -0700 (Tue, 22 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Updated the DNSSEC-Tools version number. ------------------------------------------------------------------------ r5465 | tewok | 2011-03-22 08:56:58 -0700 (Tue, 22 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Updated the DNSSEC-Tools version number. ------------------------------------------------------------------------ r5464 | tewok | 2011-03-22 08:56:06 -0700 (Tue, 22 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Updated the DNSSEC-Tools version number. ------------------------------------------------------------------------ r5463 | tewok | 2011-03-22 08:55:10 -0700 (Tue, 22 Mar 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/bubbles M /trunk/dnssec-tools/tools/scripts/cleanarch M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtck M /trunk/dnssec-tools/tools/scripts/dtconf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/dtreqmods M /trunk/dnssec-tools/tools/scripts/dtupdkrf M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/getds M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rolllog M /trunk/dnssec-tools/tools/scripts/rollrec-editor M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/trustman Updated the DNSSEC-Tools version number. Added the copyright header to getdnskeys. ------------------------------------------------------------------------ r5462 | hserus | 2011-03-22 06:38:45 -0700 (Tue, 22 Mar 2011) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/mozilla/comm-central.patch A /trunk/dnssec-tools/apps/mozilla/mozilla-central.patch Add current patches that apply agains the mozilla mercurial repositories ------------------------------------------------------------------------ r5461 | tewok | 2011-03-21 14:50:07 -0700 (Mon, 21 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Modified to have an exit code of 0 when -version is given. ------------------------------------------------------------------------ r5460 | tewok | 2011-03-21 14:41:33 -0700 (Mon, 21 Mar 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Recognize (from rollctl exit codes) when rollerd isn't running or when the config file couldn't be checked. ------------------------------------------------------------------------ r5459 | tewok | 2011-03-21 14:40:22 -0700 (Mon, 21 Mar 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Use more useful exit codes so blinkenlights and other callers can determine why rollctl failed. Changed the exit code to 0 for -version and -help. ------------------------------------------------------------------------ r5458 | tewok | 2011-03-21 13:44:48 -0700 (Mon, 21 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c Added -Version code. ------------------------------------------------------------------------ r5457 | tewok | 2011-03-21 13:17:26 -0700 (Mon, 21 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/getaddr.c M /trunk/dnssec-tools/validator/apps/gethost.c M /trunk/dnssec-tools/validator/apps/getname.c M /trunk/dnssec-tools/validator/apps/getquery.c M /trunk/dnssec-tools/validator/apps/getrrset.c Added -Version code. ------------------------------------------------------------------------ r5456 | tewok | 2011-03-21 10:56:00 -0700 (Mon, 21 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/cleanarch M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtck M /trunk/dnssec-tools/tools/scripts/dtconf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/dtreqmods M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rolllog M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/zonesigner Changed the exit code to 0 for executions when -Version is specified. ------------------------------------------------------------------------ r5455 | hserus | 2011-03-21 08:27:44 -0700 (Mon, 21 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.c Use namecmp instead of memcmp for comparing names ------------------------------------------------------------------------ r5454 | hserus | 2011-03-21 08:27:13 -0700 (Mon, 21 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Minor change to a log message ------------------------------------------------------------------------ r5453 | tewok | 2011-03-21 07:53:36 -0700 (Mon, 21 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/tachk Minor pod fix that used "trustman" instead of "tachk". ------------------------------------------------------------------------ r5452 | tewok | 2011-03-21 07:51:59 -0700 (Mon, 21 Mar 2011) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/tachk Moved version definitions to top of file, as is done with most other DT commands. Listed myself as command POC in the pod (left authorial attribution as WesG.) ------------------------------------------------------------------------ r5451 | tewok | 2011-03-21 07:51:23 -0700 (Mon, 21 Mar 2011) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Moved version definitions to top of file, as is done with most other DT commands. Got rid of a bunch of extraneous spaces. Gave a unified format to each function's header comment. Made some minor grammatical and puncutational fixes to function header comments. Listed myself as command POC in the pod (left authorial attribution as Lindy.) ------------------------------------------------------------------------ r5450 | tewok | 2011-03-21 07:23:11 -0700 (Mon, 21 Mar 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/getds Made a few small changes to the pod. These were punctionanal and formatting changes, not content changes. (Well, one "i.e." -> "in other words" changes, as well.) ------------------------------------------------------------------------ r5448 | tewok | 2011-03-19 10:51:11 -0700 (Sat, 19 Mar 2011) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/cleankrf Fixed to delete obsolete set keyrecs. Previously, these had been recognized as being ripe for deletion, but they weren't being deleted. (Trac ticket #138) ------------------------------------------------------------------------ r5447 | tewok | 2011-03-19 09:15:16 -0700 (Sat, 19 Mar 2011) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Refined the fix from r5423: If keyrec file cannot be found, then it is assumed -genkeys was given. A check is made to see if -genkeys was given. If so, then the new message added in r5423 is not given. ------------------------------------------------------------------------ r5446 | tewok | 2011-03-18 17:06:29 -0700 (Fri, 18 Mar 2011) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/modules/dnssectools.pm Modified dt_adminmail() to enclose the message-opening and message-closing calls in evals. This will protect rollerd from abends in some situations. Fix submitted by Patrick Piper (ppiper@netlinxinc.com). ------------------------------------------------------------------------ r5445 | rstory | 2011-03-17 21:07:54 -0700 (Thu, 17 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c fix level of debug log messages ------------------------------------------------------------------------ r5444 | rstory | 2011-03-17 21:07:45 -0700 (Thu, 17 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c count printf doesn't make sense for async ------------------------------------------------------------------------ r5443 | rstory | 2011-03-17 21:07:38 -0700 (Thu, 17 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c turn on res_io debug when debug_level is 8 or higher ------------------------------------------------------------------------ r5442 | rstory | 2011-03-17 21:07:30 -0700 (Thu, 17 Mar 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_log.c add val_log_highest_debug_level returns the highest debug_level of all log targets ------------------------------------------------------------------------ r5441 | rstory | 2011-03-17 21:07:21 -0700 (Thu, 17 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c fix typo in help text ------------------------------------------------------------------------ r5440 | rstory | 2011-03-17 21:07:13 -0700 (Thu, 17 Mar 2011) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/apps/validator_driver.h M /trunk/dnssec-tools/validator/apps/validator_selftest.c support for asynchronous queries for testsuites - add in_flight/remaining counts to testsuite - add async_status / val_response to testcase struct - add -I/--inflight option to validate - add run_suite_async (only used when --inflight > 1 specified) ------------------------------------------------------------------------ r5439 | rstory | 2011-03-17 21:07:05 -0700 (Thu, 17 Mar 2011) | 8 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_resquery.c add asynchronous val functions - set VAL_QUERY_ASYNC flag when chasing query if set on top query - add val_async_status_free - add val_async_submit - add val_async_async_check - cleanup pending async queries when releasing context - return error if non-async function called for async query ------------------------------------------------------------------------ r5438 | rstory | 2011-03-17 21:06:56 -0700 (Thu, 17 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_resquery.c use async query routines if VAL_QUERY_ASYNC set ------------------------------------------------------------------------ r5437 | rstory | 2011-03-17 21:06:47 -0700 (Thu, 17 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c move duplicated code to new func _free_w_results() ------------------------------------------------------------------------ r5436 | rstory | 2011-03-17 21:06:39 -0700 (Thu, 17 Mar 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_context.h extract context refresh code to val_context.c new: val_refresh_context() and val_create_or_refresh_context() ------------------------------------------------------------------------ r5435 | rstory | 2011-03-17 21:06:30 -0700 (Thu, 17 Mar 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c break ask_resolver into 3 pieces _resolver_submit, _resolver_submit_one _resolver_rcv_one ------------------------------------------------------------------------ r5434 | rstory | 2011-03-17 21:06:22 -0700 (Thu, 17 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c move most of ask_cache into new ask_cache_one ------------------------------------------------------------------------ r5433 | rstory | 2011-03-17 21:06:13 -0700 (Thu, 17 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c init/cleanup qc_ea in queries; add query/qfq chain remove/free funcs ------------------------------------------------------------------------ r5432 | rstory | 2011-03-17 21:06:02 -0700 (Thu, 17 Mar 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator-internal.h M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_resquery.h add async send/rcv functions for libval ------------------------------------------------------------------------ r5431 | hserus | 2011-03-16 19:35:00 -0700 (Wed, 16 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Properly initialize rrset variable when trying to identify zonecuts ------------------------------------------------------------------------ r5430 | hserus | 2011-03-16 13:38:28 -0700 (Wed, 16 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Fix improper check of soa bitfield in NSEC3 proofs, ------------------------------------------------------------------------ r5429 | tewok | 2011-03-11 17:53:42 -0800 (Fri, 11 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor M /trunk/dnssec-tools/tools/scripts/signset-editor Used the proper method for exiting the programs. This prevents a segfault. ------------------------------------------------------------------------ r5428 | tewok | 2011-03-11 17:49:16 -0800 (Fri, 11 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Used the proper method for exiting the program. This prevents a segfault. ------------------------------------------------------------------------ r5427 | tewok | 2011-03-11 17:43:16 -0800 (Fri, 11 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/bubbles Used the proper method for exiting the program. This prevents a segfault. ------------------------------------------------------------------------ r5424 | hserus | 2011-03-10 17:50:36 -0800 (Thu, 10 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c Look for correct alias target when returning an answer that does not contain any answers ------------------------------------------------------------------------ r5423 | tewok | 2011-03-08 16:40:30 -0800 (Tue, 08 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner If keyrec file cannot be found, then it is assumed -genkeys was given. ------------------------------------------------------------------------ r5422 | tewok | 2011-03-08 09:29:56 -0800 (Tue, 08 Mar 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Renamed $defkrf to $krf in chkkrf(). This variable was sometimes being used for the default krf and sometimes it wasn't. A more generic name is better in this case. ------------------------------------------------------------------------ r5421 | tewok | 2011-03-08 08:49:12 -0800 (Tue, 08 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Slightly modified a few error messages. ------------------------------------------------------------------------ r5420 | hserus | 2011-03-07 10:30:25 -0800 (Mon, 07 Mar 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/README M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in Enable nsec3, dlv and ipv6 by default ------------------------------------------------------------------------ r5418 | hardaker | 2011-02-28 10:08:13 -0800 (Mon, 28 Feb 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c added a log message when an RRSIG was verified ------------------------------------------------------------------------ r5417 | hardaker | 2011-02-28 10:00:45 -0800 (Mon, 28 Feb 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure.in enable nsec3 by default ------------------------------------------------------------------------ r5416 | hardaker | 2011-02-28 10:00:23 -0800 (Mon, 28 Feb 2011) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS news update for 1.9 ------------------------------------------------------------------------ r5415 | hserus | 2011-02-28 09:34:14 -0800 (Mon, 28 Feb 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.c Grab correct lock while reading negative answer cache ------------------------------------------------------------------------ r5414 | hserus | 2011-02-25 10:30:35 -0800 (Fri, 25 Feb 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c When looking for zonecuts move up the delegation chain when we get an out-of-bailiwick answer for an soa record. ------------------------------------------------------------------------ r5413 | hserus | 2011-02-25 10:28:25 -0800 (Fri, 25 Feb 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.c When searching for soa records look in the negative cache also. ------------------------------------------------------------------------ r5412 | rstory | 2011-02-22 20:47:53 -0800 (Tue, 22 Feb 2011) | 7 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c res_io_read_udp updates: - don't use FIONREAD to figure out how much to read. I was getting 0 bytes for FIONREAD even though select was reporting fd was ready to read. - always allocate fixed buffer of max size. 8k isn't that much, and the memory isn't around that long ------------------------------------------------------------------------ r5411 | rstory | 2011-02-22 20:47:46 -0800 (Tue, 22 Feb 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c add debugging to res_io_select_sockets ------------------------------------------------------------------------ r5410 | rstory | 2011-02-22 20:47:36 -0800 (Tue, 22 Feb 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.h add res_nsfallback_ea; fix potential fd leak ------------------------------------------------------------------------ r5409 | rstory | 2011-02-22 20:47:28 -0800 (Tue, 22 Feb 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/libsres_test.c add missing return to non-void functions ------------------------------------------------------------------------ r5408 | rstory | 2011-02-22 20:47:21 -0800 (Tue, 22 Feb 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/libsres/res_io_manager.c update res_io cancle/finished functionality - add 'all' versions which follow ea_next chain - add missing prototype for cancel function ------------------------------------------------------------------------ r5407 | rstory | 2011-02-22 20:47:13 -0800 (Tue, 22 Feb 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/libsres/res_io_manager.c add functions to check expected_arrival internals - is using a stream transport - has a file descriptor that is active in given fdser ------------------------------------------------------------------------ r5406 | hardaker | 2011-02-21 14:22:11 -0800 (Mon, 21 Feb 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/Makefile.in Added a rule for creating a TAGS file ------------------------------------------------------------------------ r5404 | hardaker | 2011-02-14 16:27:06 -0800 (Mon, 14 Feb 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rr-dnssec.t remove bogus test test ------------------------------------------------------------------------ r5403 | hardaker | 2011-02-14 16:25:58 -0800 (Mon, 14 Feb 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm Update Fast.pm Version Number: 1.15 ------------------------------------------------------------------------ r5402 | hardaker | 2011-02-14 16:25:35 -0800 (Mon, 14 Feb 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rr-dnssec.t patch from Sebastian Castro to fix NSEC/NSEC3/SSHFP parsing with ending comments ------------------------------------------------------------------------ r5401 | tewok | 2011-02-09 07:07:36 -0800 (Wed, 09 Feb 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Renamed -exitcode to -xc, so name shrinkage doesn't collide with -endtime. I think -e for -endtime is likely fairly widely used. ------------------------------------------------------------------------ r5400 | tewok | 2011-02-07 16:33:09 -0800 (Mon, 07 Feb 2011) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Slightly reworked how zone serial numbers are incremented. This moves the increment into a more logical position in the logic flow. It also allows zonesigner to work more easily with some IPAM tools. (Thanks to Patrick Piper for pointing out the problem and working with me to get this fix tested.) ------------------------------------------------------------------------ r5399 | tewok | 2011-02-07 13:40:25 -0800 (Mon, 07 Feb 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Adjusted the pod for -exitcode. ------------------------------------------------------------------------ r5398 | tewok | 2011-02-07 13:35:09 -0800 (Mon, 07 Feb 2011) | 19 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Gave each exit() call a unique exit code. Most exit calls were using 1 as the exit code; this has changed so that there are very few duplicated exit codes. The handlers for -verbose, -version, and -exitcode all use the same exit number. The new exit numbers are mostly ascending through the code. Added the -exitcode option. This entailed: - adding the option itself - adding an array of exit messages, indexed by exit number - fixed an incorrect error message - added showexitcode() to handle the option - added pod describing -exitcode Changed a reference from "$opts{'zskcur'}" to "$opts{'zskpub'}" in some error-checking code. Fixed a comment to refer to named-checkzone instead of dnssec-checkzone. ------------------------------------------------------------------------ r5397 | tewok | 2011-02-07 08:15:32 -0800 (Mon, 07 Feb 2011) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added the -phase option to provide a clearer means of requesting the various rollover actions. This involved: - adding handling of the new option - moving recognition of -newpubksk and -usezskpub in optsandargs()` - pod describing the new option Fixed a grammo in a comment. ------------------------------------------------------------------------ r5396 | tewok | 2011-01-31 14:05:52 -0800 (Mon, 31 Jan 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/README M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-example.com M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-test.com M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/rundemo M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-demo-smallset.rollrec M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-demo.rollrec M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-demo.rollrec M /trunk/dnssec-tools/tools/demos/rollerd-subdirs/save-demo.rollrec Added zonename fields to the rollrec entries. ------------------------------------------------------------------------ r5395 | tewok | 2011-01-31 13:47:48 -0800 (Mon, 31 Jan 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-demo.rollrec Added zonename fields to rollrec entries. ------------------------------------------------------------------------ r5394 | tewok | 2011-01-26 08:54:31 -0800 (Wed, 26 Jan 2011) | 9 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added support for -rollall and -rollzone commands. In skipnow(), commented out the setting of the kskphase and zskphase rollrec fields to 0. When a zone was marked as a skip zone (by rollctl), these lines were forcing the zone to drop out of whatever rollover state they were in. This is probably not the right thing to do. (The "probably" is why the lines were commented out, rather than being deleted.) ------------------------------------------------------------------------ r5393 | tewok | 2011-01-26 08:49:34 -0800 (Wed, 26 Jan 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Added -rollall and -rollzone commands. Fixed the example in the -skipzone pod. ------------------------------------------------------------------------ r5392 | tewok | 2011-01-26 08:44:11 -0800 (Wed, 26 Jan 2011) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added support for rollall and rollzone commands. Renamed ROLLCMD_ROLLALL to ROLLCMD_ROLLALLZSKS to match its actual functionality. Fixed a typo and some pod formatting.. ------------------------------------------------------------------------ r5391 | hardaker | 2011-01-25 15:50:21 -0800 (Tue, 25 Jan 2011) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c Made log_insert default to the default log_head if NULL is specified ------------------------------------------------------------------------ r5390 | hardaker | 2011-01-25 15:50:14 -0800 (Tue, 25 Jan 2011) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm patch from CPAN bug #60144 to fix generation lines ------------------------------------------------------------------------ r5388 | tewok | 2011-01-14 10:02:23 -0800 (Fri, 14 Jan 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Added validation for the log_tz config field. ------------------------------------------------------------------------ r5387 | tewok | 2011-01-14 10:01:44 -0800 (Fri, 14 Jan 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Added support for initializing the log_tz field in the config file. ------------------------------------------------------------------------ r5386 | tewok | 2011-01-14 10:00:18 -0800 (Fri, 14 Jan 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Added support for setting rollerd's logging timezone. Fixed a typo in a comment. ------------------------------------------------------------------------ r5385 | tewok | 2011-01-14 09:59:35 -0800 (Fri, 14 Jan 2011) | 15 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added support for the logging timezone: Added the -logtz option for specifying the logging timestamp. The logging timezone is set according to the -logtz command-line option, the config file, or the DNSSEC-Tools default. The logging timezone is given in the start-up log output. Added an interface so rollctl can change the timezone. Modified optsandargs() to only exit after displaying all option-related error messages, rather than exiting on the first error found. ------------------------------------------------------------------------ r5384 | tewok | 2011-01-14 09:54:11 -0800 (Fri, 14 Jan 2011) | 9 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rolllog.pm Added rolllog_gettz() and rolllog_settz() for the logging timezone. Modified rolllog_str() to use the appropriate function for getting the timestamp, based on which timezone to use. Added pod about the new interfaces. ------------------------------------------------------------------------ r5383 | tewok | 2011-01-14 09:52:23 -0800 (Fri, 14 Jan 2011) | 12 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added various entry points and variables for supporting the new log_tz configuration option: $ROLLCMD_LOGTZ $ROLLCMD_RC_BADTZ ROLLCMD_LOGTZ ROLLCMD_RC_BADTZ rollcmd_logtz This also required renumbering a bunch of the $ROLLCMD_RC_ error values. ------------------------------------------------------------------------ r5382 | tewok | 2011-01-14 09:49:20 -0800 (Fri, 14 Jan 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Added an entry for logtz. ------------------------------------------------------------------------ r5381 | tewok | 2011-01-14 09:48:48 -0800 (Fri, 14 Jan 2011) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Added a default for log_tz. Fixed a typo in a comment and in the pod. ------------------------------------------------------------------------ r5380 | tewok | 2011-01-14 09:46:56 -0800 (Fri, 14 Jan 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod Added a default log_tz value to the conf file, and a description of log_tz to the pod file. ------------------------------------------------------------------------ r5379 | tewok | 2011-01-10 13:55:03 -0800 (Mon, 10 Jan 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Added support for the new roll_phasemsg config field. ------------------------------------------------------------------------ r5378 | tewok | 2011-01-10 13:50:48 -0800 (Mon, 10 Jan 2011) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Support creation of DNSEC-Tools config files with the roll-phasemsg field. Clarified the pod for the -algorithm option. ------------------------------------------------------------------------ r5377 | tewok | 2011-01-10 12:57:34 -0800 (Mon, 10 Jan 2011) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Added a default for the roll_phasemsg config option. ------------------------------------------------------------------------ r5376 | tewok | 2011-01-10 11:27:18 -0800 (Mon, 10 Jan 2011) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Deleted a "my" to prevent a warning about a hidden variable. ------------------------------------------------------------------------ r5374 | hardaker | 2011-01-04 10:36:36 -0800 (Tue, 04 Jan 2011) | 1 line Changed paths: M /trunk/dnssec-tools/COPYING M /trunk/dnssec-tools/INSTALL M /trunk/dnssec-tools/README M /trunk/dnssec-tools/apps/mozilla/README.firefox M /trunk/dnssec-tools/apps/mozilla/README.nspr M /trunk/dnssec-tools/apps/mozilla/README.xulrunner M /trunk/dnssec-tools/apps/sendmail/README M /trunk/dnssec-tools/podmantex M /trunk/dnssec-tools/podtrans M /trunk/dnssec-tools/testing/README M /trunk/dnssec-tools/tools/Makefile.PL M /trunk/dnssec-tools/tools/convertar/Makefile.PL M /trunk/dnssec-tools/tools/convertar/convertar M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Makefile.PL M /trunk/dnssec-tools/tools/demos/Makefile M /trunk/dnssec-tools/tools/demos/README M /trunk/dnssec-tools/tools/demos/rollerd-basic/Makefile M /trunk/dnssec-tools/tools/demos/rollerd-basic/README M /trunk/dnssec-tools/tools/demos/rollerd-basic/phaser M /trunk/dnssec-tools/tools/demos/rollerd-basic/rundemo M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/Makefile M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/README M /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/rundemo M /trunk/dnssec-tools/tools/demos/rollerd-split-view/Makefile M /trunk/dnssec-tools/tools/demos/rollerd-split-view/README M /trunk/dnssec-tools/tools/demos/rollerd-split-view/phaser M /trunk/dnssec-tools/tools/demos/rollerd-split-view/rundemo M /trunk/dnssec-tools/tools/dnspktflow/Makefile.PL M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/donuts/Makefile.PL M /trunk/dnssec-tools/tools/donuts/Rule.pm M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/donuts/donutsd M /trunk/dnssec-tools/tools/donuts/rules/check_nameservers.txt M /trunk/dnssec-tools/tools/donuts/rules/dns.errors.txt M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/nsec_check.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt M /trunk/dnssec-tools/tools/drawvalmap/Makefile.PL M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap M /trunk/dnssec-tools/tools/etc/Makefile.PL M /trunk/dnssec-tools/tools/etc/README M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod M /trunk/dnssec-tools/tools/logwatch/README M /trunk/dnssec-tools/tools/maketestzone/Makefile.PL M /trunk/dnssec-tools/tools/maketestzone/maketestzone M /trunk/dnssec-tools/tools/mapper/Makefile.PL M /trunk/dnssec-tools/tools/mapper/mapper M /trunk/dnssec-tools/tools/modules/BootStrap.pm M /trunk/dnssec-tools/tools/modules/Makefile.PL M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm M /trunk/dnssec-tools/tools/modules/README M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm M /trunk/dnssec-tools/tools/modules/conf.pm.in M /trunk/dnssec-tools/tools/modules/defaults.pm M /trunk/dnssec-tools/tools/modules/dnssectools.pm M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/keyrec.pod M /trunk/dnssec-tools/tools/modules/rolllog.pm M /trunk/dnssec-tools/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/modules/rollrec.pm M /trunk/dnssec-tools/tools/modules/rollrec.pod M /trunk/dnssec-tools/tools/modules/tests/Makefile.PL M /trunk/dnssec-tools/tools/modules/tests/README M /trunk/dnssec-tools/tools/modules/tests/test-conf M /trunk/dnssec-tools/tools/modules/tests/test-keyrec M /trunk/dnssec-tools/tools/modules/tests/test-rollmgr M /trunk/dnssec-tools/tools/modules/tests/test-rollrec M /trunk/dnssec-tools/tools/modules/tests/test-timetrans M /trunk/dnssec-tools/tools/modules/tests/test-toolopts1 M /trunk/dnssec-tools/tools/modules/tests/test-toolopts2 M /trunk/dnssec-tools/tools/modules/tests/test-toolopts3 M /trunk/dnssec-tools/tools/modules/timetrans.pm M /trunk/dnssec-tools/tools/modules/tooloptions.pm M /trunk/dnssec-tools/tools/scripts/Makefile.PL M /trunk/dnssec-tools/tools/scripts/README M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/bubbles M /trunk/dnssec-tools/tools/scripts/cleanarch M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtck M /trunk/dnssec-tools/tools/scripts/dtconf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/dtreqmods M /trunk/dnssec-tools/tools/scripts/dtupdkrf M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/getds M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lights M /trunk/dnssec-tools/tools/scripts/lsdnssec M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rolllog M /trunk/dnssec-tools/tools/scripts/rollrec-editor M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/trustman M /trunk/dnssec-tools/tools/scripts/zonesigner M /trunk/dnssec-tools/validator/README M /trunk/dnssec-tools/validator/apps/README M /trunk/dnssec-tools/validator/apps/getaddr.c M /trunk/dnssec-tools/validator/apps/gethost.c M /trunk/dnssec-tools/validator/apps/getname.c M /trunk/dnssec-tools/validator/apps/getquery.c M /trunk/dnssec-tools/validator/apps/getrrset.c M /trunk/dnssec-tools/validator/apps/libsres_test.c M /trunk/dnssec-tools/validator/apps/libval_check_conf.c M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/apps/validator_driver.h M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/include/validator/val_errors.h M /trunk/dnssec-tools/validator/include/validator/validator-internal.h M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libsres/res_mkquery.h M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libsres/res_support.c M /trunk/dnssec-tools/validator/libsres/res_support.h M /trunk/dnssec-tools/validator/libval/README M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_assertion.h M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_cache.h M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_context.h M /trunk/dnssec-tools/validator/libval/val_crypto.c M /trunk/dnssec-tools/validator/libval/val_crypto.h M /trunk/dnssec-tools/validator/libval/val_get_rrset.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_parse.c M /trunk/dnssec-tools/validator/libval/val_parse.h M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_resquery.h M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_support.h M /trunk/dnssec-tools/validator/libval/val_verify.c M /trunk/dnssec-tools/validator/libval/val_verify.h M /trunk/dnssec-tools/validator/libval/val_x_query.c 2011 copyright update ------------------------------------------------------------------------ r5371 | tewok | 2010-11-25 17:06:28 -0800 (Thu, 25 Nov 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added the -phasemsg option to support the roll_phasemsg config option. ------------------------------------------------------------------------ r5370 | tewok | 2010-11-25 17:03:35 -0800 (Thu, 25 Nov 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added support for the roll_phasemsg command. ------------------------------------------------------------------------ r5369 | tewok | 2010-11-25 17:01:20 -0800 (Thu, 25 Nov 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Added the -phasemsg option to tell rollerd to set the value for roll_phasemsg. ------------------------------------------------------------------------ r5368 | tewok | 2010-11-25 14:55:19 -0800 (Thu, 25 Nov 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod Added support for roll_phasemsg. ------------------------------------------------------------------------ r5367 | rstory | 2010-11-22 17:55:02 -0800 (Mon, 22 Nov 2010) | 1 line Changed paths: M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in add --disable-bind-checks to, uh, disable bind checks ------------------------------------------------------------------------ r5365 | tewok | 2010-11-17 13:55:27 -0800 (Wed, 17 Nov 2010) | 12 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Fixed option processing so the zonesigner line in the config file is seen. Fixed the way external commands are executed so errors are properly recognized. Moved a couple argument-processing calls from main() to optsandargs(). Stop adding status lines to the log when "rollctl -zonestatus" is executed. These lines are just commented out for now, in case popular acclaim is for their restoration. ------------------------------------------------------------------------ r5364 | hserus | 2010-11-15 10:50:24 -0800 (Mon, 15 Nov 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Fix logic for checking if a bit is set in the NSEC bitmap ------------------------------------------------------------------------ r5363 | hserus | 2010-11-15 10:47:58 -0800 (Mon, 15 Nov 2010) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_resquery.h Define a macro for filtering types that cannot be followed using CNAMEs/DNAMEs. Use this macro while reading data from cache, while identifying the answer kind, and while digesting the OTW response. Ensure that we properly consume saved referral information when we are returning a hand-crafted error response. ------------------------------------------------------------------------ r5362 | tewok | 2010-11-11 13:44:30 -0800 (Thu, 11 Nov 2010) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed a bug involving the zone name not being specified on the command line. This usage "zonesigner foo.com" will work, as long as foo.com is the zone file and also the zone name. This usage "zonesigner ../zones/foo.com" will try to use "../zones/foo.com" as the zone name. The fix uses the last path element as the zone name, rather than the whole path name. Fixed three typos. ------------------------------------------------------------------------ r5361 | tewok | 2010-11-11 12:40:44 -0800 (Thu, 11 Nov 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Add our key-arching program to the PAR inclusions. ------------------------------------------------------------------------ r5360 | hserus | 2010-11-05 12:04:11 -0700 (Fri, 05 Nov 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.c Don't match cnames/dnames in cache with queries for records that should not exist with cnames/dnames ------------------------------------------------------------------------ r5359 | rstory | 2010-11-05 11:28:25 -0700 (Fri, 05 Nov 2010) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c move debug outside conditional ------------------------------------------------------------------------ r5358 | rstory | 2010-11-05 11:28:18 -0700 (Fri, 05 Nov 2010) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/libsres_test.c M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/libsres/res_io_manager.c add prototype for res_async_query_free, use instead of res_free_ea_list ------------------------------------------------------------------------ r5357 | rstory | 2010-11-05 11:28:09 -0700 (Fri, 05 Nov 2010) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/libsres_test.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.c check for bad fd before using FD_* macros; fix compiler warnings ------------------------------------------------------------------------ r5356 | hserus | 2010-11-05 10:30:10 -0700 (Fri, 05 Nov 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_support.c Include arpa/inet.h for inet_pton() ------------------------------------------------------------------------ r5355 | rstory | 2010-11-05 08:22:51 -0700 (Fri, 05 Nov 2010) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c misc cleanup - wrap macro in do while(0) - add res_free_ea_list - minimize time lock held during cleanup - don't free lock if we immediately try to reaquire it ------------------------------------------------------------------------ r5354 | rstory | 2010-11-05 08:22:39 -0700 (Fri, 05 Nov 2010) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_query.c free transaction resources before returning from get() ------------------------------------------------------------------------ r5353 | rstory | 2010-11-05 08:22:26 -0700 (Fri, 05 Nov 2010) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/libsres_test.c M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/libsres/res_io_manager.c add functions to query/set res_io_debug ------------------------------------------------------------------------ r5352 | rstory | 2010-11-05 08:22:10 -0700 (Fri, 05 Nov 2010) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/Makefile.in A /trunk/dnssec-tools/validator/apps/libsres_test.c M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/libsres/res_io_manager.c add asynchronous api and test app ------------------------------------------------------------------------ r5351 | rstory | 2010-11-05 08:20:09 -0700 (Fri, 05 Nov 2010) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/libsres/res_support.c M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_support.h move parse_name_server from libval to libsres - change prototype; return ptr to nameserver, instead of having a pointer to a pointer as a parameter - make create_nsaddr_array a function ------------------------------------------------------------------------ r5350 | rstory | 2010-11-05 08:19:52 -0700 (Fri, 05 Nov 2010) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.h update select related functions - add handling of timeout and nfds in new res_io_select_info - call res_io_select_info from res_io_collect_sockets - flush debug before calling select ------------------------------------------------------------------------ r5349 | hserus | 2010-11-05 08:02:07 -0700 (Fri, 05 Nov 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_cache.c Decrement the rrset TTL to reflect the actual outstanding time within the cache ------------------------------------------------------------------------ r5348 | rstory | 2010-11-05 08:01:02 -0700 (Fri, 05 Nov 2010) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c update res_io_get_a_response - only allocate space for one nameserver for response - skip cancelled/expired attempts ------------------------------------------------------------------------ r5347 | rstory | 2010-11-05 08:00:49 -0700 (Fri, 05 Nov 2010) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c overhaul res_io_read - loop over ea_list instead of all possible file descriptors - change prototype from returning void to integer count of the number of sockets that were read from - close socket when switching to tcp ------------------------------------------------------------------------ r5346 | rstory | 2010-11-05 08:00:35 -0700 (Fri, 05 Nov 2010) | 9 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c overhaul transaction queue handling - use ea_remaining_time of -1 to indicate cancel/expired attempt, do not remove from the transaction list - break up res_io_check - new function res_io_next_address to move to new name server (reduces redundant/copied code) - res_io_check_one, called by res_io_check in a loop, handles one transaction at a time (prep for async patches) ------------------------------------------------------------------------ r5345 | rstory | 2010-11-05 08:00:20 -0700 (Fri, 05 Nov 2010) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c check for bad transaction id before getting lock ------------------------------------------------------------------------ r5344 | rstory | 2010-11-05 08:00:07 -0700 (Fri, 05 Nov 2010) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c rename res_timeout() -> res_get_timeout() ------------------------------------------------------------------------ r5343 | rstory | 2010-11-05 07:59:53 -0700 (Fri, 05 Nov 2010) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c move send specific code into res_io_send ------------------------------------------------------------------------ r5342 | rstory | 2010-11-05 07:59:36 -0700 (Fri, 05 Nov 2010) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c merge two node creation calls into one earlier call ------------------------------------------------------------------------ r5341 | tewok | 2010-11-04 09:08:05 -0700 (Thu, 04 Nov 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lights Used the proper method for exiting the program. This prevents a segfault. ------------------------------------------------------------------------ r5340 | hserus | 2010-11-04 07:54:10 -0700 (Thu, 04 Nov 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/README Changed copyright date ------------------------------------------------------------------------ r5338 | tewok | 2010-11-03 14:02:45 -0700 (Wed, 03 Nov 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL New command to provide a very simple GUI summary of zone rollover states. ------------------------------------------------------------------------ r5337 | tewok | 2010-11-03 14:01:04 -0700 (Wed, 03 Nov 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO M /trunk/dnssec-tools/tools/scripts/README New command to provide a very simple GUI summary of zone rollover states. ------------------------------------------------------------------------ r5336 | tewok | 2010-11-03 14:00:12 -0700 (Wed, 03 Nov 2010) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/lights New command to provide a very simple GUI summary of zone rollover states. ------------------------------------------------------------------------ r5335 | tewok | 2010-11-03 10:53:10 -0700 (Wed, 03 Nov 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/bubbles Fixed a minor comment error. ------------------------------------------------------------------------ r5334 | tewok | 2010-10-29 11:56:04 -0700 (Fri, 29 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/testing/t/030trustman.t Changed "trustmand" to "trustman" in an output line ------------------------------------------------------------------------ r5333 | tewok | 2010-10-29 11:55:34 -0700 (Fri, 29 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/testing/t/050trustman-rollerd.t Changed "trustmand" to "trustman" in an output line. ------------------------------------------------------------------------ r5332 | hserus | 2010-10-28 23:02:24 -0700 (Thu, 28 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c In is_trusted_key() look for multiple matching trust anchors within the keyset. ------------------------------------------------------------------------ r5331 | hserus | 2010-10-28 22:56:55 -0700 (Thu, 28 Oct 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c For a keyset containing a locally configured TA, set the assertion status to VAL_AC_TRUST only if the assertion was verified by the TA. ------------------------------------------------------------------------ r5330 | tewok | 2010-10-28 11:56:07 -0700 (Thu, 28 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in dnssec-checkzone -> named-checkzone ------------------------------------------------------------------------ r5329 | hserus | 2010-10-22 11:16:51 -0700 (Fri, 22 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Perform more sanity check of SOA record returned for DS request. ------------------------------------------------------------------------ r5328 | hserus | 2010-10-22 07:31:26 -0700 (Fri, 22 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c Set domain name string size to NS_MAXDNAME instead of arbitrarily limiting it to 100 bytes. ------------------------------------------------------------------------ r5327 | hserus | 2010-10-22 07:28:02 -0700 (Fri, 22 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c Don't return EAI_FAIL if getservbyport() fails since we may still have an address to work with. ------------------------------------------------------------------------ r5326 | hserus | 2010-10-21 13:31:05 -0700 (Thu, 21 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Try validating through dlv if our local TA is broken and we only prefer the closest TA. ------------------------------------------------------------------------ r5325 | hserus | 2010-10-21 10:18:08 -0700 (Thu, 21 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c In val_getnameinfo() use different port type based on address family ------------------------------------------------------------------------ r5324 | hserus | 2010-10-21 07:52:25 -0700 (Thu, 21 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c Slight modification to getnameinfo() to ensure that we don't use an uninitialized variable. ------------------------------------------------------------------------ r5323 | hserus | 2010-10-21 07:46:43 -0700 (Thu, 21 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c Replace inet_ntoa with inet_ntop ------------------------------------------------------------------------ r5322 | tewok | 2010-10-20 11:54:27 -0700 (Wed, 20 Oct 2010) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-split-view/Makefile M /trunk/dnssec-tools/tools/demos/rollerd-split-view/README M /trunk/dnssec-tools/tools/demos/rollerd-split-view/save-demo.rollrec Made this demo use subdirectories for the two views. Without these subdirs, the keyset and dsset files were being stomped with every zone signing. Renamed the example.com zones to make it easier to see what's happening. ------------------------------------------------------------------------ r5321 | hserus | 2010-10-20 09:52:19 -0700 (Wed, 20 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/spfdnssec/install.rdf The spfdnssec extension works until Thuderbird version 2.0.0.24 ------------------------------------------------------------------------ r5320 | hserus | 2010-10-20 07:49:25 -0700 (Wed, 20 Oct 2010) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Fixed memory leak when re-reading policy files (e.g. if app_policy is set) Renamed dnsval_list variable to dlist to keep it distinct from struct dnsval_list ------------------------------------------------------------------------ r5319 | rstory | 2010-10-19 18:16:33 -0700 (Tue, 19 Oct 2010) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c rearrange conditional to performal local checks before function call ------------------------------------------------------------------------ r5318 | rstory | 2010-10-19 18:05:29 -0700 (Tue, 19 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in update version in configure (was 1.4.rc!!); regen configure with autoconf 2.59 (per config.in req; was 2.61) ------------------------------------------------------------------------ r5317 | rstory | 2010-10-19 18:05:07 -0700 (Tue, 19 Oct 2010) | 1 line Changed paths: M /trunk/dnssec-tools/dist/dnssec-tools.spec sync rpm spec file with fedora koji ------------------------------------------------------------------------ r5316 | rstory | 2010-10-19 18:04:53 -0700 (Tue, 19 Oct 2010) | 1 line Changed paths: M /trunk/dnssec-tools/configure.in distinguish between required/recommened perl modules ------------------------------------------------------------------------ r5315 | rstory | 2010-10-19 18:04:43 -0700 (Tue, 19 Oct 2010) | 1 line Changed paths: M /trunk/dnssec-tools/configure.in add checks for dnssec keygen, signzone, checkzone ------------------------------------------------------------------------ r5314 | hserus | 2010-10-19 14:16:00 -0700 (Tue, 19 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Fix memory leak when checking for provably insecure condition. ------------------------------------------------------------------------ r5313 | hserus | 2010-10-19 13:43:45 -0700 (Tue, 19 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Use zonecut information from rrsig whenever available. ------------------------------------------------------------------------ r5312 | hserus | 2010-10-19 13:41:33 -0700 (Tue, 19 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c Initialize response structure to zeros. ------------------------------------------------------------------------ r5311 | hserus | 2010-10-19 13:40:58 -0700 (Tue, 19 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c Fix memory leak while copying respondent server information. ------------------------------------------------------------------------ r5309 | tewok | 2010-10-16 12:53:01 -0700 (Sat, 16 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor Added functionality for renaming a rollrec entry. ------------------------------------------------------------------------ r5308 | tewok | 2010-10-16 12:39:49 -0700 (Sat, 16 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Fixed the regexes in rollrec_rename() to allow spaces in rollrec names. ------------------------------------------------------------------------ r5307 | tewok | 2010-10-15 17:30:30 -0700 (Fri, 15 Oct 2010) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor Reset @rollrecs on rollrec file re-read. Fixed some comments. Reformatted a caveat in the pod. ------------------------------------------------------------------------ r5306 | tewok | 2010-10-14 17:19:10 -0700 (Thu, 14 Oct 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollset Added the -newname option to modify the rollrec's name. Updated the script's version. ------------------------------------------------------------------------ r5305 | tewok | 2010-10-14 15:53:42 -0700 (Thu, 14 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollinit Updated internal versions of these scripts. ------------------------------------------------------------------------ r5304 | tewok | 2010-10-14 15:47:21 -0700 (Thu, 14 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/modules/rollrec.pm Updated internal version fields of these modules. ------------------------------------------------------------------------ r5303 | tewok | 2010-10-14 10:55:23 -0700 (Thu, 14 Oct 2010) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Deleted some unnecessary vertical-spacing comment lines. Deleted an unnecessary return. A few grammar fixes in comments. ------------------------------------------------------------------------ r5302 | tewok | 2010-10-14 10:49:05 -0700 (Thu, 14 Oct 2010) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Added the rollrec_rename() interface. Spacing conformity on some queued-command code. Deleted some unnecessary vertical-spacing comment lines. ------------------------------------------------------------------------ r5301 | hserus | 2010-10-14 06:59:55 -0700 (Thu, 14 Oct 2010) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c - fix potential memleak while freeing up val_result_chain structure - check for DLV ANC proof in the queries_for_query chain as apposed to the query chain ------------------------------------------------------------------------ r5300 | tewok | 2010-10-12 22:21:49 -0700 (Tue, 12 Oct 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollchk Divided the checks into three groups. Added a check to ensure there aren't any duplicated rollrec names. ------------------------------------------------------------------------ r5299 | hserus | 2010-10-12 11:37:44 -0700 (Tue, 12 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.c Check proper message size bounds when parsing response data ------------------------------------------------------------------------ r5298 | hserus | 2010-10-12 11:20:03 -0700 (Tue, 12 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c Initialize response structure prior to running test case ------------------------------------------------------------------------ r5297 | tewok | 2010-10-11 09:59:40 -0700 (Mon, 11 Oct 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollinit Added the -rollrec option to allow specification of the rollrec name. Added pod and examples showing use of the -rollrec option. ------------------------------------------------------------------------ r5296 | tewok | 2010-10-11 09:57:36 -0700 (Mon, 11 Oct 2010) | 10 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Add quotes to the displayed rollrec name. This is intended to allow for easier output parsing by other programs. Change the "Name" header to "Rollrec Name". Fix spacing in a few usage lines. Modified the pod to describe the quotes change. ------------------------------------------------------------------------ r5295 | tewok | 2010-10-11 08:17:16 -0700 (Mon, 11 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Harmonized the pod and the help_help() section. ------------------------------------------------------------------------ r5294 | tewok | 2010-10-10 21:35:48 -0700 (Sun, 10 Oct 2010) | 10 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added the "noshow" command to the config file, so that the various columns can be not shown at start-up. Moved column-index calculation to calccols() nad out of disp_menu(). Reordered some conditions in setopt(). Several comment fixes. ------------------------------------------------------------------------ r5293 | tewok | 2010-10-09 21:07:44 -0700 (Sat, 09 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Need to use the rolllog.pm module for a call to rolllog_str(). ------------------------------------------------------------------------ r5292 | tewok | 2010-10-09 09:24:03 -0700 (Sat, 09 Oct 2010) | 14 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Allowed either rollrec name or zonename to be hidden. Two menu items were added to allow for this. Moved all info-stripe fields to the left. Renamed the "Zone Display" menu to just "Display". Added a few separator lines in the Display menu. Reworked how column locations of KSK sets and ZSK sets are calculated. Renamed some variable to better describe their purpose. Renamed disp_sets() to disp_menus(). ------------------------------------------------------------------------ r5291 | hserus | 2010-10-08 22:11:33 -0700 (Fri, 08 Oct 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c Add support to free the complete val_query_chain since we no longer have the free_query_chain() function ------------------------------------------------------------------------ r5290 | hserus | 2010-10-08 22:10:09 -0700 (Fri, 08 Oct 2010) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.h Do away with the free_query_chain() function Removed locks on query structure. Locks on the assertion chain should be sufficient to ensure that no two threads modify the query element at the same time. ------------------------------------------------------------------------ r5289 | hserus | 2010-10-08 22:09:21 -0700 (Fri, 08 Oct 2010) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Fix a memory leak. Properly initialize the soa TTL value. Do away with the free_query_structure Removed locks on query structure. Locks on the assertion chain should be sufficient to ensure that no two threads modify the query element at the same time. ------------------------------------------------------------------------ r5288 | hserus | 2010-10-08 22:07:41 -0700 (Fri, 08 Oct 2010) | 7 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c When resetting a query do not free the query chain, just free the internal structure. Removed locks on query structure. Locks on the assertion chain should be sufficient to ensure that no two threads modify the query element at the same time. Fix a memory leak. ------------------------------------------------------------------------ r5287 | tewok | 2010-10-08 11:39:13 -0700 (Fri, 08 Oct 2010) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/demos/rollerd-split-view A /trunk/dnssec-tools/tools/demos/rollerd-split-view/Makefile A /trunk/dnssec-tools/tools/demos/rollerd-split-view/README A /trunk/dnssec-tools/tools/demos/rollerd-split-view/phaser A /trunk/dnssec-tools/tools/demos/rollerd-split-view/rc.blinkenlights A /trunk/dnssec-tools/tools/demos/rollerd-split-view/rundemo A /trunk/dnssec-tools/tools/demos/rollerd-split-view/save-demo.rollrec A /trunk/dnssec-tools/tools/demos/rollerd-split-view/save-subdom.example.com A /trunk/dnssec-tools/tools/demos/rollerd-split-view/save-subdom.in.example.com A /trunk/dnssec-tools/tools/demos/rollerd-split-view/save-test.com Added a demo to show split-view usage. ------------------------------------------------------------------------ r5286 | hserus | 2010-10-08 10:04:58 -0700 (Fri, 08 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_crypto.c M /trunk/dnssec-tools/validator/libval/val_resquery.c Fix couple of memory leaks ------------------------------------------------------------------------ r5285 | hserus | 2010-10-07 07:36:41 -0700 (Thu, 07 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c Acuire the transaction array mutex before reading from the array. ------------------------------------------------------------------------ r5284 | hserus | 2010-10-07 07:34:36 -0700 (Thu, 07 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_query.c Set default valuse for certain variables. ------------------------------------------------------------------------ r5283 | hserus | 2010-10-07 07:33:48 -0700 (Thu, 07 Oct 2010) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.c Don't modify the cache when we don't hold an exclusive lock (i.e. during a catch fetch operation). The cache is only updated during a stow() operation, when we actually hold the exclusive lock. ------------------------------------------------------------------------ r5282 | hserus | 2010-10-06 07:35:45 -0700 (Wed, 06 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap Add support for exporting graph as png ------------------------------------------------------------------------ r5280 | hardaker | 2010-10-05 11:38:57 -0700 (Tue, 05 Oct 2010) | 1 line Changed paths: M /trunk/dnssec-tools/apps/ssh/README.ssh M /trunk/dnssec-tools/apps/ssh/ssh-dnssec.pat update for new openssh 5.6 ------------------------------------------------------------------------ r5279 | hserus | 2010-10-05 10:20:59 -0700 (Tue, 05 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap Remove debug statements ------------------------------------------------------------------------ r5278 | hserus | 2010-10-05 10:19:48 -0700 (Tue, 05 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap Fix improper array use ------------------------------------------------------------------------ r5277 | tewok | 2010-10-05 09:07:40 -0700 (Tue, 05 Oct 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Add the rollerd and DNSSEC-Tools versions to the status output sent to rollctl. ------------------------------------------------------------------------ r5276 | hserus | 2010-09-30 06:28:45 -0700 (Thu, 30 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Set qc_flags as opposed to qfq_flags ------------------------------------------------------------------------ r5275 | hserus | 2010-09-29 10:38:43 -0700 (Wed, 29 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Set the correct flag to re-enable EDNS0 when previously disabled ------------------------------------------------------------------------ r5274 | hserus | 2010-09-29 08:17:55 -0700 (Wed, 29 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/NEWS Replaced tabs with spaces for consistent formatting ------------------------------------------------------------------------ r5273 | hserus | 2010-09-29 07:49:33 -0700 (Wed, 29 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_policy.c Use the global policy knob "closest-ta-only yes/no" to control if validation should continue above a broken TA. ------------------------------------------------------------------------ r5272 | hserus | 2010-09-29 07:02:49 -0700 (Wed, 29 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/install.rdf Supports version 4.0.+ too ------------------------------------------------------------------------ r5271 | hserus | 2010-09-29 07:00:14 -0700 (Wed, 29 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc Removed VAL_QFLAGS_STATE; added VAL_QUERY_REFRESH_QCACHE ------------------------------------------------------------------------ r5270 | hserus | 2010-09-29 06:34:13 -0700 (Wed, 29 Sep 2010) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_cache.c - Add support to force re-querying of records using the VAL_QUERY_REFRESH_QCACHE flag - Do DLV validation only if the ZSE for that zone is validate - Add VAL_IGNORE_VALIDATION as another case where DLV will be attempted - Allow validation to work for delegations whose ZSE are marked "validate" for a parent zone whose ZSE is marked "ignored" if we have the TA configured for the parent. ------------------------------------------------------------------------ r5269 | hserus | 2010-09-29 06:27:44 -0700 (Wed, 29 Sep 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Rename VAL_QUERY_REFRESH_CACHE to VAL_QUERY_REFRESH_QCACHE so that it is 24 chars long (helps in Net::DNS::SEC::Validator) ------------------------------------------------------------------------ r5268 | hserus | 2010-09-29 06:01:30 -0700 (Wed, 29 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h More restructuring of VAL_QUERY_ flags ------------------------------------------------------------------------ r5266 | hardaker | 2010-09-24 16:02:18 -0700 (Fri, 24 Sep 2010) | 1 line Changed paths: A /trunk/dnssec-tools/dist/update-web-docs a simple script to update man pages ------------------------------------------------------------------------ r5263 | hardaker | 2010-09-24 14:06:42 -0700 (Fri, 24 Sep 2010) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS Update for verison 1.8 ------------------------------------------------------------------------ r5262 | hardaker | 2010-09-24 13:57:18 -0700 (Fri, 24 Sep 2010) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS M /trunk/dnssec-tools/tools/convertar/convertar update convertar version and mention the new feature ------------------------------------------------------------------------ r5261 | hardaker | 2010-09-24 13:51:49 -0700 (Fri, 24 Sep 2010) | 1 line Changed paths: M /trunk/dnssec-tools/ChangeLog Update for verison 1.8 ------------------------------------------------------------------------ r5260 | hardaker | 2010-09-24 13:49:07 -0700 (Fri, 24 Sep 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/mapper/mapper copyright and version updates ------------------------------------------------------------------------ r5259 | hardaker | 2010-09-24 13:48:57 -0700 (Fri, 24 Sep 2010) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS update with new bullets from robert ------------------------------------------------------------------------ r5258 | hardaker | 2010-09-24 13:46:16 -0700 (Fri, 24 Sep 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/convertar M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap M /trunk/dnssec-tools/tools/maketestzone/maketestzone M /trunk/dnssec-tools/tools/mapper/mapper Update Version Number: 1.8 ------------------------------------------------------------------------ r5257 | tewok | 2010-09-24 13:31:40 -0700 (Fri, 24 Sep 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added keyrec_fmtchk() back in, but it should not called by anything other than the dtupdkrf script. ------------------------------------------------------------------------ r5256 | tewok | 2010-09-24 13:30:04 -0700 (Fri, 24 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO M /trunk/dnssec-tools/tools/scripts/README A /trunk/dnssec-tools/tools/scripts/dtupdkrf Added dtupdkrf to bring an old keyrec file to the current format. ------------------------------------------------------------------------ r5255 | tewok | 2010-09-24 10:48:27 -0700 (Fri, 24 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Fixed a condition in keyrec_filestat(). ------------------------------------------------------------------------ r5254 | hserus | 2010-09-24 09:18:23 -0700 (Fri, 24 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm Update version number ------------------------------------------------------------------------ r5253 | tewok | 2010-09-24 08:59:11 -0700 (Fri, 24 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm.in M /trunk/dnssec-tools/tools/modules/defaults.pm M /trunk/dnssec-tools/tools/modules/dnssectools.pm M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/rolllog.pm M /trunk/dnssec-tools/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/modules/rollrec.pm M /trunk/dnssec-tools/tools/modules/timetrans.pm M /trunk/dnssec-tools/tools/modules/tooloptions.pm Updated version numbers to 1.8. ------------------------------------------------------------------------ r5252 | tewok | 2010-09-24 08:54:43 -0700 (Fri, 24 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL M /trunk/dnssec-tools/tools/scripts/README Updated copyright date. ------------------------------------------------------------------------ r5251 | tewok | 2010-09-24 08:53:07 -0700 (Fri, 24 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/bubbles M /trunk/dnssec-tools/tools/scripts/cleanarch M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtck M /trunk/dnssec-tools/tools/scripts/dtconf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/dtreqmods M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/getds M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lsdnssec M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rolllog M /trunk/dnssec-tools/tools/scripts/rollrec-editor M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/trustman M /trunk/dnssec-tools/tools/scripts/zonesigner Updated DNSSEC-Tools version number to 1.8. ------------------------------------------------------------------------ r5250 | tewok | 2010-09-24 08:44:06 -0700 (Fri, 24 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Added support for zone_errors configuration field. ------------------------------------------------------------------------ r5249 | tewok | 2010-09-24 08:34:18 -0700 (Fri, 24 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/NEWS Added entries for zonesigner, rollerd, blinkenlights, and keyrec.pm. ------------------------------------------------------------------------ r5248 | tewok | 2010-09-24 08:15:06 -0700 (Fri, 24 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added an informational message to the exit if rollerd isn't running. ------------------------------------------------------------------------ r5247 | hserus | 2010-09-24 08:07:48 -0700 (Fri, 24 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/NEWS Update NEWS for 1.8 ------------------------------------------------------------------------ r5246 | tewok | 2010-09-24 07:55:03 -0700 (Fri, 24 Sep 2010) | 21 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Restructured genksks(). Part of this was to add revkeys() to mark a given set of KSKs as revoked. Rework how zonesign() collects KSKs for the command line. Modified expandrevlist() to only add keys once to its big list o' keys. Remove an unnecessary call to keyrec_signset_new() from rollzsk(). Changed several places to use $droprevoked rather than $opts{'droprevoked'}. Added -nodroprevoked and made -droprevoked the default behavior. Changed double-quotes to single-quotes in several places. Renamed setkeytype() to ssetkeytype(). Deleted some dead code. Some comment fixes. ------------------------------------------------------------------------ r5245 | hserus | 2010-09-23 20:50:59 -0700 (Thu, 23 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Don't treat a CNAME/DNAME response for an SOA query as a valid alias chain. ------------------------------------------------------------------------ r5244 | hardaker | 2010-09-23 15:19:37 -0700 (Thu, 23 Sep 2010) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS mention that libval has been updated ------------------------------------------------------------------------ r5243 | hserus | 2010-09-23 13:51:08 -0700 (Thu, 23 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Don't retrieve the zonecut information for a name from its DS proof of non-existance. ------------------------------------------------------------------------ r5242 | hserus | 2010-09-23 13:49:24 -0700 (Thu, 23 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_parse.c Fix parsing of nsec3 records ------------------------------------------------------------------------ r5241 | tewok | 2010-09-23 12:16:27 -0700 (Thu, 23 Sep 2010) | 26 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Removed keyrec_fmtchk() as this is an inappropriate place for these actions to be taken. More importantly, file-use collisions would sometimes result in corrupted files. keyrec_read()'s call to keyrec_fmtchk() was also removed. Added keyrec_filestat() to validate the existence and readability of a keyrec file. As a first step of deprecating keyrec_open() - modified keyrec_open() to call keyrec_filestat() and save the name of the keyrec file - modified keyrec_read() to call open() instead of keyrec_open() and save the name of the keyrec file keyrec_creat() immediately closes the newly created keyrec file. Fixed some comments. Changed several "DNSSEC" and "DNSSEC tools" instances to "DNSSEC-Tools". Modified how some routines manipulate @keyreclines and $keyreclen. Rather than modify it directly, they now manipulate local copies and reassign the whole blob at the end. Reordered some conditionals for easier reading. Removed some dead code. ------------------------------------------------------------------------ r5240 | hserus | 2010-09-23 10:43:38 -0700 (Thu, 23 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Treat responses with only addition section data (e.g. EDNS0 opt records) as empty responses ------------------------------------------------------------------------ r5239 | hardaker | 2010-09-21 21:43:23 -0700 (Tue, 21 Sep 2010) | 1 line Changed paths: M /trunk/dnssec-tools/validator/Makefile.top update the library version number since there has been a lot of changes ------------------------------------------------------------------------ r5238 | hardaker | 2010-09-21 21:43:00 -0700 (Tue, 21 Sep 2010) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/README.firefox notes on the firefox build ------------------------------------------------------------------------ r5237 | hardaker | 2010-09-21 21:42:35 -0700 (Tue, 21 Sep 2010) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/README.firefox M /trunk/dnssec-tools/apps/mozilla/README.nspr M /trunk/dnssec-tools/apps/mozilla/README.xulrunner 2009 -> 2010 copyright dates ------------------------------------------------------------------------ r5236 | hardaker | 2010-09-21 21:42:00 -0700 (Tue, 21 Sep 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow Added a -C option to not cluster stuff. ------------------------------------------------------------------------ r5235 | hardaker | 2010-09-21 21:41:35 -0700 (Tue, 21 Sep 2010) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/README M /trunk/dnssec-tools/apps/mozilla/README.nspr M /trunk/dnssec-tools/apps/mozilla/README.xulrunner Update the build READMEs with various tidbits ------------------------------------------------------------------------ r5234 | hardaker | 2010-09-21 21:41:06 -0700 (Tue, 21 Sep 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/getds fixed fetching the ds for '.' ------------------------------------------------------------------------ r5232 | hserus | 2010-09-21 07:34:38 -0700 (Tue, 21 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc Fix missing 'if' ------------------------------------------------------------------------ r5231 | hserus | 2010-09-21 07:31:22 -0700 (Tue, 21 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc Update for newly defined VAL_QUERY_ and VAL_QFLAGS_ constants. ------------------------------------------------------------------------ r5230 | hserus | 2010-09-20 22:28:35 -0700 (Mon, 20 Sep 2010) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_resquery.h Try to clean up passing of pointers by value and reference in various cases. Use the edns0 size from the name server structure. Set the initial value from the dnsval.conf policy and fallback to smaller values when the query returns with a failure condition. ------------------------------------------------------------------------ r5229 | hserus | 2010-09-20 22:28:15 -0700 (Mon, 20 Sep 2010) | 8 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Try to be more liberal in what we receive when we query zones that are not capable of handling EDNS0. When querying for SOA records be prepared to handle empty non-existence responses in the PNE checks. Try to be more consistent in the definition and use of VAL_QUERY_ flags. Specifically, use qc_flags for user-level flags and qfq_flags for maintainting internal state. Use the correct DLV break-off condition. DLV does not work quite right yet. ------------------------------------------------------------------------ r5228 | hserus | 2010-09-20 22:27:50 -0700 (Mon, 20 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c Added #ifdefs for IPV6-specific code ------------------------------------------------------------------------ r5227 | hserus | 2010-09-20 22:27:22 -0700 (Mon, 20 Sep 2010) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_cache.h Restructured stow_ functions(). This will undergo further changes in the near future such that the cache also keeps track of query flags and EDNS0 information while matching queries. ------------------------------------------------------------------------ r5226 | hserus | 2010-09-20 22:27:05 -0700 (Mon, 20 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Set EDNS0 size in the name server structure. ------------------------------------------------------------------------ r5225 | hserus | 2010-09-20 22:26:42 -0700 (Mon, 20 Sep 2010) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_query.c Store the edns0 size within the the name server structure instead of passing this value explicitly to different functions. Use res_create_query_payload() as the means to create the query payload ------------------------------------------------------------------------ r5224 | hserus | 2010-09-20 22:26:21 -0700 (Mon, 20 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.h Define new function to try different EDNS0 sizes when a query fails. ------------------------------------------------------------------------ r5223 | hserus | 2010-09-20 22:25:42 -0700 (Mon, 20 Sep 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_mkquery.c M /trunk/dnssec-tools/validator/libsres/res_mkquery.h Create a new function to create a query payload on demand. We need this when we're falling back from EDNS0 to non-EDNS0 queries. ------------------------------------------------------------------------ r5222 | hserus | 2010-09-20 22:25:04 -0700 (Mon, 20 Sep 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Restructured query flag definitions. Tried to separate user-defined flags from purely internal state flags. ------------------------------------------------------------------------ r5221 | hserus | 2010-09-20 22:24:48 -0700 (Mon, 20 Sep 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h Store the edns0 size within the the name server structure instead of passing this value explicitly to different functions. ------------------------------------------------------------------------ r5220 | hserus | 2010-09-20 21:38:18 -0700 (Mon, 20 Sep 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/etc/dnsval.conf Replace the dnssec-tools.org TAs with the root TA. Set the zone security expectation accordingly. ------------------------------------------------------------------------ r5219 | rstory | 2010-09-16 13:09:38 -0700 (Thu, 16 Sep 2010) | 2 lines Changed paths: A /trunk/dnssec-tools/dist/macports A /trunk/dnssec-tools/dist/macports/dnssec-tools A /trunk/dnssec-tools/dist/macports/dnssec-tools/Portfile.in A /trunk/dnssec-tools/dist/macports/p5-net-dns-sec A /trunk/dnssec-tools/dist/macports/p5-net-dns-sec/Portfile Initial port files for Net::DNS::SEC and dnssec-tools ------------------------------------------------------------------------ r5218 | tewok | 2010-09-13 06:38:08 -0700 (Mon, 13 Sep 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd In clearzoneerr(), we'll only reset the error count if it isn't zero. Also, we'll log it as TMI instead of ALWAYS. ------------------------------------------------------------------------ r5217 | tewok | 2010-09-12 21:18:10 -0700 (Sun, 12 Sep 2010) | 9 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added support for the per-zone maximum error count in rollrec records. zoneerr() is used to increment a zone's error count, and possibly change a zone to a skip zone. clearzoneerr() is used to reset a zone's error count. This is a start. There are probably additional places where zoneerr() and clearzoneerr() calls should be made. It would probably be good to add a rollctl-based interface for clearing a zone's error count. ------------------------------------------------------------------------ r5216 | tewok | 2010-09-11 16:02:11 -0700 (Sat, 11 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm M /trunk/dnssec-tools/tools/modules/rollrec.pod Added support for the curerrors and maxerrors fields. ------------------------------------------------------------------------ r5215 | tewok | 2010-09-11 10:34:38 -0700 (Sat, 11 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod Fixed field name for zone override. ------------------------------------------------------------------------ r5214 | tewok | 2010-09-11 10:23:22 -0700 (Sat, 11 Sep 2010) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Ensure that we've gotten a keyrec from the file. Fix a comment. Change a couple keyrec_close() calls to keyrec_discard() calls. ------------------------------------------------------------------------ r5213 | tewok | 2010-09-11 10:05:22 -0700 (Sat, 11 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Validate the zone_errors field. ------------------------------------------------------------------------ r5212 | tewok | 2010-09-11 09:43:29 -0700 (Sat, 11 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm M /trunk/dnssec-tools/tools/modules/tooloptions.pm Added support for the zone_errors config field. ------------------------------------------------------------------------ r5211 | tewok | 2010-09-11 09:37:41 -0700 (Sat, 11 Sep 2010) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod Added the zone_errors field. The a zone's count of consecutive errors is exceeded, the zone will be changed to a skip zone. ------------------------------------------------------------------------ r5210 | hardaker | 2010-09-09 18:01:28 -0700 (Thu, 09 Sep 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow Cluster authoritative nodes together ------------------------------------------------------------------------ r5209 | hardaker | 2010-09-09 16:05:28 -0700 (Thu, 09 Sep 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow Darken the color and recognize another set of DNSSEC types ------------------------------------------------------------------------ r5207 | tewok | 2010-09-09 10:34:39 -0700 (Thu, 09 Sep 2010) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added some checks for rollctl execution failures. The one in infostripe() should stop the runaway error messages. Changed a keyrec_close() to keyrec_discard(). ------------------------------------------------------------------------ r5206 | hardaker | 2010-09-07 20:04:56 -0700 (Tue, 07 Sep 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner shorten help string so it fits on the screen. ------------------------------------------------------------------------ r5205 | hardaker | 2010-09-07 20:02:36 -0700 (Tue, 07 Sep 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added useful help messages to suggest adding -genkeys or other ------------------------------------------------------------------------ r5203 | hardaker | 2010-09-07 06:05:48 -0700 (Tue, 07 Sep 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow color secured answers green ------------------------------------------------------------------------ r5202 | hardaker | 2010-09-07 06:05:37 -0700 (Tue, 07 Sep 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm version bump ------------------------------------------------------------------------ r5201 | hardaker | 2010-09-07 06:05:27 -0700 (Tue, 07 Sep 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm Patch from Jacek Zapala to fix mname and rname parsing ------------------------------------------------------------------------ r5200 | hardaker | 2010-09-07 06:05:17 -0700 (Tue, 07 Sep 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow separate out edgecolor selection into a bigger if/else loop ------------------------------------------------------------------------ r5199 | hardaker | 2010-09-07 06:05:09 -0700 (Tue, 07 Sep 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow add a -Q option to not show the edge label number ------------------------------------------------------------------------ r5198 | hardaker | 2010-09-07 06:05:01 -0700 (Tue, 07 Sep 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow Only set the rank direction if the dot layout is used. ------------------------------------------------------------------------ r5197 | hardaker | 2010-09-07 06:04:53 -0700 (Tue, 07 Sep 2010) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS Added notes for the new dnspktflow options. ------------------------------------------------------------------------ r5196 | hardaker | 2010-09-07 06:04:46 -0700 (Tue, 07 Sep 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow Added --node-size for mapping complex zones. ------------------------------------------------------------------------ r5195 | hardaker | 2010-09-07 06:04:36 -0700 (Tue, 07 Sep 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow Added documentation for --layout-style ------------------------------------------------------------------------ r5194 | hardaker | 2010-09-07 06:04:27 -0700 (Tue, 07 Sep 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow added a --layout-style option ------------------------------------------------------------------------ r5193 | tewok | 2010-09-06 15:49:57 -0700 (Mon, 06 Sep 2010) | 19 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm - Fixed keyrec_write() to lock the keyrec file correctly. - Modified how keyrec_fmtchk() handles the kskkey fields in a zone. If a zone has a kskcur, the kskkey will be changed to a kskobs. If the zone doesn't already have a kskcur, the key will be changed to a kskcur. - Added keyrec_curkrf(). To allow this, the keyrec name is saved and cleared whenever the keyrec file is opened or closed. - Adjusted validity checks in keyrec_signset_new(). - Added a few checks to properly handle subordinate signing sets. - Renamed a few variables to better match their purpose. - Moved a variable assignment to provide a (slight) performance increase. - Clarified a number of comments. ------------------------------------------------------------------------ r5192 | tewok | 2010-09-01 08:33:02 -0700 (Wed, 01 Sep 2010) | 10 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm In rollrec_write(), a copy of the in-core rollrec lines is made prior to trying to write the file. This is to keep the data from being mucked with while we're writing it. Added some clarifying parens to a conditional. Lock the rollrec file while we're writing it. ------------------------------------------------------------------------ r5191 | tewok | 2010-09-01 07:51:02 -0700 (Wed, 01 Sep 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/keyarch Only archive obsolete keys and not revoked keys. ------------------------------------------------------------------------ r5190 | tewok | 2010-09-01 07:12:02 -0700 (Wed, 01 Sep 2010) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/krfcheck Handle subordinate signing sets as sets, rather than as keys. ------------------------------------------------------------------------ r5189 | hardaker | 2010-08-31 17:21:46 -0700 (Tue, 31 Aug 2010) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS added note for 1.8 announcement about mapper's node sizes. ------------------------------------------------------------------------ r5188 | hardaker | 2010-08-31 17:21:25 -0700 (Tue, 31 Aug 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper Added a new option --node-size for making "smaller" diagrams. ------------------------------------------------------------------------ r5187 | tewok | 2010-08-31 17:17:24 -0700 (Tue, 31 Aug 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Handle subordinate signing sets as sets rather than as keys. ------------------------------------------------------------------------ r5184 | hardaker | 2010-08-31 15:46:58 -0700 (Tue, 31 Aug 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone fix the issue surrounding only one DS record being generated for future/past dates. ------------------------------------------------------------------------ r5183 | rstory | 2010-08-26 21:38:47 -0700 (Thu, 26 Aug 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/configure.in fix bug#83; don't DEFINE VAL_ROOT_HINTS until after we're done modifying it. ------------------------------------------------------------------------ r5182 | tewok | 2010-08-25 11:19:49 -0700 (Wed, 25 Aug 2010) | 9 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Several changes to keyrec_write: - lock the keyrec file while writing - make a copy of the in-core keyrec data and use that for writing I think these changes may squash a long-term, intermittent problem with keyrec files getting corrupted. ------------------------------------------------------------------------ r5181 | tewok | 2010-08-25 07:33:17 -0700 (Wed, 25 Aug 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Fixed a comment. ------------------------------------------------------------------------ r5179 | tewok | 2010-08-23 12:12:35 -0700 (Mon, 23 Aug 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Minor code-spacing change. Very minor. ------------------------------------------------------------------------ r5178 | hserus | 2010-08-19 06:35:25 -0700 (Thu, 19 Aug 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Proofs in the delegation_info structure need to be handled differently for referrals and for alias chains. ------------------------------------------------------------------------ r5177 | hserus | 2010-08-18 21:12:10 -0700 (Wed, 18 Aug 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator-internal.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_support.h Add better support for proofs accompanying wildcard responses ------------------------------------------------------------------------ r5176 | hardaker | 2010-08-12 15:41:29 -0700 (Thu, 12 Aug 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm Update Fast.pm Version Number: 1.13 ------------------------------------------------------------------------ r5175 | hardaker | 2010-08-12 15:41:20 -0700 (Thu, 12 Aug 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm fix DT bug #84 using the supplied patch but with a white space addition ------------------------------------------------------------------------ r5174 | hardaker | 2010-08-12 15:41:11 -0700 (Thu, 12 Aug 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rr-dnssec.t added a new key record with a ; comment at the end to ensure we ignore ------------------------------------------------------------------------ r5173 | tewok | 2010-08-10 13:31:02 -0700 (Tue, 10 Aug 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Fixed a typo. ------------------------------------------------------------------------ r5171 | tewok | 2010-08-06 10:35:59 -0700 (Fri, 06 Aug 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Slice out zonesigner's entropy messages from zonesigner error output. ------------------------------------------------------------------------ r5170 | hserus | 2010-08-06 07:46:00 -0700 (Fri, 06 Aug 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_crypto.c Fix DSA signature verification (thanks tom.fowler). ------------------------------------------------------------------------ r5169 | hserus | 2010-08-04 10:57:53 -0700 (Wed, 04 Aug 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_crypto.c Set the proper array size while computing and comparing SHA hashes ------------------------------------------------------------------------ r5168 | tewok | 2010-08-03 09:33:06 -0700 (Tue, 03 Aug 2010) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Added support for rsasha256 and rsash512. This support does *not* ensure that the installed version of BIND can handle those algorithms. ------------------------------------------------------------------------ r5167 | baerm | 2010-07-22 21:51:32 -0700 (Thu, 22 Jul 2010) | 5 lines Changed paths: M /trunk/dnssec-tools/testing/TODO M /trunk/dnssec-tools/testing/t/010zonesigner.t M /trunk/dnssec-tools/testing/t/040rollerd.t M /trunk/dnssec-tools/testing/t/050trustman-rollerd.t M /trunk/dnssec-tools/testing/t/dt_testingtools.pl Added path fixes Added work around for newer bind. ------------------------------------------------------------------------ r5165 | hardaker | 2010-07-22 20:12:24 -0700 (Thu, 22 Jul 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm patch from berni to parse KEY records ------------------------------------------------------------------------ r5164 | hserus | 2010-07-22 11:34:20 -0700 (Thu, 22 Jul 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/dnsval.conf.3 M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod s/global-policy/global-options ------------------------------------------------------------------------ r5163 | hserus | 2010-07-20 09:30:29 -0700 (Tue, 20 Jul 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c s/Unsecure/Insecure ------------------------------------------------------------------------ r5162 | hserus | 2010-07-16 09:38:11 -0700 (Fri, 16 Jul 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Fix logic for determining when VAL_QUERY_NO_EDNS0 needs to be reset ------------------------------------------------------------------------ r5161 | hserus | 2010-07-16 08:50:40 -0700 (Fri, 16 Jul 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c If we're at a trust point, ensure that EDNS0 is not disabled because we previously encountered a DS pne ------------------------------------------------------------------------ r5160 | hserus | 2010-07-16 08:21:56 -0700 (Fri, 16 Jul 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Define a new flag for disabling EDNS0 in a query: VAL_QUERY_NO_EDNS0 ------------------------------------------------------------------------ r5159 | hserus | 2010-07-16 08:21:00 -0700 (Fri, 16 Jul 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Use a pne while following referrals as a hint that DNSSEC may be off below this level (pinsecure zones). Disable EDNS0 in such cases. ------------------------------------------------------------------------ r5158 | hserus | 2010-07-16 08:16:22 -0700 (Fri, 16 Jul 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Disable asking specifically for rrsigs when validating a response ------------------------------------------------------------------------ r5157 | hardaker | 2010-07-08 07:47:30 -0700 (Thu, 08 Jul 2010) | 1 line Changed paths: M /trunk/dnssec-tools/configure autoconf update ------------------------------------------------------------------------ r5156 | hserus | 2010-07-07 05:31:32 -0700 (Wed, 07 Jul 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/configure regenerated configure using configure.in from r5155 ------------------------------------------------------------------------ r5155 | rstory | 2010-07-06 20:50:38 -0700 (Tue, 06 Jul 2010) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure.in make lack of sha-256 support an error; add --disable-sha256-check to turn it into a warning ------------------------------------------------------------------------ r5154 | hserus | 2010-07-06 13:24:13 -0700 (Tue, 06 Jul 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/etc/dnsval.conf Add SHA1 hash for dnssec-tools TA ------------------------------------------------------------------------ r5152 | rstory | 2010-07-02 08:40:51 -0700 (Fri, 02 Jul 2010) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS replace non-ascii quotes ------------------------------------------------------------------------ r5151 | rstory | 2010-07-02 08:40:03 -0700 (Fri, 02 Jul 2010) | 1 line Changed paths: M /trunk/dnssec-tools/dist/fink/dnssec-tools.info update fink build psec for 1.7 release ------------------------------------------------------------------------ r5150 | rstory | 2010-07-02 08:38:54 -0700 (Fri, 02 Jul 2010) | 1 line Changed paths: M /trunk/dnssec-tools/dist/fink/dnssec-tools.patch update fink patch ------------------------------------------------------------------------ r5149 | hardaker | 2010-06-30 15:21:29 -0700 (Wed, 30 Jun 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm patch from Duane Wessels to remove spaces in printed digests before trying to parse them ------------------------------------------------------------------------ r5146 | hserus | 2010-06-30 09:36:14 -0700 (Wed, 30 Jun 2010) | 1 line Changed paths: M /trunk/dnssec-tools/ChangeLog Update for verison 1.7 ------------------------------------------------------------------------ r5145 | hserus | 2010-06-30 09:33:56 -0700 (Wed, 30 Jun 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/convertar M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap M /trunk/dnssec-tools/tools/maketestzone/maketestzone M /trunk/dnssec-tools/tools/mapper/mapper M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/bubbles M /trunk/dnssec-tools/tools/scripts/cleanarch M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtck M /trunk/dnssec-tools/tools/scripts/dtconf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/dtreqmods M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/getds M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lsdnssec M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rolllog M /trunk/dnssec-tools/tools/scripts/rollrec-editor M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/trustman M /trunk/dnssec-tools/tools/scripts/zonesigner Update Version Number: 1.7 ------------------------------------------------------------------------ r5144 | hserus | 2010-06-30 08:51:14 -0700 (Wed, 30 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Keep the api document in sync with current changes. The -08 version is still unpublished. ------------------------------------------------------------------------ r5143 | hardaker | 2010-06-30 08:35:14 -0700 (Wed, 30 Jun 2010) | 1 line Changed paths: M /trunk/dnssec-tools/dist/dnssec-tools.spec updated .spec file ------------------------------------------------------------------------ r5142 | hserus | 2010-06-30 07:51:12 -0700 (Wed, 30 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/Makefile.in Undo previous change of adding the tools dir to the list of perl build targets since this breaks make install. Will fix later. ------------------------------------------------------------------------ r5141 | hardaker | 2010-06-30 07:41:40 -0700 (Wed, 30 Jun 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone updated tool version number to 1.1 ------------------------------------------------------------------------ r5140 | hardaker | 2010-06-30 07:41:28 -0700 (Wed, 30 Jun 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/convertar updated tool version number to 1.0 ------------------------------------------------------------------------ r5139 | hardaker | 2010-06-30 07:26:34 -0700 (Wed, 30 Jun 2010) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS minor changes to the NEWS file for white space and convertar ------------------------------------------------------------------------ r5138 | hardaker | 2010-06-30 07:26:24 -0700 (Wed, 30 Jun 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm fix the error message for a missing getopt module ------------------------------------------------------------------------ r5137 | hardaker | 2010-06-30 07:26:11 -0700 (Wed, 30 Jun 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/convertar +x ------------------------------------------------------------------------ r5136 | hardaker | 2010-06-30 07:25:58 -0700 (Wed, 30 Jun 2010) | 1 line Changed paths: M /trunk/dnssec-tools/validator/etc/root.hints updated root.hints from a recent pull ------------------------------------------------------------------------ r5135 | hserus | 2010-06-30 06:20:05 -0700 (Wed, 30 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml Add drawvalmap to the list of files where DNSSEC-Tools VERSION is automatically updated ------------------------------------------------------------------------ r5134 | hserus | 2010-06-30 06:11:20 -0700 (Wed, 30 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap Make VERSION line consistent with other tools ------------------------------------------------------------------------ r5133 | hserus | 2010-06-29 13:46:23 -0700 (Tue, 29 Jun 2010) | 1 line Changed paths: M /trunk/dnssec-tools/Makefile.in ------------------------------------------------------------------------ r5132 | hserus | 2010-06-29 12:15:04 -0700 (Tue, 29 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/Makefile.in make distcleant should distclean subdirs also ------------------------------------------------------------------------ r5131 | hserus | 2010-06-29 12:14:17 -0700 (Tue, 29 Jun 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/configure Recreate configure with autoconf2.59 since that seems to be supporting prompting for user-options properly ------------------------------------------------------------------------ r5130 | hserus | 2010-06-29 10:44:21 -0700 (Tue, 29 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/NEWS Add some NEWS items pertaining to 1.7 ------------------------------------------------------------------------ r5129 | hserus | 2010-06-29 10:07:14 -0700 (Tue, 29 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2/libspf2-dnssec.patch Update the patch for current release ------------------------------------------------------------------------ r5128 | hserus | 2010-06-29 10:00:52 -0700 (Tue, 29 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm Bump the version number ------------------------------------------------------------------------ r5127 | hserus | 2010-06-29 09:53:54 -0700 (Tue, 29 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/skin/overlay.css Constrain the size of the dnssec-enabled icon on the address bar ------------------------------------------------------------------------ r5126 | hserus | 2010-06-29 09:53:16 -0700 (Tue, 29 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/install.rdf Extension is known to work on firefox 3.7+ ------------------------------------------------------------------------ r5125 | hserus | 2010-06-29 09:51:45 -0700 (Tue, 29 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c Log entry into val_getaddrinfo() and val_getnameinfo() functions ------------------------------------------------------------------------ r5124 | hserus | 2010-06-29 09:48:00 -0700 (Tue, 29 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/README The dnssec-status extension does not work on Thunderbird ------------------------------------------------------------------------ r5123 | hserus | 2010-06-29 09:46:11 -0700 (Tue, 29 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/Makefile.top Increment libval revision number ------------------------------------------------------------------------ r5122 | hserus | 2010-06-29 09:00:37 -0700 (Tue, 29 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap Change the COPYRIGHT date ------------------------------------------------------------------------ r5121 | hserus | 2010-06-29 08:59:27 -0700 (Tue, 29 Jun 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/etc/dnsval.conf Set default ends0 size to a lower value till such time that we have EDNS0 size fallback implemented ------------------------------------------------------------------------ r5120 | hserus | 2010-06-29 08:53:44 -0700 (Tue, 29 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_context.h Rename free_validator_state as val_free_validator_state ------------------------------------------------------------------------ r5117 | tewok | 2010-06-25 09:11:59 -0700 (Fri, 25 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Updated version number. ------------------------------------------------------------------------ r5116 | tewok | 2010-06-25 08:42:00 -0700 (Fri, 25 Jun 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm.in M /trunk/dnssec-tools/tools/modules/dnssectools.pm M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/keyrec.pod M /trunk/dnssec-tools/tools/modules/rolllog.pm M /trunk/dnssec-tools/tools/modules/tooloptions.pm Updated copyright dates. Updated version to 1.5. ------------------------------------------------------------------------ r5115 | tewok | 2010-06-25 08:40:09 -0700 (Fri, 25 Jun 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/timetrans.pm Updated copyright date. Added a version line (for 1.5.) ------------------------------------------------------------------------ r5114 | tewok | 2010-06-25 08:39:37 -0700 (Fri, 25 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm M /trunk/dnssec-tools/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/modules/rollrec.pm Updated version to 1.5. ------------------------------------------------------------------------ r5113 | tewok | 2010-06-25 08:38:52 -0700 (Fri, 25 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/BootStrap.pm M /trunk/dnssec-tools/tools/modules/Makefile.PL M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm M /trunk/dnssec-tools/tools/modules/README Updated copyright date. ------------------------------------------------------------------------ r5112 | tewok | 2010-06-25 08:37:26 -0700 (Fri, 25 Jun 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tests/Makefile.PL M /trunk/dnssec-tools/tools/modules/tests/test-conf M /trunk/dnssec-tools/tools/modules/tests/test-keyrec M /trunk/dnssec-tools/tools/modules/tests/test-rollmgr M /trunk/dnssec-tools/tools/modules/tests/test-rollrec M /trunk/dnssec-tools/tools/modules/tests/test-timetrans M /trunk/dnssec-tools/tools/modules/tests/test-toolopts1 M /trunk/dnssec-tools/tools/modules/tests/test-toolopts2 M /trunk/dnssec-tools/tools/modules/tests/test-toolopts3 Updated the copyright dates. ------------------------------------------------------------------------ r5111 | tewok | 2010-06-25 08:37:07 -0700 (Fri, 25 Jun 2010) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/modules/tests/README Added a minimally descriptive readme. ------------------------------------------------------------------------ r5110 | tewok | 2010-06-24 15:41:57 -0700 (Thu, 24 Jun 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Properly placed some error checking in cmd_dspub(). Added a missing error return in cmd_rollnow(). ------------------------------------------------------------------------ r5109 | tewok | 2010-06-24 15:40:59 -0700 (Thu, 24 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Adjusted error messages for -dspub and -dspuball. ------------------------------------------------------------------------ r5108 | tewok | 2010-06-24 14:46:32 -0700 (Thu, 24 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtreqmods M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/getds M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lsdnssec M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/trustman Adjusted copyright dates. ------------------------------------------------------------------------ r5107 | tewok | 2010-06-24 14:43:00 -0700 (Thu, 24 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/bubbles M /trunk/dnssec-tools/tools/scripts/cleanarch M /trunk/dnssec-tools/tools/scripts/dtck M /trunk/dnssec-tools/tools/scripts/dtconf M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rolllog M /trunk/dnssec-tools/tools/scripts/rollrec-editor M /trunk/dnssec-tools/tools/scripts/signset-editor Adjusted program versions and copyright dates. ------------------------------------------------------------------------ r5106 | tewok | 2010-06-24 14:29:48 -0700 (Thu, 24 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Minor fix to usage message. ------------------------------------------------------------------------ r5105 | tewok | 2010-06-24 14:27:35 -0700 (Thu, 24 Jun 2010) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Modified -zonelog to take multiple zone:loglevel pairs. Added some minor argument checking to -zonelog. ------------------------------------------------------------------------ r5104 | tewok | 2010-06-24 13:53:40 -0700 (Thu, 24 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Modified -skipzone to take multiple zones. ------------------------------------------------------------------------ r5103 | tewok | 2010-06-24 13:49:28 -0700 (Thu, 24 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Modified -rollzsk to take multiple zones. ------------------------------------------------------------------------ r5102 | tewok | 2010-06-24 13:40:08 -0700 (Thu, 24 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/Makefile Added rollerd-manyzones-fast demo. ------------------------------------------------------------------------ r5101 | tewok | 2010-06-24 13:39:36 -0700 (Thu, 24 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/README Added rollerd-manyzones-fast. ------------------------------------------------------------------------ r5100 | tewok | 2010-06-24 13:37:51 -0700 (Thu, 24 Jun 2010) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/Makefile A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/README A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/phaser A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/rc.blinkenlights A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/rundemo A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-db.cache A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-demo.rollrec A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-dummy.com A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-example.com A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-test.com A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-woof.com A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-xorn.com A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-yowzah.com A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-zero.com New demo showing lots of zones rolling quickly. ------------------------------------------------------------------------ r5099 | tewok | 2010-06-24 13:14:53 -0700 (Thu, 24 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Modified -rollksk to take a list of zones instead of just one zone. ------------------------------------------------------------------------ r5098 | tewok | 2010-06-24 13:01:24 -0700 (Thu, 24 Jun 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Changed how -dspub takes a list of zones. It's no longer a single word with commas separating the names, but a whitespace-separated list of names. ------------------------------------------------------------------------ r5097 | tewok | 2010-06-24 09:41:44 -0700 (Thu, 24 Jun 2010) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Modified "-dspub zone" can take a comma-separated list of zones. ------------------------------------------------------------------------ r5096 | tewok | 2010-06-24 08:22:01 -0700 (Thu, 24 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Minor fix to usage message. ------------------------------------------------------------------------ r5095 | hserus | 2010-06-24 06:40:23 -0700 (Thu, 24 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/README.firefox Add config settings for enabling DNSSEC libraries ------------------------------------------------------------------------ r5094 | hserus | 2010-06-23 09:50:34 -0700 (Wed, 23 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch M /trunk/dnssec-tools/apps/mozilla/dnssec-firefox.patch M /trunk/dnssec-tools/apps/mozilla/dnssec-nspr.patch Changes to support DNSSEC event notification in Firefox 3.6+ ------------------------------------------------------------------------ r5093 | hserus | 2010-06-23 05:47:12 -0700 (Wed, 23 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c Return EAI_FAIL in cases of DNS errors, not EAI_NONAME ------------------------------------------------------------------------ r5092 | hserus | 2010-06-23 05:43:02 -0700 (Wed, 23 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Don't set the recursive bit when we are iteratively resolving ------------------------------------------------------------------------ r5091 | tewok | 2010-06-22 08:30:50 -0700 (Tue, 22 Jun 2010) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod Added an entry for roll_username. Adjusted copyright date. ------------------------------------------------------------------------ r5090 | tewok | 2010-06-22 08:30:12 -0700 (Tue, 22 Jun 2010) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf Added a (commented-out) entry for roll_username. ------------------------------------------------------------------------ r5089 | tewok | 2010-06-22 08:28:43 -0700 (Tue, 22 Jun 2010) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added -username support for running as a different user. Fixed a typo in a comment. ------------------------------------------------------------------------ r5088 | hserus | 2010-06-22 08:21:27 -0700 (Tue, 22 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/etc/README Changed copyright date ------------------------------------------------------------------------ r5087 | tewok | 2010-06-21 15:31:13 -0700 (Mon, 21 Jun 2010) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Added support for rollerd username. Added -template to the usage message. ------------------------------------------------------------------------ r5086 | tewok | 2010-06-21 15:01:36 -0700 (Mon, 21 Jun 2010) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Adjusted copyright date. ------------------------------------------------------------------------ r5085 | tewok | 2010-06-21 14:31:22 -0700 (Mon, 21 Jun 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Added checks for roll_username. ------------------------------------------------------------------------ r5083 | hserus | 2010-06-18 11:10:18 -0700 (Fri, 18 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-thunderbird.patch Add support for DNSSEC UI elements in thunderbird (the core libraries for DNS resolution are the same as that for firefox) ------------------------------------------------------------------------ r5082 | hserus | 2010-06-18 10:49:09 -0700 (Fri, 18 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/content/overlay.js Fix missing eol marker ------------------------------------------------------------------------ r5081 | hardaker | 2010-06-18 07:01:40 -0700 (Fri, 18 Jun 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/convertar M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Dns.pm added a tods flag for dns lookups for reading dnskeys but writing DS records ------------------------------------------------------------------------ r5080 | hardaker | 2010-06-18 07:01:24 -0700 (Fri, 18 Jun 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Libval.pm fix typos ------------------------------------------------------------------------ r5079 | hserus | 2010-06-17 20:56:45 -0700 (Thu, 17 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/content/overlay.js Handle page load error conditions. ------------------------------------------------------------------------ r5078 | hserus | 2010-06-17 10:40:32 -0700 (Thu, 17 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/content/firefoxOverlay.xul M /trunk/dnssec-tools/apps/mozilla/dnssec-status/content/overlay.js Don't display DNSSEC indicators when we are not DNSSEC capable ------------------------------------------------------------------------ r5077 | hserus | 2010-06-17 08:56:42 -0700 (Thu, 17 Jun 2010) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/mozilla/dnssec-status/content/enabled.png M /trunk/dnssec-tools/apps/mozilla/dnssec-status/content/firefoxOverlay.xul M /trunk/dnssec-tools/apps/mozilla/dnssec-status/content/overlay.js M /trunk/dnssec-tools/apps/mozilla/dnssec-status/skin/overlay.css Display DNSSEC-enabled icon when we're doing validation of answers on the page ------------------------------------------------------------------------ r5076 | hserus | 2010-06-16 09:52:22 -0700 (Wed, 16 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Merge cached responses into answer even when we traverse multiple CNAME/DNAME links ------------------------------------------------------------------------ r5075 | hserus | 2010-06-15 08:05:45 -0700 (Tue, 15 Jun 2010) | 2 lines Changed paths: D /trunk/dnssec-tools/apps/mozilla/dnssec-status/Makefile M /trunk/dnssec-tools/apps/mozilla/dnssec-status/README A /trunk/dnssec-tools/apps/mozilla/dnssec-status/build.sh D /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome.manifest A /trunk/dnssec-tools/apps/mozilla/dnssec-status/config_build.sh A /trunk/dnssec-tools/apps/mozilla/dnssec-status/content A /trunk/dnssec-tools/apps/mozilla/dnssec-status/content/dnssecstatus.png A /trunk/dnssec-tools/apps/mozilla/dnssec-status/content/firefoxOverlay.xul A /trunk/dnssec-tools/apps/mozilla/dnssec-status/content/overlay.js D /trunk/dnssec-tools/apps/mozilla/dnssec-status/defaults M /trunk/dnssec-tools/apps/mozilla/dnssec-status/install.rdf A /trunk/dnssec-tools/apps/mozilla/dnssec-status/locale A /trunk/dnssec-tools/apps/mozilla/dnssec-status/locale/en-US A /trunk/dnssec-tools/apps/mozilla/dnssec-status/locale/en-US/dnssecstatus.properties A /trunk/dnssec-tools/apps/mozilla/dnssec-status/skin A /trunk/dnssec-tools/apps/mozilla/dnssec-status/skin/overlay.css Make extension FF-3 compatible ------------------------------------------------------------------------ r5074 | hserus | 2010-06-09 13:15:35 -0700 (Wed, 09 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Makefile.PL M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc Add support for SHA-2 constants ------------------------------------------------------------------------ r5073 | hserus | 2010-06-09 13:08:24 -0700 (Wed, 09 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_crypto.c M /trunk/dnssec-tools/validator/libval/val_crypto.h M /trunk/dnssec-tools/validator/libval/val_verify.c Add support for RSASHA256/512 validation (untested) ------------------------------------------------------------------------ r5072 | tewok | 2010-06-08 08:41:30 -0700 (Tue, 08 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Single formatting change. ------------------------------------------------------------------------ r5071 | tewok | 2010-06-08 08:40:27 -0700 (Tue, 08 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Single spacing change. ------------------------------------------------------------------------ r5070 | tewok | 2010-06-08 08:38:15 -0700 (Tue, 08 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added a check to ensure blinkenlights could contact rollerd. ------------------------------------------------------------------------ r5068 | hserus | 2010-06-02 08:57:05 -0700 (Wed, 02 Jun 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Fetch proper proof assertion when the answer is provably insecure ------------------------------------------------------------------------ r5062 | tewok | 2010-04-28 15:23:30 -0700 (Wed, 28 Apr 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added the no-output flag to the dt_confcheck() call. Made an error message more useful. ------------------------------------------------------------------------ r5061 | tewok | 2010-04-28 15:22:32 -0700 (Wed, 28 Apr 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Added no-output flag to dt_confcheck() call. Made an error message more useful. ------------------------------------------------------------------------ r5060 | tewok | 2010-04-28 15:19:00 -0700 (Wed, 28 Apr 2010) | 25 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm.in Added a lot more checks to dt_confcheck(): - The dnssec-tools sysconf directory exists. - The dnssec-tools sysconf directory is a directory. - The dnssec-tools directory exists. - The dnssec-tools directory is a directory. - The dnssec-tools config file exists. - The dnssec-tools config file is a regular file. - The dnssec-tools config file isn't empty. - The local state directory name isn't longer than 75 characters (to allow for the rollmgr command socket.) - The local state directory is a directory. - The local state directory can be created if necessary. - The local state directory's dnssec-tools subdirectory can be created if necessary, or is writable if it already exists. - The local state directory's run subdirectory can be created if necessary, or is writable if it already exists. Added a flag to dt_confcheck(). If it's 0, the checks will be performed quietly; otherwise, error messages will be printed. Modified makelocalstatedir(): - Moved the "require File::Path" to just before it's needed. - Added a newline to an error message. - Changed some error returns to error exits. ------------------------------------------------------------------------ r5059 | tewok | 2010-04-27 10:18:27 -0700 (Tue, 27 Apr 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd Added calls to dt_confcheck() to ensure the state directory isn't too long. ------------------------------------------------------------------------ r5058 | tewok | 2010-04-27 10:14:14 -0700 (Tue, 27 Apr 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm.in Added dt_confcheck() to run environment/configuration checks. ------------------------------------------------------------------------ r5056 | tewok | 2010-04-20 18:12:02 -0700 (Tue, 20 Apr 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Testing change to the command socket's permissions was fixed. ------------------------------------------------------------------------ r5055 | hserus | 2010-04-20 10:10:00 -0700 (Tue, 20 Apr 2010) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_debug.c ------------------------------------------------------------------------ r5054 | tewok | 2010-04-19 16:32:45 -0700 (Mon, 19 Apr 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm unix_dropid() returns a failure if it can't create the pid file. ------------------------------------------------------------------------ r5053 | tewok | 2010-04-16 11:33:56 -0700 (Fri, 16 Apr 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/testing/README Added a bit more info. ------------------------------------------------------------------------ r5052 | tewok | 2010-04-16 09:59:12 -0700 (Fri, 16 Apr 2010) | 3 lines Changed paths: A /trunk/dnssec-tools/testing/README New file with a brief description of running the DT tests. ------------------------------------------------------------------------ r5051 | tewok | 2010-04-15 14:14:04 -0700 (Thu, 15 Apr 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Turned off debugging in Getopt::Long. Added a missing newline in a DSPUB error message. ------------------------------------------------------------------------ r5050 | hserus | 2010-04-13 13:39:38 -0700 (Tue, 13 Apr 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/Makefile.in Add a target for universal build ------------------------------------------------------------------------ r5049 | tewok | 2010-04-13 12:10:39 -0700 (Tue, 13 Apr 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/logwatch/README Fixed to use a working URL. ------------------------------------------------------------------------ r5048 | tewok | 2010-04-13 11:44:40 -0700 (Tue, 13 Apr 2010) | 4 lines Changed paths: M /trunk/dnssec-tools/INSTALL Added a reference to Perl Tk for some GUI-based tools. Added a reference to Text::Diff.pm for running tests. ------------------------------------------------------------------------ r5046 | hardaker | 2010-04-10 07:05:54 -0700 (Sat, 10 Apr 2010) | 1 line Changed paths: M /trunk/dnssec-tools/Makefile.in make install should do a make all as well ------------------------------------------------------------------------ r5045 | hardaker | 2010-04-10 06:51:56 -0700 (Sat, 10 Apr 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/Makefile.PL don't use hard paths for tools that move ------------------------------------------------------------------------ r5044 | hserus | 2010-04-09 09:42:42 -0700 (Fri, 09 Apr 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/doc/dnsval.conf.3 M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_policy.c Add backwards compatibility support for the (now deprecated) trust-local-answers policy in dnsval.conf ------------------------------------------------------------------------ r5043 | hserus | 2010-04-09 08:53:51 -0700 (Fri, 09 Apr 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Implement couple of fixes for DLV support ------------------------------------------------------------------------ r5042 | hserus | 2010-04-05 11:46:36 -0700 (Mon, 05 Apr 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/README Remove trailing newline ------------------------------------------------------------------------ r5041 | hserus | 2010-04-05 11:05:26 -0700 (Mon, 05 Apr 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/README Removed newline ------------------------------------------------------------------------ r5040 | hserus | 2010-04-05 10:42:19 -0700 (Mon, 05 Apr 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/README reverted ------------------------------------------------------------------------ r5039 | hserus | 2010-04-05 10:40:38 -0700 (Mon, 05 Apr 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/README testing commit ------------------------------------------------------------------------ r5038 | hardaker | 2010-04-05 10:29:44 -0700 (Mon, 05 Apr 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone regexp fix ------------------------------------------------------------------------ r5037 | hardaker | 2010-04-05 10:26:49 -0700 (Mon, 05 Apr 2010) | 1 line Changed paths: M /trunk/dnssec-tools/README white space change for testing ------------------------------------------------------------------------ r5036 | hardaker | 2010-04-05 10:25:23 -0700 (Mon, 05 Apr 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone make child NS record pointers match the child's zone exactly and add glue records ------------------------------------------------------------------------ r5034 | baerm | 2010-03-25 10:12:01 -0700 (Thu, 25 Mar 2010) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/rollctl Make default value of key archive directory get used in dtinitconf ------------------------------------------------------------------------ r5032 | hserus | 2010-03-15 07:09:29 -0700 (Mon, 15 Mar 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/selftests.dist Updated list of test cases ------------------------------------------------------------------------ r5031 | hserus | 2010-03-15 07:07:18 -0700 (Mon, 15 Mar 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Add another special case for PI checks, so that we won't go into a loop trying to prove the non-existence of RRSIGs for an existing DS record. ------------------------------------------------------------------------ r5028 | baerm | 2010-03-11 11:49:56 -0800 (Thu, 11 Mar 2010) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Changed Bind program search to only show directories where bind exectuables are found. ------------------------------------------------------------------------ r5026 | hserus | 2010-03-01 08:06:57 -0800 (Mon, 01 Mar 2010) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c - ignore wildcard check for DS non-existence only for NOERROR responses - when checking for provably insecure names check trustworthiness of names using val_istrusted instead of val_isvalidated, to account for optout zones ------------------------------------------------------------------------ r5025 | hserus | 2010-02-28 19:52:59 -0800 (Sun, 28 Feb 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc Do away with the VAL_VERIFIED_CHAIN status code ------------------------------------------------------------------------ r5024 | hserus | 2010-02-28 19:49:35 -0800 (Sun, 28 Feb 2010) | 8 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Fix following issues: - find trust anchors that are at the level of the top-query - fix some of the error messages - don't check wildcard proofs while verifying DS non-existence in opt-out zones - check correct pointer value when NCN proof is missing - Fix another instance of using a cached zonecut when availabile - Use VAL_NOTRUST in place of VAL_VERIFIED_CHAIN ------------------------------------------------------------------------ r5023 | hserus | 2010-02-28 19:42:42 -0800 (Sun, 28 Feb 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Try to correctly distinguish between referral and a no data response with NS records ------------------------------------------------------------------------ r5022 | hserus | 2010-02-28 19:39:13 -0800 (Sun, 28 Feb 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/val_errors.h Remove unnecessary (and misleading) error code VAL_VERIFIED_CHAIN ------------------------------------------------------------------------ r5021 | hserus | 2010-02-28 19:38:29 -0800 (Sun, 28 Feb 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_crypto.c M /trunk/dnssec-tools/validator/libval/val_verify.c lower all domain names while verifying signatures ------------------------------------------------------------------------ r5019 | hardaker | 2010-02-12 11:13:48 -0800 (Fri, 12 Feb 2010) | 1 line Changed paths: M /trunk/dnssec-tools/ChangeLog Update for verison 1.6 ------------------------------------------------------------------------ r5018 | hardaker | 2010-02-12 11:12:49 -0800 (Fri, 12 Feb 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/convertar M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/maketestzone/maketestzone M /trunk/dnssec-tools/tools/mapper/mapper M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/bubbles M /trunk/dnssec-tools/tools/scripts/cleanarch M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtck M /trunk/dnssec-tools/tools/scripts/dtconf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/dtreqmods M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/getds M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lsdnssec M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rolllog M /trunk/dnssec-tools/tools/scripts/rollrec-editor M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/trustman M /trunk/dnssec-tools/tools/scripts/zonesigner Update Version Number: 1.6 ------------------------------------------------------------------------ r5017 | hardaker | 2010-02-12 10:57:41 -0800 (Fri, 12 Feb 2010) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h change parameter from class to pclass to not conflict with C++ terms ------------------------------------------------------------------------ r5016 | hardaker | 2010-02-12 10:56:37 -0800 (Fri, 12 Feb 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/convertar fix documentation bug ------------------------------------------------------------------------ r5014 | baerm | 2010-02-11 09:57:50 -0800 (Thu, 11 Feb 2010) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c Fixed 64-bit segfault issue. ------------------------------------------------------------------------ r5013 | baerm | 2010-02-11 09:55:20 -0800 (Thu, 11 Feb 2010) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm changing parsing to allow email address in rrf files ------------------------------------------------------------------------ r5012 | baerm | 2010-02-04 14:53:27 -0800 (Thu, 04 Feb 2010) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Fixed key overwrite during revoke, fixed revoke. Using the revoke bit is now the default behaviour. Added numerous white space changes. ------------------------------------------------------------------------ r5011 | baerm | 2010-02-04 14:51:12 -0800 (Thu, 04 Feb 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/testing/t/050trustman-rollerd.t Updated test to match new default behavior for revoking keys in trustman ------------------------------------------------------------------------ r5010 | baerm | 2010-02-04 14:04:10 -0800 (Thu, 04 Feb 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/testing/TODO M /trunk/dnssec-tools/testing/t/010zonesigner.t M /trunk/dnssec-tools/testing/t/020donuts.t M /trunk/dnssec-tools/testing/t/040rollerd.t M /trunk/dnssec-tools/testing/t/050trustman-rollerd.t M /trunk/dnssec-tools/testing/t/dt_testingtools.pl updated testing suite, mostly syntax some processing changes ------------------------------------------------------------------------ r5009 | rstory | 2010-01-28 11:18:39 -0800 (Thu, 28 Jan 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/README A /trunk/dnssec-tools/apps/sendmail/spfmilter-0.97_libspf2.patch M /trunk/dnssec-tools/apps/sendmail/spfmilter-dnssec-howto.txt update for 0.97 and spf2-1.2.9 ------------------------------------------------------------------------ r5007 | rstory | 2010-01-28 09:23:12 -0800 (Thu, 28 Jan 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2/README.dnssec M /trunk/dnssec-tools/apps/libspf2/libspf2-dnssec.patch update for libspf2 1.2.9 ------------------------------------------------------------------------ r5006 | rstory | 2010-01-28 09:18:25 -0800 (Thu, 28 Jan 2010) | 1 line Changed paths: M /trunk/dnssec-tools/configure.in check for rquired perl modules ------------------------------------------------------------------------ r5005 | tewok | 2010-01-26 08:11:47 -0800 (Tue, 26 Jan 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Modified -zonestatus to give a nice format for its output. ------------------------------------------------------------------------ r5004 | tewok | 2010-01-25 16:39:05 -0800 (Mon, 25 Jan 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Modified to handle long and short phase messages. ------------------------------------------------------------------------ r5003 | tewok | 2010-01-25 16:35:54 -0800 (Mon, 25 Jan 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Default to long phase messages. ------------------------------------------------------------------------ r5002 | tewok | 2010-01-25 15:50:29 -0800 (Mon, 25 Jan 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added the zonename to the response to "rollctl -zonestatus". The zonename was added since split-zones may make the zonename and rollrec name be different. ------------------------------------------------------------------------ r5001 | tewok | 2010-01-25 15:40:41 -0800 (Mon, 25 Jan 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Deleted some old debugging code. Modified the response to "rollctl -zonestatus" in case of short phase messages. ------------------------------------------------------------------------ r5000 | tewok | 2010-01-25 15:17:38 -0800 (Mon, 25 Jan 2010) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Modified rollmgr_get_phase(): - extended checking for invalid phase numbers and phase types - added ability to have long or short messages - added pod to document the routine Adjusted copyright date and version number. Adjusted formatting and shortened message content for some messages and comments. ------------------------------------------------------------------------ r4999 | tewok | 2010-01-25 11:28:23 -0800 (Mon, 25 Jan 2010) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor Adjusted copyright dates and version. Added support for new zonename record. Added a note to the caveat pod section. Fixed some pod errors. ------------------------------------------------------------------------ r4998 | tewok | 2010-01-25 08:33:33 -0800 (Mon, 25 Jan 2010) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollset Option changes to accomodate split-views: - renamed -zone option to -name (used to select a specific rollrec) - added -zone to specify a new zone name - added -reset-zonename to copy rollrec name to zonename - modified usage() and pod to reflect these changes Adjusted copyright dates and version. ------------------------------------------------------------------------ r4997 | tewok | 2010-01-24 11:42:28 -0800 (Sun, 24 Jan 2010) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollchk Added checks for the new zonename record. Adjusted copyright dates. Updates version. ------------------------------------------------------------------------ r4996 | tewok | 2010-01-24 10:14:06 -0800 (Sun, 24 Jan 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm Fixed some spelling errors. ------------------------------------------------------------------------ r4995 | tewok | 2010-01-22 16:16:46 -0800 (Fri, 22 Jan 2010) | 9 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Modifications for split-zones: - added -zonename option - renamed -zone option to -zonefile - rename the "Zone" output column to "Name" - added the "Zonename" column to the output - added pod describing the new behavior Adjusted copyright dates. ------------------------------------------------------------------------ r4994 | tewok | 2010-01-21 16:58:17 -0800 (Thu, 21 Jan 2010) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollinit Added zonename field to newly created rollrecs. Adjusted copyright date and tool version. Modified pod: - added paragraph about zonename field and record name - added zonename lines to examples - replace "domain" with "zone" - adjusted spacing in a few examples ------------------------------------------------------------------------ r4993 | hardaker | 2010-01-21 16:30:28 -0800 (Thu, 21 Jan 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm copyright year update ------------------------------------------------------------------------ r4992 | hardaker | 2010-01-21 16:30:11 -0800 (Thu, 21 Jan 2010) | 1 line Changed paths: M /trunk/dnssec-tools/COPYING copyright year update ------------------------------------------------------------------------ r4991 | tewok | 2010-01-21 13:13:52 -0800 (Thu, 21 Jan 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Added a default archive directory. ------------------------------------------------------------------------ r4989 | tewok | 2010-01-21 08:53:01 -0800 (Thu, 21 Jan 2010) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Modified pod: - Clarified paragraph about KSK steps 5 and 6. - Modified discussion of rollrec names to account for split-zone mods. - Modified to not require the rollctl comm pipe to be owned by root, but by rollerd's user. ------------------------------------------------------------------------ r4988 | hardaker | 2010-01-20 15:00:31 -0800 (Wed, 20 Jan 2010) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/dnssectools.pm actually pass in the mail arguments ------------------------------------------------------------------------ r4987 | tewok | 2010-01-19 17:17:30 -0800 (Tue, 19 Jan 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/rundemo Fixed usage message. ------------------------------------------------------------------------ r4986 | tewok | 2010-01-19 17:16:59 -0800 (Tue, 19 Jan 2010) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/rundemo Adjusted copyright date. Added -reload option. Changed loglevel to phase. ------------------------------------------------------------------------ r4985 | tewok | 2010-01-19 17:15:32 -0800 (Tue, 19 Jan 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/phaser Adjusted copyright date. ------------------------------------------------------------------------ r4984 | tewok | 2010-01-19 17:15:10 -0800 (Tue, 19 Jan 2010) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/Makefile Adjusted the copyright date. Removed unnecessary refs to db.cache. Added two commented-out zonesigner commands for using key directories. ------------------------------------------------------------------------ r4983 | tewok | 2010-01-19 17:13:53 -0800 (Tue, 19 Jan 2010) | 2 lines Changed paths: D /trunk/dnssec-tools/tools/demos/rollerd-basic/save-db.cache Deleted because it isn't used. ------------------------------------------------------------------------ r4982 | tewok | 2010-01-19 17:13:13 -0800 (Tue, 19 Jan 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/README Adjust the copyright date. ------------------------------------------------------------------------ r4981 | tewok | 2010-01-19 17:11:00 -0800 (Tue, 19 Jan 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-demo.rollrec Make both zones roll. ------------------------------------------------------------------------ r4980 | tewok | 2010-01-19 17:10:05 -0800 (Tue, 19 Jan 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-example.com M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-test.com Speed up the test a little. ------------------------------------------------------------------------ r4979 | tewok | 2010-01-19 15:52:48 -0800 (Tue, 19 Jan 2010) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added code to put the New ZSKs in the zskdirectory. Adjusted the copyright date. Fixed a comment typo. Deleted an extraneous comment. ------------------------------------------------------------------------ r4978 | tewok | 2010-01-19 11:32:37 -0800 (Tue, 19 Jan 2010) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Used proper exit code if rollerd isn't running. Used proper variable in two error messages. Fixed formatting. ------------------------------------------------------------------------ r4977 | tewok | 2010-01-19 11:29:24 -0800 (Tue, 19 Jan 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added some parens in an ifcond, for clarity. Fixed a comment typo. ------------------------------------------------------------------------ r4976 | tewok | 2010-01-19 11:26:47 -0800 (Tue, 19 Jan 2010) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Used proper exit code if rollerd isn't running. Used proper variable in two error messages. Fixed formatting. ------------------------------------------------------------------------ r4975 | tewok | 2010-01-19 11:09:26 -0800 (Tue, 19 Jan 2010) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added support for the special characters the docs say can be used in rollrec names. Added quotes around zone arguments sent to rollerd. Added a dash to the argument sent to rollctl. Fixed a comment typo. ------------------------------------------------------------------------ r4974 | tewok | 2010-01-19 08:07:38 -0800 (Tue, 19 Jan 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Adjusted copyright dates. ------------------------------------------------------------------------ r4973 | tewok | 2010-01-19 08:06:35 -0800 (Tue, 19 Jan 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Adjusted copyright date. ------------------------------------------------------------------------ r4972 | tewok | 2010-01-19 07:57:30 -0800 (Tue, 19 Jan 2010) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pod Fixed problem where a roll rollrec was called a zone rollrec. Added discussion about rollrec names. Added description of zonename field. Fixed examples to include zonename fields. Adjusted copyright dates. ------------------------------------------------------------------------ r4971 | tewok | 2010-01-19 07:52:58 -0800 (Tue, 19 Jan 2010) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Modified pod example: - added zonename field - shortened paths in zonefile, keyrec, and directory fields for better formatting Modified paragraph about cmds field for clarity, grammar, and spelling. ------------------------------------------------------------------------ r4970 | tewok | 2010-01-18 16:35:09 -0800 (Mon, 18 Jan 2010) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Handle key-name collisions better: - add a maximum number of attempts to create the keys - move key creation into makekey() ------------------------------------------------------------------------ r4969 | tewok | 2010-01-18 16:30:36 -0800 (Mon, 18 Jan 2010) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added support for split zones: - First column is now rollrec name. - New second column is zone name. If the background color couldn't be found, then the skipped-zone color will be used. ------------------------------------------------------------------------ r4968 | tewok | 2010-01-18 16:26:03 -0800 (Mon, 18 Jan 2010) | 11 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added support for split zones: - rollrecs now have a zonename field - rollrec names are now an identifier only - explicitly specified the keyrec file for zonesigner to use Expanded ksk_phase7()'s header to describe the steps it'll take. Expanded rrfchk()'s header and commands to better describe the things being checked. If rrfchk() doesn't find a zonename field in a rollrec, it'll add one that is the same as the rollrec's name. ------------------------------------------------------------------------ r4967 | tewok | 2010-01-18 15:50:12 -0800 (Mon, 18 Jan 2010) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Fixed a comment. Added a keyrec_close() before a keyrec_read() to ensure the file pointers are properly set. Added a keyrec_close() if a zone keyrec wasn't found. Added some pod. ------------------------------------------------------------------------ r4966 | tewok | 2010-01-15 17:07:55 -0800 (Fri, 15 Jan 2010) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Added zonename as a valid rollrec field. Adjusted copyright dates. Deleted an obsolete comment. ------------------------------------------------------------------------ r4965 | tewok | 2010-01-12 10:54:02 -0800 (Tue, 12 Jan 2010) | 10 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Modified runner() to: - log output if the specified command fails - take a report-error flag Modified signer() to mark a zone as a skip zone if zonesigner fails. Modified zonekeykr() to close the open keyrec prior to reading a new keyrec. Deleted a few debugging log messages. ------------------------------------------------------------------------ r4964 | tewok | 2010-01-11 16:43:05 -0800 (Mon, 11 Jan 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Fixed a misspelled word. ------------------------------------------------------------------------ r4963 | hserus | 2010-01-11 06:28:02 -0800 (Mon, 11 Jan 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_crypto.c Check for proper return value from DSA_verfiy and RSA_verify functions ------------------------------------------------------------------------ r4962 | hserus | 2010-01-08 12:49:45 -0800 (Fri, 08 Jan 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c If we already have a DNSKEY we can use to validate, don't try to look for one again ------------------------------------------------------------------------ r4961 | rstory | 2010-01-06 10:51:29 -0800 (Wed, 06 Jan 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/sendmail-dnssec-howto.txt A /trunk/dnssec-tools/apps/sendmail/sendmail-spec.patch add patch for RPM spec file; add RPM building to howto file ------------------------------------------------------------------------ r4960 | rstory | 2010-01-06 10:38:49 -0800 (Wed, 06 Jan 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/sendmail-8.14.1_dnssec_patch.txt clear errno before calling syserr after validation failure; no \n in err text ------------------------------------------------------------------------ r4959 | tewok | 2010-01-05 17:23:08 -0800 (Tue, 05 Jan 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Centralized command execution in order to ensure the active keyrec file is flushed to disk prior to running the command. ------------------------------------------------------------------------ r4958 | tewok | 2010-01-05 12:00:47 -0800 (Tue, 05 Jan 2010) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Some minor code clean-up. ------------------------------------------------------------------------ r4957 | tewok | 2010-01-05 11:41:56 -0800 (Tue, 05 Jan 2010) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Deleted the first instance of cmd_logfile(). This only had the first half of the complete function. ------------------------------------------------------------------------ r4956 | tewok | 2010-01-05 11:39:22 -0800 (Tue, 05 Jan 2010) | 11 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Changed "" to: '' (to ensure no interpolation would be performed. Several uses of "" had no quotes whatsoever. These were single- quoted. Fixed some comment grammar. Put some safety parens in a return. Commented out a debugging print. Renamed a variable ($name -> $rname) to match what lots of other routines do. ------------------------------------------------------------------------ r4955 | baerm | 2009-12-31 10:31:53 -0800 (Thu, 31 Dec 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Changed parsing of dnsval.conf to allow for the use DS records for domain DNSKEYS ------------------------------------------------------------------------ r4954 | rstory | 2009-12-30 19:09:02 -0800 (Wed, 30 Dec 2009) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h use libsres_msg_getflag iff ns_msg_getflag is not defined ------------------------------------------------------------------------ r4953 | tewok | 2009-12-28 17:47:57 -0800 (Mon, 28 Dec 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Do better checks of rollctl's exit code. ------------------------------------------------------------------------ r4952 | tewok | 2009-12-28 16:36:44 -0800 (Mon, 28 Dec 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/krfcheck Added support for subordinate kskrevs. ------------------------------------------------------------------------ r4951 | hardaker | 2009-12-24 10:09:38 -0800 (Thu, 24 Dec 2009) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/Makefile.in remove the apps/.libs directory on make clean ------------------------------------------------------------------------ r4949 | hardaker | 2009-12-24 08:58:10 -0800 (Thu, 24 Dec 2009) | 1 line Changed paths: M /trunk/dnssec-tools/ChangeLog Update for verison 1.6.pre2 ------------------------------------------------------------------------ r4948 | hardaker | 2009-12-24 08:57:03 -0800 (Thu, 24 Dec 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/convertar M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/maketestzone/maketestzone M /trunk/dnssec-tools/tools/mapper/mapper M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/bubbles M /trunk/dnssec-tools/tools/scripts/cleanarch M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtck M /trunk/dnssec-tools/tools/scripts/dtconf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/dtreqmods M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/getds M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lsdnssec M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rolllog M /trunk/dnssec-tools/tools/scripts/rollrec-editor M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/trustman M /trunk/dnssec-tools/tools/scripts/zonesigner Update Version Number: 1.6.pre2 ------------------------------------------------------------------------ r4947 | hardaker | 2009-12-24 08:54:13 -0800 (Thu, 24 Dec 2009) | 1 line Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml fix svn URL ------------------------------------------------------------------------ r4946 | hardaker | 2009-12-24 08:53:38 -0800 (Thu, 24 Dec 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/Makefile.PL grep is in /bin on fedora ------------------------------------------------------------------------ r4945 | tewok | 2009-12-23 12:25:51 -0800 (Wed, 23 Dec 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/krfcheck Changed a print() call to a qprint() call so -quiet would be fully observed. ------------------------------------------------------------------------ r4944 | hardaker | 2009-12-23 10:41:42 -0800 (Wed, 23 Dec 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/convertar M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Bind.pm make bind support the write_expectations.conf flag ------------------------------------------------------------------------ r4943 | hardaker | 2009-12-23 10:41:29 -0800 (Wed, 23 Dec 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Libval.pm white space output changes ------------------------------------------------------------------------ r4942 | hardaker | 2009-12-23 10:32:27 -0800 (Wed, 23 Dec 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Libval.pm remove a debugging output statement ------------------------------------------------------------------------ r4941 | hardaker | 2009-12-23 10:32:11 -0800 (Wed, 23 Dec 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/convertar M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Libval.pm M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm added option parsing support; made the libval.conf output include a zone-security-expectation section if requested via the write_expectations=1 option ------------------------------------------------------------------------ r4940 | tewok | 2009-12-21 08:21:06 -0800 (Mon, 21 Dec 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added error checking in case keyrec_read() fails. Primarily wanted for keyname collisions, but godd for other problems. Minor fixes to a couple code comments. ------------------------------------------------------------------------ r4939 | tewok | 2009-12-21 08:09:34 -0800 (Mon, 21 Dec 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/keyarch Fixed grammar in an error message. ------------------------------------------------------------------------ r4938 | tewok | 2009-12-17 05:36:35 -0800 (Thu, 17 Dec 2009) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Fixed the setting of $keyreclen so it's always fetched anew whenever a routine uses it, instead of the module maintaining the value itself. Changed the numbering of new signing set names so they are start prefixed by three zeroes instead of one. ------------------------------------------------------------------------ r4937 | hardaker | 2009-12-17 05:35:09 -0800 (Thu, 17 Dec 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/dnssectools.pm support use of dnssec-tools.conf mailer-type and mailer-server for dt_adminmail; document and set file indentation style for emacs ------------------------------------------------------------------------ r4936 | rstory | 2009-12-15 20:08:40 -0800 (Tue, 15 Dec 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/README.firefox M /trunk/dnssec-tools/apps/mozilla/README.nspr tweak readmes ------------------------------------------------------------------------ r4935 | rstory | 2009-12-15 19:46:01 -0800 (Tue, 15 Dec 2009) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-nspr.patch ifdef dnssec specific code ------------------------------------------------------------------------ r4934 | rstory | 2009-12-15 19:38:41 -0800 (Tue, 15 Dec 2009) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/nspr-spec.patch add buildreq on openssl-dev; add pkgconfig patch ------------------------------------------------------------------------ r4933 | rstory | 2009-12-15 09:40:03 -0800 (Tue, 15 Dec 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-nspr.patch A /trunk/dnssec-tools/apps/mozilla/dnssec-pkgconfig.patch move linux/fedora/rpm specific patch to its own file; tweak nspr for os x ------------------------------------------------------------------------ r4932 | hserus | 2009-12-11 10:08:50 -0800 (Fri, 11 Dec 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c In get_ac_trust check for trust anchors before trying to query for DS or DNSKEY records ------------------------------------------------------------------------ r4931 | hserus | 2009-12-11 09:02:53 -0800 (Fri, 11 Dec 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c Supply better fix for breaking out of loop around trust anchor with expired sigs ------------------------------------------------------------------------ r4930 | hserus | 2009-12-11 08:48:02 -0800 (Fri, 11 Dec 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c Revert previous change - breaks other tests ------------------------------------------------------------------------ r4929 | hserus | 2009-12-11 08:43:44 -0800 (Fri, 11 Dec 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c Set the correct status if the unchecked trust anchor fails to validate. Still need to fix the extra DS query generation when there is clearly no trust anchor above. ------------------------------------------------------------------------ r4928 | tewok | 2009-12-10 17:12:53 -0800 (Thu, 10 Dec 2009) | 17 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Modified the second argument to signer(), which is what actually executes zonesigner. The old argument was a phase-specific, keytype-specific flag to pass to zonesigner. The new argument is a string indicating the keytype and phase. For example, this call: $ret = signer($rname,"-newpubksk",$krr); was replaced with this call: $ret = signer($rname,"KSK phase 2",$krr); Strictly speaking, this change isn't necessary. However, it does gather in one code-icular place exactly what the differences are in zonesigner executions from phase to phase. ------------------------------------------------------------------------ r4927 | tewok | 2009-12-10 16:18:26 -0800 (Thu, 10 Dec 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd A few minor grammatical fixes in comments and log messages. ------------------------------------------------------------------------ r4926 | rstory | 2009-12-10 08:31:55 -0800 (Thu, 10 Dec 2009) | 1 line Changed paths: M /trunk/dnssec-tools/apps/libspf2/README.dnssec D /trunk/dnssec-tools/apps/libspf2/libspf2-1.2.5_dnssec_guide.txt D /trunk/dnssec-tools/apps/libspf2/libspf2-1.2.5_dnssec_patch.txt M /trunk/dnssec-tools/apps/libspf2/libspf2-dnssec.patch update to 1.2.5 patch/readme ------------------------------------------------------------------------ r4925 | rstory | 2009-12-10 08:28:57 -0800 (Thu, 10 Dec 2009) | 1 line Changed paths: M /trunk/dnssec-tools/apps/libspf2/README.dnssec D /trunk/dnssec-tools/apps/libspf2/libspf2-1.0.4_dnssec_guide.txt merge 1.0.4 guide into README ------------------------------------------------------------------------ r4924 | rstory | 2009-12-10 08:27:07 -0800 (Thu, 10 Dec 2009) | 1 line Changed paths: A /trunk/dnssec-tools/apps/libspf2/README.dnssec (from /trunk/dnssec-tools/apps/libspf2/libspf2-dnssec-howto.txt:4909) D /trunk/dnssec-tools/apps/libspf2/libspf2-1.0.4_dnssec_patch.txt D /trunk/dnssec-tools/apps/libspf2/libspf2-dnssec-howto.txt A /trunk/dnssec-tools/apps/libspf2/libspf2-dnssec.patch (from /trunk/dnssec-tools/apps/libspf2/libspf2-1.0.4_dnssec_patch.txt:4909) move away from versioned patch files ------------------------------------------------------------------------ r4923 | rstory | 2009-12-09 20:41:03 -0800 (Wed, 09 Dec 2009) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/README M /trunk/dnssec-tools/apps/mozilla/README.firefox A /trunk/dnssec-tools/apps/mozilla/firefox-spec.patch add firefox spec patch, tweak rpm build instructions in readme ------------------------------------------------------------------------ r4922 | tewok | 2009-12-09 18:24:27 -0800 (Wed, 09 Dec 2009) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/bubbles Modified to ask the user what to do if there no zone names to be displayed. The user is prompted for one of the following courses of action: - stop execution - continue as-is - ignore the values of display flags and display data Updated the "Known Issues" section in the pod. ------------------------------------------------------------------------ r4921 | tewok | 2009-12-09 16:39:05 -0800 (Wed, 09 Dec 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/bubbles Listed all options in -help message. ------------------------------------------------------------------------ r4920 | tewok | 2009-12-09 16:22:08 -0800 (Wed, 09 Dec 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Clarified and fixed several log messages. ------------------------------------------------------------------------ r4919 | tewok | 2009-12-09 15:47:51 -0800 (Wed, 09 Dec 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Clarified two error messages, and fixed the grammar in one of the two. ------------------------------------------------------------------------ r4918 | tewok | 2009-12-09 15:44:57 -0800 (Wed, 09 Dec 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Fixed the grammar in an error message. ------------------------------------------------------------------------ r4917 | tewok | 2009-12-09 15:42:16 -0800 (Wed, 09 Dec 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Clarified an error message. ------------------------------------------------------------------------ r4916 | rstory | 2009-12-09 13:30:57 -0800 (Wed, 09 Dec 2009) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch remove nspr patches; minor tweaks for latest firefox ------------------------------------------------------------------------ r4915 | rstory | 2009-12-09 13:25:05 -0800 (Wed, 09 Dec 2009) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-mozconfig.patch dont disable system nspr/nss; use MOZ_OPT_FLAGS instead of RPMs flags ------------------------------------------------------------------------ r4913 | rstory | 2009-12-09 12:22:12 -0800 (Wed, 09 Dec 2009) | 1 line Changed paths: A /trunk/dnssec-tools/apps/mozilla/README.xulrunner A /trunk/dnssec-tools/apps/mozilla/xulrunner-spec.patch readme/spec patch for xulrunner ------------------------------------------------------------------------ r4912 | tewok | 2009-12-08 10:03:36 -0800 (Tue, 08 Dec 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed so that the KSK-rev keyrec doesn't continue to point to any keyrecs when the revoked keys move to being obsolete. ------------------------------------------------------------------------ r4911 | rstory | 2009-12-07 13:20:58 -0800 (Mon, 07 Dec 2009) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-nspr.patch make sure nspr lib links to val libs ------------------------------------------------------------------------ r4910 | rstory | 2009-12-07 11:30:38 -0800 (Mon, 07 Dec 2009) | 1 line Changed paths: A /trunk/dnssec-tools/apps/mozilla/README.nspr A /trunk/dnssec-tools/apps/mozilla/dnssec-nspr.patch A /trunk/dnssec-tools/apps/mozilla/nspr-spec.patch new files for nspr rpm building ------------------------------------------------------------------------ r4909 | tewok | 2009-12-01 16:25:57 -0800 (Tue, 01 Dec 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Fixed the regexp in cmd_logmsg() so the user's message will be properly parsed. ------------------------------------------------------------------------ r4908 | tewok | 2009-12-01 16:25:14 -0800 (Tue, 01 Dec 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Fixed the value of $ROLLCMD_LOGMSG to one that will actually work. ------------------------------------------------------------------------ r4907 | tewok | 2009-12-01 13:34:36 -0800 (Tue, 01 Dec 2009) | 2 lines Changed paths: D /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/log.test This file shouldn't have been checked in at all. ------------------------------------------------------------------------ r4906 | tewok | 2009-12-01 12:06:59 -0800 (Tue, 01 Dec 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added display options for set keyrecs. ------------------------------------------------------------------------ r4905 | tewok | 2009-12-01 12:03:48 -0800 (Tue, 01 Dec 2009) | 13 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Modified revocation keyrecs so there is one active "super" kskrev set keyrec whose "keys" field references a number of subsidiary kskrev set keyrecs. As the kskrevs go obsolete, they are individually marked as kskobs. Added expandrevlist() to get the full set of subsidiary kskrev keys. Modified keyrec_signset_new() to take an additional option that specifies the type of the new signing set. Moved the bulk of keyrec_age_revoked() from keyrec.pm into age_revoked(). Moved some common code into newrevset(). Moved some common code into expandrevlist(). Clarified several informational and error messages. Reworked some pod option descriptions. ------------------------------------------------------------------------ r4904 | tewok | 2009-12-01 12:03:29 -0800 (Tue, 01 Dec 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/genkrf Added key types to the set keyrecs. ------------------------------------------------------------------------ r4903 | tewok | 2009-12-01 12:03:19 -0800 (Tue, 01 Dec 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Modified pod discussion of RFC5011 to fit formatting conventions. ------------------------------------------------------------------------ r4902 | tewok | 2009-12-01 12:03:03 -0800 (Tue, 01 Dec 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/krfcheck Validate the set types. Fixed a grammo. ------------------------------------------------------------------------ r4901 | tewok | 2009-12-01 12:02:41 -0800 (Tue, 01 Dec 2009) | 14 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added a type argument to keyrec_signset_new(), as well as a check to ensure the type is valid. Deleted a duplicate reference to "zskpub" from keyrec_keypaths(). Moved the keyrec_keypaths() pod description into its proper (alphabetical) place. Renamed keyrec_age_revoked() to keyrec_revoke_check(). Modified to keyrec_revoke_check() just do the actual revocation-period check; the key manipulation was moved into zonesigner. Added comments to keyrec_revoke_check()'s header detailing return codes. Added a description of keyrec_revoke_check() to the pod. ------------------------------------------------------------------------ r4900 | rstory | 2009-11-23 19:47:11 -0800 (Mon, 23 Nov 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/postfix/README.dnssec M /trunk/dnssec-tools/apps/postfix/postfix-dnssec.patch update patch for 2.7; add testcase for sender domain to readme ------------------------------------------------------------------------ r4899 | rstory | 2009-11-21 06:46:17 -0800 (Sat, 21 Nov 2009) | 1 line Changed paths: M /trunk/dnssec-tools/apps/ssh/README.ssh update patch name ------------------------------------------------------------------------ r4898 | baerm | 2009-11-18 20:23:57 -0800 (Wed, 18 Nov 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Added rollchk path ------------------------------------------------------------------------ r4897 | rstory | 2009-11-18 13:35:25 -0800 (Wed, 18 Nov 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h check for EAI_NODATA before using it ------------------------------------------------------------------------ r4896 | rstory | 2009-11-18 09:20:56 -0800 (Wed, 18 Nov 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/postfix/README.dnssec D /trunk/dnssec-tools/apps/postfix/postfix-2.5.1-dnssec-howto.txt D /trunk/dnssec-tools/apps/postfix/postfix-2.5.1_dnssec_patch.txt M /trunk/dnssec-tools/apps/postfix/postfix-dnssec.patch update to 2.5.1 patch, remove old files ------------------------------------------------------------------------ r4895 | rstory | 2009-11-18 09:20:01 -0800 (Wed, 18 Nov 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/postfix/README.dnssec D /trunk/dnssec-tools/apps/postfix/postfix-2.3.8_dnssec_patch.txt D /trunk/dnssec-tools/apps/postfix/postfix-2.3.x-dnssec-howto.txt M /trunk/dnssec-tools/apps/postfix/postfix-dnssec.patch update to 2.3.8 version; remove old files ------------------------------------------------------------------------ r4894 | rstory | 2009-11-18 09:18:10 -0800 (Wed, 18 Nov 2009) | 1 line Changed paths: D /trunk/dnssec-tools/apps/postfix/postfix-2.3.3_dnssec_patch.txt M /trunk/dnssec-tools/apps/postfix/postfix-dnssec.patch update patch to postfix-2.3.3, remove old file ------------------------------------------------------------------------ r4893 | rstory | 2009-11-18 09:17:14 -0800 (Wed, 18 Nov 2009) | 1 line Changed paths: A /trunk/dnssec-tools/apps/postfix/README.dnssec D /trunk/dnssec-tools/apps/postfix/postfix-2.2.11_dnssec_patch.txt D /trunk/dnssec-tools/apps/postfix/postfix-2.2.x-dnssec-howto.txt A /trunk/dnssec-tools/apps/postfix/postfix-dnssec.patch move postfix-2.2.* files to non-version-sepcific filenames ------------------------------------------------------------------------ r4892 | rstory | 2009-11-17 16:07:44 -0800 (Tue, 17 Nov 2009) | 1 line Changed paths: M /trunk/dnssec-tools/apps/ssh/ssh-dnssec.pat add error for untrusted no such name ------------------------------------------------------------------------ r4891 | rstory | 2009-11-17 10:11:56 -0800 (Tue, 17 Nov 2009) | 1 line Changed paths: M /trunk/dnssec-tools/apps/ssh/ssh-dnssec.pat change define name to match other patches ------------------------------------------------------------------------ r4890 | rstory | 2009-11-16 10:55:33 -0800 (Mon, 16 Nov 2009) | 1 line Changed paths: M /trunk/dnssec-tools/apps/ncftp/ncftp-dnssec.patch fix var used in configure macro ------------------------------------------------------------------------ r4889 | rstory | 2009-11-16 10:49:15 -0800 (Mon, 16 Nov 2009) | 1 line Changed paths: M /trunk/dnssec-tools/apps/lftp/lftp-dnssec.patch make val_context local; use new macro to decide when to check val_status ------------------------------------------------------------------------ r4888 | rstory | 2009-11-15 13:17:33 -0800 (Sun, 15 Nov 2009) | 1 line Changed paths: M /trunk/dnssec-tools/apps/proftpd/README.dnssec M /trunk/dnssec-tools/apps/proftpd/proftpd-dnssec.patch update patch for what will be proftpd 1.3.3 (cvs trunk) ------------------------------------------------------------------------ r4887 | tewok | 2009-11-14 17:49:50 -0800 (Sat, 14 Nov 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/signset-editor Handle KSKs in Keyrec Display mode. ------------------------------------------------------------------------ r4886 | tewok | 2009-11-14 09:36:55 -0800 (Sat, 14 Nov 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor Fixed a comment. ------------------------------------------------------------------------ r4885 | tewok | 2009-11-14 09:36:09 -0800 (Sat, 14 Nov 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor Deleted two unused variables. ------------------------------------------------------------------------ r4884 | tewok | 2009-11-13 15:08:51 -0800 (Fri, 13 Nov 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/signset-editor Fixed a pod error. ------------------------------------------------------------------------ r4883 | rstory | 2009-11-13 09:25:42 -0800 (Fri, 13 Nov 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c don't unwrap ipv4 addrs if NI_NUMERICHOST set; strip leading 0s in ipv6 addrs ------------------------------------------------------------------------ r4882 | rstory | 2009-11-13 07:23:17 -0800 (Fri, 13 Nov 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c bugfixes: do ipv4 lookup for ipv6 mapped ipv4 addrs; use u_char for addrs; code cleanup: use sizeof instead of calculating size of array ------------------------------------------------------------------------ r4881 | rstory | 2009-11-12 08:40:11 -0800 (Thu, 12 Nov 2009) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/getname.c fixes for getname ipv6 support ------------------------------------------------------------------------ r4880 | rstory | 2009-11-11 13:34:30 -0800 (Wed, 11 Nov 2009) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/getname.c add ipv6 support to getname app ------------------------------------------------------------------------ r4879 | rstory | 2009-11-11 09:08:21 -0800 (Wed, 11 Nov 2009) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c tabs to spaces ------------------------------------------------------------------------ r4878 | tewok | 2009-11-10 17:43:13 -0800 (Tue, 10 Nov 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Renamed a variable from "$key" to "$keyset". This was in ksk_expired() and zsk_expired(). ------------------------------------------------------------------------ r4877 | baerm | 2009-11-10 16:49:46 -0800 (Tue, 10 Nov 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/apps/getname.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c adjusted flags and some length checks, NUMERICHOST and NAMEREQD flags should work correctly ------------------------------------------------------------------------ r4876 | rstory | 2009-11-10 13:57:04 -0800 (Tue, 10 Nov 2009) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h fix another typo in new macro ------------------------------------------------------------------------ r4875 | tewok | 2009-11-10 13:38:41 -0800 (Tue, 10 Nov 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/krfcheck Small amount of code reorganization. ------------------------------------------------------------------------ r4874 | tewok | 2009-11-10 11:06:17 -0800 (Tue, 10 Nov 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsdnssec Fixed to handle multikey keysets properly. ------------------------------------------------------------------------ r4873 | tewok | 2009-11-10 09:43:56 -0800 (Tue, 10 Nov 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsdnssec Made all error exits have an error exit code. Added option validation for -d. ------------------------------------------------------------------------ r4872 | tewok | 2009-11-10 09:34:57 -0800 (Tue, 10 Nov 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsdnssec Fixed some typos and grammos. Fixed the pod to use the format other tools use. Reworded some pod. ------------------------------------------------------------------------ r4871 | tewok | 2009-11-10 09:20:26 -0800 (Tue, 10 Nov 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/keyarch Fixed grammos in code comments. ------------------------------------------------------------------------ r4870 | tewok | 2009-11-09 19:00:50 -0800 (Mon, 09 Nov 2009) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/fixkrf Fixed handling of zone keyrecs to not look for a kskpath field. --tHis line, and those below, will be ignored-- M fixkrf ------------------------------------------------------------------------ r4869 | tewok | 2009-11-09 14:53:07 -0800 (Mon, 09 Nov 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/cleankrf Fixed to handle KSK signing sets. Fixed a warning message to be a normal message. ------------------------------------------------------------------------ r4868 | rstory | 2009-11-09 11:53:54 -0800 (Mon, 09 Nov 2009) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h fix typo in macro ------------------------------------------------------------------------ r4867 | tewok | 2009-11-09 08:56:17 -0800 (Mon, 09 Nov 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/cleanarch Added a usage clarification to the pod. ------------------------------------------------------------------------ r4866 | tewok | 2009-11-09 08:22:46 -0800 (Mon, 09 Nov 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/cleanarch Fixed a grammo in the pod. ------------------------------------------------------------------------ r4864 | tewok | 2009-11-08 08:30:55 -0800 (Sun, 08 Nov 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/genkrf Added a missing double-quote that hosed program compilation. ------------------------------------------------------------------------ r4862 | hardaker | 2009-11-05 15:49:24 -0800 (Thu, 05 Nov 2009) | 1 line Changed paths: M /trunk/dnssec-tools/ChangeLog Update for verison 1.6.1.pre1 ------------------------------------------------------------------------ r4861 | hardaker | 2009-11-05 15:48:32 -0800 (Thu, 05 Nov 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/convertar add version number ------------------------------------------------------------------------ r4860 | hardaker | 2009-11-05 15:48:16 -0800 (Thu, 05 Nov 2009) | 1 line Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml add convertar ------------------------------------------------------------------------ r4859 | hardaker | 2009-11-05 15:47:30 -0800 (Thu, 05 Nov 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/maketestzone/maketestzone M /trunk/dnssec-tools/tools/mapper/mapper M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/bubbles M /trunk/dnssec-tools/tools/scripts/cleanarch M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtck M /trunk/dnssec-tools/tools/scripts/dtconf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/dtreqmods M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/getds M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lsdnssec M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rolllog M /trunk/dnssec-tools/tools/scripts/rollrec-editor M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/trustman M /trunk/dnssec-tools/tools/scripts/zonesigner Update Version Number: 1.6.1.pre1 ------------------------------------------------------------------------ r4858 | hardaker | 2009-11-05 15:44:34 -0800 (Thu, 05 Nov 2009) | 1 line Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml fix closing command tag ------------------------------------------------------------------------ r4857 | rstory | 2009-11-05 13:22:19 -0800 (Thu, 05 Nov 2009) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h add VAL_GET*INFO_HAS_STATUS macros; dont use C++ keywords as agruments/struct members ------------------------------------------------------------------------ r4856 | rstory | 2009-11-05 13:20:12 -0800 (Thu, 05 Nov 2009) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h add extern C wrapper so header can be included in C++ fiels ------------------------------------------------------------------------ r4855 | rstory | 2009-11-05 10:35:20 -0800 (Thu, 05 Nov 2009) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/proftpd/README.dnssec (from /trunk/dnssec-tools/apps/proftpd/proftpd-1.3.x-dnssec-howto.txt:4834) D /trunk/dnssec-tools/apps/proftpd/proftpd-1.3.x-dnssec-howto.txt D /trunk/dnssec-tools/apps/proftpd/proftpd-1.3.x_dnssec_patch.txt A /trunk/dnssec-tools/apps/proftpd/proftpd-dnssec.patch (from /trunk/dnssec-tools/apps/proftpd/proftpd-1.3.x_dnssec_patch.txt:4834) rename to non-version-specific file names ------------------------------------------------------------------------ r4854 | hardaker | 2009-11-05 10:22:59 -0800 (Thu, 05 Nov 2009) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/dnssecstatusOverlay.js dump status ------------------------------------------------------------------------ r4853 | tewok | 2009-11-05 07:47:50 -0800 (Thu, 05 Nov 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/krfcheck Added support for the nsec3rsasha1 algorithm. ------------------------------------------------------------------------ r4852 | hardaker | 2009-11-05 06:40:46 -0800 (Thu, 05 Nov 2009) | 1 line Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml sourceforge to our server ------------------------------------------------------------------------ r4851 | tewok | 2009-11-04 14:16:09 -0800 (Wed, 04 Nov 2009) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Deleted some extraneous minor comments. Added set_type as a signing set keyrec field, and adjusted how signing set types are notated in the initial example. ------------------------------------------------------------------------ r4850 | tewok | 2009-11-04 12:40:06 -0800 (Wed, 04 Nov 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/krfcheck Teach krfcheck about kskpub and kskrev keyrecs. ------------------------------------------------------------------------ r4849 | tewok | 2009-11-04 12:19:08 -0800 (Wed, 04 Nov 2009) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Fixed the example keyrecs in the header. Made keyrec_delval() an exported routine. Grammatical and formatting fixes. Added some inadvertently dropped "kskobs" uses. ------------------------------------------------------------------------ r4848 | hardaker | 2009-11-04 11:45:07 -0800 (Wed, 04 Nov 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/getds more error checking and exiting with better messages when problems detected ------------------------------------------------------------------------ r4847 | tewok | 2009-11-04 10:24:48 -0800 (Wed, 04 Nov 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pod Added a description of the keyrec_type field. Fixed the examples to be internally consistent. ------------------------------------------------------------------------ r4846 | tewok | 2009-11-03 16:32:52 -0800 (Tue, 03 Nov 2009) | 14 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner In handling a KSK directory, allow for -newpubksk as well as -genksk. On KSK rollover: - delete empty "kskpub" lines in the keyrec instead of giving them empty values. - delete empty "keys" lines in the set keyrec instead of giving it an empty value. On ZSK rollover: - don't give the published ZSK list an empty value. ------------------------------------------------------------------------ r4845 | tewok | 2009-11-03 08:31:17 -0800 (Tue, 03 Nov 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Including a '$' at the start of a scalar always helps... ------------------------------------------------------------------------ r4844 | tewok | 2009-11-03 08:28:58 -0800 (Tue, 03 Nov 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Ensure that a numeric phase is given, even when a phase isn't given in the rollrec file. ------------------------------------------------------------------------ r4842 | hserus | 2009-10-30 11:04:52 -0700 (Fri, 30 Oct 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/etc/dnsval.conf Add current DS record for dnssec-tools.org as a trust anchor ------------------------------------------------------------------------ r4841 | hardaker | 2009-10-30 09:59:12 -0700 (Fri, 30 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in don't set PREFIX for perl; just the bin prefixes ------------------------------------------------------------------------ r4840 | rstory | 2009-10-29 17:30:29 -0700 (Thu, 29 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/apps/wget/README M /trunk/dnssec-tools/apps/wget/wget-dnssec.patch update patch for wget 1.12 ------------------------------------------------------------------------ r4839 | rstory | 2009-10-29 13:36:21 -0700 (Thu, 29 Oct 2009) | 1 line Changed paths: A /trunk/dnssec-tools/apps/wget/README A /trunk/dnssec-tools/apps/wget/wget-dnssec.patch check in renamed patch/readme for 1.10.2 ------------------------------------------------------------------------ r4838 | rstory | 2009-10-29 13:29:13 -0700 (Thu, 29 Oct 2009) | 1 line Changed paths: D /trunk/dnssec-tools/apps/wget/wget-1.10.2-dnssec-howto.txt D /trunk/dnssec-tools/apps/wget/wget-1.10.2_dnssec_patch.txt move away from version specific file names ------------------------------------------------------------------------ r4837 | tewok | 2009-10-29 10:36:05 -0700 (Thu, 29 Oct 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Changed "KEK" to "KSK" in a comment. ------------------------------------------------------------------------ r4836 | tewok | 2009-10-28 08:49:27 -0700 (Wed, 28 Oct 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollinit Fixed formatting on a couple output lines. ------------------------------------------------------------------------ r4835 | tewok | 2009-10-28 08:47:32 -0700 (Wed, 28 Oct 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollinit Added missing "use rolllog" call. ------------------------------------------------------------------------ r4834 | hserus | 2009-10-26 14:56:56 -0700 (Mon, 26 Oct 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator-internal.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_assertion.h M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_policy.c Do away with the assertion cache within val_context_t ------------------------------------------------------------------------ r4833 | hserus | 2009-10-26 14:47:54 -0700 (Mon, 26 Oct 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap Change an error code and remove obsolete function ------------------------------------------------------------------------ r4832 | hserus | 2009-10-26 14:39:28 -0700 (Mon, 26 Oct 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_x_query.c Fixed wrong pointer increment ------------------------------------------------------------------------ r4831 | hserus | 2009-10-26 14:38:39 -0700 (Mon, 26 Oct 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Fixed source of compilation warnings - const correctness and checking for always true conditions. ------------------------------------------------------------------------ r4830 | hserus | 2009-10-26 14:36:23 -0700 (Mon, 26 Oct 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_get_rrset.c M /trunk/dnssec-tools/validator/libval/val_log.c Fixed const correctness ------------------------------------------------------------------------ r4829 | hserus | 2009-10-26 14:34:34 -0700 (Mon, 26 Oct 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/ns_print.c Ifdef NSEC3-specific label ------------------------------------------------------------------------ r4828 | hardaker | 2009-10-26 11:14:04 -0700 (Mon, 26 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/ns_print.c ifdef out the nsec3 printing case if not building with nsec3 support ------------------------------------------------------------------------ r4827 | rstory | 2009-10-25 12:45:42 -0700 (Sun, 25 Oct 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/ssh/README.ssh M /trunk/dnssec-tools/apps/ssh/ssh-dnssec.pat typo in README; update patch for 5.3p1 ------------------------------------------------------------------------ r4826 | rstory | 2009-10-23 20:53:11 -0700 (Fri, 23 Oct 2009) | 2 lines Changed paths: D /trunk/dnssec-tools/apps/ssh/openssh-5.0p1-dnssec.patch D /trunk/dnssec-tools/apps/ssh/openssh-5.1p1-dnssec.patch M /trunk/dnssec-tools/apps/ssh/ssh-dnssec.pat update patch for 5.1p1; remove version specific patches ------------------------------------------------------------------------ r4825 | rstory | 2009-10-23 20:51:57 -0700 (Fri, 23 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/apps/ssh/ssh-dnssec.pat update patch for 5.0p1 ------------------------------------------------------------------------ r4824 | tewok | 2009-10-23 08:37:53 -0700 (Fri, 23 Oct 2009) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap Better handling for assigning STDIN to a file-handle variable. Make sure we could actually open the input file. Really fix the pod formatting. ------------------------------------------------------------------------ r4823 | hardaker | 2009-10-23 06:57:15 -0700 (Fri, 23 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm.in fix check of argument count ------------------------------------------------------------------------ r4822 | rstory | 2009-10-22 19:30:51 -0700 (Thu, 22 Oct 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/ncftp/README M /trunk/dnssec-tools/apps/ncftp/ncftp-dnssec.patch add testing section to README. Don't use cached ip for bookmarked sites when dnssec validation enabled ------------------------------------------------------------------------ r4821 | rstory | 2009-10-21 19:09:17 -0700 (Wed, 21 Oct 2009) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/ncftp/README D /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.x-dnssec-howto.txt D /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.x_dnssec_patch.txt A /trunk/dnssec-tools/apps/ncftp/ncftp-dnssec.patch remove versiond patch files, rename howto to README, add patch for 3.2.3 ------------------------------------------------------------------------ r4820 | hardaker | 2009-10-21 16:59:42 -0700 (Wed, 21 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/Makefile.in M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in M /trunk/dnssec-tools/tools/donuts/Makefile.PL modified the install process to have --prefix indicate that perl file installation should be where specified, not where perl thinks ------------------------------------------------------------------------ r4819 | tewok | 2009-10-21 10:54:05 -0700 (Wed, 21 Oct 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added hyphens to the allowable characters in zone names in SOA records. ------------------------------------------------------------------------ r4818 | rstory | 2009-10-20 18:35:22 -0700 (Tue, 20 Oct 2009) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/lftp/README D /trunk/dnssec-tools/apps/lftp/lftp-3-5-10_dnssec_patch.txt D /trunk/dnssec-tools/apps/lftp/lftp-3.4.7-dnssec-howto.txt A /trunk/dnssec-tools/apps/lftp/lftp-dnssec.patch remove versioned patch files, add patch for 4.0.2, add README ------------------------------------------------------------------------ r4817 | tewok | 2009-10-20 18:19:55 -0700 (Tue, 20 Oct 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Added the -template option. ------------------------------------------------------------------------ r4816 | tewok | 2009-10-20 16:13:23 -0700 (Tue, 20 Oct 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Comment out uses of the viewimage config keyword. ------------------------------------------------------------------------ r4815 | hardaker | 2009-10-20 15:34:29 -0700 (Tue, 20 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm allow ENV override of GUI screen ------------------------------------------------------------------------ r4814 | hardaker | 2009-10-20 15:25:50 -0700 (Tue, 20 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm implement the desired getopt conventions discussed in a meeting: http://www.dnssec-tools.org/wiki/index.php/Command_Line_and_Configuration_File_Loading_Behaviour ------------------------------------------------------------------------ r4813 | hardaker | 2009-10-20 15:25:41 -0700 (Tue, 20 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm.in allow undef option to be passed into parseconfig() ------------------------------------------------------------------------ r4812 | hardaker | 2009-10-20 15:25:31 -0700 (Tue, 20 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm commenting a few lines ------------------------------------------------------------------------ r4811 | hardaker | 2009-10-20 15:25:20 -0700 (Tue, 20 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm support -h / --help even if Getopt::GUI::Long isn't avaliable ------------------------------------------------------------------------ r4810 | tewok | 2009-10-20 11:50:28 -0700 (Tue, 20 Oct 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod Removed entries for viewimage. ------------------------------------------------------------------------ r4809 | tewok | 2009-10-20 11:49:41 -0700 (Tue, 20 Oct 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Deleted the viewimage entry. ------------------------------------------------------------------------ r4808 | tewok | 2009-10-20 11:47:31 -0700 (Tue, 20 Oct 2009) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Added file checks for the keyarch, rollchk, and zonesigner entries. Added file checks for the rollerd logfile, resolv.conf, and trustman directory. Added a file check for the rndc entry. Deleted a file check for the viewimage entry. ------------------------------------------------------------------------ r4807 | tewok | 2009-10-20 11:35:43 -0700 (Tue, 20 Oct 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Commented out the viewimage keyword since it isn't currently in use. ------------------------------------------------------------------------ r4806 | tewok | 2009-10-20 09:46:53 -0700 (Tue, 20 Oct 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Added an entry for the rollchk command. ------------------------------------------------------------------------ r4805 | tewok | 2009-10-20 09:30:51 -0700 (Tue, 20 Oct 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod Changed "rollrec-check" to "rollchk". ------------------------------------------------------------------------ r4804 | tewok | 2009-10-20 09:26:58 -0700 (Tue, 20 Oct 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/zonesigner Changed the config key "rollrec-chk" to "rollchk". ------------------------------------------------------------------------ r4803 | tewok | 2009-10-20 09:25:43 -0700 (Tue, 20 Oct 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm.in Changed "rollrec-chk" to "rollchk". ------------------------------------------------------------------------ r4802 | tewok | 2009-10-20 09:24:31 -0700 (Tue, 20 Oct 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod Changed "rollrec-chk" to "rollrec". ------------------------------------------------------------------------ r4801 | tewok | 2009-10-20 08:45:51 -0700 (Tue, 20 Oct 2009) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Added -dtdir for specifying the locaiton of the DNSSEC-Tools programs. Renamed the internal "keyarch" variables to "keyarchdir". Added the specification of the keyarch program, based on the DNSSEC-Tools directory. Cleaned up some output. ------------------------------------------------------------------------ r4800 | tewok | 2009-10-19 16:26:25 -0700 (Mon, 19 Oct 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap Added "use strict;" and made a few modifications so this would work. Fixed some code spacing so it matched the rest of the code. ------------------------------------------------------------------------ r4799 | tewok | 2009-10-19 13:33:13 -0700 (Mon, 19 Oct 2009) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap Added a missing comma to the GetOptions() parameter list. Changed the -Version exit code to match other tools. Added an explicit "exit(0)" to the end of processing. Modified pod formatting to match other tools. Added a "SEE ALSO" section to the pod. ------------------------------------------------------------------------ r4798 | tewok | 2009-10-19 10:58:12 -0700 (Mon, 19 Oct 2009) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Added a few formatting newlines and tabs to improve the output of the key-related prompts. Fixed a variable in a prompt string. Added checks to ensure the KSK and ZSK lifespans fall within the range set by minlife and maxlife. ------------------------------------------------------------------------ r4797 | tewok | 2009-10-19 09:35:16 -0700 (Mon, 19 Oct 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Changed a "maxlife" to "minlife" for a verbose message. ------------------------------------------------------------------------ r4796 | tewok | 2009-10-19 09:24:54 -0700 (Mon, 19 Oct 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Added -maxlife and -minlife to allow specification of the maximum and minimum allowable key lifespans. ------------------------------------------------------------------------ r4794 | hardaker | 2009-10-16 17:02:20 -0700 (Fri, 16 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Secspider.pm make secspider write to a temp file instead of an IO::String which seems to be really really slow ------------------------------------------------------------------------ r4793 | hardaker | 2009-10-16 17:02:06 -0700 (Fri, 16 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/convertar A /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Secspider.pm add support for pulling data from secspider ------------------------------------------------------------------------ r4792 | hardaker | 2009-10-16 17:01:52 -0700 (Fri, 16 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Bind.pm allow for slightly differently quoted/printed bind files ------------------------------------------------------------------------ r4791 | hardaker | 2009-10-16 17:01:35 -0700 (Fri, 16 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Bind.pm allow bind to accept a file handle directly ------------------------------------------------------------------------ r4790 | hardaker | 2009-10-16 17:01:20 -0700 (Fri, 16 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Itar.pm M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm move the URL fetching ability to the base class for reuse ------------------------------------------------------------------------ r4789 | tewok | 2009-10-16 13:02:00 -0700 (Fri, 16 Oct 2009) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Grouped the BIND programs we care about together into an array. Added a config entry for rndc. Added a reserved BIND directory of "path", which implies that a program's path variable should be searched for BIND programs. Clarified a verbose message. ------------------------------------------------------------------------ r4788 | hardaker | 2009-10-15 11:14:24 -0700 (Thu, 15 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/getds add a -q option to getds ------------------------------------------------------------------------ r4786 | tewok | 2009-10-15 04:50:09 -0700 (Thu, 15 Oct 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Use the correct "rndc" instead of incorrect "bind_rndc". ------------------------------------------------------------------------ r4785 | tewok | 2009-10-15 04:49:18 -0700 (Thu, 15 Oct 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Use the correct "rndc" instead of incorrect "bind_rndc". ------------------------------------------------------------------------ r4784 | tewok | 2009-10-15 04:13:24 -0700 (Thu, 15 Oct 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod Added a description for the rndc entry. ------------------------------------------------------------------------ r4783 | tewok | 2009-10-14 12:29:19 -0700 (Wed, 14 Oct 2009) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Added the -kskcount option. Added the -ksklength option. Very minor code rearrangements ------------------------------------------------------------------------ r4782 | tewok | 2009-10-14 11:57:07 -0700 (Wed, 14 Oct 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Fixed to use "ksklength" instead of "ksklen". Fixed to use "zsklength" instead of "zsklen". ------------------------------------------------------------------------ r4781 | hardaker | 2009-10-14 09:00:55 -0700 (Wed, 14 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Bind.pm M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Libval.pm M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Mf.pm fix trailer specifier for certain file formats ------------------------------------------------------------------------ r4780 | hardaker | 2009-10-14 08:54:04 -0700 (Wed, 14 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/convertar document extension extrapolation ------------------------------------------------------------------------ r4779 | hardaker | 2009-10-14 08:53:54 -0700 (Wed, 14 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm try and infer a file format from a suffix ------------------------------------------------------------------------ r4778 | tewok | 2009-10-14 06:36:13 -0700 (Wed, 14 Oct 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Made -gends a default option. Added -nogends to prevent generation of DS records. ------------------------------------------------------------------------ r4777 | tewok | 2009-10-14 06:33:50 -0700 (Wed, 14 Oct 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Added -nogends as a standard option. ------------------------------------------------------------------------ r4776 | hserus | 2009-10-13 14:55:05 -0700 (Tue, 13 Oct 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Don't display zonecut in log message since this can be null ------------------------------------------------------------------------ r4775 | hserus | 2009-10-13 14:49:57 -0700 (Tue, 13 Oct 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Add couple of log statements ------------------------------------------------------------------------ r4774 | hserus | 2009-10-13 14:41:59 -0700 (Tue, 13 Oct 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Don't fetch glue if we're already fetching glue -- do this properly. ------------------------------------------------------------------------ r4773 | hardaker | 2009-10-13 13:30:08 -0700 (Tue, 13 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/convertar rearrange documentation sections ------------------------------------------------------------------------ r4772 | hardaker | 2009-10-13 13:29:53 -0700 (Tue, 13 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/convertar M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Itar.pm M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm allow the itar: specification to directly download the file over the web ------------------------------------------------------------------------ r4771 | hardaker | 2009-10-13 13:29:31 -0700 (Tue, 13 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/convertar more documentation fixes ------------------------------------------------------------------------ r4770 | hardaker | 2009-10-13 13:29:13 -0700 (Tue, 13 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/convertar A /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Dns.pm added a DNS convertion type ------------------------------------------------------------------------ r4769 | hardaker | 2009-10-13 13:28:47 -0700 (Tue, 13 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/convertar handle and document multiple input/output file specfiications ------------------------------------------------------------------------ r4768 | hardaker | 2009-10-13 10:30:38 -0700 (Tue, 13 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/t/partial1.csv M /trunk/dnssec-tools/tools/convertar/t/partial2.csv M /trunk/dnssec-tools/tools/convertar/t/partialcomplete.csv added merging of identical names with different DS records ------------------------------------------------------------------------ r4767 | hardaker | 2009-10-13 10:30:27 -0700 (Tue, 13 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm remove debugging statement ------------------------------------------------------------------------ r4766 | hardaker | 2009-10-13 10:30:12 -0700 (Tue, 13 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm M /trunk/dnssec-tools/tools/scripts/trustman fix broken back and add another back to terminate a starting =over ------------------------------------------------------------------------ r4765 | hardaker | 2009-10-13 09:36:14 -0700 (Tue, 13 Oct 2009) | 1 line Changed paths: A /trunk/dnssec-tools/tools/convertar/t/50merge.t A /trunk/dnssec-tools/tools/convertar/t/partial1.csv A /trunk/dnssec-tools/tools/convertar/t/partial2.csv A /trunk/dnssec-tools/tools/convertar/t/partialcomplete.csv tests for merging tars together ------------------------------------------------------------------------ r4764 | hardaker | 2009-10-13 09:35:57 -0700 (Tue, 13 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Bind.pm M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Csv.pm M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Dump.pm M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Itar.pm M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Libval.pm M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Mf.pm M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm make read() returned a blessed module; all modules implement read_content instead for convenience ------------------------------------------------------------------------ r4763 | hardaker | 2009-10-13 09:35:28 -0700 (Tue, 13 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm merge function ------------------------------------------------------------------------ r4762 | hserus | 2009-10-13 08:23:32 -0700 (Tue, 13 Oct 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h Use correct stagger value when querying different name servers ------------------------------------------------------------------------ r4761 | hserus | 2009-10-13 08:21:30 -0700 (Tue, 13 Oct 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c Log the name of the correct function being invoked ------------------------------------------------------------------------ r4760 | hardaker | 2009-10-12 12:06:58 -0700 (Mon, 12 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/getds actually honor the -z flag ------------------------------------------------------------------------ r4759 | hardaker | 2009-10-12 12:06:47 -0700 (Mon, 12 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/getds ennumerate the errors in the output ------------------------------------------------------------------------ r4758 | hardaker | 2009-10-12 12:06:38 -0700 (Mon, 12 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/getds default to both algorithms and allow generation of both ------------------------------------------------------------------------ r4757 | hardaker | 2009-10-12 12:06:29 -0700 (Mon, 12 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/getds use upper case printing ------------------------------------------------------------------------ r4756 | hardaker | 2009-10-12 12:06:19 -0700 (Mon, 12 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL M /trunk/dnssec-tools/tools/scripts/getds make matching of things exclude everything up to the DS field and the comments ------------------------------------------------------------------------ r4755 | tewok | 2009-10-12 07:32:34 -0700 (Mon, 12 Oct 2009) | 9 lines Changed paths: M /trunk/dnssec-tools/tools/convertar/convertar Pod changes: - Used the standard description section header. - Fixed some typos and grammos. - Changed in a few place to use our normal pod formats in commands and option names.. - Added a "see also". ------------------------------------------------------------------------ r4754 | tewok | 2009-10-12 06:50:40 -0700 (Mon, 12 Oct 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed capitalization of a pod header. ------------------------------------------------------------------------ r4753 | baerm | 2009-10-08 08:01:12 -0700 (Thu, 08 Oct 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/INSTALL Updated perl modules requirements for testing Test::Simple => Test::Builder, added String::Diff ------------------------------------------------------------------------ r4752 | hardaker | 2009-10-02 06:19:53 -0700 (Fri, 02 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/getds use normal style command line manual syntax ------------------------------------------------------------------------ r4751 | hardaker | 2009-10-02 06:19:45 -0700 (Fri, 02 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS mention new getds functionality ------------------------------------------------------------------------ r4750 | hardaker | 2009-10-02 06:19:31 -0700 (Fri, 02 Oct 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/getds make getds check the parent DS rceords as well ------------------------------------------------------------------------ r4749 | hserus | 2009-09-30 07:31:20 -0700 (Wed, 30 Sep 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Fix nsec bitmap type checking ------------------------------------------------------------------------ r4748 | hardaker | 2009-09-29 11:06:21 -0700 (Tue, 29 Sep 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/convertar added copyright and author ------------------------------------------------------------------------ r4747 | hardaker | 2009-09-29 10:31:56 -0700 (Tue, 29 Sep 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/convertar convertar documentation ------------------------------------------------------------------------ r4746 | hardaker | 2009-09-24 16:17:40 -0700 (Thu, 24 Sep 2009) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS updates for 1.6 ------------------------------------------------------------------------ r4745 | hardaker | 2009-09-24 16:17:36 -0700 (Thu, 24 Sep 2009) | 1 line Changed paths: M /trunk/dnssec-tools/ChangeLog changelog update ------------------------------------------------------------------------ r4744 | hserus | 2009-09-24 13:59:36 -0700 (Thu, 24 Sep 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Fix potential issue with IPv6 glue ------------------------------------------------------------------------ r4743 | hserus | 2009-09-24 12:27:59 -0700 (Thu, 24 Sep 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/NEWS Added new libval-related news iterms for 1.6 ------------------------------------------------------------------------ r4742 | hserus | 2009-09-23 09:36:41 -0700 (Wed, 23 Sep 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Q_LAME_SERVER is not a very useful code since other Q_REFERRAL_ERROR may also indicate that we have a lame nameserver. ------------------------------------------------------------------------ r4741 | hserus | 2009-09-23 09:36:10 -0700 (Wed, 23 Sep 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Q_LAME_SERVER is not a very useful code since other Q_REFERRAL_ERROR may also indicate that we have a lame nameserver. ------------------------------------------------------------------------ r4740 | hserus | 2009-09-23 09:35:37 -0700 (Wed, 23 Sep 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc Q_LAME_SERVER is not a very useful code since other Q_REFERRAL_ERROR may also indicate that we have a lame nameserver. ------------------------------------------------------------------------ r4739 | hserus | 2009-09-23 09:13:40 -0700 (Wed, 23 Sep 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Check for referral loops before we bootstrap the new referral. Don't free up the referral structure if we have errors, since we want to be able to detect referral errors for responses returned from other nameservers too. ------------------------------------------------------------------------ r4738 | hserus | 2009-09-23 07:13:58 -0700 (Wed, 23 Sep 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c Return correct type of buffer ------------------------------------------------------------------------ r4737 | hserus | 2009-09-23 06:56:20 -0700 (Wed, 23 Sep 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc Remove unused error code ------------------------------------------------------------------------ r4736 | hserus | 2009-09-23 06:55:09 -0700 (Wed, 23 Sep 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c When verifying proof for wildcard expansion don't rely on trusted but non-validated proof components ------------------------------------------------------------------------ r4735 | hserus | 2009-09-23 06:52:21 -0700 (Wed, 23 Sep 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/val_errors.h Remove unused constant ------------------------------------------------------------------------ r4734 | hserus | 2009-09-22 21:32:49 -0700 (Tue, 22 Sep 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_assertion.h Add initial suport for NSEC3. Also rewrote much of the prove_nonexistence logic so that it was consistent between nsec and nsec3 proof checking. ------------------------------------------------------------------------ r4733 | hserus | 2009-09-22 21:30:07 -0700 (Tue, 22 Sep 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_parse.c Allow for 0 length NSEC3 bitfields ------------------------------------------------------------------------ r4732 | hserus | 2009-09-22 21:28:53 -0700 (Tue, 22 Sep 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.c Minor formatting fixes ------------------------------------------------------------------------ r4731 | hserus | 2009-09-22 21:27:49 -0700 (Tue, 22 Sep 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/ns_print.c Support printing of NSEC3 and DS/SHA256 esource records ------------------------------------------------------------------------ r4730 | hserus | 2009-09-22 21:26:10 -0700 (Tue, 22 Sep 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h define identifiers for SHA1 and SHA256. Although validator.h contains these definitions, we don't want libsres to have to depend on validator.h ------------------------------------------------------------------------ r4728 | hardaker | 2009-09-17 16:32:38 -0700 (Thu, 17 Sep 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf use a conditional load of the LWP::UserAgent ------------------------------------------------------------------------ r4727 | baerm | 2009-09-17 09:03:20 -0700 (Thu, 17 Sep 2009) | 6 lines Changed paths: M /trunk/dnssec-tools/testing/Makefile.in M /trunk/dnssec-tools/testing/t/010zonesigner.t M /trunk/dnssec-tools/testing/t/030trustman.t M /trunk/dnssec-tools/testing/t/050trustman-rollerd.t M /trunk/dnssec-tools/testing/t/dt_testingtools.pl Fix trustman-rollerd script use local perl packages. some output changes add some verbose options to makefile ------------------------------------------------------------------------ r4726 | tewok | 2009-09-15 10:08:25 -0700 (Tue, 15 Sep 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/Makefile.PL Fixed the MakeMaker name option. ------------------------------------------------------------------------ r4725 | tewok | 2009-09-15 10:07:20 -0700 (Tue, 15 Sep 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL Added a line to the cleaning target for deleting the packed trustman. ------------------------------------------------------------------------ r4724 | tewok | 2009-09-15 10:07:02 -0700 (Tue, 15 Sep 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Makefile.PL Added a line to the cleaning target for deleting the packed donutsd. ------------------------------------------------------------------------ r4723 | tewok | 2009-09-15 10:06:32 -0700 (Tue, 15 Sep 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/convertar/Makefile.PL Added a line to the cleaning target for deleting the packed program. ------------------------------------------------------------------------ r4722 | tewok | 2009-09-15 10:05:32 -0700 (Tue, 15 Sep 2009) | 8 lines Changed paths: A /trunk/dnssec-tools/tools/Makefile.PL Makefile for building packed commands. The following targets are provided: packed_dist Gather the packed commands, building if needed. packed_distclean Clean the gathered packed commands. packed_commands Build the packed command files. clean_packed Clean the packed commands. ------------------------------------------------------------------------ r4721 | hserus | 2009-09-14 06:16:34 -0700 (Mon, 14 Sep 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Don't recurse from root if we have a local nameserver listed in resolv.conf ------------------------------------------------------------------------ r4720 | hserus | 2009-09-11 13:38:27 -0700 (Fri, 11 Sep 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc Add new constants Q_LAME_SERVER and VAL_AC_INVALID_DS Renamed VAL_AC_NO_TRUST_ANCHOR to VAL_AC_NO_LINK Fixed couple of switches and reordered cases alphabetically where made sense ------------------------------------------------------------------------ r4719 | hserus | 2009-09-11 12:57:24 -0700 (Fri, 11 Sep 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/etc/dnsval.conf Remove DLV and NSEC3 related config params for now ------------------------------------------------------------------------ r4718 | hserus | 2009-09-11 12:29:15 -0700 (Fri, 11 Sep 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/etc/dnsval.conf remove snip zones ------------------------------------------------------------------------ r4717 | hserus | 2009-09-11 12:25:38 -0700 (Fri, 11 Sep 2009) | 15 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator-internal.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_resquery.h M /trunk/dnssec-tools/validator/libval/val_support.h Changed the glue fetching logic -- now only fetch glue if none of our existing name servers are useful. This means that we now keep pending glue around and have a separate pointer referencing the current glue being fetched. bootstrap_referral() may return partial glue, never expect complete sets. Use new functions in libsres to control when we want to skip the current ns and when we want to cancel the query entirely. Misc fixes associated with this change: - set zonecut where appropriate - fix find_next_zonecut() - in verify_provably_insecure() try to use existing zonecut information before attempting to find one using find_next_zonecut() - dont fetch DNSKEYs too early in a referral chain ------------------------------------------------------------------------ r4716 | hserus | 2009-09-11 12:06:07 -0700 (Fri, 11 Sep 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Define new query error state denoting a lame server ------------------------------------------------------------------------ r4715 | hserus | 2009-09-11 12:03:52 -0700 (Fri, 11 Sep 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_query.c Rely on libval to control query transactions ------------------------------------------------------------------------ r4714 | hserus | 2009-09-11 12:03:09 -0700 (Fri, 11 Sep 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.h Define new functions that allow libval to control libsres query transactions to some extent ------------------------------------------------------------------------ r4713 | hserus | 2009-09-11 12:01:39 -0700 (Fri, 11 Sep 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/libsres/res_io_manager.c Define functions that enables validator to control libsres query transactions to some extent. Define new parameter that sets how far apart we should stagger queries to different authoritative name servers ------------------------------------------------------------------------ r4712 | hardaker | 2009-09-10 15:50:03 -0700 (Thu, 10 Sep 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/tooloptions.pm M /trunk/dnssec-tools/tools/scripts/INFO M /trunk/dnssec-tools/tools/scripts/zonesigner modified defaults, documentation and example text to a ZSK size of 1024 (back from 2048) per upcoming NIST reduction in required ZSK size recommendations ------------------------------------------------------------------------ r4711 | tewok | 2009-09-10 09:39:34 -0700 (Thu, 10 Sep 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed references to current directory and away from ".". This is a follow-on to the -directory changes. ------------------------------------------------------------------------ r4710 | tewok | 2009-09-09 14:19:39 -0700 (Wed, 09 Sep 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added a -keydirectory line to the usage output. ------------------------------------------------------------------------ r4709 | tewok | 2009-09-09 14:17:25 -0700 (Wed, 09 Sep 2009) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added -keydirectory for specifying the directory in which KSK and ZSK keys will be stored. Added additional validation checks for the KSK and ZSK key directories. ------------------------------------------------------------------------ r4708 | tewok | 2009-09-09 10:47:22 -0700 (Wed, 09 Sep 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Capitalization fix for some option descriptions. ------------------------------------------------------------------------ r4707 | tewok | 2009-09-09 10:29:07 -0700 (Wed, 09 Sep 2009) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Changed the $usensec3 flag check to use boolconvert(). Added documentation for -kskdirectory and -zskdirectory. Rearranged some of the option descriptions. ------------------------------------------------------------------------ r4706 | baerm | 2009-09-09 08:36:30 -0700 (Wed, 09 Sep 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/testing/t/010zonesigner.t Added bind version test for nsec3 support. ------------------------------------------------------------------------ r4705 | baerm | 2009-09-08 18:47:14 -0700 (Tue, 08 Sep 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/testing/Makefile.in A /trunk/dnssec-tools/testing/saved-named.ca A /trunk/dnssec-tools/testing/saved-named.conf A /trunk/dnssec-tools/testing/saved-named.rfc1912.zones A /trunk/dnssec-tools/testing/saved-rndc.key Added configuration files for trustman-rollerd test ------------------------------------------------------------------------ r4704 | baerm | 2009-09-08 18:43:09 -0700 (Tue, 08 Sep 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/testing/t/010zonesigner.t M /trunk/dnssec-tools/testing/t/020donuts.t M /trunk/dnssec-tools/testing/t/025donutsd.t M /trunk/dnssec-tools/testing/t/030trustman.t M /trunk/dnssec-tools/testing/t/040rollerd.t A /trunk/dnssec-tools/testing/t/050trustman-rollerd.t M /trunk/dnssec-tools/testing/t/dt_testingtools.pl Added trustman rollerd interaction test script Minor updates to other scripts ------------------------------------------------------------------------ r4703 | tewok | 2009-09-08 17:40:33 -0700 (Tue, 08 Sep 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor Commented out an on-exit debugging message. ------------------------------------------------------------------------ r4702 | hardaker | 2009-09-08 10:28:11 -0700 (Tue, 08 Sep 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/Makefile.PL don't require XML::SAX when building packed; install on systems where needed? ------------------------------------------------------------------------ r4701 | tewok | 2009-09-08 09:21:48 -0700 (Tue, 08 Sep 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Moved the execution directory validation code prior to the -parameters handling. This forces -parameters to give the actual directory when -directory isn't given, rather than giving ".". ------------------------------------------------------------------------ r4700 | hardaker | 2009-09-07 15:10:58 -0700 (Mon, 07 Sep 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm version bump ------------------------------------------------------------------------ r4699 | hardaker | 2009-09-07 15:08:00 -0700 (Mon, 07 Sep 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs.t fix parsing of SOA names and missing trailing dots in SOA line components; cpan bug 17745 ------------------------------------------------------------------------ r4698 | hardaker | 2009-09-07 14:59:39 -0700 (Mon, 07 Sep 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rr-dnssec.t require at least one digit for a ttl to avoid DS being a possible TTL value ------------------------------------------------------------------------ r4697 | hardaker | 2009-09-07 14:39:12 -0700 (Mon, 07 Sep 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs.t fix HINFO records with no-spaces and no-quotes ------------------------------------------------------------------------ r4696 | hardaker | 2009-09-07 14:22:54 -0700 (Mon, 07 Sep 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm apply recommended patch from cpan bug 34445 to fix? wildcard parsing; works for me without it but the patch looks right ------------------------------------------------------------------------ r4695 | hardaker | 2009-09-07 14:20:38 -0700 (Mon, 07 Sep 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs.t added a wildcard test ------------------------------------------------------------------------ r4694 | hardaker | 2009-09-07 14:13:25 -0700 (Mon, 07 Sep 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rr-dnssec.t reenable an older failing test, since the white space issues have disappeared ------------------------------------------------------------------------ r4693 | hardaker | 2009-09-07 14:12:41 -0700 (Mon, 07 Sep 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rr-dnssec.t added a new test entry for a root zone rrsig ------------------------------------------------------------------------ r4692 | hardaker | 2009-09-07 14:08:56 -0700 (Mon, 07 Sep 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm fix bug 46790 on cpan to allow root (.) RRSIGs ------------------------------------------------------------------------ r4691 | hserus | 2009-09-04 22:10:48 -0700 (Fri, 04 Sep 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Force query to nameserver listed in validator context before trying other options. Fix zonecut information only if we receive answer with aa bit set. Cache name server information returned in response only if we did not ask for recursion. Force RD off when we are not sending to the name server listed in the validator context ------------------------------------------------------------------------ r4690 | hserus | 2009-09-04 19:47:50 -0700 (Fri, 04 Sep 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c Fix validation of authentication chains that contain DS records with an incorrect keytag but with a correct hash of the child key ------------------------------------------------------------------------ r4689 | hserus | 2009-09-04 19:43:12 -0700 (Fri, 04 Sep 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.h In CREATE_NSADDR_ARRAY break as soon as we run out of memory ------------------------------------------------------------------------ r4688 | hserus | 2009-09-04 19:40:14 -0700 (Fri, 04 Sep 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_parse.c Change return code from val_parse_ds_rdata if hash algorithm is unknown ------------------------------------------------------------------------ r4687 | hserus | 2009-09-04 19:29:34 -0700 (Fri, 04 Sep 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_crypto.c Add resolver.h to be consistent with other files ------------------------------------------------------------------------ r4686 | hserus | 2009-09-04 19:28:08 -0700 (Fri, 04 Sep 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_get_rrset.c Include validator-internal.h to get certain structure definitions ------------------------------------------------------------------------ r4685 | hserus | 2009-09-04 19:13:18 -0700 (Fri, 04 Sep 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c Add log support for VAL_AC_NO_LINK and VAL_AC_INVALID_DS error codes ------------------------------------------------------------------------ r4684 | hserus | 2009-09-04 19:12:30 -0700 (Fri, 04 Sep 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Break out of potential infinite loop when recursive name server gives bad name server hints for DS record ------------------------------------------------------------------------ r4683 | hserus | 2009-09-04 19:11:33 -0700 (Fri, 04 Sep 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c Fix signed/unsigned mismatch ------------------------------------------------------------------------ r4682 | hserus | 2009-09-04 19:11:05 -0700 (Fri, 04 Sep 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Rename VAL_AC_NO_TRUST_ANCHOR to VAL_AC_NO_LINK ------------------------------------------------------------------------ r4681 | hserus | 2009-09-04 19:10:02 -0700 (Fri, 04 Sep 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod Rename VAL_AC_NO_TRUST_ANCHOR to VAL_AC_NO_LINK; add description for VAL_AC_INVALID_DS ------------------------------------------------------------------------ r4680 | hserus | 2009-09-04 19:08:14 -0700 (Fri, 04 Sep 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval-implementation-notes Rename VAL_AC_NO_TRUST_ANCHOR to VAL_AC_NO_LINK; update possible error codes for DS record sets ------------------------------------------------------------------------ r4679 | hserus | 2009-09-04 19:04:30 -0700 (Fri, 04 Sep 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/val_errors.h Add error code for VAL_AC_INVALID_DS. Also rename VAL_AC_TRUST_ANCHOR to VAL_AC_NO_LINK ------------------------------------------------------------------------ r4678 | tewok | 2009-09-04 11:27:02 -0700 (Fri, 04 Sep 2009) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Added checks for nsec3rsasha1 being a valid algorithm. Fixed some key-length maximums for several encryption algorithms. Added checks for validity of the NSEC3 iteration count. Passed the proper error output flag on ksklength/zsklength not being defined. ------------------------------------------------------------------------ r4677 | tewok | 2009-09-02 12:23:43 -0700 (Wed, 02 Sep 2009) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Added support for the NSEC3 booleans: usensec3, nsec3optout. Added pod describing valid booleans. Modified some pod descriptions for boolean fields. ------------------------------------------------------------------------ r4676 | tewok | 2009-09-02 09:47:08 -0700 (Wed, 02 Sep 2009) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Reordered option handling so that -parameters doesn't require the -rrf option. Reworded a few comments. ------------------------------------------------------------------------ r4675 | tewok | 2009-09-02 08:33:18 -0700 (Wed, 02 Sep 2009) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Fixed handling of -noreload. Added pod describing zone reloading. Fixed a few spelling and grammatical errors. ------------------------------------------------------------------------ r4674 | tewok | 2009-09-01 17:31:29 -0700 (Tue, 01 Sep 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm.in Added boolconvert() to parse boolean configuration entry values. ------------------------------------------------------------------------ r4673 | tewok | 2009-09-01 17:15:01 -0700 (Tue, 01 Sep 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Added support for the roll_loadzone configuration option. ------------------------------------------------------------------------ r4672 | tewok | 2009-09-01 11:56:36 -0700 (Tue, 01 Sep 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Fixed rollerd's logging levels so they match what the code actually uses. ------------------------------------------------------------------------ r4671 | tewok | 2009-09-01 11:54:24 -0700 (Tue, 01 Sep 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Added checks that roll_loadzone is a valid boolean. Modified boolean checks so that valid values are 1, 0, yes, no, true, and false. ------------------------------------------------------------------------ r4670 | tewok | 2009-09-01 11:22:50 -0700 (Tue, 01 Sep 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Added roll_loadzone as a default. ------------------------------------------------------------------------ r4669 | tewok | 2009-09-01 11:20:30 -0700 (Tue, 01 Sep 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod Added entries for roll_loadzone. ------------------------------------------------------------------------ r4668 | tewok | 2009-09-01 11:14:39 -0700 (Tue, 01 Sep 2009) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm.in makelocalstatedir() mods: - collapsed the two mkpath() calls into one. - added checking for the path not ending in a directory Fixed a minor pod error. ------------------------------------------------------------------------ r4667 | tewok | 2009-09-01 10:26:26 -0700 (Tue, 01 Sep 2009) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added -noreload to prevent rollerd from calling rndc. Changed some actual-tabs to "\t" tabs in the -parameters output. Sorted the pod option descriptions. ------------------------------------------------------------------------ r4666 | tewok | 2009-09-01 08:38:17 -0700 (Tue, 01 Sep 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm.in Fixed problem in makelocalstatedir() that occurs when the local state directory consists of multiple nonexistent directories. ------------------------------------------------------------------------ r4665 | tewok | 2009-08-31 15:59:40 -0700 (Mon, 31 Aug 2009) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm.in Reworked makelocalstatedir(): - better handles the case when a subdirectory is given - gives error returns when errors happen Added makelocalstatedir() examples to the pod Synopsis section. Expanded the pod description of makelocalstatedir(). ------------------------------------------------------------------------ r4663 | tewok | 2009-08-31 08:04:17 -0700 (Mon, 31 Aug 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/convertar/Makefile.PL Added line to clean up the SAX directory, which is needed in packing. ------------------------------------------------------------------------ r4662 | tewok | 2009-08-28 12:17:31 -0700 (Fri, 28 Aug 2009) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/convertar/convertar Added support for running packed: - use the packed DNSSEC-Tools config file - make sure the packed ParserDetails.ini file is where XML::SAX expects ------------------------------------------------------------------------ r4661 | tewok | 2009-08-28 12:15:51 -0700 (Fri, 28 Aug 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/convertar/Makefile.PL Added support for packed execution of convertar. ------------------------------------------------------------------------ r4660 | tewok | 2009-08-26 10:52:33 -0700 (Wed, 26 Aug 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL Fixed library inclusion to be less OSX-specific. ------------------------------------------------------------------------ r4659 | tewok | 2009-08-26 10:49:12 -0700 (Wed, 26 Aug 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Makefile.PL Fixed library inclusion to be less OSX-specific. ------------------------------------------------------------------------ r4658 | tewok | 2009-08-26 09:54:16 -0700 (Wed, 26 Aug 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL Added /bin and /sbin to the collection of paths to search for BIND programs. ------------------------------------------------------------------------ r4657 | tewok | 2009-08-26 09:52:54 -0700 (Wed, 26 Aug 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Makefile.PL Added /bin and /sbin to the collection of paths to search for tcpdump. ------------------------------------------------------------------------ r4656 | tewok | 2009-08-25 17:00:28 -0700 (Tue, 25 Aug 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Makefile.PL Added support for packing donutsd. ------------------------------------------------------------------------ r4655 | tewok | 2009-08-25 16:59:31 -0700 (Tue, 25 Aug 2009) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donutsd Added support for packed execution: - use local copy of donuts Added an error message if an SMTP object couldn't be created. Slight adjustments to part of the email notice. ------------------------------------------------------------------------ r4654 | tewok | 2009-08-25 09:34:59 -0700 (Tue, 25 Aug 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donutsd Fixed a couple typos. Reworded a pod sentence. ------------------------------------------------------------------------ r4653 | hardaker | 2009-08-25 09:28:32 -0700 (Tue, 25 Aug 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/donutsd fix examples to match current usage and proper example domain usage ------------------------------------------------------------------------ r4652 | tewok | 2009-08-25 08:45:15 -0700 (Tue, 25 Aug 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donutsd Add a reference to timetrans for converting large time units to seconds. ------------------------------------------------------------------------ r4651 | tewok | 2009-08-25 08:18:06 -0700 (Tue, 25 Aug 2009) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts Pod fixes dealing with missing =over's and =back's. Pod formatting fixes. Spelling and punctuation fixes. ------------------------------------------------------------------------ r4650 | hardaker | 2009-08-24 17:07:46 -0700 (Mon, 24 Aug 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts update documentation based on suggestions from Wayne ------------------------------------------------------------------------ r4649 | tewok | 2009-08-24 16:35:14 -0700 (Mon, 24 Aug 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Makefile.PL Added support for building packed versions of donuts. ------------------------------------------------------------------------ r4648 | tewok | 2009-08-24 16:20:47 -0700 (Mon, 24 Aug 2009) | 10 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts Completed support for running in a packed environment. - force INC directory for inclusion of packed Perl modules - pick up local config file - use local tcpdump command Fixed a comment typo. Fixed some formatting and punctuatio problems in the pod. ------------------------------------------------------------------------ r4647 | tewok | 2009-08-21 11:58:44 -0700 (Fri, 21 Aug 2009) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/mapper/Makefile.PL Added support for building a packed version of mapper. The following targets are available for general use: packed_commands Build the packed mapper files. clean_packed Clean the packed mapper. ------------------------------------------------------------------------ r4646 | tewok | 2009-08-21 11:41:12 -0700 (Fri, 21 Aug 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper Added support for packed execution. ------------------------------------------------------------------------ r4645 | tewok | 2009-08-20 15:44:24 -0700 (Thu, 20 Aug 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper Two pod fixes. ------------------------------------------------------------------------ r4644 | tewok | 2009-08-20 10:34:55 -0700 (Thu, 20 Aug 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO M /trunk/dnssec-tools/tools/scripts/README Added descriptions of dtreqmods. ------------------------------------------------------------------------ r4643 | tewok | 2009-08-20 10:33:20 -0700 (Thu, 20 Aug 2009) | 4 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/dtreqmods New command to check for Perl modules required by DNSSEC-Tools. ------------------------------------------------------------------------ r4642 | baerm | 2009-08-20 08:52:55 -0700 (Thu, 20 Aug 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_policy.h Added to parsing of resolv.conf nameserver token '[address]:port' format can now be used ------------------------------------------------------------------------ r4641 | tewok | 2009-08-19 13:53:46 -0700 (Wed, 19 Aug 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm Changed the pod Synopsis to reference DTGetOptions() instead of GetOptions(). Minor wording change to description. ------------------------------------------------------------------------ r4640 | tewok | 2009-08-19 13:50:22 -0700 (Wed, 19 Aug 2009) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/getds Added the initial copyright. Slightly adjusted an option description. Modified the pod to include option descriptions and copyright, as well as a minor grammatical fix. ------------------------------------------------------------------------ r4639 | tewok | 2009-08-19 10:34:11 -0700 (Wed, 19 Aug 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL Added libraries and modules needed for packed trustman. ------------------------------------------------------------------------ r4638 | tewok | 2009-08-19 09:48:23 -0700 (Wed, 19 Aug 2009) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Added code so that packed executions will use the local resolv.conf if one hasn't been specified already. Changed pod to give options with single dashes instead of double dashes. ------------------------------------------------------------------------ r4637 | tewok | 2009-08-19 08:25:12 -0700 (Wed, 19 Aug 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Deleted some debugging prints. ------------------------------------------------------------------------ r4636 | tewok | 2009-08-19 08:17:36 -0700 (Wed, 19 Aug 2009) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Modified to validate all options before giving a usage message and dying. (On errors, that is.) Tried to bring a little consistency to error messages. ------------------------------------------------------------------------ r4635 | tewok | 2009-08-17 17:27:31 -0700 (Mon, 17 Aug 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Added the -ta-tmpdir option for specifying trustman's temporary directory. Changed "TrustMan" to "trustman" (to match trustman's pod.) ------------------------------------------------------------------------ r4634 | tewok | 2009-08-17 17:00:43 -0700 (Mon, 17 Aug 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Changed the invali "tatmpfile" to "tatmpdir". Fixed a spelling error in a comment. ------------------------------------------------------------------------ r4633 | tewok | 2009-08-17 16:48:47 -0700 (Mon, 17 Aug 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Fixed "tadir" to "tatmpdir". ------------------------------------------------------------------------ r4632 | tewok | 2009-08-17 16:47:32 -0700 (Mon, 17 Aug 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Added tatmpdir default to specify trustman's temporary directory. ------------------------------------------------------------------------ r4631 | tewok | 2009-08-17 11:41:36 -0700 (Mon, 17 Aug 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Fixed the error messages if dtinitconf can't fetch the root.hints file. Added pod to better explain what's happening with -genroothints. ------------------------------------------------------------------------ r4630 | tewok | 2009-08-17 11:31:04 -0700 (Mon, 17 Aug 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Modified the -genroothints code to get http://www.internic.net/zones/named.root rather than use a hard-coded version. ------------------------------------------------------------------------ r4629 | tewok | 2009-08-15 16:57:13 -0700 (Sat, 15 Aug 2009) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL Added packing of root.hints with trustman. Added creation of a root.hints file by dtinitconf. Added explicit packing of Net::DNS::SEC::Validator.pm. Removed packing of BIND and DNSSEC-Tools commands along with TrustMan. ------------------------------------------------------------------------ r4628 | tewok | 2009-08-15 16:50:33 -0700 (Sat, 15 Aug 2009) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Changed to stop executing if an invalid option is given. If running packed and -o wasn't given, use the packed root.hints. Changed the default root.hints file to null. Minor changes to a few comments. ------------------------------------------------------------------------ r4627 | tewok | 2009-08-15 16:01:42 -0700 (Sat, 15 Aug 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Improved the error message if none of -m, -L, and -p (or their configy equivalents) were given. ------------------------------------------------------------------------ r4626 | tewok | 2009-08-15 12:12:47 -0700 (Sat, 15 Aug 2009) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Added -genroothints. Fixed a few comments. Reworked how -help and -Version are handled, and reordered that code. ------------------------------------------------------------------------ r4625 | tewok | 2009-08-13 07:19:14 -0700 (Thu, 13 Aug 2009) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Added -ta-resolvconf. Fixed %opts references for TrustMan-related options to use the correct names.. Added pod for TrustMan-related options. ------------------------------------------------------------------------ r4624 | tewok | 2009-08-13 07:12:32 -0700 (Thu, 13 Aug 2009) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Added "taresolvconf" as a default location for the resolv.conf file. Changed "tasmtpserver" to have a default value of "localhost". Reordered the TrustMan defaults in the pod. ------------------------------------------------------------------------ r4623 | tewok | 2009-08-12 22:25:26 -0700 (Wed, 12 Aug 2009) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Changed references to the "ta_contact" default to the actual "tacontact" name. Changed references to the "ta_smtpserver" default to the actual "tasmtpserver" name. ------------------------------------------------------------------------ r4622 | tewok | 2009-08-12 16:52:10 -0700 (Wed, 12 Aug 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Bind.pm M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Csv.pm M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Dump.pm M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Itar.pm M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Libval.pm M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Mf.pm Added =cut lines to match the =pod lines. ------------------------------------------------------------------------ r4621 | tewok | 2009-08-12 16:38:15 -0700 (Wed, 12 Aug 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm Grammar fix in pod. ------------------------------------------------------------------------ r4620 | tewok | 2009-08-12 11:26:26 -0700 (Wed, 12 Aug 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Fixed a pod directive. ------------------------------------------------------------------------ r4619 | tewok | 2009-08-12 11:00:18 -0700 (Wed, 12 Aug 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Perform better file-checking and give better errors for required files. ------------------------------------------------------------------------ r4618 | tewok | 2009-08-12 09:44:54 -0700 (Wed, 12 Aug 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Add a short comment. ------------------------------------------------------------------------ r4617 | tewok | 2009-08-12 09:27:08 -0700 (Wed, 12 Aug 2009) | 11 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Added more comprehensive (and unified) checks for necessary files and directories. Replaced numerous references to "$opts{'c'}" with "$newconf". Clarified an error message or two. Added a few routine headers (to match existing headers.) Fixed grammar and content in some of the pod. ------------------------------------------------------------------------ r4616 | tewok | 2009-08-12 08:09:05 -0700 (Wed, 12 Aug 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Added -dtconf to support alternate config files. Initial support for packed execution. ------------------------------------------------------------------------ r4611 | tewok | 2009-08-11 11:00:23 -0700 (Tue, 11 Aug 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed formatting issues. ------------------------------------------------------------------------ r4610 | tewok | 2009-08-11 10:16:41 -0700 (Tue, 11 Aug 2009) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd ZSK phase 2 rollover wasn't updating the zone serial number. zonesigner actually was updating it, but rollerd was zapping the new serial number and returning to hte previous one. ------------------------------------------------------------------------ r4609 | tewok | 2009-08-03 13:50:51 -0700 (Mon, 03 Aug 2009) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL Added support for creating packed versions of zonesigner, rollerd, and rollctl. The following targets are available for general use: packed_commands Build the packed command files. clean_packed Clean the packed commands. ------------------------------------------------------------------------ r4608 | tewok | 2009-08-03 13:28:59 -0700 (Mon, 03 Aug 2009) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Changed -roll-sleep to -roll-sleeptime. Fixed option processing to look for "roll-sleeptime" instead of "roll_sleep". This allows that option to actually work now. ------------------------------------------------------------------------ r4607 | tewok | 2009-08-03 10:19:01 -0700 (Mon, 03 Aug 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Fixed how the config file is reported and various informational messages. Added some variable comments. ------------------------------------------------------------------------ r4606 | tewok | 2009-07-30 08:54:28 -0700 (Thu, 30 Jul 2009) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Added -dtconfig as a standard option. If -dtconfig is given, the specified config file will be used in place of the standard config file. ------------------------------------------------------------------------ r4605 | tewok | 2009-07-30 08:50:06 -0700 (Thu, 30 Jul 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added -dtconf to zonesigner invocations to ensure zonesigner is using the same configuration file rollerd is using. ------------------------------------------------------------------------ r4604 | tewok | 2009-07-30 08:47:24 -0700 (Thu, 30 Jul 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Minor comment changes. ------------------------------------------------------------------------ r4603 | tewok | 2009-07-29 08:50:11 -0700 (Wed, 29 Jul 2009) | 13 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Support for packed executions: - use the packed Perl module hierarchy - default to the execution directory as the current directory - default to the DNSSEC-Tools config file in the packed hierarchy Pass the config file (default or user-specified) to the keyarch command. Add the config file name to several info-reporting places. Added pod describing the -dtconfig option. ------------------------------------------------------------------------ r4598 | tewok | 2009-07-01 16:51:54 -0700 (Wed, 01 Jul 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Clarified a new pod comment about -archivedir. ------------------------------------------------------------------------ r4597 | tewok | 2009-07-01 16:40:31 -0700 (Wed, 01 Jul 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Modified to use the current directory as the archive directory if one isn't specified on the command line or the config file. ------------------------------------------------------------------------ r4596 | tewok | 2009-07-01 16:35:36 -0700 (Wed, 01 Jul 2009) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Fix the execution directory to match the pod. If -directory isn't given, the current directory will be used as the execution directory, not the configuration directory. ------------------------------------------------------------------------ r4595 | tewok | 2009-07-01 10:17:41 -0700 (Wed, 01 Jul 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/keyarch Added the -dtconfig option. ------------------------------------------------------------------------ r4594 | baerm | 2009-06-30 11:07:04 -0700 (Tue, 30 Jun 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/testing/t/010zonesigner.t Fixed key size issue, added some diagnosis output ------------------------------------------------------------------------ r4593 | baerm | 2009-06-29 16:35:08 -0700 (Mon, 29 Jun 2009) | 7 lines Changed paths: M /trunk/dnssec-tools/testing/Makefile.in A /trunk/dnssec-tools/testing/saved-nsec3.example.com M /trunk/dnssec-tools/testing/t/010zonesigner.t M /trunk/dnssec-tools/testing/t/020donuts.t M /trunk/dnssec-tools/testing/t/025donutsd.t M /trunk/dnssec-tools/testing/t/030trustman.t M /trunk/dnssec-tools/testing/t/040rollerd.t A /trunk/dnssec-tools/testing/t/dt_testingtools.pl Updated to handle changes in tools Changed output to make it easier to read Added a couple tests Added a 'make verbose' option for debuging ------------------------------------------------------------------------ r4592 | baerm | 2009-06-29 16:29:23 -0700 (Mon, 29 Jun 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner added a argument for keyarch's location fixed some whitespace usage output ------------------------------------------------------------------------ r4591 | baerm | 2009-06-25 10:07:52 -0700 (Thu, 25 Jun 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed some typos in help output ------------------------------------------------------------------------ r4590 | hardaker | 2009-06-25 09:57:16 -0700 (Thu, 25 Jun 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/modules/rollmgr.pm Fix the rollmgr port of solaris and make more generic ------------------------------------------------------------------------ r4589 | hardaker | 2009-06-25 09:45:42 -0700 (Thu, 25 Jun 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/modules/rollmgr.pm Port the rollmgr functionality to solaris ------------------------------------------------------------------------ r4588 | tewok | 2009-06-25 08:21:12 -0700 (Thu, 25 Jun 2009) | 10 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added -krev to display revoked KSK keys. Added -kinv to display revoked and obsolete KSK keys. Added -zrev to display revoked ZSK keys. Added -zinv to display revoked and obsolete ZSK keys. Added -rev to display revoked KSK and ZSK keys. Added -invalid to display revoked and obsolete KSK and ZSK keys. Added pod to describe the new options. ------------------------------------------------------------------------ r4587 | tewok | 2009-06-24 19:09:32 -0700 (Wed, 24 Jun 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/keyarch Add support for revoked keys. When running in a packed configuration, use the local config file. ------------------------------------------------------------------------ r4586 | tewok | 2009-06-22 09:03:59 -0700 (Mon, 22 Jun 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/zonesigner For packed executions, forced the use of the package directory's module tree. ------------------------------------------------------------------------ r4585 | tewok | 2009-06-17 09:53:37 -0700 (Wed, 17 Jun 2009) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm.in Added some DNSSEC-Tools commands to @COMMANDS. Added %CMD_PACKAGES, which lists which package the @COMMANDS belong to. Fixed the missing-command error messages in cmdcheck() to request the correct package be installed. Grammar fix in the pod. ------------------------------------------------------------------------ r4584 | hardaker | 2009-06-15 17:48:23 -0700 (Mon, 15 Jun 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/README white space change for testing #15 ------------------------------------------------------------------------ r4583 | hardaker | 2009-06-15 17:44:43 -0700 (Mon, 15 Jun 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/README white space change for testing #14 ------------------------------------------------------------------------ r4582 | hardaker | 2009-06-15 17:41:32 -0700 (Mon, 15 Jun 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/README white space change for testing #13 ------------------------------------------------------------------------ r4581 | hardaker | 2009-06-15 17:39:39 -0700 (Mon, 15 Jun 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/README white space change for testing #12 ------------------------------------------------------------------------ r4580 | hardaker | 2009-06-15 17:35:52 -0700 (Mon, 15 Jun 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/README white space change for testing #11 ------------------------------------------------------------------------ r4579 | hardaker | 2009-06-15 17:23:12 -0700 (Mon, 15 Jun 2009) | 1 line Changed paths: M /trunk/dnssec-tools/README white space change for testing #10 ------------------------------------------------------------------------ r4578 | hardaker | 2009-06-15 17:17:50 -0700 (Mon, 15 Jun 2009) | 1 line Changed paths: M /trunk/dnssec-tools/README white space change for testing #9 ------------------------------------------------------------------------ r4577 | hardaker | 2009-06-15 17:13:25 -0700 (Mon, 15 Jun 2009) | 1 line Changed paths: M /trunk/dnssec-tools/README white space change for testing #8 ------------------------------------------------------------------------ r4576 | hardaker | 2009-06-15 16:56:26 -0700 (Mon, 15 Jun 2009) | 1 line Changed paths: M /trunk/dnssec-tools/README white space change for testing #7 ------------------------------------------------------------------------ r4575 | tewok | 2009-06-15 16:22:35 -0700 (Mon, 15 Jun 2009) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Better handling of getting PAR-packed status. Set specific paths for our called scripts if we're running packed. Added the execution directory to our initial status log. ------------------------------------------------------------------------ r4572 | tewok | 2009-06-13 19:27:16 -0700 (Sat, 13 Jun 2009) | 11 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added support for PAR-packed executions. In particular, the following changes were made for PAR-packed execution: - use dnssec-tools.conf in package directory - use BIND tools in package directory Made the -rfc5011 and -norfc5011 options mutually exclusive. Changed several uses of "$opts{'rfc5011'}" to instead use "$rfc5011". Added parens in several places for clarity. Made some grammar, punctuation, and spacing fixes. ------------------------------------------------------------------------ r4571 | tewok | 2009-06-13 11:33:02 -0700 (Sat, 13 Jun 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Deleted the unnecessary $version option flag. ------------------------------------------------------------------------ r4570 | tewok | 2009-06-13 11:21:53 -0700 (Sat, 13 Jun 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl If run as a PAR-packed command, rollctl will use its own local config file and not the system-wide dnssec-tools.conf file. ------------------------------------------------------------------------ r4569 | tewok | 2009-06-13 11:16:06 -0700 (Sat, 13 Jun 2009) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm.in Added runpacked() to indicate when a script was running from a PAR package. Modified cmdcheck() to check for calls from PAR-packed scripts. If in one, it redirects itself to look for BIND commands in the package directory and chmods the commands to be executable. (Apparently, PAR ignores file modes when packing or unpacking.) ------------------------------------------------------------------------ r4568 | hardaker | 2009-06-12 09:19:45 -0700 (Fri, 12 Jun 2009) | 1 line Changed paths: M /trunk/dnssec-tools/README remove a single blank line for svn commit testing: 6 ------------------------------------------------------------------------ r4567 | hardaker | 2009-06-12 09:13:24 -0700 (Fri, 12 Jun 2009) | 1 line Changed paths: M /trunk/dnssec-tools/README add a single blank line for svn commit testing 5 ------------------------------------------------------------------------ r4566 | hardaker | 2009-06-12 09:00:20 -0700 (Fri, 12 Jun 2009) | 1 line Changed paths: M /trunk/dnssec-tools/README remove a single blank line for svn commit testing: 4 ------------------------------------------------------------------------ r4565 | hardaker | 2009-06-12 08:58:37 -0700 (Fri, 12 Jun 2009) | 1 line Changed paths: M /trunk/dnssec-tools/README add a single blank line for svn commit testing ------------------------------------------------------------------------ r4564 | hardaker | 2009-06-12 08:57:50 -0700 (Fri, 12 Jun 2009) | 1 line Changed paths: M /trunk/dnssec-tools/README remove a single blank line for svn commit testing ------------------------------------------------------------------------ r4563 | hardaker | 2009-06-12 08:46:43 -0700 (Fri, 12 Jun 2009) | 1 line Changed paths: M /trunk/dnssec-tools/README add a single blank line for svn commit testing ------------------------------------------------------------------------ r4562 | hardaker | 2009-06-12 08:40:37 -0700 (Fri, 12 Jun 2009) | 1 line Changed paths: M /trunk/dnssec-tools/README remove a single blank line for svn commit testing ------------------------------------------------------------------------ r4561 | baerm | 2009-06-11 18:17:32 -0700 (Thu, 11 Jun 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/testing/t/040rollerd.t Fixed so that perl libraries are handled more correctly ------------------------------------------------------------------------ r4560 | baerm | 2009-06-11 18:16:23 -0700 (Thu, 11 Jun 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Got rid of -dtlibs abomination, the command line option has been removed ------------------------------------------------------------------------ r4559 | baerm | 2009-06-11 09:27:57 -0700 (Thu, 11 Jun 2009) | 6 lines Changed paths: M /trunk/dnssec-tools/testing/t/030trustman.t M /trunk/dnssec-tools/testing/t/040rollerd.t Better error handling: error suggestion for trustman script. rollerd script will fail without overwriting log info. ------------------------------------------------------------------------ r4558 | baerm | 2009-06-10 12:40:47 -0700 (Wed, 10 Jun 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/testing/t/030trustman.t comment out debug message ------------------------------------------------------------------------ r4557 | baerm | 2009-06-10 12:23:25 -0700 (Wed, 10 Jun 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/testing/t/030trustman.t Adjusted the time parsing ------------------------------------------------------------------------ r4556 | tewok | 2009-06-10 07:26:55 -0700 (Wed, 10 Jun 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Fixed some pod formatting. Fixed some pod wording. ------------------------------------------------------------------------ r4555 | hardaker | 2009-06-09 16:16:24 -0700 (Tue, 09 Jun 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm.in M /trunk/dnssec-tools/tools/modules/defaults.pm M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/keyrec.pod M /trunk/dnssec-tools/tools/modules/rollrec.pod M /trunk/dnssec-tools/tools/modules/tooloptions.pm M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/zonesigner changed default key length from 1024 to 2048 per NIST 2010 recommendations ------------------------------------------------------------------------ r4545 | tewok | 2009-06-08 16:49:35 -0700 (Mon, 08 Jun 2009) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Fixed how $dtplibs is referenced in perl executions. (If it isn't set, then the program to be executed was taken as the argument to -I.) Modified how configuration files are selected. Added support for packed execution. Added some grouping parents in conditionals for clarity. Capitalization and terminal-period fixes in some comments. ------------------------------------------------------------------------ r4541 | hserus | 2009-06-05 09:03:44 -0700 (Fri, 05 Jun 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/README Changed copyright date to 2009 ------------------------------------------------------------------------ r4534 | marz | 2009-06-04 07:57:01 -0700 (Thu, 04 Jun 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner condition aging and signing with kskrev based on rfc5011 option ------------------------------------------------------------------------ r4533 | baerm | 2009-06-01 14:09:13 -0700 (Mon, 01 Jun 2009) | 6 lines Changed paths: M /trunk/dnssec-tools/INSTALL Adding some missing/new requirements (openssl and perl mod's: ExtUtils::MakeMaker, Test::Simple, MailTools) ------------------------------------------------------------------------ r4532 | tewok | 2009-06-01 10:10:23 -0700 (Mon, 01 Jun 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm.in Added the setconffile() interface. ------------------------------------------------------------------------ r4531 | marz | 2009-05-31 09:33:24 -0700 (Sun, 31 May 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/keyrec.pod M /trunk/dnssec-tools/tools/modules/tooloptions.pm M /trunk/dnssec-tools/tools/scripts/zonesigner age revoked keys ------------------------------------------------------------------------ r4530 | baerm | 2009-05-28 10:13:30 -0700 (Thu, 28 May 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added support for passing in perl libraries to be include when running zonesigner and keyarch (-dtplibs) ------------------------------------------------------------------------ r4529 | baerm | 2009-05-27 14:11:59 -0700 (Wed, 27 May 2009) | 7 lines Changed paths: M /trunk/dnssec-tools/testing/TODO M /trunk/dnssec-tools/testing/t/010zonesigner.t M /trunk/dnssec-tools/testing/t/020donuts.t M /trunk/dnssec-tools/testing/t/025donutsd.t M /trunk/dnssec-tools/testing/t/040rollerd.t Added better directory clean up to donuts(d), zonesigner scripts Fairly major changes to rollerd script to handle even more local perl libraries. ------------------------------------------------------------------------ r4528 | baerm | 2009-05-22 12:52:14 -0700 (Fri, 22 May 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/testing/t/030trustman.t Use local Validator.pm More robust cleanup ------------------------------------------------------------------------ r4527 | baerm | 2009-05-22 12:10:43 -0700 (Fri, 22 May 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/testing/t/020donuts.t Adding use of local Rule.pm ------------------------------------------------------------------------ r4526 | baerm | 2009-05-21 16:32:24 -0700 (Thu, 21 May 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/testing/Makefile.in M /trunk/dnssec-tools/testing/t/010zonesigner.t M /trunk/dnssec-tools/testing/t/020donuts.t M /trunk/dnssec-tools/testing/t/025donutsd.t M /trunk/dnssec-tools/testing/t/030trustman.t M /trunk/dnssec-tools/testing/t/040rollerd.t Adding updates to better allow for testing without an installed dnssec-tools. ------------------------------------------------------------------------ r4525 | baerm | 2009-05-21 16:31:13 -0700 (Thu, 21 May 2009) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added command line options to pass the location of the tools to use for key generation, zone signing, and zone checking. Currently, this means the Bind Named Tools: dnssec-keygen, dnssec-signszone, and named-checkzone. ------------------------------------------------------------------------ r4524 | baerm | 2009-05-21 16:28:15 -0700 (Thu, 21 May 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Added command line option to pass the location of rollerd's pid file to rollctl. ------------------------------------------------------------------------ r4523 | baerm | 2009-05-21 16:27:16 -0700 (Thu, 21 May 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added command line options to pass the locations of zonesigner and dnssec-tools.conf to rollerd. ------------------------------------------------------------------------ r4522 | tewok | 2009-05-19 15:00:43 -0700 (Tue, 19 May 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Turn off case-sensitivity for the SOA lines in zone files. ------------------------------------------------------------------------ r4520 | hardaker | 2009-05-18 09:00:54 -0700 (Mon, 18 May 2009) | 1 line Changed paths: D /trunk/dnssec-tools/lib removed older unused directories ------------------------------------------------------------------------ r4519 | marz | 2009-05-07 09:34:36 -0700 (Thu, 07 May 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/scripts/zonesigner additional zonesigner fixes to spport rfc5011 ------------------------------------------------------------------------ r4518 | baerm | 2009-05-06 14:15:07 -0700 (Wed, 06 May 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/testing/t/040rollerd.t Getting the rollerd test to use the local validator libraries ------------------------------------------------------------------------ r4517 | hardaker | 2009-05-05 06:57:03 -0700 (Tue, 05 May 2009) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in check for socket() in -lsocket if needed ------------------------------------------------------------------------ r4516 | hardaker | 2009-05-05 06:23:32 -0700 (Tue, 05 May 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Makefile.PL remove TrustAnchor from the list of modules; it moved ------------------------------------------------------------------------ r4515 | hardaker | 2009-05-05 06:23:09 -0700 (Tue, 05 May 2009) | 1 line Changed paths: M /trunk/dnssec-tools/Makefile.in add convertar to the list of tools to build ------------------------------------------------------------------------ r4514 | baerm | 2009-05-04 18:20:24 -0700 (Mon, 04 May 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/testing/t/025donutsd.t Adjusting some bad paths in output checking ------------------------------------------------------------------------ r4513 | baerm | 2009-05-04 17:46:51 -0700 (Mon, 04 May 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/testing/t/030trustman.t Adding fixed output check Adding local libval/libsres library loading ------------------------------------------------------------------------ r4512 | baerm | 2009-04-30 12:04:49 -0700 (Thu, 30 Apr 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Added a debugging check ------------------------------------------------------------------------ r4511 | baerm | 2009-04-30 12:04:15 -0700 (Thu, 30 Apr 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donutsd adding a run count option (-o runs once -O N runs N times) ------------------------------------------------------------------------ r4510 | hardaker | 2009-04-29 20:55:30 -0700 (Wed, 29 Apr 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/dist/makerelease.xml update makerelease script to not work in a subdir ------------------------------------------------------------------------ r4509 | hardaker | 2009-04-29 20:53:09 -0700 (Wed, 29 Apr 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Changes M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm version update and changes update ------------------------------------------------------------------------ r4508 | hardaker | 2009-04-29 20:51:22 -0700 (Wed, 29 Apr 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm patch from Chris Adams to allow for negative offsets in GENERATE statements ------------------------------------------------------------------------ r4507 | baerm | 2009-04-28 14:49:46 -0700 (Tue, 28 Apr 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/testing/Makefile.in A /trunk/dnssec-tools/testing/TODO A /trunk/dnssec-tools/testing/rollerd-example.com A /trunk/dnssec-tools/testing/saved-example.com A /trunk/dnssec-tools/testing/saved-example.rollrec M /trunk/dnssec-tools/testing/t/010zonesigner.t M /trunk/dnssec-tools/testing/t/020donuts.t A /trunk/dnssec-tools/testing/t/025donutsd.t A /trunk/dnssec-tools/testing/t/030trustman.t M /trunk/dnssec-tools/testing/t/040rollerd.t adding/re-arranging testing files ------------------------------------------------------------------------ r4506 | baerm | 2009-04-28 14:03:04 -0700 (Tue, 28 Apr 2009) | 3 lines Changed paths: D /trunk/dnssec-tools/testing/Makefile D /trunk/dnssec-tools/testing/donuts D /trunk/dnssec-tools/testing/rollerd D /trunk/dnssec-tools/testing/trustman D /trunk/dnssec-tools/testing/zones re-arrangeing structure of testing directory ------------------------------------------------------------------------ r4505 | marz | 2009-04-23 10:55:33 -0700 (Thu, 23 Apr 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/scripts/zonesigner add -revoke option to zonesigner to set revoke bit as per rfc5011 ------------------------------------------------------------------------ r4504 | hardaker | 2009-04-22 09:04:42 -0700 (Wed, 22 Apr 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd make signer() use system instead of back-ticks and return the real system status instead of output (which could be errors or success) ------------------------------------------------------------------------ r4503 | hardaker | 2009-04-21 15:40:32 -0700 (Tue, 21 Apr 2009) | 1 line Changed paths: A /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Mf.pm A /trunk/dnssec-tools/tools/convertar/t/15mf.t read and write the master file format ------------------------------------------------------------------------ r4502 | hardaker | 2009-04-21 15:40:00 -0700 (Tue, 21 Apr 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm pass data to write_header and trailer ------------------------------------------------------------------------ r4501 | hardaker | 2009-04-21 15:39:29 -0700 (Tue, 21 Apr 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Libval.pm allow for comments with leading space ------------------------------------------------------------------------ r4500 | hardaker | 2009-04-21 15:09:41 -0700 (Tue, 21 Apr 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Bind.pm M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Libval.pm M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm added a new init_extras function and make bind/libval use it ------------------------------------------------------------------------ r4499 | hardaker | 2009-04-21 15:03:04 -0700 (Tue, 21 Apr 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Bind.pm use the reusable writing functions ------------------------------------------------------------------------ r4498 | hardaker | 2009-04-21 15:02:33 -0700 (Tue, 21 Apr 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Libval.pm print a newline after the trailing ; ------------------------------------------------------------------------ r4497 | hardaker | 2009-04-21 15:00:49 -0700 (Tue, 21 Apr 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Libval.pm M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm use the reusable writing functions ------------------------------------------------------------------------ r4496 | hardaker | 2009-04-21 14:55:35 -0700 (Tue, 21 Apr 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Csv.pm remove older write function ------------------------------------------------------------------------ r4495 | hardaker | 2009-04-21 14:51:18 -0700 (Tue, 21 Apr 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Dump.pm didn't add use strict because it does odd things; but comment why ------------------------------------------------------------------------ r4494 | hardaker | 2009-04-21 14:50:43 -0700 (Tue, 21 Apr 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/t/10itar.t M /trunk/dnssec-tools/tools/convertar/t/11csv.t M /trunk/dnssec-tools/tools/convertar/t/12dump.t use auto-removed tmp files ------------------------------------------------------------------------ r4493 | hardaker | 2009-04-21 14:50:06 -0700 (Tue, 21 Apr 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/t/itar.xml added a straight dnskey ------------------------------------------------------------------------ r4492 | hardaker | 2009-04-21 14:49:37 -0700 (Tue, 21 Apr 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Itar.pm use strict ------------------------------------------------------------------------ r4491 | hardaker | 2009-04-21 14:49:10 -0700 (Tue, 21 Apr 2009) | 1 line Changed paths: A /trunk/dnssec-tools/tools/convertar/t/itar-nods.xml an itar file with only dnskeys ------------------------------------------------------------------------ r4490 | hardaker | 2009-04-21 14:48:55 -0700 (Tue, 21 Apr 2009) | 1 line Changed paths: A /trunk/dnssec-tools/tools/convertar/t/99cleanup.t an end-test to remove tmp files ------------------------------------------------------------------------ r4489 | hardaker | 2009-04-21 14:48:29 -0700 (Tue, 21 Apr 2009) | 1 line Changed paths: A /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Libval.pm A /trunk/dnssec-tools/tools/convertar/t/13libval.t module for writing to libval conf files ------------------------------------------------------------------------ r4488 | hardaker | 2009-04-21 14:47:59 -0700 (Tue, 21 Apr 2009) | 1 line Changed paths: A /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Bind.pm A /trunk/dnssec-tools/tools/convertar/t/14bind.t module for writing to bind conf files ------------------------------------------------------------------------ r4487 | hardaker | 2009-04-21 14:47:17 -0700 (Tue, 21 Apr 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Csv.pm reuse the writing functionality from TA.pm ------------------------------------------------------------------------ r4486 | hardaker | 2009-04-21 14:46:46 -0700 (Tue, 21 Apr 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm Added a bunch of reusable functionality for writing files and reading/writing comment fields ------------------------------------------------------------------------ r4485 | hardaker | 2009-04-21 14:46:19 -0700 (Tue, 21 Apr 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/convertar fail properly if no tar was created ------------------------------------------------------------------------ r4484 | tewok | 2009-04-20 12:36:19 -0700 (Mon, 20 Apr 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO M /trunk/dnssec-tools/tools/scripts/Makefile.PL M /trunk/dnssec-tools/tools/scripts/README M /trunk/dnssec-tools/tools/scripts/blinkenlights A /trunk/dnssec-tools/tools/scripts/bubbles Added the bubbles command. ------------------------------------------------------------------------ r4483 | hardaker | 2009-04-17 17:36:51 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: A /trunk/dnssec-tools/tools/convertar/t/11csv.t A /trunk/dnssec-tools/tools/convertar/t/12dump.t add dump and csv tests ------------------------------------------------------------------------ r4482 | hardaker | 2009-04-17 17:34:56 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Itar.pm close the file handle ------------------------------------------------------------------------ r4481 | hardaker | 2009-04-17 17:32:48 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Dump.pm rearrange the dump format to match function ordering of others ------------------------------------------------------------------------ r4480 | hardaker | 2009-04-17 17:10:37 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm remove debugging statement ------------------------------------------------------------------------ r4479 | hardaker | 2009-04-17 17:09:03 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Dump.pm added read support for dump output ------------------------------------------------------------------------ r4478 | hardaker | 2009-04-17 16:33:48 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/convertar prop for ignore ------------------------------------------------------------------------ r4477 | hardaker | 2009-04-17 16:31:48 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: A /trunk/dnssec-tools/tools/convertar/Makefile.PL Makefile for convertar ------------------------------------------------------------------------ r4476 | hardaker | 2009-04-17 16:29:33 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: A /trunk/dnssec-tools/tools/convertar/t A /trunk/dnssec-tools/tools/convertar/t/10itar.t A /trunk/dnssec-tools/tools/convertar/t/itar.xml A /trunk/dnssec-tools/tools/convertar/t/itar.xml.sig test files for ITAR input/output ------------------------------------------------------------------------ r4475 | hardaker | 2009-04-17 12:44:45 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: A /trunk/dnssec-tools/tools/convertar/lib A /trunk/dnssec-tools/tools/convertar/lib/Net A /trunk/dnssec-tools/tools/convertar/lib/Net/DNS A /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC A /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools A /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor (from /trunk/dnssec-tools/tools/modules/TrustAnchor:4474) D /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/lib A /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm (from /trunk/dnssec-tools/tools/modules/TrustAnchor.pm:4472) D /trunk/dnssec-tools/tools/modules/TrustAnchor D /trunk/dnssec-tools/tools/modules/TrustAnchor.pm move modules to new convertar sub-location ------------------------------------------------------------------------ r4474 | hardaker | 2009-04-17 12:30:45 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: A /trunk/dnssec-tools/tools/modules/TrustAnchor/lib lib directory ------------------------------------------------------------------------ r4473 | hardaker | 2009-04-17 12:29:03 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: A /trunk/dnssec-tools/tools/convertar A /trunk/dnssec-tools/tools/convertar/convertar (from /trunk/dnssec-tools/tools/scripts/convertar:4472) D /trunk/dnssec-tools/tools/scripts/convertar move convertar to it's own directory for future sub-packaging ------------------------------------------------------------------------ r4472 | hardaker | 2009-04-17 09:23:31 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: M / M /branches/dnssec-tools-1.5/tools/scripts/zonesigner M /trunk/dnssec-tools/tools/scripts/zonesigner ------------------------------------------------------------------------ r4471 | hardaker | 2009-04-17 09:19:09 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: M / M /branches/dnssec-tools-1.5/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollerd ------------------------------------------------------------------------ r4470 | hardaker | 2009-04-17 09:14:51 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: M / M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm ------------------------------------------------------------------------ r4469 | hardaker | 2009-04-17 09:11:21 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: M / A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/dist A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/dist/makerelease.xml ------------------------------------------------------------------------ r4468 | hardaker | 2009-04-17 09:08:04 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: M / M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs.t ------------------------------------------------------------------------ r4467 | hardaker | 2009-04-17 09:05:04 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: M / D /trunk/dnssec-tools/testing/zones/example.com A /trunk/dnssec-tools/testing/zones/saved-example.com D /trunk/dnssec-tools/testing/zones/tmp ------------------------------------------------------------------------ r4466 | hardaker | 2009-04-17 09:02:04 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: M / A /trunk/dnssec-tools/testing/trustman ------------------------------------------------------------------------ r4465 | hardaker | 2009-04-17 08:59:05 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: M / D /trunk/dnssec-tools/testing/donuts/tmp ------------------------------------------------------------------------ r4464 | hardaker | 2009-04-17 08:56:22 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: M / M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm ------------------------------------------------------------------------ r4463 | hardaker | 2009-04-17 08:54:00 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: M / M /trunk/dnssec-tools/Makefile.in M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Makefile.PL M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.xs M /trunk/dnssec-tools/tools/modules/Net-addrinfo/const-xs.inc ------------------------------------------------------------------------ r4462 | hardaker | 2009-04-17 08:51:25 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: M / M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libval/val_parse.c M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_x_query.c ------------------------------------------------------------------------ r4461 | hardaker | 2009-04-17 08:49:27 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: M / M /trunk/dnssec-tools/validator/Makefile.top ------------------------------------------------------------------------ r4459 | hardaker | 2009-04-17 08:45:53 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: M / M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in A /trunk/dnssec-tools/testing/Makefile A /trunk/dnssec-tools/testing/Makefile.in A /trunk/dnssec-tools/testing/donuts A /trunk/dnssec-tools/testing/donuts/example.com A /trunk/dnssec-tools/testing/donuts/tmp A /trunk/dnssec-tools/testing/rollerd A /trunk/dnssec-tools/testing/rollerd/dsset-example.com. A /trunk/dnssec-tools/testing/rollerd/save-example.com A /trunk/dnssec-tools/testing/rollerd/save-example.rollrec A /trunk/dnssec-tools/testing/rollerd/tmp A /trunk/dnssec-tools/testing/t A /trunk/dnssec-tools/testing/t/010zonesigner.t A /trunk/dnssec-tools/testing/t/020donuts.t A /trunk/dnssec-tools/testing/t/040rollerd.t A /trunk/dnssec-tools/testing/zones A /trunk/dnssec-tools/testing/zones/example.com A /trunk/dnssec-tools/testing/zones/tmp ------------------------------------------------------------------------ r4458 | hardaker | 2009-04-17 08:44:20 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: M / A /trunk/dnssec-tools/testing ------------------------------------------------------------------------ r4457 | hardaker | 2009-04-17 08:43:04 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: M / M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-example.com M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-test.com ------------------------------------------------------------------------ r4456 | hardaker | 2009-04-17 08:41:57 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: M / M /trunk/dnssec-tools/tools/scripts/trustman ------------------------------------------------------------------------ r4455 | hardaker | 2009-04-17 08:40:56 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: M / M /trunk/dnssec-tools/tools/scripts/rollctl ------------------------------------------------------------------------ r4454 | hardaker | 2009-04-17 08:39:14 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: M / M /trunk/dnssec-tools/tools/scripts/rollerd ------------------------------------------------------------------------ r4453 | hardaker | 2009-04-17 08:38:24 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: M / M /trunk/dnssec-tools/validator/libsres/Makefile.in M /trunk/dnssec-tools/validator/libval/Makefile.in M /trunk/dnssec-tools/validator/libval_shim/Makefile.in ------------------------------------------------------------------------ r4452 | hardaker | 2009-04-17 08:37:37 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: M / M /trunk/dnssec-tools/validator/apps/validator_driver.c ------------------------------------------------------------------------ r4451 | hardaker | 2009-04-17 08:36:56 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: M / M /trunk/dnssec-tools/validator/libval/val_support.c ------------------------------------------------------------------------ r4450 | hardaker | 2009-04-17 08:36:24 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: M / M /trunk/dnssec-tools/validator/libval/val_assertion.c ------------------------------------------------------------------------ r4449 | hardaker | 2009-04-17 08:36:00 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: M / M /branches/dnssec-tools-1.5/tools/scripts/rollerd M /branches/dnssec-tools-1.5/tools/scripts/zonesigner M /branches/dnssec-tools-1.5/validator/apps/validator_driver.c M /branches/dnssec-tools-1.5/validator/libsres/res_query.c M /branches/dnssec-tools-1.5/validator/libval/val_parse.c M /branches/dnssec-tools-1.5/validator/libval/val_support.c M /branches/dnssec-tools-1.5/validator/libval/val_x_query.c M /trunk/dnssec-tools/Makefile.in M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in D /trunk/dnssec-tools/testing M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-example.com M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-test.com M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Makefile.PL M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.xs M /trunk/dnssec-tools/tools/modules/Net-addrinfo/const-xs.inc M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm D /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/dist M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs.t M /trunk/dnssec-tools/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/modules/rollrec.pm M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/trustman M /trunk/dnssec-tools/tools/scripts/zonesigner M /trunk/dnssec-tools/validator/Makefile.top M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/libsres/Makefile.in M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libval/Makefile.in M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_parse.c M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_x_query.c M /trunk/dnssec-tools/validator/libval_shim/Makefile.in ------------------------------------------------------------------------ r4448 | hardaker | 2009-04-17 08:34:59 -0700 (Fri, 17 Apr 2009) | 2 lines Changed paths: M / A /trunk/dnssec-tools/tools/modules/TrustAnchor.pm base class ------------------------------------------------------------------------ r4447 | hardaker | 2009-04-17 08:34:51 -0700 (Fri, 17 Apr 2009) | 2 lines Changed paths: M / M /trunk/dnssec-tools/tools/modules/TrustAnchor ignore props ------------------------------------------------------------------------ r4446 | hardaker | 2009-04-17 08:34:39 -0700 (Fri, 17 Apr 2009) | 2 lines Changed paths: M / A /trunk/dnssec-tools/tools/modules/TrustAnchor/Dump.pm added a dump output module ------------------------------------------------------------------------ r4445 | hardaker | 2009-04-17 08:34:31 -0700 (Fri, 17 Apr 2009) | 2 lines Changed paths: M / M /trunk/dnssec-tools/tools/modules/Makefile.PL A /trunk/dnssec-tools/tools/modules/TrustAnchor A /trunk/dnssec-tools/tools/modules/TrustAnchor/Csv.pm A /trunk/dnssec-tools/tools/modules/TrustAnchor/Itar.pm A /trunk/dnssec-tools/tools/modules/TrustAnchor/Makefile.PL A /trunk/dnssec-tools/tools/scripts/convertar beginning of convertar ------------------------------------------------------------------------ r4443 | hardaker | 2009-04-17 08:16:26 -0700 (Fri, 17 Apr 2009) | 1 line Changed paths: M / M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/modules/rollrec.pm M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/zonesigner ------------------------------------------------------------------------ r4442 | hardaker | 2009-04-15 09:58:42 -0700 (Wed, 15 Apr 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/scripts/zonesigner M /trunk/dnssec-tools/tools/scripts/zonesigner fix documentation describing -usensec3 ------------------------------------------------------------------------ r4441 | hardaker | 2009-04-14 08:37:23 -0700 (Tue, 14 Apr 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollerd Add a forced -zone flag to zonesigner for filenames that differ from the zone name ------------------------------------------------------------------------ r4440 | hardaker | 2009-04-02 13:42:51 -0700 (Thu, 02 Apr 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm Update Fast.pm Version Number: 1.02 ------------------------------------------------------------------------ r4439 | hardaker | 2009-04-02 13:42:29 -0700 (Thu, 02 Apr 2009) | 1 line Changed paths: A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/dist A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/dist/makerelease.xml makerelease for the Fast module ------------------------------------------------------------------------ r4438 | hardaker | 2009-04-02 13:30:33 -0700 (Thu, 02 Apr 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs.t Parse SPF records ------------------------------------------------------------------------ r4437 | baerm | 2009-04-02 10:20:41 -0700 (Thu, 02 Apr 2009) | 6 lines Changed paths: D /trunk/dnssec-tools/testing/zones/example.com A /trunk/dnssec-tools/testing/zones/saved-example.com D /trunk/dnssec-tools/testing/zones/tmp cleaning up testing directory: remove etraneous files only keep base test files ------------------------------------------------------------------------ r4436 | baerm | 2009-04-02 10:14:57 -0700 (Thu, 02 Apr 2009) | 3 lines Changed paths: A /trunk/dnssec-tools/testing/trustman adding a new testing directory ------------------------------------------------------------------------ r4435 | baerm | 2009-04-02 10:13:04 -0700 (Thu, 02 Apr 2009) | 2 lines Changed paths: D /trunk/dnssec-tools/testing/donuts/tmp remove etraneous tmp directory ------------------------------------------------------------------------ r4434 | marz | 2009-04-02 04:36:31 -0700 (Thu, 02 Apr 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm bump version and copyright ------------------------------------------------------------------------ r4433 | marz | 2009-04-02 04:34:19 -0700 (Thu, 02 Apr 2009) | 1 line Changed paths: M /trunk/dnssec-tools/Makefile.in M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Makefile.PL M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.xs M /trunk/dnssec-tools/tools/modules/Net-addrinfo/const-xs.inc fix warnings and test failures in addrinfo and Validator perl mods ------------------------------------------------------------------------ r4432 | hardaker | 2009-03-20 12:06:13 -0700 (Fri, 20 Mar 2009) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libval/val_parse.c M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_x_query.c update to add sys/types inclusion ahead of arpa/nameser.h ------------------------------------------------------------------------ r4431 | hardaker | 2009-03-20 12:04:42 -0700 (Fri, 20 Mar 2009) | 1 line Changed paths: M /trunk/dnssec-tools/validator/Makefile.top update libtool version ------------------------------------------------------------------------ r4429 | baerm | 2009-03-19 21:29:39 -0700 (Thu, 19 Mar 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in A /trunk/dnssec-tools/testing/Makefile A /trunk/dnssec-tools/testing/Makefile.in A /trunk/dnssec-tools/testing/donuts A /trunk/dnssec-tools/testing/donuts/example.com A /trunk/dnssec-tools/testing/donuts/tmp A /trunk/dnssec-tools/testing/rollerd A /trunk/dnssec-tools/testing/rollerd/dsset-example.com. A /trunk/dnssec-tools/testing/rollerd/save-example.com A /trunk/dnssec-tools/testing/rollerd/save-example.rollrec A /trunk/dnssec-tools/testing/rollerd/tmp A /trunk/dnssec-tools/testing/t A /trunk/dnssec-tools/testing/t/010zonesigner.t A /trunk/dnssec-tools/testing/t/020donuts.t A /trunk/dnssec-tools/testing/t/040rollerd.t A /trunk/dnssec-tools/testing/zones A /trunk/dnssec-tools/testing/zones/example.com A /trunk/dnssec-tools/testing/zones/tmp adding testing directory and associated files added related changes to configure/.in ------------------------------------------------------------------------ r4428 | baerm | 2009-03-19 16:51:59 -0700 (Thu, 19 Mar 2009) | 4 lines Changed paths: A /trunk/dnssec-tools/testing adding testing directory ------------------------------------------------------------------------ r4427 | baerm | 2009-03-19 16:41:57 -0700 (Thu, 19 Mar 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-example.com M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-test.com fixed to so SOA can be found ------------------------------------------------------------------------ r4426 | baerm | 2009-03-19 16:37:00 -0700 (Thu, 19 Mar 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman added --root_hints_file -o option for trustman ------------------------------------------------------------------------ r4425 | baerm | 2009-03-19 16:24:24 -0700 (Thu, 19 Mar 2009) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl added some additional error checking, changed some command line parsing ------------------------------------------------------------------------ r4424 | baerm | 2009-03-19 16:23:51 -0700 (Thu, 19 Mar 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd typo fix on help ------------------------------------------------------------------------ r4423 | marz | 2009-03-17 08:04:45 -0700 (Tue, 17 Mar 2009) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/Makefile.in M /trunk/dnssec-tools/validator/libval/Makefile.in M /trunk/dnssec-tools/validator/libval_shim/Makefile.in fix make clean to clean up old libs ------------------------------------------------------------------------ r4422 | hserus | 2009-03-13 16:00:27 -0700 (Fri, 13 Mar 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c Don't try and free val_result_chain when val_resolve_and_check returns an error ------------------------------------------------------------------------ r4421 | hserus | 2009-03-13 14:42:59 -0700 (Fri, 13 Mar 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.c Fix nsec_sig_match check ------------------------------------------------------------------------ r4420 | hserus | 2009-03-13 14:42:36 -0700 (Fri, 13 Mar 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Add couple of checks for NULL ------------------------------------------------------------------------ r4419 | marz | 2009-03-12 07:23:51 -0700 (Thu, 12 Mar 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs fixed pointer const warning ------------------------------------------------------------------------ r4411 | hserus | 2009-03-04 06:28:55 -0800 (Wed, 04 Mar 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.c Ensure that rr_next points to NULL. ------------------------------------------------------------------------ r4410 | hserus | 2009-03-04 06:28:15 -0800 (Wed, 04 Mar 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_get_rrset.c Use appropriate routine for freeing up val_rr_rec structure ------------------------------------------------------------------------ r4409 | hserus | 2009-03-04 06:27:30 -0800 (Wed, 04 Mar 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Reorder some params in structure ------------------------------------------------------------------------ r4408 | hardaker | 2009-03-03 16:43:21 -0800 (Tue, 03 Mar 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/scripts/lsdnssec M /trunk/dnssec-tools/tools/scripts/lsdnssec recognize rrf files too ------------------------------------------------------------------------ r4406 | hardaker | 2009-03-03 11:15:59 -0800 (Tue, 03 Mar 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper fix typo ------------------------------------------------------------------------ r4405 | hardaker | 2009-03-02 13:58:54 -0800 (Mon, 02 Mar 2009) | 1 line Changed paths: D /trunk/dnssec-tools/apps/mozilla/dnssec-both-ff3.0.patch D /trunk/dnssec-tools/apps/mozilla/dnssec-firefox-ff3.0.patch remove older FF3 patches ------------------------------------------------------------------------ r4404 | hardaker | 2009-03-02 08:17:51 -0800 (Mon, 02 Mar 2009) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/README.firefox M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch M /trunk/dnssec-tools/apps/mozilla/dnssec-firefox.patch M /trunk/dnssec-tools/apps/mozilla/dnssec-mozconfig.patch M /trunk/dnssec-tools/apps/mozilla/firefox.spec update for 3.0.6 ------------------------------------------------------------------------ r4403 | hserus | 2009-02-28 02:05:30 -0800 (Sat, 28 Feb 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_policy.h Add flag to specify if spaces are to be used as delimiters in val_get_token Make the quote in the trust-anchor dnsval.conf statement optional. This allows us to use the trust anchor format specified for BIND ------------------------------------------------------------------------ r4402 | hardaker | 2009-02-27 09:42:06 -0800 (Fri, 27 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/modules/conf.pm.in M /trunk/dnssec-tools/tools/modules/conf.pm.in Document the new ENV overrides ------------------------------------------------------------------------ r4401 | hardaker | 2009-02-27 09:35:34 -0800 (Fri, 27 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/modules/conf.pm.in M /trunk/dnssec-tools/tools/modules/conf.pm.in Allow ENV overrides for config directories ------------------------------------------------------------------------ r4400 | hardaker | 2009-02-27 09:26:55 -0800 (Fri, 27 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/modules/conf.pm.in M /trunk/dnssec-tools/tools/modules/conf.pm.in ensure mkpath doesn't die on errors ------------------------------------------------------------------------ r4399 | hserus | 2009-02-27 06:48:13 -0800 (Fri, 27 Feb 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Trigger DLV logic only when security expectation is set to validate and we don't have a trust anchor available ------------------------------------------------------------------------ r4398 | hserus | 2009-02-27 06:46:37 -0800 (Fri, 27 Feb 2009) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Fetch DNSSEC meta-data when security-expectation is set to validate _and_ we have a (possible) trust point available Don't free the respondent server when we create an empty nonexitence proof ------------------------------------------------------------------------ r4394 | hardaker | 2009-02-26 09:02:08 -0800 (Thu, 26 Feb 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm shortern descriptive strings a bit ------------------------------------------------------------------------ r4393 | hardaker | 2009-02-26 09:01:36 -0800 (Thu, 26 Feb 2009) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/install.rdf update the max version number ------------------------------------------------------------------------ r4392 | hardaker | 2009-02-23 13:48:00 -0800 (Mon, 23 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/scripts/lsdnssec M /trunk/dnssec-tools/tools/scripts/lsdnssec made a lsdnssec timeline for rolling periods ------------------------------------------------------------------------ r4391 | hardaker | 2009-02-23 11:47:20 -0800 (Mon, 23 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/modules/QWPrimitives.pm M /branches/dnssec-tools-1.5/tools/scripts/lsdnssec M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm M /trunk/dnssec-tools/tools/scripts/lsdnssec use allow_once to ensure lsdnssec run without args will work ------------------------------------------------------------------------ r4390 | hardaker | 2009-02-23 11:01:03 -0800 (Mon, 23 Feb 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd make -alwayssign also sign zones even if being rolled ------------------------------------------------------------------------ r4386 | hardaker | 2009-02-16 14:46:37 -0800 (Mon, 16 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/scripts/lsdnssec M /trunk/dnssec-tools/tools/scripts/lsdnssec only print expiry warings if -d is > 1 ------------------------------------------------------------------------ r4385 | hardaker | 2009-02-16 14:46:12 -0800 (Mon, 16 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/scripts/lsdnssec M /trunk/dnssec-tools/tools/scripts/lsdnssec only print expiry warings if -d is > 2 ------------------------------------------------------------------------ r4384 | hardaker | 2009-02-16 14:35:10 -0800 (Mon, 16 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/scripts/lsdnssec M /trunk/dnssec-tools/tools/scripts/lsdnssec fix lsdnssec to only report active keys ------------------------------------------------------------------------ r4383 | hardaker | 2009-02-16 14:17:19 -0800 (Mon, 16 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/INSTALL M /branches/dnssec-tools-1.5/README M /branches/dnssec-tools-1.5/podmantex M /branches/dnssec-tools-1.5/podtrans M /branches/dnssec-tools-1.5/tools/demos/Makefile M /branches/dnssec-tools-1.5/tools/demos/README M /branches/dnssec-tools-1.5/tools/dnspktflow/Makefile.PL M /branches/dnssec-tools-1.5/tools/dnspktflow/dnspktflow M /branches/dnssec-tools-1.5/tools/donuts/Makefile.PL M /branches/dnssec-tools-1.5/tools/donuts/Rule.pm M /branches/dnssec-tools-1.5/tools/donuts/donuts M /branches/dnssec-tools-1.5/tools/donuts/donutsd M /branches/dnssec-tools-1.5/tools/drawvalmap/Makefile.PL M /branches/dnssec-tools-1.5/tools/drawvalmap/drawvalmap M /branches/dnssec-tools-1.5/tools/etc/Makefile.PL M /branches/dnssec-tools-1.5/tools/etc/README M /branches/dnssec-tools-1.5/tools/logwatch/README M /branches/dnssec-tools-1.5/tools/maketestzone/Makefile.PL M /branches/dnssec-tools-1.5/tools/maketestzone/maketestzone M /branches/dnssec-tools-1.5/tools/mapper/Makefile.PL M /branches/dnssec-tools-1.5/tools/mapper/mapper M /branches/dnssec-tools-1.5/tools/modules/BootStrap.pm M /branches/dnssec-tools-1.5/tools/modules/Makefile.PL M /branches/dnssec-tools-1.5/tools/modules/QWPrimitives.pm M /branches/dnssec-tools-1.5/tools/modules/README M /branches/dnssec-tools-1.5/tools/modules/conf.pm.in M /branches/dnssec-tools-1.5/tools/modules/defaults.pm M /branches/dnssec-tools-1.5/tools/modules/dnssectools.pm M /branches/dnssec-tools-1.5/tools/modules/keyrec.pm M /branches/dnssec-tools-1.5/tools/modules/keyrec.pod M /branches/dnssec-tools-1.5/tools/modules/rolllog.pm M /branches/dnssec-tools-1.5/tools/modules/rollmgr.pm M /branches/dnssec-tools-1.5/tools/modules/rollrec.pm M /branches/dnssec-tools-1.5/tools/modules/rollrec.pod M /branches/dnssec-tools-1.5/tools/modules/timetrans.pm M /branches/dnssec-tools-1.5/tools/modules/tooloptions.pm M /branches/dnssec-tools-1.5/tools/scripts/Makefile.PL M /branches/dnssec-tools-1.5/tools/scripts/README M /branches/dnssec-tools-1.5/tools/scripts/blinkenlights M /branches/dnssec-tools-1.5/tools/scripts/cleanarch M /branches/dnssec-tools-1.5/tools/scripts/cleankrf M /branches/dnssec-tools-1.5/tools/scripts/dtck M /branches/dnssec-tools-1.5/tools/scripts/dtconf M /branches/dnssec-tools-1.5/tools/scripts/dtconfchk M /branches/dnssec-tools-1.5/tools/scripts/dtdefs M /branches/dnssec-tools-1.5/tools/scripts/dtinitconf M /branches/dnssec-tools-1.5/tools/scripts/expchk M /branches/dnssec-tools-1.5/tools/scripts/fixkrf M /branches/dnssec-tools-1.5/tools/scripts/genkrf M /branches/dnssec-tools-1.5/tools/scripts/keyarch M /branches/dnssec-tools-1.5/tools/scripts/krfcheck M /branches/dnssec-tools-1.5/tools/scripts/lskrf M /branches/dnssec-tools-1.5/tools/scripts/lsroll M /branches/dnssec-tools-1.5/tools/scripts/rollchk M /branches/dnssec-tools-1.5/tools/scripts/rollctl M /branches/dnssec-tools-1.5/tools/scripts/rollinit M /branches/dnssec-tools-1.5/tools/scripts/rolllog M /branches/dnssec-tools-1.5/tools/scripts/rollrec-editor M /branches/dnssec-tools-1.5/tools/scripts/rollset M /branches/dnssec-tools-1.5/tools/scripts/signset-editor M /branches/dnssec-tools-1.5/tools/scripts/tachk M /branches/dnssec-tools-1.5/tools/scripts/timetrans M /branches/dnssec-tools-1.5/tools/scripts/trustman M /branches/dnssec-tools-1.5/tools/scripts/zonesigner M /branches/dnssec-tools-1.5/validator/README M /branches/dnssec-tools-1.5/validator/apps/getaddr.c M /branches/dnssec-tools-1.5/validator/apps/gethost.c M /branches/dnssec-tools-1.5/validator/apps/getname.c M /branches/dnssec-tools-1.5/validator/apps/getquery.c M /branches/dnssec-tools-1.5/validator/apps/getrrset.c M /branches/dnssec-tools-1.5/validator/apps/libval_check_conf.c M /branches/dnssec-tools-1.5/validator/apps/validator_driver.c M /branches/dnssec-tools-1.5/validator/apps/validator_driver.h M /branches/dnssec-tools-1.5/validator/include/validator/resolver.h M /branches/dnssec-tools-1.5/validator/include/validator/val_errors.h M /branches/dnssec-tools-1.5/validator/include/validator/validator-internal.h M /branches/dnssec-tools-1.5/validator/include/validator/validator.h M /branches/dnssec-tools-1.5/validator/libsres/res_mkquery.h M /branches/dnssec-tools-1.5/validator/libsres/res_query.c M /branches/dnssec-tools-1.5/validator/libsres/res_support.c M /branches/dnssec-tools-1.5/validator/libsres/res_support.h M /branches/dnssec-tools-1.5/validator/libval/val_assertion.c M /branches/dnssec-tools-1.5/validator/libval/val_assertion.h M /branches/dnssec-tools-1.5/validator/libval/val_cache.c M /branches/dnssec-tools-1.5/validator/libval/val_cache.h M /branches/dnssec-tools-1.5/validator/libval/val_context.c M /branches/dnssec-tools-1.5/validator/libval/val_context.h M /branches/dnssec-tools-1.5/validator/libval/val_crypto.c M /branches/dnssec-tools-1.5/validator/libval/val_crypto.h M /branches/dnssec-tools-1.5/validator/libval/val_get_rrset.c M /branches/dnssec-tools-1.5/validator/libval/val_getaddrinfo.c M /branches/dnssec-tools-1.5/validator/libval/val_gethostbyname.c M /branches/dnssec-tools-1.5/validator/libval/val_log.c M /branches/dnssec-tools-1.5/validator/libval/val_parse.c M /branches/dnssec-tools-1.5/validator/libval/val_parse.h M /branches/dnssec-tools-1.5/validator/libval/val_policy.c M /branches/dnssec-tools-1.5/validator/libval/val_resquery.c M /branches/dnssec-tools-1.5/validator/libval/val_resquery.h M /branches/dnssec-tools-1.5/validator/libval/val_support.c M /branches/dnssec-tools-1.5/validator/libval/val_support.h M /branches/dnssec-tools-1.5/validator/libval/val_verify.c M /branches/dnssec-tools-1.5/validator/libval/val_verify.h M /branches/dnssec-tools-1.5/validator/libval/val_x_query.c M /trunk/dnssec-tools/INSTALL M /trunk/dnssec-tools/README M /trunk/dnssec-tools/podmantex M /trunk/dnssec-tools/podtrans M /trunk/dnssec-tools/tools/demos/Makefile M /trunk/dnssec-tools/tools/demos/README M /trunk/dnssec-tools/tools/dnspktflow/Makefile.PL M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/donuts/Makefile.PL M /trunk/dnssec-tools/tools/donuts/Rule.pm M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/donuts/donutsd M /trunk/dnssec-tools/tools/drawvalmap/Makefile.PL M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap M /trunk/dnssec-tools/tools/etc/Makefile.PL M /trunk/dnssec-tools/tools/etc/README M /trunk/dnssec-tools/tools/logwatch/README M /trunk/dnssec-tools/tools/maketestzone/Makefile.PL M /trunk/dnssec-tools/tools/maketestzone/maketestzone M /trunk/dnssec-tools/tools/mapper/Makefile.PL M /trunk/dnssec-tools/tools/mapper/mapper M /trunk/dnssec-tools/tools/modules/BootStrap.pm M /trunk/dnssec-tools/tools/modules/Makefile.PL M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm M /trunk/dnssec-tools/tools/modules/README M /trunk/dnssec-tools/tools/modules/conf.pm.in M /trunk/dnssec-tools/tools/modules/defaults.pm M /trunk/dnssec-tools/tools/modules/dnssectools.pm M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/keyrec.pod M /trunk/dnssec-tools/tools/modules/rolllog.pm M /trunk/dnssec-tools/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/modules/rollrec.pm M /trunk/dnssec-tools/tools/modules/rollrec.pod M /trunk/dnssec-tools/tools/modules/timetrans.pm M /trunk/dnssec-tools/tools/modules/tooloptions.pm M /trunk/dnssec-tools/tools/scripts/Makefile.PL M /trunk/dnssec-tools/tools/scripts/README M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/cleanarch M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtck M /trunk/dnssec-tools/tools/scripts/dtconf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rolllog M /trunk/dnssec-tools/tools/scripts/rollrec-editor M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/trustman M /trunk/dnssec-tools/tools/scripts/zonesigner M /trunk/dnssec-tools/validator/README M /trunk/dnssec-tools/validator/apps/getaddr.c M /trunk/dnssec-tools/validator/apps/gethost.c M /trunk/dnssec-tools/validator/apps/getname.c M /trunk/dnssec-tools/validator/apps/getquery.c M /trunk/dnssec-tools/validator/apps/getrrset.c M /trunk/dnssec-tools/validator/apps/libval_check_conf.c M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/apps/validator_driver.h M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/include/validator/val_errors.h M /trunk/dnssec-tools/validator/include/validator/validator-internal.h M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libsres/res_mkquery.h M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libsres/res_support.c M /trunk/dnssec-tools/validator/libsres/res_support.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_assertion.h M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_cache.h M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_context.h M /trunk/dnssec-tools/validator/libval/val_crypto.c M /trunk/dnssec-tools/validator/libval/val_crypto.h M /trunk/dnssec-tools/validator/libval/val_get_rrset.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_parse.c M /trunk/dnssec-tools/validator/libval/val_parse.h M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_resquery.h M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_support.h M /trunk/dnssec-tools/validator/libval/val_verify.c M /trunk/dnssec-tools/validator/libval/val_verify.h M /trunk/dnssec-tools/validator/libval/val_x_query.c copyright year update ------------------------------------------------------------------------ r4382 | hardaker | 2009-02-16 13:59:57 -0800 (Mon, 16 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/scripts/lsdnssec M /trunk/dnssec-tools/tools/scripts/lsdnssec add a -r and -k flag to lsdnssec for showing only certain types of output ------------------------------------------------------------------------ r4381 | hardaker | 2009-02-16 13:50:14 -0800 (Mon, 16 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/NEWS M /branches/dnssec-tools-1.5/tools/modules/rollmgr.pm M /branches/dnssec-tools-1.5/tools/modules/rollrec.pm M /branches/dnssec-tools-1.5/tools/scripts/lsdnssec M /branches/dnssec-tools-1.5/tools/scripts/rollerd M /branches/dnssec-tools-1.5/tools/scripts/rollinit M /trunk/dnssec-tools/NEWS M /trunk/dnssec-tools/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/modules/rollrec.pm M /trunk/dnssec-tools/tools/scripts/lsdnssec M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit Add minimal RFC5011 support for extended pauses during KSK rolling ------------------------------------------------------------------------ r4380 | hardaker | 2009-02-16 09:05:53 -0800 (Mon, 16 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/donuts/donutsd M /branches/dnssec-tools-1.5/tools/maketestzone/maketestzone M /branches/dnssec-tools-1.5/tools/scripts/getdnskeys M /branches/dnssec-tools-1.5/tools/scripts/getds M /branches/dnssec-tools-1.5/tools/scripts/lsdnssec M /trunk/dnssec-tools/tools/donuts/donutsd M /trunk/dnssec-tools/tools/maketestzone/maketestzone M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/getds M /trunk/dnssec-tools/tools/scripts/lsdnssec fixed perl use typo ------------------------------------------------------------------------ r4379 | hardaker | 2009-02-14 10:01:25 -0800 (Sat, 14 Feb 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/cleanarch make executable ------------------------------------------------------------------------ r4378 | hardaker | 2009-02-14 10:01:13 -0800 (Sat, 14 Feb 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/dtck make executable ------------------------------------------------------------------------ r4377 | hardaker | 2009-02-14 10:01:07 -0800 (Sat, 14 Feb 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/getds make executable ------------------------------------------------------------------------ r4375 | hardaker | 2009-02-14 10:00:57 -0800 (Sat, 14 Feb 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor make executable ------------------------------------------------------------------------ r4370 | hardaker | 2009-02-14 09:52:06 -0800 (Sat, 14 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/donuts/donutsd M /branches/dnssec-tools-1.5/tools/maketestzone/maketestzone M /trunk/dnssec-tools/tools/donuts/donutsd M /trunk/dnssec-tools/tools/maketestzone/maketestzone Use standardized DTGetOptions ------------------------------------------------------------------------ r4369 | hardaker | 2009-02-14 09:49:13 -0800 (Sat, 14 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/scripts/getdnskeys M /branches/dnssec-tools-1.5/tools/scripts/getds M /branches/dnssec-tools-1.5/tools/scripts/lsdnssec M /branches/dnssec-tools-1.5/tools/scripts/trustman M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/getds M /trunk/dnssec-tools/tools/scripts/lsdnssec M /trunk/dnssec-tools/tools/scripts/trustman Use standardized DTGetOptions ------------------------------------------------------------------------ r4368 | hardaker | 2009-02-14 09:45:30 -0800 (Sat, 14 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/scripts/lsdnssec M /trunk/dnssec-tools/tools/scripts/lsdnssec add a -z option for limiting to a single zone ------------------------------------------------------------------------ r4367 | hardaker | 2009-02-14 09:44:15 -0800 (Sat, 14 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow Use standardized DTGetOptions ------------------------------------------------------------------------ r4366 | hardaker | 2009-02-14 09:42:38 -0800 (Sat, 14 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/mapper/mapper M /trunk/dnssec-tools/tools/mapper/mapper Use standardized DTGetOptions ------------------------------------------------------------------------ r4364 | hardaker | 2009-02-14 09:39:26 -0800 (Sat, 14 Feb 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts convert older getoptions to DT standardized one ------------------------------------------------------------------------ r4363 | hardaker | 2009-02-14 09:38:41 -0800 (Sat, 14 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/modules/QWPrimitives.pm M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm Created a default DTGetOptions function for gui/nogui support based on config ------------------------------------------------------------------------ r4362 | hardaker | 2009-02-13 15:35:07 -0800 (Fri, 13 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/NEWS M /branches/dnssec-tools-1.5/tools/scripts/Makefile.PL A /branches/dnssec-tools-1.5/tools/scripts/lsdnssec M /trunk/dnssec-tools/NEWS M /trunk/dnssec-tools/tools/scripts/Makefile.PL A /trunk/dnssec-tools/tools/scripts/lsdnssec A new lsdnssec file to collect and summarize information from various DT sources ------------------------------------------------------------------------ r4361 | hardaker | 2009-02-13 15:24:57 -0800 (Fri, 13 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/NEWS M /trunk/dnssec-tools/NEWS NEWS update for -alwayssign ------------------------------------------------------------------------ r4360 | hardaker | 2009-02-13 15:23:44 -0800 (Fri, 13 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollerd Document the new -alwayssign flag ------------------------------------------------------------------------ r4359 | hardaker | 2009-02-13 15:20:21 -0800 (Fri, 13 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollerd Added a new -alwayssign flag that tells rollerd to sign existing zones that aren't in the middle of rolling; useful for complete management of zones via rollerd ------------------------------------------------------------------------ r4358 | hardaker | 2009-02-13 14:18:12 -0800 (Fri, 13 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rollinit fix left-over line from last patch ------------------------------------------------------------------------ r4357 | hardaker | 2009-02-13 12:35:00 -0800 (Fri, 13 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rollinit changed -zone flag to -zonefile for clarity when compared to other tools like zonesigner ------------------------------------------------------------------------ r4350 | hardaker | 2009-02-06 12:37:23 -0800 (Fri, 06 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/maketestzone/maketestzone M /trunk/dnssec-tools/tools/maketestzone/maketestzone nsec3 support ------------------------------------------------------------------------ r4349 | hardaker | 2009-02-05 16:57:50 -0800 (Thu, 05 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/modules/conf.pm.in M /branches/dnssec-tools-1.5/tools/modules/rollmgr.pm M /branches/dnssec-tools-1.5/tools/modules/rollrec.pm M /trunk/dnssec-tools/tools/modules/conf.pm.in M /trunk/dnssec-tools/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/modules/rollrec.pm make makelocalstatedir accept a subdir argument ------------------------------------------------------------------------ r4348 | hardaker | 2009-02-05 16:56:58 -0800 (Thu, 05 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollerd make rollerd remember int/hup signals for later processing ------------------------------------------------------------------------ r4347 | hardaker | 2009-02-05 14:34:20 -0800 (Thu, 05 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/modules/conf.pm.in M /branches/dnssec-tools-1.5/tools/modules/defaults.pm M /branches/dnssec-tools-1.5/tools/modules/rollmgr.pm M /branches/dnssec-tools-1.5/tools/modules/rollrec.pm M /trunk/dnssec-tools/tools/modules/conf.pm.in M /trunk/dnssec-tools/tools/modules/defaults.pm M /trunk/dnssec-tools/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/modules/rollrec.pm make a new makelocalstatedir() function which creates the state directory if it doesn't exist before returning it's value ------------------------------------------------------------------------ r4346 | hardaker | 2009-02-05 14:22:05 -0800 (Thu, 05 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/validator/configure.in M /trunk/dnssec-tools/validator/configure.in consistent wording in the configure output ------------------------------------------------------------------------ r4345 | hardaker | 2009-02-05 14:20:14 -0800 (Thu, 05 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/validator/configure M /branches/dnssec-tools-1.5/validator/configure.in M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in attempt to carefully define gethostbyname: take 3 ------------------------------------------------------------------------ r4344 | hardaker | 2009-02-05 14:18:41 -0800 (Thu, 05 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/validator/configure M /branches/dnssec-tools-1.5/validator/configure.in M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in attempt to carefully define gethostbyname: take 2 ------------------------------------------------------------------------ r4343 | hardaker | 2009-02-05 14:16:44 -0800 (Thu, 05 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/validator/configure M /branches/dnssec-tools-1.5/validator/configure.in M /branches/dnssec-tools-1.5/validator/include/validator-config.h.in M /branches/dnssec-tools-1.5/validator/libval_shim/libval_shim.c M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator-config.h.in M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c attempt to carefully define gethostbyname: take 1 ------------------------------------------------------------------------ r4342 | hardaker | 2009-02-05 14:03:12 -0800 (Thu, 05 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/validator/configure M /branches/dnssec-tools-1.5/validator/configure.in M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in attempt to carefully define getnameinfo: take 3 ------------------------------------------------------------------------ r4341 | hardaker | 2009-02-05 14:00:37 -0800 (Thu, 05 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/validator/configure M /branches/dnssec-tools-1.5/validator/configure.in M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in attempt to carefully define getnameinfo: take 2 ------------------------------------------------------------------------ r4340 | hardaker | 2009-02-05 13:56:17 -0800 (Thu, 05 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/validator/configure M /branches/dnssec-tools-1.5/validator/configure.in M /branches/dnssec-tools-1.5/validator/include/validator-config.h.in M /branches/dnssec-tools-1.5/validator/libval_shim/libval_shim.c M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator-config.h.in M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c attempt to carefully define getnameinfo ------------------------------------------------------------------------ r4339 | hardaker | 2009-02-05 12:04:10 -0800 (Thu, 05 Feb 2009) | 1 line Changed paths: M /branches/dnssec-tools-1.5/tools/modules/defaults.pm M /trunk/dnssec-tools/tools/modules/defaults.pm use getprefixdir to find install path ------------------------------------------------------------------------ r4334 | hardaker | 2009-02-05 10:01:07 -0800 (Thu, 05 Feb 2009) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS added news blurbs from branch ------------------------------------------------------------------------ r4331 | hardaker | 2009-02-05 08:51:14 -0800 (Thu, 05 Feb 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts documentation for the nsec_check feature ------------------------------------------------------------------------ r4330 | hserus | 2009-02-05 08:48:53 -0800 (Thu, 05 Feb 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c Set the value of the addrinfo return param ------------------------------------------------------------------------ r4329 | hserus | 2009-02-05 08:48:21 -0800 (Thu, 05 Feb 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.c Fix logic in removal of first element of the zoneinfo linked list ------------------------------------------------------------------------ r4328 | hserus | 2009-02-05 08:47:08 -0800 (Thu, 05 Feb 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/ssh/openssh-5.1p1-dnssec.patch Fix compile issues ------------------------------------------------------------------------ r4327 | hardaker | 2009-02-04 15:08:23 -0800 (Wed, 04 Feb 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd change KSK/ZSK starting phase to 1 from 2, making the initial waiting period for cache flush active. Though not frequently needed, it's better to be safe than sorry (and more important during single-run flags). ------------------------------------------------------------------------ r4326 | hserus | 2009-02-04 13:20:09 -0800 (Wed, 04 Feb 2009) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/ssh/openssh-5.1p1-dnssec.patch Add new patch for openssh-5.1p1 ------------------------------------------------------------------------ r4325 | hardaker | 2009-02-02 07:54:39 -0800 (Mon, 02 Feb 2009) | 1 line Changed paths: A /trunk/dnssec-tools/tools/donuts/rules/nsec_check.rules.txt NSEC checking rules; requires feature: nsec_check ------------------------------------------------------------------------ r4324 | hserus | 2009-01-30 09:28:10 -0800 (Fri, 30 Jan 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Version submitted as -07 ------------------------------------------------------------------------ r4323 | hserus | 2009-01-29 12:36:39 -0800 (Thu, 29 Jan 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h reorder rr_next element to be last in the val_rr_rec structure ------------------------------------------------------------------------ r4322 | hserus | 2009-01-29 12:07:04 -0800 (Thu, 29 Jan 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Add reference to new IPR text ------------------------------------------------------------------------ r4321 | hardaker | 2009-01-29 11:39:44 -0800 (Thu, 29 Jan 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm try again at portable base32 calling ------------------------------------------------------------------------ r4320 | hserus | 2009-01-29 11:38:37 -0800 (Thu, 29 Jan 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Set zonecut when restarting query from root ------------------------------------------------------------------------ r4319 | hserus | 2009-01-29 10:53:49 -0800 (Thu, 29 Jan 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Make DS query less dependent on zonecut information (DNSKEY name is sufficient) ------------------------------------------------------------------------ r4318 | hserus | 2009-01-29 10:40:37 -0800 (Thu, 29 Jan 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c restructure code for digest_response ------------------------------------------------------------------------ r4317 | hserus | 2009-01-29 10:37:00 -0800 (Thu, 29 Jan 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.c No longer keep separate caches for key and DS records ------------------------------------------------------------------------ r4316 | hserus | 2009-01-29 10:36:11 -0800 (Thu, 29 Jan 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_query.c Set the RD bit only if the RES_RECURSE option is specified ------------------------------------------------------------------------ r4315 | hserus | 2009-01-29 10:31:53 -0800 (Thu, 29 Jan 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Display the query state in error response log message ------------------------------------------------------------------------ r4314 | hserus | 2009-01-29 10:11:46 -0800 (Thu, 29 Jan 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h Retry queries at least once ------------------------------------------------------------------------ r4312 | hardaker | 2009-01-29 09:25:44 -0800 (Thu, 29 Jan 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm fix base32 requirement support for nsec3 ------------------------------------------------------------------------ r4311 | hserus | 2009-01-28 12:28:48 -0800 (Wed, 28 Jan 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/dnsval.conf.3 M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod M /trunk/dnssec-tools/validator/doc/libsres.3 M /trunk/dnssec-tools/validator/doc/libsres.pod M /trunk/dnssec-tools/validator/doc/libval-implementation-notes M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod M /trunk/dnssec-tools/validator/doc/val_get_rrset.3 M /trunk/dnssec-tools/validator/doc/val_get_rrset.pod Keep documentation in sync with API ------------------------------------------------------------------------ r4310 | hserus | 2009-01-28 12:27:10 -0800 (Wed, 28 Jan 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Current version of validator API to be submitted as -07 ------------------------------------------------------------------------ r4309 | hserus | 2009-01-28 11:58:06 -0800 (Wed, 28 Jan 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/ssh/ssh-dnssec.pat No longer require ns_name_pton function since val_resolve_and_check now accepts names as char * ------------------------------------------------------------------------ r4308 | hserus | 2009-01-28 11:57:28 -0800 (Wed, 28 Jan 2009) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/ssh/openssh-5.0p1-dnssec.patch No longer require the ns_name_pton function since val_resolve_and_check now accepts names as char * ------------------------------------------------------------------------ r4307 | hserus | 2009-01-28 11:55:57 -0800 (Wed, 28 Jan 2009) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap - Remove older status codes and replace with most recent set ------------------------------------------------------------------------ r4306 | hserus | 2009-01-28 11:54:52 -0800 (Wed, 28 Jan 2009) | 13 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/README M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc Changes to comply with latest set of API changes * Changes to status codes - removed the VAL_AC_TRUSTED_ZONE and VAL_TRUSTED_ZONE codes - renamed *PROVABLY_INSECURE* to *PINSECURE* - renamed VAL_LOCAL_ANSWER to VAL_OOB_ANSWER * Changes to function prototypes - using u_char in place of u_int8_t to represent character buffers - using higher order types instead of u_int* variants for exported functions - using size_t where appropriate - No longer pass OTW format domain names for val_resolve_and_check() ------------------------------------------------------------------------ r4305 | hserus | 2009-01-28 11:49:13 -0800 (Wed, 28 Jan 2009) | 24 lines Changed paths: M /trunk/dnssec-tools/validator/apps/getrrset.c M /trunk/dnssec-tools/validator/apps/selftests.dist M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/apps/validator_driver.h M /trunk/dnssec-tools/validator/apps/validator_selftest.c M /trunk/dnssec-tools/validator/etc/dnsval.conf M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/include/validator/val_errors.h M /trunk/dnssec-tools/validator/include/validator/validator-internal.h M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libsres/res_debug.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.h M /trunk/dnssec-tools/validator/libsres/res_mkquery.c M /trunk/dnssec-tools/validator/libsres/res_mkquery.h M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libsres/res_support.c M /trunk/dnssec-tools/validator/libsres/res_support.h M /trunk/dnssec-tools/validator/libsres/res_tsig.c M /trunk/dnssec-tools/validator/libsres/res_tsig.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_assertion.h M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_cache.h M /trunk/dnssec-tools/validator/libval/val_crypto.c M /trunk/dnssec-tools/validator/libval/val_crypto.h M /trunk/dnssec-tools/validator/libval/val_get_rrset.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_parse.c M /trunk/dnssec-tools/validator/libval/val_parse.h M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_policy.h M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_resquery.h M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_support.h M /trunk/dnssec-tools/validator/libval/val_verify.c M /trunk/dnssec-tools/validator/libval/val_verify.h M /trunk/dnssec-tools/validator/libval/val_x_query.c * Changes to status codes - removed the VAL_AC_TRUSTED_ZONE and VAL_TRUSTED_ZONE codes - renamed *PROVABLY_INSECURE* to *PINSECURE* - renamed VAL_LOCAL_ANSWER to VAL_OOB_ANSWER * Changes to types - using u_char in place of u_int8_t to represent character buffers - using size_t where appropriate - Decoupled val_rrset_rec from other internal structures. Moved members from older val_rrset_digested structure to rrset_rec structure - No longer store complete header information in val_rrset_rec; only keep rcode information * Changes to function prototypes - using higher order types instead of u_int* variants for exported functions - val_add_valpolicy() now takes a void * as the second argument - No longer pass OTW format domain names for val_resolve_and_check() * policy-related - No longer define a "trusted" zone security expectation since there is no way to give it special treatment in the high-level API; the "ignore" condition subsumes the "trusted" condition. - Define new libval_policy_definition_t structure to encapsulate the libval-specific policy definition parameters in val_add_valpolicy() ------------------------------------------------------------------------ r4304 | hardaker | 2009-01-27 12:48:00 -0800 (Tue, 27 Jan 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt NSEC and NSEC3 support improvements ------------------------------------------------------------------------ r4303 | hardaker | 2009-01-27 12:45:09 -0800 (Tue, 27 Jan 2009) | 1 line Changed paths: M /branches/dnssec-tools-for-1.4.2/tools/modules/ZoneFile-Fast/Changes M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Changes Changes for upcoming release ------------------------------------------------------------------------ r4301 | hardaker | 2009-01-27 08:59:19 -0800 (Tue, 27 Jan 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Makefile.PL M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rr-dnssec.t M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs.t support for NSEC3 and misc fixes due to changes in recent Net::DNS modules ------------------------------------------------------------------------ r4300 | hardaker | 2009-01-27 07:48:09 -0800 (Tue, 27 Jan 2009) | 1 line Changed paths: M /branches/dnssec-tools-for-1.4.2/tools/donuts/rules/dnssec.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt check for null-names in NSEC checks ------------------------------------------------------------------------ r4299 | hardaker | 2009-01-27 07:46:16 -0800 (Tue, 27 Jan 2009) | 1 line Changed paths: M /branches/dnssec-tools-for-1.4.2/tools/donuts/rules/check_nameservers.txt M /branches/dnssec-tools-for-1.4.2/tools/donuts/rules/dns.errors.txt M /branches/dnssec-tools-for-1.4.2/tools/donuts/rules/dnssec.rules.txt M /branches/dnssec-tools-for-1.4.2/tools/donuts/rules/parent_child.rules.txt M /branches/dnssec-tools-for-1.4.2/tools/donuts/rules/recommendations.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/check_nameservers.txt M /trunk/dnssec-tools/tools/donuts/rules/dns.errors.txt M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt copyright year update ------------------------------------------------------------------------ r4297 | hardaker | 2009-01-27 06:50:23 -0800 (Tue, 27 Jan 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner allow for -s in SOA records ------------------------------------------------------------------------ r4296 | hardaker | 2009-01-26 13:48:52 -0800 (Mon, 26 Jan 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm M /trunk/dnssec-tools/tools/scripts/zonesigner make nsec3salt support a random:64 type syntax for random salts of a particular length ------------------------------------------------------------------------ r4295 | hardaker | 2009-01-26 12:48:16 -0800 (Mon, 26 Jan 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm M /trunk/dnssec-tools/tools/modules/tooloptions.pm M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/zonesigner initial NSEC3 support for zonesigner ------------------------------------------------------------------------ r4293 | hardaker | 2009-01-22 15:45:13 -0800 (Thu, 22 Jan 2009) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_query.c move arpa/nameserv include higher since it's needed before the validator headers ------------------------------------------------------------------------ r4292 | hardaker | 2009-01-22 15:18:26 -0800 (Thu, 22 Jan 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/mapper/mapper M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rolllog M /trunk/dnssec-tools/tools/scripts/rollrec-editor M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/trustman M /trunk/dnssec-tools/tools/scripts/zonesigner local tool version update ------------------------------------------------------------------------ r4282 | hardaker | 2009-01-07 09:53:42 -0800 (Wed, 07 Jan 2009) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/ns_parse.c M /trunk/dnssec-tools/validator/libsres/res_debug.c M /trunk/dnssec-tools/validator/libsres/res_support.h rename ns_msg_getflag to libsres_msg_getflag to avoid tricky compiling issues ------------------------------------------------------------------------ r4281 | hardaker | 2009-01-07 08:22:50 -0800 (Wed, 07 Jan 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm use getconfdir() to find named.conf instead of hard-code ------------------------------------------------------------------------ r4280 | hardaker | 2009-01-06 14:31:38 -0800 (Tue, 06 Jan 2009) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm copyright update ------------------------------------------------------------------------ r4279 | hardaker | 2009-01-06 14:24:56 -0800 (Tue, 06 Jan 2009) | 1 line Changed paths: M /trunk/dnssec-tools/COPYING update copyright for the near year ------------------------------------------------------------------------ r4278 | hardaker | 2008-12-31 10:18:32 -0800 (Wed, 31 Dec 2008) | 2 lines Changed paths: M / M /trunk/dnssec-tools/tools/scripts/rollerd added a -foreground option ------------------------------------------------------------------------ r4277 | hardaker | 2008-12-31 10:18:16 -0800 (Wed, 31 Dec 2008) | 2 lines Changed paths: M / M /trunk/dnssec-tools/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/modules/rollrec.pm fix filename typos; allow /perl/ to match rollerd processes ------------------------------------------------------------------------ r4276 | hardaker | 2008-12-31 10:17:57 -0800 (Wed, 31 Dec 2008) | 2 lines Changed paths: M / M /trunk/dnssec-tools/tools/modules/rollmgr.pm move the unix sock location to /var as well ------------------------------------------------------------------------ r4275 | hardaker | 2008-12-31 10:17:37 -0800 (Wed, 31 Dec 2008) | 2 lines Changed paths: M / M /trunk/dnssec-tools/tools/modules/rollrec.pm switch the lock file to the statedir directory for alignment with modern unix expectations ------------------------------------------------------------------------ r4274 | hardaker | 2008-12-31 10:17:26 -0800 (Wed, 31 Dec 2008) | 2 lines Changed paths: M / M /trunk/dnssec-tools/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/modules/rollrec.pm M /trunk/dnssec-tools/tools/scripts/rollerd properly handle rollerd singlerun shutdowns; make sure read/writes of rollrec files don't repoduce handled cmd statements ------------------------------------------------------------------------ r4273 | hardaker | 2008-12-31 10:17:15 -0800 (Wed, 31 Dec 2008) | 2 lines Changed paths: M / M /trunk/dnssec-tools/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/modules/rollrec.pm M /trunk/dnssec-tools/tools/scripts/rollerd allow cmd statements to be put into the rollrec files for immediate execution of a command ------------------------------------------------------------------------ r4272 | hardaker | 2008-12-31 10:17:03 -0800 (Wed, 31 Dec 2008) | 2 lines Changed paths: M / M /trunk/dnssec-tools/tools/scripts/rollerd allow the pid file to be specified; allow a -singlerun option to indicate not to run as a daemon and do just one round of processing ------------------------------------------------------------------------ r4271 | hardaker | 2008-12-31 10:16:49 -0800 (Wed, 31 Dec 2008) | 2 lines Changed paths: M / M /trunk/dnssec-tools/tools/modules/rollmgr.pm make the pid file settable and not just hard-coded ------------------------------------------------------------------------ r4270 | hardaker | 2008-12-31 10:16:40 -0800 (Wed, 31 Dec 2008) | 2 lines Changed paths: M / M /trunk/dnssec-tools/tools/scripts/zonesigner fix serial number incrementation with stricter matching ------------------------------------------------------------------------ r4269 | hardaker | 2008-12-31 10:16:24 -0800 (Wed, 31 Dec 2008) | 2 lines Changed paths: M / M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow allow svg, svgz and ps output ------------------------------------------------------------------------ r4266 | hardaker | 2008-12-16 10:43:47 -0800 (Tue, 16 Dec 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/scripts/rollerd Use descriptive text to describe rolling states from rollctl/rollerd output ------------------------------------------------------------------------ r4265 | hardaker | 2008-12-12 16:15:09 -0800 (Fri, 12 Dec 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/rollinit use real stdout file descriptors rather than a tty so scripts can properly redirect to a file if need be ------------------------------------------------------------------------ r4264 | hardaker | 2008-12-12 16:14:30 -0800 (Fri, 12 Dec 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd mention rollinit earlier in the documentation ------------------------------------------------------------------------ r4263 | hardaker | 2008-12-09 16:24:40 -0800 (Tue, 09 Dec 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/ns_parse.c rename a variable so it doesn't conflict with the structure name with stricter compilers ------------------------------------------------------------------------ r4262 | hardaker | 2008-12-09 16:03:20 -0800 (Tue, 09 Dec 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/dist/Makefile.pp more needed auto-include modules ------------------------------------------------------------------------ r4261 | hardaker | 2008-12-09 16:02:33 -0800 (Tue, 09 Dec 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner create System* commands to auto-print what's run when running in verbose ------------------------------------------------------------------------ r4260 | hardaker | 2008-12-09 16:01:06 -0800 (Tue, 09 Dec 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm remove the - from -wax for bsd related systems ------------------------------------------------------------------------ r4259 | hardaker | 2008-12-04 15:53:19 -0800 (Thu, 04 Dec 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm fix bug 2059932: increment proper number on set-number changes incase a zone contains a number in it ------------------------------------------------------------------------ r4258 | hardaker | 2008-12-04 15:14:02 -0800 (Thu, 04 Dec 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner patch from Ondrej Sury to honor specified zone checker command line options ------------------------------------------------------------------------ r4257 | hardaker | 2008-12-04 14:54:00 -0800 (Thu, 04 Dec 2008) | 1 line Changed paths: M /trunk/dnssec-tools/Makefile.in patch from Ondrej Sury to fix the mkdir process for man page directories ------------------------------------------------------------------------ r4256 | hardaker | 2008-12-04 14:37:38 -0800 (Thu, 04 Dec 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner patch from Ondrej Sury to fix auto-serial number incrementing for SOAs without parens ------------------------------------------------------------------------ r4247 | hardaker | 2008-11-05 08:25:55 -0800 (Wed, 05 Nov 2008) | 1 line Changed paths: M /trunk/dnssec-tools/apps/ssh/openssh-5.0p1-dnssec.patch M /trunk/dnssec-tools/apps/ssh/ssh-dnssec.pat spelling fixes from Michael Sinatra ------------------------------------------------------------------------ r4246 | hardaker | 2008-10-21 07:42:06 -0700 (Tue, 21 Oct 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper add --node-style, --edge-style and --dump-styles options ------------------------------------------------------------------------ r4245 | hardaker | 2008-10-07 10:27:14 -0700 (Tue, 07 Oct 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm version update ------------------------------------------------------------------------ r4244 | hardaker | 2008-10-07 10:27:02 -0700 (Tue, 07 Oct 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Changes update ------------------------------------------------------------------------ r4243 | hardaker | 2008-10-07 10:20:41 -0700 (Tue, 07 Oct 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/ttl.t fix a test case for broken seconds ------------------------------------------------------------------------ r4242 | hardaker | 2008-10-07 10:06:32 -0700 (Tue, 07 Oct 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm fix CPAN bug #39360: die within an error handler actually will die appropriately ------------------------------------------------------------------------ r4239 | hserus | 2008-09-26 11:22:45 -0700 (Fri, 26 Sep 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_crypto.c Fix buffer overflow problem. Still need to figure out how RSAMD5 keys need to be parsed. ------------------------------------------------------------------------ r4238 | hserus | 2008-09-26 08:06:18 -0700 (Fri, 26 Sep 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_parse.c Do some more sanity checking of input values ------------------------------------------------------------------------ r4236 | hardaker | 2008-09-17 10:00:54 -0700 (Wed, 17 Sep 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs.t allow MX records to contain a . as the destination (indicating no mail delivery) ------------------------------------------------------------------------ r4233 | hardaker | 2008-09-01 12:10:59 -0700 (Mon, 01 Sep 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL add getds ------------------------------------------------------------------------ r4232 | hardaker | 2008-09-01 12:07:37 -0700 (Mon, 01 Sep 2008) | 1 line Changed paths: A /trunk/dnssec-tools/tools/scripts/getds print DS records for a zone ------------------------------------------------------------------------ r4231 | hardaker | 2008-09-01 09:17:19 -0700 (Mon, 01 Sep 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm fix pushing of questions onto stack ------------------------------------------------------------------------ r4230 | hardaker | 2008-08-27 15:11:00 -0700 (Wed, 27 Aug 2008) | 1 line Changed paths: A /trunk/dnssec-tools/tools/donuts/dist/Makefile.pp a script to create a self-contained binary for donuts ------------------------------------------------------------------------ r4229 | hardaker | 2008-08-27 15:10:36 -0700 (Wed, 27 Aug 2008) | 1 line Changed paths: A /trunk/dnssec-tools/tools/donuts/dist new dist directory for distribution tasks ------------------------------------------------------------------------ r4228 | hardaker | 2008-08-27 15:10:19 -0700 (Wed, 27 Aug 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts load the rules from the PAR archive if being run from a par archive ------------------------------------------------------------------------ r4225 | hardaker | 2008-08-14 10:53:40 -0700 (Thu, 14 Aug 2008) | 1 line Changed paths: M /branches/dnssec-tools-1.4/validator/configure M /branches/dnssec-tools-1.4/validator/configure.in M /branches/dnssec-tools-1.4/validator/include/validator-config.h.in M /branches/dnssec-tools-1.4/validator/libval_shim/libval_shim.c M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator-config.h.in M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c Add configure checks to test for gethostby* function conformance ------------------------------------------------------------------------ r4224 | hardaker | 2008-08-14 06:49:17 -0700 (Thu, 14 Aug 2008) | 1 line Changed paths: M /branches/dnssec-tools-1.4/tools/modules/Net-DNS-SEC-Validator/Validator.xs M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs Add the validator-config.h include for u_int* typedefs ------------------------------------------------------------------------ r4214 | hserus | 2008-07-22 07:01:21 -0700 (Tue, 22 Jul 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_support.c Don't use random() ------------------------------------------------------------------------ r4213 | hserus | 2008-07-22 06:16:19 -0700 (Tue, 22 Jul 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_mkquery.c M /trunk/dnssec-tools/validator/libsres/res_support.c M /trunk/dnssec-tools/validator/libsres/res_support.h Use random source port and transaction ids ------------------------------------------------------------------------ r4212 | hserus | 2008-07-09 14:08:06 -0700 (Wed, 09 Jul 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c Revert previous change. Code not ready for prime time. ------------------------------------------------------------------------ r4211 | hserus | 2008-07-09 12:52:17 -0700 (Wed, 09 Jul 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c Randomize the source port. Code is still not IPv6 safe. ------------------------------------------------------------------------ r4210 | hserus | 2008-07-09 12:46:56 -0700 (Wed, 09 Jul 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h Add correct type code for nsec3 ------------------------------------------------------------------------ r4209 | baerm | 2008-07-03 14:42:07 -0700 (Thu, 03 Jul 2008) | 4 lines Changed paths: D /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0-dnssec-howto.txt A /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.x-dnssec-howto.txt (from /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0-dnssec-howto.txt:4208) renaming how to for accuracy ------------------------------------------------------------------------ r4208 | baerm | 2008-07-03 14:41:33 -0700 (Thu, 03 Jul 2008) | 4 lines Changed paths: M /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0-dnssec-howto.txt D /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0_dnssec_patch.txt A /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.x_dnssec_patch.txt (from /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0_dnssec_patch.txt:4207) Updated the text to match testing with the 3.2.1 ncftp software. ------------------------------------------------------------------------ r4207 | tewok | 2008-07-02 15:11:09 -0700 (Wed, 02 Jul 2008) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/README M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/README M /trunk/dnssec-tools/tools/demos/rollerd-subdirs/README Added an explanation for the potential problem of the demo log not be automatically displayed. ------------------------------------------------------------------------ r4206 | tewok | 2008-07-02 15:06:54 -0700 (Wed, 02 Jul 2008) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/rundemo M /trunk/dnssec-tools/tools/demos/rollerd-subdirs/rundemo Mostly fix a hanging demo problem. (If the error manifests, the demo still runs, but the log isn't displayed.) ------------------------------------------------------------------------ r4205 | tewok | 2008-07-02 14:49:21 -0700 (Wed, 02 Jul 2008) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/rundemo Mostly fix a hanging demo problem. (If the error manifests, the demo still runs, but the log isn't displayed.) ------------------------------------------------------------------------ r4204 | tewok | 2008-07-02 09:22:32 -0700 (Wed, 02 Jul 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Fix an important typo in the pod. ------------------------------------------------------------------------ r4203 | tewok | 2008-07-01 15:34:49 -0700 (Tue, 01 Jul 2008) | 9 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Reorganized commands: - Created ZSK Commands menu. - Moved "Roll Selected Zone's ZSK" and "Roll All Zones' ZSKs" into the new ZSK Commands menu. Renamed kskcmd() to kskcmds(). ------------------------------------------------------------------------ r4202 | tewok | 2008-07-01 10:23:17 -0700 (Tue, 01 Jul 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Fixed a typo. ------------------------------------------------------------------------ r4201 | tewok | 2008-07-01 10:09:09 -0700 (Tue, 01 Jul 2008) | 4 lines Changed paths: A /trunk/dnssec-tools/tools/demos/Makefile M /trunk/dnssec-tools/tools/demos/rollerd-basic/Makefile M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/Makefile M /trunk/dnssec-tools/tools/demos/rollerd-subdirs/Makefile Added a top-level demo makefile for cleaning and building the demos. Modified the demo makefiles to obey their superior. ------------------------------------------------------------------------ r4200 | tewok | 2008-07-01 09:50:07 -0700 (Tue, 01 Jul 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-subdirs/save-demo.rollrec Defining reality. ------------------------------------------------------------------------ r4199 | tewok | 2008-07-01 09:48:57 -0700 (Tue, 01 Jul 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/README Fixed to reflect reality. ------------------------------------------------------------------------ r4198 | tewok | 2008-07-01 09:43:50 -0700 (Tue, 01 Jul 2008) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/Makefile M /trunk/dnssec-tools/tools/demos/rollerd-basic/README M /trunk/dnssec-tools/tools/demos/rollerd-basic/phaser A /trunk/dnssec-tools/tools/demos/rollerd-basic/rc.blinkenlights M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-demo.rollrec D /trunk/dnssec-tools/tools/demos/rollerd-basic/save-dummy.com Modified whole demo to: - delete dummy.com - move all zones out of subdirectories and into current directory There are now two zones: example.com and test.com. example.com starts as a rolling zone; test.com starts as a skipped zone. ------------------------------------------------------------------------ r4197 | tewok | 2008-06-30 19:54:10 -0700 (Mon, 30 Jun 2008) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/demos/rollerd-subdirs A /trunk/dnssec-tools/tools/demos/rollerd-subdirs/Makefile A /trunk/dnssec-tools/tools/demos/rollerd-subdirs/README A /trunk/dnssec-tools/tools/demos/rollerd-subdirs/phaser A /trunk/dnssec-tools/tools/demos/rollerd-subdirs/rc.blinkenlights A /trunk/dnssec-tools/tools/demos/rollerd-subdirs/rundemo A /trunk/dnssec-tools/tools/demos/rollerd-subdirs/save-db.cache A /trunk/dnssec-tools/tools/demos/rollerd-subdirs/save-demo.rollrec A /trunk/dnssec-tools/tools/demos/rollerd-subdirs/save-dummy.com A /trunk/dnssec-tools/tools/demos/rollerd-subdirs/save-example.com A /trunk/dnssec-tools/tools/demos/rollerd-subdirs/save-test.com Adding subdirectory-based demo. ------------------------------------------------------------------------ r4196 | tewok | 2008-06-30 13:36:04 -0700 (Mon, 30 Jun 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/rundemo Fixed an option name. ------------------------------------------------------------------------ r4195 | tewok | 2008-06-30 13:35:38 -0700 (Mon, 30 Jun 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/Makefile Added a phaser call for the small rollrec file. ------------------------------------------------------------------------ r4194 | tewok | 2008-06-30 13:31:51 -0700 (Mon, 30 Jun 2008) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/phaser M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-demo-smallset.rollrec M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-demo.rollrec Fixed phasestart manipulation so The Right Thing would be done. ------------------------------------------------------------------------ r4193 | tewok | 2008-06-30 12:45:09 -0700 (Mon, 30 Jun 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/rundemo Fixed an option name. ------------------------------------------------------------------------ r4192 | tewok | 2008-06-30 12:43:40 -0700 (Mon, 30 Jun 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/phaser Added a bit of explanatory commenting. ------------------------------------------------------------------------ r4191 | tewok | 2008-06-30 12:42:29 -0700 (Mon, 30 Jun 2008) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-demo.rollrec Fixed the phasestart lines for each zone so they'll be properly adjusted by phaser at demo start. ------------------------------------------------------------------------ r4190 | tewok | 2008-06-27 13:44:23 -0700 (Fri, 27 Jun 2008) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor Added editing of the zsargs field. ------------------------------------------------------------------------ r4189 | tewok | 2008-06-27 12:08:54 -0700 (Fri, 27 Jun 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor Fixed a few minor comment errors. ------------------------------------------------------------------------ r4188 | tewok | 2008-06-27 10:13:11 -0700 (Fri, 27 Jun 2008) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollchk Fixed a bug wherein a rollrec's directory wasn't being added to relative paths for the file checks. ------------------------------------------------------------------------ r4187 | tewok | 2008-06-27 09:29:06 -0700 (Fri, 27 Jun 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollchk Added checking for null zsargs. ------------------------------------------------------------------------ r4186 | tewok | 2008-06-26 18:52:34 -0700 (Thu, 26 Jun 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/cleanarch M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtck M /trunk/dnssec-tools/tools/scripts/dtconf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rolllog M /trunk/dnssec-tools/tools/scripts/rollrec-editor M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/trustman M /trunk/dnssec-tools/tools/scripts/zonesigner Brought consistency to option formatting in the pods. ------------------------------------------------------------------------ r4185 | tewok | 2008-06-26 12:49:21 -0700 (Thu, 26 Jun 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollset Make pod option format consistent. ------------------------------------------------------------------------ r4184 | tewok | 2008-06-26 12:44:47 -0700 (Thu, 26 Jun 2008) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollset Added -zsargs and -del-zsargs for handling the rollrec zsargs field. Used a better method of determining that rollset was given something to do. ------------------------------------------------------------------------ r4183 | tewok | 2008-06-26 11:45:48 -0700 (Thu, 26 Jun 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Added zsargs to the list of valid rollrec fields. ------------------------------------------------------------------------ r4182 | tewok | 2008-06-25 19:09:32 -0700 (Wed, 25 Jun 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollinit Added a message that zsargs can't be set by rollinit. ------------------------------------------------------------------------ r4181 | tewok | 2008-06-25 19:02:14 -0700 (Wed, 25 Jun 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollinit Fixed some "see also" references in the pod to be consistent with other files. ------------------------------------------------------------------------ r4180 | tewok | 2008-06-25 18:50:50 -0700 (Wed, 25 Jun 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pod Modified for the zsargs entry. ------------------------------------------------------------------------ r4179 | tewok | 2008-06-25 18:27:46 -0700 (Wed, 25 Jun 2008) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Added the -zsargs argument for displaying the user-specified zonesigner arguments. ------------------------------------------------------------------------ r4178 | tewok | 2008-06-23 08:29:44 -0700 (Mon, 23 Jun 2008) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Used much cleaner method of determining single command specification. Fixed a function header. ------------------------------------------------------------------------ r4177 | tewok | 2008-06-20 14:31:35 -0700 (Fri, 20 Jun 2008) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Fixed the method of determining single command specification. The previous version didn't like text arguments. ------------------------------------------------------------------------ r4176 | tewok | 2008-06-20 07:08:31 -0700 (Fri, 20 Jun 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Remove -quiet and -version from the "one-argument-only" restriction. ------------------------------------------------------------------------ r4170 | tewok | 2008-06-19 16:45:53 -0700 (Thu, 19 Jun 2008) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Added pod describing the -zsargs option. ------------------------------------------------------------------------ r4169 | tewok | 2008-06-19 16:31:13 -0700 (Thu, 19 Jun 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Change the zsargs options arguments to expecting a leading '='. ------------------------------------------------------------------------ r4168 | tewok | 2008-06-19 16:12:19 -0700 (Thu, 19 Jun 2008) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Modified to only allow a single command per execution. ------------------------------------------------------------------------ r4167 | tewok | 2008-06-19 15:49:58 -0700 (Thu, 19 Jun 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Added the -zsargs command. ------------------------------------------------------------------------ r4166 | tewok | 2008-06-19 15:39:32 -0700 (Thu, 19 Jun 2008) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added support for ROLLCMD_ZSARGS. Added pod for all ROLLCMD_ commands. ------------------------------------------------------------------------ r4165 | tewok | 2008-06-19 15:17:18 -0700 (Thu, 19 Jun 2008) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added support for the -zsargs command from rollctl. This entailed added code for handling the ROLLCMD_ZSARGS command and for digging up the "zsargs" field from a rollrec entry. ------------------------------------------------------------------------ r4163 | hardaker | 2008-06-18 15:06:35 -0700 (Wed, 18 Jun 2008) | 1 line Changed paths: M /trunk/dnssec-tools/ChangeLog Update for verison 1.4 ------------------------------------------------------------------------ r4162 | hardaker | 2008-06-18 15:03:41 -0700 (Wed, 18 Jun 2008) | 1 line Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/maketestzone/maketestzone M /trunk/dnssec-tools/tools/mapper/mapper M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/cleanarch M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtck M /trunk/dnssec-tools/tools/scripts/dtconf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rolllog M /trunk/dnssec-tools/tools/scripts/rollrec-editor M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/trustman M /trunk/dnssec-tools/tools/scripts/zonesigner Update Version Number: 1.4 ------------------------------------------------------------------------ r4161 | hserus | 2008-06-18 14:12:03 -0700 (Wed, 18 Jun 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/Makefile.in Add getname objects to the list of files to be cleaned up ------------------------------------------------------------------------ r4160 | hserus | 2008-06-18 13:42:28 -0700 (Wed, 18 Jun 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_x_query.c Initialize retval to NO_ERROR to keep compiler happy ------------------------------------------------------------------------ r4159 | hserus | 2008-06-18 13:36:16 -0700 (Wed, 18 Jun 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/configure Use autoconf version 2.59 to generate the configure script ------------------------------------------------------------------------ r4158 | hardaker | 2008-06-18 13:28:08 -0700 (Wed, 18 Jun 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in use 2.59 and remove double target check ------------------------------------------------------------------------ r4157 | hserus | 2008-06-18 13:25:48 -0700 (Wed, 18 Jun 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/configure Use autoconf 2.59 to create configure script ------------------------------------------------------------------------ r4156 | hardaker | 2008-06-18 13:21:11 -0700 (Wed, 18 Jun 2008) | 1 line Changed paths: M /trunk/dnssec-tools/Makefile.in honor datarootdir ------------------------------------------------------------------------ r4155 | hardaker | 2008-06-18 13:18:10 -0700 (Wed, 18 Jun 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/Makefile.top honor datarootdir ------------------------------------------------------------------------ r4154 | hardaker | 2008-06-18 13:09:18 -0700 (Wed, 18 Jun 2008) | 1 line Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml proper version check; attempt 3 ------------------------------------------------------------------------ r4153 | hardaker | 2008-06-18 13:00:23 -0700 (Wed, 18 Jun 2008) | 1 line Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml proper version check; attempt 2 ------------------------------------------------------------------------ r4152 | hardaker | 2008-06-18 12:48:39 -0700 (Wed, 18 Jun 2008) | 1 line Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml proper version check ------------------------------------------------------------------------ r4151 | hardaker | 2008-06-18 10:06:54 -0700 (Wed, 18 Jun 2008) | 1 line Changed paths: M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in add help options for arguments passed to the validator's config file ------------------------------------------------------------------------ r4150 | tewok | 2008-06-17 15:05:39 -0700 (Tue, 17 Jun 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Fixed a few spacing issues. ------------------------------------------------------------------------ r4149 | hardaker | 2008-06-11 16:27:56 -0700 (Wed, 11 Jun 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs return straight chars instead of const for sun compatability ------------------------------------------------------------------------ r4148 | hardaker | 2008-06-11 15:02:18 -0700 (Wed, 11 Jun 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c define getprogname for solaris ------------------------------------------------------------------------ r4147 | hardaker | 2008-06-11 14:06:50 -0700 (Wed, 11 Jun 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c allow for other types of _r functions to be overridden depending on the system type ------------------------------------------------------------------------ r4146 | hardaker | 2008-06-11 14:05:50 -0700 (Wed, 11 Jun 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval_shim/Makefile.in include LDFLAGS in the shim compilation ------------------------------------------------------------------------ r4145 | hardaker | 2008-06-11 14:05:05 -0700 (Wed, 11 Jun 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in define a -D flag for setting the operating system type we're compiling for ------------------------------------------------------------------------ r4144 | hardaker | 2008-06-06 16:58:50 -0700 (Fri, 06 Jun 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c include the validator config file so it picks up the typedefs being used ------------------------------------------------------------------------ r4143 | hserus | 2008-06-04 05:36:24 -0700 (Wed, 04 Jun 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Continue to operate if included file does not exist ------------------------------------------------------------------------ r4142 | hserus | 2008-06-03 16:42:59 -0700 (Tue, 03 Jun 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c create a default context if function argument is NULL ------------------------------------------------------------------------ r4141 | hserus | 2008-06-03 16:39:40 -0700 (Tue, 03 Jun 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_get_rrset.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c create a default context if function argument is NULL ------------------------------------------------------------------------ r4140 | hserus | 2008-06-03 16:37:11 -0700 (Tue, 03 Jun 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_x_query.c - create a default context if function argument is NULL ------------------------------------------------------------------------ r4139 | hserus | 2008-06-03 16:31:45 -0700 (Tue, 03 Jun 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c NULL check ------------------------------------------------------------------------ r4138 | hserus | 2008-06-03 16:30:48 -0700 (Tue, 03 Jun 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/sendmail-8.14.1_dnssec_patch.txt fix indentation ------------------------------------------------------------------------ r4137 | hardaker | 2008-06-03 15:10:34 -0700 (Tue, 03 Jun 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman -h ouput for -T ------------------------------------------------------------------------ r4136 | hardaker | 2008-06-03 14:18:45 -0700 (Tue, 03 Jun 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman document the -T flag ------------------------------------------------------------------------ r4135 | hardaker | 2008-06-03 14:09:08 -0700 (Tue, 03 Jun 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman yet more code aggregation for better parsing ------------------------------------------------------------------------ r4134 | hardaker | 2008-06-03 12:34:29 -0700 (Tue, 03 Jun 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman send notification on death ------------------------------------------------------------------------ r4133 | hardaker | 2008-06-03 12:27:37 -0700 (Tue, 03 Jun 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman remove debugging comments ------------------------------------------------------------------------ r4132 | hardaker | 2008-06-03 12:26:23 -0700 (Tue, 03 Jun 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman more usage of common infrastructure for parsing dnsval.conf file ------------------------------------------------------------------------ r4131 | hardaker | 2008-06-03 11:05:01 -0700 (Tue, 03 Jun 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman better deal with leading comments ------------------------------------------------------------------------ r4130 | hardaker | 2008-06-03 10:53:06 -0700 (Tue, 03 Jun 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman reset the record separator ------------------------------------------------------------------------ r4129 | hardaker | 2008-06-03 09:42:05 -0700 (Tue, 03 Jun 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman merge tepm file handling into a single location; make it try and use the same directory by default ------------------------------------------------------------------------ r4128 | hserus | 2008-05-30 07:54:44 -0700 (Fri, 30 May 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Set correct defaults for val_astatus_t and val_status_t ------------------------------------------------------------------------ r4127 | hserus | 2008-05-30 07:54:13 -0700 (Fri, 30 May 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/getaddr.1 M /trunk/dnssec-tools/validator/doc/gethost.1 M /trunk/dnssec-tools/validator/doc/getname.1 M /trunk/dnssec-tools/validator/doc/libsres.3 M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.3 M /trunk/dnssec-tools/validator/doc/val_gethostbyname.3 M /trunk/dnssec-tools/validator/doc/val_res_query.3 M /trunk/dnssec-tools/validator/doc/validate.1 Add man files corresponding to the changed pod ------------------------------------------------------------------------ r4126 | hserus | 2008-05-29 12:24:40 -0700 (Thu, 29 May 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Reorder values for VAL_QUERY_DONT_VALIDATE and VAL_QUERY_NO_AC_DETAIL ------------------------------------------------------------------------ r4123 | hardaker | 2008-05-28 16:40:40 -0700 (Wed, 28 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/apps/ssh/README.ssh A /trunk/dnssec-tools/apps/ssh/openssh-5.0p1-dnssec.patch added a patch for 5.0p1 ------------------------------------------------------------------------ r4122 | hardaker | 2008-05-27 15:29:18 -0700 (Tue, 27 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/doc/Makefile.in clean up whitespace ------------------------------------------------------------------------ r4121 | hardaker | 2008-05-27 15:28:33 -0700 (Tue, 27 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/Makefile.in use DESTDIR for installing man pages ------------------------------------------------------------------------ r4120 | hardaker | 2008-05-27 11:41:54 -0700 (Tue, 27 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS NEWS update ------------------------------------------------------------------------ r4119 | hardaker | 2008-05-27 11:41:48 -0700 (Tue, 27 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml use rsync for uploading files; use svn log -v ------------------------------------------------------------------------ r4118 | hardaker | 2008-05-27 11:41:24 -0700 (Tue, 27 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/ChangeLog verbose mode for svn log ------------------------------------------------------------------------ r4117 | hserus | 2008-05-27 09:57:18 -0700 (Tue, 27 May 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml version submitted as draft-hayatnagarkar-dnsext-validator-api-06 ------------------------------------------------------------------------ r4116 | hserus | 2008-05-26 15:15:18 -0700 (Mon, 26 May 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml More tweaks to API ------------------------------------------------------------------------ r4114 | hardaker | 2008-05-26 10:29:57 -0700 (Mon, 26 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/ChangeLog Update for verison 1.4.rc1 ------------------------------------------------------------------------ r4113 | hardaker | 2008-05-26 10:27:01 -0700 (Mon, 26 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rr-dnssec.t update to fix a recent RRSIG test to include the trailing dot ------------------------------------------------------------------------ r4112 | hardaker | 2008-05-26 10:12:42 -0700 (Mon, 26 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/maketestzone/maketestzone M /trunk/dnssec-tools/tools/mapper/mapper M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/cleanarch M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtck M /trunk/dnssec-tools/tools/scripts/dtconf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rolllog M /trunk/dnssec-tools/tools/scripts/rollrec-editor M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/trustman M /trunk/dnssec-tools/tools/scripts/zonesigner Update Version Number: 1.4.rc1 ------------------------------------------------------------------------ r4111 | hardaker | 2008-05-26 10:04:32 -0700 (Mon, 26 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml typo ------------------------------------------------------------------------ r4110 | hardaker | 2008-05-26 08:35:40 -0700 (Mon, 26 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/rolllog.pm M /trunk/dnssec-tools/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/trustman M /trunk/dnssec-tools/tools/scripts/zonesigner app specific version number update ------------------------------------------------------------------------ r4109 | hardaker | 2008-05-26 08:24:21 -0700 (Mon, 26 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/docs/dnssec-tools.1 add link to the tutorials page ------------------------------------------------------------------------ r4108 | hardaker | 2008-05-26 08:17:03 -0700 (Mon, 26 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in version number update ------------------------------------------------------------------------ r4107 | hardaker | 2008-05-26 08:14:28 -0700 (Mon, 26 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/Makefile.top update libtool version ------------------------------------------------------------------------ r4106 | hardaker | 2008-05-26 08:09:12 -0700 (Mon, 26 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/INSTALL M /trunk/dnssec-tools/README M /trunk/dnssec-tools/apps/README M /trunk/dnssec-tools/apps/mozilla/README M /trunk/dnssec-tools/apps/mozilla/README.firefox M /trunk/dnssec-tools/apps/mozilla/README.thunderbird M /trunk/dnssec-tools/apps/mozilla/spfdnssec/README M /trunk/dnssec-tools/apps/mozilla/spfdnssec/content/spfdnssec/spfDnssecOverlay.js M /trunk/dnssec-tools/apps/mozilla/spfdnssec/content/spfdnssec/spfDnssecOverlay.xul M /trunk/dnssec-tools/apps/sendmail/README M /trunk/dnssec-tools/podmantex M /trunk/dnssec-tools/podtrans M /trunk/dnssec-tools/validator/README M /trunk/dnssec-tools/validator/apps/README M /trunk/dnssec-tools/validator/apps/getaddr.c M /trunk/dnssec-tools/validator/apps/gethost.c M /trunk/dnssec-tools/validator/apps/getname.c M /trunk/dnssec-tools/validator/apps/libval_check_conf.c M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/apps/validator_driver.h M /trunk/dnssec-tools/validator/doc/README M /trunk/dnssec-tools/validator/doc/getaddr.pod M /trunk/dnssec-tools/validator/doc/gethost.pod M /trunk/dnssec-tools/validator/doc/getname.pod M /trunk/dnssec-tools/validator/doc/libsres-implementation-notes M /trunk/dnssec-tools/validator/doc/libsres.pod M /trunk/dnssec-tools/validator/doc/libval-implementation-notes M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.pod M /trunk/dnssec-tools/validator/doc/val_gethostbyname.pod M /trunk/dnssec-tools/validator/doc/val_res_query.pod M /trunk/dnssec-tools/validator/doc/validate.pod M /trunk/dnssec-tools/validator/etc/README M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/include/validator/val_errors.h M /trunk/dnssec-tools/validator/include/validator/validator-internal.h M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libsres/README M /trunk/dnssec-tools/validator/libsres/res_mkquery.h M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libsres/res_support.c M /trunk/dnssec-tools/validator/libsres/res_support.h M /trunk/dnssec-tools/validator/libval/README M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_assertion.h M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_cache.h M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_context.h M /trunk/dnssec-tools/validator/libval/val_crypto.c M /trunk/dnssec-tools/validator/libval/val_crypto.h M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_parse.c M /trunk/dnssec-tools/validator/libval/val_parse.h M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_resquery.h M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_support.h M /trunk/dnssec-tools/validator/libval/val_verify.c M /trunk/dnssec-tools/validator/libval/val_verify.h M /trunk/dnssec-tools/validator/libval/val_x_query.c copyright updates ------------------------------------------------------------------------ r4105 | hardaker | 2008-05-26 08:01:25 -0700 (Mon, 26 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS beginning of NEWS update ------------------------------------------------------------------------ r4104 | hardaker | 2008-05-26 07:50:02 -0700 (Mon, 26 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm M /trunk/dnssec-tools/tools/scripts/tachk copyright updates ------------------------------------------------------------------------ r4103 | hardaker | 2008-05-26 07:40:48 -0700 (Mon, 26 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/demos/README M /trunk/dnssec-tools/tools/demos/rollerd-basic/phaser M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/Makefile M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/README M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/phaser M /trunk/dnssec-tools/tools/donuts/rules/check_nameservers.txt M /trunk/dnssec-tools/tools/donuts/rules/dns.errors.txt M /trunk/dnssec-tools/tools/drawvalmap/Makefile.PL M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap M /trunk/dnssec-tools/tools/etc/Makefile.PL M /trunk/dnssec-tools/tools/etc/dnssec-tools/blinkenlights.conf.pod M /trunk/dnssec-tools/tools/modules/BootStrap.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/README M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.xs M /trunk/dnssec-tools/tools/modules/rollrec.pm M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/rolllog copyright updates ------------------------------------------------------------------------ r4102 | hardaker | 2008-05-26 07:38:09 -0700 (Mon, 26 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/README M /trunk/dnssec-tools/tools/demos/rollerd-basic/Makefile M /trunk/dnssec-tools/tools/demos/rollerd-basic/README M /trunk/dnssec-tools/tools/demos/rollerd-basic/rundemo M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/rundemo M /trunk/dnssec-tools/tools/dnspktflow/Makefile.PL M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/donuts/Makefile.PL M /trunk/dnssec-tools/tools/donuts/Rule.pm M /trunk/dnssec-tools/tools/donuts/donutsd M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt M /trunk/dnssec-tools/tools/etc/README M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod M /trunk/dnssec-tools/tools/linux/ifup-dyn-dns/README M /trunk/dnssec-tools/tools/logwatch/README M /trunk/dnssec-tools/tools/maketestzone/Makefile.PL M /trunk/dnssec-tools/tools/maketestzone/maketestzone M /trunk/dnssec-tools/tools/mapper/Makefile.PL M /trunk/dnssec-tools/tools/mapper/mapper M /trunk/dnssec-tools/tools/modules/Makefile.PL M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm M /trunk/dnssec-tools/tools/modules/README M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm M /trunk/dnssec-tools/tools/modules/conf.pm.in M /trunk/dnssec-tools/tools/modules/defaults.pm M /trunk/dnssec-tools/tools/modules/dnssectools.pm M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/keyrec.pod M /trunk/dnssec-tools/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/modules/rollrec.pm M /trunk/dnssec-tools/tools/modules/rollrec.pod M /trunk/dnssec-tools/tools/modules/tests/Makefile.PL M /trunk/dnssec-tools/tools/modules/tests/test-conf M /trunk/dnssec-tools/tools/modules/tests/test-keyrec M /trunk/dnssec-tools/tools/modules/tests/test-rollmgr M /trunk/dnssec-tools/tools/modules/tests/test-rollrec M /trunk/dnssec-tools/tools/modules/tests/test-timetrans M /trunk/dnssec-tools/tools/modules/tests/test-toolopts1 M /trunk/dnssec-tools/tools/modules/tests/test-toolopts2 M /trunk/dnssec-tools/tools/modules/tests/test-toolopts3 M /trunk/dnssec-tools/tools/modules/timetrans.pm M /trunk/dnssec-tools/tools/modules/tooloptions.pm M /trunk/dnssec-tools/tools/scripts/Makefile.PL M /trunk/dnssec-tools/tools/scripts/README M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/cleanarch M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtck M /trunk/dnssec-tools/tools/scripts/dtconf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rollrec-editor M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/tests/README M /trunk/dnssec-tools/tools/scripts/tests/test-kskroll M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/trustman copyright updates ------------------------------------------------------------------------ r4101 | hardaker | 2008-05-23 07:05:45 -0700 (Fri, 23 May 2008) | 1 line Changed paths: A /trunk/dnssec-tools/apps/mozilla/dnssec-both-ff3.0.patch A /trunk/dnssec-tools/apps/mozilla/dnssec-firefox-ff3.0.patch initial patches for firefox3; not enirely working yet ------------------------------------------------------------------------ r4100 | hserus | 2008-05-22 19:13:41 -0700 (Thu, 22 May 2008) | 10 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_assertion.h M /trunk/dnssec-tools/validator/libval/val_resquery.c * Create function for resetting query params so that it will use EDNS0 the next time it sends out the query * Set EDNS0 in find_nslist_for_query() in ask_resolver(). Set EDNS0 when we are looking for some DNSSEC meta-data or if the zone expection is validation. * Reissue query with EDNS0 if a negative response was returned by a zone that was authoritative for both parent and child, but only child had a zone security expectation of validate * Do not reissue query for positive answers, since this can mess up cname chains ------------------------------------------------------------------------ r4099 | hserus | 2008-05-22 19:00:50 -0700 (Thu, 22 May 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h Add macro to identify DNSSEC meta-data query types ------------------------------------------------------------------------ r4098 | hardaker | 2008-05-22 16:41:14 -0700 (Thu, 22 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-xs.inc constants update from the validator header file ------------------------------------------------------------------------ r4097 | tewok | 2008-05-21 19:30:30 -0700 (Wed, 21 May 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/rc.blinkenlights Adjusted the fontsize. ------------------------------------------------------------------------ r4096 | tewok | 2008-05-21 19:30:13 -0700 (Wed, 21 May 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/README M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/README Changed references of "-rollzone" to "-rollzsk". ------------------------------------------------------------------------ r4095 | tewok | 2008-05-21 19:29:11 -0700 (Wed, 21 May 2008) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added the ROLLCMD_RC_KSKROLL and ROLLCMD_RC_ZSKROLL return codes. Renamed the rollcmd_rollall() to rollcmd_rollallzsks(). ------------------------------------------------------------------------ r4094 | tewok | 2008-05-21 19:26:54 -0700 (Wed, 21 May 2008) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Added support for the "rollksk" command. Adjusted spacing for option sets. Renamed the "rollall" command to "rollallzsks". ------------------------------------------------------------------------ r4093 | tewok | 2008-05-21 19:23:55 -0700 (Wed, 21 May 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/runtest Renamed the -loglvl option to -loglevel. ------------------------------------------------------------------------ r4092 | tewok | 2008-05-21 19:22:37 -0700 (Wed, 21 May 2008) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Renamed cmd_rollall() to cmd_rollallzsks(). Added an error check after keyrec_fullrec(). ------------------------------------------------------------------------ r4091 | tewok | 2008-05-21 19:20:34 -0700 (Wed, 21 May 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Renamed the "rollall" command to "rollallzsks". ------------------------------------------------------------------------ r4090 | hardaker | 2008-05-21 16:51:59 -0700 (Wed, 21 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml add note saying website needs updating ------------------------------------------------------------------------ r4089 | hardaker | 2008-05-21 16:42:43 -0700 (Wed, 21 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman use proper tempfile creation ------------------------------------------------------------------------ r4088 | tewok | 2008-05-20 18:14:22 -0700 (Tue, 20 May 2008) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Collapsed cmd_rollksk() and cmd_rollzsk() into cmd_rollnow(). ------------------------------------------------------------------------ r4087 | tewok | 2008-05-20 15:29:39 -0700 (Tue, 20 May 2008) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Renamed rollzsk() to rollnow(). Modified rollnow() (nee rollzsk()) to do either KSK or ZSK rollovers, depending on the key-type argument. Allow user-initiated KSK rollovers. ------------------------------------------------------------------------ r4086 | tewok | 2008-05-20 11:09:21 -0700 (Tue, 20 May 2008) | 11 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Clarified header comment for cmd_rollall(). Added code to cmd_rollzsk() to disallow a rollksk command or additional rollzsk commands while in ZSK rollover. Added cmd_rollksk() to handle the rollksk command. Added rollksk() stub to (eventually) provide support for the rollksk command. ------------------------------------------------------------------------ r4085 | hserus | 2008-05-20 09:53:29 -0700 (Tue, 20 May 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/dnsval.conf.3 M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod Add a note that, for DLV, zones should not be marked trusted or untrusted ------------------------------------------------------------------------ r4084 | hserus | 2008-05-20 09:48:51 -0700 (Tue, 20 May 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Don't do DLV validation if we've explicitly marked a zone as trusted or untrusted ------------------------------------------------------------------------ r4083 | tewok | 2008-05-19 14:37:29 -0700 (Mon, 19 May 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Renamed a bunch of "rollzone" references to "rollzsk". ------------------------------------------------------------------------ r4082 | tewok | 2008-05-19 14:36:34 -0700 (Mon, 19 May 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Renamed "-rollzone" to "-rollzsk". ------------------------------------------------------------------------ r4081 | tewok | 2008-05-19 13:14:01 -0700 (Mon, 19 May 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Renamed the "rollzone" command to "rollzsk". ------------------------------------------------------------------------ r4080 | tewok | 2008-05-19 12:41:00 -0700 (Mon, 19 May 2008) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Changed use of "rollctl -rollzone" to "rollctl -rollzsk". Several routines also changed name as a result of this. Moved the code to find the path of rollctl to before it's used. Gave the -q option to a rollctl execution. ------------------------------------------------------------------------ r4079 | hserus | 2008-05-19 11:31:36 -0700 (Mon, 19 May 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Expand environment variables in the dnsval.conf "include" line ------------------------------------------------------------------------ r4078 | hardaker | 2008-05-19 11:24:36 -0700 (Mon, 19 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman don't require spaces ------------------------------------------------------------------------ r4077 | tewok | 2008-05-18 18:38:34 -0700 (Sun, 18 May 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Fixed a bit of the help message. ------------------------------------------------------------------------ r4076 | tewok | 2008-05-17 08:47:20 -0700 (Sat, 17 May 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Ensure that rollerd is actually running prior to sending a command. ------------------------------------------------------------------------ r4075 | tewok | 2008-05-17 08:33:28 -0700 (Sat, 17 May 2008) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added the rollmgr_running() interface and pod to determine when rollerd is running. ------------------------------------------------------------------------ r4074 | tewok | 2008-05-16 13:23:07 -0700 (Fri, 16 May 2008) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Modified the -loglevel option so that a list of valid options is printed if the new level isn't specified. ------------------------------------------------------------------------ r4073 | tewok | 2008-05-16 11:38:26 -0700 (Fri, 16 May 2008) | 10 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/Makefile M /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/README M /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/runtest Folded the phaser script into runtest. Moved some of the pre-defined tests from Makefile into runtest. Added new options to runtest: -ttl, -ksklife, -zsklife, -short, -medium, and -long. Updated README to reflect the above changes. ------------------------------------------------------------------------ r4072 | hardaker | 2008-05-15 16:33:12 -0700 (Thu, 15 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman allow -w to use a special -42 value for immediate; add --nomail to the help output; fix parsing of the dnsval.conf file when adding new entries ------------------------------------------------------------------------ r4071 | hserus | 2008-05-15 11:30:48 -0700 (Thu, 15 May 2008) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Don't simply remove *all* semicolons. This would result in config file errors if the dnsval.conf file contains other (non key) policy constructs. ------------------------------------------------------------------------ r4070 | hardaker | 2008-05-14 19:12:01 -0700 (Wed, 14 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc new constants updates ------------------------------------------------------------------------ r4069 | hardaker | 2008-05-14 16:19:51 -0700 (Wed, 14 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c changed failure wording to use succeeded instead ------------------------------------------------------------------------ r4068 | hserus | 2008-05-14 15:48:14 -0700 (Wed, 14 May 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/NEWS Add some news snippets ------------------------------------------------------------------------ r4067 | hserus | 2008-05-14 15:47:13 -0700 (Wed, 14 May 2008) | 5 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/sendmail-8.14.1_dnssec_patch.txt Fix bug that causes sendmail to crash. Still need to figure out why sendmail insists on queuing email that fails validation checks instead of dropping these emails. ------------------------------------------------------------------------ r4066 | tewok | 2008-05-14 13:32:04 -0700 (Wed, 14 May 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/Makefile Changed to have three test cases of varying lengths. ------------------------------------------------------------------------ r4065 | tewok | 2008-05-14 13:30:39 -0700 (Wed, 14 May 2008) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/save-example.com Change the hard-coded TTL value to a placeholder that will be changed by the makefile. ------------------------------------------------------------------------ r4064 | baerm | 2008-05-12 17:34:16 -0700 (Mon, 12 May 2008) | 4 lines Changed paths: A /trunk/dnssec-tools/apps/postfix/postfix-libspf2-howto.txt (from /trunk/dnssec-tools/apps/postfix/postfix-spf-howto.txt:4063) D /trunk/dnssec-tools/apps/postfix/postfix-spf-howto.txt renaming again to even better describe this file :). ------------------------------------------------------------------------ r4063 | baerm | 2008-05-12 17:33:24 -0700 (Mon, 12 May 2008) | 3 lines Changed paths: D /trunk/dnssec-tools/apps/postfix/postfix-howto.txt A /trunk/dnssec-tools/apps/postfix/postfix-spf-howto.txt (from /trunk/dnssec-tools/apps/postfix/postfix-howto.txt:4062) changing the postfix howto name for spf to be more descriptive it's going to change in again, sigh. ------------------------------------------------------------------------ r4062 | baerm | 2008-05-12 17:29:51 -0700 (Mon, 12 May 2008) | 5 lines Changed paths: M /trunk/dnssec-tools/apps/postfix/postfix-howto.txt Updated the libspf2 postfix instructions to reflect a new patch that works with the current 2.5.1 version of postfix. ------------------------------------------------------------------------ r4061 | hserus | 2008-05-12 11:32:04 -0700 (Mon, 12 May 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_x_query.c Return non-existence status codes when available ------------------------------------------------------------------------ r4060 | hserus | 2008-05-12 11:29:01 -0700 (Mon, 12 May 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/getquery.c Print validation status value ------------------------------------------------------------------------ r4059 | hserus | 2008-05-12 10:31:01 -0700 (Mon, 12 May 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c Use val_does_not_exist() instead of checking for proof count (which may be 0 when no authentication chain details are returned) ------------------------------------------------------------------------ r4058 | tewok | 2008-05-12 09:01:51 -0700 (Mon, 12 May 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Cleaned up the usage message a little. ------------------------------------------------------------------------ r4057 | tewok | 2008-05-12 08:59:34 -0700 (Mon, 12 May 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Clarified usage message for -sleeptime. ------------------------------------------------------------------------ r4056 | hserus | 2008-05-12 08:36:08 -0700 (Mon, 12 May 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_x_query.c Set correct default return value ------------------------------------------------------------------------ r4055 | tewok | 2008-05-12 08:00:14 -0700 (Mon, 12 May 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/phaser Fix copyright. ------------------------------------------------------------------------ r4054 | tewok | 2008-05-10 17:36:19 -0700 (Sat, 10 May 2008) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/tests/test-rollzone A /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/Makefile A /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/README A /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/log.test A /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/phaser A /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/rc.blinkenlights A /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/runtest A /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/save-db.cache A /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/save-example.com A /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/save-test.rollrec New test for rolloerd and zonesigner. ------------------------------------------------------------------------ r4053 | tewok | 2008-05-10 16:50:21 -0700 (Sat, 10 May 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added two assignments so that key lifespans would be added during rollovers. ------------------------------------------------------------------------ r4052 | tewok | 2008-05-10 16:49:07 -0700 (Sat, 10 May 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added a small, but critical, comment. ------------------------------------------------------------------------ r4051 | tewok | 2008-05-09 09:51:11 -0700 (Fri, 09 May 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/tests/test-kskroll A couple minor comment fixes. ------------------------------------------------------------------------ r4050 | hserus | 2008-05-09 06:02:09 -0700 (Fri, 09 May 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.c Reset the cache head when the current head element times out. ------------------------------------------------------------------------ r4049 | hardaker | 2008-05-08 19:09:30 -0700 (Thu, 08 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsDNSService2.cpp M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsDNSService2.cpp.orig M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsDocShell.cpp.orig M /trunk/dnssec-tools/apps/mozilla/firefox-files/patch.base M /trunk/dnssec-tools/apps/mozilla/firefox-files/prnetdb-real.c M /trunk/dnssec-tools/apps/mozilla/firefox.spec updated files based on modified newer firefox files as well as changes to libval ------------------------------------------------------------------------ r4048 | tewok | 2008-05-08 18:18:33 -0700 (Thu, 08 May 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Clarified a bit of directory-related pod. ------------------------------------------------------------------------ r4047 | hardaker | 2008-05-08 14:24:35 -0700 (Thu, 08 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/firefox-files/Makefile M /trunk/dnssec-tools/apps/mozilla/firefox-files/autoconf.mk.in A /trunk/dnssec-tools/apps/mozilla/firefox-files/autoconf.mk.in.orig M /trunk/dnssec-tools/apps/mozilla/firefox-files/patch.base M /trunk/dnssec-tools/apps/mozilla/firefox-files/paths added autoconf.mk.in to the list of generated patch files ------------------------------------------------------------------------ r4046 | tewok | 2008-05-08 08:57:37 -0700 (Thu, 08 May 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added some clarifying pod about the option/config file relationship. ------------------------------------------------------------------------ r4045 | tewok | 2008-05-07 20:01:14 -0700 (Wed, 07 May 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Add a check to ensure that the logfile's directory exists. ------------------------------------------------------------------------ r4044 | hardaker | 2008-05-07 15:37:25 -0700 (Wed, 07 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman document the dnssec-tools.conf file tokens that can be used ------------------------------------------------------------------------ r4043 | tewok | 2008-05-06 15:04:53 -0700 (Tue, 06 May 2008) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added -rrfile and -parameters to usage message. Unbuffered stdout output. ------------------------------------------------------------------------ r4042 | tewok | 2008-05-06 14:08:50 -0700 (Tue, 06 May 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Updated the copyright dates. ------------------------------------------------------------------------ r4041 | tewok | 2008-05-06 14:08:04 -0700 (Tue, 06 May 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed the -Version output in the usage message. ------------------------------------------------------------------------ r4040 | tewok | 2008-05-06 14:05:39 -0700 (Tue, 06 May 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Added pod for -rollksk. ------------------------------------------------------------------------ r4039 | tewok | 2008-05-06 14:04:28 -0700 (Tue, 06 May 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd Added pod for the -Version option. ------------------------------------------------------------------------ r4038 | tewok | 2008-05-06 13:45:27 -0700 (Tue, 06 May 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd Updated copyrights. ------------------------------------------------------------------------ r4037 | tewok | 2008-05-06 11:14:55 -0700 (Tue, 06 May 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Fixed the zone name variables in some logging messages. ------------------------------------------------------------------------ r4036 | tewok | 2008-05-06 11:13:54 -0700 (Tue, 06 May 2008) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Added some error checking to ensure a valid logging level was given for -loglevel. ------------------------------------------------------------------------ r4035 | tewok | 2008-05-06 11:12:12 -0700 (Tue, 06 May 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added three missing command to the %roll_commands validation list. ------------------------------------------------------------------------ r4034 | tewok | 2008-05-05 18:27:05 -0700 (Mon, 05 May 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/README Added entries for a few modules. ------------------------------------------------------------------------ r4033 | tewok | 2008-05-05 18:19:01 -0700 (Mon, 05 May 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rolllog.pm Added rolllog_validlevel() to allow for easy checking of valid levels. ------------------------------------------------------------------------ r4032 | tewok | 2008-05-05 18:05:46 -0700 (Mon, 05 May 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/README Changed log file name. ------------------------------------------------------------------------ r4031 | hardaker | 2008-05-05 14:32:56 -0700 (Mon, 05 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman usage output section separation ------------------------------------------------------------------------ r4030 | hardaker | 2008-05-05 14:04:18 -0700 (Mon, 05 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman use the original TTL for the holddown time, as specified per 5011; a bit more debugging output ------------------------------------------------------------------------ r4029 | hardaker | 2008-05-05 13:40:49 -0700 (Mon, 05 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman fix holddown computation to use TTL as a minimum amount ------------------------------------------------------------------------ r4028 | hardaker | 2008-05-05 11:26:35 -0700 (Mon, 05 May 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman add a new --nomail option to prevent sending of mail\nclean up of a few verbose output statements\nskip file addition checks if the filename wasn't specified\ndefault to verbose => off ------------------------------------------------------------------------ r4027 | baerm | 2008-05-01 16:44:02 -0700 (Thu, 01 May 2008) | 4 lines Changed paths: A /trunk/dnssec-tools/apps/postfix/postfix-2.5.1-dnssec-howto.txt A /trunk/dnssec-tools/apps/postfix/postfix-2.5.1_dnssec_patch.txt Addinig posttfix 2.5.1 patch update and howto changes. ------------------------------------------------------------------------ r4026 | hserus | 2008-05-01 07:23:22 -0700 (Thu, 01 May 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/include/validator-config.h.in M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c Define freeaddrinfo() if it does not exist ------------------------------------------------------------------------ r4025 | baerm | 2008-04-30 22:29:59 -0700 (Wed, 30 Apr 2008) | 5 lines Changed paths: M /trunk/dnssec-tools/apps/postfix/postfix-2.3.8_dnssec_patch.txt updated patch to work with current library (i.e. to work with changes in getaddrinfo api) ------------------------------------------------------------------------ r4024 | hserus | 2008-04-30 14:19:32 -0700 (Wed, 30 Apr 2008) | 6 lines Changed paths: D /trunk/dnssec-tools/apps/lftp/lftp-3-4-7_dnssec_patch.txt A /trunk/dnssec-tools/apps/lftp/lftp-3-5-10_dnssec_patch.txt Use revised val_getaddrinfo() function. Move to more recent version of lftp. However, I've still not managed to get this to compile on MacOSX so the status marked in the howto file is still valid. ------------------------------------------------------------------------ r4023 | hserus | 2008-04-30 14:15:23 -0700 (Wed, 30 Apr 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/proftpd/proftpd-1.3.x_dnssec_patch.txt Use new val_getaddrinfo() prototype ------------------------------------------------------------------------ r4022 | hserus | 2008-04-30 14:12:17 -0700 (Wed, 30 Apr 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/spfmilter-dnssec-howto.txt Minor update to documentation ------------------------------------------------------------------------ r4021 | hserus | 2008-04-30 14:11:44 -0700 (Wed, 30 Apr 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2/libspf2-1.0.4_dnssec_guide.txt M /trunk/dnssec-tools/apps/libspf2/libspf2-1.0.4_dnssec_patch.txt M /trunk/dnssec-tools/apps/libspf2/libspf2-1.2.5_dnssec_guide.txt M /trunk/dnssec-tools/apps/libspf2/libspf2-1.2.5_dnssec_patch.txt Do not use additional enable/disable logic for validation in libspf. Delegate that to the dnsval.conf file. Also use the new val_res_query() interface instead of the now obsoleted val_query() function. ------------------------------------------------------------------------ r4020 | hserus | 2008-04-30 13:34:27 -0700 (Wed, 30 Apr 2008) | 4 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/spfmilter-0.97_dnssec_patch.txt M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt Do not use modified API from libspf2. Use existing functions. libspf2 will perform validation based on dnsval.conf ------------------------------------------------------------------------ r4019 | hserus | 2008-04-30 13:32:37 -0700 (Wed, 30 Apr 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/sendmail-8.14.1_dnssec_patch.txt M /trunk/dnssec-tools/apps/sendmail/sendmail-dnssec-howto.txt No longer define the RequireDNSSEC policy. Validation policy will only be read from dnsval.conf ------------------------------------------------------------------------ r4018 | hserus | 2008-04-30 13:04:51 -0700 (Wed, 30 Apr 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/ssh/ssh-dnssec.pat Don't use the VAL_QUERY_MERGE_RRSET flag. Use new elements of the val_result_t structure. ------------------------------------------------------------------------ r4017 | hserus | 2008-04-30 12:52:10 -0700 (Wed, 30 Apr 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/wget/wget-1.10.2_dnssec_patch.txt Use new val_getaddrinfo() prototype ------------------------------------------------------------------------ r4016 | hserus | 2008-04-30 12:26:42 -0700 (Wed, 30 Apr 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap Use latest set of error codes ------------------------------------------------------------------------ r4015 | hserus | 2008-04-30 12:23:03 -0700 (Wed, 30 Apr 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Don't increment number of proofs in result structure if we're not going to be storing details about them ------------------------------------------------------------------------ r4014 | hserus | 2008-04-30 12:22:39 -0700 (Wed, 30 Apr 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c Specify the VAL_QUERY_NO_AC_DETAIL flag to val_resolve_and_check ------------------------------------------------------------------------ r4013 | hserus | 2008-04-30 12:22:02 -0700 (Wed, 30 Apr 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validate.1 M /trunk/dnssec-tools/validator/doc/validate.pod The -m option is no longer defined. ------------------------------------------------------------------------ r4012 | hserus | 2008-04-30 12:21:26 -0700 (Wed, 30 Apr 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/apps/validator_driver.h M /trunk/dnssec-tools/validator/apps/validator_selftest.c M /trunk/dnssec-tools/validator/doc/val_res_query.3 M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_x_query.c Obsolete val_query/val_free_response and the VAL_QUERY_MERGE_RRSETS flag ------------------------------------------------------------------------ r4011 | hardaker | 2008-04-25 14:07:04 -0700 (Fri, 25 Apr 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman extra documentation and more information in the usage output ------------------------------------------------------------------------ r4010 | hardaker | 2008-04-23 15:57:33 -0700 (Wed, 23 Apr 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman put multiple instances of key saving code in a common function; more Verbose() output; better parsing of libval.conf to ignore comment lines; changed -w switch to be time from now rather than an absolute time ------------------------------------------------------------------------ r4009 | hserus | 2008-04-23 10:04:55 -0700 (Wed, 23 Apr 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_assertion.h M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_x_query.c Change flag size to u_int32_t ------------------------------------------------------------------------ r4008 | hserus | 2008-04-23 10:03:50 -0700 (Wed, 23 Apr 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod Change flag size to u_int32_t ------------------------------------------------------------------------ r4007 | hserus | 2008-04-23 10:02:49 -0700 (Wed, 23 Apr 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/apps/validator_driver.h M /trunk/dnssec-tools/validator/apps/validator_selftest.c Change flag size to u_int32_t ------------------------------------------------------------------------ r4006 | hserus | 2008-04-23 10:01:56 -0700 (Wed, 23 Apr 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator-internal.h M /trunk/dnssec-tools/validator/include/validator/validator.h Change flag size to u_int32_t ------------------------------------------------------------------------ r4005 | hserus | 2008-04-23 08:19:50 -0700 (Wed, 23 Apr 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c Make error list ordering consistent with API draft ------------------------------------------------------------------------ r4004 | hserus | 2008-04-23 08:19:30 -0700 (Wed, 23 Apr 2008) | 7 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Use single error codes VAL_AC_DNS_ERROR and VAL_DNS_ERROR instead of all the possible variants Rename unsecure to insecure Rename VAL_DONT_GO_FURTHER to VAL_BARE_TRUST_KEY Use single VAL_BOGUS state instead of differentiating between VAL_BOGUS_PROVABLE and VAL_BOGUS_UNPROVABLE ------------------------------------------------------------------------ r4003 | hserus | 2008-04-23 08:18:57 -0700 (Wed, 23 Apr 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.h M /trunk/dnssec-tools/validator/libval/val_verify.c Rename unsecure to insecure ------------------------------------------------------------------------ r4002 | hserus | 2008-04-23 08:18:35 -0700 (Wed, 23 Apr 2008) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c rename unsecure to insecure Print config file information as LOG_NOTICE Check for NULL before using global options ------------------------------------------------------------------------ r4001 | hserus | 2008-04-23 08:18:17 -0700 (Wed, 23 Apr 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_x_query.c Use single VAL_DNS_ERROR condition instead of a bunch of types ------------------------------------------------------------------------ r4000 | hserus | 2008-04-23 08:17:55 -0700 (Wed, 23 Apr 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/Makefile.in M /trunk/dnssec-tools/validator/doc/README M /trunk/dnssec-tools/validator/doc/getaddr.1 M /trunk/dnssec-tools/validator/doc/getaddr.pod M /trunk/dnssec-tools/validator/doc/gethost.1 M /trunk/dnssec-tools/validator/doc/gethost.pod M /trunk/dnssec-tools/validator/doc/libval-implementation-notes M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod M /trunk/dnssec-tools/validator/doc/libval_check_conf.1 M /trunk/dnssec-tools/validator/doc/libval_check_conf.pod M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.3 M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.pod M /trunk/dnssec-tools/validator/doc/val_gethostbyname.3 M /trunk/dnssec-tools/validator/doc/val_gethostbyname.pod bring doc in sync with current code ------------------------------------------------------------------------ r3999 | hserus | 2008-04-23 08:16:53 -0700 (Wed, 23 Apr 2008) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Document val_get_rrset() Change size of flags to 32 bits Change UNSECURE to INSECURE ------------------------------------------------------------------------ r3998 | hserus | 2008-04-23 08:16:10 -0700 (Wed, 23 Apr 2008) | 2 lines Changed paths: A /trunk/dnssec-tools/validator/doc/val_get_rrset.3 A /trunk/dnssec-tools/validator/doc/val_get_rrset.pod Document val_get_rrset() ------------------------------------------------------------------------ r3997 | hserus | 2008-04-23 08:15:34 -0700 (Wed, 23 Apr 2008) | 2 lines Changed paths: A /trunk/dnssec-tools/validator/doc/getname.1 A /trunk/dnssec-tools/validator/doc/getname.pod A /trunk/dnssec-tools/validator/doc/getquery.1 A /trunk/dnssec-tools/validator/doc/getquery.pod A /trunk/dnssec-tools/validator/doc/getrrset.1 A /trunk/dnssec-tools/validator/doc/getrrset.pod Add documentation for various command line programs ------------------------------------------------------------------------ r3996 | hserus | 2008-04-23 08:14:38 -0700 (Wed, 23 Apr 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/etc/dnsval.conf Rename unsecure to insecure ------------------------------------------------------------------------ r3995 | hserus | 2008-04-23 08:14:14 -0700 (Wed, 23 Apr 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/apps/libval_check_conf.c Use the dnsval.conf file given with the -d option, else use the system dnsval.conf file ------------------------------------------------------------------------ r3994 | hserus | 2008-04-23 08:13:45 -0700 (Wed, 23 Apr 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/getaddr.c M /trunk/dnssec-tools/validator/apps/gethost.c M /trunk/dnssec-tools/validator/apps/getname.c M /trunk/dnssec-tools/validator/apps/getquery.c M /trunk/dnssec-tools/validator/apps/getrrset.c Add usage for -o option ------------------------------------------------------------------------ r3993 | hserus | 2008-04-23 08:13:05 -0700 (Wed, 23 Apr 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/selftests.dist M /trunk/dnssec-tools/validator/apps/validator_selftest.c Use latest set of error codes from val_errors.h ------------------------------------------------------------------------ r3992 | hserus | 2008-04-23 08:11:44 -0700 (Wed, 23 Apr 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Renamed unsecure to insecure ------------------------------------------------------------------------ r3991 | hserus | 2008-04-23 08:11:18 -0700 (Wed, 23 Apr 2008) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/val_errors.h Remove all out of date comments Replace all DNS error codes with a single error code Make error list ordering consistent with API draft Renamed UNSECURE to INSECURE ------------------------------------------------------------------------ r3990 | hardaker | 2008-04-21 16:15:12 -0700 (Mon, 21 Apr 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman more verbose output when doing various tasks; newline wraps ------------------------------------------------------------------------ r3989 | hardaker | 2008-04-21 14:19:12 -0700 (Mon, 21 Apr 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman print an error if neither .conf exists ------------------------------------------------------------------------ r3988 | hardaker | 2008-04-21 13:57:48 -0700 (Mon, 21 Apr 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman remove a bit of duplicate code; change -d to -z code to match -z docs ------------------------------------------------------------------------ r3987 | hardaker | 2008-04-21 11:30:13 -0700 (Mon, 21 Apr 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman trailing white space removal ------------------------------------------------------------------------ r3986 | hardaker | 2008-04-21 11:29:25 -0700 (Mon, 21 Apr 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf added new options for minimal trustman config ------------------------------------------------------------------------ r3985 | hserus | 2008-04-21 11:24:27 -0700 (Mon, 21 Apr 2008) | 2 lines Changed paths: D /trunk/dnssec-tools/validator/doc/val_query.3 D /trunk/dnssec-tools/validator/doc/val_query.pod A /trunk/dnssec-tools/validator/doc/val_res_query.3 (from /trunk/dnssec-tools/validator/doc/val_query.3:3983) A /trunk/dnssec-tools/validator/doc/val_res_query.pod (from /trunk/dnssec-tools/validator/doc/val_query.pod:3984) Remande val_query to val_res_query ------------------------------------------------------------------------ r3984 | hserus | 2008-04-21 11:22:49 -0700 (Mon, 21 Apr 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/val_query.pod Remove reference to val_query ------------------------------------------------------------------------ r3983 | hserus | 2008-04-17 09:21:55 -0700 (Thu, 17 Apr 2008) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod Add documentation on val_log_add_optarg() Remove description for functions that allow users to manipulate locations for various configuration files ------------------------------------------------------------------------ r3982 | hserus | 2008-04-16 10:28:59 -0700 (Wed, 16 Apr 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/dnsval.conf.3 M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod Document some of the new policy hooks ------------------------------------------------------------------------ r3981 | hserus | 2008-04-15 13:38:09 -0700 (Tue, 15 Apr 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Incremental fix for EDNS0; still have to figure out best way to handle EDNS0 queries ------------------------------------------------------------------------ r3980 | hserus | 2008-04-15 13:29:28 -0700 (Tue, 15 Apr 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c changes to make dlv logic work a little better. EDNS0 logic in dlv still needs to be fine-tuned ------------------------------------------------------------------------ r3979 | hserus | 2008-04-15 13:23:34 -0700 (Tue, 15 Apr 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c Move code for reading VAL_LOG_TARGET to val_policy ------------------------------------------------------------------------ r3978 | hserus | 2008-04-15 13:22:38 -0700 (Tue, 15 Apr 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Remove existing log targets before adding new ones during a conf file re-read ------------------------------------------------------------------------ r3977 | hserus | 2008-04-15 13:21:29 -0700 (Tue, 15 Apr 2008) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_log.c change val_log_add_* functions so that we add log target to the given list instead of a static object Add new funtion val_log_add_optarg_to_list() to add a log target to given list ------------------------------------------------------------------------ r3976 | hserus | 2008-04-15 13:20:25 -0700 (Tue, 15 Apr 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator-internal.h Add log target to context ------------------------------------------------------------------------ r3973 | hardaker | 2008-04-15 10:14:05 -0700 (Tue, 15 Apr 2008) | 1 line Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml type typos ------------------------------------------------------------------------ r3971 | hardaker | 2008-04-15 08:51:32 -0700 (Tue, 15 Apr 2008) | 1 line Changed paths: M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in fixed bug #1603912: typo in --help ------------------------------------------------------------------------ r3965 | hserus | 2008-04-10 08:06:58 -0700 (Thu, 10 Apr 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c read VAL_LOG_TARGET only after context is created ------------------------------------------------------------------------ r3964 | hserus | 2008-04-10 08:03:50 -0700 (Thu, 10 Apr 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.c check for in-bailiwick condition before attempting to store name server information to cache ------------------------------------------------------------------------ r3963 | hserus | 2008-04-10 08:02:44 -0700 (Thu, 10 Apr 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Ensure that log target from environment is specified at the correct time. ------------------------------------------------------------------------ r3961 | marz | 2008-03-28 08:01:46 -0700 (Fri, 28 Mar 2008) | 1 line Changed paths: M /trunk/dnssec-tools/Makefile.in fix man page install ------------------------------------------------------------------------ r3960 | marz | 2008-03-27 16:07:39 -0700 (Thu, 27 Mar 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c fix for linux progname ------------------------------------------------------------------------ r3959 | marz | 2008-03-26 07:23:19 -0700 (Wed, 26 Mar 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/doc/libval_shim.3 M /trunk/dnssec-tools/validator/doc/libval_shim.pod M /trunk/dnssec-tools/validator/libval_shim/README.libval_shim M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c libval_shim changes related to logging env. var. support in libval ------------------------------------------------------------------------ r3958 | hserus | 2008-03-19 12:28:23 -0700 (Wed, 19 Mar 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c Check for non-existence ------------------------------------------------------------------------ r3957 | hserus | 2008-03-19 11:13:55 -0700 (Wed, 19 Mar 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c rename gopt to g_opt ------------------------------------------------------------------------ r3956 | hserus | 2008-03-19 11:08:07 -0700 (Wed, 19 Mar 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Save current log channel to context ------------------------------------------------------------------------ r3955 | hserus | 2008-03-19 10:28:36 -0700 (Wed, 19 Mar 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_policy.c Add support for reading logging preference from the VAL_LOG_TARGET env variable and from a "log" global option ------------------------------------------------------------------------ r3954 | hserus | 2008-03-19 10:26:14 -0700 (Wed, 19 Mar 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Add definition for log_target ------------------------------------------------------------------------ r3953 | marz | 2008-03-19 10:23:51 -0700 (Wed, 19 Mar 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/doc/libval_shim.3 M /trunk/dnssec-tools/validator/doc/libval_shim.pod M /trunk/dnssec-tools/validator/libval_shim/README.libval_shim M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c related changes to support moving policy context label enviroment variable app name logic to libval itself ------------------------------------------------------------------------ r3952 | hserus | 2008-03-18 12:51:06 -0700 (Tue, 18 Mar 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/etc/dnsval.conf Add default for env-policy and app-policy ------------------------------------------------------------------------ r3951 | hserus | 2008-03-18 12:49:40 -0700 (Tue, 18 Mar 2008) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c * rename the_null_context to the_default_context * the default context is not necessarily the "null" context, since labels may be overriden by global options. In such cases, the default policy is the overriding policy. ------------------------------------------------------------------------ r3950 | hserus | 2008-03-18 12:49:17 -0700 (Tue, 18 Mar 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.h Modify prototype for read_val_config_file() function ------------------------------------------------------------------------ r3949 | hserus | 2008-03-18 12:49:05 -0700 (Tue, 18 Mar 2008) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c * Add logic to parse new fields in global options * if there is duplication in policy, use the first definition and ignore later (instead of doing the reverse) * Change the dnsval.conf file parsing logic -- allow the app-policy and env-policy options to control how the files get (re-)read with the correct label. ------------------------------------------------------------------------ r3948 | hserus | 2008-03-18 12:48:16 -0700 (Tue, 18 Mar 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h add definitions for app-policy and env-policy global options ------------------------------------------------------------------------ r3947 | hserus | 2008-03-18 08:30:35 -0700 (Tue, 18 Mar 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/val_gethostbyname.3 Check in modified man page ------------------------------------------------------------------------ r3946 | hserus | 2008-03-18 08:04:52 -0700 (Tue, 18 Mar 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/Makefile.in A /trunk/dnssec-tools/validator/apps/getquery.c Add test program from val_res_query() ------------------------------------------------------------------------ r3945 | hserus | 2008-03-17 08:23:47 -0700 (Mon, 17 Mar 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/etc/dnsval.conf Remove policy bits that are no longer pertinent ------------------------------------------------------------------------ r3944 | hserus | 2008-03-17 06:41:10 -0700 (Mon, 17 Mar 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/etc/dnsval.conf Remove keys that had grown stale ------------------------------------------------------------------------ r3942 | marz | 2008-03-12 07:31:15 -0700 (Wed, 12 Mar 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t removed previous bogus test and update num tests ------------------------------------------------------------------------ r3941 | hserus | 2008-03-12 07:24:19 -0700 (Wed, 12 Mar 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Change value for VAL_QUERY_MERGE_RRSETS flag ------------------------------------------------------------------------ r3940 | marz | 2008-03-08 11:24:19 -0800 (Sat, 08 Mar 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t M /trunk/dnssec-tools/tools/modules/Net-addrinfo/t/basic.t M /trunk/dnssec-tools/validator/apps/getname.c M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/include/validator-config.h.in M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c changes relsated to recent API update ------------------------------------------------------------------------ r3939 | hserus | 2008-03-07 07:22:00 -0800 (Fri, 07 Mar 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c Use addrinfo instead of val_addrinfo Use val_get_rrset() instead of val_resolve_and_check() ------------------------------------------------------------------------ r3938 | hserus | 2008-03-07 07:21:44 -0800 (Fri, 07 Mar 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_resquery.h Add new flag to bootstrap_referral() to allow the calling function to specify that it does not want any partial name server information returned ------------------------------------------------------------------------ r3937 | hserus | 2008-03-07 07:21:23 -0800 (Fri, 07 Mar 2008) | 7 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c * Rename struct val_rrset to struct val_rrset_rec * Populate new values of val_result_chain structure: val_rc_rrset and val_rc_alias * Rename VAL_QFLAGS_AFFECTS_CACHING to VAL_Q_ONLY_MATCHING_FLAGS * Do not return complete authentication chain(s) if VAL_QUERY_NO_AC_DETAIL was specified ------------------------------------------------------------------------ r3936 | hserus | 2008-03-07 07:21:02 -0800 (Fri, 07 Mar 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.c remove elements in cache that have reached their expiry time Ensure that nameservers returned from cache are not incomplete ------------------------------------------------------------------------ r3935 | hserus | 2008-03-07 07:20:49 -0800 (Fri, 07 Mar 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_x_query.c Rename struct val_rrset to struct val_rrset_rec ------------------------------------------------------------------------ r3934 | hserus | 2008-03-07 07:20:11 -0800 (Fri, 07 Mar 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/Makefile.in A /trunk/dnssec-tools/validator/libval/val_get_rrset.c Add definition for val_get_rrset() and val_free_answer_chain() functions ------------------------------------------------------------------------ r3933 | hserus | 2008-03-07 07:19:04 -0800 (Fri, 07 Mar 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/getaddr.c Use addrinfo instead of val_addrinfo ------------------------------------------------------------------------ r3932 | hserus | 2008-03-07 07:18:38 -0800 (Fri, 07 Mar 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/Makefile.in A /trunk/dnssec-tools/validator/apps/getrrset.c Add new utility for testing the val_get_rrset() function ------------------------------------------------------------------------ r3931 | hserus | 2008-03-07 07:16:17 -0800 (Fri, 07 Mar 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod M /trunk/dnssec-tools/validator/doc/validator_api.xml Add description for VAL_QUERY_NO_AC_DETAIL and changes in structure definitions. ------------------------------------------------------------------------ r3930 | hserus | 2008-03-07 07:15:45 -0800 (Fri, 07 Mar 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/getaddr.1 M /trunk/dnssec-tools/validator/doc/getaddr.pod M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.3 M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.pod Use addrinfo instead of val_addrinfo ------------------------------------------------------------------------ r3929 | hserus | 2008-03-07 07:15:01 -0800 (Fri, 07 Mar 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/doc/val_query.3 M /trunk/dnssec-tools/validator/doc/val_query.pod Remove help for val_query() and val_free_response(). These functions will soon be obsoleted; only val_res_query() will remain. ------------------------------------------------------------------------ r3928 | hserus | 2008-03-07 07:14:08 -0800 (Fri, 07 Mar 2008) | 19 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h * Add new flag VAL_QUERY_NO_AC_DETAIL to prevent authentication chain details from being returned * Rename VAL_QFLAGS_AFFECTS_CACHING to VAL_Q_ONLY_MATCHING_FLAGS * Define new struct rr_rec, containing only rr information * Reorder elements of struct val_rr_rec so that it can be directly typecast to struct rr_rec * Rename struct val_rrset to struct val_rrset_rec * Add two new members to the val_result_chain structure: - val_rc_alias points to name referenced by the cname/dname alias in result (if any) - val_rc_rrset points to the val_rrset_rec structure for the answer returned in val_rc_answer * Define new structure val_answer_chain that contains only rrset information (without details) and validation status for a given name/class/type * Add prototypes for new val_get_rrset() and val_free_answer_chain() functions ------------------------------------------------------------------------ r3927 | hserus | 2008-03-07 07:12:46 -0800 (Fri, 07 Mar 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator-internal.h Rename struct val_rrset to struct val_rrset_rec ------------------------------------------------------------------------ r3926 | marz | 2008-03-03 06:57:48 -0800 (Mon, 03 Mar 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t work around odd anomaly with validating query for MX mail.marzot.net ------------------------------------------------------------------------ r3925 | marz | 2008-02-25 12:45:04 -0800 (Mon, 25 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/doc/Makefile.in libval-shim doc makefile change ------------------------------------------------------------------------ r3924 | marz | 2008-02-25 12:41:48 -0800 (Mon, 25 Feb 2008) | 1 line Changed paths: A /trunk/dnssec-tools/validator/doc/libval_shim.3 A /trunk/dnssec-tools/validator/doc/libval_shim.pod libval_shim docs ------------------------------------------------------------------------ r3923 | hardaker | 2008-02-22 15:37:12 -0800 (Fri, 22 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/check_nameservers.txt M /trunk/dnssec-tools/tools/donuts/rules/dns.errors.txt M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt misc fixes and wide spread use of the new donuts_error function ------------------------------------------------------------------------ r3922 | hardaker | 2008-02-22 15:36:31 -0800 (Fri, 22 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts comment, fix and make compare_arrays return a defined result value ------------------------------------------------------------------------ r3921 | hardaker | 2008-02-22 15:36:04 -0800 (Fri, 22 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm return undef to ensure no positive return ------------------------------------------------------------------------ r3920 | hardaker | 2008-02-22 15:35:15 -0800 (Fri, 22 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm fix issues with dropped trailing dot on signame of RRSIG; sort the typelist for a NSEC ------------------------------------------------------------------------ r3919 | hserus | 2008-02-22 08:31:27 -0800 (Fri, 22 Feb 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod M /trunk/dnssec-tools/validator/doc/validator_api.xml M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_support.h M /trunk/dnssec-tools/validator/libval/val_verify.c M /trunk/dnssec-tools/validator/libval/val_verify.h M /trunk/dnssec-tools/validator/libval/val_x_query.c Global search and replace rr_rec to val_rr_rec ------------------------------------------------------------------------ r3918 | hserus | 2008-02-22 08:21:51 -0800 (Fri, 22 Feb 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_context.c Dont use the policy label from the enviroment. Delegate this to libval_shim ------------------------------------------------------------------------ r3917 | hserus | 2008-02-22 06:45:18 -0800 (Fri, 22 Feb 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c Look for a label specified in the environment VAL_CONTEXT_LABEL if one is not specified by the application ------------------------------------------------------------------------ r3916 | hserus | 2008-02-22 06:43:10 -0800 (Fri, 22 Feb 2008) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Don't fail if one of the included dnsval.conf files is missing. Fix order for included dnsval.conf files Use default /etc/resolv.conf file if user-specified file is missing ------------------------------------------------------------------------ r3915 | hserus | 2008-02-22 06:39:41 -0800 (Fri, 22 Feb 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Define VAL_CONTEXT_LABEL and VAL_DEFAULT_RESOLV_CONF. Also fix algorithm identifiers for NSEC3 ------------------------------------------------------------------------ r3914 | hserus | 2008-02-21 13:16:43 -0800 (Thu, 21 Feb 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_policy.c Try to operate even if root.hints was missing ------------------------------------------------------------------------ r3913 | hserus | 2008-02-21 10:26:01 -0800 (Thu, 21 Feb 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Don't lose the value of matched_q->qc_ns_list during cname lookup ------------------------------------------------------------------------ r3912 | hserus | 2008-02-21 10:24:50 -0800 (Thu, 21 Feb 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.c Swap big and little arguments to namename ------------------------------------------------------------------------ r3911 | hserus | 2008-02-21 10:24:23 -0800 (Thu, 21 Feb 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Properly read the "forward" line ------------------------------------------------------------------------ r3910 | hserus | 2008-02-20 11:16:00 -0800 (Wed, 20 Feb 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/etc/root.hints Updated root.hints ------------------------------------------------------------------------ r3909 | hserus | 2008-02-20 09:46:22 -0800 (Wed, 20 Feb 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Minor fixes ------------------------------------------------------------------------ r3908 | hserus | 2008-02-19 17:29:47 -0800 (Tue, 19 Feb 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_parse.c M /trunk/dnssec-tools/validator/libval/val_parse.h M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_policy.h M /trunk/dnssec-tools/validator/libval/val_verify.c M /trunk/dnssec-tools/validator/libval/val_verify.h Support DS record trust anchors ------------------------------------------------------------------------ r3907 | hserus | 2008-02-18 12:57:20 -0800 (Mon, 18 Feb 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Changes to the API based on comments received ------------------------------------------------------------------------ r3906 | marz | 2008-02-18 08:16:59 -0800 (Mon, 18 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h handle val_addrinfo platform specific structure definition ------------------------------------------------------------------------ r3905 | marz | 2008-02-18 08:05:43 -0800 (Mon, 18 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c macosx compile ------------------------------------------------------------------------ r3904 | marz | 2008-02-18 08:02:51 -0800 (Mon, 18 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c macosx compile ------------------------------------------------------------------------ r3903 | marz | 2008-02-18 07:59:26 -0800 (Mon, 18 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c macosx compile ------------------------------------------------------------------------ r3902 | marz | 2008-02-18 07:53:39 -0800 (Mon, 18 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c handle getprogname() vs program_invocation_shortname ------------------------------------------------------------------------ r3901 | hserus | 2008-02-18 07:09:42 -0800 (Mon, 18 Feb 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/configure Use autoconf version 2.59 ------------------------------------------------------------------------ r3900 | marz | 2008-02-17 10:59:43 -0800 (Sun, 17 Feb 2008) | 1 line Changed paths: D /trunk/dnssec-tools/validator/libval_shim/Makefile A /trunk/dnssec-tools/validator/libval_shim/Makefile.in Makefile fixes ------------------------------------------------------------------------ r3899 | marz | 2008-02-17 10:58:55 -0800 (Sun, 17 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/Makefile.in add libval_shim suport to validator makefile ------------------------------------------------------------------------ r3898 | marz | 2008-02-17 10:57:54 -0800 (Sun, 17 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure.in add libval_shim support to configure ------------------------------------------------------------------------ r3875 | hserus | 2008-02-14 13:16:48 -0800 (Thu, 14 Feb 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Add another log message during glue fetch operation ------------------------------------------------------------------------ r3874 | hserus | 2008-02-14 13:11:54 -0800 (Thu, 14 Feb 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c revert previous change ------------------------------------------------------------------------ r3873 | hserus | 2008-02-14 13:04:28 -0800 (Thu, 14 Feb 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c Return EINVAL if address family is neither AF_INET6 nor AF_INET. ------------------------------------------------------------------------ r3872 | hserus | 2008-02-14 12:51:28 -0800 (Thu, 14 Feb 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/val_errors.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_verify.c Fix ciritical bug in validation algorithm: the chain was being marked valid without checking if the key marked as the trust anchor has a signature over the apex DNSKEY RRset. ------------------------------------------------------------------------ r3871 | hserus | 2008-02-14 12:30:03 -0800 (Thu, 14 Feb 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_policy.h M /trunk/dnssec-tools/validator/libval/val_verify.c Allow clock skew policy to contain negative values ------------------------------------------------------------------------ r3870 | hserus | 2008-02-14 11:56:36 -0800 (Thu, 14 Feb 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Change order of VAL_FROM_* definitions so that API reads better ------------------------------------------------------------------------ r3869 | hardaker | 2008-02-13 14:36:23 -0800 (Wed, 13 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/dnssecstatusOverlay.js wording change and comment out of log message that was causing a freeze ------------------------------------------------------------------------ r3868 | hardaker | 2008-02-13 14:20:27 -0800 (Wed, 13 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsSocketTransport2.cpp updated patch to do better logging and remove a harmful break (moving it later) ------------------------------------------------------------------------ r3867 | hardaker | 2008-02-13 14:14:54 -0800 (Wed, 13 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch updated patch to do better logging and remove a harmful break (moving it later) ------------------------------------------------------------------------ r3864 | marz | 2008-02-13 08:37:54 -0800 (Wed, 13 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval_shim/README.libval_shim M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c doc fixes, fail on unimplemented wrapper ------------------------------------------------------------------------ r3862 | marz | 2008-02-12 17:27:46 -0800 (Tue, 12 Feb 2008) | 1 line Changed paths: A /trunk/dnssec-tools/validator/libval_shim/README.libval_shim libval shim README ------------------------------------------------------------------------ r3861 | marz | 2008-02-12 15:45:27 -0800 (Tue, 12 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c handle context creation based on app name or env var LIBVAL_SHIM_CONTEXT ------------------------------------------------------------------------ r3860 | hardaker | 2008-02-12 09:03:24 -0800 (Tue, 12 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm rework the run_test function and made the record test use it ------------------------------------------------------------------------ r3859 | hardaker | 2008-02-11 17:04:31 -0800 (Mon, 11 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts fix closing rule test defitition in code memory ------------------------------------------------------------------------ r3858 | hardaker | 2008-02-11 17:03:35 -0800 (Mon, 11 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm add a new dnssec_error() function for rules to report errors with ------------------------------------------------------------------------ r3857 | marz | 2008-02-11 16:00:12 -0800 (Mon, 11 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c set logging only once ------------------------------------------------------------------------ r3856 | marz | 2008-02-11 13:54:22 -0800 (Mon, 11 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c fixes to val_getnameinfo() and val_getaddrinfo() flag handling ------------------------------------------------------------------------ r3855 | hardaker | 2008-02-10 20:47:16 -0800 (Sun, 10 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts remove debugging print ------------------------------------------------------------------------ r3854 | hardaker | 2008-02-10 20:46:09 -0800 (Sun, 10 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt fix nsec/rrsig only test ------------------------------------------------------------------------ r3853 | hardaker | 2008-02-10 20:45:31 -0800 (Sun, 10 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm print record details if possible during error for high verbosity levels ------------------------------------------------------------------------ r3852 | hardaker | 2008-02-10 20:40:29 -0800 (Sun, 10 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm fix parsing of quoted TXT records with ;s in them ------------------------------------------------------------------------ r3851 | hardaker | 2008-02-10 19:44:57 -0800 (Sun, 10 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm M /trunk/dnssec-tools/tools/donuts/donuts make the -v switch produce increasing amounts of output ------------------------------------------------------------------------ r3850 | marz | 2008-02-08 10:39:40 -0800 (Fri, 08 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/getname.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval_shim/Makefile M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c libval_shim fixes ------------------------------------------------------------------------ r3849 | marz | 2008-02-07 08:32:19 -0800 (Thu, 07 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c fix port and service handling in getnameinfo ------------------------------------------------------------------------ r3848 | marz | 2008-02-07 08:30:30 -0800 (Thu, 07 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/getname.c fix port passing ------------------------------------------------------------------------ r3847 | marz | 2008-02-06 14:02:02 -0800 (Wed, 06 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval_shim/Makefile make support ------------------------------------------------------------------------ r3846 | marz | 2008-02-06 12:32:50 -0800 (Wed, 06 Feb 2008) | 1 line Changed paths: A /trunk/dnssec-tools/validator/libval_shim/Makefile make support ------------------------------------------------------------------------ r3845 | marz | 2008-02-06 09:32:53 -0800 (Wed, 06 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c fix getaddrinfo for locally trusted answer ------------------------------------------------------------------------ r3844 | marz | 2008-02-04 15:29:42 -0800 (Mon, 04 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c fixed return of trusted result ------------------------------------------------------------------------ r3843 | marz | 2008-02-04 13:38:36 -0800 (Mon, 04 Feb 2008) | 1 line Changed paths: A /trunk/dnssec-tools/validator/libval_shim/libval_shim.c wrappers for key functions ------------------------------------------------------------------------ r3842 | marz | 2008-02-04 12:47:02 -0800 (Mon, 04 Feb 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/Makefile.in A /trunk/dnssec-tools/validator/apps/getname.c testprogram for getnameinfo ------------------------------------------------------------------------ r3841 | hardaker | 2008-01-31 13:41:37 -0800 (Thu, 31 Jan 2008) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch M /trunk/dnssec-tools/apps/mozilla/dnssec-firefox.patch M /trunk/dnssec-tools/apps/mozilla/dnssec-mozconfig.patch updated patches for 2.0 ------------------------------------------------------------------------ r3840 | hardaker | 2008-01-31 13:41:07 -0800 (Thu, 31 Jan 2008) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status ignore the generated .xpi file ------------------------------------------------------------------------ r3839 | hardaker | 2008-01-31 13:40:06 -0800 (Thu, 31 Jan 2008) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/dnssecstatusOverlay.js M /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/dnssecstatusOverlay.xul wording changes based on group discussion ------------------------------------------------------------------------ r3838 | hardaker | 2008-01-31 13:39:42 -0800 (Thu, 31 Jan 2008) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/install.rdf allow firefox 2.0+ ------------------------------------------------------------------------ r3837 | hardaker | 2008-01-31 13:38:26 -0800 (Thu, 31 Jan 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow use QWizard to allow qwparam to work ------------------------------------------------------------------------ r3836 | hardaker | 2008-01-31 13:18:16 -0800 (Thu, 31 Jan 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator M /trunk/dnssec-tools/tools/modules/Net-addrinfo ignore patterns ------------------------------------------------------------------------ r3835 | hardaker | 2008-01-31 12:59:16 -0800 (Thu, 31 Jan 2008) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/firefox-files A /trunk/dnssec-tools/apps/mozilla/firefox-files/.mozconfig A /trunk/dnssec-tools/apps/mozilla/firefox-files/Makefile.in A /trunk/dnssec-tools/apps/mozilla/firefox-files/advanced.dtd A /trunk/dnssec-tools/apps/mozilla/firefox-files/advanced.xul M /trunk/dnssec-tools/apps/mozilla/firefox-files/appstrings.properties M /trunk/dnssec-tools/apps/mozilla/firefox-files/appstrings.properties.orig A /trunk/dnssec-tools/apps/mozilla/firefox-files/autoconf.mk.in A /trunk/dnssec-tools/apps/mozilla/firefox-files/configure.in M /trunk/dnssec-tools/apps/mozilla/firefox-files/netError.xhtml M /trunk/dnssec-tools/apps/mozilla/firefox-files/netError.xhtml.orig M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsDocShell.cpp M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsDocShell.cpp.orig M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsHttpChannel.cpp M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsHttpChannel.cpp.orig M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsNetError.h M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsNetError.h.orig M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsPACMan.cpp M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsPACMan.cpp.orig A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsPresContext.cpp M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsSocketTransport2.cpp M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsSocketTransport2.cpp.orig M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsWebShell.cpp M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsWebShell.cpp.orig A /trunk/dnssec-tools/apps/mozilla/firefox-files/nspr-config.in A /trunk/dnssec-tools/apps/mozilla/firefox-files/platlibs.mk updated firefox code ------------------------------------------------------------------------ r3826 | marz | 2008-01-24 12:09:48 -0800 (Thu, 24 Jan 2008) | 1 line Changed paths: A /trunk/dnssec-tools/validator/libval_shim/gen_shim_code.pl A /trunk/dnssec-tools/validator/libval_shim/libval_shim.funcs libval_shim infrastructure ------------------------------------------------------------------------ r3825 | marz | 2008-01-24 11:47:20 -0800 (Thu, 24 Jan 2008) | 1 line Changed paths: A /trunk/dnssec-tools/validator/libval_shim libval_shim infrastructure ------------------------------------------------------------------------ r3822 | lfoster | 2008-01-21 14:35:52 -0800 (Mon, 21 Jan 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Clarify -f vs. -S options. ------------------------------------------------------------------------ r3819 | lfoster | 2008-01-18 13:50:50 -0800 (Fri, 18 Jan 2008) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Added comments and documentation referring to RFC 5011 where appropriate. ------------------------------------------------------------------------ r3816 | hardaker | 2008-01-15 17:14:50 -0800 (Tue, 15 Jan 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts put the extra zone file arguments in a separate array; load local user rules by default too ------------------------------------------------------------------------ r3815 | hardaker | 2008-01-15 17:14:12 -0800 (Tue, 15 Jan 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm put the extra zone file arguments in a separate array ------------------------------------------------------------------------ r3814 | rstory | 2008-01-08 15:53:55 -0800 (Tue, 08 Jan 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/maketestzone update files to ignore ------------------------------------------------------------------------ r3813 | rstory | 2008-01-08 15:52:49 -0800 (Tue, 08 Jan 2008) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts M /trunk/dnssec-tools/tools/drawvalmap M /trunk/dnssec-tools/tools/etc M /trunk/dnssec-tools/tools/mapper M /trunk/dnssec-tools/tools/modules M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator M /trunk/dnssec-tools/tools/modules/Net-addrinfo M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast M /trunk/dnssec-tools/tools/scripts add or update files to ignore ------------------------------------------------------------------------ r3812 | rstory | 2008-01-08 15:44:48 -0800 (Tue, 08 Jan 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include ignore generated files ------------------------------------------------------------------------ r3811 | rstory | 2008-01-08 15:42:42 -0800 (Tue, 08 Jan 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator ignore generated files ------------------------------------------------------------------------ r3810 | rstory | 2008-01-08 15:29:58 -0800 (Tue, 08 Jan 2008) | 1 line Changed paths: M /trunk/dnssec-tools/validator/Makefile.in M /trunk/dnssec-tools/validator/doc/Makefile.in M /trunk/dnssec-tools/validator/libsres/Makefile.in use $(RM) instead of rm ------------------------------------------------------------------------ r3809 | hardaker | 2008-01-07 09:50:10 -0800 (Mon, 07 Jan 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm fix example to use a reference ------------------------------------------------------------------------ r3808 | hardaker | 2008-01-07 08:31:25 -0800 (Mon, 07 Jan 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts add a bunch of warnings after run in case odd run cases exist (no rules, no data, ...) ------------------------------------------------------------------------ r3807 | hardaker | 2008-01-06 09:25:03 -0800 (Sun, 06 Jan 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/donuts/rules/check_nameservers.txt M /trunk/dnssec-tools/tools/donuts/rules/dns.errors.txt M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt rewrite the eval section of the code to do automatic variable binding; rewrite the tools to use the new variable binding for better readability; improved a bunch of documentation; changed the copyright to include 2008 ------------------------------------------------------------------------ r3806 | hardaker | 2008-01-02 10:09:17 -0800 (Wed, 02 Jan 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/Makefile.PL fix donuts binary hard-coded paths ------------------------------------------------------------------------ r3805 | hardaker | 2008-01-02 10:08:58 -0800 (Wed, 02 Jan 2008) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm use more readable variable names ------------------------------------------------------------------------ r3804 | hardaker | 2007-12-11 09:40:12 -0800 (Tue, 11 Dec 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm added a note that we don't support SOAs with floating point numbers ------------------------------------------------------------------------ r3803 | hardaker | 2007-12-05 19:30:03 -0800 (Wed, 05 Dec 2007) | 1 line Changed paths: M /trunk/dnssec-tools/Makefile.in A /trunk/dnssec-tools/docs A /trunk/dnssec-tools/docs/dnssec-tools.1 Added a top level manual page for dnssec-tools ------------------------------------------------------------------------ r3802 | baerm | 2007-12-03 17:58:10 -0800 (Mon, 03 Dec 2007) | 2 lines Changed paths: D /trunk/dnssec-tools/apps/ssh/README.dnssec A /trunk/dnssec-tools/apps/ssh/README.ssh (from /trunk/dnssec-tools/apps/ssh/README.dnssec:3794) name consistency change ------------------------------------------------------------------------ r3797 | baerm | 2007-12-03 17:11:38 -0800 (Mon, 03 Dec 2007) | 2 lines Changed paths: D /trunk/dnssec-tools/apps/lftp/lftp-3-4-7_dnssec_howto.txt A /trunk/dnssec-tools/apps/lftp/lftp-3.4.7-dnssec-howto.txt (from /trunk/dnssec-tools/apps/lftp/lftp-3-4-7_dnssec_howto.txt:3794) A /trunk/dnssec-tools/apps/libspf2/libspf2-dnssec-howto.txt (from /trunk/dnssec-tools/apps/libspf2/libspf2_dnssec_howto.txt:3794) D /trunk/dnssec-tools/apps/libspf2/libspf2_dnssec_howto.txt A /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0-dnssec-howto.txt (from /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0_dnssec_howto.txt:3794) D /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0_dnssec_howto.txt A /trunk/dnssec-tools/apps/postfix/postfix-2.2.x-dnssec-howto.txt (from /trunk/dnssec-tools/apps/postfix/postfix-2.2.x_dnssec_howto.txt:3794) D /trunk/dnssec-tools/apps/postfix/postfix-2.2.x_dnssec_howto.txt A /trunk/dnssec-tools/apps/postfix/postfix-2.3.x-dnssec-howto.txt (from /trunk/dnssec-tools/apps/postfix/postfix-2.3.x_dnssec_howto.txt:3794) D /trunk/dnssec-tools/apps/postfix/postfix-2.3.x_dnssec_howto.txt A /trunk/dnssec-tools/apps/proftpd/proftpd-1.3.x-dnssec-howto.txt (from /trunk/dnssec-tools/apps/proftpd/proftpd-1.3.x_dnssec_howto.txt:3794) D /trunk/dnssec-tools/apps/proftpd/proftpd-1.3.x_dnssec_howto.txt A /trunk/dnssec-tools/apps/wget/wget-1.10.2-dnssec-howto.txt (from /trunk/dnssec-tools/apps/wget/wget-1.10.2_dnssec_howto.txt:3794) D /trunk/dnssec-tools/apps/wget/wget-1.10.2_dnssec_howto.txt making howto names consistent ------------------------------------------------------------------------ r3791 | tewok | 2007-11-06 13:34:15 -0800 (Tue, 06 Nov 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Log an error if rollerd couldn't reload the zone. ------------------------------------------------------------------------ r3790 | hardaker | 2007-11-05 09:05:25 -0800 (Mon, 05 Nov 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm Patch from Eric Waters to fix some generate syntax so there can be more than one word between the left and right parts ------------------------------------------------------------------------ r3789 | tewok | 2007-11-04 19:01:04 -0800 (Sun, 04 Nov 2007) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Slightly modified the format of key information displayed to the user. Modified to allow multiple zones to be kept in a single keyrec file. Modified the pod to reflect the zone being included in the default signing set name. ------------------------------------------------------------------------ r3788 | tewok | 2007-11-04 18:57:13 -0800 (Sun, 04 Nov 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Modified default signing set name to include the zone name. ------------------------------------------------------------------------ r3786 | tewok | 2007-10-31 19:25:16 -0700 (Wed, 31 Oct 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Modified to properly handle keys stored in non-dot directories. ------------------------------------------------------------------------ r3785 | tewok | 2007-10-31 19:24:32 -0700 (Wed, 31 Oct 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added keyrec_keypaths(), which returns a list of paths to a zones keys of a given type. ------------------------------------------------------------------------ r3784 | tewok | 2007-10-31 17:50:35 -0700 (Wed, 31 Oct 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Makefile.PL Fixed a typo. ------------------------------------------------------------------------ r3783 | hardaker | 2007-10-31 14:53:09 -0700 (Wed, 31 Oct 2007) | 1 line Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml final typo fixes ------------------------------------------------------------------------ r3781 | hardaker | 2007-10-31 14:48:56 -0700 (Wed, 31 Oct 2007) | 1 line Changed paths: M /trunk/dnssec-tools/ChangeLog Update for verison 1.3 ------------------------------------------------------------------------ r3780 | hardaker | 2007-10-31 14:47:13 -0700 (Wed, 31 Oct 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm Update Fast.pm Version Number: 0.9 ------------------------------------------------------------------------ r3779 | hardaker | 2007-10-31 14:46:49 -0700 (Wed, 31 Oct 2007) | 1 line Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml version modification issue ------------------------------------------------------------------------ r3778 | hardaker | 2007-10-31 14:45:34 -0700 (Wed, 31 Oct 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor Update Version Number: 1.3 ------------------------------------------------------------------------ r3777 | hardaker | 2007-10-31 14:45:19 -0700 (Wed, 31 Oct 2007) | 1 line Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml case sensitivity ------------------------------------------------------------------------ r3776 | hardaker | 2007-10-31 14:43:28 -0700 (Wed, 31 Oct 2007) | 1 line Changed paths: M /trunk/dnssec-tools/dist/makerelease.xml path typo ------------------------------------------------------------------------ r3775 | hardaker | 2007-10-31 14:41:51 -0700 (Wed, 31 Oct 2007) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS 1.3 update ------------------------------------------------------------------------ r3774 | hardaker | 2007-10-31 14:37:12 -0700 (Wed, 31 Oct 2007) | 1 line Changed paths: M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in 1.3 version stamp ------------------------------------------------------------------------ r3773 | hardaker | 2007-10-31 14:28:24 -0700 (Wed, 31 Oct 2007) | 1 line Changed paths: A /trunk/dnssec-tools/dist/makerelease.xml a makerelease script for generating releases ------------------------------------------------------------------------ r3772 | hardaker | 2007-10-31 13:20:52 -0700 (Wed, 31 Oct 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs.t Added support for DNAME records ------------------------------------------------------------------------ r3771 | hardaker | 2007-10-31 13:04:00 -0700 (Wed, 31 Oct 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rr-dnssec.t A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs-naptr.t M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs.t patch from Eric Waters to support naptr records ------------------------------------------------------------------------ r3770 | tewok | 2007-10-30 17:53:46 -0700 (Tue, 30 Oct 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed how the ZSKs are moved into the ZSK directory. ------------------------------------------------------------------------ r3769 | tewok | 2007-10-30 17:30:57 -0700 (Tue, 30 Oct 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Moved $zskpub into a local loop, the only place it's used. Commented out another (erroneous) use of $zskpub. ------------------------------------------------------------------------ r3768 | tewok | 2007-10-30 15:20:41 -0700 (Tue, 30 Oct 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Updated the command version. Fixed to allow all columns to select the zone. ------------------------------------------------------------------------ r3767 | hserus | 2007-10-29 13:14:40 -0700 (Mon, 29 Oct 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/etc/dnsval.conf Add new key for dnssec-tools.org ------------------------------------------------------------------------ r3766 | hserus | 2007-10-29 13:03:23 -0700 (Mon, 29 Oct 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/etc/dnsval.conf Add SNIP zones to dnsval.conf file ------------------------------------------------------------------------ r3765 | hserus | 2007-10-23 10:28:31 -0700 (Tue, 23 Oct 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Bug fix: keys were always being considered as expired. Also don't automatically start a rollover operation for a key with rollsecs value of 0. ------------------------------------------------------------------------ r3764 | lfoster | 2007-10-19 10:44:28 -0700 (Fri, 19 Oct 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman re-enable usage of both dnsval.conf and named.conf files in the same instantiation. ------------------------------------------------------------------------ r3762 | rstory | 2007-10-09 08:18:25 -0700 (Tue, 09 Oct 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_debug.c add OpenBSD to list of systems w/non const res_sym ------------------------------------------------------------------------ r3761 | rstory | 2007-10-09 08:15:04 -0700 (Tue, 09 Oct 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_mkquery.c do not include local arpa/header.h if system one exists define NS_ versions of (H|Q|RR)FIXEDSZ if needed ------------------------------------------------------------------------ r3760 | rstory | 2007-10-09 08:12:38 -0700 (Tue, 09 Oct 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_query.c do not include local arpa/header.h if system one exists ------------------------------------------------------------------------ r3759 | rstory | 2007-10-09 06:47:35 -0700 (Tue, 09 Oct 2007) | 1 line Changed paths: A /trunk/dnssec-tools/validator/include/val_ns_types.h define various constants if not found in any system header ------------------------------------------------------------------------ r3758 | rstory | 2007-10-09 06:46:19 -0700 (Tue, 09 Oct 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c do not include local arpa/header.h if system one exists ------------------------------------------------------------------------ r3757 | rstory | 2007-10-09 06:44:24 -0700 (Tue, 09 Oct 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_x_query.c use EINVAL instead of EBADMSG ------------------------------------------------------------------------ r3756 | rstory | 2007-10-09 06:43:43 -0700 (Tue, 09 Oct 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator-internal.h include pthreads if needed ------------------------------------------------------------------------ r3755 | hserus | 2007-10-08 14:04:55 -0700 (Mon, 08 Oct 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Test for the revoke bit (bit 8) ------------------------------------------------------------------------ r3754 | hserus | 2007-10-05 06:48:49 -0700 (Fri, 05 Oct 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Define the EAI_NODATA code if it is not defined by the system (FreeBSD for example) ------------------------------------------------------------------------ r3753 | hserus | 2007-10-05 06:17:25 -0700 (Fri, 05 Oct 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator-config.h.in M /trunk/dnssec-tools/validator/libsres/ns_netint.c Use the predefined __NetBSD__ instead of defining a new macro ------------------------------------------------------------------------ r3752 | hserus | 2007-10-05 06:06:50 -0700 (Fri, 05 Oct 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/Makefile.in Export ns_get(put)16(32) symbols from libsres ------------------------------------------------------------------------ r3751 | hserus | 2007-10-05 06:01:23 -0700 (Fri, 05 Oct 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator-config.h.in M /trunk/dnssec-tools/validator/libsres/ns_netint.c Hack to declare different prototypes for ns_(get/put)(16/32) ------------------------------------------------------------------------ r3750 | hserus | 2007-10-04 12:29:53 -0700 (Thu, 04 Oct 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator-config.h.in M /trunk/dnssec-tools/validator/libsres/res_io_manager.c Use select if pselect is not available ------------------------------------------------------------------------ r3749 | hserus | 2007-10-04 08:31:18 -0700 (Thu, 04 Oct 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_policy.h M /trunk/dnssec-tools/validator/libval/val_verify.c Use exact sizes for ttl and clock skew ------------------------------------------------------------------------ r3748 | hserus | 2007-10-04 08:08:45 -0700 (Thu, 04 Oct 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_parse.c M /trunk/dnssec-tools/validator/libval/val_support.c Be precise about sizes ------------------------------------------------------------------------ r3747 | tewok | 2007-10-03 10:19:22 -0700 (Wed, 03 Oct 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added confdir and conffile to -v -v -v output. ------------------------------------------------------------------------ r3746 | hserus | 2007-09-28 06:50:27 -0700 (Fri, 28 Sep 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Add closing bracket if nsec3 is not defined ------------------------------------------------------------------------ r3745 | hserus | 2007-09-26 13:13:51 -0700 (Wed, 26 Sep 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/etc/resolv.conf Set the default resolv.conf file to be empty, so that validate has a better chance of succeeding. ------------------------------------------------------------------------ r3744 | hserus | 2007-09-25 20:28:49 -0700 (Tue, 25 Sep 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/Makefile.in Revert previous change. Better to check for portability before commiting this change in. ------------------------------------------------------------------------ r3743 | hserus | 2007-09-25 20:26:12 -0700 (Tue, 25 Sep 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/Makefile.in Export symbols for ns_getxx and ns_putxx. This will probabaly have some portability issues, so it will need to be tested. ------------------------------------------------------------------------ r3742 | hserus | 2007-09-25 20:20:29 -0700 (Tue, 25 Sep 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/dnssecstatusOverlay.js Comment out code that is not used (also happens to conflict with Thunderbird code) Reset counters to 0 on unload and page change events ------------------------------------------------------------------------ r3741 | hserus | 2007-09-25 13:39:45 -0700 (Tue, 25 Sep 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/install.rdf Specify Thunderbird as another target application; remove the updateURL reference ------------------------------------------------------------------------ r3740 | hserus | 2007-09-25 13:38:21 -0700 (Tue, 25 Sep 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/contents.rdf Register messenger as another chrome package ------------------------------------------------------------------------ r3739 | hserus | 2007-09-25 13:26:33 -0700 (Tue, 25 Sep 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/dnssecstatusOverlay.xul Set DNSSEC label values as "secure", "insecure" and "errors" Use default location for placement of status window so that it works for firefox and thunderbird ------------------------------------------------------------------------ r3738 | hserus | 2007-09-25 13:12:18 -0700 (Tue, 25 Sep 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/README A /trunk/dnssec-tools/apps/mozilla/README.firefox A /trunk/dnssec-tools/apps/mozilla/README.thunderbird Moved firefox related README information to README.firefox; added new README for thunderbird and only retained directory content information in README. ------------------------------------------------------------------------ r3737 | hserus | 2007-09-25 12:20:32 -0700 (Tue, 25 Sep 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/README apps/thunderbird no longer exists ------------------------------------------------------------------------ r3736 | hserus | 2007-09-25 12:19:42 -0700 (Tue, 25 Sep 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/README Thunderbird is no longer a sub-directory ------------------------------------------------------------------------ r3735 | hserus | 2007-09-25 12:17:26 -0700 (Tue, 25 Sep 2007) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/mozilla/dnssec-thunderbird.patch Patch for adding DNSSEC-related UI hooks in Thunderbird ------------------------------------------------------------------------ r3734 | hserus | 2007-09-25 12:09:36 -0700 (Tue, 25 Sep 2007) | 2 lines Changed paths: D /trunk/dnssec-tools/apps/thunderbird Removed the thunderbird directory ------------------------------------------------------------------------ r3733 | hserus | 2007-09-25 12:08:24 -0700 (Tue, 25 Sep 2007) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/mozilla/spfdnssec (from /trunk/dnssec-tools/apps/thunderbird/spfdnssec:3732) D /trunk/dnssec-tools/apps/thunderbird/spfdnssec Moved spfdnssec extension to the mozilla directory ------------------------------------------------------------------------ r3732 | hserus | 2007-09-25 07:32:40 -0700 (Tue, 25 Sep 2007) | 2 lines Changed paths: A /trunk/dnssec-tools/validator/libsres/ns_netint.c Re-introduce the ns_netint.c file ------------------------------------------------------------------------ r3731 | hserus | 2007-09-25 07:31:39 -0700 (Tue, 25 Sep 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Use label_bytes_cmp in place of nsec3_order_cmp. Changed log levels for certain log messages Perform sanity check of zonecut seen on RRSIGs for DS records ------------------------------------------------------------------------ r3730 | hserus | 2007-09-25 07:28:21 -0700 (Tue, 25 Sep 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_support.h No longer using recursive logic for labelcmp. Instead, break this function into two sub-functions: label_bytes_cmp and labelcmp. No longer using nsec3_order_cmp since this is exactly the same as label_bytes_cmp. ------------------------------------------------------------------------ r3729 | hserus | 2007-09-25 07:16:47 -0700 (Tue, 25 Sep 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Do not bypass zonecut saving logic when current zonecut is NULL ------------------------------------------------------------------------ r3728 | hserus | 2007-09-25 07:14:33 -0700 (Tue, 25 Sep 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c Change log level for an informational message ------------------------------------------------------------------------ r3727 | hserus | 2007-09-25 07:12:12 -0700 (Tue, 25 Sep 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c flush log data once we write to the file ------------------------------------------------------------------------ r3726 | tewok | 2007-09-21 06:42:07 -0700 (Fri, 21 Sep 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Updated usage message. ------------------------------------------------------------------------ r3725 | rstory | 2007-09-20 07:47:29 -0700 (Thu, 20 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/apps/ssh/README.dnssec M /trunk/dnssec-tools/apps/ssh/ssh-dnssec.pat add AutoAnswerValidatedKeys functionality ------------------------------------------------------------------------ r3724 | rstory | 2007-09-18 12:45:42 -0700 (Tue, 18 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c include netinet/in.h (FreeBSD needs it) ------------------------------------------------------------------------ r3712 | hserus | 2007-09-17 10:25:30 -0700 (Mon, 17 Sep 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/wget/wget-1.10.2_dnssec_patch.txt Use "struct val_addrinfo" instead of "struct addrinfo" ------------------------------------------------------------------------ r3709 | hardaker | 2007-09-14 13:28:37 -0700 (Fri, 14 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch M /trunk/dnssec-tools/apps/mozilla/dnssec-firefox.patch M /trunk/dnssec-tools/apps/mozilla/firefox-files/netError.dtd fix error display messages in firefox ------------------------------------------------------------------------ r3707 | rstory | 2007-09-14 12:44:54 -0700 (Fri, 14 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/doc/Makefile.in usr DESTDIR when removing old man files ------------------------------------------------------------------------ r3706 | rstory | 2007-09-14 12:37:40 -0700 (Fri, 14 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/Makefile.in M /trunk/dnssec-tools/validator/Makefile.in use DESTDIR when creating directories ------------------------------------------------------------------------ r3705 | rstory | 2007-09-14 12:29:03 -0700 (Fri, 14 Sep 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Makefile.PL fix checked in conflicted file ------------------------------------------------------------------------ r3704 | hardaker | 2007-09-14 10:16:35 -0700 (Fri, 14 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/maketestzone/maketestzone M /trunk/dnssec-tools/tools/mapper/mapper M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/cleanarch M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtck M /trunk/dnssec-tools/tools/scripts/dtconf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rolllog M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/tests/test-kskroll M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/trustman M /trunk/dnssec-tools/tools/scripts/zonesigner change version stamp to DT 1.3 ------------------------------------------------------------------------ r3703 | hardaker | 2007-09-14 10:13:59 -0700 (Fri, 14 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/firefox-files/prnetdb-real.c M /trunk/dnssec-tools/apps/mozilla/firefox-files/prnetdb.c change unknown error code to bogus ------------------------------------------------------------------------ r3702 | hardaker | 2007-09-14 09:13:01 -0700 (Fri, 14 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval-config.in make libval-config use the proper PACKAGE_VERSION autoconf variable ------------------------------------------------------------------------ r3701 | hardaker | 2007-09-14 08:11:54 -0700 (Fri, 14 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsDNSService2.cpp.orig use real .orig file from firefox ------------------------------------------------------------------------ r3700 | hardaker | 2007-09-14 08:11:35 -0700 (Fri, 14 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/firefox-files/Makefile use diff -N to allow for new files; escape echo clauses with @ ------------------------------------------------------------------------ r3695 | tewok | 2007-09-13 21:03:59 -0700 (Thu, 13 Sep 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Makefile.PL M /trunk/dnssec-tools/tools/modules/keyrec.pm Pod fix. ------------------------------------------------------------------------ r3694 | tewok | 2007-09-13 20:58:21 -0700 (Thu, 13 Sep 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval_check_conf.1 M /trunk/dnssec-tools/validator/doc/libval_check_conf.pod Typo fix. ------------------------------------------------------------------------ r3693 | tewok | 2007-09-13 18:45:21 -0700 (Thu, 13 Sep 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod Pod mods. ------------------------------------------------------------------------ r3692 | tewok | 2007-09-13 18:42:42 -0700 (Thu, 13 Sep 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/trustman Pod mods. ------------------------------------------------------------------------ r3691 | hardaker | 2007-09-13 15:39:12 -0700 (Thu, 13 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/firefox-files/Makefile M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsDocShell.cpp M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsDocShell.cpp.orig upgrade source files from 1.5.0.10 to 1.5.0.12 ------------------------------------------------------------------------ r3690 | hardaker | 2007-09-13 15:31:10 -0700 (Thu, 13 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/firefox-files/addpath fix bug ------------------------------------------------------------------------ r3689 | hardaker | 2007-09-13 15:29:22 -0700 (Thu, 13 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/firefox-files/Makefile M /trunk/dnssec-tools/apps/mozilla/firefox-files/addpath attempt 1 at an automatted forward upgrade ------------------------------------------------------------------------ r3688 | hardaker | 2007-09-13 14:58:28 -0700 (Thu, 13 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/firefox-files svn ignore the built patch file ------------------------------------------------------------------------ r3687 | tewok | 2007-09-13 14:46:32 -0700 (Thu, 13 Sep 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rolllog M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/timetrans Pod Mods. ------------------------------------------------------------------------ r3686 | tewok | 2007-09-13 11:49:56 -0700 (Thu, 13 Sep 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/krfcheck Pod mods. ------------------------------------------------------------------------ r3685 | hardaker | 2007-09-13 10:58:47 -0700 (Thu, 13 Sep 2007) | 1 line Changed paths: A /trunk/dnssec-tools/apps/mozilla/firefox-files/getorig a perl script to retrieve the original versions of a file from a build tree ------------------------------------------------------------------------ r3684 | hardaker | 2007-09-13 10:58:04 -0700 (Thu, 13 Sep 2007) | 1 line Changed paths: A /trunk/dnssec-tools/apps/mozilla/firefox-files/appstrings.properties.orig A /trunk/dnssec-tools/apps/mozilla/firefox-files/netError.dtd.orig A /trunk/dnssec-tools/apps/mozilla/firefox-files/netError.xhtml.orig A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsDNSService2.cpp.orig A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsDocShell.cpp.orig A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsHostResolver.cpp.orig A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsHostResolver.h.orig A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsHttpChannel.cpp.orig A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsIDNSRecord.idl.orig A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsIDNSService.idl.orig A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsNetError.h.orig A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsPACMan.cpp.orig A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsProtocolProxyService.cpp.orig A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsSocketTransport2.cpp.orig A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsSocketTransport2.h.orig A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsWebShell.cpp.orig A /trunk/dnssec-tools/apps/mozilla/firefox-files/prerr.c.orig A /trunk/dnssec-tools/apps/mozilla/firefox-files/prerr.et.orig A /trunk/dnssec-tools/apps/mozilla/firefox-files/prerr.h.orig A /trunk/dnssec-tools/apps/mozilla/firefox-files/prerr.properties.orig A /trunk/dnssec-tools/apps/mozilla/firefox-files/prnetdb.c.orig A /trunk/dnssec-tools/apps/mozilla/firefox-files/prnetdb.h.orig added 1.5.0.10 original files ------------------------------------------------------------------------ r3683 | hardaker | 2007-09-13 10:57:39 -0700 (Thu, 13 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/firefox-files ignore *.patch ------------------------------------------------------------------------ r3682 | tewok | 2007-09-13 10:57:39 -0700 (Thu, 13 Sep 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/cleanarch M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtck M /trunk/dnssec-tools/tools/scripts/dtconf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/rollrec-editor M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/zonesigner Pod mods. ------------------------------------------------------------------------ r3681 | hardaker | 2007-09-13 10:57:21 -0700 (Thu, 13 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/firefox-files/Makefile misc build fixes and part separation ------------------------------------------------------------------------ r3680 | hardaker | 2007-09-13 10:21:13 -0700 (Thu, 13 Sep 2007) | 1 line Changed paths: A /trunk/dnssec-tools/apps/mozilla/firefox-files/getpath missed a perl script ------------------------------------------------------------------------ r3679 | hardaker | 2007-09-13 09:41:34 -0700 (Thu, 13 Sep 2007) | 1 line Changed paths: A /trunk/dnssec-tools/apps/mozilla/firefox-files/appstrings.properties A /trunk/dnssec-tools/apps/mozilla/firefox-files/netError.dtd A /trunk/dnssec-tools/apps/mozilla/firefox-files/netError.xhtml A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsDNSService2.cpp A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsDocShell.cpp A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsHostResolver.cpp A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsHostResolver.h A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsHttpChannel.cpp A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsIDNSRecord.idl A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsIDNSService.idl A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsNetError.h A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsPACMan.cpp A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsProtocolProxyService.cpp A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsSocketTransport2.cpp A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsSocketTransport2.h A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsWebShell.cpp A /trunk/dnssec-tools/apps/mozilla/firefox-files/pref-dnssec.dtd A /trunk/dnssec-tools/apps/mozilla/firefox-files/prerr.c A /trunk/dnssec-tools/apps/mozilla/firefox-files/prerr.et A /trunk/dnssec-tools/apps/mozilla/firefox-files/prerr.h A /trunk/dnssec-tools/apps/mozilla/firefox-files/prerr.properties A /trunk/dnssec-tools/apps/mozilla/firefox-files/prnetdb-real.c A /trunk/dnssec-tools/apps/mozilla/firefox-files/prnetdb.c A /trunk/dnssec-tools/apps/mozilla/firefox-files/prnetdb.h the base modified patch files for 1.5.0.10 ------------------------------------------------------------------------ r3678 | hardaker | 2007-09-13 09:38:59 -0700 (Thu, 13 Sep 2007) | 1 line Changed paths: A /trunk/dnssec-tools/apps/mozilla/firefox-files/Makefile A /trunk/dnssec-tools/apps/mozilla/firefox-files/addpath A /trunk/dnssec-tools/apps/mozilla/firefox-files/patch.base A /trunk/dnssec-tools/apps/mozilla/firefox-files/paths A /trunk/dnssec-tools/apps/mozilla/firefox-files/removeinternal infrastructure for patch building ------------------------------------------------------------------------ r3677 | hardaker | 2007-09-13 09:38:06 -0700 (Thu, 13 Sep 2007) | 1 line Changed paths: A /trunk/dnssec-tools/apps/mozilla/firefox-files directory for building firefox patches ------------------------------------------------------------------------ r3676 | hardaker | 2007-09-13 07:23:05 -0700 (Thu, 13 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/Makefile.in fix mkpath ------------------------------------------------------------------------ r3675 | tewok | 2007-09-12 14:30:14 -0700 (Wed, 12 Sep 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pod M /trunk/dnssec-tools/tools/modules/rollrec.pod Pod mods. ------------------------------------------------------------------------ r3674 | tewok | 2007-09-12 14:28:34 -0700 (Wed, 12 Sep 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/BootStrap.pm M /trunk/dnssec-tools/tools/modules/defaults.pm M /trunk/dnssec-tools/tools/modules/dnssectools.pm M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/rolllog.pm M /trunk/dnssec-tools/tools/modules/rollrec.pm M /trunk/dnssec-tools/tools/modules/tooloptions.pm Pod mods. ------------------------------------------------------------------------ r3673 | hserus | 2007-09-12 07:34:31 -0700 (Wed, 12 Sep 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c Fix info message ------------------------------------------------------------------------ r3672 | hserus | 2007-09-11 10:26:28 -0700 (Tue, 11 Sep 2007) | 2 lines Changed paths: D /trunk/dnssec-tools/apps/thunderbird/Makefile D /trunk/dnssec-tools/apps/thunderbird/README D /trunk/dnssec-tools/apps/thunderbird/content D /trunk/dnssec-tools/apps/thunderbird/install.rdf D /trunk/dnssec-tools/apps/thunderbird/locale D /trunk/dnssec-tools/apps/thunderbird/skin A /trunk/dnssec-tools/apps/thunderbird/spfdnssec/Makefile (from /trunk/dnssec-tools/apps/thunderbird/Makefile:3669) A /trunk/dnssec-tools/apps/thunderbird/spfdnssec/README (from /trunk/dnssec-tools/apps/thunderbird/README:3669) A /trunk/dnssec-tools/apps/thunderbird/spfdnssec/content (from /trunk/dnssec-tools/apps/thunderbird/content:3669) R /trunk/dnssec-tools/apps/thunderbird/spfdnssec/content/spfdnssec (from /trunk/dnssec-tools/apps/thunderbird/content/spfdnssec:3671) A /trunk/dnssec-tools/apps/thunderbird/spfdnssec/install.rdf (from /trunk/dnssec-tools/apps/thunderbird/install.rdf:3671) A /trunk/dnssec-tools/apps/thunderbird/spfdnssec/locale (from /trunk/dnssec-tools/apps/thunderbird/locale:3671) A /trunk/dnssec-tools/apps/thunderbird/spfdnssec/skin (from /trunk/dnssec-tools/apps/thunderbird/skin:3671) Moved spfdnssec-related code into sub-directory within Thunderbird ------------------------------------------------------------------------ r3671 | hserus | 2007-09-11 10:20:33 -0700 (Tue, 11 Sep 2007) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/thunderbird/spfdnssec Added new directory for Thunderbird spfdnssec patch code ------------------------------------------------------------------------ r3670 | tewok | 2007-09-11 09:53:19 -0700 (Tue, 11 Sep 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval_check_conf.1 M /trunk/dnssec-tools/validator/doc/libval_check_conf.pod M /trunk/dnssec-tools/validator/doc/val_gethostbyname.3 M /trunk/dnssec-tools/validator/doc/val_gethostbyname.pod Pod mods. ------------------------------------------------------------------------ r3669 | hserus | 2007-09-11 09:08:36 -0700 (Tue, 11 Sep 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/spfmilter-dnssec-howto.txt Remove references to version number ------------------------------------------------------------------------ r3668 | tewok | 2007-09-11 08:52:32 -0700 (Tue, 11 Sep 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/doc/dnsval.conf.3 M /trunk/dnssec-tools/validator/doc/getaddr.1 M /trunk/dnssec-tools/validator/doc/gethost.1 M /trunk/dnssec-tools/validator/doc/libsres.3 M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod M /trunk/dnssec-tools/validator/doc/libval_check_conf.1 M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.3 M /trunk/dnssec-tools/validator/doc/val_gethostbyname.3 M /trunk/dnssec-tools/validator/doc/val_gethostbyname.pod M /trunk/dnssec-tools/validator/doc/val_query.3 M /trunk/dnssec-tools/validator/doc/val_query.pod M /trunk/dnssec-tools/validator/doc/validate.1 Pod mods. ------------------------------------------------------------------------ r3667 | hserus | 2007-09-11 08:08:13 -0700 (Tue, 11 Sep 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt Update to build with latest libval ------------------------------------------------------------------------ r3666 | hserus | 2007-09-11 07:45:08 -0700 (Tue, 11 Sep 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/spfmilter-0.97_dnssec_patch.txt Changes to work with latest version of libval ------------------------------------------------------------------------ r3665 | hserus | 2007-09-11 07:28:51 -0700 (Tue, 11 Sep 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/README reflect the recent file renames ------------------------------------------------------------------------ r3664 | hserus | 2007-09-11 07:14:50 -0700 (Tue, 11 Sep 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Initialize global option members to correct values ------------------------------------------------------------------------ r3663 | hserus | 2007-09-11 07:12:03 -0700 (Tue, 11 Sep 2007) | 2 lines Changed paths: D /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.6_dnssec_patch.txt A /trunk/dnssec-tools/apps/sendmail/sendmail-8.14.1_dnssec_patch.txt Upgrade patch to 8.14.1 ------------------------------------------------------------------------ r3662 | hserus | 2007-09-11 07:09:46 -0700 (Tue, 11 Sep 2007) | 2 lines Changed paths: D /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.x_dnssec_howto.txt A /trunk/dnssec-tools/apps/sendmail/sendmail-dnssec-howto.txt D /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_howto.txt A /trunk/dnssec-tools/apps/sendmail/spfmilter-dnssec-howto.txt Make howto filenames version agnostic ------------------------------------------------------------------------ r3661 | hserus | 2007-09-11 07:02:12 -0700 (Tue, 11 Sep 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2/libspf2-1.0.4_dnssec_patch.txt M /trunk/dnssec-tools/apps/libspf2/libspf2-1.2.5_dnssec_patch.txt Try to get libspf2 patch to work with current libval code ------------------------------------------------------------------------ r3660 | hserus | 2007-09-11 07:01:30 -0700 (Tue, 11 Sep 2007) | 2 lines Changed paths: D /trunk/dnssec-tools/apps/libspf2/libspf2-1.0.4_dnssec_howto.txt D /trunk/dnssec-tools/apps/libspf2/libspf2-1.2.5_dnssec_howto.txt A /trunk/dnssec-tools/apps/libspf2/libspf2_dnssec_howto.txt replaced multiple howtos with a single one ------------------------------------------------------------------------ r3659 | tewok | 2007-09-10 19:03:47 -0700 (Mon, 10 Sep 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libsres.pod M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.pod M /trunk/dnssec-tools/validator/doc/val_gethostbyname.pod M /trunk/dnssec-tools/validator/doc/val_query.pod M /trunk/dnssec-tools/validator/doc/validate.pod Pod mods. ------------------------------------------------------------------------ r3658 | tewok | 2007-09-10 13:25:35 -0700 (Mon, 10 Sep 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libsres.pod M /trunk/dnssec-tools/validator/doc/libval.pod M /trunk/dnssec-tools/validator/doc/libval_check_conf.pod Pod mods. ------------------------------------------------------------------------ r3657 | tewok | 2007-09-10 11:59:22 -0700 (Mon, 10 Sep 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod M /trunk/dnssec-tools/validator/doc/getaddr.pod M /trunk/dnssec-tools/validator/doc/gethost.pod Pod mods. ------------------------------------------------------------------------ r3656 | tewok | 2007-09-10 10:23:24 -0700 (Mon, 10 Sep 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper Pod mods. ------------------------------------------------------------------------ r3655 | tewok | 2007-09-10 10:18:11 -0700 (Mon, 10 Sep 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod Pod mods. ------------------------------------------------------------------------ r3654 | tewok | 2007-09-10 10:11:10 -0700 (Mon, 10 Sep 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec-tools/blinkenlights.conf.pod Pod mod. ------------------------------------------------------------------------ r3653 | tewok | 2007-09-10 09:46:35 -0700 (Mon, 10 Sep 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts Pod mod. ------------------------------------------------------------------------ r3652 | tewok | 2007-09-10 09:22:51 -0700 (Mon, 10 Sep 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow Pod mods. ------------------------------------------------------------------------ r3651 | tewok | 2007-09-10 08:25:42 -0700 (Mon, 10 Sep 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/podtrans Added a -help option. Handle bad options better. ------------------------------------------------------------------------ r3650 | tewok | 2007-09-10 08:14:28 -0700 (Mon, 10 Sep 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/podmantex Added some Latex-specific character conversions. ------------------------------------------------------------------------ r3647 | hardaker | 2007-09-07 16:56:01 -0700 (Fri, 07 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/aclocal.m4 M /trunk/dnssec-tools/config.sub M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/ltmain.sh M /trunk/dnssec-tools/validator/aclocal.m4 M /trunk/dnssec-tools/validator/config.sub M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/ltmain.sh update libtool components to matching versions ------------------------------------------------------------------------ r3646 | hardaker | 2007-09-07 16:08:49 -0700 (Fri, 07 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/Makefile.PL M /trunk/dnssec-tools/tools/donuts/donuts add dnssec-tools into the install and use path ------------------------------------------------------------------------ r3645 | hardaker | 2007-09-07 16:06:48 -0700 (Fri, 07 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/Makefile.in make full validator test cases path to include DESTDIR ------------------------------------------------------------------------ r3644 | hardaker | 2007-09-07 16:02:34 -0700 (Fri, 07 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/Makefile.in PROPERLY escape a dollar sign ------------------------------------------------------------------------ r3643 | hardaker | 2007-09-07 15:58:14 -0700 (Fri, 07 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/Makefile.in escape a non-make dollar sign ------------------------------------------------------------------------ r3642 | hardaker | 2007-09-07 15:57:30 -0700 (Fri, 07 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/Makefile.PL use PM_FILTER to set script paths ------------------------------------------------------------------------ r3641 | hardaker | 2007-09-07 15:55:27 -0700 (Fri, 07 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/Makefile.in define MKPATH ------------------------------------------------------------------------ r3640 | hardaker | 2007-09-07 15:20:24 -0700 (Fri, 07 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/Makefile.in attempt at proper build deps when perl modules are excluded ------------------------------------------------------------------------ r3639 | hardaker | 2007-09-07 14:16:22 -0700 (Fri, 07 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt Added a rule to test for broken keys generated by a broken OpenSSL ------------------------------------------------------------------------ r3638 | hserus | 2007-09-07 08:00:48 -0700 (Fri, 07 Sep 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/configure Use the configure script generated by autoconf version 2.59 ------------------------------------------------------------------------ r3637 | rstory | 2007-09-06 11:50:33 -0700 (Thu, 06 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_crypto.c use crypto/sha2.h if available ------------------------------------------------------------------------ r3636 | rstory | 2007-09-06 11:50:08 -0700 (Thu, 06 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator-config.h.in check for crypto/sha2.h header ------------------------------------------------------------------------ r3635 | rstory | 2007-09-06 11:46:24 -0700 (Thu, 06 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/getaddr.c use ifdefs around defines that might be missing ------------------------------------------------------------------------ r3634 | rstory | 2007-09-06 10:49:49 -0700 (Thu, 06 Sep 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c move unlock a little earlier to prevent deadlock ------------------------------------------------------------------------ r3633 | tewok | 2007-09-04 08:25:12 -0700 (Tue, 04 Sep 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Fixed a comment. ------------------------------------------------------------------------ r3632 | tewok | 2007-08-31 19:38:35 -0700 (Fri, 31 Aug 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Better handling of newly rolling zones. ------------------------------------------------------------------------ r3631 | tewok | 2007-08-31 13:54:35 -0700 (Fri, 31 Aug 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Handle rollerd's badzone command. Fix a typo. ------------------------------------------------------------------------ r3630 | tewok | 2007-08-31 13:52:20 -0700 (Fri, 31 Aug 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added a rollerd->blinkenlights command to notify of a bad zone. ------------------------------------------------------------------------ r3629 | tewok | 2007-08-31 12:21:02 -0700 (Fri, 31 Aug 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added an error message and background color for times when a zone is in error. ------------------------------------------------------------------------ r3628 | tewok | 2007-08-31 11:05:23 -0700 (Fri, 31 Aug 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Use absolute path for rollctl executions. Give rollctl error output if "rollctl -rollzone" or "rollctl -skipzone" fails. ------------------------------------------------------------------------ r3627 | tewok | 2007-08-31 10:42:58 -0700 (Fri, 31 Aug 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Validate some rollrec data when starting to roll a skipped zone. Re-order code for better rollrec file locking. Give better error when a rollrec file has bad data. ------------------------------------------------------------------------ r3626 | tewok | 2007-08-31 10:38:41 -0700 (Fri, 31 Aug 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Modified to give an error return code when problems occured. ------------------------------------------------------------------------ r3625 | tewok | 2007-08-31 10:36:52 -0700 (Fri, 31 Aug 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added the ROLLCMD_RC_BADZONEDATA error code. ------------------------------------------------------------------------ r3624 | tewok | 2007-08-30 19:47:33 -0700 (Thu, 30 Aug 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-demo.rollrec Fixed the location of example.com's keyrec file. ------------------------------------------------------------------------ r3623 | tewok | 2007-08-30 19:44:49 -0700 (Thu, 30 Aug 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd On skip-zone command, set the kskphase to 0 (as well as the zskphase.) Fix the zonestatus command's messages to allow for KSK rollover. ------------------------------------------------------------------------ r3622 | tewok | 2007-08-29 11:48:35 -0700 (Wed, 29 Aug 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Modified to use a configured absolute path for rollerd instead of casting our fate to the vagaries of the environment's path variable. ------------------------------------------------------------------------ r3621 | tewok | 2007-08-29 10:29:58 -0700 (Wed, 29 Aug 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/dnssectools.pm Added the dt_cmdpath() interface. ------------------------------------------------------------------------ r3620 | tewok | 2007-08-28 10:56:49 -0700 (Tue, 28 Aug 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Exit on bad options. ------------------------------------------------------------------------ r3619 | tewok | 2007-08-28 10:46:58 -0700 (Tue, 28 Aug 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/genkrf Exit on bad options. ------------------------------------------------------------------------ r3618 | tewok | 2007-08-28 10:41:51 -0700 (Tue, 28 Aug 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Improve handling of bad command line options. ------------------------------------------------------------------------ r3617 | tewok | 2007-08-28 07:45:41 -0700 (Tue, 28 Aug 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/rundemo Exit on bad options. ------------------------------------------------------------------------ r3616 | tewok | 2007-08-28 07:44:45 -0700 (Tue, 28 Aug 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/rundemo Exit on bad options. ------------------------------------------------------------------------ r3615 | tewok | 2007-08-28 07:16:38 -0700 (Tue, 28 Aug 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/timetrans Exit on bad options. ------------------------------------------------------------------------ r3614 | tewok | 2007-08-27 18:39:00 -0700 (Mon, 27 Aug 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/cleanarch M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtck M /trunk/dnssec-tools/tools/scripts/dtconf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rolllog M /trunk/dnssec-tools/tools/scripts/rollrec-editor M /trunk/dnssec-tools/tools/scripts/rollset Exit on invalid option. ------------------------------------------------------------------------ r3613 | tewok | 2007-08-27 13:13:10 -0700 (Mon, 27 Aug 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Exit on bad options. ------------------------------------------------------------------------ r3612 | tewok | 2007-08-27 13:05:49 -0700 (Mon, 27 Aug 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollchk Exit on bad option. ------------------------------------------------------------------------ r3611 | tewok | 2007-08-27 13:01:51 -0700 (Mon, 27 Aug 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollinit Change how exit-on-bad-opt happens. ------------------------------------------------------------------------ r3610 | tewok | 2007-08-27 12:56:21 -0700 (Mon, 27 Aug 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollinit Changed to exit on unknown option. ------------------------------------------------------------------------ r3609 | rstory | 2007-08-27 11:52:24 -0700 (Mon, 27 Aug 2007) | 1 line Changed paths: A /trunk/dnssec-tools/apps/openswan A /trunk/dnssec-tools/apps/openswan/README.dnssec A /trunk/dnssec-tools/apps/openswan/libval-thread.patch A /trunk/dnssec-tools/apps/openswan/libval.patch A /trunk/dnssec-tools/apps/openswan/makefile.patch readme/patches for openswan local dns validation ------------------------------------------------------------------------ r3608 | rstory | 2007-08-24 09:34:40 -0700 (Fri, 24 Aug 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/dist/dnssec-tools.spec remove TrustMan references remove patches that are now in source ------------------------------------------------------------------------ r3607 | hardaker | 2007-08-24 08:13:15 -0700 (Fri, 24 Aug 2007) | 1 line Changed paths: A /trunk/dnssec-tools/dist/dnssec-tools-donuts-perlmod-changes.patch A /trunk/dnssec-tools/dist/dnssec-tools-donuts-rules-paths.patch A /trunk/dnssec-tools/dist/dnssec-tools-linux-conf-paths-1.2.patch A /trunk/dnssec-tools/dist/dnssec-tools-maketestzone-bb.patch A /trunk/dnssec-tools/dist/dnssec-tools-validator-destdir-fixes.patch needed patches for the spec file ------------------------------------------------------------------------ r3606 | rstory | 2007-08-24 07:32:31 -0700 (Fri, 24 Aug 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c add ifdef for testing multi-threaded default ctx creation ------------------------------------------------------------------------ r3605 | rstory | 2007-08-24 07:28:28 -0700 (Fri, 24 Aug 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c fix deadlock when freeing default context ------------------------------------------------------------------------ r3604 | rstory | 2007-08-24 07:12:33 -0700 (Fri, 24 Aug 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c - use PTHREAD_MUTEX_INITIALIZER to eliminate race condition initializing mutex - when creating default context, hold lock until done creating context ------------------------------------------------------------------------ r3603 | hserus | 2007-08-23 14:18:31 -0700 (Thu, 23 Aug 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/ns_print.c M /trunk/dnssec-tools/validator/libsres/res_mkquery.c M /trunk/dnssec-tools/validator/libsres/res_mkquery.h Use RES_GET/PUT in place of NS_GET/PUT. These macros automatically increment the buf pointer as it reads or stores data. Also use u_int16_t class, u_int16_t type in the res_val_nmkquery prototype ------------------------------------------------------------------------ r3602 | hserus | 2007-08-23 14:15:18 -0700 (Thu, 23 Aug 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_support.h Add macros for RES_PUT16 and RES_PUT32 ------------------------------------------------------------------------ r3601 | rstory | 2007-08-22 10:26:40 -0700 (Wed, 22 Aug 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_crypto.c M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_parse.c M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_verify.c M /trunk/dnssec-tools/validator/libval/val_x_query.c use new internal header ------------------------------------------------------------------------ r3600 | rstory | 2007-08-22 10:25:22 -0700 (Wed, 22 Aug 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_mkquery.h dont define RES_USE_EDNS0 if it's already defined ------------------------------------------------------------------------ r3599 | rstory | 2007-08-22 10:24:27 -0700 (Wed, 22 Aug 2007) | 2 lines Changed paths: A /trunk/dnssec-tools/validator/include/validator/validator-internal.h M /trunk/dnssec-tools/validator/include/validator/validator.h move some structures to an internal, non-installed header ------------------------------------------------------------------------ r3598 | hardaker | 2007-08-22 07:34:27 -0700 (Wed, 22 Aug 2007) | 1 line Changed paths: M /trunk/dnssec-tools/dist/dnssec-tools.spec updated from the spec file checked into the fedora tree ------------------------------------------------------------------------ r3597 | hserus | 2007-08-21 14:01:20 -0700 (Tue, 21 Aug 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/Makefile.in D /trunk/dnssec-tools/validator/libsres/ns_netint.c M /trunk/dnssec-tools/validator/libsres/ns_print.c M /trunk/dnssec-tools/validator/libsres/res_mkquery.c Removed ns_netint.c. Used NS_PUT/GET in place of ns_put/get ------------------------------------------------------------------------ r3596 | tewok | 2007-08-20 18:03:56 -0700 (Mon, 20 Aug 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO M /trunk/dnssec-tools/tools/scripts/Makefile.PL M /trunk/dnssec-tools/tools/scripts/README Added entries for dtck. ------------------------------------------------------------------------ r3595 | tewok | 2007-08-20 17:55:42 -0700 (Mon, 20 Aug 2007) | 10 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtck Read from a config file, rather than just from __DATA__. If a dtck config file wasn't given, then we'll just look at the DNSSEC-Tools configuration file. Better reporting of problematic files. Renamed the master config file to dtck config file. Deleted a few debugging lines. Added a usage message. Improved the pod. ------------------------------------------------------------------------ r3594 | tewok | 2007-08-20 17:44:01 -0700 (Mon, 20 Aug 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Missing endtimes increase the error count. ------------------------------------------------------------------------ r3593 | hserus | 2007-08-20 14:17:01 -0700 (Mon, 20 Aug 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Account for NULL trust anchors when zone security expectation is validate ------------------------------------------------------------------------ r3592 | hserus | 2007-08-20 13:24:59 -0700 (Mon, 20 Aug 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_debug.c hack for res_sym_const should not be used on NetBSD systems ------------------------------------------------------------------------ r3591 | hserus | 2007-08-20 10:58:56 -0700 (Mon, 20 Aug 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/Makefile.in Add target for libval_check_conf ------------------------------------------------------------------------ r3590 | hserus | 2007-08-20 10:57:19 -0700 (Mon, 20 Aug 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/Makefile.in Added -D_GNU_SOURCE compile flag ------------------------------------------------------------------------ r3589 | tewok | 2007-08-17 13:43:02 -0700 (Fri, 17 Aug 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtck Added -defcon. Added processing of config files. Added more pod. ------------------------------------------------------------------------ r3588 | tewok | 2007-08-16 13:25:17 -0700 (Thu, 16 Aug 2007) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtck Added -list and -pretty options. Clarified use of -verbose and -quiet. Fixed -count. ------------------------------------------------------------------------ r3587 | tewok | 2007-08-15 12:06:41 -0700 (Wed, 15 Aug 2007) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtck Adjusted initial warning, yet again. Added rollrec checking. Renamed a few variables in checkfiles() for clarity. Added a file-type flag to runner(). Added a file-existence check to runner(). ------------------------------------------------------------------------ r3586 | hserus | 2007-08-02 09:17:42 -0700 (Thu, 02 Aug 2007) | 2 lines Changed paths: A /trunk/dnssec-tools/validator/doc/libval_check_conf.1 A /trunk/dnssec-tools/validator/doc/libval_check_conf.pod Add documentation for the libval_check_conf utility. ------------------------------------------------------------------------ r3585 | hserus | 2007-07-31 11:12:44 -0700 (Tue, 31 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Give detailed log message when duplicate policy labels are detected ------------------------------------------------------------------------ r3584 | hserus | 2007-07-31 11:09:51 -0700 (Tue, 31 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/libval_check_conf.c Set default debug level to 5 ------------------------------------------------------------------------ r3583 | hserus | 2007-07-31 11:04:59 -0700 (Tue, 31 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c remove stray newline character ------------------------------------------------------------------------ r3582 | hserus | 2007-07-31 10:54:54 -0700 (Tue, 31 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/etc/dnsval.conf Add sample global-options policy and a placeholder for other included files ------------------------------------------------------------------------ r3581 | hserus | 2007-07-31 10:48:12 -0700 (Tue, 31 Jul 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Moved definition for "global-policy" string to val_policy.h Define a new structure for specifying a list of dnsval.conf files. Each file has its own last-modified timstamp. Add this structure in place of the dnsval_conf member in val_context_t ------------------------------------------------------------------------ r3580 | hserus | 2007-07-31 10:47:39 -0700 (Tue, 31 Jul 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.h val_refresh_resolver_policy, val_refresh_root_hints and val_refresh_validator_policy now return an error code instead of void. ------------------------------------------------------------------------ r3579 | hserus | 2007-07-31 10:47:24 -0700 (Tue, 31 Jul 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c val_refresh_resolver_policy, val_refresh_root_hints and val_refresh_validator_policy now return an error code based on the locking status instead of void. Initialize dnsval.conf list instead of single element ------------------------------------------------------------------------ r3578 | hserus | 2007-07-31 10:47:03 -0700 (Tue, 31 Jul 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c val_refresh_resolver_policy, val_refresh_root_hints and val_refresh_validator_policy now return an error code instead of void. When checking if conf files have changed, look at all dnsval.conf files in the list maintained within val_context_t ------------------------------------------------------------------------ r3577 | hserus | 2007-07-31 10:46:47 -0700 (Tue, 31 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.h Add definitions for "global-policy" and "include" strings ------------------------------------------------------------------------ r3576 | hserus | 2007-07-31 10:46:27 -0700 (Tue, 31 Jul 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Recognize the "include" policy fragment in the dnsval.conf file Free up dnsval list structure in destroy_valpol() Parse all dnsval.conf files included using the "include" clause ------------------------------------------------------------------------ r3575 | hserus | 2007-07-31 09:48:20 -0700 (Tue, 31 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c initialize clock_skew to 0 ------------------------------------------------------------------------ r3574 | hserus | 2007-07-31 09:45:56 -0700 (Tue, 31 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h include for struct timeval definition ------------------------------------------------------------------------ r3573 | hserus | 2007-07-31 09:37:54 -0700 (Tue, 31 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/Makefile.in A /trunk/dnssec-tools/validator/apps/libval_check_conf.c Add dnsval.conf check program ------------------------------------------------------------------------ r3570 | tewok | 2007-07-19 10:50:31 -0700 (Thu, 19 Jul 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtck Added pod stubs for the fields in the master configuration file. Slightly modified the introductory warning. ------------------------------------------------------------------------ r3569 | tewok | 2007-07-19 05:52:14 -0700 (Thu, 19 Jul 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtck Small changes to take better advantage of -verbose. ------------------------------------------------------------------------ r3568 | tewok | 2007-07-18 18:08:46 -0700 (Wed, 18 Jul 2007) | 5 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/dtck Master DNSSEC-Tools data checking program. *Very* initial version, not ready for prime time. ------------------------------------------------------------------------ r3567 | tewok | 2007-07-17 14:06:16 -0700 (Tue, 17 Jul 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/keyarch Archived key paths are now saved in the keyrec files. Closed keyrec files when finished with them. ------------------------------------------------------------------------ r3566 | tewok | 2007-07-17 14:04:43 -0700 (Tue, 17 Jul 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/krfcheck Clarified an error message. ------------------------------------------------------------------------ r3565 | tewok | 2007-07-17 14:03:49 -0700 (Tue, 17 Jul 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Archived key paths are now saved in the keyrec files. Tiny bit of code reorganization. ------------------------------------------------------------------------ r3564 | lfoster | 2007-07-17 10:48:27 -0700 (Tue, 17 Jul 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman added a bunch of comments. ------------------------------------------------------------------------ r3563 | tewok | 2007-07-16 17:59:18 -0700 (Mon, 16 Jul 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Added pod descriptions for the script defaults. ------------------------------------------------------------------------ r3562 | tewok | 2007-07-16 17:43:04 -0700 (Mon, 16 Jul 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Added entries for the DNSSEC-Tools scripts. ------------------------------------------------------------------------ r3561 | tewok | 2007-07-16 07:29:29 -0700 (Mon, 16 Jul 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed option handling such that an invalid option will give an error and maybe exit. ------------------------------------------------------------------------ r3560 | tewok | 2007-07-16 07:27:39 -0700 (Mon, 16 Jul 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Added -zcopts as a standard option. Added the opts_onerr() interface. ------------------------------------------------------------------------ r3559 | tewok | 2007-07-13 12:58:12 -0700 (Fri, 13 Jul 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added pod and a usage line for -zcopts. ------------------------------------------------------------------------ r3558 | tewok | 2007-07-13 12:52:46 -0700 (Fri, 13 Jul 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Pick up config value for zonecheck-opts. ------------------------------------------------------------------------ r3557 | tewok | 2007-07-13 12:46:24 -0700 (Fri, 13 Jul 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added -zcopts support for passing options to the zone-checking program. Modified how zones are checked in order to cut back on the number of command executions. ------------------------------------------------------------------------ r3556 | tewok | 2007-07-13 11:27:32 -0700 (Fri, 13 Jul 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Added support for the kegyen-opts, zonecheck-opts, and zonesign-opts configuration fields. ------------------------------------------------------------------------ r3555 | tewok | 2007-07-13 10:37:30 -0700 (Fri, 13 Jul 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Added some pod describing keygen-opts, zonecheck-opts, and zonesign-opts. ------------------------------------------------------------------------ r3554 | lfoster | 2007-07-13 10:35:43 -0700 (Fri, 13 Jul 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Change all references to domain -> zone. ------------------------------------------------------------------------ r3553 | tewok | 2007-07-13 07:28:48 -0700 (Fri, 13 Jul 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Added keygen-opts, zonesign-opts, and zonecheck-opts. ------------------------------------------------------------------------ r3552 | tewok | 2007-07-13 07:02:47 -0700 (Fri, 13 Jul 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec-tools/README M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod Added stuff about the optinality of some fields. ------------------------------------------------------------------------ r3551 | tewok | 2007-07-12 14:30:02 -0700 (Thu, 12 Jul 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod Sorted a few options. Added entries for keygen-opts, zonecheck-opts, and zonesign-opts. ------------------------------------------------------------------------ r3550 | hardaker | 2007-07-11 15:57:19 -0700 (Wed, 11 Jul 2007) | 1 line Changed paths: M /branches/dnssec-tools-1-2/tools/donuts/rules/dnssec.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt mend the zone name check to deal with newer and older Net::DNS modules that change whether a trailing dot is returned in ->signame output ------------------------------------------------------------------------ r3549 | hardaker | 2007-07-11 15:55:58 -0700 (Wed, 11 Jul 2007) | 1 line Changed paths: M /branches/dnssec-tools-1-2/tools/maketestzone/maketestzone M /trunk/dnssec-tools/tools/maketestzone/maketestzone require Digest::BubbleBabble to work around a problem in Net::DNS::RR::DS ------------------------------------------------------------------------ r3548 | hardaker | 2007-07-11 15:55:12 -0700 (Wed, 11 Jul 2007) | 1 line Changed paths: M /branches/dnssec-tools-1-2/validator/apps/validator_selftest.c M /trunk/dnssec-tools/validator/apps/validator_selftest.c add sys/fcntl.h which is required at least on solaris ------------------------------------------------------------------------ r3547 | hardaker | 2007-07-11 15:54:21 -0700 (Wed, 11 Jul 2007) | 1 line Changed paths: M /branches/dnssec-tools-1-2/configure M /branches/dnssec-tools-1-2/configure.in M /branches/dnssec-tools-1-2/tools/modules/Makefile.PL M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in M /trunk/dnssec-tools/tools/modules/Makefile.PL Prevent perl c-binding modules to be built when --without-validator is specified ------------------------------------------------------------------------ r3546 | hserus | 2007-07-11 08:57:30 -0700 (Wed, 11 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c No longer treating VAL_LOCAL_ANSWER as trusted by default. ------------------------------------------------------------------------ r3545 | hserus | 2007-07-11 08:57:12 -0700 (Wed, 11 Jul 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c Set the validation status for local answers to one of either VAL_TRUSTED_ANSWER or VAL_LOCAL_ANSWER depending on the "trust-local-answers" global option. ------------------------------------------------------------------------ r3544 | hserus | 2007-07-11 08:56:45 -0700 (Wed, 11 Jul 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_policy.h Removed policies that we're not implementing. Add parse routines for dnsval.conf global options Add function to test if dnsval.conf defines local answers as trusted ------------------------------------------------------------------------ r3543 | hserus | 2007-07-11 08:56:19 -0700 (Wed, 11 Jul 2007) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Moved EDNS_UDP_SIZE from resolver.h to validator.h Removed policy definitions that we're not implementing. Added policy definitions for global options. Define new structure for global options; add it as a member of val_context_t. Added definitions for SHA-256 DS algorithm ------------------------------------------------------------------------ r3542 | hserus | 2007-07-11 08:56:06 -0700 (Wed, 11 Jul 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h Moved EDNS_UDP_SIZE from resolver.h to validator.h Allow edns0 buf size to be specified as an argument to query_send() ------------------------------------------------------------------------ r3541 | hserus | 2007-07-11 08:55:41 -0700 (Wed, 11 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libsres-implementation-notes M /trunk/dnssec-tools/validator/doc/libsres.3 M /trunk/dnssec-tools/validator/doc/libsres.pod M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libval/val_resquery.c Allow edns0 buf size to be specified as an argument to query_send() ------------------------------------------------------------------------ r3540 | hserus | 2007-07-11 08:54:14 -0700 (Wed, 11 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator-config.h.in M /trunk/dnssec-tools/validator/libval/val_crypto.c M /trunk/dnssec-tools/validator/libval/val_crypto.h M /trunk/dnssec-tools/validator/libval/val_parse.c M /trunk/dnssec-tools/validator/libval/val_verify.c Add support for SHA-256 DS algorithm ------------------------------------------------------------------------ r3539 | hserus | 2007-07-11 08:44:08 -0700 (Wed, 11 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_parse.c M /trunk/dnssec-tools/validator/libval/val_policy.c Replace atoi() with strtol() ------------------------------------------------------------------------ r3538 | hserus | 2007-07-11 08:28:20 -0700 (Wed, 11 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval.3 Removed the VAL_AC_LOCAL_ANSWER state ------------------------------------------------------------------------ r3537 | hserus | 2007-07-11 07:54:14 -0700 (Wed, 11 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Fixed typo ------------------------------------------------------------------------ r3536 | hserus | 2007-07-10 13:23:24 -0700 (Tue, 10 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap Represent DNS errors with black arrows ------------------------------------------------------------------------ r3535 | tewok | 2007-07-09 12:32:47 -0700 (Mon, 09 Jul 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO M /trunk/dnssec-tools/tools/scripts/Makefile.PL M /trunk/dnssec-tools/tools/scripts/README A /trunk/dnssec-tools/tools/scripts/dtconf Added the dtconf command for displaying the contents of the configuration file. ------------------------------------------------------------------------ r3534 | tewok | 2007-07-09 11:50:54 -0700 (Mon, 09 Jul 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Fixed the command name in the usage message. ------------------------------------------------------------------------ r3533 | marz | 2007-07-08 17:47:40 -0700 (Sun, 08 Jul 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Makefile.PL M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t support new defines ------------------------------------------------------------------------ r3532 | hserus | 2007-07-06 12:18:55 -0700 (Fri, 06 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/selftests.dist Use VAL_DNS_RESPONSE_ERROR in place of VAL_ERROR ------------------------------------------------------------------------ r3531 | hserus | 2007-07-06 12:17:45 -0700 (Fri, 06 Jul 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Use new status values from validator-api-04 Add new "proof" param to get_ac_trust, which controls the type of assertion (answer or proof) that is returned; use the proof to identify loops in DS nonexistence answers ------------------------------------------------------------------------ r3530 | hserus | 2007-07-06 12:09:59 -0700 (Fri, 06 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c USE new Q_ERROR status values instead of storing offsets to resolver errors ------------------------------------------------------------------------ r3529 | hserus | 2007-07-06 12:08:44 -0700 (Fri, 06 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c Handled newly defined types from validator-api-04 ------------------------------------------------------------------------ r3528 | hserus | 2007-07-06 12:07:15 -0700 (Fri, 06 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_x_query.c Return servfail as the rcode on error responses created in val_res_query() ------------------------------------------------------------------------ r3527 | hserus | 2007-07-06 12:06:20 -0700 (Fri, 06 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_query.c Use SR_HEADER_ERROR for all header errors in libsres ------------------------------------------------------------------------ r3526 | hserus | 2007-07-06 12:05:35 -0700 (Fri, 06 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c Use new validator status code definitions ------------------------------------------------------------------------ r3525 | hserus | 2007-07-06 12:04:35 -0700 (Fri, 06 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/include/validator/val_errors.h M /trunk/dnssec-tools/validator/include/validator/validator.h Renaming and re-arranging status codes. Sync'd up with latest validator API draft. ------------------------------------------------------------------------ r3524 | hserus | 2007-07-06 11:29:08 -0700 (Fri, 06 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.c Don't set qc_state if there was a parse error in cached data; simply pretend that data was not available. ------------------------------------------------------------------------ r3523 | hserus | 2007-07-06 11:13:55 -0700 (Fri, 06 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c Use VAL_LOCAL_ANSWER status if answer was obtained locally ------------------------------------------------------------------------ r3522 | hserus | 2007-07-06 11:11:08 -0700 (Fri, 06 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c Use VAL_AC_ALGORITHM_NOT_SUPPORTED in plac eof VAL_AC_UNKNOWN_ALGORITHM ------------------------------------------------------------------------ r3521 | hserus | 2007-07-06 11:09:06 -0700 (Fri, 06 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libsres.3 M /trunk/dnssec-tools/validator/doc/libsres.pod M /trunk/dnssec-tools/validator/doc/libval-implementation-notes M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod Bring pod in sync with draft-hayatnagarkar-dnsext-validator-api-04 ------------------------------------------------------------------------ r3520 | hserus | 2007-07-06 11:07:58 -0700 (Fri, 06 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Version that was submitted as draft-hayatnagarkar-dnsext-validator-api-04 ------------------------------------------------------------------------ r3517 | hserus | 2007-07-05 06:19:47 -0700 (Thu, 05 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_x_query.c Create the default NULL context in val_context.c ------------------------------------------------------------------------ r3516 | lfoster | 2007-07-04 11:55:29 -0700 (Wed, 04 Jul 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/getdnskeys pod mods. ------------------------------------------------------------------------ r3515 | hserus | 2007-07-04 09:03:22 -0700 (Wed, 04 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap Add an option for specifying a match string ------------------------------------------------------------------------ r3514 | hserus | 2007-07-04 09:02:58 -0700 (Wed, 04 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Do a better job of identifying the wildcard proof ------------------------------------------------------------------------ r3513 | hserus | 2007-07-04 09:02:35 -0700 (Wed, 04 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c Don't erase key status when we use a cached assertion ------------------------------------------------------------------------ r3512 | hserus | 2007-07-03 12:01:42 -0700 (Tue, 03 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap Allow user to specify ignore patterns ------------------------------------------------------------------------ r3511 | hserus | 2007-07-03 11:44:11 -0700 (Tue, 03 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap Make the nodes on the graph domain names instead of name server IP addresses ------------------------------------------------------------------------ r3510 | hserus | 2007-07-03 11:42:26 -0700 (Tue, 03 Jul 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c Add separator between different proof components ------------------------------------------------------------------------ r3509 | tewok | 2007-06-30 10:30:21 -0700 (Sat, 30 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Fixed grammar in a pod sentence. ------------------------------------------------------------------------ r3508 | tewok | 2007-06-29 13:59:19 -0700 (Fri, 29 Jun 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/Makefile Changed a target name. ------------------------------------------------------------------------ r3507 | tewok | 2007-06-29 10:40:57 -0700 (Fri, 29 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO M /trunk/dnssec-tools/tools/scripts/README Added entries for rollrec-editor. ------------------------------------------------------------------------ r3506 | tewok | 2007-06-29 10:39:41 -0700 (Fri, 29 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL Added an entry for rollrec-editor. ------------------------------------------------------------------------ r3505 | tewok | 2007-06-29 09:34:53 -0700 (Fri, 29 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Added a missing word to a comment. ------------------------------------------------------------------------ r3504 | tewok | 2007-06-29 09:27:20 -0700 (Fri, 29 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Sorted the exports. ------------------------------------------------------------------------ r3503 | tewok | 2007-06-29 08:33:12 -0700 (Fri, 29 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Changed how the configuration directory is gotten. ------------------------------------------------------------------------ r3502 | tewok | 2007-06-29 08:18:56 -0700 (Fri, 29 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Moved ps into $PS. ------------------------------------------------------------------------ r3501 | hserus | 2007-06-28 19:10:36 -0700 (Thu, 28 Jun 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c Change timestamp format ------------------------------------------------------------------------ r3500 | hserus | 2007-06-28 18:31:37 -0700 (Thu, 28 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c Check return values for val_parse_...() functions Display timestamps on log messages ------------------------------------------------------------------------ r3499 | hserus | 2007-06-28 18:31:25 -0700 (Thu, 28 Jun 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_crypto.c Removing trailing newline characters in log messages ------------------------------------------------------------------------ r3498 | hserus | 2007-06-28 18:31:06 -0700 (Thu, 28 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Check return values for val_parse_...() functions Use both ends of the NSEC span while determining the closest enclosure ------------------------------------------------------------------------ r3497 | hserus | 2007-06-28 18:30:53 -0700 (Thu, 28 Jun 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c Check return values for val_parse_...() functions ------------------------------------------------------------------------ r3496 | hserus | 2007-06-28 18:30:33 -0700 (Thu, 28 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_query.c perform proper clean-up of query when we have a valid answer Perform early timeout when DNS errors occur ------------------------------------------------------------------------ r3495 | hserus | 2007-06-28 18:30:11 -0700 (Thu, 28 Jun 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.h Add new function for performing early timeouts DNS errors occur ------------------------------------------------------------------------ r3494 | hserus | 2007-06-28 18:29:50 -0700 (Thu, 28 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c Adjust code for zero retry value Add new function for performing early timeouts DNS errors occur ------------------------------------------------------------------------ r3493 | hserus | 2007-06-28 18:29:19 -0700 (Thu, 28 Jun 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h changed default number of retries to 0 ------------------------------------------------------------------------ r3492 | tewok | 2007-06-27 12:06:57 -0700 (Wed, 27 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added pod for keyrec_defkrf(). ------------------------------------------------------------------------ r3491 | tewok | 2007-06-27 07:27:10 -0700 (Wed, 27 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Clarified an error message. ------------------------------------------------------------------------ r3490 | tewok | 2007-06-26 16:42:55 -0700 (Tue, 26 Jun 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Minor spacing fixes. Added a few small comments. Changed a LOG_ERR to LOG_INFO. ------------------------------------------------------------------------ r3489 | tewok | 2007-06-26 16:11:09 -0700 (Tue, 26 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/signset-editor Two minor formatting changes. ------------------------------------------------------------------------ r3488 | tewok | 2007-06-26 13:55:11 -0700 (Tue, 26 Jun 2007) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor Added a missing "use rolllog.pm". Changed a keyrec_close() call to the needed rollrec_close(). Deleted some obsolete debugging prints. Changed the remaining debugging prints to use STDERR. ------------------------------------------------------------------------ r3487 | hserus | 2007-06-26 13:34:50 -0700 (Tue, 26 Jun 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.h Add new check_wildcard param to check_anc_proof() prototype ------------------------------------------------------------------------ r3486 | hserus | 2007-06-26 13:34:01 -0700 (Tue, 26 Jun 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Try verifying more of the proof-of-nonexistence before claiming that it matches via ANC Correctly differentiate between missing proofs and proofs containing both NSEC and NSEC3 recs Display appropriate message when ask_resolver() or ask_cache() get a error response Properly identify timeouts of trust data so that assertion status can change back to VAL_AC_WAIT_FOR_TRUST ------------------------------------------------------------------------ r3485 | hserus | 2007-06-26 13:20:47 -0700 (Tue, 26 Jun 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.c Don't match a CNAME/DNAME for an RRSIG query ------------------------------------------------------------------------ r3484 | hserus | 2007-06-26 13:19:32 -0700 (Tue, 26 Jun 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_query.c Continue to ask other name servers if we see some error rcode in the response ------------------------------------------------------------------------ r3483 | tewok | 2007-06-26 12:48:51 -0700 (Tue, 26 Jun 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollchk Added some file checking. Added a "use" of rolllog.pm. ------------------------------------------------------------------------ r3482 | tewok | 2007-06-26 11:11:04 -0700 (Tue, 26 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Added a missing period to a comment. ------------------------------------------------------------------------ r3481 | lfoster | 2007-06-26 10:34:03 -0700 (Tue, 26 Jun 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman only add keys to be removed to the %remkeys struct if they are not already there. ------------------------------------------------------------------------ r3480 | lfoster | 2007-06-26 08:52:18 -0700 (Tue, 26 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Options clarification in the pod. ------------------------------------------------------------------------ r3479 | lfoster | 2007-06-26 08:08:52 -0700 (Tue, 26 Jun 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Fixed a bug where keys slated for removal hang around waiting for removal after they have actually been removed from the config files. ------------------------------------------------------------------------ r3478 | lfoster | 2007-06-26 07:41:08 -0700 (Tue, 26 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Fix copyright dates. ------------------------------------------------------------------------ r3477 | tewok | 2007-06-26 07:31:43 -0700 (Tue, 26 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/krfcheck Fixed indentation on an error block. ------------------------------------------------------------------------ r3476 | lfoster | 2007-06-25 14:12:25 -0700 (Mon, 25 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Clarify the options' short names. ------------------------------------------------------------------------ r3475 | tewok | 2007-06-25 08:52:01 -0700 (Mon, 25 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/genkrf Added a few vars for standard system commands. ------------------------------------------------------------------------ r3474 | tewok | 2007-06-25 08:40:30 -0700 (Mon, 25 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/fixkrf Fixed a typo. ------------------------------------------------------------------------ r3473 | tewok | 2007-06-22 08:05:02 -0700 (Fri, 22 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/cleanarch M /trunk/dnssec-tools/tools/scripts/rollerd Added periods to the end of the last sentence in the initial copyright note. ------------------------------------------------------------------------ r3472 | tewok | 2007-06-22 08:04:06 -0700 (Fri, 22 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rolllog M /trunk/dnssec-tools/tools/scripts/rollrec-editor M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/trustman M /trunk/dnssec-tools/tools/scripts/zonesigner Added periods to the end of the last sentence in the initial copyright note. ------------------------------------------------------------------------ r3471 | tewok | 2007-06-22 07:27:37 -0700 (Fri, 22 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/tachk Added a description to the record-type options section. ------------------------------------------------------------------------ r3470 | lfoster | 2007-06-21 09:41:54 -0700 (Thu, 21 Jun 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Removed all uses of persistent-data-file; this has been replaced by -anchor_data_file. More pod mods. ------------------------------------------------------------------------ r3469 | tewok | 2007-06-20 17:54:31 -0700 (Wed, 20 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/tachk Minor pod fixes. ------------------------------------------------------------------------ r3468 | tewok | 2007-06-20 15:04:23 -0700 (Wed, 20 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL M /trunk/dnssec-tools/tools/scripts/README Deleted references to TrustMan.pl. ------------------------------------------------------------------------ r3467 | tewok | 2007-06-20 11:38:39 -0700 (Wed, 20 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Pod edits. ------------------------------------------------------------------------ r3466 | lfoster | 2007-06-20 10:26:04 -0700 (Wed, 20 Jun 2007) | 3 lines Changed paths: D /trunk/dnssec-tools/tools/scripts/TrustMan.pl Delete TrustMan.pl, it is no longer pertinent. See instead trustman (all lower case). ------------------------------------------------------------------------ r3465 | lfoster | 2007-06-20 09:36:09 -0700 (Wed, 20 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Implement usage of stored orgttl and sigexp for zones when a query fails, so retry time can be computed from those values. ------------------------------------------------------------------------ r3464 | hserus | 2007-06-20 09:04:17 -0700 (Wed, 20 Jun 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c Authentication chain information is now being logged in val_resolve_and_check() ------------------------------------------------------------------------ r3463 | hserus | 2007-06-20 09:02:09 -0700 (Wed, 20 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_x_query.c Log authentication chain information before we return from val_resolve_and_check() instead of outside this function. ------------------------------------------------------------------------ r3462 | hserus | 2007-06-19 11:59:23 -0700 (Tue, 19 Jun 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap Modified so that it can run over log files ------------------------------------------------------------------------ r3461 | hserus | 2007-06-18 08:28:05 -0700 (Mon, 18 Jun 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_policy.c Add a log message ------------------------------------------------------------------------ r3460 | tewok | 2007-06-15 13:49:28 -0700 (Fri, 15 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Deleted a bit of dead code. ------------------------------------------------------------------------ r3459 | tewok | 2007-06-15 13:43:52 -0700 (Fri, 15 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Changed a hard path reference to a variable. ------------------------------------------------------------------------ r3458 | hserus | 2007-06-14 15:33:59 -0700 (Thu, 14 Jun 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c Set correct label value during context creation ------------------------------------------------------------------------ r3455 | tewok | 2007-06-13 14:57:09 -0700 (Wed, 13 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Pod tweak. ------------------------------------------------------------------------ r3454 | lfoster | 2007-06-13 13:44:21 -0700 (Wed, 13 Jun 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman create structure to save initial ottl and sigexp when queries are done, so this info can be used to compute a retry time in case of a future query failure to the same zone. ------------------------------------------------------------------------ r3453 | tewok | 2007-06-13 10:02:49 -0700 (Wed, 13 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rollrec-editor M /trunk/dnssec-tools/tools/scripts/rollset Fallout from moving the logging interfaces into rolllog.pm. ------------------------------------------------------------------------ r3452 | tewok | 2007-06-13 09:37:16 -0700 (Wed, 13 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Fallout from moving the logging interfaces into rolllog.pm. ------------------------------------------------------------------------ r3451 | tewok | 2007-06-13 09:21:23 -0700 (Wed, 13 Jun 2007) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/modules/rolllog.pm M /trunk/dnssec-tools/tools/modules/rollmgr.pm Moved the logging interfaces into their own module. ------------------------------------------------------------------------ r3450 | tewok | 2007-06-12 12:22:29 -0700 (Tue, 12 Jun 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor Reorganized the data at the beginning of the command. Deleted an unused function. ------------------------------------------------------------------------ r3449 | tewok | 2007-06-12 08:49:53 -0700 (Tue, 12 Jun 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor Updated the text in the help window to reflect the current state of the pod. Explained why some variables need deletion. ------------------------------------------------------------------------ r3448 | lfoster | 2007-06-12 08:29:25 -0700 (Tue, 12 Jun 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman add a test_revoke command line option so testing the revoke bit can be done without modifying code. ------------------------------------------------------------------------ r3447 | lfoster | 2007-06-12 08:26:04 -0700 (Tue, 12 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Fixed the "strict" violations and removed "no strict vars". ------------------------------------------------------------------------ r3446 | tewok | 2007-06-11 18:51:42 -0700 (Mon, 11 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor Added an options section to the pod. ------------------------------------------------------------------------ r3445 | tewok | 2007-06-11 18:16:45 -0700 (Mon, 11 Jun 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor Added filename filtering to all FileSelect calls. Added the -no-filter option. ------------------------------------------------------------------------ r3444 | tewok | 2007-06-11 12:18:42 -0700 (Mon, 11 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor Removed some obsolete comments. ------------------------------------------------------------------------ r3443 | tewok | 2007-06-11 12:07:09 -0700 (Mon, 11 Jun 2007) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor When opening a new file, we'll actually *use* the rollrecs in the new file, rather than continuing to look at the old file's rollrecs. Don't try to build an empty table of rollrecs. ------------------------------------------------------------------------ r3442 | tewok | 2007-06-11 11:26:45 -0700 (Mon, 11 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor Add some assurances that the file is actually a rollrec. ------------------------------------------------------------------------ r3441 | lfoster | 2007-06-11 10:20:01 -0700 (Mon, 11 Jun 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman put back the use strict dictum, but also use no strict "vars" until globals can be cleaned up. ------------------------------------------------------------------------ r3440 | tewok | 2007-06-11 08:40:59 -0700 (Mon, 11 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor Adjusted the Known Issues in the pod. ------------------------------------------------------------------------ r3439 | tewok | 2007-06-11 08:39:19 -0700 (Mon, 11 Jun 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor Deleted development-phase comments in file header. Fixed method of deleting an edit window created as a result of the New Rollrec command. ------------------------------------------------------------------------ r3438 | tewok | 2007-06-08 17:22:34 -0700 (Fri, 08 Jun 2007) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor Finished the pod. Deleted some unneeded debug messages. Added a known problem. Fixed the accelerator table. ------------------------------------------------------------------------ r3437 | tewok | 2007-06-08 16:58:46 -0700 (Fri, 08 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor Added pod for the View menu commmands. ------------------------------------------------------------------------ r3436 | tewok | 2007-06-08 16:40:10 -0700 (Fri, 08 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor Finished podding up the Commands menu. ------------------------------------------------------------------------ r3435 | tewok | 2007-06-08 15:26:47 -0700 (Fri, 08 Jun 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor Renamed the Rollrecs menu to the View menu. Continued adding new pod. ------------------------------------------------------------------------ r3434 | tewok | 2007-06-08 15:08:03 -0700 (Fri, 08 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor Fixed pod for commands in the File and Edit menus. ------------------------------------------------------------------------ r3433 | tewok | 2007-06-08 09:41:16 -0700 (Fri, 08 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor Added pod subsection on column layout in the button window. ------------------------------------------------------------------------ r3432 | tewok | 2007-06-08 08:18:32 -0700 (Fri, 08 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor Added good pod to the introduction section. ------------------------------------------------------------------------ r3431 | lfoster | 2007-06-07 15:59:10 -0700 (Thu, 07 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pod documentation mods. ------------------------------------------------------------------------ r3430 | lfoster | 2007-06-07 10:01:32 -0700 (Thu, 07 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Minor documentation changes. ------------------------------------------------------------------------ r3429 | lfoster | 2007-06-07 09:49:56 -0700 (Thu, 07 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Minor documentation change. ------------------------------------------------------------------------ r3428 | lfoster | 2007-06-07 09:44:18 -0700 (Thu, 07 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollchk Minor documentation change. ------------------------------------------------------------------------ r3427 | lfoster | 2007-06-07 09:37:32 -0700 (Thu, 07 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollinit Minor example change. ------------------------------------------------------------------------ r3426 | lfoster | 2007-06-07 09:28:50 -0700 (Thu, 07 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl minor documentation change. ------------------------------------------------------------------------ r3425 | tewok | 2007-06-07 08:13:41 -0700 (Thu, 07 Jun 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor Added code to ensure the merge command doesn't try to merge a file with itself. ------------------------------------------------------------------------ r3424 | hserus | 2007-06-07 07:23:50 -0700 (Thu, 07 Jun 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Move thread-specific debug messages into #ifndef VAL_NO_THREADS block ------------------------------------------------------------------------ r3421 | lfoster | 2007-06-06 14:06:28 -0700 (Wed, 06 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd minor documentation updates. ------------------------------------------------------------------------ r3420 | hserus | 2007-06-06 12:42:33 -0700 (Wed, 06 Jun 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Fix bug in check if type exists in bitmap ------------------------------------------------------------------------ r3419 | lfoster | 2007-06-06 12:12:05 -0700 (Wed, 06 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner documentation updates. ------------------------------------------------------------------------ r3418 | tewok | 2007-06-06 11:29:40 -0700 (Wed, 06 Jun 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor Added some slight modifications to the pod. Don't trust the pod yet, though, as it's still massively wrong. ------------------------------------------------------------------------ r3417 | tewok | 2007-06-06 11:15:54 -0700 (Wed, 06 Jun 2007) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollrec-editor Added the -columns option. Changed the initial warning message and removed the early exit() call. G'head and use this if you really want, but do so at your own peril... ------------------------------------------------------------------------ r3416 | tewok | 2007-06-06 10:54:50 -0700 (Wed, 06 Jun 2007) | 9 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/rollrec-editor New command: rollrec editor. This version is being checked in *only* for the safety of an off-site backup. DO NOT USE! ------------------------------------------------------------------------ r3415 | hserus | 2007-06-05 12:35:20 -0700 (Tue, 05 Jun 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c Display actual thread identifier in debug messages ------------------------------------------------------------------------ r3414 | hserus | 2007-06-05 12:29:33 -0700 (Tue, 05 Jun 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.h M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_resquery.h Instead of continuously polling libsres for data, block using the pselect() call ------------------------------------------------------------------------ r3413 | lfoster | 2007-06-01 12:38:55 -0700 (Fri, 01 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman added some verbose notifications ------------------------------------------------------------------------ r3412 | lfoster | 2007-06-01 11:25:03 -0700 (Fri, 01 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman added notification for key removal. ------------------------------------------------------------------------ r3411 | hserus | 2007-06-01 11:22:01 -0700 (Fri, 01 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.h M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_resquery.h Revert change# 3410. The code is still not MT-safe ------------------------------------------------------------------------ r3410 | hserus | 2007-06-01 07:55:35 -0700 (Fri, 01 Jun 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.h M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_resquery.h Instead of continuously polling libsres for data, block on a select() call ------------------------------------------------------------------------ r3409 | hserus | 2007-06-01 07:37:55 -0700 (Fri, 01 Jun 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Perfom correct check for VAL_QFLAGS_ANY Use available assertion status value when copying DLV to DS ------------------------------------------------------------------------ r3408 | hardaker | 2007-05-31 16:47:11 -0700 (Thu, 31 May 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/Makefile.in use proper destdir prefix when making paths and installing ------------------------------------------------------------------------ r3407 | marz | 2007-05-31 10:16:24 -0700 (Thu, 31 May 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs pass NULL string to context create by default ------------------------------------------------------------------------ r3406 | hserus | 2007-05-30 14:13:45 -0700 (Wed, 30 May 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap Keep code current with latest set of validator status codes. Use a single link to represent all answers with a given status code. ------------------------------------------------------------------------ r3405 | hserus | 2007-05-30 14:10:58 -0700 (Wed, 30 May 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c Display separate ASCII strings for the VAL_DONT_KNOW, VAL_BOGUS_PROVABLE and VAL_BAD_PROVABLY_UNSECURE conditions ------------------------------------------------------------------------ r3404 | hserus | 2007-05-30 14:10:41 -0700 (Wed, 30 May 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c - Extract relevant portions from add_to_qfq_chain() to create a new function check_in_qfq_chain() - Rename find_next_soa() to find_next_zonecut(); rename old find_next_zonecut() to find_next_zonecut_old() - In the new find_new_zonecut() function, don't issue SOA queries if we already have answers for the DNSKEY or DS records - Continue to evaluate status for authentication chain elements even if some parent element is known to be provably insecure ------------------------------------------------------------------------ r3403 | hserus | 2007-05-30 14:09:51 -0700 (Wed, 30 May 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Define new flag for all bits set ------------------------------------------------------------------------ r3402 | hserus | 2007-05-25 14:31:02 -0700 (Fri, 25 May 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml still more typos ------------------------------------------------------------------------ r3401 | hserus | 2007-05-25 14:15:41 -0700 (Fri, 25 May 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Fix more typos ------------------------------------------------------------------------ r3400 | hserus | 2007-05-25 13:44:20 -0700 (Fri, 25 May 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml More updates to the validator api ------------------------------------------------------------------------ r3399 | lfoster | 2007-05-25 09:18:54 -0700 (Fri, 25 May 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman re-implemented notifications to syslog and via mail when keys are added or revoked. ------------------------------------------------------------------------ r3398 | hserus | 2007-05-24 08:01:46 -0700 (Thu, 24 May 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml First pass at trying to bring the validator API in sync with the latest set of changes to libval ------------------------------------------------------------------------ r3397 | hserus | 2007-05-24 08:01:10 -0700 (Thu, 24 May 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/dnsval.conf.3 M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod Add description for val_add_valpolicy() and val_remove_valpolicy() ------------------------------------------------------------------------ r3396 | hserus | 2007-05-24 07:49:51 -0700 (Thu, 24 May 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_verify.c Slight tweaking of log messages ------------------------------------------------------------------------ r3395 | hserus | 2007-05-24 07:46:17 -0700 (Thu, 24 May 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.h Update val_add_valpolicy() so that we return the policy handle Add new val_remove_valpolicy() function ------------------------------------------------------------------------ r3394 | hserus | 2007-05-24 07:46:06 -0700 (Thu, 24 May 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Update val_add_valpolicy() so that we return the policy handle Add new val_remove_valpolicy() function ------------------------------------------------------------------------ r3393 | hserus | 2007-05-24 07:44:45 -0700 (Thu, 24 May 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/dnsval.conf.3 M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod Properly align the end statement character in the policy definitions. ------------------------------------------------------------------------ r3392 | hserus | 2007-05-24 07:43:45 -0700 (Thu, 24 May 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod Added description for VAL_BOGUS_PROVABLE ------------------------------------------------------------------------ r3391 | hserus | 2007-05-24 07:42:54 -0700 (Thu, 24 May 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval-implementation-notes Pretty up some of the ASCII art ------------------------------------------------------------------------ r3390 | hserus | 2007-05-24 07:41:56 -0700 (Thu, 24 May 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Define new policy for val_policy_entry_t Update prototype for val_add_valpolicy() Add prototype for val_remove_valpolicy() ------------------------------------------------------------------------ r3389 | hardaker | 2007-05-23 15:54:12 -0700 (Wed, 23 May 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm Patch from Matthias Witte to provide extended support for the GENERATE syntax ------------------------------------------------------------------------ r3388 | rstory | 2007-05-22 16:04:46 -0700 (Tue, 22 May 2007) | 4 lines Changed paths: A /trunk/dnssec-tools/dist/fink/dnssec-tools.info A /trunk/dnssec-tools/dist/fink/dnssec-tools.patch - initial packages for fink-ified dnssec-tools - currently for the 1.1.1 release - currently only packages validate, libsres and libval ------------------------------------------------------------------------ r3386 | rstory | 2007-05-22 16:03:04 -0700 (Tue, 22 May 2007) | 1 line Changed paths: A /trunk/dnssec-tools/dist/fink dir for fink package files ------------------------------------------------------------------------ r3385 | hardaker | 2007-05-22 16:02:55 -0700 (Tue, 22 May 2007) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/dnssecstatusOverlay.js sync ------------------------------------------------------------------------ r3383 | hardaker | 2007-05-22 15:59:18 -0700 (Tue, 22 May 2007) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS sync ------------------------------------------------------------------------ r3382 | hardaker | 2007-05-22 15:49:13 -0700 (Tue, 22 May 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone comment out the long record test; causes issues ------------------------------------------------------------------------ r3380 | rstory | 2007-05-22 15:40:40 -0700 (Tue, 22 May 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/Makefile.in change default test verbosity down another notch ------------------------------------------------------------------------ r3378 | rstory | 2007-05-22 15:27:41 -0700 (Tue, 22 May 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/Makefile.in - add ability to overrise debug verbosity for make test - change default level from 6 to 5, to account for recent shuffling of verbosity levels ------------------------------------------------------------------------ r3377 | hardaker | 2007-05-22 15:18:07 -0700 (Tue, 22 May 2007) | 1 line Changed paths: M /trunk/dnssec-tools/dist/dnssec-tools.spec update for a working fedora compliant 1.2 rpm ------------------------------------------------------------------------ r3375 | hardaker | 2007-05-22 15:16:44 -0700 (Tue, 22 May 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/Makefile.in M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in various fixes to allow validator-testcases to be installed in a user configurable place ------------------------------------------------------------------------ r3372 | hardaker | 2007-05-22 14:07:55 -0700 (Tue, 22 May 2007) | 1 line Changed paths: M /trunk/dnssec-tools/INSTALL M /trunk/dnssec-tools/README M /trunk/dnssec-tools/apps/README M /trunk/dnssec-tools/apps/mozilla/README M /trunk/dnssec-tools/apps/sendmail/README M /trunk/dnssec-tools/apps/thunderbird/README M /trunk/dnssec-tools/apps/thunderbird/content/spfdnssec/spfDnssecOverlay.xul M /trunk/dnssec-tools/podmantex M /trunk/dnssec-tools/podtrans M /trunk/dnssec-tools/tools/README M /trunk/dnssec-tools/tools/dnspktflow/Makefile.PL M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/donuts/Makefile.PL M /trunk/dnssec-tools/tools/donuts/Rule.pm M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/donuts/donutsd M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap M /trunk/dnssec-tools/tools/linux/ifup-dyn-dns/README M /trunk/dnssec-tools/tools/logwatch/README M /trunk/dnssec-tools/tools/maketestzone/Makefile.PL M /trunk/dnssec-tools/tools/maketestzone/maketestzone M /trunk/dnssec-tools/tools/mapper/Makefile.PL M /trunk/dnssec-tools/tools/mapper/mapper M /trunk/dnssec-tools/tools/modules/Makefile.PL M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm M /trunk/dnssec-tools/tools/modules/README M /trunk/dnssec-tools/tools/modules/rollrec.pm M /trunk/dnssec-tools/tools/modules/tests/Makefile.PL M /trunk/dnssec-tools/tools/modules/tests/test-conf M /trunk/dnssec-tools/tools/modules/tests/test-keyrec M /trunk/dnssec-tools/tools/modules/tests/test-rollmgr M /trunk/dnssec-tools/tools/modules/tests/test-rollrec M /trunk/dnssec-tools/tools/modules/tests/test-timetrans M /trunk/dnssec-tools/tools/modules/tests/test-toolopts1 M /trunk/dnssec-tools/tools/modules/tests/test-toolopts2 M /trunk/dnssec-tools/tools/modules/tests/test-toolopts3 M /trunk/dnssec-tools/tools/modules/timetrans.pm M /trunk/dnssec-tools/tools/scripts/Makefile.PL M /trunk/dnssec-tools/tools/scripts/README M /trunk/dnssec-tools/tools/scripts/TrustMan.pl M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/trustman copyright year change ------------------------------------------------------------------------ r3371 | hardaker | 2007-05-22 14:02:53 -0700 (Tue, 22 May 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/maketestzone/maketestzone M /trunk/dnssec-tools/tools/mapper/mapper M /trunk/dnssec-tools/tools/scripts/TrustMan.pl M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/tests/test-kskroll version 1.2 stamp ------------------------------------------------------------------------ r3368 | hardaker | 2007-05-22 13:58:35 -0700 (Tue, 22 May 2007) | 1 line Changed paths: M /trunk/dnssec-tools/ChangeLog M /trunk/dnssec-tools/NEWS update for 1.2 ------------------------------------------------------------------------ r3367 | hardaker | 2007-05-22 13:33:09 -0700 (Tue, 22 May 2007) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/README wording update ------------------------------------------------------------------------ r3366 | hardaker | 2007-05-22 13:32:07 -0700 (Tue, 22 May 2007) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/dnssecstatusOverlay.js remove unneeded functions ------------------------------------------------------------------------ r3365 | hardaker | 2007-05-22 13:31:22 -0700 (Tue, 22 May 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone max length text records ------------------------------------------------------------------------ r3363 | tewok | 2007-05-21 12:03:35 -0700 (Mon, 21 May 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/cleanarch M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/keyarch M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/zonesigner Updated the DNSSEC-Tools version. ------------------------------------------------------------------------ r3362 | tewok | 2007-05-21 12:01:01 -0700 (Mon, 21 May 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rolllog Added version information and -Version option. Reordered option checking for proper behavior. ------------------------------------------------------------------------ r3361 | tewok | 2007-05-20 16:07:58 -0700 (Sun, 20 May 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added the rollmgr_loglevels() interface. Fixed some pod formatting. ------------------------------------------------------------------------ r3360 | hserus | 2007-05-18 11:34:38 -0700 (Fri, 18 May 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.h Updated date on copyright notice. Moved the fix_glue function from val_assertion.c to val_resquery.c Removed definitions for some static functions ------------------------------------------------------------------------ r3359 | hserus | 2007-05-18 11:34:20 -0700 (Fri, 18 May 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.h Updated date on copyright notice. Moved check_label_count() to val_verfy.c Moved prepare_empty_nxdomain() to val_resquery.c ------------------------------------------------------------------------ r3358 | hserus | 2007-05-18 11:33:59 -0700 (Fri, 18 May 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Updated date on copyright notice. Add some more comments and log messages Moved the fix_glue function from val_assertion.c to val_resquery.c ------------------------------------------------------------------------ r3357 | hserus | 2007-05-18 11:33:35 -0700 (Fri, 18 May 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.c Updated date on copyright notice. Moved check_label_count() to val_verfy.c Moved prepare_empty_nxdomain() to val_resquery.c ------------------------------------------------------------------------ r3356 | hserus | 2007-05-18 11:33:01 -0700 (Fri, 18 May 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Updated date on copyright notice. Add some more comments and log messages In functions that use the val_internal_result structure, use the query flags from the result structure Move the fix_glue function to val_resquery.c ------------------------------------------------------------------------ r3355 | hserus | 2007-05-18 11:32:35 -0700 (Fri, 18 May 2007) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c Updated date on copyright notice. Add some more comments and log messages Remove unused functions Moved check_label_count from val_support.c to val_verify.c and made it static Correctly identify a delegation that does not link upward ------------------------------------------------------------------------ r3354 | hserus | 2007-05-18 11:31:59 -0700 (Fri, 18 May 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.h M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_cache.h M /trunk/dnssec-tools/validator/libval/val_context.h M /trunk/dnssec-tools/validator/libval/val_crypto.h M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_parse.h M /trunk/dnssec-tools/validator/libval/val_verify.h Updated date on copyright notice. ------------------------------------------------------------------------ r3353 | hserus | 2007-05-18 11:30:41 -0700 (Fri, 18 May 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_crypto.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_parse.c M /trunk/dnssec-tools/validator/libval/val_policy.c Updated date on copyright notice. Add some more comments and log messages ------------------------------------------------------------------------ r3352 | hserus | 2007-05-18 11:29:51 -0700 (Fri, 18 May 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_x_query.c Updated date on copyright notice. Add some more comments and log messages Changed ordering of some functions in the file Ensure that correct error value is returned from compose_answer() ------------------------------------------------------------------------ r3351 | hserus | 2007-05-18 09:37:45 -0700 (Fri, 18 May 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/NEWS Added note that DLV implementation is supposed to conform with draft-weiler-dnssec-dlv-02.txt ------------------------------------------------------------------------ r3350 | hserus | 2007-05-18 09:33:26 -0700 (Fri, 18 May 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c Update date on copyright notice Change logging level for authentication chain to LOG_NOTICE ------------------------------------------------------------------------ r3349 | hserus | 2007-05-18 09:32:08 -0700 (Fri, 18 May 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/getaddr.c M /trunk/dnssec-tools/validator/apps/gethost.c Update date on copyright notice ------------------------------------------------------------------------ r3348 | hserus | 2007-05-18 09:24:05 -0700 (Fri, 18 May 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod Added info on p_val_err() ------------------------------------------------------------------------ r3347 | hserus | 2007-05-18 09:22:38 -0700 (Fri, 18 May 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validate.1 M /trunk/dnssec-tools/validator/doc/validate.pod added: see also syslog ------------------------------------------------------------------------ r3346 | hserus | 2007-05-18 09:20:12 -0700 (Fri, 18 May 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_mkquery.h M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libsres/res_support.c M /trunk/dnssec-tools/validator/libsres/res_support.h Update date on copyright notice ------------------------------------------------------------------------ r3344 | lfoster | 2007-05-16 10:51:24 -0700 (Wed, 16 May 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman alphabetized the command line options (and documentation for them) so they're easier to keep track of. Added documentation where needed. ------------------------------------------------------------------------ r3343 | lfoster | 2007-05-16 10:23:18 -0700 (Wed, 16 May 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman improvements to documentation ------------------------------------------------------------------------ r3342 | lfoster | 2007-05-16 10:11:43 -0700 (Wed, 16 May 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman slight change to handling of persistent data file for new keys. ------------------------------------------------------------------------ r3341 | lfoster | 2007-05-16 10:03:11 -0700 (Wed, 16 May 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman removed all remaining TODO items, put them in a separate file instead. ------------------------------------------------------------------------ r3340 | rstory | 2007-05-16 09:58:02 -0700 (Wed, 16 May 2007) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/libspf2/libspf2-1.0.4_dnssec_guide.txt (from /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_guide.txt:3249) A /trunk/dnssec-tools/apps/libspf2/libspf2-1.0.4_dnssec_howto.txt (from /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_howto.txt:3249) A /trunk/dnssec-tools/apps/libspf2/libspf2-1.0.4_dnssec_patch.txt (from /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt:3249) A /trunk/dnssec-tools/apps/libspf2/libspf2-1.2.5_dnssec_guide.txt (from /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_guide.txt:3249) A /trunk/dnssec-tools/apps/libspf2/libspf2-1.2.5_dnssec_howto.txt (from /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_howto.txt:3249) A /trunk/dnssec-tools/apps/libspf2/libspf2-1.2.5_dnssec_patch.txt (from /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt:3249) D /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_guide.txt D /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_howto.txt D /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt D /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_guide.txt D /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_howto.txt D /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt move libspf2 patches to a subdir ------------------------------------------------------------------------ r3339 | rstory | 2007-05-16 09:55:24 -0700 (Wed, 16 May 2007) | 1 line Changed paths: A /trunk/dnssec-tools/apps/libspf2 dir for libspf2 patches ------------------------------------------------------------------------ r3338 | hardaker | 2007-05-15 17:19:03 -0700 (Tue, 15 May 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-addrinfo/Makefile.PL don't force intsall to a different man page name ------------------------------------------------------------------------ r3337 | hardaker | 2007-05-15 16:52:01 -0700 (Tue, 15 May 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Makefile.PL don't force intsall to a different man page name ------------------------------------------------------------------------ r3336 | hardaker | 2007-05-15 16:31:11 -0700 (Tue, 15 May 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/etc/Makefile.PL fix path to source location for dnssec-tools.conf ------------------------------------------------------------------------ r3335 | rstory | 2007-05-15 15:16:22 -0700 (Tue, 15 May 2007) | 1 line Changed paths: A /trunk/dnssec-tools/apps/proftpd/proftpd-1.3.x_dnssec_howto.txt A /trunk/dnssec-tools/apps/proftpd/proftpd-1.3.x_dnssec_patch.txt patch for proftpd dnssec validation ------------------------------------------------------------------------ r3334 | rstory | 2007-05-15 14:57:57 -0700 (Tue, 15 May 2007) | 1 line Changed paths: A /trunk/dnssec-tools/apps/proftpd new dir ------------------------------------------------------------------------ r3333 | rstory | 2007-05-15 14:57:16 -0700 (Tue, 15 May 2007) | 1 line Changed paths: M /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0_dnssec_patch.txt fix minor typo so dnssec is disabled by default, as documented ------------------------------------------------------------------------ r3332 | tewok | 2007-05-15 14:37:05 -0700 (Tue, 15 May 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Added rollrec_exists(). Reordered some of the interface descriptions in the pod. ------------------------------------------------------------------------ r3331 | hardaker | 2007-05-15 12:35:00 -0700 (Tue, 15 May 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure updated output text to match file being talked about ------------------------------------------------------------------------ r3330 | hardaker | 2007-05-15 12:34:40 -0700 (Tue, 15 May 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman make Net::DNS::SEC optional with a nicer warning ------------------------------------------------------------------------ r3329 | hardaker | 2007-05-15 12:34:11 -0700 (Tue, 15 May 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure.in updated output text to match file being talked about ------------------------------------------------------------------------ r3328 | tewok | 2007-05-15 12:18:01 -0700 (Tue, 15 May 2007) | 24 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-demo.rollrec Changed example.com from a skip to a roll. Added directory entries to dummy.com and example.com. =================================================================== --- save-demo.rollrec (revision 3213) +++ save-demo.rollrec (working copy) @@ -2,13 +2,15 @@ roll "dummy.com" zonefile "dummy.com.signed" keyrec "dummy.com.krf" + directory "dir-dummy" maxttl "60" display "1" phasestart "Mon Sep 11 13:21:55 2006" -skip "example.com" +roll "example.com" zonefile "example.com.signed" keyrec "example.com.krf" + directory "/tmp/dir-example" maxttl "60" display "1" phasestart "Mon Sep 11 13:22:17 2006" ------------------------------------------------------------------------ r3327 | tewok | 2007-05-15 12:16:34 -0700 (Tue, 15 May 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/README Fixed copyright date. ------------------------------------------------------------------------ r3326 | tewok | 2007-05-15 12:15:53 -0700 (Tue, 15 May 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/Makefile Fixed copyright date. Added subdirectories. ------------------------------------------------------------------------ r3325 | hardaker | 2007-05-15 12:12:00 -0700 (Tue, 15 May 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/Makefile.in use sysconfdir for mkpath instead of prefix ------------------------------------------------------------------------ r3324 | hardaker | 2007-05-15 12:11:33 -0700 (Tue, 15 May 2007) | 1 line Changed paths: M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in version number change => 1.2 ------------------------------------------------------------------------ r3323 | rstory | 2007-05-15 08:33:50 -0700 (Tue, 15 May 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c - set VAL_LOCAL_ANSWER when NI_NUMERICHOST set for val_getnameinfo - use unsigned char when printing ipaddr strings ------------------------------------------------------------------------ r3322 | rstory | 2007-05-11 13:29:40 -0700 (Fri, 11 May 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/dev-util/find-dns-calls - refine regexp to exclude false positives by looking for '(' after func name - search headers too ------------------------------------------------------------------------ r3321 | rstory | 2007-05-11 13:04:45 -0700 (Fri, 11 May 2007) | 1 line Changed paths: M /trunk/dnssec-tools/configure update for new configure.in ------------------------------------------------------------------------ r3320 | rstory | 2007-05-09 12:53:02 -0700 (Wed, 09 May 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dev-util/find-dns-calls exclude functions that have a prefix on a dns name (eg my_req_query) ------------------------------------------------------------------------ r3319 | lfoster | 2007-05-09 11:21:23 -0700 (Wed, 09 May 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman implement query failure retry time. ------------------------------------------------------------------------ r3318 | rstory | 2007-05-09 10:39:43 -0700 (Wed, 09 May 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dev-util/find-dns-calls fix typo in var name ------------------------------------------------------------------------ r3317 | rstory | 2007-05-09 08:42:32 -0700 (Wed, 09 May 2007) | 1 line Changed paths: A /trunk/dnssec-tools/tools/dev-util/find-dns-calls simple script to search for dns calls in C source code ------------------------------------------------------------------------ r3316 | rstory | 2007-05-09 08:40:54 -0700 (Wed, 09 May 2007) | 1 line Changed paths: A /trunk/dnssec-tools/tools/dev-util new dir for development utilities ------------------------------------------------------------------------ r3315 | rstory | 2007-05-09 08:40:09 -0700 (Wed, 09 May 2007) | 1 line Changed paths: D /trunk/dnssec-tools/tools/patches remove unused directory ------------------------------------------------------------------------ r3314 | rstory | 2007-05-09 08:38:37 -0700 (Wed, 09 May 2007) | 1 line Changed paths: D /trunk/dnssec-tools/tools/patches/README remove files prior to removing directory ------------------------------------------------------------------------ r3313 | tewok | 2007-05-08 12:27:41 -0700 (Tue, 08 May 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Modified the default location for roll_logfile to be in the local state directory instead of the DNSSEC-Tools configuration directory. ------------------------------------------------------------------------ r3312 | tewok | 2007-05-08 12:15:13 -0700 (Tue, 08 May 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm.in Added the getlocalstatedir() interface. ------------------------------------------------------------------------ r3311 | tewok | 2007-05-08 12:05:24 -0700 (Tue, 08 May 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/configure.in Added expanded_localstatedir. ------------------------------------------------------------------------ r3310 | lfoster | 2007-05-08 11:36:45 -0700 (Tue, 08 May 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman key removal from named.conf implemented. fixed some spacing issues in writing conf files. ------------------------------------------------------------------------ r3309 | lfoster | 2007-05-08 10:34:56 -0700 (Tue, 08 May 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Fixed bug in named revocation. Modified spacing done when adding new keys per Suresh's request. ------------------------------------------------------------------------ r3308 | hserus | 2007-05-08 08:35:33 -0700 (Tue, 08 May 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Don't sleep for negative seconds ------------------------------------------------------------------------ r3307 | lfoster | 2007-05-07 11:45:03 -0700 (Mon, 07 May 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Change creation of keys_to_verify so it is its own struct, not a pointer to keystorage. ------------------------------------------------------------------------ r3306 | hserus | 2007-05-07 09:01:08 -0700 (Mon, 07 May 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c Define new function for printing the return value from functions in an ASCII format ------------------------------------------------------------------------ r3305 | hserus | 2007-05-07 09:00:51 -0700 (Mon, 07 May 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Set query status to Q_ANSWERED when an empty nxdomain/nodata answer is received ------------------------------------------------------------------------ r3304 | hserus | 2007-05-07 09:00:18 -0700 (Mon, 07 May 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.h Store respondent_server information in empty nxdomain response ------------------------------------------------------------------------ r3303 | hserus | 2007-05-07 09:00:03 -0700 (Mon, 07 May 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.c Store respondent_server information in empty nxdomain response Check for NULL respondent_server in copy_rrset_rec() ------------------------------------------------------------------------ r3302 | hserus | 2007-05-07 08:59:45 -0700 (Mon, 07 May 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Using a common SR_ANS_NACK answer "kind" instead of three separate values: SR_ANS_NACK_NSEC, SR_ANS_NACK_NSEC3 and SR_ANS_NACK_SOA No data condition does not require the SOA record to be present. Store proper flag status in error result ------------------------------------------------------------------------ r3301 | hserus | 2007-05-07 08:59:13 -0700 (Mon, 07 May 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Using a common SR_ANS_NACK answer "kind" instead of three separate values: SR_ANS_NACK_NSEC, SR_ANS_NACK_NSEC3 and SR_ANS_NACK_SOA Define prototype for p_val_err() ------------------------------------------------------------------------ r3300 | tewok | 2007-05-07 08:45:38 -0700 (Mon, 07 May 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollset Removed the -kskphase and -zskphase options. ------------------------------------------------------------------------ r3299 | tewok | 2007-05-07 08:14:15 -0700 (Mon, 07 May 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollchk Used proper variable in an error message. ------------------------------------------------------------------------ r3298 | tewok | 2007-05-04 13:30:40 -0700 (Fri, 04 May 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollset Added the -del-admin, -del-directory, and -del-loglevel options. ------------------------------------------------------------------------ r3297 | tewok | 2007-05-04 12:52:47 -0700 (Fri, 04 May 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Added the rollrec_delfield() interface. ------------------------------------------------------------------------ r3296 | lfoster | 2007-05-04 12:39:24 -0700 (Fri, 04 May 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman implemented key removal in dnsval.conf fixed a bug where keys were inserted into a hash when the hash was accessed in a for statement ------------------------------------------------------------------------ r3295 | lfoster | 2007-05-04 11:32:27 -0700 (Fri, 04 May 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman fixed bug in revocation from dnsval.conf ------------------------------------------------------------------------ r3294 | tewok | 2007-05-03 14:44:28 -0700 (Thu, 03 May 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Deleted a bunch of obsolete code from outfld(). ------------------------------------------------------------------------ r3293 | tewok | 2007-05-03 14:43:16 -0700 (Thu, 03 May 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Removed the obsolete fifth argument to outfld(). ------------------------------------------------------------------------ r3292 | tewok | 2007-05-03 14:41:23 -0700 (Thu, 03 May 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Rewrote the purpose comment in outfld()'s code header. ------------------------------------------------------------------------ r3291 | tewok | 2007-05-03 14:40:08 -0700 (Thu, 03 May 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Renamed outstr() to outfld() as that's more indicative of the routine's purpose. ------------------------------------------------------------------------ r3290 | tewok | 2007-05-03 14:13:32 -0700 (Thu, 03 May 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Moved a duplicated type-segregation check from two routines into getrollrecs(), thus giving a blinding increase in speed. ------------------------------------------------------------------------ r3289 | tewok | 2007-05-03 13:36:15 -0700 (Thu, 03 May 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Fixed a bug wherein giving -kskphase and -zskphase caused no output to be displayed. ------------------------------------------------------------------------ r3288 | tewok | 2007-05-03 10:54:17 -0700 (Thu, 03 May 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Deleted a duplicated code blob. ------------------------------------------------------------------------ r3287 | tewok | 2007-05-03 10:43:35 -0700 (Thu, 03 May 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Fixed to calculate lengths on only the type of records being displayed. Fixed a line in the usage message. ------------------------------------------------------------------------ r3286 | tewok | 2007-05-02 14:53:36 -0700 (Wed, 02 May 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm $Credit->{'due'}. ------------------------------------------------------------------------ r3285 | tewok | 2007-05-02 14:41:28 -0700 (Wed, 02 May 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollset Added a pod note about a known problem with the code. (Which will be resolved RSN...) ------------------------------------------------------------------------ r3284 | tewok | 2007-05-02 14:37:51 -0700 (Wed, 02 May 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollchk Added validation of directory fields in rollrecs. Fixed a comment about checkfile()'s return values. ------------------------------------------------------------------------ r3283 | tewok | 2007-05-02 14:06:36 -0700 (Wed, 02 May 2007) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollset Incremented the rollset version. Added the -directory option. Added -admin to the usage message. ------------------------------------------------------------------------ r3282 | tewok | 2007-05-02 14:01:26 -0700 (Wed, 02 May 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Fixed a pair of bugs wherein the admin and directory were always being given as the default. ------------------------------------------------------------------------ r3281 | tewok | 2007-05-02 13:26:06 -0700 (Wed, 02 May 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollinit Added the -directory option. ------------------------------------------------------------------------ r3280 | rstory | 2007-05-02 12:30:28 -0700 (Wed, 02 May 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0_dnssec_howto.txt M /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0_dnssec_patch.txt Final patch for 3.2.0. ------------------------------------------------------------------------ r3279 | tewok | 2007-05-02 11:22:23 -0700 (Wed, 02 May 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Added support for the directory rollrec field (including the new -directory option.) ------------------------------------------------------------------------ r3278 | tewok | 2007-05-02 11:00:49 -0700 (Wed, 02 May 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Removed the -all option. Made -roll and -skip mutually exclusive. ------------------------------------------------------------------------ r3277 | tewok | 2007-05-01 18:35:57 -0700 (Tue, 01 May 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added support for display field in rollrecs. ------------------------------------------------------------------------ r3276 | tewok | 2007-05-01 18:33:46 -0700 (Tue, 01 May 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added support for display field in rollrecs. ------------------------------------------------------------------------ r3275 | tewok | 2007-05-01 14:23:13 -0700 (Tue, 01 May 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm M /trunk/dnssec-tools/tools/modules/rollrec.pod Added the "directory" rollrec field. Clarified an error message in rollrec_read(). ------------------------------------------------------------------------ r3274 | tewok | 2007-05-01 08:43:23 -0700 (Tue, 01 May 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Deleted an unneeded blank line. ------------------------------------------------------------------------ r3273 | tewok | 2007-05-01 08:01:14 -0700 (Tue, 01 May 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Clarified an error message. ------------------------------------------------------------------------ r3272 | lfoster | 2007-04-30 15:37:58 -0700 (Mon, 30 Apr 2007) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman - start on remove holddown implementation - store key data only for domains we are actually going to monitor - populate reverse domains for later use - clean up some old code and comments ------------------------------------------------------------------------ r3271 | hserus | 2007-04-30 15:16:28 -0700 (Mon, 30 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c If no answers are returned from the DNS, the validation status is untrusted ------------------------------------------------------------------------ r3270 | tewok | 2007-04-30 09:08:31 -0700 (Mon, 30 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollchk Fixed another code comment. ------------------------------------------------------------------------ r3269 | tewok | 2007-04-30 09:04:29 -0700 (Mon, 30 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollchk Fixed a code comment. ------------------------------------------------------------------------ r3268 | tewok | 2007-04-30 08:52:19 -0700 (Mon, 30 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollchk Fixed some code comments. ------------------------------------------------------------------------ r3267 | tewok | 2007-04-30 08:33:01 -0700 (Mon, 30 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Fixed a pod comment. ------------------------------------------------------------------------ r3266 | hardaker | 2007-04-27 14:38:00 -0700 (Fri, 27 Apr 2007) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/dnssecstatusOverlay.js better implementation of context sensitive windows ------------------------------------------------------------------------ r3265 | hserus | 2007-04-27 10:25:28 -0700 (Fri, 27 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Initialize provably unsecure status ------------------------------------------------------------------------ r3264 | hserus | 2007-04-27 08:56:54 -0700 (Fri, 27 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Add some logging info for bogus proofs ------------------------------------------------------------------------ r3263 | marz | 2007-04-27 08:04:54 -0700 (Fri, 27 Apr 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs perl resolve_and_check() fixes ------------------------------------------------------------------------ r3262 | hardaker | 2007-04-26 19:26:24 -0700 (Thu, 26 Apr 2007) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/dnssecstatusOverlay.js usage visibility improvements ------------------------------------------------------------------------ r3261 | hserus | 2007-04-26 14:22:17 -0700 (Thu, 26 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/NEWS Added new libval-related items ------------------------------------------------------------------------ r3260 | hserus | 2007-04-26 13:42:26 -0700 (Thu, 26 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Don't export the p_query_status and val_refresh_* functions ------------------------------------------------------------------------ r3259 | hserus | 2007-04-26 13:34:06 -0700 (Thu, 26 Apr 2007) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c While looking for a validated result keep going up looking for trust anchors at a higher level if the trust anchor at the current level does not match. Allow unlimited TTL for nsec3 iterations policy Add VAL_NONEXISTENT_NAME_NOCHAIN to the list of non-existence conditions ------------------------------------------------------------------------ r3258 | hserus | 2007-04-26 13:28:42 -0700 (Thu, 26 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/etc/README Update copyright date ------------------------------------------------------------------------ r3257 | hserus | 2007-04-26 13:28:13 -0700 (Thu, 26 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c Dont display (incorrect) query status ------------------------------------------------------------------------ r3256 | hserus | 2007-04-26 13:27:08 -0700 (Thu, 26 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/README M /trunk/dnssec-tools/validator/libval/README Update copyright date ------------------------------------------------------------------------ r3255 | hserus | 2007-04-26 13:25:33 -0700 (Thu, 26 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/README Description of command-line tools is already available in the docs/ directory ------------------------------------------------------------------------ r3254 | hserus | 2007-04-26 13:23:44 -0700 (Thu, 26 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/README Say which configure flags are supported. ------------------------------------------------------------------------ r3253 | hserus | 2007-04-26 13:22:52 -0700 (Thu, 26 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/Makefile.in M /trunk/dnssec-tools/validator/doc/README M /trunk/dnssec-tools/validator/doc/dnsval.conf.3 M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod A /trunk/dnssec-tools/validator/doc/getaddr.1 A /trunk/dnssec-tools/validator/doc/getaddr.pod A /trunk/dnssec-tools/validator/doc/gethost.1 A /trunk/dnssec-tools/validator/doc/gethost.pod M /trunk/dnssec-tools/validator/doc/libsres-implementation-notes M /trunk/dnssec-tools/validator/doc/libsres.3 M /trunk/dnssec-tools/validator/doc/libsres.pod M /trunk/dnssec-tools/validator/doc/libval-implementation-notes M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.3 M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.pod M /trunk/dnssec-tools/validator/doc/val_gethostbyname.3 M /trunk/dnssec-tools/validator/doc/val_gethostbyname.pod M /trunk/dnssec-tools/validator/doc/val_query.3 M /trunk/dnssec-tools/validator/doc/val_query.pod M /trunk/dnssec-tools/validator/doc/validate.1 M /trunk/dnssec-tools/validator/doc/validate.pod Update pod for libval ------------------------------------------------------------------------ r3252 | hserus | 2007-04-26 13:14:38 -0700 (Thu, 26 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/selftests.dist Comment out NSEC3 tests ------------------------------------------------------------------------ r3251 | hserus | 2007-04-26 13:12:07 -0700 (Thu, 26 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/val_errors.h Move VAL_AC_DATA_MISSING to the list of "bad state" conditions ------------------------------------------------------------------------ r3250 | rstory | 2007-04-26 09:36:58 -0700 (Thu, 26 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0_dnssec_howto.txt M /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0_dnssec_patch.txt update for proper configure checks for supported libs and enabling dnssec code ------------------------------------------------------------------------ r3249 | marz | 2007-04-26 06:26:01 -0700 (Thu, 26 Apr 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_debug.c remove debug ------------------------------------------------------------------------ r3248 | marz | 2007-04-26 06:13:33 -0700 (Thu, 26 Apr 2007) | 1 line Changed paths: M /trunk/dnssec-tools/Makefile.in M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/README M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs M /trunk/dnssec-tools/validator/include/validator/resolver.h M /trunk/dnssec-tools/validator/libsres/res_debug.c M /trunk/dnssec-tools/validator/libval/val_assertion.c fixes for perl resolve_and_check and docs ------------------------------------------------------------------------ r3246 | hardaker | 2007-04-25 17:10:46 -0700 (Wed, 25 Apr 2007) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch A /trunk/dnssec-tools/apps/mozilla/dnssec-status A /trunk/dnssec-tools/apps/mozilla/dnssec-status/Makefile A /trunk/dnssec-tools/apps/mozilla/dnssec-status/README A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/about.xul A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/contents.rdf A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/dnssecstatusOverlay.js A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/dnssecstatusOverlay.xul A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/prefs.js A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/prefs.xul A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/skin A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/skin/classic A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/skin/classic/dnssecstatus A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/skin/classic/dnssecstatus/contents.rdf A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/skin/classic/dnssecstatus/dnssecstatus_icon_big.png A /trunk/dnssec-tools/apps/mozilla/dnssec-status/defaults A /trunk/dnssec-tools/apps/mozilla/dnssec-status/defaults/preferences A /trunk/dnssec-tools/apps/mozilla/dnssec-status/defaults/preferences/dnssecstatus.js A /trunk/dnssec-tools/apps/mozilla/dnssec-status/install.rdf new patch for firefox to pass DNS events up from the transport layer using the observer mechanisms; a new firefox extension to catch those events, count and display them ------------------------------------------------------------------------ r3245 | hserus | 2007-04-25 08:38:05 -0700 (Wed, 25 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Handle negative proofs in DLV in a better manner. ------------------------------------------------------------------------ r3244 | hserus | 2007-04-24 14:09:42 -0700 (Tue, 24 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/etc/dnsval.conf Ignore signature expiration times for zones under fruits.netsec.tislabs.com instead of netsec.tislabs.com ------------------------------------------------------------------------ r3243 | hserus | 2007-04-24 14:06:32 -0700 (Tue, 24 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/etc/dnsval.conf Add sample dlv policy ------------------------------------------------------------------------ r3242 | hserus | 2007-04-24 14:03:26 -0700 (Tue, 24 Apr 2007) | 30 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c - Always use query_for_query chain in order to access assertions, so that qfq_flags can be appropriately honored - Reset alias information in reset_query_chain_node() - add_to_query_chain() directly adds element to list within context - Added new function val_does_not_exist() that returns true if one of the nonexistence types is returned - Handle root zone in find_trust_point() - Handle root zone in is_trusted_key() - Renamed check_conflicting_answers() as try_build_chain() because the function also calls build_pending_query() - Ifdef out find_next_zonecut() - Invoke loop detection logic when trying to merge glue into referral - bug fix in fetching cached rrset for cname owner - Modify verify_provably_unsecure so that it proves non-existence for a name instead of the entire authentication chain element - DLV implementation: - added new function find_dlv_trust_point() to identify trustpoint and target for a given query name - added new function replace_name_in_name() to create name in DLV tree - added new function check_anc_proof() to check aggressive negative cache - added new function find_dlv_record() to do exactly that - added new function set_dlv_branchoff() to create the link between the normal tree and the DLV tree - defined new 'flags' member for val_internal_result. Flags may be different for each result chain (one may use DLV while the other may not need to) - modified get_zse() (and is_trusted_key also) to return correct zone security expectation while building authentication chain - move general sanity checking of results into a separate function, fix_validation_result, invoked from verify_and_validate() to better assist in determining when to invoke the DLV logic - re-wrote much of the negative proof checking logic in order to support ANC - logic to kickstart DLV when val_isvalidated() returns false - logic to check provably insecure condition chaining down from the DLV tree ------------------------------------------------------------------------ r3241 | hserus | 2007-04-24 14:02:42 -0700 (Tue, 24 Apr 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.h - Always use query_for_query chain in order to access assertions, so that qfq_flags can be appropriately honored - Added prototypes for val_does_not_exist() and check_anc_proof() ------------------------------------------------------------------------ r3240 | hserus | 2007-04-24 14:02:30 -0700 (Tue, 24 Apr 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.h - Add new structure for allowing detection of glue fetch loops - Always use query_for_query chain in order to access assertions, so that qfq_flags can be appropriately honored ------------------------------------------------------------------------ r3239 | hserus | 2007-04-24 14:01:44 -0700 (Tue, 24 Apr 2007) | 12 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c - Always use query_for_query chain in order to access assertions, so that qfq_flags can be appropriately honored - Detect loops in the glue fetch operation - Move logic of using root hints for a root referral from follow_referral_or_alias_link to bootstrap_referral, since the second function is the common denominator - When fetching glue for nameservers where other zone ns's are known, jumpstart the lookup process from the known name server list - register the query with the referral monitor only if the referral was actually sent, not if we are still waiting for glue - Now keeping track of learned zone information in the struct delegation_info. Save name server information in the cache only when we have all information about it (including glue) ------------------------------------------------------------------------ r3238 | hserus | 2007-04-24 14:01:26 -0700 (Tue, 24 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.h - Initialize the learned_zones member in ALLOCATE_REFERRAL_BLOCK ------------------------------------------------------------------------ r3237 | hserus | 2007-04-24 14:00:55 -0700 (Tue, 24 Apr 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.h - Moved const string definitions from val_policy.h to validator.h - Removed dlv-max-links policy definition - Add data structure for DLV trust point maintenance - In val_get_token() qualify the comment arg with "const" ------------------------------------------------------------------------ r3236 | hserus | 2007-04-24 14:00:40 -0700 (Tue, 24 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c - Intialize ttl only when the variable is created. ------------------------------------------------------------------------ r3235 | hserus | 2007-04-24 14:00:28 -0700 (Tue, 24 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_cache.h - change get_nslist_from_cache() prototype so that we can pass the query_for_query structure to bootstrap_referral() ------------------------------------------------------------------------ r3234 | hserus | 2007-04-24 14:00:12 -0700 (Tue, 24 Apr 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c - Removed dlv-max-links policy handling - Added parse function for DLV policy - In val_get_token() qualify the comment arg with "const" ------------------------------------------------------------------------ r3233 | hserus | 2007-04-24 13:59:37 -0700 (Tue, 24 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_query.c - Minor ifdef twiddle ------------------------------------------------------------------------ r3232 | hserus | 2007-04-24 13:59:23 -0700 (Tue, 24 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_debug.c - Recognize the DLV typecode ------------------------------------------------------------------------ r3231 | hserus | 2007-04-24 13:59:05 -0700 (Tue, 24 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c - In val_get_token(), qualify the comment arg with "const" ------------------------------------------------------------------------ r3230 | hserus | 2007-04-24 13:58:28 -0700 (Tue, 24 Apr 2007) | 10 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h - Re-structured flags to val_resolve_and_check (query flags in the lower nibble, internal flags in the upper nibble) - Defined new query flags for DLV - Added new definition for glue dependency chain max length - Removed definition for dlv-max-links policy - Moved const string definitions from val_policy.h to validator.h - Now keeping track of learned zone information in the struct delegation_info. Save name server information in the cache only when we have all information about it (including glue) - Define new flags member for val_internal_result. Flags may be different for each result chain (one may use DLV while the other may not need to) - Added proto for val_does_not_exist() ------------------------------------------------------------------------ r3229 | hserus | 2007-04-24 13:57:48 -0700 (Tue, 24 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/resolver.h - Defined typecode for DLV ------------------------------------------------------------------------ r3228 | lfoster | 2007-04-23 13:25:37 -0700 (Mon, 23 Apr 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman implements revocation of trust anchors in named.conf. ------------------------------------------------------------------------ r3227 | tewok | 2007-04-20 08:24:01 -0700 (Fri, 20 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Extended the white background of the infostripe across all columns. ------------------------------------------------------------------------ r3226 | tewok | 2007-04-20 08:09:36 -0700 (Fri, 20 Apr 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Hushed key archiving. Made the key-archive log message a bit more useful. ------------------------------------------------------------------------ r3225 | tewok | 2007-04-19 18:43:51 -0700 (Thu, 19 Apr 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/keyarch Added a timestamp to the beginning of the archived key's name. Added some pod discussing the programs exit values. ------------------------------------------------------------------------ r3224 | marz | 2007-04-19 13:55:50 -0700 (Thu, 19 Apr 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs perl resolve_and_check() fixes ------------------------------------------------------------------------ r3223 | marz | 2007-04-19 10:55:43 -0700 (Thu, 19 Apr 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs perl resolve_and_check() ------------------------------------------------------------------------ r3222 | tewok | 2007-04-19 10:39:32 -0700 (Thu, 19 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Deleted two unused variables. ------------------------------------------------------------------------ r3221 | tewok | 2007-04-19 10:37:15 -0700 (Thu, 19 Apr 2007) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Deleted several unused zone keyrec fields: kskroll, rollphase, rollstart, signing_set, zskcurpath, zsknewpath, zskpubpath, and zskroll. Deleted an unused key keyrec fields: signing_set. ------------------------------------------------------------------------ r3220 | tewok | 2007-04-19 02:19:11 -0700 (Thu, 19 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-demo-smallset.rollrec M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-demo.rollrec Deleted the obsolete curphase records. ------------------------------------------------------------------------ r3219 | tewok | 2007-04-19 02:10:01 -0700 (Thu, 19 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/rundemo Upgraded to the same version used by rollerd-basic demo. ------------------------------------------------------------------------ r3218 | tewok | 2007-04-19 02:06:45 -0700 (Thu, 19 Apr 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/rundemo Reorganized the code and gave it real option handling. Added the -autods option so the DS-publishing part of KSK rollover can be faked. (This is useful for just letting the demo run and run and run...) ------------------------------------------------------------------------ r3217 | tewok | 2007-04-19 00:19:39 -0700 (Thu, 19 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Fixed two typos in the usage message. ------------------------------------------------------------------------ r3216 | tewok | 2007-04-19 00:02:53 -0700 (Thu, 19 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Removed some log-cluttering log messages. ------------------------------------------------------------------------ r3215 | tewok | 2007-04-17 18:54:05 -0700 (Tue, 17 Apr 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pod Brought the fields up-to-date. ------------------------------------------------------------------------ r3214 | tewok | 2007-04-17 17:32:15 -0700 (Tue, 17 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Removed obsolete rollrec_signdate and rollrec_signsecs entries. ------------------------------------------------------------------------ r3213 | tewok | 2007-04-17 17:23:40 -0700 (Tue, 17 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-demo.rollrec Deleted obsolete curphase records. ------------------------------------------------------------------------ r3212 | tewok | 2007-04-17 13:30:43 -0700 (Tue, 17 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pod Added descriptions of what is valid for rollrec names and field values. ------------------------------------------------------------------------ r3211 | tewok | 2007-04-17 13:13:04 -0700 (Tue, 17 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pod Added descriptions of what is valid for keyrec names and field values. ------------------------------------------------------------------------ r3210 | hserus | 2007-04-17 12:26:43 -0700 (Tue, 17 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Perform proper transformation of the wildcard proof into the result structure. ------------------------------------------------------------------------ r3209 | tewok | 2007-04-17 10:00:05 -0700 (Tue, 17 Apr 2007) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Turned off -ref and -unref if both were given on the command line. (This relates to internal logic.) Ensure that a record-selection option was given. Reworked a couple assignments for cleaner logic. ------------------------------------------------------------------------ r3208 | tewok | 2007-04-17 09:39:42 -0700 (Tue, 17 Apr 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Fixed bugs in -ref and -unref processing so they work properly now. Renamed refdkey() to refdkeyrec() to better match its new functionality. ------------------------------------------------------------------------ r3207 | hserus | 2007-04-17 06:58:07 -0700 (Tue, 17 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_policy.h Support multiple comment characters for the same config file resolv.conf can use either ; or # as the comment character ------------------------------------------------------------------------ r3206 | hardaker | 2007-04-16 12:28:51 -0700 (Mon, 16 Apr 2007) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/README doc update ------------------------------------------------------------------------ r3205 | lfoster | 2007-04-16 11:58:11 -0700 (Mon, 16 Apr 2007) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Added revocation of keys from dnsval.conf. This depends on the revoke bit being received in a query of type DNSKEY and this bit is called REVOKE. Left in some commented out test code since there is no operational revocation that I know of. ------------------------------------------------------------------------ r3204 | tewok | 2007-04-16 11:15:58 -0700 (Mon, 16 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Fixed a bit of pod. ------------------------------------------------------------------------ r3203 | rstory | 2007-04-13 15:21:54 -0700 (Fri, 13 Apr 2007) | 1 line Changed paths: A /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0_dnssec_howto.txt initial incomplete patch for ncftp ------------------------------------------------------------------------ r3202 | rstory | 2007-04-13 15:21:34 -0700 (Fri, 13 Apr 2007) | 1 line Changed paths: A /trunk/dnssec-tools/apps/ncftp A /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0_dnssec_patch.txt initial incomplete patch for ncftp ------------------------------------------------------------------------ r3201 | hserus | 2007-04-13 14:38:19 -0700 (Fri, 13 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Some more fine-tuning of the wildcard proof checking logic ------------------------------------------------------------------------ r3200 | tewok | 2007-04-13 13:52:03 -0700 (Fri, 13 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added kskobs keys to the set of unreferenced keys. ------------------------------------------------------------------------ r3199 | hserus | 2007-04-13 13:25:41 -0700 (Fri, 13 Apr 2007) | 8 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c - set initial value of ttl only during variable creation - set ttl type as u_int32_t instead of long - split the provably unsecure check into two functions - one for span check and the other for wildcard check. Make the test for wildcard optional through a param. - ifdef out the prove_existence function - When checking for wildcard sanity check for the non-existence of the name instead of the existence of the wildcard ------------------------------------------------------------------------ r3198 | hserus | 2007-04-13 13:25:16 -0700 (Fri, 13 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.h M /trunk/dnssec-tools/validator/libval/val_resquery.c set ttl type as u_int32_t instead of long ------------------------------------------------------------------------ r3197 | hserus | 2007-04-13 13:24:43 -0700 (Fri, 13 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c In val_log_assertion_chain show NULL results ------------------------------------------------------------------------ r3196 | tewok | 2007-04-13 12:51:12 -0700 (Fri, 13 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO M /trunk/dnssec-tools/tools/scripts/Makefile.PL M /trunk/dnssec-tools/tools/scripts/README Added cleanarch. ------------------------------------------------------------------------ r3195 | tewok | 2007-04-13 11:56:25 -0700 (Fri, 13 Apr 2007) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/cleanarch New command for cleaning key archives. ------------------------------------------------------------------------ r3194 | tewok | 2007-04-13 09:53:35 -0700 (Fri, 13 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/timetrans Fixed the copyright dates. ------------------------------------------------------------------------ r3193 | hardaker | 2007-04-13 09:04:44 -0700 (Fri, 13 Apr 2007) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch remove a debugging statement ------------------------------------------------------------------------ r3192 | hardaker | 2007-04-13 08:31:05 -0700 (Fri, 13 Apr 2007) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch new patch to show a different error screen on validated DNE errors ------------------------------------------------------------------------ r3191 | hardaker | 2007-04-11 16:01:11 -0700 (Wed, 11 Apr 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone set the keyarchive directory ------------------------------------------------------------------------ r3190 | rstory | 2007-04-11 13:48:11 -0700 (Wed, 11 Apr 2007) | 1 line Changed paths: A /trunk/dnssec-tools/apps/lftp A /trunk/dnssec-tools/apps/lftp/lftp-3-4-7_dnssec_howto.txt A /trunk/dnssec-tools/apps/lftp/lftp-3-4-7_dnssec_patch.txt initial incomplete patch for lftp ------------------------------------------------------------------------ r3189 | hserus | 2007-04-10 14:00:35 -0700 (Tue, 10 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Add new qfq_flags member to the queries_for_query structure ------------------------------------------------------------------------ r3188 | hardaker | 2007-04-10 13:47:59 -0700 (Tue, 10 Apr 2007) | 1 line Changed paths: M /trunk/dnssec-tools/dist/dnssec-tools.spec update to 1.1.1; change my email address to the FExtras registered address ------------------------------------------------------------------------ r3187 | hserus | 2007-04-10 11:24:37 -0700 (Tue, 10 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/getaddr.c Display return code and validation status code ------------------------------------------------------------------------ r3186 | hserus | 2007-04-10 11:16:19 -0700 (Tue, 10 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c Ensure that val_status gets set even when names do not exist ------------------------------------------------------------------------ r3185 | hardaker | 2007-04-10 08:04:10 -0700 (Tue, 10 Apr 2007) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch make the getaddrinfo PR replacement function use the val_ version in the proper fashion rather than the work-around fashion ------------------------------------------------------------------------ r3184 | rstory | 2007-04-10 05:56:03 -0700 (Tue, 10 Apr 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_x_query.c - support for val_res_search - look for and parse 'search' in resolv.conf - use search path for single label queries ------------------------------------------------------------------------ r3183 | tewok | 2007-04-09 12:34:31 -0700 (Mon, 09 Apr 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/rundemo Converted to Perl. Added an option that allows user-specification of logging level. ------------------------------------------------------------------------ r3182 | tewok | 2007-04-09 12:27:48 -0700 (Mon, 09 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pod Fixed the descriptions of keyrec_setdate and keyrec_setsecs. ------------------------------------------------------------------------ r3181 | tewok | 2007-04-09 12:24:00 -0700 (Mon, 09 Apr 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Fixed the pod describing -long. ------------------------------------------------------------------------ r3180 | tewok | 2007-04-09 12:16:49 -0700 (Mon, 09 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Fixed a bug that was preventing set labels from being printed. ------------------------------------------------------------------------ r3179 | tewok | 2007-04-09 11:59:52 -0700 (Mon, 09 Apr 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Renamed -obs to -zobs. Made -obs be shorthand for -kobs and -zobs. ------------------------------------------------------------------------ r3178 | tewok | 2007-04-09 11:45:03 -0700 (Mon, 09 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Restored printing of obsolete-key data. ------------------------------------------------------------------------ r3177 | tewok | 2007-04-09 10:43:02 -0700 (Mon, 09 Apr 2007) | 14 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Modified key output so instead of being alphabetically sorted by name, it is sorted in key-type order. This order is: Current KSK Published KSK Current ZSK Published ZSK New ZSK Obsolete KSK Obsolete ZSK More clarifying pod was added to describe option use. ------------------------------------------------------------------------ r3176 | tewok | 2007-04-09 09:34:50 -0700 (Mon, 09 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added a little more pod describing the output format. ------------------------------------------------------------------------ r3175 | tewok | 2007-04-09 09:30:22 -0700 (Mon, 09 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added a bunch of pod describing the output. ------------------------------------------------------------------------ r3174 | tewok | 2007-04-09 09:22:21 -0700 (Mon, 09 Apr 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added the -z-sets option aggregator. Fixed the pod for -z-ksk and -z-zsk. ------------------------------------------------------------------------ r3173 | tewok | 2007-04-09 08:02:24 -0700 (Mon, 09 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added the -z-dates aggregator. ------------------------------------------------------------------------ r3172 | tewok | 2007-04-07 12:18:29 -0700 (Sat, 07 Apr 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added the -z-ksk and -z-zsk aggregator options. ------------------------------------------------------------------------ r3171 | tewok | 2007-04-07 11:04:10 -0700 (Sat, 07 Apr 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added the -z-dirs option aggregator. ------------------------------------------------------------------------ r3170 | tewok | 2007-04-07 10:30:03 -0700 (Sat, 07 Apr 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added the -z-kskdir and -z-zskdir options. ------------------------------------------------------------------------ r3169 | tewok | 2007-04-07 09:31:09 -0700 (Sat, 07 Apr 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added the -z-kskcount and -z-zskcount options. ------------------------------------------------------------------------ r3168 | tewok | 2007-04-07 08:37:43 -0700 (Sat, 07 Apr 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added the -z-signfile option. ------------------------------------------------------------------------ r3167 | tewok | 2007-04-06 20:35:07 -0700 (Fri, 06 Apr 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Switch display order of published and new ZSKs. Add a no-key-data note to the pod. ------------------------------------------------------------------------ r3166 | tewok | 2007-04-06 20:20:45 -0700 (Fri, 06 Apr 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added the -z-kskcur, -z-kskpub, -z-zskcur, -z-zsknew, and -z-zskpub options. ------------------------------------------------------------------------ r3165 | tewok | 2007-04-06 19:00:55 -0700 (Fri, 06 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added the -s-keys, -s-lastmod, and -s-zone options. ------------------------------------------------------------------------ r3164 | hardaker | 2007-04-06 15:37:29 -0700 (Fri, 06 Apr 2007) | 6 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch M /trunk/dnssec-tools/apps/mozilla/firefox.spec A new version of the patch: - debugging statements have been stripped - the APIs have been rewritten so the optional extended-error status codes that are produced by DNSSEC aren't passed back unless requested. ------------------------------------------------------------------------ r3163 | tewok | 2007-04-04 20:17:05 -0700 (Wed, 04 Apr 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added keylife back into the -long output. Modified the unset keylife message. ------------------------------------------------------------------------ r3162 | tewok | 2007-04-04 19:54:16 -0700 (Wed, 04 Apr 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Fixed the help messages for the new -h-* options. ------------------------------------------------------------------------ r3161 | lfoster | 2007-04-04 14:52:39 -0700 (Wed, 04 Apr 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman remove query_authserver function; this is now done by resolve_and_check_dnskey change sleep method, so only those zones which have reached their active refresh time are re-queried ------------------------------------------------------------------------ r3160 | tewok | 2007-04-04 14:17:06 -0700 (Wed, 04 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added the -h-zones, -h-sets, and -h-keys options. ------------------------------------------------------------------------ r3159 | tewok | 2007-04-04 10:27:40 -0700 (Wed, 04 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added the -k-path option to display a key's path. ------------------------------------------------------------------------ r3158 | tewok | 2007-04-04 10:19:39 -0700 (Wed, 04 Apr 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added -k-random to display keys' random number generators. Rearranged some options in the help message. ------------------------------------------------------------------------ r3157 | baerm | 2007-04-04 09:48:37 -0700 (Wed, 04 Apr 2007) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/wget/wget-1.10.2_dnssec_howto.txt A /trunk/dnssec-tools/apps/wget/wget-1.10.2_dnssec_patch.txt adding wget patch and how to ------------------------------------------------------------------------ r3156 | baerm | 2007-04-04 09:07:40 -0700 (Wed, 04 Apr 2007) | 3 lines Changed paths: A /trunk/dnssec-tools/apps/wget adding directory for wget ------------------------------------------------------------------------ r3155 | tewok | 2007-04-03 19:25:50 -0700 (Tue, 03 Apr 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Fixed the -terse for set data to only print the set names. ------------------------------------------------------------------------ r3154 | tewok | 2007-04-03 15:04:08 -0700 (Tue, 03 Apr 2007) | 21 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Pretty-printing fixes: Added pretty-printing for keys. (In addition to the basic additions required for support, this modified how keys are output. Rather than printing the key data as the key is selected (as is done for zones and sets), the keys selected for output are added to a new hash. After all keys are selected, the selected-keys hash is output.) Changed -label handling so that -headers doesn't turn off key labeling. Changed some "Fooname" output strings to "Foo Name". Fixed some outstr() logic that was requiring unnecessary special-case code. Fixed some refdkey() logic that wasn't checking signing sets for KSKCUR keys. Code clean-up: Changed some hard constants to perl-consts. Assign aligns. Adjusted some variable comments. Moved outstr() to a more appropriate place. ------------------------------------------------------------------------ r3153 | hserus | 2007-04-03 13:04:53 -0700 (Tue, 03 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_x_query.c Add rrsigs to the query response ------------------------------------------------------------------------ r3152 | hserus | 2007-04-03 11:54:10 -0700 (Tue, 03 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator-config.h.in run autoheader ------------------------------------------------------------------------ r3151 | hserus | 2007-04-03 11:27:54 -0700 (Tue, 03 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/apps/validator_driver.h M /trunk/dnssec-tools/validator/apps/validator_selftest.c Make sure that user-supplied flags are not lost ------------------------------------------------------------------------ r3150 | hserus | 2007-04-03 11:23:35 -0700 (Tue, 03 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in Made nsec3 and dlv configure logic similar to that of ipv6 ------------------------------------------------------------------------ r3149 | rstory | 2007-04-03 09:19:50 -0700 (Tue, 03 Apr 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c initialize uninitialized variables ------------------------------------------------------------------------ r3148 | rstory | 2007-04-03 09:19:09 -0700 (Tue, 03 Apr 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/Makefile.in for test target, use local selftest config, and only run default suite ------------------------------------------------------------------------ r3147 | rstory | 2007-04-03 09:10:49 -0700 (Tue, 03 Apr 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c - fix socket size param in connect() call to keep OS X happy - add more debugging outpu - don't loop beyond FD_SETSIZE - fix param to inet_ntop() ------------------------------------------------------------------------ r3146 | lfoster | 2007-04-02 14:48:03 -0700 (Mon, 02 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman removed code no longer used. ------------------------------------------------------------------------ r3145 | lfoster | 2007-04-02 13:55:21 -0700 (Mon, 02 Apr 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Removed some no-longer-relevant comments ------------------------------------------------------------------------ r3144 | tewok | 2007-03-31 08:08:16 -0700 (Sat, 31 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Localized a few keyrec hashes to get "-zones -sets -headers" working properly. ------------------------------------------------------------------------ r3143 | rstory | 2007-03-30 12:01:36 -0700 (Fri, 30 Mar 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in - fix prefix in val_sysconfdir - use AH_TEMPATE instead of AC_DEFINE, since we don't have the real value yet - fix with-ipv6 logic ------------------------------------------------------------------------ r3142 | hserus | 2007-03-30 07:37:11 -0700 (Fri, 30 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_policy.h Rename DLV to LIBVAL_DLV ------------------------------------------------------------------------ r3141 | tewok | 2007-03-30 07:21:58 -0700 (Fri, 30 Mar 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added pretty-printing for zone output. Generalized some of the pretty-printing code. Made -headers and -label mutually exclusive. ------------------------------------------------------------------------ r3140 | hserus | 2007-03-30 07:20:46 -0700 (Fri, 30 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_assertion.h M /trunk/dnssec-tools/validator/libval/val_resquery.c Rename is_trusted_zone to get_zse ------------------------------------------------------------------------ r3139 | hserus | 2007-03-30 07:13:45 -0700 (Fri, 30 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.c Use correct lock init var for the name server map ------------------------------------------------------------------------ r3138 | lfoster | 2007-03-29 14:17:21 -0700 (Thu, 29 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman fixed hardcoded filename for persistent data. ------------------------------------------------------------------------ r3137 | rstory | 2007-03-29 13:43:00 -0700 (Thu, 29 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator-config.h.in add --with-ipv6 ------------------------------------------------------------------------ r3136 | rstory | 2007-03-29 13:36:43 -0700 (Thu, 29 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_resquery.c IPv6 support ------------------------------------------------------------------------ r3135 | tewok | 2007-03-29 11:05:40 -0700 (Thu, 29 Mar 2007) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Prettied-up the output for signing sets. Added the -headers option. Added support for Current and Published KSKs. ------------------------------------------------------------------------ r3134 | baerm | 2007-03-29 10:32:54 -0700 (Thu, 29 Mar 2007) | 3 lines Changed paths: A /trunk/dnssec-tools/apps/postfix/postfix-2.3.3_dnssec_patch.txt M /trunk/dnssec-tools/apps/postfix/postfix-2.3.x_dnssec_howto.txt A /trunk/dnssec-tools/apps/postfix/postfix.spec updated patch and how-to to support RPM for fc6 postfix version created spec for RPM. ------------------------------------------------------------------------ r3133 | rstory | 2007-03-27 14:30:20 -0700 (Tue, 27 Mar 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/Makefile.top bump libcurrent ------------------------------------------------------------------------ r3132 | tewok | 2007-03-27 13:36:08 -0700 (Tue, 27 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Deleted an unused variable. ------------------------------------------------------------------------ r3131 | tewok | 2007-03-27 08:17:15 -0700 (Tue, 27 Mar 2007) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Modified set output so that the zone is always printed. Modified set caching so that one zone's sets won't stomp on another zone's sets. Fixed some showsets() comments to refer to sets instead of zones. Reordered some of the pod subsections. ------------------------------------------------------------------------ r3130 | tewok | 2007-03-27 07:41:56 -0700 (Tue, 27 Mar 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added the -z-archdir and -label options. Rearranged the options array. ------------------------------------------------------------------------ r3129 | hserus | 2007-03-27 06:43:32 -0700 (Tue, 27 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Maintain a merged_glue_ns list that keeps track of all glue that was already available or fetched in the past. Query state moves from Q_WAIT_FOR_GLUE to Q_INIT only if all outstanding glue was fetched. ------------------------------------------------------------------------ r3128 | hserus | 2007-03-27 06:43:07 -0700 (Tue, 27 Mar 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c - While finding zonecut for DS record, leading qname label must be removed - VAL_QUERY_GLUE_REQUEST implies VAL_FLAGS_DONT_VALIDATE - Q_WAIT_FOR_GLUE can only move to the Q_INIT state. Perform correct check in fix_glue ------------------------------------------------------------------------ r3127 | hserus | 2007-03-27 06:42:48 -0700 (Tue, 27 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.h - Initialize merged glue list ------------------------------------------------------------------------ r3126 | hserus | 2007-03-27 06:42:15 -0700 (Tue, 27 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h - In the delegation_info structure, replace pointer to glue with a list of merged glue records - VAL_QUERY_GLUE_REQUEST implies VAL_FLAGS_DONT_VALIDATE ------------------------------------------------------------------------ r3125 | tewok | 2007-03-26 18:26:15 -0700 (Mon, 26 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Used the *real* real default key. ------------------------------------------------------------------------ r3124 | tewok | 2007-03-26 18:18:54 -0700 (Mon, 26 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Used the correct key-archive default. ------------------------------------------------------------------------ r3123 | baerm | 2007-03-26 16:04:16 -0700 (Mon, 26 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/postfix/postfix-2.2.11_dnssec_patch.txt M /trunk/dnssec-tools/apps/postfix/postfix-2.2.x_dnssec_howto.txt A /trunk/dnssec-tools/apps/postfix/postfix-2.3.8_dnssec_patch.txt A /trunk/dnssec-tools/apps/postfix/postfix-2.3.x_dnssec_howto.txt some updates to the 2.2 patch (mostly textual) added a 2.3 patch and howto ------------------------------------------------------------------------ r3122 | tewok | 2007-03-26 14:41:02 -0700 (Mon, 26 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added the archivedir zone keyrec field. ------------------------------------------------------------------------ r3121 | tewok | 2007-03-26 14:38:59 -0700 (Mon, 26 Mar 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pod Added the archivedir zone keyrec field. Sorted the field descriptions. ------------------------------------------------------------------------ r3120 | tewok | 2007-03-26 12:28:30 -0700 (Mon, 26 Mar 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added KSK archiving. Deleted some dead variables. ------------------------------------------------------------------------ r3119 | tewok | 2007-03-26 12:09:23 -0700 (Mon, 26 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod Added the keyarch default. ------------------------------------------------------------------------ r3118 | tewok | 2007-03-26 12:04:51 -0700 (Mon, 26 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Added keyarch default. ------------------------------------------------------------------------ r3117 | tewok | 2007-03-24 09:49:34 -0700 (Sat, 24 Mar 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added 'hide all keysets' menu command. Added 'show all keysets' menu command. ------------------------------------------------------------------------ r3116 | tewok | 2007-03-24 09:48:03 -0700 (Sat, 24 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO M /trunk/dnssec-tools/tools/scripts/Makefile.PL M /trunk/dnssec-tools/tools/scripts/README New command to archive obsolete KSK and ZSK keys. ------------------------------------------------------------------------ r3115 | tewok | 2007-03-24 09:47:23 -0700 (Sat, 24 Mar 2007) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/keyarch New command to archive obsolete KSK and ZSK keys. ------------------------------------------------------------------------ r3114 | tewok | 2007-03-24 08:12:17 -0700 (Sat, 24 Mar 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/dnssectools.pm Fixed the pod description section to actually talk about *this* module. Added the dt_filetype() interface. ------------------------------------------------------------------------ r3113 | lfoster | 2007-03-23 17:42:23 -0700 (Fri, 23 Mar 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman If a new pending key (trust anchor) fails to appear in subsequent queries (RRSETs) before the holddown time has been reached, drop that key. ------------------------------------------------------------------------ r3107 | hserus | 2007-03-23 12:03:27 -0700 (Fri, 23 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.h Add prototype for free_validator_state() ------------------------------------------------------------------------ r3106 | hserus | 2007-03-23 12:03:17 -0700 (Fri, 23 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c Keep track of the context created for a NULL label. Return this object instead of creating fresh ones for subsequent calls. ------------------------------------------------------------------------ r3105 | hserus | 2007-03-23 12:02:57 -0700 (Fri, 23 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Create a temporary context if the one supplied by the user was NULL ------------------------------------------------------------------------ r3104 | hserus | 2007-03-23 12:02:07 -0700 (Fri, 23 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_x_query.c Don't free the context internally created for a NULL label ------------------------------------------------------------------------ r3103 | hserus | 2007-03-23 12:01:17 -0700 (Fri, 23 Mar 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c free the null context in addition to the validator caches removed the ONE_CTX logic. This will not work if NULL contexts internally refer to a common object ------------------------------------------------------------------------ r3102 | hserus | 2007-03-23 12:00:40 -0700 (Fri, 23 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Export free_validator_state() instead of free_validator_cache() ------------------------------------------------------------------------ r3101 | tewok | 2007-03-23 10:57:56 -0700 (Fri, 23 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Open the keyrec read-only if the read-write open fails. ------------------------------------------------------------------------ r3100 | tewok | 2007-03-23 08:05:02 -0700 (Fri, 23 Mar 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Modified rollrec_read() to try opening rollrec files read-only if the initial read-write open fails. ------------------------------------------------------------------------ r3099 | hserus | 2007-03-23 07:26:05 -0700 (Fri, 23 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_policy.h Remove separate policy for expired sigs. The clock skew policy subsumes this functionality. ------------------------------------------------------------------------ r3098 | hserus | 2007-03-23 06:32:16 -0700 (Fri, 23 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_policy.h Moved string definitions for policies from val_policy.h to validator.h in order to allow functions such as val_add_valpolicy() to be able to make use of it. ------------------------------------------------------------------------ r3097 | tewok | 2007-03-22 15:37:24 -0700 (Thu, 22 Mar 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added the ability to turn on/off display of ZSK signing sets. Added pod for all the new menu commands. ------------------------------------------------------------------------ r3096 | tewok | 2007-03-22 14:51:54 -0700 (Thu, 22 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added the ability to turn on/off display of ZSK signing sets. ------------------------------------------------------------------------ r3095 | tewok | 2007-03-22 14:11:36 -0700 (Thu, 22 Mar 2007) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added the ability to turn on/off display of KSK signing sets. Updated command version. Added some new column-related "constants". Deleted some dead code. Fixed some comments. ------------------------------------------------------------------------ r3094 | hserus | 2007-03-22 13:05:36 -0700 (Thu, 22 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c Add ability to test multi-threading situation ------------------------------------------------------------------------ r3093 | hserus | 2007-03-22 13:00:14 -0700 (Thu, 22 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c Since policy_entry_t is now a defined type, allocate memory for it ------------------------------------------------------------------------ r3092 | hserus | 2007-03-22 12:59:52 -0700 (Thu, 22 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.h Add macro for setting ttl to the minimum reasonable value ------------------------------------------------------------------------ r3091 | hserus | 2007-03-22 12:59:37 -0700 (Thu, 22 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.h Moved query locking macros from val_assertion.c Added/modified prototypes ------------------------------------------------------------------------ r3090 | hserus | 2007-03-22 12:59:16 -0700 (Thu, 22 Mar 2007) | 7 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Moved query locking macros to val_assertion.h Define new function for resetting a query to its initial state Make sure we honor the ttl on the policy fragments when setting ttl on query and authentication chain structres Remove the older verify_provably_unsecure function Fix bug in data_missing/data_received logic ------------------------------------------------------------------------ r3089 | hserus | 2007-03-22 12:59:00 -0700 (Thu, 22 Mar 2007) | 7 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.h In RETRIEVE_POLICY, remove expired policies from the list of returned policy_entry_t structures Change prototypes for parse routines: they now accept buf pointers instead of FILE pointers and don't expect the "end statement" character to be present. Since policy_entry_t contains zone and next pointer information, remove these members from the policy-specific data structures. Add prototypes for functions. ------------------------------------------------------------------------ r3088 | hserus | 2007-03-22 12:58:48 -0700 (Thu, 22 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_verify.c Make sure we honor the ttl on the policy fragments ------------------------------------------------------------------------ r3087 | hserus | 2007-03-22 12:58:25 -0700 (Thu, 22 Mar 2007) | 11 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Add new function to add a validator policy to the context for a specific time duration Modified val_get_token so that it read from a character buffer instead of a FILE * Add logic to merge/free policies into the context's policy_entry_t* array Modified the parse routines: they now accept buf pointers instead of FILE pointers and don't expect the "end statement" character to be present. This is to allow a user supplied policy blob to also be parsed. The free routines for the policy structures are similarly modified so that they only look at what is inside the policy, and not the policy_entry_t list itself. Since zone information is common to all policies read it in a common place outside the parse routine; same with adding the new policy in the policy_entry_t list ------------------------------------------------------------------------ r3086 | hserus | 2007-03-22 12:58:06 -0700 (Thu, 22 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c Modified read_val_testcase_file so that it made use of the new val_get_token function. ------------------------------------------------------------------------ r3085 | hserus | 2007-03-22 12:57:33 -0700 (Thu, 22 Mar 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Re-defined policy_entry_t as a regular container structure No longer maintain list of overrides; instead work off the policy_entry_t* array Add prototype for val_add_valpolicy ------------------------------------------------------------------------ r3082 | tewok | 2007-03-22 09:54:10 -0700 (Thu, 22 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Updated command version to 1.0. ------------------------------------------------------------------------ r3081 | hardaker | 2007-03-22 06:22:38 -0700 (Thu, 22 Mar 2007) | 1 line Changed paths: M /trunk/dnssec-tools/Makefile.in M /trunk/dnssec-tools/validator/Makefile.in M /trunk/dnssec-tools/validator/apps/Makefile.in M /trunk/dnssec-tools/validator/doc/Makefile.in M /trunk/dnssec-tools/validator/libsres/Makefile.in M /trunk/dnssec-tools/validator/libval/Makefile.in properly honor DESTDIR in more locations ------------------------------------------------------------------------ r3080 | hardaker | 2007-03-22 06:19:19 -0700 (Thu, 22 Mar 2007) | 1 line Changed paths: M /trunk/dnssec-tools/dist/dnssec-tools.spec updating dnssec-tools spec to match recent patch branch work ------------------------------------------------------------------------ r3077 | tewok | 2007-03-20 18:16:01 -0700 (Tue, 20 Mar 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Renamed the "ZSK Control" menu to "General Control". Added a -dspuball command. ------------------------------------------------------------------------ r3076 | tewok | 2007-03-20 18:12:17 -0700 (Tue, 20 Mar 2007) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Added -dspub and -dspuball commands. Added -nodisplay description to pod. Fixed copyright dates. ------------------------------------------------------------------------ r3075 | tewok | 2007-03-20 18:08:46 -0700 (Tue, 20 Mar 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added support for new rollctl -dspuball command. Added and modified comms sent to blinkenlights to account for KSK rolls. ------------------------------------------------------------------------ r3074 | tewok | 2007-03-20 16:39:57 -0700 (Tue, 20 Mar 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added the ROLLCMD_DSPUBALL command. Reformatted a few pod tables. ------------------------------------------------------------------------ r3073 | baerm | 2007-03-20 14:09:32 -0700 (Tue, 20 Mar 2007) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/postfix/postfix-2.2.11_dnssec_patch.txt A /trunk/dnssec-tools/apps/postfix/postfix-2.2.x_dnssec_howto.txt M /trunk/dnssec-tools/apps/postfix/postfix-howto.txt added postfix patchh and howto ------------------------------------------------------------------------ r3072 | lfoster | 2007-03-20 12:44:12 -0700 (Tue, 20 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman changed storage of keys from config files so multiple keys from a single zone can be accommodated. ------------------------------------------------------------------------ r3071 | tewok | 2007-03-20 09:13:13 -0700 (Tue, 20 Mar 2007) | 10 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added columns for KSK keys. Added "constants" for use in referencing table columns. Added descriptions of KSK rollover phases. Moved Table creation into its own routine. (Note: This is another step in adding KSK support, but it is still not complete. It works (displaying KSK and ZSK rollovers properly) but there is still more to do.) ------------------------------------------------------------------------ r3069 | hardaker | 2007-03-19 18:14:47 -0700 (Mon, 19 Mar 2007) | 1 line Changed paths: M /trunk/dnssec-tools/dist/dnssec-tools.spec a bunch of spec updates to bring it in line with fedora extras packaging (hopefully) ------------------------------------------------------------------------ r3067 | hardaker | 2007-03-19 16:23:19 -0700 (Mon, 19 Mar 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/Makefile.in M /trunk/dnssec-tools/validator/libval/Makefile.in set modes properly on installed headers ------------------------------------------------------------------------ r3065 | tewok | 2007-03-19 15:09:55 -0700 (Mon, 19 Mar 2007) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added some KSK-specific commands. Added a few new commands from rollerd. Added a new option to zonestripe for specifying the rollover type being handled. Added phase colors for the new KSK phases. Deleted some dead variables. ------------------------------------------------------------------------ r3063 | hserus | 2007-03-16 07:12:34 -0700 (Fri, 16 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c Fix null pointer exception ------------------------------------------------------------------------ r3060 | tewok | 2007-03-15 10:22:49 -0700 (Thu, 15 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Include the current keys when use -usezskpub. ------------------------------------------------------------------------ r3059 | tewok | 2007-03-15 08:05:52 -0700 (Thu, 15 Mar 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Fixed pretty-printing so it all works now. Shortened unset kskphase and zskphase. ------------------------------------------------------------------------ r3058 | hserus | 2007-03-15 08:01:35 -0700 (Thu, 15 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/etc/dnsval.conf Indentation ------------------------------------------------------------------------ r3057 | hserus | 2007-03-15 07:47:54 -0700 (Thu, 15 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/etc/dnsval.conf Add new policies ------------------------------------------------------------------------ r3056 | hserus | 2007-03-15 07:38:43 -0700 (Thu, 15 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Apply the default policy by default. i.e. don't expect the user to specify a trailing : in the policy scope ------------------------------------------------------------------------ r3055 | tewok | 2007-03-14 19:46:03 -0700 (Wed, 14 Mar 2007) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Reworked how output is formatted so it's *bags* less messy. This isn't finished yet, but it's a good start. Updated the version. Deleted some dead variables. ------------------------------------------------------------------------ r3054 | baerm | 2007-03-14 14:46:11 -0700 (Wed, 14 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h stdio.h needed to be included for the use of file io (i.e. 'FILE' type) ------------------------------------------------------------------------ r3053 | hardaker | 2007-03-14 10:02:31 -0700 (Wed, 14 Mar 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt added a rule to warn about missing keys (2 ZSKs and 1 KSK) ------------------------------------------------------------------------ r3052 | lfoster | 2007-03-13 14:03:18 -0700 (Tue, 13 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman accept only one config file containing trust anchors ------------------------------------------------------------------------ r3051 | tewok | 2007-03-13 13:31:21 -0700 (Tue, 13 Mar 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Added the -headers option. ------------------------------------------------------------------------ r3050 | hserus | 2007-03-13 12:30:42 -0700 (Tue, 13 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.c Ignore name compression and lowercasing for NSEC. Also handle other types defined by RFC4033 ------------------------------------------------------------------------ r3049 | hserus | 2007-03-13 11:16:53 -0700 (Tue, 13 Mar 2007) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Identify glue status through a query flag instead of maintaining a separate member within the query structure Be careful about not overwriting previous query states with new ones While doing the parallel fetch for DS records, dont look at the value of RES_USE_DNSSEC, since glue fetching logic can mess this up. Instead, explicitly look for the trust point and see if we are below it. ------------------------------------------------------------------------ r3048 | hserus | 2007-03-13 11:16:36 -0700 (Tue, 13 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.h Exposing the find_trust_point() to other files in the library ------------------------------------------------------------------------ r3047 | hserus | 2007-03-13 11:16:23 -0700 (Tue, 13 Mar 2007) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Identify glue status through a query flag instead of maintaining a separate member within the query structure Be careful about not overwriting previous query states with new ones Merge pending glue in a separate function. That way we can ensure that we haven't missed any query. Now exposing the find_trust_point() to other files in the library ------------------------------------------------------------------------ r3046 | hserus | 2007-03-13 11:16:01 -0700 (Tue, 13 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Identify glue status through a query flag instead of maintaining a separate member within the query structure ------------------------------------------------------------------------ r3045 | tewok | 2007-03-13 10:51:01 -0700 (Tue, 13 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Got rid of unnecessary rollrec_fullrec() calls. ------------------------------------------------------------------------ r3044 | tewok | 2007-03-13 09:35:04 -0700 (Tue, 13 Mar 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Added the -lastksk and -lastzsk options. Fixed a pod typo. ------------------------------------------------------------------------ r3043 | marz | 2007-03-13 07:41:01 -0700 (Tue, 13 Mar 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc support new error codes ------------------------------------------------------------------------ r3042 | hserus | 2007-03-12 12:02:48 -0700 (Mon, 12 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Fetch DNSSEC meta-data in parallel while following referrals. ------------------------------------------------------------------------ r3041 | hserus | 2007-03-12 09:20:43 -0700 (Mon, 12 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c Handle _SKEW error codes. Also handle missing WCARD_VERIFIED code. ------------------------------------------------------------------------ r3040 | hserus | 2007-03-12 09:20:27 -0700 (Mon, 12 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Recognize the _SKEW rrsig codes as success values. ------------------------------------------------------------------------ r3039 | hserus | 2007-03-12 09:20:16 -0700 (Mon, 12 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c use clock-skew policy while determining security status of zone ------------------------------------------------------------------------ r3038 | hserus | 2007-03-12 09:20:03 -0700 (Mon, 12 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.h Define policy structure for clock-skew ------------------------------------------------------------------------ r3037 | hserus | 2007-03-12 09:19:52 -0700 (Mon, 12 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Implement policy for per-zone clock-skew defintion Perform proper free of the prov_unsecure_policy structure in free_prov_unsecure_status ------------------------------------------------------------------------ r3036 | hserus | 2007-03-12 09:19:20 -0700 (Mon, 12 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Deleted definition for SIG_ACCEPT_WINDOW. We now use the clock-skew policy to define this. ------------------------------------------------------------------------ r3035 | hserus | 2007-03-12 09:19:09 -0700 (Mon, 12 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/val_errors.h Added definitions for the "rrsig verified with skew" condition ------------------------------------------------------------------------ r3034 | hserus | 2007-03-09 14:56:14 -0800 (Fri, 09 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c - Display validator status code for VAL_BAD_PROVABLY_UNSECURE ------------------------------------------------------------------------ r3033 | hserus | 2007-03-09 14:56:01 -0800 (Fri, 09 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c - Fix the logic where zonecut information was incorrectly getting overwritten - Fix return type for is_trusted_zone() so that error codes can be propagated upward ------------------------------------------------------------------------ r3032 | hserus | 2007-03-09 14:55:43 -0800 (Fri, 09 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.h - Fix return type for is_trusted_zone() so that error codes can be propagated upward ------------------------------------------------------------------------ r3031 | hserus | 2007-03-09 14:55:26 -0800 (Fri, 09 Mar 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c - Fix return type for is_trusted_zone() so that error codes can be propagated upward - Implement function to check if provably insecure condition is trusted or no. - If this state is not trusted set the result code to VAL_BAD_PROVABLY_UNSECURE ------------------------------------------------------------------------ r3030 | hserus | 2007-03-09 14:55:07 -0800 (Fri, 09 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.h - Add definitions for provably insecure related policy ------------------------------------------------------------------------ r3029 | hserus | 2007-03-09 14:54:53 -0800 (Fri, 09 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c - Reorganize policy parse functions around the READ_ZONE_AND_VALUE and STORE_POLICY_FOR_ZONE macros - Define new policy that allows us to specify if the provably insecure condition is trusted or no ------------------------------------------------------------------------ r3028 | hserus | 2007-03-09 14:54:35 -0800 (Fri, 09 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/val_errors.h - Add new validator status for the "bad" provably insecure condition ------------------------------------------------------------------------ r3027 | hardaker | 2007-03-09 13:19:50 -0800 (Fri, 09 Mar 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm version number update ------------------------------------------------------------------------ r3026 | hardaker | 2007-03-09 13:17:41 -0800 (Fri, 09 Mar 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm copyright year update ------------------------------------------------------------------------ r3025 | hardaker | 2007-03-09 13:17:09 -0800 (Fri, 09 Mar 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm more uc/lc conversions for proper dnssec checking ------------------------------------------------------------------------ r3024 | hardaker | 2007-03-09 10:58:48 -0800 (Fri, 09 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt lowercase all NS records during set and check to ensure case discrepencies don't affect results. ------------------------------------------------------------------------ r3023 | hardaker | 2007-03-09 10:51:22 -0800 (Fri, 09 Mar 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm don't lowercase the nxtdname ------------------------------------------------------------------------ r3022 | hserus | 2007-03-08 12:53:31 -0800 (Thu, 08 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/selftests.dist Use VAL_BOGUS_UNPROVABLE state instead of VAL_INDETERMINATE ------------------------------------------------------------------------ r3021 | hserus | 2007-03-08 12:52:24 -0800 (Thu, 08 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_resquery.h Moved find_next_zonecut function to val_assertion.c ------------------------------------------------------------------------ r3020 | hserus | 2007-03-08 12:51:37 -0800 (Thu, 08 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Perform top-down validation while verifying if a name is provably unsecure ------------------------------------------------------------------------ r3019 | lfoster | 2007-03-07 12:26:53 -0800 (Wed, 07 Mar 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Take out early code for writing TA info to a file. This is replaced now by using DataDumper. ------------------------------------------------------------------------ r3018 | lfoster | 2007-03-07 11:49:12 -0800 (Wed, 07 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman minor code changes, removed some obsolete comments ------------------------------------------------------------------------ r3017 | tewok | 2007-03-06 17:59:32 -0800 (Tue, 06 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Zap the phasestart rollrec field when a rollover cycle ends. ------------------------------------------------------------------------ r3016 | tewok | 2007-03-06 17:58:34 -0800 (Tue, 06 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Added a means for rollrec_settime() to set a phasestart to null. ------------------------------------------------------------------------ r3015 | tewok | 2007-03-06 13:07:21 -0800 (Tue, 06 Mar 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Added an extensive pod explanation for output formats and what is displayed for each type of format. Reworked the set-up of dummy values for skip records. ------------------------------------------------------------------------ r3014 | tewok | 2007-03-06 12:20:21 -0800 (Tue, 06 Mar 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Added the -loglevel option. Reformatted @opts so it's a bit clearer what's going on with it. Changed the default administrator from "(unlisted)" to "(defadmin)". ------------------------------------------------------------------------ r3013 | tewok | 2007-03-06 11:51:19 -0800 (Tue, 06 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added a comment to the file header. ------------------------------------------------------------------------ r3012 | tewok | 2007-03-06 10:45:33 -0800 (Tue, 06 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Added the -admin option. ------------------------------------------------------------------------ r3011 | tewok | 2007-03-06 10:14:45 -0800 (Tue, 06 Mar 2007) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Fixed copyright date. Deleted -phase option. Added -kskphase, -zskphase, and -phases options. ------------------------------------------------------------------------ r3010 | tewok | 2007-03-06 09:39:00 -0800 (Tue, 06 Mar 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollset Added the -admin option. ------------------------------------------------------------------------ r3009 | tewok | 2007-03-05 12:22:05 -0800 (Mon, 05 Mar 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollset Added the -kskphase option. Improved error checking for the -kskphase and -zskphase option values. ------------------------------------------------------------------------ r3008 | tewok | 2007-03-05 11:10:19 -0800 (Mon, 05 Mar 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollset Adjusted copyright date. Changed the -phase option to -zskphase. ------------------------------------------------------------------------ r3007 | lfoster | 2007-03-05 10:09:25 -0800 (Mon, 05 Mar 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Save new key data to a file, and load this file at the beginning of each run. This lets trustman survive restarts. ------------------------------------------------------------------------ r3006 | tewok | 2007-03-05 10:05:18 -0800 (Mon, 05 Mar 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollinit Fixed copyright dates. Added the -admin and -loglevel options. Add ksk_rolldate, ksk_rollsecs, zsk_rolldate, and zsk_rollsecs to the output. ------------------------------------------------------------------------ r3005 | tewok | 2007-03-05 10:01:51 -0800 (Mon, 05 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Fixed regexps for validating logging levels. ------------------------------------------------------------------------ r3004 | tewok | 2007-03-05 08:15:16 -0800 (Mon, 05 Mar 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtinitconf Change the "curphase" logging level to "phase". Fixed the value of the "phase" logging level. ------------------------------------------------------------------------ r3003 | tewok | 2007-03-05 08:12:19 -0800 (Mon, 05 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm M /trunk/dnssec-tools/tools/modules/rollmgr.pm Renamed the "curphase" logging level to "phase". ------------------------------------------------------------------------ r3002 | hserus | 2007-03-02 13:00:35 -0800 (Fri, 02 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/selftests.dist Fixed some older test cases ------------------------------------------------------------------------ r3001 | hserus | 2007-03-02 12:58:31 -0800 (Fri, 02 Mar 2007) | 10 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c - Implement timeout logic for validator cache - Implement bad-cache logic - No longer accessing the trust assertion using the val_ac_trust pointer. Instead, look for the trust point through the queries_for_query cache - Modifiy prototype of various functions to allow access to the queries_for_query cache - Dont use the VAL_INDETERMINATE_PROOF status code, instead use VAL_BOGUS_PROOF ------------------------------------------------------------------------ r3000 | hserus | 2007-03-02 12:58:14 -0800 (Fri, 02 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c - Correctly set the zonecut information for DS records obtained while following referrals ------------------------------------------------------------------------ r2999 | hserus | 2007-03-02 12:58:02 -0800 (Fri, 02 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c M /trunk/dnssec-tools/validator/libval/val_verify.h - No longer accessing the trust assertion using the val_ac_trust pointer ------------------------------------------------------------------------ r2998 | hserus | 2007-03-02 12:57:36 -0800 (Fri, 02 Mar 2007) | 10 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h - Add definitions for bad cache TTL and threshold - Removed pending query logic; we need to go and look for our pending query from the queries_for_query cache depending on the state of the assertion. - No longer maintain a pointer to val_ac_trust. If data in our cache times out the value will not be trustworthy. - Store TTL expiry and bad cache status in the val_query_chain structure ------------------------------------------------------------------------ r2997 | hserus | 2007-03-02 12:24:19 -0800 (Fri, 02 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c Recognize the VAL_ERROR status code ------------------------------------------------------------------------ r2996 | tewok | 2007-03-02 08:59:52 -0800 (Fri, 02 Mar 2007) | 10 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollchk Updated copyright. Added rollrec checks for: - invalid KSK phase - mismatched KSK rollover timestamps - mismatched ZSK rollover timestamps - contemporaneous KSK rollover and ZSK rollover - empty administrator field - invalid logging level ------------------------------------------------------------------------ r2995 | tewok | 2007-03-02 08:03:21 -0800 (Fri, 02 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pod Added a description for loglevel. ------------------------------------------------------------------------ r2994 | hserus | 2007-03-02 07:38:54 -0800 (Fri, 02 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Don't complain if the class is missing ------------------------------------------------------------------------ r2993 | marz | 2007-03-02 06:56:28 -0800 (Fri, 02 Mar 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Makefile.PL M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t fixes to build and test from treeprior to install, handle new conf locations, initial resolve_and_check() ------------------------------------------------------------------------ r2992 | tewok | 2007-03-01 18:41:01 -0800 (Thu, 01 Mar 2007) | 10 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Alphabetically sorted the defaults hash. Added missing defaults for lifespan-max, lifespan-min, rndc, roll_logfile, roll_loglevel, and zonesigner. Changed the "admin" default to the proper name "admin-email". Deleted the hardcoded @defnames array and replaced it with a dynamically built array. Made sure all the defaults have pod descriptions. ------------------------------------------------------------------------ r2991 | hserus | 2007-03-01 14:23:42 -0800 (Thu, 01 Mar 2007) | 3 lines Changed paths: A /trunk/dnssec-tools/apps/mozilla/drill-firefox A /trunk/dnssec-tools/apps/mozilla/drill-firefox/Makefile A /trunk/dnssec-tools/apps/mozilla/drill-firefox/README A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/content A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/content/drill A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/content/drill/about.xul A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/content/drill/contents.rdf A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/content/drill/drillOverlay.js A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/content/drill/drillOverlay.xul A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/content/drill/prefs.js A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/content/drill/prefs.xul A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/skin A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/skin/classic A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/skin/classic/drill A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/skin/classic/drill/contents.rdf A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/skin/classic/drill/drill_icon_big.png A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/skin/classic/drill/drill_icon_status.png A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/skin/classic/drill/drill_notverified.png A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/skin/classic/drill/drill_verified.png A /trunk/dnssec-tools/apps/mozilla/drill-firefox/defaults A /trunk/dnssec-tools/apps/mozilla/drill-firefox/defaults/preferences A /trunk/dnssec-tools/apps/mozilla/drill-firefox/defaults/preferences/drill.js A /trunk/dnssec-tools/apps/mozilla/drill-firefox/install.rdf Added the drill extension to firefox, which contains modifications that allow hostnames to be validated using libval/getaddr. ------------------------------------------------------------------------ r2990 | hserus | 2007-03-01 13:30:58 -0800 (Thu, 01 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Added some level of logging when conf files cannot be read ------------------------------------------------------------------------ r2989 | lfoster | 2007-03-01 10:55:46 -0800 (Thu, 01 Mar 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman modify resolve_and_check_dnskey to take a file argument, so I can also use it to pass in a temp file with a dnsval-ified named.conf so validate can check that as well. ------------------------------------------------------------------------ r2988 | rstory | 2007-03-01 07:42:40 -0800 (Thu, 01 Mar 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/apps/jabberd-2/jabberd-dnssec.pat - fix configure detection of libval-threads - add two config file options for resolver.xml - drop_untrusted and dnssec_log_level - use new libval log callback to log libval msgs ------------------------------------------------------------------------ r2987 | tewok | 2007-03-01 07:37:59 -0800 (Thu, 01 Mar 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Reverted to using curphase instead of zskphase. ------------------------------------------------------------------------ r2986 | rstory | 2007-03-01 07:36:30 -0800 (Thu, 01 Mar 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_x_query.c bump 2 log messages from DEBUG to INFO ------------------------------------------------------------------------ r2985 | rstory | 2007-03-01 07:35:19 -0800 (Thu, 01 Mar 2007) | 7 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_log.c - remove unused 'const char *' ptr in val_log struct - add 'void *' ptr in val_log struct - new logging method: callback - add new cb (callback) member to union in val_log struct - prototype for val_log_add_cb - add missing setup initialization in val_log_add_udp ------------------------------------------------------------------------ r2984 | tewok | 2007-03-01 07:31:18 -0800 (Thu, 01 Mar 2007) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Change from using a hardcoded default config path to calling getconffile(). Change "curphase" references to "zskphase". Added checks for the admin-email field. Expanded the pod description to be more helpful. ------------------------------------------------------------------------ r2983 | hserus | 2007-03-01 06:45:47 -0800 (Thu, 01 Mar 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c Fix typo ------------------------------------------------------------------------ r2982 | tewok | 2007-02-28 13:58:51 -0800 (Wed, 28 Feb 2007) | 9 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added prototype manual KSK rollover. Added enforcement of "one rollover at a time" rule. Initiation of KSK rolls takes precedence over initiation of ZSK rolls. Reworked expiration calculations to calculate from end of previous rollover cycle. Reorganized the initial pod description section. Added pod describing KSK rollover. ------------------------------------------------------------------------ r2981 | lfoster | 2007-02-28 12:30:30 -0800 (Wed, 28 Feb 2007) | 13 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman - added some TODOs so I won't forget - took out a bunch of variables no longer used - modified the data structure holding new keys so there is a single structure which contains all of the key info, including the add holddown time - made the newkey structure a hash of array refs so there can be more than one new key at a time for any given zone (thanks Suresh for the suggestion) - changed the way new key data is written to the config files so it looks better - modified again how dnsval.conf is handled so new keys are only added for the types of trust-anchors needed (not all) - new keys added to config files are now stored in the "known keys" structure - new keys added ... are now deleted from "new keys" structure ------------------------------------------------------------------------ r2980 | hserus | 2007-02-28 11:23:22 -0800 (Wed, 28 Feb 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Fix bad copy paste ------------------------------------------------------------------------ r2979 | hserus | 2007-02-28 11:16:07 -0800 (Wed, 28 Feb 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Construct the chain of trust even if some other thread had fetched data for you. ------------------------------------------------------------------------ r2978 | tewok | 2007-02-28 09:35:33 -0800 (Wed, 28 Feb 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Added predictive processing for path prognostication if -noprompt is passed. Added handling for the administrator's email address. ------------------------------------------------------------------------ r2977 | tewok | 2007-02-28 09:05:02 -0800 (Wed, 28 Feb 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Added a default for rollerd's sleep time. ------------------------------------------------------------------------ r2976 | hserus | 2007-02-28 08:47:21 -0800 (Wed, 28 Feb 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c Start from the correct testcase in the range specified by {tcs, tce} ------------------------------------------------------------------------ r2975 | tewok | 2007-02-28 07:47:52 -0800 (Wed, 28 Feb 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Added a pod description of the admin default. ------------------------------------------------------------------------ r2974 | tewok | 2007-02-28 07:38:23 -0800 (Wed, 28 Feb 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Added a default DNSSEC-Tools administrator email address. ------------------------------------------------------------------------ r2973 | tewok | 2007-02-28 07:03:38 -0800 (Wed, 28 Feb 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/dnssectools.pm Add a check to ensure a valid recipient was given. Fix the pod's error return list. ------------------------------------------------------------------------ r2972 | tewok | 2007-02-27 18:15:33 -0800 (Tue, 27 Feb 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Adjusted some spacing. ------------------------------------------------------------------------ r2971 | tewok | 2007-02-27 18:14:14 -0800 (Tue, 27 Feb 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pod Updated to describe new fields. ------------------------------------------------------------------------ r2970 | tewok | 2007-02-27 17:29:57 -0800 (Tue, 27 Feb 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm.in Added some pod documentation for getprefixdir(). ------------------------------------------------------------------------ r2969 | tewok | 2007-02-27 17:19:54 -0800 (Tue, 27 Feb 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/dnssectools.pm Added an optional "sendto" parameter to dt_adminmail() to specify a non-default recipient. ------------------------------------------------------------------------ r2968 | tewok | 2007-02-27 17:12:06 -0800 (Tue, 27 Feb 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Renamed LOG_CURPHASE to LOG_PHASE. Added the ROLLCMD_DSPUB and ROLLCMD_ROLLKSK commands. Added a slash to the pidfile definition. ------------------------------------------------------------------------ r2967 | tewok | 2007-02-27 14:43:07 -0800 (Tue, 27 Feb 2007) | 10 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Deleted curphase from the list of valid rollrec fields. Add the following to the list of valid rollrec fields: administrator, ksk_rolldate, ksk_rollsecs, kskphase, zsk_rolldate, zsk_rollsecs, and zskphase. Fixed a number of regular expressions so field data can be blank. Fixed a bug wherein skip rollrecs weren't being recognized by rollrec_setval(). ------------------------------------------------------------------------ r2966 | rstory | 2007-02-27 14:37:41 -0800 (Tue, 27 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in fix expanded_sysconfdir for default prefix ------------------------------------------------------------------------ r2965 | rstory | 2007-02-27 12:57:30 -0800 (Tue, 27 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c clean up memory on exit ------------------------------------------------------------------------ r2964 | rstory | 2007-02-27 12:57:06 -0800 (Tue, 27 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c fix for running specific test range ------------------------------------------------------------------------ r2963 | hserus | 2007-02-27 09:55:30 -0800 (Tue, 27 Feb 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c - We no longer log query information, since the query chain could easily have been modified by a different thread, and hence the results may be un-predictable. ------------------------------------------------------------------------ r2962 | hserus | 2007-02-27 09:55:11 -0800 (Tue, 27 Feb 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.h M /trunk/dnssec-tools/validator/libval/val_cache.h M /trunk/dnssec-tools/validator/libval/val_resquery.h - Modified function prototypes: use the queries_for_query linked list instead of the val_query_chain linked list while tracking queries issued for val_resolve_and_check() ------------------------------------------------------------------------ r2961 | hserus | 2007-02-27 09:54:20 -0800 (Tue, 27 Feb 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.h - Define macros for acquiring and releasing context-related validator policy locks. ------------------------------------------------------------------------ r2960 | hserus | 2007-02-27 09:54:02 -0800 (Tue, 27 Feb 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c - Initialize context-related locks during context creation - Perform proper cleanup of context upon error or when it is released. ------------------------------------------------------------------------ r2959 | hserus | 2007-02-27 09:53:27 -0800 (Tue, 27 Feb 2007) | 8 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c - Add any new queries to the queries_for_query linked list being maintained for the current val_resolve_and_check() function. - Don't modify the name server cache in res_zi_unverified_ns_list(). This is to allow us to use a read-lock (as opposed to a write lock) while reading from this cache. ------------------------------------------------------------------------ r2958 | hserus | 2007-02-27 09:52:20 -0800 (Tue, 27 Feb 2007) | 38 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c - add_to_query_chain() now returns the added element in the last parameter. This element is no longer brought to the front of the list. Propagate this value to all functions that were operating under this older assumption. - Also match query flags when looking for a matching query in the val_query_chain linked list - Maintain a new linked list that tracks all queries issued for a given query. Each element in the linked list points to a separate element in the val_query_chain linked list For each element added to the queries_for_query linked list, we also acquire a read lock, so that the query does not disappear underneath us. val_resolve_and_check() only tries to answer these queries (instead of all outstanding queries in val_query_chain) - A proof of non-existence with a different owner name can be returned when we ask for one of NSEC, SOA or NSEC3 types. Don't treat this as a conflicting answer. - For each newly created authentication chain element add a "back pointer" to the query that was responsible for its creation. - Use flags from the val_query_chain structure where ever this is available instead of passing the flags as a separate argument. - Since the authentication chain is always available from within the context, don't pass it as a separate argument to functions such as assimilate_answers - Combine find_next_zonecut() and verify_provably_unsecure() functions into the main query send/receive cycle. Also add a "done" parameter for each of these functions to indicate if the operation completed or was waiting for more data. - Return result of verify_provably_unsecure() check as a separate param and return the normal error codes from the function. - ask_cache() and ask_resolver() now try and fill in data for all pending queries instead of just returning when the first answer is found. - Acquire proper locks before refreshing validator policy ------------------------------------------------------------------------ r2957 | hserus | 2007-02-27 09:49:11 -0800 (Tue, 27 Feb 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.c - Use separate locks for each cache type - Always grab an write lock when modifying the cache instead of doing upgrade/downgrade operations ------------------------------------------------------------------------ r2956 | hserus | 2007-02-27 09:48:48 -0800 (Tue, 27 Feb 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c - Modify validator policy only after acquiring appropriate locks ------------------------------------------------------------------------ r2955 | hserus | 2007-02-27 09:48:25 -0800 (Tue, 27 Feb 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/libval/val_x_query.c - We no longer log query information, since the query chain could easily have been modified by a different thread; the results are un-predictable. ------------------------------------------------------------------------ r2954 | hserus | 2007-02-27 09:46:48 -0800 (Tue, 27 Feb 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c - Never block when reading data from the sockets ------------------------------------------------------------------------ r2953 | hserus | 2007-02-27 09:46:23 -0800 (Tue, 27 Feb 2007) | 16 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h - Added VAL_MASK_AFFECTS_CACHING flag - Define read-write and mutex locks for val_context_t - Added a back pointer from the "internal" authentication chain element to the query that was reponsible for its creation - Added a read-write lock for val_query_chain - Made qc_flags type consistent with type being passed to val_resolve_and_check() - Added new structure queries_for_query that acts as a container for all queries issued while verifying and validating a given query. - Changed the prototype for val_log_authentication_chain. We no longer log query information, since the query chain could easily have been modified by a different thread, and hence the results may be un-predictable. ------------------------------------------------------------------------ r2952 | hserus | 2007-02-26 13:27:16 -0800 (Mon, 26 Feb 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c Make return code consistent with other command line apps for the validator: return 0 in success and -1 on failure. ------------------------------------------------------------------------ r2951 | hserus | 2007-02-26 12:56:10 -0800 (Mon, 26 Feb 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_parse.c Update NSEC3 code to most recent spec ------------------------------------------------------------------------ r2950 | rstory | 2007-02-26 10:36:33 -0800 (Mon, 26 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/Makefile.in M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Makefile.PL pass/accept sysconfdir when making perl makefiles ------------------------------------------------------------------------ r2949 | rstory | 2007-02-26 10:35:12 -0800 (Mon, 26 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/etc/Makefile.PL get sysconfdir from args to stuff into makefile ------------------------------------------------------------------------ r2948 | rstory | 2007-02-23 11:27:35 -0800 (Fri, 23 Feb 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm - use getconfdir to get config dir - tweak pod/comments to use /usr/local/etc instead of /usr/etc ------------------------------------------------------------------------ r2947 | rstory | 2007-02-23 11:23:23 -0800 (Fri, 23 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm use getconfdir to get config dir ------------------------------------------------------------------------ r2946 | rstory | 2007-02-23 11:17:09 -0800 (Fri, 23 Feb 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm - use conf module - use prefix for in default path to binaries - use sysconfdir in default conf file path ------------------------------------------------------------------------ r2945 | rstory | 2007-02-23 11:15:23 -0800 (Fri, 23 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm.in new getprefixdir function ------------------------------------------------------------------------ r2944 | rstory | 2007-02-23 08:45:01 -0800 (Fri, 23 Feb 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/Makefile.in M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in D /trunk/dnssec-tools/tools/modules/conf.pm A /trunk/dnssec-tools/tools/modules/conf.pm.in (from /trunk/dnssec-tools/tools/modules/conf.pm:2940) - generate conf.pm from conf.pm.in - use sysconfdir instead of prefix/etc ------------------------------------------------------------------------ r2943 | rstory | 2007-02-23 07:24:54 -0800 (Fri, 23 Feb 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/Makefile.in M /trunk/dnssec-tools/validator/Makefile.top M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in use $sysconfdir instead of $prefix/etc ------------------------------------------------------------------------ r2942 | lfoster | 2007-02-21 12:06:03 -0800 (Wed, 21 Feb 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman added back some code to write new keys only to the correct type of trust anchors in dnsval.conf. ------------------------------------------------------------------------ r2941 | rstory | 2007-02-21 07:10:21 -0800 (Wed, 21 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS mention new default path, configure behaviour and selftest suites ------------------------------------------------------------------------ r2940 | tewok | 2007-02-20 12:13:48 -0800 (Tue, 20 Feb 2007) | 3 lines Changed paths: D /trunk/dnssec-tools/tools/etc/dnssec A /trunk/dnssec-tools/tools/etc/dnssec-tools (from /trunk/dnssec-tools/tools/etc/dnssec:2939) Moving .../etc/dnssec to .../etc/dnssec-tools. ------------------------------------------------------------------------ r2939 | tewok | 2007-02-20 11:42:10 -0800 (Tue, 20 Feb 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm M /trunk/dnssec-tools/tools/modules/defaults.pm Moved .../etc/dnssec to .../etc/dnssec-tools. ------------------------------------------------------------------------ r2938 | tewok | 2007-02-20 11:01:57 -0800 (Tue, 20 Feb 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/etc/README M /trunk/dnssec-tools/tools/etc/dnssec/README M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pod Moving .../etc/dnssec to .../etc/dnssec-tools. ------------------------------------------------------------------------ r2937 | rstory | 2007-02-20 10:23:50 -0800 (Tue, 20 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/Makefile.in update to use etc/dnssec-tools ------------------------------------------------------------------------ r2936 | rstory | 2007-02-20 10:22:09 -0800 (Tue, 20 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/etc/Makefile.PL update CONFDIR to use etc/dnssec-tools ------------------------------------------------------------------------ r2935 | rstory | 2007-02-20 10:19:30 -0800 (Tue, 20 Feb 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/Makefile.in - fix much breakage in makedirectories target - update path in dtinitconf message ------------------------------------------------------------------------ r2934 | rstory | 2007-02-20 10:16:12 -0800 (Tue, 20 Feb 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/Makefile.in - fix much breakage in makedirectories target - add PREFIX/etc/dnssec-tools to INSTALLDIRS - update nextstepinstructions to use paths from configure ------------------------------------------------------------------------ r2933 | rstory | 2007-02-20 10:14:36 -0800 (Tue, 20 Feb 2007) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/Makefile.top M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in - display summary of options when configure finishes - update default config prefixes to PREFIX/etc/dnssec-tools - prompt for resolv.conf and root.hints locations if not specified - search for existing root.hints file, and use it as the default in prompt to user ------------------------------------------------------------------------ r2932 | rstory | 2007-02-20 10:10:52 -0800 (Tue, 20 Feb 2007) | 3 lines Changed paths: A /trunk/dnssec-tools/validator/acinclude.m4 M /trunk/dnssec-tools/validator/aclocal.m4 - add acinclude.m4 (from net-snmp) - run aclocal to upate aclocal.m4, and include acinclude.m4 ------------------------------------------------------------------------ r2931 | rstory | 2007-02-20 10:00:34 -0800 (Tue, 20 Feb 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/apps/validator_driver.h M /trunk/dnssec-tools/validator/apps/validator_selftest.c - add -F | --testcase-conf to all testcase file to be specified on command line - warn if -s and -S are combined, or -S used multiple times ------------------------------------------------------------------------ r2930 | rstory | 2007-02-19 11:26:07 -0800 (Mon, 19 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/patches/README fix typo ------------------------------------------------------------------------ r2929 | rstory | 2007-02-16 15:27:01 -0800 (Fri, 16 Feb 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/apps/validator_driver.h M /trunk/dnssec-tools/validator/apps/validator_selftest.c - add '-S suite |--test-suite=suite' - '-s | --selftest' now runs all suites - prefix selftest runs with suite name - prefix each test with index in test suite ------------------------------------------------------------------------ r2928 | hserus | 2007-02-16 15:20:37 -0800 (Fri, 16 Feb 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/Makefile.in Install getaddr and gethost applications ------------------------------------------------------------------------ r2927 | hserus | 2007-02-16 15:19:43 -0800 (Fri, 16 Feb 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/getaddr.c M /trunk/dnssec-tools/validator/apps/gethost.c Return the validation status as the program status code ------------------------------------------------------------------------ r2926 | hserus | 2007-02-16 15:04:45 -0800 (Fri, 16 Feb 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Don't complaint if root.hints is missing ------------------------------------------------------------------------ r2925 | rstory | 2007-02-16 13:46:57 -0800 (Fri, 16 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval-config.in add sres to libs ------------------------------------------------------------------------ r2924 | rstory | 2007-02-16 10:40:39 -0800 (Fri, 16 Feb 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/apps/selftests.dist - add the rest of the tests from validator, as suites - Please feel free to re-organize and groupe the suites as needed! ------------------------------------------------------------------------ r2923 | rstory | 2007-02-16 10:38:35 -0800 (Fri, 16 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c add support for suites of tests ------------------------------------------------------------------------ r2922 | rstory | 2007-02-16 08:45:40 -0800 (Fri, 16 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/Makefile.in remove extra QUIET ------------------------------------------------------------------------ r2921 | rstory | 2007-02-13 11:59:13 -0800 (Tue, 13 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c copy ptr after it is initialized ------------------------------------------------------------------------ r2920 | rstory | 2007-02-13 11:45:28 -0800 (Tue, 13 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in deal with default prefix for testcase path ------------------------------------------------------------------------ r2919 | rstory | 2007-02-13 11:28:12 -0800 (Tue, 13 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_selftest.c add includes for os x ------------------------------------------------------------------------ r2918 | rstory | 2007-02-13 10:47:55 -0800 (Tue, 13 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/Makefile.top M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in add path to cp ------------------------------------------------------------------------ r2917 | rstory | 2007-02-13 10:47:03 -0800 (Tue, 13 Feb 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/apps/Makefile.in - rename selftest dist file - create $prefix/etc/dnssec during install ------------------------------------------------------------------------ r2916 | rstory | 2007-02-13 10:45:08 -0800 (Tue, 13 Feb 2007) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/selftests.dist (from /trunk/dnssec-tools/validator/apps/validator_tests.dist:2913) D /trunk/dnssec-tools/validator/apps/validator_tests.dist rename file ------------------------------------------------------------------------ r2915 | rstory | 2007-02-13 10:12:14 -0800 (Tue, 13 Feb 2007) | 1 line Changed paths: A /trunk/dnssec-tools/validator/apps/validator_driver.h new header ------------------------------------------------------------------------ r2914 | rstory | 2007-02-13 10:11:12 -0800 (Tue, 13 Feb 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c update for getting testcases from config file ------------------------------------------------------------------------ r2913 | rstory | 2007-02-13 10:08:30 -0800 (Tue, 13 Feb 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/Makefile.in A /trunk/dnssec-tools/validator/apps/validator_selftest.c A /trunk/dnssec-tools/validator/apps/validator_tests.dist new files for getting testcases from a config file ------------------------------------------------------------------------ r2912 | rstory | 2007-02-13 10:06:49 -0800 (Tue, 13 Feb 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator-config.h.in add VALIDATOR_TESTCASES macro ------------------------------------------------------------------------ r2911 | marz | 2007-02-13 07:00:54 -0800 (Tue, 13 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/Makefile.in M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Makefile.PL add paths to perl mod make for libval-config ------------------------------------------------------------------------ r2910 | rstory | 2007-02-13 06:52:24 -0800 (Tue, 13 Feb 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator-config.h.in - add define for MAX_TEST_RESULTS ------------------------------------------------------------------------ r2909 | rstory | 2007-02-13 06:33:23 -0800 (Tue, 13 Feb 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c - rename get_token to val_get_token and remove static qualifier - new static destroy_valpolovr to reduce duplicated code ------------------------------------------------------------------------ r2908 | hserus | 2007-02-12 13:36:05 -0800 (Mon, 12 Feb 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_support.h Save header information when constructing an empty nxdomain response ------------------------------------------------------------------------ r2907 | tewok | 2007-02-09 11:13:52 -0800 (Fri, 09 Feb 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/dnssectools.pm Fixed a few errors in the pod. ------------------------------------------------------------------------ r2906 | hserus | 2007-02-09 06:25:27 -0800 (Fri, 09 Feb 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/val_errors.h M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_x_query.c Make VAL_NONEXISTENT_TYPE_NOCHAIN a transient error code: it will settle to one of VAL_NONEXISTENT_NAME_NOCHAIN or VAL_NONEXISTENT_TYPE_NOCHAIN ------------------------------------------------------------------------ r2905 | hserus | 2007-02-08 12:27:05 -0800 (Thu, 08 Feb 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.h Correct improper #undef usage ------------------------------------------------------------------------ r2904 | marz | 2007-02-07 11:49:02 -0800 (Wed, 07 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Makefile.PL M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs M /trunk/dnssec-tools/tools/modules/Net-addrinfo/t/basic.t M /trunk/dnssec-tools/validator/Makefile.in install libval-config and use it from perlmod, fix test for mac compatibility ------------------------------------------------------------------------ r2903 | hserus | 2007-02-07 11:14:26 -0800 (Wed, 07 Feb 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Don't add the same key multiple times ------------------------------------------------------------------------ r2902 | marz | 2007-02-06 09:28:30 -0800 (Tue, 06 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Makefile.PL add subdirs to top level make ------------------------------------------------------------------------ r2901 | rstory | 2007-02-06 07:45:33 -0800 (Tue, 06 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval-config.in add missing lvc_LIBDIR ------------------------------------------------------------------------ r2900 | marz | 2007-02-06 07:44:48 -0800 (Tue, 06 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm more support to handle context with config ------------------------------------------------------------------------ r2899 | rstory | 2007-02-06 07:41:26 -0800 (Tue, 06 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in make libval-config executable ------------------------------------------------------------------------ r2898 | rstory | 2007-02-05 15:05:20 -0800 (Mon, 05 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in help spacing tweaks ------------------------------------------------------------------------ r2897 | rstory | 2007-02-05 15:00:35 -0800 (Mon, 05 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS add note on config file configure options and new libval-config ------------------------------------------------------------------------ r2896 | rstory | 2007-02-05 14:57:13 -0800 (Mon, 05 Feb 2007) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/include/validator-config.h.in M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval-config.in - add configurable config file paths - remove VAL_CONFIGURATION_FILE, ROOT_HINTS and RESOLV_CONF from validator.h - add configure options to specify paths for dnsval.conf, resolv.conf and root.hints - update code for new defines for those paths - update libval-config with options to report those paths ------------------------------------------------------------------------ r2895 | tewok | 2007-02-05 13:55:28 -0800 (Mon, 05 Feb 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed a case where the current KSK wasn't being loaded. ------------------------------------------------------------------------ r2894 | marz | 2007-02-05 13:30:34 -0800 (Mon, 05 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs use new api to create context with configs supplied ------------------------------------------------------------------------ r2893 | hserus | 2007-02-05 12:34:14 -0800 (Mon, 05 Feb 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman - Changes to support validation - Maintain original file whitespacing as much as possible ------------------------------------------------------------------------ r2892 | tewok | 2007-02-05 11:31:14 -0800 (Mon, 05 Feb 2007) | 11 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Reorganized code to group ZSK-specific routines in one blob, and to group KSK-specific routines in another. Renamed some routines for clarity Collapsed two routines into one so that rolling is done based on zone (check all of a zone's keys) rather than being based on keys (rolling ZSKs then rolling KSKs.) ------------------------------------------------------------------------ r2891 | tewok | 2007-02-03 08:57:43 -0800 (Sat, 03 Feb 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Deleted an unused variable. ------------------------------------------------------------------------ r2890 | lfoster | 2007-02-02 12:23:41 -0800 (Fri, 02 Feb 2007) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Fixed writing new keys to dnsval.conf so that new trust anchors are only written to the types for which this zone already had a TA. Made the output look a lot neater. ------------------------------------------------------------------------ r2887 | hardaker | 2007-02-02 09:07:09 -0800 (Fri, 02 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/Makefile.in use DESTDIR when installing perl ------------------------------------------------------------------------ r2886 | hardaker | 2007-02-02 08:50:10 -0800 (Fri, 02 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/Makefile.PL honor DESTDIR for rules ------------------------------------------------------------------------ r2885 | hardaker | 2007-02-02 08:45:58 -0800 (Fri, 02 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/Makefile.PL quoting typo ------------------------------------------------------------------------ r2884 | hardaker | 2007-02-02 08:34:45 -0800 (Fri, 02 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/Makefile.PL document why the RULESDIR is hard-coded ------------------------------------------------------------------------ r2883 | hserus | 2007-02-02 08:26:33 -0800 (Fri, 02 Feb 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_policy.c Use standard method of accessing stat timestamps ------------------------------------------------------------------------ r2882 | hserus | 2007-02-02 08:11:02 -0800 (Fri, 02 Feb 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c Remove reference to the_default_context ------------------------------------------------------------------------ r2881 | hserus | 2007-02-02 07:54:48 -0800 (Fri, 02 Feb 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.h Define prototypes of new functions that allow refresh of configuration files to be possible ------------------------------------------------------------------------ r2880 | hserus | 2007-02-02 07:54:15 -0800 (Fri, 02 Feb 2007) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c Define a new context-creation function that allows you to specify the resolver/validator/root-hints configuration files Perform initialization and destruction of new context members that implement config refresh functionality Define new functions to refresh configuration files ------------------------------------------------------------------------ r2879 | hserus | 2007-02-02 07:53:58 -0800 (Fri, 02 Feb 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Use the root hints information within context to bootstrap queries ------------------------------------------------------------------------ r2878 | hserus | 2007-02-02 07:53:39 -0800 (Fri, 02 Feb 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Use the config files within the context to generate validator and resolver policy On each execution of val_resolve_and_check() check the last modified time on the configuration files and re-initialize configuration files if required ------------------------------------------------------------------------ r2877 | hserus | 2007-02-02 07:53:19 -0800 (Fri, 02 Feb 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_cache.h Store root_ns information inside context since this can be different for different contexts (theoretically) ------------------------------------------------------------------------ r2876 | hserus | 2007-02-02 07:53:00 -0800 (Fri, 02 Feb 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Save last accessed timestamp each time the configuration files are read Make modifications to the context only when the configuration files have been parsed properly. That way we can ensure that the context is not corrupted when we want to refresh it with a new configuration file. ------------------------------------------------------------------------ r2875 | hserus | 2007-02-02 07:52:37 -0800 (Fri, 02 Feb 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/Makefile.in M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod rename resolver_config_set/get to resolv_conf_set/get ------------------------------------------------------------------------ r2874 | hserus | 2007-02-02 07:51:46 -0800 (Fri, 02 Feb 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c Add a new option -w that allows test cases to be re-run in a loop ------------------------------------------------------------------------ r2873 | hserus | 2007-02-02 07:51:16 -0800 (Fri, 02 Feb 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h - Allow different validator/resolver/root configuration files for each context - Keep track of last modifed times for each configuration file - Add prototypes for new functions that allow above features to be accessed ------------------------------------------------------------------------ r2872 | rstory | 2007-02-02 07:49:40 -0800 (Fri, 02 Feb 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/.cvsignore M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator-config.h.in A /trunk/dnssec-tools/validator/libval-config.in add support for libval-config script ------------------------------------------------------------------------ r2871 | marz | 2007-02-02 06:28:22 -0800 (Fri, 02 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t really export noew error codes, fix final test case ------------------------------------------------------------------------ r2870 | hserus | 2007-02-02 06:15:27 -0800 (Fri, 02 Feb 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c When checking for cached query, only compare against the "original" name and not the transformed name (for example through a cname chain) ------------------------------------------------------------------------ r2869 | marz | 2007-02-01 13:08:44 -0800 (Thu, 01 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Makefile.PL M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t conf set/get funcs, isvalidated, new error codes, getaddrinfo proto change - some tests fail ------------------------------------------------------------------------ r2868 | marz | 2007-02-01 13:06:42 -0800 (Thu, 01 Feb 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/include/validator/validator.h M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_policy.h return alloc'd mem, rename conf funcs ------------------------------------------------------------------------ r2867 | hserus | 2007-02-01 11:33:50 -0800 (Thu, 01 Feb 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c Perform correct NULL check ------------------------------------------------------------------------ r2865 | hardaker | 2007-01-31 16:56:11 -0800 (Wed, 31 Jan 2007) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS NEWS update from Wayne ------------------------------------------------------------------------ r2863 | hardaker | 2007-01-31 13:13:13 -0800 (Wed, 31 Jan 2007) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS consistent formatting ------------------------------------------------------------------------ r2862 | lfoster | 2007-01-31 11:35:06 -0800 (Wed, 31 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/NEWS added trustman updates. ------------------------------------------------------------------------ r2861 | hardaker | 2007-01-31 08:13:29 -0800 (Wed, 31 Jan 2007) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS added a bug fix statement about libval ------------------------------------------------------------------------ r2860 | hardaker | 2007-01-31 08:01:46 -0800 (Wed, 31 Jan 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/Makefile.top update libtool library version ------------------------------------------------------------------------ r2859 | rstory | 2007-01-31 07:35:13 -0800 (Wed, 31 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml add discussion of val_resquery returning a value > anslen ------------------------------------------------------------------------ r2858 | hardaker | 2007-01-31 07:06:21 -0800 (Wed, 31 Jan 2007) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS NEWS update ------------------------------------------------------------------------ r2857 | hardaker | 2007-01-30 19:50:13 -0800 (Tue, 30 Jan 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt revert accidental commit ------------------------------------------------------------------------ r2856 | hardaker | 2007-01-30 19:49:34 -0800 (Tue, 30 Jan 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt M /trunk/dnssec-tools/tools/maketestzone/maketestzone M /trunk/dnssec-tools/tools/mapper/mapper M /trunk/dnssec-tools/tools/scripts/TrustMan.pl M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/trustman M /trunk/dnssec-tools/tools/scripts/zonesigner DNSSEC-Tools version update ------------------------------------------------------------------------ r2855 | hardaker | 2007-01-30 19:47:48 -0800 (Tue, 30 Jan 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/TrustMan.pl M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/tachk M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/trustman M /trunk/dnssec-tools/tools/scripts/zonesigner DNSSEC-Tools version update ------------------------------------------------------------------------ r2854 | hardaker | 2007-01-30 19:43:47 -0800 (Tue, 30 Jan 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner version tag 1.1 ------------------------------------------------------------------------ r2853 | lfoster | 2007-01-30 12:19:30 -0800 (Tue, 30 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman writes new keys to dnsval.conf after holddown time has passed. ------------------------------------------------------------------------ r2852 | tewok | 2007-01-29 17:44:49 -0800 (Mon, 29 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/zonesigner Changed -usepub to -usezskpub. ------------------------------------------------------------------------ r2851 | tewok | 2007-01-29 17:02:01 -0800 (Mon, 29 Jan 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Relocated some argument checking because the prior place was interfering with -rollksk. ------------------------------------------------------------------------ r2850 | tewok | 2007-01-29 16:59:56 -0800 (Mon, 29 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Deleted some defunct comments. ------------------------------------------------------------------------ r2849 | rstory | 2007-01-29 12:58:00 -0800 (Mon, 29 Jan 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/apps/ssh/ssh-dnssec.pat - update for api changes in 1.1 - reduce patch size - fix configure reporting when using libval-threads ------------------------------------------------------------------------ r2848 | tewok | 2007-01-29 12:31:50 -0800 (Mon, 29 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/tests/test-kskroll Added a zone indicator to the success and failure messages. ------------------------------------------------------------------------ r2847 | tewok | 2007-01-29 12:29:14 -0800 (Mon, 29 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/tests/test-kskroll Added some closure to the cleaner code. ------------------------------------------------------------------------ r2846 | rstory | 2007-01-29 12:05:30 -0800 (Mon, 29 Jan 2007) | 1 line Changed paths: M /trunk/dnssec-tools/apps/ssh/ssh-dnssec.pat update for new include dnssec-tools include paths ------------------------------------------------------------------------ r2845 | rstory | 2007-01-29 12:02:42 -0800 (Mon, 29 Jan 2007) | 1 line Changed paths: A /trunk/dnssec-tools/apps/ssh/README.dnssec readme ------------------------------------------------------------------------ r2844 | rstory | 2007-01-29 12:01:25 -0800 (Mon, 29 Jan 2007) | 1 line Changed paths: A /trunk/dnssec-tools/apps/ssh A /trunk/dnssec-tools/apps/ssh/ssh-dnssec.pat dnssec local validation patch for openssh 4.5p1 ------------------------------------------------------------------------ r2843 | rstory | 2007-01-29 11:59:47 -0800 (Mon, 29 Jan 2007) | 1 line Changed paths: A /trunk/dnssec-tools/apps/jabberd-2/jabberd-dnssec.pat dnssec local validation patch for jabberd 2 ------------------------------------------------------------------------ r2842 | rstory | 2007-01-29 11:59:14 -0800 (Mon, 29 Jan 2007) | 1 line Changed paths: A /trunk/dnssec-tools/apps/jabberd-2 dnssec local validation patch for jabberd 2 ------------------------------------------------------------------------ r2841 | tewok | 2007-01-29 10:21:57 -0800 (Mon, 29 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/tests/test-kskroll Changed -pubksk to -newpubksk. ------------------------------------------------------------------------ r2840 | tewok | 2007-01-29 10:20:44 -0800 (Mon, 29 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Changed -pubksk to -newpubksk. ------------------------------------------------------------------------ r2839 | tewok | 2007-01-29 10:15:43 -0800 (Mon, 29 Jan 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Do proper handling of -nosave and the savekeys config field. Prevent the root directory from being the key archive directory. ------------------------------------------------------------------------ r2838 | hserus | 2007-01-29 08:02:29 -0800 (Mon, 29 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch M /trunk/dnssec-tools/apps/postfix/postfix-howto.txt M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.6_dnssec_patch.txt Use validator/validator.h instead of validator.h ------------------------------------------------------------------------ r2837 | tewok | 2007-01-27 12:14:54 -0800 (Sat, 27 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Used the correct variable in the KSK info output. ------------------------------------------------------------------------ r2836 | tewok | 2007-01-27 11:41:35 -0800 (Sat, 27 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Changed New KSKs to Published KSKs. ------------------------------------------------------------------------ r2835 | tewok | 2007-01-27 11:39:33 -0800 (Sat, 27 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/tests/test-kskroll M /trunk/dnssec-tools/tools/scripts/zonesigner Changed New KSKs to Published KSKs. ------------------------------------------------------------------------ r2834 | tewok | 2007-01-27 11:11:16 -0800 (Sat, 27 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed the grammar in a pod sentence. ------------------------------------------------------------------------ r2833 | tewok | 2007-01-27 10:47:33 -0800 (Sat, 27 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Used the correct variable in an error message. ------------------------------------------------------------------------ r2832 | rstory | 2007-01-26 14:08:58 -0800 (Fri, 26 Jan 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_x_query.c - val_res_query() - free internal response after data copied - return full size of response on success ------------------------------------------------------------------------ r2831 | lfoster | 2007-01-25 14:44:58 -0800 (Thu, 25 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman fixed an options problem and changed version number. ------------------------------------------------------------------------ r2830 | tewok | 2007-01-25 10:44:40 -0800 (Thu, 25 Jan 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added a check to keyrec_fmtchk() to prevent an empty key keyrec from causing a new signing set to be generated. ------------------------------------------------------------------------ r2829 | lfoster | 2007-01-25 10:25:36 -0800 (Thu, 25 Jan 2007) | 9 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman now updates named.conf with new trust anchors when they have passed their holddown time. bunch of other minor stuff: added new flag for naming a trust anchor data file on the cmd line took out some old comments moved some stuff into read_*_file subs that belonged there ------------------------------------------------------------------------ r2828 | tewok | 2007-01-25 06:55:57 -0800 (Thu, 25 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Build the new KSK set with the correct key list. ------------------------------------------------------------------------ r2827 | tewok | 2007-01-25 06:53:11 -0800 (Thu, 25 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/tests/test-kskroll Added an option to the usage message. ------------------------------------------------------------------------ r2826 | tewok | 2007-01-24 05:43:52 -0800 (Wed, 24 Jan 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Some minor code optimization. Made greater use of setkeytype(). Fixed a bug in ZSK signing set creation. ------------------------------------------------------------------------ r2825 | tewok | 2007-01-22 18:54:23 -0800 (Mon, 22 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/zonesigner Added error actions stuff. ------------------------------------------------------------------------ r2824 | tewok | 2007-01-22 18:42:23 -0800 (Mon, 22 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/modules/rollrec.pm Added error action support. ------------------------------------------------------------------------ r2823 | tewok | 2007-01-22 18:41:14 -0800 (Mon, 22 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm Add error action interfaces for use in the DNSSEC-Tools modules. ------------------------------------------------------------------------ r2822 | tewok | 2007-01-22 13:51:09 -0800 (Mon, 22 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Replace a hash reference with a previously set variable. ------------------------------------------------------------------------ r2821 | tewok | 2007-01-22 10:16:28 -0800 (Mon, 22 Jan 2007) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Add some error checking for KSK rollover. Added a missing (and technically not necessary) semicolon. ------------------------------------------------------------------------ r2820 | tewok | 2007-01-22 08:36:02 -0800 (Mon, 22 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Added a missing check for an undefined hash ref. ------------------------------------------------------------------------ r2819 | tewok | 2007-01-22 07:33:53 -0800 (Mon, 22 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Add signing set names to key-name output. ------------------------------------------------------------------------ r2818 | tewok | 2007-01-19 14:31:58 -0800 (Fri, 19 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed some pod formatting. ------------------------------------------------------------------------ r2817 | tewok | 2007-01-19 13:58:40 -0800 (Fri, 19 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/tests/test-kskroll Fixed some pod. ------------------------------------------------------------------------ r2816 | tewok | 2007-01-19 13:57:37 -0800 (Fri, 19 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/tests/test-kskroll Fixed how filename formation is done. ------------------------------------------------------------------------ r2815 | tewok | 2007-01-19 13:34:18 -0800 (Fri, 19 Jan 2007) | 4 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/tests/test-kskroll This program runs tests to ensure that zonesigner's KSK rollover options are working properly. ------------------------------------------------------------------------ r2814 | tewok | 2007-01-19 13:33:06 -0800 (Fri, 19 Jan 2007) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/tests/README Add a README to describe the contents of this directory. ------------------------------------------------------------------------ r2813 | tewok | 2007-01-19 10:06:06 -0800 (Fri, 19 Jan 2007) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/tests Added a directory for tests. ------------------------------------------------------------------------ r2812 | tewok | 2007-01-19 09:37:12 -0800 (Fri, 19 Jan 2007) | 9 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added -newksk to generate a set of New KSKs. Reworked genksks() to explicitly do exactly what is needed, rather than relying on some unclear drop-throughs. Added -showsigncmd and -showkeycmd. ------------------------------------------------------------------------ r2811 | hserus | 2007-01-19 04:25:16 -0800 (Fri, 19 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_x_query.c Separate out check for trusted condition from check for validated condition ------------------------------------------------------------------------ r2810 | hserus | 2007-01-18 18:51:52 -0800 (Thu, 18 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c Add log statements for VAL_TRUSTED_ANSWER, VAL_UNTRUSTED_ANSWER and VAL_VALIDATED_ANSWER ------------------------------------------------------------------------ r2809 | hserus | 2007-01-18 18:51:10 -0800 (Thu, 18 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c Fix logic for determining trusted status ------------------------------------------------------------------------ r2808 | hserus | 2007-01-18 18:50:29 -0800 (Thu, 18 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.c Move variable outside #define construct ------------------------------------------------------------------------ r2807 | tewok | 2007-01-18 18:09:25 -0800 (Thu, 18 Jan 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Change "kskpub" references to "ksknew". Add "ksknew" to the zone fields. ------------------------------------------------------------------------ r2806 | tewok | 2007-01-18 17:09:22 -0800 (Thu, 18 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Fixed a comment. ------------------------------------------------------------------------ r2805 | tewok | 2007-01-18 15:25:18 -0800 (Thu, 18 Jan 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added support for New KSK keys. Fixed the help lines for KSK-related keys. ------------------------------------------------------------------------ r2804 | hserus | 2007-01-18 08:57:57 -0800 (Thu, 18 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Attempt to fix memory leak ------------------------------------------------------------------------ r2803 | hserus | 2007-01-17 12:38:08 -0800 (Wed, 17 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.6_dnssec_patch.txt Use val_istrusted() and val_isvalidated() instead of checking for exact return values. ------------------------------------------------------------------------ r2802 | hserus | 2007-01-17 09:17:14 -0800 (Wed, 17 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_x_query.c Return VAL_TRUSTED_ANSWER, VAL_UNTRUSTED_ANSWER or VAL_VALIDATED_ANSWER for merged validator status values. ------------------------------------------------------------------------ r2801 | hserus | 2007-01-17 09:16:37 -0800 (Wed, 17 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Recognize VAL_VALIDATED_ANSWER as a trusted and validated answer Recognize VAL_TRUSTED_ANSWER as a trusted answer ------------------------------------------------------------------------ r2800 | hserus | 2007-01-17 09:16:15 -0800 (Wed, 17 Jan 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Remove part that says that merged status value can be a non-existence type. We actually infer non-existence using the normal mechanisms used by the legacy functions. Additionally, val_status tells us if this is trusted or no. ------------------------------------------------------------------------ r2799 | hserus | 2007-01-17 09:14:11 -0800 (Wed, 17 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/getaddr.c Supply new val_status param to val_getaddrinfo() ------------------------------------------------------------------------ r2798 | hserus | 2007-01-17 09:13:42 -0800 (Wed, 17 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/validator.h Add val_status parameter to val_getaddrinfo() ------------------------------------------------------------------------ r2797 | hserus | 2007-01-17 09:13:26 -0800 (Wed, 17 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/include/validator/val_errors.h Add validator status codes for VAL_TRUSTED_ANSWER, VAL_UNTRUSTED_ANSWER and VAL_VALIDATED_ANSWER. ------------------------------------------------------------------------ r2796 | tewok | 2007-01-16 15:01:59 -0800 (Tue, 16 Jan 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added full support for current and obsolete KSK keys. Fixed a typo in a comment. ------------------------------------------------------------------------ r2795 | tewok | 2007-01-16 13:45:14 -0800 (Tue, 16 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner If -genksk is given, any existing KSKs are marked as obsolete. ------------------------------------------------------------------------ r2794 | tewok | 2007-01-16 06:58:52 -0800 (Tue, 16 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added -rollksk. ------------------------------------------------------------------------ r2793 | tewok | 2007-01-15 16:18:32 -0800 (Mon, 15 Jan 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/genkrf Changed 'ksk' keyrec refs to 'kskcur'. Updated the copyrights. ------------------------------------------------------------------------ r2792 | tewok | 2007-01-15 16:17:22 -0800 (Mon, 15 Jan 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/cleankrf Changed 'ksk' keyrec refs to 'kskcur'. Updated the copyrights. ------------------------------------------------------------------------ r2791 | tewok | 2007-01-15 16:16:43 -0800 (Mon, 15 Jan 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Changed 'ksk' keyrec refs to 'kskcur'. Updated the copyrights. ------------------------------------------------------------------------ r2790 | tewok | 2007-01-15 16:15:00 -0800 (Mon, 15 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Updated copyrights. ------------------------------------------------------------------------ r2789 | tewok | 2007-01-15 16:13:48 -0800 (Mon, 15 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Updated the copyright. ------------------------------------------------------------------------ r2788 | tewok | 2007-01-15 16:10:06 -0800 (Mon, 15 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/krfcheck Updated to handle KSK signing sets and multiple types of KSKs. ------------------------------------------------------------------------ r2787 | lfoster | 2007-01-15 14:03:09 -0800 (Mon, 15 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman parsing of dnsval.conf should be correct now. ------------------------------------------------------------------------ r2786 | tewok | 2007-01-15 11:05:30 -0800 (Mon, 15 Jan 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Initial code for KSK rollover. This does no rolling itself, but it adds in Current KSKs. ------------------------------------------------------------------------ r2785 | tewok | 2007-01-15 10:48:23 -0800 (Mon, 15 Jan 2007) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/keyrec.pod Started adding code for supporting KSK rollover. Added keyrec_fmtchk(), which ensures a keyrec file in in the current format. This is always called by keyrec_read(). ------------------------------------------------------------------------ r2784 | tewok | 2007-01-15 10:46:25 -0800 (Mon, 15 Jan 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Adjusted the copyright. Changed a log message from ALWAYS to TMI. ------------------------------------------------------------------------ r2783 | tewok | 2007-01-15 07:50:04 -0800 (Mon, 15 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Updated copyright. ------------------------------------------------------------------------ r2782 | tewok | 2007-01-15 07:36:25 -0800 (Mon, 15 Jan 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Add 2007 to the copyright. Fix the pod's example keyrec file to account for KSKs being in signing sets. ------------------------------------------------------------------------ r2780 | hardaker | 2007-01-12 15:29:18 -0800 (Fri, 12 Jan 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner tag as a pre-release of 1.1 ------------------------------------------------------------------------ r2779 | hardaker | 2007-01-12 15:23:46 -0800 (Fri, 12 Jan 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts Added a bogus function that does nothing so rule authors can insert it into rules to enable to have the perl debugger break within a rule definition ------------------------------------------------------------------------ r2778 | hardaker | 2007-01-12 15:04:06 -0800 (Fri, 12 Jan 2007) | 1 line Changed paths: M /trunk/dnssec-tools/Makefile.in force installation of scripts into bindir (exec_prefix turned out to be bad bad) ------------------------------------------------------------------------ r2777 | hardaker | 2007-01-12 14:59:51 -0800 (Fri, 12 Jan 2007) | 1 line Changed paths: M /trunk/dnssec-tools/Makefile.in force installation of scripts into exec_prefix ------------------------------------------------------------------------ r2776 | rstory | 2007-01-12 14:42:34 -0800 (Fri, 12 Jan 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/Makefile.top add subdir to include dir path ------------------------------------------------------------------------ r2775 | tewok | 2007-01-12 07:21:36 -0800 (Fri, 12 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone Changed zonesigner's -forceroll to -rollzsk. ------------------------------------------------------------------------ r2774 | tewok | 2007-01-12 07:18:24 -0800 (Fri, 12 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/zonesigner Changed zonesigner's -forceroll option to be -rollzsk. ------------------------------------------------------------------------ r2773 | hserus | 2007-01-11 20:03:59 -0800 (Thu, 11 Jan 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c For glue fetch operations set the DONT_VALIDATE flag Ensure that names are not registered twice for alias chains ------------------------------------------------------------------------ r2772 | hserus | 2007-01-11 20:01:53 -0800 (Thu, 11 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Make sure we break out of the resolve_and_check loop only if some result is available ------------------------------------------------------------------------ r2771 | hserus | 2007-01-11 16:14:02 -0800 (Thu, 11 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Look for glue in cname/dname chain ------------------------------------------------------------------------ r2770 | hserus | 2007-01-11 14:33:28 -0800 (Thu, 11 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Fix memory leak and null pointer exception ------------------------------------------------------------------------ r2769 | hserus | 2007-01-11 14:32:39 -0800 (Thu, 11 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Fix memory leak ------------------------------------------------------------------------ r2768 | hserus | 2007-01-11 14:32:02 -0800 (Thu, 11 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c Use VAL_INDETERMINATE in place of VAL_ERROR ------------------------------------------------------------------------ r2767 | tewok | 2007-01-11 14:01:59 -0800 (Thu, 11 Jan 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/zonesigner Changed "kskkey" to "kskcur". ------------------------------------------------------------------------ r2766 | tewok | 2007-01-11 14:01:14 -0800 (Thu, 11 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pod Changed "kskkey" to "kskcur". ------------------------------------------------------------------------ r2765 | tewok | 2007-01-11 13:53:13 -0800 (Thu, 11 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/keyrec.pod M /trunk/dnssec-tools/tools/modules/tooloptions.pm Changed the "kskkey" keyrec field name to "kskcur". ------------------------------------------------------------------------ r2764 | tewok | 2007-01-11 13:40:57 -0800 (Thu, 11 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Ensure that user-specified signing sets actually exist. ------------------------------------------------------------------------ r2763 | rstory | 2007-01-11 13:31:00 -0800 (Thu, 11 Jan 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/Makefile.in M /trunk/dnssec-tools/validator/libval/Makefile.in use new validator path to resolver.h and validator.h ------------------------------------------------------------------------ r2762 | rstory | 2007-01-11 13:28:17 -0800 (Thu, 11 Jan 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/getaddr.c M /trunk/dnssec-tools/validator/apps/gethost.c M /trunk/dnssec-tools/validator/apps/validator_driver.c use new validator path to resolver.h and validator.h ------------------------------------------------------------------------ r2761 | rstory | 2007-01-11 13:25:06 -0800 (Thu, 11 Jan 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_crypto.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_parse.c M /trunk/dnssec-tools/validator/libval/val_parse.h M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_verify.c M /trunk/dnssec-tools/validator/libval/val_x_query.c use new validator path to resolver.h and validator.h ------------------------------------------------------------------------ r2760 | tewok | 2007-01-11 13:24:27 -0800 (Thu, 11 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added keyrec_exists(). ------------------------------------------------------------------------ r2759 | rstory | 2007-01-11 13:18:31 -0800 (Thu, 11 Jan 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_tsig.h use new validator path to resolver.h ------------------------------------------------------------------------ r2758 | rstory | 2007-01-11 13:15:34 -0800 (Thu, 11 Jan 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/base64.c M /trunk/dnssec-tools/validator/libsres/ns_name.c M /trunk/dnssec-tools/validator/libsres/ns_netint.c M /trunk/dnssec-tools/validator/libsres/ns_parse.c M /trunk/dnssec-tools/validator/libsres/ns_print.c M /trunk/dnssec-tools/validator/libsres/ns_samedomain.c M /trunk/dnssec-tools/validator/libsres/ns_ttl.c M /trunk/dnssec-tools/validator/libsres/res_comp.c M /trunk/dnssec-tools/validator/libsres/res_debug.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_mkquery.c M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libsres/res_support.c M /trunk/dnssec-tools/validator/libsres/res_tsig.c use new validator path to resolver.h ------------------------------------------------------------------------ r2757 | rstory | 2007-01-11 12:57:58 -0800 (Thu, 11 Jan 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/include/validator/val_errors.h M /trunk/dnssec-tools/validator/include/validator/validator.h update includes for new subdirectory ------------------------------------------------------------------------ r2756 | rstory | 2007-01-11 12:56:05 -0800 (Thu, 11 Jan 2007) | 1 line Changed paths: A /trunk/dnssec-tools/validator/include/validator/val_errors.h (from /trunk/dnssec-tools/validator/libval/val_errors.h:2754) D /trunk/dnssec-tools/validator/libval/val_errors.h move val_errors.h to new include directory ------------------------------------------------------------------------ r2755 | rstory | 2007-01-11 12:55:24 -0800 (Thu, 11 Jan 2007) | 1 line Changed paths: D /trunk/dnssec-tools/validator/include/validator/val_errors.h remove wrong version ------------------------------------------------------------------------ r2754 | rstory | 2007-01-11 12:52:38 -0800 (Thu, 11 Jan 2007) | 1 line Changed paths: A /trunk/dnssec-tools/validator/include/validator/val_errors.h (from /trunk/dnssec-tools/validator/libval/val_errors.h:2736) A /trunk/dnssec-tools/validator/include/validator/validator.h (from /trunk/dnssec-tools/validator/libval/validator.h:2738) D /trunk/dnssec-tools/validator/libval/validator.h move validator.h and val_errors.h to new include directory ------------------------------------------------------------------------ r2753 | rstory | 2007-01-11 12:47:18 -0800 (Thu, 11 Jan 2007) | 1 line Changed paths: A /trunk/dnssec-tools/validator/include/validator/resolver.h (from /trunk/dnssec-tools/validator/libsres/resolver.h:2736) D /trunk/dnssec-tools/validator/libsres/resolver.h move resolver.h to new include directory ------------------------------------------------------------------------ r2752 | rstory | 2007-01-11 12:38:34 -0800 (Thu, 11 Jan 2007) | 1 line Changed paths: A /trunk/dnssec-tools/validator/include/validator new validator include dir ------------------------------------------------------------------------ r2751 | hardaker | 2007-01-11 08:40:01 -0800 (Thu, 11 Jan 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/Makefile.PL M /trunk/dnssec-tools/tools/donuts/donuts make paths less perl8 dependent and, unfortunately, less system flexible ------------------------------------------------------------------------ r2750 | hserus | 2007-01-10 15:35:15 -0800 (Wed, 10 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c Use u_int8_t in place of char to represent on-the-wire names ------------------------------------------------------------------------ r2749 | hserus | 2007-01-10 15:35:02 -0800 (Wed, 10 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_errors.h Add aliases for error codes that have errno equivalents ------------------------------------------------------------------------ r2748 | hserus | 2007-01-10 15:34:47 -0800 (Wed, 10 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c Additional check before logging information about original query ------------------------------------------------------------------------ r2747 | hserus | 2007-01-10 15:34:31 -0800 (Wed, 10 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.h Add prototype for process_cname_dname_responses() ------------------------------------------------------------------------ r2746 | hserus | 2007-01-10 15:34:18 -0800 (Wed, 10 Jan 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Moved ALLOCATE_REFERRAL_BLOCK from this file to val_support.h In find_nslist_for_query() look for a configured forwarder for the given zone first Move cname/dname processing logic into separate function, process_cname_dname_responses() Major clean-up of digest_response() logic ------------------------------------------------------------------------ r2745 | hserus | 2007-01-10 15:33:59 -0800 (Wed, 10 Jan 2007) | 10 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Change name_in_qnames() function so that we only pass the name as a parameter instead of the entire rrset Check for systhesized cname case in fails_to_answer_query() While building pending query, try harder to find the DNSKEY that created an RRSIG and check that the signer is within the zone. In check for conflicting answers allow chains of cnames and dnames to be possible Allow ask_cache to read cached cnames and dnames Stowing of answers only happens during digest_response() so that in-bailiwick condition cnan be checked Use namename() while comparing two on-the-wire names Implement other miscellaneous todos (portions marked XXX) ------------------------------------------------------------------------ r2744 | hserus | 2007-01-10 15:33:36 -0800 (Wed, 10 Jan 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.h Add namename() function along the lines of strstr() to compare two on-the-wire domain names Also add a new copy_rrset_rec_list() function Moved ALLOCATE_REFERRAL_BLOCK from val_resquery.c to here so that other files may use it ------------------------------------------------------------------------ r2743 | hserus | 2007-01-10 15:33:15 -0800 (Wed, 10 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.c Add namename() function along the lines of strstr() to compare two on-the-wire domain names Also add a new copy_rrset_rec_list() function ------------------------------------------------------------------------ r2742 | hserus | 2007-01-10 15:33:02 -0800 (Wed, 10 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c Set couple of missing error states ------------------------------------------------------------------------ r2741 | hserus | 2007-01-10 15:32:46 -0800 (Wed, 10 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.h Change prototypes for all the stow_ functions since we now do in-bailiwick checking Change prototypes for get_cached_rrset and get_nslist_from_cache as well. ------------------------------------------------------------------------ r2740 | hserus | 2007-01-10 15:32:31 -0800 (Wed, 10 Jan 2007) | 7 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.c Check if answers being cached are in-bailiwick for the given query Return a domain_info structure for get_cached_rrset. This is to allow cached cname/dname records to be returned Add preliminary support for negative answer cache Add support for storing/returning entries to/from the forwarder cache Use namename() while comparing two on-the-wire names ------------------------------------------------------------------------ r2739 | hserus | 2007-01-10 15:32:16 -0800 (Wed, 10 Jan 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Separated name server parsing logic into a separate function Add support for forwarding queries to specific name servers for specific zones. ------------------------------------------------------------------------ r2738 | rstory | 2007-01-09 14:14:22 -0800 (Tue, 09 Jan 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/validator.h make args param to val_log_add_optarg const ------------------------------------------------------------------------ r2737 | rstory | 2007-01-09 12:23:31 -0800 (Tue, 09 Jan 2007) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure update for previous configure.in change ------------------------------------------------------------------------ r2736 | tewok | 2007-01-09 11:18:49 -0800 (Tue, 09 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Fixed how the zone name is found in opts_zonekr(). ------------------------------------------------------------------------ r2735 | tewok | 2007-01-09 11:16:46 -0800 (Tue, 09 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed a couple verbose output messages. ------------------------------------------------------------------------ r2734 | tewok | 2007-01-09 10:49:53 -0800 (Tue, 09 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added a signing-set name save when -signset given and -genzsk not given. ------------------------------------------------------------------------ r2733 | tewok | 2007-01-09 10:47:22 -0800 (Tue, 09 Jan 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Backing out an invalid modification for unfound keys when -gen wasn't specified. ------------------------------------------------------------------------ r2732 | tewok | 2007-01-09 09:59:04 -0800 (Tue, 09 Jan 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Generate new signing set names when keyrec file doesn't contain any. This change was made for all keys. ------------------------------------------------------------------------ r2731 | tewok | 2007-01-08 15:51:12 -0800 (Mon, 08 Jan 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed to use -signset argument for the current ZSK. Fixed a bug wherein sometimes the INCLUDE lines in the intermediate zone file didn't have ".key" appended. ------------------------------------------------------------------------ r2730 | hserus | 2007-01-08 15:12:15 -0800 (Mon, 08 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml This version was submitted as draft-hayatnagarkar-dnsext-validator-api-03 ------------------------------------------------------------------------ r2729 | tewok | 2007-01-08 09:53:29 -0800 (Mon, 08 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/genkrf Fixed verbose output. ------------------------------------------------------------------------ r2728 | tewok | 2007-01-08 09:04:26 -0800 (Mon, 08 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/genkrf Added -kskcount. ------------------------------------------------------------------------ r2727 | tewok | 2007-01-06 09:41:45 -0800 (Sat, 06 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/genkrf Properly account for the number of ZSKs given on the command line. ------------------------------------------------------------------------ r2726 | tewok | 2007-01-06 09:25:12 -0800 (Sat, 06 Jan 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added -useboth to sign the zone with both Current and Published keys. We'll also sort the keys one the signing command line now. ------------------------------------------------------------------------ r2725 | rstory | 2007-01-06 09:07:35 -0800 (Sat, 06 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libval/val_cache.c - do not use pthreads if it is not available, or user configured without it ------------------------------------------------------------------------ r2724 | rstory | 2007-01-06 09:05:45 -0800 (Sat, 06 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/Makefile.top M /trunk/dnssec-tools/validator/apps/Makefile.in M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator-config.h.in M /trunk/dnssec-tools/validator/libval/Makefile.in - add '-threads' suffix to libval iff using threads - no explicit linking w/pthreads ------------------------------------------------------------------------ r2723 | rstory | 2007-01-06 08:18:59 -0800 (Sat, 06 Jan 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator-config.h.in - tweak indentation on some help - test for libpthreads - add --without-threads ------------------------------------------------------------------------ r2722 | tewok | 2007-01-05 21:47:20 -0800 (Fri, 05 Jan 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pod Some work towards moving away from tight binding to BIND. ------------------------------------------------------------------------ r2721 | tewok | 2007-01-05 21:43:58 -0800 (Fri, 05 Jan 2007) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/zonesigner Unified the BIND option keys to drop the "bind_" prefix. Some work towards moving away from tight binding to BIND. ------------------------------------------------------------------------ r2720 | tewok | 2007-01-05 21:43:14 -0800 (Fri, 05 Jan 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm M /trunk/dnssec-tools/tools/modules/defaults.pm M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/modules/tooloptions.pm Unified the BIND option keys to drop the "bind_" prefix. Some work towards moving away from tight binding to BIND. ------------------------------------------------------------------------ r2718 | lfoster | 2007-01-05 13:10:29 -0800 (Fri, 05 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Added defaults for tacontact and tasmtpserver (undefined). ------------------------------------------------------------------------ r2717 | hardaker | 2007-01-05 10:40:37 -0800 (Fri, 05 Jan 2007) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner document how the timing of -forceroll should work ------------------------------------------------------------------------ r2716 | tewok | 2007-01-05 10:13:45 -0800 (Fri, 05 Jan 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added a -sets line to the usage info. Changed "-set" to "-sets" in the pod. ------------------------------------------------------------------------ r2715 | hardaker | 2007-01-05 09:26:05 -0800 (Fri, 05 Jan 2007) | 1 line Changed paths: M /trunk/dnssec-tools/Makefile.in M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in attempt to fix broken shell issues for empty for loops when the validator isn't configured to be compiled in ------------------------------------------------------------------------ r2714 | tewok | 2007-01-05 08:50:27 -0800 (Fri, 05 Jan 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Modified to make "-outfile -" point the output to /dev/tty. Change the overwrite check to only be for regular files. ------------------------------------------------------------------------ r2713 | tewok | 2007-01-05 07:17:14 -0800 (Fri, 05 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Fixed an option name in the help message. ------------------------------------------------------------------------ r2712 | tewok | 2007-01-04 19:17:54 -0800 (Thu, 04 Jan 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Reworked how the tooloptions.pm calls are dealt with. Write and re-load a newly created keyrec file. ------------------------------------------------------------------------ r2711 | tewok | 2007-01-04 19:15:58 -0800 (Thu, 04 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/fixkrf Insist that GetOptions() respects option-case. ------------------------------------------------------------------------ r2710 | tewok | 2007-01-04 19:15:04 -0800 (Thu, 04 Jan 2007) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Changed the tooloptions() call to a opts_cmdopts() call. ------------------------------------------------------------------------ r2709 | tewok | 2007-01-04 19:14:15 -0800 (Thu, 04 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/genkrf Changed the tooloptions() call to a opts_cmdopts() call. ------------------------------------------------------------------------ r2708 | tewok | 2007-01-04 19:12:46 -0800 (Thu, 04 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm Renamed the names in @BIND_COMMANDS. ------------------------------------------------------------------------ r2707 | tewok | 2007-01-04 19:11:26 -0800 (Thu, 04 Jan 2007) | 9 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Reworked how this module works for greater clarity and ease of understanding: - Added a few internal routines that can be called by the interfaces. - Rewrote opts_zonekr(). - Added opts_cmdopts(). - Deleted tooloptions(), opts_keykr(), and opts_krfile(). ------------------------------------------------------------------------ r2706 | lfoster | 2007-01-04 13:45:14 -0800 (Thu, 04 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Added documentation for trustman defaults. ------------------------------------------------------------------------ r2705 | hserus | 2007-01-03 09:05:53 -0800 (Wed, 03 Jan 2007) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Add missing tag ------------------------------------------------------------------------ r2704 | tewok | 2007-01-02 09:18:51 -0800 (Tue, 02 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm *Really* fix the error message. ------------------------------------------------------------------------ r2703 | tewok | 2007-01-02 09:01:31 -0800 (Tue, 02 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm Fixed an error message. ------------------------------------------------------------------------ r2702 | tewok | 2007-01-02 08:46:29 -0800 (Tue, 02 Jan 2007) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Provided better documentation (pod and code comments) for the -forceroll option. ------------------------------------------------------------------------ r2701 | tewok | 2006-12-21 20:45:42 -0800 (Thu, 21 Dec 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Renamed dnssec_tools_defaults() to dnssec_tools_default(). ------------------------------------------------------------------------ r2700 | tewok | 2006-12-21 15:06:23 -0800 (Thu, 21 Dec 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Added dnssec_tools_alldefaults(). ------------------------------------------------------------------------ r2699 | tewok | 2006-12-21 14:31:15 -0800 (Thu, 21 Dec 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/rollerd Renamed dnssec_tools_defaults() to dnssec_tools_default(). ------------------------------------------------------------------------ r2698 | tewok | 2006-12-21 14:24:39 -0800 (Thu, 21 Dec 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Renamed dnssec_tools_defaults() to dnssec_tools_defaults(). ------------------------------------------------------------------------ r2697 | tewok | 2006-12-21 14:22:35 -0800 (Thu, 21 Dec 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Renamed dnssec_tools_defaults() to dnssec_tools_default(). ------------------------------------------------------------------------ r2696 | tewok | 2006-12-21 14:13:52 -0800 (Thu, 21 Dec 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Fixed the header description of dnssec_tools_defaults(). ------------------------------------------------------------------------ r2695 | lfoster | 2006-12-19 12:00:20 -0800 (Tue, 19 Dec 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Check for and remove trailing dots on zonenames read in from config files. ------------------------------------------------------------------------ r2694 | lfoster | 2006-12-19 11:57:39 -0800 (Tue, 19 Dec 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/TrustMan.pl Check for and remove dots on domainnames read in from config files. ------------------------------------------------------------------------ r2693 | lfoster | 2006-12-19 11:52:18 -0800 (Tue, 19 Dec 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/TrustMan.pl Check for and remove trailing dots on zonenames provided on the command line to option -d. Removed two functions no longer in use. ------------------------------------------------------------------------ r2691 | hserus | 2006-12-18 12:03:54 -0800 (Mon, 18 Dec 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Select only NS records from the NS query (ignore RRSIGs) ------------------------------------------------------------------------ r2690 | tewok | 2006-12-18 11:27:18 -0800 (Mon, 18 Dec 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/rolllog M /trunk/dnssec-tools/tools/scripts/rollset M /trunk/dnssec-tools/tools/scripts/timetrans Make GetOptions() respect option case. ------------------------------------------------------------------------ r2689 | tewok | 2006-12-16 11:37:07 -0800 (Sat, 16 Dec 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Sort the keys as written to the intermediate zone file. (This isn't necessary, but can be useful if a human ever looks at the file.) ------------------------------------------------------------------------ r2688 | tewok | 2006-12-16 11:19:00 -0800 (Sat, 16 Dec 2006) | 13 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Allow for multiple KSKs: - Added -kskcount. - Added -ksignset. - Modified internal KSK handling. - Deleted the kskpath keyrec value. Reworked how $INCLUDE lines are added to intermediate zone files. The new way is more rational and needs less special-case code. Revalued the UPD_ variables to be bit fields. Pluralized the names of $UPD_KSK and $UPD_ZSK. ------------------------------------------------------------------------ r2687 | tewok | 2006-12-14 20:47:49 -0800 (Thu, 14 Dec 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pod Added -kskcount. ------------------------------------------------------------------------ r2686 | tewok | 2006-12-14 20:46:43 -0800 (Thu, 14 Dec 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Added -kskcount. ------------------------------------------------------------------------ r2685 | tewok | 2006-12-14 20:45:59 -0800 (Thu, 14 Dec 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/keyrec.pod Added -kskcount. Deleted -kskpath. ------------------------------------------------------------------------ r2684 | tewok | 2006-12-14 20:44:41 -0800 (Thu, 14 Dec 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Added -kskcount. Deleted -kskpath. ------------------------------------------------------------------------ r2683 | tewok | 2006-12-14 13:12:26 -0800 (Thu, 14 Dec 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed a comment. ------------------------------------------------------------------------ r2682 | tewok | 2006-12-14 08:12:03 -0800 (Thu, 14 Dec 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollchk Comment formatting. ------------------------------------------------------------------------ r2681 | tewok | 2006-12-13 20:44:01 -0800 (Wed, 13 Dec 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/README Added info about dnssectools.pm. ------------------------------------------------------------------------ r2680 | tewok | 2006-12-13 20:42:44 -0800 (Wed, 13 Dec 2006) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/modules/dnssectools.pm Added a new catch-all module for DNSSEC-Tools library routines. ------------------------------------------------------------------------ r2679 | tewok | 2006-12-13 15:17:13 -0800 (Wed, 13 Dec 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pod Added an entry for admin-email. ------------------------------------------------------------------------ r2678 | tewok | 2006-12-13 08:08:23 -0800 (Wed, 13 Dec 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollset Added the -loglevel option to support zone-specific logging-levels. ------------------------------------------------------------------------ r2677 | tewok | 2006-12-12 20:36:53 -0800 (Tue, 12 Dec 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/signset-editor Reformatted some data lines. ------------------------------------------------------------------------ r2676 | tewok | 2006-12-12 20:28:06 -0800 (Tue, 12 Dec 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Added support for the zonelog command. Fixed some pod formatting. ------------------------------------------------------------------------ r2675 | tewok | 2006-12-12 20:26:47 -0800 (Tue, 12 Dec 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added support for the zonelog command. ------------------------------------------------------------------------ r2674 | tewok | 2006-12-12 20:24:27 -0800 (Tue, 12 Dec 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added the ROLLCMD_ZONELOG command. ------------------------------------------------------------------------ r2673 | tewok | 2006-12-12 10:39:53 -0800 (Tue, 12 Dec 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added support for rollrec record-specific logging levels. ------------------------------------------------------------------------ r2672 | tewok | 2006-12-12 10:38:47 -0800 (Tue, 12 Dec 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm Reworked a header comment. ------------------------------------------------------------------------ r2671 | tewok | 2006-12-12 10:38:00 -0800 (Tue, 12 Dec 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Set up proper flushing for keyrec_write(). ------------------------------------------------------------------------ r2670 | tewok | 2006-12-12 10:37:18 -0800 (Tue, 12 Dec 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Added a loglevel field to rollrecs. ------------------------------------------------------------------------ r2669 | tewok | 2006-12-12 10:34:16 -0800 (Tue, 12 Dec 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added rollmgr_lognum(). ------------------------------------------------------------------------ r2668 | tewok | 2006-12-12 08:20:39 -0800 (Tue, 12 Dec 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pod Added descriptions for roll_logfile, roll_loglevel, and roll_sleeptime. ------------------------------------------------------------------------ r2667 | hserus | 2006-12-11 11:02:35 -0800 (Mon, 11 Dec 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Use the first policy in the conf file as the default if none is specified. ------------------------------------------------------------------------ r2666 | marz | 2006-12-11 09:12:01 -0800 (Mon, 11 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-addrinfo/MANIFEST M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm fix MANIFEST ------------------------------------------------------------------------ r2665 | marz | 2006-12-08 13:24:17 -0800 (Fri, 08 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-addrinfo/README M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm doc fixes ------------------------------------------------------------------------ r2664 | rstory | 2006-12-08 06:48:32 -0800 (Fri, 08 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c fix byteorder for ascii ports ------------------------------------------------------------------------ r2663 | tewok | 2006-12-07 18:17:39 -0800 (Thu, 07 Dec 2006) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Made key archiving the default action. Added the -nosave option to prevent archiving of keys. Only do some -archivedir and savekey checks if -forceroll was given. Change archived key name format from "file.timestamp" to "timestamp.file." ------------------------------------------------------------------------ r2662 | hserus | 2006-12-07 10:07:54 -0800 (Thu, 07 Dec 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c Set the MERGE flag when composing an answer ------------------------------------------------------------------------ r2661 | hserus | 2006-12-07 08:24:13 -0800 (Thu, 07 Dec 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.c Initialize rrs.val_rrset_server to NULL ------------------------------------------------------------------------ r2660 | hserus | 2006-12-07 08:23:45 -0800 (Thu, 07 Dec 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Display message when zone cut cannot be identified Avoid possible null pointer exception when query for SOA returns no data Ensure that proper status is maintained in the authentication chain when proofs of non-existence are returned from the wrong side of the zone cut ------------------------------------------------------------------------ r2659 | marz | 2006-12-06 10:57:41 -0800 (Wed, 06 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm version update ------------------------------------------------------------------------ r2658 | marz | 2006-12-06 10:57:13 -0800 (Wed, 06 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm version update ------------------------------------------------------------------------ r2657 | marz | 2006-12-06 10:50:31 -0800 (Wed, 06 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm minor fix handling scalar context result of getaddrinfo() ------------------------------------------------------------------------ r2656 | marz | 2006-12-06 09:10:33 -0800 (Wed, 06 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-addrinfo/t/basic.t add test ------------------------------------------------------------------------ r2655 | tewok | 2006-12-05 14:36:45 -0800 (Tue, 05 Dec 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO M /trunk/dnssec-tools/tools/scripts/Makefile.PL M /trunk/dnssec-tools/tools/scripts/README A /trunk/dnssec-tools/tools/scripts/rollset Added the rollset command. ------------------------------------------------------------------------ r2654 | tewok | 2006-12-05 14:34:04 -0800 (Tue, 05 Dec 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm *Really* fix the pattern in rollrec_setval(). ------------------------------------------------------------------------ r2653 | tewok | 2006-12-05 13:36:26 -0800 (Tue, 05 Dec 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Fixed a bug in a pattern in rollrec_setval() which caused skip rollrecs to be missed. ------------------------------------------------------------------------ r2652 | rstory | 2006-12-05 12:56:13 -0800 (Tue, 05 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/Makefile.in add targets for help, test and leakchecks (requires valgrind) ------------------------------------------------------------------------ r2651 | hserus | 2006-12-05 12:22:09 -0800 (Tue, 05 Dec 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_crypto.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_verify.c Fix memory leaks ------------------------------------------------------------------------ r2650 | tewok | 2006-12-05 01:47:22 -0800 (Tue, 05 Dec 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Document -archivedir. Modify -forceroll so that saved obsolete ZSKs have a timestamp appended to the filename. ------------------------------------------------------------------------ r2647 | tewok | 2006-12-05 00:58:32 -0800 (Tue, 05 Dec 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Document the -savekeys option. ------------------------------------------------------------------------ r2646 | hardaker | 2006-12-04 22:03:59 -0800 (Mon, 04 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/ChangeLog final 1.0 changelog update ------------------------------------------------------------------------ r2645 | hardaker | 2006-12-04 22:01:04 -0800 (Mon, 04 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/dist/dnssec-tools.spec update for 1.0 ------------------------------------------------------------------------ r2644 | hardaker | 2006-12-04 21:53:52 -0800 (Mon, 04 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/signset-editor use bootstrap to load package-optional tk modules; fix use strict issue ------------------------------------------------------------------------ r2643 | hardaker | 2006-12-04 21:48:10 -0800 (Mon, 04 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights use bootstrap to load package-optional tk modules; fix use strict issue ------------------------------------------------------------------------ r2642 | hardaker | 2006-12-04 21:32:12 -0800 (Mon, 04 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL added trustman ------------------------------------------------------------------------ r2641 | hardaker | 2006-12-04 20:52:53 -0800 (Mon, 04 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/dist/dnssec-tools.spec updated for 1.0 ------------------------------------------------------------------------ r2640 | hardaker | 2006-12-04 20:51:44 -0800 (Mon, 04 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm accidentially committed a hard-coded-path patch that was meant for linux only ------------------------------------------------------------------------ r2636 | tewok | 2006-12-04 18:37:04 -0800 (Mon, 04 Dec 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added some code to save state when rollctl commands initiate a state change. ------------------------------------------------------------------------ r2635 | tewok | 2006-12-04 18:10:41 -0800 (Mon, 04 Dec 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed a couple messages. ------------------------------------------------------------------------ r2634 | hardaker | 2006-12-04 17:03:11 -0800 (Mon, 04 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/ChangeLog M /trunk/dnssec-tools/INSTALL M /trunk/dnssec-tools/NEWS M /trunk/dnssec-tools/README M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in A number of changes to fix text for upcoming 1.0 release ------------------------------------------------------------------------ r2633 | hardaker | 2006-12-04 17:02:27 -0800 (Mon, 04 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman use the bootstrap module to load Text::Wrap ------------------------------------------------------------------------ r2632 | hserus | 2006-12-04 14:34:35 -0800 (Mon, 04 Dec 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Fix bug in duplicate policy detection logic ------------------------------------------------------------------------ r2631 | hserus | 2006-12-04 13:17:03 -0800 (Mon, 04 Dec 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t Use futuredate-ds in place of futuredate-ns Use pastdate-ds in place of pastdate-ns ------------------------------------------------------------------------ r2630 | hserus | 2006-12-04 12:31:32 -0800 (Mon, 04 Dec 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c Update expected result values for test cases ------------------------------------------------------------------------ r2629 | hardaker | 2006-12-04 11:55:01 -0800 (Mon, 04 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c change future/pastdate name records ------------------------------------------------------------------------ r2628 | hardaker | 2006-12-04 11:47:05 -0800 (Mon, 04 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone fixed a few bugs relating to future/past date issues ------------------------------------------------------------------------ r2627 | hardaker | 2006-12-04 10:09:58 -0800 (Mon, 04 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL TrustMan -> TrustMan.pl ------------------------------------------------------------------------ r2626 | hserus | 2006-12-04 07:13:22 -0800 (Mon, 04 Dec 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs Use validator.h in place of validator-config.h ------------------------------------------------------------------------ r2625 | marz | 2006-12-04 07:11:11 -0800 (Mon, 04 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-addrinfo/t/basic.t remove unpredicatabke test ------------------------------------------------------------------------ r2624 | marz | 2006-12-04 07:01:35 -0800 (Mon, 04 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Makefile.PL remove non-portable test for dnssec-tool install ------------------------------------------------------------------------ r2623 | tewok | 2006-12-02 14:31:05 -0800 (Sat, 02 Dec 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Reworked existence check for zone file. ------------------------------------------------------------------------ r2622 | tewok | 2006-12-02 13:53:34 -0800 (Sat, 02 Dec 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed a bug wherein the published keys were being used to sign the zone instead of the current keys. ------------------------------------------------------------------------ r2621 | marz | 2006-12-02 07:15:22 -0800 (Sat, 02 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t test changesrelated to res_query() fix ------------------------------------------------------------------------ r2620 | marz | 2006-12-02 07:11:59 -0800 (Sat, 02 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_x_query.c fix crash with VAL_QUERY_MERGE_RRSETS ------------------------------------------------------------------------ r2619 | hardaker | 2006-12-01 16:30:33 -0800 (Fri, 01 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/BootStrap.pm M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm M /trunk/dnssec-tools/tools/modules/conf.pm M /trunk/dnssec-tools/tools/modules/defaults.pm M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/modules/rollrec.pm M /trunk/dnssec-tools/tools/modules/tooloptions.pm version updates ------------------------------------------------------------------------ r2618 | hserus | 2006-12-01 15:23:28 -0800 (Fri, 01 Dec 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/NEWS Mention some of the new features that were added during this release ------------------------------------------------------------------------ r2617 | lfoster | 2006-12-01 14:52:14 -0800 (Fri, 01 Dec 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Added version. ------------------------------------------------------------------------ r2616 | lfoster | 2006-12-01 14:49:20 -0800 (Fri, 01 Dec 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/TrustMan.pl Added version. ------------------------------------------------------------------------ r2614 | hardaker | 2006-12-01 14:17:17 -0800 (Fri, 01 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm version update ------------------------------------------------------------------------ r2613 | hardaker | 2006-12-01 14:16:50 -0800 (Fri, 01 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts version update ------------------------------------------------------------------------ r2612 | hardaker | 2006-12-01 14:16:06 -0800 (Fri, 01 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone version update ------------------------------------------------------------------------ r2611 | hardaker | 2006-12-01 14:13:45 -0800 (Fri, 01 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow vresion update ------------------------------------------------------------------------ r2610 | hserus | 2006-12-01 14:13:22 -0800 (Fri, 01 Dec 2006) | 2 lines Changed paths: D /trunk/dnssec-tools/tools/scripts/TrustMan A /trunk/dnssec-tools/tools/scripts/TrustMan.pl renamed TrustMan to TrustMan.pl ------------------------------------------------------------------------ r2609 | hardaker | 2006-12-01 14:12:31 -0800 (Fri, 01 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper version update ------------------------------------------------------------------------ r2608 | hardaker | 2006-12-01 14:11:24 -0800 (Fri, 01 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/tachk move to DT versions 1.0 ------------------------------------------------------------------------ r2602 | rstory | 2006-12-01 13:22:34 -0800 (Fri, 01 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_cache.h M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_crypto.c M /trunk/dnssec-tools/validator/libval/val_crypto.h M /trunk/dnssec-tools/validator/libval/val_errors.h M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_parse.c M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_policy.h M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_resquery.h M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_support.h M /trunk/dnssec-tools/validator/libval/val_verify.c M /trunk/dnssec-tools/validator/libval/val_x_query.c M /trunk/dnssec-tools/validator/libval/validator.h pre-release indent ------------------------------------------------------------------------ r2601 | rstory | 2006-12-01 13:15:59 -0800 (Fri, 01 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/ns_samedomain.c M /trunk/dnssec-tools/validator/libsres/nsap_addr.h M /trunk/dnssec-tools/validator/libsres/res_debug.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libsres/res_support.c M /trunk/dnssec-tools/validator/libsres/resolver.h pre-release indent ------------------------------------------------------------------------ r2598 | marz | 2006-12-01 12:58:12 -0800 (Fri, 01 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t take out debugging ------------------------------------------------------------------------ r2597 | marz | 2006-12-01 12:57:17 -0800 (Fri, 01 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t doc fixes ------------------------------------------------------------------------ r2595 | marz | 2006-12-01 12:18:10 -0800 (Fri, 01 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/README M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t doc fixes ------------------------------------------------------------------------ r2594 | marz | 2006-12-01 12:13:28 -0800 (Fri, 01 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm doc fix ------------------------------------------------------------------------ r2586 | lfoster | 2006-12-01 10:39:23 -0800 (Fri, 01 Dec 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman added -h or --help to provoke usage message. ------------------------------------------------------------------------ r2585 | hserus | 2006-12-01 09:44:52 -0800 (Fri, 01 Dec 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Ensure that correct zonecut information information is stored for the nameserver that we obtained in get_nslist_from_cache() Dont assume that referrals seen with a CNAME response relate to the alias. They may be returned when the parent does recursion for example. ------------------------------------------------------------------------ r2584 | marz | 2006-12-01 09:30:37 -0800 (Fri, 01 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-addrinfo/README M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.xs M /trunk/dnssec-tools/tools/modules/Net-addrinfo/const-xs.inc M /trunk/dnssec-tools/tools/modules/Net-addrinfo/t/basic.t Net::addrinfo docs and some small fixes ------------------------------------------------------------------------ r2582 | marz | 2006-12-01 07:12:17 -0800 (Fri, 01 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm bug fix to stringify() ------------------------------------------------------------------------ r2581 | marz | 2006-12-01 07:11:50 -0800 (Fri, 01 Dec 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t bug fixes and added tests ------------------------------------------------------------------------ r2577 | hserus | 2006-11-30 13:14:49 -0800 (Thu, 30 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/Makefile.in M /trunk/dnssec-tools/validator/doc/README M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod Remove references to no longer defined functions ------------------------------------------------------------------------ r2571 | marz | 2006-11-30 10:52:11 -0800 (Thu, 30 Nov 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t handle INET6 gethost ------------------------------------------------------------------------ r2570 | marz | 2006-11-30 10:51:53 -0800 (Thu, 30 Nov 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t handle INET6 gethost ------------------------------------------------------------------------ r2569 | marz | 2006-11-30 10:33:41 -0800 (Thu, 30 Nov 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t bug fixes for return types and error codes ------------------------------------------------------------------------ r2568 | marz | 2006-11-30 09:58:07 -0800 (Thu, 30 Nov 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c some error code fixes...pending discussion ------------------------------------------------------------------------ r2567 | hserus | 2006-11-29 23:16:04 -0800 (Wed, 29 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Try and settle on wording for policy scopes and labels ------------------------------------------------------------------------ r2566 | hserus | 2006-11-29 23:04:40 -0800 (Wed, 29 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c More tweaking to the policy hierarchy construction logic ------------------------------------------------------------------------ r2565 | hserus | 2006-11-29 21:49:28 -0800 (Wed, 29 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/etc/dnsval.conf : characters are only allowed for the default policy label. ------------------------------------------------------------------------ r2564 | hserus | 2006-11-29 21:44:23 -0800 (Wed, 29 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_context.h M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_policy.h M /trunk/dnssec-tools/validator/libval/validator.h Change policy related APIs to make them look similar to -03. We no longer have val_switch_policy_scope(),etc ------------------------------------------------------------------------ r2563 | hserus | 2006-11-29 21:41:14 -0800 (Wed, 29 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Change some of the semantics for the default policy. Its no longer always used implicitly. ------------------------------------------------------------------------ r2562 | lfoster | 2006-11-29 15:30:35 -0800 (Wed, 29 Nov 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Recognizes new keys, sets the add holddown time, and alerts the user when a new key has surpassed it's add holddown time and can be manually added. ------------------------------------------------------------------------ r2561 | hserus | 2006-11-29 14:06:29 -0800 (Wed, 29 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Check for the case where an incorrect NS was returned as part of a positive response for a DS. This affects the zonecut detection logic. ------------------------------------------------------------------------ r2560 | hserus | 2006-11-29 14:05:20 -0800 (Wed, 29 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Changed a log message ------------------------------------------------------------------------ r2559 | hserus | 2006-11-29 13:19:49 -0800 (Wed, 29 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c Make sure response is properly initialized to NULL. ------------------------------------------------------------------------ r2558 | hserus | 2006-11-29 13:11:47 -0800 (Wed, 29 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_support.c Check for data before printing response data ------------------------------------------------------------------------ r2557 | hserus | 2006-11-29 12:47:47 -0800 (Wed, 29 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c Remove unnecessary comment ------------------------------------------------------------------------ r2556 | hserus | 2006-11-29 12:47:34 -0800 (Wed, 29 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_crypto.c M /trunk/dnssec-tools/validator/libval/val_crypto.h Passing params by reference to address xxx-audit comments in a different file ------------------------------------------------------------------------ r2555 | hserus | 2006-11-29 12:47:14 -0800 (Wed, 29 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Address xxx-audit comments make sure that correct zonecut information is saved when parent zone recursively obtains answers for the child zone (or the same ns is authoritative for the parent and the child) ------------------------------------------------------------------------ r2554 | hserus | 2006-11-29 12:46:53 -0800 (Wed, 29 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.c remove xxx-audit comment since the issue of initializing rr_status was already addressed ------------------------------------------------------------------------ r2553 | hserus | 2006-11-29 12:46:36 -0800 (Wed, 29 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_parse.c Address xxx-audit comments ------------------------------------------------------------------------ r2552 | hserus | 2006-11-29 12:46:18 -0800 (Wed, 29 Nov 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Address xxx-audit comments In the check for provably insecure condition test for VAL_NONEXISTENT_TYPE_NOCHAIN Save some information from the test for provably unsecure in the authentication chain VAL_PROVABLY_UNSECURE is not an is_validated() status ------------------------------------------------------------------------ r2551 | hserus | 2006-11-29 12:45:46 -0800 (Wed, 29 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c Address xxx-audit comments ------------------------------------------------------------------------ r2550 | hserus | 2006-11-29 12:45:21 -0800 (Wed, 29 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml VAL_PROVABLY_UNSECURE is not an is_validated() status ------------------------------------------------------------------------ r2549 | hserus | 2006-11-29 12:44:53 -0800 (Wed, 29 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/Makefile.in Display a message that we are not installing the resolv.conf and dnsval.conf in standard locations. ------------------------------------------------------------------------ r2548 | tewok | 2006-11-29 09:28:53 -0800 (Wed, 29 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added another known problem. ------------------------------------------------------------------------ r2543 | marz | 2006-11-29 08:21:08 -0800 (Wed, 29 Nov 2006) | 1 line Changed paths: A /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator A /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/MANIFEST A /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/MANIFEST.SKIP A /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Makefile.PL A /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/README A /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm A /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs A /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc A /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-xs.inc A /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t A /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t A /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/typemap A /trunk/dnssec-tools/tools/modules/Net-addrinfo A /trunk/dnssec-tools/tools/modules/Net-addrinfo/MANIFEST A /trunk/dnssec-tools/tools/modules/Net-addrinfo/MANIFEST.SKIP A /trunk/dnssec-tools/tools/modules/Net-addrinfo/Makefile.PL A /trunk/dnssec-tools/tools/modules/Net-addrinfo/README A /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm A /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.xs A /trunk/dnssec-tools/tools/modules/Net-addrinfo/const-c.inc A /trunk/dnssec-tools/tools/modules/Net-addrinfo/const-xs.inc A /trunk/dnssec-tools/tools/modules/Net-addrinfo/t A /trunk/dnssec-tools/tools/modules/Net-addrinfo/t/basic.t A /trunk/dnssec-tools/tools/modules/Net-addrinfo/typemap alpha quality perl libval support - more coming ------------------------------------------------------------------------ r2542 | tewok | 2006-11-29 08:11:30 -0800 (Wed, 29 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Fixes, from WesH's comments. ------------------------------------------------------------------------ r2540 | tewok | 2006-11-29 07:40:54 -0800 (Wed, 29 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Stop rollrec_add() and rollrec_del() from always writing the rollrec file. ------------------------------------------------------------------------ r2538 | tewok | 2006-11-29 06:55:25 -0800 (Wed, 29 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Updated version numbers. ------------------------------------------------------------------------ r2537 | tewok | 2006-11-29 06:43:23 -0800 (Wed, 29 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/signset-editor M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/zonesigner Updated version numbers. ------------------------------------------------------------------------ r2534 | rstory | 2006-11-28 14:59:53 -0800 (Tue, 28 Nov 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/ns_parse.c use EINVAL ifndef ENODATA ------------------------------------------------------------------------ r2533 | lfoster | 2006-11-28 14:13:52 -0800 (Tue, 28 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Turn off debugging in Net::DNS::Resolver calls. ------------------------------------------------------------------------ r2531 | rstory | 2006-11-28 12:15:22 -0800 (Tue, 28 Nov 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in add target test, so we can define _REENTRANT on solaris ------------------------------------------------------------------------ r2530 | rstory | 2006-11-28 12:13:53 -0800 (Tue, 28 Nov 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c fix compiler const whining ------------------------------------------------------------------------ r2529 | lfoster | 2006-11-28 11:37:05 -0800 (Tue, 28 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman Fixed bug which caused zones containing multiple keys to be queried multiple times. Removed some code no longer used. ------------------------------------------------------------------------ r2528 | tewok | 2006-11-28 10:57:15 -0800 (Tue, 28 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added the gends field as a persistent zone keyrec field. ------------------------------------------------------------------------ r2511 | tewok | 2006-11-27 12:07:25 -0800 (Mon, 27 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod A few formatting changes and added a missing squiggly. ------------------------------------------------------------------------ r2507 | hserus | 2006-11-27 10:08:10 -0800 (Mon, 27 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c Use a default "hints" value if one is not supplied. ------------------------------------------------------------------------ r2505 | tewok | 2006-11-27 09:41:00 -0800 (Mon, 27 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/doc/dnsval.conf.3 M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod Added a terminal serial comma. Formatting fix I missed before. ------------------------------------------------------------------------ r2504 | tewok | 2006-11-27 09:26:21 -0800 (Mon, 27 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added a flag set so that the -cur, -new, and -pub options would work. ------------------------------------------------------------------------ r2503 | marz | 2006-11-27 05:18:06 -0800 (Mon, 27 Nov 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.h declare global after struct ------------------------------------------------------------------------ r2502 | hserus | 2006-11-26 12:08:47 -0800 (Sun, 26 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod M /trunk/dnssec-tools/validator/doc/validator_api.xml Add description for val_isvalidated(), VAL_NONEXISTENT_NAME_NOCHAIN and VAL_NONEXISTENT_TYPE_NOCHAIN ------------------------------------------------------------------------ r2501 | hserus | 2006-11-26 11:46:10 -0800 (Sun, 26 Nov 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Modify transform_outstanding_results() so that error value for the proof can be passed as a parameter While checking non-existence span, make sure that the bound is not closed. Use the combination of val_istrusted and val_isvalidated to identify if the answer is locally trusted. Set non-existence type of VAL_NONEXISTENT_NAME_NOCHAIN and VAL_NONEXISTENT_TYPE_NOCHAIN if the proof is locally trusted. ------------------------------------------------------------------------ r2500 | hserus | 2006-11-26 11:45:55 -0800 (Sun, 26 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_errors.h Define types for VAL_NONEXISTENT_NAME_NOCHAIN and VAL_NONEXISTENT_TYPE_NOCHAIN ------------------------------------------------------------------------ r2499 | hserus | 2006-11-26 11:45:36 -0800 (Sun, 26 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_x_query.c Handle case for VAL_NONEXISTENT_NAME_NOCHAIN and VAL_NONEXISTENT_TYPE_NOCHAIN ------------------------------------------------------------------------ r2498 | hserus | 2006-11-26 08:21:49 -0800 (Sun, 26 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.h Fix indentation ------------------------------------------------------------------------ r2497 | hserus | 2006-11-25 18:00:44 -0800 (Sat, 25 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.h Print a log message when we detect a duplicate policy definition ------------------------------------------------------------------------ r2496 | hserus | 2006-11-25 17:59:23 -0800 (Sat, 25 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Fix in detection of policy match logic ------------------------------------------------------------------------ r2495 | hserus | 2006-11-25 13:50:53 -0800 (Sat, 25 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c Make it possible to verify the chain of trust even if there is a keytag collision ------------------------------------------------------------------------ r2494 | hserus | 2006-11-25 13:50:00 -0800 (Sat, 25 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Add header for validator.h ------------------------------------------------------------------------ r2491 | tewok | 2006-11-25 12:36:45 -0800 (Sat, 25 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed KSK usage when it isn't explicitly generated. ------------------------------------------------------------------------ r2488 | rstory | 2006-11-25 11:15:16 -0800 (Sat, 25 Nov 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_assertion.h M /trunk/dnssec-tools/validator/libval/validator.h add val_isvalidated(val_status) ------------------------------------------------------------------------ r2474 | tewok | 2006-11-24 13:22:15 -0800 (Fri, 24 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pod Set to use a better log filename for rollerd. ------------------------------------------------------------------------ r2473 | tewok | 2006-11-24 13:20:35 -0800 (Fri, 24 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Fixed the usage message. Reordered a bit of code so that -parameters would work. ------------------------------------------------------------------------ r2472 | lfoster | 2006-11-24 12:07:36 -0800 (Fri, 24 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman now working: notifies by email when a new key has been detected, and has passed it's add holddown time. ------------------------------------------------------------------------ r2471 | lfoster | 2006-11-24 09:50:27 -0800 (Fri, 24 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/trustman started new key storage until holddown time reached. ------------------------------------------------------------------------ r2470 | hserus | 2006-11-23 19:16:34 -0800 (Thu, 23 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Formatting changes ------------------------------------------------------------------------ r2469 | hserus | 2006-11-23 18:19:29 -0800 (Thu, 23 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Add some text on zone-security-expectation ------------------------------------------------------------------------ r2468 | hserus | 2006-11-23 17:10:58 -0800 (Thu, 23 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/validator.h Rename VAL_R_TRUST_FLAG and VAL_R_MASKED_TRUST_FLAG to VAL_FLAG_CHAIN_COMPLETE and VAL_MASKED_FLAG_CHAIN_COMPLETE. Rename SET_RESULT_TRUSTED macro to SET_CHAIN_COMPLETE ------------------------------------------------------------------------ r2467 | hserus | 2006-11-23 17:10:32 -0800 (Thu, 23 Nov 2006) | 8 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_errors.h Do away with VAL_R_ status codes Rename VAL_R_TRUST_FLAG and VAL_R_MASKED_TRUST_FLAG to VAL_FLAG_CHAIN_COMPLETE and VAL_MASKED_FLAG_CHAIN_COMPLETE. Rename SET_RESULT_TRUSTED macro to SET_CHAIN_COMPLETE Define VAL_AC_DONT_GO_FURTHER status to represent status codes where we need not go further up the chain of trust ------------------------------------------------------------------------ r2466 | hserus | 2006-11-23 17:10:20 -0800 (Thu, 23 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c Do away with VAL_R_ status codes Add case for VAL_UNTRUSTED_ZONE in p_val_status() ------------------------------------------------------------------------ r2465 | hserus | 2006-11-23 17:10:00 -0800 (Thu, 23 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Register only aliases in the qname chain ------------------------------------------------------------------------ r2464 | hserus | 2006-11-23 17:09:39 -0800 (Thu, 23 Nov 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Do away with VAL_R_ status codes build a pending query and validate authentication chain only If initial status is less than VAL_AC_DONT_GO_FURTHER Reorganize code for indentifying validation status values Fix DNAME alias construction logic ------------------------------------------------------------------------ r2463 | hserus | 2006-11-23 17:09:05 -0800 (Thu, 23 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_x_query.c Use val_istrusted() instead of individual success error codes ------------------------------------------------------------------------ r2462 | hserus | 2006-11-23 17:08:29 -0800 (Thu, 23 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/dnsval.conf.3 M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod Add description for the trusted zone-security-expection condition ------------------------------------------------------------------------ r2461 | hserus | 2006-11-23 17:07:46 -0800 (Thu, 23 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod M /trunk/dnssec-tools/validator/doc/validator_api.xml Add description for VAL_UNTRUSTED_ZONE status ------------------------------------------------------------------------ r2460 | hserus | 2006-11-23 17:07:05 -0800 (Thu, 23 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c Do away with the VAL_R_ status codes ------------------------------------------------------------------------ r2459 | hserus | 2006-11-22 16:12:37 -0800 (Wed, 22 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Set the NONEXISTENT status only if we know that the answer is complete ------------------------------------------------------------------------ r2458 | hserus | 2006-11-22 15:52:46 -0800 (Wed, 22 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_errors.h M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_policy.h M /trunk/dnssec-tools/validator/libval/val_x_query.c Add logic for VAL_AC_TRUSTED_ZONE and VAL_TRUSTED_ZONE along the lines of VAL_AC_IGNORE_VALIDATION and VAL_IGNORE_VALIDATION ------------------------------------------------------------------------ r2457 | hserus | 2006-11-22 15:50:44 -0800 (Wed, 22 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod M /trunk/dnssec-tools/validator/doc/validator_api.xml Add descriptions for VAL_TRUSTED_ZONE and VAL_AC_TRUSTED_ZONE ------------------------------------------------------------------------ r2453 | hserus | 2006-11-22 15:05:47 -0800 (Wed, 22 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Recognize VAL_NONEXISTENT_NAME_OPTOUT as a variant of VAL_NONEXISTENT_NAME Instead of looking for specific status codes that indicate that the proof was locally trusted, use the val_istrusted() function. ------------------------------------------------------------------------ r2452 | hserus | 2006-11-22 15:02:39 -0800 (Wed, 22 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_x_query.c Recognize VAL_NONEXISTENT_NAME_OPTOUT as a variant of VAL_NONEXISTENT_NAME ------------------------------------------------------------------------ r2451 | hserus | 2006-11-22 14:53:55 -0800 (Wed, 22 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod State that the NONEXISTENT error codes are returned when the proofs are trustworthy, and even if they have not been validated specifically. ------------------------------------------------------------------------ r2450 | hserus | 2006-11-22 14:38:34 -0800 (Wed, 22 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Remove statements that can be interpreted as an implicit policy directive. ------------------------------------------------------------------------ r2449 | hserus | 2006-11-22 13:15:30 -0800 (Wed, 22 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Properly detect span checks in proofs of non-existence even when wildcard proof appears before it. ------------------------------------------------------------------------ r2448 | rstory | 2006-11-22 12:44:15 -0800 (Wed, 22 Nov 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/doc/libval.pod whitespace changes to make columns line up properly ------------------------------------------------------------------------ r2447 | hardaker | 2006-11-22 12:34:08 -0800 (Wed, 22 Nov 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone include extra cname prefixes in docs ------------------------------------------------------------------------ r2446 | hardaker | 2006-11-22 12:20:23 -0800 (Wed, 22 Nov 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone added a new test case where the cname points to a truly spoofed record covered by an nsec; renamed the existing bogus (but signed) entry to 'other' ------------------------------------------------------------------------ r2445 | hserus | 2006-11-22 12:13:51 -0800 (Wed, 22 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c Change expected status value for cname/AAAA test cases. The alias pointed to by the cname must validate successfully. ------------------------------------------------------------------------ r2441 | hardaker | 2006-11-22 10:38:19 -0800 (Wed, 22 Nov 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone remove a debugging statement ------------------------------------------------------------------------ r2440 | hardaker | 2006-11-22 10:35:21 -0800 (Wed, 22 Nov 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone fix the cname records to AAAA records; add more documentation and include the options as well as a getting started section ------------------------------------------------------------------------ r2438 | hserus | 2006-11-22 09:58:32 -0800 (Wed, 22 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod M /trunk/dnssec-tools/validator/doc/validator_api.xml Correct some inconsistencies. ------------------------------------------------------------------------ r2437 | hserus | 2006-11-22 09:41:26 -0800 (Wed, 22 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_errors.h M /trunk/dnssec-tools/validator/libval/val_log.c Don't use the VAL_AC_DONT_VALIDATE state. We had already defined the VAL_AC_IGNORE_VALIDATION state; continue to use this. ------------------------------------------------------------------------ r2434 | hserus | 2006-11-22 07:18:29 -0800 (Wed, 22 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/Makefile.in Remove full path in the .so statements for manfiles ------------------------------------------------------------------------ r2431 | tewok | 2006-11-21 15:33:29 -0800 (Tue, 21 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Clarified -expert option, from rstory's review. ------------------------------------------------------------------------ r2429 | tewok | 2006-11-21 15:22:32 -0800 (Tue, 21 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Clarification from rstory's review. ------------------------------------------------------------------------ r2428 | baerm | 2006-11-21 15:18:47 -0800 (Tue, 21 Nov 2006) | 11 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/validator.h Added val_getnameinfo, val_gethostbyaddr_r, val_gethostbyaddr procedures to val_getaddrinfo.c. Working in local tests and should be good to use. Still to do: only doing validation, should add /etc/hosts check; should be in separate .c files. ------------------------------------------------------------------------ r2423 | hserus | 2006-11-21 12:27:16 -0800 (Tue, 21 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/validator.h Add basic support for DNAME ------------------------------------------------------------------------ r2422 | hserus | 2006-11-21 12:26:38 -0800 (Tue, 21 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Add basic support for DNAME Keep ordering of results same as the ordering of rrsets in the response ------------------------------------------------------------------------ r2420 | tewok | 2006-11-21 10:44:00 -0800 (Tue, 21 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/TrustMan Reworded a few sentences. Minor formatting changes. ------------------------------------------------------------------------ r2419 | tewok | 2006-11-21 10:34:31 -0800 (Tue, 21 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/TrustMan Added standard formatting. ------------------------------------------------------------------------ r2418 | tewok | 2006-11-21 10:26:44 -0800 (Tue, 21 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/TrustMan Added the critical "=pod" directive. ------------------------------------------------------------------------ r2417 | tewok | 2006-11-21 09:35:14 -0800 (Tue, 21 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/rollerd Minor formatting modifications. ------------------------------------------------------------------------ r2416 | tewok | 2006-11-21 09:22:51 -0800 (Tue, 21 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts Added a few refs. ------------------------------------------------------------------------ r2415 | tewok | 2006-11-21 09:20:21 -0800 (Tue, 21 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow Added a few refs. ------------------------------------------------------------------------ r2414 | tewok | 2006-11-21 09:16:52 -0800 (Tue, 21 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/timetrans.pm Formatting changes for examples. ------------------------------------------------------------------------ r2413 | tewok | 2006-11-21 08:55:56 -0800 (Tue, 21 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/rollerd Minor wording changes for SUM. ------------------------------------------------------------------------ r2412 | tewok | 2006-11-21 08:37:44 -0800 (Tue, 21 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.3 M /trunk/dnssec-tools/validator/doc/val_gethostbyname.3 Changes for pod updates. ------------------------------------------------------------------------ r2411 | tewok | 2006-11-21 08:34:44 -0800 (Tue, 21 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval.pod M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.pod Minor wording or formatting changes. ------------------------------------------------------------------------ r2410 | tewok | 2006-11-21 08:24:44 -0800 (Tue, 21 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/doc/val_gethostbyname.pod Slight rewording change. ------------------------------------------------------------------------ r2409 | tewok | 2006-11-21 08:18:57 -0800 (Tue, 21 Nov 2006) | 3 lines Changed paths: D /trunk/dnssec-tools/tools/modules/file-keyrec.pm D /trunk/dnssec-tools/tools/modules/file-rollrec.pm M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/modules/rollrec.pm Pod changes to accommodate the SUM. ------------------------------------------------------------------------ r2408 | tewok | 2006-11-21 08:02:10 -0800 (Tue, 21 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec/README D /trunk/dnssec-tools/tools/etc/dnssec/blinkenlights.conf.pm A /trunk/dnssec-tools/tools/etc/dnssec/blinkenlights.conf.pod (from /trunk/dnssec-tools/tools/etc/dnssec/blinkenlights.conf.pm:2341) D /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm A /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pod (from /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm:2399) Renamed .pm files to .pod. ------------------------------------------------------------------------ r2407 | tewok | 2006-11-21 08:00:00 -0800 (Tue, 21 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Name change in "see also" reference. ------------------------------------------------------------------------ r2406 | tewok | 2006-11-21 07:59:21 -0800 (Tue, 21 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pod Section change for file reference. ------------------------------------------------------------------------ r2405 | tewok | 2006-11-21 07:54:10 -0800 (Tue, 21 Nov 2006) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/modules/keyrec.pod (from /trunk/dnssec-tools/tools/modules/file-keyrec.pm:2403) A /trunk/dnssec-tools/tools/modules/rollrec.pod (from /trunk/dnssec-tools/tools/modules/file-rollrec.pm:2404) Renamed from file-foo.pm. ------------------------------------------------------------------------ r2404 | tewok | 2006-11-21 07:52:23 -0800 (Tue, 21 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/file-rollrec.pm Moved a file into the new FILE section. ------------------------------------------------------------------------ r2403 | tewok | 2006-11-21 07:51:30 -0800 (Tue, 21 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/file-keyrec.pm Fixed a man section. ------------------------------------------------------------------------ r2402 | tewok | 2006-11-21 07:48:41 -0800 (Tue, 21 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/doc/dnsval.conf.3 M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.3 M /trunk/dnssec-tools/validator/doc/val_gethostbyname.3 M /trunk/dnssec-tools/validator/doc/val_query.3 M /trunk/dnssec-tools/validator/doc/validate.1 Adding update versions. ------------------------------------------------------------------------ r2401 | tewok | 2006-11-21 07:42:48 -0800 (Tue, 21 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval.pod A few minor fixes (mostly punctuation and formatting) that escaped an earlier checkin. ------------------------------------------------------------------------ r2400 | hserus | 2006-11-21 07:08:09 -0800 (Tue, 21 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/dnsval.conf.3 M /trunk/dnssec-tools/validator/doc/libsres.3 M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.3 M /trunk/dnssec-tools/validator/doc/val_gethostbyname.3 M /trunk/dnssec-tools/validator/doc/val_query.3 M /trunk/dnssec-tools/validator/doc/validate.1 update man for most recent pod ------------------------------------------------------------------------ r2399 | tewok | 2006-11-20 21:02:29 -0800 (Mon, 20 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm Fixed a typo. ------------------------------------------------------------------------ r2398 | tewok | 2006-11-20 20:52:51 -0800 (Mon, 20 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/doc/val_gethostbyname.pod M /trunk/dnssec-tools/validator/doc/val_query.pod Formatting fixes. ------------------------------------------------------------------------ r2397 | tewok | 2006-11-20 19:23:17 -0800 (Mon, 20 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validate.pod Formatting fix. ------------------------------------------------------------------------ r2396 | tewok | 2006-11-20 19:17:27 -0800 (Mon, 20 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.pod Formatting changes. Reworded a few sentences. ------------------------------------------------------------------------ r2395 | tewok | 2006-11-20 18:33:10 -0800 (Mon, 20 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval.pod Clarify an error description. ------------------------------------------------------------------------ r2394 | tewok | 2006-11-20 18:13:24 -0800 (Mon, 20 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validate.pod Formatting fixes. Wording changes. ------------------------------------------------------------------------ r2393 | tewok | 2006-11-20 17:39:02 -0800 (Mon, 20 Nov 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval.pod Reworded some sentences. Fixed formatting. Fixed a couple of misspelled constants. ------------------------------------------------------------------------ r2392 | rstory | 2006-11-20 13:52:36 -0800 (Mon, 20 Nov 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/Makefile.in M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in - add --with-validator; default = yes - skip validator configure/make if disabled - bail on --[dis|en]able-validator - configure help spacing tweaks ------------------------------------------------------------------------ r2391 | lfoster | 2006-11-20 13:42:52 -0800 (Mon, 20 Nov 2006) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/trustman New version of trustman, now doing timers-style trust anchor rollover. Also changing name to all lower case. ------------------------------------------------------------------------ r2390 | hserus | 2006-11-20 12:28:17 -0800 (Mon, 20 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Perform proper detection of cname loops ------------------------------------------------------------------------ r2389 | hserus | 2006-11-20 11:35:01 -0800 (Mon, 20 Nov 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/validator.h disable SIG_ACCEPT_WINDOW by default Add a new member to the delegation_info structure to keep track of partial answers (cnames) received Add a new member qc_original_name to val_query_chain to keep track of the original query. The qc_name_n member changes when cnames are followed ------------------------------------------------------------------------ r2388 | hserus | 2006-11-20 11:34:44 -0800 (Mon, 20 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.h Add definition for find_nslist_for_query() ------------------------------------------------------------------------ r2387 | hserus | 2006-11-20 11:34:28 -0800 (Mon, 20 Nov 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Move register_query() and deregister_query() functions from val_resquery.c to val_support.c Move logic of identifying target nameservers for a query into a new function find_nslist_for_query() Add a new member to the delegation_info structure to keep track of partial answers (cnames) received Rename do_referral() to follow_referral_or_alias_link() Add logic for fetching cname alias records ------------------------------------------------------------------------ r2386 | hserus | 2006-11-20 11:34:00 -0800 (Mon, 20 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_support.h Move register_query() and deregister_query() functions from val_resquery.c to val_support.c Add function for merging rrsets from one list to another. This is essentially the same as stow_info() but without the locking portion ------------------------------------------------------------------------ r2385 | hserus | 2006-11-20 11:33:38 -0800 (Mon, 20 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c Identify the "top" query from the original query name; not the name that we came up with after following alias chains ------------------------------------------------------------------------ r2384 | hserus | 2006-11-20 11:33:19 -0800 (Mon, 20 Nov 2006) | 7 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Rename qc_name_n to qname_n in places where it does not specifically relate to the query_chain structure Rename qc_type_h to qtype_h in places where it does not specifically relate to the query_chain structure Identify the "top" query from the original query name; not the name that we came up with after following alias chains Move logic of identifying target nameservers for a query into a new function find_nslist_for_query() Add logic for loop-detection of cname chains ------------------------------------------------------------------------ r2383 | hserus | 2006-11-20 11:32:49 -0800 (Mon, 20 Nov 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_cache.h Maintain a separate cache for (zonename, server) mapping to account for the case where our default name server is authoritative for a non-public zone (such as example.com). Look up this cache before we look for other NS records. Rename get_matching_nslist to get_nslist_from_cache ------------------------------------------------------------------------ r2382 | tewok | 2006-11-20 08:41:50 -0800 (Mon, 20 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval.pod Formatting changes. ------------------------------------------------------------------------ r2381 | tewok | 2006-11-20 05:50:56 -0800 (Mon, 20 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libsres.pod Added a missing word. ------------------------------------------------------------------------ r2380 | tewok | 2006-11-20 05:45:26 -0800 (Mon, 20 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libsres.pod Formatting changes. Rewording a couple sentences. ------------------------------------------------------------------------ r2379 | tewok | 2006-11-19 06:01:23 -0800 (Sun, 19 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Formatting changes for interface lists. ------------------------------------------------------------------------ r2378 | tewok | 2006-11-19 05:58:54 -0800 (Sun, 19 Nov 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Reworded some sentences. Formatting changes. Hyphenless rollover assimilation. Updated the refs. ------------------------------------------------------------------------ r2377 | tewok | 2006-11-18 21:13:34 -0800 (Sat, 18 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Formatting changes. Hyphenless assimilation. ------------------------------------------------------------------------ r2376 | tewok | 2006-11-18 20:48:26 -0800 (Sat, 18 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Coupla minor fixes. ------------------------------------------------------------------------ r2375 | tewok | 2006-11-18 20:25:27 -0800 (Sat, 18 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Formatting fixes. ------------------------------------------------------------------------ r2374 | tewok | 2006-11-18 20:18:57 -0800 (Sat, 18 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Minor wording changes. ------------------------------------------------------------------------ r2373 | tewok | 2006-11-18 18:27:36 -0800 (Sat, 18 Nov 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/modules/BootStrap.pm M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm M /trunk/dnssec-tools/tools/modules/conf.pm M /trunk/dnssec-tools/tools/modules/defaults.pm Reworded sentences. Adjusted formats. Updated references. ------------------------------------------------------------------------ r2372 | tewok | 2006-11-18 17:45:30 -0800 (Sat, 18 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights M /trunk/dnssec-tools/tools/scripts/lsroll Fixed some names. ------------------------------------------------------------------------ r2371 | tewok | 2006-11-18 14:28:46 -0800 (Sat, 18 Nov 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Moved the quick-start lines from the SYNOPSIS into its own section. Formatting changes. Assimilation to the hyphenless rollover. ------------------------------------------------------------------------ r2370 | tewok | 2006-11-18 13:26:18 -0800 (Sat, 18 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/signset-editor Delete duplicated data. ------------------------------------------------------------------------ r2369 | tewok | 2006-11-18 13:14:08 -0800 (Sat, 18 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf Formatting changes. Updated pod refs. ------------------------------------------------------------------------ r2368 | tewok | 2006-11-18 13:07:53 -0800 (Sat, 18 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/signset-editor Updated pod refs. ------------------------------------------------------------------------ r2367 | tewok | 2006-11-18 12:24:23 -0800 (Sat, 18 Nov 2006) | 3 lines Changed paths: D /trunk/dnssec-tools/tools/scripts/clean-keyrec D /trunk/dnssec-tools/tools/scripts/keyrec-check Finish deleting a few files. ------------------------------------------------------------------------ r2366 | tewok | 2006-11-18 12:23:16 -0800 (Sat, 18 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Coupla minor fixes. ------------------------------------------------------------------------ r2365 | tewok | 2006-11-18 12:22:53 -0800 (Sat, 18 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL Added rolllog. ------------------------------------------------------------------------ r2364 | tewok | 2006-11-18 12:19:23 -0800 (Sat, 18 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/krfcheck Added a few additional references. ------------------------------------------------------------------------ r2363 | tewok | 2006-11-18 12:12:18 -0800 (Sat, 18 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/krfcheck M /trunk/dnssec-tools/tools/scripts/lskrf Formatting changes. ------------------------------------------------------------------------ r2362 | tewok | 2006-11-18 11:42:35 -0800 (Sat, 18 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/krfcheck Formatting changes. ------------------------------------------------------------------------ r2361 | tewok | 2006-11-18 10:10:34 -0800 (Sat, 18 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollinit Fixed capitalization. ------------------------------------------------------------------------ r2360 | tewok | 2006-11-18 10:05:44 -0800 (Sat, 18 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Formatting changes. ------------------------------------------------------------------------ r2359 | tewok | 2006-11-18 09:56:52 -0800 (Sat, 18 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rolllog Formatting changes. Assimilation to the hyphenless rollover. ------------------------------------------------------------------------ r2358 | tewok | 2006-11-18 09:30:58 -0800 (Sat, 18 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Assimilation to the hyphenless rollover. ------------------------------------------------------------------------ r2357 | tewok | 2006-11-18 09:00:42 -0800 (Sat, 18 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollinit Formatting changes. Assimilation to the hyphenless rollover. ------------------------------------------------------------------------ r2356 | tewok | 2006-11-18 08:37:58 -0800 (Sat, 18 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Formatting changes. Assimilation to the hyphenless rollover. ------------------------------------------------------------------------ r2355 | tewok | 2006-11-18 08:16:33 -0800 (Sat, 18 Nov 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Formatting fixes. Fixed the command name, which was renamed in the depths of time. Fixed rollerd's name. ------------------------------------------------------------------------ r2354 | tewok | 2006-11-18 08:02:03 -0800 (Sat, 18 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtdefs Formatting change. ------------------------------------------------------------------------ r2353 | tewok | 2006-11-18 08:01:36 -0800 (Sat, 18 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Minor formatting and wording changes. Deleted a weird option. ------------------------------------------------------------------------ r2352 | tewok | 2006-11-17 19:18:50 -0800 (Fri, 17 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Fixed capitalization in title. ------------------------------------------------------------------------ r2351 | tewok | 2006-11-17 18:50:55 -0800 (Fri, 17 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/timetrans Reworded a sentence. ------------------------------------------------------------------------ r2350 | tewok | 2006-11-17 18:38:52 -0800 (Fri, 17 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/tachk Treworded a few things in the pod. ------------------------------------------------------------------------ r2349 | tewok | 2006-11-17 17:08:13 -0800 (Fri, 17 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/getdnskeys Expanded and reorganized pod. ------------------------------------------------------------------------ r2347 | tewok | 2006-11-17 15:01:49 -0800 (Fri, 17 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper Reworded a few sentences. Fixed some typos. ------------------------------------------------------------------------ r2346 | tewok | 2006-11-17 13:24:59 -0800 (Fri, 17 Nov 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/donuts/donutsd Fixed some typos. Reworded a few phrases. Fixed some formatting. ------------------------------------------------------------------------ r2345 | tewok | 2006-11-17 12:43:24 -0800 (Fri, 17 Nov 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts Fixed some typos. Reworded a few phrases. Fixed some formatting. ------------------------------------------------------------------------ r2344 | hardaker | 2006-11-17 12:20:03 -0800 (Fri, 17 Nov 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow fix mispellng pointed out by Wayne ------------------------------------------------------------------------ r2343 | tewok | 2006-11-17 11:24:39 -0800 (Fri, 17 Nov 2006) | 9 lines Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow Fixed some typos. Adjusted pod to match other commands' pod. Added a few =overs and =backs for cleaner organization. Reworded a few sentences. Deleted some extraneous blank lines. Added a few sentences describing option subgroups. Added some missing periods. ------------------------------------------------------------------------ r2342 | tewok | 2006-11-17 09:33:12 -0800 (Fri, 17 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod Changed a duplicated "resolv.conf" into the intended "root.hints". ------------------------------------------------------------------------ r2341 | tewok | 2006-11-17 09:00:55 -0800 (Fri, 17 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec/blinkenlights.conf.pm Deleted some extraneous lines. ------------------------------------------------------------------------ r2340 | tewok | 2006-11-17 08:34:23 -0800 (Fri, 17 Nov 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/modules/file-keyrec.pm Deleted some extraneous data. Added some text about comment lines. Several grammatical fixes. ------------------------------------------------------------------------ r2339 | tewok | 2006-11-17 08:32:48 -0800 (Fri, 17 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/file-rollrec.pm Added a couple sentences to the pod about comment lines. ------------------------------------------------------------------------ r2338 | tewok | 2006-11-17 07:44:26 -0800 (Fri, 17 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/file-keyrec.pm M /trunk/dnssec-tools/tools/modules/file-rollrec.pm Reordered pod sections in both files. Added field descriptions to file-keyrec.pm. ------------------------------------------------------------------------ r2337 | hserus | 2006-11-17 07:34:30 -0800 (Fri, 17 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml M /trunk/dnssec-tools/validator/libval/val_errors.h M /trunk/dnssec-tools/validator/libval/val_log.c Rename VAL_AC_TRUST_ZONE to VAL_AC_IGNORE_VALIDATION Add a new final result status for VAL_IGNORE_VALIDATION ------------------------------------------------------------------------ r2336 | hserus | 2006-11-17 07:33:55 -0800 (Fri, 17 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/validator.h Fix bug in CHECK_MASKED_STATUS macro ------------------------------------------------------------------------ r2335 | hserus | 2006-11-17 07:33:39 -0800 (Fri, 17 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_x_query.c Modified to recognize VAL_IGNORE_VALIDATION as another trust state. ------------------------------------------------------------------------ r2334 | hserus | 2006-11-17 07:33:23 -0800 (Fri, 17 Nov 2006) | 10 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Rename VAL_AC_TRUST_ZONE to VAL_AC_IGNORE_VALIDATION Add a new final result status for VAL_IGNORE_VALIDATION Don't perform validation and some proof-related sanity checks if the VAL_IGNORE_VALIDATION status is set Recognize VAL_IGNORE_VALIDATION as a trusted state In transform_single_result allow an empty result to also be created Replace top_q argument in prove_nonexistence() with selected members from within it. Add basic logic for cname sanity checking. We still need to implement logic for fetching aliases when these are not automatically returned and for detecting loops. ------------------------------------------------------------------------ r2333 | hserus | 2006-11-17 07:17:53 -0800 (Fri, 17 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c Multiple bogus elements in the chain-of-trust reduces the final status to BOGUS_UNPROVABLE. ------------------------------------------------------------------------ r2332 | tewok | 2006-11-17 06:54:42 -0800 (Fri, 17 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/file-rollrec.pm Deleted some extraneous fields. ------------------------------------------------------------------------ r2331 | tewok | 2006-11-17 06:36:59 -0800 (Fri, 17 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm A few wording and punctuational changes. ------------------------------------------------------------------------ r2330 | tewok | 2006-11-17 04:30:52 -0800 (Fri, 17 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm Minor formatting change and a grammatical fix. ------------------------------------------------------------------------ r2329 | tewok | 2006-11-17 04:28:50 -0800 (Fri, 17 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod Fixed a typo. ------------------------------------------------------------------------ r2328 | hserus | 2006-11-16 16:01:15 -0800 (Thu, 16 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_x_query.c Set h_errno to appropriate value for val_res_query() ------------------------------------------------------------------------ r2327 | tewok | 2006-11-16 12:26:38 -0800 (Thu, 16 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod Updated to match the other docs. Added a missing =back. ------------------------------------------------------------------------ r2326 | tewok | 2006-11-16 11:40:37 -0800 (Thu, 16 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm Fixed the pod to match everything else. ------------------------------------------------------------------------ r2325 | tewok | 2006-11-15 14:42:46 -0800 (Wed, 15 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed rolling with signing sets to actually work beyond the first rollover.. ------------------------------------------------------------------------ r2324 | hserus | 2006-11-15 14:11:26 -0800 (Wed, 15 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.h M /trunk/dnssec-tools/validator/libval/validator.h Turns out that VAL_GET* need to be exported. Partially revert earlier change. ------------------------------------------------------------------------ r2323 | hserus | 2006-11-15 14:07:13 -0800 (Wed, 15 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.h M /trunk/dnssec-tools/validator/libval/validator.h Move some of the libval-specific macros to val_support.h ------------------------------------------------------------------------ r2322 | hserus | 2006-11-15 14:02:46 -0800 (Wed, 15 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/ns_netint.c M /trunk/dnssec-tools/validator/libsres/ns_parse.c D /trunk/dnssec-tools/validator/libsres/ns_parse.h M /trunk/dnssec-tools/validator/libsres/res_debug.c M /trunk/dnssec-tools/validator/libsres/res_support.h Revert an earlier change. Move macros from ns_parse.h to res_support.h ------------------------------------------------------------------------ r2321 | hserus | 2006-11-15 13:46:07 -0800 (Wed, 15 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/validator.h Add prototypes for free_validator_cache() and wire_name_length() ------------------------------------------------------------------------ r2320 | hserus | 2006-11-15 13:45:19 -0800 (Wed, 15 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_policy.h M /trunk/dnssec-tools/validator/libval/validator.h Moved policy-specific definitions to val_policy.h. In order to do this we also need to remove dependency on MAX_POLICY_TOKEN ------------------------------------------------------------------------ r2319 | hserus | 2006-11-15 12:53:22 -0800 (Wed, 15 Nov 2006) | 2 lines Changed paths: D /trunk/dnssec-tools/validator/libval/val_getaddrinfo.h D /trunk/dnssec-tools/validator/libval/val_gethostbyname.h D /trunk/dnssec-tools/validator/libval/val_x_query.h Remove un-used files ------------------------------------------------------------------------ r2318 | hserus | 2006-11-15 12:52:21 -0800 (Wed, 15 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c Move relevant documentation of val_getaddrinfo from val_getaddrinfo.h to val_getaddrinfo.c ------------------------------------------------------------------------ r2317 | hserus | 2006-11-15 12:38:51 -0800 (Wed, 15 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_x_query.c Prototypes in val_x_query.c are declared in validator.h ------------------------------------------------------------------------ r2316 | hserus | 2006-11-15 12:37:23 -0800 (Wed, 15 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/validator.h Add the compose_answer() prototype since this function is exported as well. ------------------------------------------------------------------------ r2315 | hserus | 2006-11-15 12:13:34 -0800 (Wed, 15 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/getaddr.c M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_crypto.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_log.c D /trunk/dnssec-tools/validator/libval/val_log.h M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_verify.c M /trunk/dnssec-tools/validator/libval/val_x_query.c M /trunk/dnssec-tools/validator/libval/validator.h validator.h subsumes the role of val_debug.h ------------------------------------------------------------------------ r2314 | hserus | 2006-11-15 10:07:24 -0800 (Wed, 15 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c Remove include for res_debug.h; resolver.h subsumes the role of res_debug.h ------------------------------------------------------------------------ r2313 | hserus | 2006-11-15 09:58:08 -0800 (Wed, 15 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/libval/val_x_query.c Get rid of compilation warnings. ------------------------------------------------------------------------ r2312 | hserus | 2006-11-15 09:44:56 -0800 (Wed, 15 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/ns_netint.c M /trunk/dnssec-tools/validator/libsres/ns_parse.c A /trunk/dnssec-tools/validator/libsres/ns_parse.h M /trunk/dnssec-tools/validator/libsres/res_debug.c M /trunk/dnssec-tools/validator/libsres/resolver.h Move definitions for RES_GET16 and RES_GET32 from resolver.h to ns_parse.h since these are local to libsres Add protottypes for p_class() and p_type() to resolver.h to indicate that these functions are exported. ------------------------------------------------------------------------ r2311 | hserus | 2006-11-15 09:27:14 -0800 (Wed, 15 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c D /trunk/dnssec-tools/validator/libsres/res_debug.h M /trunk/dnssec-tools/validator/libsres/resolver.h M /trunk/dnssec-tools/validator/libval/val_policy.c Moved definitions from res_debug.h to resolver.h. This is to remove unnecessary dependencies on libsres. ------------------------------------------------------------------------ r2310 | hserus | 2006-11-15 09:04:26 -0800 (Wed, 15 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libsres/resolver.h M /trunk/dnssec-tools/validator/libval/validator.h Remove dependency on libsres for the CREATE_NSADDR_ARRAY macro ------------------------------------------------------------------------ r2308 | hserus | 2006-11-15 06:34:28 -0800 (Wed, 15 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validate.1 M /trunk/dnssec-tools/validator/doc/validate.pod Insert missing white space ------------------------------------------------------------------------ r2307 | tewok | 2006-11-14 19:21:56 -0800 (Tue, 14 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/rundemo Tail the demo log after starting things off. ------------------------------------------------------------------------ r2306 | tewok | 2006-11-14 18:39:15 -0800 (Tue, 14 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-demo.rollrec Add display entries for each rollrec record. ------------------------------------------------------------------------ r2305 | tewok | 2006-11-14 18:22:05 -0800 (Tue, 14 Nov 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed rolling with signing sets to actually work. Moved some initial zonefile-verification code into its own routine and out of the main(). ------------------------------------------------------------------------ r2304 | hardaker | 2006-11-14 15:03:33 -0800 (Tue, 14 Nov 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow update various doc parts ------------------------------------------------------------------------ r2303 | hardaker | 2006-11-14 10:23:58 -0800 (Tue, 14 Nov 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow update to reflect wireshark vs ethereal; update a few command line option descriptons ------------------------------------------------------------------------ r2302 | hserus | 2006-11-14 09:05:34 -0800 (Tue, 14 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/dnsval.conf.3 M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod M /trunk/dnssec-tools/validator/doc/libsres.3 M /trunk/dnssec-tools/validator/doc/libsres.pod M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod M /trunk/dnssec-tools/validator/doc/validate.1 M /trunk/dnssec-tools/validator/doc/validate.pod M /trunk/dnssec-tools/validator/doc/validator_api.xml Keep validator documentation up-to-date ------------------------------------------------------------------------ r2301 | tewok | 2006-11-13 14:36:23 -0800 (Mon, 13 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Added the -display option. ------------------------------------------------------------------------ r2300 | tewok | 2006-11-13 14:21:29 -0800 (Mon, 13 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Fixed a code comment. Fixed a regular expression in the user-log routine. ------------------------------------------------------------------------ r2299 | tewok | 2006-11-13 14:20:36 -0800 (Mon, 13 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rolllog Added a copyright to the pod. ------------------------------------------------------------------------ r2298 | tewok | 2006-11-13 13:32:19 -0800 (Mon, 13 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Very minor routine header tidying. ------------------------------------------------------------------------ r2297 | tewok | 2006-11-13 13:07:14 -0800 (Mon, 13 Nov 2006) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollinit Added some comments. Added a display entry to the output. Fixed the NAME description in the pod. Fixed some examples in the pod that had gone wildly wrong. Added a few references to the pod. ------------------------------------------------------------------------ r2296 | tewok | 2006-11-13 12:22:41 -0800 (Mon, 13 Nov 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollchk Added checks for invalid display flags. Added purpose descriptions in some routine headers. Added some extra references. ------------------------------------------------------------------------ r2295 | tewok | 2006-11-13 12:05:11 -0800 (Mon, 13 Nov 2006) | 3 lines Changed paths: D /trunk/dnssec-tools/tools/modules/file-keyrec M /trunk/dnssec-tools/tools/modules/file-rollrec.pm Fixed a bad command reference. ------------------------------------------------------------------------ r2294 | tewok | 2006-11-13 11:59:47 -0800 (Mon, 13 Nov 2006) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/modules/file-rollrec.pm New pod-only file describing the contents of a rollrec file. ------------------------------------------------------------------------ r2293 | tewok | 2006-11-13 11:39:53 -0800 (Mon, 13 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/file-keyrec.pm Fixed the copyright date. ------------------------------------------------------------------------ r2292 | tewok | 2006-11-13 11:38:57 -0800 (Mon, 13 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/file-keyrec.pm Added a few refs. ------------------------------------------------------------------------ r2291 | tewok | 2006-11-13 11:37:50 -0800 (Mon, 13 Nov 2006) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/modules/file-keyrec.pm (from /trunk/dnssec-tools/tools/modules/file-keyrec:2233) Renamed so the file would be installed. ------------------------------------------------------------------------ r2290 | tewok | 2006-11-13 11:34:21 -0800 (Mon, 13 Nov 2006) | 9 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Zone Display fixes: - Fixed the title of the dialog. - Left-justify the zone name list in the dialog. - Modified the checkbuttons to directly manipulate the display hash. - Added pod describing the Zone Display feature. - Added help-window text describing the Zone Display feature. ------------------------------------------------------------------------ r2289 | tewok | 2006-11-13 07:24:20 -0800 (Mon, 13 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/signset-editor Make dialog scrollbars optional. ------------------------------------------------------------------------ r2288 | tewok | 2006-11-12 19:22:15 -0800 (Sun, 12 Nov 2006) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added zone display option wherein zones can be rolling (or skipped) yet not displayed. Added a zone-display menu with several commands to allow users to select which zones will be displayed and which won't. Properly initialize the last row index. ------------------------------------------------------------------------ r2287 | tewok | 2006-11-12 14:53:20 -0800 (Sun, 12 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Change a rollrec_write() to rollrec_close() to force ourselves to reload next time 'round. ------------------------------------------------------------------------ r2286 | tewok | 2006-11-11 19:13:40 -0800 (Sat, 11 Nov 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Renamed expired() to zsk_expired() for a time when we add in KSK rollover. Reorganized zsk_expired() variable declarations. Handle key signing sets. ------------------------------------------------------------------------ r2285 | tewok | 2006-11-11 18:45:59 -0800 (Sat, 11 Nov 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Get the ZSK set contents at the beginning of a forceroll. Set the current ZSK sets. Set the lifetime field for newly created published ZSK sets. ------------------------------------------------------------------------ r2284 | tewok | 2006-11-11 15:58:27 -0800 (Sat, 11 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Added a display entry for use by blinkenlights. ------------------------------------------------------------------------ r2283 | hserus | 2006-11-09 09:37:37 -0800 (Thu, 09 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Add description for ns_name_ntop and ns_name_pton, since val_resolve_and_check uses DNS wire format for the domain name. ------------------------------------------------------------------------ r2282 | tewok | 2006-11-08 15:27:31 -0800 (Wed, 08 Nov 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added -sets option to display signing sets in keyrecs. Changed -ref and -unref to implicitly list sets as well as keys. Changed -unref to implicitly check obsolete keys. ------------------------------------------------------------------------ r2281 | hserus | 2006-11-08 12:37:52 -0800 (Wed, 08 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Don't set EDNS0 when query is sent with VAL_FLAGS_DONT_VALIDATE Continue to fetch glue for each of the NS records returned if answers are not returned for the ones earlier ------------------------------------------------------------------------ r2280 | hserus | 2006-11-08 12:36:03 -0800 (Wed, 08 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/validator.h Add a new flags field to the query structure; only value recognized is VAL_FLAGS_DONT_VALIDATE, which causes EDNS0 to be turned off in queries. ------------------------------------------------------------------------ r2279 | hserus | 2006-11-08 12:33:58 -0800 (Wed, 08 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_crypto.c M /trunk/dnssec-tools/validator/libval/val_crypto.h Fix parameter mismatch in _sigverify() routines ------------------------------------------------------------------------ r2278 | hserus | 2006-11-08 11:57:14 -0800 (Wed, 08 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Check for proper condition in provable insecure detection logic ------------------------------------------------------------------------ r2277 | hserus | 2006-11-08 10:20:30 -0800 (Wed, 08 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch Use p_val_status in place of p_val_error ------------------------------------------------------------------------ r2276 | hserus | 2006-11-08 10:18:52 -0800 (Wed, 08 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap Use the latest error codes ------------------------------------------------------------------------ r2275 | tewok | 2006-11-08 09:45:17 -0800 (Wed, 08 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO M /trunk/dnssec-tools/tools/scripts/Makefile.PL M /trunk/dnssec-tools/tools/scripts/README A /trunk/dnssec-tools/tools/scripts/krfcheck (from /trunk/dnssec-tools/tools/scripts/keyrec-check:2274) M /trunk/dnssec-tools/tools/scripts/signset-editor Changed the name of keyrec-check to krfcheck. ------------------------------------------------------------------------ r2274 | tewok | 2006-11-08 09:39:54 -0800 (Wed, 08 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/keyrec-check Changing the command name to krfcheck. ------------------------------------------------------------------------ r2273 | hserus | 2006-11-08 09:04:06 -0800 (Wed, 08 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_policy.h Expand ALGO to ALGORITHM ------------------------------------------------------------------------ r2272 | hserus | 2006-11-08 09:03:01 -0800 (Wed, 08 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/resolver.h Removed SR_SUSPICIOUS_BIT since this is never used ------------------------------------------------------------------------ r2271 | hserus | 2006-11-08 09:02:42 -0800 (Wed, 08 Nov 2006) | 8 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_errors.h Removed VAL_A_TOO_MANY_LINKS Removed VAL_A_FLOOD_ATTACK_DETECTED Removed VAL_A_NO_PREFERRED_SEP Renamed VAL_A_SECURITY_LAME to VAL_AC_BAD_DELEGATION Renamed VAL_A_* to VAL_AC_* Expand ALGO to ALGORITHM Expand PROTO to PROTOCOL ------------------------------------------------------------------------ r2270 | hserus | 2006-11-08 09:02:31 -0800 (Wed, 08 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_support.c Renamed VAL_A_* to VAL_AC_* ------------------------------------------------------------------------ r2269 | hserus | 2006-11-08 09:02:13 -0800 (Wed, 08 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/README Some word-smithing ------------------------------------------------------------------------ r2268 | hserus | 2006-11-08 09:02:00 -0800 (Wed, 08 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Renamed VAL_A_* to VAL_AC_* Expand ALGO to ALGORITHM ------------------------------------------------------------------------ r2267 | hserus | 2006-11-08 09:00:44 -0800 (Wed, 08 Nov 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/libval/validator.h Expand ALGO to ALGORITHM Rename p_val_error to p_val_status Rename p_val_error to p_val_status Rename p_query_error to p_query_status Also maintain older definitions for backwards compatibility ------------------------------------------------------------------------ r2266 | hserus | 2006-11-08 09:00:29 -0800 (Wed, 08 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c Rename p_val_error to p_val_status ------------------------------------------------------------------------ r2265 | hserus | 2006-11-08 09:00:16 -0800 (Wed, 08 Nov 2006) | 11 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c Rename p_val_error to p_val_status Rename p_val_error to p_val_status Rename p_query_error to p_query_status Removed SR_SUSPICIOUS_BIT since this is never used Removed VAL_A_TOO_MANY_LINKS Removed VAL_A_FLOOD_ATTACK_DETECTED Removed VAL_A_NO_PREFERRED_SEP Renamed VAL_A_SECURITY_LAME to VAL_AC_BAD_DELEGATION Renamed VAL_A_* to VAL_AC_* Expand ALGO to ALGORITHM ------------------------------------------------------------------------ r2264 | hserus | 2006-11-08 08:59:48 -0800 (Wed, 08 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.h Rename p_val_error to p_val_status Rename p_val_error to p_val_status Rename p_query_error to p_query_status ------------------------------------------------------------------------ r2263 | hserus | 2006-11-08 08:59:35 -0800 (Wed, 08 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_crypto.c Renamed VAL_A_* to VAL_AC_* ------------------------------------------------------------------------ r2262 | hserus | 2006-11-08 08:59:21 -0800 (Wed, 08 Nov 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c Expand ALGO to ALGORITHM Expand PROTO to PROTOCOL Renamed VAL_A_SECURITY_LAME to VAL_AC_BAD_DELEGATION Renamed VAL_A_* to VAL_AC_* ------------------------------------------------------------------------ r2261 | hserus | 2006-11-08 08:58:54 -0800 (Wed, 08 Nov 2006) | 14 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Wording changes, updated error codes to reflect only those used by the library Rename p_val_error to p_val_status Rename p_val_error to p_val_status Renamed VAL_A_SECURITY_LAME to VAL_AC_BAD_DELEGATION Removed VAL_A_CLOCK_SKEW Removed VAL_A_DUPLICATE_KEYTAG Removed VAL_A_NO_PREFERRED_SEP Removed VAL_A_WRONG_RRSIG_OWNER Removed VAL_A_KEYTAG_MISMATCH Removed VAL_A_TOO_MANY_LINKS Expand ALGO to ALGORITHM Expand PROTO to PROTOCOL Renamed VAL_A_* to VAL_AC_* ------------------------------------------------------------------------ r2260 | hserus | 2006-11-08 08:58:28 -0800 (Wed, 08 Nov 2006) | 14 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod Rename p_val_error to p_val_status Rename p_val_error to p_val_status Renamed VAL_A_SECURITY_LAME to VAL_AC_BAD_DELEGATION Removed VAL_A_CLOCK_SKEW Removed VAL_A_DUPLICATE_KEYTAG Removed VAL_A_NO_PREFERRED_SEP Removed VAL_A_WRONG_RRSIG_OWNER Removed VAL_A_KEYTAG_MISMATCH Removed VAL_A_TOO_MANY_LINKS Removed VAL_AC_DNSSEC_VERSION_ERROR Expand ALGO to ALGORITHM Expand PROTO to PROTOCOL Renamed VAL_A_* to VAL_AC_* ------------------------------------------------------------------------ r2259 | hserus | 2006-11-08 08:57:47 -0800 (Wed, 08 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/README M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.3 M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.pod M /trunk/dnssec-tools/validator/doc/val_gethostbyname.3 M /trunk/dnssec-tools/validator/doc/val_gethostbyname.pod M /trunk/dnssec-tools/validator/doc/val_query.3 M /trunk/dnssec-tools/validator/doc/val_query.pod Rename p_val_error to p_val_status ------------------------------------------------------------------------ r2258 | hserus | 2006-11-08 08:56:31 -0800 (Wed, 08 Nov 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval-implementation-notes Removed VAL_A_CLOCK_SKEW Renamed VAL_A_SECURITY_LAME to VAL_AC_BAD_DELEGATION Renamed VAL_A_* to VAL_AC_* Removed VAL_A_KEYTAG_MISMATCH Expanded ALGO to ALGORITHM ------------------------------------------------------------------------ r2257 | hserus | 2006-11-08 08:56:12 -0800 (Wed, 08 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/doc/Makefile.in Rename p_as_error to p_ac_status Rename p_val_error to p_val_status ------------------------------------------------------------------------ r2256 | tewok | 2006-11-07 19:01:16 -0800 (Tue, 07 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/fixkrf Fixed spacing in the usage message. ------------------------------------------------------------------------ r2255 | tewok | 2006-11-07 18:59:46 -0800 (Tue, 07 Nov 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/fixkrf Remove some obsolete data. Add a nop condition for set keyrecs. Adjust for new keyrec file format. ------------------------------------------------------------------------ r2254 | tewok | 2006-11-07 17:37:18 -0800 (Tue, 07 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/cleankrf Added support for new keyrec format. Delete orphaned signing sets. ------------------------------------------------------------------------ r2253 | tewok | 2006-11-07 09:59:20 -0800 (Tue, 07 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/cleankrf M /trunk/dnssec-tools/tools/scripts/signset-editor Renamed clean-keyrec to cleankrf. ------------------------------------------------------------------------ r2252 | tewok | 2006-11-07 09:54:21 -0800 (Tue, 07 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO M /trunk/dnssec-tools/tools/scripts/Makefile.PL M /trunk/dnssec-tools/tools/scripts/README Renamed clean-keyrec to cleankrf. ------------------------------------------------------------------------ r2251 | tewok | 2006-11-07 09:53:08 -0800 (Tue, 07 Nov 2006) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/cleankrf (from /trunk/dnssec-tools/tools/scripts/clean-keyrec:2245) Renamed clean-keyrec to cleankrf. ------------------------------------------------------------------------ r2250 | tewok | 2006-11-07 09:11:37 -0800 (Tue, 07 Nov 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/keyrec-check Added error checking for missing timestamp info. Made some error messages more useful. Added some code comments and routine header comments. ------------------------------------------------------------------------ r2249 | tewok | 2006-11-07 08:42:32 -0800 (Tue, 07 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/keyrec-check If no record-specific options weren't given, we'll do everything. ------------------------------------------------------------------------ r2248 | tewok | 2006-11-07 08:31:56 -0800 (Tue, 07 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/keyrec-check Added support for set keyrecs. ------------------------------------------------------------------------ r2246 | tewok | 2006-11-06 07:31:29 -0800 (Mon, 06 Nov 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/genkrf Modified to use the new keyrec format. Modified to allow multiple ZSKs to be generated. ------------------------------------------------------------------------ r2245 | tewok | 2006-11-06 07:22:51 -0800 (Mon, 06 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/clean-keyrec Due to changes in keyrec_add() and keyrec_del() we needed to explicitly call keyrec_write(). ------------------------------------------------------------------------ r2244 | tewok | 2006-11-06 07:15:21 -0800 (Mon, 06 Nov 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/signset-editor Made the dialog boxes for the modification commands to be scrollable windows. Deleted a few unnecessary raise() calls. ------------------------------------------------------------------------ r2243 | tewok | 2006-11-06 07:11:41 -0800 (Mon, 06 Nov 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Moved newsignset() into keyrec.pm as keyrec_signset_newname(). Saved the most recent signing set's name as lastset in the zone keyrec. ------------------------------------------------------------------------ r2242 | tewok | 2006-11-06 07:07:12 -0800 (Mon, 06 Nov 2006) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Moved keyrec_signset_newname() from zonesigner into keyrec.pm. It changed a bit in migration. Removed keyrec_write() calls in keyrec_add() and keyrec_del(). Those routines should modify the internal version, with keyrec_write() calls explicitly made to save the modified keyrec. ------------------------------------------------------------------------ r2240 | tewok | 2006-11-03 09:34:58 -0800 (Fri, 03 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/signset-editor Reworked the undoing of modify commands for the signing set view. ------------------------------------------------------------------------ r2239 | tewok | 2006-11-03 08:25:32 -0800 (Fri, 03 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/signset-editor Got the undo command working for deletes and modifies from the keyrec view. ------------------------------------------------------------------------ r2238 | tewok | 2006-11-02 09:40:12 -0800 (Thu, 02 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Changed keyrec_signset_addkey() and keyrec_signset_delkey() to update the keyrec's timestamp. ------------------------------------------------------------------------ r2237 | tewok | 2006-11-02 08:23:54 -0800 (Thu, 02 Nov 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/signset-editor Stop disabling of the modify menu command when in keyrec display mode. Set the label of the modify menu command appropriately when in the different display modes. ------------------------------------------------------------------------ r2236 | tewok | 2006-11-02 08:03:38 -0800 (Thu, 02 Nov 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/signset-editor Reworked pod for better descriptions and to include new functionality. ------------------------------------------------------------------------ r2235 | tewok | 2006-11-02 07:28:04 -0800 (Thu, 02 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/signset-editor Improved the unselected-thingy error message. ------------------------------------------------------------------------ r2233 | tewok | 2006-11-01 21:06:17 -0800 (Wed, 01 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/file-keyrec Updated to describe the new format. ------------------------------------------------------------------------ r2232 | tewok | 2006-11-01 20:26:20 -0800 (Wed, 01 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Get rid of a zone field from a key field chunk of code. ------------------------------------------------------------------------ r2231 | hserus | 2006-11-01 19:54:15 -0800 (Wed, 01 Nov 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c Don't print contents for free'd response structures ------------------------------------------------------------------------ r2230 | tewok | 2006-11-01 15:33:25 -0800 (Wed, 01 Nov 2006) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Pod mods: - improved the initial discussion of keyrec files - moved the "keyrec file" section after the "using zonesigner" section - added info about -zskcount - added info about -signset - fixed example 4's keyrec file to conform to the new version ------------------------------------------------------------------------ r2226 | tewok | 2006-11-01 06:42:18 -0800 (Wed, 01 Nov 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added lines for -zskcount and -signset to the usage message. ------------------------------------------------------------------------ r2225 | tewok | 2006-10-31 19:45:24 -0800 (Tue, 31 Oct 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/signset-editor Added the Modify command to the keyrec view. ------------------------------------------------------------------------ r2224 | tewok | 2006-10-31 17:58:23 -0800 (Tue, 31 Oct 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Made keyrec_signset_clear() externally available. Sort keys added to keyrec_signset_new(). Added keyrec_signset_haskey(). ------------------------------------------------------------------------ r2223 | tewok | 2006-10-31 10:48:37 -0800 (Tue, 31 Oct 2006) | 9 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/signset-editor Modified to use new keyrec format. Basic functionality works: adding, deleting, and modifying signing sets. TBD: - pod updates - ensure that undo functionality still works ------------------------------------------------------------------------ r2222 | tewok | 2006-10-30 12:16:48 -0800 (Mon, 30 Oct 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added support for multi-key signing sets. (The pod has not been modified yet. This will happen very soon!) ------------------------------------------------------------------------ r2221 | tewok | 2006-10-30 08:07:13 -0800 (Mon, 30 Oct 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added lastset as a zone keyrec record. Moved zskcount from key keyrecs to zone keyrecs. Changed keyrec_read() to recognize set keyrecs. ------------------------------------------------------------------------ r2220 | rstory | 2006-10-27 13:37:18 -0700 (Fri, 27 Oct 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/ns_parse.c do not try to parse 0 length msg or NULL ptr ------------------------------------------------------------------------ r2219 | tewok | 2006-10-26 15:22:08 -0700 (Thu, 26 Oct 2006) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added the zonename entry to set keyrecs. Deleted the sets entry from set keyrecs. Fixed a keyrec-type bug introduced with the addition of set records. Expanded some ill-advisedly combined if-conditions. Corrected the signing set interface names in the pod. ------------------------------------------------------------------------ r2218 | hserus | 2006-10-26 14:42:13 -0700 (Thu, 26 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Initialize ref_ns_list to NULL so that random value is not picked up when we see some referral error Don't follow referrals when CNAMEs are present. This case will be dealt with later ------------------------------------------------------------------------ r2217 | hserus | 2006-10-26 14:40:46 -0700 (Thu, 26 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c Don't fix the returned name server list if ns_number_of_addresses is 0 ------------------------------------------------------------------------ r2216 | tewok | 2006-10-26 14:37:22 -0700 (Thu, 26 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added a couple comments. ------------------------------------------------------------------------ r2215 | tewok | 2006-10-26 08:12:57 -0700 (Thu, 26 Oct 2006) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added recognition of set records. Deleted the old signing-set interfaces. Added new signing-set interfaces. Fixed a persnickety bug that had been adding too many blank lines between keyrecs. ------------------------------------------------------------------------ r2214 | tewok | 2006-10-24 18:52:23 -0700 (Tue, 24 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Adjusted the version number. ------------------------------------------------------------------------ r2213 | hserus | 2006-10-24 16:12:12 -0700 (Tue, 24 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Try to determine if a DNSKEY or RRSIG is missing instead of blindly storing query status value into the assertion. ------------------------------------------------------------------------ r2212 | rstory | 2006-10-24 14:31:12 -0700 (Tue, 24 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c print responses for test cases if -p specified ------------------------------------------------------------------------ r2211 | rstory | 2006-10-24 14:29:58 -0700 (Tue, 24 Oct 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c - remove special case prototypes for solaris. use -D_REENTRANT and system headers instead - add additional paramter to ctime_r on solaris - indent output from val_log_assertion to help show nesting ------------------------------------------------------------------------ r2210 | rstory | 2006-10-24 14:27:33 -0700 (Tue, 24 Oct 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_verify.c - remove special case prototypes for *_r functions on solaris. compile with -D_REENTRANT to get these prototypes from system headers. - fix calls to ctime_r for solaris, which has an extra parameter ------------------------------------------------------------------------ r2209 | rstory | 2006-10-24 14:25:50 -0700 (Tue, 24 Oct 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_x_query.h expose compose_answer prototype ------------------------------------------------------------------------ r2208 | rstory | 2006-10-24 14:24:59 -0700 (Tue, 24 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_debug.c - exclude more cases where the res_sym hack doesn't work ------------------------------------------------------------------------ r2207 | rstory | 2006-10-23 14:43:57 -0700 (Mon, 23 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.h - make ctx param const for val_log_rrset(), val_log_rrsig_rdata() ------------------------------------------------------------------------ r2206 | rstory | 2006-10-23 14:43:37 -0700 (Mon, 23 Oct 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c - new val_log_val_rrset() - new val_log_assertion_pfx() - make ctx param const for val_log_rrset(), val_log_rrsig_rdata() ------------------------------------------------------------------------ r2205 | rstory | 2006-10-23 14:40:40 -0700 (Mon, 23 Oct 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c fix final result tallies ------------------------------------------------------------------------ r2204 | hardaker | 2006-10-23 13:49:15 -0700 (Mon, 23 Oct 2006) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/README documentation update ------------------------------------------------------------------------ r2203 | hardaker | 2006-10-23 13:48:51 -0700 (Mon, 23 Oct 2006) | 1 line Changed paths: D /trunk/dnssec-tools/apps/mozilla/dnssec-enable.patch removed older patch ------------------------------------------------------------------------ r2202 | hardaker | 2006-10-23 13:47:57 -0700 (Mon, 23 Oct 2006) | 1 line Changed paths: D /trunk/dnssec-tools/apps/mozilla/firefox-dnssec-rpm.patch removed older patch ------------------------------------------------------------------------ r2201 | hardaker | 2006-10-23 13:47:30 -0700 (Mon, 23 Oct 2006) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/firefox-dnssec-rpm.patch older patch file changes; checking in only for historical archiving purposes; will remove next ------------------------------------------------------------------------ r2200 | hardaker | 2006-10-23 13:31:07 -0700 (Mon, 23 Oct 2006) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch M /trunk/dnssec-tools/apps/mozilla/dnssec-firefox.patch new copies of the firefox patches; minor changes many just timestamps ------------------------------------------------------------------------ r2199 | hserus | 2006-10-23 12:49:52 -0700 (Mon, 23 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libsres/res_support.c M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_resquery.c Bug fix: Make sure that ns_address in struct name_server is initialized to NULL ------------------------------------------------------------------------ r2198 | hserus | 2006-10-23 08:23:19 -0700 (Mon, 23 Oct 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Add a new function find_trust_point() to find out which trust anchor applies to a given name Maintain separation between key status and return value in is_trusted_key() Break out early from the is check_provably_unsecure() logic if we see something amiss Dont use val_isauthentic() val_istrusted() encompasses val_isauthentication() behavior ------------------------------------------------------------------------ r2197 | hserus | 2006-10-23 08:22:57 -0700 (Mon, 23 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_errors.h Add VAL_A_INVALID_RRSIG error code ------------------------------------------------------------------------ r2196 | hserus | 2006-10-23 08:22:43 -0700 (Mon, 23 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_support.c Use ns_address in struct name_server as sockaddr_storage** ------------------------------------------------------------------------ r2195 | hserus | 2006-10-23 08:22:22 -0700 (Mon, 23 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c Use VAL_ERROR instead of VAL_INDETERMINATE to indicate that some answer was not received. ------------------------------------------------------------------------ r2194 | hserus | 2006-10-23 08:22:10 -0700 (Mon, 23 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_crypto.c M /trunk/dnssec-tools/validator/libval/val_crypto.h return void for rsasha1_sigverify() and friends but make sure that the sig_status and dnksey_status values indicate the correct error. ------------------------------------------------------------------------ r2193 | hserus | 2006-10-23 08:21:49 -0700 (Mon, 23 Oct 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c return void for val_sigverify() but make sure that the sig_status and dnksey_status values indicate the correct error. modify SET_STATUS so that it really matches what the API requires ------------------------------------------------------------------------ r2192 | hserus | 2006-10-23 08:21:28 -0700 (Mon, 23 Oct 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.h M /trunk/dnssec-tools/validator/libval/val_x_query.c Dont use val_isauthentic() val_istrusted() encompasses val_isauthentication() behavior ------------------------------------------------------------------------ r2191 | hserus | 2006-10-23 08:20:59 -0700 (Mon, 23 Oct 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Updates for the next revision of the API draft - add val_istrusted() - clarify that some "validated" error codes can be returned even if we didn't complete validation but we figured that the answer was trusted ------------------------------------------------------------------------ r2190 | hserus | 2006-10-23 08:20:19 -0700 (Mon, 23 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libsres/res_support.c M /trunk/dnssec-tools/validator/libsres/resolver.h Define ns_address as a sockaddr_storage** and use accordingly ------------------------------------------------------------------------ r2189 | tewok | 2006-10-21 19:03:36 -0700 (Sat, 21 Oct 2006) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Use the blinkenlights configuration file instead of the DNSSEC-Tools configuration file. Adjusted the pod discussing configuration files. Deleted some pod that had unintentionally been duplicated. ------------------------------------------------------------------------ r2188 | hserus | 2006-10-21 18:49:36 -0700 (Sat, 21 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Version submitted as -02 ------------------------------------------------------------------------ r2187 | tewok | 2006-10-21 17:54:27 -0700 (Sat, 21 Oct 2006) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/etc/dnssec/blinkenlights.conf A /trunk/dnssec-tools/tools/etc/dnssec/blinkenlights.conf.pm Adding configuration file for blinkenlights. ------------------------------------------------------------------------ r2186 | tewok | 2006-10-21 14:48:12 -0700 (Sat, 21 Oct 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Reworked how the help dialog is displayed. Now the dialog is modal, scrolled, and full o' scrummy, nutritious help-text goodness. Deleted error() and helpbegone(), as they're no longer used. ------------------------------------------------------------------------ r2185 | tewok | 2006-10-21 14:46:55 -0700 (Sat, 21 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd On exit, send a properly formed halt command to blinkenlights. ------------------------------------------------------------------------ r2184 | tewok | 2006-10-21 10:26:18 -0700 (Sat, 21 Oct 2006) | 9 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added the -display option to exec "rollctl -display". Execution with no arguments does the same thing. Deleted an "exit on empty rollerd command" line from rollerdcmd. I can't imagine why I *ever* thought that was a good idea. Added a "nop" command from rollerd. This is used by rollerd to see if blinkenlights is still running. The help menu is still broken. ------------------------------------------------------------------------ r2183 | tewok | 2006-10-21 10:21:04 -0700 (Sat, 21 Oct 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Modified display() to turn off the display flag if the display program has died. Added routine header "Purpose:"s to those routines which needed them. Left-shifted some code that had inexplicably gotten right-shifted. ------------------------------------------------------------------------ r2182 | tewok | 2006-10-20 21:38:11 -0700 (Fri, 20 Oct 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Finished writing the pod. Copied the pod text to the help window text. Broke the help window. ------------------------------------------------------------------------ r2181 | tewok | 2006-10-20 15:27:57 -0700 (Fri, 20 Oct 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added pod discussing status-column shading. Removed a few key bindings. ------------------------------------------------------------------------ r2180 | hserus | 2006-10-20 09:43:32 -0700 (Fri, 20 Oct 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_errors.h Rename VAL_A_DONT_KNOW to VAL_A_UNSET Rename VAL_A_NOT_A_ZONE_KEY to VAL_A_INVALID_KEY Define VAL_A_SIGNING_KEY to indicate that the key was used to verify a signature Define VAL_A_UNKNOWN_ALGO_LINK to indicate that the key matched a DS but the algo was unknown ------------------------------------------------------------------------ r2179 | hserus | 2006-10-20 09:41:32 -0700 (Fri, 20 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.c Using VAL_A_UNSET in place of VAL_A_DONT_KNOW ------------------------------------------------------------------------ r2178 | hserus | 2006-10-20 09:41:06 -0700 (Fri, 20 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Since the assertion status on failure (even when all rrsigs fail for the same reason) is VAL_A_NOT_VERIFIED, use correct logic for identifying provably unsecure. ------------------------------------------------------------------------ r2177 | hserus | 2006-10-20 09:37:08 -0700 (Fri, 20 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_crypto.h Make clear separation between return values and assertion status values ------------------------------------------------------------------------ r2176 | hserus | 2006-10-20 09:36:39 -0700 (Fri, 20 Oct 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c val_log_assertion() takes a struct val_authentication_chain instead of the individual members of this structure. Using VAL_A_INVALID_KEY in place of VAL_A_NOT_A_ZONE_KEY Using VAL_A_UNSET in place of VAL_A_DONT_KNOW Display new status values VAL_A_UNKNOWN_ALGO_LINK and VAL_A_SIGNING_KEY ------------------------------------------------------------------------ r2175 | hserus | 2006-10-20 09:34:21 -0700 (Fri, 20 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_crypto.c Make clear separation between return values and assertion status values ------------------------------------------------------------------------ r2174 | hserus | 2006-10-20 09:32:38 -0700 (Fri, 20 Oct 2006) | 8 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c Ensure that error conditions in the DNSKEY are properly reflected in the assertion status using VAL_A_UNSET in place of VAL_A_DONT_KNOW using VAL_A_INVALID_KEY in place of VAL_A_NOT_A_ZONE_KEY Make clear separation between return values and assertion status values Set the assertion status to VAL_A_NOT_VERIFIED even when all rrsigs fail for the same reason; we must look at the rrsig status for the actual reason of failure Use the VAL_A_UNKNOWN_ALGO_LINK status to indicate a potential provably unsecure condition. ------------------------------------------------------------------------ r2173 | hserus | 2006-10-20 09:26:20 -0700 (Fri, 20 Oct 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml More edits: - separated status values for DNSKEY and RRSIGS - new error code for VAL_A_UNKOWN_ALGO_LINK - renamed VAL_A_NOT_A_ZONE_KEY to VAL_A_INVALID_KEY ------------------------------------------------------------------------ r2172 | hserus | 2006-10-19 22:14:14 -0700 (Thu, 19 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Use sockaddr_storage where appropriate ------------------------------------------------------------------------ r2171 | hserus | 2006-10-19 22:14:00 -0700 (Thu, 19 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.h Added respondent server information to init_rr_set prototype ------------------------------------------------------------------------ r2170 | hserus | 2006-10-19 22:13:46 -0700 (Thu, 19 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.c Save respondent server information in rrset and copy this value in cloned rrsets ------------------------------------------------------------------------ r2169 | hserus | 2006-10-19 22:13:27 -0700 (Thu, 19 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Make changes to allow respondent server information to be reflected in the final authentication chain ------------------------------------------------------------------------ r2168 | hserus | 2006-10-19 22:13:11 -0700 (Thu, 19 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c set correct value for number of addresses read for a name server ------------------------------------------------------------------------ r2167 | hserus | 2006-10-19 22:12:53 -0700 (Thu, 19 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/validator.h Added field for respondent server in val_rrset Changed MAX_PROOF value to 4 ------------------------------------------------------------------------ r2166 | hserus | 2006-10-19 22:12:39 -0700 (Thu, 19 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c Use sockaddr_storage where appropriate Allow proper logging of respondent server information ------------------------------------------------------------------------ r2165 | hserus | 2006-10-19 22:12:17 -0700 (Thu, 19 Oct 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_query.c perform a proper clone of the name server addresses when we have multiple A records associated with a name Perform clone of respondent nameserver inside res_io_accept instead of within response_recv ------------------------------------------------------------------------ r2164 | hserus | 2006-10-19 22:11:55 -0700 (Thu, 19 Oct 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c Perform clone of respondent nameserver inside res_io_accept instead of within response_recv Ensure that the correct name server is returned as the respondent nameserver when we have multiple A records associated with a name Typecast sockaddr_storage* to sockaddr* where appropriate ------------------------------------------------------------------------ r2163 | hserus | 2006-10-19 22:11:32 -0700 (Thu, 19 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/resolver.h Use sockaddr_storage in place of sockaddr ------------------------------------------------------------------------ r2162 | hserus | 2006-10-19 22:11:07 -0700 (Thu, 19 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Added definition for default policy and MAX_PROOFS Also added details on respondent server ------------------------------------------------------------------------ r2161 | tewok | 2006-10-19 12:13:19 -0700 (Thu, 19 Oct 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added menu option to turn on/off coloring of zone stripes. Added a few separators in the options menu. Reordered a few pod subsections. ------------------------------------------------------------------------ r2160 | tewok | 2006-10-19 10:17:52 -0700 (Thu, 19 Oct 2006) | 10 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Pod mods: - screen layout discussion - "rollctl -display" to start the GUI - new section header for screen colors - explanation of menu commands - described max-paints and screen rebuilds - expanded the configuration file section ------------------------------------------------------------------------ r2159 | hserus | 2006-10-18 14:54:32 -0700 (Wed, 18 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Edits for -02 version ------------------------------------------------------------------------ r2158 | hserus | 2006-10-18 08:41:43 -0700 (Wed, 18 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_errors.h Make list of error codes compliant with validator API ------------------------------------------------------------------------ r2157 | hserus | 2006-10-18 08:40:42 -0700 (Wed, 18 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.c No longer using the VAL_GENERIC_ERROR error code. ------------------------------------------------------------------------ r2156 | hserus | 2006-10-18 08:40:08 -0700 (Wed, 18 Oct 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Some minor twiddles in check_wildcard_sanity() so that existing loop is made use of. val_ac_status will never be VAL_A_VERIFIED_LINK (this value is only present in rr_status), so dont check for this condition Use VAL_R_IRRELEVANT_PROOF in place VAL_R_BOGUS to represent extraneous proofs No longer using the VAL_GENERIC_ERROR error code ------------------------------------------------------------------------ r2155 | hserus | 2006-10-18 08:36:25 -0700 (Wed, 18 Oct 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/validator.h Changed SIG_ACCEPT_WINDOW to 1 day Renamed free_val_addrinfo to val_freeaddrinfo Also for backwards compatibility create a define for free_val_addrinfo linking it to the new definition ------------------------------------------------------------------------ r2154 | hserus | 2006-10-18 08:34:24 -0700 (Wed, 18 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c Remove unnecessary and duplicate cases. ------------------------------------------------------------------------ r2153 | hserus | 2006-10-18 08:32:13 -0700 (Wed, 18 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c Removed unnecessary TODO markers ------------------------------------------------------------------------ r2152 | hserus | 2006-10-18 08:31:18 -0700 (Wed, 18 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/getaddr.c M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.3 M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.pod M /trunk/dnssec-tools/validator/doc/val_gethostbyname.3 M /trunk/dnssec-tools/validator/doc/val_gethostbyname.pod M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.h Use val_freeaddrinfo() in place of free_val_addrinfo() ------------------------------------------------------------------------ r2151 | hserus | 2006-10-18 08:25:34 -0700 (Wed, 18 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_query.c Account for SERVFAILS with NSEC3 records in the authoritative section. ------------------------------------------------------------------------ r2150 | hserus | 2006-10-18 08:24:34 -0700 (Wed, 18 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/resolver.h Define return codes for only those definitions present in the validator API draft. ------------------------------------------------------------------------ r2149 | tewok | 2006-10-17 10:01:12 -0700 (Tue, 17 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added a font size selection menu. ------------------------------------------------------------------------ r2148 | hserus | 2006-10-17 06:18:41 -0700 (Tue, 17 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c Display a message when signature inception times are in the future or signatures have expired, if they are within the SIG_ACCEPT_WINDOW range. ------------------------------------------------------------------------ r2146 | tewok | 2006-10-16 13:13:20 -0700 (Mon, 16 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Add a "use" line for the DNSSEC-Tools defaults module. ------------------------------------------------------------------------ r2145 | tewok | 2006-10-16 13:11:30 -0700 (Mon, 16 Oct 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Allow options to be set in the DNSSEC-Tools config file. Centralize config option processing. ------------------------------------------------------------------------ r2144 | hserus | 2006-10-16 11:53:58 -0700 (Mon, 16 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c M /trunk/dnssec-tools/validator/libval/validator.h Temporary hack to allow RRSIGs to be validated within a window before inception and after expiration to account for clock skew and sig expirations. This window is currently defined to be 7 days. Since this has obvious security ramifications, the choice of this value and the approach to handle the general topic of handling expired sigs are topics worthy of further discussion. ------------------------------------------------------------------------ r2143 | hserus | 2006-10-16 11:21:13 -0700 (Mon, 16 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c in val_log_authentication_chain make a clear demarcation between results, answers and proofs ------------------------------------------------------------------------ r2142 | hserus | 2006-10-16 11:19:03 -0700 (Mon, 16 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c Check for single result status for proof of non-existence ------------------------------------------------------------------------ r2141 | hserus | 2006-10-16 10:31:20 -0700 (Mon, 16 Oct 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Moved the definition of check_conflicting_answers() before assimilate_answers() In prove_nsec_span_chk() set the result status tentatively to VAL_NONEXISTENT_NAME when a span is identified. This may change if wildcard checks prove us wrong. ------------------------------------------------------------------------ r2140 | hserus | 2006-10-16 09:39:30 -0700 (Mon, 16 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c Perform proper cleanup of dnskey rdata structure ------------------------------------------------------------------------ r2139 | rstory | 2006-10-16 08:24:38 -0700 (Mon, 16 Oct 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c add header for ctime_r ------------------------------------------------------------------------ r2138 | hserus | 2006-10-16 06:57:00 -0700 (Mon, 16 Oct 2006) | 25 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Move openssl-related code to val_crypto.c Use new val_rc_answer and val_ac_trust members in val_free_result_chain in place of the older val_ac_rrset Use new qc_ans and qc_proof members in val_query_chain in place of older qc_as Use struct _val_authentication_chain in place of older struct val_digested_auth_chain Use struct _val_result_chain in place of older struct val_internal_result - In fails_to_answer_query(), look at rrsig in addition to answer information while checking if data_present - Dont check the availability of an rrsig for a DNSKEY that is trusted. - In assimilate_answers(), create authentication chain structures for the answers as well as proofs - Separate out the portions in assimilate_answers() that deal with checking if answers are mutually consistent into a new function called check_conflicting_answers(). Since proofs are stored separately from other answers, we don't need to specifically check if SOA,NXT etc conflict with answers. - If we received an answer for a glue fetch operation, don't claim that validation is possible. - Link the chain of trust to either the qc_proof or qc_ans member for a pending query depending on if this answer was a proof of non-existence or no. - Separate nsec and nsec3 processing into two different functions, nsec_proof_chk() and nsec3_proof_chk(), for readability reasons. - Rename the older nsec_proof_check() function to prove_nsec_span_chk() Revamp the process for creation of the val_result_chain structure. - transform_single_result() changes a single val_internal_result_chain structure to val_result_chain. You can specifically give a "proof_result" structure to function as the container for proofs if the val_internal_result_chain structure is of the proof variety. - val_internal_result_chain has the val_rc_is_proof member that says if it is a proof or no. - As we process proofs of non-existence keep transforming them into the result structure. That way, we keep answers and any associated proofs in the same val_result_chain structure. - Perform sanity checks for wildcards before returning from val_resolve_and_check(). sanity checks for cnames and dnames will also be made in the future. - Add a new function prove_existence() that checks if the given type exists in the NSEC[3] for a given name - In sanity checks for non-existence proofs, check if the CNAME or DNAME bit is set for NSEC[3] record that proves a non-existent type. - Use transform_outstanding_results() to process all results that have not been stored in some val_result_chain structure after sanity checks have been performed. ------------------------------------------------------------------------ r2137 | hserus | 2006-10-16 06:54:16 -0700 (Mon, 16 Oct 2006) | 8 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Renamed qc_as in struct val_query_chain to qc_ans Perform proper cleanup of learned_zones, learned_keys, learned_ds and the rrset in digest_response() Add logic for identifying if the answer section contains a valid cname Recognize the case where a proof of non-existence is returned with a positive answer Modify digest_response() such that if we got a response for a zone where DNSSEC is enabled, but we had sent out our query without EDNS0, we perform a re-query. In val_resquery_rcv() store answers and proofs in separate members of struct domain_info In find_next_zonecut() look at the proofs in addition to the answers to see if we found the SOA record; also look at the rrsig (if we have one) to identify the zonecut information. ------------------------------------------------------------------------ r2136 | hserus | 2006-10-16 06:53:42 -0700 (Mon, 16 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_errors.h Move VAL_A_RRSIG_VERIFIED close to all the "success" conditions Add a new VAL_A_WCARD_VERIFIED state for assertions that were wildcard expanded. ------------------------------------------------------------------------ r2135 | hserus | 2006-10-16 06:53:23 -0700 (Mon, 16 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.c Free the new di_answers and di_proofs members within the domain_info structure Ensure correct initial state of rr_rec structures created by copy_rr_rec(), add_to_set() and add_to_sig() ------------------------------------------------------------------------ r2134 | hserus | 2006-10-16 06:53:01 -0700 (Mon, 16 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.h Use the new name for struct _val_authentication_chain (struct val_digested_auth_chain) Add prototype for is_trusted_zone() ------------------------------------------------------------------------ r2133 | hserus | 2006-10-16 06:52:30 -0700 (Mon, 16 Oct 2006) | 10 lines Changed paths: M /trunk/dnssec-tools/validator/libval/validator.h Use VAL_FLAGS_DONT_VALIDATE in place of F_DONT_VALIDATE Re-define the value of VAL_QUERY_MERGE_RRSETS since this was clashing with VAL_FLAGS_DONT_VALIDATE Renamed struct _val_authentication_chain to struct val_digested_auth_chain Renamed struct _val_result_chain to struct val_internal_result The DNS response domain_info structure now has separate members for the answers and the proofs (di_answers, di_proofs) instead of a single di_rrset member *** Note API change **** Change the val_result_chain structure - Instead of the val_rc_trust member we now have separate members for the answers and the proofs (val_rc_answer,val_rc_proofs). Also keep track of the number of proofs using the val_rc_proof_count member. ------------------------------------------------------------------------ r2132 | hserus | 2006-10-16 06:51:19 -0700 (Mon, 16 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c Use new name val_rc_answer instead of older val_rc_trust member in val_result_chain structure ------------------------------------------------------------------------ r2131 | hserus | 2006-10-16 06:51:04 -0700 (Mon, 16 Oct 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c Move openssl-related operations to val_crypto.c Use new name val_rc_answer instead of older val_rc_trust member in val_result_chain structure Proofs are stored in (struct val_result_chain)->val_rc_proofs, use this in order to display proof information for the authentication chain. ------------------------------------------------------------------------ r2130 | hserus | 2006-10-16 06:50:28 -0700 (Mon, 16 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_parse.c Move openssl-related operations to val_crypto.c ------------------------------------------------------------------------ r2129 | hserus | 2006-10-16 06:50:08 -0700 (Mon, 16 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.h Use the new name struct val_digested_auth_chain for older struct _val_authentication_chain ------------------------------------------------------------------------ r2128 | hserus | 2006-10-16 06:49:12 -0700 (Mon, 16 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c Use new name val_rc_trust instead of older val_rc_answer member in val_result_chain structure Check for NULL result returned from get_hostent_from_response ------------------------------------------------------------------------ r2127 | hserus | 2006-10-16 06:48:54 -0700 (Mon, 16 Oct 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c Move openssl-related operations to val_crypto.c Handle the case where the DNSKEY and DS records have been wildcard-expanded (these are prohibited) Use the new name for _val_authentication_chain (val_digested_auth_chain) Set the status for assertions that have been wildcard expanded as VAL_A_WCARD_VERIFIED. The proof of existence of the expanded type is verified later on. ------------------------------------------------------------------------ r2126 | hserus | 2006-10-16 06:47:39 -0700 (Mon, 16 Oct 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.c Add a note on cache processing w.r.t CNAMEs ------------------------------------------------------------------------ r2125 | hserus | 2006-10-16 06:47:11 -0700 (Mon, 16 Oct 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/Makefile.in D /trunk/dnssec-tools/validator/libval/crypto A /trunk/dnssec-tools/validator/libval/val_crypto.c A /trunk/dnssec-tools/validator/libval/val_crypto.h Remove the crypto directory Add a new file called val_crypto.[ch] that contains all openssl-related operations. ------------------------------------------------------------------------ r2124 | hserus | 2006-10-16 06:44:53 -0700 (Mon, 16 Oct 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_x_query.c - Remove unused parameter in find_rrset_len - Combine compose_merged_answer() and compose_answer() into a single function. ------------------------------------------------------------------------ r2123 | hserus | 2006-10-16 06:44:05 -0700 (Mon, 16 Oct 2006) | 7 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c - Use the VAL_QUERY_MERGE_RRSETS flag in val_resolve_and_check so that multiple responses are returned in a manner similar to res_query - When operatating in daemon mode use a validator context so that cache and policy are properly made use of - Since a common status value is stored for multiple proofs of non-existence, we only check test case result against this single value. ------------------------------------------------------------------------ r2119 | rstory | 2006-10-13 08:57:01 -0700 (Fri, 13 Oct 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_debug.c don't use (internal) const aware version of res_sym if p_*_sym are macros ------------------------------------------------------------------------ r2118 | tewok | 2006-10-12 18:57:48 -0700 (Thu, 12 Oct 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added several local config file options: modify shading showskip ------------------------------------------------------------------------ r2117 | tewok | 2006-10-12 18:05:29 -0700 (Thu, 12 Oct 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Renamed paintcnt() to painter(). Reorganized some of the routines into functional groups. ------------------------------------------------------------------------ r2116 | tewok | 2006-10-12 17:07:17 -0700 (Thu, 12 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/Makefile M /trunk/dnssec-tools/tools/demos/rollerd-basic/README Updated the demo name. ------------------------------------------------------------------------ r2115 | tewok | 2006-10-12 17:03:22 -0700 (Thu, 12 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/README Added description of rollerd-mayzones. ------------------------------------------------------------------------ r2114 | tewok | 2006-10-12 16:56:59 -0700 (Thu, 12 Oct 2006) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/Makefile A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/README A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/phaser A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/rc.blinkenlights A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/rundemo A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-db.cache A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-demo-smallset.rollrec A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-demo.rollrec A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-dummy.com A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-example.com A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-test.com A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-woof.com A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-xorn.com A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-yowzah.com A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-zero.com Demo with lots of domains. ------------------------------------------------------------------------ r2113 | tewok | 2006-10-12 16:46:34 -0700 (Thu, 12 Oct 2006) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/demos/rollerd-manyzones New demo directory. ------------------------------------------------------------------------ r2112 | tewok | 2006-10-12 14:15:17 -0700 (Thu, 12 Oct 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Fetch rollerd's sleep-time when the infostripe is updated. Handle changes in rollerd's rollrec file or sleep-time. ------------------------------------------------------------------------ r2111 | tewok | 2006-10-12 14:13:05 -0700 (Thu, 12 Oct 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Add a couple display() calls to tell blinkenlights when the rollrec file or sleep-time have changed. ------------------------------------------------------------------------ r2110 | tewok | 2006-10-12 08:47:36 -0700 (Thu, 12 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Get rid of some command line options. These are controlled by menu commands. ------------------------------------------------------------------------ r2109 | tewok | 2006-10-11 18:52:42 -0700 (Wed, 11 Oct 2006) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Reconstruct the zone table every N screen repaints. This is required because the screen update responsiveness degrades the longer the program runs. Periodic table reconstructions overcome this. Track the count of rolled and skipped zones. ------------------------------------------------------------------------ r2108 | tewok | 2006-10-11 17:11:41 -0700 (Wed, 11 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Added the -quiet option to stop printed output. ------------------------------------------------------------------------ r2107 | tewok | 2006-10-06 12:43:57 -0700 (Fri, 06 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Deleted an unnecessary grid() management call. ------------------------------------------------------------------------ r2106 | rstory | 2006-10-06 10:07:52 -0700 (Fri, 06 Oct 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c - daemon mode: it works! - add signal handler for clean shutdown on sigterm/sigint - clear cache before exit - send responses ------------------------------------------------------------------------ r2105 | rstory | 2006-10-06 10:03:15 -0700 (Fri, 06 Oct 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c - transform_results() - use new copy_rr_rec_list so responses with multiple answers works - remove audit comment ------------------------------------------------------------------------ r2104 | rstory | 2006-10-06 10:01:28 -0700 (Fri, 06 Oct 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_support.h new copy_rr_rec_list() function ------------------------------------------------------------------------ r2103 | rstory | 2006-10-05 15:29:39 -0700 (Thu, 05 Oct 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_x_query.c export compose_answer ------------------------------------------------------------------------ r2102 | tewok | 2006-10-05 10:49:03 -0700 (Thu, 05 Oct 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added an option to stop shading in the status column. Added a few descriptive notes in the pod. (To be expanded later.) ------------------------------------------------------------------------ r2101 | rstory | 2006-10-05 07:53:07 -0700 (Thu, 05 Oct 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c - clean up main - move selftest code into function - move selftest and error checks earlier - allows 2 levels of indention to be removed - run indent ------------------------------------------------------------------------ r2100 | rstory | 2006-10-05 07:24:14 -0700 (Thu, 05 Oct 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c start support for daemon mode: listen, query & validate; no responses yet ------------------------------------------------------------------------ r2099 | rstory | 2006-10-05 06:33:20 -0700 (Thu, 05 Oct 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c get rid of newline in time string ------------------------------------------------------------------------ r2098 | rstory | 2006-10-05 06:28:55 -0700 (Thu, 05 Oct 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c convert wire name to ascii before logging ------------------------------------------------------------------------ r2097 | rstory | 2006-10-05 06:26:35 -0700 (Thu, 05 Oct 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c remove unused variable ------------------------------------------------------------------------ r2096 | rstory | 2006-10-05 06:24:26 -0700 (Thu, 05 Oct 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c get rid of newline in time string ------------------------------------------------------------------------ r2095 | rstory | 2006-10-05 04:51:55 -0700 (Thu, 05 Oct 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/crypto/val_dsasha1.c M /trunk/dnssec-tools/validator/libval/crypto/val_rsamd5.c M /trunk/dnssec-tools/validator/libval/crypto/val_rsasha1.c M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_verify.c remove linefeeds from val_log messages ------------------------------------------------------------------------ r2094 | tewok | 2006-10-04 20:44:45 -0700 (Wed, 04 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added some use warnings. ------------------------------------------------------------------------ r2093 | tewok | 2006-10-04 15:22:11 -0700 (Wed, 04 Oct 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Fuzz-up the time data for display. This keeps the display from growing overly huge when multiple time units would otherwise be displayed. ------------------------------------------------------------------------ r2092 | tewok | 2006-10-04 15:03:51 -0700 (Wed, 04 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Send raw wait-time to display program, instead of cooked version. ------------------------------------------------------------------------ r2091 | rstory | 2006-10-04 14:53:53 -0700 (Wed, 04 Oct 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.c fix typo ------------------------------------------------------------------------ r2090 | tewok | 2006-10-04 14:17:14 -0700 (Wed, 04 Oct 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/timetrans.pm Added fuzzytimetrans(), which gives a single unit of time conversion. Reorganized pod. ------------------------------------------------------------------------ r2089 | tewok | 2006-10-04 13:31:42 -0700 (Wed, 04 Oct 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Moved some globals to the globals section. A little more code reorg. ------------------------------------------------------------------------ r2088 | tewok | 2006-10-04 13:24:14 -0700 (Wed, 04 Oct 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Allow the Zone Control menu to be a tear-off menu. Added an information row at the top of the display. Fixed a small bug with click selection. Reordered a few routines. ------------------------------------------------------------------------ r2087 | rstory | 2006-10-04 12:12:04 -0700 (Wed, 04 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/validator.h - add ttl expiration time field to rrset struct - add simplistic ttl expiration checks when querying cache ------------------------------------------------------------------------ r2086 | tewok | 2006-10-04 10:27:22 -0700 (Wed, 04 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added a menu toggle to display/hide skipped zones. ------------------------------------------------------------------------ r2085 | tewok | 2006-10-03 20:14:46 -0700 (Tue, 03 Oct 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added a menu command to allow/disallow execution of commands for modifying rollerd's processing. (Really only useful for demos, so one doesn't accidentally do something they didn't intend.) ------------------------------------------------------------------------ r2084 | tewok | 2006-10-03 19:17:25 -0700 (Tue, 03 Oct 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Fix an egregious bug that made the display look ookie if rolling zones were switched to skipping zones. ------------------------------------------------------------------------ r2083 | tewok | 2006-10-03 18:09:37 -0700 (Tue, 03 Oct 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Add the ability to select a zone by clicking in a zone stripe. Add keyboard accelerators for the "Roll Selected Zone" and "Skip Selected Zone" commands. Modified the text in the status column. ------------------------------------------------------------------------ r2082 | baerm | 2006-10-03 14:22:20 -0700 (Tue, 03 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c update service handling by getaddrinfo (ports should be set correctly now) ------------------------------------------------------------------------ r2081 | rstory | 2006-10-03 12:12:40 -0700 (Tue, 03 Oct 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_debug.c remove bogus/test struct member ------------------------------------------------------------------------ r2080 | rstory | 2006-10-03 11:28:26 -0700 (Tue, 03 Oct 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/validator.h remove tabs from macros ------------------------------------------------------------------------ r2079 | tewok | 2006-10-02 11:39:58 -0700 (Mon, 02 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Fixed getzone()'s header comments. ------------------------------------------------------------------------ r2078 | tewok | 2006-10-02 11:36:58 -0700 (Mon, 02 Oct 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added support for rolling/skipping a single user-specified zone. ------------------------------------------------------------------------ r2077 | tewok | 2006-09-30 14:15:35 -0700 (Sat, 30 Sep 2006) | 9 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Modified to shrink a skipped zone's set of rows down to a single row. Got rid of some unused variables and arguments. Restructured zonestripe() to have the skipped-zone drawing distinct from the rest of the code. Repaint the whole window if rollerd says a zone's roll/skip status has changed. Simplified and fixed color assignment. ------------------------------------------------------------------------ r2076 | tewok | 2006-09-30 11:40:42 -0700 (Sat, 30 Sep 2006) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Reworked the color-choosing algorithm. In addition to it actually being understandable now, it also allows more than three zones to be displayed at a time. Added some comments. Renamed a few (future) option flags. Added some packing options to keep the menu bar from moving on window resizes. ------------------------------------------------------------------------ r2075 | tewok | 2006-09-29 18:51:52 -0700 (Fri, 29 Sep 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Added better option processing. Added some menu options to run rollctl commands. ------------------------------------------------------------------------ r2074 | rstory | 2006-09-29 13:56:15 -0700 (Fri, 29 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_debug.c define local res_sym lookalike w/const char*, to get rid of a slew of compiler complaints ------------------------------------------------------------------------ r2073 | rstory | 2006-09-29 13:54:56 -0700 (Fri, 29 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/resolver.h add prototype for ns_samename iff missing ------------------------------------------------------------------------ r2072 | rstory | 2006-09-29 13:54:18 -0700 (Fri, 29 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator-config.h.in add decl check for ns_samename ------------------------------------------------------------------------ r2071 | rstory | 2006-09-29 13:19:05 -0700 (Fri, 29 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure run autoconf ------------------------------------------------------------------------ r2070 | rstory | 2006-09-29 13:18:38 -0700 (Fri, 29 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure.in remove double-print of result ------------------------------------------------------------------------ r2069 | tewok | 2006-09-29 12:19:13 -0700 (Fri, 29 Sep 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Added -display and -nodisplay to start and stop rollerd's graphical display program. ------------------------------------------------------------------------ r2068 | tewok | 2006-09-29 12:18:06 -0700 (Fri, 29 Sep 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added a user command to allow starting and stopping of rollerd's graphical display from rollctl. ------------------------------------------------------------------------ r2067 | tewok | 2006-09-29 12:15:24 -0700 (Fri, 29 Sep 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added support for rollctl commands to start and stop rollerd's graphical display. ------------------------------------------------------------------------ r2066 | tewok | 2006-09-29 10:47:42 -0700 (Fri, 29 Sep 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/blinkenlights Modified comments to refer to rollerd's new -display option instead of the old -demo. ------------------------------------------------------------------------ r2065 | tewok | 2006-09-29 10:31:18 -0700 (Fri, 29 Sep 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO M /trunk/dnssec-tools/tools/scripts/Makefile.PL M /trunk/dnssec-tools/tools/scripts/README Updated for moving blinkenlights into this directory. ------------------------------------------------------------------------ r2064 | tewok | 2006-09-29 10:27:15 -0700 (Fri, 29 Sep 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/rundemo Changed "rollerd -demo" to "rollerd -display". ------------------------------------------------------------------------ r2063 | tewok | 2006-09-29 10:26:36 -0700 (Fri, 29 Sep 2006) | 3 lines Changed paths: D /trunk/dnssec-tools/tools/demos/rollerd-basic/blinkenlights A /trunk/dnssec-tools/tools/scripts/blinkenlights (from /trunk/dnssec-tools/tools/demos/rollerd-basic/blinkenlights:2062) Moved blinkenlights to general scripts directory. ------------------------------------------------------------------------ r2062 | tewok | 2006-09-29 10:17:25 -0700 (Fri, 29 Sep 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Renamed the -demo option to -display. Modified pod to describe -display. ------------------------------------------------------------------------ r2061 | rstory | 2006-09-28 14:13:40 -0700 (Thu, 28 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c add headers for solaris ------------------------------------------------------------------------ r2060 | rstory | 2006-09-28 14:13:06 -0700 (Thu, 28 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c add prototype/parameter cast for solaris ------------------------------------------------------------------------ r2059 | rstory | 2006-09-28 14:11:19 -0700 (Thu, 28 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c add header/prototype for solairs ------------------------------------------------------------------------ r2058 | lfoster | 2006-09-28 14:02:05 -0700 (Thu, 28 Sep 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/TrustMan removed some old debugging code/comments. ------------------------------------------------------------------------ r2057 | rstory | 2006-09-28 14:01:37 -0700 (Thu, 28 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/getaddr.c M /trunk/dnssec-tools/validator/libsres/nsap_addr.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_x_query.c add headers for solaris ------------------------------------------------------------------------ r2056 | rstory | 2006-09-27 13:33:36 -0700 (Wed, 27 Sep 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c - don't dereference NULL ptr - add ability to run a range of tests ------------------------------------------------------------------------ r2055 | rstory | 2006-09-27 12:25:51 -0700 (Wed, 27 Sep 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/gethost.c fix bad commit; this is r2040 + indent ------------------------------------------------------------------------ r2054 | rstory | 2006-09-27 12:06:21 -0700 (Wed, 27 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/getaddr.c M /trunk/dnssec-tools/validator/apps/gethost.c M /trunk/dnssec-tools/validator/apps/validator_driver.c run indent ------------------------------------------------------------------------ r2053 | rstory | 2006-09-27 11:22:45 -0700 (Wed, 27 Sep 2006) | 7 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c - is_trusted_key(): clear dnskey between iterations - prove_nsec_wildcard_check() - check for null parameter - don't memcpy from null ptr - update find_next_zonecut calls to pass context - ask_cache(): make sure to do 'deep' release of resources ------------------------------------------------------------------------ r2052 | rstory | 2006-09-27 11:11:16 -0700 (Wed, 27 Sep 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c - get_addrinfo_from_result() - use sizeof() instead of hardcoded size - release unused memory before return - strdup canonname ------------------------------------------------------------------------ r2051 | rstory | 2006-09-27 11:08:32 -0700 (Wed, 27 Sep 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_parse.c - minor optimizations to TOK_IN_STR macro - val_parse_dnskey_string() - cleanup memory for error cases - clear passed ptr if we released the memory ------------------------------------------------------------------------ r2050 | rstory | 2006-09-27 11:06:13 -0700 (Wed, 27 Sep 2006) | 7 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c - make_sigfield(): check for overflow before memcpy - find_key_for_tag() - check for null param - check function rc and continue on error - free allocated public_key if not used - verify_next_assertion(): free allocated public_key if not used ------------------------------------------------------------------------ r2049 | rstory | 2006-09-27 11:04:00 -0700 (Wed, 27 Sep 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.c - res_sq_free_rrset_recs(): free all name servers - find_rr_set(): don't try to clone null ptr - decompress(): use sizeof(var) instead of hardcoded size ------------------------------------------------------------------------ r2048 | rstory | 2006-09-27 11:00:17 -0700 (Wed, 27 Sep 2006) | 13 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_resquery.h - SAVE_RR_TO_LIST - move from header to above function where used - add appropriate cleanup on return cases - digest_response() - free learned_* rrsets before returning - add 'else' to save unnecessary comparison - val_resquery_send(): rename var to *_p to indicate ascii domain - val_resquery_rcv() - rename var to *_p to indicate ascii domain - free response_data if not used - free response domain info when done w/it - find_next_zonecut(): add context param so no temporary needed ------------------------------------------------------------------------ r2047 | rstory | 2006-09-27 10:47:34 -0700 (Wed, 27 Sep 2006) | 11 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c - add policy_cleanup() to release allocated memory - use atexit to register policy_cleanup() when memory allocated - use sizeof() instead of macro for size parameter - destroy_valpol(): traverse plist to release all memory - rename some vars to *_p to indicate they are ascii names, not wire format - read_root_hints_file() - use local static to return w/out action if already called - don't use SAVE_RR_TO_LIST macro; instead copy code it and add appropriate resource cleanup in error cases - cleanup memory before return ------------------------------------------------------------------------ r2046 | rstory | 2006-09-27 10:27:32 -0700 (Wed, 27 Sep 2006) | 9 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.c - add/use new LOCK_DOWNGRADE macro - stow_info(): fix memory leak - get_cached_rrset(): get lock sooner - stow_root_info() - get lock sooner - return w/no action if we already read root info - make sure to release lock for all exit paths - free_validator_cache(): free root_info ------------------------------------------------------------------------ r2045 | rstory | 2006-09-27 10:21:02 -0700 (Wed, 27 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c free cache on exit ------------------------------------------------------------------------ r2044 | hserus | 2006-09-27 07:23:46 -0700 (Wed, 27 Sep 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/include/validator-config.h.in Add configure and header files generated after adding checks for gethostbyname2 and hstrerror ------------------------------------------------------------------------ r2043 | hserus | 2006-09-27 06:30:15 -0700 (Wed, 27 Sep 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_assertion.h M /trunk/dnssec-tools/validator/libval/val_verify.c M /trunk/dnssec-tools/validator/libval/val_verify.h M /trunk/dnssec-tools/validator/libval/validator.h Don't expose the union within val_authentication_chain in the API. Instead, create internal versions _val_authentication_chain and _val_result_chain to handle this data structure. This keeps the structures in conformance with draft-hayatnagarkar-dnsext-validator-api ------------------------------------------------------------------------ r2042 | hserus | 2006-09-26 11:59:57 -0700 (Tue, 26 Sep 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c Return EAI_SERVICE from process_service_and_hints() instead of NULL ------------------------------------------------------------------------ r2041 | hserus | 2006-09-26 11:53:34 -0700 (Tue, 26 Sep 2006) | 2 lines Changed paths: A /trunk/dnssec-tools/validator/libsres/nsap_addr.h Add prototypes for inet_nsap_addr and inet_nsap_ntoa ------------------------------------------------------------------------ r2040 | hserus | 2006-09-26 11:51:58 -0700 (Tue, 26 Sep 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/getaddr.c M /trunk/dnssec-tools/validator/apps/gethost.c M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator-config.h.in M /trunk/dnssec-tools/validator/libsres/ns_print.c M /trunk/dnssec-tools/validator/libsres/nsap_addr.c M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_log.h Allow compilation on Solaris ------------------------------------------------------------------------ r2039 | hardaker | 2006-09-25 16:41:40 -0700 (Mon, 25 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts turn of GUI:Long verbose ------------------------------------------------------------------------ r2038 | hardaker | 2006-09-25 16:41:13 -0700 (Mon, 25 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm remove some debugging statements ------------------------------------------------------------------------ r2037 | hardaker | 2006-09-25 16:40:07 -0700 (Mon, 25 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts remove some debugging statements ------------------------------------------------------------------------ r2036 | hardaker | 2006-09-25 16:28:43 -0700 (Mon, 25 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner - document that the -algorithm flag is passed to dnssec-keygen ------------------------------------------------------------------------ r2035 | hardaker | 2006-09-25 16:27:55 -0700 (Mon, 25 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm - Changed a number of things to make it more web-friendly and web-safer ------------------------------------------------------------------------ r2034 | hardaker | 2006-09-25 16:27:26 -0700 (Mon, 25 Sep 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone - Add a zone with a different algorithm - Add a unsigned sub-zone ------------------------------------------------------------------------ r2033 | hardaker | 2006-09-25 16:26:27 -0700 (Mon, 25 Sep 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts Make CGI-usable ------------------------------------------------------------------------ r2032 | hardaker | 2006-09-25 16:24:51 -0700 (Mon, 25 Sep 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Makefile.PL Add DESTDIR to the mix ------------------------------------------------------------------------ r2031 | baerm | 2006-09-25 16:20:06 -0700 (Mon, 25 Sep 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c changed val_getaddrinfo processing and process_service_and_hints to handle service names and numbers ------------------------------------------------------------------------ r2030 | hserus | 2006-09-25 13:20:20 -0700 (Mon, 25 Sep 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_resquery.h M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_support.h Save the response header bytes in rrset_rec; copy and free these fields where ever appropriate. ------------------------------------------------------------------------ r2029 | hserus | 2006-09-25 13:16:57 -0700 (Mon, 25 Sep 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Remove redundant check ------------------------------------------------------------------------ r2028 | rstory | 2006-09-25 12:25:12 -0700 (Mon, 25 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c restore null ptr check lost somehow during indent checkins ------------------------------------------------------------------------ r2027 | rstory | 2006-09-25 11:57:03 -0700 (Mon, 25 Sep 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_log.h M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_resquery.h M /trunk/dnssec-tools/validator/libval/val_verify.c M /trunk/dnssec-tools/validator/libval/validator.h - second pass of indent ------------------------------------------------------------------------ r2026 | rstory | 2006-09-25 11:06:07 -0700 (Mon, 25 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_assertion.h M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_cache.h M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_context.h M /trunk/dnssec-tools/validator/libval/val_errors.h M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.h M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.h M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_log.h M /trunk/dnssec-tools/validator/libval/val_parse.c M /trunk/dnssec-tools/validator/libval/val_parse.h M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_policy.h M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_resquery.h M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_support.h M /trunk/dnssec-tools/validator/libval/val_verify.c M /trunk/dnssec-tools/validator/libval/val_verify.h M /trunk/dnssec-tools/validator/libval/val_x_query.c M /trunk/dnssec-tools/validator/libval/val_x_query.h M /trunk/dnssec-tools/validator/libval/validator.h run indent ------------------------------------------------------------------------ r2025 | hserus | 2006-09-25 08:15:24 -0700 (Mon, 25 Sep 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_x_query.c Use the public "struct val_rrset" member in "struct val_authentication_chain" instead of the private "struct val_rrset_digested" member while processing results from val_resolve_and_check() ------------------------------------------------------------------------ r2024 | rstory | 2006-09-25 07:59:38 -0700 (Mon, 25 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c don't malloc 0 bytes ------------------------------------------------------------------------ r2023 | hserus | 2006-09-25 07:14:58 -0700 (Mon, 25 Sep 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator-config.h.in Add ability to enable NSEC3 using the "--with-nsec3" flag ------------------------------------------------------------------------ r2022 | hardaker | 2006-09-22 15:52:47 -0700 (Fri, 22 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt quote RFCs instead of older internet-drafts ------------------------------------------------------------------------ r2021 | hserus | 2006-09-22 14:34:42 -0700 (Fri, 22 Sep 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Stop the compiler from complaining about uninitialized usage of a variable. ------------------------------------------------------------------------ r2020 | hserus | 2006-09-22 13:53:17 -0700 (Fri, 22 Sep 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/etc/dnsval.conf Add TA and zone-security-expection for ws.nsec3.org ------------------------------------------------------------------------ r2019 | hserus | 2006-09-22 13:52:55 -0700 (Fri, 22 Sep 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.h Change SAVE_RR_TO_LIST macro so that it can be used for all different types of rrset types in digest_response() ------------------------------------------------------------------------ r2018 | hserus | 2006-09-22 13:52:36 -0700 (Fri, 22 Sep 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.h Add prototypes for new nsec3-related functions. ------------------------------------------------------------------------ r2017 | hserus | 2006-09-22 13:52:21 -0700 (Fri, 22 Sep 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_errors.h Create two new categories of error codes for the "cannot do anything further" states: one where we should check proof of non existence, and the other where we should not. Add definitions for VAL_R_PROVABLY_UNSECURE, VAL_PROVABLY_UNSECURE and VAL_NONEXISTENT_NAME_OPTOUT ------------------------------------------------------------------------ r2016 | hserus | 2006-09-22 13:52:01 -0700 (Fri, 22 Sep 2006) | 9 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c Use correct bounds while constructing a presentation format domain name Changes to reflect removal of non-useful members from struct delegation_info Since (struct name_server *)->ns_name_n is now an array, don't allocate memory for it. Make it possible for digest_response() to identify the header bytes in the reponse Stow zone information only when we actually follow referrals Removed the entire cname logic because it didn't seem to make any sense. This has to be reworked. Fix the referral and glue-fetching logic. ------------------------------------------------------------------------ r2015 | hserus | 2006-09-22 13:51:42 -0700 (Fri, 22 Sep 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.c Use correct array size for specifying on the wire domain name Implement base32 encoding for NSEC3 hash names Implement logic for comparison of hash values In nsec_sig_match make it possible to add multiple RRSIGs to a record set. ------------------------------------------------------------------------ r2014 | hserus | 2006-09-22 13:51:22 -0700 (Fri, 22 Sep 2006) | 29 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Add support for nsec3: - Properly detect when a given type is set for an NSEC or NSEC3 record. - check hash span - recognizing this record type to be a proof of non-existence - checking if there are conflicting answers in general - computing nsec3 hash with given params - span check and wildcard check - identification of VAL_NONEXISTENT_NAME_OPTOUT Rearrange code for proving non-existence - There is no initial check made to see if NSEC_is_wrong_answer - add separate functions for span check and wildcard check - branch to the correct check depending on nsec3 or nsec - if we are not able to prove non-existence but the zone is provable insecure then we extract the code from the response header and return that to the user Changed the logic for identifying next name server where the query should be directed to - look into our cache first (we only cache name server info if we actually follwed referrals) - if nothing matches, use the default name server - else recurse from root Fix glue fetching logic Identify condition of DS signed by unknown algorithms as that of provably insecure Set the authentication chain status to VAL_R_PROVABLY_UNSECURE when we detect this condition. add_to_authentication_chain() now takes a rrset param instead of domain_info since that is really what is needed verify_provably_unsecure() takes a new param for the query. We need to know this in order to break out of a potential infinite loop. verify_and_validate() also changes to accomodate this. Identify two new categories of error codes for the "cannot do anything further" states: one where we should check proof of non existence, and the other where we should not. Use correct bounds while constructing a presentation format domain name Use correct array size for specifying on the wire domain name ------------------------------------------------------------------------ r2013 | hserus | 2006-09-22 13:49:56 -0700 (Fri, 22 Sep 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.h Add policy definition for NSEC3 maximum allowable iterations Add prototypes for NSEC3 functions. ------------------------------------------------------------------------ r2012 | hserus | 2006-09-22 13:49:39 -0700 (Fri, 22 Sep 2006) | 8 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Define a policy for specifying maximum allowable NSEC3 iterations Use correct bounds while constructing on the wire domain name Correctly break out of loop when checking for policy relevance Since (struct name_server *)->ns_name_n is now an array, don't allocate memory for it. Plug a memory leak for the name server list. Since we're not stowing the root name server information in the cache, free-up this memory. ------------------------------------------------------------------------ r2011 | hserus | 2006-09-22 13:49:14 -0700 (Fri, 22 Sep 2006) | 10 lines Changed paths: M /trunk/dnssec-tools/validator/libval/validator.h Moved definitions for NS_MAXDNAME and NS_MAXCDNAME to resolver Define separate answer types for NSEC and NSEC3 instead of a single NXT type Add definitions for different hash algorithm types including the ones used for signaling NSEC3 Remove the query section from val_rrset. This is not useful. (Note API change.) Use correct array size for specifying on the wire domain name Remove a bunch of non-useful members from struct delegation_info Dont assume that DS hash will always be SHA1 Define the NSEC3 rdata structure ------------------------------------------------------------------------ r2010 | hserus | 2006-09-22 13:48:44 -0700 (Fri, 22 Sep 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c In val_switch_policy_scope() look at all policies in the file to see if they are relevant. ------------------------------------------------------------------------ r2009 | hserus | 2006-09-22 13:48:20 -0700 (Fri, 22 Sep 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c Use correct bounds while constructing a presentation format domain name Add text string for displaying the VAL_PROVABLY_UNSECURE code. ------------------------------------------------------------------------ r2008 | hserus | 2006-09-22 13:47:58 -0700 (Fri, 22 Sep 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_parse.h Add prototypes for new NSEC3-related functions. ------------------------------------------------------------------------ r2007 | hserus | 2006-09-22 13:47:38 -0700 (Fri, 22 Sep 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_parse.c Use definitions for hash algorithms intead of their values. Add logic for parsing an NSEC3 resource record ------------------------------------------------------------------------ r2006 | hserus | 2006-09-22 13:47:22 -0700 (Fri, 22 Sep 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c Use correct bounds while constructing a presentation format domain name ------------------------------------------------------------------------ r2005 | hserus | 2006-09-22 13:46:44 -0700 (Fri, 22 Sep 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c Use definitions for hash algorithms intead of their values. Add support for NSEC3 signaling Use correct bounds while constructing on the wire domain name Implement hash comparison operation ------------------------------------------------------------------------ r2004 | hserus | 2006-09-22 13:46:16 -0700 (Fri, 22 Sep 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.c Use correct bounds while constructing on the wire domain name Don't store the root hints information in the name server cache. This is to prevent queries from always being sent to the root even when a default name server is present. ------------------------------------------------------------------------ r2003 | hserus | 2006-09-22 13:45:42 -0700 (Fri, 22 Sep 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_x_query.c Use correct bounds while constructing on the wire domain name ------------------------------------------------------------------------ r2002 | hserus | 2006-09-22 13:43:37 -0700 (Fri, 22 Sep 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c Added test cases for NSEC3 Print test case name and result of test case on the same line. Modified expected value for test cases 67-72. Still need to think about how we're going to handle proofs when answers are also returned. ------------------------------------------------------------------------ r2001 | hserus | 2006-09-22 13:43:06 -0700 (Fri, 22 Sep 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libsres/res_support.c Don't allocate memory for (struct name_server *)->ns_name_n since this is now an array ------------------------------------------------------------------------ r2000 | hserus | 2006-09-22 13:42:27 -0700 (Fri, 22 Sep 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/resolver.h Added NSEC3 definitions Moved definition of NS_MAXDNAME and NS_MAXCDNAME from validator.h to this file Changed type of ns_name_n in struct name_server from pointer to array of fixed length. ------------------------------------------------------------------------ r1999 | hserus | 2006-09-22 13:41:50 -0700 (Fri, 22 Sep 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_debug.c Added NSEC3 definitions ------------------------------------------------------------------------ r1998 | rstory | 2006-09-22 10:51:08 -0700 (Fri, 22 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/apps/getaddr.c add support for new logging stuff ------------------------------------------------------------------------ r1997 | rstory | 2006-09-22 10:38:31 -0700 (Fri, 22 Sep 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/validator.h - removed unused VAL_LOG_MASK - don't use LOG_PERROR w/syslog; users can use stderr log handler - remove condition for network logging definitions ------------------------------------------------------------------------ r1996 | rstory | 2006-09-22 10:35:03 -0700 (Fri, 22 Sep 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c -use new logging mechanism ------------------------------------------------------------------------ r1995 | rstory | 2006-09-22 10:32:34 -0700 (Fri, 22 Sep 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_log.h - rename name -> name_p (for consistency) in val_log_assertion - include res_debug.h if needed - completely rework logging to allow for multiple independent log destinations with their own debug level. supports file, syslog, stderr, stdout, udp ------------------------------------------------------------------------ r1994 | hardaker | 2006-09-22 10:31:11 -0700 (Fri, 22 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/timetrans.pm turned into a proper perl module so that things like RPM packages it correctly; techincally it didn't need it's own name space but it is 'cleaner' and less prone to conflict ------------------------------------------------------------------------ r1993 | hardaker | 2006-09-21 16:43:05 -0700 (Thu, 21 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/firefox.spec udpate to firefox 1.5.0.7 ------------------------------------------------------------------------ r1992 | hardaker | 2006-09-21 16:42:25 -0700 (Thu, 21 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/dist/dnssec-tools.spec Remove broken BuildArch: specifier; it's not a per-package option unfortunately ------------------------------------------------------------------------ r1991 | hardaker | 2006-09-21 15:24:34 -0700 (Thu, 21 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/dist/dnssec-tools.spec another update of the spec file for a fedora compliant build ------------------------------------------------------------------------ r1986 | hardaker | 2006-09-20 19:50:58 -0700 (Wed, 20 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow minor option usuability updates and more commenting of the code ------------------------------------------------------------------------ r1985 | rstory | 2006-09-19 15:21:54 -0700 (Tue, 19 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_x_query.c add include for solaris ------------------------------------------------------------------------ r1984 | rstory | 2006-09-19 12:44:11 -0700 (Tue, 19 Sep 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_query.c - response_recv() - minor readability tweak - free recvd answer if caller won't expect answer (plug leak) - return error if we don't have the return value we expect ------------------------------------------------------------------------ r1983 | rstory | 2006-09-19 12:40:54 -0700 (Tue, 19 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_io_manager.c null pointer checks ------------------------------------------------------------------------ r1982 | rstory | 2006-09-19 12:39:42 -0700 (Tue, 19 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/ns_name.c maintainability: rename l0 to l_tmp ------------------------------------------------------------------------ r1981 | rstory | 2006-09-16 08:12:41 -0700 (Sat, 16 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_query.c wire length must be < NS_MAXCDNAME, not NS_MAXDNAME ------------------------------------------------------------------------ r1980 | rstory | 2006-09-16 08:08:52 -0700 (Sat, 16 Sep 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/ns_name.c M /trunk/dnssec-tools/validator/libsres/ns_parse.c M /trunk/dnssec-tools/validator/libsres/ns_print.c M /trunk/dnssec-tools/validator/libsres/ns_samedomain.c M /trunk/dnssec-tools/validator/libsres/res_debug.c M /trunk/dnssec-tools/validator/libsres/res_mkquery.c sizeof x -> sizeof(x) ------------------------------------------------------------------------ r1979 | rstory | 2006-09-15 11:02:35 -0700 (Fri, 15 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/base64.c M /trunk/dnssec-tools/validator/libsres/ns_name.c M /trunk/dnssec-tools/validator/libsres/ns_netint.c M /trunk/dnssec-tools/validator/libsres/ns_parse.c M /trunk/dnssec-tools/validator/libsres/ns_print.c M /trunk/dnssec-tools/validator/libsres/ns_samedomain.c M /trunk/dnssec-tools/validator/libsres/ns_ttl.c M /trunk/dnssec-tools/validator/libsres/nsap_addr.c M /trunk/dnssec-tools/validator/libsres/res_comp.c M /trunk/dnssec-tools/validator/libsres/res_debug.c M /trunk/dnssec-tools/validator/libsres/res_debug.h M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.h M /trunk/dnssec-tools/validator/libsres/res_mkquery.c M /trunk/dnssec-tools/validator/libsres/res_mkquery.h M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libsres/res_support.c M /trunk/dnssec-tools/validator/libsres/res_support.h M /trunk/dnssec-tools/validator/libsres/res_tsig.c M /trunk/dnssec-tools/validator/libsres/res_tsig.h M /trunk/dnssec-tools/validator/libsres/resolver.h run indent ------------------------------------------------------------------------ r1978 | rstory | 2006-09-15 07:16:31 -0700 (Fri, 15 Sep 2006) | 2 lines Changed paths: A /trunk/dnssec-tools/validator/apps/.indent.pro A /trunk/dnssec-tools/validator/libsres/.indent.pro A /trunk/dnssec-tools/validator/libval/.indent.pro options file for indent ------------------------------------------------------------------------ r1977 | rstory | 2006-09-14 15:41:01 -0700 (Thu, 14 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_parse.c add headers for (incomplete) OpenBSD port ------------------------------------------------------------------------ r1976 | rstory | 2006-09-14 15:40:28 -0700 (Thu, 14 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_x_query.c don't include nameser_compat.h or header.h if nameser defines dns header struct ------------------------------------------------------------------------ r1975 | rstory | 2006-09-14 15:38:18 -0700 (Thu, 14 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c check for macros before using them ------------------------------------------------------------------------ r1974 | rstory | 2006-09-14 15:37:31 -0700 (Thu, 14 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libsres/res_debug.h M /trunk/dnssec-tools/validator/libsres/resolver.h M /trunk/dnssec-tools/validator/libval/validator.h defines and conditional prototypes for (incomplete) OpenBSD port ------------------------------------------------------------------------ r1973 | rstory | 2006-09-14 15:35:38 -0700 (Thu, 14 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure.in add some checks for (incomplete) OpenBSD port ------------------------------------------------------------------------ r1972 | tewok | 2006-09-11 12:55:58 -0700 (Mon, 11 Sep 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/blinkenlights Added a configuration file to easily change several pieces of the demo display. The color of skipped zones and the fontsize of the whole display may be modified. Fixed a couple typos. ------------------------------------------------------------------------ r1971 | tewok | 2006-09-11 12:20:52 -0700 (Mon, 11 Sep 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/rundemo Simplified log file reference. ------------------------------------------------------------------------ r1970 | tewok | 2006-09-11 12:19:06 -0700 (Mon, 11 Sep 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/rundemo Zap the *correct* file. ------------------------------------------------------------------------ r1969 | tewok | 2006-09-11 12:16:32 -0700 (Mon, 11 Sep 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/blinkenlights Fixed an array-wrapping bug. ------------------------------------------------------------------------ r1968 | tewok | 2006-09-11 11:57:43 -0700 (Mon, 11 Sep 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/blinkenlights Code cosmetology. ------------------------------------------------------------------------ r1967 | tewok | 2006-09-11 11:13:49 -0700 (Mon, 11 Sep 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/README Added a few notes about times in the display. ------------------------------------------------------------------------ r1966 | tewok | 2006-09-11 11:09:03 -0700 (Mon, 11 Sep 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/rundemo Fixed how the log file was zapped. ------------------------------------------------------------------------ r1965 | tewok | 2006-09-11 11:00:41 -0700 (Mon, 11 Sep 2006) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/demos/rollerd-basic/Makefile Makefile for building data for the basic rollerd demo. ------------------------------------------------------------------------ r1964 | tewok | 2006-09-11 10:58:23 -0700 (Mon, 11 Sep 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/demos/rollerd-basic/README Fixed a typo. ------------------------------------------------------------------------ r1963 | tewok | 2006-09-11 10:57:37 -0700 (Mon, 11 Sep 2006) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/demos/rollerd-basic/README Instructions for running the basic rollerd demo. ------------------------------------------------------------------------ r1962 | tewok | 2006-09-11 10:56:34 -0700 (Mon, 11 Sep 2006) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/demos/rollerd-basic/rundemo Demo execution script for the basic rollerd demo. ------------------------------------------------------------------------ r1961 | tewok | 2006-09-11 10:44:14 -0700 (Mon, 11 Sep 2006) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/demos/rollerd-basic/phaser Program to modify phasestart rollrec entries just before demo starts. ------------------------------------------------------------------------ r1960 | tewok | 2006-09-11 10:43:11 -0700 (Mon, 11 Sep 2006) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/demos/rollerd-basic/save-db.cache A /trunk/dnssec-tools/tools/demos/rollerd-basic/save-demo.rollrec A /trunk/dnssec-tools/tools/demos/rollerd-basic/save-dummy.com A /trunk/dnssec-tools/tools/demos/rollerd-basic/save-example.com A /trunk/dnssec-tools/tools/demos/rollerd-basic/save-test.com Data files for rollerd demo: zone files, rollrec file, and named cache file. ------------------------------------------------------------------------ r1959 | tewok | 2006-09-11 10:41:16 -0700 (Mon, 11 Sep 2006) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/demos/rollerd-basic/blinkenlights GUI for displaying demo results from rollerd. ------------------------------------------------------------------------ r1958 | tewok | 2006-09-11 10:40:18 -0700 (Mon, 11 Sep 2006) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/demos/rollerd-basic Directory for the basic rollerd demo. ------------------------------------------------------------------------ r1957 | tewok | 2006-09-11 10:04:24 -0700 (Mon, 11 Sep 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added demo support. ------------------------------------------------------------------------ r1956 | tewok | 2006-09-11 08:00:54 -0700 (Mon, 11 Sep 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Added zskcount default. ------------------------------------------------------------------------ r1955 | tewok | 2006-09-11 08:00:11 -0700 (Mon, 11 Sep 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Added -signset to standard options. ------------------------------------------------------------------------ r1954 | tewok | 2006-09-11 06:33:37 -0700 (Mon, 11 Sep 2006) | 5 lines Changed paths: A /trunk/dnssec-tools/tools/demos/README Adding a README for the demos directory. Has a brief description of the basic rollerd demo. ------------------------------------------------------------------------ r1953 | tewok | 2006-09-11 06:18:10 -0700 (Mon, 11 Sep 2006) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/demos Directory to hold demo programs and files. ------------------------------------------------------------------------ r1952 | tewok | 2006-09-10 18:39:00 -0700 (Sun, 10 Sep 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Made an error message more useful. ------------------------------------------------------------------------ r1950 | hardaker | 2006-09-07 09:24:22 -0700 (Thu, 07 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf pod fixes ------------------------------------------------------------------------ r1949 | hardaker | 2006-09-07 09:08:04 -0700 (Thu, 07 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/TrustMan whoops; require the right module ------------------------------------------------------------------------ r1948 | hardaker | 2006-09-07 09:05:56 -0700 (Thu, 07 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/TrustMan help output changes for TrustMan ------------------------------------------------------------------------ r1940 | tewok | 2006-09-06 14:55:37 -0700 (Wed, 06 Sep 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added signing_set to be a valid zone keyrec field. ------------------------------------------------------------------------ r1939 | tewok | 2006-09-05 13:54:49 -0700 (Tue, 05 Sep 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO M /trunk/dnssec-tools/tools/scripts/Makefile.PL M /trunk/dnssec-tools/tools/scripts/README A /trunk/dnssec-tools/tools/scripts/signset-editor Adding signset-editor, a GUI manager for signing sets in keyrec files. ------------------------------------------------------------------------ r1938 | tewok | 2006-09-05 12:25:43 -0700 (Tue, 05 Sep 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Fixed some regexps to allow keyrec values to be empty. Tests have shown this to work, but the old regexps are in place and commented out in case there's a problem. Juggled some pod subsections so they're in alphabetical order. ------------------------------------------------------------------------ r1937 | rstory | 2006-09-04 13:16:21 -0700 (Mon, 04 Sep 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c - add pass-fail return code to sendquery - add summary after running all self tests ------------------------------------------------------------------------ r1936 | tewok | 2006-09-03 20:52:39 -0700 (Sun, 03 Sep 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added the keyrec_saveas() interface. ------------------------------------------------------------------------ r1935 | tewok | 2006-09-03 05:07:13 -0700 (Sun, 03 Sep 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Minor fix to the pod. ------------------------------------------------------------------------ r1934 | rstory | 2006-09-03 04:40:41 -0700 (Sun, 03 Sep 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_parse.c restore use of tmp ptr for VAL_GET16 ------------------------------------------------------------------------ r1933 | tewok | 2006-09-02 12:51:27 -0700 (Sat, 02 Sep 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added a bunch of signing-set-specific interfaces. And pod describing them all. ------------------------------------------------------------------------ r1932 | rstory | 2006-08-30 16:50:19 -0700 (Wed, 30 Aug 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure run autoconf ------------------------------------------------------------------------ r1931 | rstory | 2006-08-30 16:49:13 -0700 (Wed, 30 Aug 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c add const where needed ------------------------------------------------------------------------ r1930 | rstory | 2006-08-30 16:47:17 -0700 (Wed, 30 Aug 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/ns_netint.c M /trunk/dnssec-tools/validator/libsres/ns_parse.c M /trunk/dnssec-tools/validator/libsres/res_debug.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.h M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libsres/resolver.h more compiler warning cleanup - proper prototypes - new const friendly RES_GETnn macros to replace NS_GETnn - add const where needed ------------------------------------------------------------------------ r1929 | rstory | 2006-08-30 16:28:06 -0700 (Wed, 30 Aug 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/libval/crypto/val_rsamd5.c M /trunk/dnssec-tools/validator/libval/crypto/val_rsasha1.c M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_log.h M /trunk/dnssec-tools/validator/libval/val_parse.c M /trunk/dnssec-tools/validator/libval/val_policy.h M /trunk/dnssec-tools/validator/libval/val_x_query.c M /trunk/dnssec-tools/validator/libval/val_x_query.h M /trunk/dnssec-tools/validator/libval/validator.h more compiler warning cleanup - adding/removing const as needed (mostly removing) - ifdef extern errno, h_errno decls, as these may be macros - new VAL_GETnn (const friendly replacements for NS_GETnn macros) - don't use errno as param name (might be a macro) ------------------------------------------------------------------------ r1928 | rstory | 2006-08-30 15:11:08 -0700 (Wed, 30 Aug 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_cache.h more complier warning cleanup ------------------------------------------------------------------------ r1927 | rstory | 2006-08-30 14:39:01 -0700 (Wed, 30 Aug 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/Makefile.top M /trunk/dnssec-tools/validator/configure.in add extra warning CFLAGS for developers (i.e. '-d .svn') ------------------------------------------------------------------------ r1926 | rstory | 2006-08-30 14:12:16 -0700 (Wed, 30 Aug 2006) | 8 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.c - remove unnecessary ';' from macro definitions - add new LOCK_UPGRADE macro stow_info() - don't use C++ reserverd word for var name (new) - don't lock/unlock: caller must have lock ------------------------------------------------------------------------ r1925 | rstory | 2006-08-28 14:46:28 -0700 (Mon, 28 Aug 2006) | 15 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_x_query.c general cleanup - check for null parameters - cleanup allocated memory on errors - defer var init til after null checks - move var decls to tops of code blocks - rename vars using C++ reserver words (class) compose_merged_answer() - sanity checks for bugger overflows - reduce indention - free temporary allocations when done compose_answer() - sanity checks for bugger overflows ------------------------------------------------------------------------ r1924 | rstory | 2006-08-28 12:10:11 -0700 (Mon, 28 Aug 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c p_as_error() - remove invalid (negative) cases - add missing VAL_A_DONT_KNOW case ------------------------------------------------------------------------ r1923 | rstory | 2006-08-28 12:04:54 -0700 (Mon, 28 Aug 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/validator.h revert val_astatus_t back to u_int16_t ------------------------------------------------------------------------ r1922 | hardaker | 2006-08-28 11:27:47 -0700 (Mon, 28 Aug 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/validator.h 2 C++ portability things: - don't use C++ reserved word "class" (changed to q_class) - wrap contents in extern "C" for standard cpp protection ------------------------------------------------------------------------ r1921 | hardaker | 2006-08-25 17:11:18 -0700 (Fri, 25 Aug 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone Added new 3 subzones for testing key changing. ------------------------------------------------------------------------ r1920 | rstory | 2006-08-25 15:32:40 -0700 (Fri, 25 Aug 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/validator.h - change val_astatus_t from u_int16_t to int16_t, (since some status macro values are negative) - update obvious (compiler complained) prototype parameter types - there are probably a lot more of these the compiler isn't complaining about. An analysis of a grep for 'u_int16_t' is probably needed. ------------------------------------------------------------------------ r1919 | rstory | 2006-08-25 15:29:17 -0700 (Fri, 25 Aug 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_parse.h - remove unnecesary ';' in macro def - remove redundant code in macro def ------------------------------------------------------------------------ r1918 | rstory | 2006-08-25 15:27:57 -0700 (Fri, 25 Aug 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.h remove unnecessary ';' in macro def ------------------------------------------------------------------------ r1917 | rstory | 2006-08-25 15:22:06 -0700 (Fri, 25 Aug 2006) | 12 lines Changed paths: M /trunk/dnssec-tools/validator/apps/getaddr.c M /trunk/dnssec-tools/validator/apps/gethost.c M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_parse.c M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_support.c keep compiler happy - add headers for missing prototypes - remove unused vars - match printf specifiers with types - return a value from non-void functions - explicity () and {} where suggested - proper casts to match function prototypes - remove redundant ';' in macro decl find_rr_set() - match returned value to prototype ------------------------------------------------------------------------ r1916 | hardaker | 2006-08-25 14:32:29 -0700 (Fri, 25 Aug 2006) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch M /trunk/dnssec-tools/apps/mozilla/dnssec-firefox.patch A patch to make use of val_getaddrinfo as well; this was the last api I think ------------------------------------------------------------------------ r1915 | hardaker | 2006-08-25 14:30:25 -0700 (Fri, 25 Aug 2006) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch M /trunk/dnssec-tools/apps/mozilla/dnssec-firefox.patch yet another patch to improve policy setting dialogs and behaviour ------------------------------------------------------------------------ r1914 | rstory | 2006-08-24 10:31:25 -0700 (Thu, 24 Aug 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c read_res_config_file(): cleanup allocated memory on error ------------------------------------------------------------------------ r1913 | rstory | 2006-08-24 10:29:34 -0700 (Thu, 24 Aug 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c fix saving of original quer name in verify_provably_unsecure ------------------------------------------------------------------------ r1912 | rstory | 2006-08-24 09:44:08 -0700 (Thu, 24 Aug 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c reduce indention a level in parse_etc_hosts ------------------------------------------------------------------------ r1911 | hardaker | 2006-08-24 08:21:32 -0700 (Thu, 24 Aug 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c fix completely broken etc host parsing loops with incorrect paren matching ------------------------------------------------------------------------ r1910 | hardaker | 2006-08-24 08:11:58 -0700 (Thu, 24 Aug 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c variable typo ------------------------------------------------------------------------ r1909 | hardaker | 2006-08-24 08:07:18 -0700 (Thu, 24 Aug 2006) | 1 line Changed paths: A /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch A /trunk/dnssec-tools/apps/mozilla/dnssec-firefox.patch A /trunk/dnssec-tools/apps/mozilla/dnssec-mozconfig.patch M /trunk/dnssec-tools/apps/mozilla/firefox.spec new versions of the firefox patches ------------------------------------------------------------------------ r1908 | hardaker | 2006-08-22 16:13:51 -0700 (Tue, 22 Aug 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow fixed help output ------------------------------------------------------------------------ r1907 | rstory | 2006-08-22 15:04:41 -0700 (Tue, 22 Aug 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c fix minor compile errors from previous checkin ------------------------------------------------------------------------ r1906 | rstory | 2006-08-22 14:09:25 -0700 (Tue, 22 Aug 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c move var decl up one devel ------------------------------------------------------------------------ r1905 | rstory | 2006-08-22 14:07:52 -0700 (Tue, 22 Aug 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c fix cut-n-paste var name ------------------------------------------------------------------------ r1904 | rstory | 2006-08-22 14:03:07 -0700 (Tue, 22 Aug 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c move var decls to top of correct code block ------------------------------------------------------------------------ r1903 | rstory | 2006-08-22 13:56:57 -0700 (Tue, 22 Aug 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/libval/val_parse.c fix check for minimum length ------------------------------------------------------------------------ r1902 | rstory | 2006-08-22 13:55:19 -0700 (Tue, 22 Aug 2006) | 12 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_verify.c general cleanup - check for null parameters - check fo rnull ptr before dereference - move var decls to tops of code blocks make_sigfield() - check for overflow of allocated memory - cleanup memory on error hash_is_equal() - add (another) note that this function isn't implemented ------------------------------------------------------------------------ r1901 | rstory | 2006-08-21 15:16:05 -0700 (Mon, 21 Aug 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c fix typos/compiler warnings introduced by fixes in my previous checkin ------------------------------------------------------------------------ r1900 | tewok | 2006-08-21 14:39:32 -0700 (Mon, 21 Aug 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Added support for -zskcount. ------------------------------------------------------------------------ r1899 | tewok | 2006-08-21 13:34:49 -0700 (Mon, 21 Aug 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/clean-keyrec M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/keyrec-check M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/timetrans Changed -version to -Version to remove the collision with -verbose. ------------------------------------------------------------------------ r1898 | tewok | 2006-08-21 12:15:56 -0700 (Mon, 21 Aug 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/zonesigner Started implementing -zskcount. Removed some redundant option handling. ------------------------------------------------------------------------ r1897 | tewok | 2006-08-21 11:25:16 -0700 (Mon, 21 Aug 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Added -zskcount as a standard option. ------------------------------------------------------------------------ r1896 | tewok | 2006-08-21 09:55:32 -0700 (Mon, 21 Aug 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Added a validity check for zskcount. Fixed a few invalid hash keys (ksklen->ksklength, zsklen->zsklength). This invalid keys were causing problems with validating key lengths. Set defaults for lifespan-min and lifespan-max. ------------------------------------------------------------------------ r1895 | tewok | 2006-08-20 18:04:36 -0700 (Sun, 20 Aug 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec/README M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm Added configuration defaults for zskcount. ------------------------------------------------------------------------ r1894 | rstory | 2006-08-18 13:16:40 -0700 (Fri, 18 Aug 2006) | 17 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.c general cleanup - check for null params - check for null ptr before dereference - defer some var inits til after ptr checks - cleanup allocated memory for error cases - misc audit notes init_rr_set() - fix double-free of memory in error handling find_rr_set() - rename 'try' (C++ keyword) -> tryit copy_rrset_rec() - note unintended consequences shallow copy of struct w/ptrs. fix left as exercise for author ------------------------------------------------------------------------ r1893 | hardaker | 2006-08-18 11:03:57 -0700 (Fri, 18 Aug 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone fixed typo in call to BootStrap functions. ------------------------------------------------------------------------ r1892 | hardaker | 2006-08-17 20:03:32 -0700 (Thu, 17 Aug 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/BootStrap.pm document the work arounds to using this module in other name spaces ------------------------------------------------------------------------ r1891 | tewok | 2006-08-17 18:27:19 -0700 (Thu, 17 Aug 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Reworked logic for determining that output file is okay. Added checks for file and directory writability. Added -edit support. ------------------------------------------------------------------------ r1890 | rstory | 2006-08-17 16:09:09 -0700 (Thu, 17 Aug 2006) | 21 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c general cleanup - check for null parameters - check for null ptr before dereference - move var decls to tops of code blocks - defer var initilization til after null param checks register_query() - change from TRUE/FALSE return to 1/0/-1 for error cases - don't use callers ptr to walk list (i.e. dropping the head into the bit bucket each iteration in the process) - plug minor memory leaks weird_al_realloc() - don't memcpy from beyond end of old ptr - don't realloc for new size < old size (but do clear end of buffer) - rename 'new' var (C++ reserved word) extract_glue_from_rdata() - use temp ptr to expand ns list, so we have original in case of error - add parens for explicit operator precedence ------------------------------------------------------------------------ r1889 | rstory | 2006-08-16 17:47:36 -0700 (Wed, 16 Aug 2006) | 22 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c general cleanup - check for null parameters - check for null before ptr deref - declare static struct w/fixed size so compiler will notice under/over-flow - move var decls to tops of code blocks parse_trust_anchor(), parse_zone_security_expectation() - clean up memory on errors free_zone_security_expectation() - clear ptr that's just been freed get_next_policy_fragment() - plug small memory leak read_root_hints_file() - close file before returning parse_etc_hosts() - use strncpy instead of memcpy+strlen - cleanup on memory errors, but return data gathered so far ------------------------------------------------------------------------ r1888 | rstory | 2006-08-16 15:50:49 -0700 (Wed, 16 Aug 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_parse.c general cleanup - check for null parameters - check for buffer overflows - move var decls to top of code blocks ------------------------------------------------------------------------ r1887 | rstory | 2006-08-16 15:06:31 -0700 (Wed, 16 Aug 2006) | 15 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c get_hex_string() - null ptr checks val_log_rrset(), val_log_rrsig_rdata() - don't reuse buffer in single function call val_log_assertion() - move var decl to top of code block send_log_message() - close socket before returning val_log() - only print into buffer if necessary ------------------------------------------------------------------------ r1886 | rstory | 2006-08-16 14:34:44 -0700 (Wed, 16 Aug 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c general cleanup - move var dcls to top of code blocks get_hostent_from_etc_hosts() - clean up host list memory before returning ------------------------------------------------------------------------ r1885 | rstory | 2006-08-16 07:18:04 -0700 (Wed, 16 Aug 2006) | 24 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c general cleanup - check for null parameters - check ptrs for null before dereferences - move var decls to tops of code blocks - misc audit notes val_free_result_chain() - free data from correct ptr free_query_chain() - remove unnecessary assigments is_trusted_zone() - pass printable zone, not wire format, to val_log verify_provably_unsecure(val_ - save original zone name for final log msg clone_result_assertions() - note potential memory leaks val_resolve_and_check() - rename parameter using C++ reserved word (class) ------------------------------------------------------------------------ r1884 | tewok | 2006-08-15 08:51:29 -0700 (Tue, 15 Aug 2006) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Removed some options: -checkzone, -keygen, and -signzone. Added another option: -binddir. Added path verification for BIND and image viewer paths. Added code to allow paths to be re-entered if there was a problem with any. Changed user-prompter routine to accept "y", "ye", and "n" as short-hand for "yes", "yes", and "no". ------------------------------------------------------------------------ r1883 | rstory | 2006-08-14 14:25:36 -0700 (Mon, 14 Aug 2006) | 11 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c append_val_addr_info() - optimization for null parameter process_service_and_hints() - 2 notes for review by code owner general cleanup - check/handle null parameter - check for null returns when allocating memory - check for null ptr before dereference ------------------------------------------------------------------------ r1882 | rstory | 2006-08-14 12:37:43 -0700 (Mon, 14 Aug 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c val_create_context() - bail on null ptr addr - clear ptr @ returned addr if freed ------------------------------------------------------------------------ r1881 | tewok | 2006-08-14 10:29:48 -0700 (Mon, 14 Aug 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/BootStrap.pm Fixed some grammos and spellos. ------------------------------------------------------------------------ r1880 | tewok | 2006-08-14 08:04:21 -0700 (Mon, 14 Aug 2006) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/modules/BootStrap.pm Added a few package lines so that str2time() (and others?) would work properly. (This fix provided by Wes Hardaker and the number 8; I am merely the vehicle by which it is being checked in.) ------------------------------------------------------------------------ r1879 | hardaker | 2006-08-11 15:28:09 -0700 (Fri, 11 Aug 2006) | 1 line Changed paths: M /trunk/dnssec-tools/dist/dnssec-tools.spec updated to version 0.9.2 with various fedora patches ------------------------------------------------------------------------ r1878 | hardaker | 2006-08-11 15:25:58 -0700 (Fri, 11 Aug 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm catch runtime rule evalations in an error message so donuts doesn't bail when code issues exist for rules ------------------------------------------------------------------------ r1877 | hardaker | 2006-08-11 15:25:09 -0700 (Fri, 11 Aug 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap use the bootstrap module ------------------------------------------------------------------------ r1876 | hardaker | 2006-08-11 15:24:25 -0700 (Fri, 11 Aug 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/etc/Makefile.PL better configuration of final dnssec-tools.conf location (ie, allow distributions to put it in /etc. Note: requires a patch to conf.pm itself to make it look for it there though. The fedora RPM contais a patch to conf.pm to get around this ------------------------------------------------------------------------ r1875 | hardaker | 2006-08-11 15:23:16 -0700 (Fri, 11 Aug 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone use the bootstrap module ------------------------------------------------------------------------ r1874 | hardaker | 2006-08-11 15:22:26 -0700 (Fri, 11 Aug 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts use bootstrap and reoprt some additional error messages when zonefile fails ------------------------------------------------------------------------ r1873 | hardaker | 2006-08-11 15:17:24 -0700 (Fri, 11 Aug 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/TrustMan M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/tachk use the bootstrap module to pick up perl modules that may or may not be around ------------------------------------------------------------------------ r1872 | hardaker | 2006-08-11 15:06:19 -0700 (Fri, 11 Aug 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dnspktflow ignore .old ------------------------------------------------------------------------ r1871 | hardaker | 2006-08-11 15:05:42 -0700 (Fri, 11 Aug 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow use the bootstrap module to load graphviz ------------------------------------------------------------------------ r1870 | hardaker | 2006-08-11 15:01:33 -0700 (Fri, 11 Aug 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper use the bootstrap module to load graphviz ------------------------------------------------------------------------ r1869 | hardaker | 2006-08-11 15:00:20 -0700 (Fri, 11 Aug 2006) | 1 line Changed paths: A /trunk/dnssec-tools/tools/modules/BootStrap.pm a bootstrap function module that looks for perl modules and complains when missing or loads when possible ------------------------------------------------------------------------ r1868 | tewok | 2006-08-10 14:36:17 -0700 (Thu, 10 Aug 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd Implemented the -skipall user command. ------------------------------------------------------------------------ r1867 | tewok | 2006-08-10 14:17:09 -0700 (Thu, 10 Aug 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Reorganized the constants related to user commands and added comments to the constant groups. Added support for the -skipall command. ------------------------------------------------------------------------ r1866 | tewok | 2006-08-10 09:29:54 -0700 (Thu, 10 Aug 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd Implemented the -rollall user command. ------------------------------------------------------------------------ r1865 | tewok | 2006-08-10 07:12:04 -0700 (Thu, 10 Aug 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd Added support for -skipnow user command. ------------------------------------------------------------------------ r1864 | tewok | 2006-08-10 07:05:18 -0700 (Thu, 10 Aug 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added constants for the skipzone user command. ------------------------------------------------------------------------ r1863 | rstory | 2006-08-09 16:52:51 -0700 (Wed, 09 Aug 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/Makefile.top bump LIBCURRENT for next release (0.9.3?) due to name_server struct reorder ------------------------------------------------------------------------ r1862 | rstory | 2006-08-09 16:49:36 -0700 (Wed, 09 Aug 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/resolver.h - move ns_address array to last item in name_server structure - add big warning that ns_address MUST be the last item - reorder other items, since binary compatiblity already broken ------------------------------------------------------------------------ r1861 | rstory | 2006-08-09 16:35:15 -0700 (Wed, 09 Aug 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/validator.h handle NULL context in RETRIEVE_POLICY macro ------------------------------------------------------------------------ r1860 | tewok | 2006-08-09 14:14:51 -0700 (Wed, 09 Aug 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd Modified the look of status and zone-status messages returned to rollctl. ------------------------------------------------------------------------ r1859 | tewok | 2006-08-09 13:13:28 -0700 (Wed, 09 Aug 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Made debugging log messages in commander() a bit more useful. Implemented -zonestatus user command. Implemented -rollzone user command. ------------------------------------------------------------------------ r1858 | tewok | 2006-08-09 13:10:29 -0700 (Wed, 09 Aug 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Added the -zonestatus command. Got the -rollzone command to work. ------------------------------------------------------------------------ r1857 | tewok | 2006-08-09 13:02:22 -0700 (Wed, 09 Aug 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added the ROLLCMD_RC_BADZONE error code. ------------------------------------------------------------------------ r1856 | tewok | 2006-08-09 12:54:31 -0700 (Wed, 09 Aug 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added zonestatus user-level command Added ROLLCMD_RC_RRFOPEN and ROLLCMD_RC_NOZONES error returns . Fixed error value for ROLLCMD_RC_BADROLLREC. ------------------------------------------------------------------------ r1855 | tewok | 2006-08-08 17:55:47 -0700 (Tue, 08 Aug 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Have rollerd send a response to rollctl when given -runqueue. ------------------------------------------------------------------------ r1854 | tewok | 2006-08-07 19:41:16 -0700 (Mon, 07 Aug 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Create the DNSSEC-Tools directory if it doesn't exist. ------------------------------------------------------------------------ r1853 | tewok | 2006-08-07 10:00:53 -0700 (Mon, 07 Aug 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Modified to print the valid logging levels. ------------------------------------------------------------------------ r1852 | tewok | 2006-08-07 09:46:16 -0700 (Mon, 07 Aug 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/INSTALL Added info about dtinitconf and other tools documentation. ------------------------------------------------------------------------ r1851 | tewok | 2006-08-07 09:28:05 -0700 (Mon, 07 Aug 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl - Added processing for -runqueue. - Added -halt as a synonym for -shutdown. - Updated the pod. ------------------------------------------------------------------------ r1850 | hserus | 2006-08-06 19:17:16 -0700 (Sun, 06 Aug 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c In bootstrap_referral() do not assume in that the referral element in val_query_chain will always exist. While bootstrapping the referral from the name server cache we may end up having to fetch glue. ------------------------------------------------------------------------ r1849 | tewok | 2006-08-04 19:32:50 -0700 (Fri, 04 Aug 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd Implemented a user command to change rollrec files mid-stream. ------------------------------------------------------------------------ r1848 | tewok | 2006-08-04 19:29:41 -0700 (Fri, 04 Aug 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added a definition for ROLLCMD_RC_BADROLLREC. ------------------------------------------------------------------------ r1847 | tewok | 2006-08-04 16:01:07 -0700 (Fri, 04 Aug 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Reorganized main loop to always check validity of rollrec file and the rollrec records. Added sleep time to the status command output. ------------------------------------------------------------------------ r1846 | hardaker | 2006-08-03 21:16:47 -0700 (Thu, 03 Aug 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt skip nsec minimum ttl tests if the current record is out of the zone being checked (can happen with glue) ------------------------------------------------------------------------ r1845 | hardaker | 2006-08-03 20:42:34 -0700 (Thu, 03 Aug 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/check_nameservers.txt M /trunk/dnssec-tools/tools/donuts/rules/dns.errors.txt M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt * set all the memorize priority levels to 1 - these really need to be moved into the core code ------------------------------------------------------------------------ r1844 | hserus | 2006-08-03 19:39:56 -0700 (Thu, 03 Aug 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Use the zone cut information when ever possible for determining whether EDNS0 option must be used. ------------------------------------------------------------------------ r1843 | rstory | 2006-08-03 14:58:36 -0700 (Thu, 03 Aug 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libsres-implementation-notes M /trunk/dnssec-tools/validator/doc/libval-implementation-notes reformat to find on 80 char/line pages ------------------------------------------------------------------------ r1842 | tewok | 2006-08-03 14:46:00 -0700 (Thu, 03 Aug 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added the rollmgr_logstr() interface. ------------------------------------------------------------------------ r1841 | hserus | 2006-08-03 13:59:41 -0700 (Thu, 03 Aug 2006) | 15 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c - Return a copied authentication_chain in the val_result_chain structure instead of returning this from the context. In that way, we can destroy the context independently of the result structure. We only copy the public elements from this list, so the respondent server information is not copied over. We will eventually have to figure out a way to export the respondent server information in the API. - val_ac_rrset_next is now within the "digested" portion of the assertion. - Store the zonecut information in the query when ever we are following a referral. Also store the zoncut information for any resource records that are returned from this zone. - Implement the F_DONT_VALIDATE flag for val_resolve_and_check(). This is used when we are trying to locate the zone cut for a given name. - Implement the VAL_A_PROVABLY_UNSECURE condition. This state is equivalent to the TRUST_FLAG being set. - Implement logic for testing the "provably unsecure" condition. - Send queries to name servers more intelligently. Try and find the closest matching delegation that is available in the cache and direct queries at that instead of always trying to recurse from root. ------------------------------------------------------------------------ r1840 | hserus | 2006-08-03 13:59:18 -0700 (Thu, 03 Aug 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/validator.h - Added zonecut fields to rrset_rec, delegation_info and val_query_chain - Defined the F_DONT_VALIDATE flag for val_resolve_and_check() - Moved val_ac_rrset_next from the val_result_chain structure to the val_rrset_digested structure. ------------------------------------------------------------------------ r1839 | hserus | 2006-08-03 13:58:55 -0700 (Thu, 03 Aug 2006) | 7 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_resquery.h - Manage zonecut information in the query structure - Create a common function bootstrap_referral to handle the creation of a referral-related query from name server resource records. - Always use the name servers within the val_query_chain structure as the ones to direct the query to. This value should already be constructed from context etc. in ask_resolver(); - Implement routine for finding the zonecut given a resource record. ------------------------------------------------------------------------ r1838 | hserus | 2006-08-03 13:58:26 -0700 (Thu, 03 Aug 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_errors.h - Recognize the VAL_A_PROVABLY_UNSECURE and VAL_A_DONT_VALIDATE status values. ------------------------------------------------------------------------ r1837 | hserus | 2006-08-03 13:58:13 -0700 (Thu, 03 Aug 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c - Use only public members from val_authentication_chain for logging data. Name server information will always be NULL till such time that we figure out a way to export the respondent server information. - Recognize the VAL_A_PROVABLY_UNSECURE and VAL_A_DONT_VALIDATE status values. ------------------------------------------------------------------------ r1836 | hserus | 2006-08-03 13:57:48 -0700 (Thu, 03 Aug 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_support.h - Manage the zonecut information for a resource record ------------------------------------------------------------------------ r1835 | hserus | 2006-08-03 13:56:03 -0700 (Thu, 03 Aug 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_cache.h - Maintain separate cache for referral information - Add routine get_matching_nslist() to retrieve matching nslist for a given query. ------------------------------------------------------------------------ r1834 | hserus | 2006-08-03 13:55:09 -0700 (Thu, 03 Aug 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c - Check for NULL name server list in destroy_respol - Don't set the default name server for a context to root in read_res_config_file(). Look for the closest matching name server from the cache instead while sending out a query. ------------------------------------------------------------------------ r1833 | hserus | 2006-08-03 12:09:32 -0700 (Thu, 03 Aug 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml The previous version was what was submitted to the IETF as draft-hayatnagarkar-dnsext-validator-api-01. val_ac_rrset_next is no longer a member of the public val_authentication_chain structure. Added note about the VAL_A_PROVABLY_UNSECURE authentication chain status value. ------------------------------------------------------------------------ r1832 | hserus | 2006-08-03 12:07:09 -0700 (Thu, 03 Aug 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod val_ac_rrset_next and val_ac_next and no longer members of the public val_authentication_chain structure. They now appear in the "digested" portion. Added note about the VAL_A_PROVABLY_UNSECURE authentication chain status value. ------------------------------------------------------------------------ r1831 | hardaker | 2006-08-03 10:43:32 -0700 (Thu, 03 Aug 2006) | 1 line Changed paths: M /trunk/dnssec-tools/Makefile.in added an install warning about needing to run dtinitconf next ------------------------------------------------------------------------ r1830 | tewok | 2006-08-03 08:18:28 -0700 (Thu, 03 Aug 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added a halt flag to initfilechk(). Added a logfile separator that's used when the rollrec file is changed. ------------------------------------------------------------------------ r1829 | tewok | 2006-08-02 16:00:29 -0700 (Wed, 02 Aug 2006) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd Added a response message (from rollerd to rollctl) for the shutdown command. rollerd sends it, rollctl prints it. Unimplemented commands in rollctl were also moved into an unimplemented condition so they couldn't be used. ------------------------------------------------------------------------ r1828 | tewok | 2006-08-02 11:40:40 -0700 (Wed, 02 Aug 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added code to send response to clients who are wanting to change the log file or log level. ------------------------------------------------------------------------ r1827 | tewok | 2006-08-02 11:39:09 -0700 (Wed, 02 Aug 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Modified the -sleep, -logfile, and -loglevel option processing so that they wait for a response and tell the use what's happening. ------------------------------------------------------------------------ r1826 | tewok | 2006-08-02 11:33:54 -0700 (Wed, 02 Aug 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added an error code for invalid log files. ------------------------------------------------------------------------ r1825 | tewok | 2006-08-01 20:36:20 -0700 (Tue, 01 Aug 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Added response code for several commands. ------------------------------------------------------------------------ r1824 | tewok | 2006-08-01 20:34:44 -0700 (Tue, 01 Aug 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added response messages for the set-sleep command. ------------------------------------------------------------------------ r1823 | tewok | 2006-08-01 20:33:34 -0700 (Tue, 01 Aug 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added a new command error code. ------------------------------------------------------------------------ r1822 | tewok | 2006-08-01 14:10:18 -0700 (Tue, 01 Aug 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added a rollmgr_cmdint() call to rollmgr_sendcmd() so that rollerd would be kicked whenever a new command was sent. ------------------------------------------------------------------------ r1821 | hserus | 2006-07-31 07:27:16 -0700 (Mon, 31 Jul 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Move include for resolv.conf after include for validator.h to fix Darwin build error ------------------------------------------------------------------------ r1820 | hserus | 2006-07-31 07:25:35 -0700 (Mon, 31 Jul 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c Fix indentation ------------------------------------------------------------------------ r1819 | hserus | 2006-07-31 06:39:45 -0700 (Mon, 31 Jul 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_errors.h M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_verify.c Keep track of which DNSKEY in the key set is part of the chain of trust ------------------------------------------------------------------------ r1818 | rstory | 2006-07-30 15:26:06 -0700 (Sun, 30 Jul 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c - convert rfc 1035 domain names to ascii before logging - add ascii class/type to send query debug log msg ------------------------------------------------------------------------ r1817 | rstory | 2006-07-30 14:44:35 -0700 (Sun, 30 Jul 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c change log id from decimal ctx-id to libval(ctd-id) ------------------------------------------------------------------------ r1815 | hardaker | 2006-07-28 16:25:52 -0700 (Fri, 28 Jul 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/etc/Makefile.PL don't install over existing dnssec-tools.conf file ------------------------------------------------------------------------ r1814 | hardaker | 2006-07-28 16:05:50 -0700 (Fri, 28 Jul 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs.t added SSHFP parsing ------------------------------------------------------------------------ r1813 | hserus | 2006-07-25 10:32:53 -0700 (Tue, 25 Jul 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_support.c Use VAL_GENERIC_ERROR in place of VAL_ERROR for generic internal errors ------------------------------------------------------------------------ r1812 | hserus | 2006-07-25 10:30:19 -0700 (Tue, 25 Jul 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_errors.h Use VAL_GENERIC_ERROR in place of VAL_ERROR for internal errors ------------------------------------------------------------------------ r1811 | tewok | 2006-07-19 18:04:26 -0700 (Wed, 19 Jul 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added ROLLCMD_RC_BADLEVEL. Changed the name of CHANNEL_RETAIN to CHANNEL_WAIT. ------------------------------------------------------------------------ r1810 | tewok | 2006-07-19 18:03:25 -0700 (Wed, 19 Jul 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Changed the name of a channel constant. ------------------------------------------------------------------------ r1809 | tewok | 2006-07-19 18:01:24 -0700 (Wed, 19 Jul 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rolllog Fixed up the user logging. ------------------------------------------------------------------------ r1808 | tewok | 2006-07-19 11:37:19 -0700 (Wed, 19 Jul 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Adjusted how output is given for the status command. ------------------------------------------------------------------------ r1807 | tewok | 2006-07-19 11:34:52 -0700 (Wed, 19 Jul 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added the current directory to the status message. Used the defined success retcode. ------------------------------------------------------------------------ r1806 | tewok | 2006-07-19 11:06:07 -0700 (Wed, 19 Jul 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added a defined success return code for commands. ------------------------------------------------------------------------ r1805 | tewok | 2006-07-19 07:55:11 -0700 (Wed, 19 Jul 2006) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/rolllog Adding rolllog, a command to write log messages to rollerd's logfile. ------------------------------------------------------------------------ r1804 | tewok | 2006-07-19 07:47:17 -0700 (Wed, 19 Jul 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd Updated t use the latest rollmgr interfaces. ------------------------------------------------------------------------ r1803 | tewok | 2006-07-19 07:37:49 -0700 (Wed, 19 Jul 2006) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Converted from INET-domain sockets to Unix-domain sockets. Added a get-status command. Added the rollmgr_closechan() interface. Fixed the following interfaces: rollmgr_sendcmd(), rollmgr_getcmd(), rollmgr_sendresp(), and rollmgr_getresp(). Added a close-channel flag to rollmgr_sendcmd()'s parameters. ------------------------------------------------------------------------ r1802 | lfoster | 2006-07-18 11:16:20 -0700 (Tue, 18 Jul 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/TrustMan Replaced subs read_named_conf_file and read_dnsval_conf_file with one sub, read_conf_file, which takes a pattern arg for finding the keys/trust anchors in each file, which was the only difference between the two original functions. ------------------------------------------------------------------------ r1801 | baerm | 2006-07-18 09:33:13 -0700 (Tue, 18 Jul 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_policy.c fixed reverse lookup problem. ------------------------------------------------------------------------ r1800 | baerm | 2006-07-14 13:40:20 -0700 (Fri, 14 Jul 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c changed /etc/resolv.conf parsing to skip IPv6 nameserver addresses and continue parsing the file. ------------------------------------------------------------------------ r1799 | lfoster | 2006-07-12 11:36:23 -0700 (Wed, 12 Jul 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/TrustMan fixed a bug where writing the config file would fail to add new ta config lines (as opposed to replacing existing lines). ------------------------------------------------------------------------ r1798 | lfoster | 2006-07-12 10:56:23 -0700 (Wed, 12 Jul 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/TrustMan removed a function no longer used. ------------------------------------------------------------------------ r1797 | tewok | 2006-07-11 15:44:14 -0700 (Tue, 11 Jul 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Renamed rollmgr_cmdresp() to rollmgr_getresp(). ------------------------------------------------------------------------ r1796 | tewok | 2006-07-11 12:42:58 -0700 (Tue, 11 Jul 2006) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added get-status command for the roll-over daemon. Reworked rollmgr_channel(). Added rollmgr_closechan(). Started working on having rollmgr_sendcmd() get a response from the roll-over daemon. Fixed a bug in rollmgr_cmdresp() that had us sleeping forever. ------------------------------------------------------------------------ r1795 | lfoster | 2006-07-11 08:32:59 -0700 (Tue, 11 Jul 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/TrustMan added documentation for new command line options. ------------------------------------------------------------------------ r1793 | lfoster | 2006-07-06 15:30:56 -0700 (Thu, 06 Jul 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/TrustMan various bug fixes and minor improvements. ------------------------------------------------------------------------ r1792 | lfoster | 2006-07-05 14:39:59 -0700 (Wed, 05 Jul 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/TrustMan added flag to report when NO out of date keys are found. ------------------------------------------------------------------------ r1791 | lfoster | 2006-06-30 12:45:59 -0700 (Fri, 30 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/TrustMan added flag to send warnings to STDOUT. ------------------------------------------------------------------------ r1790 | lfoster | 2006-06-29 09:19:22 -0700 (Thu, 29 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/TrustMan added option to log key mismatches to via syslog. ------------------------------------------------------------------------ r1789 | lfoster | 2006-06-28 13:07:27 -0700 (Wed, 28 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/TrustMan removed some pseudocode. ------------------------------------------------------------------------ r1786 | hserus | 2006-06-23 11:06:08 -0700 (Fri, 23 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml More edits ------------------------------------------------------------------------ r1785 | hserus | 2006-06-23 09:38:48 -0700 (Fri, 23 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Nits etc. ------------------------------------------------------------------------ r1784 | hserus | 2006-06-22 14:27:54 -0700 (Thu, 22 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/doc/libval-implementation-notes M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod M /trunk/dnssec-tools/validator/doc/validator_api.xml M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_assertion.h M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_log.h M /trunk/dnssec-tools/validator/libval/val_verify.c M /trunk/dnssec-tools/validator/libval/val_verify.h M /trunk/dnssec-tools/validator/libval/val_x_query.c M /trunk/dnssec-tools/validator/libval/validator.h Global search and replace assertion_chain to authentication_chain ------------------------------------------------------------------------ r1783 | hserus | 2006-06-22 13:59:18 -0700 (Thu, 22 Jun 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_verify.c M /trunk/dnssec-tools/validator/libval/val_x_query.c M /trunk/dnssec-tools/validator/libval/validator.h Removed pointer types for rrset_rec.rrs and val_assertion_chain._as Also move val_ac_next from val_assertion_chain to val_rrset_digested ------------------------------------------------------------------------ r1782 | hserus | 2006-06-22 13:52:39 -0700 (Thu, 22 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/val_query.3 M /trunk/dnssec-tools/validator/doc/val_query.pod Add documentation for val_res_query() ------------------------------------------------------------------------ r1781 | hserus | 2006-06-21 13:23:07 -0700 (Wed, 21 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Modify text for VAL_PROVABLY_UNSECURE. Also add new description for val_res_query(). ------------------------------------------------------------------------ r1780 | hserus | 2006-06-21 12:02:07 -0700 (Wed, 21 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_errors.h M /trunk/dnssec-tools/validator/libval/val_log.c #define VAL_OUT_OF_MEMORY to VAL_RESOURCE_UNAVAILABLE ------------------------------------------------------------------------ r1779 | hserus | 2006-06-21 11:59:55 -0700 (Wed, 21 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Address some of Robert's comments from his mail dated 06/21 ------------------------------------------------------------------------ r1778 | hserus | 2006-06-21 09:59:11 -0700 (Wed, 21 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_x_query.c M /trunk/dnssec-tools/validator/libval/validator.h Add new interface for val_res_query() ------------------------------------------------------------------------ r1777 | hserus | 2006-06-21 09:54:21 -0700 (Wed, 21 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c Use EAI_FAIL instead of the validator error code when val_create_context() fails ------------------------------------------------------------------------ r1776 | hserus | 2006-06-21 08:39:56 -0700 (Wed, 21 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/README Changed supported sendmail version from 8.13.3 to 8.13.6 ------------------------------------------------------------------------ r1775 | hserus | 2006-06-21 08:38:42 -0700 (Wed, 21 Jun 2006) | 2 lines Changed paths: D /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_howto.txt D /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt D /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.4_dnssec_patch.txt A /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.6_dnssec_patch.txt A /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.x_dnssec_howto.txt (from /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_howto.txt:1774) Add patch for sendmail 8.13.6. We don't support older versions. ------------------------------------------------------------------------ r1774 | hserus | 2006-06-21 08:37:24 -0700 (Wed, 21 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_howto.txt Added note that this has only been tested on 8.13.6 ------------------------------------------------------------------------ r1773 | hserus | 2006-06-21 07:48:03 -0700 (Wed, 21 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_howto.txt M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_howto.txt M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt Create patches that use the new val_query() interface ------------------------------------------------------------------------ r1772 | hserus | 2006-06-21 06:02:14 -0700 (Wed, 21 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/validator.h New members for val_addrinfo and val_response. Also add definition for val_query() and val_free_response() ------------------------------------------------------------------------ r1771 | hserus | 2006-06-21 05:57:02 -0700 (Wed, 21 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c Use new struct addrinfo member ai_val_status in place of val_status ------------------------------------------------------------------------ r1770 | hserus | 2006-06-21 05:55:27 -0700 (Wed, 21 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_errors.h M /trunk/dnssec-tools/validator/libval/val_log.c Remove unused error codes ------------------------------------------------------------------------ r1769 | hserus | 2006-06-21 05:54:30 -0700 (Wed, 21 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_x_query.c M /trunk/dnssec-tools/validator/libval/val_x_query.h Change definition for val_query() ------------------------------------------------------------------------ r1768 | hserus | 2006-06-21 05:52:10 -0700 (Wed, 21 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.3 M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.pod M /trunk/dnssec-tools/validator/doc/val_query.3 M /trunk/dnssec-tools/validator/doc/val_query.pod M /trunk/dnssec-tools/validator/doc/validator_api.xml Update description for val_query() following the API change ------------------------------------------------------------------------ r1767 | hserus | 2006-06-21 05:50:37 -0700 (Wed, 21 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/getaddr.c M /trunk/dnssec-tools/validator/apps/validator_driver.c Use new val_query() interface and/or struct member names ------------------------------------------------------------------------ r1766 | hserus | 2006-06-20 05:44:37 -0700 (Tue, 20 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Remove C-style comments from spec. ------------------------------------------------------------------------ r1764 | hardaker | 2006-06-19 17:24:30 -0700 (Mon, 19 Jun 2006) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS NEWS update ------------------------------------------------------------------------ r1763 | hardaker | 2006-06-19 17:24:16 -0700 (Mon, 19 Jun 2006) | 1 line Changed paths: A /trunk/dnssec-tools/ChangeLog svn generated ChangeLog ------------------------------------------------------------------------ r1762 | hardaker | 2006-06-19 17:16:04 -0700 (Mon, 19 Jun 2006) | 1 line Changed paths: M /trunk/dnssec-tools/NEWS minor updates ------------------------------------------------------------------------ r1761 | hardaker | 2006-06-19 17:11:08 -0700 (Mon, 19 Jun 2006) | 1 line Changed paths: M /trunk/dnssec-tools/README M /trunk/dnssec-tools/tools/scripts/README updated README documentation based on recent tools list ------------------------------------------------------------------------ r1760 | hardaker | 2006-06-19 17:06:35 -0700 (Mon, 19 Jun 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/getdnskeys added executable bit ------------------------------------------------------------------------ r1759 | hardaker | 2006-06-19 16:59:47 -0700 (Mon, 19 Jun 2006) | 1 line Changed paths: M /trunk/dnssec-tools/COPYING copyright update ------------------------------------------------------------------------ r1758 | hardaker | 2006-06-19 16:59:33 -0700 (Mon, 19 Jun 2006) | 1 line Changed paths: M /trunk/dnssec-tools/INSTALL copyright update ------------------------------------------------------------------------ r1757 | hardaker | 2006-06-19 16:58:00 -0700 (Mon, 19 Jun 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in version number update (0.2) ------------------------------------------------------------------------ r1756 | hardaker | 2006-06-19 16:57:15 -0700 (Mon, 19 Jun 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/Makefile.PL M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/donuts/Makefile.PL M /trunk/dnssec-tools/tools/donuts/donutsd M /trunk/dnssec-tools/tools/maketestzone/Makefile.PL M /trunk/dnssec-tools/tools/maketestzone/maketestzone M /trunk/dnssec-tools/tools/mapper/Makefile.PL M /trunk/dnssec-tools/tools/mapper/mapper copyright update ------------------------------------------------------------------------ r1755 | hardaker | 2006-06-19 16:44:59 -0700 (Mon, 19 Jun 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/Makefile.PL M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm M /trunk/dnssec-tools/tools/modules/README M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm M /trunk/dnssec-tools/tools/modules/file-keyrec M /trunk/dnssec-tools/tools/modules/tests/Makefile.PL M /trunk/dnssec-tools/tools/modules/tests/test-conf M /trunk/dnssec-tools/tools/modules/tests/test-keyrec M /trunk/dnssec-tools/tools/modules/tests/test-rollmgr M /trunk/dnssec-tools/tools/modules/tests/test-rollrec M /trunk/dnssec-tools/tools/modules/tests/test-timetrans M /trunk/dnssec-tools/tools/modules/tests/test-toolopts1 M /trunk/dnssec-tools/tools/modules/tests/test-toolopts2 M /trunk/dnssec-tools/tools/modules/tests/test-toolopts3 M /trunk/dnssec-tools/tools/modules/timetrans.pm M /trunk/dnssec-tools/tools/modules/tooloptions.pm copyright updates ------------------------------------------------------------------------ r1754 | hardaker | 2006-06-19 16:42:34 -0700 (Mon, 19 Jun 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL M /trunk/dnssec-tools/tools/scripts/README M /trunk/dnssec-tools/tools/scripts/clean-keyrec M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/keyrec-check M /trunk/dnssec-tools/tools/scripts/timetrans copyright date update ------------------------------------------------------------------------ r1753 | hardaker | 2006-06-19 16:39:40 -0700 (Mon, 19 Jun 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/tachk --version flag ------------------------------------------------------------------------ r1752 | hardaker | 2006-06-19 16:18:36 -0700 (Mon, 19 Jun 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/TrustMan added the executable flag to SVN ------------------------------------------------------------------------ r1751 | hardaker | 2006-06-19 16:14:45 -0700 (Mon, 19 Jun 2006) | 1 line Changed paths: M /trunk/dnssec-tools/apps/mozilla/README updated to reflect current status ------------------------------------------------------------------------ r1750 | hardaker | 2006-06-19 16:12:59 -0700 (Mon, 19 Jun 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/scripts/genkrf help formatting fixes ------------------------------------------------------------------------ r1749 | hardaker | 2006-06-19 16:12:31 -0700 (Mon, 19 Jun 2006) | 1 line Changed paths: M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in updated version number ------------------------------------------------------------------------ r1748 | lfoster | 2006-06-19 15:56:30 -0700 (Mon, 19 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/TrustMan Fixed a typo in documentation section. ------------------------------------------------------------------------ r1747 | lfoster | 2006-06-19 14:59:27 -0700 (Mon, 19 Jun 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/TrustMan Added -c flag to allow configuration. Takes the other command line options given (such as smtp server, mail contact, sleep time) and creates a new dnssec-tools.conf with those added. ------------------------------------------------------------------------ r1746 | hserus | 2006-06-19 12:09:33 -0700 (Mon, 19 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Set results parameter initially to NULL in val_resolve_and_check() ------------------------------------------------------------------------ r1745 | hserus | 2006-06-19 10:34:48 -0700 (Mon, 19 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Remove perror() statements. ------------------------------------------------------------------------ r1744 | hserus | 2006-06-16 14:34:03 -0700 (Fri, 16 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c Add check to ensure that context creation was successful. ------------------------------------------------------------------------ r1743 | hserus | 2006-06-16 14:32:25 -0700 (Fri, 16 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Allow NULL values to be specified for ctx parameter in val_resolve_and_check() ------------------------------------------------------------------------ r1742 | hserus | 2006-06-16 13:41:59 -0700 (Fri, 16 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml More changes based on comments received earlier. ------------------------------------------------------------------------ r1741 | hserus | 2006-06-16 09:57:18 -0700 (Fri, 16 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/etc/dnsval.conf Add more sample policy statements ------------------------------------------------------------------------ r1740 | hserus | 2006-06-16 09:56:00 -0700 (Fri, 16 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_context.c Set policy to the requested scope when creating a new context ------------------------------------------------------------------------ r1739 | hserus | 2006-06-16 09:55:06 -0700 (Fri, 16 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Make sure that default policies are read; also fix bug in memory deallocation ------------------------------------------------------------------------ r1738 | hserus | 2006-06-16 09:52:24 -0700 (Fri, 16 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c Add new option to perform validation using a specific policy label ------------------------------------------------------------------------ r1737 | hserus | 2006-06-15 14:27:08 -0700 (Thu, 15 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in M /trunk/dnssec-tools/validator/include/validator-config.h.in Make sure that custom defines are generated in the header file ------------------------------------------------------------------------ r1736 | hserus | 2006-06-15 12:19:07 -0700 (Thu, 15 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml Make changes to the High-level API section + other miscellaneous edits ------------------------------------------------------------------------ r1735 | hardaker | 2006-06-14 17:57:04 -0700 (Wed, 14 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/clean-keyrec M /trunk/dnssec-tools/tools/scripts/dtconfchk M /trunk/dnssec-tools/tools/scripts/dtdefs M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/getdnskeys M /trunk/dnssec-tools/tools/scripts/keyrec-check M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollctl M /trunk/dnssec-tools/tools/scripts/rollerd M /trunk/dnssec-tools/tools/scripts/rollinit M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/zonesigner - Version numbers for all scripts ------------------------------------------------------------------------ r1734 | hardaker | 2006-06-14 16:06:03 -0700 (Wed, 14 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm M /trunk/dnssec-tools/tools/scripts/zonesigner - Add a version number ------------------------------------------------------------------------ r1733 | hardaker | 2006-06-14 16:05:48 -0700 (Wed, 14 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper - Add a version number ------------------------------------------------------------------------ r1732 | hardaker | 2006-06-14 16:05:38 -0700 (Wed, 14 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone - Add a version number - Add a method for looping over rule files (future GUI use) ------------------------------------------------------------------------ r1731 | hardaker | 2006-06-14 16:05:30 -0700 (Wed, 14 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts - Add a version number - Add a method for looping over rule files (future GUI use) ------------------------------------------------------------------------ r1730 | hserus | 2006-06-14 14:56:58 -0700 (Wed, 14 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Check for bad arguments ------------------------------------------------------------------------ r1729 | hserus | 2006-06-14 12:41:28 -0700 (Wed, 14 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_errors.h M /trunk/dnssec-tools/validator/libval/val_log.c Add support for VAL_NOTRUST ------------------------------------------------------------------------ r1728 | hserus | 2006-06-14 12:39:23 -0700 (Wed, 14 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval-implementation-notes M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod Add description for VAL_NOTRUST ------------------------------------------------------------------------ r1727 | lfoster | 2006-06-14 11:09:21 -0700 (Wed, 14 Jun 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/NEWS added entries for dtinitconf, dtconfchk, dtdefs, defaults.pm, rollchk, rollctl, rollerd, rollinit, lsroll, and TrustMan ------------------------------------------------------------------------ r1726 | hserus | 2006-06-14 10:44:43 -0700 (Wed, 14 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/NEWS Added note on recent changes for the validator ------------------------------------------------------------------------ r1725 | baerm | 2006-06-14 09:23:19 -0700 (Wed, 14 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c set a couple more AF family values I missed before ------------------------------------------------------------------------ r1724 | hserus | 2006-06-14 06:49:25 -0700 (Wed, 14 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/README M /trunk/dnssec-tools/validator/doc/libval-implementation-notes Remove reference to validator_api.xml ------------------------------------------------------------------------ r1723 | wgriffin | 2006-06-13 19:41:43 -0700 (Tue, 13 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL Update Makefile.PL to install lsroll and TrustMan ------------------------------------------------------------------------ r1722 | lfoster | 2006-06-13 11:10:57 -0700 (Tue, 13 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/TrustMan Added copyright, few comments. ------------------------------------------------------------------------ r1721 | lfoster | 2006-06-12 14:51:51 -0700 (Mon, 12 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Fixed a minor bug in checking existence of archivedir. ------------------------------------------------------------------------ r1720 | baerm | 2006-06-12 14:50:20 -0700 (Mon, 12 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c set sockaddr_in family values ------------------------------------------------------------------------ r1719 | baerm | 2006-06-12 14:45:24 -0700 (Mon, 12 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c fixed malloc problem ------------------------------------------------------------------------ r1718 | tewok | 2006-06-09 16:43:47 -0700 (Fri, 09 Jun 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Changed the user-command channel to use Unix-domain sockets instead of internet sockets. ------------------------------------------------------------------------ r1716 | hserus | 2006-06-09 13:11:33 -0700 (Fri, 09 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/Makefile.in Create man pages for different functions within libval(3) ------------------------------------------------------------------------ r1715 | lfoster | 2006-06-09 12:27:48 -0700 (Fri, 09 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm add TrustMan config. ------------------------------------------------------------------------ r1714 | lfoster | 2006-06-09 12:26:35 -0700 (Fri, 09 Jun 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/TrustMan First working version. This requires that dnssec-tools.conf be manually edited to include necessary info (see perldoc TrustMan). Runs as a daemon by default. ------------------------------------------------------------------------ r1713 | hserus | 2006-06-09 11:58:28 -0700 (Fri, 09 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/Makefile.in A /trunk/dnssec-tools/validator/doc/dnsval.conf.3 A /trunk/dnssec-tools/validator/doc/dnsval.conf.pod M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod Added a new man page for dnsval.conf; man page for libval now references this other man page. ------------------------------------------------------------------------ r1712 | hserus | 2006-06-09 10:23:43 -0700 (Fri, 09 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval-implementation-notes M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod Added note about VAL_NOTRUST ------------------------------------------------------------------------ r1711 | hserus | 2006-06-09 07:56:43 -0700 (Fri, 09 Jun 2006) | 2 lines Changed paths: A /trunk/dnssec-tools/validator/libsres/nsap_addr.c Use ISC's implementation for inet_nsap_ntoa ------------------------------------------------------------------------ r1710 | hserus | 2006-06-09 07:53:58 -0700 (Fri, 09 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c Use inet_pton in place of inet_aton ------------------------------------------------------------------------ r1709 | hserus | 2006-06-09 07:53:03 -0700 (Fri, 09 Jun 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_policy.c Don't use strsep and inet_aton since these are not portable; implement code code differently for the former and use inet_pton for the latter. ------------------------------------------------------------------------ r1708 | hserus | 2006-06-09 07:49:01 -0700 (Fri, 09 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/Makefile.in Add nsap_add.c to the list of files to be compiled. ------------------------------------------------------------------------ r1707 | hserus | 2006-06-09 07:39:51 -0700 (Fri, 09 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/res_debug.c Don't use non-portable functions when they are not defined ------------------------------------------------------------------------ r1706 | hserus | 2006-06-09 07:38:34 -0700 (Fri, 09 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/configure M /trunk/dnssec-tools/validator/configure.in Check for availability of non-portable functions and specific symbols ------------------------------------------------------------------------ r1705 | hardaker | 2006-06-08 16:26:05 -0700 (Thu, 08 Jun 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper change the GUI-only option for displaying in a window to a real command line flag ------------------------------------------------------------------------ r1704 | hardaker | 2006-06-08 14:36:20 -0700 (Thu, 08 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone - many more code comments for cleanliness - Added a reverse-dates function ------------------------------------------------------------------------ r1703 | hardaker | 2006-06-08 14:35:42 -0700 (Thu, 08 Jun 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm - document how to actually use the module ------------------------------------------------------------------------ r1702 | hardaker | 2006-06-08 14:35:15 -0700 (Thu, 08 Jun 2006) | 1 line Changed paths: M /trunk/dnssec-tools/dist/dnssec-tools.spec - getting ready for a future release. ------------------------------------------------------------------------ r1701 | hardaker | 2006-06-08 14:34:10 -0700 (Thu, 08 Jun 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper - add other-args help text ------------------------------------------------------------------------ r1700 | hardaker | 2006-06-08 14:33:40 -0700 (Thu, 08 Jun 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts - use the common get zone-file/zone-name dialog boxes ------------------------------------------------------------------------ r1699 | hardaker | 2006-06-08 14:31:25 -0700 (Thu, 08 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper - minor gui usability additions - add scaling buttons to the resulting image ------------------------------------------------------------------------ r1698 | hardaker | 2006-06-08 11:53:19 -0700 (Thu, 08 Jun 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts minor GUI wording changes ------------------------------------------------------------------------ r1697 | hardaker | 2006-06-08 11:37:54 -0700 (Thu, 08 Jun 2006) | 1 line Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts global rule summary in GUI output; remove debugging code ------------------------------------------------------------------------ r1695 | hardaker | 2006-06-08 11:24:55 -0700 (Thu, 08 Jun 2006) | 1 line Changed paths: A /trunk/dnssec-tools/NEWS NEWS file ------------------------------------------------------------------------ r1694 | hserus | 2006-06-08 10:44:50 -0700 (Thu, 08 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Suppor the root zone in the zone-security-expectation policy construct ------------------------------------------------------------------------ r1693 | tewok | 2006-06-06 17:53:16 -0700 (Tue, 06 Jun 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Added a little pod. ------------------------------------------------------------------------ r1692 | hserus | 2006-06-06 12:08:41 -0700 (Tue, 06 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval.3 M /trunk/dnssec-tools/validator/doc/libval.pod Update the documentation for libval to match with current implementation. ------------------------------------------------------------------------ r1691 | tewok | 2006-06-06 11:43:12 -0700 (Tue, 06 Jun 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollctl Fixed some pod. ------------------------------------------------------------------------ r1690 | tewok | 2006-06-06 11:41:48 -0700 (Tue, 06 Jun 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Add a log message user command. ------------------------------------------------------------------------ r1689 | tewok | 2006-06-06 11:18:11 -0700 (Tue, 06 Jun 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Fixed the way unix_dropid() checks for a currently running rollerd. ------------------------------------------------------------------------ r1688 | tewok | 2006-06-06 10:54:41 -0700 (Tue, 06 Jun 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added a logmsg command. ------------------------------------------------------------------------ r1687 | hserus | 2006-06-06 10:39:50 -0700 (Tue, 06 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_log.h M /trunk/dnssec-tools/validator/libval/validator.h Use val_status_t and val_astatus_t types as parameters to p_val_error() and p_as_error() respectively. ------------------------------------------------------------------------ r1686 | hserus | 2006-06-06 09:54:13 -0700 (Tue, 06 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libsres.3 M /trunk/dnssec-tools/validator/doc/libsres.pod Update documentation for libsres to keep current with implementation ------------------------------------------------------------------------ r1685 | hserus | 2006-06-06 09:48:19 -0700 (Tue, 06 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/resolver.h Re-order struct member so that length and value are located next to each other ------------------------------------------------------------------------ r1684 | hserus | 2006-06-06 09:36:22 -0700 (Tue, 06 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/validator.h Only include prototypes that have to be exported from the library ------------------------------------------------------------------------ r1683 | hserus | 2006-06-06 09:33:02 -0700 (Tue, 06 Jun 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/libval/crypto/val_dsasha1.c M /trunk/dnssec-tools/validator/libval/crypto/val_rsamd5.c M /trunk/dnssec-tools/validator/libval/crypto/val_rsasha1.c M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_assertion.h A /trunk/dnssec-tools/validator/libval/val_context.h M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c A /trunk/dnssec-tools/validator/libval/val_getaddrinfo.h M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c A /trunk/dnssec-tools/validator/libval/val_gethostbyname.h M /trunk/dnssec-tools/validator/libval/val_log.c A /trunk/dnssec-tools/validator/libval/val_log.h M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_verify.c M /trunk/dnssec-tools/validator/libval/val_x_query.c A /trunk/dnssec-tools/validator/libval/val_x_query.h Create new header files to store prototypes that were previously stored in validator.h and reference those in various C files ------------------------------------------------------------------------ r1682 | hserus | 2006-06-06 07:47:58 -0700 (Tue, 06 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap Update with new error codes ------------------------------------------------------------------------ r1681 | hserus | 2006-06-06 07:35:13 -0700 (Tue, 06 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/val_assertion.c Minor edit in comments ------------------------------------------------------------------------ r1680 | hserus | 2006-06-06 07:31:59 -0700 (Tue, 06 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libval-implementation-notes Update the implementation notes for libval ------------------------------------------------------------------------ r1679 | hserus | 2006-06-05 14:39:51 -0700 (Mon, 05 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/libsres-implementation-notes Update to make description more current with the implementation. ------------------------------------------------------------------------ r1678 | hserus | 2006-06-05 14:29:42 -0700 (Mon, 05 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.3 M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.pod M /trunk/dnssec-tools/validator/doc/val_gethostbyname.3 M /trunk/dnssec-tools/validator/doc/val_gethostbyname.pod M /trunk/dnssec-tools/validator/doc/val_query.3 M /trunk/dnssec-tools/validator/doc/val_query.pod Update to use new error code definitions ------------------------------------------------------------------------ r1677 | hserus | 2006-06-05 13:39:28 -0700 (Mon, 05 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/doc/README Updated with current list of files in this directory ------------------------------------------------------------------------ r1676 | hserus | 2006-06-05 12:57:56 -0700 (Mon, 05 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/README Add one-line descriptions for command-line utilities ------------------------------------------------------------------------ r1675 | hserus | 2006-06-05 12:46:42 -0700 (Mon, 05 Jun 2006) | 2 lines Changed paths: A /trunk/dnssec-tools/validator/etc/README Add one-line description for each configuration file needed by the validator ------------------------------------------------------------------------ r1674 | hserus | 2006-06-05 12:45:18 -0700 (Mon, 05 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libval/README Updated new location for docs and apps ------------------------------------------------------------------------ r1673 | hserus | 2006-06-05 12:44:47 -0700 (Mon, 05 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/README Updated new location for docs ------------------------------------------------------------------------ r1672 | hserus | 2006-06-05 12:42:56 -0700 (Mon, 05 Jun 2006) | 2 lines Changed paths: A /trunk/dnssec-tools/validator/README Added a top-level README file that describes the structure of the validator portion of the tree. ------------------------------------------------------------------------ r1671 | hserus | 2006-06-05 12:38:16 -0700 (Mon, 05 Jun 2006) | 2 lines Changed paths: A /trunk/dnssec-tools/validator/etc/resolv.conf Add a sample resolv.conf file ------------------------------------------------------------------------ r1670 | hserus | 2006-06-05 11:23:21 -0700 (Mon, 05 Jun 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c Use error codes prefixed with VAL_ ------------------------------------------------------------------------ r1669 | hserus | 2006-06-05 11:19:49 -0700 (Mon, 05 Jun 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/validator/libval/crypto/val_dsasha1.c M /trunk/dnssec-tools/validator/libval/crypto/val_rsamd5.c M /trunk/dnssec-tools/validator/libval/crypto/val_rsasha1.c M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_errors.h M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_parse.c M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_resquery.h M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_verify.c M /trunk/dnssec-tools/validator/libval/val_x_query.c M /trunk/dnssec-tools/validator/libval/validator.h First step towards bring code in sync with draft-hayatnagarkar-dnsext-validator-api-02 Prefix error codes with VAL_ reference rrset details from within struct val_rrset. ------------------------------------------------------------------------ r1668 | hserus | 2006-06-05 10:35:27 -0700 (Mon, 05 Jun 2006) | 2 lines Changed paths: A /trunk/dnssec-tools/validator/etc A /trunk/dnssec-tools/validator/etc/dnsval.conf (from /trunk/dnssec-tools/validator/libval/dnsval.conf:1667) A /trunk/dnssec-tools/validator/etc/root.hints (from /trunk/dnssec-tools/validator/libval/root.hints:1667) D /trunk/dnssec-tools/validator/libval/dnsval.conf D /trunk/dnssec-tools/validator/libval/root.hints Moved validator configuration files to a separate etc/ directory ------------------------------------------------------------------------ r1667 | hserus | 2006-06-05 10:21:42 -0700 (Mon, 05 Jun 2006) | 9 lines Changed paths: M /trunk/dnssec-tools/validator/doc/validator_api.xml The previous version was draft-hayatnagarkar-dnsext-validator-api-00. This version contains the first set of changes for -01 - made some changes to the terminology section - used val_create_context() instead of val_get_context() - changed some of the low-level interfaces - Added definitions for assertion status values since this does not seem to be something that is going to come out as a separate draft. Have to still change the acknowledgements section to include the work done in the dnssec-app forum. ------------------------------------------------------------------------ r1666 | rstory | 2006-06-01 08:28:21 -0700 (Thu, 01 Jun 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/.cvsignore do not ignore aclocal.m4 ------------------------------------------------------------------------ r1665 | rstory | 2006-06-01 08:27:19 -0700 (Thu, 01 Jun 2006) | 1 line Changed paths: A /trunk/dnssec-tools/validator/Makefile.bot (from /trunk/dnssec-tools/Makefile.bot:1645) copy autoconf files from top dir (some slightly modified) ------------------------------------------------------------------------ r1664 | rstory | 2006-06-01 08:26:03 -0700 (Thu, 01 Jun 2006) | 1 line Changed paths: A /trunk/dnssec-tools/validator/Makefile.in A /trunk/dnssec-tools/validator/Makefile.top (from /trunk/dnssec-tools/Makefile.top:1645) A /trunk/dnssec-tools/validator/aclocal.m4 (from /trunk/dnssec-tools/aclocal.m4:1645) A /trunk/dnssec-tools/validator/config.guess (from /trunk/dnssec-tools/config.guess:1645) A /trunk/dnssec-tools/validator/config.sub (from /trunk/dnssec-tools/config.sub:1645) A /trunk/dnssec-tools/validator/install-sh (from /trunk/dnssec-tools/install-sh:1645) A /trunk/dnssec-tools/validator/ltmain.sh (from /trunk/dnssec-tools/ltmain.sh:1645) A /trunk/dnssec-tools/validator/mkinstalldirs (from /trunk/dnssec-tools/mkinstalldirs:1645) copy autoconf files from top dir (some slightly modified) ------------------------------------------------------------------------ r1663 | rstory | 2006-05-31 16:23:57 -0700 (Wed, 31 May 2006) | 2 lines Changed paths: D /trunk/dnssec-tools/lib/libsres/.cvsignore D /trunk/dnssec-tools/lib/libsres/Makefile.in D /trunk/dnssec-tools/lib/libsres/README D /trunk/dnssec-tools/lib/libsres/base64.c D /trunk/dnssec-tools/lib/libsres/ns_name.c D /trunk/dnssec-tools/lib/libsres/ns_netint.c D /trunk/dnssec-tools/lib/libsres/ns_parse.c D /trunk/dnssec-tools/lib/libsres/ns_print.c D /trunk/dnssec-tools/lib/libsres/ns_samedomain.c D /trunk/dnssec-tools/lib/libsres/ns_ttl.c D /trunk/dnssec-tools/lib/libsres/res_comp.c D /trunk/dnssec-tools/lib/libsres/res_debug.c D /trunk/dnssec-tools/lib/libsres/res_debug.h D /trunk/dnssec-tools/lib/libsres/res_io_manager.c D /trunk/dnssec-tools/lib/libsres/res_io_manager.h D /trunk/dnssec-tools/lib/libsres/res_mkquery.c D /trunk/dnssec-tools/lib/libsres/res_mkquery.h D /trunk/dnssec-tools/lib/libsres/res_query.c D /trunk/dnssec-tools/lib/libsres/res_support.c D /trunk/dnssec-tools/lib/libsres/res_support.h D /trunk/dnssec-tools/lib/libsres/res_tsig.c D /trunk/dnssec-tools/lib/libsres/res_tsig.h D /trunk/dnssec-tools/lib/libsres/resolver.h delete moved files ------------------------------------------------------------------------ r1662 | rstory | 2006-05-31 16:20:34 -0700 (Wed, 31 May 2006) | 1 line Changed paths: D /trunk/dnssec-tools/lib/libval/Makefile.in D /trunk/dnssec-tools/lib/libval/README D /trunk/dnssec-tools/lib/libval/dnsval.conf D /trunk/dnssec-tools/lib/libval/root.hints D /trunk/dnssec-tools/lib/libval/val_assertion.c D /trunk/dnssec-tools/lib/libval/val_assertion.h D /trunk/dnssec-tools/lib/libval/val_cache.c D /trunk/dnssec-tools/lib/libval/val_cache.h D /trunk/dnssec-tools/lib/libval/val_context.c D /trunk/dnssec-tools/lib/libval/val_errors.h D /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c D /trunk/dnssec-tools/lib/libval/val_gethostbyname.c D /trunk/dnssec-tools/lib/libval/val_log.c D /trunk/dnssec-tools/lib/libval/val_parse.c D /trunk/dnssec-tools/lib/libval/val_parse.h D /trunk/dnssec-tools/lib/libval/val_policy.c D /trunk/dnssec-tools/lib/libval/val_policy.h D /trunk/dnssec-tools/lib/libval/val_resquery.c D /trunk/dnssec-tools/lib/libval/val_resquery.h D /trunk/dnssec-tools/lib/libval/val_support.c D /trunk/dnssec-tools/lib/libval/val_support.h D /trunk/dnssec-tools/lib/libval/val_verify.c D /trunk/dnssec-tools/lib/libval/val_verify.h D /trunk/dnssec-tools/lib/libval/val_x_query.c D /trunk/dnssec-tools/lib/libval/validator.h remove moved file ------------------------------------------------------------------------ r1661 | rstory | 2006-05-31 16:19:09 -0700 (Wed, 31 May 2006) | 1 line Changed paths: D /trunk/dnssec-tools/lib/libval/.cvsignore remove moved file ------------------------------------------------------------------------ r1660 | rstory | 2006-05-31 16:18:36 -0700 (Wed, 31 May 2006) | 1 line Changed paths: M /trunk/dnssec-tools/.cvsignore remove deleted file ------------------------------------------------------------------------ r1659 | rstory | 2006-05-31 16:17:22 -0700 (Wed, 31 May 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/configure run autoheader and autoconf ------------------------------------------------------------------------ r1658 | rstory | 2006-05-31 16:16:38 -0700 (Wed, 31 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/configure.in - explict subst for LIBS - fix paths for Makefile.(top|bot) ------------------------------------------------------------------------ r1657 | rstory | 2006-05-31 16:15:16 -0700 (Wed, 31 May 2006) | 2 lines Changed paths: D /trunk/dnssec-tools/Makefile.bot D /trunk/dnssec-tools/Makefile.top remove unused files (moved into validator) ------------------------------------------------------------------------ r1656 | rstory | 2006-05-31 16:09:51 -0700 (Wed, 31 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/Makefile.in - update subdirs for reorg - bail on subdir loops if make returns error ------------------------------------------------------------------------ r1655 | rstory | 2006-05-31 16:07:00 -0700 (Wed, 31 May 2006) | 1 line Changed paths: M /trunk/dnssec-tools/configure run autoconf ------------------------------------------------------------------------ r1654 | rstory | 2006-05-31 16:06:37 -0700 (Wed, 31 May 2006) | 1 line Changed paths: M /trunk/dnssec-tools/configure.in rip out validator specific tests ------------------------------------------------------------------------ r1653 | rstory | 2006-05-31 13:45:09 -0700 (Wed, 31 May 2006) | 1 line Changed paths: A /trunk/dnssec-tools/validator/configure (from /trunk/dnssec-tools/configure:1645) M /trunk/dnssec-tools/validator/include/validator-config.h.in run autoheader & autoconf ------------------------------------------------------------------------ r1652 | rstory | 2006-05-31 13:43:14 -0700 (Wed, 31 May 2006) | 1 line Changed paths: A /trunk/dnssec-tools/validator/configure.in (from /trunk/dnssec-tools/configure.in:1637) update for validatory reorg ------------------------------------------------------------------------ r1651 | rstory | 2006-05-31 13:41:13 -0700 (Wed, 31 May 2006) | 1 line Changed paths: D /trunk/dnssec-tools/validator/include/validator-config.h remove reorg rename flub ------------------------------------------------------------------------ r1650 | rstory | 2006-05-31 13:39:11 -0700 (Wed, 31 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/validator/apps/Makefile.in M /trunk/dnssec-tools/validator/libsres/Makefile.in M /trunk/dnssec-tools/validator/libval/Makefile.in - tweak include for reorg paths - remove unused subdir logic ------------------------------------------------------------------------ r1649 | rstory | 2006-05-31 13:34:54 -0700 (Wed, 31 May 2006) | 1 line Changed paths: A /trunk/dnssec-tools/validator/include/.cvsignore ignore generated file ------------------------------------------------------------------------ r1648 | rstory | 2006-05-31 13:33:57 -0700 (Wed, 31 May 2006) | 1 line Changed paths: A /trunk/dnssec-tools/validator/include/validator-config.h.in (from /trunk/dnssec-tools/validator/include/validator-config.h:1645) fix reorg rename flub ------------------------------------------------------------------------ r1647 | rstory | 2006-05-31 13:32:20 -0700 (Wed, 31 May 2006) | 1 line Changed paths: A /trunk/dnssec-tools/validator/.cvsignore (from /trunk/dnssec-tools/.cvsignore:1637) remove deleted file ------------------------------------------------------------------------ r1646 | rstory | 2006-05-31 13:24:16 -0700 (Wed, 31 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/libsres/base64.c M /trunk/dnssec-tools/validator/libsres/ns_name.c M /trunk/dnssec-tools/validator/libsres/ns_netint.c M /trunk/dnssec-tools/validator/libsres/ns_parse.c M /trunk/dnssec-tools/validator/libsres/ns_print.c M /trunk/dnssec-tools/validator/libsres/ns_samedomain.c M /trunk/dnssec-tools/validator/libsres/ns_ttl.c M /trunk/dnssec-tools/validator/libsres/res_comp.c M /trunk/dnssec-tools/validator/libsres/res_debug.c M /trunk/dnssec-tools/validator/libsres/res_io_manager.c M /trunk/dnssec-tools/validator/libsres/res_mkquery.c M /trunk/dnssec-tools/validator/libsres/res_query.c M /trunk/dnssec-tools/validator/libsres/res_support.c M /trunk/dnssec-tools/validator/libsres/res_tsig.c dnssec-tools-config.h -> validator-config.h ------------------------------------------------------------------------ r1645 | rstory | 2006-05-31 12:45:40 -0700 (Wed, 31 May 2006) | 2 lines Changed paths: D /trunk/dnssec-tools/lib/libval/crypto delete moved dir ------------------------------------------------------------------------ r1644 | rstory | 2006-05-31 12:42:57 -0700 (Wed, 31 May 2006) | 2 lines Changed paths: D /trunk/dnssec-tools/lib/libsres/doc delete doc dir ------------------------------------------------------------------------ r1643 | rstory | 2006-05-31 12:39:05 -0700 (Wed, 31 May 2006) | 2 lines Changed paths: A /trunk/dnssec-tools/validator/libsres (from /trunk/dnssec-tools/lib/libsres:1642) D /trunk/dnssec-tools/validator/libsres/doc move libsres ------------------------------------------------------------------------ r1642 | rstory | 2006-05-31 10:41:21 -0700 (Wed, 31 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/validator/apps/validator_driver.c M /trunk/dnssec-tools/validator/libval/crypto/val_dsasha1.c M /trunk/dnssec-tools/validator/libval/crypto/val_rsamd5.c M /trunk/dnssec-tools/validator/libval/crypto/val_rsasha1.c M /trunk/dnssec-tools/validator/libval/val_assertion.c M /trunk/dnssec-tools/validator/libval/val_cache.c M /trunk/dnssec-tools/validator/libval/val_context.c M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c M /trunk/dnssec-tools/validator/libval/val_log.c M /trunk/dnssec-tools/validator/libval/val_parse.c M /trunk/dnssec-tools/validator/libval/val_policy.c M /trunk/dnssec-tools/validator/libval/val_resquery.c M /trunk/dnssec-tools/validator/libval/val_support.c M /trunk/dnssec-tools/validator/libval/val_verify.c M /trunk/dnssec-tools/validator/libval/val_x_query.c dnssec-tools-config.h -> validator-config.h ------------------------------------------------------------------------ r1641 | rstory | 2006-05-31 10:29:18 -0700 (Wed, 31 May 2006) | 2 lines Changed paths: A /trunk/dnssec-tools/validator/libval (from /trunk/dnssec-tools/lib/libval:1637) D /trunk/dnssec-tools/validator/libval/bin D /trunk/dnssec-tools/validator/libval/doc move lival to validator dir ------------------------------------------------------------------------ r1640 | rstory | 2006-05-31 10:02:00 -0700 (Wed, 31 May 2006) | 1 line Changed paths: D /trunk/dnssec-tools/lib/libsres/doc/.cvsignore D /trunk/dnssec-tools/lib/libsres/doc/Makefile.in remove unused files ------------------------------------------------------------------------ r1639 | rstory | 2006-05-31 09:59:38 -0700 (Wed, 31 May 2006) | 1 line Changed paths: M /trunk/dnssec-tools/validator/doc/Makefile.in merge in libsres makefile ------------------------------------------------------------------------ r1638 | rstory | 2006-05-31 09:56:41 -0700 (Wed, 31 May 2006) | 2 lines Changed paths: D /trunk/dnssec-tools/dnssec-tools-config.h.in D /trunk/dnssec-tools/lib/libsres/doc/implementation-notes D /trunk/dnssec-tools/lib/libsres/doc/libsres.3 D /trunk/dnssec-tools/lib/libsres/doc/libsres.pod D /trunk/dnssec-tools/lib/libsres/include D /trunk/dnssec-tools/lib/libval/bin D /trunk/dnssec-tools/lib/libval/doc A /trunk/dnssec-tools/validator A /trunk/dnssec-tools/validator/apps (from /trunk/dnssec-tools/lib/libval/bin:1637) A /trunk/dnssec-tools/validator/doc (from /trunk/dnssec-tools/lib/libval/doc:1637) D /trunk/dnssec-tools/validator/doc/implementation_notes A /trunk/dnssec-tools/validator/doc/libsres-implementation-notes (from /trunk/dnssec-tools/lib/libsres/doc/implementation-notes:1637) A /trunk/dnssec-tools/validator/doc/libsres.3 (from /trunk/dnssec-tools/lib/libsres/doc/libsres.3:1637) A /trunk/dnssec-tools/validator/doc/libsres.pod (from /trunk/dnssec-tools/lib/libsres/doc/libsres.pod:1637) A /trunk/dnssec-tools/validator/doc/libval-implementation-notes (from /trunk/dnssec-tools/lib/libval/doc/implementation_notes:1637) A /trunk/dnssec-tools/validator/include (from /trunk/dnssec-tools/lib/libsres/include:1637) A /trunk/dnssec-tools/validator/include/validator-config.h (from /trunk/dnssec-tools/dnssec-tools-config.h.in:1637) - directory reorg for validation libs/apps/docs/etc ------------------------------------------------------------------------ r1637 | rstory | 2006-05-31 09:24:15 -0700 (Wed, 31 May 2006) | 1 line Changed paths: A /trunk/dnssec-tools/lib/libsres/doc/.cvsignore ignore Makefile ------------------------------------------------------------------------ r1636 | rstory | 2006-05-31 08:25:15 -0700 (Wed, 31 May 2006) | 1 line Changed paths: M /trunk/dnssec-tools/lib/libval/doc/validate.1 M /trunk/dnssec-tools/lib/libval/doc/validate.pod document new command line options ------------------------------------------------------------------------ r1634 | rstory | 2006-05-30 14:19:29 -0700 (Tue, 30 May 2006) | 1 line Changed paths: M /trunk/dnssec-tools/lib/libval/doc/README add warning that man pages are generated from pod pages ------------------------------------------------------------------------ r1633 | tewok | 2006-05-26 19:29:30 -0700 (Fri, 26 May 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Add a needed seek(). The old location ended up adding nulls to the beginning of the pid file with each new execution. Move a truncate() to a better location. ------------------------------------------------------------------------ r1632 | rstory | 2006-05-24 09:12:55 -0700 (Wed, 24 May 2006) | 1 line Changed paths: M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c add --dnsval-conf=file option ------------------------------------------------------------------------ r1631 | rstory | 2006-05-24 09:10:51 -0700 (Wed, 24 May 2006) | 1 line Changed paths: M /trunk/dnssec-tools/lib/libval/val_policy.c M /trunk/dnssec-tools/lib/libval/val_policy.h make dnsval.conf location run-time configurable too ------------------------------------------------------------------------ r1630 | rstory | 2006-05-24 09:04:38 -0700 (Wed, 24 May 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c - add command line options - --resolv-conf=file - --root-hings=file - --selftest - move common getopt args to local var ------------------------------------------------------------------------ r1629 | rstory | 2006-05-24 09:01:07 -0700 (Wed, 24 May 2006) | 1 line Changed paths: M /trunk/dnssec-tools/lib/libval/val_policy.c M /trunk/dnssec-tools/lib/libval/val_policy.h make resovler config and root.hints locations run-time configurable ------------------------------------------------------------------------ r1628 | rstory | 2006-05-24 07:57:21 -0700 (Wed, 24 May 2006) | 1 line Changed paths: M /trunk/dnssec-tools/Makefile.in add libs target ------------------------------------------------------------------------ r1627 | hserus | 2006-05-19 14:12:10 -0700 (Fri, 19 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.c Make sure we have a set of nameservers available before we set the USE_DNSSEC policy for the queries ------------------------------------------------------------------------ r1626 | hserus | 2006-05-19 13:19:08 -0700 (Fri, 19 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_resquery.c Responses obtained for queries for RRSIG types should not be interpreted as a "nothing_other_than_cname" type ------------------------------------------------------------------------ r1625 | hserus | 2006-05-19 13:14:26 -0700 (Fri, 19 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.c M /trunk/dnssec-tools/lib/libval/val_errors.h M /trunk/dnssec-tools/lib/libval/val_log.c Use new MISSING_DNSKEY and MISSING_DS error codes when these data types are missing instead of displaying DNS error code ------------------------------------------------------------------------ r1624 | hserus | 2006-05-18 06:47:44 -0700 (Thu, 18 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_parse.c Minor bug fix. Also make sure that the dname returned from val_parse_dname is null terminated. ------------------------------------------------------------------------ r1623 | rstory | 2006-05-17 16:02:18 -0700 (Wed, 17 May 2006) | 1 line Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.c add static casts to keep compiler happy ------------------------------------------------------------------------ r1622 | rstory | 2006-05-17 16:02:08 -0700 (Wed, 17 May 2006) | 1 line Changed paths: M /trunk/dnssec-tools/lib/libval/val_policy.c include res_debug header ------------------------------------------------------------------------ r1621 | rstory | 2006-05-17 15:58:38 -0700 (Wed, 17 May 2006) | 1 line Changed paths: M /trunk/dnssec-tools/lib/libval/val_errors.h keep compiler happy: put parens around arithmetic defines ------------------------------------------------------------------------ r1620 | rstory | 2006-05-17 15:51:32 -0700 (Wed, 17 May 2006) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/libsres/res_debug.h prototypes for debug functions ------------------------------------------------------------------------ r1619 | rstory | 2006-05-17 15:45:48 -0700 (Wed, 17 May 2006) | 1 line Changed paths: M /trunk/dnssec-tools/lib/libval/val_verify.c ifdef out unused static functions ------------------------------------------------------------------------ r1618 | rstory | 2006-05-17 15:41:34 -0700 (Wed, 17 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_io_manager.c M /trunk/dnssec-tools/lib/libsres/res_io_manager.h M /trunk/dnssec-tools/lib/libsres/res_query.c M /trunk/dnssec-tools/lib/libsres/resolver.h change length params from int/u_int32_t mix to consistent u_int ------------------------------------------------------------------------ r1617 | rstory | 2006-05-17 15:35:33 -0700 (Wed, 17 May 2006) | 1 line Changed paths: M /trunk/dnssec-tools/lib/libsres/res_io_manager.h add res_timeout prototype ------------------------------------------------------------------------ r1616 | rstory | 2006-05-17 15:16:10 -0700 (Wed, 17 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_log.c - change get_hex_string incoming param from char* to const u_char* - static cast to keep compiler quiet ------------------------------------------------------------------------ r1615 | rstory | 2006-05-17 15:15:21 -0700 (Wed, 17 May 2006) | 1 line Changed paths: M /trunk/dnssec-tools/lib/libval/validator.h change get_hex_string incoming param from char* to const u_char* ------------------------------------------------------------------------ r1614 | rstory | 2006-05-17 14:06:33 -0700 (Wed, 17 May 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_verify.c - fix compiler warnings - change val_sigverify data param to unsigned char - cast strlen params to char* ------------------------------------------------------------------------ r1613 | hserus | 2006-05-17 09:01:56 -0700 (Wed, 17 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_policy.c Close file pointers after we're done using them ------------------------------------------------------------------------ r1612 | hserus | 2006-05-17 09:00:29 -0700 (Wed, 17 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c Use the same validator context for all the test cases ------------------------------------------------------------------------ r1611 | hserus | 2006-05-17 08:58:00 -0700 (Wed, 17 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.c If query was previously answered and then cached, you don't need to send out the query again. ------------------------------------------------------------------------ r1610 | tewok | 2006-05-16 20:01:17 -0700 (Tue, 16 May 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Made a bunch of "roll-over manager" to "rollerd" mods in comments and pod. And another in unix_dropid(), which allows the check for running rollerds to actually work. ------------------------------------------------------------------------ r1609 | tewok | 2006-05-16 17:30:33 -0700 (Tue, 16 May 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll Added some =over's in the pod. Added a couple of section introductions in the pod. ------------------------------------------------------------------------ r1608 | tewok | 2006-05-16 17:06:31 -0700 (Tue, 16 May 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Added rollrec locking. Save start-up timestamp and include it in the status command info. ------------------------------------------------------------------------ r1607 | tewok | 2006-05-16 16:35:52 -0700 (Tue, 16 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lsroll M /trunk/dnssec-tools/tools/scripts/rollchk Added locking for the rollrec file. ------------------------------------------------------------------------ r1606 | rstory | 2006-05-16 16:05:55 -0700 (Tue, 16 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/dnssec-tools-config.h.in run autoheader & autoconf ------------------------------------------------------------------------ r1605 | rstory | 2006-05-16 16:01:12 -0700 (Tue, 16 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/configure.in - tweaks to headers in AC_CHECK_* macros - check for netinet/in.h ------------------------------------------------------------------------ r1604 | tewok | 2006-05-16 15:34:50 -0700 (Tue, 16 May 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL rrinit -> rollinit rrchk -> rollchk ------------------------------------------------------------------------ r1603 | rstory | 2006-05-16 15:14:15 -0700 (Tue, 16 May 2006) | 1 line Changed paths: M /trunk/dnssec-tools/lib/libsres/ns_print.c define MIN if missing ------------------------------------------------------------------------ r1602 | rstory | 2006-05-16 14:18:21 -0700 (Tue, 16 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/Makefile.in - use LIBS from configure - remove crypto from EXTRALIBS (should be in LIBS) ------------------------------------------------------------------------ r1601 | rstory | 2006-05-16 13:51:38 -0700 (Tue, 16 May 2006) | 1 line Changed paths: M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/dnssec-tools-config.h.in run autoheader & autoconf ------------------------------------------------------------------------ r1600 | rstory | 2006-05-16 13:50:47 -0700 (Tue, 16 May 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/configure.in - remove redundant header check - add getopt tests - fix includes for ns_*_* tests ------------------------------------------------------------------------ r1599 | rstory | 2006-05-16 13:47:15 -0700 (Tue, 16 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/Makefile.in add LIBS to binary link line ------------------------------------------------------------------------ r1598 | tewok | 2006-05-15 18:37:08 -0700 (Mon, 15 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Get rid of a debugging line. ------------------------------------------------------------------------ r1597 | rstory | 2006-05-15 16:02:48 -0700 (Mon, 15 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/getaddr.c M /trunk/dnssec-tools/lib/libval/bin/gethost.c M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c - only include getopt.h if we have it - user simpler versions of getopt if other not available ------------------------------------------------------------------------ r1596 | rstory | 2006-05-15 15:18:22 -0700 (Mon, 15 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/ns_parse.c - ns_msg_getflag is defined on solaris and darwin, but not as code ------------------------------------------------------------------------ r1595 | tewok | 2006-05-15 14:36:57 -0700 (Mon, 15 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/timetrans.pm Added a special case for 0 seconds. ------------------------------------------------------------------------ r1594 | hserus | 2006-05-15 13:26:05 -0700 (Mon, 15 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/dnsval.conf Add more trust anchors. Also update the zone-security-expectation policy to ignore DNSSEC for some domains ------------------------------------------------------------------------ r1593 | hserus | 2006-05-15 13:23:20 -0700 (Mon, 15 May 2006) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/libval/root.hints Add a sample root.hints file ------------------------------------------------------------------------ r1592 | rstory | 2006-05-15 12:53:59 -0700 (Mon, 15 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/dnssec-tools-config.h.in run autoheader & autoconf ------------------------------------------------------------------------ r1591 | rstory | 2006-05-15 12:53:23 -0700 (Mon, 15 May 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/configure.in - add --with-cflags - check for ns_cert_types - add defines for missing ns_t_* and ns_r_* values - check for p_rcode prototype ------------------------------------------------------------------------ r1590 | hserus | 2006-05-15 12:31:42 -0700 (Mon, 15 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_io_manager.h M /trunk/dnssec-tools/lib/libsres/res_query.c Allow queries to be sent out to multiple name servers in a phased manner, instead of all at once. Set the EDNS0(and consequently the DO) option only for those name servers that are expected to do DNSSEC. ------------------------------------------------------------------------ r1589 | hserus | 2006-05-15 12:28:04 -0700 (Mon, 15 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_io_manager.c Allow queries to be sent out to multiple name servers in a phased manner, instead of all at once ------------------------------------------------------------------------ r1588 | hserus | 2006-05-15 12:26:26 -0700 (Mon, 15 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_mkquery.c Checking if the DO bit needs to be set happens in libval according to the zone security expectiation policy ------------------------------------------------------------------------ r1587 | hserus | 2006-05-15 12:17:33 -0700 (Mon, 15 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_x_query.c Fixed commenting niceties ------------------------------------------------------------------------ r1586 | hserus | 2006-05-15 12:13:11 -0700 (Mon, 15 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_resquery.c Allows queries to be sent out in a phased manner instead of all together. ------------------------------------------------------------------------ r1585 | hserus | 2006-05-15 12:06:28 -0700 (Mon, 15 May 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.c Allow DNSSEC validation for certain zones (as determined by the zone security expectation policy) to be turned off. Set the RES_USE_DNSSEC option for only those name servers that are expected to process DNSSEC Made bug fixes to the referral logic ------------------------------------------------------------------------ r1584 | hserus | 2006-05-15 12:00:06 -0700 (Mon, 15 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c Since assertions can be created even when no data is returned from the DNS, check for NULL ------------------------------------------------------------------------ r1583 | hserus | 2006-05-15 11:58:13 -0700 (Mon, 15 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_policy.c M /trunk/dnssec-tools/lib/libval/val_policy.h Expand the zone security expectation definition to include ignoring DNSSEC for a zone ------------------------------------------------------------------------ r1582 | hserus | 2006-05-15 11:53:08 -0700 (Mon, 15 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c Change expected error conditions for some test cases. Allow individual test cases to be executed ------------------------------------------------------------------------ r1581 | hserus | 2006-05-15 10:53:58 -0700 (Mon, 15 May 2006) | 2 lines Changed paths: D /trunk/dnssec-tools/lib/libsres/EXPORT.sym No longer maintain this file ------------------------------------------------------------------------ r1580 | rstory | 2006-05-15 10:47:24 -0700 (Mon, 15 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/configure run autoconf ------------------------------------------------------------------------ r1579 | hserus | 2006-05-15 10:44:48 -0700 (Mon, 15 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/thunderbird/install.rdf Support more recent versions of thunderbird ------------------------------------------------------------------------ r1578 | rstory | 2006-05-15 10:42:08 -0700 (Mon, 15 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/configure.in M /trunk/dnssec-tools/dnssec-tools-config.h.in - add test to set SPRINTF_CHAR for solaris4 ------------------------------------------------------------------------ r1577 | hserus | 2006-05-15 10:37:02 -0700 (Mon, 15 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap Use new error codes ------------------------------------------------------------------------ r1576 | rstory | 2006-05-15 09:41:11 -0700 (Mon, 15 May 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_x_query.c - add dnssec-tools-config.h - add nameser_compat or local header for HEADER struct - fix complier warning: change buf ptrs to unsigned chars ------------------------------------------------------------------------ r1575 | rstory | 2006-05-15 09:40:04 -0700 (Mon, 15 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_verify.c - add dnssec-tools-config.h - fix compiler warning: change length param to size_t ------------------------------------------------------------------------ r1574 | rstory | 2006-05-15 09:39:07 -0700 (Mon, 15 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_support.h fix compiler warning: change lower_name param to size_t ------------------------------------------------------------------------ r1573 | rstory | 2006-05-15 09:38:17 -0700 (Mon, 15 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_support.c - add dnssec-tools-config.h - fix compiler warnings: change lower_name index param to size_t ------------------------------------------------------------------------ r1572 | rstory | 2006-05-15 09:36:47 -0700 (Mon, 15 May 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_resquery.c - add dnssec-tools-config.h - add nameser_compat or local header for HEADER struct - change ns_tsig_key to ns_tsig ------------------------------------------------------------------------ r1571 | rstory | 2006-05-15 09:35:21 -0700 (Mon, 15 May 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_policy.c - add dnssec-tools-config.h - add strtok_r prototype for sun - use fcntl instead of flock - rename ns_tsig_key to ns_tsig ------------------------------------------------------------------------ r1570 | rstory | 2006-05-15 09:33:22 -0700 (Mon, 15 May 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_cache.c - add dnssec-tools-config.h - tweak pthread lock for systems w/out PTHREAD_RWLOCK_INITIALIZER macro (OS X) - static init var - new LOCK_INIT macro called at top of functions using other locking macros ------------------------------------------------------------------------ r1569 | rstory | 2006-05-15 09:31:03 -0700 (Mon, 15 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/validator.h - add LOG_PID to VAL_LOG_OPTIONS - add LOG_PERROR to VAL_LOG_OPTIONS if available ------------------------------------------------------------------------ r1568 | rstory | 2006-05-15 09:29:58 -0700 (Mon, 15 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c M /trunk/dnssec-tools/lib/libval/crypto/val_dsasha1.c M /trunk/dnssec-tools/lib/libval/crypto/val_rsamd5.c M /trunk/dnssec-tools/lib/libval/crypto/val_rsasha1.c M /trunk/dnssec-tools/lib/libval/val_assertion.c M /trunk/dnssec-tools/lib/libval/val_context.c M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c M /trunk/dnssec-tools/lib/libval/val_log.c M /trunk/dnssec-tools/lib/libval/val_parse.c add dnssec-tools-config.h ------------------------------------------------------------------------ r1567 | rstory | 2006-05-15 09:27:10 -0700 (Mon, 15 May 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_debug.c - remove unused macro - add NS_ALG_* defines if missing from system headers - add cert_t_* defines if missing from system headers - add p_rcode prototype if missing from system headers - change most sprintf to safer snprintf ------------------------------------------------------------------------ r1566 | rstory | 2006-05-15 09:22:20 -0700 (Mon, 15 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_query.c M /trunk/dnssec-tools/lib/libsres/res_support.c M /trunk/dnssec-tools/lib/libsres/resolver.h - revert previous checkins, which reverted intended changes. i.e. re-do ns_tsig_key -> ns_tsig and HEADER struct includes ------------------------------------------------------------------------ r1565 | rstory | 2006-05-15 09:19:39 -0700 (Mon, 15 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_io_manager.c - fix complier warning: change local var type to match fucntion prototype where used (signed-ness difference) ------------------------------------------------------------------------ r1564 | rstory | 2006-05-15 09:16:51 -0700 (Mon, 15 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/Makefile.top - save autoconf CPPFLAGS - add CPPFLAGS to LIBTOLCC compile mode ------------------------------------------------------------------------ r1563 | rstory | 2006-05-15 09:04:31 -0700 (Mon, 15 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_query.c - rename ns_tsig_key to ns_tsig to avoid header/macro conflict on OS X - include nameser_compat or local header for HEADER struct ------------------------------------------------------------------------ r1562 | rstory | 2006-05-15 09:02:21 -0700 (Mon, 15 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_support.c M /trunk/dnssec-tools/lib/libsres/resolver.h rename ns_tsig_key to ns_tsig to avoid header amcro conflict on OS X ------------------------------------------------------------------------ r1561 | tewok | 2006-05-15 07:24:21 -0700 (Mon, 15 May 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO M /trunk/dnssec-tools/tools/scripts/README A /trunk/dnssec-tools/tools/scripts/lsroll A /trunk/dnssec-tools/tools/scripts/rollchk M /trunk/dnssec-tools/tools/scripts/rollerd A /trunk/dnssec-tools/tools/scripts/rollinit D /trunk/dnssec-tools/tools/scripts/rrchk D /trunk/dnssec-tools/tools/scripts/rrinit Renamed rrchk to rollchk. Renamed rrinit to rollinit. ------------------------------------------------------------------------ r1560 | rstory | 2006-05-09 09:02:58 -0700 (Tue, 09 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_io_manager.c tweak nameser_compat.h vs header.h ifdefs ------------------------------------------------------------------------ r1559 | rstory | 2006-05-09 09:02:05 -0700 (Tue, 09 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_mkquery.c add nameser_compat.h or header.h ------------------------------------------------------------------------ r1558 | rstory | 2006-05-09 09:01:23 -0700 (Tue, 09 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_query.c - rename ns_tsig_key to ns_tsig to avoid OS X conflict - include nameser_compat.h or header.h ------------------------------------------------------------------------ r1557 | rstory | 2006-05-09 09:00:24 -0700 (Tue, 09 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_support.c M /trunk/dnssec-tools/lib/libsres/resolver.h rename ns_tsig_key to ns_tsig to avoid OS X conflict ------------------------------------------------------------------------ r1556 | rstory | 2006-05-09 08:53:54 -0700 (Tue, 09 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/dnssec-tools-config.h.in run autoheader/autoconf ------------------------------------------------------------------------ r1555 | rstory | 2006-05-09 08:53:03 -0700 (Tue, 09 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/configure.in add int tests for 8 bit sizes ------------------------------------------------------------------------ r1554 | rstory | 2006-05-05 15:23:02 -0700 (Fri, 05 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/Makefile.bot remove duplicate CFLAGS ------------------------------------------------------------------------ r1553 | rstory | 2006-05-05 15:22:32 -0700 (Fri, 05 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/dnssec-tools-config.h.in update for autoheader and autoconf ------------------------------------------------------------------------ r1552 | rstory | 2006-05-05 15:21:34 -0700 (Fri, 05 May 2006) | 2 lines Changed paths: D /trunk/dnssec-tools/lib/libsres/include/arpa/nameser.h D /trunk/dnssec-tools/lib/libsres/include/resolv.h remove copies of system headers ------------------------------------------------------------------------ r1551 | rstory | 2006-05-05 15:20:52 -0700 (Fri, 05 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_tsig.c add dnssec-tools-config.h & sys/types.h ------------------------------------------------------------------------ r1550 | rstory | 2006-05-05 15:19:21 -0700 (Fri, 05 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/base64.c M /trunk/dnssec-tools/lib/libsres/ns_name.c M /trunk/dnssec-tools/lib/libsres/ns_netint.c M /trunk/dnssec-tools/lib/libsres/ns_samedomain.c M /trunk/dnssec-tools/lib/libsres/res_comp.c M /trunk/dnssec-tools/lib/libsres/res_query.c M /trunk/dnssec-tools/lib/libsres/res_support.c add dnssec-tools-config.h ------------------------------------------------------------------------ r1549 | rstory | 2006-05-05 15:17:20 -0700 (Fri, 05 May 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/configure.in - add sys/types.h for arpa struct tests - fix u_int_16 defines - add u_int_8 defines ------------------------------------------------------------------------ r1548 | rstory | 2006-05-05 14:46:24 -0700 (Fri, 05 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_mkquery.c add dnssec-tools-config.h ------------------------------------------------------------------------ r1547 | rstory | 2006-05-05 14:43:51 -0700 (Fri, 05 May 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_io_manager.c - add dnssec-tools-config.h - include sys/filio.h if we have it - only include "arpa/header" if we don't have arpa/nameser_compat.h ------------------------------------------------------------------------ r1546 | rstory | 2006-05-05 14:09:36 -0700 (Fri, 05 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_debug.c - add dnssec-tools-config.h - start ugliness of ifdefs for matching function prototypes to sys header ------------------------------------------------------------------------ r1545 | tewok | 2006-05-05 13:42:41 -0700 (Fri, 05 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/rollerd Deleted some obsolete "todo" comments left in the file header. ------------------------------------------------------------------------ r1544 | tewok | 2006-05-05 13:40:20 -0700 (Fri, 05 May 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Reordered output of published and new ZSKs. Minor code-formatting changes. ------------------------------------------------------------------------ r1543 | tewok | 2006-05-05 13:27:44 -0700 (Fri, 05 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO M /trunk/dnssec-tools/tools/scripts/Makefile.PL M /trunk/dnssec-tools/tools/scripts/README Added entries for rollerd. ------------------------------------------------------------------------ r1542 | tewok | 2006-05-05 13:26:31 -0700 (Fri, 05 May 2006) | 5 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/rollerd D /trunk/dnssec-tools/tools/scripts/rollover-manager This is the roll-over manager. rollerd replaces the obsolete rollover-manager. ------------------------------------------------------------------------ r1541 | tewok | 2006-05-05 13:12:55 -0700 (Fri, 05 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm Added getconfdir(). ------------------------------------------------------------------------ r1540 | rstory | 2006-05-05 11:53:26 -0700 (Fri, 05 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/ns_ttl.c - add dnssec-tools-config.h, sys/types.h ------------------------------------------------------------------------ r1539 | rstory | 2006-05-05 11:46:56 -0700 (Fri, 05 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/ns_print.c add dnssec-tools-config.h ------------------------------------------------------------------------ r1538 | rstory | 2006-05-05 11:45:25 -0700 (Fri, 05 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/ns_netint.c add sys/types.h ------------------------------------------------------------------------ r1537 | rstory | 2006-05-05 10:35:37 -0700 (Fri, 05 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/dnssec-tools-config.h.in update for autoheader/autoconf ------------------------------------------------------------------------ r1536 | rstory | 2006-05-05 10:34:28 -0700 (Fri, 05 May 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/configure.in - check for sys/filio.h - add check for int types/sizes/headers - autoheader macros to define u_* if not defined ------------------------------------------------------------------------ r1535 | tewok | 2006-05-05 07:19:00 -0700 (Fri, 05 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Added rollrec_rectype(). ------------------------------------------------------------------------ r1533 | tewok | 2006-05-04 07:57:06 -0700 (Thu, 04 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL Added an entry for rollctl. ------------------------------------------------------------------------ r1532 | rstory | 2006-05-04 06:18:32 -0700 (Thu, 04 May 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/ns_parse.c - include dnssec-tools-config.h - define _msg_ptr iff struct name is different - don't define ns_msg_getflag function if it is already defined as a macro ------------------------------------------------------------------------ r1531 | rstory | 2006-05-04 06:09:28 -0700 (Thu, 04 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/dnssec-tools-config.h.in - update for configure.in - side effect of removing accidentally checked in int type shennanigans ------------------------------------------------------------------------ r1530 | rstory | 2006-05-04 06:06:49 -0700 (Thu, 04 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/configure.in - fix struct name (don't use typedef name) - add autoheader templates for struct checks ------------------------------------------------------------------------ r1529 | rstory | 2006-05-04 05:31:55 -0700 (Thu, 04 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/configure update for configure.in ------------------------------------------------------------------------ r1528 | rstory | 2006-05-04 05:31:15 -0700 (Thu, 04 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/configure.in check ns_msg struct for msg ptr name ------------------------------------------------------------------------ r1527 | rstory | 2006-05-04 05:30:46 -0700 (Thu, 04 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/aclocal.m4 add AC_CHECK_STRUCT_FOR from net-snmp ------------------------------------------------------------------------ r1526 | rstory | 2006-05-04 05:15:24 -0700 (Thu, 04 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools M /trunk/dnssec-tools/.cvsignore add dnssec-tools-config.h ------------------------------------------------------------------------ r1525 | rstory | 2006-05-04 05:11:49 -0700 (Thu, 04 May 2006) | 3 lines Changed paths: A /trunk/dnssec-tools/aclocal.m4 - copy libtool.m4 for AC_PROG_LIBTOOL - add AC_ADD_SEARCH_PATH from net-snmp ------------------------------------------------------------------------ r1524 | rstory | 2006-05-04 05:00:50 -0700 (Thu, 04 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/ltmain.sh update for libtool 1.5.16 ------------------------------------------------------------------------ r1523 | rstory | 2006-05-04 04:59:43 -0700 (Thu, 04 May 2006) | 2 lines Changed paths: A /trunk/dnssec-tools/dnssec-tools-config.h.in new file ------------------------------------------------------------------------ r1522 | rstory | 2006-05-04 04:59:07 -0700 (Thu, 04 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/configure update for new configure.in ------------------------------------------------------------------------ r1521 | rstory | 2006-05-04 04:58:12 -0700 (Thu, 04 May 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/configure.in - new dnssec-tools-config.h generated - check for arpa headers - check for mistyped ssl args ------------------------------------------------------------------------ r1520 | hardaker | 2006-05-03 16:12:32 -0700 (Wed, 03 May 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/INSTALL remove Tk requirement since we now need features not available currently in the Tk interface to QWizard ------------------------------------------------------------------------ r1519 | tewok | 2006-05-03 14:25:02 -0700 (Wed, 03 May 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO M /trunk/dnssec-tools/tools/scripts/README Added entries for rollctl. ------------------------------------------------------------------------ r1518 | tewok | 2006-05-03 14:20:44 -0700 (Wed, 03 May 2006) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/rollctl Control program for the roll-over daemon. ------------------------------------------------------------------------ r1517 | tewok | 2006-05-02 20:10:52 -0700 (Tue, 02 May 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Renamed *_qproc() to *_cmdint(). Modified pid sanitisation method. Added some error checking to find unix_getpid() error returns. Close an open log file when opening up a new log. ------------------------------------------------------------------------ r1516 | tewok | 2006-05-01 19:00:09 -0700 (Mon, 01 May 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Sorted exported symbols. Deleted an obsolete message. ------------------------------------------------------------------------ r1515 | wgriffin | 2006-04-27 09:24:21 -0700 (Thu, 27 Apr 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval M /trunk/dnssec-tools/lib/libval/.cvsignore M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c M /trunk/dnssec-tools/lib/libval/val_assertion.c M /trunk/dnssec-tools/lib/libval/val_cache.c M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c M /trunk/dnssec-tools/lib/libval/val_log.c M /trunk/dnssec-tools/lib/libval/val_parse.c M /trunk/dnssec-tools/lib/libval/val_policy.c M /trunk/dnssec-tools/lib/libval/val_policy.h M /trunk/dnssec-tools/lib/libval/val_resquery.c M /trunk/dnssec-tools/lib/libval/val_support.c M /trunk/dnssec-tools/lib/libval/val_verify.c M /trunk/dnssec-tools/lib/libval/val_x_query.c M /trunk/dnssec-tools/lib/libval/validator.h Removed all requirements on arpa/nameser_compat.h. Also added a compiler directive to enable compilation on cygwin. ------------------------------------------------------------------------ r1514 | wgriffin | 2006-04-27 09:22:39 -0700 (Thu, 27 Apr 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/libsres M /trunk/dnssec-tools/lib/libsres/.cvsignore M /trunk/dnssec-tools/lib/libsres/include/arpa/nameser.h M /trunk/dnssec-tools/lib/libsres/include/resolv.h M /trunk/dnssec-tools/lib/libsres/ns_name.c M /trunk/dnssec-tools/lib/libsres/ns_netint.c M /trunk/dnssec-tools/lib/libsres/ns_parse.c M /trunk/dnssec-tools/lib/libsres/ns_print.c M /trunk/dnssec-tools/lib/libsres/ns_samedomain.c M /trunk/dnssec-tools/lib/libsres/ns_ttl.c M /trunk/dnssec-tools/lib/libsres/res_comp.c M /trunk/dnssec-tools/lib/libsres/res_debug.c M /trunk/dnssec-tools/lib/libsres/res_io_manager.c M /trunk/dnssec-tools/lib/libsres/res_mkquery.c M /trunk/dnssec-tools/lib/libsres/res_query.c M /trunk/dnssec-tools/lib/libsres/res_support.c M /trunk/dnssec-tools/lib/libsres/res_tsig.c M /trunk/dnssec-tools/lib/libsres/resolver.h Removed all requirements on arpa/nameser_compat.h, except for the HEADER struct which is now in a local arpa/header.h include. Also added a compiler definition to enable compilation on cygwin. ------------------------------------------------------------------------ r1513 | wgriffin | 2006-04-27 09:21:04 -0700 (Thu, 27 Apr 2006) | 3 lines Changed paths: A /trunk/dnssec-tools/lib/libsres/include/arpa/header.h the HEADER struct from nameser_compat.h. This is all that is needed from that file now. ------------------------------------------------------------------------ r1512 | tewok | 2006-04-27 08:55:15 -0700 (Thu, 27 Apr 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added four interfaces for sending commands to the roll-over daemon. ------------------------------------------------------------------------ r1511 | hserus | 2006-04-26 14:02:08 -0700 (Wed, 26 Apr 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.c Create an assertion even if there is some DNS error and store this value as the assertion status. Generate correct val_status_t values for the result status ------------------------------------------------------------------------ r1510 | hserus | 2006-04-26 13:59:14 -0700 (Wed, 26 Apr 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_x_query.c Since assertions are now created even when no data is returned, check for NULL ------------------------------------------------------------------------ r1509 | hserus | 2006-04-26 13:57:52 -0700 (Wed, 26 Apr 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_log.c Always extract status from the assertion chain; never from the query chain ------------------------------------------------------------------------ r1508 | hserus | 2006-04-26 13:55:27 -0700 (Wed, 26 Apr 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/validator.h Begin to align data structure definitions with description given in draft-hayatnagarkar-dnssec-validator-api-00 ------------------------------------------------------------------------ r1507 | hserus | 2006-04-26 13:50:29 -0700 (Wed, 26 Apr 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/gethost.c Validation status is now returned in a variable of type val_status_t ------------------------------------------------------------------------ r1506 | hserus | 2006-04-26 13:46:39 -0700 (Wed, 26 Apr 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c Use new error value definitions from val_errors.h ------------------------------------------------------------------------ r1505 | hserus | 2006-04-26 13:45:17 -0700 (Wed, 26 Apr 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_errors.h Added placeholder for DNS errors ------------------------------------------------------------------------ r1504 | hardaker | 2006-04-26 13:39:06 -0700 (Wed, 26 Apr 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts display results side by side ------------------------------------------------------------------------ r1503 | hardaker | 2006-04-25 14:43:08 -0700 (Tue, 25 Apr 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts don't display double -h flag ------------------------------------------------------------------------ r1502 | hardaker | 2006-04-25 09:50:50 -0700 (Tue, 25 Apr 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm M /trunk/dnssec-tools/tools/donuts/donuts more gui support ------------------------------------------------------------------------ r1501 | tewok | 2006-04-24 20:08:11 -0700 (Mon, 24 Apr 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner When -forceroll is given, the zskpub's gensec field is updated to the current time. ------------------------------------------------------------------------ r1500 | tewok | 2006-04-24 18:59:27 -0700 (Mon, 24 Apr 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added several logging interfaces: rollmgr_log(), rollmgr_logfile(), and rollmgr_loglevel(). ------------------------------------------------------------------------ r1499 | hardaker | 2006-04-24 13:27:25 -0700 (Mon, 24 Apr 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/MANIFEST added dnssec tests ------------------------------------------------------------------------ r1498 | hardaker | 2006-04-21 21:12:54 -0700 (Fri, 21 Apr 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Makefile.PL M /trunk/dnssec-tools/tools/donuts/Rule.pm M /trunk/dnssec-tools/tools/donuts/donuts - preliminary setup and functioning for a --show-gui option with a browsable error database. not where I want it yet, but a good checkin spot. - remove requirement for Text::Wrap ------------------------------------------------------------------------ r1497 | tewok | 2006-04-21 19:57:25 -0700 (Fri, 21 Apr 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Fix how keyrec_settime() handles key keyrecs. ------------------------------------------------------------------------ r1496 | tewok | 2006-04-21 19:53:36 -0700 (Fri, 21 Apr 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added some logging constants and functions. ------------------------------------------------------------------------ r1495 | tewok | 2006-04-20 08:03:41 -0700 (Thu, 20 Apr 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/README Removed some pod constructs from a plain text file. ------------------------------------------------------------------------ r1494 | tewok | 2006-04-20 08:02:00 -0700 (Thu, 20 Apr 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Added some roll-over options. ------------------------------------------------------------------------ r1493 | hardaker | 2006-04-19 21:31:33 -0700 (Wed, 19 Apr 2006) | 2 lines Changed paths: D /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/test.pl shouldn't have been checked in ------------------------------------------------------------------------ r1492 | hardaker | 2006-04-19 17:32:33 -0700 (Wed, 19 Apr 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm fix a few typos and bootstrap some of the module functions doing a require within an eval ------------------------------------------------------------------------ r1491 | hardaker | 2006-04-19 17:29:41 -0700 (Wed, 19 Apr 2006) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rr-dnssec.t Added basic dnssec tests ------------------------------------------------------------------------ r1490 | tewok | 2006-04-19 11:29:56 -0700 (Wed, 19 Apr 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Removed some debugging lines. ------------------------------------------------------------------------ r1489 | tewok | 2006-04-19 08:39:45 -0700 (Wed, 19 Apr 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Added rollrec_lock() and rollrec_unlock(). ------------------------------------------------------------------------ r1488 | tewok | 2006-04-19 07:14:26 -0700 (Wed, 19 Apr 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Added rollrec_settime(). Added skip records. ------------------------------------------------------------------------ r1487 | tewok | 2006-04-18 19:48:03 -0700 (Tue, 18 Apr 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added an interface to get the name server to reload a zone. ------------------------------------------------------------------------ r1486 | tewok | 2006-04-17 13:41:45 -0700 (Mon, 17 Apr 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL Added rrchk and rrinit. ------------------------------------------------------------------------ r1485 | tewok | 2006-04-17 13:40:55 -0700 (Mon, 17 Apr 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO M /trunk/dnssec-tools/tools/scripts/README A /trunk/dnssec-tools/tools/scripts/rrchk Added rrchk, which checks the validity of a rollrec file. ------------------------------------------------------------------------ r1484 | tewok | 2006-04-17 13:28:38 -0700 (Mon, 17 Apr 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO M /trunk/dnssec-tools/tools/scripts/README A /trunk/dnssec-tools/tools/scripts/rrinit Added the rrinit command to create rollrec files and records for use by the roll-over manager. ------------------------------------------------------------------------ r1483 | tewok | 2006-04-14 20:39:18 -0700 (Fri, 14 Apr 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtinitconf Added rollerd config fields. ------------------------------------------------------------------------ r1482 | tewok | 2006-04-14 20:10:59 -0700 (Fri, 14 Apr 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Added checks for rollerd values. ------------------------------------------------------------------------ r1481 | tewok | 2006-04-14 19:32:27 -0700 (Fri, 14 Apr 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Added a few new defaults. ------------------------------------------------------------------------ r1480 | tewok | 2006-04-14 15:46:43 -0700 (Fri, 14 Apr 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Deleted an errant addition of a zsklife. ------------------------------------------------------------------------ r1479 | ahayatnagarkar | 2006-04-14 08:11:15 -0700 (Fri, 14 Apr 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt M /trunk/dnssec-tools/apps/sendmail/spfmilter-0.97_dnssec_patch.txt M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt Added -L/usr/local/lib to enable the configure script to find libsres on FreeBSD systems ------------------------------------------------------------------------ r1478 | tewok | 2006-04-13 19:38:10 -0700 (Thu, 13 Apr 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner On -forceroll, copy the published ZSK's zsklife keyrec field to the new ZSK's keyrec. Fixed a few typos. ------------------------------------------------------------------------ r1477 | ahayatnagarkar | 2006-04-13 14:07:19 -0700 (Thu, 13 Apr 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/gethost.c Commented out gethostbyname_r() and gethostbyname2_r() for now since they are not supported by FreeBSD ------------------------------------------------------------------------ r1476 | ahayatnagarkar | 2006-04-13 12:59:12 -0700 (Thu, 13 Apr 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/validator.h Added function prototypes for val_gethostbyaddr(), val_gethostbyaddr_r() and val_getnameinfo(). These functions are present in the validator draft, but are not implemented yet. ------------------------------------------------------------------------ r1475 | ahayatnagarkar | 2006-04-13 12:34:26 -0700 (Thu, 13 Apr 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/thunderbird/install.rdf Updated the maximum version number of Thunderbird that we support ------------------------------------------------------------------------ r1474 | ahayatnagarkar | 2006-04-13 10:53:40 -0700 (Thu, 13 Apr 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.4_dnssec_patch.txt Changed VALIDATE_SUCCESS to VAL_SUCCESS ------------------------------------------------------------------------ r1473 | tewok | 2006-04-12 21:37:52 -0700 (Wed, 12 Apr 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm Use a better rollerd logfile. ------------------------------------------------------------------------ r1472 | tewok | 2006-04-12 21:21:51 -0700 (Wed, 12 Apr 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm Added some entries for the rollover manager. ------------------------------------------------------------------------ r1471 | tewok | 2006-04-12 21:04:40 -0700 (Wed, 12 Apr 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Added some new entries used by the rollover manager. ------------------------------------------------------------------------ r1470 | tewok | 2006-04-12 21:03:29 -0700 (Wed, 12 Apr 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/README Added a few missing entries. ------------------------------------------------------------------------ r1468 | hserus | 2006-04-11 12:26:14 -0700 (Tue, 11 Apr 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_support.c Renamed definition names to align with descriptions given in draft-hayatnagarkar-dnsext-validator-api-00 ------------------------------------------------------------------------ r1467 | hserus | 2006-04-11 12:25:41 -0700 (Tue, 11 Apr 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c M /trunk/dnssec-tools/lib/libval/val_resquery.c M /trunk/dnssec-tools/lib/libval/val_x_query.c M /trunk/dnssec-tools/lib/libval/validator.h Renamed function and definition names to align with descriptions given in draft-hayatnagarkar-dnsext-validator-api-00 ------------------------------------------------------------------------ r1466 | hserus | 2006-04-11 12:24:57 -0700 (Tue, 11 Apr 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_policy.c Add logic to recurse from root if no default name servers are available ------------------------------------------------------------------------ r1465 | hserus | 2006-04-11 12:24:33 -0700 (Tue, 11 Apr 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_log.c Renamed functions to align with descriptions given in draft-hayatnagarkar-dnsext-validator-api-00 Added new function to display validator result values ------------------------------------------------------------------------ r1464 | hserus | 2006-04-11 12:24:08 -0700 (Tue, 11 Apr 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_errors.h Renamed error code names to align with descriptions given in draft-hayatnagarkar-dnsext-validator-api-00 ------------------------------------------------------------------------ r1463 | hserus | 2006-04-11 12:23:39 -0700 (Tue, 11 Apr 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_cache.c Allow recursion from root ------------------------------------------------------------------------ r1462 | hserus | 2006-04-11 12:23:07 -0700 (Tue, 11 Apr 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.h M /trunk/dnssec-tools/lib/libval/val_context.c M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c M /trunk/dnssec-tools/lib/libval/val_resquery.h M /trunk/dnssec-tools/lib/libval/val_verify.h Renamed functions to align with descriptions given in draft-hayatnagarkar-dnsext-validator-api-00 ------------------------------------------------------------------------ r1461 | hserus | 2006-04-11 12:22:00 -0700 (Tue, 11 Apr 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_verify.c Since there no longer is any separate field in the val_result_chain structure to track "trust" status, add the ability to store this information in the status field itself. ------------------------------------------------------------------------ r1460 | hserus | 2006-04-11 12:21:27 -0700 (Tue, 11 Apr 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.c Renamed definition and function names to align somewhat with the description given in draft-hayatnagarkar-dnsext-validator-api-00 Since there no longer is any separate field in the val_result_chain structure to track "trust" status, add the ability to store this information in the status field itself. ------------------------------------------------------------------------ r1459 | hardaker | 2006-04-10 06:44:34 -0700 (Mon, 10 Apr 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/META.yml version number change; CPAN didn't take the 3 digit number properly ------------------------------------------------------------------------ r1458 | hardaker | 2006-04-08 21:29:10 -0700 (Sat, 08 Apr 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Changes M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/META.yml fixed a bug with the latest Net::DNS::SEC API and published to 0.6.1 ------------------------------------------------------------------------ r1457 | hardaker | 2006-04-07 06:48:54 -0700 (Fri, 07 Apr 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/Makefile.in M /trunk/dnssec-tools/lib/libval/doc/Makefile.in Various misc fixes for dependency issues ------------------------------------------------------------------------ r1456 | hardaker | 2006-04-07 06:47:58 -0700 (Fri, 07 Apr 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/firefox-dnssec-rpm.patch updated firefox patch ------------------------------------------------------------------------ r1455 | hardaker | 2006-04-07 06:45:50 -0700 (Fri, 07 Apr 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/Makefile.top doc install mode ------------------------------------------------------------------------ r1454 | lfoster | 2006-04-05 13:03:42 -0700 (Wed, 05 Apr 2006) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/TrustMan Initial cut at trust anchor management tools. basically just the framework. ------------------------------------------------------------------------ r1453 | tewok | 2006-04-04 15:51:03 -0700 (Tue, 04 Apr 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added the -usepub to use the published key to sign the zone. Clarified one or two messages. ------------------------------------------------------------------------ r1452 | hardaker | 2006-03-29 12:51:25 -0800 (Wed, 29 Mar 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/dist/dnssec-tools.spec add perl module provides list ------------------------------------------------------------------------ r1449 | tewok | 2006-03-20 11:01:31 -0800 (Mon, 20 Mar 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Deleted unuswed -life option. Added -k-enddate option to display calculated key end-date. Removed key lifespan from long output. Added key end-date to long output. ------------------------------------------------------------------------ r1446 | tewok | 2006-03-17 19:33:36 -0800 (Fri, 17 Mar 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Adjusted usage message to include the new options. ------------------------------------------------------------------------ r1445 | tewok | 2006-03-17 19:17:30 -0800 (Fri, 17 Mar 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added zone-specific fields so that more specific output can be given. ------------------------------------------------------------------------ r1444 | tewok | 2006-03-17 07:21:07 -0800 (Fri, 17 Mar 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Rename the key-specific options. ------------------------------------------------------------------------ r1443 | tewok | 2006-03-16 18:59:57 -0800 (Thu, 16 Mar 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added key-specific fields so that more specific output can be given. ------------------------------------------------------------------------ r1441 | tewok | 2006-03-14 14:19:16 -0800 (Tue, 14 Mar 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf New method for building output for keys. This should make it easier to add new output formats and change existing formats, if needed. ------------------------------------------------------------------------ r1439 | tewok | 2006-03-13 16:20:19 -0800 (Mon, 13 Mar 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf New method for building output for zones. This should make it easier to add new output formats and change existing formats, if needed. ------------------------------------------------------------------------ r1438 | tewok | 2006-03-13 15:19:14 -0800 (Mon, 13 Mar 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf *Really* disallow simultaneous -long and -terse. ------------------------------------------------------------------------ r1437 | tewok | 2006-03-13 15:16:13 -0800 (Mon, 13 Mar 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Fixed the copyright dates. Rearranged a little of the option processing code. Disallowed simultaneous specification of -long and -terse. ------------------------------------------------------------------------ r1432 | tewok | 2006-03-06 11:24:47 -0800 (Mon, 06 Mar 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL Added several more scripts for installation. ------------------------------------------------------------------------ r1431 | tewok | 2006-03-06 10:44:35 -0800 (Mon, 06 Mar 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Reworked the message calls. - More consistency in when messages are given for different options. - '+'/'-' prefix is given on valid/invalid for -verbose. ------------------------------------------------------------------------ r1430 | tewok | 2006-03-03 09:52:38 -0800 (Fri, 03 Mar 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Deleted a debug message. ------------------------------------------------------------------------ r1429 | tewok | 2006-03-03 09:50:54 -0800 (Fri, 03 Mar 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Added -expert. Added checks for KSK lifespan and ZSK lifespan. Fixed a couple fields for key lengths. ------------------------------------------------------------------------ r1428 | tewok | 2006-03-02 14:37:23 -0800 (Thu, 02 Mar 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec/README Fixed a command name. ------------------------------------------------------------------------ r1427 | tewok | 2006-03-02 14:22:06 -0800 (Thu, 02 Mar 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm Added entries for lifespan-max and lifespan-min. ------------------------------------------------------------------------ r1426 | tewok | 2006-03-01 14:54:48 -0800 (Wed, 01 Mar 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Added the -summary option. ------------------------------------------------------------------------ r1425 | tewok | 2006-03-01 14:40:08 -0800 (Wed, 01 Mar 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Be using goodly and properish grammer in that their final erruh massage. ------------------------------------------------------------------------ r1424 | tewok | 2006-03-01 14:37:32 -0800 (Wed, 01 Mar 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO M /trunk/dnssec-tools/tools/scripts/README Added entries for dtinitconf. Renamed dt_defaults to dtdefs. ------------------------------------------------------------------------ r1423 | tewok | 2006-03-01 14:35:32 -0800 (Wed, 01 Mar 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO M /trunk/dnssec-tools/tools/scripts/README Renamed confchk to dtconfchk. ------------------------------------------------------------------------ r1422 | tewok | 2006-03-01 14:34:34 -0800 (Wed, 01 Mar 2006) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/dtconfchk Added checks for config fields: archivedir entropy_msg savekeys usegui ------------------------------------------------------------------------ r1421 | tewok | 2006-03-01 14:32:51 -0800 (Wed, 01 Mar 2006) | 3 lines Changed paths: D /trunk/dnssec-tools/tools/scripts/confchk A /trunk/dnssec-tools/tools/scripts/dtconfchk Renaming confchk to dtconfchk. ------------------------------------------------------------------------ r1420 | tewok | 2006-03-01 12:14:52 -0800 (Wed, 01 Mar 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm M /trunk/dnssec-tools/tools/scripts/dtinitconf M /trunk/dnssec-tools/tools/scripts/genkrf M /trunk/dnssec-tools/tools/scripts/zonesigner Use "lifespan" instead of "lifetime". ------------------------------------------------------------------------ r1419 | tewok | 2006-03-01 10:53:36 -0800 (Wed, 01 Mar 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/confchk Moved file checks into their own little routine. ------------------------------------------------------------------------ r1418 | tewok | 2006-03-01 10:49:54 -0800 (Wed, 01 Mar 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/confchk Added a check for the viewimage field. ------------------------------------------------------------------------ r1417 | tewok | 2006-03-01 10:30:01 -0800 (Wed, 01 Mar 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/confchk Added some subheaders to the pod. Updated the copyright dates. ------------------------------------------------------------------------ r1416 | tewok | 2006-03-01 08:29:56 -0800 (Wed, 01 Mar 2006) | 4 lines Changed paths: A /trunk/dnssec-tools/tools/etc/dnssec/README This file describes the steps to take in adding a new field to the DNSSEC-Tools configuration file. ------------------------------------------------------------------------ r1415 | tewok | 2006-02-28 10:39:11 -0800 (Tue, 28 Feb 2006) | 5 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/dtinitconf Script to create a new DNSSEC-Tools configuration file. This allows for completely automated, default-driven files, completely user-specified files, and all points in between. ------------------------------------------------------------------------ r1414 | tewok | 2006-02-27 20:37:46 -0800 (Mon, 27 Feb 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Deleted spaces from a couple of pod headers. ------------------------------------------------------------------------ r1413 | tewok | 2006-02-27 20:36:10 -0800 (Mon, 27 Feb 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm Added getconffile(). ------------------------------------------------------------------------ r1412 | tewok | 2006-02-27 20:32:54 -0800 (Mon, 27 Feb 2006) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/modules/defaults.pm Added dnssec_tools_defnames() to return the default names. Sorted the options hash. Added several additional options: - entropy_msg - savekeys - usegui ------------------------------------------------------------------------ r1411 | tewok | 2006-02-27 08:03:40 -0800 (Mon, 27 Feb 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added -life to give a key's lifespan. ------------------------------------------------------------------------ r1410 | tewok | 2006-02-27 07:13:37 -0800 (Mon, 27 Feb 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/genkrf Fixed arguments to a couple dnssec_tools_defaults() calls. ------------------------------------------------------------------------ r1409 | hserus | 2006-02-26 18:13:27 -0800 (Sun, 26 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml Last change for -00 ------------------------------------------------------------------------ r1408 | hserus | 2006-02-26 17:37:39 -0800 (Sun, 26 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml Typo fixes and some reorganization ------------------------------------------------------------------------ r1407 | ahayatnagarkar | 2006-02-26 17:26:46 -0800 (Sun, 26 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml Some wording changes. ------------------------------------------------------------------------ r1406 | ahayatnagarkar | 2006-02-26 16:32:06 -0800 (Sun, 26 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml Changed val_free_addrinfo to val_freeaddrinfo. Some other minor changes. ------------------------------------------------------------------------ r1405 | hserus | 2006-02-26 00:03:03 -0800 (Sun, 26 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml More review, more changes. ------------------------------------------------------------------------ r1404 | hserus | 2006-02-25 22:43:39 -0800 (Sat, 25 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml Grammar, content fixes ------------------------------------------------------------------------ r1403 | ahayatnagarkar | 2006-02-25 10:24:44 -0800 (Sat, 25 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml Use the word "function" instead of "interface" or "method" ------------------------------------------------------------------------ r1402 | ahayatnagarkar | 2006-02-25 10:20:02 -0800 (Sat, 25 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml Some grammatical edits. Added a few references. ------------------------------------------------------------------------ r1401 | ahayatnagarkar | 2006-02-25 07:11:36 -0800 (Sat, 25 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml Updated sentences based on Wayne's feedback ------------------------------------------------------------------------ r1400 | tewok | 2006-02-24 15:04:11 -0800 (Fri, 24 Feb 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm Stress that key life-time is *only* a matter of time between roll-overs and that keys don't have any other sort of lifespan. ------------------------------------------------------------------------ r1399 | hserus | 2006-02-24 15:03:43 -0800 (Fri, 24 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml Added the error codes and return values section ------------------------------------------------------------------------ r1398 | tewok | 2006-02-24 14:57:31 -0800 (Fri, 24 Feb 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/genkrf Modified pod to fit current option set and reorganized it a bit. ------------------------------------------------------------------------ r1397 | ahayatnagarkar | 2006-02-24 14:45:17 -0800 (Fri, 24 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml Changed SPARTA Inc. to SPARTA, Inc. ------------------------------------------------------------------------ r1396 | ahayatnagarkar | 2006-02-24 14:36:32 -0800 (Fri, 24 Feb 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml Changed Security Considerations to mention LOCAL_ANSWER instead of val_istrusted(), since val_istrusted() was removed. Misc. changes to words, capitalizations, indentation etc. ------------------------------------------------------------------------ r1395 | hserus | 2006-02-24 14:17:54 -0800 (Fri, 24 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml More updates as discussed ------------------------------------------------------------------------ r1394 | tewok | 2006-02-24 14:11:16 -0800 (Fri, 24 Feb 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/genkrf Changed from using GetOptions() to using DNSSEC-Tools' tooloptions(). Added the -ksklife, -zsklife, and -verbose options. ------------------------------------------------------------------------ r1393 | ahayatnagarkar | 2006-02-24 11:37:51 -0800 (Fri, 24 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml Typo ------------------------------------------------------------------------ r1392 | ahayatnagarkar | 2006-02-24 11:37:14 -0800 (Fri, 24 Feb 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml Changed names of Context Management API functions to val_*. Added text to the Security Considerations and Acknowledgments sections. ------------------------------------------------------------------------ r1391 | tewok | 2006-02-24 10:48:48 -0800 (Fri, 24 Feb 2006) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/dtdefs New script to display all the DNSSEC-Tools defaults. ------------------------------------------------------------------------ r1390 | tewok | 2006-02-24 10:04:21 -0800 (Fri, 24 Feb 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/genkrf Moved usage() to the end of the routines. ------------------------------------------------------------------------ r1389 | tewok | 2006-02-24 09:50:55 -0800 (Fri, 24 Feb 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/genkrf Obviated version 1.6 and 1.7, which were built on an old version. To force this change, a few new references were added to the pod reference section. ------------------------------------------------------------------------ r1388 | ahayatnagarkar | 2006-02-24 09:28:54 -0800 (Fri, 24 Feb 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml Expanded the abstract. Removed val_gethostbyname2* functions. Added descriptions for val_gethostbyaddr* and val_getnameinfo functions. ------------------------------------------------------------------------ r1387 | hserus | 2006-02-24 08:30:12 -0800 (Fri, 24 Feb 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml s/validation api/validator api Removed ' ' for parameters to functions Added some text to describe the policy labels added author addresses ------------------------------------------------------------------------ r1386 | hserus | 2006-02-24 00:23:13 -0800 (Fri, 24 Feb 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml major re-write of the low-level api -- exposed data structures to allow more readability removed ietf from draft name since this is not a WG document Added a terminology section Still need to clarify the policy labels portion Haven't reviewed any of the above changes ------------------------------------------------------------------------ r1385 | tewok | 2006-02-23 21:13:36 -0800 (Thu, 23 Feb 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added -ksklife and -zsklife. Added use of defaults.pm. Fixed copyright dates. ------------------------------------------------------------------------ r1384 | tewok | 2006-02-23 20:47:42 -0800 (Thu, 23 Feb 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/tachk Some pod fixes to match up =overs to =backs. ------------------------------------------------------------------------ r1383 | tewok | 2006-02-23 20:25:08 -0800 (Thu, 23 Feb 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/genkrf Deleted some left-over debug prints. Added -krfile for output keyrec file. Added -random for random device. ------------------------------------------------------------------------ r1382 | tewok | 2006-02-23 19:59:39 -0800 (Thu, 23 Feb 2006) | 11 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/genkrf Modified option parsing to use tooloptions() to incorporate standard DNSSEC-Tools options. Fixed copyright dates. Implemented several new options: -ksklife, -zsklife -ksklength, -zsklength -verbose Moved options parsing into its own routine. Updated the pod to account for these changes. ------------------------------------------------------------------------ r1381 | hardaker | 2006-02-23 12:42:52 -0800 (Thu, 23 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/firefox.spec change the release number ------------------------------------------------------------------------ r1380 | tewok | 2006-02-23 10:40:56 -0800 (Thu, 23 Feb 2006) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/modules/defaults.pm New module to hold default values for DNSSEC-Tools. ------------------------------------------------------------------------ r1379 | tewok | 2006-02-23 07:37:44 -0800 (Thu, 23 Feb 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added support for -ksklife and -zsklife. Split out a complicated if conditional so it is a bit clearer. ------------------------------------------------------------------------ r1378 | tewok | 2006-02-23 07:32:15 -0800 (Thu, 23 Feb 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Added -ksklife and -zsklife. Made a few capitalization fixes. ------------------------------------------------------------------------ r1377 | ahayatnagarkar | 2006-02-23 04:56:16 -0800 (Thu, 23 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml Added author-addresses, moved each api sub-section up one level. ------------------------------------------------------------------------ r1376 | tewok | 2006-02-22 20:47:29 -0800 (Wed, 22 Feb 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm Added entries for ksklife and zsklife, which indicate the time between key roll-overs. ------------------------------------------------------------------------ r1375 | hardaker | 2006-02-22 07:43:22 -0800 (Wed, 22 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/dist/dnssec-tools.spec require autoconf213 for building ------------------------------------------------------------------------ r1374 | hardaker | 2006-02-22 07:41:37 -0800 (Wed, 22 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/Makefile.in fixed typo creating man1dir twice instead of man3dir ------------------------------------------------------------------------ r1373 | hardaker | 2006-02-22 07:39:37 -0800 (Wed, 22 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/Makefile.in don't do a decend into libval/docs since libval already does ------------------------------------------------------------------------ r1372 | hardaker | 2006-02-22 07:35:47 -0800 (Wed, 22 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/dist/dnssec-tools.spec fixed perl version specific paths ------------------------------------------------------------------------ r1371 | ahayatnagarkar | 2006-02-21 08:25:17 -0800 (Tue, 21 Feb 2006) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/libval/doc/validator_api.xml The current version of the Validator API draft in XML format. ------------------------------------------------------------------------ r1370 | tewok | 2006-02-18 08:01:14 -0800 (Sat, 18 Feb 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Moved the entropy warning to the beginning of the program. (After the option processing, though.) Forced output flushing on writes so that messages will appear straight away. ------------------------------------------------------------------------ r1369 | tewok | 2006-02-17 19:50:36 -0800 (Fri, 17 Feb 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Moved the definition of bindcheck() into the conf.pm module. ------------------------------------------------------------------------ r1368 | tewok | 2006-02-17 19:47:57 -0800 (Fri, 17 Feb 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm Added an interface to check for the existence and executability of BIND programs. ------------------------------------------------------------------------ r1367 | tewok | 2006-02-17 19:14:50 -0800 (Fri, 17 Feb 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Check for existence of required BIND commands. ------------------------------------------------------------------------ r1366 | hardaker | 2006-02-17 10:26:40 -0800 (Fri, 17 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/INSTALL mention that bind is needed ------------------------------------------------------------------------ r1354 | hardaker | 2006-02-10 15:50:11 -0800 (Fri, 10 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/firefox.spec require dnssec-tools 0.9 ------------------------------------------------------------------------ r1353 | hardaker | 2006-02-10 15:44:03 -0800 (Fri, 10 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm documentation update ------------------------------------------------------------------------ r1352 | hardaker | 2006-02-10 15:30:23 -0800 (Fri, 10 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts reference the Rule documentation in a more understandable way ------------------------------------------------------------------------ r1351 | ahayatnagarkar | 2006-02-09 20:14:27 -0800 (Thu, 09 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.4_dnssec_patch.txt Use val_istrusted() instead of comparing the returned validation status from val_gethostbyname() with VALIDATE_SUCCESS ------------------------------------------------------------------------ r1350 | ahayatnagarkar | 2006-02-09 20:05:41 -0800 (Thu, 09 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c Display a Result of OK if validation was successful ------------------------------------------------------------------------ r1349 | ahayatnagarkar | 2006-02-09 19:42:53 -0800 (Thu, 09 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/spfmilter-0.97_dnssec_patch.txt Fixed a switch statement ------------------------------------------------------------------------ r1348 | hardaker | 2006-02-09 14:58:11 -0800 (Thu, 09 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/Makefile.top use libtool versioning and update the shared library version numbers. ------------------------------------------------------------------------ r1347 | hardaker | 2006-02-09 14:44:16 -0800 (Thu, 09 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/getdnskeys A new function to output a key and also include keys we couldn't verify but know about ------------------------------------------------------------------------ r1346 | hardaker | 2006-02-09 14:43:18 -0800 (Thu, 09 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper argument clean-up ------------------------------------------------------------------------ r1345 | hardaker | 2006-02-09 14:38:10 -0800 (Thu, 09 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow argument cleanup ------------------------------------------------------------------------ r1344 | hardaker | 2006-02-09 14:37:33 -0800 (Thu, 09 Feb 2006) | 2 lines Changed paths: A /trunk/dnssec-tools/dist A /trunk/dnssec-tools/dist/dnssec-tools.spec initial pass at an rpm .spec file ------------------------------------------------------------------------ r1343 | hardaker | 2006-02-09 13:49:32 -0800 (Thu, 09 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/Makefile.in M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in perl build arguments ------------------------------------------------------------------------ r1342 | hardaker | 2006-02-09 13:26:29 -0800 (Thu, 09 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/Makefile.in M /trunk/dnssec-tools/lib/libsres/doc/Makefile.in M /trunk/dnssec-tools/lib/libval/Makefile.in M /trunk/dnssec-tools/lib/libval/bin/Makefile.in M /trunk/dnssec-tools/lib/libval/doc/Makefile.in make various paths ------------------------------------------------------------------------ r1341 | ahayatnagarkar | 2006-02-09 08:53:21 -0800 (Thu, 09 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.4_dnssec_patch.txt Remove unneeded compilation flags ------------------------------------------------------------------------ r1340 | ahayatnagarkar | 2006-02-09 08:52:52 -0800 (Thu, 09 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt Updated the patch to use the latest validator API ------------------------------------------------------------------------ r1339 | ahayatnagarkar | 2006-02-09 08:51:04 -0800 (Thu, 09 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.4_dnssec_patch.txt Write val_query results into proper buffer ------------------------------------------------------------------------ r1338 | ahayatnagarkar | 2006-02-09 07:38:41 -0800 (Thu, 09 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt Updated the patch to use the latest validator API ------------------------------------------------------------------------ r1337 | ahayatnagarkar | 2006-02-08 18:55:37 -0800 (Wed, 08 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.4_dnssec_patch.txt M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt Updated the patch to use the latest validator API ------------------------------------------------------------------------ r1336 | ahayatnagarkar | 2006-02-08 11:17:16 -0800 (Wed, 08 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/Makefile.in libtoolize the installation rule for 'validate' ------------------------------------------------------------------------ r1335 | ahayatnagarkar | 2006-02-08 11:00:31 -0800 (Wed, 08 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/Makefile.bot Added a rule to create section 1 man pages from pod files ------------------------------------------------------------------------ r1334 | ahayatnagarkar | 2006-02-08 10:59:32 -0800 (Wed, 08 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/Makefile.in Added rule to create and install man page for the 'validate' tool ------------------------------------------------------------------------ r1333 | ahayatnagarkar | 2006-02-08 10:58:49 -0800 (Wed, 08 Feb 2006) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/libval/doc/validate.1 A /trunk/dnssec-tools/lib/libval/doc/validate.pod Man page for the 'validate' tool ------------------------------------------------------------------------ r1332 | ahayatnagarkar | 2006-02-08 10:05:40 -0800 (Wed, 08 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.3 M /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.pod M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.3 M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.pod Chanaged the year on the copyright notice from 2005 to 2006 ------------------------------------------------------------------------ r1331 | ahayatnagarkar | 2006-02-08 10:02:20 -0800 (Wed, 08 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/val_query.3 M /trunk/dnssec-tools/lib/libval/doc/val_query.pod Added description of the VAL_QUERY_MERGE_RRSETS flag ------------------------------------------------------------------------ r1330 | ahayatnagarkar | 2006-02-08 09:42:32 -0800 (Wed, 08 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/Makefile.in Modified the rule to install the 'validate' tool ------------------------------------------------------------------------ r1329 | ahayatnagarkar | 2006-02-08 09:28:15 -0800 (Wed, 08 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/Makefile.in Added a rule to install the 'validate' tool ------------------------------------------------------------------------ r1328 | ahayatnagarkar | 2006-02-08 09:27:16 -0800 (Wed, 08 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/Makefile.in Added drawvalmap to the list of tools ------------------------------------------------------------------------ r1327 | ahayatnagarkar | 2006-02-08 09:26:39 -0800 (Wed, 08 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/drawvalmap/Makefile.PL Add install rule for drawvalmap ------------------------------------------------------------------------ r1326 | ahayatnagarkar | 2006-02-08 09:25:01 -0800 (Wed, 08 Feb 2006) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/drawvalmap/drawvalmap D /trunk/dnssec-tools/tools/drawvalmap/drawvalmap.pl Moved the drawvalmap.pl script to drawvalmap ------------------------------------------------------------------------ r1325 | ahayatnagarkar | 2006-02-08 08:54:03 -0800 (Wed, 08 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/README Added descriptions of the 'validate' and 'drawvalmap' tools ------------------------------------------------------------------------ r1324 | ahayatnagarkar | 2006-02-08 08:44:30 -0800 (Wed, 08 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c Added a --merge option to allow the user to get a single merged response (This essentially sets the VAL_QUERY_MERGE_RRSETS flag while calling val_query()). ------------------------------------------------------------------------ r1323 | ahayatnagarkar | 2006-02-08 08:42:46 -0800 (Wed, 08 Feb 2006) | 9 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_x_query.c The val_query() function now handles the VAL_QUERY_MERGE_RRSETS flag. When this flag is set, the RRSETS are merged into a single response. The validation status of the response will be VALIDATE_SUCCESS only if each of the individual RRSETS have a validation status of VALIDATE_SUCCESS. Otherwise, the validation status will be one of the other error codes. Added a static function compose_merged_answer() to compose the merged response when the VAL_QUERY_MERGE_RRSETS flag is set. ------------------------------------------------------------------------ r1322 | ahayatnagarkar | 2006-02-08 08:40:00 -0800 (Wed, 08 Feb 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/validator.h Added the VAL_QUERY_MERGE_RRSETS flag ------------------------------------------------------------------------ r1321 | hardaker | 2006-02-06 15:26:21 -0800 (Mon, 06 Feb 2006) | 13 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/README A /trunk/dnssec-tools/apps/mozilla/firefox-dnssec-rpm.patch A /trunk/dnssec-tools/apps/mozilla/firefox.spec A new patch for firefox 1.5 and an RPM spec file for building a firefox RPM. - This is almost a complete rewrite from the mozilla patch since major parts of the current code base is fundamentally different from the last mozilla patch, as well as the libval code changed a lot as well. - thing still to do: - a better error page (it's not bad now, but...) - remove the dns locking since the dnssec apis are thread-safe & reentrant - make a better separation from older PR calls and new DNSSEC ones so we don't break other applications not being wise about error handling (evolution, ...) ------------------------------------------------------------------------ r1320 | ahayatnagarkar | 2006-01-26 12:56:46 -0800 (Thu, 26 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt Minor change to config.ac ------------------------------------------------------------------------ r1319 | ahayatnagarkar | 2006-01-17 10:44:31 -0800 (Tue, 17 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c Reverse the order of aliases in the hostent result to conform with the answer returned by gethostbyname() ------------------------------------------------------------------------ r1318 | ahayatnagarkar | 2006-01-17 09:06:47 -0800 (Tue, 17 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c M /trunk/dnssec-tools/lib/libval/val_log.c M /trunk/dnssec-tools/lib/libval/val_x_query.c M /trunk/dnssec-tools/lib/libval/validator.h Set the 'const' modifier for the struct val_context_t* parameter for certain functions ------------------------------------------------------------------------ r1317 | ahayatnagarkar | 2006-01-17 09:03:56 -0800 (Tue, 17 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.c Changed the type of parameters for val_isauthentic() and val_istrusted() to val_status_t ------------------------------------------------------------------------ r1316 | ahayatnagarkar | 2006-01-17 08:12:27 -0800 (Tue, 17 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/README Updated usage syntax of utilities ------------------------------------------------------------------------ r1315 | ahayatnagarkar | 2006-01-17 08:10:08 -0800 (Tue, 17 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc A /trunk/dnssec-tools/lib/libval/doc/.cvsignore Ignore Makefile ------------------------------------------------------------------------ r1314 | ahayatnagarkar | 2006-01-17 08:08:56 -0800 (Tue, 17 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c M /trunk/dnssec-tools/lib/libval/val_x_query.c M /trunk/dnssec-tools/lib/libval/validator.h Changed the type of the response field in val_response to 'unsigned char *' ------------------------------------------------------------------------ r1313 | ahayatnagarkar | 2006-01-17 07:57:50 -0800 (Tue, 17 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.3 M /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.pod Updated to describe the latest version of the val_getaddrinfo() function ------------------------------------------------------------------------ r1312 | ahayatnagarkar | 2006-01-17 07:57:19 -0800 (Tue, 17 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.3 M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.pod Minor wording change ------------------------------------------------------------------------ r1311 | tewok | 2006-01-16 18:43:12 -0800 (Mon, 16 Jan 2006) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Modified examples 1 - 3 to reflect current reality, as it relates to the new -intermediate option and the new command line arguments. ------------------------------------------------------------------------ r1310 | ahayatnagarkar | 2006-01-16 15:02:02 -0800 (Mon, 16 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/val_query.3 M /trunk/dnssec-tools/lib/libval/doc/val_query.pod Minor formatting change ------------------------------------------------------------------------ r1309 | ahayatnagarkar | 2006-01-16 15:01:37 -0800 (Mon, 16 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.3 M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.pod Updated to describe the latest versions of the val_gethostbyname*() functions ------------------------------------------------------------------------ r1308 | ahayatnagarkar | 2006-01-16 14:25:29 -0800 (Mon, 16 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/val_query.3 M /trunk/dnssec-tools/lib/libval/doc/val_query.pod Updated to describe the latest version of the val_query() function ------------------------------------------------------------------------ r1307 | ahayatnagarkar | 2006-01-16 13:26:57 -0800 (Mon, 16 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c M /trunk/dnssec-tools/lib/libval/val_x_query.c M /trunk/dnssec-tools/lib/libval/validator.h Changed the name of the validation_result field in the val_response structure to val_status ------------------------------------------------------------------------ r1306 | ahayatnagarkar | 2006-01-16 13:24:02 -0800 (Mon, 16 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/getaddr.c M /trunk/dnssec-tools/lib/libval/bin/gethost.c M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c Changed to use the new high-level validator API ------------------------------------------------------------------------ r1305 | ahayatnagarkar | 2006-01-16 12:49:16 -0800 (Mon, 16 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c Deleted the old val_x_gethostbyname function. Added functions val_gethostbyname2, val_gethostbyname_r and val_gethostbyname2_r. Changed the implementation to conform to the latest high-level validator API. Added comments. ------------------------------------------------------------------------ r1304 | ahayatnagarkar | 2006-01-16 12:47:15 -0800 (Mon, 16 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c Deleted the old val_getaddrinfo function. Changed the name of the val_x_getaddrinfo to val_getaddrinfo. Updated implementation to conform to the latest high-level validator API. The val_getaddrinfo function now returns a value of type struct val_addrinfo instead of struct addrinfo. Added Comments. ------------------------------------------------------------------------ r1303 | ahayatnagarkar | 2006-01-16 12:44:32 -0800 (Mon, 16 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_x_query.c Deleted the old val_query function. Changed name of the val_x_query function to val_query. Added comments. ------------------------------------------------------------------------ r1302 | ahayatnagarkar | 2006-01-16 12:42:59 -0800 (Mon, 16 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/validator.h Changed functions to conform to the current validator high-level API ------------------------------------------------------------------------ r1301 | ahayatnagarkar | 2006-01-16 09:14:54 -0800 (Mon, 16 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.c Added the val_istrusted function ------------------------------------------------------------------------ r1300 | hardaker | 2006-01-14 20:48:24 -0800 (Sat, 14 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm M /trunk/dnssec-tools/tools/donuts/donuts change copyright ------------------------------------------------------------------------ r1299 | hardaker | 2006-01-14 20:47:47 -0800 (Sat, 14 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt change test: -> , change copyright ------------------------------------------------------------------------ r1298 | hardaker | 2006-01-14 20:47:26 -0800 (Sat, 14 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt change test: -> , change copyright, change live: -> feature: live ------------------------------------------------------------------------ r1297 | hardaker | 2006-01-14 20:46:50 -0800 (Sat, 14 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt change test: -> and change copyright ------------------------------------------------------------------------ r1296 | hardaker | 2006-01-14 20:46:17 -0800 (Sat, 14 Jan 2006) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/donuts/rules/dns.errors.txt move DNS errors to a common file (most were in "recommendations" which wasn't correctly named) ------------------------------------------------------------------------ r1295 | hardaker | 2006-01-14 20:45:34 -0800 (Sat, 14 Jan 2006) | 7 lines Changed paths: A /trunk/dnssec-tools/tools/donuts/rules/check_nameservers.txt rules to check for nameserver compliance: - NS records pointing to CNAMEs are flagged. - a check_data feature set was added to check each NS record's live server to verify it's serving the data properly. Run with "--features check_data" to test (minor bugs still exist for certain record types). ------------------------------------------------------------------------ r1294 | hardaker | 2006-01-14 20:44:02 -0800 (Sat, 14 Jan 2006) | 8 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts - support for --features to replace --live - added feature: definition to rule definition - support for xml-ish code sections which works more cleanly than the test: version. "init" too - support for no-wrapping and no-indent of error outputs from rules - support compare_arrays function better - allow live queries to supply their own resolver object ------------------------------------------------------------------------ r1293 | hardaker | 2006-01-14 20:42:55 -0800 (Sat, 14 Jan 2006) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm - support for --features to replace --live - added feature: definition to rule definition - support for xml-ish code sections which works more cleanly than the test: version. "init" too - support for no-wrapping and no-indent of error outputs from rules ------------------------------------------------------------------------ r1286 | hardaker | 2006-01-09 15:58:23 -0800 (Mon, 09 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts document the --live switch ------------------------------------------------------------------------ r1284 | tewok | 2006-01-06 09:39:29 -0800 (Fri, 06 Jan 2006) | 8 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/rollover-manager First pass at a daemon to manage key roll-over. NOTE: This is known to be incomplete. I'm checking it in now because I'm going on vacation for a week and I want an off-site record of it Just In Case. It should not be considered complete and *definitely* should not be put into production. Feel free to play with it, but don't expect great things. ------------------------------------------------------------------------ r1283 | tewok | 2006-01-06 06:58:51 -0800 (Fri, 06 Jan 2006) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added a check to ensure that the zone file name, signed zone file name, and intermediate zone file name are all distinct. Fixed a condition for setting a keyrec field. Changed use of the "signedfile" keyrec field to "signedzone'. ------------------------------------------------------------------------ r1282 | tewok | 2006-01-05 18:22:47 -0800 (Thu, 05 Jan 2006) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Renamed the "signedfile" zone keyrec to "signedzone". Added "serial" as a zone keyrec field. ------------------------------------------------------------------------ r1281 | tewok | 2006-01-05 18:19:51 -0800 (Thu, 05 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm Added an entry giving the path to zonesigner. ------------------------------------------------------------------------ r1280 | hardaker | 2006-01-04 21:55:39 -0800 (Wed, 04 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone update (untested) to reflect changes in zonesigner arguments. ------------------------------------------------------------------------ r1279 | tewok | 2006-01-04 20:13:56 -0800 (Wed, 04 Jan 2006) | 11 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Modified command line arguments to be: zonesigner [options] [signed-zonefile] Added -intermediate option. Delete intermediate file if it wasn't specified by -intermediate. For the serial number, use (maximum(keyrec serial,zone serial) + 1) as the new serial number. ------------------------------------------------------------------------ r1278 | tewok | 2006-01-04 07:53:58 -0800 (Wed, 04 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Changed instances of "..krf" to ".krf" in keyrec filename creation. ------------------------------------------------------------------------ r1277 | ahayatnagarkar | 2006-01-03 14:54:46 -0800 (Tue, 03 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.3 M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.pod Added an explanatory note about the return value. ------------------------------------------------------------------------ r1276 | ahayatnagarkar | 2006-01-03 14:51:09 -0800 (Tue, 03 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c Return an answer even if validation status != VALIDATE_SUCCESS ------------------------------------------------------------------------ r1274 | ahayatnagarkar | 2006-01-03 09:07:53 -0800 (Tue, 03 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/Makefile.in corrected a typo ------------------------------------------------------------------------ r1273 | ahayatnagarkar | 2006-01-03 08:46:15 -0800 (Tue, 03 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_x_query.c Set the AD bit in the result if the validation status is authentic ------------------------------------------------------------------------ r1272 | ahayatnagarkar | 2006-01-03 08:45:40 -0800 (Tue, 03 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.c M /trunk/dnssec-tools/lib/libval/validator.h Added a new function val_isauthentic() that tells whether a given validation status represents an authenticated result from the validator ------------------------------------------------------------------------ r1271 | hardaker | 2006-01-02 21:59:45 -0800 (Mon, 02 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/getdnskeys print a security synopsis ------------------------------------------------------------------------ r1270 | hardaker | 2006-01-02 21:54:29 -0800 (Mon, 02 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL A /trunk/dnssec-tools/tools/scripts/getdnskeys added a new getdnskeys script to help manage trust keys for named.conf files ------------------------------------------------------------------------ r1269 | hardaker | 2006-01-02 12:25:26 -0800 (Mon, 02 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs.t allow @ signs for primary DNS record names in SOA fields ------------------------------------------------------------------------ r1268 | hserus | 2006-01-02 11:53:08 -0800 (Mon, 02 Jan 2006) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.c Bug fix. Allow proper recognition of trust anchor when there are multiple configured. ------------------------------------------------------------------------ r1267 | tewok | 2005-12-30 15:39:45 -0800 (Fri, 30 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added keyrec_settime() to timestamp a keyrec with the current time. ------------------------------------------------------------------------ r1266 | tewok | 2005-12-30 11:30:34 -0800 (Fri, 30 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Make an error message slightly more informative. ------------------------------------------------------------------------ r1265 | tewok | 2005-12-30 11:14:15 -0800 (Fri, 30 Dec 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Added support for the usegui config field. Added opts_gui() to explicitly allow use of the GUI in option selection. Added opts_nogui() to explicitly disallow use of the GUI in option selection. ------------------------------------------------------------------------ r1264 | tewok | 2005-12-30 11:10:08 -0800 (Fri, 30 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Renamed some interfaces to be slightly less Unix-centric. ------------------------------------------------------------------------ r1263 | tewok | 2005-12-30 11:05:02 -0800 (Fri, 30 Dec 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Added a debugging print for each interface. Unbuffered the write in rollrec_write(). ------------------------------------------------------------------------ r1262 | tewok | 2005-12-30 08:48:01 -0800 (Fri, 30 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm Add usegui flag. ------------------------------------------------------------------------ r1261 | hardaker | 2005-12-28 15:06:42 -0800 (Wed, 28 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/Makefile.in M /trunk/dnssec-tools/Makefile.top A /trunk/dnssec-tools/mkinstalldirs make directories ------------------------------------------------------------------------ r1260 | hardaker | 2005-12-28 14:46:07 -0800 (Wed, 28 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in check for and require openssl ------------------------------------------------------------------------ r1259 | hardaker | 2005-12-28 13:20:14 -0800 (Wed, 28 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Makefile.PL require Date::Parse ------------------------------------------------------------------------ r1258 | ahayatnagarkar | 2005-12-28 13:00:17 -0800 (Wed, 28 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c Added the --help command-line option ------------------------------------------------------------------------ r1257 | hardaker | 2005-12-28 10:08:25 -0800 (Wed, 28 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone update GetOpt arguments ------------------------------------------------------------------------ r1256 | ahayatnagarkar | 2005-12-28 08:27:37 -0800 (Wed, 28 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm Added an entry for the 'viewimage' configuration setting ------------------------------------------------------------------------ r1255 | ahayatnagarkar | 2005-12-28 08:05:49 -0800 (Wed, 28 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap.pl Added a -d option to display the generated image using an image-viewer program ------------------------------------------------------------------------ r1251 | ahayatnagarkar | 2005-12-27 14:01:42 -0800 (Tue, 27 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap.pl The driver program has been renamed to 'validate' ------------------------------------------------------------------------ r1250 | ahayatnagarkar | 2005-12-27 13:58:47 -0800 (Tue, 27 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin M /trunk/dnssec-tools/lib/libval/bin/.cvsignore The driver program has been renamed to validate ------------------------------------------------------------------------ r1249 | ahayatnagarkar | 2005-12-27 13:57:23 -0800 (Tue, 27 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c Changed the output description for command-line query ------------------------------------------------------------------------ r1248 | ahayatnagarkar | 2005-12-27 13:56:41 -0800 (Tue, 27 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/README Updated descriptions ------------------------------------------------------------------------ r1247 | ahayatnagarkar | 2005-12-27 13:52:49 -0800 (Tue, 27 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/Makefile.in The 'validate' program is now generated from validator_driver.c instead of validate.c ------------------------------------------------------------------------ r1246 | ahayatnagarkar | 2005-12-27 13:51:23 -0800 (Tue, 27 Dec 2005) | 2 lines Changed paths: D /trunk/dnssec-tools/lib/libval/bin/validate.c Functionality now provided by validator_driver.c ------------------------------------------------------------------------ r1245 | ahayatnagarkar | 2005-12-27 13:44:26 -0800 (Tue, 27 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c Updated comments ------------------------------------------------------------------------ r1244 | ahayatnagarkar | 2005-12-27 13:37:39 -0800 (Tue, 27 Dec 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c Added command-line options so that one can specify a query during runtime. ------------------------------------------------------------------------ r1243 | ahayatnagarkar | 2005-12-27 10:36:46 -0800 (Tue, 27 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap.pl Added a ':' to a regular expression ------------------------------------------------------------------------ r1242 | ahayatnagarkar | 2005-12-27 07:20:49 -0800 (Tue, 27 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO M /trunk/dnssec-tools/tools/scripts/README Added a note about the genkrf script ------------------------------------------------------------------------ r1239 | marz | 2005-12-26 11:41:20 -0800 (Mon, 26 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/Makefile.in A /trunk/dnssec-tools/tools/etc/Makefile.PL makefile fix to install dnssec-tools.conf ------------------------------------------------------------------------ r1235 | hardaker | 2005-12-26 10:17:59 -0800 (Mon, 26 Dec 2005) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone new options: --html-out-add-links --html-out-add-db-links --html-out-add-donuts-links Text describing the legend a bit. ------------------------------------------------------------------------ r1234 | ahayatnagarkar | 2005-12-21 14:03:50 -0800 (Wed, 21 Dec 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/genkrf Added a -krfile option to allow the user to specify a keyrec file on the command line. Added a note to the documentation saying that this command will overwrite the keyrec file. ------------------------------------------------------------------------ r1233 | ahayatnagarkar | 2005-12-21 13:50:43 -0800 (Wed, 21 Dec 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Changed the behavior of the keyrec_creat() function to truncate an existing file. Added the keyrec_open() function to open an existing file. ------------------------------------------------------------------------ r1232 | ahayatnagarkar | 2005-12-21 11:20:36 -0800 (Wed, 21 Dec 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/genkrf Added methods genksk() and genzsk() to generate the keys if not specified on the command line. ------------------------------------------------------------------------ r1231 | ahayatnagarkar | 2005-12-21 10:18:14 -0800 (Wed, 21 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added a 'zonename' field to the @KEYFIELDS array ------------------------------------------------------------------------ r1230 | ahayatnagarkar | 2005-12-21 10:17:15 -0800 (Wed, 21 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO Changed endtime in example from 3 days to 30 days ------------------------------------------------------------------------ r1229 | ahayatnagarkar | 2005-12-21 10:16:02 -0800 (Wed, 21 Dec 2005) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/genkrf Added options --kskdir, --zskdir, --endtime and --random to allow the user to specify these from the command line. If not specified, kskdir and zskdir default to ".", while the values of endtime and random are read from /usr/local/etc/dnssec/dnssec-tools.conf. If their values are not present in the dnssec-tools.conf file endtime defaults to 30 days and random defaults to /dev/urandom. ------------------------------------------------------------------------ r1228 | ahayatnagarkar | 2005-12-21 09:22:50 -0800 (Wed, 21 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Changed the default value in examples and comments to 30 days ------------------------------------------------------------------------ r1227 | ahayatnagarkar | 2005-12-21 09:21:56 -0800 (Wed, 21 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf Changed comment for endtime to say 'thirty days' ------------------------------------------------------------------------ r1226 | ahayatnagarkar | 2005-12-21 08:07:26 -0800 (Wed, 21 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/genkrf Added a function getkeysize() to extract the size of the key from its .private file ------------------------------------------------------------------------ r1225 | ahayatnagarkar | 2005-12-21 08:06:42 -0800 (Wed, 21 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL Added genkrf to the list of EXEs ------------------------------------------------------------------------ r1224 | ahayatnagarkar | 2005-12-20 15:10:48 -0800 (Tue, 20 Dec 2005) | 6 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/genkrf A new script to generate a keyrec file (.krf) from existing keys. This is the initial version. It assumes that all key and zone files are in the current directory. At present it does not set values for the endtime, ksklength and zsklength fields, nor does it generate new keys or add records to the zone file. ------------------------------------------------------------------------ r1223 | ahayatnagarkar | 2005-12-20 15:07:03 -0800 (Tue, 20 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added the keyrec_creat() subroutine and its documentation ------------------------------------------------------------------------ r1222 | hserus | 2005-12-19 12:39:35 -0800 (Mon, 19 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/EXPORT.sym Update list of symbols that are exported from the resolver library ------------------------------------------------------------------------ r1221 | hserus | 2005-12-19 12:36:34 -0800 (Mon, 19 Dec 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/libval/validator.h Add new query state Q_WAIT_FOR_GLUE corresponding to the state when glue is being fetched. Add handles to glue information in the query structure. Add definition for location of the root.hints file ------------------------------------------------------------------------ r1220 | hserus | 2005-12-19 12:31:01 -0800 (Mon, 19 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_resquery.h Add prototypes for functions used externally within other files. Also move the macro definition of SAVE_RR_TO_LIST from val_resquery.c to here so that other files can also access this functionality. ------------------------------------------------------------------------ r1219 | hserus | 2005-12-19 12:29:03 -0800 (Mon, 19 Dec 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/libval/val_assertion.h Allow other files to access the add_to_query_chain() function. ------------------------------------------------------------------------ r1218 | hserus | 2005-12-19 12:24:22 -0800 (Mon, 19 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.c M /trunk/dnssec-tools/lib/libval/val_resquery.c Add functionality for following referrals from root ------------------------------------------------------------------------ r1217 | hserus | 2005-12-19 12:17:42 -0800 (Mon, 19 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_cache.h Add prototype definitions for stow_root_info() and get_root_ns() ------------------------------------------------------------------------ r1216 | hserus | 2005-12-19 12:13:02 -0800 (Mon, 19 Dec 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_cache.c Don't store name server information separately from other answers in the cache. This allows glue to be located easily. Add interfaces for storing root nameserver hints in the validator cache and for retrieving the name server list later on. ------------------------------------------------------------------------ r1215 | hserus | 2005-12-19 12:03:04 -0800 (Mon, 19 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_context.c Modified to read the contents of the root.hints file when a context is created. ------------------------------------------------------------------------ r1214 | hserus | 2005-12-19 12:01:27 -0800 (Mon, 19 Dec 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_policy.h Add definitions for comment and end statement characters for different types of configuration files. Add prototype for read_root_hints_file() ------------------------------------------------------------------------ r1213 | hserus | 2005-12-19 11:59:39 -0800 (Mon, 19 Dec 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_policy.c Add functionality to parse the contents of the root.hints file. Modify get_token() so that it now takes in the values of the end statement character and commment characters as arguments. ------------------------------------------------------------------------ r1212 | hserus | 2005-12-19 11:47:25 -0800 (Mon, 19 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/resolver.h Export the clone_ns_list API from the resolver library ------------------------------------------------------------------------ r1211 | hserus | 2005-12-19 11:46:30 -0800 (Mon, 19 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/ns_name.c M /trunk/dnssec-tools/lib/libsres/ns_print.c M /trunk/dnssec-tools/lib/libsres/res_io_manager.c M /trunk/dnssec-tools/lib/libsres/res_mkquery.c Include header files that some compilers complain as being missing. ------------------------------------------------------------------------ r1206 | ahayatnagarkar | 2005-12-15 12:42:15 -0800 (Thu, 15 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Changed the --zone option to -zone in POD documentation ------------------------------------------------------------------------ r1201 | hardaker | 2005-12-12 16:29:50 -0800 (Mon, 12 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone improve html output ------------------------------------------------------------------------ r1200 | hardaker | 2005-12-12 14:57:36 -0800 (Mon, 12 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone minimal docs on adding new altercation filters ------------------------------------------------------------------------ r1199 | tewok | 2005-12-12 12:56:56 -0800 (Mon, 12 Dec 2005) | 9 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added external interfaces for rollmgr_droppid(). Added Darwin as a supported O/S. Modified existing unix_droppid() to do a "ps -ax" and then munge about in the output. We *should* have been able to do open(FOO,"ps -p $rdpid |") and skip the search loop. However, the $rdpid seems to be dropped by the open() and thus this hard search was required. ------------------------------------------------------------------------ r1198 | hardaker | 2005-12-08 22:08:35 -0800 (Thu, 08 Dec 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone Added a option to explicit create links to test zones rather than always creating them. ------------------------------------------------------------------------ r1197 | hardaker | 2005-12-08 15:58:52 -0800 (Thu, 08 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/MANIFEST A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/META.yml Added META.yml ------------------------------------------------------------------------ r1196 | tewok | 2005-12-06 12:41:14 -0800 (Tue, 06 Dec 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm Changed KSK length to 2048. Changed ZSK length to 1024. Changed expiration time to 30 days. ------------------------------------------------------------------------ r1195 | tewok | 2005-12-06 12:37:54 -0800 (Tue, 06 Dec 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Changed default KSK length to 2048. Changed default expiration time to 30 days. ------------------------------------------------------------------------ r1194 | hserus | 2005-12-01 14:42:23 -0800 (Thu, 01 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_query.c M /trunk/dnssec-tools/lib/libval/bin/getaddr.c M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c Add missing includes ------------------------------------------------------------------------ r1193 | hserus | 2005-12-01 14:40:55 -0800 (Thu, 01 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_debug.c M /trunk/dnssec-tools/lib/libsres/res_mkquery.c Rename _res_opcodes to _libsres_opcodes to avoid symbol collision on some systems ------------------------------------------------------------------------ r1192 | hserus | 2005-12-01 14:39:29 -0800 (Thu, 01 Dec 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_comp.c The new version of resolv.h does not include netinet/in.h by default; do that here. Also remove portions bracketed by #ifdef BIND_4_COMPAT ------------------------------------------------------------------------ r1191 | hserus | 2005-12-01 14:38:20 -0800 (Thu, 01 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/base64.c M /trunk/dnssec-tools/lib/libsres/ns_parse.c M /trunk/dnssec-tools/lib/libsres/ns_print.c The new version of resolv.h does not include by default; do that here. ------------------------------------------------------------------------ r1190 | hserus | 2005-12-01 14:36:42 -0800 (Thu, 01 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/include/arpa/nameser.h Don't define BIND_4_COMPAT by default ------------------------------------------------------------------------ r1189 | hserus | 2005-12-01 14:35:17 -0800 (Thu, 01 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/include/resolv.h Keep a local copy of a more recent version of resolv.h ------------------------------------------------------------------------ r1188 | hserus | 2005-12-01 12:23:57 -0800 (Thu, 01 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/Makefile.in M /trunk/dnssec-tools/lib/libval/bin/Makefile.in Look for include files in the resolver directory first ------------------------------------------------------------------------ r1187 | hserus | 2005-12-01 12:10:29 -0800 (Thu, 01 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_log.c M /trunk/dnssec-tools/lib/libval/val_policy.c M /trunk/dnssec-tools/lib/libval/val_resquery.c M /trunk/dnssec-tools/lib/libval/val_x_query.c M /trunk/dnssec-tools/lib/libval/validator.h Add include statements for files that used to be defined via resolver.h ------------------------------------------------------------------------ r1186 | hserus | 2005-12-01 11:59:34 -0800 (Thu, 01 Dec 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/base64.c M /trunk/dnssec-tools/lib/libsres/ns_name.c M /trunk/dnssec-tools/lib/libsres/ns_netint.c M /trunk/dnssec-tools/lib/libsres/ns_parse.c M /trunk/dnssec-tools/lib/libsres/ns_print.c M /trunk/dnssec-tools/lib/libsres/ns_samedomain.c M /trunk/dnssec-tools/lib/libsres/ns_ttl.c M /trunk/dnssec-tools/lib/libsres/res_comp.c M /trunk/dnssec-tools/lib/libsres/res_debug.c M /trunk/dnssec-tools/lib/libsres/res_io_manager.c M /trunk/dnssec-tools/lib/libsres/res_mkquery.c M /trunk/dnssec-tools/lib/libsres/res_support.c M /trunk/dnssec-tools/lib/libsres/res_tsig.c M /trunk/dnssec-tools/lib/libsres/resolver.h Revert to original method of including arpa/nameser.h, arpa/nameser_compat.h and resolv.h on individual files instead of commonly defining this in resolver.h ------------------------------------------------------------------------ r1185 | hserus | 2005-12-01 10:56:15 -0800 (Thu, 01 Dec 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/libsres/include A /trunk/dnssec-tools/lib/libsres/include/arpa A /trunk/dnssec-tools/lib/libsres/include/arpa/nameser.h A /trunk/dnssec-tools/lib/libsres/include/resolv.h Add local definitions of resolv.h and arpa/nameser.h ------------------------------------------------------------------------ r1184 | hserus | 2005-12-01 06:47:24 -0800 (Thu, 01 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.c M /trunk/dnssec-tools/lib/libval/val_parse.c M /trunk/dnssec-tools/lib/libval/val_resquery.c M /trunk/dnssec-tools/lib/libval/val_support.c M /trunk/dnssec-tools/lib/libval/val_verify.c Made formatting consistent in #include sections ------------------------------------------------------------------------ r1183 | hserus | 2005-12-01 06:44:46 -0800 (Thu, 01 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_context.c M /trunk/dnssec-tools/lib/libval/val_log.c Removed unnecssary include statement ------------------------------------------------------------------------ r1182 | hserus | 2005-12-01 06:33:20 -0800 (Thu, 01 Dec 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/base64.c M /trunk/dnssec-tools/lib/libsres/ns_parse.c M /trunk/dnssec-tools/lib/libsres/ns_print.c M /trunk/dnssec-tools/lib/libsres/res_comp.c M /trunk/dnssec-tools/lib/libsres/res_debug.c M /trunk/dnssec-tools/lib/libsres/res_io_manager.c M /trunk/dnssec-tools/lib/libsres/res_support.c M /trunk/dnssec-tools/lib/libsres/res_tsig.c M /trunk/dnssec-tools/lib/libsres/resolver.h Commonly include files that are dependencies for resolv.h on some systems in resolver.h ------------------------------------------------------------------------ r1181 | hserus | 2005-11-30 10:30:13 -0800 (Wed, 30 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_debug.c M /trunk/dnssec-tools/lib/libsres/res_support.c Rename res_pquery to libsres_pquery in order to avoid symbol collision ------------------------------------------------------------------------ r1180 | hserus | 2005-11-30 10:18:31 -0800 (Wed, 30 Nov 2005) | 2 lines Changed paths: D /trunk/dnssec-tools/lib/libsres/include No longer maintain a local copy of this file. ------------------------------------------------------------------------ r1179 | hserus | 2005-11-30 10:12:14 -0800 (Wed, 30 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c Define expected values for testcases in the netsec.tislabs.com domain ------------------------------------------------------------------------ r1178 | hserus | 2005-11-30 10:11:56 -0800 (Wed, 30 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/validate.c M /trunk/dnssec-tools/lib/libval/val_cache.c M /trunk/dnssec-tools/lib/libval/val_support.c M /trunk/dnssec-tools/lib/libval/val_x_query.c Include through resolver.h ------------------------------------------------------------------------ r1177 | hserus | 2005-11-30 10:11:37 -0800 (Wed, 30 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/Makefile.in Typo s/validat/validate ------------------------------------------------------------------------ r1176 | hserus | 2005-11-30 10:11:12 -0800 (Wed, 30 Nov 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/libval/validator.h APIs exported from the validator are only defined in validator.h Include through resolver.h Move data structures in val_parse.h that are part of the validator API to validator.h ------------------------------------------------------------------------ r1175 | hserus | 2005-11-30 10:10:42 -0800 (Wed, 30 Nov 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_log.c APIs exported from the validator are only defined in validator.h Display query status value for the assertion in addition to the assertion status in val_log_assertion_chain() Add new routine p_query_error() for displaying DNS error values ------------------------------------------------------------------------ r1174 | hserus | 2005-11-30 10:09:41 -0800 (Wed, 30 Nov 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_resquery.c APIs exported from the validator are only defined in validator.h Include through resolver.h No longer have the query id as part of the name server structure. ------------------------------------------------------------------------ r1173 | hserus | 2005-11-30 10:09:04 -0800 (Wed, 30 Nov 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_policy.h Move parse_etc_hosts() to val_policy.c Define a maximum size value of a line in the configuration file ------------------------------------------------------------------------ r1172 | hserus | 2005-11-30 10:08:47 -0800 (Wed, 30 Nov 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_policy.c Move parse_etc_hosts() from val_parse.c Use fgets() in place of getline() ------------------------------------------------------------------------ r1171 | hserus | 2005-11-30 10:08:27 -0800 (Wed, 30 Nov 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_parse.h Move data structures that are part of the validator API to validator.h Move parse_etc_hosts() to val_policy.c ------------------------------------------------------------------------ r1170 | hserus | 2005-11-30 10:08:11 -0800 (Wed, 30 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_parse.c Move parse_etc_hosts() to val_policy.c ------------------------------------------------------------------------ r1169 | hserus | 2005-11-30 10:07:50 -0800 (Wed, 30 Nov 2005) | 2 lines Changed paths: D /trunk/dnssec-tools/lib/libval/val_assertion.h M /trunk/dnssec-tools/lib/libval/val_context.c D /trunk/dnssec-tools/lib/libval/val_context.h D /trunk/dnssec-tools/lib/libval/val_getaddrinfo.h D /trunk/dnssec-tools/lib/libval/val_gethostbyname.h D /trunk/dnssec-tools/lib/libval/val_log.h D /trunk/dnssec-tools/lib/libval/val_x_query.h APIs exported from libval are only defined in validator.h ------------------------------------------------------------------------ r1168 | hserus | 2005-11-30 10:07:24 -0800 (Wed, 30 Nov 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.c M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c M /trunk/dnssec-tools/lib/libval/val_verify.c APIs exported from libval are only defined in validator.h Include through resolver.h ------------------------------------------------------------------------ r1167 | hserus | 2005-11-30 10:04:40 -0800 (Wed, 30 Nov 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_query.c Have common includes for arpa/nameser.h and resolv.h in resolver.h Make sure that nameserver preferences are treated properly for each query. ------------------------------------------------------------------------ r1166 | hserus | 2005-11-30 10:04:21 -0800 (Wed, 30 Nov 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_mkquery.c Have common includes for arpa/nameser.h and resolv.h in resolver.h Make a local definition of res_radomid() (call it libsres_randomid()) so that this functionality is avaiable in platforms where the former does not exist in libc. Use this random value in new queries. ------------------------------------------------------------------------ r1165 | hserus | 2005-11-30 10:03:59 -0800 (Wed, 30 Nov 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_debug.c Have common includes for arpa/nameser.h and resolv.h in resolver.h Remove unnecessary res_init() function ------------------------------------------------------------------------ r1164 | hserus | 2005-11-30 10:03:40 -0800 (Wed, 30 Nov 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/resolver.h Include arpa/nameser.h and resolv.h from resolver.h No longer have the query id as part of the name server structure. This value is computed just before the query is sent out and saved in the message directly. ------------------------------------------------------------------------ r1163 | hserus | 2005-11-30 10:03:06 -0800 (Wed, 30 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/base64.c M /trunk/dnssec-tools/lib/libsres/ns_name.c M /trunk/dnssec-tools/lib/libsres/ns_netint.c M /trunk/dnssec-tools/lib/libsres/ns_parse.c M /trunk/dnssec-tools/lib/libsres/ns_print.c M /trunk/dnssec-tools/lib/libsres/ns_samedomain.c M /trunk/dnssec-tools/lib/libsres/ns_ttl.c M /trunk/dnssec-tools/lib/libsres/res_comp.c M /trunk/dnssec-tools/lib/libsres/res_io_manager.c M /trunk/dnssec-tools/lib/libsres/res_support.c Include arpa/nameser.h and resolv.h indirectly from resolver.h ------------------------------------------------------------------------ r1162 | hserus | 2005-11-30 10:01:45 -0800 (Wed, 30 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/Makefile.in No longer export specific symbols; keep the EXPORT.sym file around for reference though. ------------------------------------------------------------------------ r1160 | hserus | 2005-11-17 11:45:37 -0800 (Thu, 17 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap.pl Save gif into a temp file before moving it to the actual file name. This minimizes the critical section. ------------------------------------------------------------------------ r1159 | hserus | 2005-11-17 09:33:34 -0800 (Thu, 17 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/dnsval.conf Update the trust anchor for test.dnssec-tools.org ------------------------------------------------------------------------ r1158 | hserus | 2005-11-17 09:19:52 -0800 (Thu, 17 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c Allow checking against multiple status values corresponding to different answers returned ------------------------------------------------------------------------ r1157 | hserus | 2005-11-17 09:18:29 -0800 (Thu, 17 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.c Make sure we preserve failure values. ------------------------------------------------------------------------ r1156 | hserus | 2005-11-16 18:11:52 -0800 (Wed, 16 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap.pl Define line properties for new error values ------------------------------------------------------------------------ r1155 | hardaker | 2005-11-16 17:07:30 -0800 (Wed, 16 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/INSTALL remove need for Fast.pm patch ------------------------------------------------------------------------ r1154 | hardaker | 2005-11-16 16:27:27 -0800 (Wed, 16 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone better default options for zonesigner ------------------------------------------------------------------------ r1153 | hardaker | 2005-11-16 16:24:18 -0800 (Wed, 16 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone increase default key times ------------------------------------------------------------------------ r1152 | hardaker | 2005-11-16 16:22:50 -0800 (Wed, 16 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone fix default option for a records ------------------------------------------------------------------------ r1151 | hardaker | 2005-11-16 15:56:10 -0800 (Wed, 16 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Makefile.PL add ZoneFile-Fast to list of dirs to decend into ------------------------------------------------------------------------ r1150 | hardaker | 2005-11-16 15:54:52 -0800 (Wed, 16 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/Makefile.in add maketestzone to the list of make sections ------------------------------------------------------------------------ r1149 | hardaker | 2005-11-16 15:53:37 -0800 (Wed, 16 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone use local addresses ------------------------------------------------------------------------ r1148 | hserus | 2005-11-16 11:20:44 -0800 (Wed, 16 Nov 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/drawvalmap A /trunk/dnssec-tools/tools/drawvalmap/Makefile.PL A /trunk/dnssec-tools/tools/drawvalmap/drawvalmap.pl Add simple tool for visualizing validator log data ------------------------------------------------------------------------ r1147 | baerm | 2005-11-16 09:57:14 -0800 (Wed, 16 Nov 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/postfix A /trunk/dnssec-tools/apps/postfix/postfix-howto.txt adding posttfix/ and postfix/postfix-howto.txt ------------------------------------------------------------------------ r1146 | hserus | 2005-11-16 08:37:30 -0800 (Wed, 16 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/validator.h Add definitions for the server and port to which log messages are to be sent ------------------------------------------------------------------------ r1145 | hserus | 2005-11-16 08:35:05 -0800 (Wed, 16 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_log.c Add support for simple logging to network ------------------------------------------------------------------------ r1144 | hardaker | 2005-11-16 08:28:06 -0800 (Wed, 16 Nov 2005) | 2 lines Changed paths: D /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast.patch M /trunk/dnssec-tools/tools/patches/README remove the ZoneFile::Fast ptach as it's rolled into the main distro now ------------------------------------------------------------------------ r1143 | hserus | 2005-11-15 12:43:24 -0800 (Tue, 15 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_log.c M /trunk/dnssec-tools/lib/libval/val_log.h Add helper function for obtaining printable hex strings. ------------------------------------------------------------------------ r1142 | hserus | 2005-11-15 12:39:50 -0800 (Tue, 15 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/crypto/val_dsasha1.c M /trunk/dnssec-tools/lib/libval/crypto/val_rsamd5.c M /trunk/dnssec-tools/lib/libval/crypto/val_rsasha1.c Display the hash on one line ------------------------------------------------------------------------ r1141 | hserus | 2005-11-15 12:37:48 -0800 (Tue, 15 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.c Add log message that says that we are entering the main resolver routine. ------------------------------------------------------------------------ r1140 | hserus | 2005-11-15 11:22:54 -0800 (Tue, 15 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c Use val_log_assertion_chain() instead of val_print_assertion_chain() ------------------------------------------------------------------------ r1139 | hserus | 2005-11-15 11:17:25 -0800 (Tue, 15 Nov 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/crypto/val_dsasha1.h M /trunk/dnssec-tools/lib/libval/crypto/val_rsamd5.h M /trunk/dnssec-tools/lib/libval/crypto/val_rsasha1.h M /trunk/dnssec-tools/lib/libval/val_verify.h Changed prototypes of functions that need to perfom logging, since they all need access to the validator context. ------------------------------------------------------------------------ r1138 | hserus | 2005-11-15 11:17:09 -0800 (Tue, 15 Nov 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/libval/crypto/val_dsasha1.c M /trunk/dnssec-tools/lib/libval/crypto/val_rsamd5.c M /trunk/dnssec-tools/lib/libval/crypto/val_rsasha1.c M /trunk/dnssec-tools/lib/libval/val_assertion.c M /trunk/dnssec-tools/lib/libval/val_verify.c Added LOG_DEBUG-level messages Changed prototypes of functions that need to perfom logging, since they all need access to the validator context. ------------------------------------------------------------------------ r1137 | hserus | 2005-11-15 11:16:41 -0800 (Tue, 15 Nov 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/libval/validator.h Added an identifier field to the validator context Export prototypes from val_log.h instead of val_print.h Add definition for default syslog mask ------------------------------------------------------------------------ r1136 | hserus | 2005-11-15 11:16:26 -0800 (Tue, 15 Nov 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_x_query.h Correct the earlier assumption that the validator context was a constant. Include prototype for val_query ------------------------------------------------------------------------ r1135 | hserus | 2005-11-15 11:16:12 -0800 (Tue, 15 Nov 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_x_query.c Merge functionality in val_query.c into this file Added LOG_DEBUG-level messages Changed prototypes of functions that need to perfom logging, since they all need access to the validator context. ------------------------------------------------------------------------ r1134 | hserus | 2005-11-15 11:15:34 -0800 (Tue, 15 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_resquery.c Added LOG_DEBUG-level messages ------------------------------------------------------------------------ r1133 | hserus | 2005-11-15 11:15:21 -0800 (Tue, 15 Nov 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_policy.c Added LOG_DEBUG-level messages Make the validator context to all portions of the file that need access to the logging interface ------------------------------------------------------------------------ r1132 | hserus | 2005-11-15 11:14:58 -0800 (Tue, 15 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_log.h Include prototypes of all log related functions. ------------------------------------------------------------------------ r1131 | hserus | 2005-11-15 11:14:44 -0800 (Tue, 15 Nov 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_log.c Enable logging to syslog Merge functionality that was in val_print.c to this file. ------------------------------------------------------------------------ r1130 | hserus | 2005-11-15 11:14:26 -0800 (Tue, 15 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.h M /trunk/dnssec-tools/lib/libval/val_gethostbyname.h Correct the earlier assumption that the validator context was a constant. ------------------------------------------------------------------------ r1129 | hserus | 2005-11-15 11:13:59 -0800 (Tue, 15 Nov 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c Added LOG_DEBUG-level messages Changed prototypes of functions that need to perfom logging, since they all need access to the validator context. Perform proper initialization of context before invoking validator routines ------------------------------------------------------------------------ r1128 | hserus | 2005-11-15 11:13:33 -0800 (Tue, 15 Nov 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_context.c Don't include val_log.h where it is not required Initialize the value of the context identifier(the address of the context) ------------------------------------------------------------------------ r1127 | hserus | 2005-11-15 11:13:12 -0800 (Tue, 15 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_cache.c M /trunk/dnssec-tools/lib/libval/val_parse.c M /trunk/dnssec-tools/lib/libval/val_support.c Don't include val_log.h where it is not necessary ------------------------------------------------------------------------ r1126 | hserus | 2005-11-15 11:11:18 -0800 (Tue, 15 Nov 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/Makefile.in val_print.c is now merged into val_log.c val_query.c is now merged into val_x_query.c ------------------------------------------------------------------------ r1125 | hserus | 2005-11-15 11:11:03 -0800 (Tue, 15 Nov 2005) | 2 lines Changed paths: D /trunk/dnssec-tools/lib/libval/val_query.c D /trunk/dnssec-tools/lib/libval/val_query.h val_query.c is now merged into val_x_query.c ------------------------------------------------------------------------ r1124 | hserus | 2005-11-15 11:10:41 -0800 (Tue, 15 Nov 2005) | 2 lines Changed paths: D /trunk/dnssec-tools/lib/libval/val_print.c D /trunk/dnssec-tools/lib/libval/val_print.h val_print.c is now merged into val_log.c ------------------------------------------------------------------------ r1123 | hardaker | 2005-11-14 16:55:42 -0800 (Mon, 14 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm reindent for consistency ------------------------------------------------------------------------ r1122 | hardaker | 2005-11-14 16:53:49 -0800 (Mon, 14 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/MANIFEST A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/README created a README file ------------------------------------------------------------------------ r1121 | hardaker | 2005-11-14 16:38:16 -0800 (Mon, 14 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Changes M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Makefile.PL Update to our version of Fast ------------------------------------------------------------------------ r1119 | hardaker | 2005-11-14 16:31:57 -0800 (Mon, 14 Nov 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/.cvsignore A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Changes A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/MANIFEST A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Makefile.PL A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/00-load.t A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/comment.t A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/generate.t A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/lines.t A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/newlines.t A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/null-rr.t A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/origin.t A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/read.t A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rr-multi-a.t A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs-ws.t A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs.t A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/soattl.t A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/ttl.t A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/zone.t A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/test.pl initial copy of the CPAN Fast.pm release into our tree ------------------------------------------------------------------------ r1118 | hardaker | 2005-11-11 22:12:29 -0800 (Fri, 11 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts reorganized command line option listings for better help output ------------------------------------------------------------------------ r1117 | hardaker | 2005-11-11 22:11:50 -0800 (Fri, 11 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm improved output for individual records ------------------------------------------------------------------------ r1116 | hserus | 2005-11-10 08:22:49 -0800 (Thu, 10 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/dnsval.conf Specify a slightly more useful default. ------------------------------------------------------------------------ r1115 | hserus | 2005-11-10 08:04:25 -0800 (Thu, 10 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/validator.h Don't include prototypes from val_policy.h in list of APIs exported. ------------------------------------------------------------------------ r1114 | hserus | 2005-11-10 07:56:36 -0800 (Thu, 10 Nov 2005) | 6 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c Add a fifth field to the test case structure for expected result status Check this expected status against what was received. No longer use val_x_query(); instead use resolve_n_check() so that we have more visibility into the assertion structure. Add 169 new test cases from test.dnssec-tools.org ------------------------------------------------------------------------ r1113 | hserus | 2005-11-10 07:51:51 -0800 (Thu, 10 Nov 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/validator.h Include header files instead of the listing the APIs of exported functions again. ------------------------------------------------------------------------ r1112 | hserus | 2005-11-10 07:51:38 -0800 (Thu, 10 Nov 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_x_query.c Move val_x_query() after compose_answer() so that the latter can be made static. ------------------------------------------------------------------------ r1111 | hserus | 2005-11-10 07:51:25 -0800 (Thu, 10 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_support.c M /trunk/dnssec-tools/lib/libval/val_support.h Move p_val_error() from val_support.c to val_print.c ------------------------------------------------------------------------ r1110 | hserus | 2005-11-10 07:51:09 -0800 (Thu, 10 Nov 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_print.c M /trunk/dnssec-tools/lib/libval/val_print.h Move p_val_error() from val_support.c to val_print.c Rename print_ns_string() to ns_string(). Make the function static for now. ------------------------------------------------------------------------ r1109 | hserus | 2005-11-10 07:50:54 -0800 (Thu, 10 Nov 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_policy.c M /trunk/dnssec-tools/lib/libval/val_policy.h Move the switch_effective_policy() function from val_policy.c to val_context.c Allow check_relevance to be called from val_context.c ------------------------------------------------------------------------ r1108 | hserus | 2005-11-10 07:50:39 -0800 (Thu, 10 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_context.c M /trunk/dnssec-tools/lib/libval/val_context.h Move the switch_effective_policy() function from val_policy.c to val_context.c ------------------------------------------------------------------------ r1107 | hserus | 2005-11-10 07:50:27 -0800 (Thu, 10 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_cache.h Change RES_CACHE_H to VAL_CACHE_H ------------------------------------------------------------------------ r1106 | hserus | 2005-11-10 07:50:16 -0800 (Thu, 10 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.h Do not list prototypes of functions that are static ------------------------------------------------------------------------ r1105 | hserus | 2005-11-10 07:49:46 -0800 (Thu, 10 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.c M /trunk/dnssec-tools/lib/libval/val_resquery.c M /trunk/dnssec-tools/lib/libval/val_verify.c Make functions that are local to this file static ------------------------------------------------------------------------ r1104 | hserus | 2005-11-10 06:17:18 -0800 (Thu, 10 Nov 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_print.c M /trunk/dnssec-tools/lib/libval/val_print.h No longer require that the "top" query be directly passed to the function. Instead search for this element using the {name, type, class} tuple ------------------------------------------------------------------------ r1103 | hserus | 2005-11-10 06:07:46 -0800 (Thu, 10 Nov 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.c Keep going up the chain of trust when we see a failure and when its possible to go up the chain. ------------------------------------------------------------------------ r1102 | wgriffin | 2005-11-09 09:06:38 -0800 (Wed, 09 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO M /trunk/dnssec-tools/tools/scripts/README Updated INFO and add note that tachk requires Net::DNS::SEC ------------------------------------------------------------------------ r1101 | wgriffin | 2005-11-09 08:53:50 -0800 (Wed, 09 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/README A /trunk/dnssec-tools/tools/scripts/tachk Added tachk: simplistic trust anchor checking ------------------------------------------------------------------------ r1100 | hserus | 2005-11-09 08:39:44 -0800 (Wed, 09 Nov 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_support.c Display assertion status of "UNEVALUATED" when the chain of trust has not been traversed beyond this point. ------------------------------------------------------------------------ r1099 | hserus | 2005-11-09 08:38:32 -0800 (Wed, 09 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_policy.c Do a slightly better job of parsing the validator policy file ------------------------------------------------------------------------ r1098 | hserus | 2005-11-09 08:37:33 -0800 (Wed, 09 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_parse.h prototype for val_parse_dnskey_string() has changed ------------------------------------------------------------------------ r1097 | hserus | 2005-11-09 08:35:59 -0800 (Wed, 09 Nov 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_parse.c Allocate the dnskey rdata structure within val_parse_dnskey_string; pass the address of the pointer as the last parameter to this function. ------------------------------------------------------------------------ r1096 | hserus | 2005-11-09 08:33:58 -0800 (Wed, 09 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.c Bug fix: determination of trusted zones was being done incorrectly ------------------------------------------------------------------------ r1094 | hardaker | 2005-11-08 16:45:04 -0800 (Tue, 08 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone allow donuts to be run on each generated zone file ------------------------------------------------------------------------ r1093 | hardaker | 2005-11-08 15:56:50 -0800 (Tue, 08 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt fix one bug and remove duplicate errors under certain sanity checks ------------------------------------------------------------------------ r1092 | hardaker | 2005-11-08 13:55:59 -0800 (Tue, 08 Nov 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone - add bogus inserted-later records - make baddata cnames point to bogus.$domain and insert that record (signed) - create a sh test script to run dig against every produced name - sort and separate records that are put into the HTML list output ------------------------------------------------------------------------ r1091 | hardaker | 2005-11-06 16:50:03 -0800 (Sun, 06 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone fix base64 mucking to make it legal. ------------------------------------------------------------------------ r1090 | hardaker | 2005-11-06 16:40:48 -0800 (Sun, 06 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone Added capability to produce html output and apache configuration directives. ------------------------------------------------------------------------ r1089 | hardaker | 2005-11-06 15:44:15 -0800 (Sun, 06 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone Added support to generate a bind configuration file to load the created files. ------------------------------------------------------------------------ r1088 | hardaker | 2005-11-04 16:39:25 -0800 (Fri, 04 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone generate sub-zones with particular types of bad data and bad NS/DS records ------------------------------------------------------------------------ r1087 | hardaker | 2005-11-04 15:02:10 -0800 (Fri, 04 Nov 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone allow cnames to not be generated. create and allow for not-creation of sub-ns records a few comments describing what we're doing ------------------------------------------------------------------------ r1086 | hardaker | 2005-11-04 14:26:04 -0800 (Fri, 04 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone add nodes that have past end dates and future start dates ------------------------------------------------------------------------ r1085 | hardaker | 2005-11-04 14:25:23 -0800 (Fri, 04 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt print the record name in the sig-expired warning ------------------------------------------------------------------------ r1084 | hardaker | 2005-11-03 17:14:46 -0800 (Thu, 03 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/maketestzone M /trunk/dnssec-tools/tools/maketestzone/.cvsignore ignore zonesigner files ------------------------------------------------------------------------ r1083 | hardaker | 2005-11-03 17:14:07 -0800 (Thu, 03 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone Use IO::File instead of standard perl IO for future multiple-file support. ------------------------------------------------------------------------ r1082 | hardaker | 2005-11-03 16:17:13 -0800 (Thu, 03 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/maketestzone/maketestzone new bad data: modify the A/AAAA records after signing ------------------------------------------------------------------------ r1081 | hardaker | 2005-11-03 15:58:09 -0800 (Thu, 03 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper remove display_image parameter from getops config tokens ------------------------------------------------------------------------ r1080 | hardaker | 2005-11-03 15:34:23 -0800 (Thu, 03 Nov 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/maketestzone A /trunk/dnssec-tools/tools/maketestzone/.cvsignore A /trunk/dnssec-tools/tools/maketestzone/Makefile.PL A /trunk/dnssec-tools/tools/maketestzone/maketestzone script to generate test zones with broken data ------------------------------------------------------------------------ r1079 | hserus | 2005-11-02 11:16:50 -0800 (Wed, 02 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_debug.c Use strerror_r instead of strerror ------------------------------------------------------------------------ r1078 | hserus | 2005-11-02 10:54:07 -0800 (Wed, 02 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c Use better names for test case description ------------------------------------------------------------------------ r1077 | hserus | 2005-11-02 10:50:52 -0800 (Wed, 02 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/Makefile.in Define _GNU_SOURCE while compiling code ------------------------------------------------------------------------ r1076 | hserus | 2005-11-02 10:41:10 -0800 (Wed, 02 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/Makefile.in link against libpthread ------------------------------------------------------------------------ r1075 | hserus | 2005-11-02 09:31:52 -0800 (Wed, 02 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/validator.h Add prototype definitions that should have been present. ------------------------------------------------------------------------ r1074 | hserus | 2005-11-02 09:31:36 -0800 (Wed, 02 Nov 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_x_query.c Don't free the validator cache once the answer is returned. We have still to implement the logic for cache timeouts, so the cache size can become quite large. ------------------------------------------------------------------------ r1073 | hserus | 2005-11-02 09:30:49 -0800 (Wed, 02 Nov 2005) | 6 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_resquery.c Compare the correct values while determining if the query has already been sent. Store default resolver parameters in the name_server structure while generating a referral for a query. Check return values following data stowage in the cache. ------------------------------------------------------------------------ r1072 | hserus | 2005-11-02 09:30:13 -0800 (Wed, 02 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_print.c M /trunk/dnssec-tools/lib/libval/val_print.h Remove the unused dump_val_context function. ------------------------------------------------------------------------ r1071 | hserus | 2005-11-02 09:29:49 -0800 (Wed, 02 Nov 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_policy.c Make code re-entrant. Acquire shared lock before reading the configuration file(s). Set default values for the resolver options when creating the name server structure ------------------------------------------------------------------------ r1070 | hserus | 2005-11-02 09:29:22 -0800 (Wed, 02 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_cache.h Added prototype definitions for modified and new functions. ------------------------------------------------------------------------ r1069 | hserus | 2005-11-02 09:29:08 -0800 (Wed, 02 Nov 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_cache.c Make code re-entrant. Acquire shared lock when trying to read the cache and acquire an excluse lock when trying to write. Prototypes of various functions also change. ------------------------------------------------------------------------ r1068 | hserus | 2005-11-02 09:28:46 -0800 (Wed, 02 Nov 2005) | 10 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.c Expose only a single get_cached_rrset() function instead of the separate get_cached_ds() get_cached_keys() and get_cached_answers(). This makes it easier to make this portion of the code re-entrant. Also check return value from stow_answer(). Add a flag to the ask_cache() routine to indicate that data was received from the cache. This is necessary to allow the outer routine to break out of the loop when data is only received from the cache. CVS :---------------------------------------------------------------------- ------------------------------------------------------------------------ r1067 | hserus | 2005-11-02 09:28:05 -0800 (Wed, 02 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/resolver.h Added new resolver parameters to the name_server structure. ------------------------------------------------------------------------ r1066 | hserus | 2005-11-02 09:27:49 -0800 (Wed, 02 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_support.c No longer passing _res to the print routines. ------------------------------------------------------------------------ r1065 | hserus | 2005-11-02 09:27:32 -0800 (Wed, 02 Nov 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_query.c Copy resolver parameters while cloning name_server structures. Pass resolver options through the name_server structure. ------------------------------------------------------------------------ r1064 | hserus | 2005-11-02 09:27:03 -0800 (Wed, 02 Nov 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_mkquery.h Changed prototypes for res_nmkquery and res_opt, Also changed their names to res_val_* to avoid confusing with BIND functions. ------------------------------------------------------------------------ r1063 | hserus | 2005-11-02 09:26:47 -0800 (Wed, 02 Nov 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_mkquery.c Removed dependency on _res; instead use new parameters from the name server structure ------------------------------------------------------------------------ r1062 | hserus | 2005-11-02 09:26:29 -0800 (Wed, 02 Nov 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_io_manager.c Removed dependency on _res; _res parameters are now inside the name_server structure. Made portions of the code that use static variables re-entrant. ------------------------------------------------------------------------ r1061 | hserus | 2005-11-02 09:25:55 -0800 (Wed, 02 Nov 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_debug.c Removed dependency on _res. Dont provision for a growing buflen to hold messages. Keep this constant to avoid needless critical sections. ------------------------------------------------------------------------ r1060 | hserus | 2005-11-02 09:25:08 -0800 (Wed, 02 Nov 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/EXPORT.sym Export symbols needed by other applications such as mozilla ------------------------------------------------------------------------ r1059 | hardaker | 2005-10-27 09:26:44 -0700 (Thu, 27 Oct 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper fix getopt configure call ------------------------------------------------------------------------ r1058 | hardaker | 2005-10-27 08:26:32 -0700 (Thu, 27 Oct 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/INSTALL Getopt::Long::GUI -> Getopt::GUI::Long ------------------------------------------------------------------------ r1057 | lfoster | 2005-10-24 10:34:56 -0700 (Mon, 24 Oct 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/logwatch/scripts/shared/applybinddate modified to work with logwatch7 release; tested; now in the logwatch cvs repository. ------------------------------------------------------------------------ r1055 | hserus | 2005-10-14 10:32:05 -0700 (Fri, 14 Oct 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/validator.h Structures for rrset_rec and query_chain have a new respondent_server element. ------------------------------------------------------------------------ r1054 | hserus | 2005-10-14 10:31:43 -0700 (Fri, 14 Oct 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_verify.c Use host byte order for comparisons. Look at all DS records before deciding that a delegation is lame. ------------------------------------------------------------------------ r1053 | hserus | 2005-10-14 10:31:22 -0700 (Fri, 14 Oct 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_support.h find_rr_set takes the respondent server as a parameter ------------------------------------------------------------------------ r1052 | hserus | 2005-10-14 10:31:03 -0700 (Fri, 14 Oct 2005) | 6 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_support.c Support cleanup of the respondent server information from the rrset record find_rr_set takes the respondent server as a parameter and stores this information with the rrset Empty nxdomain responses have no respondent server information copy_rrset_rec also copies respondent server information Add support for displaying more error values in p_val_error ------------------------------------------------------------------------ r1051 | hserus | 2005-10-14 10:30:44 -0700 (Fri, 14 Oct 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_resquery.c Store respondent server information with the data received and with the query that initiated the reponse. Free the respondent server information once we are done using it. ------------------------------------------------------------------------ r1050 | hserus | 2005-10-14 10:30:25 -0700 (Fri, 14 Oct 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_print.h Added prototypes for functions that print the details of a given name server and assertion status information. ------------------------------------------------------------------------ r1049 | hserus | 2005-10-14 10:30:07 -0700 (Fri, 14 Oct 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_print.c Use re-entrant function ctime_r instead of ctime Aded two new functions -- one for displaying name server information and another for displaying details of the assertion status. ------------------------------------------------------------------------ r1048 | hserus | 2005-10-14 10:29:45 -0700 (Fri, 14 Oct 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_io_manager.c M /trunk/dnssec-tools/lib/libval/val_log.h M /trunk/dnssec-tools/lib/libval/val_policy.c Added 'const' declaration for static variables that are never modified ------------------------------------------------------------------------ r1047 | hserus | 2005-10-14 10:29:28 -0700 (Fri, 14 Oct 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_parse.c Don't try and use network byte order when host order is perfectly reasonable. ------------------------------------------------------------------------ r1046 | hserus | 2005-10-14 10:28:50 -0700 (Fri, 14 Oct 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_log.c Added 'const' declaration for static variables that are never modified Log to stdout instead of stderr -- logging framework will change in any case. ------------------------------------------------------------------------ r1045 | hserus | 2005-10-14 10:28:32 -0700 (Fri, 14 Oct 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.c Manage the new qc_respondent_server component of struct query_chain. Log information about the assertion chain before returning from resolve_n_check ------------------------------------------------------------------------ r1044 | hserus | 2005-10-14 10:28:12 -0700 (Fri, 14 Oct 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/resolver.h Added prototype for clone_ns ------------------------------------------------------------------------ r1043 | hserus | 2005-10-14 10:27:53 -0700 (Fri, 14 Oct 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_query.c Handle cases where NULL is passed as the input to clone_ns ------------------------------------------------------------------------ r1042 | hserus | 2005-10-14 10:27:11 -0700 (Fri, 14 Oct 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_debug.c Use the reentrant version of gmtime at all times Added 'const' declaration for static variables that are never modified ------------------------------------------------------------------------ r1041 | hserus | 2005-10-14 10:26:54 -0700 (Fri, 14 Oct 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/EXPORT.sym Add symbol for clone_ns ------------------------------------------------------------------------ r1036 | hardaker | 2005-09-25 20:58:41 -0700 (Sun, 25 Sep 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts reopen stdout/err to /dev/null after closing; sleep a touch longer ------------------------------------------------------------------------ r1035 | hardaker | 2005-09-22 16:51:49 -0700 (Thu, 22 Sep 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts - close stderr/out before invoking tcpdump - Call Getopt::GUI::Long::Config properly when needed ------------------------------------------------------------------------ r1007 | hserus | 2005-09-02 13:32:11 -0700 (Fri, 02 Sep 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_resquery.c Make sure that resolver error values are always returned in the query state. ------------------------------------------------------------------------ r1006 | hserus | 2005-09-02 13:29:26 -0700 (Fri, 02 Sep 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_errors.h Correct numbering typo ------------------------------------------------------------------------ r1005 | hserus | 2005-09-02 13:29:01 -0700 (Fri, 02 Sep 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.c Handle case of CNAME and SOA co-existing in the answer ------------------------------------------------------------------------ r1004 | hserus | 2005-09-02 13:27:52 -0700 (Fri, 02 Sep 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_query.c Check for SR_IO_NO_ANSWER_YET as the return value from res_io_accept() instead of SR_NO_ANSWER_YET ------------------------------------------------------------------------ r1003 | hserus | 2005-09-02 13:22:35 -0700 (Fri, 02 Sep 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_io_manager.h Now assigning a unique definition for SR_IO_NO_ANSWER_YET ------------------------------------------------------------------------ r998 | hardaker | 2005-08-31 13:58:22 -0700 (Wed, 31 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/doc/libsres.3 M /trunk/dnssec-tools/lib/libval/doc/libval.3 M /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.3 M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.3 M /trunk/dnssec-tools/lib/libval/doc/val_query.3 update ------------------------------------------------------------------------ r997 | hardaker | 2005-08-31 13:52:46 -0700 (Wed, 31 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/README untabify ------------------------------------------------------------------------ r996 | hardaker | 2005-08-31 13:52:21 -0700 (Wed, 31 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/README update to current list of software ------------------------------------------------------------------------ r995 | hardaker | 2005-08-31 13:41:53 -0700 (Wed, 31 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/configure autogenerate from the most recent configure ------------------------------------------------------------------------ r994 | hardaker | 2005-08-31 13:41:20 -0700 (Wed, 31 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-enable.patch update to the latest API set with a more recent mozilla ------------------------------------------------------------------------ r993 | ahayatnagarkar | 2005-08-31 13:40:54 -0700 (Wed, 31 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/val_query.3 M /trunk/dnssec-tools/lib/libval/doc/val_query.pod Added a note that val_query() does not handle different types of records in the answer section. ------------------------------------------------------------------------ r992 | hardaker | 2005-08-31 13:31:56 -0700 (Wed, 31 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/README Updated to reference that only 1.7.10 has been tested recently. ------------------------------------------------------------------------ r989 | ahayatnagarkar | 2005-08-31 13:02:14 -0700 (Wed, 31 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_policy.c Do not reverse the order of nameservers in resolv.conf file. ------------------------------------------------------------------------ r987 | ahayatnagarkar | 2005-08-31 10:27:53 -0700 (Wed, 31 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_policy.c Set variables to NULL after freeing memory. ------------------------------------------------------------------------ r986 | hardaker | 2005-08-31 09:36:31 -0700 (Wed, 31 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/README rework note about system patches based on compiling based on a known working source set, like a source RPM, instead of explicitly mentioning certain patch work arounds. ------------------------------------------------------------------------ r985 | tewok | 2005-08-31 09:30:51 -0700 (Wed, 31 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/doc/libsres.3 M /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.3 M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.3 M /trunk/dnssec-tools/lib/libval/doc/val_query.3 Latest version. ------------------------------------------------------------------------ r984 | tewok | 2005-08-31 09:20:05 -0700 (Wed, 31 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts Fixed some typos. ------------------------------------------------------------------------ r983 | tewok | 2005-08-31 09:13:51 -0700 (Wed, 31 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts Deleted an unnecessary hyphen. ------------------------------------------------------------------------ r982 | tewok | 2005-08-31 09:09:36 -0700 (Wed, 31 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts Formatting fixes. Typo fixes. ------------------------------------------------------------------------ r981 | tewok | 2005-08-31 08:21:07 -0700 (Wed, 31 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/doc/libsres.pod Fixed constant name. ------------------------------------------------------------------------ r980 | hserus | 2005-08-31 08:11:30 -0700 (Wed, 31 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/resolver.h Fixed typo in SR_UNSUPP_EDNS0_LABEL definition ------------------------------------------------------------------------ r979 | tewok | 2005-08-31 08:02:13 -0700 (Wed, 31 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/doc/libsres.pod Fixed my own capitalization error. ------------------------------------------------------------------------ r978 | tewok | 2005-08-31 07:58:37 -0700 (Wed, 31 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/doc/libsres.pod Formatting fix for synopsis. ------------------------------------------------------------------------ r977 | tewok | 2005-08-31 07:53:43 -0700 (Wed, 31 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/doc/libsres.pod Formatting fixes. ------------------------------------------------------------------------ r976 | tewok | 2005-08-31 07:38:14 -0700 (Wed, 31 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.pod M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.pod M /trunk/dnssec-tools/lib/libval/doc/val_query.pod Formatting fixes. ------------------------------------------------------------------------ r975 | tewok | 2005-08-31 07:25:34 -0700 (Wed, 31 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/podmantex M /trunk/dnssec-tools/podtrans Formatting fixes. ------------------------------------------------------------------------ r974 | tewok | 2005-08-31 07:23:12 -0700 (Wed, 31 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Formatting fix. ------------------------------------------------------------------------ r973 | hserus | 2005-08-31 06:29:31 -0700 (Wed, 31 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/doc/libsres.3 M /trunk/dnssec-tools/lib/libsres/doc/libsres.pod M /trunk/dnssec-tools/lib/libval/doc/libval.3 M /trunk/dnssec-tools/lib/libval/doc/libval.pod Minor fixes to the documentation. ------------------------------------------------------------------------ r972 | tewok | 2005-08-31 06:27:46 -0700 (Wed, 31 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/modules/rollrec.pm M /trunk/dnssec-tools/tools/modules/timetrans.pm M /trunk/dnssec-tools/tools/modules/tooloptions.pm Formatting fixes. ------------------------------------------------------------------------ r971 | tewok | 2005-08-31 06:12:43 -0700 (Wed, 31 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm Formatting fixes. ------------------------------------------------------------------------ r970 | tewok | 2005-08-31 06:08:45 -0700 (Wed, 31 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/donuts/donuts Fixed a typo. Formatting fixes. ------------------------------------------------------------------------ r969 | ahayatnagarkar | 2005-08-30 08:13:46 -0700 (Tue, 30 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c *h_errnop should be set to NETDB_SUCCESS. ------------------------------------------------------------------------ r968 | ahayatnagarkar | 2005-08-30 08:03:11 -0700 (Tue, 30 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_policy.c Replaced strstr() with strncmp() in init_respol. ------------------------------------------------------------------------ r967 | hardaker | 2005-08-29 16:07:31 -0700 (Mon, 29 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts document the tcpdump options ------------------------------------------------------------------------ r966 | hardaker | 2005-08-29 15:58:50 -0700 (Mon, 29 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts add the ability to start tcpdump just before a donuts run begins ------------------------------------------------------------------------ r965 | hardaker | 2005-08-29 15:58:26 -0700 (Mon, 29 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donutsd use proper Getopt::GUI::Long Configure call ------------------------------------------------------------------------ r964 | ahayatnagarkar | 2005-08-29 07:24:38 -0700 (Mon, 29 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/configure Updated configure file. ------------------------------------------------------------------------ r963 | hserus | 2005-08-29 07:24:05 -0700 (Mon, 29 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_query.c Return SR_NO_ANSWER if the name server turns out to be NULL ------------------------------------------------------------------------ r962 | hserus | 2005-08-29 07:04:01 -0700 (Mon, 29 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/configure.in Added libs/libsres/doc to the list of directories to build ------------------------------------------------------------------------ r961 | hserus | 2005-08-29 07:01:15 -0700 (Mon, 29 Aug 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/libsres/doc/Makefile.in Create man pages for pod documentation ------------------------------------------------------------------------ r960 | hserus | 2005-08-29 07:00:14 -0700 (Mon, 29 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/Makefile.in Modified to build the doc subdirectory also. ------------------------------------------------------------------------ r959 | hserus | 2005-08-29 06:58:53 -0700 (Mon, 29 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/Makefile.in Add target for creating the libval.3 man page ------------------------------------------------------------------------ r958 | hserus | 2005-08-29 06:56:51 -0700 (Mon, 29 Aug 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/libsres/doc/libsres.3 Added man page for the core libsres interfaces. ------------------------------------------------------------------------ r957 | hserus | 2005-08-29 06:55:05 -0700 (Mon, 29 Aug 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/libval/doc/libval.3 Added man page for the core libval interfaces ------------------------------------------------------------------------ r956 | hserus | 2005-08-29 06:54:10 -0700 (Mon, 29 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/val_query.3 Updated with info about val_x_query() ------------------------------------------------------------------------ r955 | hserus | 2005-08-29 06:20:22 -0700 (Mon, 29 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/crypto/val_rsamd5.c Commented out definition of unused variable. ------------------------------------------------------------------------ r954 | hserus | 2005-08-29 06:18:36 -0700 (Mon, 29 Aug 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/libsres/doc A /trunk/dnssec-tools/lib/libsres/doc/implementation-notes A /trunk/dnssec-tools/lib/libsres/doc/libsres.pod A /trunk/dnssec-tools/lib/libval/doc/implementation_notes A /trunk/dnssec-tools/lib/libval/doc/libval.pod Added more documentation for the library. ------------------------------------------------------------------------ r953 | hserus | 2005-08-29 06:16:07 -0700 (Mon, 29 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_policy.c No longer using the "const" qualifier for label. Modified to ensure that the correct label and scope were compared in check_relevance() ------------------------------------------------------------------------ r952 | hserus | 2005-08-29 06:14:14 -0700 (Mon, 29 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_verify.c Modified to only store validation results within the assertion status field ------------------------------------------------------------------------ r951 | hserus | 2005-08-29 06:11:51 -0700 (Mon, 29 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_errors.h Moved some DNS-specific error codes to the resolver library. Added new definition for SR_MISSING_GLUE and renamed CONFLICTING_ANSWERS to SR_CONFLICTING_ANSWERS and placed it within the set of DNS errors ------------------------------------------------------------------------ r950 | hserus | 2005-08-29 06:07:50 -0700 (Mon, 29 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_context.c M /trunk/dnssec-tools/lib/libval/val_context.h M /trunk/dnssec-tools/lib/libval/val_policy.h M /trunk/dnssec-tools/lib/libval/validator.h No longer using the "const" qualifier on the label. ------------------------------------------------------------------------ r949 | hserus | 2005-08-29 06:04:55 -0700 (Mon, 29 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/README M /trunk/dnssec-tools/lib/libval/doc/val_query.pod Updated with details about the val_x_query() interface. ------------------------------------------------------------------------ r948 | hserus | 2005-08-29 06:03:36 -0700 (Mon, 29 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_support.c Remove error printing functionality for error codes that are no longer part of the validator. ------------------------------------------------------------------------ r947 | hserus | 2005-08-29 06:02:10 -0700 (Mon, 29 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.c Using updated definition of CONFLICTING_ANSWERS (renamed as SR_CONFLICTING_ANSWERS) ------------------------------------------------------------------------ r946 | hserus | 2005-08-29 06:00:10 -0700 (Mon, 29 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/README Modified to say that more documentation can be found in the doc directory ------------------------------------------------------------------------ r945 | hserus | 2005-08-29 05:58:14 -0700 (Mon, 29 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/Makefile.in M /trunk/dnssec-tools/lib/libval/val_resquery.c D /trunk/dnssec-tools/lib/libval/val_zone.c D /trunk/dnssec-tools/lib/libval/val_zone.h Moved functionality provided by val_zone.c to val_resquery.c ------------------------------------------------------------------------ r944 | hserus | 2005-08-29 05:54:57 -0700 (Mon, 29 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/resolver.h Moved DNS-related error codes from validator.h to here. ------------------------------------------------------------------------ r943 | hserus | 2005-08-29 05:53:37 -0700 (Mon, 29 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_query.c Check for NULL during name server clone operation ------------------------------------------------------------------------ r942 | hserus | 2005-08-29 05:52:47 -0700 (Mon, 29 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/README Updated to say that more documentation is in the doc directory ------------------------------------------------------------------------ r941 | hserus | 2005-08-26 15:44:12 -0700 (Fri, 26 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c Add test-case for testing DNS resolution error ------------------------------------------------------------------------ r940 | hserus | 2005-08-26 15:43:39 -0700 (Fri, 26 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_context.c M /trunk/dnssec-tools/lib/libval/val_policy.c M /trunk/dnssec-tools/lib/libval/val_verify.c M /trunk/dnssec-tools/lib/libval/val_zone.c No longer include validator.h from current path val_errors is already included from validator.h ------------------------------------------------------------------------ r939 | hserus | 2005-08-26 15:43:10 -0700 (Fri, 26 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_x_query.c No longer include validator.h from current path Include val_support.h ------------------------------------------------------------------------ r938 | hserus | 2005-08-26 15:42:09 -0700 (Fri, 26 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_support.c No longer include validator.h from current path val_errors is already included from validator.h Use the DNS_ERROR_LAST definition instead of the SR_LAST_ERROR offset. ------------------------------------------------------------------------ r937 | hserus | 2005-08-26 15:41:26 -0700 (Fri, 26 Aug 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_resquery.c No longer include validator.h from current path val_errors is already included from validator.h Bugfix: The error state must change to SR_REFERRAL_ERROR when do_referral() fails. ------------------------------------------------------------------------ r936 | hserus | 2005-08-26 15:40:48 -0700 (Fri, 26 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_print.h M /trunk/dnssec-tools/lib/libval/val_resquery.h M /trunk/dnssec-tools/lib/libval/val_verify.h M /trunk/dnssec-tools/lib/libval/val_zone.h Don't include files that the .c file already includes ------------------------------------------------------------------------ r935 | hserus | 2005-08-26 15:39:33 -0700 (Fri, 26 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_print.c Include validator.h, val_parse.h val_errors is already included from validator.h ------------------------------------------------------------------------ r934 | hserus | 2005-08-26 15:38:42 -0700 (Fri, 26 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_parse.c No longer include validator.h from current path Include stdio.h for getline() ------------------------------------------------------------------------ r933 | hserus | 2005-08-26 15:38:17 -0700 (Fri, 26 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c M /trunk/dnssec-tools/lib/libval/val_query.c No longer include validator.h from current path No need to include val_log.h ------------------------------------------------------------------------ r932 | hserus | 2005-08-26 15:37:37 -0700 (Fri, 26 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_cache.c No longer include validator.h from current path ------------------------------------------------------------------------ r931 | hserus | 2005-08-26 15:37:13 -0700 (Fri, 26 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_errors.h Rename REFERRAL_ERROR to SR_REFERRAL_ERROR. Move its value to the DNS error range. ------------------------------------------------------------------------ r930 | hserus | 2005-08-26 15:36:45 -0700 (Fri, 26 Aug 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.c No longer include validator.h from current path val_errors is already included from validator.h Bugfix: handle error cases returned by do_referral() Bugfix: store error cases in the proper results list ------------------------------------------------------------------------ r929 | hardaker | 2005-08-26 14:18:21 -0700 (Fri, 26 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/README updated build notes for compiling sources on recent systems where builds fail because of an updated freetype. Mention a mozilla patch for it. ------------------------------------------------------------------------ r928 | ahayatnagarkar | 2005-08-26 05:19:58 -0700 (Fri, 26 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/Makefile.bot Add section number and center title options to the pod2man command. ------------------------------------------------------------------------ r927 | ahayatnagarkar | 2005-08-26 05:19:15 -0700 (Fri, 26 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.3 M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.3 M /trunk/dnssec-tools/lib/libval/doc/val_query.3 Changed the man-page section to 3. Changed the center-title to "Programmer's Manual". ------------------------------------------------------------------------ r926 | hardaker | 2005-08-25 12:58:18 -0700 (Thu, 25 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/Makefile.bot M /trunk/dnssec-tools/Makefile.in M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in M /trunk/dnssec-tools/lib/libval/Makefile.in A /trunk/dnssec-tools/lib/libval/doc/Makefile.in A /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.3 A /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.3 A /trunk/dnssec-tools/lib/libval/doc/val_query.3 Generate and install man pages created from .pod docs. ------------------------------------------------------------------------ r925 | hardaker | 2005-08-25 09:43:44 -0700 (Thu, 25 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/README Change status from alpha-ish to beta-ish ------------------------------------------------------------------------ r924 | hserus | 2005-08-23 16:05:34 -0700 (Tue, 23 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_verify.c Propagate do_verify errors to the application instead of encapsulating this within VERIFY_PROC_ERROR ------------------------------------------------------------------------ r923 | hserus | 2005-08-23 16:04:52 -0700 (Tue, 23 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_policy.h Place paranthesis around macro parameters that may be pointers ------------------------------------------------------------------------ r922 | hserus | 2005-08-23 16:03:03 -0700 (Tue, 23 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_context.c M /trunk/dnssec-tools/lib/libval/val_context.h M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c M /trunk/dnssec-tools/lib/libval/val_x_query.c M /trunk/dnssec-tools/lib/libval/validator.h Changed the prototype of get_context() so that errors can be propagated to the application. ------------------------------------------------------------------------ r921 | hardaker | 2005-08-23 15:53:06 -0700 (Tue, 23 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner added some very early get-started-immediately examples to the synopsis ------------------------------------------------------------------------ r920 | hserus | 2005-08-23 15:50:51 -0700 (Tue, 23 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_support.c Add display strings for missing error codes. Remove those that are no longer needed. Also display a generic DNS_ERROR string for all DNS errors. ------------------------------------------------------------------------ r919 | hserus | 2005-08-23 15:49:15 -0700 (Tue, 23 Aug 2005) | 6 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_errors.h Added descriptions for error codes. Added definition for BOGUS_PROVABLE. Removed the CONTEXT_ERROR code since the actual policy configuration errors are now propagated to the application. Also removed MALFORMED_LOCALE and VERIFY_PROC_ERROR definitions. ------------------------------------------------------------------------ r918 | hserus | 2005-08-23 15:44:44 -0700 (Tue, 23 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.c Encapsulate all the failure cases that can be proved under the BOGUS_PROVABLE error code. ------------------------------------------------------------------------ r917 | tewok | 2005-08-23 13:53:47 -0700 (Tue, 23 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.pod M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.pod M /trunk/dnssec-tools/lib/libval/doc/val_query.pod Formatting fixes, minor rewording, sorted the referenced man pages, added man section numbers to the ref'd pages. ------------------------------------------------------------------------ r916 | ahayatnagarkar | 2005-08-23 12:55:56 -0700 (Tue, 23 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/validator.h Changed the val_context_t parameter to const val_context_t for val_x_gethostbyname(), val_x_getaddrinfo() and val_x_query(). ------------------------------------------------------------------------ r915 | ahayatnagarkar | 2005-08-23 12:28:39 -0700 (Tue, 23 Aug 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.pod M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.pod M /trunk/dnssec-tools/lib/libval/doc/val_query.pod Changed the val_context_t parameter type to const val_context_t. Added a couple of sentences saying that this parameter can also gives more control to the caller to specify resolver and validator policies. (and to look at the man page for get_context() for more information.) ------------------------------------------------------------------------ r914 | ahayatnagarkar | 2005-08-23 12:27:25 -0700 (Tue, 23 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.h M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c M /trunk/dnssec-tools/lib/libval/val_gethostbyname.h M /trunk/dnssec-tools/lib/libval/val_x_query.c M /trunk/dnssec-tools/lib/libval/val_x_query.h Changed the val_context_t parameter type to const val_context_t. ------------------------------------------------------------------------ r913 | hserus | 2005-08-23 11:49:14 -0700 (Tue, 23 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_x_query.c M /trunk/dnssec-tools/lib/libval/validator.h Don't show free_validator_cache() in the exported API list as yet. ------------------------------------------------------------------------ r912 | hserus | 2005-08-23 10:34:28 -0700 (Tue, 23 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/EXPORT.sym Include the my_malloc, my_free and my_strdup to the list of exported symbols just in case MEMORY_DEBUGGING is defined ------------------------------------------------------------------------ r911 | ahayatnagarkar | 2005-08-23 10:26:00 -0700 (Tue, 23 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/spfmilter-0.97_dnssec_patch.txt M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt No need to check for validator header files during configuration. ------------------------------------------------------------------------ r910 | hserus | 2005-08-23 10:25:52 -0700 (Tue, 23 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/validator.h Add the p_val_error() interface to the list of exported interfaces ------------------------------------------------------------------------ r909 | ahayatnagarkar | 2005-08-23 10:25:25 -0700 (Tue, 23 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.4_dnssec_patch.txt Change val_api.h to validator.h. ------------------------------------------------------------------------ r908 | hserus | 2005-08-23 10:25:06 -0700 (Tue, 23 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_errors.h M /trunk/dnssec-tools/lib/libval/val_support.h Moved prototype for p_val_error() from val_errors.h to val_support.h ------------------------------------------------------------------------ r907 | hserus | 2005-08-23 09:58:57 -0700 (Tue, 23 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.pod M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.pod M /trunk/dnssec-tools/lib/libval/doc/val_query.pod Include validator.h instead of val_api.h ------------------------------------------------------------------------ r906 | hserus | 2005-08-23 09:58:07 -0700 (Tue, 23 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_support.h Moved add_to_query_chain(), free_query_chain() from val_support.c to val_assertion.c since the latter is the only file where these methods are used. ------------------------------------------------------------------------ r905 | hserus | 2005-08-23 09:57:11 -0700 (Tue, 23 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/getaddr.c M /trunk/dnssec-tools/lib/libval/bin/gethost.c M /trunk/dnssec-tools/lib/libval/bin/validate.c M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c M /trunk/dnssec-tools/lib/libval/val_query.c M /trunk/dnssec-tools/lib/libval/val_x_query.c It is sufficient to include validator.h for all programs using functions exported by libval. ------------------------------------------------------------------------ r904 | hserus | 2005-08-23 09:50:17 -0700 (Tue, 23 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_support.c Moved add_to_query_chain(), free_query_chain() from val_support.c to val_assertion.c since the latter is the only file where these methods are used. ------------------------------------------------------------------------ r903 | hserus | 2005-08-23 09:49:14 -0700 (Tue, 23 Aug 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/lib/libval/validator.h Moved the val_result structure from val_assertion.h to here since this is part of the libval API. Include val_errors.h so that other programs need not include this. ADd prototypes for all exported functions. ------------------------------------------------------------------------ r902 | hserus | 2005-08-23 09:47:35 -0700 (Tue, 23 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_errors.h Use <> instead of "" for includes ------------------------------------------------------------------------ r901 | hserus | 2005-08-23 09:46:45 -0700 (Tue, 23 Aug 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.h Moved add_to_query_chain(), free_query_chain() from val_support.c to val_assertion.c since the latter is the only file where these methods are used. Moved the val_result structure to validator.h since this is part of the libval API ------------------------------------------------------------------------ r900 | hserus | 2005-08-23 09:46:04 -0700 (Tue, 23 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.c Don't include val_api.h Moved add_to_query_chain(), free_query_chain() from val_support.c to val_assertion.c since the latter is the only file where these methods are used. ------------------------------------------------------------------------ r899 | hserus | 2005-08-23 09:43:44 -0700 (Tue, 23 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/Makefile.in It is sufficient to install validator.h instead of five different header files ------------------------------------------------------------------------ r898 | hserus | 2005-08-23 09:41:57 -0700 (Tue, 23 Aug 2005) | 2 lines Changed paths: D /trunk/dnssec-tools/lib/libval/val_api.h No longer using val_api.h. It should be sufficient to include ------------------------------------------------------------------------ r897 | hserus | 2005-08-23 08:51:45 -0700 (Tue, 23 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c resolve_n_check() now calls add_to_query_chain() first. ------------------------------------------------------------------------ r896 | hserus | 2005-08-23 08:47:29 -0700 (Tue, 23 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.h First parameter to resolve_n_check() is now of type u_char *. ------------------------------------------------------------------------ r895 | hserus | 2005-08-23 08:46:09 -0700 (Tue, 23 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.c M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c M /trunk/dnssec-tools/lib/libval/val_x_query.c resolve_n_check() invokes add_to_query_chain() first. First parameter to resolve_n_check() is now of type u_char *. ------------------------------------------------------------------------ r894 | ahayatnagarkar | 2005-08-23 05:54:59 -0700 (Tue, 23 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/getaddr.c M /trunk/dnssec-tools/lib/libval/bin/gethost.c M /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.pod M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.pod M /trunk/dnssec-tools/lib/libval/doc/val_query.pod Include val_api.h instead of individual header files. ------------------------------------------------------------------------ r893 | tewok | 2005-08-22 18:20:04 -0700 (Mon, 22 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm M /trunk/dnssec-tools/tools/modules/README M /trunk/dnssec-tools/tools/modules/conf.pm M /trunk/dnssec-tools/tools/modules/file-keyrec M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/tests/Makefile.PL M /trunk/dnssec-tools/tools/modules/tests/test-conf M /trunk/dnssec-tools/tools/modules/tests/test-keyrec M /trunk/dnssec-tools/tools/modules/tests/test-rollmgr M /trunk/dnssec-tools/tools/modules/tests/test-rollrec M /trunk/dnssec-tools/tools/modules/tests/test-toolopts1 M /trunk/dnssec-tools/tools/modules/tests/test-toolopts2 M /trunk/dnssec-tools/tools/modules/tests/test-toolopts3 M /trunk/dnssec-tools/tools/modules/timetrans.pm dnssec-tools -> DNSSEC-Tools change. ------------------------------------------------------------------------ r892 | tewok | 2005-08-22 18:09:52 -0700 (Mon, 22 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/logwatch/README M /trunk/dnssec-tools/tools/logwatch/conf/logfiles/dnssec.conf M /trunk/dnssec-tools/tools/logwatch/conf/logfiles/resolver.conf M /trunk/dnssec-tools/tools/logwatch/conf/services/dnssec.conf M /trunk/dnssec-tools/tools/logwatch/conf/services/resolver.conf M /trunk/dnssec-tools/tools/logwatch/scripts/services/dnssec M /trunk/dnssec-tools/tools/logwatch/scripts/services/resolver M /trunk/dnssec-tools/tools/logwatch/scripts/shared/applybinddate M /trunk/dnssec-tools/tools/modules/tooloptions.pm M /trunk/dnssec-tools/tools/patches/README dnssec-tools -> DNSSEC-Tools change. ------------------------------------------------------------------------ r891 | tewok | 2005-08-22 17:58:05 -0700 (Mon, 22 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/etc/README M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm M /trunk/dnssec-tools/tools/linux/ifup-dyn-dns/README M /trunk/dnssec-tools/tools/mapper/mapper dnssec-tools -> DNSSEC-Tools change. ------------------------------------------------------------------------ r890 | tewok | 2005-08-22 17:46:33 -0700 (Mon, 22 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/INSTALL M /trunk/dnssec-tools/README M /trunk/dnssec-tools/lib/libval/README M /trunk/dnssec-tools/lib/libval/doc/README M /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.pod M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.pod M /trunk/dnssec-tools/lib/libval/doc/val_query.pod M /trunk/dnssec-tools/podmantex M /trunk/dnssec-tools/podtrans M /trunk/dnssec-tools/tools/README M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow M /trunk/dnssec-tools/tools/donuts/Rule.pm M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/donuts/donutsd M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt dnssec-tools -> DNSSEC-Tools change. ------------------------------------------------------------------------ r889 | tewok | 2005-08-22 17:30:12 -0700 (Mon, 22 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/README M /trunk/dnssec-tools/tools/scripts/clean-keyrec M /trunk/dnssec-tools/tools/scripts/confchk M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/keyrec-check M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/zonesigner dnssec-tools -> DNSSEC-Tools change. ------------------------------------------------------------------------ r888 | tewok | 2005-08-22 17:22:05 -0700 (Mon, 22 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow Let's use proper grammar in that complete sentence... ------------------------------------------------------------------------ r887 | tewok | 2005-08-22 17:21:04 -0700 (Mon, 22 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow Fragment -> complete sentence. ------------------------------------------------------------------------ r886 | tewok | 2005-08-22 17:19:58 -0700 (Mon, 22 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow Fixed a typo and added a few formatting spaces. ------------------------------------------------------------------------ r885 | tewok | 2005-08-22 16:25:08 -0700 (Mon, 22 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.pod M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.pod M /trunk/dnssec-tools/lib/libval/doc/val_query.pod Formatting modifications to match the rest of the pod manpages. Reworded a few things along the way. ------------------------------------------------------------------------ r884 | ahayatnagarkar | 2005-08-22 15:18:10 -0700 (Mon, 22 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.h Added the val_x_getaddrinfo() function. ------------------------------------------------------------------------ r883 | ahayatnagarkar | 2005-08-22 13:47:46 -0700 (Mon, 22 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/thunderbird A /trunk/dnssec-tools/apps/thunderbird/.cvsignore Ignore spfdnssec.xpi ------------------------------------------------------------------------ r882 | ahayatnagarkar | 2005-08-22 13:44:01 -0700 (Mon, 22 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin M /trunk/dnssec-tools/lib/libval/bin/.cvsignore Added *.o, *.lo, .libs, Makefile. ------------------------------------------------------------------------ r881 | ahayatnagarkar | 2005-08-22 13:40:45 -0700 (Mon, 22 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.h Add val_freeaddrinfo() function. ------------------------------------------------------------------------ r880 | ahayatnagarkar | 2005-08-22 13:40:08 -0700 (Mon, 22 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_x_query.h Adjust indentation ------------------------------------------------------------------------ r879 | ahayatnagarkar | 2005-08-22 13:39:24 -0700 (Mon, 22 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_gethostbyname.h Include validator.h ------------------------------------------------------------------------ r878 | ahayatnagarkar | 2005-08-22 13:38:49 -0700 (Mon, 22 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/getaddr.c Use val_freeaddrinfo() instead of freeaddrinfo() ------------------------------------------------------------------------ r877 | ahayatnagarkar | 2005-08-22 13:38:20 -0700 (Mon, 22 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/gethost.c Include val_gethostbyname.h instead of val_api.h ------------------------------------------------------------------------ r876 | hardaker | 2005-08-22 10:10:14 -0700 (Mon, 22 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm remove really really old debugging print accidentally left in. ------------------------------------------------------------------------ r875 | hardaker | 2005-08-22 10:08:01 -0700 (Mon, 22 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm remove debugging print accidentally left in. ------------------------------------------------------------------------ r874 | hardaker | 2005-08-22 10:06:17 -0700 (Mon, 22 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow - Allow saving the output as .fig format. - Document the magicpoint requirements ------------------------------------------------------------------------ r873 | hardaker | 2005-08-22 10:05:11 -0700 (Mon, 22 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm M /trunk/dnssec-tools/tools/scripts/zonesigner reinstate the availability of the GUI-wrapper and shift to Getopt::GUI::Long. ------------------------------------------------------------------------ r872 | hserus | 2005-08-22 07:07:42 -0700 (Mon, 22 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_resquery.c Use the REFERRAL_ERROR definition from val_errors.h instead of the SR_REFERRAL_ERROR resolver error code. ------------------------------------------------------------------------ r871 | hserus | 2005-08-22 07:07:11 -0700 (Mon, 22 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.c Use the CONFLICTING_ANSWERS definition from val_errors.h instead of the SR_CONFLICTING_ANSWERS resolver error code. ------------------------------------------------------------------------ r870 | hserus | 2005-08-22 07:05:19 -0700 (Mon, 22 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_query.c Return SR_CALL_ERROR instead of SR_NO_NAMESERVER when no name servers are specified as arguments to the query_send() function ------------------------------------------------------------------------ r869 | hserus | 2005-08-22 07:03:39 -0700 (Mon, 22 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/resolver.h M /trunk/dnssec-tools/lib/libval/val_errors.h M /trunk/dnssec-tools/lib/libval/validator.h Moved validator specific definitions from libsres to libval. ------------------------------------------------------------------------ r868 | ahayatnagarkar | 2005-08-22 06:36:28 -0700 (Mon, 22 Aug 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/libval/doc/README README file for the libval/doc directory. ------------------------------------------------------------------------ r867 | ahayatnagarkar | 2005-08-22 06:31:26 -0700 (Mon, 22 Aug 2005) | 5 lines Changed paths: A /trunk/dnssec-tools/lib/libval/doc/val_query.pod Man page in POD format for the val_query(), val_x_query() and p_val_error() functions of the validator API. Initial Version. ------------------------------------------------------------------------ r866 | ahayatnagarkar | 2005-08-22 06:29:02 -0700 (Mon, 22 Aug 2005) | 5 lines Changed paths: A /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.pod Man page in POD format for the val_getaddrinfo(), val_x_getaddrinfo(), val_get_addrinfo_dnssec_status(), val_dupaddrinfo() and val_freeaddrinfo() functions of the validator API. ------------------------------------------------------------------------ r865 | ahayatnagarkar | 2005-08-22 06:28:40 -0700 (Mon, 22 Aug 2005) | 5 lines Changed paths: A /trunk/dnssec-tools/lib/libval/doc A /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.pod Man page in POD format for the val_gethostbyname(), val_x_gethostbyname(), val_get_hostent_dnssec_status(), val_duphostent() and val_freehostent() functions of the validator API. ------------------------------------------------------------------------ r864 | tewok | 2005-08-21 11:20:32 -0700 (Sun, 21 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm Fixed two ambiguous comments in the pod. ------------------------------------------------------------------------ r863 | tewok | 2005-08-21 10:51:11 -0700 (Sun, 21 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/COPYING M /trunk/dnssec-tools/INSTALL M /trunk/dnssec-tools/README M /trunk/dnssec-tools/apps/README M /trunk/dnssec-tools/apps/mozilla/README M /trunk/dnssec-tools/apps/thunderbird/README M /trunk/dnssec-tools/apps/thunderbird/content/spfdnssec/spfDnssecOverlay.js M /trunk/dnssec-tools/apps/thunderbird/content/spfdnssec/spfDnssecOverlay.xul M /trunk/dnssec-tools/lib/libsres/README M /trunk/dnssec-tools/lib/libval/README M /trunk/dnssec-tools/lib/libval/bin/README M /trunk/dnssec-tools/lib/libval/bin/validate.c M /trunk/dnssec-tools/lib/libval/crypto/val_dsasha1.c M /trunk/dnssec-tools/lib/libval/crypto/val_dsasha1.h M /trunk/dnssec-tools/lib/libval/crypto/val_rsamd5.c M /trunk/dnssec-tools/lib/libval/crypto/val_rsasha1.c M /trunk/dnssec-tools/lib/libval/crypto/val_rsasha1.h M /trunk/dnssec-tools/lib/libval/val_parse.h M /trunk/dnssec-tools/lib/libval/val_query.h M /trunk/dnssec-tools/lib/libval/val_verify.h M /trunk/dnssec-tools/podmantex M /trunk/dnssec-tools/podtrans M /trunk/dnssec-tools/tools/dnspktflow/Makefile.PL "Sparta, .nc" -> "SPARTA, Inc" ------------------------------------------------------------------------ r862 | tewok | 2005-08-21 10:18:16 -0700 (Sun, 21 Aug 2005) | 4 lines Changed paths: A /trunk/dnssec-tools/podmantex Command to convert pod man pages into man pages useful for including in larger documents that collect numerous man pages. ------------------------------------------------------------------------ r861 | tewok | 2005-08-21 10:02:12 -0700 (Sun, 21 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts Reworded a parenthetical comment. ------------------------------------------------------------------------ r860 | tewok | 2005-08-21 09:38:25 -0700 (Sun, 21 Aug 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm Changed the description in the pod Name section. Collapsed the Synopsis and Description sections into a single Description. Formatting changes. ------------------------------------------------------------------------ r859 | tewok | 2005-08-21 09:18:46 -0700 (Sun, 21 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donutsd Pod-mod to use the standard example domain. ------------------------------------------------------------------------ r858 | tewok | 2005-08-21 09:16:50 -0700 (Sun, 21 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO M /trunk/dnssec-tools/tools/scripts/README M /trunk/dnssec-tools/tools/scripts/clean-keyrec M /trunk/dnssec-tools/tools/scripts/confchk M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/keyrec-check M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/zonesigner Formatting fixes. ------------------------------------------------------------------------ r857 | tewok | 2005-08-21 08:59:48 -0700 (Sun, 21 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/tooloptions.pm Fixed casing of several instances of DNSSEC-Tools. ------------------------------------------------------------------------ r856 | tewok | 2005-08-21 08:52:24 -0700 (Sun, 21 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/file-keyrec Fixed the pod module name of a reference. ------------------------------------------------------------------------ r855 | tewok | 2005-08-21 08:44:03 -0700 (Sun, 21 Aug 2005) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/modules/file-keyrec Pod description of a keyrec file. ------------------------------------------------------------------------ r854 | tewok | 2005-08-21 07:57:44 -0700 (Sun, 21 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm Promotion of zonesigner manpage. ------------------------------------------------------------------------ r853 | tewok | 2005-08-21 07:57:18 -0700 (Sun, 21 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Formatting changes in the pod. ------------------------------------------------------------------------ r852 | tewok | 2005-08-20 10:54:38 -0700 (Sat, 20 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/timetrans.pm Formatting changes. ------------------------------------------------------------------------ r851 | tewok | 2005-08-20 10:22:04 -0700 (Sat, 20 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Gave a *much* better initial description of the module. Fixed some formatting. ------------------------------------------------------------------------ r850 | tewok | 2005-08-20 10:02:33 -0700 (Sat, 20 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm Fixed some formatting and added a reference. ------------------------------------------------------------------------ r849 | tewok | 2005-08-20 09:07:49 -0700 (Sat, 20 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm Emboldened a word. ------------------------------------------------------------------------ r848 | ahayatnagarkar | 2005-08-20 09:04:18 -0700 (Sat, 20 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.4_dnssec_patch.txt Set h_errno to the errno value returned by val_gethostbyname(). ------------------------------------------------------------------------ r847 | tewok | 2005-08-20 09:01:50 -0700 (Sat, 20 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm Added a very brief description. ------------------------------------------------------------------------ r846 | ahayatnagarkar | 2005-08-20 08:51:28 -0700 (Sat, 20 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.4_dnssec_patch.txt Use the new thread-safe version of val_gethostbyname(). ------------------------------------------------------------------------ r845 | ahayatnagarkar | 2005-08-20 07:05:52 -0700 (Sat, 20 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/gethost.c M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c M /trunk/dnssec-tools/lib/libval/val_gethostbyname.h Added a parameter (int *h_errnop) to val_gethostbyname and val_x_gethostbyname so as to make them thread-safe. The h_errno is now returned in these parameters. ------------------------------------------------------------------------ r844 | tewok | 2005-08-19 20:30:09 -0700 (Fri, 19 Aug 2005) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow Added a copyright section at the top of the script. Fixed a few typos. Added a description section to the pod. Sparta->SPARTA. ------------------------------------------------------------------------ r843 | tewok | 2005-08-19 20:16:54 -0700 (Fri, 19 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/keyrec-check Fixed the pod summary. ------------------------------------------------------------------------ r842 | tewok | 2005-08-19 20:15:50 -0700 (Fri, 19 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Pod fixes. ------------------------------------------------------------------------ r841 | tewok | 2005-08-19 19:45:14 -0700 (Fri, 19 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper Embolden a Perl module name in the pod. ------------------------------------------------------------------------ r840 | tewok | 2005-08-19 19:40:35 -0700 (Fri, 19 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper Changed a filename to bold, rather than italicize. ------------------------------------------------------------------------ r839 | tewok | 2005-08-19 19:29:37 -0700 (Fri, 19 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper Add a real synopsis. Fixed typos, reworded some things. ------------------------------------------------------------------------ r838 | tewok | 2005-08-19 19:02:24 -0700 (Fri, 19 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donutsd Fixed some typos and did some rewording. ------------------------------------------------------------------------ r837 | tewok | 2005-08-19 18:58:44 -0700 (Fri, 19 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts Fixed a couple typos. ------------------------------------------------------------------------ r836 | tewok | 2005-08-19 18:51:42 -0700 (Fri, 19 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts Deleted a "./" from the pod. ------------------------------------------------------------------------ r835 | hardaker | 2005-08-19 17:01:12 -0700 (Fri, 19 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt Added many missing rule descriptions ------------------------------------------------------------------------ r834 | tewok | 2005-08-19 16:53:11 -0700 (Fri, 19 Aug 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm Added a copyright. Fixed some pod formatting. Reworded some pod. ------------------------------------------------------------------------ r833 | hardaker | 2005-08-19 12:55:38 -0700 (Fri, 19 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm M /trunk/dnssec-tools/tools/donuts/donuts longer, but easier to read, formatting of the rules from the -R switch. ------------------------------------------------------------------------ r832 | hserus | 2005-08-19 09:55:42 -0700 (Fri, 19 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c Allow test cases to run automatically ------------------------------------------------------------------------ r831 | hserus | 2005-08-19 09:35:10 -0700 (Fri, 19 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_debug.c Include res_support.h ------------------------------------------------------------------------ r830 | hserus | 2005-08-19 09:30:48 -0700 (Fri, 19 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_policy.c Correct memory free-up logic ------------------------------------------------------------------------ r829 | hserus | 2005-08-19 09:27:34 -0700 (Fri, 19 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_parse.c Use MALLOC instead of malloc ------------------------------------------------------------------------ r828 | ahayatnagarkar | 2005-08-19 09:21:35 -0700 (Fri, 19 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.4_dnssec_patch.txt Updated to use the new form of val_gethostbyname() and val_freehostent(). ------------------------------------------------------------------------ r827 | hserus | 2005-08-19 09:16:24 -0700 (Fri, 19 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/crypto/val_rsamd5.c Use MALLOC in place of malloc. Perform proper clean-up of allocated memory. ------------------------------------------------------------------------ r826 | hserus | 2005-08-19 09:14:43 -0700 (Fri, 19 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_verify.c Use MALLOC/FREE instead of malloc/free Perform proper clean-up of rrsig_rdata.signature and dnskey.public_key ------------------------------------------------------------------------ r825 | hserus | 2005-08-19 09:12:45 -0700 (Fri, 19 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_assertion.c Perform proper clean-up of dnskey.public_key ------------------------------------------------------------------------ r824 | hserus | 2005-08-19 09:11:46 -0700 (Fri, 19 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_debug.c Use MALLOC/FREE instead of malloc/free ------------------------------------------------------------------------ r823 | hardaker | 2005-08-19 08:04:05 -0700 (Fri, 19 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts change -C wording to remove odd typo ------------------------------------------------------------------------ r822 | tewok | 2005-08-19 07:46:57 -0700 (Fri, 19 Aug 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts Fixed a typo. Made some font-face changes to bring this page in harmony with many of the other tools man pages. ------------------------------------------------------------------------ r821 | ahayatnagarkar | 2005-08-19 07:03:28 -0700 (Fri, 19 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/spfmilter-0.97_dnssec_patch.txt M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt Check for query_send() in libsres instead of __ns_initparse. ------------------------------------------------------------------------ r820 | ahayatnagarkar | 2005-08-19 06:57:17 -0700 (Fri, 19 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt Added flags parameter to the val_query() call. In configure.ac, check for the query_send function in libsres. ------------------------------------------------------------------------ r819 | ahayatnagarkar | 2005-08-18 15:04:06 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt Changed printf to SPF_print. Updated to use new val_query interface. ------------------------------------------------------------------------ r818 | ahayatnagarkar | 2005-08-18 15:01:59 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/val_errors.h Added #include for resolver.h. Needed for SR_LAST_ERROR. ------------------------------------------------------------------------ r817 | ahayatnagarkar | 2005-08-18 14:24:40 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/README Removed reference to the 'obsolete' directory. ------------------------------------------------------------------------ r816 | ahayatnagarkar | 2005-08-18 14:21:53 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: D /trunk/dnssec-tools/apps/sendmail/obsolete Removed obsolete code. ------------------------------------------------------------------------ r815 | ahayatnagarkar | 2005-08-18 13:39:28 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/EXPORT.sym Added export symbols __ns_name_ntop and __ns_name_unpack. ------------------------------------------------------------------------ r814 | ahayatnagarkar | 2005-08-18 13:16:29 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/libval/bin/Makefile.in A Makefile input file for the validator utilities. ------------------------------------------------------------------------ r813 | ahayatnagarkar | 2005-08-18 13:11:35 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/Makefile.in M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in Remove reference to libvalidat, rename val_stub to libval. ------------------------------------------------------------------------ r812 | ahayatnagarkar | 2005-08-18 13:09:16 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/bin/README Added header and copyright notice. ------------------------------------------------------------------------ r811 | ahayatnagarkar | 2005-08-18 13:08:18 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libval/README Mention the ./bin directory. ------------------------------------------------------------------------ r810 | ahayatnagarkar | 2005-08-18 13:07:16 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/libval/bin/README Initial version of the README file. ------------------------------------------------------------------------ r809 | ahayatnagarkar | 2005-08-18 12:56:15 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/libval A /trunk/dnssec-tools/lib/libval/.cvsignore A /trunk/dnssec-tools/lib/libval/Makefile.in A /trunk/dnssec-tools/lib/libval/README A /trunk/dnssec-tools/lib/libval/bin A /trunk/dnssec-tools/lib/libval/bin/.cvsignore A /trunk/dnssec-tools/lib/libval/bin/getaddr.c A /trunk/dnssec-tools/lib/libval/bin/gethost.c A /trunk/dnssec-tools/lib/libval/bin/validate.c A /trunk/dnssec-tools/lib/libval/bin/validator_driver.c A /trunk/dnssec-tools/lib/libval/crypto A /trunk/dnssec-tools/lib/libval/crypto/.cvsignore A /trunk/dnssec-tools/lib/libval/crypto/val_dsasha1.c A /trunk/dnssec-tools/lib/libval/crypto/val_dsasha1.h A /trunk/dnssec-tools/lib/libval/crypto/val_rsamd5.c A /trunk/dnssec-tools/lib/libval/crypto/val_rsamd5.h A /trunk/dnssec-tools/lib/libval/crypto/val_rsasha1.c A /trunk/dnssec-tools/lib/libval/crypto/val_rsasha1.h A /trunk/dnssec-tools/lib/libval/dnsval.conf A /trunk/dnssec-tools/lib/libval/val_api.h A /trunk/dnssec-tools/lib/libval/val_assertion.c A /trunk/dnssec-tools/lib/libval/val_assertion.h A /trunk/dnssec-tools/lib/libval/val_cache.c A /trunk/dnssec-tools/lib/libval/val_cache.h A /trunk/dnssec-tools/lib/libval/val_context.c A /trunk/dnssec-tools/lib/libval/val_context.h A /trunk/dnssec-tools/lib/libval/val_errors.h A /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c A /trunk/dnssec-tools/lib/libval/val_getaddrinfo.h A /trunk/dnssec-tools/lib/libval/val_gethostbyname.c A /trunk/dnssec-tools/lib/libval/val_gethostbyname.h A /trunk/dnssec-tools/lib/libval/val_log.c A /trunk/dnssec-tools/lib/libval/val_log.h A /trunk/dnssec-tools/lib/libval/val_parse.c A /trunk/dnssec-tools/lib/libval/val_parse.h A /trunk/dnssec-tools/lib/libval/val_policy.c A /trunk/dnssec-tools/lib/libval/val_policy.h A /trunk/dnssec-tools/lib/libval/val_print.c A /trunk/dnssec-tools/lib/libval/val_print.h A /trunk/dnssec-tools/lib/libval/val_query.c A /trunk/dnssec-tools/lib/libval/val_query.h A /trunk/dnssec-tools/lib/libval/val_resquery.c A /trunk/dnssec-tools/lib/libval/val_resquery.h A /trunk/dnssec-tools/lib/libval/val_support.c A /trunk/dnssec-tools/lib/libval/val_support.h A /trunk/dnssec-tools/lib/libval/val_verify.c A /trunk/dnssec-tools/lib/libval/val_verify.h A /trunk/dnssec-tools/lib/libval/val_x_query.c A /trunk/dnssec-tools/lib/libval/val_x_query.h A /trunk/dnssec-tools/lib/libval/val_zone.c A /trunk/dnssec-tools/lib/libval/val_zone.h A /trunk/dnssec-tools/lib/libval/validator.h D /trunk/dnssec-tools/lib/val_stub Renamed the val_stub directory to libval. ------------------------------------------------------------------------ r808 | ahayatnagarkar | 2005-08-18 11:51:00 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: D /trunk/dnssec-tools/lib/libvalidat Removing obsolete code from libvalidat. ------------------------------------------------------------------------ r807 | hserus | 2005-08-18 11:27:45 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/getaddr.c Commented out usage of a constant that was not defined. ------------------------------------------------------------------------ r806 | hserus | 2005-08-18 10:50:47 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_support.h Add prototypes for memory management debug routines. ------------------------------------------------------------------------ r805 | hserus | 2005-08-18 10:45:36 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_errors.h Re-order some error conditions. ------------------------------------------------------------------------ r804 | hserus | 2005-08-18 10:44:07 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_support.c M /trunk/dnssec-tools/lib/libsres/res_support.h Bring memory management debug routines to the head of the file. ------------------------------------------------------------------------ r803 | hserus | 2005-08-18 10:42:41 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_assertion.c M /trunk/dnssec-tools/lib/val_stub/val_parse.c M /trunk/dnssec-tools/lib/val_stub/val_policy.c Perform/allow for proper free-up of memory. ------------------------------------------------------------------------ r802 | hserus | 2005-08-18 10:41:05 -0700 (Thu, 18 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_x_query.c Free up validator cache once we have the response. This will change once we have the ability to timeout entries in the cache. ------------------------------------------------------------------------ r801 | hserus | 2005-08-18 10:39:49 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_cache.c M /trunk/dnssec-tools/lib/val_stub/val_cache.h Add function to free up validator cache ------------------------------------------------------------------------ r799 | ahayatnagarkar | 2005-08-18 10:10:13 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_io_manager.c Moved some of the printf statements within an if (res_io_debug) statement. ------------------------------------------------------------------------ r798 | ahayatnagarkar | 2005-08-18 10:08:53 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_verify.c Removed the obsolete val_verify() function. ------------------------------------------------------------------------ r797 | ahayatnagarkar | 2005-08-18 10:08:17 -0700 (Thu, 18 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_query.c Removed code-duplication. val_query() now just calls val_x_query() with a NULL context, and packages the return value to conform to the res_query interface. ------------------------------------------------------------------------ r796 | ahayatnagarkar | 2005-08-18 10:06:22 -0700 (Thu, 18 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.c Removed code-duplication in val_gethostbyname(). val_gethostbyname() now just calls val_x_gethostbyname() with a NULL val_context parameter. ------------------------------------------------------------------------ r795 | ahayatnagarkar | 2005-08-18 10:04:43 -0700 (Thu, 18 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_query.h Removed declaration of _val_query(). Added declaration of val_query(). val_query() now takes an additional 'flags' parameter of type int. It is reserved for future use. ------------------------------------------------------------------------ r794 | ahayatnagarkar | 2005-08-18 10:03:25 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/main.c Called val_query with an additional 'flags' parameter. ------------------------------------------------------------------------ r793 | ahayatnagarkar | 2005-08-18 10:02:31 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/Makefile.in Added val_query.h and val_x_query.h as targets of install. ------------------------------------------------------------------------ r792 | ahayatnagarkar | 2005-08-18 10:01:19 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_api.h Moved the declaration of val_query to val_query.h. ------------------------------------------------------------------------ r791 | ahayatnagarkar | 2005-08-18 09:58:01 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/Makefile.in Changed the name of the command line tool from 'verify' to 'validate'. ------------------------------------------------------------------------ r790 | ahayatnagarkar | 2005-08-18 09:55:36 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_verify.h Removed the val_verify method. ------------------------------------------------------------------------ r789 | ahayatnagarkar | 2005-08-18 09:55:01 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/validator_driver.c Added another test case. ------------------------------------------------------------------------ r788 | tewok | 2005-08-18 09:34:02 -0700 (Thu, 18 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/fixkrf Fixed the opening pod description. Added a copyright notice to the pod. ------------------------------------------------------------------------ r787 | tewok | 2005-08-18 09:33:21 -0700 (Thu, 18 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/rollmgr.pm M /trunk/dnssec-tools/tools/modules/rollrec.pm M /trunk/dnssec-tools/tools/modules/timetrans.pm M /trunk/dnssec-tools/tools/modules/tooloptions.pm M /trunk/dnssec-tools/tools/scripts/clean-keyrec M /trunk/dnssec-tools/tools/scripts/confchk M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/keyrec-check M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/timetrans M /trunk/dnssec-tools/tools/scripts/zonesigner Added copyright notices to the pod. ------------------------------------------------------------------------ r786 | hardaker | 2005-08-18 09:27:14 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/Makefile.in install the dnspktflow tool ------------------------------------------------------------------------ r785 | tewok | 2005-08-18 09:26:58 -0700 (Thu, 18 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed part of the pod. Sparta->SPARTA change. ------------------------------------------------------------------------ r784 | tewok | 2005-08-18 09:25:58 -0700 (Thu, 18 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/etc/README M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm M /trunk/dnssec-tools/tools/linux/ifup-dyn-dns/README M /trunk/dnssec-tools/tools/logwatch/README M /trunk/dnssec-tools/tools/logwatch/conf/logfiles/dnssec.conf M /trunk/dnssec-tools/tools/logwatch/conf/logfiles/resolver.conf M /trunk/dnssec-tools/tools/logwatch/conf/services/dnssec.conf M /trunk/dnssec-tools/tools/logwatch/conf/services/resolver.conf M /trunk/dnssec-tools/tools/logwatch/scripts/services/dnssec M /trunk/dnssec-tools/tools/logwatch/scripts/services/resolver M /trunk/dnssec-tools/tools/logwatch/scripts/shared/applybinddate M /trunk/dnssec-tools/tools/mapper/Makefile.PL M /trunk/dnssec-tools/tools/mapper/mapper M /trunk/dnssec-tools/tools/modules/Makefile.PL M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm M /trunk/dnssec-tools/tools/modules/README M /trunk/dnssec-tools/tools/modules/conf.pm M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/tests/Makefile.PL M /trunk/dnssec-tools/tools/modules/tests/test-conf M /trunk/dnssec-tools/tools/modules/tests/test-keyrec M /trunk/dnssec-tools/tools/modules/tests/test-rollmgr M /trunk/dnssec-tools/tools/modules/tests/test-rollrec M /trunk/dnssec-tools/tools/modules/tests/test-timetrans M /trunk/dnssec-tools/tools/modules/tests/test-toolopts1 M /trunk/dnssec-tools/tools/modules/tests/test-toolopts2 M /trunk/dnssec-tools/tools/modules/tests/test-toolopts3 M /trunk/dnssec-tools/tools/modules/timetrans.pm M /trunk/dnssec-tools/tools/modules/tooloptions.pm M /trunk/dnssec-tools/tools/patches/README M /trunk/dnssec-tools/tools/scripts/Makefile.PL M /trunk/dnssec-tools/tools/scripts/README M /trunk/dnssec-tools/tools/scripts/clean-keyrec M /trunk/dnssec-tools/tools/scripts/confchk M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/fixkrf M /trunk/dnssec-tools/tools/scripts/keyrec-check M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/timetrans Sparta->SPARTA change. ------------------------------------------------------------------------ r783 | tewok | 2005-08-18 09:16:06 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Makefile.PL M /trunk/dnssec-tools/tools/donuts/Rule.pm M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/donuts/donutsd M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt Sparta->SPARTA change. ------------------------------------------------------------------------ r782 | hardaker | 2005-08-18 08:01:51 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/dnspktflow A /trunk/dnssec-tools/tools/dnspktflow/.cvsignore A /trunk/dnssec-tools/tools/dnspktflow/Makefile.PL A /trunk/dnssec-tools/tools/dnspktflow/dnspktflow new tool: dnspktflow, which traces the results of a tcpdump file to visually display DNS requests as they're passed from host to host ------------------------------------------------------------------------ r781 | hserus | 2005-08-18 07:49:05 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/dnsval.conf Add an example policy statement for zone security expectation status ------------------------------------------------------------------------ r780 | hserus | 2005-08-18 07:46:03 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/validator_driver.c Add additional test cases ------------------------------------------------------------------------ r779 | hserus | 2005-08-18 07:45:30 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_assertion.c Add a note about need for namecmp() where strstr() is used. ------------------------------------------------------------------------ r778 | hserus | 2005-08-18 07:44:18 -0700 (Thu, 18 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_verify.c Add logic for checking RRSIGs on wildcards. ------------------------------------------------------------------------ r777 | hserus | 2005-08-18 07:43:40 -0700 (Thu, 18 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_support.c In check_label_count() return the difference between labels in the name and labels in the RRSIG instead of simply returning the boolean status that a wildcard exists. ------------------------------------------------------------------------ r776 | hserus | 2005-08-17 16:53:29 -0700 (Wed, 17 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_assertion.c When querying the cache, make sure that only record sets with data present in them are returned, i.e this is not a cached BARE_RRSIG ------------------------------------------------------------------------ r775 | hserus | 2005-08-17 16:03:34 -0700 (Wed, 17 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_errors.h Made BARE_RRSIG a non-error condition. Added VALIDATION_ERROR to catch all errors that cannot be proved by some chain of trust ------------------------------------------------------------------------ r774 | hserus | 2005-08-17 16:01:47 -0700 (Wed, 17 Aug 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_assertion.c The check for a trusted zone now does a substring comparision between the query name and the configured zone. There is no longer an implicit requirement that a RRSIG be queried before this can return an answer. Use the VALIDATION_ERROR status for all errors that cannot be proved by a chain of trust. Modified NONSENSE_RESULT_SEQUENCE to not return TRUE if the previous error condition was NO_ERROR ------------------------------------------------------------------------ r773 | hserus | 2005-08-17 14:51:56 -0700 (Wed, 17 Aug 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_assertion.c Check for SR_ANS_BARE_RRIG instead of determining this status each time. Bare RRSIGs are present in individual RRsets, rather than different RRs within an RRset. Correct the logic that uses earlier assumption. Use the build_pending_query() method (where trusted keys are checked for) instead of crafting the queries for DS and DNSKEY by hand. ------------------------------------------------------------------------ r772 | hserus | 2005-08-17 14:36:29 -0700 (Wed, 17 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_x_query.c M /trunk/dnssec-tools/lib/val_stub/val_x_query.h M /trunk/dnssec-tools/lib/val_stub/validator_driver.c Swapped the ordering of the type and class parameters in val_x_query() to make it consistent with res_query() ------------------------------------------------------------------------ r771 | hserus | 2005-08-17 14:33:32 -0700 (Wed, 17 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/resolver.h Add an answer type for bare RRSIGs ------------------------------------------------------------------------ r770 | hserus | 2005-08-17 08:20:42 -0700 (Wed, 17 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_assertion.c Make the check for a trusted zone in a different function. Call this function while checking for *any* data, not just the DNSKEY. Error fix: assertions were not retaining failure conditions in verify_n_validate ------------------------------------------------------------------------ r769 | hserus | 2005-08-17 08:16:27 -0700 (Wed, 17 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/validator_driver.c Display the error number in addition to the error string ------------------------------------------------------------------------ r768 | hserus | 2005-08-17 06:59:29 -0700 (Wed, 17 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_assertion.c list of TODO items will appear in a separate file ------------------------------------------------------------------------ r767 | hserus | 2005-08-17 06:46:34 -0700 (Wed, 17 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_policy.c Modified to allow policies to be properly overridden inside switch_effective_policy(). ------------------------------------------------------------------------ r766 | tewok | 2005-08-16 20:30:30 -0700 (Tue, 16 Aug 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/podtrans Added -translator option for specifying a non-standard translator. Moved option processing into its own routine, and changed to use GetOptions(). Added some examples to the pod. ------------------------------------------------------------------------ r765 | hserus | 2005-08-16 11:38:50 -0700 (Tue, 16 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_x_query.c M /trunk/dnssec-tools/lib/val_stub/val_x_query.h Interchanged the order of class and type in the argument list. ------------------------------------------------------------------------ r764 | hserus | 2005-08-16 11:36:17 -0700 (Tue, 16 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_assertion.c Check the zone security expectation when deciding if the key is trusted. Fixed/cleaned up the trusted key checking routine. This routine directly returns the assertion state instead of an intermediate value. ------------------------------------------------------------------------ r763 | hserus | 2005-08-16 11:36:00 -0700 (Tue, 16 Aug 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_errors.h Rename error conditions that had a leading A_ to them. A_* is reserved for assertion states. Added a new error condition for describing zones that we never trust. Created a new error type for describing nonexistence of a name ------------------------------------------------------------------------ r762 | hserus | 2005-08-16 11:35:39 -0700 (Tue, 16 Aug 2005) | 6 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_policy.c Using definitions for all the keywords used in the validator configuration file instead of using hardcoded values. Corrected free-up logic for the trust-anchor policy chain No longer defining policy for not_preferred_* cases. Added logic for storing the zone security status as a policy element. Clear the policy pointer array before switching to a different label. ------------------------------------------------------------------------ r761 | hserus | 2005-08-16 11:35:26 -0700 (Tue, 16 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_policy.h Create definitions for all the keywords used in the validator configuration file instead of using hardcoded values. No longer defining policy for not_preferred_* cases. Defined a new policy type for storing the zone security status. ------------------------------------------------------------------------ r760 | hserus | 2005-08-16 11:34:58 -0700 (Tue, 16 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_support.c Display the error conditions for NONEXISTENT_NAME and NONEXISTENT_TYPE ------------------------------------------------------------------------ r759 | hserus | 2005-08-16 11:34:09 -0700 (Tue, 16 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/validator.h Moved A_TRUSTED to val_errors and split this into TRUSTED_KEY and TRUSTED_ZONE Removed all policy for not_preferred_* constructs. This will be special cased in the corresponding preferred_* policy constructs. ------------------------------------------------------------------------ r758 | hserus | 2005-08-15 14:21:43 -0700 (Mon, 15 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_x_query.c Use validator error codes where ever possible instead of resolver error codes. ------------------------------------------------------------------------ r757 | hserus | 2005-08-15 14:18:58 -0700 (Mon, 15 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/validator_driver.c Added include for val_resquery.h ------------------------------------------------------------------------ r756 | hserus | 2005-08-15 14:18:39 -0700 (Mon, 15 Aug 2005) | 9 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/validator.h Added definition for the DNS port Added definition for Q_ERROR_BASE. Resolver errors start from this number. Added definitions for delegation_info. Moved the query_list structure from val_resquery.c to here. Added three new elements to the query_chain structure: the name server list to where the query needs to be sent, the information pertaining to referrals and the transaction id for this query in the resolver. Modified the domain_info struct so that it now has a field for the error code instead of the error message. ------------------------------------------------------------------------ r755 | hserus | 2005-08-15 14:18:19 -0700 (Mon, 15 Aug 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_zone.c Use validator error codes where ever possible instead of resolver error codes. ifdef away the code that fetches missing glue. This logic makes it difficult to achieve asynchronous query generation. This will be re-written to follow the query chain approach. ------------------------------------------------------------------------ r754 | hserus | 2005-08-15 14:18:03 -0700 (Mon, 15 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_verify.c No longer using rrs_status in struct rrset_rec Use validator error codes where ever possible instead of resolver error codes. ------------------------------------------------------------------------ r753 | hserus | 2005-08-15 14:17:42 -0700 (Mon, 15 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_support.h Add prototypes for suport calls moved from val_assertion.c to val_support.c Removed prototypes for functions moved to libsres init_rr_set() and find_rr_set no longer take the tsig status as a parameter. ------------------------------------------------------------------------ r752 | hserus | 2005-08-15 14:17:30 -0700 (Mon, 15 Aug 2005) | 8 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_support.c Moved a bunch of (suport) calls from val_assertion.c to val_support.c Moved the name structure destruction routines to libsres Use validator error codes where ever possible instead of resolver error codes. Removed free() for no longer existent error message in domain_info No longer using rrs_status in struct rrset_rec init_rr_set() and find_rr_set no longer take the tsig status as a parameter. Don't display the generic DNS_FAILURE error message. ------------------------------------------------------------------------ r751 | hserus | 2005-08-15 14:17:14 -0700 (Mon, 15 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_resquery.h Removed the val_resquery() method; instead define the val_resquery_send() and val_requery_rcv() functions. ------------------------------------------------------------------------ r750 | hserus | 2005-08-15 14:16:59 -0700 (Mon, 15 Aug 2005) | 13 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_resquery.c Moved the query_list structure to validator.h. The static registry of queries sent out is now a part of the query_chain structure. Pass this value to the register_query and degregister_query functions. The deregister_query(ies) method now destroys all registered queries in this query_chain structure. Add convenience macro for merging RRsets Directly pass the matched query_chain structure to digest_response for the query name, type and class do_referral is no longer recursive. Directly pass the matched query_chain structure to do_referral for the query type and class. No longer returning the error string as a parameter, instead using the status field in query_chain structure. Referral specific information is saved off of the qc_referral field. Use validator error codes where ever possible instead of resolver error codes. Removed the val_resquery() method; instead define the val_resquery_send() and val_requery_rcv() functions. ------------------------------------------------------------------------ r749 | hserus | 2005-08-15 14:16:34 -0700 (Mon, 15 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_print.c No longer using rrs_status in struct rrset_rec Display error code in domain_info instead of the error message. ------------------------------------------------------------------------ r748 | hserus | 2005-08-15 14:16:13 -0700 (Mon, 15 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_policy.h Move definition of (D)NS_PORT to validator.h ------------------------------------------------------------------------ r747 | hserus | 2005-08-15 14:15:52 -0700 (Mon, 15 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_policy.c Use validator error codes where ever possible instead of resolver error codes. Error fix: line in getline(&line) should be set to NULL before next invocation. ------------------------------------------------------------------------ r746 | hserus | 2005-08-15 14:15:34 -0700 (Mon, 15 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_errors.h Clean and Re-organize error codes yet again. Major change here is that DNS (resolver) error codes are also made available. ------------------------------------------------------------------------ r745 | hserus | 2005-08-15 14:15:17 -0700 (Mon, 15 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_context.c Use validator error codes where ever possible instead of resolver error codes. ------------------------------------------------------------------------ r744 | hserus | 2005-08-15 14:14:53 -0700 (Mon, 15 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_cache.c No longer using rrs_status in struct rrset_rec ------------------------------------------------------------------------ r743 | hserus | 2005-08-15 14:14:32 -0700 (Mon, 15 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_assertion.h Remove prototypes for support calls moved from val_assertion.c to val_support.c ------------------------------------------------------------------------ r742 | hserus | 2005-08-15 14:14:14 -0700 (Mon, 15 Aug 2005) | 6 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_assertion.c Moved a bunch of (support) calls from val_assertion.c to val_support.c Use validator error codes where ever possible instead of resolver error codes. Modified to allow multiple outstanding queries at the same time Re-structured the try_verify_assertion method to use if-then-else instead of a switch-case construct. ------------------------------------------------------------------------ r741 | hserus | 2005-08-15 14:13:14 -0700 (Mon, 15 Aug 2005) | 6 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/resolver.h Re-organized error codes: removed un-used error codes and TSIG status codes. rrs_status is no longer a part of struct rrset_rec Added prototypes for name_server destruction routes; also modified the prototype for function calls in res_query that no longer have the error message passed as the last parameter. ------------------------------------------------------------------------ r740 | hserus | 2005-08-15 14:12:58 -0700 (Mon, 15 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_support.c Added routines for destroying the name_server structure ------------------------------------------------------------------------ r739 | hserus | 2005-08-15 14:12:41 -0700 (Mon, 15 Aug 2005) | 6 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_query.c Removed the res_sq_set_* function calls. Replaced these by error value codes. Also removed the error string variable from theres_something_wrong_with_header(), query_send(), response_recv(), get() Added code to clone the name_server structure when a query request is made. This data is free-d when the response/error is returned. ------------------------------------------------------------------------ r738 | hserus | 2005-08-15 14:12:14 -0700 (Mon, 15 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_io_manager.c Added declaration for res_quecmp Destroy nameserver attached with the expected arrival structure in res_sq_free_expected_arrival() ------------------------------------------------------------------------ r737 | hserus | 2005-08-15 14:11:53 -0700 (Mon, 15 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/EXPORT.sym Added symbols for name server destruction routines ------------------------------------------------------------------------ r736 | tewok | 2005-08-15 11:25:50 -0700 (Mon, 15 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm Un-overed a few lines for a better verbatim example. ------------------------------------------------------------------------ r735 | tewok | 2005-08-15 11:24:03 -0700 (Mon, 15 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Deleted an unnecessary TODO section from the pod. ------------------------------------------------------------------------ r734 | ahayatnagarkar | 2005-08-12 14:41:56 -0700 (Fri, 12 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/getaddr.c M /trunk/dnssec-tools/lib/val_stub/gethost.c Use the updated API. ------------------------------------------------------------------------ r733 | ahayatnagarkar | 2005-08-12 14:41:28 -0700 (Fri, 12 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_getaddrinfo.c M /trunk/dnssec-tools/lib/val_stub/val_getaddrinfo.h Replaced the ADDRINFO_DNSSEC_STATUS macro with the val_get_addrinfo_dnssec_status() function. ------------------------------------------------------------------------ r732 | ahayatnagarkar | 2005-08-12 14:40:17 -0700 (Fri, 12 Aug 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.c M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.h Removed the additional dnssec_status parameter to val_gethostbyname and val_x_gethostbyname functions, to make the API consistent with the val_getaddrinfo function. The dnssec-status can now be retrieved using val_get_hostent_dnssec_status() function. ------------------------------------------------------------------------ r731 | tewok | 2005-08-11 09:21:09 -0700 (Thu, 11 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Improved pod discussion of verbose levels. ------------------------------------------------------------------------ r730 | tewok | 2005-08-11 07:56:52 -0700 (Thu, 11 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Reworked the verbose output so the various levels of verbosity made more sense. ------------------------------------------------------------------------ r729 | hserus | 2005-08-10 09:38:07 -0700 (Wed, 10 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_verify.c M /trunk/dnssec-tools/lib/val_stub/val_x_query.c M /trunk/dnssec-tools/lib/val_stub/validator_driver.c Re-ordered the #include for validator.h so that new definitions within it are seen. ------------------------------------------------------------------------ r728 | hserus | 2005-08-10 09:37:51 -0700 (Wed, 10 Aug 2005) | 7 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/validator.h Added definition for RESOLV_CONF and modified VAL_CONFIGURATION_FILE; both of these are should be in /etc Moved definitions that were only used by the validator from resolver.h struct val_context contains the name_server struct as an element instead of the resolver_policy. Resolver policy should be a part of the name_server structure (LATER) ------------------------------------------------------------------------ r727 | hserus | 2005-08-10 09:37:29 -0700 (Wed, 10 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_zone.h res_zi_unverified_ns_list does not take res_policy as an argument any longer. The value should be picked up from the context. Added definitions for the zone status previously present in resolver.h ------------------------------------------------------------------------ r726 | hserus | 2005-08-10 09:37:15 -0700 (Wed, 10 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_zone.c res_zi_unverified_ns_list does not take res_policy as an argument any longer. The value should be picked up from the context. ------------------------------------------------------------------------ r725 | hserus | 2005-08-10 09:36:35 -0700 (Wed, 10 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_support.c Re-ordered the #include for validator.h so that new definitions within it are seen. changed the name of qname_chain->qc_... to qname_chain->qnc_... ------------------------------------------------------------------------ r724 | hserus | 2005-08-10 09:36:17 -0700 (Wed, 10 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_policy.c Made function names internally consistent. Added functions moved over from val_context.c Copied the resolv.conf parsing routine from val_query.c ------------------------------------------------------------------------ r723 | hserus | 2005-08-10 09:36:02 -0700 (Wed, 10 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_policy.h Added definitions for macros and functions moved over from val_context.c. Also added missing definitions. ------------------------------------------------------------------------ r722 | hserus | 2005-08-10 09:35:45 -0700 (Wed, 10 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_query.c No longer using res_policy val_resquery, instead we use the name server directly. Use the definition of RESOLV_CONF from validator.h ------------------------------------------------------------------------ r721 | hserus | 2005-08-10 09:35:23 -0700 (Wed, 10 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_resquery.h No longer using res_policy val_resquery, instead we use the name server directly ------------------------------------------------------------------------ r720 | hserus | 2005-08-10 09:34:56 -0700 (Wed, 10 Aug 2005) | 8 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_resquery.c changed the name of qname_chain->qc_... to qname_chain->qnc_... Renamed ns_list to ref_ns_list to indicate that this is actually the list generated for referrals No longer using res_policy, instead we use the name server directly. Add (incomplete) support for merging contents from cache and context to generate the name server list when there is no preference of where to direct the query to. ------------------------------------------------------------------------ r719 | hserus | 2005-08-10 09:34:30 -0700 (Wed, 10 Aug 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_context.c Moved all policy-related bits to val_policy.c Changed name of destroy_policy to destroy_valpol Changed argument in destroy_respol to be consistent with destroy_valpol ------------------------------------------------------------------------ r718 | hserus | 2005-08-10 09:34:12 -0700 (Wed, 10 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_cache.c Now including validator.h ------------------------------------------------------------------------ r717 | hserus | 2005-08-10 09:33:54 -0700 (Wed, 10 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_print.c changed the name of qname_chain->qc_... to qname_chain->qnc_... ------------------------------------------------------------------------ r716 | hserus | 2005-08-10 09:33:38 -0700 (Wed, 10 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_assertion.c Changed the name of qname_chain->qc_... to qname_chain->qnc_... Now using nslist in context instead of the resolver_policy structure ------------------------------------------------------------------------ r715 | hserus | 2005-08-10 09:33:04 -0700 (Wed, 10 Aug 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/resolver.h Added prototype definitions for new interfaces. Moved un-used definitions to validator.h Added definitions for useful values that were present in res_transaction.h ------------------------------------------------------------------------ r714 | hserus | 2005-08-10 09:32:39 -0700 (Wed, 10 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_tsig.c M /trunk/dnssec-tools/lib/libsres/res_tsig.h Removed the signed query and its length as parameters for res_tsig_verifies. The function still doesn't do anything useful. ------------------------------------------------------------------------ r713 | hserus | 2005-08-10 09:31:57 -0700 (Wed, 10 Aug 2005) | 6 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_query.c No longer include res_transaction.h directly. Added implementation for query_send and response_recv Modified get() to use above methods Changed fourth argument in get() from the resolver policy to the name server list ------------------------------------------------------------------------ r712 | hserus | 2005-08-10 09:31:22 -0700 (Wed, 10 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/Makefile.in D /trunk/dnssec-tools/lib/libsres/res_transaction.c D /trunk/dnssec-tools/lib/libsres/res_transaction.h Merged functionality provided by res_transaction.c into query_send and response_recv, now present in res_query ------------------------------------------------------------------------ r711 | hserus | 2005-08-10 09:30:05 -0700 (Wed, 10 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/EXPORT.sym Added symbols for query_send and response_recv ------------------------------------------------------------------------ r710 | tewok | 2005-08-10 08:01:55 -0700 (Wed, 10 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/podtrans Fixed podtrans' pod for new file exclusions. ------------------------------------------------------------------------ r709 | tewok | 2005-08-10 07:58:19 -0700 (Wed, 10 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/podtrans Added a few more file types to exclude. Fixed the regexp for object file exclusion. ------------------------------------------------------------------------ r708 | tewok | 2005-08-10 07:43:24 -0700 (Wed, 10 Aug 2005) | 4 lines Changed paths: A /trunk/dnssec-tools/podtrans Tool to search a hierarchy for pod files and translate them into a readable form. ------------------------------------------------------------------------ r707 | tewok | 2005-08-10 07:24:31 -0700 (Wed, 10 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/confchk Added two missing =back lines to the pod. ------------------------------------------------------------------------ r706 | tewok | 2005-08-10 05:58:05 -0700 (Wed, 10 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added guts to make -archdir and -savekeys functional. ------------------------------------------------------------------------ r705 | tewok | 2005-08-10 05:49:15 -0700 (Wed, 10 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added -nodate to the usage message. ------------------------------------------------------------------------ r704 | tewok | 2005-08-08 19:32:33 -0700 (Mon, 08 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Renamed -rollforce to -forceroll. Documented -forceroll. ------------------------------------------------------------------------ r703 | tewok | 2005-08-08 18:52:28 -0700 (Mon, 08 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Tidied up the long output. ------------------------------------------------------------------------ r702 | tewok | 2005-08-08 18:42:17 -0700 (Mon, 08 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added the -nodate flag, which prevents the display of a key's date. Fixed to display the length of ZSK keys. ------------------------------------------------------------------------ r701 | tewok | 2005-08-07 15:37:29 -0700 (Sun, 07 Aug 2005) | 15 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Moved argument checking prior to argument usage in call to named-checkzone. Added better handling for the -zone option, the zone-file argument, and the zone-out argument: - Renamed $zone to $zonefile. - Added a new $zone to hold the name of the zone being signed. - Made zone input and output files required arguments. - If -zone isn't given, then the zone input filename is used for the -zone option. ------------------------------------------------------------------------ r700 | tewok | 2005-08-07 15:01:36 -0700 (Sun, 07 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Add entries for -archivedir and -savekeys. ------------------------------------------------------------------------ r699 | tewok | 2005-08-07 12:33:23 -0700 (Sun, 07 Aug 2005) | 10 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Moved option printing into its own routine, as well as moving the location of when the printing will be performed. This gets rid of multiple sets of option displays when optsandargs() recurses. Commented default definitions. Added -archivedir and -savekey options. (These options are not completely implemented. Do not use yet!) ------------------------------------------------------------------------ r698 | tewok | 2005-08-07 09:34:09 -0700 (Sun, 07 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm Added entries for archivedir and savekeys. Added a note that true/false flags must be specified with a 1/0 value. ------------------------------------------------------------------------ r697 | tewok | 2005-08-07 09:32:43 -0700 (Sun, 07 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf Added entries for archivedir and savekeys. ------------------------------------------------------------------------ r696 | tewok | 2005-08-07 08:35:13 -0700 (Sun, 07 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Replaced the options description in comments at the beginning of the file with a reference to the option description in the pod. ------------------------------------------------------------------------ r695 | tewok | 2005-08-05 20:52:20 -0700 (Fri, 05 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm Added entropy_msg. ------------------------------------------------------------------------ r694 | lfoster | 2005-08-05 14:11:53 -0700 (Fri, 05 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/donuts/donutsd M /trunk/dnssec-tools/tools/mapper/mapper fixed some mispellings and typos in documentation portions of these files. ------------------------------------------------------------------------ r693 | hserus | 2005-08-05 13:36:33 -0700 (Fri, 05 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_zone.c Don't include headers that no longer exist Use renamed headers Use val_resquery instead of res_squery ------------------------------------------------------------------------ r692 | hserus | 2005-08-05 13:36:02 -0700 (Fri, 05 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_context.c M /trunk/dnssec-tools/lib/val_stub/val_verify.c M /trunk/dnssec-tools/lib/val_stub/val_x_query.c Don't include headers that no longer exist Use renamed headers ------------------------------------------------------------------------ r691 | hserus | 2005-08-05 13:35:29 -0700 (Fri, 05 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_support.h Add prototypes for functions moved over from res_support.c ------------------------------------------------------------------------ r690 | hserus | 2005-08-05 13:35:13 -0700 (Fri, 05 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_support.c Don't include headers that no longer exist Move over functions used only in this file from ../libsres/res_support.c to here. wire_name_length is duplicated, but we've already made it static in libsres ------------------------------------------------------------------------ r689 | hserus | 2005-08-05 13:34:30 -0700 (Fri, 05 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_policy.c Use renamed headers ------------------------------------------------------------------------ r688 | hserus | 2005-08-05 13:34:07 -0700 (Fri, 05 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_errors.h Define INDETERMINATE to be the same as INDETERMINATE_TRUST ------------------------------------------------------------------------ r687 | hserus | 2005-08-05 13:33:12 -0700 (Fri, 05 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_cache.c Don't include headers that no longer exist ------------------------------------------------------------------------ r686 | hserus | 2005-08-05 13:32:36 -0700 (Fri, 05 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_assertion.c M /trunk/dnssec-tools/lib/val_stub/val_query.c Dont include headers that no longer exist Use val_resquery instead of res_squery Get rid of some warnings ------------------------------------------------------------------------ r685 | hserus | 2005-08-05 13:32:02 -0700 (Fri, 05 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/Makefile.in Use val_resquery instead of res_squery Also build validator_driver.c instead of resolver_driver.c ------------------------------------------------------------------------ r684 | hserus | 2005-08-05 13:31:37 -0700 (Fri, 05 Aug 2005) | 2 lines Changed paths: D /trunk/dnssec-tools/lib/val_stub/res_squery.c D /trunk/dnssec-tools/lib/val_stub/res_squery.h D /trunk/dnssec-tools/lib/val_stub/resolver_driver.c A /trunk/dnssec-tools/lib/val_stub/val_resquery.c A /trunk/dnssec-tools/lib/val_stub/val_resquery.h A /trunk/dnssec-tools/lib/val_stub/validator_driver.c Re-named res* files to val* files ------------------------------------------------------------------------ r683 | hserus | 2005-08-05 13:29:22 -0700 (Fri, 05 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/Makefile.in Now building res_support.c instead of support.c Export only those symbols that are needed by the validator ------------------------------------------------------------------------ r682 | hserus | 2005-08-05 13:28:57 -0700 (Fri, 05 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_tsig.c Include res_support.h instead of support.h ------------------------------------------------------------------------ r681 | hserus | 2005-08-05 13:28:41 -0700 (Fri, 05 Aug 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_query.c Include res_support.h instead of support.h No longer including res_errors.h since this has been merged into resolver.h Moved functions used only in this file from res_support.c ------------------------------------------------------------------------ r680 | hserus | 2005-08-05 13:28:03 -0700 (Fri, 05 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_io_manager.c Include res_support.h instead of support.h Moved res_quecmp() from here to res_query.c where it is actually used ------------------------------------------------------------------------ r679 | hserus | 2005-08-05 13:26:45 -0700 (Fri, 05 Aug 2005) | 3 lines Changed paths: D /trunk/dnssec-tools/lib/libsres/res_errors.h D /trunk/dnssec-tools/lib/libsres/res_query.h M /trunk/dnssec-tools/lib/libsres/resolver.h Merged error definitions from res_errors and prototypes from res_query into resolver.h ------------------------------------------------------------------------ r678 | hserus | 2005-08-05 13:24:53 -0700 (Fri, 05 Aug 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/libsres/res_support.c A /trunk/dnssec-tools/lib/libsres/res_support.h D /trunk/dnssec-tools/lib/libsres/support.c D /trunk/dnssec-tools/lib/libsres/support.h Renamed support files so that they now have a res_ prefix ------------------------------------------------------------------------ r677 | hserus | 2005-08-05 13:22:09 -0700 (Fri, 05 Aug 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/libsres/EXPORT.sym Make it clear which symbols in libsres are being used by the validator ------------------------------------------------------------------------ r676 | tewok | 2005-08-05 09:01:47 -0700 (Fri, 05 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Ensure that the zone's end-date is always written to the keyrec file. ------------------------------------------------------------------------ r675 | tewok | 2005-08-05 06:15:56 -0700 (Fri, 05 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm Split a pod paragraph in half. ------------------------------------------------------------------------ r674 | tewok | 2005-08-05 06:12:25 -0700 (Fri, 05 Aug 2005) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Added an entry for -genkeys. Renamed -reuseksk to -genksk. Renamed -reusezsk to -genzsk. Adjusted spacing for @stdopts entries for greater legibility. ------------------------------------------------------------------------ r673 | tewok | 2005-08-04 11:04:36 -0700 (Thu, 04 Aug 2005) | 22 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed some defaults in the header comments. Renamed and relogic'd -reuseksk and -reusezsk to -genksk and -genzsk. This makes key re-use the default. Added -genkeys. Made the display of the random-number-generator-related entropy message depend on a config option. The default is to display. Made the entropy message shorter so that it's more likely to be read and to be useful. Modified to write the keyrec file after each set of keys (KSK and ZSKs) are generated. Deleted a few unused subroutine arguments. Added a message saying when the zone expires and insisting that the keys not be deleted until then. These messages are likely to be honed further. Adjusted usage message and pod as needed for the above changes. ------------------------------------------------------------------------ r672 | lfoster | 2005-08-04 10:44:54 -0700 (Thu, 04 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/logwatch/conf/logfiles/dnssec.conf M /trunk/dnssec-tools/tools/logwatch/conf/logfiles/resolver.conf M /trunk/dnssec-tools/tools/logwatch/conf/services/dnssec.conf M /trunk/dnssec-tools/tools/logwatch/conf/services/resolver.conf added copyright and pointer to sourceforge. ------------------------------------------------------------------------ r671 | lfoster | 2005-08-04 10:40:23 -0700 (Thu, 04 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/logwatch/scripts/shared/applybinddate improvement in range management, plus copyright and sourceforge references. ------------------------------------------------------------------------ r670 | lfoster | 2005-08-04 10:37:00 -0700 (Thu, 04 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/logwatch/scripts/services/dnssec M /trunk/dnssec-tools/tools/logwatch/scripts/services/resolver minor readability improvements, plus copyright and sourceforge references. ------------------------------------------------------------------------ r669 | tewok | 2005-08-01 18:22:00 -0700 (Mon, 01 Aug 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added defaults for random number device and end-date. Moved default key lengths to 1024. Ensure a bunch of fields are included in the final keyrec. ------------------------------------------------------------------------ r668 | tewok | 2005-08-01 10:42:37 -0700 (Mon, 01 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/clean-keyrec Added the -rm option to the usage message. ------------------------------------------------------------------------ r667 | tewok | 2005-08-01 10:40:48 -0700 (Mon, 01 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO Added notes about timetrans and timetrans.pm. ------------------------------------------------------------------------ r666 | tewok | 2005-08-01 10:34:07 -0700 (Mon, 01 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added a message indicating when the zone's signing would expire. ------------------------------------------------------------------------ r665 | tewok | 2005-08-01 10:29:14 -0700 (Mon, 01 Aug 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/README Added a note about timetrans. ------------------------------------------------------------------------ r664 | tewok | 2005-08-01 07:02:11 -0700 (Mon, 01 Aug 2005) | 7 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/timetrans Convert from time units (seconds, minutes, hours, days, weeks) into the total number of seconds. Also does the reverse conversion. This is intended for calculating the NNNN for the "-e+NNNN" option to dnssec-signzone. ------------------------------------------------------------------------ r663 | hardaker | 2005-08-01 05:32:16 -0700 (Mon, 01 Aug 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donutsd M /trunk/dnssec-tools/tools/mapper/mapper use Getopt::GUI::Long instead, and related features ------------------------------------------------------------------------ r662 | tewok | 2005-07-29 18:09:00 -0700 (Fri, 29 Jul 2005) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/modules/tests/test-timetrans Test/demo program for timetrans. ------------------------------------------------------------------------ r661 | tewok | 2005-07-29 15:52:34 -0700 (Fri, 29 Jul 2005) | 5 lines Changed paths: A /trunk/dnssec-tools/tools/modules/timetrans.pm Added module to convert a seconds count into a text string of the days, hours, etc. Using this module, you do such things as converting 800000 seconds into "1 week, 2 days, 6 hours, 13 minutes, 20 seconds". ------------------------------------------------------------------------ r660 | tewok | 2005-07-29 07:48:46 -0700 (Fri, 29 Jul 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed a typo in the usage message. Added pod describing how values are determined. ------------------------------------------------------------------------ r659 | tewok | 2005-07-28 17:22:07 -0700 (Thu, 28 Jul 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Get a usage message if no options or arguments were given. ------------------------------------------------------------------------ r658 | hserus | 2005-07-21 13:16:37 -0700 (Thu, 21 Jul 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_getaddrinfo.h Simply return the validator status in ADDRINFO_DNSSEC_STATUS instead of first checking for NULL. (ainfo == NULL) does not necessarily convey the validation error status. On the other hand, we now have to check for the above condition before calling the ADDRINFO_DNSSEC_STATUS macro. ------------------------------------------------------------------------ r657 | hserus | 2005-07-20 08:49:20 -0700 (Wed, 20 Jul 2005) | 8 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_assertion.c Added logic for proving non-existence of a name given a trusted proof. Simplify our logic of proving proof of non-existence at some point in the chain-of-trust other than the leaf. Short summary is that we don't check this, cause its not important; either way the answer is not trustworthy. Moved logic of identifying pending queries for an assertion into a function. Now use INDETERMINATE_ERROR to say that a chain of errors was seen and INDETERMINATE_TRUST to say that we could not reach the trust anchor. ------------------------------------------------------------------------ r656 | hserus | 2005-07-20 08:48:50 -0700 (Wed, 20 Jul 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_print.h Added the prototype for dump_rrset() ------------------------------------------------------------------------ r655 | hserus | 2005-07-20 08:48:29 -0700 (Wed, 20 Jul 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_verify.c Use INDETERMINATE_ZONE when we want to say that we cannot distinguish between an unsigned zone and answers from which signatures have been stripped. Move the check_label_count() function from val_verify.c to val_support.c. ------------------------------------------------------------------------ r654 | hserus | 2005-07-20 08:48:00 -0700 (Wed, 20 Jul 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_support.h Added prototype for check_label_count() ------------------------------------------------------------------------ r653 | hserus | 2005-07-20 08:47:40 -0700 (Wed, 20 Jul 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_support.c Add string representations for new error codes. Remove string representations for error codes that are no longer used. Move the check_label_count() function from val_verify.c to val_support.c. ------------------------------------------------------------------------ r652 | hserus | 2005-07-20 08:47:07 -0700 (Wed, 20 Jul 2005) | 6 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_x_query.c Don't declare that we don't have space if what we are returning is only the proof of non-existence. If we really don't have space, return the total number of answers that were actually available, so that next time we can make the call with sufficient space. Also show correct answer or authority count in the header. ------------------------------------------------------------------------ r651 | hserus | 2005-07-20 08:46:26 -0700 (Wed, 20 Jul 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/validator.h Added a definition for the index of the label count within the RRSIG. ------------------------------------------------------------------------ r650 | hserus | 2005-07-20 08:46:10 -0700 (Wed, 20 Jul 2005) | 10 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_errors.h Removed NSEC_POINTING_UPWARDS as an error state. Determining that the NSEC is pointing upward is of no use to the validator; the proof is simply incomplete. Promoted INCOMPLETE_PROOF to one of the final validator error states instead of just being one of the assertion-level error states. Removed PROVABLY_UNSECURE from the list of final error states. This state again is of no direct consequence to the validator. The answer is either valid, has errors, or is non-existent. Also included new error states that differentiate between the various INDETERMINATE conditions. ------------------------------------------------------------------------ r649 | hserus | 2005-07-20 08:45:13 -0700 (Wed, 20 Jul 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/resolver_driver.c Increased the number of answers expected to three. This allows all components of the proof of non-existence to appear in the result set. Also display the total count of answers received. ------------------------------------------------------------------------ r648 | ahayatnagarkar | 2005-07-14 14:53:03 -0700 (Thu, 14 Jul 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.c Use the common parsing routine for /etc/hosts from val_parse.c instead of duplicating code. ------------------------------------------------------------------------ r647 | ahayatnagarkar | 2005-07-14 14:52:17 -0700 (Thu, 14 Jul 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_getaddrinfo.c M /trunk/dnssec-tools/lib/val_stub/val_parse.c M /trunk/dnssec-tools/lib/val_stub/val_parse.h Moved the routine for parsing /etc/hosts to val_parse.c. ------------------------------------------------------------------------ r646 | ahayatnagarkar | 2005-07-14 11:40:59 -0700 (Thu, 14 Jul 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_getaddrinfo.c Read information from /etc/hosts before querying DNS. Return an EAI_SERVICE error if the specified service is not found. Handle the AI_CANONNAME flag properly. ------------------------------------------------------------------------ r645 | ahayatnagarkar | 2005-07-14 11:37:52 -0700 (Thu, 14 Jul 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/getaddr.c Added a command-line option to test the AI_CANONNAME flag. ------------------------------------------------------------------------ r644 | lfoster | 2005-07-14 10:48:46 -0700 (Thu, 14 Jul 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/logwatch/scripts/shared/applybinddate add copyright notice. ------------------------------------------------------------------------ r643 | lfoster | 2005-07-14 10:46:47 -0700 (Thu, 14 Jul 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/logwatch/scripts/services/dnssec M /trunk/dnssec-tools/tools/logwatch/scripts/services/resolver add copyright notices. ------------------------------------------------------------------------ r642 | hserus | 2005-07-13 12:42:49 -0700 (Wed, 13 Jul 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/gethost.c First parameter to val_x_gethostbyname() is NULL. Added miscellaneous printf statements ------------------------------------------------------------------------ r641 | hserus | 2005-07-13 12:34:57 -0700 (Wed, 13 Jul 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.c M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.h val_x_gethostbyname() now takes the context as the first parameter. ------------------------------------------------------------------------ r640 | hserus | 2005-07-13 12:25:39 -0700 (Wed, 13 Jul 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/resolver_driver.c Modified to read multiple answers if available. ------------------------------------------------------------------------ r639 | hserus | 2005-07-13 12:22:09 -0700 (Wed, 13 Jul 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_getaddrinfo.c Modified to use get_context() instead of get_default_context() ------------------------------------------------------------------------ r638 | hserus | 2005-07-13 12:19:25 -0700 (Wed, 13 Jul 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_x_query.c Use get_context() instead of get_default_context() Correct bug in calculating response length ------------------------------------------------------------------------ r637 | hserus | 2005-07-13 12:02:30 -0700 (Wed, 13 Jul 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/val_stub/dnsval.conf Add sample validator configuration file ------------------------------------------------------------------------ r636 | hserus | 2005-07-13 12:00:50 -0700 (Wed, 13 Jul 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/validator.h Added definitions for MALLOC and FREE Added definitions for various validator policy identifiers Added structures used by the validator for maintaining policy Added macro for retrieving a policy structure given a policy identifier ------------------------------------------------------------------------ r635 | hserus | 2005-07-13 11:59:22 -0700 (Wed, 13 Jul 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_parse.c M /trunk/dnssec-tools/lib/val_stub/val_parse.h Added a function for extracting a val_dnskey_rdata_t from a DNSKEY string Added a function to compare if two val_dnskey_rdata_t keys are the same. ------------------------------------------------------------------------ r634 | hserus | 2005-07-13 11:58:27 -0700 (Wed, 13 Jul 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_errors.h Corrected values of LAST_ERROR and LAST_FAILURE Re-organized the error number definitions to keep success conditions together ------------------------------------------------------------------------ r633 | hserus | 2005-07-13 11:57:53 -0700 (Wed, 13 Jul 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_context.h Renamed get_default_context() to get_context(). ------------------------------------------------------------------------ r632 | hserus | 2005-07-13 11:57:29 -0700 (Wed, 13 Jul 2005) | 8 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_context.c - Modified to read the configuration file when a new context is created - Added logic for switching the current policy between the ones defined in the configuration file. - Renamed get_default_context() to get_context(const char *label) where label is the policy identifier in the validator configuration file. Use label = NULL to obtain the default context. ------------------------------------------------------------------------ r631 | hserus | 2005-07-13 11:54:42 -0700 (Wed, 13 Jul 2005) | 6 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_assertion.c Added logic for checking if a particular key is present in the list of trust anchors configured for the validator Use "MALLOC" and "FREE" instead of "malloc" and "free" Use the NONSENSE_RESULT_SEQUENCE macro for checking nonsense results in the validation chain. ------------------------------------------------------------------------ r630 | hserus | 2005-07-13 09:33:51 -0700 (Wed, 13 Jul 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/Makefile.in Add val_policy.c to the list of sources to be compiled ------------------------------------------------------------------------ r629 | hserus | 2005-07-13 09:32:48 -0700 (Wed, 13 Jul 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/val_stub/val_policy.c A /trunk/dnssec-tools/lib/val_stub/val_policy.h Routines for parsing the contents of the validator configuration file ------------------------------------------------------------------------ r628 | ahayatnagarkar | 2005-07-12 14:55:26 -0700 (Tue, 12 Jul 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_getaddrinfo.c Process the service-name parameter. ------------------------------------------------------------------------ r627 | ahayatnagarkar | 2005-07-12 13:13:10 -0700 (Tue, 12 Jul 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub M /trunk/dnssec-tools/lib/val_stub/.cvsignore Added getaddr. ------------------------------------------------------------------------ r626 | ahayatnagarkar | 2005-07-12 13:10:54 -0700 (Tue, 12 Jul 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/Makefile.in Added rules for compiling getaddr and val_getaddrinfo. ------------------------------------------------------------------------ r625 | ahayatnagarkar | 2005-07-12 13:10:01 -0700 (Tue, 12 Jul 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_api.h M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.h Moved some declarations from val_api to val_gethostbyname. ------------------------------------------------------------------------ r624 | ahayatnagarkar | 2005-07-12 13:06:45 -0700 (Tue, 12 Jul 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/gethost.c Can now test the val_x_gethostbyname() function as well. ------------------------------------------------------------------------ r623 | ahayatnagarkar | 2005-07-12 12:59:46 -0700 (Tue, 12 Jul 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/gethost.c M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.c Corrected a typo. ------------------------------------------------------------------------ r622 | ahayatnagarkar | 2005-07-12 12:58:48 -0700 (Tue, 12 Jul 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/val_stub/getaddr.c A command-line tool for testing the val_getaddrinfo() function. ------------------------------------------------------------------------ r621 | ahayatnagarkar | 2005-07-12 12:57:56 -0700 (Tue, 12 Jul 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_getaddrinfo.c Queries the validator, gets answers and packages them into addrinfo-wrapper structures. ------------------------------------------------------------------------ r620 | ahayatnagarkar | 2005-07-12 12:56:23 -0700 (Tue, 12 Jul 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_getaddrinfo.h Added a wrapper struct. Added a macro to extract DNSSEC-validation status. ------------------------------------------------------------------------ r619 | ahayatnagarkar | 2005-07-08 13:55:40 -0700 (Fri, 08 Jul 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/val_stub/val_getaddrinfo.c A /trunk/dnssec-tools/lib/val_stub/val_getaddrinfo.h Initial commit for the val_getaddrinfo() function implementation. ------------------------------------------------------------------------ r615 | hardaker | 2005-06-24 16:00:02 -0700 (Fri, 24 Jun 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/INSTALL mention Date::Parse ------------------------------------------------------------------------ r614 | ahayatnagarkar | 2005-06-24 12:55:56 -0700 (Fri, 24 Jun 2005) | 3 lines Changed paths: A /trunk/dnssec-tools/apps/sendmail/spfmilter-0.97_dnssec_patch.txt A dnssec-patch for spfmilter-0.97. spfmilter-0.97 supports version 1.0.4 of the libspf2 library. It does not support version 1.2.5. ------------------------------------------------------------------------ r613 | ahayatnagarkar | 2005-06-24 12:15:49 -0700 (Fri, 24 Jun 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.4_dnssec_patch.txt The 'undefine' line is not needed while overriding a compilation option. ------------------------------------------------------------------------ r612 | ahayatnagarkar | 2005-06-24 11:58:23 -0700 (Fri, 24 Jun 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.4_dnssec_patch.txt Removed unnecessary compilation options. ------------------------------------------------------------------------ r611 | ahayatnagarkar | 2005-06-24 11:46:49 -0700 (Fri, 24 Jun 2005) | 3 lines Changed paths: A /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.4_dnssec_patch.txt A patch for the latest (8.13.4) version of sendmail. The code has been formatted to fit sendmail's coding conventions. ------------------------------------------------------------------------ r610 | hardaker | 2005-06-24 09:02:02 -0700 (Fri, 24 Jun 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts misc fixes for auto_help ------------------------------------------------------------------------ r609 | hardaker | 2005-06-24 09:01:30 -0700 (Fri, 24 Jun 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper update for auto_help and case sensitivity ------------------------------------------------------------------------ r608 | hardaker | 2005-06-24 08:47:15 -0700 (Fri, 24 Jun 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts don't ignore case for options ------------------------------------------------------------------------ r607 | hardaker | 2005-06-23 14:47:54 -0700 (Thu, 23 Jun 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt Check for glue records in the same zone, in which case RRSIG and NSEC records actually should exist because they're not actually glue records. ------------------------------------------------------------------------ r606 | hardaker | 2005-06-22 23:26:47 -0700 (Wed, 22 Jun 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast.patch afsdb record update ------------------------------------------------------------------------ r600 | hardaker | 2005-06-09 15:56:12 -0700 (Thu, 09 Jun 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-enable.patch The mozilla support now has a preference dialog box that lets users select between different levels of DNSSecurity. It is not implemented in quite an ideal way (eg, it uses global policy and on-the-side-API for policy setting), but it does work. ------------------------------------------------------------------------ r594 | ahayatnagarkar | 2005-06-05 11:19:25 -0700 (Sun, 05 Jun 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt Some indentation changes. ------------------------------------------------------------------------ r593 | ahayatnagarkar | 2005-06-05 11:13:48 -0700 (Sun, 05 Jun 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt Added spacing to conform to the original code's style. ------------------------------------------------------------------------ r592 | ahayatnagarkar | 2005-06-05 10:05:07 -0700 (Sun, 05 Jun 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt Adjusted spacing and indentation to match the original code's conventions. ------------------------------------------------------------------------ r591 | ahayatnagarkar | 2005-06-05 08:35:53 -0700 (Sun, 05 Jun 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt Adjusted spacing and indentation to match the original code's conventions. ------------------------------------------------------------------------ r590 | ahayatnagarkar | 2005-06-03 12:35:03 -0700 (Fri, 03 Jun 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_howto.txt M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt Changed '#ifdef HAVE_LIBVAL' to '#ifdef SUPPORT_DNSSEC' for clarity. ------------------------------------------------------------------------ r589 | ahayatnagarkar | 2005-06-03 11:42:38 -0700 (Fri, 03 Jun 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_howto.txt M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt Added the --enable-dnssec-support option to the configure script. All DNSSEC-related code is now enclosed within #ifdef SUPPORT_DNSSEC ... #endif constructs. SUPPORT_DNSSEC is defined when the --enable-dnssec-support option is specified while configuring spfmilter-1.0.8. ------------------------------------------------------------------------ r588 | ahayatnagarkar | 2005-06-03 10:11:30 -0700 (Fri, 03 Jun 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_guide.txt M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_howto.txt M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt Added a --enable-dnssec-support option to the configure script. All DNSSEC-related code is now enclosed within #ifdef SUPPORT_DNSSEC ... #endif constructs. SUPPORT_DNSSEC is defined when the --enable-dnssec-support option is specified while configuring libspf2-1.2.5. ------------------------------------------------------------------------ r587 | ahayatnagarkar | 2005-06-03 08:58:34 -0700 (Fri, 03 Jun 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_howto.txt M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt Added a --enable-dnssec-support option to the configure script. All DNSSEC-related code is now enclosed within #ifdef SUPPORT_DNSSEC ... #endif constructs. SUPPORT_DNSSEC is defined when the --enable-dnssec-support option is specified while configuring libspf2-1.0.4. ------------------------------------------------------------------------ r586 | hserus | 2005-06-02 14:30:39 -0700 (Thu, 02 Jun 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_support.c Re-ordered error values ------------------------------------------------------------------------ r585 | hserus | 2005-06-02 14:26:13 -0700 (Thu, 02 Jun 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_verify.c Made a distiction between DNSKEY_NOMATCH and DNSKEY_MISSING. Final status left behind in the assertion now more closely dependent on the signature status. ------------------------------------------------------------------------ r584 | lfoster | 2005-06-02 14:24:19 -0700 (Thu, 02 Jun 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/logwatch/scripts/services/dnssec M /trunk/dnssec-tools/tools/logwatch/scripts/services/resolver sort messages to display in descending order (most first), plus a few appearance tweaks. ------------------------------------------------------------------------ r583 | hserus | 2005-06-02 14:22:19 -0700 (Thu, 02 Jun 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_x_query.h Added few more prototypes ------------------------------------------------------------------------ r582 | hserus | 2005-06-02 14:18:39 -0700 (Thu, 02 Jun 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.c M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.h Cloned val_gethostbyname() and named it val_x_gethostbyname(); only difference is that the latter makes use of resolve_n_check() instead of val_query(). Changed get_hostent_from_response() so that it could be re-used between the two functions. ------------------------------------------------------------------------ r581 | hserus | 2005-06-02 14:14:33 -0700 (Thu, 02 Jun 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/resolver_driver.c Now using different arguments for val_x_query() ------------------------------------------------------------------------ r580 | hserus | 2005-06-02 14:11:58 -0700 (Thu, 02 Jun 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/validator.h Some clean-up. Moved error states to val_errors.h. ------------------------------------------------------------------------ r579 | hserus | 2005-06-02 14:07:56 -0700 (Thu, 02 Jun 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_x_query.c Moved assertion-chain logic to a separate file ------------------------------------------------------------------------ r578 | hserus | 2005-06-02 14:06:38 -0700 (Thu, 02 Jun 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_errors.h Error code restructuring ------------------------------------------------------------------------ r577 | hserus | 2005-06-02 14:05:16 -0700 (Thu, 02 Jun 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/Makefile.in A /trunk/dnssec-tools/lib/val_stub/val_assertion.c A /trunk/dnssec-tools/lib/val_stub/val_assertion.h New file containing logic for the assertion chains ------------------------------------------------------------------------ r576 | ahayatnagarkar | 2005-06-01 06:47:28 -0700 (Wed, 01 Jun 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_howto.txt M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt Updated to use the new functions from the DNSSEC patch for libspf2-1.0.4 that uses libval instead of libvalidat. ------------------------------------------------------------------------ r575 | ahayatnagarkar | 2005-06-01 06:44:31 -0700 (Wed, 01 Jun 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/README M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_guide.txt M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_howto.txt M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt libspf2-1.0.4 updated to use the libval library instead of libvalidat. ------------------------------------------------------------------------ r574 | hardaker | 2005-05-25 12:03:56 -0700 (Wed, 25 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast.patch Add support for AFS records. ------------------------------------------------------------------------ r573 | hardaker | 2005-05-25 12:00:20 -0700 (Wed, 25 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper Added -x and -y arguments, and documented more layout types. ------------------------------------------------------------------------ r572 | hardaker | 2005-05-25 07:45:51 -0700 (Wed, 25 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper added options for node-overlap and label fontsize ------------------------------------------------------------------------ r571 | ahayatnagarkar | 2005-05-17 08:17:19 -0700 (Tue, 17 May 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.c Commented out IPv6-related code. This code can later be used for the val_getaddrinfo() and val_getnameinfo() wrappers. ------------------------------------------------------------------------ r570 | hardaker | 2005-05-16 14:41:25 -0700 (Mon, 16 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donutsd allow the use of config flags to specified in the xml file ------------------------------------------------------------------------ r568 | hardaker | 2005-05-10 14:42:25 -0700 (Tue, 10 May 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donutsd - Send a summary email to a specified -e flag. - Added a -o flag to just run once. ------------------------------------------------------------------------ r567 | hardaker | 2005-05-10 14:07:55 -0700 (Tue, 10 May 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donutsd Parse an optional XML config file (-i) useful for specifying special donuts args per zone. ------------------------------------------------------------------------ r566 | hardaker | 2005-05-10 13:34:16 -0700 (Tue, 10 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donutsd Documentation. ------------------------------------------------------------------------ r565 | hardaker | 2005-05-10 12:48:34 -0700 (Tue, 10 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donutsd Add a -x option to include diff output in the generated mail messages. ------------------------------------------------------------------------ r564 | hardaker | 2005-05-10 10:33:58 -0700 (Tue, 10 May 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donutsd Take an input file as the list of zones to run on rather than forcing command-line usage every time. ------------------------------------------------------------------------ r563 | hardaker | 2005-05-10 09:56:35 -0700 (Tue, 10 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donutsd mail contacts with results when appropriate. ------------------------------------------------------------------------ r562 | hardaker | 2005-05-10 09:21:16 -0700 (Tue, 10 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Makefile.PL A /trunk/dnssec-tools/tools/donuts/donutsd Long-term running server to occasionally run donuts and watch for differences ------------------------------------------------------------------------ r561 | ahayatnagarkar | 2005-05-09 14:54:14 -0700 (Mon, 09 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.c Added support for parsing IPv6 addresses from /etc/hosts. ------------------------------------------------------------------------ r560 | hardaker | 2005-05-06 12:05:18 -0700 (Fri, 06 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/INSTALL remove references to net-snmp that snuck in from the infocp ------------------------------------------------------------------------ r557 | ahayatnagarkar | 2005-05-06 11:21:55 -0700 (Fri, 06 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/README Added notes about libspf2, sendmail, spfmilter and thunderbird. ------------------------------------------------------------------------ r556 | tewok | 2005-05-06 10:51:28 -0700 (Fri, 06 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/logwatch/README Minor editorial changes for appearance and proper periodic spacing. ------------------------------------------------------------------------ r555 | tewok | 2005-05-06 10:30:05 -0700 (Fri, 06 May 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/logwatch/README Added the copyright and snazzy slogan. ------------------------------------------------------------------------ r554 | tewok | 2005-05-06 10:27:49 -0700 (Fri, 06 May 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/apps/README M /trunk/dnssec-tools/apps/mozilla/README M /trunk/dnssec-tools/apps/sendmail/README M /trunk/dnssec-tools/apps/thunderbird/README M /trunk/dnssec-tools/lib/libsres/README M /trunk/dnssec-tools/lib/val_stub/README M /trunk/dnssec-tools/tools/linux/ifup-dyn-dns/README Added the copyright and snazzy slogan to any READMEs that were missing it. Made some minor formatting changes to one or two READMEs as well. ------------------------------------------------------------------------ r553 | tewok | 2005-05-06 10:15:25 -0700 (Fri, 06 May 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/INSTALL Added the project title and spiffy slogan to the top of the file. Don't want anyone forgetting just what it is they're installing, do we? ------------------------------------------------------------------------ r552 | tewok | 2005-05-06 10:10:22 -0700 (Fri, 06 May 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/README New README file for the tools directory. ------------------------------------------------------------------------ r551 | tewok | 2005-05-06 10:07:07 -0700 (Fri, 06 May 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/etc/README Added a readme for the data directory. ------------------------------------------------------------------------ r550 | tewok | 2005-05-06 10:02:25 -0700 (Fri, 06 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/README Added a description for QWPrimitives.pm. ------------------------------------------------------------------------ r549 | tewok | 2005-05-06 10:01:27 -0700 (Fri, 06 May 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/modules/README Readme for the dnssec-tools modules directory. ------------------------------------------------------------------------ r548 | tewok | 2005-05-06 09:48:36 -0700 (Fri, 06 May 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/README Added WesH's snazzy project header (and a copyright) to the beginning of the file. ------------------------------------------------------------------------ r547 | tewok | 2005-05-06 09:46:59 -0700 (Fri, 06 May 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/patches/README Brief explanation of what this directory is about. ------------------------------------------------------------------------ r546 | hardaker | 2005-05-06 09:38:15 -0700 (Fri, 06 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools M /trunk/dnssec-tools/.cvsignore A /trunk/dnssec-tools/config.guess add config.guess ------------------------------------------------------------------------ r545 | hardaker | 2005-05-06 09:37:36 -0700 (Fri, 06 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/INSTALL remove line that should have been removed referencing compilers ------------------------------------------------------------------------ r544 | tewok | 2005-05-06 09:37:28 -0700 (Fri, 06 May 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/README Added brief descriptions of components of the dnssec-tools project, and left placeholders for components handled by others. ------------------------------------------------------------------------ r543 | lfoster | 2005-05-06 09:19:26 -0700 (Fri, 06 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/logwatch/README mention ApplyBindDate installion dir. ------------------------------------------------------------------------ r542 | tewok | 2005-05-06 09:19:22 -0700 (Fri, 06 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO Fixed a typo. ------------------------------------------------------------------------ r541 | tewok | 2005-05-06 09:17:24 -0700 (Fri, 06 May 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm Changed the tokenizing to skip empty tokens and collapsed the comment check. ------------------------------------------------------------------------ r540 | lfoster | 2005-05-06 09:16:00 -0700 (Fri, 06 May 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/logwatch/conf/logfiles/dnssec.conf M /trunk/dnssec-tools/tools/logwatch/conf/logfiles/resolver.conf use ApplyBindDate to enable BIND-specific date format parsing for logwatch --range date ranges. ------------------------------------------------------------------------ r539 | lfoster | 2005-05-06 09:13:08 -0700 (Fri, 06 May 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/logwatch/scripts/services/dnssec M /trunk/dnssec-tools/tools/logwatch/scripts/services/resolver enable logwatch standard debugging output rearrange order of some of the logging output ------------------------------------------------------------------------ r538 | lfoster | 2005-05-06 09:08:49 -0700 (Fri, 06 May 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/logwatch/scripts/shared A /trunk/dnssec-tools/tools/logwatch/scripts/shared/applybinddate provide BIND-specific date parsing for logwatch ------------------------------------------------------------------------ r537 | tewok | 2005-05-06 08:40:25 -0700 (Fri, 06 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/INSTALL Adjusted some formatting for internal consistency. ------------------------------------------------------------------------ r536 | tewok | 2005-05-06 08:31:02 -0700 (Fri, 06 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/README M /trunk/dnssec-tools/apps/mozilla/README M /trunk/dnssec-tools/apps/sendmail/README M /trunk/dnssec-tools/apps/thunderbird/README Fixed a few typos. ------------------------------------------------------------------------ r535 | ahayatnagarkar | 2005-05-06 08:28:37 -0700 (Fri, 06 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_io_manager.c M /trunk/dnssec-tools/lib/libsres/res_mkquery.c M /trunk/dnssec-tools/lib/libsres/res_query.c Turn off debugging by default. ------------------------------------------------------------------------ r534 | tewok | 2005-05-06 08:25:20 -0700 (Fri, 06 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/README Fixed a few typos. ------------------------------------------------------------------------ r533 | ahayatnagarkar | 2005-05-06 08:21:07 -0700 (Fri, 06 May 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/README Added a note saying the libspf2-1.0.4 dnssec-patch still uses the libvalidat library for DNSSEC validation. ------------------------------------------------------------------------ r532 | ahayatnagarkar | 2005-05-06 08:14:20 -0700 (Fri, 06 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/README Added a note about sendmail* files. ------------------------------------------------------------------------ r531 | hserus | 2005-05-06 08:13:59 -0700 (Fri, 06 May 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/libsres/README M /trunk/dnssec-tools/lib/val_stub/README Included note about the current state of the library. ------------------------------------------------------------------------ r530 | ahayatnagarkar | 2005-05-06 08:05:37 -0700 (Fri, 06 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/README Added a note about the sendmail patch. ------------------------------------------------------------------------ r529 | tewok | 2005-05-06 08:02:34 -0700 (Fri, 06 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm M /trunk/dnssec-tools/tools/modules/tooloptions.pm Fixed a couple typos. ------------------------------------------------------------------------ r528 | ahayatnagarkar | 2005-05-06 08:01:25 -0700 (Fri, 06 May 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.c Added a comment for IPv6 addresses. At present, the val_gethostbyname() function does not handle IPv6 addresses completely. ------------------------------------------------------------------------ r527 | ahayatnagarkar | 2005-05-06 07:57:26 -0700 (Fri, 06 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_query.c Removed unnecessary comments. ------------------------------------------------------------------------ r526 | ahayatnagarkar | 2005-05-06 07:55:28 -0700 (Fri, 06 May 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_api.h M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.c Updated a comment to reflect that the val_gethostbyname() function returns an answer even if dnssec-validation fails. ------------------------------------------------------------------------ r525 | tewok | 2005-05-06 06:22:36 -0700 (Fri, 06 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/INFO Added info about confchk and documentation for the config file. ------------------------------------------------------------------------ r524 | tewok | 2005-05-06 06:17:51 -0700 (Fri, 06 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/README Added an entry for confchk ------------------------------------------------------------------------ r519 | hardaker | 2005-05-05 21:39:33 -0700 (Thu, 05 May 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/mozilla/README readme file describing how to build the mozilla (and that it's pre-alpha) ------------------------------------------------------------------------ r518 | hardaker | 2005-05-05 21:35:48 -0700 (Thu, 05 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/README mention the mozilla patch ------------------------------------------------------------------------ r517 | hardaker | 2005-05-05 21:34:59 -0700 (Thu, 05 May 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/INSTALL INSTALL file to describe the installation process. ------------------------------------------------------------------------ r516 | hardaker | 2005-05-05 21:34:36 -0700 (Thu, 05 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/README Update to say something more intelligent. ------------------------------------------------------------------------ r515 | tewok | 2005-05-05 21:13:14 -0700 (Thu, 05 May 2005) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/confchk First cut at a script to check the validity of the dnssec-tools configuration file. ------------------------------------------------------------------------ r514 | hardaker | 2005-05-05 20:47:23 -0700 (Thu, 05 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt M /trunk/dnssec-tools/apps/thunderbird/content/spfdnssec/spfDnssecOverlay.xul M /trunk/dnssec-tools/tools/donuts/Rule.pm M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt M /trunk/dnssec-tools/tools/mapper/mapper M /trunk/dnssec-tools/tools/modules/Makefile.PL M /trunk/dnssec-tools/tools/modules/conf.pm M /trunk/dnssec-tools/tools/scripts/keyrec-check 2005 copyright update ------------------------------------------------------------------------ r513 | hardaker | 2005-05-05 20:29:03 -0700 (Thu, 05 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/COPYING 2005 copyright update ------------------------------------------------------------------------ r512 | tewok | 2005-05-05 18:24:38 -0700 (Thu, 05 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Changed to use rsasha1 as the default encryption algorithm. ------------------------------------------------------------------------ r511 | tewok | 2005-05-05 14:47:45 -0700 (Thu, 05 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf Added a few things to make it closer match the man page. ------------------------------------------------------------------------ r510 | hardaker | 2005-05-05 14:47:40 -0700 (Thu, 05 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt make RRSIG verification a level 1 rule ------------------------------------------------------------------------ r509 | tewok | 2005-05-05 14:44:43 -0700 (Thu, 05 May 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm Added record entry for default_keyrec. Added record entry for random. Mentioned that conf.pm parses this for programs. ------------------------------------------------------------------------ r508 | tewok | 2005-05-05 14:33:29 -0700 (Thu, 05 May 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm Man page for the dnssec-tools configuration file. ------------------------------------------------------------------------ r507 | hardaker | 2005-05-05 14:10:29 -0700 (Thu, 05 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast.patch modify keytags after creation. this hack is getting really bad. must talk to the author ------------------------------------------------------------------------ r506 | tewok | 2005-05-05 14:03:49 -0700 (Thu, 05 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added defaults for encryption algorithm, KSK length, and ZSK length. ------------------------------------------------------------------------ r505 | tewok | 2005-05-05 13:41:31 -0700 (Thu, 05 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Set up default command names for several DNSSEC-related zonesigner executes. ------------------------------------------------------------------------ r504 | ahayatnagarkar | 2005-05-05 12:08:16 -0700 (Thu, 05 May 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.c Return an answer even if the validation status is not RRSIG_VERIFIED. The dnssec_status return value will contain the validation status. ------------------------------------------------------------------------ r503 | tewok | 2005-05-05 08:35:29 -0700 (Thu, 05 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf Added entries for several required program paths. ------------------------------------------------------------------------ r502 | ahayatnagarkar | 2005-05-04 19:45:35 -0700 (Wed, 04 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt Don't use the bind library libresolv when using this patch and libsres. ------------------------------------------------------------------------ r501 | ahayatnagarkar | 2005-05-04 19:38:53 -0700 (Wed, 04 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt Don't use the libresolv and libbind libraries when using libsres. ------------------------------------------------------------------------ r500 | hardaker | 2005-05-04 16:07:18 -0700 (Wed, 04 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/mozilla/dnssec-enable.patch Update to use val_gethostbyname where possible and to force the turn on of locking; Also fixes a wierd bug where getaddrinfo returns a temp failure: sleep for a sec and try again. ------------------------------------------------------------------------ r499 | hardaker | 2005-05-04 14:58:47 -0700 (Wed, 04 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts modified to strip trailing white space in rule definition lines. ------------------------------------------------------------------------ r498 | hardaker | 2005-05-04 14:46:32 -0700 (Wed, 04 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt verifying RRSIGs now handle multiple RRSIG/DNSKEY sets properly. ------------------------------------------------------------------------ r497 | hardaker | 2005-05-04 14:45:58 -0700 (Wed, 04 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast.patch set the keytag for dnskey records ------------------------------------------------------------------------ r496 | ahayatnagarkar | 2005-05-04 14:12:20 -0700 (Wed, 04 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.c Read the /etc/hosts file before querying DNS. ------------------------------------------------------------------------ r495 | tewok | 2005-05-04 13:52:03 -0700 (Wed, 04 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed a typo. ------------------------------------------------------------------------ r494 | tewok | 2005-05-04 13:43:15 -0700 (Wed, 04 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Fixed the pod so pod2html stops whining. ------------------------------------------------------------------------ r493 | tewok | 2005-05-04 13:20:59 -0700 (Wed, 04 May 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Modified and reorganized the pod to be clearer about the command line arguments. Also added a section on keyrec files. ------------------------------------------------------------------------ r492 | lfoster | 2005-05-04 13:18:15 -0700 (Wed, 04 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/logwatch/conf/logfiles/dnssec.conf M /trunk/dnssec-tools/tools/logwatch/conf/logfiles/resolver.conf change an incorrect comment. ------------------------------------------------------------------------ r491 | hardaker | 2005-05-04 11:02:15 -0700 (Wed, 04 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts don't display a list of rules marked 'internal' ------------------------------------------------------------------------ r490 | hardaker | 2005-05-04 11:01:58 -0700 (Wed, 04 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt check rrsigs for proper validation. pass 1: one sig only ------------------------------------------------------------------------ r489 | hardaker | 2005-05-04 10:59:31 -0700 (Wed, 04 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper Change the output file qwizard type to fileupload ------------------------------------------------------------------------ r488 | hardaker | 2005-05-04 10:29:30 -0700 (Wed, 04 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast.patch update to do proper binary conversion for tags in NSEC/RRSIG ------------------------------------------------------------------------ r487 | tewok | 2005-05-04 08:24:06 -0700 (Wed, 04 May 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Removed the specification of a default keyrec file name. This allows zonesigner, for example, to use .krf as the default name. ------------------------------------------------------------------------ r486 | tewok | 2005-05-04 08:22:37 -0700 (Wed, 04 May 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Changed example domains to use the standard. ------------------------------------------------------------------------ r485 | hardaker | 2005-05-04 08:21:18 -0700 (Wed, 04 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast.patch correct patch which was accidentially created from a wrong original version ------------------------------------------------------------------------ r484 | tewok | 2005-05-04 08:17:58 -0700 (Wed, 04 May 2005) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Silenced the initial zone check and added a noisy zone check if the initial check fails. Changed the keyrec file suffix to .krf in the pod. Added another example to the pod that shows the default keyrec file creation. ------------------------------------------------------------------------ r483 | tewok | 2005-05-03 19:10:58 -0700 (Tue, 03 May 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Run checkzone on the zone file before doing anything. Fixed a couple comments. Added some missing close-quotes. ------------------------------------------------------------------------ r482 | tewok | 2005-05-03 18:48:25 -0700 (Tue, 03 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Reworked when and how the help option is checked. ------------------------------------------------------------------------ r481 | tewok | 2005-05-03 17:44:42 -0700 (Tue, 03 May 2005) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Modifications to the pod: - Added a few initial references to DNS to clarify just what sort of zones are being modified. - Added an example showing the contents of a keyrec file. ------------------------------------------------------------------------ r480 | tewok | 2005-05-03 12:20:01 -0700 (Tue, 03 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added a note about future SOA serial number mods. ------------------------------------------------------------------------ r479 | hardaker | 2005-05-03 07:58:22 -0700 (Tue, 03 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts remove potential trailing dot in zone names ------------------------------------------------------------------------ r478 | tewok | 2005-05-03 07:28:35 -0700 (Tue, 03 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Changed to use the standard domain name in examples. ------------------------------------------------------------------------ r477 | tewok | 2005-05-03 06:05:55 -0700 (Tue, 03 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Missed a couple example domains. ------------------------------------------------------------------------ r476 | tewok | 2005-05-03 06:00:51 -0700 (Tue, 03 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Changed the pod to use the standard domain name in examples. ------------------------------------------------------------------------ r475 | tewok | 2005-05-03 05:51:43 -0700 (Tue, 03 May 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/INFO Provide more detailed info about zonesigner and its various files. ------------------------------------------------------------------------ r474 | tewok | 2005-05-02 21:37:15 -0700 (Mon, 02 May 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/fixkrf Add a command to fix keyrec files whose encryption key files have been moved. ------------------------------------------------------------------------ r473 | tewok | 2005-05-02 21:26:55 -0700 (Mon, 02 May 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/README Added an entry for fixkrf. ------------------------------------------------------------------------ r472 | hardaker | 2005-05-02 14:52:47 -0700 (Mon, 02 May 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_errors.h change the prototype for p_val_error to use valerrno instead of errno (errno on linux is actually a #defined value) ------------------------------------------------------------------------ r467 | hardaker | 2005-04-29 14:24:59 -0700 (Fri, 29 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm specify the input/output files as fileupload types for the GUI ------------------------------------------------------------------------ r466 | tewok | 2005-04-29 14:02:55 -0700 (Fri, 29 Apr 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added some code to put a keypath record in each key keyrec. These will allow clean-keyrec to hunt down and exterminate orphaned keys. ------------------------------------------------------------------------ r465 | tewok | 2005-04-29 14:01:00 -0700 (Fri, 29 Apr 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/clean-keyrec Added pod about -rm. Deleted some extraneous characters from the options pod. ------------------------------------------------------------------------ r464 | tewok | 2005-04-29 13:57:07 -0700 (Fri, 29 Apr 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/clean-keyrec Added -rm option so that orphaned and obsolete key files can be removed, not just their associated keyrecs. ------------------------------------------------------------------------ r463 | tewok | 2005-04-29 13:52:38 -0700 (Fri, 29 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Fixed copyright, added #!/usr/bin/perl. ------------------------------------------------------------------------ r462 | tewok | 2005-04-29 13:46:02 -0700 (Fri, 29 Apr 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Deleted some extraneous comments. Adjusted some new code to match existing style. ------------------------------------------------------------------------ r461 | tewok | 2005-04-29 13:43:20 -0700 (Fri, 29 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added the keypath keyrec field. ------------------------------------------------------------------------ r460 | tewok | 2005-04-28 16:49:30 -0700 (Thu, 28 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/keyrec-check Fixed an improper word in a pod. ------------------------------------------------------------------------ r459 | tewok | 2005-04-28 16:41:57 -0700 (Thu, 28 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/clean-keyrec Get rid of obsolete keyrecs. ------------------------------------------------------------------------ r458 | lfoster | 2005-04-28 14:45:57 -0700 (Thu, 28 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/logwatch/README yet more detail. ------------------------------------------------------------------------ r457 | lfoster | 2005-04-28 14:43:13 -0700 (Thu, 28 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/logwatch/conf/logfiles/dnssec.conf changed a bad path. ------------------------------------------------------------------------ r456 | lfoster | 2005-04-28 14:30:59 -0700 (Thu, 28 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/logwatch/README added a little more logging info. ------------------------------------------------------------------------ r455 | lfoster | 2005-04-28 10:54:32 -0700 (Thu, 28 Apr 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/logwatch/README Installation instructions. ------------------------------------------------------------------------ r454 | lfoster | 2005-04-28 10:37:53 -0700 (Thu, 28 Apr 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/logwatch A /trunk/dnssec-tools/tools/logwatch/conf A /trunk/dnssec-tools/tools/logwatch/conf/logfiles A /trunk/dnssec-tools/tools/logwatch/conf/logfiles/dnssec.conf A /trunk/dnssec-tools/tools/logwatch/conf/logfiles/resolver.conf A /trunk/dnssec-tools/tools/logwatch/conf/services A /trunk/dnssec-tools/tools/logwatch/conf/services/dnssec.conf A /trunk/dnssec-tools/tools/logwatch/conf/services/resolver.conf A /trunk/dnssec-tools/tools/logwatch/scripts A /trunk/dnssec-tools/tools/logwatch/scripts/services A /trunk/dnssec-tools/tools/logwatch/scripts/services/dnssec A /trunk/dnssec-tools/tools/logwatch/scripts/services/resolver configuration files and scripts for dnssec and resolver logs ------------------------------------------------------------------------ r453 | ahayatnagarkar | 2005-04-28 10:34:36 -0700 (Thu, 28 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt Use val_gethostbyname() in libmilter code. ------------------------------------------------------------------------ r452 | hserus | 2005-04-28 07:53:39 -0700 (Thu, 28 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_errors.h M /trunk/dnssec-tools/lib/libsres/res_io_manager.c M /trunk/dnssec-tools/lib/libsres/res_io_manager.h M /trunk/dnssec-tools/lib/libsres/res_mkquery.h M /trunk/dnssec-tools/lib/libsres/res_query.c M /trunk/dnssec-tools/lib/libsres/res_query.h M /trunk/dnssec-tools/lib/libsres/res_transaction.c M /trunk/dnssec-tools/lib/libsres/res_transaction.h M /trunk/dnssec-tools/lib/libsres/res_tsig.c M /trunk/dnssec-tools/lib/libsres/res_tsig.h M /trunk/dnssec-tools/lib/libsres/resolver.h M /trunk/dnssec-tools/lib/libsres/support.c M /trunk/dnssec-tools/lib/libsres/support.h M /trunk/dnssec-tools/lib/val_stub/res_squery.c M /trunk/dnssec-tools/lib/val_stub/res_squery.h M /trunk/dnssec-tools/lib/val_stub/resolver_driver.c M /trunk/dnssec-tools/lib/val_stub/val_cache.c M /trunk/dnssec-tools/lib/val_stub/val_cache.h M /trunk/dnssec-tools/lib/val_stub/val_context.c M /trunk/dnssec-tools/lib/val_stub/val_context.h M /trunk/dnssec-tools/lib/val_stub/val_errors.h M /trunk/dnssec-tools/lib/val_stub/val_parse.c M /trunk/dnssec-tools/lib/val_stub/val_print.c M /trunk/dnssec-tools/lib/val_stub/val_print.h M /trunk/dnssec-tools/lib/val_stub/val_support.c M /trunk/dnssec-tools/lib/val_stub/val_support.h M /trunk/dnssec-tools/lib/val_stub/val_x_query.c M /trunk/dnssec-tools/lib/val_stub/val_x_query.h M /trunk/dnssec-tools/lib/val_stub/val_zone.c M /trunk/dnssec-tools/lib/val_stub/val_zone.h M /trunk/dnssec-tools/lib/val_stub/validator.h Update copyright notice ------------------------------------------------------------------------ r451 | ahayatnagarkar | 2005-04-27 10:24:11 -0700 (Wed, 27 Apr 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_query.c Set h_errno to NO_DATA instead of HOST_NOT_FOUND when no record of a given type was found at that domain name and if the domain name exists. ------------------------------------------------------------------------ r450 | tewok | 2005-04-26 19:08:39 -0700 (Tue, 26 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added code to display obsolete ZSKs. ------------------------------------------------------------------------ r449 | hardaker | 2005-04-26 16:45:30 -0700 (Tue, 26 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner GUI-token-ize the tool specific options ------------------------------------------------------------------------ r448 | hardaker | 2005-04-26 16:44:54 -0700 (Tue, 26 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Add option separators ------------------------------------------------------------------------ r447 | hardaker | 2005-04-26 15:44:42 -0700 (Tue, 26 Apr 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm M /trunk/dnssec-tools/tools/scripts/zonesigner Update to support the use of a GUI screen for requesting options. Only appears if you run zonesigner without any options and have Getopt::Long::GUI installed. ------------------------------------------------------------------------ r446 | hardaker | 2005-04-26 15:41:49 -0700 (Tue, 26 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper Use the shared primitives. ------------------------------------------------------------------------ r445 | hardaker | 2005-04-26 15:41:32 -0700 (Tue, 26 Apr 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/modules/QWPrimitives.pm shared QWizard primatives. ------------------------------------------------------------------------ r444 | ahayatnagarkar | 2005-04-26 14:24:17 -0700 (Tue, 26 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt Removed some #ifdef HAVE_LIBVAL statements. ------------------------------------------------------------------------ r443 | tewok | 2005-04-26 10:54:27 -0700 (Tue, 26 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added message about hitting keys to build entropy. ------------------------------------------------------------------------ r442 | ahayatnagarkar | 2005-04-26 10:35:03 -0700 (Tue, 26 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/crypto/val_dsasha1.c Fixed a return value. ------------------------------------------------------------------------ r441 | tewok | 2005-04-26 10:29:24 -0700 (Tue, 26 Apr 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Added the opts_setcsopts() as an alternate method of specifying command- specific options. ------------------------------------------------------------------------ r440 | tewok | 2005-04-26 06:17:09 -0700 (Tue, 26 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Changed a keyrec type in a pod example. ------------------------------------------------------------------------ r439 | tewok | 2005-04-26 06:14:49 -0700 (Tue, 26 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Renamed the obsolete ZSK suffix. ------------------------------------------------------------------------ r438 | tewok | 2005-04-26 05:54:33 -0700 (Tue, 26 Apr 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added an option to force a roll-over. Clarified results message. ------------------------------------------------------------------------ r437 | ahayatnagarkar | 2005-04-25 12:58:58 -0700 (Mon, 25 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_log.h M /trunk/dnssec-tools/lib/val_stub/val_print.c Make the variable log_level accessible to functions in val_print.c. ------------------------------------------------------------------------ r436 | ahayatnagarkar | 2005-04-25 11:55:27 -0700 (Mon, 25 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt Added a few '#ifdef HAVE_LIBVAL' conditions. ------------------------------------------------------------------------ r435 | ahayatnagarkar | 2005-04-25 11:43:46 -0700 (Mon, 25 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt Added a check for the openssl crypto library. ------------------------------------------------------------------------ r434 | ahayatnagarkar | 2005-04-25 11:31:09 -0700 (Mon, 25 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt Added a check for the openssl crypto library. ------------------------------------------------------------------------ r433 | ahayatnagarkar | 2005-04-25 10:37:35 -0700 (Mon, 25 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_howto.txt Changed the name of the 'dnssec' option to 'RequireDNSSEC'. ------------------------------------------------------------------------ r432 | ahayatnagarkar | 2005-04-25 10:30:20 -0700 (Mon, 25 Apr 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt Changed the location of #include to avoid cvs-handling of SM_RCSID line in the original source code. ------------------------------------------------------------------------ r431 | ahayatnagarkar | 2005-04-25 09:59:32 -0700 (Mon, 25 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/crypto A /trunk/dnssec-tools/lib/val_stub/crypto/.cvsignore .cvsignore file for the crypto/ sub-directory. ------------------------------------------------------------------------ r430 | ahayatnagarkar | 2005-04-25 09:57:43 -0700 (Mon, 25 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/Makefile.in Added val_log.[c,o,lo] ------------------------------------------------------------------------ r429 | ahayatnagarkar | 2005-04-25 09:56:10 -0700 (Mon, 25 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/crypto/val_dsasha1.c M /trunk/dnssec-tools/lib/val_stub/crypto/val_rsamd5.c M /trunk/dnssec-tools/lib/val_stub/crypto/val_rsasha1.c M /trunk/dnssec-tools/lib/val_stub/gethost.c M /trunk/dnssec-tools/lib/val_stub/main.c M /trunk/dnssec-tools/lib/val_stub/res_squery.c M /trunk/dnssec-tools/lib/val_stub/resolver_driver.c M /trunk/dnssec-tools/lib/val_stub/val_cache.c M /trunk/dnssec-tools/lib/val_stub/val_context.c M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.c M /trunk/dnssec-tools/lib/val_stub/val_parse.c M /trunk/dnssec-tools/lib/val_stub/val_print.c M /trunk/dnssec-tools/lib/val_stub/val_query.c M /trunk/dnssec-tools/lib/val_stub/val_support.c M /trunk/dnssec-tools/lib/val_stub/val_verify.c M /trunk/dnssec-tools/lib/val_stub/val_x_query.c M /trunk/dnssec-tools/lib/val_stub/val_zone.c Change printf() statements to val_log(). ------------------------------------------------------------------------ r428 | ahayatnagarkar | 2005-04-25 09:54:55 -0700 (Mon, 25 Apr 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/val_stub/val_log.c A /trunk/dnssec-tools/lib/val_stub/val_log.h A rudimentary logger for the validator. ------------------------------------------------------------------------ r427 | ahayatnagarkar | 2005-04-25 08:48:08 -0700 (Mon, 25 Apr 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt Use val_gethostbyname() if the validator library is present. Added some more debugging statements. ------------------------------------------------------------------------ r426 | tewok | 2005-04-22 18:46:37 -0700 (Fri, 22 Apr 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added ksdir to be a zone-field. Moved kskdirectory from being a key-field to being a zone-field. Moved zskdirectory from being a key-field to being a zone-field. ------------------------------------------------------------------------ r425 | tewok | 2005-04-22 18:32:33 -0700 (Fri, 22 Apr 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Reorganized the -help messages. Reorganized the pod. ------------------------------------------------------------------------ r424 | tewok | 2005-04-22 18:12:42 -0700 (Fri, 22 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed file moving for -reuseksk and -reusezsk. ------------------------------------------------------------------------ r423 | hserus | 2005-04-22 08:12:20 -0700 (Fri, 22 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/support.c M /trunk/dnssec-tools/lib/libsres/support.h Added wire_name_labels() ------------------------------------------------------------------------ r422 | hserus | 2005-04-22 08:07:34 -0700 (Fri, 22 Apr 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/resolver.h Added a status field to rr_rec for storing result of a signature verification. This probably needs to be again changed later on. ------------------------------------------------------------------------ r421 | hserus | 2005-04-22 08:05:54 -0700 (Fri, 22 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_errors.h Added definition for SR_PROCESS_ERROR ------------------------------------------------------------------------ r420 | hserus | 2005-04-22 08:05:04 -0700 (Fri, 22 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/res_query.c Handle NULL respol value ------------------------------------------------------------------------ r419 | hserus | 2005-04-22 08:03:33 -0700 (Fri, 22 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/ns_print.c Add support for printing DS records ------------------------------------------------------------------------ r418 | hserus | 2005-04-22 06:41:22 -0700 (Fri, 22 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_verify.c Store cached keys in correct variable ------------------------------------------------------------------------ r417 | hserus | 2005-04-22 06:40:10 -0700 (Fri, 22 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_query.c Removed reliance on val_context_t for cache information ------------------------------------------------------------------------ r416 | hserus | 2005-04-22 06:04:42 -0700 (Fri, 22 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/Makefile.in Add val_context.c and val_x_query.c to the list of source files ------------------------------------------------------------------------ r415 | hserus | 2005-04-22 06:03:30 -0700 (Fri, 22 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/resolver_driver.c M /trunk/dnssec-tools/lib/val_stub/val_x_query.c Moved context relevant portions to val_context.c ------------------------------------------------------------------------ r414 | hserus | 2005-04-22 06:02:08 -0700 (Fri, 22 Apr 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/val_stub/val_context.c A /trunk/dnssec-tools/lib/val_stub/val_context.h New file for handling context related cruft ------------------------------------------------------------------------ r413 | tewok | 2005-04-21 17:33:25 -0700 (Thu, 21 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Added the -ksdir option. ------------------------------------------------------------------------ r412 | tewok | 2005-04-21 17:30:43 -0700 (Thu, 21 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added -ksdir for passing -d to dnssec-signzone. ------------------------------------------------------------------------ r411 | tewok | 2005-04-21 17:01:17 -0700 (Thu, 21 Apr 2005) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fix how we handle include lines. We don't want to zero-out the zone file if there are pre-existing inclusions. Move the pod examples into their own section. ------------------------------------------------------------------------ r410 | hserus | 2005-04-21 15:06:02 -0700 (Thu, 21 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/resolver_driver.c Call val_x_query() instead of res_squery() ------------------------------------------------------------------------ r409 | hserus | 2005-04-21 15:03:34 -0700 (Thu, 21 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/validator.h Added definitions for assertion and query states. ------------------------------------------------------------------------ r408 | hserus | 2005-04-21 15:01:43 -0700 (Thu, 21 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_errors.h Moved error-unrelated portions to validator.h ------------------------------------------------------------------------ r407 | hserus | 2005-04-21 14:57:41 -0700 (Thu, 21 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_verify.c M /trunk/dnssec-tools/lib/val_stub/val_verify.h Added functionality to verify assertions ------------------------------------------------------------------------ r406 | hserus | 2005-04-21 14:50:55 -0700 (Thu, 21 Apr 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/val_stub/val_x_query.c A /trunk/dnssec-tools/lib/val_stub/val_x_query.h Added the beginnings of a more comprehensive val_query() funcationality ------------------------------------------------------------------------ r405 | ahayatnagarkar | 2005-04-21 14:22:55 -0700 (Thu, 21 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_verify.c Added a few more diagnostic messages. ------------------------------------------------------------------------ r404 | hardaker | 2005-04-20 09:38:08 -0700 (Wed, 20 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools M /trunk/dnssec-tools/.cvsignore A /trunk/dnssec-tools/Makefile.bot M /trunk/dnssec-tools/Makefile.top A /trunk/dnssec-tools/config.sub M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in M /trunk/dnssec-tools/lib/libsres M /trunk/dnssec-tools/lib/libsres/.cvsignore M /trunk/dnssec-tools/lib/libsres/Makefile.in M /trunk/dnssec-tools/lib/libvalidat M /trunk/dnssec-tools/lib/libvalidat/.cvsignore M /trunk/dnssec-tools/lib/libvalidat/Makefile.in M /trunk/dnssec-tools/lib/val_stub M /trunk/dnssec-tools/lib/val_stub/.cvsignore M /trunk/dnssec-tools/lib/val_stub/Makefile.in A /trunk/dnssec-tools/ltmain.sh Use libtool to build libraries, executables, do installation, etc. ------------------------------------------------------------------------ r403 | hserus | 2005-04-20 09:15:11 -0700 (Wed, 20 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/Makefile.in Add val_cache.c to the list of source files ------------------------------------------------------------------------ r402 | hserus | 2005-04-20 09:11:30 -0700 (Wed, 20 Apr 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_support.c M /trunk/dnssec-tools/lib/val_stub/val_support.h - Caching functionality is available through a different file (val_cache.c) - Add support for DS records ------------------------------------------------------------------------ r401 | hserus | 2005-04-20 09:09:19 -0700 (Wed, 20 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_print.c validator ache is no longer directly available from context ------------------------------------------------------------------------ r400 | hserus | 2005-04-20 09:07:22 -0700 (Wed, 20 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_parse.c M /trunk/dnssec-tools/lib/val_stub/val_parse.h Add parsing logic for DS records ------------------------------------------------------------------------ r399 | hserus | 2005-04-20 09:05:32 -0700 (Wed, 20 Apr 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/res_squery.c - Free up memory for ns_list after we're done using it - Don't return DS records in the answer portion - Use the functionality provided by val_cache ------------------------------------------------------------------------ r398 | hserus | 2005-04-20 09:00:17 -0700 (Wed, 20 Apr 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/val_stub/val_cache.c A /trunk/dnssec-tools/lib/val_stub/val_cache.h Caching functionality for the validator ------------------------------------------------------------------------ r397 | hserus | 2005-04-20 08:29:24 -0700 (Wed, 20 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/Makefile.in D /trunk/dnssec-tools/lib/val_stub/res_zone.c D /trunk/dnssec-tools/lib/val_stub/res_zone.h A /trunk/dnssec-tools/lib/val_stub/val_zone.c A /trunk/dnssec-tools/lib/val_stub/val_zone.h Changed res_zone.* filenames to have val_ prefix ------------------------------------------------------------------------ r396 | hserus | 2005-04-20 08:22:56 -0700 (Wed, 20 Apr 2005) | 2 lines Changed paths: D /trunk/dnssec-tools/lib/val_stub/res_verification.c This file is no longer needed ------------------------------------------------------------------------ r395 | hardaker | 2005-04-19 21:12:28 -0700 (Tue, 19 Apr 2005) | 2 lines Changed paths: D /trunk/dnssec-tools/tools/patches/mozilla-dnssec.patch remove obsolete patch from wrong directory ------------------------------------------------------------------------ r394 | hardaker | 2005-04-19 21:11:49 -0700 (Tue, 19 Apr 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/mozilla A /trunk/dnssec-tools/apps/mozilla/dnssec-enable.patch Patch to enable minimal DNSSEC functionality based on libval ------------------------------------------------------------------------ r393 | hardaker | 2005-04-19 20:58:00 -0700 (Tue, 19 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt Misc minor fixes mostly in error output. ------------------------------------------------------------------------ r392 | hardaker | 2005-04-19 20:57:39 -0700 (Tue, 19 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm whoops. Reversed file accidentially committed (file typo) before it was ready ------------------------------------------------------------------------ r391 | hardaker | 2005-04-19 20:55:50 -0700 (Tue, 19 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Misc minor fixes mostly in error output. ------------------------------------------------------------------------ r390 | hardaker | 2005-04-19 20:54:02 -0700 (Tue, 19 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast.patch Updated patch to fix a few bugs ------------------------------------------------------------------------ r389 | ahayatnagarkar | 2005-04-19 15:06:19 -0700 (Tue, 19 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/Makefile.in Add LDFLAGS to libval.so compilation. ------------------------------------------------------------------------ r388 | ahayatnagarkar | 2005-04-19 14:19:01 -0700 (Tue, 19 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_howto.txt M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt Updated to use libval instead of libvalidat. ------------------------------------------------------------------------ r387 | ahayatnagarkar | 2005-04-19 13:42:22 -0700 (Tue, 19 Apr 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_guide.txt M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_howto.txt Updated to reflect the changes for using libval library instead of the libvalidat library. ------------------------------------------------------------------------ r386 | ahayatnagarkar | 2005-04-19 13:32:06 -0700 (Tue, 19 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/resolver.h Set the default EDNSO_UDP_SIZE to 4096 instead of 512. ------------------------------------------------------------------------ r385 | ahayatnagarkar | 2005-04-19 13:31:35 -0700 (Tue, 19 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libsres/Makefile.in Added an install directive. ------------------------------------------------------------------------ r384 | ahayatnagarkar | 2005-04-19 13:27:13 -0700 (Tue, 19 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/main.c Print the value of h_errno. ------------------------------------------------------------------------ r383 | ahayatnagarkar | 2005-04-19 13:26:55 -0700 (Tue, 19 Apr 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_query.c Set h_errno depending on whether the resolver was able to retrieve RRs or not. ------------------------------------------------------------------------ r382 | ahayatnagarkar | 2005-04-19 13:26:05 -0700 (Tue, 19 Apr 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_verify.c Return validator error code INDETERMINATE if neither RRSIGs nor DNSKEYs are present. ------------------------------------------------------------------------ r381 | ahayatnagarkar | 2005-04-19 13:23:40 -0700 (Tue, 19 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt Updated to use libval instead of libvalidat. ------------------------------------------------------------------------ r380 | ahayatnagarkar | 2005-04-19 13:22:44 -0700 (Tue, 19 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt An updated patch to use the new libval validator library. ------------------------------------------------------------------------ r379 | ahayatnagarkar | 2005-04-17 14:14:01 -0700 (Sun, 17 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/Makefile.in Added a 'install' directive. ------------------------------------------------------------------------ r378 | ahayatnagarkar | 2005-04-17 14:12:56 -0700 (Sun, 17 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/README Added a note about 'gethost'. ------------------------------------------------------------------------ r377 | ahayatnagarkar | 2005-04-17 14:12:35 -0700 (Sun, 17 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_errors.h M /trunk/dnssec-tools/lib/val_stub/val_support.h Moved the declaration of p_val_error() from val_support.h to val_errors.h. ------------------------------------------------------------------------ r376 | ahayatnagarkar | 2005-04-17 13:35:27 -0700 (Sun, 17 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_verify.c Sort multiple RRs in the RRSET before verifying signature. ------------------------------------------------------------------------ r375 | ahayatnagarkar | 2005-04-17 12:24:31 -0700 (Sun, 17 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub M /trunk/dnssec-tools/lib/val_stub/.cvsignore Added 'gethost' to the list of files to ignore. ------------------------------------------------------------------------ r374 | ahayatnagarkar | 2005-04-17 12:23:24 -0700 (Sun, 17 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/Makefile.in Added $(GETHOST) to the 'clean' directive. ------------------------------------------------------------------------ r373 | ahayatnagarkar | 2005-04-17 12:22:03 -0700 (Sun, 17 Apr 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/val_stub/gethost.c A command-line tool to test the val_gethostbyname() function. ------------------------------------------------------------------------ r372 | ahayatnagarkar | 2005-04-17 12:18:05 -0700 (Sun, 17 Apr 2005) | 3 lines Changed paths: A /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.c A /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.h A validating gethostbyname() function. This handles only ipv4 addresses for now. ------------------------------------------------------------------------ r371 | ahayatnagarkar | 2005-04-17 12:10:47 -0700 (Sun, 17 Apr 2005) | 3 lines Changed paths: A /trunk/dnssec-tools/lib/val_stub/val_api.h Header file for the validator API. At present it contains only two functions: val_query() and val_gethostbyname(). ------------------------------------------------------------------------ r370 | ahayatnagarkar | 2005-04-17 12:06:43 -0700 (Sun, 17 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/main.c Now includes "val_api.h" instead of "val_query.h" and "val_errors.h". ------------------------------------------------------------------------ r369 | ahayatnagarkar | 2005-04-17 12:06:16 -0700 (Sun, 17 Apr 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/Makefile.in Added val_gethostbyname[c,o] to the list of SRC/OBJ. Added a test program 'gethost' to test the val_gethostbyname() function. ------------------------------------------------------------------------ r368 | ahayatnagarkar | 2005-04-17 12:04:37 -0700 (Sun, 17 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_query.h Now declares _val_query() ------------------------------------------------------------------------ r367 | ahayatnagarkar | 2005-04-17 12:03:57 -0700 (Sun, 17 Apr 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_query.c Divided the val_query function into two val_query and _val_query. The _val_query function can be reused by other API calls such as val_gethostbyname. ------------------------------------------------------------------------ r366 | ahayatnagarkar | 2005-04-17 11:45:53 -0700 (Sun, 17 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_verify.c Fix a memory leak. ------------------------------------------------------------------------ r365 | ahayatnagarkar | 2005-04-15 11:38:21 -0700 (Fri, 15 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/crypto/val_rsamd5.c M /trunk/dnssec-tools/lib/val_stub/crypto/val_rsasha1.c Removed a few debug output statements. ------------------------------------------------------------------------ r364 | ahayatnagarkar | 2005-04-15 11:25:27 -0700 (Fri, 15 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/Makefile.in Use -lval in the compilation of the driver. ------------------------------------------------------------------------ r363 | ahayatnagarkar | 2005-04-15 11:21:59 -0700 (Fri, 15 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/Makefile.in Added val_query.[c,o] to the list of SRC/OBJ. ------------------------------------------------------------------------ r362 | ahayatnagarkar | 2005-04-15 11:18:58 -0700 (Fri, 15 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/main.c Make use of the val_query() wrapper. ------------------------------------------------------------------------ r361 | ahayatnagarkar | 2005-04-15 11:16:47 -0700 (Fri, 15 Apr 2005) | 3 lines Changed paths: A /trunk/dnssec-tools/lib/val_stub/val_query.c A /trunk/dnssec-tools/lib/val_stub/val_query.h A wrapper function val_query() around res_squery() and val_verify(). This function returns the response along with the dnssec-status. ------------------------------------------------------------------------ r360 | tewok | 2005-04-14 18:36:55 -0700 (Thu, 14 Apr 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Modified how key keyrecs are created, such that only KSK keyrecs have the kskdirectory field and only ZSK keyrecs have the zskdirectory field. ------------------------------------------------------------------------ r359 | tewok | 2005-04-14 17:57:12 -0700 (Thu, 14 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added some verbose messages for key directory usage. ------------------------------------------------------------------------ r358 | tewok | 2005-04-14 17:53:14 -0700 (Thu, 14 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Added options for key directories. ------------------------------------------------------------------------ r357 | tewok | 2005-04-14 17:12:38 -0700 (Thu, 14 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added entries for the -kgopts and -szopts options. ------------------------------------------------------------------------ r356 | tewok | 2005-04-14 17:08:15 -0700 (Thu, 14 Apr 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Finished implementing the -kgopts and -szopts options. Added a '$' to some "if(verbose)" lines. ------------------------------------------------------------------------ r355 | ahayatnagarkar | 2005-04-14 14:47:00 -0700 (Thu, 14 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/resolver_driver.c Added #defines for QUERY_TYPE and QUERY_CLASS. ------------------------------------------------------------------------ r354 | ahayatnagarkar | 2005-04-14 14:44:13 -0700 (Thu, 14 Apr 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/main.c Added a naive is_tld() function to avoid querying top-level domains for DNSKEY records. ------------------------------------------------------------------------ r353 | ahayatnagarkar | 2005-04-14 14:41:56 -0700 (Thu, 14 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_print.c Also print the rrs_status field of an rrset. ------------------------------------------------------------------------ r352 | ahayatnagarkar | 2005-04-14 14:40:43 -0700 (Thu, 14 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_verify.c M /trunk/dnssec-tools/lib/val_stub/val_verify.h Return more meaningful error codes than just INDETERMINATE. ------------------------------------------------------------------------ r351 | ahayatnagarkar | 2005-04-14 10:59:09 -0700 (Thu, 14 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/main.c Make use of the p_val_error() function for displaying dnssec_status. ------------------------------------------------------------------------ r350 | ahayatnagarkar | 2005-04-14 10:57:32 -0700 (Thu, 14 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_verify.c The crypto routines now return RRSIG_VERIFIED instead of VALIDATE_SUCCESS. ------------------------------------------------------------------------ r349 | ahayatnagarkar | 2005-04-14 10:56:21 -0700 (Thu, 14 Apr 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_support.c M /trunk/dnssec-tools/lib/val_stub/val_support.h Added a function p_val_error that returns a string for a given validator error. ------------------------------------------------------------------------ r348 | ahayatnagarkar | 2005-04-14 10:50:04 -0700 (Thu, 14 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/crypto/val_dsasha1.c M /trunk/dnssec-tools/lib/val_stub/crypto/val_rsamd5.c M /trunk/dnssec-tools/lib/val_stub/crypto/val_rsasha1.c Return more specific error codes instead of just INDETERMINATE. ------------------------------------------------------------------------ r347 | hardaker | 2005-04-12 16:07:00 -0700 (Tue, 12 Apr 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/patches/mozilla-dnssec.patch patch to make mozilla work with libvalidat ------------------------------------------------------------------------ r346 | hardaker | 2005-04-12 10:36:24 -0700 (Tue, 12 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libvalidat M /trunk/dnssec-tools/lib/libvalidat/.cvsignore update to inlude a binary ------------------------------------------------------------------------ r345 | hardaker | 2005-04-12 10:31:40 -0700 (Tue, 12 Apr 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/Makefile.in M /trunk/dnssec-tools/Makefile.top M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in M /trunk/dnssec-tools/lib/libsres A /trunk/dnssec-tools/lib/libsres/.cvsignore M /trunk/dnssec-tools/lib/val_stub A /trunk/dnssec-tools/lib/val_stub/.cvsignore A /trunk/dnssec-tools/lib/val_stub/Makefile.in - configure-ized the lib/val_stub/Makefile - make top level make descend into new trees. ------------------------------------------------------------------------ r344 | hardaker | 2005-04-12 10:28:59 -0700 (Tue, 12 Apr 2005) | 2 lines Changed paths: D /trunk/dnssec-tools/lib/val_stub/Makefile removed for autoconfing ------------------------------------------------------------------------ r343 | hardaker | 2005-04-12 10:17:36 -0700 (Tue, 12 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/Makefile.top M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in A /trunk/dnssec-tools/lib/libsres/Makefile.in configure-ized the lib/libsres/Makefile ------------------------------------------------------------------------ r342 | hardaker | 2005-04-12 10:15:53 -0700 (Tue, 12 Apr 2005) | 2 lines Changed paths: D /trunk/dnssec-tools/lib/libsres/Makefile removed Makefile to use configure's Makefile generation ------------------------------------------------------------------------ r341 | tewok | 2005-04-11 13:24:06 -0700 (Mon, 11 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed -gends to put a "-g" in the command line, rather than "1". ------------------------------------------------------------------------ r340 | tewok | 2005-04-09 15:56:01 -0700 (Sat, 09 Apr 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added some additional verbose output. Formalized different levels of verbosity. ------------------------------------------------------------------------ r339 | tewok | 2005-04-08 19:08:25 -0700 (Fri, 08 Apr 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Added an interface to reset the option processing, allowing the command line to be re-examined. Added -nokrfile. ------------------------------------------------------------------------ r338 | tewok | 2005-04-08 19:04:27 -0700 (Fri, 08 Apr 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added several new keyrec fields. Added an interface to return the default keyrec file. Fixed some pod formatting. ------------------------------------------------------------------------ r337 | tewok | 2005-04-08 19:00:32 -0700 (Fri, 08 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm Quietly return if the config file doesn't exist. ------------------------------------------------------------------------ r336 | tewok | 2005-04-08 18:52:54 -0700 (Fri, 08 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/keyrec-check Fixed some pod formatting. ------------------------------------------------------------------------ r335 | tewok | 2005-04-08 18:46:50 -0700 (Fri, 08 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/expchk M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed some pod formatting. ------------------------------------------------------------------------ r334 | tewok | 2005-04-08 18:19:26 -0700 (Fri, 08 Apr 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added a default keyrec file. Added -nokrfile option. ------------------------------------------------------------------------ r333 | tewok | 2005-04-08 15:44:01 -0700 (Fri, 08 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/clean-keyrec Tweaked the usage message. ------------------------------------------------------------------------ r332 | ahayatnagarkar | 2005-04-08 10:11:24 -0700 (Fri, 08 Apr 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_verify.c If no DNSKEYs were found, or if none of the DNSKEYs have matching key-tags, return DNSKEY_MISSING instead of INDETERMINATE. ------------------------------------------------------------------------ r331 | ahayatnagarkar | 2005-04-08 07:52:00 -0700 (Fri, 08 Apr 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/val_parse.c M /trunk/dnssec-tools/lib/val_stub/val_parse.h M /trunk/dnssec-tools/lib/val_stub/val_verify.c Moved function val_canon_rrset from val_parse.c to val_verify.c and renamed it to val_concat_rrset, since it just does concatenation of the rrset. ------------------------------------------------------------------------ r330 | ahayatnagarkar | 2005-04-07 15:02:20 -0700 (Thu, 07 Apr 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/Makefile Generate a libval.a file. Use it to generate the command line verifier. ------------------------------------------------------------------------ r329 | ahayatnagarkar | 2005-04-07 14:37:26 -0700 (Thu, 07 Apr 2005) | 3 lines Changed paths: A /trunk/dnssec-tools/lib/val_stub/val_verify.c A /trunk/dnssec-tools/lib/val_stub/val_verify.h Functions to verify the RRSIG signatures, given the original rrset and the DNSKEY. ------------------------------------------------------------------------ r328 | ahayatnagarkar | 2005-04-07 14:35:37 -0700 (Thu, 07 Apr 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/val_stub/val_parse.c A /trunk/dnssec-tools/lib/val_stub/val_parse.h Parsing routines for DNSKEY and RRSIG resource records. ------------------------------------------------------------------------ r327 | ahayatnagarkar | 2005-04-07 14:34:34 -0700 (Thu, 07 Apr 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/val_stub/val_print.c A /trunk/dnssec-tools/lib/val_stub/val_print.h Print routines to output various validator structures. ------------------------------------------------------------------------ r326 | ahayatnagarkar | 2005-04-07 14:33:52 -0700 (Thu, 07 Apr 2005) | 3 lines Changed paths: A /trunk/dnssec-tools/lib/val_stub/main.c A command-line verifier. This can later evolve into a command-line validator. ------------------------------------------------------------------------ r325 | ahayatnagarkar | 2005-04-07 14:33:21 -0700 (Thu, 07 Apr 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/val_stub/README A rudimentary README file. ------------------------------------------------------------------------ r324 | ahayatnagarkar | 2005-04-07 14:32:21 -0700 (Thu, 07 Apr 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/val_stub/Makefile Compilation directives for new files. ------------------------------------------------------------------------ r323 | ahayatnagarkar | 2005-04-07 14:21:49 -0700 (Thu, 07 Apr 2005) | 3 lines Changed paths: A /trunk/dnssec-tools/lib/val_stub/crypto/val_dsasha1.c A /trunk/dnssec-tools/lib/val_stub/crypto/val_dsasha1.h Support for Algorithm 3 [DSA/SHA1]. This is a wrapper for the validator that uses the openssl crypto library. ------------------------------------------------------------------------ r322 | ahayatnagarkar | 2005-04-07 14:21:08 -0700 (Thu, 07 Apr 2005) | 3 lines Changed paths: A /trunk/dnssec-tools/lib/val_stub/crypto/val_rsamd5.c A /trunk/dnssec-tools/lib/val_stub/crypto/val_rsamd5.h Support for Algorithm 1 [RSAMD5]. This is a wrapper for the validator that uses the openssl crypto library. ------------------------------------------------------------------------ r321 | ahayatnagarkar | 2005-04-07 14:20:20 -0700 (Thu, 07 Apr 2005) | 3 lines Changed paths: A /trunk/dnssec-tools/lib/val_stub/crypto A /trunk/dnssec-tools/lib/val_stub/crypto/val_rsasha1.c A /trunk/dnssec-tools/lib/val_stub/crypto/val_rsasha1.h Support for Algorithm 5 [RSASHA1]. This is a wrapper for the validator that uses the openssl crypto library. ------------------------------------------------------------------------ r320 | hserus | 2005-04-06 14:09:25 -0700 (Wed, 06 Apr 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/val_stub/res_verification.c verification algorithm from Ed's code ------------------------------------------------------------------------ r319 | hserus | 2005-04-06 13:53:02 -0700 (Wed, 06 Apr 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/val_stub/res_zone.h Beginnings of validation functionality ------------------------------------------------------------------------ r318 | hserus | 2005-04-06 13:49:38 -0700 (Wed, 06 Apr 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/val_stub A /trunk/dnssec-tools/lib/val_stub/Makefile A /trunk/dnssec-tools/lib/val_stub/res_squery.c A /trunk/dnssec-tools/lib/val_stub/res_squery.h A /trunk/dnssec-tools/lib/val_stub/res_zone.c A /trunk/dnssec-tools/lib/val_stub/resolver_driver.c A /trunk/dnssec-tools/lib/val_stub/val_errors.h A /trunk/dnssec-tools/lib/val_stub/val_support.c A /trunk/dnssec-tools/lib/val_stub/val_support.h A /trunk/dnssec-tools/lib/val_stub/validator.h Beginnings of validation-relevant code ------------------------------------------------------------------------ r317 | hserus | 2005-04-01 11:44:12 -0800 (Fri, 01 Apr 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/libsres A /trunk/dnssec-tools/lib/libsres/Makefile A /trunk/dnssec-tools/lib/libsres/base64.c A /trunk/dnssec-tools/lib/libsres/include A /trunk/dnssec-tools/lib/libsres/include/arpa A /trunk/dnssec-tools/lib/libsres/include/arpa/nameser.h A /trunk/dnssec-tools/lib/libsres/ns_name.c A /trunk/dnssec-tools/lib/libsres/ns_netint.c A /trunk/dnssec-tools/lib/libsres/ns_parse.c A /trunk/dnssec-tools/lib/libsres/ns_print.c A /trunk/dnssec-tools/lib/libsres/ns_samedomain.c A /trunk/dnssec-tools/lib/libsres/ns_ttl.c A /trunk/dnssec-tools/lib/libsres/res_comp.c A /trunk/dnssec-tools/lib/libsres/res_debug.c A /trunk/dnssec-tools/lib/libsres/res_errors.h A /trunk/dnssec-tools/lib/libsres/res_io_manager.c A /trunk/dnssec-tools/lib/libsres/res_io_manager.h A /trunk/dnssec-tools/lib/libsres/res_mkquery.c A /trunk/dnssec-tools/lib/libsres/res_mkquery.h A /trunk/dnssec-tools/lib/libsres/res_query.c A /trunk/dnssec-tools/lib/libsres/res_query.h A /trunk/dnssec-tools/lib/libsres/res_transaction.c A /trunk/dnssec-tools/lib/libsres/res_transaction.h A /trunk/dnssec-tools/lib/libsres/res_tsig.c A /trunk/dnssec-tools/lib/libsres/res_tsig.h A /trunk/dnssec-tools/lib/libsres/resolver.h A /trunk/dnssec-tools/lib/libsres/support.c A /trunk/dnssec-tools/lib/libsres/support.h Import preliminary working version of the DNSSEC-aware resolver. ------------------------------------------------------------------------ r316 | tewok | 2005-03-29 16:04:55 -0800 (Tue, 29 Mar 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Changed to have several external program paths specified in the config file, rather than hardwired here. ------------------------------------------------------------------------ r315 | tewok | 2005-03-29 14:05:11 -0800 (Tue, 29 Mar 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL Adding Wes Griffin's prereq fixes. Noodged the copyright date. ------------------------------------------------------------------------ r314 | tewok | 2005-03-29 12:30:29 -0800 (Tue, 29 Mar 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Adjusted some filenames for portability sake. Condensed two hashy lines. ------------------------------------------------------------------------ r313 | tewok | 2005-03-28 19:36:28 -0800 (Mon, 28 Mar 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added great bags of platform independence. ------------------------------------------------------------------------ r312 | hardaker | 2005-03-28 09:00:34 -0800 (Mon, 28 Mar 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper remove common default suffix/prefix from prompted default values ------------------------------------------------------------------------ r311 | hardaker | 2005-03-28 08:59:23 -0800 (Mon, 28 Mar 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts output cleanup ------------------------------------------------------------------------ r310 | hardaker | 2005-03-28 08:58:19 -0800 (Mon, 28 Mar 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/Makefile.in make in subdirs (like libvalid) ------------------------------------------------------------------------ r309 | tewok | 2005-03-23 13:54:00 -0800 (Wed, 23 Mar 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added return values, parameters, and warnings to the pod. ------------------------------------------------------------------------ r308 | tewok | 2005-03-22 19:39:50 -0800 (Tue, 22 Mar 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Deleted some unnecessary prints. Added code for rollmgr_halt(). Adjusted some pod. ------------------------------------------------------------------------ r307 | tewok | 2005-03-22 19:33:50 -0800 (Tue, 22 Mar 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tests/test-rollmgr Added a test for rollmgr_halt(). ------------------------------------------------------------------------ r306 | tewok | 2005-03-22 18:10:47 -0800 (Tue, 22 Mar 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tests/test-rollmgr Added a test for rollmgr_qproc(). ------------------------------------------------------------------------ r305 | tewok | 2005-03-22 18:04:40 -0800 (Tue, 22 Mar 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollmgr.pm Added code for rollmgr_qproc(). ------------------------------------------------------------------------ r304 | tewok | 2005-03-21 14:29:26 -0800 (Mon, 21 Mar 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/modules/tests/test-rollmgr Tests for the roll-over manager communication interfaces. ------------------------------------------------------------------------ r303 | tewok | 2005-03-21 14:02:28 -0800 (Mon, 21 Mar 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/modules/rollmgr.pm Interfaces for communicating with the roll-over manager. ------------------------------------------------------------------------ r302 | tewok | 2005-03-17 17:53:22 -0800 (Thu, 17 Mar 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Added an interface to return the name of the default rollrec file. ------------------------------------------------------------------------ r301 | tewok | 2005-03-17 15:18:29 -0800 (Thu, 17 Mar 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/rollrec.pm Renamed a rollrec field and added a few new ones. ------------------------------------------------------------------------ r300 | tewok | 2005-03-17 15:09:14 -0800 (Thu, 17 Mar 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tests/Makefile.PL Added another test file to delete. ------------------------------------------------------------------------ r299 | tewok | 2005-03-17 15:06:53 -0800 (Thu, 17 Mar 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/modules/tests/test-rollrec Tests for the rollrec module interfaces. ------------------------------------------------------------------------ r298 | ahayatnagarkar | 2005-03-17 09:58:17 -0800 (Thu, 17 Mar 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/thunderbird/install.rdf Changed minVersion of thunderbird from 1.0 to 0.9. ------------------------------------------------------------------------ r297 | tewok | 2005-03-16 20:52:45 -0800 (Wed, 16 Mar 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/modules/rollrec.pm Module to manage a roll-over status file. ------------------------------------------------------------------------ r296 | ahayatnagarkar | 2005-03-16 14:21:00 -0800 (Wed, 16 Mar 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libvalidat/main.c Read validat.h from the current directory. ------------------------------------------------------------------------ r295 | tewok | 2005-03-14 18:57:17 -0800 (Mon, 14 Mar 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added "signedfile" as a new zone keyrec field. ------------------------------------------------------------------------ r294 | tewok | 2005-03-14 18:54:29 -0800 (Mon, 14 Mar 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added "signedfile" as a zone keyrec field. ------------------------------------------------------------------------ r293 | ahayatnagarkar | 2005-03-14 15:01:56 -0800 (Mon, 14 Mar 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/thunderbird/skin/classic/spfdnssec/spfdnssec.png The DNSSEC icon. ------------------------------------------------------------------------ r292 | ahayatnagarkar | 2005-03-14 15:01:20 -0800 (Mon, 14 Mar 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/thunderbird/skin A /trunk/dnssec-tools/apps/thunderbird/skin/classic A /trunk/dnssec-tools/apps/thunderbird/skin/classic/spfdnssec A /trunk/dnssec-tools/apps/thunderbird/skin/classic/spfdnssec/contents.rdf contents.rdf file for the skin sub-directory. ------------------------------------------------------------------------ r291 | ahayatnagarkar | 2005-03-14 15:00:27 -0800 (Mon, 14 Mar 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/thunderbird/locale/en-US/spfdnssec/spfDnssecOverlay.dtd Header and Field labels for the 'en-US' locale. ------------------------------------------------------------------------ r290 | ahayatnagarkar | 2005-03-14 14:59:40 -0800 (Mon, 14 Mar 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/thunderbird/locale A /trunk/dnssec-tools/apps/thunderbird/locale/en-US A /trunk/dnssec-tools/apps/thunderbird/locale/en-US/spfdnssec A /trunk/dnssec-tools/apps/thunderbird/locale/en-US/spfdnssec/contents.rdf contents.rdf file for the locale sub-directory. ------------------------------------------------------------------------ r289 | ahayatnagarkar | 2005-03-14 14:58:55 -0800 (Mon, 14 Mar 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/thunderbird/content/spfdnssec/spfDnssecOverlay.xul XUL code to put elements related to SPF and DNSSEC in the XML tree. ------------------------------------------------------------------------ r288 | ahayatnagarkar | 2005-03-14 14:57:18 -0800 (Mon, 14 Mar 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/thunderbird/content/spfdnssec/spfDnssecOverlay.js Scripts for processing the Received-SPF header and its various fields. ------------------------------------------------------------------------ r287 | ahayatnagarkar | 2005-03-14 14:56:37 -0800 (Mon, 14 Mar 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/thunderbird/content A /trunk/dnssec-tools/apps/thunderbird/content/spfdnssec A /trunk/dnssec-tools/apps/thunderbird/content/spfdnssec/contents.rdf contents.rdf file for the content sub-directory. ------------------------------------------------------------------------ r286 | ahayatnagarkar | 2005-03-14 14:55:46 -0800 (Mon, 14 Mar 2005) | 5 lines Changed paths: A /trunk/dnssec-tools/apps/thunderbird A /trunk/dnssec-tools/apps/thunderbird/Makefile A /trunk/dnssec-tools/apps/thunderbird/README A /trunk/dnssec-tools/apps/thunderbird/install.rdf install.rdf: Install script for the spfdnssec extension. Makefile: Generates the 'spfdnssec.xpi' installer for the spfdnssec extension. README: A few words about the spfdnssec extension. ------------------------------------------------------------------------ r285 | ahayatnagarkar | 2005-03-14 14:30:09 -0800 (Mon, 14 Mar 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/README Added a note about the thunderbird sub-directory. ------------------------------------------------------------------------ r284 | tewok | 2005-03-12 07:28:37 -0800 (Sat, 12 Mar 2005) | 9 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Combined functionality so an argument could be removed. Added a check to ensure that the named zone file had not already been signed. Allowed the input zone file to optionally act also as the output zone file. Added auto-incrementation of the zone file's serial number. Added the ability to update existing INCLUDE lines, rather than always adding new ones. Updated the pod to talk about this. ------------------------------------------------------------------------ r283 | tewok | 2005-03-11 19:17:44 -0800 (Fri, 11 Mar 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/README Description of the commands in this directory. ------------------------------------------------------------------------ r282 | tewok | 2005-03-11 19:11:51 -0800 (Fri, 11 Mar 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/clean-keyrec New script to clean old and unused key keyrecs from a keyrec. ------------------------------------------------------------------------ r281 | tewok | 2005-03-11 15:52:59 -0800 (Fri, 11 Mar 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added keyrec_del(), which deletes a keyrec from a keyrec file. ------------------------------------------------------------------------ r280 | ahayatnagarkar | 2005-03-10 10:58:51 -0800 (Thu, 10 Mar 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt Set x-dnssec to "none" if there was no spf record. ------------------------------------------------------------------------ r273 | ahayatnagarkar | 2005-03-04 08:59:59 -0800 (Fri, 04 Mar 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_guide.txt M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_guide.txt Added description of the 'x-dnssec' field in the Received-SPF mail header. ------------------------------------------------------------------------ r272 | ahayatnagarkar | 2005-03-04 08:52:59 -0800 (Fri, 04 Mar 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_howto.txt Added description of the 'x-dnssec' field in the Received-SPF mail header. ------------------------------------------------------------------------ r271 | ahayatnagarkar | 2005-03-04 08:51:58 -0800 (Fri, 04 Mar 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt Removed a debugging message. ------------------------------------------------------------------------ r270 | ahayatnagarkar | 2005-03-04 08:25:02 -0800 (Fri, 04 Mar 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt Added double quotes around the RHS of the x-dnssec key-value-pair, in conformance with the Received-SPF header syntax. ------------------------------------------------------------------------ r269 | ahayatnagarkar | 2005-03-03 14:54:00 -0800 (Thu, 03 Mar 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt Included the modification to the spf_internal.h file. ------------------------------------------------------------------------ r268 | ahayatnagarkar | 2005-03-03 14:50:28 -0800 (Thu, 03 Mar 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt If using libspf2-1.0.4, set appropriate dnssec flag. ------------------------------------------------------------------------ r267 | ahayatnagarkar | 2005-03-03 14:49:24 -0800 (Thu, 03 Mar 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt Added support for the x-dnssec field for the Received-SPF mail header. ------------------------------------------------------------------------ r266 | ahayatnagarkar | 2005-03-03 12:27:15 -0800 (Thu, 03 Mar 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt The 'x-dnssec' field of the Received-SPF mail header can now have three values: pass, fail and none. The 'none' value indicates that spfmilter was not configured for performing DNSSEC validation. ------------------------------------------------------------------------ r265 | ahayatnagarkar | 2005-03-03 12:25:28 -0800 (Thu, 03 Mar 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt The 'x-dnssec' field of the Received-SPF mail header can now have three values: pass, fail, none. The value of 'none' indicates that the spf_server was not initialized for DNSSEC processing. ------------------------------------------------------------------------ r264 | ahayatnagarkar | 2005-03-03 10:52:45 -0800 (Thu, 03 Mar 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt Addd "x-dnssec' field to the Received-SPF mail header. This field indicates whether DNSSEC validation succeeded or not. ------------------------------------------------------------------------ r263 | ahayatnagarkar | 2005-03-03 10:49:52 -0800 (Thu, 03 Mar 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt Added a 'x-dnssec' field to the Received-SPF mail header. It indicates whether DNSSEC validation succeeded or not. ------------------------------------------------------------------------ r262 | ahayatnagarkar | 2005-03-03 09:31:32 -0800 (Thu, 03 Mar 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt Changed the 'dnssec' option to 'RequireDNSSEC', for now. This may be changed to a more descriptive word in future. Added a brief description of this option to the op.me document. ------------------------------------------------------------------------ r261 | tewok | 2005-03-02 20:04:39 -0800 (Wed, 02 Mar 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Modified to increment the SOA's serial number. ------------------------------------------------------------------------ r260 | ahayatnagarkar | 2005-03-02 11:41:10 -0800 (Wed, 02 Mar 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_howto.txt M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_howto.txt Added an instruction to install libvalidat. ------------------------------------------------------------------------ r259 | ahayatnagarkar | 2005-03-02 11:37:30 -0800 (Wed, 02 Mar 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_guide.txt Minor update about validator functions. ------------------------------------------------------------------------ r258 | ahayatnagarkar | 2005-03-02 11:36:42 -0800 (Wed, 02 Mar 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/README M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_howto.txt Updates w.r.t. libspf2-1.2.5. ------------------------------------------------------------------------ r257 | ahayatnagarkar | 2005-03-02 11:35:38 -0800 (Wed, 02 Mar 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt Updates to interface with libspf2-1.2.5 and its dnssec patch. ------------------------------------------------------------------------ r256 | ahayatnagarkar | 2005-03-02 11:34:09 -0800 (Wed, 02 Mar 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_guide.txt A developer guide for the dnssec patch to libspf2-1.2.5. ------------------------------------------------------------------------ r255 | ahayatnagarkar | 2005-03-02 11:33:19 -0800 (Wed, 02 Mar 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_howto.txt Instructions for installing libspf2-1.2.5 with the dnssec patch. ------------------------------------------------------------------------ r254 | ahayatnagarkar | 2005-03-02 11:32:10 -0800 (Wed, 02 Mar 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt A patch to libspf2-1.2.5 for providing DNSSEC validation. ------------------------------------------------------------------------ r252 | tewok | 2005-02-26 13:53:35 -0800 (Sat, 26 Feb 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added function header comments. Changed to create keyrec files if they don't exist. Fixed option processing so certain options (missing from config file, keyrec file, and command line) would be properly handled. ------------------------------------------------------------------------ r251 | ahayatnagarkar | 2005-02-25 08:15:14 -0800 (Fri, 25 Feb 2005) | 3 lines Changed paths: A /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_howto.txt A HOWTO document that explains how to add DNSSEC validation of MX records to sendmail-8.13.3. ------------------------------------------------------------------------ r250 | ahayatnagarkar | 2005-02-25 08:13:38 -0800 (Fri, 25 Feb 2005) | 3 lines Changed paths: A /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt A patch to sendmail version 8.13.3 for performing DNSSEC validation of MX records while sending an email. ------------------------------------------------------------------------ r249 | ahayatnagarkar | 2005-02-25 08:10:18 -0800 (Fri, 25 Feb 2005) | 3 lines Changed paths: D /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.1_dnssec_howto.txt A newer version 8.13.3 of sendmail is available. A HOWTO document for the patch will be provided for that version. ------------------------------------------------------------------------ r248 | ahayatnagarkar | 2005-02-25 08:09:17 -0800 (Fri, 25 Feb 2005) | 3 lines Changed paths: D /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.1_dnssec_patch.txt A newer version 8.13.3 of sendmail is available. A patch will be provided for that version. ------------------------------------------------------------------------ r247 | ahayatnagarkar | 2005-02-24 13:20:55 -0800 (Thu, 24 Feb 2005) | 3 lines Changed paths: A /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.1_dnssec_howto.txt A HOWTO file that explains how to add DNSSEC validation of MX records in sendmail-8.13.1. ------------------------------------------------------------------------ r246 | ahayatnagarkar | 2005-02-24 12:50:14 -0800 (Thu, 24 Feb 2005) | 3 lines Changed paths: A /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.1_dnssec_patch.txt A patch to the sendmail MTA for performing DNSSEC validation of MX records while sending an email. ------------------------------------------------------------------------ r245 | tewok | 2005-02-23 21:02:25 -0800 (Wed, 23 Feb 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Added pod for opts_createkrf(). ------------------------------------------------------------------------ r244 | tewok | 2005-02-23 09:24:23 -0800 (Wed, 23 Feb 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Added a means of creating a specified keyrec file if it doesn't already exist. Added opts_createkrf() to turn on the creation of non-existent keyrec files. ------------------------------------------------------------------------ r241 | tewok | 2005-02-21 11:38:32 -0800 (Mon, 21 Feb 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added support for current, new, and published ZSK keys. ------------------------------------------------------------------------ r240 | tewok | 2005-02-20 21:08:44 -0800 (Sun, 20 Feb 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/keyrec-check Updated to recognize the current, new, and published ZSK keys in a zone keyrec. ------------------------------------------------------------------------ r239 | tewok | 2005-02-18 19:18:19 -0800 (Fri, 18 Feb 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/Makefile.PL M /trunk/dnssec-tools/tools/scripts/keyrec-check M /trunk/dnssec-tools/tools/scripts/lskrf M /trunk/dnssec-tools/tools/scripts/zonesigner Tweaked the copyright. ------------------------------------------------------------------------ r238 | tewok | 2005-02-18 19:16:05 -0800 (Fri, 18 Feb 2005) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/expchk This command lists the expired or valid zones given in a specified set of keyrec files. ------------------------------------------------------------------------ r237 | tewok | 2005-02-18 12:02:48 -0800 (Fri, 18 Feb 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Fixed the copyright year. ------------------------------------------------------------------------ r236 | tewok | 2005-02-18 07:53:29 -0800 (Fri, 18 Feb 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added the ability to specify multiple keyrec files on a the command line. The files are all loaded first, then the output processing takes place. ------------------------------------------------------------------------ r235 | tewok | 2005-02-17 19:49:52 -0800 (Thu, 17 Feb 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added a podpage. Changed -cnt to -count. ------------------------------------------------------------------------ r234 | ahayatnagarkar | 2005-02-17 08:27:42 -0800 (Thu, 17 Feb 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_howto.txt Added results of tests of various scenarios. ------------------------------------------------------------------------ r233 | ahayatnagarkar | 2005-02-17 08:04:20 -0800 (Thu, 17 Feb 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/libvalidat/val_print.c Functions for printing debugging information from the validator. ------------------------------------------------------------------------ r232 | ahayatnagarkar | 2005-02-17 08:03:52 -0800 (Thu, 17 Feb 2005) | 3 lines Changed paths: A /trunk/dnssec-tools/lib/libvalidat/val_parse.c A quick implementation for parsing resource-records and the rdata portion of an RRSIG record. ------------------------------------------------------------------------ r231 | ahayatnagarkar | 2005-02-17 08:02:49 -0800 (Thu, 17 Feb 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/libvalidat/val_print.h A header file for printing debugging information from the validator. ------------------------------------------------------------------------ r230 | ahayatnagarkar | 2005-02-17 08:02:16 -0800 (Thu, 17 Feb 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/libvalidat/val_parse.h A header file for parsing routines of the validator. ------------------------------------------------------------------------ r229 | ahayatnagarkar | 2005-02-17 08:01:48 -0800 (Thu, 17 Feb 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/libvalidat/val_internal.h Internal data structures and functions used by validator. ------------------------------------------------------------------------ r228 | ahayatnagarkar | 2005-02-17 08:01:05 -0800 (Thu, 17 Feb 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib/libvalidat/main.c A test program. Can serve as a rudimentary command-line validator. ------------------------------------------------------------------------ r227 | ahayatnagarkar | 2005-02-17 07:59:37 -0800 (Thu, 17 Feb 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libvalidat/Makefile.in Added new rules for val_parse.o and val_print.o. ------------------------------------------------------------------------ r226 | ahayatnagarkar | 2005-02-17 07:58:48 -0800 (Thu, 17 Feb 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/lib/libvalidat/validat.c Added calls to val_parse*() functions to look inside the RRSIG RDATA to find the type covered. ------------------------------------------------------------------------ r225 | ahayatnagarkar | 2005-02-17 07:57:22 -0800 (Thu, 17 Feb 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libvalidat/validat.h Changed year in copyright statement. ------------------------------------------------------------------------ r224 | tewok | 2005-02-16 10:53:18 -0800 (Wed, 16 Feb 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added support for -valid and -expired options. Changed long zone output to include zone expiration date. Added function headers. Deleted unused constants. ------------------------------------------------------------------------ r223 | tewok | 2005-02-16 09:28:51 -0800 (Wed, 16 Feb 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm M /trunk/dnssec-tools/tools/modules/tooloptions.pm Moved the config file from /etc/dnssec/dnssec-tools.conf to /usr/local/etc/dnssec/dnssec-tools.conf ------------------------------------------------------------------------ r222 | tewok | 2005-02-16 08:35:55 -0800 (Wed, 16 Feb 2005) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added the -all option, to select every keyrec in the file. Made several options conditionally imply other options. F'rinstance, if the referenced-key or unreferenced-key options were given without a key-type option, then all the keys will be selected. ------------------------------------------------------------------------ r221 | tewok | 2005-02-16 08:12:01 -0800 (Wed, 16 Feb 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Fixed the usage message. ------------------------------------------------------------------------ r220 | tewok | 2005-02-16 08:04:34 -0800 (Wed, 16 Feb 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf - Completed support of -cnt flag, which only displays a count of matching records. ------------------------------------------------------------------------ r219 | tewok | 2005-02-15 19:44:23 -0800 (Tue, 15 Feb 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added support for listing keys based on whether or not they're referenced by a zone. Reworked the way key output is done. ------------------------------------------------------------------------ r218 | ahayatnagarkar | 2005-02-15 07:34:17 -0800 (Tue, 15 Feb 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt Updates to properly propagage error messages for INCLUDE and REDIRECT mechanisms. ------------------------------------------------------------------------ r217 | tewok | 2005-02-14 19:03:44 -0800 (Mon, 14 Feb 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Reorganized the code and deleted an unused routine. ------------------------------------------------------------------------ r216 | tewok | 2005-02-14 18:43:39 -0800 (Mon, 14 Feb 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/lskrf Added code for displaying key information. Deleted some unnecessary comments. Added some necessary comments. ------------------------------------------------------------------------ r215 | tewok | 2005-02-14 11:05:37 -0800 (Mon, 14 Feb 2005) | 4 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/lskrf lskrf - lists fields in a keyrec file. This is the rudimentary beginnings of this script. ------------------------------------------------------------------------ r214 | ahayatnagarkar | 2005-02-11 15:04:15 -0800 (Fri, 11 Feb 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_howto.txt Added a table showing various DNSSEC validation scenarios and their expected results using SPF-mechanisms. ------------------------------------------------------------------------ r213 | tewok | 2005-02-11 14:16:37 -0800 (Fri, 11 Feb 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Generates two ZSKs for a zone, one current and one published. These are recorded in the zone's keyrec file. ------------------------------------------------------------------------ r212 | ahayatnagarkar | 2005-02-11 14:16:05 -0800 (Fri, 11 Feb 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libvalidat/validat.c Updated a comment. ------------------------------------------------------------------------ r211 | ahayatnagarkar | 2005-02-11 11:25:11 -0800 (Fri, 11 Feb 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt Call val_init() before val_check() in spf_dns_dnssec.c. ------------------------------------------------------------------------ r210 | ahayatnagarkar | 2005-02-11 10:39:18 -0800 (Fri, 11 Feb 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libvalidat/validat.h Updated comments. ------------------------------------------------------------------------ r209 | ahayatnagarkar | 2005-02-11 10:30:09 -0800 (Fri, 11 Feb 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_howto.txt Instructions to run aclocal, autheader etc. so as to properly generate the shared library with a '.so' extension. ------------------------------------------------------------------------ r208 | ahayatnagarkar | 2005-02-11 08:30:29 -0800 (Fri, 11 Feb 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_howto.txt M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_howto.txt Added the 'autoconf' step to the instructions. ------------------------------------------------------------------------ r207 | ahayatnagarkar | 2005-02-11 08:25:52 -0800 (Fri, 11 Feb 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt This patch now links to the -lvalidat library for DNSSEC validation. ------------------------------------------------------------------------ r206 | ahayatnagarkar | 2005-02-11 08:24:58 -0800 (Fri, 11 Feb 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt This patch now uses the libvalidat library for DNSSEC validation, instead of the custom dnssec_validate.[h,c] files. ------------------------------------------------------------------------ r205 | ahayatnagarkar | 2005-02-11 07:38:34 -0800 (Fri, 11 Feb 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libvalidat/Makefile.in Install the validat.h file in $(installdir) ------------------------------------------------------------------------ r204 | ahayatnagarkar | 2005-02-11 07:35:01 -0800 (Fri, 11 Feb 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/Makefile.top Minor typo correction. ------------------------------------------------------------------------ r203 | ahayatnagarkar | 2005-02-10 17:23:31 -0800 (Thu, 10 Feb 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libvalidat A /trunk/dnssec-tools/lib/libvalidat/.cvsignore Ignore files validat-config.h and Makefile. ------------------------------------------------------------------------ r202 | ahayatnagarkar | 2005-02-10 17:21:21 -0800 (Thu, 10 Feb 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in Added rules for AR and RANLIB. ------------------------------------------------------------------------ r201 | ahayatnagarkar | 2005-02-10 17:19:49 -0800 (Thu, 10 Feb 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libvalidat/Makefile.in Added a rule for the generation of libvalidat.a ------------------------------------------------------------------------ r200 | ahayatnagarkar | 2005-02-10 16:43:23 -0800 (Thu, 10 Feb 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/lib/libvalidat/validat-config.h.in Modified a comment. ------------------------------------------------------------------------ r199 | ahayatnagarkar | 2005-02-10 16:36:15 -0800 (Thu, 10 Feb 2005) | 11 lines Changed paths: A /trunk/dnssec-tools/lib/libvalidat/validat.c A /trunk/dnssec-tools/lib/libvalidat/validat.h An initial implementation of the validator API. At present, it contains three functions: val_init(), val_check() and val_query. val_init() : initializes the validator library val_check(): performs DNSSEC validation. At present, it just checks for the existence of the RRSIG record in DNS. val_query(): performs the resolver query and calls val_check() for DNSSEC validation. Note: These functions will undergo changes in future as the library evolves. ------------------------------------------------------------------------ r198 | ahayatnagarkar | 2005-02-10 16:29:54 -0800 (Thu, 10 Feb 2005) | 3 lines Changed paths: A /trunk/dnssec-tools/lib/libvalidat/validat-config.h.in Input file for generating the configuration header file from the configure script. ------------------------------------------------------------------------ r197 | ahayatnagarkar | 2005-02-10 16:29:01 -0800 (Thu, 10 Feb 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/lib A /trunk/dnssec-tools/lib/libvalidat A /trunk/dnssec-tools/lib/libvalidat/Makefile.in Input file for generating the Makefile. ------------------------------------------------------------------------ r196 | ahayatnagarkar | 2005-02-10 16:21:04 -0800 (Thu, 10 Feb 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in Properly generate the validat-config.h file from validat-config.h.in ------------------------------------------------------------------------ r195 | ahayatnagarkar | 2005-02-10 15:11:37 -0800 (Thu, 10 Feb 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in Additional rules for libvalidat. ------------------------------------------------------------------------ r194 | hardaker | 2005-02-10 14:58:16 -0800 (Thu, 10 Feb 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/Makefile.in A /trunk/dnssec-tools/Makefile.top M /trunk/dnssec-tools/configure M /trunk/dnssec-tools/configure.in Local Makefile.top for common rules ------------------------------------------------------------------------ r193 | hardaker | 2005-02-10 14:45:38 -0800 (Thu, 10 Feb 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/mapper A /trunk/dnssec-tools/tools/mapper/.cvsignore cvs ignore file ------------------------------------------------------------------------ r192 | hardaker | 2005-02-10 14:29:46 -0800 (Thu, 10 Feb 2005) | 2 lines Changed paths: D /trunk/dnssec-tools/tools/mapper/Net-DNS-ZoneFile-Fast.patch removed the older patch file ------------------------------------------------------------------------ r191 | hardaker | 2005-02-10 14:18:59 -0800 (Thu, 10 Feb 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper New GUI screens for easy-to-use support ------------------------------------------------------------------------ r190 | hardaker | 2005-02-09 16:50:52 -0800 (Wed, 09 Feb 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper Getopt::Long::GUI support ------------------------------------------------------------------------ r189 | tewok | 2005-02-09 13:29:58 -0800 (Wed, 09 Feb 2005) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Moved the contents of genkeys() into two separate routines: genksk() and genzsk(). (This is in preparation for additional mods to come later.) Slightly modified output. ------------------------------------------------------------------------ r188 | tewok | 2005-02-08 13:41:32 -0800 (Tue, 08 Feb 2005) | 16 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner - Added options: - specification of -g for dnssec-signzone - help option - key re-use - catch-all options for additions options for dnssec-keygen and dnssec-signzone - Added code to ensure required arguments were given. - Added some additional output for the -v option. - Pulled options passed to dnssec-signzone into their own variable. This was done purely for cosmetic reasons. - Added pod for new options. ------------------------------------------------------------------------ r187 | tewok | 2005-02-08 13:24:25 -0800 (Tue, 08 Feb 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Added several new options for use by zonesigner. ------------------------------------------------------------------------ r186 | ahayatnagarkar | 2005-02-04 14:48:49 -0800 (Fri, 04 Feb 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt Compare error-code instead of error-string from the return value of SPF_result. ------------------------------------------------------------------------ r185 | ahayatnagarkar | 2005-02-04 14:45:33 -0800 (Fri, 04 Feb 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_howto.txt Minor update about messages written to log files and mail headers. ------------------------------------------------------------------------ r184 | ahayatnagarkar | 2005-02-04 14:42:32 -0800 (Fri, 04 Feb 2005) | 3 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_guide.txt Added description about how to handle return value from the SPF_result function. ------------------------------------------------------------------------ r183 | ahayatnagarkar | 2005-02-04 14:06:06 -0800 (Fri, 04 Feb 2005) | 4 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt Read all the error text messages in SPF_output_t. Handle a return value of SPF_RESULT_UNKNOWN from libspf2 for DNSSEC Validation Failure. ------------------------------------------------------------------------ r182 | ahayatnagarkar | 2005-02-04 14:03:45 -0800 (Fri, 04 Feb 2005) | 11 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt This patch now handles dnssec-validation of dns records fetched for various SPF mechanisms (A, MX, PTR, INCLUDE, EXISTS, REDIRECT). The error text (in case of a dnssec-validation failure) is now added to the list of errors in the SPF_output_t structure. The SPF_result function now returns an error value of SPF_RESULT_UNKNOWN (stands for the result "PermError", as given in draft-schlitt-spf-classic-00.txt) instead of SPF_RESULT_FAIL. [According to draft-schlitt-spf-classic-00.txt, a result of "Fail" is an explicit statement that the client is not authorized to use the domain in the given identity, whereas a result of "PermError" means that the domain's published records couldn't be correctly interpreted]. ------------------------------------------------------------------------ r181 | hardaker | 2005-01-31 09:54:04 -0800 (Mon, 31 Jan 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm M /trunk/dnssec-tools/tools/modules/tooloptions.pm force exporting of function names ------------------------------------------------------------------------ r180 | hardaker | 2005-01-20 15:12:05 -0800 (Thu, 20 Jan 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts better GUI usage ------------------------------------------------------------------------ r179 | hardaker | 2005-01-11 21:05:37 -0800 (Tue, 11 Jan 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts converted options to getopt long options (short supported too) ------------------------------------------------------------------------ r178 | hardaker | 2005-01-11 14:23:28 -0800 (Tue, 11 Jan 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt added mmm emacs header for text/perl mode switching ------------------------------------------------------------------------ r177 | hardaker | 2005-01-11 10:40:25 -0800 (Tue, 11 Jan 2005) | 2 lines Changed paths: M /trunk/dnssec-tools A /trunk/dnssec-tools/.cvsignore A /trunk/dnssec-tools/Makefile.in A /trunk/dnssec-tools/configure A /trunk/dnssec-tools/configure.in A /trunk/dnssec-tools/install-sh Top level configure and make system ------------------------------------------------------------------------ r176 | hardaker | 2005-01-11 10:39:03 -0800 (Tue, 11 Jan 2005) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/mapper/Makefile.PL Makefile.PL ------------------------------------------------------------------------ r175 | hardaker | 2005-01-11 10:03:50 -0800 (Tue, 11 Jan 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast.patch handle quotes around include files ------------------------------------------------------------------------ r174 | hardaker | 2005-01-11 09:19:32 -0800 (Tue, 11 Jan 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast.patch more flexible file names for include directives ------------------------------------------------------------------------ r173 | hardaker | 2005-01-11 09:11:10 -0800 (Tue, 11 Jan 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast.patch document other types supported in the man page ------------------------------------------------------------------------ r172 | hardaker | 2005-01-11 09:08:00 -0800 (Tue, 11 Jan 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast.patch support $include directives ------------------------------------------------------------------------ r171 | hardaker | 2005-01-04 15:06:53 -0800 (Tue, 04 Jan 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt check that RRSIGs aren't signing an RRSIG ------------------------------------------------------------------------ r167 | hardaker | 2005-01-04 10:05:19 -0800 (Tue, 04 Jan 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts M /trunk/dnssec-tools/tools/mapper/mapper Added =pod directives ------------------------------------------------------------------------ r164 | hardaker | 2005-01-04 09:42:20 -0800 (Tue, 04 Jan 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt add 1 to error output for humans which expect counting to start at 1 ------------------------------------------------------------------------ r163 | hardaker | 2005-01-04 09:41:41 -0800 (Tue, 04 Jan 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts throw errors when the parser fails ------------------------------------------------------------------------ r162 | hardaker | 2005-01-03 21:03:58 -0800 (Mon, 03 Jan 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt check that RRSIG and NSEC entries are the only ones for a given name. Misc other todo comments ------------------------------------------------------------------------ r161 | hardaker | 2005-01-03 21:01:44 -0800 (Mon, 03 Jan 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts more feedback when -v is turned on, and even some when it is not so that people can be sure things were tested ------------------------------------------------------------------------ r160 | hardaker | 2005-01-03 21:01:10 -0800 (Mon, 03 Jan 2005) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm return a count if the rule was processed, and the number of errors found ------------------------------------------------------------------------ r158 | hardaker | 2004-12-27 20:57:41 -0800 (Mon, 27 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt ensure that glue records MUST NOT be signed (unless they're in the parent zone) ------------------------------------------------------------------------ r157 | hardaker | 2004-12-27 20:50:40 -0800 (Mon, 27 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt ensure that child NS records MUST NOT be signed ------------------------------------------------------------------------ r156 | hardaker | 2004-12-27 20:48:04 -0800 (Mon, 27 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt make sure that RRSIG's themselves are not signed ------------------------------------------------------------------------ r155 | hardaker | 2004-12-27 20:44:29 -0800 (Mon, 27 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt check that records have an RRSIG with the zone's key as the signer ------------------------------------------------------------------------ r153 | hardaker | 2004-12-27 16:34:27 -0800 (Mon, 27 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt better reference in description clause ------------------------------------------------------------------------ r152 | hardaker | 2004-12-27 16:33:58 -0800 (Mon, 27 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts better intro text in the man page ------------------------------------------------------------------------ r151 | hardaker | 2004-12-27 15:53:35 -0800 (Mon, 27 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt misc other checks for DS/DNSKEY pairs in live zone tests ------------------------------------------------------------------------ r150 | hardaker | 2004-12-27 15:52:51 -0800 (Mon, 27 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt misc other XXX potential tests ------------------------------------------------------------------------ r149 | hardaker | 2004-12-27 14:55:49 -0800 (Mon, 27 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt check that the RRSIG signer name matches the zone name ------------------------------------------------------------------------ r148 | hardaker | 2004-12-27 14:53:21 -0800 (Mon, 27 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast.patch grab the full name from RRSIG records as should be done ------------------------------------------------------------------------ r147 | hardaker | 2004-12-27 14:14:57 -0800 (Mon, 27 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt check every rrsig record (eg, multiple keys) for matching TTLs bbinstead of just one ------------------------------------------------------------------------ r146 | hardaker | 2004-12-27 14:11:25 -0800 (Mon, 27 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm update documentation to discuss multiple error return ------------------------------------------------------------------------ r145 | hardaker | 2004-12-27 14:09:40 -0800 (Mon, 27 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt deal with multiple errors being returned from tests; make some of the tests make use of this feature ------------------------------------------------------------------------ r144 | hardaker | 2004-12-27 13:59:09 -0800 (Mon, 27 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt RRSIG TTLs must match original record TTLs ------------------------------------------------------------------------ r143 | hardaker | 2004-12-27 13:41:58 -0800 (Mon, 27 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm M /trunk/dnssec-tools/tools/donuts/donuts print -R help description describing each rule ------------------------------------------------------------------------ r142 | hardaker | 2004-12-27 13:08:20 -0800 (Mon, 27 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt remove comments that say stuff isn't implemented yet; it is ------------------------------------------------------------------------ r141 | hardaker | 2004-12-27 13:07:44 -0800 (Mon, 27 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt new rules for checking various dnssec records (key name must be the same as the zone name; protocol must be 3; rrsigs must be present for valid records; nsec must be present ------------------------------------------------------------------------ r140 | ahayatnagarkar | 2004-12-24 17:58:37 -0800 (Fri, 24 Dec 2004) | 3 lines Changed paths: A /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_howto.txt A User's guide to add DNSSEC validation capabilities to sendmail's SPF processing. ------------------------------------------------------------------------ r139 | ahayatnagarkar | 2004-12-24 17:55:04 -0800 (Fri, 24 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt Handle the 'ignore' value to dnssec_policy option. ------------------------------------------------------------------------ r138 | ahayatnagarkar | 2004-12-24 17:54:32 -0800 (Fri, 24 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt Changed a return value. ------------------------------------------------------------------------ r137 | ahayatnagarkar | 2004-12-24 11:10:48 -0800 (Fri, 24 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/README Added entry about the libspf2-dnssec developer guide. ------------------------------------------------------------------------ r136 | ahayatnagarkar | 2004-12-24 11:10:05 -0800 (Fri, 24 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_howto.txt Instructions for installing libspf2 with the dnssec patch. ------------------------------------------------------------------------ r135 | ahayatnagarkar | 2004-12-24 11:09:34 -0800 (Fri, 24 Dec 2004) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_guide.txt A developer guide for the dnssec patch to libspf2. ------------------------------------------------------------------------ r134 | hardaker | 2004-12-24 09:47:51 -0800 (Fri, 24 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt Don't check keys for DS records that don't have the zone flag set ------------------------------------------------------------------------ r133 | hardaker | 2004-12-24 09:47:22 -0800 (Fri, 24 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt fix error msg to include correct config parameter ------------------------------------------------------------------------ r132 | hardaker | 2004-12-24 09:25:30 -0800 (Fri, 24 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt Check child for valid dnskey's that match DS records; better error messages for missing DS records in parent. ------------------------------------------------------------------------ r131 | hardaker | 2004-12-24 09:22:48 -0800 (Fri, 24 Dec 2004) | 2 lines Changed paths: D /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast-1.patch D /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast-2.patch A /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast.patch Fixed a number of issues with the patch and DS and DNSKEY parsing ------------------------------------------------------------------------ r130 | ahayatnagarkar | 2004-12-24 08:11:53 -0800 (Fri, 24 Dec 2004) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_howto.txt D /trunk/dnssec-tools/apps/libspf2_dnssec_doc.txt M /trunk/dnssec-tools/apps/sendmail/README Moved libspf2_dnssec_doc.txt to libspf2-1.0.4_dnssec_howto.txt. ------------------------------------------------------------------------ r129 | ahayatnagarkar | 2004-12-24 07:57:56 -0800 (Fri, 24 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/README Added reference to the 'obsolete' sub-directory. ------------------------------------------------------------------------ r128 | ahayatnagarkar | 2004-12-24 07:57:23 -0800 (Fri, 24 Dec 2004) | 2 lines Changed paths: D /trunk/dnssec-tools/apps/sendmail/Makefile.in D /trunk/dnssec-tools/apps/sendmail/configure D /trunk/dnssec-tools/apps/sendmail/configure.in D /trunk/dnssec-tools/apps/sendmail/dnssec-milter.c A /trunk/dnssec-tools/apps/sendmail/obsolete A /trunk/dnssec-tools/apps/sendmail/obsolete/Makefile.in A /trunk/dnssec-tools/apps/sendmail/obsolete/configure A /trunk/dnssec-tools/apps/sendmail/obsolete/configure.in A /trunk/dnssec-tools/apps/sendmail/obsolete/dnssec-milter.c A /trunk/dnssec-tools/apps/sendmail/obsolete/test.c A /trunk/dnssec-tools/apps/sendmail/obsolete/validator.c A /trunk/dnssec-tools/apps/sendmail/obsolete/validator.h D /trunk/dnssec-tools/apps/sendmail/test.c D /trunk/dnssec-tools/apps/sendmail/validator.c D /trunk/dnssec-tools/apps/sendmail/validator.h Moved old files to the obsolete directory. ------------------------------------------------------------------------ r127 | hardaker | 2004-12-23 22:36:09 -0800 (Thu, 23 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt A (live query) rule to verify that the parent has a matching DS for every DNSKEY. ------------------------------------------------------------------------ r126 | hardaker | 2004-12-23 22:32:13 -0800 (Thu, 23 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts return an empty array for live_query if no answers found ------------------------------------------------------------------------ r125 | hardaker | 2004-12-23 15:50:13 -0800 (Thu, 23 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts exit after usage() ------------------------------------------------------------------------ r124 | ahayatnagarkar | 2004-12-21 10:06:08 -0800 (Tue, 21 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2_dnssec_doc.txt Added description of the use of SPF_result() by spfmilter-1.0.8. ------------------------------------------------------------------------ r123 | ahayatnagarkar | 2004-12-21 09:40:12 -0800 (Tue, 21 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/README Updated to include the libspf2_dnssec_doc.txt file. ------------------------------------------------------------------------ r122 | ahayatnagarkar | 2004-12-21 09:38:21 -0800 (Tue, 21 Dec 2004) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/libspf2_dnssec_doc.txt Documentation of DNSSEC validation in libspf2. ------------------------------------------------------------------------ r121 | ahayatnagarkar | 2004-12-21 09:17:32 -0800 (Tue, 21 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt Changed the name of dnssec policy from REJECT to ABORT. ------------------------------------------------------------------------ r120 | ahayatnagarkar | 2004-12-21 09:11:06 -0800 (Tue, 21 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt Changed name of policy from REJECT to ABORT. ------------------------------------------------------------------------ r119 | hardaker | 2004-12-20 22:21:37 -0800 (Mon, 20 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts print line numbers for broken rules ------------------------------------------------------------------------ r118 | hardaker | 2004-12-20 22:20:56 -0800 (Mon, 20 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt make minimum NS records configurable with help text; improvements to sub-must-be-secure check ------------------------------------------------------------------------ r117 | hardaker | 2004-12-20 22:19:28 -0800 (Mon, 20 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt help text for minttl and maxttl rules ------------------------------------------------------------------------ r116 | hardaker | 2004-12-20 22:18:53 -0800 (Mon, 20 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt check for missing or present-but-shouldn't be NSEC and RRSIG records (needs improvement still) ------------------------------------------------------------------------ r115 | hardaker | 2004-12-20 12:41:54 -0800 (Mon, 20 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts added a -H flag which prints legal configuration file rule/token pairs ------------------------------------------------------------------------ r114 | hardaker | 2004-12-20 12:41:16 -0800 (Mon, 20 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm added a print_help() operator ------------------------------------------------------------------------ r113 | hardaker | 2004-12-17 17:24:46 -0800 (Fri, 17 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt better error messages ------------------------------------------------------------------------ r112 | hardaker | 2004-12-17 17:24:18 -0800 (Fri, 17 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts Added the ability to load user configuration files to tweak how rules operate ------------------------------------------------------------------------ r111 | hardaker | 2004-12-17 17:23:50 -0800 (Fri, 17 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm added a config() method ------------------------------------------------------------------------ r110 | hardaker | 2004-12-17 16:36:27 -0800 (Fri, 17 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm better error output ------------------------------------------------------------------------ r109 | tewok | 2004-12-17 10:59:48 -0800 (Fri, 17 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tests/test-conf M /trunk/dnssec-tools/tools/modules/tests/test-keyrec M /trunk/dnssec-tools/tools/modules/tests/test-toolopts1 M /trunk/dnssec-tools/tools/modules/tests/test-toolopts2 M /trunk/dnssec-tools/tools/modules/tests/test-toolopts3 Fixed to use new module hierarchy. ------------------------------------------------------------------------ r108 | tewok | 2004-12-17 10:57:34 -0800 (Fri, 17 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Added several new standard options. ------------------------------------------------------------------------ r107 | tewok | 2004-12-17 10:56:24 -0800 (Fri, 17 Dec 2004) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added a new key field and several new zone fields. Fixed a typo. ------------------------------------------------------------------------ r106 | hardaker | 2004-12-13 10:57:01 -0800 (Mon, 13 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Rule.pm M /trunk/dnssec-tools/tools/donuts/donuts moved more functionality to the Rule class ------------------------------------------------------------------------ r105 | hardaker | 2004-12-13 10:37:32 -0800 (Mon, 13 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/Makefile.PL A /trunk/dnssec-tools/tools/donuts/Rule.pm M /trunk/dnssec-tools/tools/donuts/donuts Created a Rule class that holds/implements rules and documentation to define rule syntax ------------------------------------------------------------------------ r104 | hardaker | 2004-12-12 21:42:02 -0800 (Sun, 12 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts Added some array-compare routines. Better warnings for broken code in rule files ------------------------------------------------------------------------ r103 | hardaker | 2004-12-09 23:15:54 -0800 (Thu, 09 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts added beginning support for live_queries; Changed default rule load path to be based on installation Config support to match the Makefile install process ------------------------------------------------------------------------ r102 | hardaker | 2004-12-09 23:13:24 -0800 (Thu, 09 Dec 2004) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/donuts/Makefile.PL A perl Makefile to install the package and rules ------------------------------------------------------------------------ r101 | hardaker | 2004-12-09 23:12:33 -0800 (Thu, 09 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts A /trunk/dnssec-tools/tools/donuts/.cvsignore ignore file ------------------------------------------------------------------------ r100 | hardaker | 2004-12-08 17:02:26 -0800 (Wed, 08 Dec 2004) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt general DNS recommendations (minttls, etc) ------------------------------------------------------------------------ r99 | hardaker | 2004-12-08 17:01:57 -0800 (Wed, 08 Dec 2004) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt rules diagnosing parent/child relationships ------------------------------------------------------------------------ r98 | hardaker | 2004-12-08 17:01:30 -0800 (Wed, 08 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt fix one rule, and add a todo list ------------------------------------------------------------------------ r97 | hardaker | 2004-12-08 17:00:53 -0800 (Wed, 08 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts allow for -i to ignore certain rule names ------------------------------------------------------------------------ r96 | hardaker | 2004-12-08 14:05:44 -0800 (Wed, 08 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Makefile.PL M /trunk/dnssec-tools/tools/modules/conf.pm M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/tooloptions.pm M /trunk/dnssec-tools/tools/scripts/keyrec-check M /trunk/dnssec-tools/tools/scripts/zonesigner final module name change ------------------------------------------------------------------------ r95 | hardaker | 2004-12-08 13:59:47 -0800 (Wed, 08 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/donuts/donuts add copyright ------------------------------------------------------------------------ r94 | hardaker | 2004-12-08 13:59:36 -0800 (Wed, 08 Dec 2004) | 2 lines Changed paths: D /trunk/dnssec-tools/tools/donuts/rules/dnslint.rules.txt M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt whoops. shouldn't have been checked it ------------------------------------------------------------------------ r93 | hardaker | 2004-12-08 13:55:39 -0800 (Wed, 08 Dec 2004) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/donuts A /trunk/dnssec-tools/tools/donuts/donuts A /trunk/dnssec-tools/tools/donuts/rules A /trunk/dnssec-tools/tools/donuts/rules/dnslint.rules.txt A /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt initial pass at a zone file checking script based on loadable rule files ------------------------------------------------------------------------ r92 | ahayatnagarkar | 2004-12-07 08:26:31 -0800 (Tue, 07 Dec 2004) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/sendmail/README A README file for the apps/sendmail directory. ------------------------------------------------------------------------ r91 | ahayatnagarkar | 2004-12-07 08:17:40 -0800 (Tue, 07 Dec 2004) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/README A README file for the apps directory. ------------------------------------------------------------------------ r90 | hardaker | 2004-12-06 21:56:03 -0800 (Mon, 06 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Makefile.PL M /trunk/dnssec-tools/tools/modules/conf.pm M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/tooloptions.pm M /trunk/dnssec-tools/tools/scripts/keyrec-check M /trunk/dnssec-tools/tools/scripts/zonesigner consistent capitilization will make things work. ------------------------------------------------------------------------ r89 | hardaker | 2004-12-06 16:28:35 -0800 (Mon, 06 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts A /trunk/dnssec-tools/tools/scripts/.cvsignore ignore perl specific build dirs and files ------------------------------------------------------------------------ r88 | hardaker | 2004-12-06 16:28:04 -0800 (Mon, 06 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules M /trunk/dnssec-tools/tools/modules/.cvsignore ignore perl specific build dirs ------------------------------------------------------------------------ r87 | hardaker | 2004-12-06 16:27:24 -0800 (Mon, 06 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Makefile.PL M /trunk/dnssec-tools/tools/modules/conf.pm M /trunk/dnssec-tools/tools/modules/keyrec.pm M /trunk/dnssec-tools/tools/modules/tooloptions.pm A /trunk/dnssec-tools/tools/scripts/Makefile.PL M /trunk/dnssec-tools/tools/scripts/keyrec-check M /trunk/dnssec-tools/tools/scripts/zonesigner Added required support to match perl CPAN and general perl requirements ------------------------------------------------------------------------ r86 | ahayatnagarkar | 2004-12-06 14:50:04 -0800 (Mon, 06 Dec 2004) | 3 lines Changed paths: A /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt A patch to libspf2-1.0.4 for providing DNSSEC validation. This is a preliminary version. ------------------------------------------------------------------------ r85 | ahayatnagarkar | 2004-12-06 14:49:34 -0800 (Mon, 06 Dec 2004) | 3 lines Changed paths: A /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt A patch to spfmilter-1.0.8 for providing DNSSEC validation. This is a preliminary version. It requires libspf2 with DNSSEC patch applied. ------------------------------------------------------------------------ r84 | tewok | 2004-12-03 11:38:27 -0800 (Fri, 03 Dec 2004) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast-2.patch This patch adds a -keep_alive option that allows parse() to continue working, even after it's found errors. ------------------------------------------------------------------------ r83 | tewok | 2004-12-03 11:31:49 -0800 (Fri, 03 Dec 2004) | 15 lines Changed paths: A /trunk/dnssec-tools/tools/patches A /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast-1.patch This is Wes Hardaker's original patch file for Net-DNS-ZoneFile-Fast. It has been moved into this patch-specific directory. The log messages from the original file's two versions are: revision 1.2 date: 2004/11/05 00:43:44; author: hardaker; state: Exp; lines: +82 -41 update to handle axfr transfered files with all data on a single line ---------------------------- revision 1.1 date: 2004/10/22 23:57:38; author: hardaker; state: Exp; Patch to Net::DNS::ZoneFile::Fast to make it parse dnssec RRs ------------------------------------------------------------------------ r82 | tewok | 2004-12-01 19:25:39 -0800 (Wed, 01 Dec 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Added some comments to the newly created db. file. ------------------------------------------------------------------------ r81 | hardaker | 2004-12-01 16:22:42 -0800 (Wed, 01 Dec 2004) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/linux A /trunk/dnssec-tools/tools/linux/ifup-dyn-dns A /trunk/dnssec-tools/tools/linux/ifup-dyn-dns/README A /trunk/dnssec-tools/tools/linux/ifup-dyn-dns/ifup-dyndns moved from a top level directory ------------------------------------------------------------------------ r80 | hardaker | 2004-12-01 16:19:26 -0800 (Wed, 01 Dec 2004) | 2 lines Changed paths: D /trunk/dnssec-tools/tools/linux-ifup-dyn-dns Moving to linux specific dir ------------------------------------------------------------------------ r79 | tewok | 2004-12-01 11:33:50 -0800 (Wed, 01 Dec 2004) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/keyrec-check Added checks for crossed zone/key keyrec hashkeys. Fixed a typo. ------------------------------------------------------------------------ r78 | tewok | 2004-11-30 19:51:09 -0800 (Tue, 30 Nov 2004) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/keyrec-check Added checks for the kskdirectory and zskdirectory. Added defined() checks for some keyrec fields. ------------------------------------------------------------------------ r77 | tewok | 2004-11-30 17:47:09 -0800 (Tue, 30 Nov 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm Minor format adjustment in pod. ------------------------------------------------------------------------ r76 | tewok | 2004-11-30 17:44:56 -0800 (Tue, 30 Nov 2004) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Moved data initialization code to keyrec_init(). Added keyrec_discard(). Added pod for keyrec_init() and keyrec_discard(). ------------------------------------------------------------------------ r75 | tewok | 2004-11-30 14:12:03 -0800 (Tue, 30 Nov 2004) | 10 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tests/test-keyrec Added tests for the following interfaces: keyrec_add() keyrec_discard() keyrec_init() keyrec_keyfields() keyrec_newkeyrec() keyrec_read() keyrec_write() keyrec_zonefields() ------------------------------------------------------------------------ r74 | tewok | 2004-11-30 09:16:07 -0800 (Tue, 30 Nov 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Added a couple error checks. ------------------------------------------------------------------------ r73 | tewok | 2004-11-30 09:14:09 -0800 (Tue, 30 Nov 2004) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tests/test-toolopts2 Check for required arguments. Updated the test keyrec file to current fields. ------------------------------------------------------------------------ r72 | tewok | 2004-11-30 08:25:10 -0800 (Tue, 30 Nov 2004) | 7 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tests/test-keyrec Updated the test keyrec file to current fields. Deleted unused test_parseconfig() routine. Added better test identification output. Moved the test_keyrec_recval() routine. Fixed keyrec_setval() args to be current set. ------------------------------------------------------------------------ r71 | tewok | 2004-11-30 08:20:13 -0800 (Tue, 30 Nov 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Modified a check in opts_keykr() to account for specific key types. ------------------------------------------------------------------------ r70 | tewok | 2004-11-30 08:17:45 -0800 (Tue, 30 Nov 2004) | 10 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tests/test-toolopts1 Updated the test keyrec file to current fields. Fixed names of: optsuspend(); optrestore(); optdrop(); by changing to: opts_suspend(); opts_restore(); opts_drop(); ------------------------------------------------------------------------ r69 | tewok | 2004-11-30 08:12:40 -0800 (Tue, 30 Nov 2004) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tests/test-toolopts3 Updated the test keyrec file to current fields. Modified error messages to show more clearly what has happened. ------------------------------------------------------------------------ r68 | tewok | 2004-11-29 19:45:44 -0800 (Mon, 29 Nov 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added a description to the podman. ------------------------------------------------------------------------ r67 | tewok | 2004-11-29 11:50:40 -0800 (Mon, 29 Nov 2004) | 9 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Renamed keyrec_save() to keyrec_close(). Added some error returns. Added some success returns. Checked the return value for keyrec_newkeyrec(). Fixed keyrec_read() to really return the number of keyrecs it read. Made some comments match reality. Made keyrec_newkeyrec() ensure it was given a valid keyrec type. Added masses of pod describing the interfaces. ------------------------------------------------------------------------ r66 | tewok | 2004-11-28 21:15:53 -0800 (Sun, 28 Nov 2004) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Modify keyrec_setval() to properly add new entries to an existing keyrec. ------------------------------------------------------------------------ r65 | tewok | 2004-11-23 13:18:33 -0800 (Tue, 23 Nov 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/keyrec-check Added a data validation check for key keyrec data. ------------------------------------------------------------------------ r64 | tewok | 2004-11-22 21:10:49 -0800 (Mon, 22 Nov 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/zonesigner Fixed the command name in the usage message. ------------------------------------------------------------------------ r63 | tewok | 2004-11-22 21:09:55 -0800 (Mon, 22 Nov 2004) | 10 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/keyrec-check Added options to specify zone checks or key checks only. Added checks to test the validity of data in a zone keyrec. These checks ensure: - existence of zone file - existence of KSK file - existence of ZSK file - endtime > 1 day - seconds-count and date string match ------------------------------------------------------------------------ r62 | tewok | 2004-11-22 19:29:37 -0800 (Mon, 22 Nov 2004) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/keyrec-check Added recognition of: - mislabeled keys - orphaned keys ------------------------------------------------------------------------ r61 | tewok | 2004-11-22 12:50:20 -0800 (Mon, 22 Nov 2004) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/scripts/zonesigner Combines calls to dnssec-keygen and dnssec-signzone to provide a single, easy-to-use tool for creating keys and signing zones. ------------------------------------------------------------------------ r60 | tewok | 2004-11-22 11:28:23 -0800 (Mon, 22 Nov 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/scripts/keyrec-check Re-enabled a check that had been disabled for testing. ------------------------------------------------------------------------ r59 | tewok | 2004-11-22 11:24:48 -0800 (Mon, 22 Nov 2004) | 3 lines Changed paths: A /trunk/dnssec-tools/tools/scripts A /trunk/dnssec-tools/tools/scripts/keyrec-check This script does sanity checking on a keyrec file. It has comments and pod explaining what it's checking. ------------------------------------------------------------------------ r58 | tewok | 2004-11-19 12:14:58 -0800 (Fri, 19 Nov 2004) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Modified opts_zonekr() to get the keyrec values for its KSK and ZSK. ------------------------------------------------------------------------ r57 | tewok | 2004-11-19 12:03:05 -0800 (Fri, 19 Nov 2004) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Renamed the key keyrec field "type" to "keyrec_type". Allowed colons and tabs to be used in keyrec values. Added some rudimentary formatting to keyrec lines. Modified keyrec_add() to only allow adding the length field for a key's type. ------------------------------------------------------------------------ r56 | tewok | 2004-11-18 21:04:12 -0800 (Thu, 18 Nov 2004) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added 'type' to key fields. Added some special-case code for keys when adding key keyrecs. Only the appropriate key length will be added for the key type. Slightly modify the output format for keyrec fields. Added interfaces to return the list of key fields and zone fields. ------------------------------------------------------------------------ r55 | tewok | 2004-11-18 17:21:53 -0800 (Thu, 18 Nov 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added keyrec_add(). ------------------------------------------------------------------------ r54 | tewok | 2004-11-18 17:20:56 -0800 (Thu, 18 Nov 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Renamed an argument from "-v" to "-verbose". ------------------------------------------------------------------------ r53 | tewok | 2004-11-15 18:17:27 -0800 (Mon, 15 Nov 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Removed use of internal tislabs.com domain names. ------------------------------------------------------------------------ r52 | tewok | 2004-11-15 16:06:35 -0800 (Mon, 15 Nov 2004) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/modules/tests/test-toolopts3 Test script to check opts_keykr() and opts_zonekr(). ------------------------------------------------------------------------ r51 | tewok | 2004-11-15 16:01:26 -0800 (Mon, 15 Nov 2004) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Added the opts_keykr() and opts_zonekr() interfaces. Added pod for opts_keykr() and opts_zonekr(). Changed the config file name to dnssec-tools.conf. ------------------------------------------------------------------------ r50 | tewok | 2004-11-15 14:32:33 -0800 (Mon, 15 Nov 2004) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/etc A /trunk/dnssec-tools/tools/etc/dnssec A /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf Configuration file for dnssec-tools. ------------------------------------------------------------------------ r49 | tewok | 2004-11-15 14:17:02 -0800 (Mon, 15 Nov 2004) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm M /trunk/dnssec-tools/tools/modules/tests M /trunk/dnssec-tools/tools/modules/tests/.cvsignore M /trunk/dnssec-tools/tools/modules/tests/Makefile.PL M /trunk/dnssec-tools/tools/modules/tests/test-conf Renamed the dnssec-tools configuraiton file from tools.conf to dnssec-tools.conf. ------------------------------------------------------------------------ r48 | ahayatnagarkar | 2004-11-15 13:40:17 -0800 (Mon, 15 Nov 2004) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/sendmail/test.c A file to test the validator API. ------------------------------------------------------------------------ r47 | ahayatnagarkar | 2004-11-15 13:39:53 -0800 (Mon, 15 Nov 2004) | 4 lines Changed paths: A /trunk/dnssec-tools/apps/sendmail/dnssec-milter.c The dnssec-milter, a milter-plugin to sendmail for dnssec validation. At present, it just checks whether the sending MTAs hostname is dnssec validated or not. ------------------------------------------------------------------------ r46 | ahayatnagarkar | 2004-11-15 13:38:22 -0800 (Mon, 15 Nov 2004) | 3 lines Changed paths: A /trunk/dnssec-tools/apps/sendmail/validator.c A /trunk/dnssec-tools/apps/sendmail/validator.h A very primitive validator, with just one method dnssec_validate() that is used by dnssec-milter. ------------------------------------------------------------------------ r45 | ahayatnagarkar | 2004-11-15 13:37:25 -0800 (Mon, 15 Nov 2004) | 2 lines Changed paths: A /trunk/dnssec-tools/apps/sendmail/Makefile.in An input file for generating a makefile. ------------------------------------------------------------------------ r44 | ahayatnagarkar | 2004-11-15 13:36:28 -0800 (Mon, 15 Nov 2004) | 3 lines Changed paths: A /trunk/dnssec-tools/apps A /trunk/dnssec-tools/apps/sendmail A /trunk/dnssec-tools/apps/sendmail/configure A /trunk/dnssec-tools/apps/sendmail/configure.in Configure scripts. Check for the existence of pthread, milter, spf2 and sendmail libraries. ------------------------------------------------------------------------ r43 | tewok | 2004-11-12 18:01:33 -0800 (Fri, 12 Nov 2004) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Added two interfaces: opts_krfile() and opts_getkeys(). Added pod for the new interfaces. ------------------------------------------------------------------------ r42 | tewok | 2004-11-12 15:10:12 -0800 (Fri, 12 Nov 2004) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tests/Makefile.PL M /trunk/dnssec-tools/tools/modules/tests/test-keyrec Modified test file names, domain names, and key names so they wouldn't be giving out details of our network's innards. ------------------------------------------------------------------------ r41 | tewok | 2004-11-12 13:59:28 -0800 (Fri, 12 Nov 2004) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/modules/tests/test-toolopts2 Added more tests for tooloptions.pm. ------------------------------------------------------------------------ r40 | tewok | 2004-11-12 13:57:26 -0800 (Fri, 12 Nov 2004) | 2 lines Changed paths: D /trunk/dnssec-tools/tools/modules/tests/test-toolopts A /trunk/dnssec-tools/tools/modules/tests/test-toolopts1 Renamed test-toolopts to test-toolops1. ------------------------------------------------------------------------ r39 | tewok | 2004-11-11 13:38:57 -0800 (Thu, 11 Nov 2004) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Added a few standard options. Added explanatory comments for all the standard options. ------------------------------------------------------------------------ r38 | tewok | 2004-11-11 10:10:51 -0800 (Thu, 11 Nov 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tests/test-keyrec Fixed test filename. ------------------------------------------------------------------------ r37 | tewok | 2004-11-11 10:10:21 -0800 (Thu, 11 Nov 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tests M /trunk/dnssec-tools/tools/modules/tests/.cvsignore M /trunk/dnssec-tools/tools/modules/tests/Makefile.PL Added test filenames. ------------------------------------------------------------------------ r36 | tewok | 2004-11-11 10:06:32 -0800 (Thu, 11 Nov 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tests/test-keyrec Added a copyright. ------------------------------------------------------------------------ r35 | tewok | 2004-11-11 10:05:44 -0800 (Thu, 11 Nov 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tests/test-conf Added a copyright and a test caveat. ------------------------------------------------------------------------ r34 | tewok | 2004-11-11 10:04:55 -0800 (Thu, 11 Nov 2004) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tests/Makefile.PL Added a copyright. Added a line to the "clean" target to delete test-generated files. ------------------------------------------------------------------------ r33 | tewok | 2004-11-11 10:03:55 -0800 (Thu, 11 Nov 2004) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/modules/tests/test-toolopts Test script for the DNSSEC::tooloptions perl module. ------------------------------------------------------------------------ r32 | tewok | 2004-11-11 08:55:31 -0800 (Thu, 11 Nov 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tests/test-conf Dropped the underscore from two option names. ------------------------------------------------------------------------ r31 | tewok | 2004-11-11 08:54:06 -0800 (Thu, 11 Nov 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Makefile.PL M /trunk/dnssec-tools/tools/modules/conf.pm Added copyright. ------------------------------------------------------------------------ r30 | tewok | 2004-11-11 08:53:23 -0800 (Thu, 11 Nov 2004) | 5 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added copyright. Added underscores to keywords Forced keywords to lowercase. Zapped %keyrecs after each read(). ------------------------------------------------------------------------ r29 | tewok | 2004-11-11 08:50:54 -0800 (Thu, 11 Nov 2004) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/modules/tooloptions.pm Added copyright. Added optsuspend(), optdrop(), and optresume() calls. Modified processing of command-line options so that tooloption() may be called multiple times. Modified pod to reflect these changes. ------------------------------------------------------------------------ r28 | tewok | 2004-11-10 14:20:40 -0800 (Wed, 10 Nov 2004) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/modules/Makefile.PL A /trunk/dnssec-tools/tools/modules/tooloptions.pm Added tooloptions.pm to handle options and defaults from several sources, smoodging them all into a single hash table of options to be dealt with by the calling script. Modified Makefile.PL to install tooloptions.pm. ------------------------------------------------------------------------ r27 | tewok | 2004-11-08 13:59:32 -0800 (Mon, 08 Nov 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm Put in some pod. ------------------------------------------------------------------------ r26 | tewok | 2004-11-08 11:30:34 -0800 (Mon, 08 Nov 2004) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/modules/tests A /trunk/dnssec-tools/tools/modules/tests/.cvsignore A /trunk/dnssec-tools/tools/modules/tests/Makefile.PL A /trunk/dnssec-tools/tools/modules/tests/test-conf A /trunk/dnssec-tools/tools/modules/tests/test-keyrec Added some test scripts for manual testing of the DNSSEC tools modules. ------------------------------------------------------------------------ r25 | tewok | 2004-11-08 11:29:51 -0800 (Mon, 08 Nov 2004) | 3 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Fixed a few problems with keyrec_setval(). Renamed the data dumping routines. ------------------------------------------------------------------------ r24 | tewok | 2004-11-08 11:28:55 -0800 (Mon, 08 Nov 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/modules/conf.pm Added an optional argument for specifying the config file to read. ------------------------------------------------------------------------ r23 | tewok | 2004-11-07 19:55:16 -0800 (Sun, 07 Nov 2004) | 6 lines Changed paths: M /trunk/dnssec-tools/tools/modules/keyrec.pm Added *beginning* of pod. Added keyrec_setval(). (Needs bags more testing, checked-in to get it backed up.) ------------------------------------------------------------------------ r22 | tewok | 2004-11-07 15:38:45 -0800 (Sun, 07 Nov 2004) | 4 lines Changed paths: M /trunk/dnssec-tools/tools/modules A /trunk/dnssec-tools/tools/modules/.cvsignore D /trunk/dnssec-tools/tools/modules/Makefile A /trunk/dnssec-tools/tools/modules/Makefile.PL Added Makefile.PL in order to create Makefile. Deleted Makefile since it's now created by Makefile.PL. Added .cvsignore to ignore Makefile. ------------------------------------------------------------------------ r21 | tewok | 2004-11-05 11:41:00 -0800 (Fri, 05 Nov 2004) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/modules/conf.pm First cut at DNSSEC tools configuration file routines for perl scripts. ------------------------------------------------------------------------ r20 | tewok | 2004-11-05 11:40:59 -0800 (Fri, 05 Nov 2004) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/modules/keyrec.pm First cut at DNSSEC tools keyrec file routines for perl scripts. ------------------------------------------------------------------------ r19 | tewok | 2004-11-05 11:38:13 -0800 (Fri, 05 Nov 2004) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/modules A /trunk/dnssec-tools/tools/modules/Makefile Makefile for DNSSEC tools modules directory. ------------------------------------------------------------------------ r18 | hardaker | 2004-11-04 16:45:29 -0800 (Thu, 04 Nov 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper Add warnings of zone sigs are almost or are expired. Added a legend if -L ------------------------------------------------------------------------ r17 | hardaker | 2004-11-04 16:43:44 -0800 (Thu, 04 Nov 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/mapper/Net-DNS-ZoneFile-Fast.patch update to handle axfr transfered files with all data on a single line ------------------------------------------------------------------------ r16 | hardaker | 2004-10-27 21:24:59 -0700 (Wed, 27 Oct 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper more pretty colors ------------------------------------------------------------------------ r15 | hardaker | 2004-10-27 13:50:11 -0700 (Wed, 27 Oct 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/mapper/mapper colors for security ------------------------------------------------------------------------ r14 | hardaker | 2004-10-22 16:57:38 -0700 (Fri, 22 Oct 2004) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/mapper/Net-DNS-ZoneFile-Fast.patch Patch to Net::DNS::ZoneFile::Fast to make it parse dnssec RRs ------------------------------------------------------------------------ r13 | hardaker | 2004-10-22 16:51:59 -0700 (Fri, 22 Oct 2004) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/mapper A /trunk/dnssec-tools/tools/mapper/mapper Added a script (GraphViz based) that will map a set of zone files into a graphical representation of a DNS hierarchy ------------------------------------------------------------------------ r12 | hardaker | 2004-10-21 15:55:52 -0700 (Thu, 21 Oct 2004) | 2 lines Changed paths: A /trunk/dnssec-tools/tools/linux-ifup-dyn-dns/README initial description file ------------------------------------------------------------------------ r11 | hardaker | 2004-10-21 15:41:05 -0700 (Thu, 21 Oct 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/linux-ifup-dyn-dns/ifup-dyndns handle updating AAAA records too ------------------------------------------------------------------------ r10 | hardaker | 2004-10-21 15:32:18 -0700 (Thu, 21 Oct 2004) | 2 lines Changed paths: M /trunk/dnssec-tools/tools/linux-ifup-dyn-dns/ifup-dyndns Updated to support updating multiple host names ------------------------------------------------------------------------ r9 | hardaker | 2004-10-21 14:41:23 -0700 (Thu, 21 Oct 2004) | 2 lines Changed paths: A /trunk/dnssec-tools/tools A /trunk/dnssec-tools/tools/linux-ifup-dyn-dns A /trunk/dnssec-tools/tools/linux-ifup-dyn-dns/ifup-dyndns A linux init script to register dynamic dns hosts ------------------------------------------------------------------------ r8 | hardaker | 2004-10-21 14:33:16 -0700 (Thu, 21 Oct 2004) | 2 lines Changed paths: A /trunk/dnssec-tools A /trunk/dnssec-tools/COPYING A /trunk/dnssec-tools/README initial pass ------------------------------------------------------------------------ dnssec-tools-2.0/install-sh0000775000237200023720000001256210171016631016126 0ustar hardakerhardaker#! /bin/sh # # install - install a program, script, or datafile # This comes from X11R5 (mit/util/scripts/install.sh). # # Copyright 1991 by the Massachusetts Institute of Technology # # Permission to use, copy, modify, distribute, and sell this software and its # documentation for any purpose is hereby granted without fee, provided that # the above copyright notice appear in all copies and that both that # copyright notice and this permission notice appear in supporting # documentation, and that the name of M.I.T. not be used in advertising or # publicity pertaining to distribution of the software without specific, # written prior permission. M.I.T. makes no representations about the # suitability of this software for any purpose. It is provided "as is" # without express or implied warranty. # # Calling this script install-sh is preferred over install.sh, to prevent # `make' implicit rules from creating a file called install from it # when there is no Makefile. # # This script is compatible with the BSD install script, but was written # from scratch. # # set DOITPROG to echo to test this script # Don't use :- since 4.3BSD and earlier shells don't like it. doit="${DOITPROG-}" # put in absolute paths if you don't have them in your path; or use env. vars. mvprog="${MVPROG-mv}" cpprog="${CPPROG-cp}" chmodprog="${CHMODPROG-chmod}" chownprog="${CHOWNPROG-chown}" chgrpprog="${CHGRPPROG-chgrp}" stripprog="${STRIPPROG-strip}" rmprog="${RMPROG-rm}" mkdirprog="${MKDIRPROG-mkdir}" transformbasename="" transform_arg="" instcmd="$mvprog" chmodcmd="$chmodprog 0755" chowncmd="" chgrpcmd="" stripcmd="" rmcmd="$rmprog -f" mvcmd="$mvprog" src="" dst="" dir_arg="" while [ x"$1" != x ]; do case $1 in -c) instcmd="$cpprog" shift continue;; -d) dir_arg=true shift continue;; -m) chmodcmd="$chmodprog $2" shift shift continue;; -o) chowncmd="$chownprog $2" shift shift continue;; -g) chgrpcmd="$chgrpprog $2" shift shift continue;; -s) stripcmd="$stripprog" shift continue;; -t=*) transformarg=`echo $1 | sed 's/-t=//'` shift continue;; -b=*) transformbasename=`echo $1 | sed 's/-b=//'` shift continue;; *) if [ x"$src" = x ] then src=$1 else # this colon is to work around a 386BSD /bin/sh bug : dst=$1 fi shift continue;; esac done if [ x"$src" = x ] then echo "install: no input file specified" exit 1 else true fi if [ x"$dir_arg" != x ]; then dst=$src src="" if [ -d $dst ]; then instcmd=: else instcmd=mkdir fi else # Waiting for this to be detected by the "$instcmd $src $dsttmp" command # might cause directories to be created, which would be especially bad # if $src (and thus $dsttmp) contains '*'. if [ -f $src -o -d $src ] then true else echo "install: $src does not exist" exit 1 fi if [ x"$dst" = x ] then echo "install: no destination specified" exit 1 else true fi # If destination is a directory, append the input filename; if your system # does not like double slashes in filenames, you may need to add some logic if [ -d $dst ] then dst="$dst"/`basename $src` else true fi fi ## this sed command emulates the dirname command dstdir=`echo $dst | sed -e 's,[^/]*$,,;s,/$,,;s,^$,.,'` # Make sure that the destination directory exists. # this part is taken from Noah Friedman's mkinstalldirs script # Skip lots of stat calls in the usual case. if [ ! -d "$dstdir" ]; then defaultIFS=' ' IFS="${IFS-${defaultIFS}}" oIFS="${IFS}" # Some sh's can't handle IFS=/ for some reason. IFS='%' set - `echo ${dstdir} | sed -e 's@/@%@g' -e 's@^%@/@'` IFS="${oIFS}" pathcomp='' while [ $# -ne 0 ] ; do pathcomp="${pathcomp}${1}" shift if [ ! -d "${pathcomp}" ] ; then $mkdirprog "${pathcomp}" else true fi pathcomp="${pathcomp}/" done fi if [ x"$dir_arg" != x ] then $doit $instcmd $dst && if [ x"$chowncmd" != x ]; then $doit $chowncmd $dst; else true ; fi && if [ x"$chgrpcmd" != x ]; then $doit $chgrpcmd $dst; else true ; fi && if [ x"$stripcmd" != x ]; then $doit $stripcmd $dst; else true ; fi && if [ x"$chmodcmd" != x ]; then $doit $chmodcmd $dst; else true ; fi else # If we're going to rename the final executable, determine the name now. if [ x"$transformarg" = x ] then dstfile=`basename $dst` else dstfile=`basename $dst $transformbasename | sed $transformarg`$transformbasename fi # don't allow the sed command to completely eliminate the filename if [ x"$dstfile" = x ] then dstfile=`basename $dst` else true fi # Make a temp file name in the proper directory. dsttmp=$dstdir/#inst.$$# # Move or copy the file name to the temp name $doit $instcmd $src $dsttmp && trap "rm -f ${dsttmp}" 0 && # and set any options; do chmod last to preserve setuid bits # If any of these fail, we abort the whole thing. If we want to # ignore errors from any of these, just make sure not to ignore # errors from the above "$doit $instcmd $src $dsttmp" command. if [ x"$chowncmd" != x ]; then $doit $chowncmd $dsttmp; else true;fi && if [ x"$chgrpcmd" != x ]; then $doit $chgrpcmd $dsttmp; else true;fi && if [ x"$stripcmd" != x ]; then $doit $stripcmd $dsttmp; else true;fi && if [ x"$chmodcmd" != x ]; then $doit $chmodcmd $dsttmp; else true;fi && # Now rename the file to the real destination. $doit $rmcmd -f $dstdir/$dstfile && $doit $mvcmd $dsttmp $dstdir/$dstfile fi && exit 0 dnssec-tools-2.0/aclocal.m40000664000237200023720000070320110670362421015764 0ustar hardakerhardaker# generated automatically by aclocal 1.9.6 -*- Autoconf -*- # Copyright (C) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, # 2005 Free Software Foundation, Inc. # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY, to the extent permitted by law; without # even the implied warranty of MERCHANTABILITY or FITNESS FOR A # PARTICULAR PURPOSE. # libtool.m4 - Configure libtool for the host system. -*-Autoconf-*- # serial 48 AC_PROG_LIBTOOL # AC_PROVIDE_IFELSE(MACRO-NAME, IF-PROVIDED, IF-NOT-PROVIDED) # ----------------------------------------------------------- # If this macro is not defined by Autoconf, define it here. m4_ifdef([AC_PROVIDE_IFELSE], [], [m4_define([AC_PROVIDE_IFELSE], [m4_ifdef([AC_PROVIDE_$1], [$2], [$3])])]) # AC_PROG_LIBTOOL # --------------- AC_DEFUN([AC_PROG_LIBTOOL], [AC_REQUIRE([_AC_PROG_LIBTOOL])dnl dnl If AC_PROG_CXX has already been expanded, run AC_LIBTOOL_CXX dnl immediately, otherwise, hook it in at the end of AC_PROG_CXX. AC_PROVIDE_IFELSE([AC_PROG_CXX], [AC_LIBTOOL_CXX], [define([AC_PROG_CXX], defn([AC_PROG_CXX])[AC_LIBTOOL_CXX ])]) dnl And a similar setup for Fortran 77 support AC_PROVIDE_IFELSE([AC_PROG_F77], [AC_LIBTOOL_F77], [define([AC_PROG_F77], defn([AC_PROG_F77])[AC_LIBTOOL_F77 ])]) dnl Quote A][M_PROG_GCJ so that aclocal doesn't bring it in needlessly. dnl If either AC_PROG_GCJ or A][M_PROG_GCJ have already been expanded, run dnl AC_LIBTOOL_GCJ immediately, otherwise, hook it in at the end of both. AC_PROVIDE_IFELSE([AC_PROG_GCJ], [AC_LIBTOOL_GCJ], [AC_PROVIDE_IFELSE([A][M_PROG_GCJ], [AC_LIBTOOL_GCJ], [AC_PROVIDE_IFELSE([LT_AC_PROG_GCJ], [AC_LIBTOOL_GCJ], [ifdef([AC_PROG_GCJ], [define([AC_PROG_GCJ], defn([AC_PROG_GCJ])[AC_LIBTOOL_GCJ])]) ifdef([A][M_PROG_GCJ], [define([A][M_PROG_GCJ], defn([A][M_PROG_GCJ])[AC_LIBTOOL_GCJ])]) ifdef([LT_AC_PROG_GCJ], [define([LT_AC_PROG_GCJ], defn([LT_AC_PROG_GCJ])[AC_LIBTOOL_GCJ])])])]) ])])# AC_PROG_LIBTOOL # _AC_PROG_LIBTOOL # ---------------- AC_DEFUN([_AC_PROG_LIBTOOL], [AC_REQUIRE([AC_LIBTOOL_SETUP])dnl AC_BEFORE([$0],[AC_LIBTOOL_CXX])dnl AC_BEFORE([$0],[AC_LIBTOOL_F77])dnl AC_BEFORE([$0],[AC_LIBTOOL_GCJ])dnl # This can be used to rebuild libtool when needed LIBTOOL_DEPS="$ac_aux_dir/ltmain.sh" # Always use our own libtool. LIBTOOL='$(SHELL) $(top_builddir)/libtool' AC_SUBST(LIBTOOL)dnl # Prevent multiple expansion define([AC_PROG_LIBTOOL], []) ])# _AC_PROG_LIBTOOL # AC_LIBTOOL_SETUP # ---------------- AC_DEFUN([AC_LIBTOOL_SETUP], [AC_PREREQ(2.50)dnl AC_REQUIRE([AC_ENABLE_SHARED])dnl AC_REQUIRE([AC_ENABLE_STATIC])dnl AC_REQUIRE([AC_ENABLE_FAST_INSTALL])dnl AC_REQUIRE([AC_CANONICAL_HOST])dnl AC_REQUIRE([AC_CANONICAL_BUILD])dnl AC_REQUIRE([AC_PROG_CC])dnl AC_REQUIRE([AC_PROG_LD])dnl AC_REQUIRE([AC_PROG_LD_RELOAD_FLAG])dnl AC_REQUIRE([AC_PROG_NM])dnl AC_REQUIRE([AC_PROG_LN_S])dnl AC_REQUIRE([AC_DEPLIBS_CHECK_METHOD])dnl # Autoconf 2.13's AC_OBJEXT and AC_EXEEXT macros only works for C compilers! AC_REQUIRE([AC_OBJEXT])dnl AC_REQUIRE([AC_EXEEXT])dnl dnl AC_LIBTOOL_SYS_MAX_CMD_LEN AC_LIBTOOL_SYS_GLOBAL_SYMBOL_PIPE AC_LIBTOOL_OBJDIR AC_REQUIRE([_LT_AC_SYS_COMPILER])dnl _LT_AC_PROG_ECHO_BACKSLASH case $host_os in aix3*) # AIX sometimes has problems with the GCC collect2 program. For some # reason, if we set the COLLECT_NAMES environment variable, the problems # vanish in a puff of smoke. if test "X${COLLECT_NAMES+set}" != Xset; then COLLECT_NAMES= export COLLECT_NAMES fi ;; esac # Sed substitution that helps us do robust quoting. It backslashifies # metacharacters that are still active within double-quoted strings. Xsed='sed -e 1s/^X//' [sed_quote_subst='s/\([\\"\\`$\\\\]\)/\\\1/g'] # Same as above, but do not quote variable references. [double_quote_subst='s/\([\\"\\`\\\\]\)/\\\1/g'] # Sed substitution to delay expansion of an escaped shell variable in a # double_quote_subst'ed string. delay_variable_subst='s/\\\\\\\\\\\$/\\\\\\$/g' # Sed substitution to avoid accidental globbing in evaled expressions no_glob_subst='s/\*/\\\*/g' # Constants: rm="rm -f" # Global variables: default_ofile=libtool can_build_shared=yes # All known linkers require a `.a' archive for static linking (except MSVC, # which needs '.lib'). libext=a ltmain="$ac_aux_dir/ltmain.sh" ofile="$default_ofile" with_gnu_ld="$lt_cv_prog_gnu_ld" AC_CHECK_TOOL(AR, ar, false) AC_CHECK_TOOL(RANLIB, ranlib, :) AC_CHECK_TOOL(STRIP, strip, :) old_CC="$CC" old_CFLAGS="$CFLAGS" # Set sane defaults for various variables test -z "$AR" && AR=ar test -z "$AR_FLAGS" && AR_FLAGS=cru test -z "$AS" && AS=as test -z "$CC" && CC=cc test -z "$LTCC" && LTCC=$CC test -z "$LTCFLAGS" && LTCFLAGS=$CFLAGS test -z "$DLLTOOL" && DLLTOOL=dlltool test -z "$LD" && LD=ld test -z "$LN_S" && LN_S="ln -s" test -z "$MAGIC_CMD" && MAGIC_CMD=file test -z "$NM" && NM=nm test -z "$SED" && SED=sed test -z "$OBJDUMP" && OBJDUMP=objdump test -z "$RANLIB" && RANLIB=: test -z "$STRIP" && STRIP=: test -z "$ac_objext" && ac_objext=o # Determine commands to create old-style static archives. old_archive_cmds='$AR $AR_FLAGS $oldlib$oldobjs$old_deplibs' old_postinstall_cmds='chmod 644 $oldlib' old_postuninstall_cmds= if test -n "$RANLIB"; then case $host_os in openbsd*) old_postinstall_cmds="$old_postinstall_cmds~\$RANLIB -t \$oldlib" ;; *) old_postinstall_cmds="$old_postinstall_cmds~\$RANLIB \$oldlib" ;; esac old_archive_cmds="$old_archive_cmds~\$RANLIB \$oldlib" fi _LT_CC_BASENAME([$compiler]) # Only perform the check for file, if the check method requires it case $deplibs_check_method in file_magic*) if test "$file_magic_cmd" = '$MAGIC_CMD'; then AC_PATH_MAGIC fi ;; esac AC_PROVIDE_IFELSE([AC_LIBTOOL_DLOPEN], enable_dlopen=yes, enable_dlopen=no) AC_PROVIDE_IFELSE([AC_LIBTOOL_WIN32_DLL], enable_win32_dll=yes, enable_win32_dll=no) AC_ARG_ENABLE([libtool-lock], [AC_HELP_STRING([--disable-libtool-lock], [avoid locking (might break parallel builds)])]) test "x$enable_libtool_lock" != xno && enable_libtool_lock=yes AC_ARG_WITH([pic], [AC_HELP_STRING([--with-pic], [try to use only PIC/non-PIC objects @<:@default=use both@:>@])], [pic_mode="$withval"], [pic_mode=default]) test -z "$pic_mode" && pic_mode=default # Use C for the default configuration in the libtool script tagname= AC_LIBTOOL_LANG_C_CONFIG _LT_AC_TAGCONFIG ])# AC_LIBTOOL_SETUP # _LT_AC_SYS_COMPILER # ------------------- AC_DEFUN([_LT_AC_SYS_COMPILER], [AC_REQUIRE([AC_PROG_CC])dnl # If no C compiler was specified, use CC. LTCC=${LTCC-"$CC"} # If no C compiler flags were specified, use CFLAGS. LTCFLAGS=${LTCFLAGS-"$CFLAGS"} # Allow CC to be a program name with arguments. compiler=$CC ])# _LT_AC_SYS_COMPILER # _LT_CC_BASENAME(CC) # ------------------- # Calculate cc_basename. Skip known compiler wrappers and cross-prefix. AC_DEFUN([_LT_CC_BASENAME], [for cc_temp in $1""; do case $cc_temp in compile | *[[\\/]]compile | ccache | *[[\\/]]ccache ) ;; distcc | *[[\\/]]distcc | purify | *[[\\/]]purify ) ;; \-*) ;; *) break;; esac done cc_basename=`$echo "X$cc_temp" | $Xsed -e 's%.*/%%' -e "s%^$host_alias-%%"` ]) # _LT_COMPILER_BOILERPLATE # ------------------------ # Check for compiler boilerplate output or warnings with # the simple compiler test code. AC_DEFUN([_LT_COMPILER_BOILERPLATE], [ac_outfile=conftest.$ac_objext printf "$lt_simple_compile_test_code" >conftest.$ac_ext eval "$ac_compile" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err _lt_compiler_boilerplate=`cat conftest.err` $rm conftest* ])# _LT_COMPILER_BOILERPLATE # _LT_LINKER_BOILERPLATE # ---------------------- # Check for linker boilerplate output or warnings with # the simple link test code. AC_DEFUN([_LT_LINKER_BOILERPLATE], [ac_outfile=conftest.$ac_objext printf "$lt_simple_link_test_code" >conftest.$ac_ext eval "$ac_link" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err _lt_linker_boilerplate=`cat conftest.err` $rm conftest* ])# _LT_LINKER_BOILERPLATE # _LT_AC_SYS_LIBPATH_AIX # ---------------------- # Links a minimal program and checks the executable # for the system default hardcoded library path. In most cases, # this is /usr/lib:/lib, but when the MPI compilers are used # the location of the communication and MPI libs are included too. # If we don't find anything, use the default library path according # to the aix ld manual. AC_DEFUN([_LT_AC_SYS_LIBPATH_AIX], [AC_LINK_IFELSE(AC_LANG_PROGRAM,[ aix_libpath=`dump -H conftest$ac_exeext 2>/dev/null | $SED -n -e '/Import File Strings/,/^$/ { /^0/ { s/^0 *\(.*\)$/\1/; p; } }'` # Check for a 64-bit object if we didn't find anything. if test -z "$aix_libpath"; then aix_libpath=`dump -HX64 conftest$ac_exeext 2>/dev/null | $SED -n -e '/Import File Strings/,/^$/ { /^0/ { s/^0 *\(.*\)$/\1/; p; } }'`; fi],[]) if test -z "$aix_libpath"; then aix_libpath="/usr/lib:/lib"; fi ])# _LT_AC_SYS_LIBPATH_AIX # _LT_AC_SHELL_INIT(ARG) # ---------------------- AC_DEFUN([_LT_AC_SHELL_INIT], [ifdef([AC_DIVERSION_NOTICE], [AC_DIVERT_PUSH(AC_DIVERSION_NOTICE)], [AC_DIVERT_PUSH(NOTICE)]) $1 AC_DIVERT_POP ])# _LT_AC_SHELL_INIT # _LT_AC_PROG_ECHO_BACKSLASH # -------------------------- # Add some code to the start of the generated configure script which # will find an echo command which doesn't interpret backslashes. AC_DEFUN([_LT_AC_PROG_ECHO_BACKSLASH], [_LT_AC_SHELL_INIT([ # Check that we are running under the correct shell. SHELL=${CONFIG_SHELL-/bin/sh} case X$ECHO in X*--fallback-echo) # Remove one level of quotation (which was required for Make). ECHO=`echo "$ECHO" | sed 's,\\\\\[$]\\[$]0,'[$]0','` ;; esac echo=${ECHO-echo} if test "X[$]1" = X--no-reexec; then # Discard the --no-reexec flag, and continue. shift elif test "X[$]1" = X--fallback-echo; then # Avoid inline document here, it may be left over : elif test "X`($echo '\t') 2>/dev/null`" = 'X\t' ; then # Yippee, $echo works! : else # Restart under the correct shell. exec $SHELL "[$]0" --no-reexec ${1+"[$]@"} fi if test "X[$]1" = X--fallback-echo; then # used as fallback echo shift cat </dev/null 2>&1 && unset CDPATH if test -z "$ECHO"; then if test "X${echo_test_string+set}" != Xset; then # find a string as large as possible, as long as the shell can cope with it for cmd in 'sed 50q "[$]0"' 'sed 20q "[$]0"' 'sed 10q "[$]0"' 'sed 2q "[$]0"' 'echo test'; do # expected sizes: less than 2Kb, 1Kb, 512 bytes, 16 bytes, ... if (echo_test_string=`eval $cmd`) 2>/dev/null && echo_test_string=`eval $cmd` && (test "X$echo_test_string" = "X$echo_test_string") 2>/dev/null then break fi done fi if test "X`($echo '\t') 2>/dev/null`" = 'X\t' && echo_testing_string=`($echo "$echo_test_string") 2>/dev/null` && test "X$echo_testing_string" = "X$echo_test_string"; then : else # The Solaris, AIX, and Digital Unix default echo programs unquote # backslashes. This makes it impossible to quote backslashes using # echo "$something" | sed 's/\\/\\\\/g' # # So, first we look for a working echo in the user's PATH. lt_save_ifs="$IFS"; IFS=$PATH_SEPARATOR for dir in $PATH /usr/ucb; do IFS="$lt_save_ifs" if (test -f $dir/echo || test -f $dir/echo$ac_exeext) && test "X`($dir/echo '\t') 2>/dev/null`" = 'X\t' && echo_testing_string=`($dir/echo "$echo_test_string") 2>/dev/null` && test "X$echo_testing_string" = "X$echo_test_string"; then echo="$dir/echo" break fi done IFS="$lt_save_ifs" if test "X$echo" = Xecho; then # We didn't find a better echo, so look for alternatives. if test "X`(print -r '\t') 2>/dev/null`" = 'X\t' && echo_testing_string=`(print -r "$echo_test_string") 2>/dev/null` && test "X$echo_testing_string" = "X$echo_test_string"; then # This shell has a builtin print -r that does the trick. echo='print -r' elif (test -f /bin/ksh || test -f /bin/ksh$ac_exeext) && test "X$CONFIG_SHELL" != X/bin/ksh; then # If we have ksh, try running configure again with it. ORIGINAL_CONFIG_SHELL=${CONFIG_SHELL-/bin/sh} export ORIGINAL_CONFIG_SHELL CONFIG_SHELL=/bin/ksh export CONFIG_SHELL exec $CONFIG_SHELL "[$]0" --no-reexec ${1+"[$]@"} else # Try using printf. echo='printf %s\n' if test "X`($echo '\t') 2>/dev/null`" = 'X\t' && echo_testing_string=`($echo "$echo_test_string") 2>/dev/null` && test "X$echo_testing_string" = "X$echo_test_string"; then # Cool, printf works : elif echo_testing_string=`($ORIGINAL_CONFIG_SHELL "[$]0" --fallback-echo '\t') 2>/dev/null` && test "X$echo_testing_string" = 'X\t' && echo_testing_string=`($ORIGINAL_CONFIG_SHELL "[$]0" --fallback-echo "$echo_test_string") 2>/dev/null` && test "X$echo_testing_string" = "X$echo_test_string"; then CONFIG_SHELL=$ORIGINAL_CONFIG_SHELL export CONFIG_SHELL SHELL="$CONFIG_SHELL" export SHELL echo="$CONFIG_SHELL [$]0 --fallback-echo" elif echo_testing_string=`($CONFIG_SHELL "[$]0" --fallback-echo '\t') 2>/dev/null` && test "X$echo_testing_string" = 'X\t' && echo_testing_string=`($CONFIG_SHELL "[$]0" --fallback-echo "$echo_test_string") 2>/dev/null` && test "X$echo_testing_string" = "X$echo_test_string"; then echo="$CONFIG_SHELL [$]0 --fallback-echo" else # maybe with a smaller string... prev=: for cmd in 'echo test' 'sed 2q "[$]0"' 'sed 10q "[$]0"' 'sed 20q "[$]0"' 'sed 50q "[$]0"'; do if (test "X$echo_test_string" = "X`eval $cmd`") 2>/dev/null then break fi prev="$cmd" done if test "$prev" != 'sed 50q "[$]0"'; then echo_test_string=`eval $prev` export echo_test_string exec ${ORIGINAL_CONFIG_SHELL-${CONFIG_SHELL-/bin/sh}} "[$]0" ${1+"[$]@"} else # Oops. We lost completely, so just stick with echo. echo=echo fi fi fi fi fi fi # Copy echo and quote the copy suitably for passing to libtool from # the Makefile, instead of quoting the original, which is used later. ECHO=$echo if test "X$ECHO" = "X$CONFIG_SHELL [$]0 --fallback-echo"; then ECHO="$CONFIG_SHELL \\\$\[$]0 --fallback-echo" fi AC_SUBST(ECHO) ])])# _LT_AC_PROG_ECHO_BACKSLASH # _LT_AC_LOCK # ----------- AC_DEFUN([_LT_AC_LOCK], [AC_ARG_ENABLE([libtool-lock], [AC_HELP_STRING([--disable-libtool-lock], [avoid locking (might break parallel builds)])]) test "x$enable_libtool_lock" != xno && enable_libtool_lock=yes # Some flags need to be propagated to the compiler or linker for good # libtool support. case $host in ia64-*-hpux*) # Find out which ABI we are using. echo 'int i;' > conftest.$ac_ext if AC_TRY_EVAL(ac_compile); then case `/usr/bin/file conftest.$ac_objext` in *ELF-32*) HPUX_IA64_MODE="32" ;; *ELF-64*) HPUX_IA64_MODE="64" ;; esac fi rm -rf conftest* ;; *-*-irix6*) # Find out which ABI we are using. echo '[#]line __oline__ "configure"' > conftest.$ac_ext if AC_TRY_EVAL(ac_compile); then if test "$lt_cv_prog_gnu_ld" = yes; then case `/usr/bin/file conftest.$ac_objext` in *32-bit*) LD="${LD-ld} -melf32bsmip" ;; *N32*) LD="${LD-ld} -melf32bmipn32" ;; *64-bit*) LD="${LD-ld} -melf64bmip" ;; esac else case `/usr/bin/file conftest.$ac_objext` in *32-bit*) LD="${LD-ld} -32" ;; *N32*) LD="${LD-ld} -n32" ;; *64-bit*) LD="${LD-ld} -64" ;; esac fi fi rm -rf conftest* ;; x86_64-*linux*|ppc*-*linux*|powerpc*-*linux*|s390*-*linux*|sparc*-*linux*) # Find out which ABI we are using. echo 'int i;' > conftest.$ac_ext if AC_TRY_EVAL(ac_compile); then case `/usr/bin/file conftest.o` in *32-bit*) case $host in x86_64-*linux*) LD="${LD-ld} -m elf_i386" ;; ppc64-*linux*|powerpc64-*linux*) LD="${LD-ld} -m elf32ppclinux" ;; s390x-*linux*) LD="${LD-ld} -m elf_s390" ;; sparc64-*linux*) LD="${LD-ld} -m elf32_sparc" ;; esac ;; *64-bit*) case $host in x86_64-*linux*) LD="${LD-ld} -m elf_x86_64" ;; ppc*-*linux*|powerpc*-*linux*) LD="${LD-ld} -m elf64ppc" ;; s390*-*linux*) LD="${LD-ld} -m elf64_s390" ;; sparc*-*linux*) LD="${LD-ld} -m elf64_sparc" ;; esac ;; esac fi rm -rf conftest* ;; *-*-sco3.2v5*) # On SCO OpenServer 5, we need -belf to get full-featured binaries. SAVE_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -belf" AC_CACHE_CHECK([whether the C compiler needs -belf], lt_cv_cc_needs_belf, [AC_LANG_PUSH(C) AC_TRY_LINK([],[],[lt_cv_cc_needs_belf=yes],[lt_cv_cc_needs_belf=no]) AC_LANG_POP]) if test x"$lt_cv_cc_needs_belf" != x"yes"; then # this is probably gcc 2.8.0, egcs 1.0 or newer; no need for -belf CFLAGS="$SAVE_CFLAGS" fi ;; sparc*-*solaris*) # Find out which ABI we are using. echo 'int i;' > conftest.$ac_ext if AC_TRY_EVAL(ac_compile); then case `/usr/bin/file conftest.o` in *64-bit*) case $lt_cv_prog_gnu_ld in yes*) LD="${LD-ld} -m elf64_sparc" ;; *) LD="${LD-ld} -64" ;; esac ;; esac fi rm -rf conftest* ;; AC_PROVIDE_IFELSE([AC_LIBTOOL_WIN32_DLL], [*-*-cygwin* | *-*-mingw* | *-*-pw32*) AC_CHECK_TOOL(DLLTOOL, dlltool, false) AC_CHECK_TOOL(AS, as, false) AC_CHECK_TOOL(OBJDUMP, objdump, false) ;; ]) esac need_locks="$enable_libtool_lock" ])# _LT_AC_LOCK # AC_LIBTOOL_COMPILER_OPTION(MESSAGE, VARIABLE-NAME, FLAGS, # [OUTPUT-FILE], [ACTION-SUCCESS], [ACTION-FAILURE]) # ---------------------------------------------------------------- # Check whether the given compiler option works AC_DEFUN([AC_LIBTOOL_COMPILER_OPTION], [AC_REQUIRE([LT_AC_PROG_SED]) AC_CACHE_CHECK([$1], [$2], [$2=no ifelse([$4], , [ac_outfile=conftest.$ac_objext], [ac_outfile=$4]) printf "$lt_simple_compile_test_code" > conftest.$ac_ext lt_compiler_flag="$3" # Insert the option either (1) after the last *FLAGS variable, or # (2) before a word containing "conftest.", or (3) at the end. # Note that $ac_compile itself does not contain backslashes and begins # with a dollar sign (not a hyphen), so the echo should work correctly. # The option is referenced via a variable to avoid confusing sed. lt_compile=`echo "$ac_compile" | $SED \ -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \ -e 's: [[^ ]]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` (eval echo "\"\$as_me:__oline__: $lt_compile\"" >&AS_MESSAGE_LOG_FD) (eval "$lt_compile" 2>conftest.err) ac_status=$? cat conftest.err >&AS_MESSAGE_LOG_FD echo "$as_me:__oline__: \$? = $ac_status" >&AS_MESSAGE_LOG_FD if (exit $ac_status) && test -s "$ac_outfile"; then # The compiler can only warn and ignore the option if not recognized # So say no if there are warnings other than the usual output. $echo "X$_lt_compiler_boilerplate" | $Xsed -e '/^$/d' >conftest.exp $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2 if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then $2=yes fi fi $rm conftest* ]) if test x"[$]$2" = xyes; then ifelse([$5], , :, [$5]) else ifelse([$6], , :, [$6]) fi ])# AC_LIBTOOL_COMPILER_OPTION # AC_LIBTOOL_LINKER_OPTION(MESSAGE, VARIABLE-NAME, FLAGS, # [ACTION-SUCCESS], [ACTION-FAILURE]) # ------------------------------------------------------------ # Check whether the given compiler option works AC_DEFUN([AC_LIBTOOL_LINKER_OPTION], [AC_CACHE_CHECK([$1], [$2], [$2=no save_LDFLAGS="$LDFLAGS" LDFLAGS="$LDFLAGS $3" printf "$lt_simple_link_test_code" > conftest.$ac_ext if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then # The linker can only warn and ignore the option if not recognized # So say no if there are warnings if test -s conftest.err; then # Append any errors to the config.log. cat conftest.err 1>&AS_MESSAGE_LOG_FD $echo "X$_lt_linker_boilerplate" | $Xsed -e '/^$/d' > conftest.exp $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2 if diff conftest.exp conftest.er2 >/dev/null; then $2=yes fi else $2=yes fi fi $rm conftest* LDFLAGS="$save_LDFLAGS" ]) if test x"[$]$2" = xyes; then ifelse([$4], , :, [$4]) else ifelse([$5], , :, [$5]) fi ])# AC_LIBTOOL_LINKER_OPTION # AC_LIBTOOL_SYS_MAX_CMD_LEN # -------------------------- AC_DEFUN([AC_LIBTOOL_SYS_MAX_CMD_LEN], [# find the maximum length of command line arguments AC_MSG_CHECKING([the maximum length of command line arguments]) AC_CACHE_VAL([lt_cv_sys_max_cmd_len], [dnl i=0 teststring="ABCD" case $build_os in msdosdjgpp*) # On DJGPP, this test can blow up pretty badly due to problems in libc # (any single argument exceeding 2000 bytes causes a buffer overrun # during glob expansion). Even if it were fixed, the result of this # check would be larger than it should be. lt_cv_sys_max_cmd_len=12288; # 12K is about right ;; gnu*) # Under GNU Hurd, this test is not required because there is # no limit to the length of command line arguments. # Libtool will interpret -1 as no limit whatsoever lt_cv_sys_max_cmd_len=-1; ;; cygwin* | mingw*) # On Win9x/ME, this test blows up -- it succeeds, but takes # about 5 minutes as the teststring grows exponentially. # Worse, since 9x/ME are not pre-emptively multitasking, # you end up with a "frozen" computer, even though with patience # the test eventually succeeds (with a max line length of 256k). # Instead, let's just punt: use the minimum linelength reported by # all of the supported platforms: 8192 (on NT/2K/XP). lt_cv_sys_max_cmd_len=8192; ;; amigaos*) # On AmigaOS with pdksh, this test takes hours, literally. # So we just punt and use a minimum line length of 8192. lt_cv_sys_max_cmd_len=8192; ;; netbsd* | freebsd* | openbsd* | darwin* | dragonfly*) # This has been around since 386BSD, at least. Likely further. if test -x /sbin/sysctl; then lt_cv_sys_max_cmd_len=`/sbin/sysctl -n kern.argmax` elif test -x /usr/sbin/sysctl; then lt_cv_sys_max_cmd_len=`/usr/sbin/sysctl -n kern.argmax` else lt_cv_sys_max_cmd_len=65536 # usable default for all BSDs fi # And add a safety zone lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4` lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3` ;; interix*) # We know the value 262144 and hardcode it with a safety zone (like BSD) lt_cv_sys_max_cmd_len=196608 ;; osf*) # Dr. Hans Ekkehard Plesser reports seeing a kernel panic running configure # due to this test when exec_disable_arg_limit is 1 on Tru64. It is not # nice to cause kernel panics so lets avoid the loop below. # First set a reasonable default. lt_cv_sys_max_cmd_len=16384 # if test -x /sbin/sysconfig; then case `/sbin/sysconfig -q proc exec_disable_arg_limit` in *1*) lt_cv_sys_max_cmd_len=-1 ;; esac fi ;; sco3.2v5*) lt_cv_sys_max_cmd_len=102400 ;; sysv5* | sco5v6* | sysv4.2uw2*) kargmax=`grep ARG_MAX /etc/conf/cf.d/stune 2>/dev/null` if test -n "$kargmax"; then lt_cv_sys_max_cmd_len=`echo $kargmax | sed 's/.*[[ ]]//'` else lt_cv_sys_max_cmd_len=32768 fi ;; *) # If test is not a shell built-in, we'll probably end up computing a # maximum length that is only half of the actual maximum length, but # we can't tell. SHELL=${SHELL-${CONFIG_SHELL-/bin/sh}} while (test "X"`$SHELL [$]0 --fallback-echo "X$teststring" 2>/dev/null` \ = "XX$teststring") >/dev/null 2>&1 && new_result=`expr "X$teststring" : ".*" 2>&1` && lt_cv_sys_max_cmd_len=$new_result && test $i != 17 # 1/2 MB should be enough do i=`expr $i + 1` teststring=$teststring$teststring done teststring= # Add a significant safety factor because C++ compilers can tack on massive # amounts of additional arguments before passing them to the linker. # It appears as though 1/2 is a usable value. lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 2` ;; esac ]) if test -n $lt_cv_sys_max_cmd_len ; then AC_MSG_RESULT($lt_cv_sys_max_cmd_len) else AC_MSG_RESULT(none) fi ])# AC_LIBTOOL_SYS_MAX_CMD_LEN # _LT_AC_CHECK_DLFCN # ------------------ AC_DEFUN([_LT_AC_CHECK_DLFCN], [AC_CHECK_HEADERS(dlfcn.h)dnl ])# _LT_AC_CHECK_DLFCN # _LT_AC_TRY_DLOPEN_SELF (ACTION-IF-TRUE, ACTION-IF-TRUE-W-USCORE, # ACTION-IF-FALSE, ACTION-IF-CROSS-COMPILING) # --------------------------------------------------------------------- AC_DEFUN([_LT_AC_TRY_DLOPEN_SELF], [AC_REQUIRE([_LT_AC_CHECK_DLFCN])dnl if test "$cross_compiling" = yes; then : [$4] else lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2 lt_status=$lt_dlunknown cat > conftest.$ac_ext < #endif #include #ifdef RTLD_GLOBAL # define LT_DLGLOBAL RTLD_GLOBAL #else # ifdef DL_GLOBAL # define LT_DLGLOBAL DL_GLOBAL # else # define LT_DLGLOBAL 0 # endif #endif /* We may have to define LT_DLLAZY_OR_NOW in the command line if we find out it does not work in some platform. */ #ifndef LT_DLLAZY_OR_NOW # ifdef RTLD_LAZY # define LT_DLLAZY_OR_NOW RTLD_LAZY # else # ifdef DL_LAZY # define LT_DLLAZY_OR_NOW DL_LAZY # else # ifdef RTLD_NOW # define LT_DLLAZY_OR_NOW RTLD_NOW # else # ifdef DL_NOW # define LT_DLLAZY_OR_NOW DL_NOW # else # define LT_DLLAZY_OR_NOW 0 # endif # endif # endif # endif #endif #ifdef __cplusplus extern "C" void exit (int); #endif void fnord() { int i=42;} int main () { void *self = dlopen (0, LT_DLGLOBAL|LT_DLLAZY_OR_NOW); int status = $lt_dlunknown; if (self) { if (dlsym (self,"fnord")) status = $lt_dlno_uscore; else if (dlsym( self,"_fnord")) status = $lt_dlneed_uscore; /* dlclose (self); */ } else puts (dlerror ()); exit (status); }] EOF if AC_TRY_EVAL(ac_link) && test -s conftest${ac_exeext} 2>/dev/null; then (./conftest; exit; ) >&AS_MESSAGE_LOG_FD 2>/dev/null lt_status=$? case x$lt_status in x$lt_dlno_uscore) $1 ;; x$lt_dlneed_uscore) $2 ;; x$lt_dlunknown|x*) $3 ;; esac else : # compilation failed $3 fi fi rm -fr conftest* ])# _LT_AC_TRY_DLOPEN_SELF # AC_LIBTOOL_DLOPEN_SELF # ---------------------- AC_DEFUN([AC_LIBTOOL_DLOPEN_SELF], [AC_REQUIRE([_LT_AC_CHECK_DLFCN])dnl if test "x$enable_dlopen" != xyes; then enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown else lt_cv_dlopen=no lt_cv_dlopen_libs= case $host_os in beos*) lt_cv_dlopen="load_add_on" lt_cv_dlopen_libs= lt_cv_dlopen_self=yes ;; mingw* | pw32*) lt_cv_dlopen="LoadLibrary" lt_cv_dlopen_libs= ;; cygwin*) lt_cv_dlopen="dlopen" lt_cv_dlopen_libs= ;; darwin*) # if libdl is installed we need to link against it AC_CHECK_LIB([dl], [dlopen], [lt_cv_dlopen="dlopen" lt_cv_dlopen_libs="-ldl"],[ lt_cv_dlopen="dyld" lt_cv_dlopen_libs= lt_cv_dlopen_self=yes ]) ;; *) AC_CHECK_FUNC([shl_load], [lt_cv_dlopen="shl_load"], [AC_CHECK_LIB([dld], [shl_load], [lt_cv_dlopen="shl_load" lt_cv_dlopen_libs="-dld"], [AC_CHECK_FUNC([dlopen], [lt_cv_dlopen="dlopen"], [AC_CHECK_LIB([dl], [dlopen], [lt_cv_dlopen="dlopen" lt_cv_dlopen_libs="-ldl"], [AC_CHECK_LIB([svld], [dlopen], [lt_cv_dlopen="dlopen" lt_cv_dlopen_libs="-lsvld"], [AC_CHECK_LIB([dld], [dld_link], [lt_cv_dlopen="dld_link" lt_cv_dlopen_libs="-dld"]) ]) ]) ]) ]) ]) ;; esac if test "x$lt_cv_dlopen" != xno; then enable_dlopen=yes else enable_dlopen=no fi case $lt_cv_dlopen in dlopen) save_CPPFLAGS="$CPPFLAGS" test "x$ac_cv_header_dlfcn_h" = xyes && CPPFLAGS="$CPPFLAGS -DHAVE_DLFCN_H" save_LDFLAGS="$LDFLAGS" wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $export_dynamic_flag_spec\" save_LIBS="$LIBS" LIBS="$lt_cv_dlopen_libs $LIBS" AC_CACHE_CHECK([whether a program can dlopen itself], lt_cv_dlopen_self, [dnl _LT_AC_TRY_DLOPEN_SELF( lt_cv_dlopen_self=yes, lt_cv_dlopen_self=yes, lt_cv_dlopen_self=no, lt_cv_dlopen_self=cross) ]) if test "x$lt_cv_dlopen_self" = xyes; then wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $lt_prog_compiler_static\" AC_CACHE_CHECK([whether a statically linked program can dlopen itself], lt_cv_dlopen_self_static, [dnl _LT_AC_TRY_DLOPEN_SELF( lt_cv_dlopen_self_static=yes, lt_cv_dlopen_self_static=yes, lt_cv_dlopen_self_static=no, lt_cv_dlopen_self_static=cross) ]) fi CPPFLAGS="$save_CPPFLAGS" LDFLAGS="$save_LDFLAGS" LIBS="$save_LIBS" ;; esac case $lt_cv_dlopen_self in yes|no) enable_dlopen_self=$lt_cv_dlopen_self ;; *) enable_dlopen_self=unknown ;; esac case $lt_cv_dlopen_self_static in yes|no) enable_dlopen_self_static=$lt_cv_dlopen_self_static ;; *) enable_dlopen_self_static=unknown ;; esac fi ])# AC_LIBTOOL_DLOPEN_SELF # AC_LIBTOOL_PROG_CC_C_O([TAGNAME]) # --------------------------------- # Check to see if options -c and -o are simultaneously supported by compiler AC_DEFUN([AC_LIBTOOL_PROG_CC_C_O], [AC_REQUIRE([_LT_AC_SYS_COMPILER])dnl AC_CACHE_CHECK([if $compiler supports -c -o file.$ac_objext], [_LT_AC_TAGVAR(lt_cv_prog_compiler_c_o, $1)], [_LT_AC_TAGVAR(lt_cv_prog_compiler_c_o, $1)=no $rm -r conftest 2>/dev/null mkdir conftest cd conftest mkdir out printf "$lt_simple_compile_test_code" > conftest.$ac_ext lt_compiler_flag="-o out/conftest2.$ac_objext" # Insert the option either (1) after the last *FLAGS variable, or # (2) before a word containing "conftest.", or (3) at the end. # Note that $ac_compile itself does not contain backslashes and begins # with a dollar sign (not a hyphen), so the echo should work correctly. lt_compile=`echo "$ac_compile" | $SED \ -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \ -e 's: [[^ ]]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` (eval echo "\"\$as_me:__oline__: $lt_compile\"" >&AS_MESSAGE_LOG_FD) (eval "$lt_compile" 2>out/conftest.err) ac_status=$? cat out/conftest.err >&AS_MESSAGE_LOG_FD echo "$as_me:__oline__: \$? = $ac_status" >&AS_MESSAGE_LOG_FD if (exit $ac_status) && test -s out/conftest2.$ac_objext then # The compiler can only warn and ignore the option if not recognized # So say no if there are warnings $echo "X$_lt_compiler_boilerplate" | $Xsed -e '/^$/d' > out/conftest.exp $SED '/^$/d; /^ *+/d' out/conftest.err >out/conftest.er2 if test ! -s out/conftest.er2 || diff out/conftest.exp out/conftest.er2 >/dev/null; then _LT_AC_TAGVAR(lt_cv_prog_compiler_c_o, $1)=yes fi fi chmod u+w . 2>&AS_MESSAGE_LOG_FD $rm conftest* # SGI C++ compiler will create directory out/ii_files/ for # template instantiation test -d out/ii_files && $rm out/ii_files/* && rmdir out/ii_files $rm out/* && rmdir out cd .. rmdir conftest $rm conftest* ]) ])# AC_LIBTOOL_PROG_CC_C_O # AC_LIBTOOL_SYS_HARD_LINK_LOCKS([TAGNAME]) # ----------------------------------------- # Check to see if we can do hard links to lock some files if needed AC_DEFUN([AC_LIBTOOL_SYS_HARD_LINK_LOCKS], [AC_REQUIRE([_LT_AC_LOCK])dnl hard_links="nottested" if test "$_LT_AC_TAGVAR(lt_cv_prog_compiler_c_o, $1)" = no && test "$need_locks" != no; then # do not overwrite the value of need_locks provided by the user AC_MSG_CHECKING([if we can lock with hard links]) hard_links=yes $rm conftest* ln conftest.a conftest.b 2>/dev/null && hard_links=no touch conftest.a ln conftest.a conftest.b 2>&5 || hard_links=no ln conftest.a conftest.b 2>/dev/null && hard_links=no AC_MSG_RESULT([$hard_links]) if test "$hard_links" = no; then AC_MSG_WARN([`$CC' does not support `-c -o', so `make -j' may be unsafe]) need_locks=warn fi else need_locks=no fi ])# AC_LIBTOOL_SYS_HARD_LINK_LOCKS # AC_LIBTOOL_OBJDIR # ----------------- AC_DEFUN([AC_LIBTOOL_OBJDIR], [AC_CACHE_CHECK([for objdir], [lt_cv_objdir], [rm -f .libs 2>/dev/null mkdir .libs 2>/dev/null if test -d .libs; then lt_cv_objdir=.libs else # MS-DOS does not allow filenames that begin with a dot. lt_cv_objdir=_libs fi rmdir .libs 2>/dev/null]) objdir=$lt_cv_objdir ])# AC_LIBTOOL_OBJDIR # AC_LIBTOOL_PROG_LD_HARDCODE_LIBPATH([TAGNAME]) # ---------------------------------------------- # Check hardcoding attributes. AC_DEFUN([AC_LIBTOOL_PROG_LD_HARDCODE_LIBPATH], [AC_MSG_CHECKING([how to hardcode library paths into programs]) _LT_AC_TAGVAR(hardcode_action, $1)= if test -n "$_LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)" || \ test -n "$_LT_AC_TAGVAR(runpath_var, $1)" || \ test "X$_LT_AC_TAGVAR(hardcode_automatic, $1)" = "Xyes" ; then # We can hardcode non-existant directories. if test "$_LT_AC_TAGVAR(hardcode_direct, $1)" != no && # If the only mechanism to avoid hardcoding is shlibpath_var, we # have to relink, otherwise we might link with an installed library # when we should be linking with a yet-to-be-installed one ## test "$_LT_AC_TAGVAR(hardcode_shlibpath_var, $1)" != no && test "$_LT_AC_TAGVAR(hardcode_minus_L, $1)" != no; then # Linking always hardcodes the temporary library directory. _LT_AC_TAGVAR(hardcode_action, $1)=relink else # We can link without hardcoding, and we can hardcode nonexisting dirs. _LT_AC_TAGVAR(hardcode_action, $1)=immediate fi else # We cannot hardcode anything, or else we can only hardcode existing # directories. _LT_AC_TAGVAR(hardcode_action, $1)=unsupported fi AC_MSG_RESULT([$_LT_AC_TAGVAR(hardcode_action, $1)]) if test "$_LT_AC_TAGVAR(hardcode_action, $1)" = relink; then # Fast installation is not supported enable_fast_install=no elif test "$shlibpath_overrides_runpath" = yes || test "$enable_shared" = no; then # Fast installation is not necessary enable_fast_install=needless fi ])# AC_LIBTOOL_PROG_LD_HARDCODE_LIBPATH # AC_LIBTOOL_SYS_LIB_STRIP # ------------------------ AC_DEFUN([AC_LIBTOOL_SYS_LIB_STRIP], [striplib= old_striplib= AC_MSG_CHECKING([whether stripping libraries is possible]) if test -n "$STRIP" && $STRIP -V 2>&1 | grep "GNU strip" >/dev/null; then test -z "$old_striplib" && old_striplib="$STRIP --strip-debug" test -z "$striplib" && striplib="$STRIP --strip-unneeded" AC_MSG_RESULT([yes]) else # FIXME - insert some real tests, host_os isn't really good enough case $host_os in darwin*) if test -n "$STRIP" ; then striplib="$STRIP -x" AC_MSG_RESULT([yes]) else AC_MSG_RESULT([no]) fi ;; *) AC_MSG_RESULT([no]) ;; esac fi ])# AC_LIBTOOL_SYS_LIB_STRIP # AC_LIBTOOL_SYS_DYNAMIC_LINKER # ----------------------------- # PORTME Fill in your ld.so characteristics AC_DEFUN([AC_LIBTOOL_SYS_DYNAMIC_LINKER], [AC_MSG_CHECKING([dynamic linker characteristics]) library_names_spec= libname_spec='lib$name' soname_spec= shrext_cmds=".so" postinstall_cmds= postuninstall_cmds= finish_cmds= finish_eval= shlibpath_var= shlibpath_overrides_runpath=unknown version_type=none dynamic_linker="$host_os ld.so" sys_lib_dlsearch_path_spec="/lib /usr/lib" if test "$GCC" = yes; then sys_lib_search_path_spec=`$CC -print-search-dirs | grep "^libraries:" | $SED -e "s/^libraries://" -e "s,=/,/,g"` if echo "$sys_lib_search_path_spec" | grep ';' >/dev/null ; then # if the path contains ";" then we assume it to be the separator # otherwise default to the standard path separator (i.e. ":") - it is # assumed that no part of a normal pathname contains ";" but that should # okay in the real world where ";" in dirpaths is itself problematic. sys_lib_search_path_spec=`echo "$sys_lib_search_path_spec" | $SED -e 's/;/ /g'` else sys_lib_search_path_spec=`echo "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"` fi else sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib" fi need_lib_prefix=unknown hardcode_into_libs=no # when you set need_version to no, make sure it does not cause -set_version # flags to be left without arguments need_version=unknown case $host_os in aix3*) version_type=linux library_names_spec='${libname}${release}${shared_ext}$versuffix $libname.a' shlibpath_var=LIBPATH # AIX 3 has no versioning support, so we append a major version to the name. soname_spec='${libname}${release}${shared_ext}$major' ;; aix4* | aix5*) version_type=linux need_lib_prefix=no need_version=no hardcode_into_libs=yes if test "$host_cpu" = ia64; then # AIX 5 supports IA64 library_names_spec='${libname}${release}${shared_ext}$major ${libname}${release}${shared_ext}$versuffix $libname${shared_ext}' shlibpath_var=LD_LIBRARY_PATH else # With GCC up to 2.95.x, collect2 would create an import file # for dependence libraries. The import file would start with # the line `#! .'. This would cause the generated library to # depend on `.', always an invalid library. This was fixed in # development snapshots of GCC prior to 3.0. case $host_os in aix4 | aix4.[[01]] | aix4.[[01]].*) if { echo '#if __GNUC__ > 2 || (__GNUC__ == 2 && __GNUC_MINOR__ >= 97)' echo ' yes ' echo '#endif'; } | ${CC} -E - | grep yes > /dev/null; then : else can_build_shared=no fi ;; esac # AIX (on Power*) has no versioning support, so currently we can not hardcode correct # soname into executable. Probably we can add versioning support to # collect2, so additional links can be useful in future. if test "$aix_use_runtimelinking" = yes; then # If using run time linking (on AIX 4.2 or later) use lib.so # instead of lib.a to let people know that these are not # typical AIX shared libraries. library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major $libname${shared_ext}' else # We preserve .a as extension for shared libraries through AIX4.2 # and later when we are not doing run time linking. library_names_spec='${libname}${release}.a $libname.a' soname_spec='${libname}${release}${shared_ext}$major' fi shlibpath_var=LIBPATH fi ;; amigaos*) library_names_spec='$libname.ixlibrary $libname.a' # Create ${libname}_ixlibrary.a entries in /sys/libs. finish_eval='for lib in `ls $libdir/*.ixlibrary 2>/dev/null`; do libname=`$echo "X$lib" | $Xsed -e '\''s%^.*/\([[^/]]*\)\.ixlibrary$%\1%'\''`; test $rm /sys/libs/${libname}_ixlibrary.a; $show "cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a"; cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a || exit 1; done' ;; beos*) library_names_spec='${libname}${shared_ext}' dynamic_linker="$host_os ld.so" shlibpath_var=LIBRARY_PATH ;; bsdi[[45]]*) version_type=linux need_version=no library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major $libname${shared_ext}' soname_spec='${libname}${release}${shared_ext}$major' finish_cmds='PATH="\$PATH:/sbin" ldconfig $libdir' shlibpath_var=LD_LIBRARY_PATH sys_lib_search_path_spec="/shlib /usr/lib /usr/X11/lib /usr/contrib/lib /lib /usr/local/lib" sys_lib_dlsearch_path_spec="/shlib /usr/lib /usr/local/lib" # the default ld.so.conf also contains /usr/contrib/lib and # /usr/X11R6/lib (/usr/X11 is a link to /usr/X11R6), but let us allow # libtool to hard-code these into programs ;; cygwin* | mingw* | pw32*) version_type=windows shrext_cmds=".dll" need_version=no need_lib_prefix=no case $GCC,$host_os in yes,cygwin* | yes,mingw* | yes,pw32*) library_names_spec='$libname.dll.a' # DLL is installed to $(libdir)/../bin by postinstall_cmds postinstall_cmds='base_file=`basename \${file}`~ dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\${base_file}'\''i;echo \$dlname'\''`~ dldir=$destdir/`dirname \$dlpath`~ test -d \$dldir || mkdir -p \$dldir~ $install_prog $dir/$dlname \$dldir/$dlname~ chmod a+x \$dldir/$dlname' postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~ dlpath=$dir/\$dldll~ $rm \$dlpath' shlibpath_overrides_runpath=yes case $host_os in cygwin*) # Cygwin DLLs use 'cyg' prefix rather than 'lib' soname_spec='`echo ${libname} | sed -e 's/^lib/cyg/'``echo ${release} | $SED -e 's/[[.]]/-/g'`${versuffix}${shared_ext}' sys_lib_search_path_spec="/usr/lib /lib/w32api /lib /usr/local/lib" ;; mingw*) # MinGW DLLs use traditional 'lib' prefix soname_spec='${libname}`echo ${release} | $SED -e 's/[[.]]/-/g'`${versuffix}${shared_ext}' sys_lib_search_path_spec=`$CC -print-search-dirs | grep "^libraries:" | $SED -e "s/^libraries://" -e "s,=/,/,g"` if echo "$sys_lib_search_path_spec" | [grep ';[c-zC-Z]:/' >/dev/null]; then # It is most probably a Windows format PATH printed by # mingw gcc, but we are running on Cygwin. Gcc prints its search # path with ; separators, and with drive letters. We can handle the # drive letters (cygwin fileutils understands them), so leave them, # especially as we might pass files found there to a mingw objdump, # which wouldn't understand a cygwinified path. Ahh. sys_lib_search_path_spec=`echo "$sys_lib_search_path_spec" | $SED -e 's/;/ /g'` else sys_lib_search_path_spec=`echo "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"` fi ;; pw32*) # pw32 DLLs use 'pw' prefix rather than 'lib' library_names_spec='`echo ${libname} | sed -e 's/^lib/pw/'``echo ${release} | $SED -e 's/[[.]]/-/g'`${versuffix}${shared_ext}' ;; esac ;; *) library_names_spec='${libname}`echo ${release} | $SED -e 's/[[.]]/-/g'`${versuffix}${shared_ext} $libname.lib' ;; esac dynamic_linker='Win32 ld.exe' # FIXME: first we should search . and the directory the executable is in shlibpath_var=PATH ;; darwin* | rhapsody*) dynamic_linker="$host_os dyld" version_type=darwin need_lib_prefix=no need_version=no library_names_spec='${libname}${release}${versuffix}$shared_ext ${libname}${release}${major}$shared_ext ${libname}$shared_ext' soname_spec='${libname}${release}${major}$shared_ext' shlibpath_overrides_runpath=yes shlibpath_var=DYLD_LIBRARY_PATH shrext_cmds='`test .$module = .yes && echo .so || echo .dylib`' # Apple's gcc prints 'gcc -print-search-dirs' doesn't operate the same. if test "$GCC" = yes; then sys_lib_search_path_spec=`$CC -print-search-dirs | tr "\n" "$PATH_SEPARATOR" | sed -e 's/libraries:/@libraries:/' | tr "@" "\n" | grep "^libraries:" | sed -e "s/^libraries://" -e "s,=/,/,g" -e "s,$PATH_SEPARATOR, ,g" -e "s,.*,& /lib /usr/lib /usr/local/lib,g"` else sys_lib_search_path_spec='/lib /usr/lib /usr/local/lib' fi sys_lib_dlsearch_path_spec='/usr/local/lib /lib /usr/lib' ;; dgux*) version_type=linux need_lib_prefix=no need_version=no library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major $libname$shared_ext' soname_spec='${libname}${release}${shared_ext}$major' shlibpath_var=LD_LIBRARY_PATH ;; freebsd1*) dynamic_linker=no ;; kfreebsd*-gnu) version_type=linux need_lib_prefix=no need_version=no library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major ${libname}${shared_ext}' soname_spec='${libname}${release}${shared_ext}$major' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=no hardcode_into_libs=yes dynamic_linker='GNU ld.so' ;; freebsd* | dragonfly*) # DragonFly does not have aout. When/if they implement a new # versioning mechanism, adjust this. if test -x /usr/bin/objformat; then objformat=`/usr/bin/objformat` else case $host_os in freebsd[[123]]*) objformat=aout ;; *) objformat=elf ;; esac fi version_type=freebsd-$objformat case $version_type in freebsd-elf*) library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext} $libname${shared_ext}' need_version=no need_lib_prefix=no ;; freebsd-*) library_names_spec='${libname}${release}${shared_ext}$versuffix $libname${shared_ext}$versuffix' need_version=yes ;; esac shlibpath_var=LD_LIBRARY_PATH case $host_os in freebsd2*) shlibpath_overrides_runpath=yes ;; freebsd3.[[01]]* | freebsdelf3.[[01]]*) shlibpath_overrides_runpath=yes hardcode_into_libs=yes ;; freebsd3.[[2-9]]* | freebsdelf3.[[2-9]]* | \ freebsd4.[[0-5]] | freebsdelf4.[[0-5]] | freebsd4.1.1 | freebsdelf4.1.1) shlibpath_overrides_runpath=no hardcode_into_libs=yes ;; freebsd*) # from 4.6 on shlibpath_overrides_runpath=yes hardcode_into_libs=yes ;; esac ;; gnu*) version_type=linux need_lib_prefix=no need_version=no library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}${major} ${libname}${shared_ext}' soname_spec='${libname}${release}${shared_ext}$major' shlibpath_var=LD_LIBRARY_PATH hardcode_into_libs=yes ;; hpux9* | hpux10* | hpux11*) # Give a soname corresponding to the major version so that dld.sl refuses to # link against other versions. version_type=sunos need_lib_prefix=no need_version=no case $host_cpu in ia64*) shrext_cmds='.so' hardcode_into_libs=yes dynamic_linker="$host_os dld.so" shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes # Unless +noenvvar is specified. library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major $libname${shared_ext}' soname_spec='${libname}${release}${shared_ext}$major' if test "X$HPUX_IA64_MODE" = X32; then sys_lib_search_path_spec="/usr/lib/hpux32 /usr/local/lib/hpux32 /usr/local/lib" else sys_lib_search_path_spec="/usr/lib/hpux64 /usr/local/lib/hpux64" fi sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec ;; hppa*64*) shrext_cmds='.sl' hardcode_into_libs=yes dynamic_linker="$host_os dld.sl" shlibpath_var=LD_LIBRARY_PATH # How should we handle SHLIB_PATH shlibpath_overrides_runpath=yes # Unless +noenvvar is specified. library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major $libname${shared_ext}' soname_spec='${libname}${release}${shared_ext}$major' sys_lib_search_path_spec="/usr/lib/pa20_64 /usr/ccs/lib/pa20_64" sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec ;; *) shrext_cmds='.sl' dynamic_linker="$host_os dld.sl" shlibpath_var=SHLIB_PATH shlibpath_overrides_runpath=no # +s is required to enable SHLIB_PATH library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major $libname${shared_ext}' soname_spec='${libname}${release}${shared_ext}$major' ;; esac # HP-UX runs *really* slowly unless shared libraries are mode 555. postinstall_cmds='chmod 555 $lib' ;; interix3*) version_type=linux need_lib_prefix=no need_version=no library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major ${libname}${shared_ext}' soname_spec='${libname}${release}${shared_ext}$major' dynamic_linker='Interix 3.x ld.so.1 (PE, like ELF)' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=no hardcode_into_libs=yes ;; irix5* | irix6* | nonstopux*) case $host_os in nonstopux*) version_type=nonstopux ;; *) if test "$lt_cv_prog_gnu_ld" = yes; then version_type=linux else version_type=irix fi ;; esac need_lib_prefix=no need_version=no soname_spec='${libname}${release}${shared_ext}$major' library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major ${libname}${release}${shared_ext} $libname${shared_ext}' case $host_os in irix5* | nonstopux*) libsuff= shlibsuff= ;; *) case $LD in # libtool.m4 will add one of these switches to LD *-32|*"-32 "|*-melf32bsmip|*"-melf32bsmip ") libsuff= shlibsuff= libmagic=32-bit;; *-n32|*"-n32 "|*-melf32bmipn32|*"-melf32bmipn32 ") libsuff=32 shlibsuff=N32 libmagic=N32;; *-64|*"-64 "|*-melf64bmip|*"-melf64bmip ") libsuff=64 shlibsuff=64 libmagic=64-bit;; *) libsuff= shlibsuff= libmagic=never-match;; esac ;; esac shlibpath_var=LD_LIBRARY${shlibsuff}_PATH shlibpath_overrides_runpath=no sys_lib_search_path_spec="/usr/lib${libsuff} /lib${libsuff} /usr/local/lib${libsuff}" sys_lib_dlsearch_path_spec="/usr/lib${libsuff} /lib${libsuff}" hardcode_into_libs=yes ;; # No shared lib support for Linux oldld, aout, or coff. linux*oldld* | linux*aout* | linux*coff*) dynamic_linker=no ;; # This must be Linux ELF. linux*) version_type=linux need_lib_prefix=no need_version=no library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major $libname${shared_ext}' soname_spec='${libname}${release}${shared_ext}$major' finish_cmds='PATH="\$PATH:/sbin" ldconfig -n $libdir' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=no # This implies no fast_install, which is unacceptable. # Some rework will be needed to allow for fast_install # before this can be enabled. hardcode_into_libs=yes # find out which ABI we are using libsuff= case "$host_cpu" in x86_64*|s390x*|powerpc64*) echo '[#]line __oline__ "configure"' > conftest.$ac_ext if AC_TRY_EVAL(ac_compile); then case `/usr/bin/file conftest.$ac_objext` in *64-bit*) libsuff=64 sys_lib_search_path_spec="/lib${libsuff} /usr/lib${libsuff} /usr/local/lib${libsuff}" ;; esac fi rm -rf conftest* ;; esac # Append ld.so.conf contents to the search path if test -f /etc/ld.so.conf; then lt_ld_extra=`awk '/^include / { system(sprintf("cd /etc; cat %s 2>/dev/null", \[$]2)); skip = 1; } { if (!skip) print \[$]0; skip = 0; }' < /etc/ld.so.conf | $SED -e 's/#.*//;s/[:, ]/ /g;s/=[^=]*$//;s/=[^= ]* / /g;/^$/d' | tr '\n' ' '` sys_lib_dlsearch_path_spec="/lib${libsuff} /usr/lib${libsuff} $lt_ld_extra" fi # We used to test for /lib/ld.so.1 and disable shared libraries on # powerpc, because MkLinux only supported shared libraries with the # GNU dynamic linker. Since this was broken with cross compilers, # most powerpc-linux boxes support dynamic linking these days and # people can always --disable-shared, the test was removed, and we # assume the GNU/Linux dynamic linker is in use. dynamic_linker='GNU/Linux ld.so' ;; knetbsd*-gnu) version_type=linux need_lib_prefix=no need_version=no library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major ${libname}${shared_ext}' soname_spec='${libname}${release}${shared_ext}$major' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=no hardcode_into_libs=yes dynamic_linker='GNU ld.so' ;; netbsd*) version_type=sunos need_lib_prefix=no need_version=no if echo __ELF__ | $CC -E - | grep __ELF__ >/dev/null; then library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${shared_ext}$versuffix' finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir' dynamic_linker='NetBSD (a.out) ld.so' else library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major ${libname}${shared_ext}' soname_spec='${libname}${release}${shared_ext}$major' dynamic_linker='NetBSD ld.elf_so' fi shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes hardcode_into_libs=yes ;; newsos6) version_type=linux library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major $libname${shared_ext}' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes ;; nto-qnx*) version_type=linux need_lib_prefix=no need_version=no library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major $libname${shared_ext}' soname_spec='${libname}${release}${shared_ext}$major' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes ;; openbsd*) version_type=sunos sys_lib_dlsearch_path_spec="/usr/lib" need_lib_prefix=no # Some older versions of OpenBSD (3.3 at least) *do* need versioned libs. case $host_os in openbsd3.3 | openbsd3.3.*) need_version=yes ;; *) need_version=no ;; esac library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${shared_ext}$versuffix' finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir' shlibpath_var=LD_LIBRARY_PATH if test -z "`echo __ELF__ | $CC -E - | grep __ELF__`" || test "$host_os-$host_cpu" = "openbsd2.8-powerpc"; then case $host_os in openbsd2.[[89]] | openbsd2.[[89]].*) shlibpath_overrides_runpath=no ;; *) shlibpath_overrides_runpath=yes ;; esac else shlibpath_overrides_runpath=yes fi ;; os2*) libname_spec='$name' shrext_cmds=".dll" need_lib_prefix=no library_names_spec='$libname${shared_ext} $libname.a' dynamic_linker='OS/2 ld.exe' shlibpath_var=LIBPATH ;; osf3* | osf4* | osf5*) version_type=osf need_lib_prefix=no need_version=no soname_spec='${libname}${release}${shared_ext}$major' library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major $libname${shared_ext}' shlibpath_var=LD_LIBRARY_PATH sys_lib_search_path_spec="/usr/shlib /usr/ccs/lib /usr/lib/cmplrs/cc /usr/lib /usr/local/lib /var/shlib" sys_lib_dlsearch_path_spec="$sys_lib_search_path_spec" ;; solaris*) version_type=linux need_lib_prefix=no need_version=no library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major $libname${shared_ext}' soname_spec='${libname}${release}${shared_ext}$major' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes hardcode_into_libs=yes # ldd complains unless libraries are executable postinstall_cmds='chmod +x $lib' ;; sunos4*) version_type=sunos library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${shared_ext}$versuffix' finish_cmds='PATH="\$PATH:/usr/etc" ldconfig $libdir' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes if test "$with_gnu_ld" = yes; then need_lib_prefix=no fi need_version=yes ;; sysv4 | sysv4.3*) version_type=linux library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major $libname${shared_ext}' soname_spec='${libname}${release}${shared_ext}$major' shlibpath_var=LD_LIBRARY_PATH case $host_vendor in sni) shlibpath_overrides_runpath=no need_lib_prefix=no export_dynamic_flag_spec='${wl}-Blargedynsym' runpath_var=LD_RUN_PATH ;; siemens) need_lib_prefix=no ;; motorola) need_lib_prefix=no need_version=no shlibpath_overrides_runpath=no sys_lib_search_path_spec='/lib /usr/lib /usr/ccs/lib' ;; esac ;; sysv4*MP*) if test -d /usr/nec ;then version_type=linux library_names_spec='$libname${shared_ext}.$versuffix $libname${shared_ext}.$major $libname${shared_ext}' soname_spec='$libname${shared_ext}.$major' shlibpath_var=LD_LIBRARY_PATH fi ;; sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*) version_type=freebsd-elf need_lib_prefix=no need_version=no library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext} $libname${shared_ext}' soname_spec='${libname}${release}${shared_ext}$major' shlibpath_var=LD_LIBRARY_PATH hardcode_into_libs=yes if test "$with_gnu_ld" = yes; then sys_lib_search_path_spec='/usr/local/lib /usr/gnu/lib /usr/ccs/lib /usr/lib /lib' shlibpath_overrides_runpath=no else sys_lib_search_path_spec='/usr/ccs/lib /usr/lib' shlibpath_overrides_runpath=yes case $host_os in sco3.2v5*) sys_lib_search_path_spec="$sys_lib_search_path_spec /lib" ;; esac fi sys_lib_dlsearch_path_spec='/usr/lib' ;; uts4*) version_type=linux library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major $libname${shared_ext}' soname_spec='${libname}${release}${shared_ext}$major' shlibpath_var=LD_LIBRARY_PATH ;; *) dynamic_linker=no ;; esac AC_MSG_RESULT([$dynamic_linker]) test "$dynamic_linker" = no && can_build_shared=no variables_saved_for_relink="PATH $shlibpath_var $runpath_var" if test "$GCC" = yes; then variables_saved_for_relink="$variables_saved_for_relink GCC_EXEC_PREFIX COMPILER_PATH LIBRARY_PATH" fi ])# AC_LIBTOOL_SYS_DYNAMIC_LINKER # _LT_AC_TAGCONFIG # ---------------- AC_DEFUN([_LT_AC_TAGCONFIG], [AC_ARG_WITH([tags], [AC_HELP_STRING([--with-tags@<:@=TAGS@:>@], [include additional configurations @<:@automatic@:>@])], [tagnames="$withval"]) if test -f "$ltmain" && test -n "$tagnames"; then if test ! -f "${ofile}"; then AC_MSG_WARN([output file `$ofile' does not exist]) fi if test -z "$LTCC"; then eval "`$SHELL ${ofile} --config | grep '^LTCC='`" if test -z "$LTCC"; then AC_MSG_WARN([output file `$ofile' does not look like a libtool script]) else AC_MSG_WARN([using `LTCC=$LTCC', extracted from `$ofile']) fi fi if test -z "$LTCFLAGS"; then eval "`$SHELL ${ofile} --config | grep '^LTCFLAGS='`" fi # Extract list of available tagged configurations in $ofile. # Note that this assumes the entire list is on one line. available_tags=`grep "^available_tags=" "${ofile}" | $SED -e 's/available_tags=\(.*$\)/\1/' -e 's/\"//g'` lt_save_ifs="$IFS"; IFS="${IFS}$PATH_SEPARATOR," for tagname in $tagnames; do IFS="$lt_save_ifs" # Check whether tagname contains only valid characters case `$echo "X$tagname" | $Xsed -e 's:[[-_ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz1234567890,/]]::g'` in "") ;; *) AC_MSG_ERROR([invalid tag name: $tagname]) ;; esac if grep "^# ### BEGIN LIBTOOL TAG CONFIG: $tagname$" < "${ofile}" > /dev/null then AC_MSG_ERROR([tag name \"$tagname\" already exists]) fi # Update the list of available tags. if test -n "$tagname"; then echo appending configuration tag \"$tagname\" to $ofile case $tagname in CXX) if test -n "$CXX" && ( test "X$CXX" != "Xno" && ( (test "X$CXX" = "Xg++" && `g++ -v >/dev/null 2>&1` ) || (test "X$CXX" != "Xg++"))) ; then AC_LIBTOOL_LANG_CXX_CONFIG else tagname="" fi ;; F77) if test -n "$F77" && test "X$F77" != "Xno"; then AC_LIBTOOL_LANG_F77_CONFIG else tagname="" fi ;; GCJ) if test -n "$GCJ" && test "X$GCJ" != "Xno"; then AC_LIBTOOL_LANG_GCJ_CONFIG else tagname="" fi ;; RC) AC_LIBTOOL_LANG_RC_CONFIG ;; *) AC_MSG_ERROR([Unsupported tag name: $tagname]) ;; esac # Append the new tag name to the list of available tags. if test -n "$tagname" ; then available_tags="$available_tags $tagname" fi fi done IFS="$lt_save_ifs" # Now substitute the updated list of available tags. if eval "sed -e 's/^available_tags=.*\$/available_tags=\"$available_tags\"/' \"$ofile\" > \"${ofile}T\""; then mv "${ofile}T" "$ofile" chmod +x "$ofile" else rm -f "${ofile}T" AC_MSG_ERROR([unable to update list of available tagged configurations.]) fi fi ])# _LT_AC_TAGCONFIG # AC_LIBTOOL_DLOPEN # ----------------- # enable checks for dlopen support AC_DEFUN([AC_LIBTOOL_DLOPEN], [AC_BEFORE([$0],[AC_LIBTOOL_SETUP]) ])# AC_LIBTOOL_DLOPEN # AC_LIBTOOL_WIN32_DLL # -------------------- # declare package support for building win32 DLLs AC_DEFUN([AC_LIBTOOL_WIN32_DLL], [AC_BEFORE([$0], [AC_LIBTOOL_SETUP]) ])# AC_LIBTOOL_WIN32_DLL # AC_ENABLE_SHARED([DEFAULT]) # --------------------------- # implement the --enable-shared flag # DEFAULT is either `yes' or `no'. If omitted, it defaults to `yes'. AC_DEFUN([AC_ENABLE_SHARED], [define([AC_ENABLE_SHARED_DEFAULT], ifelse($1, no, no, yes))dnl AC_ARG_ENABLE([shared], [AC_HELP_STRING([--enable-shared@<:@=PKGS@:>@], [build shared libraries @<:@default=]AC_ENABLE_SHARED_DEFAULT[@:>@])], [p=${PACKAGE-default} case $enableval in yes) enable_shared=yes ;; no) enable_shared=no ;; *) enable_shared=no # Look at the argument we got. We use all the common list separators. lt_save_ifs="$IFS"; IFS="${IFS}$PATH_SEPARATOR," for pkg in $enableval; do IFS="$lt_save_ifs" if test "X$pkg" = "X$p"; then enable_shared=yes fi done IFS="$lt_save_ifs" ;; esac], [enable_shared=]AC_ENABLE_SHARED_DEFAULT) ])# AC_ENABLE_SHARED # AC_DISABLE_SHARED # ----------------- # set the default shared flag to --disable-shared AC_DEFUN([AC_DISABLE_SHARED], [AC_BEFORE([$0],[AC_LIBTOOL_SETUP])dnl AC_ENABLE_SHARED(no) ])# AC_DISABLE_SHARED # AC_ENABLE_STATIC([DEFAULT]) # --------------------------- # implement the --enable-static flag # DEFAULT is either `yes' or `no'. If omitted, it defaults to `yes'. AC_DEFUN([AC_ENABLE_STATIC], [define([AC_ENABLE_STATIC_DEFAULT], ifelse($1, no, no, yes))dnl AC_ARG_ENABLE([static], [AC_HELP_STRING([--enable-static@<:@=PKGS@:>@], [build static libraries @<:@default=]AC_ENABLE_STATIC_DEFAULT[@:>@])], [p=${PACKAGE-default} case $enableval in yes) enable_static=yes ;; no) enable_static=no ;; *) enable_static=no # Look at the argument we got. We use all the common list separators. lt_save_ifs="$IFS"; IFS="${IFS}$PATH_SEPARATOR," for pkg in $enableval; do IFS="$lt_save_ifs" if test "X$pkg" = "X$p"; then enable_static=yes fi done IFS="$lt_save_ifs" ;; esac], [enable_static=]AC_ENABLE_STATIC_DEFAULT) ])# AC_ENABLE_STATIC # AC_DISABLE_STATIC # ----------------- # set the default static flag to --disable-static AC_DEFUN([AC_DISABLE_STATIC], [AC_BEFORE([$0],[AC_LIBTOOL_SETUP])dnl AC_ENABLE_STATIC(no) ])# AC_DISABLE_STATIC # AC_ENABLE_FAST_INSTALL([DEFAULT]) # --------------------------------- # implement the --enable-fast-install flag # DEFAULT is either `yes' or `no'. If omitted, it defaults to `yes'. AC_DEFUN([AC_ENABLE_FAST_INSTALL], [define([AC_ENABLE_FAST_INSTALL_DEFAULT], ifelse($1, no, no, yes))dnl AC_ARG_ENABLE([fast-install], [AC_HELP_STRING([--enable-fast-install@<:@=PKGS@:>@], [optimize for fast installation @<:@default=]AC_ENABLE_FAST_INSTALL_DEFAULT[@:>@])], [p=${PACKAGE-default} case $enableval in yes) enable_fast_install=yes ;; no) enable_fast_install=no ;; *) enable_fast_install=no # Look at the argument we got. We use all the common list separators. lt_save_ifs="$IFS"; IFS="${IFS}$PATH_SEPARATOR," for pkg in $enableval; do IFS="$lt_save_ifs" if test "X$pkg" = "X$p"; then enable_fast_install=yes fi done IFS="$lt_save_ifs" ;; esac], [enable_fast_install=]AC_ENABLE_FAST_INSTALL_DEFAULT) ])# AC_ENABLE_FAST_INSTALL # AC_DISABLE_FAST_INSTALL # ----------------------- # set the default to --disable-fast-install AC_DEFUN([AC_DISABLE_FAST_INSTALL], [AC_BEFORE([$0],[AC_LIBTOOL_SETUP])dnl AC_ENABLE_FAST_INSTALL(no) ])# AC_DISABLE_FAST_INSTALL # AC_LIBTOOL_PICMODE([MODE]) # -------------------------- # implement the --with-pic flag # MODE is either `yes' or `no'. If omitted, it defaults to `both'. AC_DEFUN([AC_LIBTOOL_PICMODE], [AC_BEFORE([$0],[AC_LIBTOOL_SETUP])dnl pic_mode=ifelse($#,1,$1,default) ])# AC_LIBTOOL_PICMODE # AC_PROG_EGREP # ------------- # This is predefined starting with Autoconf 2.54, so this conditional # definition can be removed once we require Autoconf 2.54 or later. m4_ifndef([AC_PROG_EGREP], [AC_DEFUN([AC_PROG_EGREP], [AC_CACHE_CHECK([for egrep], [ac_cv_prog_egrep], [if echo a | (grep -E '(a|b)') >/dev/null 2>&1 then ac_cv_prog_egrep='grep -E' else ac_cv_prog_egrep='egrep' fi]) EGREP=$ac_cv_prog_egrep AC_SUBST([EGREP]) ])]) # AC_PATH_TOOL_PREFIX # ------------------- # find a file program which can recognise shared library AC_DEFUN([AC_PATH_TOOL_PREFIX], [AC_REQUIRE([AC_PROG_EGREP])dnl AC_MSG_CHECKING([for $1]) AC_CACHE_VAL(lt_cv_path_MAGIC_CMD, [case $MAGIC_CMD in [[\\/*] | ?:[\\/]*]) lt_cv_path_MAGIC_CMD="$MAGIC_CMD" # Let the user override the test with a path. ;; *) lt_save_MAGIC_CMD="$MAGIC_CMD" lt_save_ifs="$IFS"; IFS=$PATH_SEPARATOR dnl $ac_dummy forces splitting on constant user-supplied paths. dnl POSIX.2 word splitting is done only on the output of word expansions, dnl not every word. This closes a longstanding sh security hole. ac_dummy="ifelse([$2], , $PATH, [$2])" for ac_dir in $ac_dummy; do IFS="$lt_save_ifs" test -z "$ac_dir" && ac_dir=. if test -f $ac_dir/$1; then lt_cv_path_MAGIC_CMD="$ac_dir/$1" if test -n "$file_magic_test_file"; then case $deplibs_check_method in "file_magic "*) file_magic_regex=`expr "$deplibs_check_method" : "file_magic \(.*\)"` MAGIC_CMD="$lt_cv_path_MAGIC_CMD" if eval $file_magic_cmd \$file_magic_test_file 2> /dev/null | $EGREP "$file_magic_regex" > /dev/null; then : else cat <&2 *** Warning: the command libtool uses to detect shared libraries, *** $file_magic_cmd, produces output that libtool cannot recognize. *** The result is that libtool may fail to recognize shared libraries *** as such. This will affect the creation of libtool libraries that *** depend on shared libraries, but programs linked with such libtool *** libraries will work regardless of this problem. Nevertheless, you *** may want to report the problem to your system manager and/or to *** bug-libtool@gnu.org EOF fi ;; esac fi break fi done IFS="$lt_save_ifs" MAGIC_CMD="$lt_save_MAGIC_CMD" ;; esac]) MAGIC_CMD="$lt_cv_path_MAGIC_CMD" if test -n "$MAGIC_CMD"; then AC_MSG_RESULT($MAGIC_CMD) else AC_MSG_RESULT(no) fi ])# AC_PATH_TOOL_PREFIX # AC_PATH_MAGIC # ------------- # find a file program which can recognise a shared library AC_DEFUN([AC_PATH_MAGIC], [AC_PATH_TOOL_PREFIX(${ac_tool_prefix}file, /usr/bin$PATH_SEPARATOR$PATH) if test -z "$lt_cv_path_MAGIC_CMD"; then if test -n "$ac_tool_prefix"; then AC_PATH_TOOL_PREFIX(file, /usr/bin$PATH_SEPARATOR$PATH) else MAGIC_CMD=: fi fi ])# AC_PATH_MAGIC # AC_PROG_LD # ---------- # find the pathname to the GNU or non-GNU linker AC_DEFUN([AC_PROG_LD], [AC_ARG_WITH([gnu-ld], [AC_HELP_STRING([--with-gnu-ld], [assume the C compiler uses GNU ld @<:@default=no@:>@])], [test "$withval" = no || with_gnu_ld=yes], [with_gnu_ld=no]) AC_REQUIRE([LT_AC_PROG_SED])dnl AC_REQUIRE([AC_PROG_CC])dnl AC_REQUIRE([AC_CANONICAL_HOST])dnl AC_REQUIRE([AC_CANONICAL_BUILD])dnl ac_prog=ld if test "$GCC" = yes; then # Check if gcc -print-prog-name=ld gives a path. AC_MSG_CHECKING([for ld used by $CC]) case $host in *-*-mingw*) # gcc leaves a trailing carriage return which upsets mingw ac_prog=`($CC -print-prog-name=ld) 2>&5 | tr -d '\015'` ;; *) ac_prog=`($CC -print-prog-name=ld) 2>&5` ;; esac case $ac_prog in # Accept absolute paths. [[\\/]]* | ?:[[\\/]]*) re_direlt='/[[^/]][[^/]]*/\.\./' # Canonicalize the pathname of ld ac_prog=`echo $ac_prog| $SED 's%\\\\%/%g'` while echo $ac_prog | grep "$re_direlt" > /dev/null 2>&1; do ac_prog=`echo $ac_prog| $SED "s%$re_direlt%/%"` done test -z "$LD" && LD="$ac_prog" ;; "") # If it fails, then pretend we aren't using GCC. ac_prog=ld ;; *) # If it is relative, then search for the first ld in PATH. with_gnu_ld=unknown ;; esac elif test "$with_gnu_ld" = yes; then AC_MSG_CHECKING([for GNU ld]) else AC_MSG_CHECKING([for non-GNU ld]) fi AC_CACHE_VAL(lt_cv_path_LD, [if test -z "$LD"; then lt_save_ifs="$IFS"; IFS=$PATH_SEPARATOR for ac_dir in $PATH; do IFS="$lt_save_ifs" test -z "$ac_dir" && ac_dir=. if test -f "$ac_dir/$ac_prog" || test -f "$ac_dir/$ac_prog$ac_exeext"; then lt_cv_path_LD="$ac_dir/$ac_prog" # Check to see if the program is GNU ld. I'd rather use --version, # but apparently some variants of GNU ld only accept -v. # Break only if it was the GNU/non-GNU ld that we prefer. case `"$lt_cv_path_LD" -v 2>&1 &1 /dev/null; then case $host_cpu in i*86 ) # Not sure whether the presence of OpenBSD here was a mistake. # Let's accept both of them until this is cleared up. lt_cv_deplibs_check_method='file_magic (FreeBSD|OpenBSD|DragonFly)/i[[3-9]]86 (compact )?demand paged shared library' lt_cv_file_magic_cmd=/usr/bin/file lt_cv_file_magic_test_file=`echo /usr/lib/libc.so.*` ;; esac else lt_cv_deplibs_check_method=pass_all fi ;; gnu*) lt_cv_deplibs_check_method=pass_all ;; hpux10.20* | hpux11*) lt_cv_file_magic_cmd=/usr/bin/file case $host_cpu in ia64*) lt_cv_deplibs_check_method='file_magic (s[[0-9]][[0-9]][[0-9]]|ELF-[[0-9]][[0-9]]) shared object file - IA64' lt_cv_file_magic_test_file=/usr/lib/hpux32/libc.so ;; hppa*64*) [lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|ELF-[0-9][0-9]) shared object file - PA-RISC [0-9].[0-9]'] lt_cv_file_magic_test_file=/usr/lib/pa20_64/libc.sl ;; *) lt_cv_deplibs_check_method='file_magic (s[[0-9]][[0-9]][[0-9]]|PA-RISC[[0-9]].[[0-9]]) shared library' lt_cv_file_magic_test_file=/usr/lib/libc.sl ;; esac ;; interix3*) # PIC code is broken on Interix 3.x, that's why |\.a not |_pic\.a here lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so|\.a)$' ;; irix5* | irix6* | nonstopux*) case $LD in *-32|*"-32 ") libmagic=32-bit;; *-n32|*"-n32 ") libmagic=N32;; *-64|*"-64 ") libmagic=64-bit;; *) libmagic=never-match;; esac lt_cv_deplibs_check_method=pass_all ;; # This must be Linux ELF. linux*) lt_cv_deplibs_check_method=pass_all ;; netbsd*) if echo __ELF__ | $CC -E - | grep __ELF__ > /dev/null; then lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so\.[[0-9]]+\.[[0-9]]+|_pic\.a)$' else lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so|_pic\.a)$' fi ;; newos6*) lt_cv_deplibs_check_method='file_magic ELF [[0-9]][[0-9]]*-bit [[ML]]SB (executable|dynamic lib)' lt_cv_file_magic_cmd=/usr/bin/file lt_cv_file_magic_test_file=/usr/lib/libnls.so ;; nto-qnx*) lt_cv_deplibs_check_method=unknown ;; openbsd*) if test -z "`echo __ELF__ | $CC -E - | grep __ELF__`" || test "$host_os-$host_cpu" = "openbsd2.8-powerpc"; then lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so\.[[0-9]]+\.[[0-9]]+|\.so|_pic\.a)$' else lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so\.[[0-9]]+\.[[0-9]]+|_pic\.a)$' fi ;; osf3* | osf4* | osf5*) lt_cv_deplibs_check_method=pass_all ;; solaris*) lt_cv_deplibs_check_method=pass_all ;; sysv4 | sysv4.3*) case $host_vendor in motorola) lt_cv_deplibs_check_method='file_magic ELF [[0-9]][[0-9]]*-bit [[ML]]SB (shared object|dynamic lib) M[[0-9]][[0-9]]* Version [[0-9]]' lt_cv_file_magic_test_file=`echo /usr/lib/libc.so*` ;; ncr) lt_cv_deplibs_check_method=pass_all ;; sequent) lt_cv_file_magic_cmd='/bin/file' lt_cv_deplibs_check_method='file_magic ELF [[0-9]][[0-9]]*-bit [[LM]]SB (shared object|dynamic lib )' ;; sni) lt_cv_file_magic_cmd='/bin/file' lt_cv_deplibs_check_method="file_magic ELF [[0-9]][[0-9]]*-bit [[LM]]SB dynamic lib" lt_cv_file_magic_test_file=/lib/libc.so ;; siemens) lt_cv_deplibs_check_method=pass_all ;; pc) lt_cv_deplibs_check_method=pass_all ;; esac ;; sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*) lt_cv_deplibs_check_method=pass_all ;; esac ]) file_magic_cmd=$lt_cv_file_magic_cmd deplibs_check_method=$lt_cv_deplibs_check_method test -z "$deplibs_check_method" && deplibs_check_method=unknown ])# AC_DEPLIBS_CHECK_METHOD # AC_PROG_NM # ---------- # find the pathname to a BSD-compatible name lister AC_DEFUN([AC_PROG_NM], [AC_CACHE_CHECK([for BSD-compatible nm], lt_cv_path_NM, [if test -n "$NM"; then # Let the user override the test. lt_cv_path_NM="$NM" else lt_nm_to_check="${ac_tool_prefix}nm" if test -n "$ac_tool_prefix" && test "$build" = "$host"; then lt_nm_to_check="$lt_nm_to_check nm" fi for lt_tmp_nm in $lt_nm_to_check; do lt_save_ifs="$IFS"; IFS=$PATH_SEPARATOR for ac_dir in $PATH /usr/ccs/bin/elf /usr/ccs/bin /usr/ucb /bin; do IFS="$lt_save_ifs" test -z "$ac_dir" && ac_dir=. tmp_nm="$ac_dir/$lt_tmp_nm" if test -f "$tmp_nm" || test -f "$tmp_nm$ac_exeext" ; then # Check to see if the nm accepts a BSD-compat flag. # Adding the `sed 1q' prevents false positives on HP-UX, which says: # nm: unknown option "B" ignored # Tru64's nm complains that /dev/null is an invalid object file case `"$tmp_nm" -B /dev/null 2>&1 | sed '1q'` in */dev/null* | *'Invalid file or object type'*) lt_cv_path_NM="$tmp_nm -B" break ;; *) case `"$tmp_nm" -p /dev/null 2>&1 | sed '1q'` in */dev/null*) lt_cv_path_NM="$tmp_nm -p" break ;; *) lt_cv_path_NM=${lt_cv_path_NM="$tmp_nm"} # keep the first match, but continue # so that we can try to find one that supports BSD flags ;; esac ;; esac fi done IFS="$lt_save_ifs" done test -z "$lt_cv_path_NM" && lt_cv_path_NM=nm fi]) NM="$lt_cv_path_NM" ])# AC_PROG_NM # AC_CHECK_LIBM # ------------- # check for math library AC_DEFUN([AC_CHECK_LIBM], [AC_REQUIRE([AC_CANONICAL_HOST])dnl LIBM= case $host in *-*-beos* | *-*-cygwin* | *-*-pw32* | *-*-darwin*) # These system don't have libm, or don't need it ;; *-ncr-sysv4.3*) AC_CHECK_LIB(mw, _mwvalidcheckl, LIBM="-lmw") AC_CHECK_LIB(m, cos, LIBM="$LIBM -lm") ;; *) AC_CHECK_LIB(m, cos, LIBM="-lm") ;; esac ])# AC_CHECK_LIBM # AC_LIBLTDL_CONVENIENCE([DIRECTORY]) # ----------------------------------- # sets LIBLTDL to the link flags for the libltdl convenience library and # LTDLINCL to the include flags for the libltdl header and adds # --enable-ltdl-convenience to the configure arguments. Note that # AC_CONFIG_SUBDIRS is not called here. If DIRECTORY is not provided, # it is assumed to be `libltdl'. LIBLTDL will be prefixed with # '${top_builddir}/' and LTDLINCL will be prefixed with '${top_srcdir}/' # (note the single quotes!). If your package is not flat and you're not # using automake, define top_builddir and top_srcdir appropriately in # the Makefiles. AC_DEFUN([AC_LIBLTDL_CONVENIENCE], [AC_BEFORE([$0],[AC_LIBTOOL_SETUP])dnl case $enable_ltdl_convenience in no) AC_MSG_ERROR([this package needs a convenience libltdl]) ;; "") enable_ltdl_convenience=yes ac_configure_args="$ac_configure_args --enable-ltdl-convenience" ;; esac LIBLTDL='${top_builddir}/'ifelse($#,1,[$1],['libltdl'])/libltdlc.la LTDLINCL='-I${top_srcdir}/'ifelse($#,1,[$1],['libltdl']) # For backwards non-gettext consistent compatibility... INCLTDL="$LTDLINCL" ])# AC_LIBLTDL_CONVENIENCE # AC_LIBLTDL_INSTALLABLE([DIRECTORY]) # ----------------------------------- # sets LIBLTDL to the link flags for the libltdl installable library and # LTDLINCL to the include flags for the libltdl header and adds # --enable-ltdl-install to the configure arguments. Note that # AC_CONFIG_SUBDIRS is not called here. If DIRECTORY is not provided, # and an installed libltdl is not found, it is assumed to be `libltdl'. # LIBLTDL will be prefixed with '${top_builddir}/'# and LTDLINCL with # '${top_srcdir}/' (note the single quotes!). If your package is not # flat and you're not using automake, define top_builddir and top_srcdir # appropriately in the Makefiles. # In the future, this macro may have to be called after AC_PROG_LIBTOOL. AC_DEFUN([AC_LIBLTDL_INSTALLABLE], [AC_BEFORE([$0],[AC_LIBTOOL_SETUP])dnl AC_CHECK_LIB(ltdl, lt_dlinit, [test x"$enable_ltdl_install" != xyes && enable_ltdl_install=no], [if test x"$enable_ltdl_install" = xno; then AC_MSG_WARN([libltdl not installed, but installation disabled]) else enable_ltdl_install=yes fi ]) if test x"$enable_ltdl_install" = x"yes"; then ac_configure_args="$ac_configure_args --enable-ltdl-install" LIBLTDL='${top_builddir}/'ifelse($#,1,[$1],['libltdl'])/libltdl.la LTDLINCL='-I${top_srcdir}/'ifelse($#,1,[$1],['libltdl']) else ac_configure_args="$ac_configure_args --enable-ltdl-install=no" LIBLTDL="-lltdl" LTDLINCL= fi # For backwards non-gettext consistent compatibility... INCLTDL="$LTDLINCL" ])# AC_LIBLTDL_INSTALLABLE # AC_LIBTOOL_CXX # -------------- # enable support for C++ libraries AC_DEFUN([AC_LIBTOOL_CXX], [AC_REQUIRE([_LT_AC_LANG_CXX]) ])# AC_LIBTOOL_CXX # _LT_AC_LANG_CXX # --------------- AC_DEFUN([_LT_AC_LANG_CXX], [AC_REQUIRE([AC_PROG_CXX]) AC_REQUIRE([_LT_AC_PROG_CXXCPP]) _LT_AC_SHELL_INIT([tagnames=${tagnames+${tagnames},}CXX]) ])# _LT_AC_LANG_CXX # _LT_AC_PROG_CXXCPP # ------------------ AC_DEFUN([_LT_AC_PROG_CXXCPP], [ AC_REQUIRE([AC_PROG_CXX]) if test -n "$CXX" && ( test "X$CXX" != "Xno" && ( (test "X$CXX" = "Xg++" && `g++ -v >/dev/null 2>&1` ) || (test "X$CXX" != "Xg++"))) ; then AC_PROG_CXXCPP fi ])# _LT_AC_PROG_CXXCPP # AC_LIBTOOL_F77 # -------------- # enable support for Fortran 77 libraries AC_DEFUN([AC_LIBTOOL_F77], [AC_REQUIRE([_LT_AC_LANG_F77]) ])# AC_LIBTOOL_F77 # _LT_AC_LANG_F77 # --------------- AC_DEFUN([_LT_AC_LANG_F77], [AC_REQUIRE([AC_PROG_F77]) _LT_AC_SHELL_INIT([tagnames=${tagnames+${tagnames},}F77]) ])# _LT_AC_LANG_F77 # AC_LIBTOOL_GCJ # -------------- # enable support for GCJ libraries AC_DEFUN([AC_LIBTOOL_GCJ], [AC_REQUIRE([_LT_AC_LANG_GCJ]) ])# AC_LIBTOOL_GCJ # _LT_AC_LANG_GCJ # --------------- AC_DEFUN([_LT_AC_LANG_GCJ], [AC_PROVIDE_IFELSE([AC_PROG_GCJ],[], [AC_PROVIDE_IFELSE([A][M_PROG_GCJ],[], [AC_PROVIDE_IFELSE([LT_AC_PROG_GCJ],[], [ifdef([AC_PROG_GCJ],[AC_REQUIRE([AC_PROG_GCJ])], [ifdef([A][M_PROG_GCJ],[AC_REQUIRE([A][M_PROG_GCJ])], [AC_REQUIRE([A][C_PROG_GCJ_OR_A][M_PROG_GCJ])])])])])]) _LT_AC_SHELL_INIT([tagnames=${tagnames+${tagnames},}GCJ]) ])# _LT_AC_LANG_GCJ # AC_LIBTOOL_RC # ------------- # enable support for Windows resource files AC_DEFUN([AC_LIBTOOL_RC], [AC_REQUIRE([LT_AC_PROG_RC]) _LT_AC_SHELL_INIT([tagnames=${tagnames+${tagnames},}RC]) ])# AC_LIBTOOL_RC # AC_LIBTOOL_LANG_C_CONFIG # ------------------------ # Ensure that the configuration vars for the C compiler are # suitably defined. Those variables are subsequently used by # AC_LIBTOOL_CONFIG to write the compiler configuration to `libtool'. AC_DEFUN([AC_LIBTOOL_LANG_C_CONFIG], [_LT_AC_LANG_C_CONFIG]) AC_DEFUN([_LT_AC_LANG_C_CONFIG], [lt_save_CC="$CC" AC_LANG_PUSH(C) # Source file extension for C test sources. ac_ext=c # Object file extension for compiled C test sources. objext=o _LT_AC_TAGVAR(objext, $1)=$objext # Code to be used in simple compile tests lt_simple_compile_test_code="int some_variable = 0;\n" # Code to be used in simple link tests lt_simple_link_test_code='int main(){return(0);}\n' _LT_AC_SYS_COMPILER # save warnings/boilerplate of simple test code _LT_COMPILER_BOILERPLATE _LT_LINKER_BOILERPLATE AC_LIBTOOL_PROG_COMPILER_NO_RTTI($1) AC_LIBTOOL_PROG_COMPILER_PIC($1) AC_LIBTOOL_PROG_CC_C_O($1) AC_LIBTOOL_SYS_HARD_LINK_LOCKS($1) AC_LIBTOOL_PROG_LD_SHLIBS($1) AC_LIBTOOL_SYS_DYNAMIC_LINKER($1) AC_LIBTOOL_PROG_LD_HARDCODE_LIBPATH($1) AC_LIBTOOL_SYS_LIB_STRIP AC_LIBTOOL_DLOPEN_SELF # Report which library types will actually be built AC_MSG_CHECKING([if libtool supports shared libraries]) AC_MSG_RESULT([$can_build_shared]) AC_MSG_CHECKING([whether to build shared libraries]) test "$can_build_shared" = "no" && enable_shared=no # On AIX, shared libraries and static libraries use the same namespace, and # are all built from PIC. case $host_os in aix3*) test "$enable_shared" = yes && enable_static=no if test -n "$RANLIB"; then archive_cmds="$archive_cmds~\$RANLIB \$lib" postinstall_cmds='$RANLIB $lib' fi ;; aix4* | aix5*) if test "$host_cpu" != ia64 && test "$aix_use_runtimelinking" = no ; then test "$enable_shared" = yes && enable_static=no fi ;; esac AC_MSG_RESULT([$enable_shared]) AC_MSG_CHECKING([whether to build static libraries]) # Make sure either enable_shared or enable_static is yes. test "$enable_shared" = yes || enable_static=yes AC_MSG_RESULT([$enable_static]) AC_LIBTOOL_CONFIG($1) AC_LANG_POP CC="$lt_save_CC" ])# AC_LIBTOOL_LANG_C_CONFIG # AC_LIBTOOL_LANG_CXX_CONFIG # -------------------------- # Ensure that the configuration vars for the C compiler are # suitably defined. Those variables are subsequently used by # AC_LIBTOOL_CONFIG to write the compiler configuration to `libtool'. AC_DEFUN([AC_LIBTOOL_LANG_CXX_CONFIG], [_LT_AC_LANG_CXX_CONFIG(CXX)]) AC_DEFUN([_LT_AC_LANG_CXX_CONFIG], [AC_LANG_PUSH(C++) AC_REQUIRE([AC_PROG_CXX]) AC_REQUIRE([_LT_AC_PROG_CXXCPP]) _LT_AC_TAGVAR(archive_cmds_need_lc, $1)=no _LT_AC_TAGVAR(allow_undefined_flag, $1)= _LT_AC_TAGVAR(always_export_symbols, $1)=no _LT_AC_TAGVAR(archive_expsym_cmds, $1)= _LT_AC_TAGVAR(export_dynamic_flag_spec, $1)= _LT_AC_TAGVAR(hardcode_direct, $1)=no _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)= _LT_AC_TAGVAR(hardcode_libdir_flag_spec_ld, $1)= _LT_AC_TAGVAR(hardcode_libdir_separator, $1)= _LT_AC_TAGVAR(hardcode_minus_L, $1)=no _LT_AC_TAGVAR(hardcode_shlibpath_var, $1)=unsupported _LT_AC_TAGVAR(hardcode_automatic, $1)=no _LT_AC_TAGVAR(module_cmds, $1)= _LT_AC_TAGVAR(module_expsym_cmds, $1)= _LT_AC_TAGVAR(link_all_deplibs, $1)=unknown _LT_AC_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds _LT_AC_TAGVAR(no_undefined_flag, $1)= _LT_AC_TAGVAR(whole_archive_flag_spec, $1)= _LT_AC_TAGVAR(enable_shared_with_static_runtimes, $1)=no # Dependencies to place before and after the object being linked: _LT_AC_TAGVAR(predep_objects, $1)= _LT_AC_TAGVAR(postdep_objects, $1)= _LT_AC_TAGVAR(predeps, $1)= _LT_AC_TAGVAR(postdeps, $1)= _LT_AC_TAGVAR(compiler_lib_search_path, $1)= # Source file extension for C++ test sources. ac_ext=cpp # Object file extension for compiled C++ test sources. objext=o _LT_AC_TAGVAR(objext, $1)=$objext # Code to be used in simple compile tests lt_simple_compile_test_code="int some_variable = 0;\n" # Code to be used in simple link tests lt_simple_link_test_code='int main(int, char *[[]]) { return(0); }\n' # ltmain only uses $CC for tagged configurations so make sure $CC is set. _LT_AC_SYS_COMPILER # save warnings/boilerplate of simple test code _LT_COMPILER_BOILERPLATE _LT_LINKER_BOILERPLATE # Allow CC to be a program name with arguments. lt_save_CC=$CC lt_save_LD=$LD lt_save_GCC=$GCC GCC=$GXX lt_save_with_gnu_ld=$with_gnu_ld lt_save_path_LD=$lt_cv_path_LD if test -n "${lt_cv_prog_gnu_ldcxx+set}"; then lt_cv_prog_gnu_ld=$lt_cv_prog_gnu_ldcxx else $as_unset lt_cv_prog_gnu_ld fi if test -n "${lt_cv_path_LDCXX+set}"; then lt_cv_path_LD=$lt_cv_path_LDCXX else $as_unset lt_cv_path_LD fi test -z "${LDCXX+set}" || LD=$LDCXX CC=${CXX-"c++"} compiler=$CC _LT_AC_TAGVAR(compiler, $1)=$CC _LT_CC_BASENAME([$compiler]) # We don't want -fno-exception wen compiling C++ code, so set the # no_builtin_flag separately if test "$GXX" = yes; then _LT_AC_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)=' -fno-builtin' else _LT_AC_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)= fi if test "$GXX" = yes; then # Set up default GNU C++ configuration AC_PROG_LD # Check if GNU C++ uses GNU ld as the underlying linker, since the # archiving commands below assume that GNU ld is being used. if test "$with_gnu_ld" = yes; then _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags ${wl}-soname $wl$soname -o $lib' _LT_AC_TAGVAR(archive_expsym_cmds, $1)='$CC -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags ${wl}-soname $wl$soname ${wl}-retain-symbols-file $wl$export_symbols -o $lib' _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}--rpath ${wl}$libdir' _LT_AC_TAGVAR(export_dynamic_flag_spec, $1)='${wl}--export-dynamic' # If archive_cmds runs LD, not CC, wlarc should be empty # XXX I think wlarc can be eliminated in ltcf-cxx, but I need to # investigate it a little bit more. (MM) wlarc='${wl}' # ancient GNU ld didn't support --whole-archive et. al. if eval "`$CC -print-prog-name=ld` --help 2>&1" | \ grep 'no-whole-archive' > /dev/null; then _LT_AC_TAGVAR(whole_archive_flag_spec, $1)="$wlarc"'--whole-archive$convenience '"$wlarc"'--no-whole-archive' else _LT_AC_TAGVAR(whole_archive_flag_spec, $1)= fi else with_gnu_ld=no wlarc= # A generic and very simple default shared library creation # command for GNU C++ for the case where it uses the native # linker, instead of GNU ld. If possible, this setting should # overridden to take advantage of the native linker features on # the platform it is being used on. _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -o $lib' fi # Commands to make compiler produce verbose output that lists # what "hidden" libraries, object files and flags are used when # linking a shared library. output_verbose_link_cmd='$CC -shared $CFLAGS -v conftest.$objext 2>&1 | grep "\-L"' else GXX=no with_gnu_ld=no wlarc= fi # PORTME: fill in a description of your system's C++ link characteristics AC_MSG_CHECKING([whether the $compiler linker ($LD) supports shared libraries]) _LT_AC_TAGVAR(ld_shlibs, $1)=yes case $host_os in aix3*) # FIXME: insert proper C++ library support _LT_AC_TAGVAR(ld_shlibs, $1)=no ;; aix4* | aix5*) if test "$host_cpu" = ia64; then # On IA64, the linker does run time linking by default, so we don't # have to do anything special. aix_use_runtimelinking=no exp_sym_flag='-Bexport' no_entry_flag="" else aix_use_runtimelinking=no # Test if we are trying to use run time linking or normal # AIX style linking. If -brtl is somewhere in LDFLAGS, we # need to do runtime linking. case $host_os in aix4.[[23]]|aix4.[[23]].*|aix5*) for ld_flag in $LDFLAGS; do case $ld_flag in *-brtl*) aix_use_runtimelinking=yes break ;; esac done ;; esac exp_sym_flag='-bexport' no_entry_flag='-bnoentry' fi # When large executables or shared objects are built, AIX ld can # have problems creating the table of contents. If linking a library # or program results in "error TOC overflow" add -mminimal-toc to # CXXFLAGS/CFLAGS for g++/gcc. In the cases where that is not # enough to fix the problem, add -Wl,-bbigtoc to LDFLAGS. _LT_AC_TAGVAR(archive_cmds, $1)='' _LT_AC_TAGVAR(hardcode_direct, $1)=yes _LT_AC_TAGVAR(hardcode_libdir_separator, $1)=':' _LT_AC_TAGVAR(link_all_deplibs, $1)=yes if test "$GXX" = yes; then case $host_os in aix4.[[012]]|aix4.[[012]].*) # We only want to do this on AIX 4.2 and lower, the check # below for broken collect2 doesn't work under 4.3+ collect2name=`${CC} -print-prog-name=collect2` if test -f "$collect2name" && \ strings "$collect2name" | grep resolve_lib_name >/dev/null then # We have reworked collect2 _LT_AC_TAGVAR(hardcode_direct, $1)=yes else # We have old collect2 _LT_AC_TAGVAR(hardcode_direct, $1)=unsupported # It fails to find uninstalled libraries when the uninstalled # path is not listed in the libpath. Setting hardcode_minus_L # to unsupported forces relinking _LT_AC_TAGVAR(hardcode_minus_L, $1)=yes _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_AC_TAGVAR(hardcode_libdir_separator, $1)= fi ;; esac shared_flag='-shared' if test "$aix_use_runtimelinking" = yes; then shared_flag="$shared_flag "'${wl}-G' fi else # not using gcc if test "$host_cpu" = ia64; then # VisualAge C++, Version 5.5 for AIX 5L for IA-64, Beta 3 Release # chokes on -Wl,-G. The following line is correct: shared_flag='-G' else if test "$aix_use_runtimelinking" = yes; then shared_flag='${wl}-G' else shared_flag='${wl}-bM:SRE' fi fi fi # It seems that -bexpall does not export symbols beginning with # underscore (_), so it is better to generate a list of symbols to export. _LT_AC_TAGVAR(always_export_symbols, $1)=yes if test "$aix_use_runtimelinking" = yes; then # Warning - without using the other runtime loading flags (-brtl), # -berok will link without error, but may produce a broken library. _LT_AC_TAGVAR(allow_undefined_flag, $1)='-berok' # Determine the default libpath from the value encoded in an empty executable. _LT_AC_SYS_LIBPATH_AIX _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}-blibpath:$libdir:'"$aix_libpath" _LT_AC_TAGVAR(archive_expsym_cmds, $1)="\$CC"' -o $output_objdir/$soname $libobjs $deplibs '"\${wl}$no_entry_flag"' $compiler_flags `if test "x${allow_undefined_flag}" != "x"; then echo "${wl}${allow_undefined_flag}"; else :; fi` '"\${wl}$exp_sym_flag:\$export_symbols $shared_flag" else if test "$host_cpu" = ia64; then _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}-R $libdir:/usr/lib:/lib' _LT_AC_TAGVAR(allow_undefined_flag, $1)="-z nodefs" _LT_AC_TAGVAR(archive_expsym_cmds, $1)="\$CC $shared_flag"' -o $output_objdir/$soname $libobjs $deplibs '"\${wl}$no_entry_flag"' $compiler_flags ${wl}${allow_undefined_flag} '"\${wl}$exp_sym_flag:\$export_symbols" else # Determine the default libpath from the value encoded in an empty executable. _LT_AC_SYS_LIBPATH_AIX _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}-blibpath:$libdir:'"$aix_libpath" # Warning - without using the other run time loading flags, # -berok will link without error, but may produce a broken library. _LT_AC_TAGVAR(no_undefined_flag, $1)=' ${wl}-bernotok' _LT_AC_TAGVAR(allow_undefined_flag, $1)=' ${wl}-berok' # Exported symbols can be pulled into shared objects from archives _LT_AC_TAGVAR(whole_archive_flag_spec, $1)='$convenience' _LT_AC_TAGVAR(archive_cmds_need_lc, $1)=yes # This is similar to how AIX traditionally builds its shared libraries. _LT_AC_TAGVAR(archive_expsym_cmds, $1)="\$CC $shared_flag"' -o $output_objdir/$soname $libobjs $deplibs ${wl}-bnoentry $compiler_flags ${wl}-bE:$export_symbols${allow_undefined_flag}~$AR $AR_FLAGS $output_objdir/$libname$release.a $output_objdir/$soname' fi fi ;; beos*) if $LD --help 2>&1 | grep ': supported targets:.* elf' > /dev/null; then _LT_AC_TAGVAR(allow_undefined_flag, $1)=unsupported # Joseph Beckenbach says some releases of gcc # support --undefined. This deserves some investigation. FIXME _LT_AC_TAGVAR(archive_cmds, $1)='$CC -nostart $libobjs $deplibs $compiler_flags ${wl}-soname $wl$soname -o $lib' else _LT_AC_TAGVAR(ld_shlibs, $1)=no fi ;; chorus*) case $cc_basename in *) # FIXME: insert proper C++ library support _LT_AC_TAGVAR(ld_shlibs, $1)=no ;; esac ;; cygwin* | mingw* | pw32*) # _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1) is actually meaningless, # as there is no search path for DLLs. _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_AC_TAGVAR(allow_undefined_flag, $1)=unsupported _LT_AC_TAGVAR(always_export_symbols, $1)=no _LT_AC_TAGVAR(enable_shared_with_static_runtimes, $1)=yes if $LD --help 2>&1 | grep 'auto-import' > /dev/null; then _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -o $output_objdir/$soname ${wl}--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib' # If the export-symbols file already is a .def file (1st line # is EXPORTS), use it as is; otherwise, prepend... _LT_AC_TAGVAR(archive_expsym_cmds, $1)='if test "x`$SED 1q $export_symbols`" = xEXPORTS; then cp $export_symbols $output_objdir/$soname.def; else echo EXPORTS > $output_objdir/$soname.def; cat $export_symbols >> $output_objdir/$soname.def; fi~ $CC -shared -nostdlib $output_objdir/$soname.def $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -o $output_objdir/$soname ${wl}--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib' else _LT_AC_TAGVAR(ld_shlibs, $1)=no fi ;; darwin* | rhapsody*) case $host_os in rhapsody* | darwin1.[[012]]) _LT_AC_TAGVAR(allow_undefined_flag, $1)='${wl}-undefined ${wl}suppress' ;; *) # Darwin 1.3 on if test -z ${MACOSX_DEPLOYMENT_TARGET} ; then _LT_AC_TAGVAR(allow_undefined_flag, $1)='${wl}-flat_namespace ${wl}-undefined ${wl}suppress' else case ${MACOSX_DEPLOYMENT_TARGET} in 10.[[012]]) _LT_AC_TAGVAR(allow_undefined_flag, $1)='${wl}-flat_namespace ${wl}-undefined ${wl}suppress' ;; 10.*) _LT_AC_TAGVAR(allow_undefined_flag, $1)='${wl}-undefined ${wl}dynamic_lookup' ;; esac fi ;; esac _LT_AC_TAGVAR(archive_cmds_need_lc, $1)=no _LT_AC_TAGVAR(hardcode_direct, $1)=no _LT_AC_TAGVAR(hardcode_automatic, $1)=yes _LT_AC_TAGVAR(hardcode_shlibpath_var, $1)=unsupported _LT_AC_TAGVAR(whole_archive_flag_spec, $1)='' _LT_AC_TAGVAR(link_all_deplibs, $1)=yes if test "$GXX" = yes ; then lt_int_apple_cc_single_mod=no output_verbose_link_cmd='echo' if $CC -dumpspecs 2>&1 | $EGREP 'single_module' >/dev/null ; then lt_int_apple_cc_single_mod=yes fi if test "X$lt_int_apple_cc_single_mod" = Xyes ; then _LT_AC_TAGVAR(archive_cmds, $1)='$CC -dynamiclib -single_module $allow_undefined_flag -o $lib $libobjs $deplibs $compiler_flags -install_name $rpath/$soname $verstring' else _LT_AC_TAGVAR(archive_cmds, $1)='$CC -r -keep_private_externs -nostdlib -o ${lib}-master.o $libobjs~$CC -dynamiclib $allow_undefined_flag -o $lib ${lib}-master.o $deplibs $compiler_flags -install_name $rpath/$soname $verstring' fi _LT_AC_TAGVAR(module_cmds, $1)='$CC $allow_undefined_flag -o $lib -bundle $libobjs $deplibs$compiler_flags' # Don't fix this by using the ld -exported_symbols_list flag, it doesn't exist in older darwin lds if test "X$lt_int_apple_cc_single_mod" = Xyes ; then _LT_AC_TAGVAR(archive_expsym_cmds, $1)='sed -e "s,#.*,," -e "s,^[ ]*,," -e "s,^\(..*\),_&," < $export_symbols > $output_objdir/${libname}-symbols.expsym~$CC -dynamiclib -single_module $allow_undefined_flag -o $lib $libobjs $deplibs $compiler_flags -install_name $rpath/$soname $verstring~nmedit -s $output_objdir/${libname}-symbols.expsym ${lib}' else _LT_AC_TAGVAR(archive_expsym_cmds, $1)='sed -e "s,#.*,," -e "s,^[ ]*,," -e "s,^\(..*\),_&," < $export_symbols > $output_objdir/${libname}-symbols.expsym~$CC -r -keep_private_externs -nostdlib -o ${lib}-master.o $libobjs~$CC -dynamiclib $allow_undefined_flag -o $lib ${lib}-master.o $deplibs $compiler_flags -install_name $rpath/$soname $verstring~nmedit -s $output_objdir/${libname}-symbols.expsym ${lib}' fi _LT_AC_TAGVAR(module_expsym_cmds, $1)='sed -e "s,#.*,," -e "s,^[ ]*,," -e "s,^\(..*\),_&," < $export_symbols > $output_objdir/${libname}-symbols.expsym~$CC $allow_undefined_flag -o $lib -bundle $libobjs $deplibs$compiler_flags~nmedit -s $output_objdir/${libname}-symbols.expsym ${lib}' else case $cc_basename in xlc*) output_verbose_link_cmd='echo' _LT_AC_TAGVAR(archive_cmds, $1)='$CC -qmkshrobj ${wl}-single_module $allow_undefined_flag -o $lib $libobjs $deplibs $compiler_flags ${wl}-install_name ${wl}`echo $rpath/$soname` $verstring' _LT_AC_TAGVAR(module_cmds, $1)='$CC $allow_undefined_flag -o $lib -bundle $libobjs $deplibs$compiler_flags' # Don't fix this by using the ld -exported_symbols_list flag, it doesn't exist in older darwin lds _LT_AC_TAGVAR(archive_expsym_cmds, $1)='sed -e "s,#.*,," -e "s,^[ ]*,," -e "s,^\(..*\),_&," < $export_symbols > $output_objdir/${libname}-symbols.expsym~$CC -qmkshrobj ${wl}-single_module $allow_undefined_flag -o $lib $libobjs $deplibs $compiler_flags ${wl}-install_name ${wl}$rpath/$soname $verstring~nmedit -s $output_objdir/${libname}-symbols.expsym ${lib}' _LT_AC_TAGVAR(module_expsym_cmds, $1)='sed -e "s,#.*,," -e "s,^[ ]*,," -e "s,^\(..*\),_&," < $export_symbols > $output_objdir/${libname}-symbols.expsym~$CC $allow_undefined_flag -o $lib -bundle $libobjs $deplibs$compiler_flags~nmedit -s $output_objdir/${libname}-symbols.expsym ${lib}' ;; *) _LT_AC_TAGVAR(ld_shlibs, $1)=no ;; esac fi ;; dgux*) case $cc_basename in ec++*) # FIXME: insert proper C++ library support _LT_AC_TAGVAR(ld_shlibs, $1)=no ;; ghcx*) # Green Hills C++ Compiler # FIXME: insert proper C++ library support _LT_AC_TAGVAR(ld_shlibs, $1)=no ;; *) # FIXME: insert proper C++ library support _LT_AC_TAGVAR(ld_shlibs, $1)=no ;; esac ;; freebsd[[12]]*) # C++ shared libraries reported to be fairly broken before switch to ELF _LT_AC_TAGVAR(ld_shlibs, $1)=no ;; freebsd-elf*) _LT_AC_TAGVAR(archive_cmds_need_lc, $1)=no ;; freebsd* | kfreebsd*-gnu | dragonfly*) # FreeBSD 3 and later use GNU C++ and GNU ld with standard ELF # conventions _LT_AC_TAGVAR(ld_shlibs, $1)=yes ;; gnu*) ;; hpux9*) _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}+b ${wl}$libdir' _LT_AC_TAGVAR(hardcode_libdir_separator, $1)=: _LT_AC_TAGVAR(export_dynamic_flag_spec, $1)='${wl}-E' _LT_AC_TAGVAR(hardcode_direct, $1)=yes _LT_AC_TAGVAR(hardcode_minus_L, $1)=yes # Not in the search PATH, # but as the default # location of the library. case $cc_basename in CC*) # FIXME: insert proper C++ library support _LT_AC_TAGVAR(ld_shlibs, $1)=no ;; aCC*) _LT_AC_TAGVAR(archive_cmds, $1)='$rm $output_objdir/$soname~$CC -b ${wl}+b ${wl}$install_libdir -o $output_objdir/$soname $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~test $output_objdir/$soname = $lib || mv $output_objdir/$soname $lib' # Commands to make compiler produce verbose output that lists # what "hidden" libraries, object files and flags are used when # linking a shared library. # # There doesn't appear to be a way to prevent this compiler from # explicitly linking system object files so we need to strip them # from the output so that they don't get included in the library # dependencies. output_verbose_link_cmd='templist=`($CC -b $CFLAGS -v conftest.$objext 2>&1) | grep "[[-]]L"`; list=""; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; echo $list' ;; *) if test "$GXX" = yes; then _LT_AC_TAGVAR(archive_cmds, $1)='$rm $output_objdir/$soname~$CC -shared -nostdlib -fPIC ${wl}+b ${wl}$install_libdir -o $output_objdir/$soname $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~test $output_objdir/$soname = $lib || mv $output_objdir/$soname $lib' else # FIXME: insert proper C++ library support _LT_AC_TAGVAR(ld_shlibs, $1)=no fi ;; esac ;; hpux10*|hpux11*) if test $with_gnu_ld = no; then _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}+b ${wl}$libdir' _LT_AC_TAGVAR(hardcode_libdir_separator, $1)=: case $host_cpu in hppa*64*|ia64*) _LT_AC_TAGVAR(hardcode_libdir_flag_spec_ld, $1)='+b $libdir' ;; *) _LT_AC_TAGVAR(export_dynamic_flag_spec, $1)='${wl}-E' ;; esac fi case $host_cpu in hppa*64*|ia64*) _LT_AC_TAGVAR(hardcode_direct, $1)=no _LT_AC_TAGVAR(hardcode_shlibpath_var, $1)=no ;; *) _LT_AC_TAGVAR(hardcode_direct, $1)=yes _LT_AC_TAGVAR(hardcode_minus_L, $1)=yes # Not in the search PATH, # but as the default # location of the library. ;; esac case $cc_basename in CC*) # FIXME: insert proper C++ library support _LT_AC_TAGVAR(ld_shlibs, $1)=no ;; aCC*) case $host_cpu in hppa*64*) _LT_AC_TAGVAR(archive_cmds, $1)='$CC -b ${wl}+h ${wl}$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' ;; ia64*) _LT_AC_TAGVAR(archive_cmds, $1)='$CC -b ${wl}+h ${wl}$soname ${wl}+nodefaultrpath -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' ;; *) _LT_AC_TAGVAR(archive_cmds, $1)='$CC -b ${wl}+h ${wl}$soname ${wl}+b ${wl}$install_libdir -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' ;; esac # Commands to make compiler produce verbose output that lists # what "hidden" libraries, object files and flags are used when # linking a shared library. # # There doesn't appear to be a way to prevent this compiler from # explicitly linking system object files so we need to strip them # from the output so that they don't get included in the library # dependencies. output_verbose_link_cmd='templist=`($CC -b $CFLAGS -v conftest.$objext 2>&1) | grep "\-L"`; list=""; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; echo $list' ;; *) if test "$GXX" = yes; then if test $with_gnu_ld = no; then case $host_cpu in hppa*64*) _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib -fPIC ${wl}+h ${wl}$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' ;; ia64*) _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib -fPIC ${wl}+h ${wl}$soname ${wl}+nodefaultrpath -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' ;; *) _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib -fPIC ${wl}+h ${wl}$soname ${wl}+b ${wl}$install_libdir -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' ;; esac fi else # FIXME: insert proper C++ library support _LT_AC_TAGVAR(ld_shlibs, $1)=no fi ;; esac ;; interix3*) _LT_AC_TAGVAR(hardcode_direct, $1)=no _LT_AC_TAGVAR(hardcode_shlibpath_var, $1)=no _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}-rpath,$libdir' _LT_AC_TAGVAR(export_dynamic_flag_spec, $1)='${wl}-E' # Hack: On Interix 3.x, we cannot compile PIC because of a broken gcc. # Instead, shared libraries are loaded at an image base (0x10000000 by # default) and relocated if they conflict, which is a slow very memory # consuming and fragmenting process. To avoid this, we pick a random, # 256 KiB-aligned image base between 0x50000000 and 0x6FFC0000 at link # time. Moving up from 0x10000000 also allows more sbrk(2) space. _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags ${wl}-h,$soname ${wl}--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib' _LT_AC_TAGVAR(archive_expsym_cmds, $1)='sed "s,^,_," $export_symbols >$output_objdir/$soname.expsym~$CC -shared $pic_flag $libobjs $deplibs $compiler_flags ${wl}-h,$soname ${wl}--retain-symbols-file,$output_objdir/$soname.expsym ${wl}--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib' ;; irix5* | irix6*) case $cc_basename in CC*) # SGI C++ _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared -all -multigot $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -soname $soname `test -n "$verstring" && echo -set_version $verstring` -update_registry ${output_objdir}/so_locations -o $lib' # Archives containing C++ object files must be created using # "CC -ar", where "CC" is the IRIX C++ compiler. This is # necessary to make sure instantiated templates are included # in the archive. _LT_AC_TAGVAR(old_archive_cmds, $1)='$CC -ar -WR,-u -o $oldlib $oldobjs' ;; *) if test "$GXX" = yes; then if test "$with_gnu_ld" = no; then _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags ${wl}-soname ${wl}$soname `test -n "$verstring" && echo ${wl}-set_version ${wl}$verstring` ${wl}-update_registry ${wl}${output_objdir}/so_locations -o $lib' else _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags ${wl}-soname ${wl}$soname `test -n "$verstring" && echo ${wl}-set_version ${wl}$verstring` -o $lib' fi fi _LT_AC_TAGVAR(link_all_deplibs, $1)=yes ;; esac _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}-rpath ${wl}$libdir' _LT_AC_TAGVAR(hardcode_libdir_separator, $1)=: ;; linux*) case $cc_basename in KCC*) # Kuck and Associates, Inc. (KAI) C++ Compiler # KCC will only create a shared library if the output file # ends with ".so" (or ".sl" for HP-UX), so rename the library # to its proper name (with version) after linking. _LT_AC_TAGVAR(archive_cmds, $1)='tempext=`echo $shared_ext | $SED -e '\''s/\([[^()0-9A-Za-z{}]]\)/\\\\\1/g'\''`; templib=`echo $lib | $SED -e "s/\${tempext}\..*/.so/"`; $CC $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags --soname $soname -o \$templib; mv \$templib $lib' _LT_AC_TAGVAR(archive_expsym_cmds, $1)='tempext=`echo $shared_ext | $SED -e '\''s/\([[^()0-9A-Za-z{}]]\)/\\\\\1/g'\''`; templib=`echo $lib | $SED -e "s/\${tempext}\..*/.so/"`; $CC $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags --soname $soname -o \$templib ${wl}-retain-symbols-file,$export_symbols; mv \$templib $lib' # Commands to make compiler produce verbose output that lists # what "hidden" libraries, object files and flags are used when # linking a shared library. # # There doesn't appear to be a way to prevent this compiler from # explicitly linking system object files so we need to strip them # from the output so that they don't get included in the library # dependencies. output_verbose_link_cmd='templist=`$CC $CFLAGS -v conftest.$objext -o libconftest$shared_ext 2>&1 | grep "ld"`; rm -f libconftest$shared_ext; list=""; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; echo $list' _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}--rpath,$libdir' _LT_AC_TAGVAR(export_dynamic_flag_spec, $1)='${wl}--export-dynamic' # Archives containing C++ object files must be created using # "CC -Bstatic", where "CC" is the KAI C++ compiler. _LT_AC_TAGVAR(old_archive_cmds, $1)='$CC -Bstatic -o $oldlib $oldobjs' ;; icpc*) # Intel C++ with_gnu_ld=yes # version 8.0 and above of icpc choke on multiply defined symbols # if we add $predep_objects and $postdep_objects, however 7.1 and # earlier do not add the objects themselves. case `$CC -V 2>&1` in *"Version 7."*) _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags ${wl}-soname $wl$soname -o $lib' _LT_AC_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags ${wl}-soname $wl$soname ${wl}-retain-symbols-file $wl$export_symbols -o $lib' ;; *) # Version 8.0 or newer tmp_idyn= case $host_cpu in ia64*) tmp_idyn=' -i_dynamic';; esac _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared'"$tmp_idyn"' $libobjs $deplibs $compiler_flags ${wl}-soname $wl$soname -o $lib' _LT_AC_TAGVAR(archive_expsym_cmds, $1)='$CC -shared'"$tmp_idyn"' $libobjs $deplibs $compiler_flags ${wl}-soname $wl$soname ${wl}-retain-symbols-file $wl$export_symbols -o $lib' ;; esac _LT_AC_TAGVAR(archive_cmds_need_lc, $1)=no _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}-rpath,$libdir' _LT_AC_TAGVAR(export_dynamic_flag_spec, $1)='${wl}--export-dynamic' _LT_AC_TAGVAR(whole_archive_flag_spec, $1)='${wl}--whole-archive$convenience ${wl}--no-whole-archive' ;; pgCC*) # Portland Group C++ compiler _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags ${wl}-soname ${wl}$soname -o $lib' _LT_AC_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags ${wl}-soname ${wl}$soname ${wl}-retain-symbols-file ${wl}$export_symbols -o $lib' _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}--rpath ${wl}$libdir' _LT_AC_TAGVAR(export_dynamic_flag_spec, $1)='${wl}--export-dynamic' _LT_AC_TAGVAR(whole_archive_flag_spec, $1)='${wl}--whole-archive`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; $echo \"$new_convenience\"` ${wl}--no-whole-archive' ;; cxx*) # Compaq C++ _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags ${wl}-soname $wl$soname -o $lib' _LT_AC_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags ${wl}-soname $wl$soname -o $lib ${wl}-retain-symbols-file $wl$export_symbols' runpath_var=LD_RUN_PATH _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='-rpath $libdir' _LT_AC_TAGVAR(hardcode_libdir_separator, $1)=: # Commands to make compiler produce verbose output that lists # what "hidden" libraries, object files and flags are used when # linking a shared library. # # There doesn't appear to be a way to prevent this compiler from # explicitly linking system object files so we need to strip them # from the output so that they don't get included in the library # dependencies. output_verbose_link_cmd='templist=`$CC -shared $CFLAGS -v conftest.$objext 2>&1 | grep "ld"`; templist=`echo $templist | $SED "s/\(^.*ld.*\)\( .*ld .*$\)/\1/"`; list=""; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; echo $list' ;; esac ;; lynxos*) # FIXME: insert proper C++ library support _LT_AC_TAGVAR(ld_shlibs, $1)=no ;; m88k*) # FIXME: insert proper C++ library support _LT_AC_TAGVAR(ld_shlibs, $1)=no ;; mvs*) case $cc_basename in cxx*) # FIXME: insert proper C++ library support _LT_AC_TAGVAR(ld_shlibs, $1)=no ;; *) # FIXME: insert proper C++ library support _LT_AC_TAGVAR(ld_shlibs, $1)=no ;; esac ;; netbsd*) if echo __ELF__ | $CC -E - | grep __ELF__ >/dev/null; then _LT_AC_TAGVAR(archive_cmds, $1)='$LD -Bshareable -o $lib $predep_objects $libobjs $deplibs $postdep_objects $linker_flags' wlarc= _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir' _LT_AC_TAGVAR(hardcode_direct, $1)=yes _LT_AC_TAGVAR(hardcode_shlibpath_var, $1)=no fi # Workaround some broken pre-1.5 toolchains output_verbose_link_cmd='$CC -shared $CFLAGS -v conftest.$objext 2>&1 | grep conftest.$objext | $SED -e "s:-lgcc -lc -lgcc::"' ;; openbsd2*) # C++ shared libraries are fairly broken _LT_AC_TAGVAR(ld_shlibs, $1)=no ;; openbsd*) _LT_AC_TAGVAR(hardcode_direct, $1)=yes _LT_AC_TAGVAR(hardcode_shlibpath_var, $1)=no _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -o $lib' _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}-rpath,$libdir' if test -z "`echo __ELF__ | $CC -E - | grep __ELF__`" || test "$host_os-$host_cpu" = "openbsd2.8-powerpc"; then _LT_AC_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags ${wl}-retain-symbols-file,$export_symbols -o $lib' _LT_AC_TAGVAR(export_dynamic_flag_spec, $1)='${wl}-E' _LT_AC_TAGVAR(whole_archive_flag_spec, $1)="$wlarc"'--whole-archive$convenience '"$wlarc"'--no-whole-archive' fi output_verbose_link_cmd='echo' ;; osf3*) case $cc_basename in KCC*) # Kuck and Associates, Inc. (KAI) C++ Compiler # KCC will only create a shared library if the output file # ends with ".so" (or ".sl" for HP-UX), so rename the library # to its proper name (with version) after linking. _LT_AC_TAGVAR(archive_cmds, $1)='tempext=`echo $shared_ext | $SED -e '\''s/\([[^()0-9A-Za-z{}]]\)/\\\\\1/g'\''`; templib=`echo $lib | $SED -e "s/\${tempext}\..*/.so/"`; $CC $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags --soname $soname -o \$templib; mv \$templib $lib' _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}-rpath,$libdir' _LT_AC_TAGVAR(hardcode_libdir_separator, $1)=: # Archives containing C++ object files must be created using # "CC -Bstatic", where "CC" is the KAI C++ compiler. _LT_AC_TAGVAR(old_archive_cmds, $1)='$CC -Bstatic -o $oldlib $oldobjs' ;; RCC*) # Rational C++ 2.4.1 # FIXME: insert proper C++ library support _LT_AC_TAGVAR(ld_shlibs, $1)=no ;; cxx*) _LT_AC_TAGVAR(allow_undefined_flag, $1)=' ${wl}-expect_unresolved ${wl}\*' _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared${allow_undefined_flag} $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags ${wl}-soname $soname `test -n "$verstring" && echo ${wl}-set_version $verstring` -update_registry ${output_objdir}/so_locations -o $lib' _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}-rpath ${wl}$libdir' _LT_AC_TAGVAR(hardcode_libdir_separator, $1)=: # Commands to make compiler produce verbose output that lists # what "hidden" libraries, object files and flags are used when # linking a shared library. # # There doesn't appear to be a way to prevent this compiler from # explicitly linking system object files so we need to strip them # from the output so that they don't get included in the library # dependencies. output_verbose_link_cmd='templist=`$CC -shared $CFLAGS -v conftest.$objext 2>&1 | grep "ld" | grep -v "ld:"`; templist=`echo $templist | $SED "s/\(^.*ld.*\)\( .*ld.*$\)/\1/"`; list=""; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; echo $list' ;; *) if test "$GXX" = yes && test "$with_gnu_ld" = no; then _LT_AC_TAGVAR(allow_undefined_flag, $1)=' ${wl}-expect_unresolved ${wl}\*' _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib ${allow_undefined_flag} $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags ${wl}-soname ${wl}$soname `test -n "$verstring" && echo ${wl}-set_version ${wl}$verstring` ${wl}-update_registry ${wl}${output_objdir}/so_locations -o $lib' _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}-rpath ${wl}$libdir' _LT_AC_TAGVAR(hardcode_libdir_separator, $1)=: # Commands to make compiler produce verbose output that lists # what "hidden" libraries, object files and flags are used when # linking a shared library. output_verbose_link_cmd='$CC -shared $CFLAGS -v conftest.$objext 2>&1 | grep "\-L"' else # FIXME: insert proper C++ library support _LT_AC_TAGVAR(ld_shlibs, $1)=no fi ;; esac ;; osf4* | osf5*) case $cc_basename in KCC*) # Kuck and Associates, Inc. (KAI) C++ Compiler # KCC will only create a shared library if the output file # ends with ".so" (or ".sl" for HP-UX), so rename the library # to its proper name (with version) after linking. _LT_AC_TAGVAR(archive_cmds, $1)='tempext=`echo $shared_ext | $SED -e '\''s/\([[^()0-9A-Za-z{}]]\)/\\\\\1/g'\''`; templib=`echo $lib | $SED -e "s/\${tempext}\..*/.so/"`; $CC $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags --soname $soname -o \$templib; mv \$templib $lib' _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}-rpath,$libdir' _LT_AC_TAGVAR(hardcode_libdir_separator, $1)=: # Archives containing C++ object files must be created using # the KAI C++ compiler. _LT_AC_TAGVAR(old_archive_cmds, $1)='$CC -o $oldlib $oldobjs' ;; RCC*) # Rational C++ 2.4.1 # FIXME: insert proper C++ library support _LT_AC_TAGVAR(ld_shlibs, $1)=no ;; cxx*) _LT_AC_TAGVAR(allow_undefined_flag, $1)=' -expect_unresolved \*' _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared${allow_undefined_flag} $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -msym -soname $soname `test -n "$verstring" && echo -set_version $verstring` -update_registry ${output_objdir}/so_locations -o $lib' _LT_AC_TAGVAR(archive_expsym_cmds, $1)='for i in `cat $export_symbols`; do printf "%s %s\\n" -exported_symbol "\$i" >> $lib.exp; done~ echo "-hidden">> $lib.exp~ $CC -shared$allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -msym -soname $soname -Wl,-input -Wl,$lib.exp `test -n "$verstring" && echo -set_version $verstring` -update_registry ${output_objdir}/so_locations -o $lib~ $rm $lib.exp' _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='-rpath $libdir' _LT_AC_TAGVAR(hardcode_libdir_separator, $1)=: # Commands to make compiler produce verbose output that lists # what "hidden" libraries, object files and flags are used when # linking a shared library. # # There doesn't appear to be a way to prevent this compiler from # explicitly linking system object files so we need to strip them # from the output so that they don't get included in the library # dependencies. output_verbose_link_cmd='templist=`$CC -shared $CFLAGS -v conftest.$objext 2>&1 | grep "ld" | grep -v "ld:"`; templist=`echo $templist | $SED "s/\(^.*ld.*\)\( .*ld.*$\)/\1/"`; list=""; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; echo $list' ;; *) if test "$GXX" = yes && test "$with_gnu_ld" = no; then _LT_AC_TAGVAR(allow_undefined_flag, $1)=' ${wl}-expect_unresolved ${wl}\*' _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib ${allow_undefined_flag} $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags ${wl}-msym ${wl}-soname ${wl}$soname `test -n "$verstring" && echo ${wl}-set_version ${wl}$verstring` ${wl}-update_registry ${wl}${output_objdir}/so_locations -o $lib' _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}-rpath ${wl}$libdir' _LT_AC_TAGVAR(hardcode_libdir_separator, $1)=: # Commands to make compiler produce verbose output that lists # what "hidden" libraries, object files and flags are used when # linking a shared library. output_verbose_link_cmd='$CC -shared $CFLAGS -v conftest.$objext 2>&1 | grep "\-L"' else # FIXME: insert proper C++ library support _LT_AC_TAGVAR(ld_shlibs, $1)=no fi ;; esac ;; psos*) # FIXME: insert proper C++ library support _LT_AC_TAGVAR(ld_shlibs, $1)=no ;; sunos4*) case $cc_basename in CC*) # Sun C++ 4.x # FIXME: insert proper C++ library support _LT_AC_TAGVAR(ld_shlibs, $1)=no ;; lcc*) # Lucid # FIXME: insert proper C++ library support _LT_AC_TAGVAR(ld_shlibs, $1)=no ;; *) # FIXME: insert proper C++ library support _LT_AC_TAGVAR(ld_shlibs, $1)=no ;; esac ;; solaris*) case $cc_basename in CC*) # Sun C++ 4.2, 5.x and Centerline C++ _LT_AC_TAGVAR(archive_cmds_need_lc,$1)=yes _LT_AC_TAGVAR(no_undefined_flag, $1)=' -zdefs' _LT_AC_TAGVAR(archive_cmds, $1)='$CC -G${allow_undefined_flag} -h$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' _LT_AC_TAGVAR(archive_expsym_cmds, $1)='$echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~$echo "local: *; };" >> $lib.exp~ $CC -G${allow_undefined_flag} ${wl}-M ${wl}$lib.exp -h$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~$rm $lib.exp' _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir' _LT_AC_TAGVAR(hardcode_shlibpath_var, $1)=no case $host_os in solaris2.[[0-5]] | solaris2.[[0-5]].*) ;; *) # The C++ compiler is used as linker so we must use $wl # flag to pass the commands to the underlying system # linker. We must also pass each convience library through # to the system linker between allextract/defaultextract. # The C++ compiler will combine linker options so we # cannot just pass the convience library names through # without $wl. # Supported since Solaris 2.6 (maybe 2.5.1?) _LT_AC_TAGVAR(whole_archive_flag_spec, $1)='${wl}-z ${wl}allextract`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; $echo \"$new_convenience\"` ${wl}-z ${wl}defaultextract' ;; esac _LT_AC_TAGVAR(link_all_deplibs, $1)=yes output_verbose_link_cmd='echo' # Archives containing C++ object files must be created using # "CC -xar", where "CC" is the Sun C++ compiler. This is # necessary to make sure instantiated templates are included # in the archive. _LT_AC_TAGVAR(old_archive_cmds, $1)='$CC -xar -o $oldlib $oldobjs' ;; gcx*) # Green Hills C++ Compiler _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags ${wl}-h $wl$soname -o $lib' # The C++ compiler must be used to create the archive. _LT_AC_TAGVAR(old_archive_cmds, $1)='$CC $LDFLAGS -archive -o $oldlib $oldobjs' ;; *) # GNU C++ compiler with Solaris linker if test "$GXX" = yes && test "$with_gnu_ld" = no; then _LT_AC_TAGVAR(no_undefined_flag, $1)=' ${wl}-z ${wl}defs' if $CC --version | grep -v '^2\.7' > /dev/null; then _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $LDFLAGS $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags ${wl}-h $wl$soname -o $lib' _LT_AC_TAGVAR(archive_expsym_cmds, $1)='$echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~$echo "local: *; };" >> $lib.exp~ $CC -shared -nostdlib ${wl}-M $wl$lib.exp -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~$rm $lib.exp' # Commands to make compiler produce verbose output that lists # what "hidden" libraries, object files and flags are used when # linking a shared library. output_verbose_link_cmd="$CC -shared $CFLAGS -v conftest.$objext 2>&1 | grep \"\-L\"" else # g++ 2.7 appears to require `-G' NOT `-shared' on this # platform. _LT_AC_TAGVAR(archive_cmds, $1)='$CC -G -nostdlib $LDFLAGS $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags ${wl}-h $wl$soname -o $lib' _LT_AC_TAGVAR(archive_expsym_cmds, $1)='$echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~$echo "local: *; };" >> $lib.exp~ $CC -G -nostdlib ${wl}-M $wl$lib.exp -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~$rm $lib.exp' # Commands to make compiler produce verbose output that lists # what "hidden" libraries, object files and flags are used when # linking a shared library. output_verbose_link_cmd="$CC -G $CFLAGS -v conftest.$objext 2>&1 | grep \"\-L\"" fi _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}-R $wl$libdir' fi ;; esac ;; sysv4*uw2* | sysv5OpenUNIX* | sysv5UnixWare7.[[01]].[[10]]* | unixware7* | sco3.2v5.0.[[024]]*) _LT_AC_TAGVAR(no_undefined_flag, $1)='${wl}-z,text' _LT_AC_TAGVAR(archive_cmds_need_lc, $1)=no _LT_AC_TAGVAR(hardcode_shlibpath_var, $1)=no runpath_var='LD_RUN_PATH' case $cc_basename in CC*) _LT_AC_TAGVAR(archive_cmds, $1)='$CC -G ${wl}-h,$soname -o $lib $libobjs $deplibs $compiler_flags' _LT_AC_TAGVAR(archive_expsym_cmds, $1)='$CC -G ${wl}-Bexport:$export_symbols ${wl}-h,$soname -o $lib $libobjs $deplibs $compiler_flags' ;; *) _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared ${wl}-h,$soname -o $lib $libobjs $deplibs $compiler_flags' _LT_AC_TAGVAR(archive_expsym_cmds, $1)='$CC -shared ${wl}-Bexport:$export_symbols ${wl}-h,$soname -o $lib $libobjs $deplibs $compiler_flags' ;; esac ;; sysv5* | sco3.2v5* | sco5v6*) # Note: We can NOT use -z defs as we might desire, because we do not # link with -lc, and that would cause any symbols used from libc to # always be unresolved, which means just about no library would # ever link correctly. If we're not using GNU ld we use -z text # though, which does catch some bad symbols but isn't as heavy-handed # as -z defs. # For security reasons, it is highly recommended that you always # use absolute paths for naming shared libraries, and exclude the # DT_RUNPATH tag from executables and libraries. But doing so # requires that you compile everything twice, which is a pain. # So that behaviour is only enabled if SCOABSPATH is set to a # non-empty value in the environment. Most likely only useful for # creating official distributions of packages. # This is a hack until libtool officially supports absolute path # names for shared libraries. _LT_AC_TAGVAR(no_undefined_flag, $1)='${wl}-z,text' _LT_AC_TAGVAR(allow_undefined_flag, $1)='${wl}-z,nodefs' _LT_AC_TAGVAR(archive_cmds_need_lc, $1)=no _LT_AC_TAGVAR(hardcode_shlibpath_var, $1)=no _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='`test -z "$SCOABSPATH" && echo ${wl}-R,$libdir`' _LT_AC_TAGVAR(hardcode_libdir_separator, $1)=':' _LT_AC_TAGVAR(link_all_deplibs, $1)=yes _LT_AC_TAGVAR(export_dynamic_flag_spec, $1)='${wl}-Bexport' runpath_var='LD_RUN_PATH' case $cc_basename in CC*) _LT_AC_TAGVAR(archive_cmds, $1)='$CC -G ${wl}-h,\${SCOABSPATH:+${install_libdir}/}$soname -o $lib $libobjs $deplibs $compiler_flags' _LT_AC_TAGVAR(archive_expsym_cmds, $1)='$CC -G ${wl}-Bexport:$export_symbols ${wl}-h,\${SCOABSPATH:+${install_libdir}/}$soname -o $lib $libobjs $deplibs $compiler_flags' ;; *) _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared ${wl}-h,\${SCOABSPATH:+${install_libdir}/}$soname -o $lib $libobjs $deplibs $compiler_flags' _LT_AC_TAGVAR(archive_expsym_cmds, $1)='$CC -shared ${wl}-Bexport:$export_symbols ${wl}-h,\${SCOABSPATH:+${install_libdir}/}$soname -o $lib $libobjs $deplibs $compiler_flags' ;; esac ;; tandem*) case $cc_basename in NCC*) # NonStop-UX NCC 3.20 # FIXME: insert proper C++ library support _LT_AC_TAGVAR(ld_shlibs, $1)=no ;; *) # FIXME: insert proper C++ library support _LT_AC_TAGVAR(ld_shlibs, $1)=no ;; esac ;; vxworks*) # FIXME: insert proper C++ library support _LT_AC_TAGVAR(ld_shlibs, $1)=no ;; *) # FIXME: insert proper C++ library support _LT_AC_TAGVAR(ld_shlibs, $1)=no ;; esac AC_MSG_RESULT([$_LT_AC_TAGVAR(ld_shlibs, $1)]) test "$_LT_AC_TAGVAR(ld_shlibs, $1)" = no && can_build_shared=no _LT_AC_TAGVAR(GCC, $1)="$GXX" _LT_AC_TAGVAR(LD, $1)="$LD" AC_LIBTOOL_POSTDEP_PREDEP($1) AC_LIBTOOL_PROG_COMPILER_PIC($1) AC_LIBTOOL_PROG_CC_C_O($1) AC_LIBTOOL_SYS_HARD_LINK_LOCKS($1) AC_LIBTOOL_PROG_LD_SHLIBS($1) AC_LIBTOOL_SYS_DYNAMIC_LINKER($1) AC_LIBTOOL_PROG_LD_HARDCODE_LIBPATH($1) AC_LIBTOOL_CONFIG($1) AC_LANG_POP CC=$lt_save_CC LDCXX=$LD LD=$lt_save_LD GCC=$lt_save_GCC with_gnu_ldcxx=$with_gnu_ld with_gnu_ld=$lt_save_with_gnu_ld lt_cv_path_LDCXX=$lt_cv_path_LD lt_cv_path_LD=$lt_save_path_LD lt_cv_prog_gnu_ldcxx=$lt_cv_prog_gnu_ld lt_cv_prog_gnu_ld=$lt_save_with_gnu_ld ])# AC_LIBTOOL_LANG_CXX_CONFIG # AC_LIBTOOL_POSTDEP_PREDEP([TAGNAME]) # ------------------------------------ # Figure out "hidden" library dependencies from verbose # compiler output when linking a shared library. # Parse the compiler output and extract the necessary # objects, libraries and library flags. AC_DEFUN([AC_LIBTOOL_POSTDEP_PREDEP],[ dnl we can't use the lt_simple_compile_test_code here, dnl because it contains code intended for an executable, dnl not a library. It's possible we should let each dnl tag define a new lt_????_link_test_code variable, dnl but it's only used here... ifelse([$1],[],[cat > conftest.$ac_ext < conftest.$ac_ext < conftest.$ac_ext < conftest.$ac_ext <> "$cfgfile" ifelse([$1], [], [#! $SHELL # `$echo "$cfgfile" | sed 's%^.*/%%'` - Provide generalized library-building support services. # Generated automatically by $PROGRAM (GNU $PACKAGE $VERSION$TIMESTAMP) # NOTE: Changes made to this file will be lost: look at ltmain.sh. # # Copyright (C) 1996, 1997, 1998, 1999, 2000, 2001 # Free Software Foundation, Inc. # # This file is part of GNU Libtool: # Originally by Gordon Matzigkeit , 1996 # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU # General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. # # As a special exception to the GNU General Public License, if you # distribute this file as part of a program that contains a # configuration script generated by Autoconf, you may include it under # the same distribution terms that you use for the rest of that program. # A sed program that does not truncate output. SED=$lt_SED # Sed that helps us avoid accidentally triggering echo(1) options like -n. Xsed="$SED -e 1s/^X//" # The HP-UX ksh and POSIX shell print the target directory to stdout # if CDPATH is set. (unset CDPATH) >/dev/null 2>&1 && unset CDPATH # The names of the tagged configurations supported by this script. available_tags= # ### BEGIN LIBTOOL CONFIG], [# ### BEGIN LIBTOOL TAG CONFIG: $tagname]) # Libtool was configured on host `(hostname || uname -n) 2>/dev/null | sed 1q`: # Shell to use when invoking shell scripts. SHELL=$lt_SHELL # Whether or not to build shared libraries. build_libtool_libs=$enable_shared # Whether or not to build static libraries. build_old_libs=$enable_static # Whether or not to add -lc for building shared libraries. build_libtool_need_lc=$_LT_AC_TAGVAR(archive_cmds_need_lc, $1) # Whether or not to disallow shared libs when runtime libs are static allow_libtool_libs_with_static_runtimes=$_LT_AC_TAGVAR(enable_shared_with_static_runtimes, $1) # Whether or not to optimize for fast installation. fast_install=$enable_fast_install # The host system. host_alias=$host_alias host=$host host_os=$host_os # The build system. build_alias=$build_alias build=$build build_os=$build_os # An echo program that does not interpret backslashes. echo=$lt_echo # The archiver. AR=$lt_AR AR_FLAGS=$lt_AR_FLAGS # A C compiler. LTCC=$lt_LTCC # LTCC compiler flags. LTCFLAGS=$lt_LTCFLAGS # A language-specific compiler. CC=$lt_[]_LT_AC_TAGVAR(compiler, $1) # Is the compiler the GNU C compiler? with_gcc=$_LT_AC_TAGVAR(GCC, $1) gcc_dir=\`gcc -print-file-name=. | $SED 's,/\.$,,'\` gcc_ver=\`gcc -dumpversion\` # An ERE matcher. EGREP=$lt_EGREP # The linker used to build libraries. LD=$lt_[]_LT_AC_TAGVAR(LD, $1) # Whether we need hard or soft links. LN_S=$lt_LN_S # A BSD-compatible nm program. NM=$lt_NM # A symbol stripping program STRIP=$lt_STRIP # Used to examine libraries when file_magic_cmd begins "file" MAGIC_CMD=$MAGIC_CMD # Used on cygwin: DLL creation program. DLLTOOL="$DLLTOOL" # Used on cygwin: object dumper. OBJDUMP="$OBJDUMP" # Used on cygwin: assembler. AS="$AS" # The name of the directory that contains temporary libtool files. objdir=$objdir # How to create reloadable object files. reload_flag=$lt_reload_flag reload_cmds=$lt_reload_cmds # How to pass a linker flag through the compiler. wl=$lt_[]_LT_AC_TAGVAR(lt_prog_compiler_wl, $1) # Object file suffix (normally "o"). objext="$ac_objext" # Old archive suffix (normally "a"). libext="$libext" # Shared library suffix (normally ".so"). shrext_cmds='$shrext_cmds' # Executable file suffix (normally ""). exeext="$exeext" # Additional compiler flags for building library objects. pic_flag=$lt_[]_LT_AC_TAGVAR(lt_prog_compiler_pic, $1) pic_mode=$pic_mode # What is the maximum length of a command? max_cmd_len=$lt_cv_sys_max_cmd_len # Does compiler simultaneously support -c and -o options? compiler_c_o=$lt_[]_LT_AC_TAGVAR(lt_cv_prog_compiler_c_o, $1) # Must we lock files when doing compilation? need_locks=$lt_need_locks # Do we need the lib prefix for modules? need_lib_prefix=$need_lib_prefix # Do we need a version for libraries? need_version=$need_version # Whether dlopen is supported. dlopen_support=$enable_dlopen # Whether dlopen of programs is supported. dlopen_self=$enable_dlopen_self # Whether dlopen of statically linked programs is supported. dlopen_self_static=$enable_dlopen_self_static # Compiler flag to prevent dynamic linking. link_static_flag=$lt_[]_LT_AC_TAGVAR(lt_prog_compiler_static, $1) # Compiler flag to turn off builtin functions. no_builtin_flag=$lt_[]_LT_AC_TAGVAR(lt_prog_compiler_no_builtin_flag, $1) # Compiler flag to allow reflexive dlopens. export_dynamic_flag_spec=$lt_[]_LT_AC_TAGVAR(export_dynamic_flag_spec, $1) # Compiler flag to generate shared objects directly from archives. whole_archive_flag_spec=$lt_[]_LT_AC_TAGVAR(whole_archive_flag_spec, $1) # Compiler flag to generate thread-safe objects. thread_safe_flag_spec=$lt_[]_LT_AC_TAGVAR(thread_safe_flag_spec, $1) # Library versioning type. version_type=$version_type # Format of library name prefix. libname_spec=$lt_libname_spec # List of archive names. First name is the real one, the rest are links. # The last name is the one that the linker finds with -lNAME. library_names_spec=$lt_library_names_spec # The coded name of the library, if different from the real name. soname_spec=$lt_soname_spec # Commands used to build and install an old-style archive. RANLIB=$lt_RANLIB old_archive_cmds=$lt_[]_LT_AC_TAGVAR(old_archive_cmds, $1) old_postinstall_cmds=$lt_old_postinstall_cmds old_postuninstall_cmds=$lt_old_postuninstall_cmds # Create an old-style archive from a shared archive. old_archive_from_new_cmds=$lt_[]_LT_AC_TAGVAR(old_archive_from_new_cmds, $1) # Create a temporary old-style archive to link instead of a shared archive. old_archive_from_expsyms_cmds=$lt_[]_LT_AC_TAGVAR(old_archive_from_expsyms_cmds, $1) # Commands used to build and install a shared archive. archive_cmds=$lt_[]_LT_AC_TAGVAR(archive_cmds, $1) archive_expsym_cmds=$lt_[]_LT_AC_TAGVAR(archive_expsym_cmds, $1) postinstall_cmds=$lt_postinstall_cmds postuninstall_cmds=$lt_postuninstall_cmds # Commands used to build a loadable module (assumed same as above if empty) module_cmds=$lt_[]_LT_AC_TAGVAR(module_cmds, $1) module_expsym_cmds=$lt_[]_LT_AC_TAGVAR(module_expsym_cmds, $1) # Commands to strip libraries. old_striplib=$lt_old_striplib striplib=$lt_striplib # Dependencies to place before the objects being linked to create a # shared library. predep_objects=\`echo $lt_[]_LT_AC_TAGVAR(predep_objects, $1) | \$SED -e "s@\${gcc_dir}@\\\${gcc_dir}@g;s@\${gcc_ver}@\\\${gcc_ver}@g"\` # Dependencies to place after the objects being linked to create a # shared library. postdep_objects=\`echo $lt_[]_LT_AC_TAGVAR(postdep_objects, $1) | \$SED -e "s@\${gcc_dir}@\\\${gcc_dir}@g;s@\${gcc_ver}@\\\${gcc_ver}@g"\` # Dependencies to place before the objects being linked to create a # shared library. predeps=$lt_[]_LT_AC_TAGVAR(predeps, $1) # Dependencies to place after the objects being linked to create a # shared library. postdeps=$lt_[]_LT_AC_TAGVAR(postdeps, $1) # The library search path used internally by the compiler when linking # a shared library. compiler_lib_search_path=\`echo $lt_[]_LT_AC_TAGVAR(compiler_lib_search_path, $1) | \$SED -e "s@\${gcc_dir}@\\\${gcc_dir}@g;s@\${gcc_ver}@\\\${gcc_ver}@g"\` # Method to check whether dependent libraries are shared objects. deplibs_check_method=$lt_deplibs_check_method # Command to use when deplibs_check_method == file_magic. file_magic_cmd=$lt_file_magic_cmd # Flag that allows shared libraries with undefined symbols to be built. allow_undefined_flag=$lt_[]_LT_AC_TAGVAR(allow_undefined_flag, $1) # Flag that forces no undefined symbols. no_undefined_flag=$lt_[]_LT_AC_TAGVAR(no_undefined_flag, $1) # Commands used to finish a libtool library installation in a directory. finish_cmds=$lt_finish_cmds # Same as above, but a single script fragment to be evaled but not shown. finish_eval=$lt_finish_eval # Take the output of nm and produce a listing of raw symbols and C names. global_symbol_pipe=$lt_lt_cv_sys_global_symbol_pipe # Transform the output of nm in a proper C declaration global_symbol_to_cdecl=$lt_lt_cv_sys_global_symbol_to_cdecl # Transform the output of nm in a C name address pair global_symbol_to_c_name_address=$lt_lt_cv_sys_global_symbol_to_c_name_address # This is the shared library runtime path variable. runpath_var=$runpath_var # This is the shared library path variable. shlibpath_var=$shlibpath_var # Is shlibpath searched before the hard-coded library search path? shlibpath_overrides_runpath=$shlibpath_overrides_runpath # How to hardcode a shared library path into an executable. hardcode_action=$_LT_AC_TAGVAR(hardcode_action, $1) # Whether we should hardcode library paths into libraries. hardcode_into_libs=$hardcode_into_libs # Flag to hardcode \$libdir into a binary during linking. # This must work even if \$libdir does not exist. hardcode_libdir_flag_spec=$lt_[]_LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1) # If ld is used when linking, flag to hardcode \$libdir into # a binary during linking. This must work even if \$libdir does # not exist. hardcode_libdir_flag_spec_ld=$lt_[]_LT_AC_TAGVAR(hardcode_libdir_flag_spec_ld, $1) # Whether we need a single -rpath flag with a separated argument. hardcode_libdir_separator=$lt_[]_LT_AC_TAGVAR(hardcode_libdir_separator, $1) # Set to yes if using DIR/libNAME${shared_ext} during linking hardcodes DIR into the # resulting binary. hardcode_direct=$_LT_AC_TAGVAR(hardcode_direct, $1) # Set to yes if using the -LDIR flag during linking hardcodes DIR into the # resulting binary. hardcode_minus_L=$_LT_AC_TAGVAR(hardcode_minus_L, $1) # Set to yes if using SHLIBPATH_VAR=DIR during linking hardcodes DIR into # the resulting binary. hardcode_shlibpath_var=$_LT_AC_TAGVAR(hardcode_shlibpath_var, $1) # Set to yes if building a shared library automatically hardcodes DIR into the library # and all subsequent libraries and executables linked against it. hardcode_automatic=$_LT_AC_TAGVAR(hardcode_automatic, $1) # Variables whose values should be saved in libtool wrapper scripts and # restored at relink time. variables_saved_for_relink="$variables_saved_for_relink" # Whether libtool must link a program against all its dependency libraries. link_all_deplibs=$_LT_AC_TAGVAR(link_all_deplibs, $1) # Compile-time system search path for libraries sys_lib_search_path_spec=\`echo $lt_sys_lib_search_path_spec | \$SED -e "s@\${gcc_dir}@\\\${gcc_dir}@g;s@\${gcc_ver}@\\\${gcc_ver}@g"\` # Run-time system search path for libraries sys_lib_dlsearch_path_spec=$lt_sys_lib_dlsearch_path_spec # Fix the shell variable \$srcfile for the compiler. fix_srcfile_path="$_LT_AC_TAGVAR(fix_srcfile_path, $1)" # Set to yes if exported symbols are required. always_export_symbols=$_LT_AC_TAGVAR(always_export_symbols, $1) # The commands to list exported symbols. export_symbols_cmds=$lt_[]_LT_AC_TAGVAR(export_symbols_cmds, $1) # The commands to extract the exported symbol list from a shared archive. extract_expsyms_cmds=$lt_extract_expsyms_cmds # Symbols that should not be listed in the preloaded symbols. exclude_expsyms=$lt_[]_LT_AC_TAGVAR(exclude_expsyms, $1) # Symbols that must always be exported. include_expsyms=$lt_[]_LT_AC_TAGVAR(include_expsyms, $1) ifelse([$1],[], [# ### END LIBTOOL CONFIG], [# ### END LIBTOOL TAG CONFIG: $tagname]) __EOF__ ifelse([$1],[], [ case $host_os in aix3*) cat <<\EOF >> "$cfgfile" # AIX sometimes has problems with the GCC collect2 program. For some # reason, if we set the COLLECT_NAMES environment variable, the problems # vanish in a puff of smoke. if test "X${COLLECT_NAMES+set}" != Xset; then COLLECT_NAMES= export COLLECT_NAMES fi EOF ;; esac # We use sed instead of cat because bash on DJGPP gets confused if # if finds mixed CR/LF and LF-only lines. Since sed operates in # text mode, it properly converts lines to CR/LF. This bash problem # is reportedly fixed, but why not run on old versions too? sed '$q' "$ltmain" >> "$cfgfile" || (rm -f "$cfgfile"; exit 1) mv -f "$cfgfile" "$ofile" || \ (rm -f "$ofile" && cp "$cfgfile" "$ofile" && rm -f "$cfgfile") chmod +x "$ofile" ]) else # If there is no Makefile yet, we rely on a make rule to execute # `config.status --recheck' to rerun these tests and create the # libtool script then. ltmain_in=`echo $ltmain | sed -e 's/\.sh$/.in/'` if test -f "$ltmain_in"; then test -f Makefile && make "$ltmain" fi fi ])# AC_LIBTOOL_CONFIG # AC_LIBTOOL_PROG_COMPILER_NO_RTTI([TAGNAME]) # ------------------------------------------- AC_DEFUN([AC_LIBTOOL_PROG_COMPILER_NO_RTTI], [AC_REQUIRE([_LT_AC_SYS_COMPILER])dnl _LT_AC_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)= if test "$GCC" = yes; then _LT_AC_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)=' -fno-builtin' AC_LIBTOOL_COMPILER_OPTION([if $compiler supports -fno-rtti -fno-exceptions], lt_cv_prog_compiler_rtti_exceptions, [-fno-rtti -fno-exceptions], [], [_LT_AC_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)="$_LT_AC_TAGVAR(lt_prog_compiler_no_builtin_flag, $1) -fno-rtti -fno-exceptions"]) fi ])# AC_LIBTOOL_PROG_COMPILER_NO_RTTI # AC_LIBTOOL_SYS_GLOBAL_SYMBOL_PIPE # --------------------------------- AC_DEFUN([AC_LIBTOOL_SYS_GLOBAL_SYMBOL_PIPE], [AC_REQUIRE([AC_CANONICAL_HOST]) AC_REQUIRE([AC_PROG_NM]) AC_REQUIRE([AC_OBJEXT]) # Check for command to grab the raw symbol name followed by C symbol from nm. AC_MSG_CHECKING([command to parse $NM output from $compiler object]) AC_CACHE_VAL([lt_cv_sys_global_symbol_pipe], [ # These are sane defaults that work on at least a few old systems. # [They come from Ultrix. What could be older than Ultrix?!! ;)] # Character class describing NM global symbol codes. symcode='[[BCDEGRST]]' # Regexp to match symbols that can be accessed directly from C. sympat='\([[_A-Za-z]][[_A-Za-z0-9]]*\)' # Transform an extracted symbol line into a proper C declaration lt_cv_sys_global_symbol_to_cdecl="sed -n -e 's/^. .* \(.*\)$/extern int \1;/p'" # Transform an extracted symbol line into symbol name and symbol address lt_cv_sys_global_symbol_to_c_name_address="sed -n -e 's/^: \([[^ ]]*\) $/ {\\\"\1\\\", (lt_ptr) 0},/p' -e 's/^$symcode \([[^ ]]*\) \([[^ ]]*\)$/ {\"\2\", (lt_ptr) \&\2},/p'" # Define system-specific variables. case $host_os in aix*) symcode='[[BCDT]]' ;; cygwin* | mingw* | pw32*) symcode='[[ABCDGISTW]]' ;; hpux*) # Its linker distinguishes data from code symbols if test "$host_cpu" = ia64; then symcode='[[ABCDEGRST]]' fi lt_cv_sys_global_symbol_to_cdecl="sed -n -e 's/^T .* \(.*\)$/extern int \1();/p' -e 's/^$symcode* .* \(.*\)$/extern char \1;/p'" lt_cv_sys_global_symbol_to_c_name_address="sed -n -e 's/^: \([[^ ]]*\) $/ {\\\"\1\\\", (lt_ptr) 0},/p' -e 's/^$symcode* \([[^ ]]*\) \([[^ ]]*\)$/ {\"\2\", (lt_ptr) \&\2},/p'" ;; linux*) if test "$host_cpu" = ia64; then symcode='[[ABCDGIRSTW]]' lt_cv_sys_global_symbol_to_cdecl="sed -n -e 's/^T .* \(.*\)$/extern int \1();/p' -e 's/^$symcode* .* \(.*\)$/extern char \1;/p'" lt_cv_sys_global_symbol_to_c_name_address="sed -n -e 's/^: \([[^ ]]*\) $/ {\\\"\1\\\", (lt_ptr) 0},/p' -e 's/^$symcode* \([[^ ]]*\) \([[^ ]]*\)$/ {\"\2\", (lt_ptr) \&\2},/p'" fi ;; irix* | nonstopux*) symcode='[[BCDEGRST]]' ;; osf*) symcode='[[BCDEGQRST]]' ;; solaris*) symcode='[[BDRT]]' ;; sco3.2v5*) symcode='[[DT]]' ;; sysv4.2uw2*) symcode='[[DT]]' ;; sysv5* | sco5v6* | unixware* | OpenUNIX*) symcode='[[ABDT]]' ;; sysv4) symcode='[[DFNSTU]]' ;; esac # Handle CRLF in mingw tool chain opt_cr= case $build_os in mingw*) opt_cr=`echo 'x\{0,1\}' | tr x '\015'` # option cr in regexp ;; esac # If we're using GNU nm, then use its standard symbol codes. case `$NM -V 2>&1` in *GNU* | *'with BFD'*) symcode='[[ABCDGIRSTW]]' ;; esac # Try without a prefix undercore, then with it. for ac_symprfx in "" "_"; do # Transform symcode, sympat, and symprfx into a raw symbol and a C symbol. symxfrm="\\1 $ac_symprfx\\2 \\2" # Write the raw and C identifiers. lt_cv_sys_global_symbol_pipe="sed -n -e 's/^.*[[ ]]\($symcode$symcode*\)[[ ]][[ ]]*$ac_symprfx$sympat$opt_cr$/$symxfrm/p'" # Check to see that the pipe works correctly. pipe_works=no rm -f conftest* cat > conftest.$ac_ext < $nlist) && test -s "$nlist"; then # Try sorting and uniquifying the output. if sort "$nlist" | uniq > "$nlist"T; then mv -f "$nlist"T "$nlist" else rm -f "$nlist"T fi # Make sure that we snagged all the symbols we need. if grep ' nm_test_var$' "$nlist" >/dev/null; then if grep ' nm_test_func$' "$nlist" >/dev/null; then cat < conftest.$ac_ext #ifdef __cplusplus extern "C" { #endif EOF # Now generate the symbol file. eval "$lt_cv_sys_global_symbol_to_cdecl"' < "$nlist" | grep -v main >> conftest.$ac_ext' cat <> conftest.$ac_ext #if defined (__STDC__) && __STDC__ # define lt_ptr_t void * #else # define lt_ptr_t char * # define const #endif /* The mapping between symbol names and symbols. */ const struct { const char *name; lt_ptr_t address; } lt_preloaded_symbols[[]] = { EOF $SED "s/^$symcode$symcode* \(.*\) \(.*\)$/ {\"\2\", (lt_ptr_t) \&\2},/" < "$nlist" | grep -v main >> conftest.$ac_ext cat <<\EOF >> conftest.$ac_ext {0, (lt_ptr_t) 0} }; #ifdef __cplusplus } #endif EOF # Now try linking the two files. mv conftest.$ac_objext conftstm.$ac_objext lt_save_LIBS="$LIBS" lt_save_CFLAGS="$CFLAGS" LIBS="conftstm.$ac_objext" CFLAGS="$CFLAGS$_LT_AC_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)" if AC_TRY_EVAL(ac_link) && test -s conftest${ac_exeext}; then pipe_works=yes fi LIBS="$lt_save_LIBS" CFLAGS="$lt_save_CFLAGS" else echo "cannot find nm_test_func in $nlist" >&AS_MESSAGE_LOG_FD fi else echo "cannot find nm_test_var in $nlist" >&AS_MESSAGE_LOG_FD fi else echo "cannot run $lt_cv_sys_global_symbol_pipe" >&AS_MESSAGE_LOG_FD fi else echo "$progname: failed program was:" >&AS_MESSAGE_LOG_FD cat conftest.$ac_ext >&5 fi rm -f conftest* conftst* # Do not use the global_symbol_pipe unless it works. if test "$pipe_works" = yes; then break else lt_cv_sys_global_symbol_pipe= fi done ]) if test -z "$lt_cv_sys_global_symbol_pipe"; then lt_cv_sys_global_symbol_to_cdecl= fi if test -z "$lt_cv_sys_global_symbol_pipe$lt_cv_sys_global_symbol_to_cdecl"; then AC_MSG_RESULT(failed) else AC_MSG_RESULT(ok) fi ]) # AC_LIBTOOL_SYS_GLOBAL_SYMBOL_PIPE # AC_LIBTOOL_PROG_COMPILER_PIC([TAGNAME]) # --------------------------------------- AC_DEFUN([AC_LIBTOOL_PROG_COMPILER_PIC], [_LT_AC_TAGVAR(lt_prog_compiler_wl, $1)= _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)= _LT_AC_TAGVAR(lt_prog_compiler_static, $1)= AC_MSG_CHECKING([for $compiler option to produce PIC]) ifelse([$1],[CXX],[ # C++ specific cases for pic, static, wl, etc. if test "$GXX" = yes; then _LT_AC_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='-static' case $host_os in aix*) # All AIX code is PIC. if test "$host_cpu" = ia64; then # AIX 5 now supports IA64 processor _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' fi ;; amigaos*) # FIXME: we need at least 68020 code to build shared libraries, but # adding the `-m68020' flag to GCC prevents building anything better, # like `-m68040'. _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-m68020 -resident32 -malways-restore-a4' ;; beos* | cygwin* | irix5* | irix6* | nonstopux* | osf3* | osf4* | osf5*) # PIC is the default for these OSes. ;; mingw* | os2* | pw32*) # This hack is so that the source file can tell whether it is being # built for inclusion in a dll (and should export symbols for example). _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-DDLL_EXPORT' ;; darwin* | rhapsody*) # PIC is the default on this platform # Common symbols not allowed in MH_DYLIB files _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-fno-common' ;; *djgpp*) # DJGPP does not support shared libraries at all _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)= ;; interix3*) # Interix 3.x gcc -fpic/-fPIC options generate broken code. # Instead, we relocate shared libraries at runtime. ;; sysv4*MP*) if test -d /usr/nec; then _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)=-Kconform_pic fi ;; hpux*) # PIC is the default for IA64 HP-UX and 64-bit HP-UX, but # not for PA HP-UX. case $host_cpu in hppa*64*|ia64*) ;; *) _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' ;; esac ;; *) _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' ;; esac else case $host_os in aix4* | aix5*) # All AIX code is PIC. if test "$host_cpu" = ia64; then # AIX 5 now supports IA64 processor _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' else _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='-bnso -bI:/lib/syscalls.exp' fi ;; chorus*) case $cc_basename in cxch68*) # Green Hills C++ Compiler # _LT_AC_TAGVAR(lt_prog_compiler_static, $1)="--no_auto_instantiation -u __main -u __premain -u _abort -r $COOL_DIR/lib/libOrb.a $MVME_DIR/lib/CC/libC.a $MVME_DIR/lib/classix/libcx.s.a" ;; esac ;; darwin*) # PIC is the default on this platform # Common symbols not allowed in MH_DYLIB files case $cc_basename in xlc*) _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-qnocommon' _LT_AC_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' ;; esac ;; dgux*) case $cc_basename in ec++*) _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' ;; ghcx*) # Green Hills C++ Compiler _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-pic' ;; *) ;; esac ;; freebsd* | kfreebsd*-gnu | dragonfly*) # FreeBSD uses GNU C++ ;; hpux9* | hpux10* | hpux11*) case $cc_basename in CC*) _LT_AC_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='${wl}-a ${wl}archive' if test "$host_cpu" != ia64; then _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='+Z' fi ;; aCC*) _LT_AC_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='${wl}-a ${wl}archive' case $host_cpu in hppa*64*|ia64*) # +Z the default ;; *) _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='+Z' ;; esac ;; *) ;; esac ;; interix*) # This is c89, which is MS Visual C++ (no shared libs) # Anyone wants to do a port? ;; irix5* | irix6* | nonstopux*) case $cc_basename in CC*) _LT_AC_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='-non_shared' # CC pic flag -KPIC is the default. ;; *) ;; esac ;; linux*) case $cc_basename in KCC*) # KAI C++ Compiler _LT_AC_TAGVAR(lt_prog_compiler_wl, $1)='--backend -Wl,' _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' ;; icpc* | ecpc*) # Intel C++ _LT_AC_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='-static' ;; pgCC*) # Portland Group C++ compiler. _LT_AC_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-fpic' _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; cxx*) # Compaq C++ # Make sure the PIC flag is empty. It appears that all Alpha # Linux and Compaq Tru64 Unix objects are PIC. _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)= _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='-non_shared' ;; *) ;; esac ;; lynxos*) ;; m88k*) ;; mvs*) case $cc_basename in cxx*) _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-W c,exportall' ;; *) ;; esac ;; netbsd*) ;; osf3* | osf4* | osf5*) case $cc_basename in KCC*) _LT_AC_TAGVAR(lt_prog_compiler_wl, $1)='--backend -Wl,' ;; RCC*) # Rational C++ 2.4.1 _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-pic' ;; cxx*) # Digital/Compaq C++ _LT_AC_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' # Make sure the PIC flag is empty. It appears that all Alpha # Linux and Compaq Tru64 Unix objects are PIC. _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)= _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='-non_shared' ;; *) ;; esac ;; psos*) ;; solaris*) case $cc_basename in CC*) # Sun C++ 4.2, 5.x and Centerline C++ _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' _LT_AC_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld ' ;; gcx*) # Green Hills C++ Compiler _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-PIC' ;; *) ;; esac ;; sunos4*) case $cc_basename in CC*) # Sun C++ 4.x _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-pic' _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; lcc*) # Lucid _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-pic' ;; *) ;; esac ;; tandem*) case $cc_basename in NCC*) # NonStop-UX NCC 3.20 _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' ;; *) ;; esac ;; sysv5* | unixware* | sco3.2v5* | sco5v6* | OpenUNIX*) case $cc_basename in CC*) _LT_AC_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; esac ;; vxworks*) ;; *) _LT_AC_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no ;; esac fi ], [ if test "$GCC" = yes; then _LT_AC_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='-static' case $host_os in aix*) # All AIX code is PIC. if test "$host_cpu" = ia64; then # AIX 5 now supports IA64 processor _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' fi ;; amigaos*) # FIXME: we need at least 68020 code to build shared libraries, but # adding the `-m68020' flag to GCC prevents building anything better, # like `-m68040'. _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-m68020 -resident32 -malways-restore-a4' ;; beos* | cygwin* | irix5* | irix6* | nonstopux* | osf3* | osf4* | osf5*) # PIC is the default for these OSes. ;; mingw* | pw32* | os2*) # This hack is so that the source file can tell whether it is being # built for inclusion in a dll (and should export symbols for example). _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-DDLL_EXPORT' ;; darwin* | rhapsody*) # PIC is the default on this platform # Common symbols not allowed in MH_DYLIB files _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-fno-common' ;; interix3*) # Interix 3.x gcc -fpic/-fPIC options generate broken code. # Instead, we relocate shared libraries at runtime. ;; msdosdjgpp*) # Just because we use GCC doesn't mean we suddenly get shared libraries # on systems that don't support them. _LT_AC_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no enable_shared=no ;; sysv4*MP*) if test -d /usr/nec; then _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)=-Kconform_pic fi ;; hpux*) # PIC is the default for IA64 HP-UX and 64-bit HP-UX, but # not for PA HP-UX. case $host_cpu in hppa*64*|ia64*) # +Z the default ;; *) _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' ;; esac ;; *) _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' ;; esac else # PORTME Check for flag to pass linker flags through the system compiler. case $host_os in aix*) _LT_AC_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' if test "$host_cpu" = ia64; then # AIX 5 now supports IA64 processor _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' else _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='-bnso -bI:/lib/syscalls.exp' fi ;; darwin*) # PIC is the default on this platform # Common symbols not allowed in MH_DYLIB files case $cc_basename in xlc*) _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-qnocommon' _LT_AC_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' ;; esac ;; mingw* | pw32* | os2*) # This hack is so that the source file can tell whether it is being # built for inclusion in a dll (and should export symbols for example). _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-DDLL_EXPORT' ;; hpux9* | hpux10* | hpux11*) _LT_AC_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' # PIC is the default for IA64 HP-UX and 64-bit HP-UX, but # not for PA HP-UX. case $host_cpu in hppa*64*|ia64*) # +Z the default ;; *) _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='+Z' ;; esac # Is there a better lt_prog_compiler_static that works with the bundled CC? _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='${wl}-a ${wl}archive' ;; irix5* | irix6* | nonstopux*) _LT_AC_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' # PIC (with -KPIC) is the default. _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='-non_shared' ;; newsos6) _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; linux*) case $cc_basename in icc* | ecc*) _LT_AC_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='-static' ;; pgcc* | pgf77* | pgf90* | pgf95*) # Portland Group compilers (*not* the Pentium gcc compiler, # which looks to be a dead project) _LT_AC_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-fpic' _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; ccc*) _LT_AC_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' # All Alpha code is PIC. _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='-non_shared' ;; esac ;; osf3* | osf4* | osf5*) _LT_AC_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' # All OSF/1 code is PIC. _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='-non_shared' ;; solaris*) _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' case $cc_basename in f77* | f90* | f95*) _LT_AC_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld ';; *) _LT_AC_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,';; esac ;; sunos4*) _LT_AC_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld ' _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-PIC' _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; sysv4 | sysv4.2uw2* | sysv4.3*) _LT_AC_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; sysv4*MP*) if test -d /usr/nec ;then _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-Kconform_pic' _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' fi ;; sysv5* | unixware* | sco3.2v5* | sco5v6* | OpenUNIX*) _LT_AC_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; unicos*) _LT_AC_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_AC_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no ;; uts4*) _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)='-pic' _LT_AC_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; *) _LT_AC_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no ;; esac fi ]) AC_MSG_RESULT([$_LT_AC_TAGVAR(lt_prog_compiler_pic, $1)]) # # Check to make sure the PIC flag actually works. # if test -n "$_LT_AC_TAGVAR(lt_prog_compiler_pic, $1)"; then AC_LIBTOOL_COMPILER_OPTION([if $compiler PIC flag $_LT_AC_TAGVAR(lt_prog_compiler_pic, $1) works], _LT_AC_TAGVAR(lt_prog_compiler_pic_works, $1), [$_LT_AC_TAGVAR(lt_prog_compiler_pic, $1)ifelse([$1],[],[ -DPIC],[ifelse([$1],[CXX],[ -DPIC],[])])], [], [case $_LT_AC_TAGVAR(lt_prog_compiler_pic, $1) in "" | " "*) ;; *) _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)=" $_LT_AC_TAGVAR(lt_prog_compiler_pic, $1)" ;; esac], [_LT_AC_TAGVAR(lt_prog_compiler_pic, $1)= _LT_AC_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no]) fi case $host_os in # For platforms which do not support PIC, -DPIC is meaningless: *djgpp*) _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)= ;; *) _LT_AC_TAGVAR(lt_prog_compiler_pic, $1)="$_LT_AC_TAGVAR(lt_prog_compiler_pic, $1)ifelse([$1],[],[ -DPIC],[ifelse([$1],[CXX],[ -DPIC],[])])" ;; esac # # Check to make sure the static flag actually works. # wl=$_LT_AC_TAGVAR(lt_prog_compiler_wl, $1) eval lt_tmp_static_flag=\"$_LT_AC_TAGVAR(lt_prog_compiler_static, $1)\" AC_LIBTOOL_LINKER_OPTION([if $compiler static flag $lt_tmp_static_flag works], _LT_AC_TAGVAR(lt_prog_compiler_static_works, $1), $lt_tmp_static_flag, [], [_LT_AC_TAGVAR(lt_prog_compiler_static, $1)=]) ]) # AC_LIBTOOL_PROG_LD_SHLIBS([TAGNAME]) # ------------------------------------ # See if the linker supports building shared libraries. AC_DEFUN([AC_LIBTOOL_PROG_LD_SHLIBS], [AC_MSG_CHECKING([whether the $compiler linker ($LD) supports shared libraries]) ifelse([$1],[CXX],[ _LT_AC_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols' case $host_os in aix4* | aix5*) # If we're using GNU nm, then we don't want the "-C" option. # -C means demangle to AIX nm, but means don't demangle with GNU nm if $NM -V 2>&1 | grep 'GNU' > /dev/null; then _LT_AC_TAGVAR(export_symbols_cmds, $1)='$NM -Bpg $libobjs $convenience | awk '\''{ if (((\[$]2 == "T") || (\[$]2 == "D") || (\[$]2 == "B")) && ([substr](\[$]3,1,1) != ".")) { print \[$]3 } }'\'' | sort -u > $export_symbols' else _LT_AC_TAGVAR(export_symbols_cmds, $1)='$NM -BCpg $libobjs $convenience | awk '\''{ if (((\[$]2 == "T") || (\[$]2 == "D") || (\[$]2 == "B")) && ([substr](\[$]3,1,1) != ".")) { print \[$]3 } }'\'' | sort -u > $export_symbols' fi ;; pw32*) _LT_AC_TAGVAR(export_symbols_cmds, $1)="$ltdll_cmds" ;; cygwin* | mingw*) _LT_AC_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[[BCDGRS]] /s/.* \([[^ ]]*\)/\1 DATA/;/^.* __nm__/s/^.* __nm__\([[^ ]]*\) [[^ ]]*/\1 DATA/;/^I /d;/^[[AITW]] /s/.* //'\'' | sort | uniq > $export_symbols' ;; *) _LT_AC_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols' ;; esac ],[ runpath_var= _LT_AC_TAGVAR(allow_undefined_flag, $1)= _LT_AC_TAGVAR(enable_shared_with_static_runtimes, $1)=no _LT_AC_TAGVAR(archive_cmds, $1)= _LT_AC_TAGVAR(archive_expsym_cmds, $1)= _LT_AC_TAGVAR(old_archive_From_new_cmds, $1)= _LT_AC_TAGVAR(old_archive_from_expsyms_cmds, $1)= _LT_AC_TAGVAR(export_dynamic_flag_spec, $1)= _LT_AC_TAGVAR(whole_archive_flag_spec, $1)= _LT_AC_TAGVAR(thread_safe_flag_spec, $1)= _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)= _LT_AC_TAGVAR(hardcode_libdir_flag_spec_ld, $1)= _LT_AC_TAGVAR(hardcode_libdir_separator, $1)= _LT_AC_TAGVAR(hardcode_direct, $1)=no _LT_AC_TAGVAR(hardcode_minus_L, $1)=no _LT_AC_TAGVAR(hardcode_shlibpath_var, $1)=unsupported _LT_AC_TAGVAR(link_all_deplibs, $1)=unknown _LT_AC_TAGVAR(hardcode_automatic, $1)=no _LT_AC_TAGVAR(module_cmds, $1)= _LT_AC_TAGVAR(module_expsym_cmds, $1)= _LT_AC_TAGVAR(always_export_symbols, $1)=no _LT_AC_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols' # include_expsyms should be a list of space-separated symbols to be *always* # included in the symbol list _LT_AC_TAGVAR(include_expsyms, $1)= # exclude_expsyms can be an extended regexp of symbols to exclude # it will be wrapped by ` (' and `)$', so one must not match beginning or # end of line. Example: `a|bc|.*d.*' will exclude the symbols `a' and `bc', # as well as any symbol that contains `d'. _LT_AC_TAGVAR(exclude_expsyms, $1)="_GLOBAL_OFFSET_TABLE_" # Although _GLOBAL_OFFSET_TABLE_ is a valid symbol C name, most a.out # platforms (ab)use it in PIC code, but their linkers get confused if # the symbol is explicitly referenced. Since portable code cannot # rely on this symbol name, it's probably fine to never include it in # preloaded symbol tables. extract_expsyms_cmds= # Just being paranoid about ensuring that cc_basename is set. _LT_CC_BASENAME([$compiler]) case $host_os in cygwin* | mingw* | pw32*) # FIXME: the MSVC++ port hasn't been tested in a loooong time # When not using gcc, we currently assume that we are using # Microsoft Visual C++. if test "$GCC" != yes; then with_gnu_ld=no fi ;; interix*) # we just hope/assume this is gcc and not c89 (= MSVC++) with_gnu_ld=yes ;; openbsd*) with_gnu_ld=no ;; esac _LT_AC_TAGVAR(ld_shlibs, $1)=yes if test "$with_gnu_ld" = yes; then # If archive_cmds runs LD, not CC, wlarc should be empty wlarc='${wl}' # Set some defaults for GNU ld with shared library support. These # are reset later if shared libraries are not supported. Putting them # here allows them to be overridden if necessary. runpath_var=LD_RUN_PATH _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}--rpath ${wl}$libdir' _LT_AC_TAGVAR(export_dynamic_flag_spec, $1)='${wl}--export-dynamic' # ancient GNU ld didn't support --whole-archive et. al. if $LD --help 2>&1 | grep 'no-whole-archive' > /dev/null; then _LT_AC_TAGVAR(whole_archive_flag_spec, $1)="$wlarc"'--whole-archive$convenience '"$wlarc"'--no-whole-archive' else _LT_AC_TAGVAR(whole_archive_flag_spec, $1)= fi supports_anon_versioning=no case `$LD -v 2>/dev/null` in *\ [[01]].* | *\ 2.[[0-9]].* | *\ 2.10.*) ;; # catch versions < 2.11 *\ 2.11.93.0.2\ *) supports_anon_versioning=yes ;; # RH7.3 ... *\ 2.11.92.0.12\ *) supports_anon_versioning=yes ;; # Mandrake 8.2 ... *\ 2.11.*) ;; # other 2.11 versions *) supports_anon_versioning=yes ;; esac # See if GNU ld supports shared libraries. case $host_os in aix3* | aix4* | aix5*) # On AIX/PPC, the GNU linker is very broken if test "$host_cpu" != ia64; then _LT_AC_TAGVAR(ld_shlibs, $1)=no cat <&2 *** Warning: the GNU linker, at least up to release 2.9.1, is reported *** to be unable to reliably create shared libraries on AIX. *** Therefore, libtool is disabling shared libraries support. If you *** really care for shared libraries, you may want to modify your PATH *** so that a non-GNU linker is found, and then restart. EOF fi ;; amigaos*) _LT_AC_TAGVAR(archive_cmds, $1)='$rm $output_objdir/a2ixlibrary.data~$echo "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$echo "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$echo "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$echo "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)' _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_AC_TAGVAR(hardcode_minus_L, $1)=yes # Samuel A. Falvo II reports # that the semantics of dynamic libraries on AmigaOS, at least up # to version 4, is to share data among multiple programs linked # with the same dynamic library. Since this doesn't match the # behavior of shared libraries on other platforms, we can't use # them. _LT_AC_TAGVAR(ld_shlibs, $1)=no ;; beos*) if $LD --help 2>&1 | grep ': supported targets:.* elf' > /dev/null; then _LT_AC_TAGVAR(allow_undefined_flag, $1)=unsupported # Joseph Beckenbach says some releases of gcc # support --undefined. This deserves some investigation. FIXME _LT_AC_TAGVAR(archive_cmds, $1)='$CC -nostart $libobjs $deplibs $compiler_flags ${wl}-soname $wl$soname -o $lib' else _LT_AC_TAGVAR(ld_shlibs, $1)=no fi ;; cygwin* | mingw* | pw32*) # _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1) is actually meaningless, # as there is no search path for DLLs. _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_AC_TAGVAR(allow_undefined_flag, $1)=unsupported _LT_AC_TAGVAR(always_export_symbols, $1)=no _LT_AC_TAGVAR(enable_shared_with_static_runtimes, $1)=yes _LT_AC_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[[BCDGRS]] /s/.* \([[^ ]]*\)/\1 DATA/'\'' | $SED -e '\''/^[[AITW]] /s/.* //'\'' | sort | uniq > $export_symbols' if $LD --help 2>&1 | grep 'auto-import' > /dev/null; then _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags -o $output_objdir/$soname ${wl}--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib' # If the export-symbols file already is a .def file (1st line # is EXPORTS), use it as is; otherwise, prepend... _LT_AC_TAGVAR(archive_expsym_cmds, $1)='if test "x`$SED 1q $export_symbols`" = xEXPORTS; then cp $export_symbols $output_objdir/$soname.def; else echo EXPORTS > $output_objdir/$soname.def; cat $export_symbols >> $output_objdir/$soname.def; fi~ $CC -shared $output_objdir/$soname.def $libobjs $deplibs $compiler_flags -o $output_objdir/$soname ${wl}--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib' else _LT_AC_TAGVAR(ld_shlibs, $1)=no fi ;; interix3*) _LT_AC_TAGVAR(hardcode_direct, $1)=no _LT_AC_TAGVAR(hardcode_shlibpath_var, $1)=no _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}-rpath,$libdir' _LT_AC_TAGVAR(export_dynamic_flag_spec, $1)='${wl}-E' # Hack: On Interix 3.x, we cannot compile PIC because of a broken gcc. # Instead, shared libraries are loaded at an image base (0x10000000 by # default) and relocated if they conflict, which is a slow very memory # consuming and fragmenting process. To avoid this, we pick a random, # 256 KiB-aligned image base between 0x50000000 and 0x6FFC0000 at link # time. Moving up from 0x10000000 also allows more sbrk(2) space. _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags ${wl}-h,$soname ${wl}--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib' _LT_AC_TAGVAR(archive_expsym_cmds, $1)='sed "s,^,_," $export_symbols >$output_objdir/$soname.expsym~$CC -shared $pic_flag $libobjs $deplibs $compiler_flags ${wl}-h,$soname ${wl}--retain-symbols-file,$output_objdir/$soname.expsym ${wl}--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib' ;; linux*) if $LD --help 2>&1 | grep ': supported targets:.* elf' > /dev/null; then tmp_addflag= case $cc_basename,$host_cpu in pgcc*) # Portland Group C compiler _LT_AC_TAGVAR(whole_archive_flag_spec, $1)='${wl}--whole-archive`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; $echo \"$new_convenience\"` ${wl}--no-whole-archive' tmp_addflag=' $pic_flag' ;; pgf77* | pgf90* | pgf95*) # Portland Group f77 and f90 compilers _LT_AC_TAGVAR(whole_archive_flag_spec, $1)='${wl}--whole-archive`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; $echo \"$new_convenience\"` ${wl}--no-whole-archive' tmp_addflag=' $pic_flag -Mnomain' ;; ecc*,ia64* | icc*,ia64*) # Intel C compiler on ia64 tmp_addflag=' -i_dynamic' ;; efc*,ia64* | ifort*,ia64*) # Intel Fortran compiler on ia64 tmp_addflag=' -i_dynamic -nofor_main' ;; ifc* | ifort*) # Intel Fortran compiler tmp_addflag=' -nofor_main' ;; esac _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared'"$tmp_addflag"' $libobjs $deplibs $compiler_flags ${wl}-soname $wl$soname -o $lib' if test $supports_anon_versioning = yes; then _LT_AC_TAGVAR(archive_expsym_cmds, $1)='$echo "{ global:" > $output_objdir/$libname.ver~ cat $export_symbols | sed -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~ $echo "local: *; };" >> $output_objdir/$libname.ver~ $CC -shared'"$tmp_addflag"' $libobjs $deplibs $compiler_flags ${wl}-soname $wl$soname ${wl}-version-script ${wl}$output_objdir/$libname.ver -o $lib' fi else _LT_AC_TAGVAR(ld_shlibs, $1)=no fi ;; netbsd*) if echo __ELF__ | $CC -E - | grep __ELF__ >/dev/null; then _LT_AC_TAGVAR(archive_cmds, $1)='$LD -Bshareable $libobjs $deplibs $linker_flags -o $lib' wlarc= else _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags ${wl}-soname $wl$soname -o $lib' _LT_AC_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags ${wl}-soname $wl$soname ${wl}-retain-symbols-file $wl$export_symbols -o $lib' fi ;; solaris*) if $LD -v 2>&1 | grep 'BFD 2\.8' > /dev/null; then _LT_AC_TAGVAR(ld_shlibs, $1)=no cat <&2 *** Warning: The releases 2.8.* of the GNU linker cannot reliably *** create shared libraries on Solaris systems. Therefore, libtool *** is disabling shared libraries support. We urge you to upgrade GNU *** binutils to release 2.9.1 or newer. Another option is to modify *** your PATH or compiler configuration so that the native linker is *** used, and then restart. EOF elif $LD --help 2>&1 | grep ': supported targets:.* elf' > /dev/null; then _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags ${wl}-soname $wl$soname -o $lib' _LT_AC_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags ${wl}-soname $wl$soname ${wl}-retain-symbols-file $wl$export_symbols -o $lib' else _LT_AC_TAGVAR(ld_shlibs, $1)=no fi ;; sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX*) case `$LD -v 2>&1` in *\ [[01]].* | *\ 2.[[0-9]].* | *\ 2.1[[0-5]].*) _LT_AC_TAGVAR(ld_shlibs, $1)=no cat <<_LT_EOF 1>&2 *** Warning: Releases of the GNU linker prior to 2.16.91.0.3 can not *** reliably create shared libraries on SCO systems. Therefore, libtool *** is disabling shared libraries support. We urge you to upgrade GNU *** binutils to release 2.16.91.0.3 or newer. Another option is to modify *** your PATH or compiler configuration so that the native linker is *** used, and then restart. _LT_EOF ;; *) if $LD --help 2>&1 | grep ': supported targets:.* elf' > /dev/null; then _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='`test -z "$SCOABSPATH" && echo ${wl}-rpath,$libdir`' _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags ${wl}-soname,\${SCOABSPATH:+${install_libdir}/}$soname -o $lib' _LT_AC_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags ${wl}-soname,\${SCOABSPATH:+${install_libdir}/}$soname,-retain-symbols-file,$export_symbols -o $lib' else _LT_AC_TAGVAR(ld_shlibs, $1)=no fi ;; esac ;; sunos4*) _LT_AC_TAGVAR(archive_cmds, $1)='$LD -assert pure-text -Bshareable -o $lib $libobjs $deplibs $linker_flags' wlarc= _LT_AC_TAGVAR(hardcode_direct, $1)=yes _LT_AC_TAGVAR(hardcode_shlibpath_var, $1)=no ;; *) if $LD --help 2>&1 | grep ': supported targets:.* elf' > /dev/null; then _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags ${wl}-soname $wl$soname -o $lib' _LT_AC_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags ${wl}-soname $wl$soname ${wl}-retain-symbols-file $wl$export_symbols -o $lib' else _LT_AC_TAGVAR(ld_shlibs, $1)=no fi ;; esac if test "$_LT_AC_TAGVAR(ld_shlibs, $1)" = no; then runpath_var= _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)= _LT_AC_TAGVAR(export_dynamic_flag_spec, $1)= _LT_AC_TAGVAR(whole_archive_flag_spec, $1)= fi else # PORTME fill in a description of your system's linker (not GNU ld) case $host_os in aix3*) _LT_AC_TAGVAR(allow_undefined_flag, $1)=unsupported _LT_AC_TAGVAR(always_export_symbols, $1)=yes _LT_AC_TAGVAR(archive_expsym_cmds, $1)='$LD -o $output_objdir/$soname $libobjs $deplibs $linker_flags -bE:$export_symbols -T512 -H512 -bM:SRE~$AR $AR_FLAGS $lib $output_objdir/$soname' # Note: this linker hardcodes the directories in LIBPATH if there # are no directories specified by -L. _LT_AC_TAGVAR(hardcode_minus_L, $1)=yes if test "$GCC" = yes && test -z "$lt_prog_compiler_static"; then # Neither direct hardcoding nor static linking is supported with a # broken collect2. _LT_AC_TAGVAR(hardcode_direct, $1)=unsupported fi ;; aix4* | aix5*) if test "$host_cpu" = ia64; then # On IA64, the linker does run time linking by default, so we don't # have to do anything special. aix_use_runtimelinking=no exp_sym_flag='-Bexport' no_entry_flag="" else # If we're using GNU nm, then we don't want the "-C" option. # -C means demangle to AIX nm, but means don't demangle with GNU nm if $NM -V 2>&1 | grep 'GNU' > /dev/null; then _LT_AC_TAGVAR(export_symbols_cmds, $1)='$NM -Bpg $libobjs $convenience | awk '\''{ if (((\[$]2 == "T") || (\[$]2 == "D") || (\[$]2 == "B")) && ([substr](\[$]3,1,1) != ".")) { print \[$]3 } }'\'' | sort -u > $export_symbols' else _LT_AC_TAGVAR(export_symbols_cmds, $1)='$NM -BCpg $libobjs $convenience | awk '\''{ if (((\[$]2 == "T") || (\[$]2 == "D") || (\[$]2 == "B")) && ([substr](\[$]3,1,1) != ".")) { print \[$]3 } }'\'' | sort -u > $export_symbols' fi aix_use_runtimelinking=no # Test if we are trying to use run time linking or normal # AIX style linking. If -brtl is somewhere in LDFLAGS, we # need to do runtime linking. case $host_os in aix4.[[23]]|aix4.[[23]].*|aix5*) for ld_flag in $LDFLAGS; do if (test $ld_flag = "-brtl" || test $ld_flag = "-Wl,-brtl"); then aix_use_runtimelinking=yes break fi done ;; esac exp_sym_flag='-bexport' no_entry_flag='-bnoentry' fi # When large executables or shared objects are built, AIX ld can # have problems creating the table of contents. If linking a library # or program results in "error TOC overflow" add -mminimal-toc to # CXXFLAGS/CFLAGS for g++/gcc. In the cases where that is not # enough to fix the problem, add -Wl,-bbigtoc to LDFLAGS. _LT_AC_TAGVAR(archive_cmds, $1)='' _LT_AC_TAGVAR(hardcode_direct, $1)=yes _LT_AC_TAGVAR(hardcode_libdir_separator, $1)=':' _LT_AC_TAGVAR(link_all_deplibs, $1)=yes if test "$GCC" = yes; then case $host_os in aix4.[[012]]|aix4.[[012]].*) # We only want to do this on AIX 4.2 and lower, the check # below for broken collect2 doesn't work under 4.3+ collect2name=`${CC} -print-prog-name=collect2` if test -f "$collect2name" && \ strings "$collect2name" | grep resolve_lib_name >/dev/null then # We have reworked collect2 _LT_AC_TAGVAR(hardcode_direct, $1)=yes else # We have old collect2 _LT_AC_TAGVAR(hardcode_direct, $1)=unsupported # It fails to find uninstalled libraries when the uninstalled # path is not listed in the libpath. Setting hardcode_minus_L # to unsupported forces relinking _LT_AC_TAGVAR(hardcode_minus_L, $1)=yes _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_AC_TAGVAR(hardcode_libdir_separator, $1)= fi ;; esac shared_flag='-shared' if test "$aix_use_runtimelinking" = yes; then shared_flag="$shared_flag "'${wl}-G' fi else # not using gcc if test "$host_cpu" = ia64; then # VisualAge C++, Version 5.5 for AIX 5L for IA-64, Beta 3 Release # chokes on -Wl,-G. The following line is correct: shared_flag='-G' else if test "$aix_use_runtimelinking" = yes; then shared_flag='${wl}-G' else shared_flag='${wl}-bM:SRE' fi fi fi # It seems that -bexpall does not export symbols beginning with # underscore (_), so it is better to generate a list of symbols to export. _LT_AC_TAGVAR(always_export_symbols, $1)=yes if test "$aix_use_runtimelinking" = yes; then # Warning - without using the other runtime loading flags (-brtl), # -berok will link without error, but may produce a broken library. _LT_AC_TAGVAR(allow_undefined_flag, $1)='-berok' # Determine the default libpath from the value encoded in an empty executable. _LT_AC_SYS_LIBPATH_AIX _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}-blibpath:$libdir:'"$aix_libpath" _LT_AC_TAGVAR(archive_expsym_cmds, $1)="\$CC"' -o $output_objdir/$soname $libobjs $deplibs '"\${wl}$no_entry_flag"' $compiler_flags `if test "x${allow_undefined_flag}" != "x"; then echo "${wl}${allow_undefined_flag}"; else :; fi` '"\${wl}$exp_sym_flag:\$export_symbols $shared_flag" else if test "$host_cpu" = ia64; then _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}-R $libdir:/usr/lib:/lib' _LT_AC_TAGVAR(allow_undefined_flag, $1)="-z nodefs" _LT_AC_TAGVAR(archive_expsym_cmds, $1)="\$CC $shared_flag"' -o $output_objdir/$soname $libobjs $deplibs '"\${wl}$no_entry_flag"' $compiler_flags ${wl}${allow_undefined_flag} '"\${wl}$exp_sym_flag:\$export_symbols" else # Determine the default libpath from the value encoded in an empty executable. _LT_AC_SYS_LIBPATH_AIX _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}-blibpath:$libdir:'"$aix_libpath" # Warning - without using the other run time loading flags, # -berok will link without error, but may produce a broken library. _LT_AC_TAGVAR(no_undefined_flag, $1)=' ${wl}-bernotok' _LT_AC_TAGVAR(allow_undefined_flag, $1)=' ${wl}-berok' # Exported symbols can be pulled into shared objects from archives _LT_AC_TAGVAR(whole_archive_flag_spec, $1)='$convenience' _LT_AC_TAGVAR(archive_cmds_need_lc, $1)=yes # This is similar to how AIX traditionally builds its shared libraries. _LT_AC_TAGVAR(archive_expsym_cmds, $1)="\$CC $shared_flag"' -o $output_objdir/$soname $libobjs $deplibs ${wl}-bnoentry $compiler_flags ${wl}-bE:$export_symbols${allow_undefined_flag}~$AR $AR_FLAGS $output_objdir/$libname$release.a $output_objdir/$soname' fi fi ;; amigaos*) _LT_AC_TAGVAR(archive_cmds, $1)='$rm $output_objdir/a2ixlibrary.data~$echo "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$echo "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$echo "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$echo "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)' _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_AC_TAGVAR(hardcode_minus_L, $1)=yes # see comment about different semantics on the GNU ld section _LT_AC_TAGVAR(ld_shlibs, $1)=no ;; bsdi[[45]]*) _LT_AC_TAGVAR(export_dynamic_flag_spec, $1)=-rdynamic ;; cygwin* | mingw* | pw32*) # When not using gcc, we currently assume that we are using # Microsoft Visual C++. # hardcode_libdir_flag_spec is actually meaningless, as there is # no search path for DLLs. _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)=' ' _LT_AC_TAGVAR(allow_undefined_flag, $1)=unsupported # Tell ltmain to make .lib files, not .a files. libext=lib # Tell ltmain to make .dll files, not .so files. shrext_cmds=".dll" # FIXME: Setting linknames here is a bad hack. _LT_AC_TAGVAR(archive_cmds, $1)='$CC -o $lib $libobjs $compiler_flags `echo "$deplibs" | $SED -e '\''s/ -lc$//'\''` -link -dll~linknames=' # The linker will automatically build a .lib file if we build a DLL. _LT_AC_TAGVAR(old_archive_From_new_cmds, $1)='true' # FIXME: Should let the user specify the lib program. _LT_AC_TAGVAR(old_archive_cmds, $1)='lib /OUT:$oldlib$oldobjs$old_deplibs' _LT_AC_TAGVAR(fix_srcfile_path, $1)='`cygpath -w "$srcfile"`' _LT_AC_TAGVAR(enable_shared_with_static_runtimes, $1)=yes ;; darwin* | rhapsody*) case $host_os in rhapsody* | darwin1.[[012]]) _LT_AC_TAGVAR(allow_undefined_flag, $1)='${wl}-undefined ${wl}suppress' ;; *) # Darwin 1.3 on if test -z ${MACOSX_DEPLOYMENT_TARGET} ; then _LT_AC_TAGVAR(allow_undefined_flag, $1)='${wl}-flat_namespace ${wl}-undefined ${wl}suppress' else case ${MACOSX_DEPLOYMENT_TARGET} in 10.[[012]]) _LT_AC_TAGVAR(allow_undefined_flag, $1)='${wl}-flat_namespace ${wl}-undefined ${wl}suppress' ;; 10.*) _LT_AC_TAGVAR(allow_undefined_flag, $1)='${wl}-undefined ${wl}dynamic_lookup' ;; esac fi ;; esac _LT_AC_TAGVAR(archive_cmds_need_lc, $1)=no _LT_AC_TAGVAR(hardcode_direct, $1)=no _LT_AC_TAGVAR(hardcode_automatic, $1)=yes _LT_AC_TAGVAR(hardcode_shlibpath_var, $1)=unsupported _LT_AC_TAGVAR(whole_archive_flag_spec, $1)='' _LT_AC_TAGVAR(link_all_deplibs, $1)=yes if test "$GCC" = yes ; then output_verbose_link_cmd='echo' _LT_AC_TAGVAR(archive_cmds, $1)='$CC -dynamiclib $allow_undefined_flag -o $lib $libobjs $deplibs $compiler_flags -install_name $rpath/$soname $verstring' _LT_AC_TAGVAR(module_cmds, $1)='$CC $allow_undefined_flag -o $lib -bundle $libobjs $deplibs$compiler_flags' # Don't fix this by using the ld -exported_symbols_list flag, it doesn't exist in older darwin lds _LT_AC_TAGVAR(archive_expsym_cmds, $1)='sed -e "s,#.*,," -e "s,^[ ]*,," -e "s,^\(..*\),_&," < $export_symbols > $output_objdir/${libname}-symbols.expsym~$CC -dynamiclib $allow_undefined_flag -o $lib $libobjs $deplibs $compiler_flags -install_name $rpath/$soname $verstring~nmedit -s $output_objdir/${libname}-symbols.expsym ${lib}' _LT_AC_TAGVAR(module_expsym_cmds, $1)='sed -e "s,#.*,," -e "s,^[ ]*,," -e "s,^\(..*\),_&," < $export_symbols > $output_objdir/${libname}-symbols.expsym~$CC $allow_undefined_flag -o $lib -bundle $libobjs $deplibs$compiler_flags~nmedit -s $output_objdir/${libname}-symbols.expsym ${lib}' else case $cc_basename in xlc*) output_verbose_link_cmd='echo' _LT_AC_TAGVAR(archive_cmds, $1)='$CC -qmkshrobj $allow_undefined_flag -o $lib $libobjs $deplibs $compiler_flags ${wl}-install_name ${wl}`echo $rpath/$soname` $verstring' _LT_AC_TAGVAR(module_cmds, $1)='$CC $allow_undefined_flag -o $lib -bundle $libobjs $deplibs$compiler_flags' # Don't fix this by using the ld -exported_symbols_list flag, it doesn't exist in older darwin lds _LT_AC_TAGVAR(archive_expsym_cmds, $1)='sed -e "s,#.*,," -e "s,^[ ]*,," -e "s,^\(..*\),_&," < $export_symbols > $output_objdir/${libname}-symbols.expsym~$CC -qmkshrobj $allow_undefined_flag -o $lib $libobjs $deplibs $compiler_flags ${wl}-install_name ${wl}$rpath/$soname $verstring~nmedit -s $output_objdir/${libname}-symbols.expsym ${lib}' _LT_AC_TAGVAR(module_expsym_cmds, $1)='sed -e "s,#.*,," -e "s,^[ ]*,," -e "s,^\(..*\),_&," < $export_symbols > $output_objdir/${libname}-symbols.expsym~$CC $allow_undefined_flag -o $lib -bundle $libobjs $deplibs$compiler_flags~nmedit -s $output_objdir/${libname}-symbols.expsym ${lib}' ;; *) _LT_AC_TAGVAR(ld_shlibs, $1)=no ;; esac fi ;; dgux*) _LT_AC_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_AC_TAGVAR(hardcode_shlibpath_var, $1)=no ;; freebsd1*) _LT_AC_TAGVAR(ld_shlibs, $1)=no ;; # FreeBSD 2.2.[012] allows us to include c++rt0.o to get C++ constructor # support. Future versions do this automatically, but an explicit c++rt0.o # does not break anything, and helps significantly (at the cost of a little # extra space). freebsd2.2*) _LT_AC_TAGVAR(archive_cmds, $1)='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags /usr/lib/c++rt0.o' _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir' _LT_AC_TAGVAR(hardcode_direct, $1)=yes _LT_AC_TAGVAR(hardcode_shlibpath_var, $1)=no ;; # Unfortunately, older versions of FreeBSD 2 do not have this feature. freebsd2*) _LT_AC_TAGVAR(archive_cmds, $1)='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags' _LT_AC_TAGVAR(hardcode_direct, $1)=yes _LT_AC_TAGVAR(hardcode_minus_L, $1)=yes _LT_AC_TAGVAR(hardcode_shlibpath_var, $1)=no ;; # FreeBSD 3 and greater uses gcc -shared to do shared libraries. freebsd* | kfreebsd*-gnu | dragonfly*) _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared -o $lib $libobjs $deplibs $compiler_flags' _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir' _LT_AC_TAGVAR(hardcode_direct, $1)=yes _LT_AC_TAGVAR(hardcode_shlibpath_var, $1)=no ;; hpux9*) if test "$GCC" = yes; then _LT_AC_TAGVAR(archive_cmds, $1)='$rm $output_objdir/$soname~$CC -shared -fPIC ${wl}+b ${wl}$install_libdir -o $output_objdir/$soname $libobjs $deplibs $compiler_flags~test $output_objdir/$soname = $lib || mv $output_objdir/$soname $lib' else _LT_AC_TAGVAR(archive_cmds, $1)='$rm $output_objdir/$soname~$LD -b +b $install_libdir -o $output_objdir/$soname $libobjs $deplibs $linker_flags~test $output_objdir/$soname = $lib || mv $output_objdir/$soname $lib' fi _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}+b ${wl}$libdir' _LT_AC_TAGVAR(hardcode_libdir_separator, $1)=: _LT_AC_TAGVAR(hardcode_direct, $1)=yes # hardcode_minus_L: Not really in the search PATH, # but as the default location of the library. _LT_AC_TAGVAR(hardcode_minus_L, $1)=yes _LT_AC_TAGVAR(export_dynamic_flag_spec, $1)='${wl}-E' ;; hpux10*) if test "$GCC" = yes -a "$with_gnu_ld" = no; then _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared -fPIC ${wl}+h ${wl}$soname ${wl}+b ${wl}$install_libdir -o $lib $libobjs $deplibs $compiler_flags' else _LT_AC_TAGVAR(archive_cmds, $1)='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags' fi if test "$with_gnu_ld" = no; then _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}+b ${wl}$libdir' _LT_AC_TAGVAR(hardcode_libdir_separator, $1)=: _LT_AC_TAGVAR(hardcode_direct, $1)=yes _LT_AC_TAGVAR(export_dynamic_flag_spec, $1)='${wl}-E' # hardcode_minus_L: Not really in the search PATH, # but as the default location of the library. _LT_AC_TAGVAR(hardcode_minus_L, $1)=yes fi ;; hpux11*) if test "$GCC" = yes -a "$with_gnu_ld" = no; then case $host_cpu in hppa*64*) _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared ${wl}+h ${wl}$soname -o $lib $libobjs $deplibs $compiler_flags' ;; ia64*) _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared ${wl}+h ${wl}$soname ${wl}+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags' ;; *) _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared -fPIC ${wl}+h ${wl}$soname ${wl}+b ${wl}$install_libdir -o $lib $libobjs $deplibs $compiler_flags' ;; esac else case $host_cpu in hppa*64*) _LT_AC_TAGVAR(archive_cmds, $1)='$CC -b ${wl}+h ${wl}$soname -o $lib $libobjs $deplibs $compiler_flags' ;; ia64*) _LT_AC_TAGVAR(archive_cmds, $1)='$CC -b ${wl}+h ${wl}$soname ${wl}+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags' ;; *) _LT_AC_TAGVAR(archive_cmds, $1)='$CC -b ${wl}+h ${wl}$soname ${wl}+b ${wl}$install_libdir -o $lib $libobjs $deplibs $compiler_flags' ;; esac fi if test "$with_gnu_ld" = no; then _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}+b ${wl}$libdir' _LT_AC_TAGVAR(hardcode_libdir_separator, $1)=: case $host_cpu in hppa*64*|ia64*) _LT_AC_TAGVAR(hardcode_libdir_flag_spec_ld, $1)='+b $libdir' _LT_AC_TAGVAR(hardcode_direct, $1)=no _LT_AC_TAGVAR(hardcode_shlibpath_var, $1)=no ;; *) _LT_AC_TAGVAR(hardcode_direct, $1)=yes _LT_AC_TAGVAR(export_dynamic_flag_spec, $1)='${wl}-E' # hardcode_minus_L: Not really in the search PATH, # but as the default location of the library. _LT_AC_TAGVAR(hardcode_minus_L, $1)=yes ;; esac fi ;; irix5* | irix6* | nonstopux*) if test "$GCC" = yes; then _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags ${wl}-soname ${wl}$soname `test -n "$verstring" && echo ${wl}-set_version ${wl}$verstring` ${wl}-update_registry ${wl}${output_objdir}/so_locations -o $lib' else _LT_AC_TAGVAR(archive_cmds, $1)='$LD -shared $libobjs $deplibs $linker_flags -soname $soname `test -n "$verstring" && echo -set_version $verstring` -update_registry ${output_objdir}/so_locations -o $lib' _LT_AC_TAGVAR(hardcode_libdir_flag_spec_ld, $1)='-rpath $libdir' fi _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}-rpath ${wl}$libdir' _LT_AC_TAGVAR(hardcode_libdir_separator, $1)=: _LT_AC_TAGVAR(link_all_deplibs, $1)=yes ;; netbsd*) if echo __ELF__ | $CC -E - | grep __ELF__ >/dev/null; then _LT_AC_TAGVAR(archive_cmds, $1)='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags' # a.out else _LT_AC_TAGVAR(archive_cmds, $1)='$LD -shared -o $lib $libobjs $deplibs $linker_flags' # ELF fi _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir' _LT_AC_TAGVAR(hardcode_direct, $1)=yes _LT_AC_TAGVAR(hardcode_shlibpath_var, $1)=no ;; newsos6) _LT_AC_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' _LT_AC_TAGVAR(hardcode_direct, $1)=yes _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}-rpath ${wl}$libdir' _LT_AC_TAGVAR(hardcode_libdir_separator, $1)=: _LT_AC_TAGVAR(hardcode_shlibpath_var, $1)=no ;; openbsd*) _LT_AC_TAGVAR(hardcode_direct, $1)=yes _LT_AC_TAGVAR(hardcode_shlibpath_var, $1)=no if test -z "`echo __ELF__ | $CC -E - | grep __ELF__`" || test "$host_os-$host_cpu" = "openbsd2.8-powerpc"; then _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags' _LT_AC_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags ${wl}-retain-symbols-file,$export_symbols' _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}-rpath,$libdir' _LT_AC_TAGVAR(export_dynamic_flag_spec, $1)='${wl}-E' else case $host_os in openbsd[[01]].* | openbsd2.[[0-7]] | openbsd2.[[0-7]].*) _LT_AC_TAGVAR(archive_cmds, $1)='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags' _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir' ;; *) _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags' _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}-rpath,$libdir' ;; esac fi ;; os2*) _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_AC_TAGVAR(hardcode_minus_L, $1)=yes _LT_AC_TAGVAR(allow_undefined_flag, $1)=unsupported _LT_AC_TAGVAR(archive_cmds, $1)='$echo "LIBRARY $libname INITINSTANCE" > $output_objdir/$libname.def~$echo "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~$echo DATA >> $output_objdir/$libname.def~$echo " SINGLE NONSHARED" >> $output_objdir/$libname.def~$echo EXPORTS >> $output_objdir/$libname.def~emxexp $libobjs >> $output_objdir/$libname.def~$CC -Zdll -Zcrtdll -o $lib $libobjs $deplibs $compiler_flags $output_objdir/$libname.def' _LT_AC_TAGVAR(old_archive_From_new_cmds, $1)='emximp -o $output_objdir/$libname.a $output_objdir/$libname.def' ;; osf3*) if test "$GCC" = yes; then _LT_AC_TAGVAR(allow_undefined_flag, $1)=' ${wl}-expect_unresolved ${wl}\*' _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared${allow_undefined_flag} $libobjs $deplibs $compiler_flags ${wl}-soname ${wl}$soname `test -n "$verstring" && echo ${wl}-set_version ${wl}$verstring` ${wl}-update_registry ${wl}${output_objdir}/so_locations -o $lib' else _LT_AC_TAGVAR(allow_undefined_flag, $1)=' -expect_unresolved \*' _LT_AC_TAGVAR(archive_cmds, $1)='$LD -shared${allow_undefined_flag} $libobjs $deplibs $linker_flags -soname $soname `test -n "$verstring" && echo -set_version $verstring` -update_registry ${output_objdir}/so_locations -o $lib' fi _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}-rpath ${wl}$libdir' _LT_AC_TAGVAR(hardcode_libdir_separator, $1)=: ;; osf4* | osf5*) # as osf3* with the addition of -msym flag if test "$GCC" = yes; then _LT_AC_TAGVAR(allow_undefined_flag, $1)=' ${wl}-expect_unresolved ${wl}\*' _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared${allow_undefined_flag} $libobjs $deplibs $compiler_flags ${wl}-msym ${wl}-soname ${wl}$soname `test -n "$verstring" && echo ${wl}-set_version ${wl}$verstring` ${wl}-update_registry ${wl}${output_objdir}/so_locations -o $lib' _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='${wl}-rpath ${wl}$libdir' else _LT_AC_TAGVAR(allow_undefined_flag, $1)=' -expect_unresolved \*' _LT_AC_TAGVAR(archive_cmds, $1)='$LD -shared${allow_undefined_flag} $libobjs $deplibs $linker_flags -msym -soname $soname `test -n "$verstring" && echo -set_version $verstring` -update_registry ${output_objdir}/so_locations -o $lib' _LT_AC_TAGVAR(archive_expsym_cmds, $1)='for i in `cat $export_symbols`; do printf "%s %s\\n" -exported_symbol "\$i" >> $lib.exp; done; echo "-hidden">> $lib.exp~ $LD -shared${allow_undefined_flag} -input $lib.exp $linker_flags $libobjs $deplibs -soname $soname `test -n "$verstring" && echo -set_version $verstring` -update_registry ${output_objdir}/so_locations -o $lib~$rm $lib.exp' # Both c and cxx compiler support -rpath directly _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='-rpath $libdir' fi _LT_AC_TAGVAR(hardcode_libdir_separator, $1)=: ;; solaris*) _LT_AC_TAGVAR(no_undefined_flag, $1)=' -z text' if test "$GCC" = yes; then wlarc='${wl}' _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared ${wl}-h ${wl}$soname -o $lib $libobjs $deplibs $compiler_flags' _LT_AC_TAGVAR(archive_expsym_cmds, $1)='$echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~$echo "local: *; };" >> $lib.exp~ $CC -shared ${wl}-M ${wl}$lib.exp ${wl}-h ${wl}$soname -o $lib $libobjs $deplibs $compiler_flags~$rm $lib.exp' else wlarc='' _LT_AC_TAGVAR(archive_cmds, $1)='$LD -G${allow_undefined_flag} -h $soname -o $lib $libobjs $deplibs $linker_flags' _LT_AC_TAGVAR(archive_expsym_cmds, $1)='$echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~$echo "local: *; };" >> $lib.exp~ $LD -G${allow_undefined_flag} -M $lib.exp -h $soname -o $lib $libobjs $deplibs $linker_flags~$rm $lib.exp' fi _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir' _LT_AC_TAGVAR(hardcode_shlibpath_var, $1)=no case $host_os in solaris2.[[0-5]] | solaris2.[[0-5]].*) ;; *) # The compiler driver will combine linker options so we # cannot just pass the convience library names through # without $wl, iff we do not link with $LD. # Luckily, gcc supports the same syntax we need for Sun Studio. # Supported since Solaris 2.6 (maybe 2.5.1?) case $wlarc in '') _LT_AC_TAGVAR(whole_archive_flag_spec, $1)='-z allextract$convenience -z defaultextract' ;; *) _LT_AC_TAGVAR(whole_archive_flag_spec, $1)='${wl}-z ${wl}allextract`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; $echo \"$new_convenience\"` ${wl}-z ${wl}defaultextract' ;; esac ;; esac _LT_AC_TAGVAR(link_all_deplibs, $1)=yes ;; sunos4*) if test "x$host_vendor" = xsequent; then # Use $CC to link under sequent, because it throws in some extra .o # files that make .init and .fini sections work. _LT_AC_TAGVAR(archive_cmds, $1)='$CC -G ${wl}-h $soname -o $lib $libobjs $deplibs $compiler_flags' else _LT_AC_TAGVAR(archive_cmds, $1)='$LD -assert pure-text -Bstatic -o $lib $libobjs $deplibs $linker_flags' fi _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_AC_TAGVAR(hardcode_direct, $1)=yes _LT_AC_TAGVAR(hardcode_minus_L, $1)=yes _LT_AC_TAGVAR(hardcode_shlibpath_var, $1)=no ;; sysv4) case $host_vendor in sni) _LT_AC_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' _LT_AC_TAGVAR(hardcode_direct, $1)=yes # is this really true??? ;; siemens) ## LD is ld it makes a PLAMLIB ## CC just makes a GrossModule. _LT_AC_TAGVAR(archive_cmds, $1)='$LD -G -o $lib $libobjs $deplibs $linker_flags' _LT_AC_TAGVAR(reload_cmds, $1)='$CC -r -o $output$reload_objs' _LT_AC_TAGVAR(hardcode_direct, $1)=no ;; motorola) _LT_AC_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' _LT_AC_TAGVAR(hardcode_direct, $1)=no #Motorola manual says yes, but my tests say they lie ;; esac runpath_var='LD_RUN_PATH' _LT_AC_TAGVAR(hardcode_shlibpath_var, $1)=no ;; sysv4.3*) _LT_AC_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' _LT_AC_TAGVAR(hardcode_shlibpath_var, $1)=no _LT_AC_TAGVAR(export_dynamic_flag_spec, $1)='-Bexport' ;; sysv4*MP*) if test -d /usr/nec; then _LT_AC_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' _LT_AC_TAGVAR(hardcode_shlibpath_var, $1)=no runpath_var=LD_RUN_PATH hardcode_runpath_var=yes _LT_AC_TAGVAR(ld_shlibs, $1)=yes fi ;; sysv4*uw2* | sysv5OpenUNIX* | sysv5UnixWare7.[[01]].[[10]]* | unixware7*) _LT_AC_TAGVAR(no_undefined_flag, $1)='${wl}-z,text' _LT_AC_TAGVAR(archive_cmds_need_lc, $1)=no _LT_AC_TAGVAR(hardcode_shlibpath_var, $1)=no runpath_var='LD_RUN_PATH' if test "$GCC" = yes; then _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared ${wl}-h,$soname -o $lib $libobjs $deplibs $compiler_flags' _LT_AC_TAGVAR(archive_expsym_cmds, $1)='$CC -shared ${wl}-Bexport:$export_symbols ${wl}-h,$soname -o $lib $libobjs $deplibs $compiler_flags' else _LT_AC_TAGVAR(archive_cmds, $1)='$CC -G ${wl}-h,$soname -o $lib $libobjs $deplibs $compiler_flags' _LT_AC_TAGVAR(archive_expsym_cmds, $1)='$CC -G ${wl}-Bexport:$export_symbols ${wl}-h,$soname -o $lib $libobjs $deplibs $compiler_flags' fi ;; sysv5* | sco3.2v5* | sco5v6*) # Note: We can NOT use -z defs as we might desire, because we do not # link with -lc, and that would cause any symbols used from libc to # always be unresolved, which means just about no library would # ever link correctly. If we're not using GNU ld we use -z text # though, which does catch some bad symbols but isn't as heavy-handed # as -z defs. _LT_AC_TAGVAR(no_undefined_flag, $1)='${wl}-z,text' _LT_AC_TAGVAR(allow_undefined_flag, $1)='${wl}-z,nodefs' _LT_AC_TAGVAR(archive_cmds_need_lc, $1)=no _LT_AC_TAGVAR(hardcode_shlibpath_var, $1)=no _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='`test -z "$SCOABSPATH" && echo ${wl}-R,$libdir`' _LT_AC_TAGVAR(hardcode_libdir_separator, $1)=':' _LT_AC_TAGVAR(link_all_deplibs, $1)=yes _LT_AC_TAGVAR(export_dynamic_flag_spec, $1)='${wl}-Bexport' runpath_var='LD_RUN_PATH' if test "$GCC" = yes; then _LT_AC_TAGVAR(archive_cmds, $1)='$CC -shared ${wl}-h,\${SCOABSPATH:+${install_libdir}/}$soname -o $lib $libobjs $deplibs $compiler_flags' _LT_AC_TAGVAR(archive_expsym_cmds, $1)='$CC -shared ${wl}-Bexport:$export_symbols ${wl}-h,\${SCOABSPATH:+${install_libdir}/}$soname -o $lib $libobjs $deplibs $compiler_flags' else _LT_AC_TAGVAR(archive_cmds, $1)='$CC -G ${wl}-h,\${SCOABSPATH:+${install_libdir}/}$soname -o $lib $libobjs $deplibs $compiler_flags' _LT_AC_TAGVAR(archive_expsym_cmds, $1)='$CC -G ${wl}-Bexport:$export_symbols ${wl}-h,\${SCOABSPATH:+${install_libdir}/}$soname -o $lib $libobjs $deplibs $compiler_flags' fi ;; uts4*) _LT_AC_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' _LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_AC_TAGVAR(hardcode_shlibpath_var, $1)=no ;; *) _LT_AC_TAGVAR(ld_shlibs, $1)=no ;; esac fi ]) AC_MSG_RESULT([$_LT_AC_TAGVAR(ld_shlibs, $1)]) test "$_LT_AC_TAGVAR(ld_shlibs, $1)" = no && can_build_shared=no # # Do we need to explicitly link libc? # case "x$_LT_AC_TAGVAR(archive_cmds_need_lc, $1)" in x|xyes) # Assume -lc should be added _LT_AC_TAGVAR(archive_cmds_need_lc, $1)=yes if test "$enable_shared" = yes && test "$GCC" = yes; then case $_LT_AC_TAGVAR(archive_cmds, $1) in *'~'*) # FIXME: we may have to deal with multi-command sequences. ;; '$CC '*) # Test whether the compiler implicitly links with -lc since on some # systems, -lgcc has to come before -lc. If gcc already passes -lc # to ld, don't add -lc before -lgcc. AC_MSG_CHECKING([whether -lc should be explicitly linked in]) $rm conftest* printf "$lt_simple_compile_test_code" > conftest.$ac_ext if AC_TRY_EVAL(ac_compile) 2>conftest.err; then soname=conftest lib=conftest libobjs=conftest.$ac_objext deplibs= wl=$_LT_AC_TAGVAR(lt_prog_compiler_wl, $1) pic_flag=$_LT_AC_TAGVAR(lt_prog_compiler_pic, $1) compiler_flags=-v linker_flags=-v verstring= output_objdir=. libname=conftest lt_save_allow_undefined_flag=$_LT_AC_TAGVAR(allow_undefined_flag, $1) _LT_AC_TAGVAR(allow_undefined_flag, $1)= if AC_TRY_EVAL(_LT_AC_TAGVAR(archive_cmds, $1) 2\>\&1 \| grep \" -lc \" \>/dev/null 2\>\&1) then _LT_AC_TAGVAR(archive_cmds_need_lc, $1)=no else _LT_AC_TAGVAR(archive_cmds_need_lc, $1)=yes fi _LT_AC_TAGVAR(allow_undefined_flag, $1)=$lt_save_allow_undefined_flag else cat conftest.err 1>&5 fi $rm conftest* AC_MSG_RESULT([$_LT_AC_TAGVAR(archive_cmds_need_lc, $1)]) ;; esac fi ;; esac ])# AC_LIBTOOL_PROG_LD_SHLIBS # _LT_AC_FILE_LTDLL_C # ------------------- # Be careful that the start marker always follows a newline. AC_DEFUN([_LT_AC_FILE_LTDLL_C], [ # /* ltdll.c starts here */ # #define WIN32_LEAN_AND_MEAN # #include # #undef WIN32_LEAN_AND_MEAN # #include # # #ifndef __CYGWIN__ # # ifdef __CYGWIN32__ # # define __CYGWIN__ __CYGWIN32__ # # endif # #endif # # #ifdef __cplusplus # extern "C" { # #endif # BOOL APIENTRY DllMain (HINSTANCE hInst, DWORD reason, LPVOID reserved); # #ifdef __cplusplus # } # #endif # # #ifdef __CYGWIN__ # #include # DECLARE_CYGWIN_DLL( DllMain ); # #endif # HINSTANCE __hDllInstance_base; # # BOOL APIENTRY # DllMain (HINSTANCE hInst, DWORD reason, LPVOID reserved) # { # __hDllInstance_base = hInst; # return TRUE; # } # /* ltdll.c ends here */ ])# _LT_AC_FILE_LTDLL_C # _LT_AC_TAGVAR(VARNAME, [TAGNAME]) # --------------------------------- AC_DEFUN([_LT_AC_TAGVAR], [ifelse([$2], [], [$1], [$1_$2])]) # old names AC_DEFUN([AM_PROG_LIBTOOL], [AC_PROG_LIBTOOL]) AC_DEFUN([AM_ENABLE_SHARED], [AC_ENABLE_SHARED($@)]) AC_DEFUN([AM_ENABLE_STATIC], [AC_ENABLE_STATIC($@)]) AC_DEFUN([AM_DISABLE_SHARED], [AC_DISABLE_SHARED($@)]) AC_DEFUN([AM_DISABLE_STATIC], [AC_DISABLE_STATIC($@)]) AC_DEFUN([AM_PROG_LD], [AC_PROG_LD]) AC_DEFUN([AM_PROG_NM], [AC_PROG_NM]) # This is just to silence aclocal about the macro not being used ifelse([AC_DISABLE_FAST_INSTALL]) AC_DEFUN([LT_AC_PROG_GCJ], [AC_CHECK_TOOL(GCJ, gcj, no) test "x${GCJFLAGS+set}" = xset || GCJFLAGS="-g -O2" AC_SUBST(GCJFLAGS) ]) AC_DEFUN([LT_AC_PROG_RC], [AC_CHECK_TOOL(RC, windres, no) ]) # NOTE: This macro has been submitted for inclusion into # # GNU Autoconf as AC_PROG_SED. When it is available in # # a released version of Autoconf we should remove this # # macro and use it instead. # # LT_AC_PROG_SED # -------------- # Check for a fully-functional sed program, that truncates # as few characters as possible. Prefer GNU sed if found. AC_DEFUN([LT_AC_PROG_SED], [AC_MSG_CHECKING([for a sed that does not truncate output]) AC_CACHE_VAL(lt_cv_path_SED, [# Loop through the user's path and test for sed and gsed. # Then use that list of sed's as ones to test for truncation. as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for lt_ac_prog in sed gsed; do for ac_exec_ext in '' $ac_executable_extensions; do if $as_executable_p "$as_dir/$lt_ac_prog$ac_exec_ext"; then lt_ac_sed_list="$lt_ac_sed_list $as_dir/$lt_ac_prog$ac_exec_ext" fi done done done IFS=$as_save_IFS lt_ac_max=0 lt_ac_count=0 # Add /usr/xpg4/bin/sed as it is typically found on Solaris # along with /bin/sed that truncates output. for lt_ac_sed in $lt_ac_sed_list /usr/xpg4/bin/sed; do test ! -f $lt_ac_sed && continue cat /dev/null > conftest.in lt_ac_count=0 echo $ECHO_N "0123456789$ECHO_C" >conftest.in # Check for GNU sed and select it if it is found. if "$lt_ac_sed" --version 2>&1 < /dev/null | grep 'GNU' > /dev/null; then lt_cv_path_SED=$lt_ac_sed break fi while true; do cat conftest.in conftest.in >conftest.tmp mv conftest.tmp conftest.in cp conftest.in conftest.nl echo >>conftest.nl $lt_ac_sed -e 's/a$//' < conftest.nl >conftest.out || break cmp -s conftest.out conftest.nl || break # 10000 chars as input seems more than enough test $lt_ac_count -gt 10 && break lt_ac_count=`expr $lt_ac_count + 1` if test $lt_ac_count -gt $lt_ac_max; then lt_ac_max=$lt_ac_count lt_cv_path_SED=$lt_ac_sed fi done done ]) SED=$lt_cv_path_SED AC_SUBST([SED]) AC_MSG_RESULT([$SED]) ]) dnssec-tools-2.0/docs/0000775000237200023720000000000012111172536015047 5ustar hardakerhardakerdnssec-tools-2.0/docs/dnssec-tools.10000664000237200023720000000150511016553045017550 0ustar hardakerhardaker.TH DNSSEC_TOOLS 1 "5 Dec 2007" "DNSSEC-Tools" .UC 5 .SH NAME DNSSEC-Tools \- A suite of tools and libraries for using DNSSEC .SH DESCRIPTION The DNSSEC-Tools package contains a wide variety of tools that are helpful to zone operators, resolver operators, network operators, application developers and end-users of DNSSEC. .PP The best place to learn about the tools that are part of the package is at the following website, which categorizes the tools according to the intended audience: .IP http://www.dnssec-tools.org/wiki/index.php/DNSSEC-Tools_Components .PP Additionally, make sure to check out the tutorials available at: .IP http://www.dnssec-tools.org/wiki/index.php/Tutorials .SH "LICENSE" The DNSSEC-Tools are licensed under a BSD license, the details of which can be found in the COPYING file found within the distribution. dnssec-tools-2.0/README0000664000237200023720000001126212071065274015006 0ustar hardakerhardaker# Copyright 2004-2013 SPARTA, Inc. All rights reserved. # See the COPYING file included with the DNSSEC-Tools package for details. # DNSSEC-Tools Is your domain secure? OVERVIEW The goal of the DNSSEC-Tools project is to create a set of tools, patches, applications, wrappers, extensions, and plugins that will help ease the deployment of DNSSEC-related technologies. ABOUT THE TOOLS For more information about this project and the tools that are being developed and provided, please see our project web page at: http://www.dnssec-tools.org/ INSTALLATION Most of the tools, perl modules, and other things described on the web page above are easily installed by following the instructions in the INSTALL file. However, some of the results of this package are patches to external programs that will hopefully be fed back into those projects where possible. In the meantime, there are patches included within this source tree that can be applied to those other projects. CONTENTS DESCRIPTION The various pieces of the DNSSEC-Tools project are spread across several directories. These pieces are briefly described here. Most of the tools take a --version flag to let you know their individual version number. The numbers reported will be < 0.9 if they're to be considered "alpha" quality. If >= 0.9 and < 1.0 then they should be considered "beta". Version numbers of 1.0 and above should be considered more well-tested, robust and less likely to change. Libraries: validator/libsres A library that is capable of sending queries to, and receiving answers from a DNSSEC-aware name server. validator/libval A library that provides DNSSEC resource-record validation functionality. Application Patches and DNSSEC Support: apps/libspf2-1.x.y_dnssec Patches to libspf2 to provide DNSSEC validation of DNS queries. apps/mozilla Contains the following: - Patches to firefox to enable DNSSEC name checking validation on visited URLs. - Patches to thunderbird to enable DNSSEC name checking validation on visited URLs - An extension that displays DNSSEC status information - A thunderbird extension to display the x-dnssec field in the Received-SPF header. apps/sendmail Patches to sendmail and spfmilter to provide DNSSEC validation of DNS queries. Tools: tools/scripts Perl scripts for signing DNSSEC zones and maintaining those signed zones. See the tools/scripts/README file for details. The vast majority of the useful DNSSEC-Tools scripts (like zonesigner) are contained in this directory. validator/apps/validate A tool which can display the sequence of queries and their results used to validate a DNS query. The stderr output of this command can serve as input to the drawvalmap tool described below. tools/donuts A dnssec aware zone file checker / lint-like application. tools/donutsd Runs donuts on zone files on a regular bases (eg, daily) and emails the results. Useful for knowing when zone data breaks due to DNSSEC signatures expiring or other data consistency issues). tools/logwatch Patches to logwatch configuration files and scripts to manage log files for BIND security function. These patches are now included in the recent releases of logwatch and may not be needed if you have a recent release. tools/dnspktflow A tool which can produce visual diagrams of DNS traffic flows which have been captured using tcpdump. tools/mapper A tool that can generate graphical maps of DNS zones, including color coding of DNSSEC related data. tools/modules DNSSEC-Tools Perl modules. These modules provide interfaces for such things as reading configuration files and manipulating DNSSEC-Tools-specific data. tools/modules/Net-DNS-SEC-Validator A perl module wrapper around the libval library. tools/drawvalmap A variation of dnspktflow which can produce visual diagrams of DNS queries sent by the validator while performing DNSSEC validation. The input for this command can come from the validate tool described above. tools/etc Data required by DNSSEC-Tools programs. tools/linux/ifup-dyn-dns This is a script which can be used to securely auto-update a DNS entry when an IP address is assigned to an interface. tools/patches Patch files to be applied to existing programs. dnssec-tools-2.0/apps/0000775000237200023720000000000012111172577015067 5ustar hardakerhardakerdnssec-tools-2.0/apps/webmin/0000775000237200023720000000000012111172547016345 5ustar hardakerhardakerdnssec-tools-2.0/apps/webmin/webmin-1.580-dt.patch0000664000237200023720000015405311767713614021751 0ustar hardakerhardakerdiff -u -r webmin-1.580.orig/bind8/bind8-lib.pl webmin-1.580.dt/bind8/bind8-lib.pl --- webmin-1.580.orig/bind8/bind8-lib.pl 2012-01-21 19:46:49.000000000 -0500 +++ webmin-1.580.dt/bind8/bind8-lib.pl 2012-05-24 17:01:03.683325574 -0400 @@ -3,6 +3,21 @@ BEGIN { push(@INC, ".."); }; use WebminCore; +my $dnssec_tools_minver = 1.13; +my $have_dnssec_tools = + eval { + require Net::DNS::SEC::Tools::dnssectools; + }; + + +if ($have_dnssec_tools) { +use Net::DNS::SEC::Tools::dnssectools; +use Net::DNS::SEC::Tools::rollmgr; +use Net::DNS::SEC::Tools::rollrec; +use Net::DNS::SEC::Tools::keyrec; +use Net::DNS; +} + &init_config(); do 'records-lib.pl'; @extra_forward = split(/\s+/, $config{'extra_forward'}); @@ -37,6 +52,25 @@ $rand_flag = "-r /dev/urandom"; } +# have_dnssec_tools_support() +# Returns 1 if dnssec-tools support is available and we meet minimum requirements +sub have_dnssec_tools_support +{ + if ($have_dnssec_tools && $Net::DNS::SEC::Tools::rollrec::VERSION >= $dnssec_tools_minver) { + # check that the location for the following essential parameters have been defined + # dnssectools_conf + # dnssectools_rollrec + # dnssectools_keydir + # dnssectools_rollmgr_pidfile + return undef if (!$config{'dnssectools_conf'} || + !$config{'dnssectools_rollrec'} || + !$config{'dnssectools_keydir'} || + !$config{'dnssectools_rollmgr_pidfile'}); + return 1; + } + return undef; +} + # get_bind_version() # Returns the BIND verison number, or undef if unknown sub get_bind_version @@ -1137,18 +1171,30 @@ } } -# zones_table(&links, &titles, &types, &deletes) +# zones_table(&links, &titles, &types, &deletes, &status) # Returns a table of zones, with checkboxes to delete sub zones_table { local($i); local @tds = ( "width=5" ); local $rv; +if (&have_dnssec_tools_support()) { +$rv .= &ui_columns_start([ "", $text{'index_zone'}, $text{'index_type'}, $text{'index_status'} ], + 100, 0, \@tds); +} else { $rv .= &ui_columns_start([ "", $text{'index_zone'}, $text{'index_type'} ], 100, 0, \@tds); +} + for($i=0; $i<@{$_[0]}; $i++) { - local @cols = ( "[$i]\">$_[1]->[$i]", - $_[2]->[$i] ); + local @cols; + if (&have_dnssec_tools_support()) { + @cols = ( "[$i]\">$_[1]->[$i]", + $_[2]->[$i], $_[4]->[$i]); + } else { + @cols = ( "[$i]\">$_[1]->[$i]", + $_[2]->[$i]); + } if (defined($_[3]->[$i])) { $rv .= &ui_checked_columns_row(\@cols, \@tds, "d", $_[3]->[$i]); } @@ -3104,6 +3150,7 @@ if ($recs[$i]->{'type'} eq 'NSEC' || $recs[$i]->{'type'} eq 'NSEC3' || $recs[$i]->{'type'} eq 'RRSIG' || + $recs[$i]->{'type'} eq 'NSEC3PARAM' || $recs[$i]->{'type'} eq 'DNSKEY') { &delete_record($fn, $recs[$i]); } @@ -3174,11 +3221,55 @@ return undef; } +# check_if_dnssec_tools_managed(&domain) +# Check if the given domain is managed by dnssec-tools +# Return 1 if yes, undef if not +sub check_if_dnssec_tools_managed +{ + local ($dom) = @_; + my $dt_managed; + + if (&have_dnssec_tools_support()) { + my $rrr; + + &lock_file($config{"dnssectools_rollrec"}); + rollrec_lock(); + rollrec_read($config{"dnssectools_rollrec"}); + $rrr = rollrec_fullrec($dom); + if ($rrr) { + $dt_managed = 1; + } + rollrec_close(); + rollrec_unlock(); + &unlock_file($config{"dnssectools_rollrec"}); + } + + return $dt_managed; +} + # sign_dnssec_zone_if_key(&zone|&zone-name, &recs, [bump-soa]) # If a zone has a DNSSEC key, sign it. Calls error if signing fails sub sign_dnssec_zone_if_key { local ($z, $recs, $bump) = @_; + +# Check if zones are managed by dnssec-tools +local $dom = $z->{'members'} ? $z->{'values'}->[0] : $z->{'name'}; + +# If zone is managed through dnssec-tools use zonesigner for resigning the zone +if (&check_if_dnssec_tools_managed($dom)) { + # Do the signing + local $zonefile = &get_zone_file($z); + local $krfile = "$zonefile".".krf"; + local $err; + + &lock_file(&make_chroot($zonefile)); + $err = &dt_resign_zone($dom, $zonefile, $krfile, 0); + &unlock_file(&make_chroot($zonefile)); + &error($err) if ($err); + return undef; +} + local $keyrec = &get_dnskey_record($z, $recs); if ($keyrec) { local $err = &sign_dnssec_zone($z, $bump); @@ -3335,5 +3426,420 @@ return \%rv; } +sub get_dnssectools_config +{ + &lock_file($config{'dnssectools_conf'}); + my $lref = &read_file_lines($config{'dnssectools_conf'}); + my @rv; + my $lnum = 0; + foreach my $line (@$lref) { + my ($n, $v) = split(/\s+/, $line, 2); + # Do basic sanity checking + $v =~ /(\S+)/; + $v = $1; + if ($n) { + push(@rv, { 'name' => $n, 'value' => $v, 'line' => $lnum }); + } + $lnum++; + } + &flush_file_lines(); + &unlock_file($config{'dnssectools_conf'}); + return \@rv; +} + +# save_dnssectools_directive(&config, name, value) +# Save new dnssec-tools configuration values to the configuration file +sub save_dnssectools_directive +{ + local $conf = $_[0]; + local $nv = $_[1]; + + &lock_file($config{'dnssectools_conf'}); + my $lref = &read_file_lines($config{'dnssectools_conf'}); + + foreach my $n (keys %$nv) { + my $old = &find($n, $conf); + if ($old) { + $lref->[$old->{'line'}] = "$n $$nv{$n}"; + } + else { + push(@$lref, "$n $$nv{$n}"); + } + } + + &flush_file_lines(); + &unlock_file($config{'dnssectools_conf'}); +} + +# list_dnssec_dne() +# return a list containing the two DNSSEC mechanisms used for +# proving non-existance +sub list_dnssec_dne +{ + return ("NSEC", "NSEC3"); +} + +# list_dnssec_dshash() +# return a list containing the different DS record hash types +sub list_dnssec_dshash +{ + return ("SHA1", "SHA256"); +} + +# schedule_dnssec_cronjob() +# schedule a cron job to handle periodic resign operations +sub schedule_dnssec_cronjob +{ + my $job; + my $period = $config{'dnssec_period'} || 21; + + # Create or delete the cron job + $job = &get_dnssec_cron_job(); + if (!$job) { + # Turn on cron job + $job = {'user' => 'root', + 'active' => 1, + 'command' => $dnssec_cron_cmd, + 'mins' => int(rand()*60), + 'hours' => int(rand()*24), + 'days' => '*', + 'months' => '*', + 'weekdays' => '*' }; + + &lock_file(&cron::cron_file($job)); + &cron::create_cron_job($job); + &unlock_file(&cron::cron_file($job)); + } + + + &cron::create_wrapper($dnssec_cron_cmd, $module_name, "resign.pl"); + + &lock_file($module_config_file); + $config{'dnssec_period'} = $in{'period'}; + &save_module_config(); + &unlock_file($module_config_file); +} + +# dt_sign_zone(zone, nsec3) +# Replaces a zone's file with one containing signed records. +sub dt_sign_zone +{ + local ($zone, $nsec3) = @_; + local @recs; + + local $z = &get_zone_file($zone); + local $d = $zone->{'name'}; + local $z_chroot = &make_chroot($z); + local $k_chroot = $z_chroot.".krf"; + local $usz = $z_chroot.".webmin-unsigned"; + local $cmd; + local $out; + + if ((($zonesigner=dt_cmdpath('zonesigner')) eq '')) { + return $text{'dt_zone_enocmd'}; + } + if ($nsec3 == 1) { + $nsec3param = " -usensec3 -nsec3optout "; + } else { + $nsec3param = ""; + } + + &lock_file($z_chroot); + + rollrec_lock(); + + # Remove DNSSEC records and save the unsigned zone file + @recs = &read_zone_file($z, $dom); + for(my $i=$#recs; $i>=0; $i--) { + if ($recs[$i]->{'type'} eq 'NSEC' || + $recs[$i]->{'type'} eq 'NSEC3' || + $recs[$i]->{'type'} eq 'NSEC3PARAM' || + $recs[$i]->{'type'} eq 'RRSIG' || + $recs[$i]->{'type'} eq 'DNSKEY') { + &delete_record($z, $recs[$i]); + } + } + ©_source_dest($z_chroot, $usz); + + $cmd = "$zonesigner $nsec3param". + " -genkeys ". + " -kskdirectory ".quotemeta($config{"dnssectools_keydir"}). + " -zskdirectory ".quotemeta($config{"dnssectools_keydir"}). + " -dsdir ".quotemeta($config{"dnssectools_keydir"}). + " -zone ".quotemeta($d). + " -krfile ".quotemeta($k_chroot). + " ".quotemeta($usz)." ".quotemeta($z_chroot); + + $out = &backquote_logged("$cmd 2>&1"); + + if ($?) { + rollrec_unlock(); + &unlock_file($z_chroot); + return $out; + } + + # Create rollrec entry for zone + $rrfile = $config{"dnssectools_rollrec"}; + &lock_file($rrfile); + open(OUT,">> $rrfile") || &error($text{'dt_zone_errfopen'}); + print OUT "roll \"$d\"\n"; + print OUT " zonename \"$d\"\n"; + print OUT " zonefile \"$z_chroot\"\n"; + print OUT " keyrec \"$k_chroot\"\n"; + print OUT " kskphase \"0\"\n"; + print OUT " zskphase \"0\"\n"; + print OUT " ksk_rolldate \" \"\n"; + print OUT " ksk_rollsecs \"0\"\n"; + print OUT " zsk_rolldate \" \"\n"; + print OUT " zsk_rollsecs \"0\"\n"; + print OUT " maxttl \"0\"\n"; + print OUT " phasestart \"new\"\n"; + &unlock_file($rrfile); + + # Setup zone to be auto-resigned every 30 days + &schedule_dnssec_cronjob(); + + rollrec_unlock(); + &unlock_file($z_chroot); + + &dt_rollerd_restart(); + &restart_bind(); + return undef; +} + +# dt_resign_zone(zone-name, zonefile, krfile, threshold) +# Replaces a zone's file with one containing signed records. +sub dt_resign_zone +{ + local ($d, $z, $k, $t) = @_; + + local $zonesigner; + local @recs; + local $cmd; + local $out; + local $threshold = ""; + local $z_chroot = &make_chroot($z); + local $usz = $z_chroot.".webmin-unsigned"; + + if ((($zonesigner=dt_cmdpath('zonesigner')) eq '')) { + return $text{'dt_zone_enocmd'}; + } + + rollrec_lock(); + + # Remove DNSSEC records and save the unsigned zone file + @recs = &read_zone_file($z, $dom); + for(my $i=$#recs; $i>=0; $i--) { + if ($recs[$i]->{'type'} eq 'NSEC' || + $recs[$i]->{'type'} eq 'NSEC3' || + $recs[$i]->{'type'} eq 'NSEC3PARAM' || + $recs[$i]->{'type'} eq 'RRSIG' || + $recs[$i]->{'type'} eq 'DNSKEY') { + &delete_record($z, $recs[$i]); + } + } + ©_source_dest($z_chroot, $usz); + + if ($t > 0) { + $threshold = "-threshold ".quotemeta("-$t"."d"." "); + } + + $cmd = "$zonesigner -verbose -verbose". + " -kskdirectory ".quotemeta($config{"dnssectools_keydir"}). + " -zskdirectory ".quotemeta($config{"dnssectools_keydir"}). + " -dsdir ".quotemeta($config{"dnssectools_keydir"}). + " -zone ".quotemeta($d). + " -krfile ".quotemeta(&make_chroot($k)). + " ".$threshold. + " ".quotemeta($usz)." ".quotemeta($z_chroot); + $out = &backquote_logged("$cmd 2>&1"); + + rollrec_unlock(); + + return $out if ($?); + + &restart_zone($d); + + return undef; +} + +# dt_zskroll_zone(zone-name) +# Initates a zsk rollover operation for the zone +sub dt_zskroll_zone +{ + local ($d) = @_; + if (!rollmgr_sendcmd(CHANNEL_WAIT,ROLLCMD_ROLLZSK,$d)) { + return $text{'dt_zone_erollctl'}; + } + + return undef; +} + +# dt_kskroll_zone(zone-name) +# Initates a ksk rollover operation for the zone +sub dt_kskroll_zone +{ + local ($d) = @_; + if (!rollmgr_sendcmd(CHANNEL_WAIT,ROLLCMD_ROLLKSK,$d)) { + return $text{'dt_zone_erollctl'}; + } + + return undef; +} + +# dt_notify_parentzone(zone-name) +# Notifies rollerd that the new DS record has been published in the parent zone +sub dt_notify_parentzone +{ + local ($d) = @_; + if (!rollmgr_sendcmd(CHANNEL_WAIT,ROLLCMD_DSPUB,$d)) { + return $text{'dt_zone_erollctl'}; + } + + return undef; +} + +# dt_rollerd_restart() +# Restart the rollerd daemon +sub dt_rollerd_restart +{ + local $rollerd; + local $r; + local $cmd; + local $out; + + if ((($rollerd=dt_cmdpath('rollerd')) eq '')) { + return $text{'dt_zone_enocmd'}; + } + rollmgr_halt(); + $r = $config{"dnssectools_rollrec"}; + $cmd = "$rollerd -rrfile ".quotemeta($r); + &execute_command($cmd); + return undef; +} + +# dt_genkrf() +# Generate a new krf file for the zone +sub dt_genkrf +{ + local ($zone, $z_chroot, $k_chroot) = @_; + local $dom = $zone->{'name'}; + local @keys = &get_dnssec_key($zone); + local $usz = $z_chroot.".webmin-unsigned"; + local $zskcur = ""; + local $kskcur = ""; + local $cmd; + local $out; + + local $oldkeydir = &get_keys_dir($zone); + local $keydir = $config{"dnssectools_keydir"}; + mkdir($keydir); + + foreach my $key (@keys) { + foreach my $f ('publicfile', 'privatefile') { + # Identify if this is a zsk or a ksk + $key->{$f} =~ /(K\Q$dom\E\.\+\d+\+\d+)/; + if ($key->{'ksk'}) { + $kskcur = $1; + } else { + $zskcur = $1; + } + ©_source_dest($key->{$f}, $keydir); + &unlink_file($key->{$f}); + } + } + + if (($zskcur eq "") || ($kskcur eq "")) { + return &text('dt_zone_enokey', $dom); + } + + # Remove the older dsset file + if ($oldkeydir) { + &unlink_file($oldkeydir."/"."dsset-".$dom."."); + } + + if ((($genkrf=dt_cmdpath('genkrf')) eq '')) { + return $text{'dt_zone_enocmd'}; + } + $cmd = "$genkrf". + " -zone ".quotemeta($dom). + " -krfile ".quotemeta($k_chroot). + " -zskcur=".quotemeta($zskcur). + " -kskcur=".quotemeta($kskcur). + " -zskdir ".quotemeta($keydir). + " -kskdir ".quotemeta($keydir). + " ".quotemeta($usz)." ".quotemeta($z_chroot); + + $out = &backquote_logged("$cmd 2>&1"); + + return $out if ($?); + return undef; +} + + +# dt_delete_dnssec_state() +# Delete all DNSSEC-Tools meta-data for a given zone +sub dt_delete_dnssec_state +{ + local ($zone) = @_; + + local $z = &get_zone_file($zone); + local $dom = $zone->{'members'} ? $zone->{'values'}->[0] : $zone->{'name'}; + local $z_chroot = &make_chroot($z); + local $k_chroot = $z_chroot.".krf"; + local $usz = $z_chroot.".webmin-unsigned"; + local @recs; + + if (&check_if_dnssec_tools_managed($dom)) { + rollrec_lock(); + + #remove entry from rollrec file + &lock_file($config{"dnssectools_rollrec"}); + rollrec_read($config{"dnssectools_rollrec"}); + rollrec_del($dom); + rollrec_close(); + &unlock_file($config{"dnssectools_rollrec"}); + + &lock_file($z_chroot); + + # remove key and krf files + keyrec_read($k_chroot); + @kskpaths = keyrec_keypaths($dom, "all"); + foreach (@kskpaths) { + # remove any trailing ".key" + s/(.*).key$/\1/; + &unlink_file("$_.key"); + &unlink_file("$_.private"); + } + keyrec_close(); + &unlink_file($k_chroot); + &unlink_file($usz); + + # Delete dsset + &unlink_file($config{"dnssectools_keydir"}."/"."dsset-".$dom."."); + + # remove DNSSEC records from zonefile + @recs = &read_zone_file($z, $dom); + for(my $i=$#recs; $i>=0; $i--) { + if ($recs[$i]->{'type'} eq 'NSEC' || + $recs[$i]->{'type'} eq 'NSEC3' || + $recs[$i]->{'type'} eq 'NSEC3PARAM' || + $recs[$i]->{'type'} eq 'RRSIG' || + $recs[$i]->{'type'} eq 'DNSKEY') { + &delete_record($z, $recs[$i]); + } + } + &bump_soa_record($z, \@recs); + + &unlock_file($z_chroot); + rollrec_unlock(); + + &dt_rollerd_restart(); + &restart_bind(); + } + + return undef; +} + 1; diff -u -r webmin-1.580.orig/bind8/config-CentOS-Linux-6.0-* webmin-1.580.dt/bind8/config-CentOS-Linux-6.0-* --- webmin-1.580.orig/bind8/config-CentOS-Linux-6.0-* 2012-01-21 19:46:49.000000000 -0500 +++ webmin-1.580.dt/bind8/config-CentOS-Linux-6.0-* 2012-05-24 16:10:31.364265945 -0400 @@ -44,3 +44,11 @@ checkconf=named-checkconf other_slaves=1 restart_cmd=restart +keygen=dnssec-keygen +tmpl_dnssec=0 +dnssec_period=21 +tmpl_dnssec_dt=1 +dnssectools_conf=/etc/dnssec-tools/dnssec-tools.conf +dnssectools_rollrec=/var/named/system.rollrec +dnssectools_keydir=/var/named/dtkeys +dnssectools_rollmgr_pidfile=/var/run/rollmgr.pid diff -u -r webmin-1.580.orig/bind8/config.info webmin-1.580.dt/bind8/config.info --- webmin-1.580.orig/bind8/config.info 2012-01-21 19:46:49.000000000 -0500 +++ webmin-1.580.dt/bind8/config.info 2012-04-30 16:42:38.208052791 -0400 @@ -65,3 +65,8 @@ start_cmd=Command to start BIND,3,Default stop_cmd=Command to stop BIND,3,Just kill process restart_cmd=Command to apply BIND configuration,10,-Just send HUP signal,restart-Stop and restart,Other command +dnssectools_conf=Full path to the dnssec-tools.conf file,0 +dnssectools_rollmgr_pidfile=Full path to the dnssec-tools rollmgr pid file,0 +dnssectools_rollrec=Full path to the dnssec-tools rollrec file,0 +dnssectools_keydir=Full path to the dnssec-tools key directory,0 + diff -u -r webmin-1.580.orig/bind8/conf_zonedef.cgi webmin-1.580.dt/bind8/conf_zonedef.cgi --- webmin-1.580.orig/bind8/conf_zonedef.cgi 2012-01-21 19:46:49.000000000 -0500 +++ webmin-1.580.dt/bind8/conf_zonedef.cgi 2012-04-30 16:42:38.235116521 -0400 @@ -72,6 +72,17 @@ print &ui_table_row($text{'zonedef_dnssec'}, &ui_yesno_radio("dnssec", $config{'tmpl_dnssec'}), 3); + if (&have_dnssec_tools_support()) { + # Automate using DNSSEC-Tools + print &ui_table_row($text{'zonedef_dnssec_dt'}, + &ui_yesno_radio("dnssec_dt", $config{'tmpl_dnssec_dt'}), 3); + + # Default DNE + print &ui_table_row($text{'zonedef_dne'}, + &ui_select("dnssec_dne", $config{'tmpl_dnssec_dne'} || "NSEC", + [ &list_dnssec_dne() ]), 3); + } + # Default algorithm print &ui_table_row($text{'zonedef_alg'}, &ui_select("alg", $config{'tmpl_dnssecalg'} || "RSASHA1", diff -u -r webmin-1.580.orig/bind8/create_master.cgi webmin-1.580.dt/bind8/create_master.cgi --- webmin-1.580.orig/bind8/create_master.cgi 2012-01-21 19:46:49.000000000 -0500 +++ webmin-1.580.dt/bind8/create_master.cgi 2012-04-30 16:42:38.161041814 -0400 @@ -163,6 +163,26 @@ } } +# Automatically sign zone if required +if (&have_dnssec_tools_support() && $in{'enable_dt'}) { + my $err; + my $nsec3 = 0; + $zone = &get_zone_name($idx, $in{'view'}); + #$zone = $in{'zone'}; + + if ($in{'dne'} eq "NSEC") { + $nsec3 = 0; + } elsif ($in{'dne'} eq "NSEC3") { + $nsec3 = 1; + } else { + &error($text{'dt_zone_edne'}); + } + + # Sign zone + $err = &dt_sign_zone($zone, $nsec3); + &error($err) if ($err); +} + &redirect("edit_master.cgi?index=$idx&view=$in{'view'}"); diff -u -r webmin-1.580.orig/bind8/delete_zone.cgi webmin-1.580.dt/bind8/delete_zone.cgi --- webmin-1.580.orig/bind8/delete_zone.cgi 2012-01-21 19:46:49.000000000 -0500 +++ webmin-1.580.dt/bind8/delete_zone.cgi 2012-04-30 16:42:38.164046142 -0400 @@ -117,6 +117,9 @@ # delete any keys &delete_dnssec_key($zconf); +# delete all dnssec-tools related state +&dt_delete_dnssec_state($zconf); + # remove the zone directive &lock_file(&make_chroot($zconf->{'file'})); &save_directive($parent, [ $zconf ], [ ]); diff -u -r webmin-1.580.orig/bind8/edit_master.cgi webmin-1.580.dt/bind8/edit_master.cgi --- webmin-1.580.orig/bind8/edit_master.cgi 2012-01-21 19:46:49.000000000 -0500 +++ webmin-1.580.dt/bind8/edit_master.cgi 2012-04-30 16:42:38.225026554 -0400 @@ -106,6 +106,13 @@ push(@images, "images/whois.gif"); } if (&supports_dnssec()) { + if (&have_dnssec_tools_support()) { + # DNSSEC Automation + push(@links, "edit_zonedt.cgi?index=$in{'index'}&view=$in{'view'}"); + push(@titles, $text{'dt_enable_title'}); + push(@images, "images/dnssectools.gif"); + } + # Zone key push(@links, "edit_zonekey.cgi?index=$in{'index'}&view=$in{'view'}"); push(@titles, $text{'zonekey_title'}); diff -u -r webmin-1.580.orig/bind8/find_zones.cgi webmin-1.580.dt/bind8/find_zones.cgi --- webmin-1.580.orig/bind8/find_zones.cgi 2012-01-21 19:46:49.000000000 -0500 +++ webmin-1.580.dt/bind8/find_zones.cgi 2012-04-30 16:42:38.229093435 -0400 @@ -5,6 +5,13 @@ require './bind8-lib.pl'; &ReadParse(); +if (&have_dnssec_tools_support()) { + # Parse the rollrec file to determine zone status + &lock_file($config{"dnssectools_rollrec"}); + rollrec_lock(); + rollrec_read($config{"dnssectools_rollrec"}); +} + @zones = &list_zone_names(); foreach $z (@zones) { $v = $z->{'name'}; @@ -26,8 +33,35 @@ } push(@zicons, "images/$t.gif"); push(@ztypes, $text{"index_$t"}); + if (&have_dnssec_tools_support()) { + my $rrr = rollrec_fullrec($v); + if ($rrr) { + if($rrr->{'kskphase'} > 0) { + if($rrr->{'kskphase'} == 6) { + push(@zstatus, $text{"dt_status_waitfords"}); + } else { + push(@zstatus, $text{"dt_status_inKSKroll"}); + } + } elsif($rrr->{'zskphase'} > 0) { + push(@zstatus, $text{"dt_status_inZSKroll"}); + } else { + push(@zstatus, $text{"dt_status_signed"}); + } + } else { + push(@zstatus, $text{"dt_status_unsigned"}); + } + } + $len++; } + +if (&have_dnssec_tools_support()) { + rollrec_close(); + rollrec_unlock(); + &unlock_file($config{"dnssectools_rollrec"}); +} + + if (@zlinks == 1) { &redirect($zlinks[0]); exit; @@ -44,6 +78,7 @@ @zicons = map { $zicons[$_] } @zorder; @ztypes = map { $ztypes[$_] } @zorder; @zdels = map { $zdels[$_] } @zorder; + @zstatus = map { $zstatus[$_] } @zorder; if ($config{'show_list'}) { # display as list @@ -53,15 +88,31 @@ &select_invert_link("d", 0) ); print &ui_links_row(\@links); @grid = ( ); + if (&have_dnssec_tools_support()) { push(@grid, &zones_table([ @zlinks[0 .. $mid-1] ], [ @ztitles[0 .. $mid-1] ], [ @ztypes[0 .. $mid-1] ], - [ @zdels[0 .. $mid-1] ] )); + [ @zdels[0 .. $mid-1] ], + [ @zstatus[0 .. $mid-1] ] )); + } else { + push(@grid, &zones_table([ @zlinks[0 .. $mid-1] ], + [ @ztitles[0 .. $mid-1] ], + [ @ztypes[0 .. $mid-1] ], + [ @zdels[0 .. $mid-1] ] )); + } if ($mid < @zlinks) { + if (&have_dnssec_tools_support()) { push(@grid, &zones_table([ @zlinks[$mid .. $#zlinks] ], [ @ztitles[$mid .. $#ztitles] ], [ @ztypes[$mid .. $#ztypes] ], - [ @zdels[$mid .. $#zdels] ])); + [ @zdels[$mid .. $#zdels] ], + [ @status[$mid .. $#zstatus] ])); + } else { + push(@grid, &zones_table([ @zlinks[$mid .. $#zlinks] ], + [ @ztitles[$mid .. $#ztitles] ], + [ @ztypes[$mid .. $#ztypes] ], + [ @zdels[$mid .. $#zdels] ] )); + } } print &ui_grid_table(\@grid, 2, 100, [ "width=50%", "width=50%" ]); diff -u -r webmin-1.580.orig/bind8/index.cgi webmin-1.580.dt/bind8/index.cgi --- webmin-1.580.orig/bind8/index.cgi 2012-01-21 19:46:49.000000000 -0500 +++ webmin-1.580.dt/bind8/index.cgi 2012-04-30 16:42:38.167069219 -0400 @@ -92,6 +92,7 @@ "conf_zonedef.cgi", "list_slaves.cgi", $bind_version >= 9 ? ( "conf_rndc.cgi" ) : ( ), &supports_dnssec_client() ? ( "conf_trusted.cgi" ) : ( ), + ((&supports_dnssec()) && (&have_dnssec_tools_support())) ? ( "conf_dnssectools.cgi" ) : ( ), &supports_dnssec() ? ( "conf_dnssec.cgi" ) : ( ), &supports_check_conf() ? ( "conf_ncheck.cgi" ) : ( ), "conf_manual.cgi" ); @@ -144,6 +145,14 @@ elsif (@zones && (!@views || !$config{'by_view'})) { # Show all zones print &ui_subheading($text{'index_zones'}); + + if (&have_dnssec_tools_support()) { + # Parse the rollrec file to determine zone status + &lock_file($config{"dnssectools_rollrec"}); + rollrec_lock(); + rollrec_read($config{"dnssectools_rollrec"}); + } + foreach $z (@zones) { $v = $z->{'name'}; $t = $z->{'type'}; @@ -169,14 +178,43 @@ push(@zsort, $t eq 'hint' ? undef : $ztitles[$#ztitles]); push(@zicons, "images/$t.gif"); push(@ztypes, $text{"index_$t"}); + + if (&have_dnssec_tools_support()) { + my $rrr = rollrec_fullrec($v); + if ($rrr) { + if($rrr->{'kskphase'} > 0) { + if($rrr->{'kskphase'} == 6) { + push(@zstatus, $text{"dt_status_waitfords"}); + } else { + push(@zstatus, $text{"dt_status_inKSKroll"}); + } + } elsif($rrr->{'zskphase'} > 0) { + push(@zstatus, $text{"dt_status_inZSKroll"}); + } else { + push(@zstatus, $text{"dt_status_signed"}); + } + } else { + push(@zstatus, $text{"dt_status_unsigned"}); + } + } + $zhash{$zn} = $z; $ztitlehash{$zn} = $ztitles[$#ztitles]; $zlinkhash{$zn} = $zlinks[$#zlinks]; $ztypeshash{$zn} = $ztypes[$#ztypes]; - $zdelhash{$zn} = $zdels[$#ztypes]; + $zdelhash{$zn} = $zdels[$#zdels]; + if (&have_dnssec_tools_support()) { + $zstatushash{$zn} = $zstatus[$#zstatus]; + } $len++; } + if (&have_dnssec_tools_support()) { + rollrec_close(); + rollrec_unlock(); + &unlock_file($config{"dnssectools_rollrec"}); + } + # sort list of zones @zorder = sort { &compare_zones($zsort[$a], $zsort[$b]) } (0 .. $len-1); @zlinks = map { $zlinks[$_] } @zorder; @@ -184,6 +222,7 @@ @zicons = map { $zicons[$_] } @zorder; @ztypes = map { $ztypes[$_] } @zorder; @zdels = map { $zdels[$_] } @zorder; + @zstatus = map { $zstatus[$_] } @zorder; print &ui_form_start("mass_delete.cgi", "post"); @links = ( &select_all_link("d", 0), @@ -195,15 +234,32 @@ # display as list $mid = int((@zlinks+1)/2); @grid = ( ); + if (&have_dnssec_tools_support()) { + push(@grid, &zones_table([ @zlinks[0 .. $mid-1] ], + [ @ztitles[0 .. $mid-1] ], + [ @ztypes[0 .. $mid-1] ], + [ @zdels[0 .. $mid-1] ], + [ @zstatus[0 .. $mid-1] ])); + } else { push(@grid, &zones_table([ @zlinks[0 .. $mid-1] ], [ @ztitles[0 .. $mid-1] ], [ @ztypes[0 .. $mid-1] ], - [ @zdels[0 .. $mid-1] ] )); + [ @zdels[0 .. $mid-1] ])); + + } if ($mid < @zlinks) { + if (&have_dnssec_tools_support()) { push(@grid, &zones_table([ @zlinks[$mid .. $#zlinks] ], [ @ztitles[$mid .. $#ztitles] ], [ @ztypes[$mid .. $#ztypes] ], - [ @zdels[$mid .. $#zdels] ])); + [ @zdels[$mid .. $#ztypes] ], + [ @zstatus[$mid .. $#ztypes] ])); + } else { + push(@grid, &zones_table([ @zlinks[$mid .. $#zlinks] ], + [ @ztitles[$mid .. $#ztitles] ], + [ @ztypes[$mid .. $#ztypes] ], + [ @zdels[$mid .. $#ztypes] ])); + } } print &ui_grid_table(\@grid, 2, 100, [ "width=50%", "width=50%" ]); @@ -241,10 +297,18 @@ [ "rdelete", $text{'index_massrdelete'} ] ]); } elsif (@zones) { + + if (&have_dnssec_tools_support()) { + # Parse the rollrec file to determine zone status + &lock_file($config{"dnssectools_rollrec"}); + rollrec_lock(); + rollrec_read($config{"dnssectools_rollrec"}); + } + # Show zones under views print &ui_subheading($text{'index_zones'}); foreach $vw (@views) { - local (@zorder, @zlinks, @ztitles, @zicons, @ztypes, @zsort, @zdels, $len); + local (@zorder, @zlinks, @ztitles, @zicons, @ztypes, @zsort, @zdels, @zstatus, $len); local @zv = grep { $_->{'view'} eq $vw->{'name'} } @zones; next if (!@zv); print "",&text('index_inview', @@ -261,6 +325,24 @@ push(@zicons, "images/$t.gif"); push(@ztypes, $text{"index_$t"}); push(@zdels, $z->{'index'}." ".$z->{'viewindex'}); + if (&have_dnssec_tools_support()) { + my $rrr = rollrec_fullrec($v); + if ($rrr) { + if($rrr->{'kskphase'} > 0) { + if($rrr->{'kskphase'} == 6) { + push(@zstatus, $text{"dt_status_waitfords"}); + } else { + push(@zstatus, $text{"dt_status_inKSKroll"}); + } + } elsif($rrr->{'zskphase'} > 0) { + push(@zstatus, $text{"dt_status_inZSKroll"}); + } else { + push(@zstatus, $text{"dt_status_signed"}); + } + } else { + push(@zstatus, $text{"dt_status_unsigned"}); + } + } $len++; } @@ -272,6 +354,7 @@ @zicons = map { $zicons[$_] } @zorder; @ztypes = map { $ztypes[$_] } @zorder; @zdels = map { $zdels[$_] } @zorder; + @zstatus = map { $zstatus[$_] } @zorder; print &ui_form_start("mass_delete.cgi", "post"); print &ui_links_row(\@crlinks); @@ -279,16 +362,25 @@ # display as list $mid = int((@zlinks+1)/2); @grid = ( ); + if (&have_dnssec_tools_support()) { + push(@grid, &zones_table([ @zlinks[0 .. $mid-1] ], + [ @ztitles[0 .. $mid-1] ], + [ @ztypes[0 .. $mid-1] ], + [ @zdels[0 .. $mid-1] ], + [ @zstatus[0 .. $mid-1] ])); + } else { push(@grid, &zones_table([ @zlinks[0 .. $mid-1] ], [ @ztitles[0 .. $mid-1] ], [ @ztypes[0 .. $mid-1] ], [ @zdels[0 .. $mid-1] ])); + } if ($mid < @zlinks) { push(@grid, &zones_table( [ @zlinks[$mid .. $#zlinks] ], [ @ztitles[$mid .. $#ztitles] ], [ @ztypes[$mid .. $#ztypes] ], - [ @zdels[$mid .. $#zdels] ])); + [ @zdels[$mid .. $#zdels] ], + [ @zstatus[$mid .. $#zstatus] ])); } print &ui_grid_table(\@grid, 2, 100, [ "width=50%", "width=50%" ]); @@ -308,6 +400,11 @@ [ "create", $text{'index_masscreate'} ], [ "rdelete", $text{'index_massrdelete'} ], ]); } + if (&have_dnssec_tools_support()) { + rollrec_close(); + rollrec_unlock(); + &unlock_file($config{"dnssectools_rollrec"}); + } } else { print "$text{'index_none'}

\n"; @@ -407,8 +504,12 @@ if ($zhash{$name}) { local $cb = $zdelhash{$name} ? &ui_checkbox("d", $zdelhash{$name}, "", 0)." " : ""; + if (&have_dnssec_tools_support()) { + print "$cb$ztitlehash{$name} ($ztypeshash{$name}) ($zstatushash{$name}) \n"; + } else { print "$cb$ztitlehash{$name} ($ztypeshash{$name}) \n"; } + } else { print "
\n"; } diff -u -r webmin-1.580.orig/bind8/lang/en webmin-1.580.dt/bind8/lang/en --- webmin-1.580.orig/bind8/lang/en 2012-01-21 19:46:49.000000000 -0500 +++ webmin-1.580.dt/bind8/lang/en 2012-04-30 16:42:38.184047818 -0400 @@ -29,6 +29,7 @@ index_stopmsg=Click this button to stop the BIND server. Any clients using it will be unable to resolve hostnames until it is restarted. index_zone=Zone index_type=Type +index_status=Status index_master=Master index_slave=Slave index_stub=Stub @@ -151,6 +152,7 @@ mcreate_title=Create Master Zone mcreate_ecannot=You cannot create master zones mcreate_opts=New master zone options +mcreate_dnssec_tools_enable=Enable DNSSEC using DNSSEC-Tools mcreate_type=Zone type mcreate_fwd=Forward (Names to Addresses) mcreate_rev=Reverse (Addresses to Names) @@ -690,6 +692,8 @@ zonedef_this=System hostname ($1) zonedef_eprins=Missing or invalid default nameserver for master domains zonedef_dnssec=Create DNSSEC key and sign new zones? +zonedef_dnssec_dt=Automate all DNSSEC operations (ignore other settings below)? +zonedef_dne=Authenticated Denial of Existance Using zonedef_alg=Initial key algorithm zonedef_size=Initial key size zonedef_single=Number of keys to create @@ -1047,6 +1051,71 @@ dnssec_err=Failed to save DNSSEC key re-signing dnssec_eperiod=Missing or invalid number of days between re-signs +dnssectools_title=DNSSEC-Tools Automation +dt_conf_title=DNSSEC-Tools Automation +dt_enable_title=DNSSEC-Tools Automation +dt_zone_title=Manage DNSSEC operations for Zone +dt_zone_already=The zone appears to be signed, but is not using DNSSEC-Tools. +dt_zone_desc=This zone does not have DNSSEC enabled yet. You can use this form to have Webmin automate DNSSEC processing using DNSSEC-Tools, so that clients resolving this zone are protected against DNS spoofing attacks. +dt_zone_header=Zone DNSSEC-Tools Options +dt_zone_dne=Authenticated Denial of Existence +dt_zone_enable=DNSSEC Automation +dt_zone_disable=Disable DNSSEC +dt_zone_disabledesc=Removes this zone from the list of zones managed by DNSSEC-Tools for zone signing and key rollover. +dt_zone_err=DNSSEC Operation failed +dt_zone_edne=Bad authenticated denial mechanism +dt_zone_signing=Signing zone $1 ... +dt_zone_errfopen=Could not open the system rollrec file for writing +dt_zone_enocmd=dnssec-tools not installed, or command not found +dt_zone_erollctl=Could not notify the rollover manager of rollover event +dt_zone_done=... done +dt_zone_deleting_state=Deleting all state associated with zone $1 ... +dt_zone_zoneupdate=Updating records in zone $1 ... +dt_zone_expandsep=Show current KSK and DS set details .. +dt_zone_ksksep=KSK record : +dt_zone_dssep=DS record : +dt_zone_resign=Re-Sign Zone +dt_zone_resigndesc=Use existing keys to resign the zone data immediately +dt_zone_zskroll=Roll ZSK +dt_zone_zskrolldesc=Force rollover of the zone's zone signing key +dt_zone_kskroll=Roll KSK +dt_zone_kskrolldesc=Force rollover of the zone's key signing key +dt_zone_ksknotify=Resume KSK Roll +dt_zone_ksknotifydesc=Resume KSK rollover. Operator must confirm that the new DS set for the zone's KSKs has been published in the parent zone +dt_zone_keyrollon=Key Rollover is currently underway +dt_zone_rollerdrst=Start Rollerd +dt_zone_rollerdrstdesc=Start the Rollerd daemon +dt_zone_migrate=Migrate to DNSSEC-Tools +dt_zone_migratedesc=Import existing set of keys to DNSSEC-Tools and have DNSSEC-Tools automate future DNSSEC key rollover operations. +dt_zone_createkrf=Creating keyrec file for zone $1 and moving keys for zone to DNSSEC-Tools managed location ... +dt_zone_rrf_updating=Updating rollrec entry for zone $1 ... +dt_zone_enokey=Could not find all required keys for zone $1 +dt_conf_ecannot=You are not allowed to configure DNSSEC +dt_conf_header=DNSSEC Parameters +dt_conf_desc=This page allows you to configure the DNSSEC parameters for zones that have DNSSEC enabled. +dt_conf_err=Failed to save DNSSEC Parameters +dt_conf_email=Administrator Email Address +dt_conf_eemail=Missing or invalid email address +dt_conf_algorithm=Key Algorithm +dt_conf_ealg=Missing or invalid Key Algorithm +dt_conf_ksklength=Key Signing Key Length +dt_conf_eksklen=Missing or invalid KSK Length +dt_conf_zsklength=Zone Signing Key Length +dt_conf_ezsklen=Missing or invalid ZSK Length +dt_conf_nsec3=Use NSEC3 (yes/no)? +dt_conf_ensec3=Missing or invalid NSEC3 choice +dt_conf_endtime=Signature Validity Period +dt_conf_eendtime=Missing or invalid signature validity period +dt_conf_ksklife=KSK Rollover Interval +dt_conf_eksklife=Missing or invalid KSK rollover interval +dt_conf_zsklife=ZSK Rollover Interval +dt_conf_ezsklife=Missing or invalid ZSK rollover interval +dt_status_waitfords=Waiting for DS +dt_status_inKSKroll=In KSK Roll +dt_status_inZSKroll=In ZSK Roll +dt_status_signed=Signed +dt_status_unsigned=Unsigned + zonekey_title=Setup DNSSEC Key zonekey_desc=This zone does not have a DNSSEC signing key yet. You can use this form to have Webmin create one, so that clients resolving this zone are protected against DNS spoofing attacks. zonekey_header=New DNSSEC key options diff -u -r webmin-1.580.orig/bind8/master_form.cgi webmin-1.580.dt/bind8/master_form.cgi --- webmin-1.580.orig/bind8/master_form.cgi 2012-01-21 19:46:49.000000000 -0500 +++ webmin-1.580.dt/bind8/master_form.cgi 2012-04-30 16:42:38.231045414 -0400 @@ -20,6 +20,17 @@ print &ui_table_row($text{'mcreate_dom'}, &ui_textbox("zone", undef, 40), 3); +# Sign zones automatically +if (&have_dnssec_tools_support()) { + print &ui_table_row($text{'mcreate_dnssec_tools_enable'}, + &ui_yesno_radio("enable_dt", $config{'tmpl_dnssec_dt'} ? 1 : 0)); + + # Key algorithm + print &ui_table_row($text{'dt_zone_dne'}, + &ui_select("dne", "NSEC", + [ &list_dnssec_dne() ])); +} + $conf = &get_config(); @views = &find("view", $conf); if (@views) { diff -u -r webmin-1.580.orig/bind8/records-lib.pl webmin-1.580.dt/bind8/records-lib.pl --- webmin-1.580.orig/bind8/records-lib.pl 2012-01-21 19:46:49.000000000 -0500 +++ webmin-1.580.dt/bind8/records-lib.pl 2012-04-30 16:42:38.215060920 -0400 @@ -882,5 +882,27 @@ } } +# get_dnskey_rrset(&zone, [&records]) +# Returns the DNSKEY recordset for some domain, or an empty array if none +sub get_dnskey_rrset +{ + local ($z, $recs) = @_; + local @rv = (); + if (!$recs) { + # Need to get zone file and thus records + my $fn = &get_zone_file($z); + $recs = [ &read_zone_file($fn, $dom) ]; + } + # Find the record + local $dom = $z->{'members'} ? $z->{'values'}->[0] : $z->{'name'}; + foreach my $r (@$recs) { + if ($r->{'type'} eq 'DNSKEY' && + $r->{'name'} eq $dom.'.') { + push(@rv, $r); + } + } + return @rv; +} + 1; diff -u -r webmin-1.580.orig/bind8/resign.pl webmin-1.580.dt/bind8/resign.pl --- webmin-1.580.orig/bind8/resign.pl 2012-04-25 15:38:00.971690612 -0400 +++ webmin-1.580.dt/bind8/resign.pl 2012-04-30 16:42:38.165030697 -0400 @@ -4,20 +4,43 @@ $no_acl_check++; require './bind8-lib.pl'; +my $zonefile; +my $krfile; +my $dom; +my $err; + if ($ARGV[0] eq "--debug") { $debug = 1; } -if (!$config{'dnssec_period'}) { - print STDERR "Maximum age not set\n" if ($debug); - exit(0); - } +my $period = $config{'dnssec_period'} || 21; @zones = &list_zone_names(); $errcount = 0; foreach $z (@zones) { # Get the key next if ($z->{'type'} ne 'master'); + $zonefile = &get_zone_file($z); + $krfile = "$zonefile".".krf"; + $dom = $z->{'members'} ? $z->{'values'}->[0] : $z->{'name'}; + print STDERR "Considering zone $z->{'name'}\n" if ($debug); + + # Do DNSSEC-Tools resign operation if zone is being managed by DNSSEC-Tools + if (&have_dnssec_tools_support() && check_if_dnssec_tools_managed($dom)) { + &lock_file(&make_chroot($zonefile)); + $err = &dt_resign_zone($dom, $zonefile, $krfile, $period); + &unlock_file(&make_chroot($zonefile)); + + if ($err) { + print STDERR " Re-signing failed : $err\n"; + $errcount++; + } + elsif ($debug) { + print STDERR " Re-signed OK\n"; + } + next; + } + @keys = &get_dnssec_key($z); print STDERR " Key count ",scalar(@keys),"\n" if ($debug); next if (@keys != 2); @@ -48,4 +71,3 @@ } } exit($errcount); - diff -u -r webmin-1.580.orig/bind8/save_zonedef.cgi webmin-1.580.dt/bind8/save_zonedef.cgi --- webmin-1.580.orig/bind8/save_zonedef.cgi 2012-01-21 19:46:49.000000000 -0500 +++ webmin-1.580.dt/bind8/save_zonedef.cgi 2012-04-30 16:42:38.165030697 -0400 @@ -65,14 +65,19 @@ } if (defined($in{'dnssec'})) { $config{'tmpl_dnssec'} = $in{'dnssec'}; - $config{'tmpl_dnssecalg'} = $in{'alg'}; - ($ok, $err) = &compute_dnssec_key_size($in{'alg'}, $in{'size_def'}, - $in{'size'}); - &error($err) if (!$ok); - $config{'tmpl_dnssecsizedef'} = $in{'size_def'}; - $config{'tmpl_dnssecsize'} = $in{'size'}; - $config{'tmpl_dnssecsingle'} = $in{'single'}; - } + $config{'tmpl_dnssec_dt'} = $in{'dnssec_dt'}; + if ($config{'tmpl_dnssec_dt'}) { + $config{'tmpl_dnssec_dne'} = $in{'dnssec_dne'}; + } else { + $config{'tmpl_dnssecalg'} = $in{'alg'}; + ($ok, $err) = &compute_dnssec_key_size($in{'alg'}, $in{'size_def'}, + $in{'size'}); + &error($err) if (!$ok); + $config{'tmpl_dnssecsizedef'} = $in{'size_def'}; + $config{'tmpl_dnssecsize'} = $in{'size'}; + $config{'tmpl_dnssecsingle'} = $in{'single'}; + } +} &save_module_config(); &unlock_file("$module_config_directory/config"); --- webmin-1.580.orig/bind8/conf_dnssectools.cgi 1969-12-31 19:00:00.000000000 -0500 +++ webmin-1.580.dt/bind8/conf_dnssectools.cgi 2012-04-30 16:42:38.215060920 -0400 @@ -0,0 +1,82 @@ +#!/usr/local/bin/perl +# Show a form to setup DNSSEC-Tools parameters + +require './bind8-lib.pl'; + +local $conf; +local $emailaddrs; +local $algorithm; +local $ksklength; +local $zsklength; +local $usensec3; +local $endtime; +local $ksklife; +local $zsklife; + +&ReadParse(); +$access{'defaults'} || &error($text{'dt_conf_ecannot'}); +&ui_print_header(undef, $text{'dt_conf_title'}, "", + undef, undef, undef, undef, &restart_links()); + +print $text{'dt_conf_desc'},"

\n"; + +$conf = get_dnssectools_config(); + +print &ui_form_start("save_dnssectools.cgi", "post"); +print &ui_table_start($text{'dt_conf_header'}, undef, 2); + +$emailaddrs = find_value("admin-email", $conf); +print &ui_table_row($text{'dt_conf_email'}, + ui_textbox("dt_email", $emailaddrs, 50)); + +#algorithm; dt_alg +$algorithm = find_value("algorithm", $conf); +print &ui_table_row($text{'dt_conf_algorithm'}, + ui_textbox("dt_alg", $algorithm, 50)); + +#ksklength; dt_ksklen +$ksklength = find_value("ksklength", $conf); +print &ui_table_row($text{'dt_conf_ksklength'}, + ui_textbox("dt_ksklen", $ksklength, 50)); + +#zsklength; dt_zsklen +$zsklength = find_value("zsklength", $conf); +print &ui_table_row($text{'dt_conf_zsklength'}, + ui_textbox("dt_zsklen", $zsklength, 50)); + +#usensec3; dt_nsec3 +$usensec3 = find_value("usensec3", $conf); +print &ui_table_row($text{'dt_conf_nsec3'}, + ui_textbox("dt_nsec3", $usensec3, 50)); + + +#endtime; dt_endtime +$endtime = find_value("endtime", $conf); +print &ui_table_row($text{'dt_conf_endtime'}, + ui_textbox("dt_endtime", $endtime, 50)); + +print &ui_table_hr(); + +#ksklife; dt_ksklife +$ksklife = find_value("ksklife", $conf); +print &ui_table_row($text{'dt_conf_ksklife'}, + ui_textbox("dt_ksklife", $ksklife, 50)); + +#zsklife; dt_zsklife +$zsklife = find_value("zsklife", $conf); +print &ui_table_row($text{'dt_conf_zsklife'}, + ui_textbox("dt_zsklife", $zsklife, 50)); + +print &ui_table_hr(); + +# Interval in days +print &ui_table_row($text{'dnssec_period'}, + &ui_textbox("period", $config{'dnssec_period'} || 21, 5)." ". + $text{'dnssec_days'}); + +print &ui_table_hr(); +print &ui_table_end(); +print &ui_form_end([ [ undef, $text{'save'} ] ]); + +&ui_print_footer("", $text{'index_return'}); + --- webmin-1.580.orig/bind8/disable_zonedt.cgi 1969-12-31 19:00:00.000000000 -0500 +++ webmin-1.580.dt/bind8/disable_zonedt.cgi 2012-04-30 16:42:38.225026554 -0400 @@ -0,0 +1,32 @@ + +#!/usr/local/bin/perl +# Remove the signing key records for a zone + +require './bind8-lib.pl'; + +local $zone; +local $dom; +local $desc; + +&error_setup($text{'dt_zone_err'}); +&ReadParse(); +$zone = &get_zone_name($in{'index'}, $in{'view'}); +$dom = $zone->{'name'}; +&can_edit_zone($zone) || + &error($text{'master_ecannot'}); +$desc = &ip6int_to_net(&arpa_to_ip($dom)); + +&ui_print_unbuffered_header($desc, $text{'dt_enable_title'}, "", + undef, undef, undef, undef, &restart_links($zone)); + +if (&have_dnssec_tools_support()) { + print &text('dt_zone_deleting_state', $dom),"
\n"; + &dt_delete_dnssec_state($zone); + print $text{'dt_zone_done'},"

\n"; + + &webmin_log("zonekeyoff", undef, $dom); +} + +&ui_print_footer("edit_master.cgi?index=$in{'index'}&view=$in{'view'}", + $text{'master_return'}); + --- webmin-1.580.orig/bind8/edit_zonedt.cgi 1969-12-31 19:00:00.000000000 -0500 +++ webmin-1.580.dt/bind8/edit_zonedt.cgi 2012-04-30 16:42:38.185063789 -0400 @@ -0,0 +1,219 @@ + +#!/usr/local/bin/perl +# Display the signing key for a zone, or offer to set one up + +require './bind8-lib.pl'; + +local $zone; +local $dom; +local $desc; +local $rrr; + +&ReadParse(); +$zone = &get_zone_name($in{'index'}, $in{'view'}); +$dom = $zone->{'name'}; +&can_edit_zone($zone) || + &error($text{'master_ecannot'}); +$desc = &ip6int_to_net(&arpa_to_ip($dom)); + +&ui_print_header($desc, $text{'dt_zone_title'}, "", + undef, undef, undef, undef, &restart_links($zone)); + + +# Check if zone is currently being managed by dnssec-tools +if (&have_dnssec_tools_support()) { + my $rrfile = $config{"dnssectools_rollrec"}; + &lock_file($rrfile); + rollrec_read($rrfile); + $rrr = rollrec_fullrec($dom); + if ($rrr) { + # yes, it is managed by d-t + + print "
\n
\n"; + + # Show existing keyset and DS + print &ui_hidden_start($text{'dt_zone_expandsep'}, + "sep", 0, "edit_zonedt.cgi?$in"); + my @keys = &get_dnskey_rrset($zone); + foreach $key (@keys) { + # Check if this is a KSK + my $ksk = $key->{'values'}->[0] % 2 ? 1 : 0; + + # Collapsible section for KSK details + if ($ksk) { + # parse the key record into a record + my $keyline = join(" ", $key->{'name'}, $key->{'ttl'}, + $key->{'class'}, $key->{'type'}, @{$key->{'values'}}); + my $dsline = ""; + my @dsalgs = &list_dnssec_dshash(); + foreach my $alg (@dsalgs) { + my $keyrr = Net::DNS::RR->new($keyline); + if ($keyrr) { + my $dsrr = create Net::DNS::RR::DS($keyrr, digtype => "$alg"); + if ($dsrr) { + $dsline = $dsline . $dsrr->string . "
\n"; + } + } + } + + print $text{'dt_zone_ksksep'},"
\n"; + print &ui_textarea("keyline", $keyline, 2, 80, "off", 0, + "readonly style='width:90%'"),"

\n"; + print $text{'dt_zone_dssep'},"
\n"; + print &ui_textarea("dsline", $dsline, 2, 80, "off", 0, + "readonly style='width:90%'"),"

\n"; + } + } + print &ui_hidden_end(); + print "
\n
\n"; + print &ui_hr(); + print "
\n
\n"; + + # Offer choices to manage DNSSEC operations + + # Check if rollerd is running + my $rmgr_pid = $config{"dnssectools_rollmgr_pidfile"}; + if ($rmgr_pid && !(&check_pid_file($rmgr_pid))) { + # Offer to start rollerd + print &ui_buttons_start(); + print &ui_buttons_row("zone_dnssecmgt_dt.cgi", + $text{'dt_zone_rollerdrst'}, + $text{'dt_zone_rollerdrstdesc'}, + &ui_hidden("view", $in{'view'}). + &ui_hidden("index", $in{'index'}). + &ui_hidden("optype", "rollerdrst")); + print &ui_buttons_end(); + print "
\n
\n"; + print &ui_hr(); + print "
\n
\n"; + } else { + + if(($rrr->{'zskphase'} == 0) && ($rrr->{'kskphase'} == 0)) { + print &ui_buttons_start(); + print &ui_buttons_row("zone_dnssecmgt_dt.cgi", + $text{'dt_zone_zskroll'}, + $text{'dt_zone_zskrolldesc'}, + &ui_hidden("view", $in{'view'}). + &ui_hidden("index", $in{'index'}). + &ui_hidden("optype", "zskroll")); + print &ui_buttons_row("zone_dnssecmgt_dt.cgi", + $text{'dt_zone_kskroll'}, + $text{'dt_zone_kskrolldesc'}, + &ui_hidden("view", $in{'view'}). + &ui_hidden("index", $in{'index'}). + &ui_hidden("optype", "kskroll")); + print &ui_buttons_end(); + print "
\n
\n"; + print &ui_hr(); + print "
\n
\n"; + + } elsif($rrr->{'kskphase'} == 6) { + # if KSK rollphase has reached 6, we need to notify parent + print &ui_buttons_start(); + print &ui_buttons_row("zone_dnssecmgt_dt.cgi", + $text{'dt_zone_ksknotify'}, + $text{'dt_zone_ksknotifydesc'}, + &ui_hidden("view", $in{'view'}). + &ui_hidden("index", $in{'index'}). + &ui_hidden("optype", "notify")); + print &ui_buttons_end(); + print "
\n
\n"; + print &ui_hr(); + print "
\n
\n"; + + } else { + my $lsdnssec; + # Display rollerd status for this zone + print $text{'dt_zone_keyrollon'},"
\n"; + print "
\n
\n"; + + if ((($lsdnssec=dt_cmdpath('lsdnssec')) ne '')) { + my $cmd = "$lsdnssec -z $dom $rrfile"; + my $out = &backquote_command("$cmd"); + print &ui_textarea("lsdnssec", $out, 12, 80, "soft", 0, + "readonly style='width:90%'"); + print "
\n
\n"; + } + + print &ui_hr(); + print "
\n
\n"; + } + } + + # Offer to re-sign this zone + print &ui_buttons_start(); + print &ui_buttons_row("zone_dnssecmgt_dt.cgi", + $text{'dt_zone_resign'}, + $text{'dt_zone_resigndesc'}, + &ui_hidden("view", $in{'view'}). + &ui_hidden("index", $in{'index'}). + &ui_hidden("optype", "resign")); + print &ui_buttons_end(); + print "
\n
\n"; + print &ui_hr(); + print "
\n
\n"; + + # Offer to disable dnssec-tools for this zone + print &ui_buttons_start(); + print &ui_buttons_row("disable_zonedt.cgi", $text{'dt_zone_disable'}, + $text{'dt_zone_disabledesc'}, + &ui_hidden("view", $in{'view'}). + &ui_hidden("index", $in{'index'})); + print &ui_buttons_end(); + print "
\n
\n"; + print "
\n
\n"; + + } else { + + # no, it's not managed by d-t + + # Check if the zone already has a key, from a DNSKEY record + my $keyrec = &get_dnskey_record($zone); + if ($keyrec) { + # Tell the user we already have it + print &text('dt_zone_already'),"\n"; + + print &ui_hr(); + print &ui_buttons_start(); + + # Offer to migrate existing keys to dnssec-tools + print &ui_buttons_row("zone_dnssecmigrate_dt.cgi", $text{'dt_zone_migrate'}, + $text{'dt_zone_migratedesc'}, + &ui_hidden("view", $in{'view'}). + &ui_hidden("index", $in{'index'})); + + # Offer to remove existing keys + print &ui_buttons_row("disable_zonekey.cgi", $text{'zonekey_disable'}, + $text{'zonekey_disabledesc'}, + &ui_hidden("view", $in{'view'}). + &ui_hidden("index", $in{'index'})); + + print &ui_buttons_end(); + + } else { + + # Offer to enable dnssec-tools for this zone + + print $text{'dt_zone_desc'},"

\n"; + + print &ui_form_start("enable_zonedt.cgi", "post"); + print &ui_hidden("index", $in{'index'}); + print &ui_hidden("view", $in{'view'}); + + print &ui_table_start($text{'dt_zone_header'}, undef, 2); + # Key algorithm + print &ui_table_row($text{'dt_zone_dne'}, + &ui_select("dne", "NSEC", + [ &list_dnssec_dne() ])); + print &ui_table_end(); + + print &ui_form_end([ [ undef, $text{'dt_zone_enable'} ] ]); + + } + } + rollrec_close(); + &unlock_file($rrfile); +} + +&ui_print_footer("edit_master.cgi?index=$in{'index'}&view=$in{'view'}", + $text{'master_return'}); --- webmin-1.580.orig/bind8/enable_zonedt.cgi 1969-12-31 19:00:00.000000000 -0500 +++ webmin-1.580.dt/bind8/enable_zonedt.cgi 2012-04-30 16:42:38.223021329 -0400 @@ -0,0 +1,45 @@ + +#!/usr/local/bin/perl +# Create a signing key for a zone, add it, and sign the zone + +require './bind8-lib.pl'; + +local $zone; +local $dom; +local $desc; + +&error_setup($text{'dt_zone_err'}); +&ReadParse(); +$zone = &get_zone_name($in{'index'}, $in{'view'}); +$dom = $zone->{'name'}; +&can_edit_zone($zone) || + &error($text{'master_ecannot'}); +$desc = &ip6int_to_net(&arpa_to_ip($dom)); + +&ui_print_unbuffered_header($desc, $text{'dt_enable_title'}, "", + undef, undef, undef, undef, &restart_links($zone)); + +if (&have_dnssec_tools_support()) { + my $err; + my $nsec3 = 0; + + if ($in{'dne'} eq "NSEC") { + $nsec3 = 0; + } elsif ($in{'dne'} eq "NSEC3") { + $nsec3 = 1; + } else { + &error($text{'dt_zone_edne'}); + } + + # Sign zone + print &text('dt_zone_signing', $dom),"
\n"; + $err = &dt_sign_zone($zone, $nsec3); + &error($err) if ($err); + print $text{'dt_zone_done'},"
\n"; + + &webmin_log("zonekeyon", undef, $dom); +} + +&ui_print_footer("edit_master.cgi?index=$in{'index'}&view=$in{'view'}", + $text{'master_return'}); + --- webmin-1.580.orig/bind8/save_dnssectools.cgi 1969-12-31 19:00:00.000000000 -0500 +++ webmin-1.580.dt/bind8/save_dnssectools.cgi 2012-04-30 16:42:38.163018780 -0400 @@ -0,0 +1,54 @@ +#!/usr/local/bin/perl +# save dnssec-tools related options + +require './bind8-lib.pl'; + +&ReadParse(); +&error_setup($text{'dt_conf_err'}); +$access{'defaults'} || &error($text{'dt_conf_ecannot'}); + +local $conf = get_dnssectools_config(); +local %nv; + +$in{'dt_email'} =~ /(\b[A-Za-z0-9._%+-]+@[A-Za-z0-9-]+\.[A-Za-z0-9-.]*\b)/ || + &error($text{'dt_conf_eemail'}); +$nv{'admin-email'} = $1; + +$in{'dt_alg'} =~ /(\b[A-Za-z0-9]+\b)/ || + &error($text{'dt_conf_ealg'}); +$nv{'algorithm'} = $1; + +$in{'dt_ksklen'} =~ /(\b[0-9]+\b)/ || + &error($text{'dt_conf_eksklen'}); +$nv{'ksklength'} = $1; + +$in{'dt_zsklen'} =~ /(\b[0-9]+\b)/ || + &error($text{'dt_conf_ezsklen'}); +$nv{'zsklength'} = $1; + +$in{'dt_nsec3'} =~ /(\b(yes|no)\b)/i || + &error($text{'dt_conf_ensec3'}); +$nv{'usensec3'} = $1; + +$in{'dt_endtime'} =~ /(\+?[0-9]+)/ || + &error($text{'dt_conf_eendtime'}); +$nv{'endtime'} = $1; + +$in{'dt_ksklife'} =~ /(\b[0-9]+\b)/ || + &error($text{'dt_conf_eksklife'}); +$nv{'ksklife'} = $1; + +$in{'dt_zsklife'} =~ /(\b[0-9]+\b)/ || + &error($text{'dt_conf_ezsklife'}); +$nv{'zsklife'} = $1; + +&save_dnssectools_directive($conf, \%nv); + + +&lock_file($module_config_file); +$config{'dnssec_period'} = $in{'period'}; +&save_module_config(); +&unlock_file($module_config_file); + +&webmin_log("dnssectools"); +&redirect(""); --- webmin-1.580.orig/bind8/zone_dnssecmgt_dt.cgi 1969-12-31 19:00:00.000000000 -0500 +++ webmin-1.580.dt/bind8/zone_dnssecmgt_dt.cgi 2012-04-30 16:42:38.224056598 -0400 @@ -0,0 +1,48 @@ + +#!/usr/local/bin/perl +# Perform one of a number of DNSSEC-related operations for the zone + +require './bind8-lib.pl'; + +local $zone; +local $dom; +local $err; + +&error_setup($text{'dt_zone_err'}); +&ReadParse(); +$zone = &get_zone_name($in{'index'}, $in{'view'}); +$dom = $zone->{'name'}; +&can_edit_zone($zone) || + &error($text{'master_ecannot'}); + +if (&have_dnssec_tools_support()) { + my $optype = $in{'optype'}; + if ($optype eq "resign") { + # Do the signing + #$zonefile = &make_chroot(&absolute_path($zone->{'file'})); + my $zonefile = &get_zone_file($zone); + my $krfile = "$zonefile".".krf"; + &lock_file(&make_chroot($zonefile)); + $err = &dt_resign_zone($dom, $zonefile, $krfile, 0); + &unlock_file(&make_chroot($zonefile)); + &error($err) if ($err); + } elsif ($optype eq "zskroll") { + $err = &dt_zskroll_zone($dom); + &error($err) if ($err); + } elsif ($optype eq "kskroll") { + $err = &dt_kskroll_zone($dom); + &error($err) if ($err); + } elsif ($optype eq "notify") { + $err = &dt_notify_parentzone($dom); + &error($err) if ($err); + } elsif ($optype eq "rollerdrst") { + $err = &dt_rollerd_restart(); + &error($err) if ($err); + } + + &webmin_log("manage", undef, $dom); +} + +# Return to master page +&redirect("edit_master.cgi?index=$in{'index'}&view=$in{'view'}"); + --- webmin-1.580.orig/bind8/zone_dnssecmigrate_dt.cgi 1969-12-31 19:00:00.000000000 -0500 +++ webmin-1.580.dt/bind8/zone_dnssecmigrate_dt.cgi 2012-04-30 16:42:38.231045414 -0400 @@ -0,0 +1,79 @@ + +#!/usr/local/bin/perl +# Migrate an existing DNSSEC signed zone to using the DNSSEC-Tools suite for DNSSEC-related automation + +require './bind8-lib.pl'; + +local $zone; +local $dom; +local $desc; +local $err; + +&error_setup($text{'dt_zone_err'}); +&ReadParse(); +$zone = &get_zone_name($in{'index'}, $in{'view'}); +$dom = $zone->{'name'}; +&can_edit_zone($zone) || + &error($text{'master_ecannot'}); +$desc = &ip6int_to_net(&arpa_to_ip($dom)); + +&ui_print_unbuffered_header($desc, $text{'dt_enable_title'}, "", + undef, undef, undef, undef, &restart_links($zone)); + +if (&have_dnssec_tools_support()) { + my $zonefile = &get_zone_file($zone); + my $krfile = "$zonefile".".krf"; + my $z_chroot = &make_chroot($zonefile); + my $k_chroot = &make_chroot($krfile); + my $rrfile; + + &lock_file($z_chroot); + + # generate the keyrec file + print &text('dt_zone_createkrf', $dom),"
\n"; + $err = &dt_genkrf($zone, $z_chroot, $k_chroot); + if ($err) { + &unlock_file($z_chroot); + &error($err); + } + + print $text{'dt_zone_done'},"

\n"; + + # resign the zone + print &text('dt_zone_signing', $dom),"
\n"; + $err = &dt_resign_zone($dom, $zonefile, $krfile, 0); + if ($err) { + &unlock_file($z_chroot); + &error($err); + } + print $text{'dt_zone_done'},"

\n"; + + # Create rollrec entry for zone + print &text('dt_zone_rrf_updating', $dom),"
\n"; + $rrfile = $config{"dnssectools_rollrec"}; + &lock_file($rrfile); + open(OUT,">> $rrfile") || &error($text{'dt_zone_errfopen'}); + print OUT "roll \"$dom\"\n"; + print OUT " zonename \"$dom\"\n"; + print OUT " zonefile \"$z_chroot\"\n"; + print OUT " keyrec \"$k_chroot\"\n"; + print OUT " kskphase \"0\"\n"; + print OUT " zskphase \"0\"\n"; + print OUT " ksk_rolldate \" \"\n"; + print OUT " ksk_rollsecs \"0\"\n"; + print OUT " zsk_rolldate \" \"\n"; + print OUT " zsk_rollsecs \"0\"\n"; + print OUT " maxttl \"0\"\n"; + print OUT " phasestart \"new\"\n"; + &unlock_file($config{"dnssectools_rollrec"}); + print $text{'dt_zone_done'},"
\n"; + + &unlock_file($z_chroot); + + &dt_rollerd_restart(); + &restart_bind(); + &webmin_log("migrate", undef, $dom); +} + +&ui_print_footer("edit_master.cgi?index=$in{'index'}&view=$in{'view'}", + $text{'master_return'}); dnssec-tools-2.0/apps/webmin/bind8.images.dnssectools.gif0000664000237200023720000001302311770105756023652 0ustar hardakerhardakerGIF89a,,çÿ8:QY!c#L'*h$'t'-U10[12œ)|)-f/3Œ',Z6:v02‚.1U;>Š.51329–1;’5;u=BgAG™48Œ8;r@Cš5>•8=ž8<¤7>ž9B™;@¬6>†AF¡:>§9@™=F–?A•?F½5>©;B£=@ƒHH±;E«=CŸAE³=G›DJ¨AC¶>C¯@FtPX˜HK¶@I°BH¸AE^ZX HI¿@H„QW­FM§HL’NQ¿ANºCMœLNÁBJ‘OW½EI¤LQÃDKÊBN¸HOÆFM¢QS¢QYÎEP´MSžUYÃKS²QTÑIS¾OY`g²S[¢X]ÕKPÁQU¯V[ªXZ×MQÜKXÖMWÏOYojoÞLTÑPV§\a‘bg¿V\ÚPTéNZãPX¼[c«`d¾\^¸^cëP\¨cfËZb³ahusw¢gq›jpÈ^c±ei­hjŒs{Ædi–q|Áfn¯kr¬os¥qv¿lr¹nqÍjqŽ|~‡~ƒ±sxÄpw„‚†Ëotƒ„µw{¨{…Âuy €‡Áz|¶}Š‰Èy}‡ŒŸ…‘¾~ƒ“ŠÐ{º‚„·……•ŽÑ‚†À‡‰ž‘žÍ†ŒÈˆŒ¿ŒŒ˜—Ç¿”ØŠ¸“›Ô“§™¦ œ£§›œ²—¤Ç””Í“•Ç•šÃ–¦Â˜šÜ”šÆœŸ¨¥©Í› Ù˜œ±¥¥»£­Ë¡¤·§²×  µ¬¬Ñ¥¨ã¡¥±¯³¯¯ºÉ¨¸Í©©Ø¦«¶³¸Ó®¯Ø­°Ä³»¹¶Á̳Á»¹½Ù´µà´·¿½ÂÕ¸¶Ô¹½à»¼Ó¾ÍÇÄÉÚ¿ÄÝ¿½ÄÅÏ輿ÍÆÒËÉÍèÂÃØÆÎÏÊÈáÅÊÜÇÉËËÕÎËÐäÆÄÔÍÙàÌÎÏÐÚéÊÉÒÐÔ×ÏèÖÓØÓÕÒåÐÓìÐÕÖÖàðÒÐèÔÖÜÙÞåØØÙÝííÙÛßÝáÝÝçéÜÜòÞàãäîæäèïââóåæäèøíèæ÷êêòíëøóñÿúøýÿüÿÿÿ!ù ÿ,,,þÿ H° Áƒ*\È°¡Ã‡#JœH±¢Å‹3jÜȱ£Ç CŠI²¤É“(Sª\ɲ¥Ë—0cÊœI³¦Í›8sêÜɳ§ÏŸ@ƒ J´¨Ñ£H“*]Ê´©Ó§P£JJµªÕ«X³jÝʵ«×¯`ÊK¶¬Ù³hÓª]˶­Û·pãÊK·®Ý»xóêÝË·¯ß¿€ L¸°áÈ+^̸±ãÇ#KžL¹²å˘3kÞ̹³çÏ C‹Mº´éÓ¨!ÇK—p8E²Üµîû:’µq²gç}=ÉZ¹q¸ußåí»ÜïàÂç7Îxîäo—3oŽ:[éÓ©?·Ž{víÜ»þ+êý½¼óðe½—Ÿ~}XõëÙWwÏ5Ýøâñ×·§¿Õ˜%hù8Ž5ñð·Õ7ß8Ð,CZq³Œ‚úAÍvZ5 2~Çà…j5Í2ãtØœ…†XÕ†&÷aŠ*R50-¾£VÆÈR"…6Þ˜U/½ì( Š>f% "4*Øc‘VÙ‹‚Ý,É$UNNgÎtÝ4¸Œ,ÈXã”OU‰åmË,ƒŒ,¡øbL8‚I%"Ob¹Ì4áL3M:ñ´éfU²Ð'sÝ,Ã;_î)•˜€ Š¡Z!j\ Ü,Ê(VŽ–©¤“6 gv—fzU¥zZ¨ŠŠ:ê¦rFjê›>Zêªþ‡¢š¨ª°FE*­µ†)««¸æÚÔ­˜úÊ°Â:El±Ãîjé«È*ul³I= íQÒN[TµÖ…m¶AmËmNäí·4ÅSÍ/®¨RŠ-ËÔÓ‹²¡’›S8…Ô!\pÁÆz¢ §ÌÊ{½Hˆala…@ü›j°×D°Á`l±ED À½FLÓÄqqÆ¡d—MÀÏ41dˆlEhb22Õ@œrL ·¬°(0F‚åXS‹*äÜ,q!“†ËVDáÄ>(4 Hàb´ÊHSÌ´ÓK,ÁÏÈÔòG4P¢çÕ-­¼ôÎN;±Ä?tP@€ƒ gTƒ¶þK ¯mEÓN¸ ÷Äïwå³_Ft1=P¢8†/"1†Ñ){ÓÝàö¾ÕùŽ|õSàEjáЀ 4P`‚Xá‚ k×6è¾÷±nsÒ£Ÿ1R‹ ,þd€ƒ׆íL}V  ;xCÅÍ/;¬H-. ‚ P ˆB„ÃXvÄ¿îm´a✨Ã(V$h<à5dq [TÚξHCçéÀ0À!Í(Å4ZÌp£·x02x‘k•sð¨Ç2òQ"SlŬXŽ„<Øäº7E2Rq{|$$ÓÃÜ¡Àp„á!™×¼E攎åC"YJ'Ah Ùvº::ï“9„¢,BK…ÍP8ÆKÔyò•Á á02Ũ/wKDA¢°5 ¦n‘7h¤0§¹H~wnKÝ ZPD!€‰üe8a9Nr&$’“þtÚ÷n( Pà¹ó^ž)NiÚóž°¦1m©NhV€Ð÷§WêÑH8ÆA ˆŽt$\Qà @`°Á÷, ÊùaAoE¨BCú<–4€€ƒËSzl<Ã7bŠb~±¡6ÍN-@À-`éëDÀÆ ¼@D5H[PË%4ÔuU­S)ÐÔ§¢š°«ª€0»¬Äœ õ*á>IUp@¬dÍë´”UÍ€°P(râ3®¤+U—š×ÆBàd[ –5n­fW Í°Žµ±y•Àp€›V€À€/2Kʸ"Uq%­þìgAÚ“à¨À(   "«‡¥éHM;[Ú6V@©~˜ÚÕÆ4¸3) nP… ׸Øå-öjØÁìˆiG?º†Þ±0h„8v!Æf÷½øªQç&´”L¨#ë¤ ohcJÀë{ß»FÀt£š5f~9+…Gˆ#mpq Úø  þ[:ç ƒ¨7^¸«FÜ ØÂD5jîä0ˆ+¸YpÆ:ðà±ÒࣅB@ἢؾ’Tð¨qM\á•]Ç9ðP#üí¸Ç> ÜÿÁ~TðñŽ~ˆCRhºà{Äb»hÇþ>Ö±mØ9 ð•1ÜZÓ nóè‡7!Aò؇=öŽXøa Ç9Ì`b8Å÷]è÷l ‰<ïYx'¤± `Ä°ÀÀÑŽ<øÑöµ&:åjÑGXz4°€ ž …X“•±ØÇ6´Ý9ÛS³«N0!~hÖd«hð {´c½F5–cà2® »³XD±·aP“5yÆ=Ú ×׆ôQ9ƒÔ`#¨¬¶ûÁmP[ ÌX3$V`btO3ÃÑ}^Þ Š‚û!Lw½)`NÄ"#>·´émyñWV3pÔχ±–œ¶þf5«ÍvéºNÄG%ŠKf´ãrž8Ê+>уR³àÇ6ÌZÆh4Yó.K€7`õ ò  3O¡±FHÆ= ¡y΋àÎÄã²ðAxA &Ö![P~Ù¯Ð8âöTw_Ï“B#œñŽ{x”oø9î± P@bãÆD£]þÿH`‘ ´`À_q¬CÒG>¢aj#`Bû‡=øAn~›Òªþ>-Þ¡ 6xøès P°ÒÐç`j4`˜ð À° †ðý¦xéÆxG~üÔ¥ 3öumP€Òð{#¶9‡w8MãR¹Ã?À ü }P Ç dÕm ùÀ ævb'¨w)ç6à7΀Š#ó°m0[! mÌpwØÅ}|{K~÷ ÄP1@Rxý0 FZqpÒ0†§Vuÿ6„W¸â ïÀ Bàà±äVr÷Ö»–†øw|û§ ‡°|ëÀ J@þàë y™€†¸¶ÍðÅ7mÇ xA@ˆ¢kÀ ÷@Àðq ÎmS„džG€¹@ Hˆ. Ì° k!À ëý jV§¨†B8SIäUIÐnÀ7X$àÍ°£À‰~0 Ì° ÒÀ ‹`&Œ©ÈU;³a‹”9°[ð³øŒ$fS`RØXThFF5ŒœuQŒ5Žåhk¡æ‡@¶v‰záè^@ÎhƵ[íEÐÅæd^æf~æhžæj¾ælÞænþæpçr>çt^çv~çxžçz¾ç“;dnssec-tools-2.0/apps/lftp/0000775000237200023720000000000012111172555016030 5ustar hardakerhardakerdnssec-tools-2.0/apps/lftp/README0000664000237200023720000002003212026144011016674 0ustar hardakerhardakerDNSSEC Validation for lftp ========================== Introduction ------------ lftp contains support for performing local DNSSEC validation for all DNS lookups. This document contains very brief instructions on how to use this feature. Configuring DNS is out of the scope of this document. The libraries libval and libsres from DNSSEC-Tools are prequisites. Additional options may be needed to point configure at the correct directory for these libraries. When compiled in, the option is still off by default. The new boolean option 'dns:strict-dnsssec' must be enabled by the user. Once strict DNSSEC checking is enabled, DNSSEC validation is done according to the configuration in the DNSSEC-tool configuration file dnsval.conf. Please refer to the DNSSEC-Tools documentation for more information. http://www.dnssec-tools.org/ Background ---------- A detailed description of DNSSEC is out of scope for this document, but a basic background is provided. DNS response packets are fairly easy to spoof, so an attacker situated in the network path between a client and its configured DNS server could possibly inject DSN response packets, causing the client to connect to another host. DNSSEC introduces cryptographic signing of DNS records, allowing a resolver to verify that a response has not been spoofed. This is done by configuring 'Trust Anchors', which are known good keys used to sign a zone. Rationale for Local Validation ------------------------------ As DNSSEC deployment grows, more ISPs are offering DNS servers which are DNSSEC aware and perform DNSSEC validation. So one might wonder why they would want local validation. There are several reasons. - Deployment of DNSSEC is progressing slowly, so end users might not have DNS servers which are capable of, or configured for, DNSSEC processing. - DNSSEC only guarantees the integrity of the DNS response to the DNS server. The response from the DNS server to the local host has no protection. Thus an attacker who can inject packets in the path between a DNS server and a stub resolver can not only redirect the client, but can make it belive a response was authentic! - Even if a DNSSEC server is on a local and trusted network, an end user might not have any influence over local policy. In other words, they might not be able to get a new Trust Anchor configured for a zone which they trust or mark a zone which is correctly signed as untrusted. - A DNSSEC server will not return data to an application for a response which cannot be validated. The means that, to the client, the DNS lookups will appear to have failed, even if the DNS server did get a response. With local validation, the application can distinguish between a non- responsive domain and validation failure. Requirements ------------ This code requires that the DNSSEC-Tools resolver and validator libraries and headers be installed. The DNSSEC-Tools package can be obtained from: http://www.dnssec-tools.org/resources/download.html Using DNSSEC validation ----------------------- The extra validation code in lftp is optional, and must be enabled by specifying --with-local-dnssec-validation when running configure. Testing ------- By default, DNSSEC-Tools' configuration file should be trying to validate all zones. A few zones are signed, but most are not. You can use the test zone provided by DNSSEC-Tools for verifying correct operation. First, configure lftp to require validation. $ echo "set dns:strict-dnssec 1" > ~/.lftprc Next, simpy run lftp with a few domain. This configuration does not require validation for any domains except dnssec-tools.org and cobham.com. So: $ lftp www.dnssec-tools.org cd ok, cwd=/ lftp www.dnssec-tools.org:/> $ lftp baddata-a.test.dnssec-tools.org lftp: baddata-a.test.dnssec-tools.org: DNS resolution not trusted. Viewing Details --------------- To see some debug output from the validation process, you can set the VAL_LOG_TARGET environment variable. (Higher numbers will result in more output. 5 is a good start, 7 is more than you really want.) $ export VAL_LOG_TARGET="5:stdout" $ lftp www.dnssec-tools.org 20120904::16:44:31 Validation result for {www.dnssec-tools.org, IN(1), A(1)}: VAL_SUCCESS:128 (Validated) 20120904::16:44:31 name=www.dnssec-tools.org class=IN type=A from-server=192.168.122.1 status=VAL_AC_VERIFIED:31 20120904::16:44:31 name=dnssec-tools.org class=IN type=DNSKEY[tag=34816] from-server=192.168.122.1 status=VAL_AC_VERIFIED:31 20120904::16:44:31 name=dnssec-tools.org class=IN type=DS from-server=192.168.122.1 status=VAL_AC_VERIFIED:31 20120904::16:44:31 name=org class=IN type=DNSKEY[tag=21366] from-server=192.168.122.1 status=VAL_AC_VERIFIED:31 20120904::16:44:31 name=org class=IN type=DS from-server=192.168.122.1 status=VAL_AC_VERIFIED:31 20120904::16:44:31 name=. class=IN type=DNSKEY from-server=192.168.122.1 status=VAL_AC_TRUST:12 20120904::16:44:31 Validation result for {www.dnssec-tools.org, IN(1), AAAA(28)}: VAL_NONEXISTENT_TYPE:133 (Validated) 20120904::16:44:31 Proof of non-existence [1 of 1] 20120904::16:44:31 name=www.dnssec-tools.org class=IN type=NSEC from-server=192.168.122.1 status=VAL_AC_VERIFIED:31 20120904::16:44:31 name=dnssec-tools.org class=IN type=DNSKEY[tag=34816] from-server=192.168.122.1 status=VAL_AC_VERIFIED:31 20120904::16:44:31 name=dnssec-tools.org class=IN type=DS from-server=192.168.122.1 status=VAL_AC_VERIFIED:31 20120904::16:44:31 name=org class=IN type=DNSKEY[tag=21366] from-server=192.168.122.1 status=VAL_AC_VERIFIED:31 20120904::16:44:31 name=org class=IN type=DS from-server=192.168.122.1 status=VAL_AC_VERIFIED:31 20120904::16:44:31 name=. class=IN type=DNSKEY from-server=192.168.122.1 status=VAL_AC_TRUST:12 cd ok, cwd=/ lftp www.dnssec-tools.org:/> $ lftp baddata-a.test.dnssec-tools.org 20120904::13:29:20 Validation result for {baddata-a.test.dnssec-tools.org, IN(1), A(1)}: VAL_BOGUS:1 (Untrusted) 20120904::13:29:20 name=baddata-a.test.dnssec-tools.org class=IN type=A from-server=168.150.236.43 status=VAL_AC_NOT_VERIFIED:18 20120904::13:29:20 name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=168.150.236.43 status=VAL_AC_VERIFIED:31 20120904::13:29:20 name=test.dnssec-tools.org class=IN type=DS from-server=168.150.236.43 status=VAL_AC_VERIFIED:31 20120904::13:29:20 name=dnssec-tools.org class=IN type=DNSKEY[tag=34816] from-server=168.150.236.43 status=VAL_AC_VERIFIED:31 20120904::13:29:20 name=dnssec-tools.org class=IN type=DS from-server=199.249.120.1 status=VAL_AC_VERIFIED:31 20120904::13:29:20 name=org class=IN type=DNSKEY[tag=21366] from-server=199.249.120.1 status=VAL_AC_VERIFIED:31 20120904::13:29:20 name=org class=IN type=DS from-server=198.41.0.4 status=VAL_AC_VERIFIED:31 20120904::13:29:20 name=. class=IN type=DNSKEY from-server=198.41.0.4 status=VAL_AC_TRUST:12 20120904::13:29:20 Validation result for {baddata-a.test.dnssec-tools.org, IN(1), AAAA(28)}: VAL_NONEXISTENT_TYPE:133 (Validated) 20120904::13:29:20 Proof of non-existence [1 of 1] 20120904::13:29:20 name=baddata-a.test.dnssec-tools.org class=IN type=NSEC from-server=192.168.122.1 status=VAL_AC_VERIFIED:31 20120904::13:29:20 name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=168.150.236.43 status=VAL_AC_VERIFIED:31 20120904::13:29:20 name=test.dnssec-tools.org class=IN type=DS from-server=168.150.236.43 status=VAL_AC_VERIFIED:31 20120904::13:29:20 name=dnssec-tools.org class=IN type=DNSKEY[tag=34816] from-server=168.150.236.43 status=VAL_AC_VERIFIED:31 20120904::13:29:20 name=dnssec-tools.org class=IN type=DS from-server=199.249.120.1 status=VAL_AC_VERIFIED:31 20120904::13:29:20 name=org class=IN type=DNSKEY[tag=21366] from-server=199.249.120.1 status=VAL_AC_VERIFIED:31 20120904::13:29:20 name=org class=IN type=DS from-server=198.41.0.4 status=VAL_AC_VERIFIED:31 20120904::13:29:20 name=. class=IN type=DNSKEY from-server=198.41.0.4 status=VAL_AC_TRUST:12 lftp: baddata-a.test.dnssec-tools.org: DNS resolution not trusted. dnssec-tools-2.0/apps/lftp/lftp-dnssec.patch0000664000237200023720000001254712026144000021271 0ustar hardakerhardakerdiff -I '\$Id: ' -u -r -b -w -p -d --exclude-from=/home/rstory/.rcfiles/diff-ignore --new-file clean/lftp-4.0.2/configure.ac lftp-4.0.2/configure.ac --- clean/lftp-4.0.2/configure.ac 2009-09-23 03:46:35.000000000 -0400 +++ lftp-4.0.2/configure.ac 2009-11-16 13:36:24.000000000 -0500 @@ -283,6 +283,32 @@ AC_CHECK_LIB(expat, XML_ParserCreateNS, AC_DEFINE(HAVE_LIBEXPAT, 1, [Define if you have expat library]) ]) +# Check whether user wants DNSSEC local validation support +AC_ARG_WITH(dnssec-local-validation, + [ --with-dnssec-local-validation Enable local DNSSEC validation using libval (default=no)], want_dnssec=$withval, want_dnssec=no) +if test "x$want_dnssec" = "xyes"; then + AC_CHECK_HEADERS(validator/validator.h) + if test "$ac_cv_header_validator_validator_h" != yes; then + AC_MSG_ERROR(Can't find validator.h (from dnssec-tools)) + fi + AC_CHECK_LIB(ssl, SHA1_Init) + AC_CHECK_LIB(sres, query_send) + if test "$ac_cv_lib_sres_query_send" != yes; then + AC_MSG_ERROR(Can't find libsres (from dnssec-tools)) + fi + AC_CHECK_LIB(val, p_val_status,[LIBS="$LIBS -lval"]) + if test "x$ac_cv_lib_val_p_val_status" = "xno"; then + AC_CHECK_LIB(pthread, pthread_rwlock_init) + AC_CHECK_LIB(val-threads, p_val_status, + [LIBS="$LIBS -lval-threads -lpthread" LIBVAL_SUFFIX="-threads"], + AC_MSG_ERROR(Can't find libval or libval-threads (from dnssec-tools))) + fi + if test "x$ac_cv_lib_val_p_val_status" = "xyes" -o "x$ac_cv_lib_val_threads_p_val_status" = "xyes"; then + AC_DEFINE(DNSSEC_LOCAL_VALIDATION, 1, + [Define if you want local DNSSEC validation support]) + fi +fi + LFTP_PTY_CHECK dnl Checks for header files. diff -I '\$Id: ' -u -r -b -w -p -d --exclude-from=/home/rstory/.rcfiles/diff-ignore --new-file clean/lftp-4.0.2/src/Resolver.cc lftp-4.0.2/src/Resolver.cc --- clean/lftp-4.0.2/src/Resolver.cc 2009-07-17 09:04:46.000000000 -0400 +++ lftp-4.0.2/src/Resolver.cc 2009-11-16 13:40:10.000000000 -0500 @@ -109,6 +109,12 @@ Resolver::Resolver(const char *h,const c error=0; no_cache=false; + +#ifdef DNSSEC_LOCAL_VALIDATION + if (VAL_NO_ERROR != val_create_context(NULL, &val_context)) { + val_log(NULL, LOG_ERR, "Cannot create validator context."); + } +#endif } Resolver::~Resolver() @@ -123,6 +129,13 @@ Resolver::~Resolver() w->Kill(SIGKILL); w.borrow()->Auto(); } + +#ifdef DNSSEC_LOCAL_VALIDATION + val_free_context(val_context); + + free_validator_state(); +#endif + } int Resolver::Do() @@ -492,9 +505,22 @@ void Resolver::LookupSRV_RR() return; } time(&try_time); + +#ifndef DNSSEC_LOCAL_VALIDATION len=res_search(srv_name, C_IN, T_SRV, answer, sizeof(answer)); if(len>=0) break; +#else + val_status_t val_status; + int require_trust = ResMgr::Query("dns:strict-dnssec",hostname); + len=val_res_search(val_context,srv_name, C_IN, T_SRV, answer, sizeof(answer), &val_status); + if(len>=0) { + if(require_trust && ! val_istrusted(val_status)) + return; + else + break; + } +#endif #ifdef HAVE_H_ERRNO if(h_errno!=TRY_AGAIN) return; @@ -702,7 +728,22 @@ void Resolver::LookupOne(const char *nam a_hint.ai_flags = AI_PASSIVE; a_hint.ai_family = PF_UNSPEC; +#ifndef DNSSEC_LOCAL_VALIDATION ainfo_res = getaddrinfo(name, NULL, &a_hint, &ainfo); +#else + val_status_t val_status; + int require_trust=ResMgr::Query("dns:strict-dnssec",name); + ainfo_res = val_getaddrinfo(val_context, name, NULL, &a_hint, &ainfo, + &val_status); + if((VAL_GETADDRINFO_HAS_STATUS(ainfo_res)) && ! val_istrusted(val_status) && + require_trust) + { + // untrusted answer + error = _("DNS resolution not trusted."); + break; + } +#endif + if(ainfo_res == 0) { diff -I '\$Id: ' -u -r -b -w -p -d --exclude-from=/home/rstory/.rcfiles/diff-ignore --new-file clean/lftp-4.0.2/src/Resolver.h lftp-4.0.2/src/Resolver.h --- clean/lftp-4.0.2/src/Resolver.h 2009-07-17 09:04:46.000000000 -0400 +++ lftp-4.0.2/src/Resolver.h 2009-10-30 11:57:31.000000000 -0400 @@ -29,6 +29,10 @@ #include "Cache.h" #include "network.h" +#ifdef DNSSEC_LOCAL_VALIDATION +# include "validator/validator.h" +#endif + class Resolver : public SMTask, protected ProtoLog { xstring hostname; @@ -63,6 +67,9 @@ class Resolver : public SMTask, protecte const char *error; static class ResolverCache *cache; +#ifdef DNSSEC_LOCAL_VALIDATION + val_context_t *val_context; +#endif bool no_cache; bool use_fork; diff -I '\$Id: ' -u -r -b -w -p -d --exclude-from=/home/rstory/.rcfiles/diff-ignore --new-file clean/lftp-4.0.2/src/resource.cc lftp-4.0.2/src/resource.cc --- clean/lftp-4.0.2/src/resource.cc 2009-03-17 06:59:59.000000000 -0400 +++ lftp-4.0.2/src/resource.cc 2009-10-20 14:47:30.000000000 -0400 @@ -325,6 +325,9 @@ static ResType lftp_vars[] = { {"dns:order", DEFAULT_ORDER, OrderValidate,0}, {"dns:SRV-query", "no", ResMgr::BoolValidate,0}, {"dns:use-fork", "yes", ResMgr::BoolValidate,ResMgr::NoClosure}, +#ifdef DNSSEC_LOCAL_VALIDATION + {"dns:strict-dnssec", "no", ResMgr::BoolValidate,0}, +#endif {"fish:shell", "/bin/sh",0,0}, {"fish:connect-program", "ssh -a -x",0,0}, dnssec-tools-2.0/apps/qt5/0000775000237200023720000000000012111172577015600 5ustar hardakerhardakerdnssec-tools-2.0/apps/qt5/qt5.patch0000664000237200023720000002157612060424061017334 0ustar hardakerhardakerdiff --git a/config.tests/unix/dnssec/dnssec.cpp b/config.tests/unix/dnssec/dnssec.cpp new file mode 100644 index 0000000..22e38d3 --- /dev/null +++ b/config.tests/unix/dnssec/dnssec.cpp @@ -0,0 +1,54 @@ +/**************************************************************************** +** +** Copyright (C) 2012 Digia Plc and/or its subsidiary(-ies). +** Contact: http://www.qt-project.org/legal +** +** This file is part of the config.tests of the Qt Toolkit. +** +** $QT_BEGIN_LICENSE:LGPL$ +** Commercial License Usage +** Licensees holding valid commercial Qt licenses may use this file in +** accordance with the commercial license agreement provided with the +** Software or, alternatively, in accordance with the terms contained in +** a written agreement between you and Digia. For licensing terms and +** conditions see http://qt.digia.com/licensing. For further information +** use the contact form at http://qt.digia.com/contact-us. +** +** GNU Lesser General Public License Usage +** Alternatively, this file may be used under the terms of the GNU Lesser +** General Public License version 2.1 as published by the Free Software +** Foundation and appearing in the file LICENSE.LGPL included in the +** packaging of this file. Please review the following information to +** ensure the GNU Lesser General Public License version 2.1 requirements +** will be met: http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html. +** +** In addition, as a special exception, Digia gives you certain additional +** rights. These rights are described in the Digia Qt LGPL Exception +** version 1.1, included in the file LGPL_EXCEPTION.txt in this package. +** +** GNU General Public License Usage +** Alternatively, this file may be used under the terms of the GNU +** General Public License version 3.0 as published by the Free Software +** Foundation and appearing in the file LICENSE.GPL included in the +** packaging of this file. Please review the following information to +** ensure the GNU General Public License version 3.0 requirements will be +** met: http://www.gnu.org/copyleft/gpl.html. +** +** +** $QT_END_LICENSE$ +** +****************************************************************************/ + +#include +#include + +int main(int, char **) +{ + val_status_t val_status; + struct addrinfo *ainfo; + + /* we don't actually care if it succeeds or not; just compiling is ok */ + val_getaddrinfo(NULL, "www.example.com", NULL, NULL, &ainfo, &val_status); + + return 0; +} diff --git a/config.tests/unix/dnssec/dnssec.pro b/config.tests/unix/dnssec/dnssec.pro new file mode 100644 index 0000000..a255d3b --- /dev/null +++ b/config.tests/unix/dnssec/dnssec.pro @@ -0,0 +1,4 @@ +SOURCES = dnssec.cpp +CONFIG -= qt dylib +mac:CONFIG -= app_bundle +LIBS += -lval-threads -lsres -lcrypto -lpthread diff --git a/configure b/configure index cb9497e..3e35487 100755 --- a/configure +++ b/configure @@ -839,6 +839,7 @@ CFG_CLOCK_GETTIME=auto CFG_CLOCK_MONOTONIC=auto CFG_MREMAP=auto CFG_GETADDRINFO=auto +CFG_DNSSEC=auto CFG_IPV6IFNAME=auto CFG_GETIFADDRS=auto CFG_INOTIFY=auto @@ -5092,6 +5093,24 @@ if [ "$CFG_GETADDRINFO" != "no" ]; then fi fi +# find if the platform provides libval with val_getaddrinfo (dnssec lookups) +if [ "$CFG_DNSSEC" != "no" ]; then + if "$unixtests/compile.test" "$XQMAKESPEC" "$QMAKE_CONFIG" $OPT_VERBOSE "$relpath" "$outpath" config.tests/unix/dnssec "dnssec" $L_FLAGS $I_FLAGS $l_FLAGS; then + CFG_DNSSEC=yes + else + if [ "$CFG_DNSSEC" = "yes" ] && [ "$CFG_CONFIGURE_EXIT_ON_ERROR" = "yes" ]; then + echo "dnssec support cannot be enabled due to functionality tests!" + echo " Turn on verbose messaging (-v) to $0 to see the final report." + echo " If you believe this message is in error you may use the continue" + echo " switch (-continue) to $0 to continue." + echo " Note: dnssec support requires the DNSSEC-Tools libval library" + exit 101 + else + CFG_DNSSEC=no + fi + fi +fi + # find if the platform provides inotify if [ "$CFG_INOTIFY" != "no" ]; then if compileTest unix/inotify "inotify"; then @@ -5388,6 +5407,9 @@ fi if [ "$CFG_GETADDRINFO" = "yes" ]; then QT_CONFIG="$QT_CONFIG getaddrinfo" fi +if [ "$CFG_DNSSEC" = "yes" ]; then + QT_CONFIG="$QT_CONFIG dnssec" +fi if [ "$CFG_IPV6IFNAME" = "yes" ]; then QT_CONFIG="$QT_CONFIG ipv6ifname" fi @@ -5869,6 +5891,7 @@ QMakeVar set sql-plugins "$SQL_PLUGINS" [ "$CFG_CLOCK_MONOTONIC" = "no" ] && QCONFIG_FLAGS="$QCONFIG_FLAGS QT_NO_CLOCK_MONOTONIC" [ "$CFG_MREMAP" = "no" ] && QCONFIG_FLAGS="$QCONFIG_FLAGS QT_NO_MREMAP" [ "$CFG_GETADDRINFO" = "no" ]&& QCONFIG_FLAGS="$QCONFIG_FLAGS QT_NO_GETADDRINFO" +[ "$CFG_DNSSEC" = "no" ] && QCONFIG_FLAGS="$QCONFIG_FLAGS QT_NO_DNSSEC" [ "$CFG_IPV6IFNAME" = "no" ] && QCONFIG_FLAGS="$QCONFIG_FLAGS QT_NO_IPV6IFNAME" [ "$CFG_GETIFADDRS" = "no" ] && QCONFIG_FLAGS="$QCONFIG_FLAGS QT_NO_GETIFADDRS" [ "$CFG_INOTIFY" = "no" ] && QCONFIG_FLAGS="$QCONFIG_FLAGS QT_NO_INOTIFY" @@ -6108,6 +6131,11 @@ elif [ "$CFG_OPENSSL" = "linked" ]; then echo "OPENSSL_LIBS = -lssl -lcrypto" >> "$QTMODULE.tmp" fi +#dump in the DNSSEC info +if [ '!' -z "$CFG_DNSSEC" ]; then + echo "DNSSEC_LIBS = -lval-threads -lsres -lcrypto" >> "$CACHEFILE.tmp" +fi + # cmdline args cat "$QMAKE_VARS_FILE" >> "$QTMODULE.tmp" rm -f "$QMAKE_VARS_FILE" 2>/dev/null @@ -6215,6 +6243,7 @@ if [ "$CFG_ARCH" = "mips" ]; then fi echo "IPv6 ifname support .... $CFG_IPV6IFNAME" echo "getaddrinfo support .... $CFG_GETADDRINFO" +echo "dnssec support ......... $CFG_DNSSEC" echo "getifaddrs support ..... $CFG_GETIFADDRS" echo "Accessibility .......... $CFG_ACCESSIBILITY" echo "NIS support ............ $CFG_NIS" diff --git a/src/network/kernel/kernel.pri b/src/network/kernel/kernel.pri index 57df8c8..5ed88b0 100644 --- a/src/network/kernel/kernel.pri +++ b/src/network/kernel/kernel.pri @@ -46,3 +46,8 @@ else:blackberry:SOURCES += kernel/qnetworkproxy_blackberry.cpp else:SOURCES += kernel/qnetworkproxy_generic.cpp blackberry: LIBS_PRIVATE += -lbps + +# DNSSEC support requires libval/libsres/libcrypto +contains(QT_CONFIG, dnssec) { + LIBS += -lval-threads -lsres -lcrypto +} diff --git a/src/network/kernel/qhostinfo.h b/src/network/kernel/qhostinfo.h index eb50557..e0683b3 100644 --- a/src/network/kernel/qhostinfo.h +++ b/src/network/kernel/qhostinfo.h @@ -60,7 +60,8 @@ public: enum HostInfoError { NoError, HostNotFound, - UnknownError + UnknownError, + DNSNotTrusted }; explicit QHostInfo(int lookupId = -1); diff --git a/src/network/kernel/qhostinfo_unix.cpp b/src/network/kernel/qhostinfo_unix.cpp index 61d4218..de24f7e 100644 --- a/src/network/kernel/qhostinfo_unix.cpp +++ b/src/network/kernel/qhostinfo_unix.cpp @@ -63,6 +63,11 @@ # include #endif +#if ! defined(QT_NO_DNSSEC) +#undef QT_NO_GETADDRINFO +#include +#endif + #if defined (QT_NO_GETADDRINFO) static QBasicMutex getHostByNameMutex; #endif @@ -202,19 +207,42 @@ QHostInfo QHostInfoAgent::fromName(const QString &hostName) #ifdef Q_ADDRCONFIG hints.ai_flags = Q_ADDRCONFIG; #endif +#if ! defined(QT_NO_DNSSEC) + val_status_t val_status; +#endif +#if ! defined(QT_NO_DNSSEC) + int result = val_getaddrinfo(NULL, aceHostname.constData(), 0, &hints, &res, + &val_status); +#else int result = getaddrinfo(aceHostname.constData(), 0, &hints, &res); +#endif # ifdef Q_ADDRCONFIG if (result == EAI_BADFLAGS) { // if the lookup failed with AI_ADDRCONFIG set, try again without it hints.ai_flags = 0; +#if ! defined(QT_NO_DNSSEC) + /* technically, this shouldn't actually happen with libval with + its current code base, but to be safe we'll mimic !dnssec */ + result = val_getaddrinfo(NULL, aceHostname.constData(), 0, &hints, &res, + &val_status); +#else result = getaddrinfo(aceHostname.constData(), 0, &hints, &res); +#endif } # endif if (result == 0) { addrinfo *node = res; QList addresses; + +#if ! defined(QT_NO_DNSSEC) + if (!val_istrusted(val_status)) { + results.setError(QHostInfo::DNSNotTrusted); + results.setErrorString(tr("DNS Answer Not Trusted")); + } else { +#endif + while (node) { #ifdef QHOSTINFO_DEBUG qDebug() << "getaddrinfo node: flags:" << node->ai_flags << "family:" << node->ai_family << "ai_socktype:" << node->ai_socktype << "ai_protocol:" << node->ai_protocol << "ai_addrlen:" << node->ai_addrlen; @@ -244,7 +272,13 @@ QHostInfo QHostInfoAgent::fromName(const QString &hostName) } results.setAddresses(addresses); + +#if ! defined(QT_NO_DNSSEC) + } +#endif + freeaddrinfo(res); + } else if (result == EAI_NONAME || result == EAI_FAIL #ifdef EAI_NODATA dnssec-tools-2.0/apps/qt5/qml-test/0000775000237200023720000000000012111172577017346 5ustar hardakerhardakerdnssec-tools-2.0/apps/qt5/qml-test/test.qml0000664000237200023720000000102712060424124021027 0ustar hardakerhardakerimport QtQuick 1.0 import QtWebKit 1.0 Rectangle { width: 800 height: 800 Rectangle { id: loadrect width: loading.width + 10 height: loading.height + 10 z: 10 anchors.centerIn: parent color: "white" opacity: .5 Text { id: loading text: "loading..." font.pixelSize: 40 anchors.centerIn: parent color: "black" z: 11 } } WebView { url: "http://www.dnssec-deployment.org/" anchors.fill: parent onLoadFinished: { loadrect.opacity = 0 } } } dnssec-tools-2.0/apps/qt5/qml-test/README0000664000237200023720000000100112060424124020205 0ustar hardakerhardakerThis .qml file can be run to show the loading of the DNSSEC-Deployment website, which has an icon on the top of the page indicating if DNSSEC is enabled or disabled. With Qt patched to enable validation, the logo should appear as a green check-box. To run it: # qmlviewer test.qml The advantage of this test is that it shows that the patch succeeds in modifying many aspects of Qt, as the qml infrastructure is a layer fairly high above the rest of the Qt code but even it gets protected by the base patch. dnssec-tools-2.0/apps/qt5/dnssec-test/0000775000237200023720000000000012111172577020034 5ustar hardakerhardakerdnssec-tools-2.0/apps/qt5/dnssec-test/DNSSECStatus.cpp0000664000237200023720000000631512060424106022717 0ustar hardakerhardaker#include "DNSSECStatus.h" #include const QString unknownString = "unknown"; DNSSECStatus::DNSSECStatus(HostData *hostData, QTableWidget *table, int rowNum, QTableWidget *problemTable, QWidget *parent) : QLabel(parent), m_table(table), m_rowNum(rowNum), m_problemTable(problemTable), m_socket(0) { m_hostData = *hostData; } void DNSSECStatus::updateText(QString fromText) { m_hostData.hostName = fromText; } void DNSSECStatus::updateStatus() { m_table->setItem(m_rowNum, 3, new QTableWidgetItem(tr("looking up..."))); QHostInfo::lookupHost(m_hostData.hostName, this, SLOT(lookupResponse(QHostInfo))); } void DNSSECStatus::lookupResponse(QHostInfo response) { if (response.error() == QHostInfo::NoError) m_table->setItem(m_rowNum, 1, new QTableWidgetItem(QString().number(response.addresses().count()))); else m_table->setItem(m_rowNum, 1, new QTableWidgetItem("")); m_table->setItem(m_rowNum, 2, new QTableWidgetItem(QString().number(response.error()))); QTableWidgetItem *errorDescription = new QTableWidgetItem((response.error() == QHostInfo::NoError ? tr("Trusted Answer") : response.errorString())); if ((response.error() == QHostInfo::NoError && m_hostData.expectFail) || (response.error() != QHostInfo::NoError && !m_hostData.expectFail)) { errorDescription->setBackground(QBrush(QColor(Qt::red).lighter())); int row = m_problemTable->rowCount(); m_problemTable->setRowCount(row+1); m_problemTable->setItem(row, 0, new QTableWidgetItem(m_hostData.hostName)); m_problemTable->setItem(row, 1, new QTableWidgetItem(response.error() == QHostInfo::NoError ? QString().number(response.addresses().count()) : QString(""))); m_problemTable->setItem(row, 2, new QTableWidgetItem(QString().number(response.error()))); QTableWidgetItem *errorDescription2 = new QTableWidgetItem((response.error() == QHostInfo::NoError ? tr("Trusted Answer") : response.errorString())); errorDescription2->setBackground(QBrush(QColor(Qt::red).lighter())); m_problemTable->setItem(row, 3, errorDescription2); m_problemTable->resizeColumnsToContents(); m_problemTable->resizeRowsToContents(); } else { errorDescription->setBackground(QBrush(QColor(Qt::green).lighter())); } m_table->setItem(m_rowNum, 3, errorDescription); emit dataChanged(); } void DNSSECStatus::initConnection(int port) { m_socket = new QTcpSocket(this); connect(m_socket, SIGNAL(error(QAbstractSocket::SocketError)), this, SLOT(tcpError(QAbstractSocket::SocketError))); connect(m_socket, SIGNAL(connected()), this, SLOT(tcpNoError())); m_socket->connectToHost(m_hostData.hostName, port); m_table->setItem(m_rowNum, 3, new QTableWidgetItem(tr("Connecting..."))); } void DNSSECStatus::tcpError(QAbstractSocket::SocketError error) { m_table->setItem(m_rowNum, 2, new QTableWidgetItem(QString().number(error))); m_table->setItem(m_rowNum, 3, new QTableWidgetItem(tr("Failed TCP Connection"))); } void DNSSECStatus::tcpNoError() { m_socket->close(); m_table->setItem(m_rowNum, 3, new QTableWidgetItem(tr("Connected Successfully"))); } dnssec-tools-2.0/apps/qt5/dnssec-test/ui_MainWindow.h0000664000237200023720000000445012060424106022750 0ustar hardakerhardaker/******************************************************************************** ** Form generated from reading UI file 'MainWindow.ui' ** ** Created: Mon Dec 3 16:30:12 2012 ** by: Qt User Interface Compiler version 5.0.0 ** ** WARNING! All changes made in this file will be lost when recompiling UI file! ********************************************************************************/ #ifndef UI_MAINWINDOW_H #define UI_MAINWINDOW_H #include #include #include #include #include #include #include #include #include QT_BEGIN_NAMESPACE class Ui_MainWindow { public: QWidget *centralWidget; QFormLayout *form; QStatusBar *statusBar; void setupUi(QMainWindow *MainWindow) { if (MainWindow->objectName().isEmpty()) MainWindow->setObjectName(QStringLiteral("MainWindow")); MainWindow->resize(806, 552); QSizePolicy sizePolicy(QSizePolicy::Expanding, QSizePolicy::Expanding); sizePolicy.setHorizontalStretch(0); sizePolicy.setVerticalStretch(0); sizePolicy.setHeightForWidth(MainWindow->sizePolicy().hasHeightForWidth()); MainWindow->setSizePolicy(sizePolicy); centralWidget = new QWidget(MainWindow); centralWidget->setObjectName(QStringLiteral("centralWidget")); form = new QFormLayout(centralWidget); form->setSpacing(6); form->setContentsMargins(11, 11, 11, 11); form->setObjectName(QStringLiteral("form")); form->setFieldGrowthPolicy(QFormLayout::ExpandingFieldsGrow); MainWindow->setCentralWidget(centralWidget); statusBar = new QStatusBar(MainWindow); statusBar->setObjectName(QStringLiteral("statusBar")); MainWindow->setStatusBar(statusBar); retranslateUi(MainWindow); QMetaObject::connectSlotsByName(MainWindow); } // setupUi void retranslateUi(QMainWindow *MainWindow) { MainWindow->setWindowTitle(QApplication::translate("MainWindow", "MainWindow", 0)); } // retranslateUi }; namespace Ui { class MainWindow: public Ui_MainWindow {}; } // namespace Ui QT_END_NAMESPACE #endif // UI_MAINWINDOW_H dnssec-tools-2.0/apps/qt5/dnssec-test/MainWindow.h0000664000237200023720000000074312060424106022254 0ustar hardakerhardaker#ifndef MAINWINDOW_H #define MAINWINDOW_H #include #include #include "DNSSECStatus.h" class MainWindow : public QMainWindow { Q_OBJECT public: explicit MainWindow(QWidget *parent = 0); ~MainWindow(); void loadHosts(QList hosts); void LoadFile(QString fileName); public slots: void resizeToData(); private: QTableWidget *m_table; QTableWidget *m_problemTable; }; #endif // MAINWINDOW_H dnssec-tools-2.0/apps/qt5/dnssec-test/DNSSECStatus.h0000664000237200023720000000205512060424106022361 0ustar hardakerhardaker#ifndef DNSSECSTATUS_H #define DNSSECSTATUS_H #include #include #include #include #include #include typedef struct HostData_s { QString hostName; short recordType; bool expectFail; } HostData; class DNSSECStatus : public QLabel { Q_OBJECT public: explicit DNSSECStatus(HostData *data, QTableWidget *table, int rowNum, QTableWidget *problemTable = 0, QWidget *parent = 0); signals: void dataChanged(); public slots: void updateText(QString fromText); void updateStatus(); void lookupResponse(QHostInfo response); void tcpError(QAbstractSocket::SocketError error); void tcpNoError(); void initConnection(int port = 80); private: HostData m_hostData; QTableWidget *m_problemTable; QTableWidget *m_table; int m_rowNum; QTcpSocket *m_socket; }; #endif // DNSSECSTATUS_H dnssec-tools-2.0/apps/qt5/dnssec-test/README0000664000237200023720000000142512060424106020705 0ustar hardakerhardakerThis simple application (dnssec-test) simply creates a table full of host names and then iteratively looks them all up to see if it can get a valid answer and color codes the results into 2 tables. Building ======== # qmake-qt5 (or maybe just 'qmake' depending on your platform) # make Running It ========== # ./dnssec-test Internal Details ================ If it can and the host shouldn't be accessible because of DNSSEC failures, it is marked as red. If a domain name can be resolved and either it's a valid lookup or it's invalid and the lookup infrastructure correctly denied the results, it's flagged as green. There is also a "try tcp" button to ensure that if you attempt a TCP connection to the host's machine (on port 80) it'll fail as well. dnssec-tools-2.0/apps/qt5/dnssec-test/dnssec-tests.txt0000664000237200023720000004564412060424106023220 0ustar hardakerhardakeraddedlater-nosig-A.test.dnssec-tools.org addedlater-nosig-AAAA.test.dnssec-tools.org,28, baddata-A.test.dnssec-tools.org baddata-AAAA.test.dnssec-tools.org,28, baddata-cname-to-baddata-A.test.dnssec-tools.org baddata-cname-to-baddata-AAAA.test.dnssec-tools.org,28, baddata-cname-to-badsign-A.test.dnssec-tools.org baddata-cname-to-badsign-AAAA.test.dnssec-tools.org,28, baddata-cname-to-futuredate-A.test.dnssec-tools.org baddata-cname-to-futuredate-AAAA.test.dnssec-tools.org,28, baddata-cname-to-good-A.test.dnssec-tools.org baddata-cname-to-good-AAAA.test.dnssec-tools.org,28, baddata-cname-to-nosig-A.test.dnssec-tools.org baddata-cname-to-nosig-AAAA.test.dnssec-tools.org,28, baddata-cname-to-pastdate-A.test.dnssec-tools.org baddata-cname-to-pastdate-AAAA.test.dnssec-tools.org,28, baddata-cname-to-reverseddates-A.test.dnssec-tools.org baddata-cname-to-reverseddates-AAAA.test.dnssec-tools.org,28, badsign-A.test.dnssec-tools.org badsign-AAAA.test.dnssec-tools.org,28, badsign-cname-to-baddata-A.test.dnssec-tools.org badsign-cname-to-baddata-AAAA.test.dnssec-tools.org,28, badsign-cname-to-badsign-A.test.dnssec-tools.org badsign-cname-to-badsign-AAAA.test.dnssec-tools.org,28, badsign-cname-to-futuredate-A.test.dnssec-tools.org badsign-cname-to-futuredate-AAAA.test.dnssec-tools.org,28, badsign-cname-to-good-A.test.dnssec-tools.org badsign-cname-to-good-AAAA.test.dnssec-tools.org,28, badsign-cname-to-nosig-A.test.dnssec-tools.org badsign-cname-to-nosig-AAAA.test.dnssec-tools.org,28, badsign-cname-to-pastdate-A.test.dnssec-tools.org badsign-cname-to-pastdate-AAAA.test.dnssec-tools.org,28, badsign-cname-to-reverseddates-A.test.dnssec-tools.org badsign-cname-to-reverseddates-AAAA.test.dnssec-tools.org,28, cnametodne-cname-to-baddata-A.test.dnssec-tools.org cnametodne-cname-to-baddata-AAAA.test.dnssec-tools.org,28, cnametodne-cname-to-badsign-A.test.dnssec-tools.org cnametodne-cname-to-badsign-AAAA.test.dnssec-tools.org,28, cnametodne-cname-to-futuredate-A.test.dnssec-tools.org cnametodne-cname-to-futuredate-AAAA.test.dnssec-tools.org,28, cnametodne-cname-to-good-A.test.dnssec-tools.org cnametodne-cname-to-good-AAAA.test.dnssec-tools.org,28, cnametodne-cname-to-nosig-A.test.dnssec-tools.org cnametodne-cname-to-nosig-AAAA.test.dnssec-tools.org,28, cnametodne-cname-to-pastdate-A.test.dnssec-tools.org cnametodne-cname-to-pastdate-AAAA.test.dnssec-tools.org,28, cnametodne-cname-to-reverseddates-A.test.dnssec-tools.org cnametodne-cname-to-reverseddates-AAAA.test.dnssec-tools.org,28, extra-TXT.test.dnssec-tools.org futuredate-A.test.dnssec-tools.org futuredate-AAAA.test.dnssec-tools.org,28, futuredate-cname-to-baddata-A.test.dnssec-tools.org futuredate-cname-to-baddata-AAAA.test.dnssec-tools.org,28, futuredate-cname-to-badsign-A.test.dnssec-tools.org futuredate-cname-to-badsign-AAAA.test.dnssec-tools.org,28, futuredate-cname-to-futuredate-A.test.dnssec-tools.org futuredate-cname-to-futuredate-AAAA.test.dnssec-tools.org,28, futuredate-cname-to-good-A.test.dnssec-tools.org futuredate-cname-to-good-AAAA.test.dnssec-tools.org,28, futuredate-cname-to-nosig-A.test.dnssec-tools.org futuredate-cname-to-nosig-AAAA.test.dnssec-tools.org,28, futuredate-cname-to-pastdate-A.test.dnssec-tools.org futuredate-cname-to-pastdate-AAAA.test.dnssec-tools.org,28, futuredate-cname-to-reverseddates-A.test.dnssec-tools.org futuredate-cname-to-reverseddates-AAAA.test.dnssec-tools.org,28, good-A.test.dnssec-tools.org,,false good-AAAA.test.dnssec-tools.org,28,false good-cname-to-baddata-A.test.dnssec-tools.org good-cname-to-baddata-AAAA.test.dnssec-tools.org,28, good-cname-to-badsign-A.test.dnssec-tools.org good-cname-to-badsign-AAAA.test.dnssec-tools.org,28, good-cname-to-futuredate-A.test.dnssec-tools.org good-cname-to-futuredate-AAAA.test.dnssec-tools.org,28, good-cname-to-good-A.test.dnssec-tools.org,,false good-cname-to-good-AAAA.test.dnssec-tools.org,28,false good-cname-to-nosig-A.test.dnssec-tools.org good-cname-to-nosig-AAAA.test.dnssec-tools.org,28, good-cname-to-pastdate-A.test.dnssec-tools.org good-cname-to-pastdate-AAAA.test.dnssec-tools.org,28, good-cname-to-reverseddates-A.test.dnssec-tools.org good-cname-to-reverseddates-AAAA.test.dnssec-tools.org,28, longlabel-01234567890123456789012345678901234567890123456789012.test.dnssec-tools.org nosig-A.test.dnssec-tools.org nosig-AAAA.test.dnssec-tools.org,28, nosig-cname-to-baddata-A.test.dnssec-tools.org nosig-cname-to-baddata-AAAA.test.dnssec-tools.org,28, nosig-cname-to-badsign-A.test.dnssec-tools.org nosig-cname-to-badsign-AAAA.test.dnssec-tools.org,28, nosig-cname-to-futuredate-A.test.dnssec-tools.org nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org,28, nosig-cname-to-good-A.test.dnssec-tools.org nosig-cname-to-good-AAAA.test.dnssec-tools.org,28, nosig-cname-to-nosig-A.test.dnssec-tools.org nosig-cname-to-nosig-AAAA.test.dnssec-tools.org,28, nosig-cname-to-pastdate-A.test.dnssec-tools.org nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org,28, nosig-cname-to-reverseddates-A.test.dnssec-tools.org nosig-cname-to-reverseddates-AAAA.test.dnssec-tools.org,28, nsectest.test.dnssec-tools.org pastdate-A.test.dnssec-tools.org pastdate-AAAA.test.dnssec-tools.org,28, pastdate-cname-to-baddata-A.test.dnssec-tools.org pastdate-cname-to-baddata-AAAA.test.dnssec-tools.org,28, pastdate-cname-to-badsign-A.test.dnssec-tools.org pastdate-cname-to-badsign-AAAA.test.dnssec-tools.org,28, pastdate-cname-to-futuredate-A.test.dnssec-tools.org pastdate-cname-to-futuredate-AAAA.test.dnssec-tools.org,28, pastdate-cname-to-good-A.test.dnssec-tools.org pastdate-cname-to-good-AAAA.test.dnssec-tools.org,28, pastdate-cname-to-nosig-A.test.dnssec-tools.org pastdate-cname-to-nosig-AAAA.test.dnssec-tools.org,28, pastdate-cname-to-pastdate-A.test.dnssec-tools.org pastdate-cname-to-pastdate-AAAA.test.dnssec-tools.org,28, pastdate-cname-to-reverseddates-A.test.dnssec-tools.org pastdate-cname-to-reverseddates-AAAA.test.dnssec-tools.org,28, reverseddates-A.test.dnssec-tools.org reverseddates-AAAA.test.dnssec-tools.org,28, reverseddates-cname-to-baddata-A.test.dnssec-tools.org reverseddates-cname-to-baddata-AAAA.test.dnssec-tools.org,28, reverseddates-cname-to-badsign-A.test.dnssec-tools.org reverseddates-cname-to-badsign-AAAA.test.dnssec-tools.org,28, reverseddates-cname-to-futuredate-A.test.dnssec-tools.org reverseddates-cname-to-futuredate-AAAA.test.dnssec-tools.org,28, reverseddates-cname-to-good-A.test.dnssec-tools.org reverseddates-cname-to-good-AAAA.test.dnssec-tools.org,28, reverseddates-cname-to-nosig-A.test.dnssec-tools.org reverseddates-cname-to-nosig-AAAA.test.dnssec-tools.org,28, reverseddates-cname-to-pastdate-A.test.dnssec-tools.org reverseddates-cname-to-pastdate-AAAA.test.dnssec-tools.org,28, reverseddates-cname-to-reverseddates-A.test.dnssec-tools.org reverseddates-cname-to-reverseddates-AAAA.test.dnssec-tools.org,28, addedlater-nosig-A.nsec3-ns.test.dnssec-tools.org addedlater-nosig-AAAA.nsec3-ns.test.dnssec-tools.org,28, baddata-A.nsec3-ns.test.dnssec-tools.org baddata-AAAA.nsec3-ns.test.dnssec-tools.org,28, badsign-A.nsec3-ns.test.dnssec-tools.org badsign-AAAA.nsec3-ns.test.dnssec-tools.org,28, extra-TXT.nsec3-ns.test.dnssec-tools.org futuredate-A.nsec3-ns.test.dnssec-tools.org futuredate-AAAA.nsec3-ns.test.dnssec-tools.org,28, good-A.nsec3-ns.test.dnssec-tools.org,,false good-AAAA.nsec3-ns.test.dnssec-tools.org,28,false longlabel-01234567890123456789012345678901234567890123456789012.nsec3-ns.test.dnssec-tools.org nosig-A.nsec3-ns.test.dnssec-tools.org nosig-AAAA.nsec3-ns.test.dnssec-tools.org,28, nsectest.nsec3-ns.test.dnssec-tools.org pastdate-A.nsec3-ns.test.dnssec-tools.org pastdate-AAAA.nsec3-ns.test.dnssec-tools.org,28, reverseddates-A.nsec3-ns.test.dnssec-tools.org reverseddates-AAAA.nsec3-ns.test.dnssec-tools.org,28, addedlater-nosig-A.rsamd5keys-ns.test.dnssec-tools.org addedlater-nosig-AAAA.rsamd5keys-ns.test.dnssec-tools.org,28, baddata-A.rsamd5keys-ns.test.dnssec-tools.org baddata-AAAA.rsamd5keys-ns.test.dnssec-tools.org,28, badsign-A.rsamd5keys-ns.test.dnssec-tools.org badsign-AAAA.rsamd5keys-ns.test.dnssec-tools.org,28, extra-TXT.rsamd5keys-ns.test.dnssec-tools.org futuredate-A.rsamd5keys-ns.test.dnssec-tools.org futuredate-AAAA.rsamd5keys-ns.test.dnssec-tools.org,28, good-A.rsamd5keys-ns.test.dnssec-tools.org,,false good-AAAA.rsamd5keys-ns.test.dnssec-tools.org,28,false longlabel-01234567890123456789012345678901234567890123456789012.rsamd5keys-ns.test.dnssec-tools.org nosig-A.rsamd5keys-ns.test.dnssec-tools.org nosig-AAAA.rsamd5keys-ns.test.dnssec-tools.org,28, nsectest.rsamd5keys-ns.test.dnssec-tools.org pastdate-A.rsamd5keys-ns.test.dnssec-tools.org pastdate-AAAA.rsamd5keys-ns.test.dnssec-tools.org,28, reverseddates-A.rsamd5keys-ns.test.dnssec-tools.org reverseddates-AAAA.rsamd5keys-ns.test.dnssec-tools.org,28, addedlater-nosig-A.newkeys-ns.test.dnssec-tools.org addedlater-nosig-AAAA.newkeys-ns.test.dnssec-tools.org,28, baddata-A.newkeys-ns.test.dnssec-tools.org baddata-AAAA.newkeys-ns.test.dnssec-tools.org,28, badsign-A.newkeys-ns.test.dnssec-tools.org badsign-AAAA.newkeys-ns.test.dnssec-tools.org,28, extra-TXT.newkeys-ns.test.dnssec-tools.org futuredate-A.newkeys-ns.test.dnssec-tools.org futuredate-AAAA.newkeys-ns.test.dnssec-tools.org,28, good-A.newkeys-ns.test.dnssec-tools.org,,false good-AAAA.newkeys-ns.test.dnssec-tools.org,28,false longlabel-01234567890123456789012345678901234567890123456789012.newkeys-ns.test.dnssec-tools.org nosig-A.newkeys-ns.test.dnssec-tools.org nosig-AAAA.newkeys-ns.test.dnssec-tools.org,28, nsectest.newkeys-ns.test.dnssec-tools.org pastdate-A.newkeys-ns.test.dnssec-tools.org pastdate-AAAA.newkeys-ns.test.dnssec-tools.org,28, reverseddates-A.newkeys-ns.test.dnssec-tools.org reverseddates-AAAA.newkeys-ns.test.dnssec-tools.org,28, addedlater-nosig-A.newzsk-ns.test.dnssec-tools.org addedlater-nosig-AAAA.newzsk-ns.test.dnssec-tools.org,28, baddata-A.newzsk-ns.test.dnssec-tools.org baddata-AAAA.newzsk-ns.test.dnssec-tools.org,28, badsign-A.newzsk-ns.test.dnssec-tools.org badsign-AAAA.newzsk-ns.test.dnssec-tools.org,28, extra-TXT.newzsk-ns.test.dnssec-tools.org futuredate-A.newzsk-ns.test.dnssec-tools.org futuredate-AAAA.newzsk-ns.test.dnssec-tools.org,28, good-A.newzsk-ns.test.dnssec-tools.org,,false good-AAAA.newzsk-ns.test.dnssec-tools.org,28,false longlabel-01234567890123456789012345678901234567890123456789012.newzsk-ns.test.dnssec-tools.org nosig-A.newzsk-ns.test.dnssec-tools.org nosig-AAAA.newzsk-ns.test.dnssec-tools.org,28, nsectest.newzsk-ns.test.dnssec-tools.org pastdate-A.newzsk-ns.test.dnssec-tools.org pastdate-AAAA.newzsk-ns.test.dnssec-tools.org,28, reverseddates-A.newzsk-ns.test.dnssec-tools.org reverseddates-AAAA.newzsk-ns.test.dnssec-tools.org,28, addedlater-nosig-A.rollzsk-ns.test.dnssec-tools.org addedlater-nosig-AAAA.rollzsk-ns.test.dnssec-tools.org,28, baddata-A.rollzsk-ns.test.dnssec-tools.org baddata-AAAA.rollzsk-ns.test.dnssec-tools.org,28, badsign-A.rollzsk-ns.test.dnssec-tools.org badsign-AAAA.rollzsk-ns.test.dnssec-tools.org,28, extra-TXT.rollzsk-ns.test.dnssec-tools.org futuredate-A.rollzsk-ns.test.dnssec-tools.org futuredate-AAAA.rollzsk-ns.test.dnssec-tools.org,28, good-A.rollzsk-ns.test.dnssec-tools.org,,false good-AAAA.rollzsk-ns.test.dnssec-tools.org,28,false longlabel-01234567890123456789012345678901234567890123456789012.rollzsk-ns.test.dnssec-tools.org nosig-A.rollzsk-ns.test.dnssec-tools.org nosig-AAAA.rollzsk-ns.test.dnssec-tools.org,28, nsectest.rollzsk-ns.test.dnssec-tools.org pastdate-A.rollzsk-ns.test.dnssec-tools.org pastdate-AAAA.rollzsk-ns.test.dnssec-tools.org,28, reverseddates-A.rollzsk-ns.test.dnssec-tools.org reverseddates-AAAA.rollzsk-ns.test.dnssec-tools.org,28, addedlater-nosig-A.reverseddates-ns.test.dnssec-tools.org addedlater-nosig-AAAA.reverseddates-ns.test.dnssec-tools.org,28, baddata-A.reverseddates-ns.test.dnssec-tools.org baddata-AAAA.reverseddates-ns.test.dnssec-tools.org,28, badsign-A.reverseddates-ns.test.dnssec-tools.org badsign-AAAA.reverseddates-ns.test.dnssec-tools.org,28, extra-TXT.reverseddates-ns.test.dnssec-tools.org futuredate-A.reverseddates-ns.test.dnssec-tools.org futuredate-AAAA.reverseddates-ns.test.dnssec-tools.org,28, good-A.reverseddates-ns.test.dnssec-tools.org good-AAAA.reverseddates-ns.test.dnssec-tools.org,28, longlabel-01234567890123456789012345678901234567890123456789012.reverseddates-ns.test.dnssec-tools.org nosig-A.reverseddates-ns.test.dnssec-tools.org nosig-AAAA.reverseddates-ns.test.dnssec-tools.org,28, nsectest.reverseddates-ns.test.dnssec-tools.org pastdate-A.reverseddates-ns.test.dnssec-tools.org pastdate-AAAA.reverseddates-ns.test.dnssec-tools.org,28, reverseddates-A.reverseddates-ns.test.dnssec-tools.org reverseddates-AAAA.reverseddates-ns.test.dnssec-tools.org,28, addedlater-nosig-A.pastdate-ds.test.dnssec-tools.org addedlater-nosig-AAAA.pastdate-ds.test.dnssec-tools.org,28, baddata-A.pastdate-ds.test.dnssec-tools.org baddata-AAAA.pastdate-ds.test.dnssec-tools.org,28, badsign-A.pastdate-ds.test.dnssec-tools.org badsign-AAAA.pastdate-ds.test.dnssec-tools.org,28, extra-TXT.pastdate-ds.test.dnssec-tools.org futuredate-A.pastdate-ds.test.dnssec-tools.org futuredate-AAAA.pastdate-ds.test.dnssec-tools.org,28, good-A.pastdate-ds.test.dnssec-tools.org good-AAAA.pastdate-ds.test.dnssec-tools.org,28, longlabel-01234567890123456789012345678901234567890123456789012.pastdate-ds.test.dnssec-tools.org nosig-A.pastdate-ds.test.dnssec-tools.org nosig-AAAA.pastdate-ds.test.dnssec-tools.org,28, nsectest.pastdate-ds.test.dnssec-tools.org pastdate-A.pastdate-ds.test.dnssec-tools.org pastdate-AAAA.pastdate-ds.test.dnssec-tools.org,28, reverseddates-A.pastdate-ds.test.dnssec-tools.org reverseddates-AAAA.pastdate-ds.test.dnssec-tools.org,28, addedlater-nosig-A.futuredate-ds.test.dnssec-tools.org addedlater-nosig-AAAA.futuredate-ds.test.dnssec-tools.org,28, baddata-A.futuredate-ds.test.dnssec-tools.org baddata-AAAA.futuredate-ds.test.dnssec-tools.org,28, badsign-A.futuredate-ds.test.dnssec-tools.org badsign-AAAA.futuredate-ds.test.dnssec-tools.org,28, extra-TXT.futuredate-ds.test.dnssec-tools.org futuredate-A.futuredate-ds.test.dnssec-tools.org futuredate-AAAA.futuredate-ds.test.dnssec-tools.org,28, good-A.futuredate-ds.test.dnssec-tools.org good-AAAA.futuredate-ds.test.dnssec-tools.org,28, longlabel-01234567890123456789012345678901234567890123456789012.futuredate-ds.test.dnssec-tools.org nosig-A.futuredate-ds.test.dnssec-tools.org nosig-AAAA.futuredate-ds.test.dnssec-tools.org,28, nsectest.futuredate-ds.test.dnssec-tools.org pastdate-A.futuredate-ds.test.dnssec-tools.org pastdate-AAAA.futuredate-ds.test.dnssec-tools.org,28, reverseddates-A.futuredate-ds.test.dnssec-tools.org reverseddates-AAAA.futuredate-ds.test.dnssec-tools.org,28, addedlater-nosig-A.nods-ns.test.dnssec-tools.org addedlater-nosig-AAAA.nods-ns.test.dnssec-tools.org,28, baddata-A.nods-ns.test.dnssec-tools.org baddata-AAAA.nods-ns.test.dnssec-tools.org,28, badsign-A.nods-ns.test.dnssec-tools.org badsign-AAAA.nods-ns.test.dnssec-tools.org,28, extra-TXT.nods-ns.test.dnssec-tools.org futuredate-A.nods-ns.test.dnssec-tools.org futuredate-AAAA.nods-ns.test.dnssec-tools.org,28, good-A.nods-ns.test.dnssec-tools.org good-AAAA.nods-ns.test.dnssec-tools.org,28, longlabel-01234567890123456789012345678901234567890123456789012.nods-ns.test.dnssec-tools.org nosig-A.nods-ns.test.dnssec-tools.org nosig-AAAA.nods-ns.test.dnssec-tools.org,28, nsectest.nods-ns.test.dnssec-tools.org pastdate-A.nods-ns.test.dnssec-tools.org pastdate-AAAA.nods-ns.test.dnssec-tools.org,28, reverseddates-A.nods-ns.test.dnssec-tools.org reverseddates-AAAA.nods-ns.test.dnssec-tools.org,28, addedlater-nosig-A.nosig-ns.test.dnssec-tools.org addedlater-nosig-AAAA.nosig-ns.test.dnssec-tools.org,28, baddata-A.nosig-ns.test.dnssec-tools.org baddata-AAAA.nosig-ns.test.dnssec-tools.org,28, badsign-A.nosig-ns.test.dnssec-tools.org badsign-AAAA.nosig-ns.test.dnssec-tools.org,28, extra-TXT.nosig-ns.test.dnssec-tools.org futuredate-A.nosig-ns.test.dnssec-tools.org futuredate-AAAA.nosig-ns.test.dnssec-tools.org,28, good-A.nosig-ns.test.dnssec-tools.org good-AAAA.nosig-ns.test.dnssec-tools.org,28, longlabel-01234567890123456789012345678901234567890123456789012.nosig-ns.test.dnssec-tools.org nosig-A.nosig-ns.test.dnssec-tools.org nosig-AAAA.nosig-ns.test.dnssec-tools.org,28, nsectest.nosig-ns.test.dnssec-tools.org pastdate-A.nosig-ns.test.dnssec-tools.org pastdate-AAAA.nosig-ns.test.dnssec-tools.org,28, reverseddates-A.nosig-ns.test.dnssec-tools.org reverseddates-AAAA.nosig-ns.test.dnssec-tools.org,28, addedlater-nosig-A.badsign-ns.test.dnssec-tools.org addedlater-nosig-AAAA.badsign-ns.test.dnssec-tools.org,28, baddata-A.badsign-ns.test.dnssec-tools.org baddata-AAAA.badsign-ns.test.dnssec-tools.org,28, badsign-A.badsign-ns.test.dnssec-tools.org badsign-AAAA.badsign-ns.test.dnssec-tools.org,28, extra-TXT.badsign-ns.test.dnssec-tools.org futuredate-A.badsign-ns.test.dnssec-tools.org futuredate-AAAA.badsign-ns.test.dnssec-tools.org,28, good-A.badsign-ns.test.dnssec-tools.org good-AAAA.badsign-ns.test.dnssec-tools.org,28, longlabel-01234567890123456789012345678901234567890123456789012.badsign-ns.test.dnssec-tools.org nosig-A.badsign-ns.test.dnssec-tools.org nosig-AAAA.badsign-ns.test.dnssec-tools.org,28, nsectest.badsign-ns.test.dnssec-tools.org pastdate-A.badsign-ns.test.dnssec-tools.org pastdate-AAAA.badsign-ns.test.dnssec-tools.org,28, reverseddates-A.badsign-ns.test.dnssec-tools.org reverseddates-AAAA.badsign-ns.test.dnssec-tools.org,28, addedlater-nosig-A.good-ns.test.dnssec-tools.org addedlater-nosig-AAAA.good-ns.test.dnssec-tools.org,28, baddata-A.good-ns.test.dnssec-tools.org baddata-AAAA.good-ns.test.dnssec-tools.org,28, badsign-A.good-ns.test.dnssec-tools.org badsign-AAAA.good-ns.test.dnssec-tools.org,28, extra-TXT.good-ns.test.dnssec-tools.org futuredate-A.good-ns.test.dnssec-tools.org futuredate-AAAA.good-ns.test.dnssec-tools.org,28, good-A.good-ns.test.dnssec-tools.org,,false good-AAAA.good-ns.test.dnssec-tools.org,28,false longlabel-01234567890123456789012345678901234567890123456789012.good-ns.test.dnssec-tools.org nosig-A.good-ns.test.dnssec-tools.org nosig-AAAA.good-ns.test.dnssec-tools.org,28, nsectest.good-ns.test.dnssec-tools.org pastdate-A.good-ns.test.dnssec-tools.org pastdate-AAAA.good-ns.test.dnssec-tools.org,28, reverseddates-A.good-ns.test.dnssec-tools.org reverseddates-AAAA.good-ns.test.dnssec-tools.org,28, baddata-A.insecure-ns.test.dnssec-tools.org,,false baddata-AAAA.insecure-ns.test.dnssec-tools.org,28,false badsign-A.insecure-ns.test.dnssec-tools.org,,false badsign-AAAA.insecure-ns.test.dnssec-tools.org,28,false extra-TXT.insecure-ns.test.dnssec-tools.org,,false futuredate-A.insecure-ns.test.dnssec-tools.org,,false futuredate-AAAA.insecure-ns.test.dnssec-tools.org,28,false good-A.insecure-ns.test.dnssec-tools.org,,false good-AAAA.insecure-ns.test.dnssec-tools.org,28,false longlabel-01234567890123456789012345678901234567890123456789012.insecure-ns.test.dnssec-tools.org,,false nosig-A.insecure-ns.test.dnssec-tools.org,,false nosig-AAAA.insecure-ns.test.dnssec-tools.org,28,false nsectest.insecure-ns.test.dnssec-tools.org,,false pastdate-A.insecure-ns.test.dnssec-tools.org,,false pastdate-AAAA.insecure-ns.test.dnssec-tools.org,28,false reverseddates-A.insecure-ns.test.dnssec-tools.org,,false reverseddates-AAAA.insecure-ns.test.dnssec-tools.org,28,false dnssec-tools-2.0/apps/qt5/dnssec-test/dnssec-test.pro0000664000237200023720000000052412060424106023002 0ustar hardakerhardaker#------------------------------------------------- # # Project created by QtCreator 2011-11-15T09:34:02 # #------------------------------------------------- QT += network widgets TARGET = dnssec-test TEMPLATE = app SOURCES += main.cpp\ MainWindow.cpp \ DNSSECStatus.cpp HEADERS += MainWindow.h \ DNSSECStatus.h dnssec-tools-2.0/apps/qt5/dnssec-test/main.cpp0000664000237200023720000000034212060424106021452 0ustar hardakerhardaker#include #include "MainWindow.h" int main(int argc, char *argv[]) { QApplication a(argc, argv); MainWindow w; if (argc > 1) w.LoadFile(argv[1]); w.show(); return a.exec(); } dnssec-tools-2.0/apps/qt5/dnssec-test/MainWindow.cpp0000664000237200023720000000771112060424106022611 0ustar hardakerhardaker#include "MainWindow.h" #include "DNSSECStatus.h" #include #include #include #include #include #include #include #include MainWindow::MainWindow(QWidget *parent) : QMainWindow(parent) { QVBoxLayout *vbox = new QVBoxLayout(); QWidget *widget = new QWidget(); setCentralWidget(widget); widget->setLayout(vbox); vbox->addWidget(new QLabel(tr("Problems Found"))); m_problemTable = new QTableWidget(this); vbox->addWidget(m_problemTable); vbox->addWidget(new QLabel(tr("Detailed Results"))); m_table = new QTableWidget(this); vbox->addWidget(m_table); QList startingHosts; HostData hostData; hostData.expectFail = false; // this should succeed hostData.recordType = 1; // A hostData.hostName = "good-a.test.dnssec-tools.org"; startingHosts << hostData; hostData.expectFail = true; // these should fail hostData.hostName = "badsign-a.test.dnssec-tools.org"; startingHosts << hostData; loadHosts(startingHosts); } void MainWindow::loadHosts(QList hosts) { DNSSECStatus *status; QTableWidgetItem *count; QTableWidgetItem *errorNum; QTableWidgetItem *errorDescription; QLineEdit *edit; int row = 0; m_table->clear(); m_table->setRowCount(hosts.count()); m_table->setColumnCount(5); m_table->setSizePolicy(QSizePolicy::Expanding, QSizePolicy::Expanding); m_problemTable->clear(); m_problemTable->setColumnCount(4); m_problemTable->setSizePolicy(QSizePolicy::Expanding, QSizePolicy::Expanding); foreach(HostData hostData, hosts) { status = new DNSSECStatus(&hostData, m_table, row, m_problemTable, this); QPushButton *button = new QPushButton("->"); m_table->setCellWidget(row, 0, edit = new QLineEdit(hostData.hostName, this)); // m_table->setItem(row, 1, count); // m_table->setItem(row, 2, errorNum); // m_table->setItem(row, 3, errorDescription); m_table->setCellWidget(row, 4, button); connect(button, SIGNAL(clicked()), status, SLOT(initConnection())); connect(edit, SIGNAL(textChanged(QString)), status, SLOT(updateText(QString))); connect(edit, SIGNAL(returnPressed()), status, SLOT(updateStatus())); connect(status, SIGNAL(dataChanged()), this, SLOT(resizeToData())); status->setSizePolicy(QSizePolicy::Expanding, QSizePolicy::Expanding); edit->setMinimumWidth(400); QTimer::singleShot(1000, status, SLOT(updateStatus())); row++; } QStringList labels; labels << "Name" << "Address Count" << "Status" << "Status Description" << "Try TCP"; m_table->setHorizontalHeaderLabels(labels); m_problemTable->setHorizontalHeaderLabels(labels); resizeToData(); setMinimumSize(800,600); } void MainWindow::LoadFile(QString fileName) { QList hostDataList; QFile file(fileName); if (!file.open(QIODevice::ReadOnly | QIODevice::Text)) { QMessageBox msg; msg.setText(QString(tr("Failed to open the host file: %1").arg(fileName))); msg.exec(); return; } HostData hostData; hostData.recordType = 1; hostData.expectFail = true; QTextStream stream(&file); while(!stream.atEnd()) { QString line = stream.readLine(); QStringList parts = line.split(','); hostData.hostName = parts.at(0); hostData.recordType = (parts.count() > 1 && parts.at(1).length() > 0) ? parts.at(1).toShort() : 1; hostData.expectFail = (parts.count() > 2 && parts.at(2).length() > 0) ? (parts.at(2) == "true" ? true : false) : true; hostDataList << hostData; } loadHosts(hostDataList); } MainWindow::~MainWindow() { } void MainWindow::resizeToData() { m_table->resizeColumnsToContents(); m_table->resizeRowsToContents(); } dnssec-tools-2.0/apps/qt5/dnssec-test/MainWindow.ui0000664000237200023720000000157512060424106022446 0ustar hardakerhardaker MainWindow 0 0 806 552 0 0 MainWindow QFormLayout::ExpandingFieldsGrow dnssec-tools-2.0/apps/qt5/README0000664000237200023720000000170512060424061016452 0ustar hardakerhardakerThe patch included in the qt5.patch file modifies the base Qt code to: - make all DNS lookups (done using the Qt Classes) perform DNSSEC validation - This extends the returned error codes by 1, providing a new DNSNotTrusted enum returned by the QHostInfo class. - adds configure tests to add the needed libval and libsres libraries to the compilation line Applying and Using The Patch ============================ # cd QTSRCDIR/qtbase/ # patch -p1 < /path/to/qt4.patch # cd .. # ./configure [with any options you want, such as "-prefix /opt/qt5-dnssec" ] # make # make install To create an application linked against the new qt-compiled libraries that were installed in a different directory, simply run qmake from that installation path: # cd dnssec-test # /opt/qt5-dnssec/bin/qmake # make See the following page for more complete instructions on building qt5: http://qt-project.org/wiki/Building_Qt_5_from_Git dnssec-tools-2.0/apps/zabbix/0000775000237200023720000000000012111172547016343 5ustar hardakerhardakerdnssec-tools-2.0/apps/zabbix/zonestate0000775000237200023720000001425212107530733020311 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2011-2013 SPARTA, Inc. All rights reserved. See the COPYING # file distributed with this software for details. # # zonestate # # zonestate gathers information on zone file validity # for a demonstration Zabbix monitoring environment. # use strict; use Getopt::Long qw(:config no_ignore_case_always); use Net::DNS::SEC::Tools::rollrec; # # Version information. # my $NAME = "zonestate"; my $VERS = "$NAME version: 2.0.0"; my $DTVERS = "DNSSEC-Tools Version: 2.0"; ####################################################################### # # Data required for command line options. # my %options = (); # Filled option array. my @opts = ( "numeric", # Give a numeric response. "verbose", # Give a verbose error response. "Version", # Display the version number. "help", # Display a help message. ); my $usenum = 0; # Flag for -numeric. my $verbose = 0; # Flag for -verbose. my $DEMODIR = "/home/dt-nagios/zones"; # Demo directory. my $RRF = "$DEMODIR/demo.rollrec"; # Path to rollrec file. $| = 1; main(); exit(0); #------------------------------------------------------------------------- # Routine: main() # sub main { my $zone; # Zone whose zonefile validity we're getting. # # Check for options and a zone. # $zone = doopts(); # # This is purely for demo purposes. We're wanting to have a bad # zonefile to show what happens when zonestate finds one, so we're # redirecting things when fail.com is requested. # if($zone eq 'fail.com') { $DEMODIR = '/uem/zabbix/fake-data'; $RRF = "$DEMODIR/demo.rollrec"; $verbose = 1; } # # Read the rollrec file and check the specified zone's validity. # rollrec_read($RRF); zonestate($zone); rollrec_close(); } #------------------------------------------------------------------------- # Routine: doopts() # sub doopts { my $zone = shift; # Zone to examine. # # Parse the options. # GetOptions(\%options,@opts) || usage(); # # Show the version number if requested # version() if(defined($options{'Version'})); # # Give a usage flag if asked. # usage() if(defined($options{'help'})); # # Set our option variables based on the parsed options. # $usenum = $options{'numeric'} || 0; $verbose = $options{'verbose'} || 0; # # Ensure we were given a zone. # usage() if(@ARGV == 0); return($ARGV[0]); } #------------------------------------------------------------------------- # Routine: zonestate() # sub zonestate { my $zone = shift; # Zone to examine. my $zonefile; # Zone's file name. my $zonepath; # Zone's path name. my $ret; # Zone-check return code. if(! rollrec_exists($zone)) { out("no rollrec entry for zone \"$zone\"",150); return; } # # Get the path to the zone. # $zonefile = rollrec_recval($zone,"zonefile"); $zonepath = "$DEMODIR/$zonefile" if($zonefile !~ /^\//); # # Check the validity of the zone file. # system("/usr/sbin/named-checkzone -q $zone $zonepath"); $ret = $? >> 8; if($ret == 0) { out("zone file valid",0); } else { my $outstr = "$zone has problems"; # Output string. if($verbose) { $outstr = `/usr/sbin/named-checkzone $zone $zonepath`; } out($outstr,$ret); } } #------------------------------------------------------------------------- # Routine: out() # sub out { my $msg = shift; # Message to maybe print. my $rc = shift; # Value to print. if($usenum) { print "$rc\n"; } else { print "$msg\n"; } } #---------------------------------------------------------------------- # Routine: version() # # Purpose: Print the version number and exit. # sub version { print STDERR "$VERS\n"; exit(0); } #---------------------------------------------------------------------- # Routine: usage() # # Purpose: Print a usage message and exit. # sub usage { print STDERR "usage: zonestate [-numeric | -verbose | -Version | -help] \n"; exit(0); } =pod =head1 NAME zonestate - Displays the validity for a specified zonefile. =head1 SYNOPSIS zonestate [options] =head1 DESCRIPTION B was written specifically to gather information on zone file validity for a demonstration Zabbix monitoring environment. It can be adapted for use in other environments, but that is its intended purpose. The B command will be executed for the specified zone and a message will be printed that indicates the validity or errors of the specified zone. The zone file and the zone name are found in the B entry in the B demo environment. If the I<-verbose> option is given, then an invalid zonefile will result in the output from B being given. If I<-verbose> isn't given, then a simple error message will be printed. If the I<-numeric> option is given, then only the return code from B will be printed. This is intended for the purposes of creating graphs in the Zabbix monitoring system. This monitor plugin is a proof-of-concept prototype. It makes some assumptions (e.g., location of B file) that are invalid for production monitors. This may be fixed in the future. Purely for demo purposes, the B is handled differently from all other domains. A bad zone file was built for B in order to demonstrate B's behavior when it finds an errorful zone file. This zone file is not kept with the main B demo zones, but in its own location. If B is specified as the zone to check, then B is redirected to the intentionally bad zonefile. =head1 OPTIONS =over 4 =item B<-numeric> A numeric response will be printed, instead of the textual response. =item B<-verbose> A verbose response will be printed if an error is encountered. This verbose response will consist of the output from B. =item B<-Version> Displays the version information for B and the DNSSEC-Tools package. =item B<-help> Display a usage message and exit. =back =head1 COPYRIGHT Copyright 2011-2013 SPARTA, Inc. All rights reserved. See the COPYING file included with the DNSSEC-Tools package for details. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =head1 SEE ALSO B, B, B =cut dnssec-tools-2.0/apps/zabbix/uemstats0000775000237200023720000001705012107530733020141 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2011-2013 SPARTA, Inc. All rights reserved. See the COPYING # file distributed with this software for details. # # uemstats # uemstats retrieves the most recent DNS lookup response performed # by UEM for a given sensor/name-server/target-host group. # use strict; use Getopt::Long qw(:config no_ignore_case_always); use Net::DNS::SEC::Tools::rollrec; # # Version information. # my $NAME = "uemstats"; my $VERS = "$NAME version: 2.0.0"; my $DTVERS = "DNSSEC-Tools Version: 2.0"; ####################################################################### # # Data required for command line options. # my %options = (); # Filled option array. my @opts = ( "Version", # Display the version number. "help", # Display a help message. ); # my $datadir = '/uem/zabbix/data/uem'; my $uemdir = '/uem/dns-mgmt/data'; my $respdir = 'dns/resp'; my $suffix = 'NS-norec-dnssec.dns'; my $sensor; # UEM sensor we're looking at. my $nsip; # Root nameserver we're looking at. my $target; # Target host we're looking at. my %sensors = ( 'uem-west' => '75.101.48.146', 'uem-east' => '157.185.82.41', 'uemdev1' => '157.185.82.41', 'uemdev6' => '75.101.48.146', '75.101.48.146' => '75.101.48.146', '157.185.82.41' => '157.185.82.41', ); my %roots = ( 'a.root-servers.net' => '198.41.0.4', 'b.root-servers.net' => '192.228.79.201', 'c.root-servers.net' => '192.33.4.12', 'd.root-servers.net' => '128.8.10.90', 'e.root-servers.net' => '192.203.230.10', 'f.root-servers.net' => '192.5.5.241', 'g.root-servers.net' => '192.112.36.4', 'h.root-servers.net' => '128.63.2.53', 'i.root-servers.net' => '192.36.148.17', 'j.root-servers.net' => '192.58.128.30', 'k.root-servers.net' => '193.0.14.129', 'l.root-servers.net' => '199.7.83.42', 'm.root-servers.net' => '202.12.27.33', 'a' => '198.41.0.4', 'b' => '192.228.79.201', 'c' => '192.33.4.12', 'd' => '128.8.10.90', 'e' => '192.203.230.10', 'f' => '192.5.5.241', 'g' => '192.112.36.4', 'h' => '128.63.2.53', 'i' => '192.36.148.17', 'j' => '192.58.128.30', 'k' => '193.0.14.129', 'l' => '199.7.83.42', 'm' => '202.12.27.33', '198.41.0.4' => '198.41.0.4', '192.228.79.201' => '192.228.79.201', '192.33.4.12' => '192.33.4.12', '128.8.10.90' => '128.8.10.90', '192.203.230.10' => '192.203.230.10', '192.5.5.241' => '192.5.5.241', '192.112.36.4' => '192.112.36.4', '128.63.2.53' => '128.63.2.53', '192.36.148.17' => '192.36.148.17', '192.58.128.30' => '192.58.128.30', '193.0.14.129' => '193.0.14.129', '199.7.83.42' => '199.7.83.42', '202.12.27.33' => '202.12.27.33', ); my %targets = ( '.' => 1, 'nic.mil' => 1, 'tislabs.com' => 1, ); main(); exit(0); #------------------------------------------------------------------------- # Routine: main() # sub main { my $ud; # Most recent UEM datum. # # Check for options and arguments. # doopts(); # # Get the most recent datum from the UEM rootserver/target/sensor # triad. # $ud = uemdata(); # # Give the response from the most recent file. # print "$ud\n"; } #------------------------------------------------------------------------- # Routine: doopts() # sub doopts { my $zone = shift; # Zone to examine. # # Parse the options. # GetOptions(\%options,@opts) || usage(); # # Show the version number if requested # version() if(defined($options{'Version'})); # # Give a usage flag if asked. # usage() if(defined($options{'help'})); # # Ensure we were given a triad. # usage() if(@ARGV != 3); # # Ensure we were given a valid UEM sensor. # if(! defined($sensors{$ARGV[0]})) { print "-10\n"; exit; } # # Ensure we were given a valid root server. # if(! defined($roots{$ARGV[1]})) { print "-20\n"; exit; } # # Ensure we were given a valid target. # if(! defined($targets{$ARGV[2]})) { print "-30\n"; exit; } # # Save the triad. # $sensor = $sensors{$ARGV[0]}; $nsip = $roots{$ARGV[1]}; $target = $ARGV[2]; } #------------------------------------------------------------------------- # Routine: uemdata() # sub uemdata { my $filerex; # Regexp for this NS and target. my @files; # UEM data files. my $lastfile; # Last UEM data file. my @lines; # Lines from UEM data file. my $lastline; # Last entry. # # Get the data files for this rootserver/target pair. # $filerex = "$uemdir/$sensor/$respdir/*-$nsip-$target-$suffix"; @files = sort(glob($filerex)); # # Get the contents of the most recent data file. # $lastfile = $files[-1]; open(DF,"< $lastfile"); @lines = ; close(DF); # # If this is a dataful entry, return its response time. # $lastline = @lines[-1]; if($lastline =~ /^.* (.*) (NOERROR|DNSSEC_NOT_SUPPORTED)/) { return($1); } # # Otherwise, return nothing at all. # return(''); } #------------------------------------------------------------------------- # Routine: out() # sub out { my $rolltype = shift; # Type of rollover. my $phasenum = shift; # Rollover phase number. $phasenum = '' if(($phasenum == 0) || ($phasenum > 10)); print "$rolltype $phasenum\n"; } #---------------------------------------------------------------------- # Routine: version() # # Purpose: Print the version number and exit. # sub version { print STDERR "$VERS\n"; exit(0); } #---------------------------------------------------------------------- # Routine: usage() # # Purpose: Print a usage message and exit. # sub usage { print STDERR "usage: uemstats [-Version | -help] \n"; exit(0); } =pod =head1 NAME uemstats - Displays the rollover state for a specified zone. =head1 SYNOPSIS uemstats [options] =head1 DESCRIPTION B was written specifically to gather information on UEM status for a demonstration Zabbix monitoring environment. It can be adapted for use in other environments, but that is its intended purpose. B retrieves the most recent DNS lookup response performed by UEM for a given sensor/name-server/target-host group. If this is a non-error response, the response time is printed. If it is an error, then a null response is given. If the specified UEM sensor, root server, or target host are invalid, a negative number will be printed. The arguments are all required and are hard-coded in the body of B. If used in another environment, these values B be modified to fit the new installation. These data B be coordinated with the UEM configuration. B does no polling or UEM data collection itself, it only uses data collected by the UEM system. The following arguments are required: =over 4 =item B - The UEM sensor host. =item B - A nameserver. This can be a root nameserver, as is used in this example version, or it can be another nameserver of the installer's choice. =item B - A target host whose DNS information will be requested. =back =head1 ERROR VALUES If an error condition is encountered, then an error value will be printed. The error values and their meanings are given below: =over 4 =item B<-10> - An unrecognized UEM sensor was specified. =item B<-20> - An unrecognized nameserver was specified. =item B<-30> - An unrecognized target host was specified. =back =head1 OPTIONS =over 4 =item B<-Version> Displays the version information for B. =item B<-help> Display a usage message and exit. =back =head1 COPYRIGHT Copyright 2011-2013 SPARTA, Inc. All rights reserved. See the COPYING file included with the DNSSEC-Tools package for details. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =cut dnssec-tools-2.0/apps/zabbix/README0000664000237200023720000000547612071065274017242 0ustar hardakerhardaker# Copyright 2011-2013 SPARTA, Inc. All rights reserved. # See the COPYING file included with the DNSSEC-Tools package for details. DNSSEC-Tools Is your domain secure? Zabbix is an open-source system for monitoring networks and computers. An agent plugin has been written to monitor zone rollover controlled by DNSSEC-Tools. The modifications were made to Zabbix version 1.8.8. There are three plugins defined for DNSSEC-Tools and UEM. These are briefly described below and more completely described in each plugin's pod. Each plugin is referenced by Zabbix through a UserParameter entry in the zabbix_agentd.conf file. A set of example entries are included here and they must be modified for site-specific paths and zones. The keys in the UserParameter entries must be assigned to Zabbix items, and the items must be assigned to Zabbix hosts. They can then be further assigned to graphs and screens, as any other Zabbix item. Caveat: When using these plugins with Zabbix, you must be aware of the frequency of zone rollover actions and the frequency of Zabbix item checks. It is almost certain that there will be some amount of latency between actual zone rollover status and the rollover status displayed by Zabbix. This is the nature of the system and it should be expected. This should only be a problem if your zones are fast-rolling zones. If a zone has a TTL of just a few minutes, then the Zabbix display may lag behind reality. Files ----- This directory contains files for use in Zabbix monitoring of zone rollover controlled by DNSSEC-Tools. Brief descriptions of these files are given below. rollstate This Perl script is a Zabbix plugin that determines the status of a zone. It is referenced by the UserParameter entries defined in zabbix_agentd.conf. "perldoc rollstate" will give additional information. zonestate This Perl script is a Zabbix plugin that determines the validity of a zone file. It is referenced by the UserParameter entries defined in zabbix_agentd.conf. "perldoc zonestate" will give additional information. uemstats This Perl script is a Zabbix plugin that retrieves the most recent DNS lookup response performed by UEM for a given sensor/name-server/target-host group. It is referenced by the UserParameter entries defined in zabbix_agentd.conf. "perldoc uemstats" will give additional information. zabbix_agentd.conf This contains a set of sample UserParameter entries that run the rollstate and zonestate plugins. There are entries to provide both text and numeric output. item.fields This contains a brief discussion of a few of the fields that must be set when defining an item that uses the DNSSEC-Tools rollstate plugin. backup-zabbix This script backs up the mysql database that stores all the data required by Zabbix. dnssec-tools-2.0/apps/zabbix/rollstate0000775000237200023720000001515312107530733020307 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2011-2013 SPARTA, Inc. All rights reserved. See the COPYING # file distributed with this software for details. # # rollstate # # rollstate gathers information on zone rollover states # for a demonstration Zabbix monitoring environment. # It can be adapted for use in other environments. # ####################################################################### # # History: # # 1.0 111018 Initial version. # # 1.1 120601 Modified the error return codes to be much closer to # the normal data values. The original codes are fine # for letting you see an error has happened, but they # effectively hide the real data. # use strict; use Getopt::Long qw(:config no_ignore_case_always); use Net::DNS::SEC::Tools::rollrec; # # Version information. # my $NAME = "rollstate"; my $VERS = "$NAME version: 2.0.0"; my $DTVERS = "DNSSEC-Tools Version: 2.0"; ####################################################################### # # Data required for command line options. # my %options = (); # Filled option array. my @opts = ( "numeric", # Give a numeric response. "Version", # Display the version number. "help", # Display a help message. ); my $usenum; my $RRF = "/home/dt-nagios/zones/demo.rollrec"; # Name of rollrec file. # # Error values. # my $ERR_NOROLLREC = 15; # No rollrec file found. my $ERR_KSKANDZSK = 20; # KSK and ZSK phases are non-zero. my $ERR_NEGAKSK = 25; # Negative KSK phase found. my $ERR_NEGAZSK = 30; # Negative ZSK phase found. main(); exit(0); #------------------------------------------------------------------------- # Routine: main() # sub main { my $zone; # Zone whose rollover state we're getting. # # Check for options and a zone. # $zone = doopts(); # # Read the rollrec file and give info for the specified zone. # rollrec_read($RRF); rollstate($zone); rollrec_close(); } #------------------------------------------------------------------------- # Routine: doopts() # sub doopts { my $zone = shift; # Zone to examine. # # Parse the options. # GetOptions(\%options,@opts) || usage(); # # Show the version number if requested # version() if(defined($options{'Version'})); # # Give a usage flag if asked. # usage() if(defined($options{'help'})); # # Set our option variables based on the parsed options. # $usenum = $options{'numeric'} || 0; # # Ensure we were given a zone. # usage() if(@ARGV == 0); return($ARGV[0]); } #------------------------------------------------------------------------- # Routine: rollstate() # sub rollstate { my $zone = shift; # Zone to examine. my $ksk; # Zone's KSK rollover state. my $zsk; # Zone's ZSK rollover state. if(! rollrec_exists($zone)) { out("no rollrec for zone \"$zone\"",$ERR_NOROLLREC); return; } $ksk = rollrec_recval($zone,"kskphase"); $zsk = rollrec_recval($zone,"zskphase"); if(($ksk > 0) && ($zsk > 0)) { out("invalid rollover state for zone $zone; cannot be in KSK and ZSK rollover simultaneously",$ERR_KSKANDZSK); } elsif($ksk < 0) { out("invalid rollover state for zone $zone; cannot have a negative KSK rollover state ($ksk)",$ERR_NEGAKSK); } elsif($zsk < 0) { out("invalid rollover state for zone $zone; cannot have a negative ZSK rollover state ($zsk)",$ERR_NEGAZSK); } elsif($ksk > 0) { out('KSK phase',$ksk); } elsif($zsk > 0) { out('ZSK phase',$zsk); } else { out('normal mode','0'); } } #------------------------------------------------------------------------- # Routine: out() # sub out { my $rolltype = shift; # Type of rollover. my $phasenum = shift; # Rollover phase number. if($usenum) { $phasenum *= -1 if($rolltype =~ /KSK/); print "$phasenum\n"; } else { $phasenum = '' if(($phasenum == 0) || ($phasenum > 10)); print "$rolltype $phasenum\n"; } } #---------------------------------------------------------------------- # Routine: version() # # Purpose: Print the version number and exit. # sub version { print STDERR "$VERS\n"; exit(0); } #---------------------------------------------------------------------- # Routine: usage() # # Purpose: Print a usage message and exit. # sub usage { print STDERR "usage: rollstate [-numeric | -Version | -help] \n"; exit(0); } =pod =head1 NAME rollstate - Displays the rollover state for a specified zone. =head1 SYNOPSIS rollstate [options] =head1 DESCRIPTION B was written specifically to gather information on zone rollover states for a demonstration Zabbix monitoring environment. It can be adapted for use in other environments, but that is its intended purpose. The rollover state of the specified zone will be printed. The state will look something like "normal mode", "ZSK phase 1", or "KSK phase 3". If the I<-numeric> option is given, then only the rollover phase will be printed. If no keys in the zone are being rolled, then "0" will be printed. If the zone is in KSK rollover, then the phase number will be given as a negative number. This is purely for the purposes of creating distinctive graphs in the Zabbix monitoring system. This monitor plugin is a proof-of-concept prototype. It makes some assumptions (e.g., location of B file) that are invalid for production monitors. This may be fixed in the future. =head1 ERROR VALUES If an error condition is encountered and I<-numeric> is not specified, then an error message will be printed. If I<-numeric> is given, then then a large error value will be printed. This large value will allow the error condition to easily stand out in a Zabbix graph. The error values and their meanings are given below: =over 4 =item B<15> - No B for zone I exists in the B file. =item B<20> - The B file contains an invalid rollover state for the zone. The zone cannot be in KSK and ZSK rollover simultaneously. =item B<25> - The B file contains an invalid rollover state for the zone. The zone cannot have a negative KSK rollover state. =item B<30> - The B file contains an invalid rollover state for the zone. The zone cannot have a negative ZSK rollover state. =back =head1 OPTIONS =over 4 =item B<-numeric> A numeric response will be printed, instead of the textual response. =item B<-Version> Displays the version information for B and the DNSSEC-Tools package. =item B<-help> Display a usage message and exit. =back =head1 COPYRIGHT Copyright 2011-2013 SPARTA, Inc. All rights reserved. See the COPYING file included with the DNSSEC-Tools package for details. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =head1 SEE ALSO B, B, B =cut dnssec-tools-2.0/apps/zabbix/item.fields0000664000237200023720000000325212071065274020476 0ustar hardakerhardaker# Copyright 2011-2013 SPARTA, Inc. All rights reserved. # See the COPYING file included with the DNSSEC-Tools package for details. DNSSEC-Tools Is your domain secure? Zabbix Item Field Examples -------------------------- In order for Zabbix to monitor something, an "item" must be defined for that something. The following are suggested values for items that will monitor zone rollover as managed by DNSSEC-Tools. These are assumed to be using the rollstate plugin. There are two sets of item fields, one for text responses and one for numeric responses. General Notes ------------- Anywhere "" occurs, it should be replaced as needed by the appropriate zone name. The update interval is dependent on the time between zone rollover phases and the amount of lag time you find acceptable between state changes and being aware of the state changes. If each rollover phase takes 14 days, then you may find it acceptable to have that zone's item checked once per day. If the rollover phase only lasts one hour, you may want the item to be checked every ten minutes. These trade-offs must be determined by each site individually. Text Responses from Rollstate ----------------------------- These responses are intended for use by humans. Type Zabbix agent Key dnssec-tools.rollover.status. Type of information Character Numeric Responses from Rollstate -------------------------------- These responses are intended to be used as input to Zabbix graphs. They easily readable by humans, but the interpretation may not be as clear as the text responses. Type Zabbix agent Key dnssec-tools.rollover.statusnum. Type of information Numeric (float) dnssec-tools-2.0/apps/zabbix/zabbix_agentd.conf0000664000237200023720000000246111647575602022032 0ustar hardakerhardaker# # zabbix_agentd.conf # # These UserParameter lines must be added to an existing # zabbix_agentd.conf file. They are required in order for # Zabbix to use rollstate as the command associated with a # particular monitoring item. # # UserParameter lines have two fields, the key and the # command. The fields are separated by a comma. # # The following parts of the UserParameter lines must be # adjusted for the particular installation: # # - pathname for rollstate # - zonenames (two per line) # # The key fields may be shortened, but they must be distinct. # Descriptive keys, such as those here, describe the purpose # of the entry and help make each key unique. # ################################# # # rollstate entries # UserParameter=dnssec-tools.rollover.status.example.com,/zabbix/bin/rollstate example.com UserParameter=dnssec-tools.rollover.status.foo.test,/zabbix/bin/rollstate foo.test UserParameter=dnssec-tools.rollover.statusnum.example.com,/zabbix/bin/rollstate -numeric example.com UserParameter=dnssec-tools.rollover.statusnum.foo.test,/zabbix/bin/rollstate -numeric foo.test ################################# # # zonestate entries # UserParameter=dnssec-tools.zonefile.example.com,/uem/zabbix/bin/zonestate example.com UserParameter=dnssec-tools.zonefile.foo.test,/uem/zabbix/bin/zonestate foo.test dnssec-tools-2.0/apps/zabbix/backup-zabbix0000775000237200023720000000140012071065274021011 0ustar hardakerhardaker#!/bin/tcsh # # Copyright 2011-2013 SPARTA, Inc. All rights reserved. See the COPYING # file distributed with this software for details. # # backup-zabbix # # This script backs up the Zabbix database to a file and then # compresses the backup file. # # # Get a timestamp for the backup file's name. # set chronos = `date '+%y%m%d'` # # Set some variables. # set dbout = "$chronos-zabbix.db" set dbname = "zabbix" set dbuser = "zabbix" set dbargs = "--add-drop-table --add-locks --extended-insert --single-transaction -quick" # # Backup the Zabbix database. # echo backing up zabbix database to $dbout mysqldump $dbname $dbargs -u $dbuser -p > $dbout # # Compress the backup. # echo compressing zabbix database to $dbout.bz2 rm -f $dbout.bz2 bzip2 $dbout exit 0 dnssec-tools-2.0/apps/wget/0000775000237200023720000000000012111172555016031 5ustar hardakerhardakerdnssec-tools-2.0/apps/wget/README0000664000237200023720000000536011272431645016722 0ustar hardakerhardaker wget DNSSEC HOWTO ===================== (Version 0.1) Introduction ============ This HOWTO describes the installation, configuration and execution steps for adding DNSSEC validation to the wget application. The patch in this directory has been tested on the wget-1.12 source. It may also work on similar versions of wget. Note: Currently, This patch only works on systems that support IPv6. The local machine does not need to actually use IPv6, but the system's TCP/IP stack does need to support it for this patch to function properly. Installation ============ Download wget-1.12.tar.gz from http://ftp.gnu.org/pub/gnu/wget/ Unzip and untar it by: tar -xvzf wget-1.12.tar.gz Go to the wget-1.12 directory: cd wget-1.12/ Apply the wget-dnssec.patch in this directory by: patch -p 1 -b -z .orig #include +/* Support for dnssec validation */ +#ifdef DNSSEC_LOCAL_VALIDATION +#include +#endif /* DNSSEC_LOCAL_VALIDATION */ + #ifndef WINDOWS # include # include @@ -378,7 +383,19 @@ static void getaddrinfo_with_timeout_callback (void *arg) { struct gaiwt_context *ctx = (struct gaiwt_context *)arg; +#ifndef DNSSEC_LOCAL_VALIDATION ctx->exit_code = getaddrinfo (ctx->node, ctx->service, ctx->hints, ctx->res); +#else + int err = 0; + val_status_t vstatus; + err = val_getaddrinfo((val_context_t *)NULL, ctx->node, + ctx->service, ctx->hints, ctx->res, &vstatus); + if ((NULL != ctx->res) && (0 == val_istrusted(vstatus))) { + DEBUGP(("DNSSEC status: %s [%d]\n", p_val_error(vstatus), vstatus)); + err = DNSSECAI_FAIL; + } + ctx->exit_code = err; +#endif } /* Just like getaddrinfo, except it times out after TIMEOUT seconds. @@ -776,9 +793,15 @@ lookup_host (const char *host, int flags err = getaddrinfo_with_timeout (host, NULL, &hints, &res, timeout); if (err != 0 || res == NULL) { - if (!silent) + if (!silent) { +#ifndef DNSSEC_LOCAL_VALIDATION logprintf (LOG_VERBOSE, _("failed: %s.\n"), err != EAI_SYSTEM ? gai_strerror (err) : strerror (errno)); +#else + logprintf (LOG_VERBOSE, _("failed: %s.\n"), + err != EAI_SYSTEM ? dnssec_strerror (err) : strerror (errno)); +#endif + } return NULL; } al = address_list_from_addrinfo (res); @@ -904,3 +927,29 @@ host_cleanup (void) host_name_addresses_map = NULL; } } + +#ifdef DNSSEC_LOCAL_VALIDATION +/* DNSSEC additional proecudures + + dnssec_strerror - looks for dnssec errors (currently there is + only one), passes back dnssec specific error + string or calls the system gai_strerror. */ + +static const char* dnssecai_fail_string = "DNS resoloution not trusted"; +static const char* dnssecai_noerror_string = "No Error"; + +const char *dnssec_strerror(int ecode) +{ + switch (ecode) { + case 0: + return (dnssecai_noerror_string); + case DNSSECAI_FAIL: + return (dnssecai_fail_string); + } + /* default response*/ + return (gai_strerror(ecode)); +} /* denssec_strerror */ + + +/* End DNSSEC Additional procedures */ +#endif diff -I '\$Id: ' -u -r -b -w -p -d --exclude-from=/home/rstory/.rcfiles/diff-ignore --new-file clean/wget-1.12/src/host.h wget-1.12/src/host.h --- clean/wget-1.12/src/host.h 2009-09-04 12:31:54.000000000 -0400 +++ wget-1.12/src/host.h 2009-10-26 18:53:05.000000000 -0400 @@ -97,6 +97,11 @@ const char *print_address (const ip_addr bool is_valid_ipv6_address (const char *, const char *); #endif +#ifdef DNSSEC_LOCAL_VALIDATION +#define DNSSECAI_FAIL -600 /* sharing number space with netdb.h errors */ +const char *dnssec_strerror(int ecode); +#endif + bool accept_domain (struct url *); bool sufmatch (const char **, const char *); dnssec-tools-2.0/apps/ntp/0000775000237200023720000000000012111172555015664 5ustar hardakerhardakerdnssec-tools-2.0/apps/ntp/README0000664000237200023720000000153011705104414016540 0ustar hardakerhardaker Local DNSSEC validation for NTP =============================== This patch adds DNSSEC support to NTP. Additionally, if the ntpd daemon is started with the -g option, clock skew will be ignored during the validation of DNSSEC reponses. This is to solve a cyclic dependency problem where DNSSEC validation relies on accurate system type, and in order to adjust time, NTP will need to do a DNS query to the NTP servers. This patch has been tested on ntp-dev-4.2.7p250 BUILD ===== 1. Apply the patch 2. Re-generate the configure script $ cd ntp-XXX $ autoconf $ cd sntp $ autoconf 3. Run the configure script, enabling DNSSEC and pointing to any non-standard location for necessary libval libraries. For example: $ LDFLAGS="-L/usr/local/opt/lib" \ CFLAGS="-g -I/usr/local/opt/include" ./configure --with-dnsval dnssec-tools-2.0/apps/ntp/ntp-dnssec.patch0000664000237200023720000011062411705104414020764 0ustar hardakerhardakerdiff -u -r ntp-dev-4.2.7p250/config.h.in ntp-dev-4.2.7p250.dnssec/config.h.in --- ntp-dev-4.2.7p250/config.h.in 2012-01-15 06:36:59.000000000 -0500 +++ ntp-dev-4.2.7p250.dnssec/config.h.in 2012-01-16 12:27:05.000000000 -0500 @@ -359,6 +359,9 @@ /* Use Rendezvous/DNS-SD registration */ #undef HAVE_DNSREGISTRATION +/* Perform local DNSSEC Validation using dnsval */ +#undef HAVE_DNSVAL + /* Define to 1 if you don't have `vprintf' but do have `_doprnt.' */ #undef HAVE_DOPRNT @@ -1503,6 +1506,28 @@ /* Must we have a CTTY for fsetown? */ #undef USE_FSETOWNCTTY +/* Enable extensions on AIX 3, Interix. */ +#ifndef _ALL_SOURCE +# undef _ALL_SOURCE +#endif +/* Enable GNU extensions on systems that have them. */ +#ifndef _GNU_SOURCE +# undef _GNU_SOURCE +#endif +/* Enable threading extensions on Solaris. */ +#ifndef _POSIX_PTHREAD_SEMANTICS +# undef _POSIX_PTHREAD_SEMANTICS +#endif +/* Enable extensions on HP NonStop. */ +#ifndef _TANDEM_SOURCE +# undef _TANDEM_SOURCE +#endif +/* Enable general extensions on Solaris. */ +#ifndef __EXTENSIONS__ +# undef __EXTENSIONS__ +#endif + + /* Can we use SIGPOLL for tty IO? */ #undef USE_TTY_SIGPOLL @@ -1555,9 +1580,6 @@ /* enable thread safety */ #undef _THREAD_SAFE -/* Define to 500 only on HP-UX. */ -#undef _XOPEN_SOURCE - /* Are we _special_? */ #undef __APPLE_USE_RFC_3542 @@ -1566,28 +1588,6 @@ # undef __CHAR_UNSIGNED__ #endif -/* Enable extensions on AIX 3, Interix. */ -#ifndef _ALL_SOURCE -# undef _ALL_SOURCE -#endif -/* Enable GNU extensions on systems that have them. */ -#ifndef _GNU_SOURCE -# undef _GNU_SOURCE -#endif -/* Enable threading extensions on Solaris. */ -#ifndef _POSIX_PTHREAD_SEMANTICS -# undef _POSIX_PTHREAD_SEMANTICS -#endif -/* Enable extensions on HP NonStop. */ -#ifndef _TANDEM_SOURCE -# undef _TANDEM_SOURCE -#endif -/* Enable general extensions on Solaris. */ -#ifndef __EXTENSIONS__ -# undef __EXTENSIONS__ -#endif - - /* deviant */ #undef adjtimex diff -u -r ntp-dev-4.2.7p250/configure.ac ntp-dev-4.2.7p250.dnssec/configure.ac --- ntp-dev-4.2.7p250/configure.ac 2011-10-21 14:30:06.000000000 -0400 +++ ntp-dev-4.2.7p250.dnssec/configure.ac 2012-01-16 12:27:05.000000000 -0500 @@ -199,6 +199,28 @@ ;; esac +dnl +dnl Check for DNSSEC support +dnl +AC_ARG_WITH( + [dnsval], + AS_HELP_STRING([--with-dnsval], [- Enable local DNSSEC validation using dnsval]), + want_dnssec=$withval, + want_dnssec=no) +case "$want_dnssec" in + yes) + if test "x$ac_cv_header_pthread_h" != xyes; then + AC_MSG_ERROR(["Configured needs to be fine-tuned for non-pthread support"]) + fi + AC_CHECK_LIB([val-threads], + [val_getaddrinfo], + [LIBS="-lval-threads -lsres -lcrypto $LIBS" + AC_DEFINE([HAVE_DNSVAL], [1], [Perform local DNSSEC Validation using dnsval])], + [AC_MSG_ERROR(["Can't find required libraries for DNSSEC support"])], + [-lsres -lcrypto]) + ;; +esac + AC_CHECK_HEADERS([bstring.h]) AC_CHECK_HEADER( [dns_sd.h], diff -u -r ntp-dev-4.2.7p250/include/ntp_intres.h ntp-dev-4.2.7p250.dnssec/include/ntp_intres.h --- ntp-dev-4.2.7p250/include/ntp_intres.h 2011-02-21 04:08:19.000000000 -0500 +++ ntp-dev-4.2.7p250.dnssec/include/ntp_intres.h 2012-01-16 12:27:05.000000000 -0500 @@ -19,6 +19,14 @@ extern int getaddrinfo_sometime(const char *, const char *, const struct addrinfo *, int, gai_sometime_callback, void *); +#ifdef HAVE_DNSVAL +extern int getaddrinfo_sometime_blocking(const char *, const char *, + const struct addrinfo *, int, + gai_sometime_callback, void *); +extern int getaddrinfo_sometime_nonblocking(const char *, const char *, + const struct addrinfo *, int, + gai_sometime_callback, void *); +#endif /* * In gai_sometime_callback routines, the resulting addrinfo list is * only available until the callback returns. To hold on to the list diff -u -r ntp-dev-4.2.7p250/include/ntpd.h ntp-dev-4.2.7p250.dnssec/include/ntpd.h --- ntp-dev-4.2.7p250/include/ntpd.h 2011-12-18 06:01:47.000000000 -0500 +++ ntp-dev-4.2.7p250.dnssec/include/ntpd.h 2012-01-16 12:27:05.000000000 -0500 @@ -569,4 +569,3 @@ extern struct refclock * const refclock_conf[]; extern u_char num_refclock_conf; #endif - diff -u -r ntp-dev-4.2.7p250/libntp/decodenetnum.c ntp-dev-4.2.7p250.dnssec/libntp/decodenetnum.c --- ntp-dev-4.2.7p250/libntp/decodenetnum.c 2011-11-03 15:17:26.000000000 -0400 +++ ntp-dev-4.2.7p250.dnssec/libntp/decodenetnum.c 2012-01-16 12:27:05.000000000 -0500 @@ -11,6 +11,10 @@ #include #endif +#ifdef HAVE_DNSVAL +#include +#endif + #include "ntp.h" #include "ntp_stdlib.h" #include "ntp_assert.h" @@ -34,6 +38,9 @@ char *pp; char *np; char name[80]; +#ifdef HAVE_DNSVAL + val_status_t val_status; +#endif NTP_REQUIRE(num != NULL); NTP_REQUIRE(strlen(num) < sizeof(name)); @@ -69,9 +76,21 @@ } ZERO(hints); hints.ai_flags = Z_AI_NUMERICHOST; +#ifdef HAVE_DNSVAL + err = val_getaddrinfo(NULL, cp, "ntp", &hints, &ai, &val_status); +#else err = getaddrinfo(cp, "ntp", &hints, &ai); +#endif if (err != 0) return 0; +#ifdef HAVE_DNSVAL + if (val_istrusted(val_status)) { + if (ai) { + freeaddrinfo(ai); + } + return 0; + } +#endif NTP_INSIST(ai->ai_addrlen <= sizeof(*netnum)); ZERO(*netnum); memcpy(netnum, ai->ai_addr, ai->ai_addrlen); diff -u -r ntp-dev-4.2.7p250/libntp/ntp_intres.c ntp-dev-4.2.7p250.dnssec/libntp/ntp_intres.c --- ntp-dev-4.2.7p250/libntp/ntp_intres.c 2011-04-21 02:04:48.000000000 -0400 +++ ntp-dev-4.2.7p250.dnssec/libntp/ntp_intres.c 2012-01-16 12:27:05.000000000 -0500 @@ -92,6 +92,10 @@ # endif #endif +#ifdef HAVE_DNSVAL +#include +#endif + #include "ntp.h" #include "ntp_debug.h" #include "ntp_malloc.h" @@ -186,6 +190,22 @@ #endif } dnsworker_ctx; +#ifdef HAVE_DNSVAL +/* callback data structure associated with the asynchronous + * lookup function provided by dnsval. The memory for this + * structure is allocated before the callback is invoked + * and freed in the callback routine + */ +struct dnsval_gai_data { + int retry; + const char * node; + const char * service; + const struct addrinfo * hints; + gai_sometime_callback callback; + void * context; +}; +#endif + /* === variables === */ dnschild_ctx ** dnschild_contexts; /* parent */ @@ -224,9 +244,133 @@ static void getnameinfo_sometime_complete(blocking_work_req, void *, size_t, void *); +#ifdef HAVE_DNSVAL +static int dnsval_gai_callback(void *callback_data, + int, struct addrinfo *, + val_status_t); +#endif /* === functions === */ + +#ifdef HAVE_DNSVAL +int +getaddrinfo_sometime( + const char * node, + const char * service, + const struct addrinfo * hints, + int retry, + gai_sometime_callback callback, + void * context + ) +{ +#ifdef HAVE_SIGNALED_IO + /* + * If we're using signaled IO, we won't be able to call select() on + * dnsval's descriptors, so use the blocking version of the lookup routine + */ + return getaddrinfo_sometime_blocking(node,service,hints,retry,callback,context); +#else + return getaddrinfo_sometime_nonblocking(node,service,hints,retry,callback,context); +#endif +} + +/* + * Use the asynchronous lookup functionality from dnsval to resolve + * the name and perform DNSSEC validation of the response, and then + * invoke the provided callback completion function. + */ +int +getaddrinfo_sometime_nonblocking( + const char * node, + const char * service, + const struct addrinfo * hints, + int retry, + gai_sometime_callback callback, + void * context + ) +{ + int retval; + val_gai_callback dnsval_cb = &dnsval_gai_callback; + val_gai_status *status = NULL; + + struct dnsval_gai_data *dnsval_cbdata = + emalloc_zero(sizeof(struct dnsval_gai_data)); + dnsval_cbdata->node = node; + dnsval_cbdata->service = service; + dnsval_cbdata->hints = hints; + dnsval_cbdata->retry = retry; + dnsval_cbdata->callback = callback; + dnsval_cbdata->context = context; + + retval = val_getaddrinfo_submit(NULL, node, service, hints, + dnsval_cb, dnsval_cbdata, 0, &status); + if (retval != VAL_NO_ERROR) { + msyslog(LOG_ERR, "unable to perform asynchronous getaddrinfo request using dnsval."); + errno = EFAULT; + return -1; + } + + return 0; +} + +static int +dnsval_gai_callback( + void *dnsval_cbdata, + int eai_retval, + struct addrinfo *res, + val_status_t val_status) +{ + struct addrinfo *ai = NULL; + struct dnsval_gai_data *gd; + + if (!dnsval_cbdata) { + return 1; + } + gd = (struct dnsval_gai_data *)dnsval_cbdata; + + /* XXX Need to properly handle retries */ + + /* Extract the result only if DNSSEC validation was successful */ + if (VAL_GETADDRINFO_HAS_STATUS(eai_retval)) { + if (val_istrusted(val_status)) { + ai = res; + } else { + msyslog(LOG_INFO, + "DNS response for %s failed validation", gd->node); + } + } + + (gd->callback)(eai_retval, eai_retval, + gd->context, + gd->node, + gd->service, + gd->hints, + ai); + + if (res) { + freeaddrinfo(res); + } + + free(dnsval_cbdata); + return 0; +} + + +/* + * getaddrinfo_sometime_blocking - uses blocking child to call getaddrinfo then + * invokes provided callback completion function. + */ +int +getaddrinfo_sometime_blocking( + const char * node, + const char * service, + const struct addrinfo * hints, + int retry, + gai_sometime_callback callback, + void * context + ) +#else /* * getaddrinfo_sometime - uses blocking child to call getaddrinfo then * invokes provided callback completion function. @@ -240,6 +384,7 @@ gai_sometime_callback callback, void * context ) +#endif { blocking_gai_req * gai_req; u_int idx; @@ -319,6 +464,9 @@ size_t resp_octets; char * cp; time_t time_now; +#ifdef HAVE_DNSVAL + val_status_t val_status; +#endif gai_req = (void *)((char *)req + sizeof(*req)); node = (char *)gai_req + sizeof(*gai_req); @@ -349,8 +497,22 @@ fflush(stdout); #endif ai_res = NULL; +#ifdef HAVE_DNSVAL + gai_resp->retcode = val_getaddrinfo(NULL, node, service, &gai_req->hints, + &ai_res, &val_status); + if (gai_resp->retcode == 0 && !val_istrusted(val_status)) { + if (ai_res) { + freeaddrinfo(ai_res); + } + gai_resp->retcode = EAI_FAIL; + TRACE(2, ("DNSSEC validation failed for node %s serv %s fam %d flags %x\n", + node, service, gai_req->hints.ai_family, + gai_req->hints.ai_flags)); + } +#else gai_resp->retcode = getaddrinfo(node, service, &gai_req->hints, &ai_res); +#endif gai_resp->retry = gai_req->retry; #ifdef EAI_SYSTEM if (EAI_SYSTEM == gai_resp->retcode) @@ -618,7 +780,6 @@ } #endif /* TEST_BLOCKING_WORKER */ - int getnameinfo_sometime( sockaddr_u * psau, @@ -671,7 +832,6 @@ return 0; } - int blocking_getnameinfo( blocking_child * c, diff -u -r ntp-dev-4.2.7p250/libntp/ntp_rfc2553.c ntp-dev-4.2.7p250.dnssec/libntp/ntp_rfc2553.c --- ntp-dev-4.2.7p250/libntp/ntp_rfc2553.c 2011-05-08 04:11:52.000000000 -0400 +++ ntp-dev-4.2.7p250.dnssec/libntp/ntp_rfc2553.c 2012-01-16 12:27:05.000000000 -0500 @@ -76,6 +76,9 @@ #ifdef HAVE_NETINET_IN_H #include #endif +#ifdef HAVE_DNSVAL +#include +#endif #include "ntp_rfc2553.h" #include "ntpd.h" @@ -268,7 +271,15 @@ struct hostent **Addresses ) { +#ifdef HAVE_DNSVAL + val_status_t val_status; + *Addresses = val_gethostbyname(NULL, name, &val_status); + if (!val_istrusted(val_status)) { + return NO_RECOVERY; + } +#else *Addresses = gethostbyname(name); +#endif return (h_errno); } #endif @@ -539,7 +550,6 @@ /* * Look for a name */ - errval = DNSlookup_name(nodename, AF_INET, &hp); if (hp == NULL) { diff -u -r ntp-dev-4.2.7p250/libntp/numtohost.c ntp-dev-4.2.7p250.dnssec/libntp/numtohost.c --- ntp-dev-4.2.7p250/libntp/numtohost.c 2011-04-05 03:35:33.000000000 -0400 +++ ntp-dev-4.2.7p250.dnssec/libntp/numtohost.c 2012-01-16 12:27:05.000000000 -0500 @@ -8,6 +8,10 @@ #include /* ntohl */ #endif +#ifdef HAVE_DNSVAL +#include +#endif + #include "ntp_fp.h" #include "ntp_stdlib.h" #include "lib_strbuf.h" @@ -23,6 +27,9 @@ { char *bp; struct hostent *hp; +#ifdef HAVE_DNSVAL + val_status_t val_status; +#endif /* * This is really gross, but saves lots of hanging looking for @@ -30,10 +37,17 @@ * addresses on the loopback network except for the loopback * host itself. */ +#ifdef HAVE_DNSVAL + if ((((ntohl(netnum) & LOOPBACKNETMASK) == LOOPBACKNET) + && (ntohl(netnum) != LOOPBACKHOST)) + || ((hp = val_gethostbyaddr(NULL, (char *)&netnum, sizeof netnum, AF_INET, &val_status)) + == 0) || !val_istrusted(val_status)) +#else if ((((ntohl(netnum) & LOOPBACKNETMASK) == LOOPBACKNET) && (ntohl(netnum) != LOOPBACKHOST)) || ((hp = gethostbyaddr((char *)&netnum, sizeof netnum, AF_INET)) == 0)) +#endif return numtoa(netnum); LIB_GETBUF(bp); diff -u -r ntp-dev-4.2.7p250/libntp/socktohost.c ntp-dev-4.2.7p250.dnssec/libntp/socktohost.c --- ntp-dev-4.2.7p250/libntp/socktohost.c 2011-03-06 05:04:46.000000000 -0500 +++ ntp-dev-4.2.7p250.dnssec/libntp/socktohost.c 2012-01-16 12:27:05.000000000 -0500 @@ -14,6 +14,10 @@ #include +#ifdef HAVE_DNSVAL +#include +#endif + #include "ntp_fp.h" #include "lib_strbuf.h" #include "ntp_stdlib.h" @@ -36,13 +40,22 @@ sockaddr_u addr; size_t octets; int a_info; +#ifdef HAVE_DNSVAL + val_status_t val_status; +#endif /* reverse the address to purported DNS name */ LIB_GETBUF(pbuf); gni_flags = NI_DGRAM | NI_NAMEREQD; +#ifdef HAVE_DNSVAL + if (val_getnameinfo(NULL, &sock->sa, SOCKLEN(sock), pbuf, LIB_BUFLENGTH, + NULL, 0, gni_flags, &val_status) || !val_istrusted(val_status)) + return stoa(sock); /* use address */ +#else if (getnameinfo(&sock->sa, SOCKLEN(sock), pbuf, LIB_BUFLENGTH, NULL, 0, gni_flags)) return stoa(sock); /* use address */ +#endif TRACE(1, ("%s reversed to %s\n", stoa(sock), pbuf)); @@ -57,7 +70,11 @@ hints.ai_flags = 0; alist = NULL; +#ifdef HAVE_DNSVAL + a_info = val_getaddrinfo(NULL, pbuf, svc, &hints, &alist, &val_status); +#else a_info = getaddrinfo(pbuf, svc, &hints, &alist); +#endif if (a_info == EAI_NONAME #ifdef EAI_NODATA || a_info == EAI_NODATA @@ -67,18 +84,41 @@ #ifdef AI_ADDRCONFIG hints.ai_flags |= AI_ADDRCONFIG; #endif - a_info = getaddrinfo(pbuf, svc, &hints, &alist); +#ifdef HAVE_DNSVAL + if (alist) { + freeaddrinfo(alist); + } + a_info = val_getaddrinfo(NULL, pbuf, svc, &hints, &alist, &val_status); +#else + a_info = getaddrinfo(pbuf, svc, &hints, &alist); +#endif } #ifdef AI_ADDRCONFIG /* Some older implementations don't like AI_ADDRCONFIG. */ if (a_info == EAI_BADFLAGS) { hints.ai_flags &= ~AI_ADDRCONFIG; - a_info = getaddrinfo(pbuf, svc, &hints, &alist); +#ifdef HAVE_DNSVAL + if (alist) { + freeaddrinfo(alist); + } + a_info = val_getaddrinfo(NULL, pbuf, svc, &hints, &alist, &val_status); +#else + a_info = getaddrinfo(pbuf, svc, &hints, &alist); +#endif } #endif if (a_info) goto forward_fail; +#ifdef HAVE_DNSVAL + if (!val_istrusted(val_status)) { + if (alist) { + freeaddrinfo(alist); + } + goto forward_fail; + } +#endif + NTP_INSIST(alist != NULL); for (ai = alist; ai != NULL; ai = ai->ai_next) { diff -u -r ntp-dev-4.2.7p250/ntpd/cmd_args.c ntp-dev-4.2.7p250.dnssec/ntpd/cmd_args.c --- ntp-dev-4.2.7p250/ntpd/cmd_args.c 2011-10-10 01:48:29.000000000 -0400 +++ ntp-dev-4.2.7p250.dnssec/ntpd/cmd_args.c 2012-01-16 12:27:05.000000000 -0500 @@ -5,6 +5,10 @@ # include #endif +#ifdef HAVE_DNSVAL +#include +#endif + #include "ntpd.h" #include "ntp_stdlib.h" #include "ntp_config.h" @@ -75,6 +79,16 @@ if (HAVE_OPT( PANICGATE )) allow_panic = TRUE; +#ifdef HAVE_DNSVAL + if (HAVE_OPT( PANICGATE )) { + /* Disable DNSSEC Validation */ + if (VAL_NO_ERROR != val_context_setqflags(NULL, VAL_CTX_FLAG_SET, VAL_QUERY_IGNORE_SKEW)) { + msyslog(LOG_ERR, "Failed to create DNSSEC validator context."); + exit(1); + } + msyslog(LOG_NOTICE, "DNSSEC clock-skew tolerance enabled."); + } +#endif #ifdef HAVE_DROPROOT if (HAVE_OPT( JAILDIR )) { diff -u -r ntp-dev-4.2.7p250/ntpd/ntp_config.c ntp-dev-4.2.7p250.dnssec/ntpd/ntp_config.c --- ntp-dev-4.2.7p250/ntpd/ntp_config.c 2011-12-18 06:01:48.000000000 -0500 +++ ntp-dev-4.2.7p250.dnssec/ntpd/ntp_config.c 2012-01-16 12:27:05.000000000 -0500 @@ -33,6 +33,10 @@ #include #include +#ifdef HAVE_DNSVAL +#include +#endif + #include "ntp.h" #include "ntpd.h" #include "ntp_io.h" @@ -1664,6 +1668,9 @@ sockaddr_u *final_addr; struct addrinfo *ptr; int gai_err; +#ifdef HAVE_DNSVAL + val_status_t val_status; +#endif final_addr = emalloc(sizeof(*final_addr)); @@ -1672,15 +1679,34 @@ addr_prefix, curr_addr_num++); printf("Selecting ip address %s for hostname %s\n", addr_string, addr->address); +#ifdef HAVE_DNSVAL + gai_err = val_getaddrinfo(NULL, addr_string, "ntp", NULL, &ptr, &val_status); +#else gai_err = getaddrinfo(addr_string, "ntp", NULL, &ptr); +#endif } else { +#ifdef HAVE_DNSVAL + gai_err = val_getaddrinfo(NULL, addr->address, "ntp", NULL, &ptr, &val_status); +#else gai_err = getaddrinfo(addr->address, "ntp", NULL, &ptr); +#endif } if (gai_err) { fprintf(stderr, "ERROR!! Could not get a new address\n"); exit(1); } + +#ifdef HAVE_DNSVAL + if (!val_istrusted(val_status)) { + fprintf(stderr, "ERROR!! DNSSEC validation for address failed\n"); + if (ptr) { + freeaddrinfo(ptr); + } + exit(1); + } +#endif + memcpy(final_addr, ptr->ai_addr, ptr->ai_addrlen); fprintf(stderr, "Successful in setting ip address of simulated server to: %s\n", stoa(final_addr)); @@ -2221,6 +2247,9 @@ #else "mssntp restrict bit ignored, this ntpd was configured without --enable-ntp-signd."; #endif +#ifdef HAVE_DNSVAL + val_status_t val_status; +#endif /* Configure the mru options */ my_opt = HEAD_PFIFO(ptree->mru_opts); @@ -2459,16 +2488,36 @@ hints.ai_protocol = IPPROTO_UDP; hints.ai_socktype = SOCK_DGRAM; hints.ai_family = my_node->addr->type; + +#ifdef HAVE_DNSVAL + rc = val_getaddrinfo(NULL, my_node->addr->address, + "ntp", &hints, + &ai_list, &val_status); +#else rc = getaddrinfo(my_node->addr->address, "ntp", &hints, &ai_list); - if (rc) { +#endif + + if (rc) { msyslog(LOG_ERR, "restrict: ignoring line %d, address/host '%s' unusable.", my_node->line_no, my_node->addr->address); continue; } +#ifdef HAVE_DNSVAL + if (!val_istrusted(val_status)) { + msyslog(LOG_ERR, + "restrict: ignoring line %d, address/host '%s' could not be validated.", + my_node->line_no, + my_node->addr->address); + if (ai_list) { + freeaddrinfo(ai_list); + } + continue; + } +#endif NTP_INSIST(ai_list != NULL); pai = ai_list; NTP_INSIST(pai->ai_addr != NULL); diff -u -r ntp-dev-4.2.7p250/ntpd/ntp_loopfilter.c ntp-dev-4.2.7p250.dnssec/ntpd/ntp_loopfilter.c --- ntp-dev-4.2.7p250/ntpd/ntp_loopfilter.c 2011-12-18 06:01:47.000000000 -0500 +++ ntp-dev-4.2.7p250.dnssec/ntpd/ntp_loopfilter.c 2012-01-16 12:27:05.000000000 -0500 @@ -8,6 +8,10 @@ # include #endif +#ifdef HAVE_DNSVAL +#include +#endif + #include "ntpd.h" #include "ntp_io.h" #include "ntp_unixtime.h" @@ -136,6 +140,7 @@ static void stop_kern_loop(void); #endif /* KERNEL_PLL */ + /* * Clock state machine control flags */ @@ -178,6 +183,7 @@ #endif /* SIGSYS */ #endif /* KERNEL_PLL */ + /* * init_loopfilter - initialize loop filter data */ @@ -445,6 +451,19 @@ * startup until the initial transient has subsided. */ default: +#ifdef HAVE_DNSVAL + if (allow_panic) { + /* Enable DNSSEC Validation */ + if (VAL_NO_ERROR != val_context_setqflags(NULL, VAL_CTX_FLAG_RESET, VAL_QUERY_IGNORE_SKEW)) { + /* something didn't work right, log and keep trying */ + msyslog(LOG_NOTICE, "DNSSEC clock-skew tolerance could not be disabled. Panic correction still in effect."); + } else { + msyslog(LOG_NOTICE, "DNSSEC clock-skew tolerance disabled."); + allow_panic = FALSE; + } + } + else /* fall-through */ +#endif allow_panic = FALSE; if (freq_cnt == 0) { diff -u -r ntp-dev-4.2.7p250/ntpd/ntpd.c ntp-dev-4.2.7p250.dnssec/ntpd/ntpd.c --- ntp-dev-4.2.7p250/ntpd/ntpd.c 2012-01-15 06:06:40.000000000 -0500 +++ ntp-dev-4.2.7p250.dnssec/ntpd/ntpd.c 2012-01-16 12:27:05.000000000 -0500 @@ -977,6 +977,9 @@ # ifndef HAVE_SIGNALED_IO rdfdes = activefds; # if !defined(VMS) && !defined(SYS_VXWORKS) +# ifdef HAVE_DNSVAL + val_async_select_info(NULL, &rdfdes, &maxactivefd, NULL); +# endif nfound = select(maxactivefd + 1, &rdfdes, NULL, NULL, NULL); # else /* VMS, VxWorks */ @@ -986,11 +989,18 @@ t1.tv_sec = 1; t1.tv_usec = 0; +# ifdef HAVE_DNSVAL + val_async_select_info(NULL, &rdfdes, &maxactivefd, &t1); +# endif nfound = select(maxactivefd + 1, &rdfdes, NULL, NULL, &t1); } # endif /* VMS, VxWorks */ + +# ifdef HAVE_DNSVAL + val_async_check_wait(NULL, &rdfdes, &maxactivefd, NULL, 0); +# endif if (nfound > 0) { l_fp ts; @@ -1008,7 +1018,6 @@ } # endif /* DEBUG */ # else /* HAVE_SIGNALED_IO */ - wait_for_signal(); # endif /* HAVE_SIGNALED_IO */ if (alarm_flag) { /* alarmed? */ diff -u -r ntp-dev-4.2.7p250/ntpd/refclock_nmea.c ntp-dev-4.2.7p250.dnssec/ntpd/refclock_nmea.c --- ntp-dev-4.2.7p250/ntpd/refclock_nmea.c 2012-01-06 06:07:50.000000000 -0500 +++ ntp-dev-4.2.7p250.dnssec/ntpd/refclock_nmea.c 2012-01-16 12:27:05.000000000 -0500 @@ -30,6 +30,10 @@ #include #include +#ifdef HAVE_DNSVAL +#include +#endif + #include "ntpd.h" #include "ntp_io.h" #include "ntp_unixtime.h" @@ -1663,6 +1667,9 @@ struct addrinfo ai_hint; /* resolution hint */ struct addrinfo *ai_list; /* resolution result */ struct addrinfo *ai; /* result scan ptr */ +#ifdef HAVE_DNSVAL + val_status_t val_status; +#endif fd = -1; @@ -1689,8 +1696,21 @@ ZERO(ai_hint); ai_hint.ai_protocol = IPPROTO_TCP; ai_hint.ai_socktype = SOCK_STREAM; + +#ifdef HAVE_DNSVAL + if (val_getaddrinfo(NULL, host, port, &ai_hint, &ai_list, &val_status)) + return fd; + + if (!val_istrusted(val_status)) { + if (ai_list) { + freeaddrinfo(ai_list); + } + return fd; + } +#else if (getaddrinfo(host, port, &ai_hint, &ai_list)) return fd; +#endif for (ai = ai_list; ai && (fd == -1); ai = ai->ai_next) { sh = socket(ai->ai_family, ai->ai_socktype, Only in ntp-dev-4.2.7p250.dnssec/ntpd: refclock_nmea.c.orig diff -u -r ntp-dev-4.2.7p250/ntpdate/ntpdate.c ntp-dev-4.2.7p250.dnssec/ntpdate/ntpdate.c --- ntp-dev-4.2.7p250/ntpdate/ntpdate.c 2012-01-06 06:07:57.000000000 -0500 +++ ntp-dev-4.2.7p250.dnssec/ntpdate/ntpdate.c 2012-01-16 12:27:05.000000000 -0500 @@ -48,6 +48,10 @@ #include +#ifdef HAVE_DNSVAL +#include +#endif + #ifdef SYS_VXWORKS # include "ioLib.h" # include "sockLib.h" @@ -1351,6 +1355,9 @@ /* Service name */ char service[5]; sockaddr_u addr; +#ifdef HAVE_DNSVAL + val_status_t val_status; +#endif strlcpy(service, "ntp", sizeof(service)); @@ -1364,8 +1371,13 @@ printf("Looking for host %s and service %s\n", serv, service); #endif +#ifdef HAVE_DNSVAL + error = val_getaddrinfo(NULL, serv, service, &hints, &addrResult, &val_status); + if (error != 0 || !val_istrusted(val_status)) { +#else error = getaddrinfo(serv, service, &hints, &addrResult); if (error != 0) { +#endif /* Conduct more refined error analysis */ if (error == EAI_FAIL || error == EAI_AGAIN){ /* Name server is unusable. Exit after failing on the @@ -1679,6 +1691,9 @@ int rc; int optval = 1; int check_ntp_port_in_use = !debug && !simple_query && !unpriv_port; +#ifdef HAVE_DNSVAL + val_status_t val_status; +#endif /* * Init buffer free list and stat counters @@ -1699,7 +1714,15 @@ hints.ai_flags = AI_PASSIVE; hints.ai_socktype = SOCK_DGRAM; +#ifdef HAVE_DNSVAL + if (val_getaddrinfo(NULL, NULL, service, &hints, &res, &val_status) != 0 || + !val_istrusted(val_status)) { + if (res) { + freeaddrinfo(res); + } +#else if (getaddrinfo(NULL, service, &hints, &res) != 0) { +#endif msyslog(LOG_ERR, "getaddrinfo() failed: %m"); exit(1); /*NOTREACHED*/ diff -u -r ntp-dev-4.2.7p250/ntpdc/ntpdc.c ntp-dev-4.2.7p250.dnssec/ntpdc/ntpdc.c --- ntp-dev-4.2.7p250/ntpdc/ntpdc.c 2012-01-15 06:06:40.000000000 -0500 +++ ntp-dev-4.2.7p250.dnssec/ntpdc/ntpdc.c 2012-01-16 12:27:05.000000000 -0500 @@ -19,6 +19,10 @@ #include #include +#ifdef HAVE_DNSVAL +#include +#endif + #include "ntpdc.h" #include "ntp_select.h" #include "ntp_stdlib.h" @@ -396,6 +400,9 @@ register const char *cp; char name[LENHOSTNAME]; char service[5]; +#ifdef HAVE_DNSVAL + val_status_t val_status; +#endif /* * We need to get by the [] if they were entered @@ -429,7 +436,11 @@ hints.ai_socktype = SOCK_DGRAM; hints.ai_flags = Z_AI_NUMERICHOST; +#ifdef HAVE_DNSVAL + a_info = val_getaddrinfo(NULL, hname, service, &hints, &ai, &val_status); +#else a_info = getaddrinfo(hname, service, &hints, &ai); +#endif if (a_info == EAI_NONAME #ifdef EAI_NODATA || a_info == EAI_NODATA @@ -439,12 +450,26 @@ #ifdef AI_ADDRCONFIG hints.ai_flags |= AI_ADDRCONFIG; #endif +#ifdef HAVE_DNSVAL + if (ai) { + freeaddrinfo(ai); + } + a_info = val_getaddrinfo(NULL, hname, service, &hints, &ai, &val_status); +#else a_info = getaddrinfo(hname, service, &hints, &ai); +#endif } /* Some older implementations don't like AI_ADDRCONFIG. */ if (a_info == EAI_BADFLAGS) { hints.ai_flags = AI_CANONNAME; +#ifdef HAVE_DNSVAL + if (ai) { + freeaddrinfo(ai); + } + a_info = val_getaddrinfo(NULL, hname, service, &hints, &ai, &val_status); +#else a_info = getaddrinfo(hname, service, &hints, &ai); +#endif } if (a_info != 0) { fprintf(stderr, "%s\n", gai_strerror(a_info)); @@ -453,6 +478,15 @@ return 0; } +#ifdef HAVE_DNSVAL + if (!val_istrusted(val_status)) { + if (ai) { + freeaddrinfo(ai); + } + return 0; + } +#endif + /* * getaddrinfo() has returned without error so ai should not * be NULL. @@ -1423,6 +1457,9 @@ ) { struct addrinfo hints, *ai = NULL; +#ifdef HAVE_DNSVAL + val_status_t val_status; +#endif ZERO(hints); hints.ai_flags = AI_CANONNAME; @@ -1436,10 +1473,20 @@ */ if (decodenetnum(hname, num)) { if (fullhost != NULL) +#ifdef HAVE_DNSVAL + val_getnameinfo(NULL, &num->sa, SOCKLEN(num), fullhost, + LENHOSTNAME, NULL, 0, 0, &val_status); +#else getnameinfo(&num->sa, SOCKLEN(num), fullhost, LENHOSTNAME, NULL, 0, 0); +#endif return 1; +#ifdef HAVE_DNSVAL + } else if (val_getaddrinfo(NULL, hname, "ntp", &hints, &ai, &val_status) == 0 && + val_istrusted(val_status)) { +#else } else if (getaddrinfo(hname, "ntp", &hints, &ai) == 0) { +#endif NTP_INSIST(sizeof(*num) >= ai->ai_addrlen); memcpy(num, ai->ai_addr, ai->ai_addrlen); if (fullhost != NULL) { @@ -1447,12 +1494,31 @@ strlcpy(fullhost, ai->ai_canonname, LENHOSTNAME); else +#ifdef HAVE_DNSVAL + if (0 == val_getnameinfo(NULL, &num->sa, SOCKLEN(num), + fullhost, LENHOSTNAME, NULL, + 0, 0, &val_status) && !val_istrusted(val_status)) { + memset(&num->sa, 0, sizeof(num->sa)); + } +#else getnameinfo(&num->sa, SOCKLEN(num), fullhost, LENHOSTNAME, NULL, 0, 0); +#endif + } +#ifdef HAVE_DNSVAL + if (ai) { + freeaddrinfo(ai); } + +#endif return 1; } +#ifdef HAVE_DNSVAL + if (ai) { + freeaddrinfo(ai); + } +#endif fprintf(stderr, "***Can't find host %s\n", hname); return 0; Only in ntp-dev-4.2.7p250.dnssec/ntpdc: ntpdc.c.orig diff -u -r ntp-dev-4.2.7p250/ntpq/ntpq.c ntp-dev-4.2.7p250.dnssec/ntpq/ntpq.c --- ntp-dev-4.2.7p250/ntpq/ntpq.c 2012-01-15 06:06:40.000000000 -0500 +++ ntp-dev-4.2.7p250.dnssec/ntpq/ntpq.c 2012-01-16 12:36:10.000000000 -0500 @@ -20,6 +20,10 @@ #include #include +#ifdef HAVE_DNSVAL +#include +#endif + #include "ntpq.h" #include "ntp_stdlib.h" #include "ntp_unixtime.h" @@ -521,6 +525,9 @@ size_t octets; register const char *cp; char name[LENHOSTNAME]; +#ifdef HAVE_DNSVAL + val_status_t val_status; +#endif /* * We need to get by the [] if they were entered @@ -554,7 +561,11 @@ hints.ai_flags = Z_AI_NUMERICHOST; ai = NULL; +#ifdef HAVE_DNSVAL + a_info = val_getaddrinfo(NULL, hname, svc, &hints, &ai, &val_status); +#else a_info = getaddrinfo(hname, svc, &hints, &ai); +#endif if (a_info == EAI_NONAME #ifdef EAI_NODATA || a_info == EAI_NODATA @@ -564,19 +575,42 @@ #ifdef AI_ADDRCONFIG hints.ai_flags |= AI_ADDRCONFIG; #endif +#ifdef HAVE_DNSVAL + if (ai) { + freeaddrinfo(ai); + } + a_info = val_getaddrinfo(NULL, hname, svc, &hints, &ai, &val_status); +#else a_info = getaddrinfo(hname, svc, &hints, &ai); +#endif } #ifdef AI_ADDRCONFIG /* Some older implementations don't like AI_ADDRCONFIG. */ if (a_info == EAI_BADFLAGS) { hints.ai_flags &= ~AI_ADDRCONFIG; +#ifdef HAVE_DNSVAL + if (ai) { + freeaddrinfo(ai); + } + a_info = val_getaddrinfo(NULL, hname, svc, &hints, &ai, &val_status); +#else a_info = getaddrinfo(hname, svc, &hints, &ai); +#endif } #endif if (a_info != 0) { fprintf(stderr, "%s\n", gai_strerror(a_info)); return 0; } +#ifdef HAVE_DNSVAL + if (!val_istrusted(val_status)) { + if (ai) { + freeaddrinfo(ai); + } + fprintf(stderr, "%s\n", "DNSSEC Validation failed."); + return 0; + } +#endif INSIST(ai != NULL); ZERO(addr); @@ -1706,6 +1740,9 @@ ) { struct addrinfo hints, *ai = NULL; +#ifdef HAVE_DNSVAL + val_status_t val_status; +#endif ZERO(hints); hints.ai_flags = AI_CANONNAME; @@ -1719,10 +1756,20 @@ */ if (decodenetnum(hname, num)) { if (fullhost != NULL) +#ifdef HAVE_DNSVAL + val_getnameinfo(NULL, &num->sa, SOCKLEN(num), fullhost, + LENHOSTNAME, NULL, 0, 0, &val_status); +#else getnameinfo(&num->sa, SOCKLEN(num), fullhost, LENHOSTNAME, NULL, 0, 0); +#endif return 1; +#ifdef HAVE_DNSVAL + } else if (val_getaddrinfo(NULL, hname, "ntp", &hints, &ai, &val_status) == 0 && + val_istrusted(val_status)) { +#else } else if (getaddrinfo(hname, "ntp", &hints, &ai) == 0) { +#endif INSIST(sizeof(*num) >= ai->ai_addrlen); memcpy(num, ai->ai_addr, ai->ai_addrlen); if (fullhost != NULL) { @@ -1730,13 +1777,24 @@ strlcpy(fullhost, ai->ai_canonname, LENHOSTNAME); else +#ifdef HAVE_DNSVAL + val_getnameinfo(NULL, &num->sa, SOCKLEN(num), + fullhost, LENHOSTNAME, NULL, + 0, 0, &val_status); +#else getnameinfo(&num->sa, SOCKLEN(num), fullhost, LENHOSTNAME, NULL, 0, 0); +#endif } freeaddrinfo(ai); return 1; } +#ifdef HAVE_DNSVAL + if (ai) { + freeaddrinfo(ai); + } +#endif fprintf(stderr, "***Can't find host %s\n", hname); return 0; Only in ntp-dev-4.2.7p250.dnssec/ntpq: ntpq.c.orig diff -u -r ntp-dev-4.2.7p250/sntp/config.h.in ntp-dev-4.2.7p250.dnssec/sntp/config.h.in --- ntp-dev-4.2.7p250/sntp/config.h.in 2012-01-15 06:36:48.000000000 -0500 +++ ntp-dev-4.2.7p250.dnssec/sntp/config.h.in 2012-01-16 12:27:05.000000000 -0500 @@ -74,6 +74,9 @@ /* Define to 1 if you have the header file. */ #undef HAVE_DLFCN_H +/* Perform local DNSSEC Validation using dnsval */ +#undef HAVE_DNSVAL + /* Define to 1 if you don't have `vprintf' but do have `_doprnt.' */ #undef HAVE_DOPRNT @@ -786,6 +789,28 @@ /* What type to use for setsockopt */ #undef TYPEOF_IP_MULTICAST_LOOP +/* Enable extensions on AIX 3, Interix. */ +#ifndef _ALL_SOURCE +# undef _ALL_SOURCE +#endif +/* Enable GNU extensions on systems that have them. */ +#ifndef _GNU_SOURCE +# undef _GNU_SOURCE +#endif +/* Enable threading extensions on Solaris. */ +#ifndef _POSIX_PTHREAD_SEMANTICS +# undef _POSIX_PTHREAD_SEMANTICS +#endif +/* Enable extensions on HP NonStop. */ +#ifndef _TANDEM_SOURCE +# undef _TANDEM_SOURCE +#endif +/* Enable general extensions on Solaris. */ +#ifndef __EXTENSIONS__ +# undef __EXTENSIONS__ +#endif + + /* Can we use SIGPOLL for tty IO? */ #undef USE_TTY_SIGPOLL @@ -838,9 +863,6 @@ /* enable thread safety */ #undef _THREAD_SAFE -/* Define to 500 only on HP-UX. */ -#undef _XOPEN_SOURCE - /* Are we _special_? */ #undef __APPLE_USE_RFC_3542 @@ -849,28 +871,6 @@ # undef __CHAR_UNSIGNED__ #endif -/* Enable extensions on AIX 3, Interix. */ -#ifndef _ALL_SOURCE -# undef _ALL_SOURCE -#endif -/* Enable GNU extensions on systems that have them. */ -#ifndef _GNU_SOURCE -# undef _GNU_SOURCE -#endif -/* Enable threading extensions on Solaris. */ -#ifndef _POSIX_PTHREAD_SEMANTICS -# undef _POSIX_PTHREAD_SEMANTICS -#endif -/* Enable extensions on HP NonStop. */ -#ifndef _TANDEM_SOURCE -# undef _TANDEM_SOURCE -#endif -/* Enable general extensions on Solaris. */ -#ifndef __EXTENSIONS__ -# undef __EXTENSIONS__ -#endif - - /* Define to empty if `const' does not conform to ANSI C. */ #undef const diff -u -r ntp-dev-4.2.7p250/sntp/configure.ac ntp-dev-4.2.7p250.dnssec/sntp/configure.ac --- ntp-dev-4.2.7p250/sntp/configure.ac 2011-08-09 04:02:45.000000000 -0400 +++ ntp-dev-4.2.7p250.dnssec/sntp/configure.ac 2012-01-16 12:27:05.000000000 -0500 @@ -102,6 +102,28 @@ dnl AC_SEARCH_LIBS([inet_pton], [nsl]) AC_SEARCH_LIBS([openlog], [gen syslog]) +dnl +dnl Check for DNSSEC support +dnl +AC_ARG_WITH( + [dnsval], + AS_HELP_STRING([--with-dnsval], [- Enable local DNSSEC validation using dnsval]), + want_dnssec=$withval, + want_dnssec=no) +case "$want_dnssec" in + yes) + if test "x$ac_cv_header_pthread_h" != xyes; then + AC_MSG_ERROR(["Configured needs to be fine-tuned for non-pthread support"]) + fi + AC_CHECK_LIB([val-threads], + [val_getaddrinfo], + [LIBS="-lval-threads -lsres -lcrypto $LIBS" + AC_DEFINE([HAVE_DNSVAL], [1], [Perform local DNSSEC Validation using dnsval])], + [AC_MSG_ERROR(["Can't find required libraries for DNSSEC support"])], + [-lsres -lcrypto]) + ;; +esac + # Checks for header files. AC_CHECK_HEADERS([netdb.h string.h strings.h syslog.h]) diff -u -r ntp-dev-4.2.7p250/sntp/main.c ntp-dev-4.2.7p250.dnssec/sntp/main.c --- ntp-dev-4.2.7p250/sntp/main.c 2012-01-08 18:03:10.000000000 -0500 +++ ntp-dev-4.2.7p250.dnssec/sntp/main.c 2012-01-16 12:27:05.000000000 -0500 @@ -7,6 +7,9 @@ #ifdef WORK_THREAD # include #endif +#ifdef HAVE_DNSVAL +#include +#endif #include "main.h" #include "ntp_libopts.h" @@ -267,6 +270,29 @@ for (i = 0; i < argc; ++i) handle_lookup(argv[i], CTX_UCST); +/* + * If we used getaddrinfo_sometime() [non-blocking] instead of + * getaddrinfo_sometime_blocking() to issue the queries then the following + * code block would need to be uncommented. The issue with using the + * non-blocking lookup routine is that it cannot be used effectively in + * conjunction with libevent. That is, we'd need to wait for all DNS lookups + * to complete before we are able to send NTP packets out. + * The better approach would be to instrument libevent to use dnsval's + * async validation routines internally. + */ +#if 0 +#if HAVE_DNSVAL + do { + fd_set fds; + int numfds; + + FD_ZERO(&fds); /* clear fd_set */ + numfds = 0; /* no FDs yet */ + val_async_select(NULL, &fds, &numfds, NULL, 0); + val_async_check_wait(NULL, &fds, &numfds, NULL, 0); + } while (n_pending_dns > 0); +#endif +#endif event_base_dispatch(base); event_base_free(base); @@ -417,8 +443,22 @@ } ++n_pending_dns; +#ifdef HAVE_DNSVAL + /* + * It is possible to use getaddrinfo_sometime() [non-blocking] in + * place of getaddrinfo_sometime_blocking() too. + * If we did so, we'd have to manage the descriptors + * associated with the DNS lookup within sntp itself. + * But this approach is sub-optimal when used in + * conjunction with libevent. + * Also See the ifdef 0 block in sntp_main(). + */ + getaddrinfo_sometime_blocking(name, "123", &hints, 0, + &sntp_name_resolved, ctx); +#else getaddrinfo_sometime(name, "123", &hints, 0, &sntp_name_resolved, ctx); +#endif } dnssec-tools-2.0/apps/README0000664000237200023720000000370512071065274015754 0ustar hardakerhardaker# Copyright 2004-2013 SPARTA, Inc. All rights reserved. # See the COPYING file included with the dnssec-tools package for details. DNSSEC-Tools Is your domain secure? This directory contains additions to certain applications for providing DNSSEC validation. [1] The libspf2-1.0.4_dnssec_patch.txt file contains a patch to libspf2-1.0.4 that provides DNSSEC validation to DNS queries in libspf2-1.0.4. [2] The libspf2-1.0.4_dnssec_guide.txt file contains documentation of the DNSSEC validation patch to libspf2-1.0.4 to aid developers in using the new DNSSEC validation functionality in their applications. [3] The libspf2_1.0.4_dnssec_howto.txt file contains instructions for installing libspf2-1.0.4 with the DNSSEC validation patch. [4] The libspf2-1.2.5_dnssec_patch.txt file contains a patch to libspf2-1.2.5 that provides DNSSEC validation to DNS queries in libspf2-1.2.5. [5] The libspf2-1.2.5_dnssec_guide.txt file contains documentation of the DNSSEC validation patch to libspf2-1.2.5 to aid developers in using the new DNSSEC validation functionality in their applications. [6] The libspf2-1.2.5_dnssec_howto.txt file contains instructions for installing libspf2-1.2.5 with the DNSSEC validation patch. [7] The 'sendmail' directory contains milters for sendmail that perform DNSSEC validation for the sendmail Mail Transfer Agent (MTA). It also contains a patch for the sendmail MTA that provides DNSSEC validation of DNS queries. [8] The mozilla directory contains patches for enabling DNSSEC checking of DNS names in firefox and thunderbird. It is in pre-alpha form with a lot of debugging and probably shouldn't be used yet, although it does work. This directory also contains an extension for firefox, which is useful for displaying DNSSEC status information, and an extension for thunderbird that can display the DNSSEC validation status in SPF headers. [9] The nagios directory contains files and mods for enabling DNSSEC monitoring in Nagios. dnssec-tools-2.0/apps/ncftp/0000775000237200023720000000000012111172577016201 5ustar hardakerhardakerdnssec-tools-2.0/apps/ncftp/ncftp-dnssec.patch0000664000237200023720000003560211300320045021577 0ustar hardakerhardakerdiff -I '\$Id: ' -u -r -b -w -p -d --exclude-from=/home/rstory/.rcfiles/diff-ignore --new-file clean/ncftp-3.2.3/Strn/syshdrs.h ncftp-3.2.3/Strn/syshdrs.h --- clean/ncftp-3.2.3/Strn/syshdrs.h 2008-07-13 22:14:17.000000000 -0400 +++ ncftp-3.2.3/Strn/syshdrs.h 2009-10-20 22:33:02.000000000 -0400 @@ -63,4 +63,8 @@ extern char *strdup(const char *const src); #endif +#ifdef DNSSEC_LOCAL_VALIDATION +#include +#endif + /* eof */ diff -I '\$Id: ' -u -r -b -w -p -d --exclude-from=/home/rstory/.rcfiles/diff-ignore --new-file clean/ncftp-3.2.3/configure.in ncftp-3.2.3/configure.in --- clean/ncftp-3.2.3/configure.in 2009-07-28 11:01:25.000000000 -0400 +++ ncftp-3.2.3/configure.in 2009-10-20 22:33:02.000000000 -0400 @@ -86,6 +86,33 @@ dnl if test "$nc_cv_readline" = yes ; th dnl wi_LIB_READLINE dnl fi +dnl +dnl DNSSEC +dnl +# Check whether user wants DNSSEC local validation support +AC_ARG_WITH(dnssec-local-validation, + [ --with-dnssec-local-validation Enable local DNSSEC validation using libval (no)], want_dnssec=$withval, want_dnssec=no) +if ! test "x-$want_dnssec" = "x-no" ; then + AC_CHECK_HEADERS(validator/validator.h) + if test "$ac_cv_header_validator_validator_h" != yes; then + AC_MSG_ERROR(Can't find validator.h) + fi + AC_CHECK_LIB(ssl, SHA1_Init,,AC_MSG_ERROR([Can't find SSL library])) + AC_CHECK_LIB(sres, query_send,,AC_MSG_ERROR([Can't find libsres])) + AC_CHECK_LIB(val, p_val_status, + LIBS="$LIBS -lval" + have_val_res_query=yes, + [ AC_CHECK_LIB(pthread, pthread_rwlock_init) + AC_CHECK_LIB(val-threads, p_val_status, + have_val_res_query=yes + LIBS="-lval-threads $LIBS" + LIBVAL_SUFFIX="-threads", + AC_MSG_ERROR(Can't find libval or libval-threads)) + ]) + AC_DEFINE(DNSSEC_LOCAL_VALIDATION, 1, + [Define if you want local DNSSEC validation support]) +fi + dnl --------------------------------------------------------------------------- diff -I '\$Id: ' -u -r -b -w -p -d --exclude-from=/home/rstory/.rcfiles/diff-ignore --new-file clean/ncftp-3.2.3/libncftp/ftp.c ncftp-3.2.3/libncftp/ftp.c --- clean/ncftp-3.2.3/libncftp/ftp.c 2008-10-05 16:02:20.000000000 -0400 +++ ncftp-3.2.3/libncftp/ftp.c 2009-10-20 22:33:02.000000000 -0400 @@ -146,7 +146,7 @@ OpenControlConnection(const FTPCIPtr cip volatile int sock2fd = -1; ResponsePtr rp = NULL; char **volatile curaddr; - int hpok; + int hpok, hprc; struct hostent hp; char *volatile fhost; unsigned int fport; @@ -186,11 +186,19 @@ OpenControlConnection(const FTPCIPtr cip cip->servCtlAddr.sin_port = (unsigned short) fport; - if (GetHostEntry(&hp, fhost, &ip_address, cip->buf, cip->bufSize) != 0) { + hprc = GetHostEntry(&hp, fhost, &ip_address, cip->buf, cip->bufSize); + if (hprc != 0) { hpok = 0; /* Okay, no Host entry, but maybe we have a numeric address * in ip_address we can try. */ +#ifdef DNSSEC_LOCAL_VALIDATION + if (hprc == -2) { + FTPLogError(cip, kDontPerror, "%s: untrusted DNS response.\n", fhost); + cip->errNo = kErrHostUnknown; + return (kErrHostUnknown); + } +#endif if (ip_address.s_addr == INADDR_NONE) { FTPLogError(cip, kDontPerror, "%s: unknown host.\n", fhost); cip->errNo = kErrHostUnknown; diff -I '\$Id: ' -u -r -b -w -p -d --exclude-from=/home/rstory/.rcfiles/diff-ignore --new-file clean/ncftp-3.2.3/libncftp/syshdrs.h ncftp-3.2.3/libncftp/syshdrs.h --- clean/ncftp-3.2.3/libncftp/syshdrs.h 2008-09-04 20:13:11.000000000 -0400 +++ ncftp-3.2.3/libncftp/syshdrs.h 2009-10-20 22:33:02.000000000 -0400 @@ -347,4 +347,8 @@ extern ssize_t nsendmsg(int, const struc #include "util.h" #include "ftp.h" +#ifdef DNSSEC_LOCAL_VALIDATION +#include +#endif + /* eof */ diff -I '\$Id: ' -u -r -b -w -p -d --exclude-from=/home/rstory/.rcfiles/diff-ignore --new-file clean/ncftp-3.2.3/ncftp/cmds.c ncftp-3.2.3/ncftp/cmds.c --- clean/ncftp-3.2.3/ncftp/cmds.c 2008-10-05 16:53:13.000000000 -0400 +++ ncftp-3.2.3/ncftp/cmds.c 2009-10-22 22:13:43.000000000 -0400 @@ -2244,7 +2244,7 @@ LookupCmd(const int argc, char **const a const char *host; char **cpp; struct in_addr ip_address; - int shortMode, optrc; + int shortMode, optrc, dnsrc; char ipStr[16]; GetoptInfo opt; @@ -2267,11 +2267,17 @@ LookupCmd(const int argc, char **const a for (i=opt.ind; i opt.ind) && (shortMode == 0)) Trace(-1, "\n"); if (hpok == 0) { +#ifndef DNSSEC_LOCAL_VALIDATION + if (dnsrc == -2) + Trace(-1, "DNS response for site %s is untrused.\n", host); + else +#endif Trace(-1, "Unable to get information about site %s.\n", host); } else if (shortMode) { MyInetAddr(ipStr, sizeof(ipStr), hp.h_addr_list, 0); @@ -2542,6 +2548,7 @@ DoOpen(void) if (gConn.firewallType == kFirewallNotInUse) { (void) STRNCPY(ohost, gConn.host); OpenMsg("Resolving %s...", ohost); +#ifndef DNSSEC_LOCAL_VALIDATION if ((gLoadedBm != 0) && (gBm.lastIP[0] != '\0')) { result = MyGetHostByName(ipstr, sizeof(ipstr), ohost, 3); if (result < 0) { @@ -2558,6 +2565,21 @@ DoOpen(void) (void) printf("Unknown host \"%s\".\n", ohost); return (-1); } +#else + result = MyGetHostByName(ipstr, sizeof(ipstr), ohost, 15); + if (result < 0) { + (void) printf("\n"); + /* + * It would be nice to print a little more information, + * but that would mean an API change to MyGetHostByName. + */ + (void) printf("%s host \"%s\".\n", + (result == -2) ? + "Untrusted DNS response for" : "Unknown", + ohost); + return (-1); + } +#endif (void) STRNCPY(gConn.host, ipstr); OpenMsg("Connecting to %s...", ipstr); } else { diff -I '\$Id: ' -u -r -b -w -p -d --exclude-from=/home/rstory/.rcfiles/diff-ignore --new-file clean/ncftp-3.2.3/ncftp/syshdrs.h ncftp-3.2.3/ncftp/syshdrs.h --- clean/ncftp-3.2.3/ncftp/syshdrs.h 2008-09-04 20:14:32.000000000 -0400 +++ ncftp-3.2.3/ncftp/syshdrs.h 2009-10-20 22:33:02.000000000 -0400 @@ -291,3 +291,8 @@ #include /* Library header. */ #include /* Library header. */ #include /* Library header. */ + +#ifdef DNSSEC_LOCAL_VALIDATION +#include +#endif + diff -I '\$Id: ' -u -r -b -w -p -d --exclude-from=/home/rstory/.rcfiles/diff-ignore --new-file clean/ncftp-3.2.3/ncftp/util.c ncftp-3.2.3/ncftp/util.c --- clean/ncftp-3.2.3/ncftp/util.c 2008-07-08 18:04:24.000000000 -0400 +++ ncftp-3.2.3/ncftp/util.c 2009-10-22 22:14:00.000000000 -0400 @@ -690,6 +690,9 @@ MyGetHostByName(char *const volatile dst #ifdef HAVE_INET_ATON struct in_addr ina; #endif +#ifdef DNSSEC_LOCAL_VALIDATION + val_status_t val_status; +#endif #ifdef HAVE_INET_ATON if (inet_aton(hn, &ina) != 0) { @@ -728,12 +731,26 @@ MyGetHostByName(char *const volatile dst osigalrm = NcSignal(SIGALRM, CancelGetHostByName); if (t > 0) (void) alarm((unsigned int) t); +#ifndef DNSSEC_LOCAL_VALIDATION hp = gethostbyname(hn); +#else + hp = val_gethostbyname(NULL, hn, &val_status); +#endif if (t > 0) (void) alarm(0); (void) NcSignal(SIGPIPE, osigpipe); (void) NcSignal(SIGINT, osigint); (void) NcSignal(SIGALRM, osigalrm); +#ifdef DNSSEC_LOCAL_VALIDATION + /* + * It would be nice to pass a little more information back, + * but that would mean an API change to MyGetHostByName. + */ + if ((hp != NULL) && ! val_istrusted(val_status)) { + *dst = '\0'; + return (-2); + } +#endif if (hp != NULL) { InetNtoA(dst, ((struct in_addr **) hp->h_addr_list)[0], dsize); return (0); diff -I '\$Id: ' -u -r -b -w -p -d --exclude-from=/home/rstory/.rcfiles/diff-ignore --new-file clean/ncftp-3.2.3/sh_util/syshdrs.h ncftp-3.2.3/sh_util/syshdrs.h --- clean/ncftp-3.2.3/sh_util/syshdrs.h 2008-09-04 20:14:38.000000000 -0400 +++ ncftp-3.2.3/sh_util/syshdrs.h 2009-10-20 22:33:02.000000000 -0400 @@ -280,3 +280,8 @@ #include /* Library header. */ #include /* Library header. */ #include /* Library header. */ + +#ifdef DNSSEC_LOCAL_VALIDATION +#include +#endif + diff -I '\$Id: ' -u -r -b -w -p -d --exclude-from=/home/rstory/.rcfiles/diff-ignore --new-file clean/ncftp-3.2.3/sio/DNSUtil.c ncftp-3.2.3/sio/DNSUtil.c --- clean/ncftp-3.2.3/sio/DNSUtil.c 2008-07-13 20:25:54.000000000 -0400 +++ ncftp-3.2.3/sio/DNSUtil.c 2009-10-20 22:33:02.000000000 -0400 @@ -26,7 +26,31 @@ extern int getdomainname(char *name, get int GetHostByName(struct hostent *const hp, const char *const name, char *const hpbuf, size_t hpbufsize) { -#if defined(HAVE_GETHOSTBYNAME_R) && (defined(SOLARIS) || defined(IRIX) || defined(BSDOS)) +#if defined(DNSSEC_LOCAL_VALIDATION) + char *usehpbuf; + struct hostent *h; + int my_h_errno, rc; + val_status_t val_status; + + usehpbuf = hpbuf; + forever { + errno = 0; + my_h_errno = 0; + h = NULL; + memset(usehpbuf, 0, hpbufsize); + rc = val_gethostbyname2_r(NULL, name, AF_INET, hp, usehpbuf, + hpbufsize, &h, &my_h_errno, + &val_status); + if ((rc == 0) && (h != NULL)) { + if (!val_istrusted(val_status)) + return (-2); + return (0); + } + if ((rc == 0) && (my_h_errno != 0)) + errno = ENOENT; + break; + } +#elif defined(HAVE_GETHOSTBYNAME_R) && (defined(SOLARIS) || defined(IRIX) || defined(BSDOS)) struct hostent *h; int h_errno_unused = 0; memset(hpbuf, 0, hpbufsize); @@ -114,7 +138,21 @@ GetHostByName(struct hostent *const hp, int GetHostByAddr(struct hostent *const hp, void *addr, int asize, int atype, char *const hpbuf, size_t hpbufsize) { -#if defined(HAVE_GETHOSTBYADDR_R) && (defined(SOLARIS) || defined(IRIX) || defined(BSDOS)) +#if defined(DNSSEC_LOCAL_VALIDATION) + struct hostent *h; + int h_errno_unused = 0, rc; + val_status_t val_status; + + memset(hpbuf, 0, hpbufsize); + rc = val_gethostbyaddr_r(NULL, addr, asize, atype, + hp, hpbuf, hpbufsize, &h, &h_errno_unused, + &val_status); + if ((rc == 0) && (h != NULL)) { + if (!val_istrusted(val_status)) + return (-2); + return (0); + } +#elif defined(HAVE_GETHOSTBYADDR_R) && (defined(SOLARIS) || defined(IRIX) || defined(BSDOS)) struct hostent *h; int h_errno_unused = 0; memset(hpbuf, 0, hpbufsize); @@ -182,7 +220,7 @@ int GetHostEntry(struct hostent *const hp, const char *const host, struct in_addr *const ip_address, char *const hpbuf, size_t hpbufsize) { struct in_addr ip; - int rc = -1; + int rc; /* See if the host was given in the dotted IP format, like "36.44.0.2." * If it was, inet_addr will convert that to a 32-bit binary value; @@ -190,7 +228,8 @@ GetHostEntry(struct hostent *const hp, c */ ip.s_addr = inet_addr(host); if (ip.s_addr != INADDR_NONE) { - if (GetHostByAddr(hp, (char *) &ip, (int) sizeof(ip), AF_INET, hpbuf, hpbufsize) == 0) { + rc = GetHostByAddr(hp, (char *) &ip, (int) sizeof(ip), AF_INET, hpbuf, hpbufsize); + if (rc == 0) { rc = 0; if (ip_address != NULL) (void) memcpy(&ip_address->s_addr, hp->h_addr_list[0], (size_t) hp->h_length); @@ -201,12 +240,19 @@ GetHostEntry(struct hostent *const hp, c /* No IP address, so it must be a hostname, like ftp.wustl.edu. */ if (ip_address != NULL) ip_address->s_addr = INADDR_NONE; - if (GetHostByName(hp, host, hpbuf, hpbufsize) == 0) { - rc = 0; + rc = GetHostByName(hp, host, hpbuf, hpbufsize); + if (rc == 0) { if (ip_address != NULL) (void) memcpy(&ip_address->s_addr, hp->h_addr_list[0], (size_t) hp->h_length); } } +#if defined(DNSSEC_LOCAL_VALIDATION) + if ((rc < 0) && (rc != -2)) + rc = -1; +#else + if ((rc < 0) && (rc != -1)) + rc = -1; +#endif return (rc); } /* GetHostEntry */ diff -I '\$Id: ' -u -r -b -w -p -d --exclude-from=/home/rstory/.rcfiles/diff-ignore --new-file clean/ncftp-3.2.3/sio/StrAddr.c ncftp-3.2.3/sio/StrAddr.c --- clean/ncftp-3.2.3/sio/StrAddr.c 2008-07-13 20:26:01.000000000 -0400 +++ ncftp-3.2.3/sio/StrAddr.c 2009-10-20 22:33:02.000000000 -0400 @@ -268,8 +268,16 @@ AddrStrToAddr(const char * const s, stru sa->sin_family = AF_INET; sa->sin_addr.s_addr = ipnum; } else { +#ifdef DNSSEC_LOCAL_VALIDATION + val_status_t val_status; + errno = 0; + hp = val_gethostbyname(NULL,hostcp,&val_status); + if ((hp != NULL) && (!val_istrusted(val_status))) + hp = NULL; +#else errno = 0; hp = gethostbyname(hostcp); +#endif if (hp == NULL) { if (errno == 0) errno = ENOENT; @@ -305,7 +313,14 @@ AddrToAddrStr(char *const dst, size_t ds InetNtoA(addrName, &saddrp->sin_addr, sizeof(addrName)); addrNamePtr = addrName; } else { +#ifdef DNSSEC_LOCAL_VALIDATION + val_status_t val_status; + hp = val_gethostbyaddr(NULL, (const char*)&saddrp->sin_addr, sizeof(struct in_addr), AF_INET, &val_status); + if ((hp != NULL) && (!val_istrusted(val_status))) + hp = NULL; +#else hp = gethostbyaddr((gethost_addrptr_t) &saddrp->sin_addr, sizeof(struct in_addr), AF_INET); +#endif if ((hp != NULL) && (hp->h_name != NULL) && (hp->h_name[0] != '\0')) { addrNamePtr = hp->h_name; } else { diff -I '\$Id: ' -u -r -b -w -p -d --exclude-from=/home/rstory/.rcfiles/diff-ignore --new-file clean/ncftp-3.2.3/sio/sio.version ncftp-3.2.3/sio/sio.version --- clean/ncftp-3.2.3/sio/sio.version 1969-12-31 19:00:00.000000000 -0500 +++ ncftp-3.2.3/sio/sio.version 2009-10-21 10:43:49.000000000 -0400 @@ -0,0 +1 @@ +6.2.1 diff -I '\$Id: ' -u -r -b -w -p -d --exclude-from=/home/rstory/.rcfiles/diff-ignore --new-file clean/ncftp-3.2.3/sio/syshdrs.h ncftp-3.2.3/sio/syshdrs.h --- clean/ncftp-3.2.3/sio/syshdrs.h 2008-07-13 22:13:40.000000000 -0400 +++ ncftp-3.2.3/sio/syshdrs.h 2009-10-20 22:33:02.000000000 -0400 @@ -215,4 +215,8 @@ extern ssize_t nsendmsg(int, const struc # endif #endif /* SOCKS */ +#ifdef DNSSEC_LOCAL_VALIDATION +#include +#endif + /* eof */ diff -I '\$Id: ' -u -r -b -w -p -d --exclude-from=/home/rstory/.rcfiles/diff-ignore --new-file clean/ncftp-3.2.3/vis/syshdrs.h ncftp-3.2.3/vis/syshdrs.h --- clean/ncftp-3.2.3/vis/syshdrs.h 2008-09-04 20:14:44.000000000 -0400 +++ ncftp-3.2.3/vis/syshdrs.h 2009-10-20 22:33:02.000000000 -0400 @@ -340,3 +340,8 @@ #include /* Library header. */ #include /* Because ../ncftp/util.c needs it. */ #include /* Mostly for utility routines it has. */ + +#ifdef DNSSEC_LOCAL_VALIDATION +#include +#endif + dnssec-tools-2.0/apps/ncftp/README0000664000237200023720000001473412026144032017060 0ustar hardakerhardakerlocal DNSSEC validation for ncftp ================================= Introduction ------------ NcFTP contains support for performing local DNSSEC validation for all DNS lookups. This document contains very brief instructions on how to use this feature. Configuring DNS is out of the scope of this document. Background ---------- A detailed description of DNSSEC is out of scope for this document, but a basic background is provided. DNS response packets are fairly easy to spoof, so an attacker situated in the network path between a client and its configured DNS server could possibly inject DSN response packets, causing the client to connect to another host. DNSSEC introduces cryptographic signing of DNS records, allowing a resolver to verify that a response has not been spoofed. This is done by configuring 'Trust Anchors', which are known good keys used to sign a zone. Rationale for Local Validation ------------------------------ As DNSSEC deployment grows, more ISPs are offering DNS servers which are DNSSEC aware and perform DNSSEC validation. So one might wonder why they would want local validation. There are several reasons. - Deployment of DNSSEC is progressing slowly, so end users might not have DNS servers which are capable of, or configured for, DNSSEC processing. - DNSSEC only guarantees the integrity of the DNS response to the DNS server. The response from the DNS server to the local host has no protection. Thus an attacker who can inject packets in the path between a DNS server and a stub resolver can not only redirect the client, but can make it belive a response was authentic! - Even if a DNSSEC server is on a local and trusted network, an end user might not have any influence over local policy. In other words, they might not be able to get a new Trust Anchor configured for a zone which they trust or mark a zone which is correctly signed as untrusted. - A DNSSEC server will not return data to an application for a response which cannot be validated. The means that, to the client, the DNS lookups will appear to have failed, even if the DNS server did get a response. With local validation, the application can distinguish between a non- responsive domain and validation failure. Requirements ------------ This code requires that the DNSSEC-Tools resolver and validator libraries and headers be installed. The DNSSEC-Tools package can be obtained from: http://www.dnssec-tools.org/resources/download.html Using DNSSEC validation ----------------------- The extra validation code in NcFTP is optional, and must be enabled by specifying --with-local-dnssec-validation when running configure. This patch has been tested on ncftp-3.2.0, 3.2.1 and 3.2.3. 1) Apply the DNSSEC patch 2) run autoheader and autoconf to regenerate several important files. I had to use autoconf version 2.13. 3) Configure with: ./configure --with-dnssec-local-validation 4) make 5) sudo make install Testing ------- By default, DNSSEC-Tools' configuration file should be trying to validate all zones. A few zones are signed, but most are not. For domains which validate successfully, there is no difference in output: $ ncftp ftp.ietf.org NcFTP 3.2.5 (Feb 02, 2011) by Mike Gleason (http://www.NcFTP.com/contact/). Connecting to 64.170.98.31... ProFTPD 1.3.1 Server (ProFTPD) [64.170.98.31] Logging in... Anonymous access granted, restrictions apply Logged in to ftp.ietf.org. ncftp / > For domains that do not validate successfully: $ ncftp baddata-a.test.dnssec-tools.org NcFTP 3.2.5 (Feb 02, 2011) by Mike Gleason (http://www.NcFTP.com/contact/). Resolving baddata-a.test.dnssec-tools.org... Untrusted DNS response for host "baddata-a.test.dnssec-tools.org". ncftp> Viewing Details ---------------- To see some debug output from the validation process, you can set the VAL_LOG_TARGET environment variable. (Higher numbers will result in more output. 5 is a good start, 7 is more than you really want.) Example Validation Success: $ VAL_LOG_TARGET="5:stdout" ncftp ftp.ietf.org NcFTP 3.2.5 (Feb 02, 2011) by Mike Gleason (http://www.NcFTP.com/contact/). 20120905::15:52:52 Validation result for {ftp.ietf.org, IN(1), A(1)}: VAL_SUCCESS:128 (Validated) 20120905::15:52:52 name=ftp.ietf.org class=IN type=A from-server=192.168.122.1 status=VAL_AC_VERIFIED:31 20120905::15:52:52 name=ietf.org class=IN type=DNSKEY[tag=45586] from-server=192.168.122.1 status=VAL_AC_VERIFIED:31 20120905::15:52:52 name=ietf.org class=IN type=DS from-server=192.168.122.1 status=VAL_AC_VERIFIED:31 20120905::15:52:52 name=org class=IN type=DNSKEY[tag=21366] from-server=192.168.122.1 status=VAL_AC_VERIFIED:31 20120905::15:52:52 name=org class=IN type=DS from-server=192.168.122.1 status=VAL_AC_VERIFIED:31 20120905::15:52:52 name=. class=IN type=DNSKEY from-server=192.168.122.1 status=VAL_AC_TRUST:12 20120905::15:52:53 Validation result for {31.98.170.64.in-addr.arpa., IN(1), PTR(12)}: VAL_PINSECURE:136 (Trusted but not Validated) 20120905::15:52:53 name=31.98.170.64.in-addr.arpa class=IN type=PTR from-server=192.168.122.1 status=VAL_AC_PINSECURE:9 ProFTPD 1.3.1 Server (ProFTPD) [64.170.98.31] Logging in... Anonymous access granted, restrictions apply Logged in to ftp.ietf.org. ncftp / > Example Validation Failure: $ VAL_LOG_TARGET="5:stdout" ncftp baddata-a.test.dnssec-tools.org NcFTP 3.2.5 (Feb 02, 2011) by Mike Gleason (http://www.NcFTP.com/contact/). 20120905::15:46:56 Validation result for {baddata-a.test.dnssec-tools.org, IN(1), A(1)}: VAL_BOGUS:1 (Untrusted) 20120905::15:46:56 name=baddata-a.test.dnssec-tools.org class=IN type=A from-server=75.101.48.145 status=VAL_AC_NOT_VERIFIED:18 20120905::15:46:56 name=test.dnssec-tools.org class=IN type=DNSKEY from-server=75.101.48.145 status=UNEVALUATED:2 20120905::15:46:56 name=test.dnssec-tools.org class=IN type=DS from-server=192.94.214.100 status=VAL_AC_VERIFIED:31 20120905::15:46:56 name=dnssec-tools.org class=IN type=DNSKEY[tag=34816] from-server=192.94.214.100 status=VAL_AC_VERIFIED:31 20120905::15:46:56 name=dnssec-tools.org class=IN type=DS from-server=199.19.57.1 status=VAL_AC_VERIFIED:31 20120905::15:46:56 name=org class=IN type=DNSKEY[tag=21366] from-server=199.19.57.1 status=VAL_AC_VERIFIED:31 20120905::15:46:56 name=org class=IN type=DS from-server=198.41.0.4 status=VAL_AC_VERIFIED:31 20120905::15:46:56 name=. class=IN type=DNSKEY from-server=198.41.0.4 status=VAL_AC_TRUST:12 Untrusted DNS response for host "baddata-a.test.dnssec-tools.org". ncftp> dnssec-tools-2.0/apps/nagios/0000775000237200023720000000000012111172547016344 5ustar hardakerhardakerdnssec-tools-2.0/apps/nagios/sample.rollrec0000664000237200023720000000106511560633014021211 0ustar hardakerhardaker roll "inside example" zonename "example.com" zonefile "inside.example.com.signed" keyrec "inside.example.com.krf" directory "dir-example-in" maxttl "60" display "1" phasestart "Wed Mar 30 18:00:18 2011" roll "example.com" zonename "example.com" zonefile "example.com.signed" keyrec "example.com.krf" directory "dir-example-out" maxttl "60" display "1" phasestart "Wed Mar 30 18:00:18 2011" roll "test" zonename "test.com" zonefile "test.com.signed" keyrec "test.com.krf" maxttl "60" display "1" phasestart "Wed Mar 30 18:00:18 2011" dnssec-tools-2.0/apps/nagios/dt_zonestat0000775000237200023720000003037512107530465020642 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2011-2013 SPARTA, Inc. All rights reserved. # See the COPYING file distributed with this software for details. # # dt_zonestat # # This script retrieves the DNSSEC rollover phase for a specified # zone. The phase is retrieved in one of two ways: # - from the rollerd daemon using the rollctl command # - from rollerd's rollrec file using the lsroll command # # This was written for DNSSEC-Tools. # # Revision History # 1.9.1 Original version: 3/2011 (1.0) # use strict; use Getopt::Long qw(:config no_ignore_case_always); use Net::DNS::SEC::Tools::dnssectools; ####################################################################### # # Version information. # my $NAME = "dt_zonestat"; my $VERS = "$NAME version: 2.0.0"; my $DTVERS = "DNSSEC-Tools Version: 2.0"; ######################################################################r # # Data required for command line options. # my %options = (); # Filled option array. my @opts = ( "rrf=s", # Rollrec file (for lsroll.) "Version", # Display the version number. "help", # Give a usage message and exit. ); my $rrf = ''; # Rollrec file. ####################################################################### # # Nagios return codes. # my $RC_NORMAL = 0; # Normal return code. my $RC_WARNING = 1; # Warning return code. my $RC_CRITICAL = 2; # Critical return code. my $RC_UNKNOWN = 3; # Unknown return code. ####################################################################### # # Exit codes for rollover phases. # my $normal_op = $RC_NORMAL; # Normal operation. my $ksk_other = $RC_NORMAL; # KSK phases 1-5, and 7. my $ksk_6 = $RC_WARNING; # KSK phase 6. my $zsk_allphases = $RC_NORMAL; # ZSK all phases. ####################################################################### my $svzone; # Split-view version of zone name. my $OUTFILE = "/tmp/z.zonestats"; # Debugging output file. # # Run shtuff. # main(); exit($RC_UNKNOWN); #----------------------------------------------------------------------------- # Routine: main() # # Purpose: Main controller routine for uem-dnsresp. # sub main { my $zone; # Zone to check. $| = 0; # out("dt_zonestat: running"); # # Check our options. # $zone = doopts(); # out("\tzone - <$zone>"); # # Build the split-view zone name. # $svzone = $zone; $svzone = "$zone/$zone" if($zone !~ /\//); # out("\tsvzone - <$svzone>"); # out(" "); # # Get the statistics for this zone. # if($rrf ne '') { # out("\tcalling zonestats_lsroll($zone)"); zonestats_lsroll($zone); } else { # out("\tcalling zonestats_rollctl($zone)"); zonestats_rollctl($zone); } # # Exit with the command's return code (Shouldn't get here.) # print "dt_zonestat should not get here\n"; exit($RC_UNKNOWN); } #----------------------------------------------------------------------------- # Routine: doopts() # # Purpose: This routine shakes and bakes our command line options. # sub doopts { # # Parse the command line. # GetOptions(\%options,@opts) || usage(); # # Show the version number or usage if requested. # version() if(defined($options{'Version'})); usage() if(defined($options{'help'})); # # Check a few options. # $rrf = $options{'rrf'} if(defined($options{'rrf'})); # # Ensure a zone was specified. # if(@ARGV != 1) { print "dt_zonestat: no zone specified\n"; return($RC_CRITICAL); } # # Return the zone name. # return($ARGV[0]); } #----------------------------------------------------------------------------- # Routine: zonestats_lsroll() # sub zonestats_lsroll { my $zone = shift; # Zone to check. my $out; # Command's output. my @out; # Output lines array. # # Get the zone status. # $out = runner("lsroll -terse -type -zonename -phases $zone $rrf"); @out = split /\n/, $out; # # Check each line of the lsroll output. If we find a line whose # zone name matches the one we're looking for, we'll deal with # its rollover phases and exit accordingly. # # We'll also take into account whether this is a full, split-view # zone name or just the bare zone name. # foreach my $line (@out) { my $lnzone; # Zone from line. my $rollflag; # Rollover flag. my $kskphase; # Rollover KSK phase. my $zskphase; # Rollover ZSK phase. $line =~ /"([\w. -]+)"\W+([\w.-]+)\W+(\w+)\W+(\d)\/(\d)/; $lnzone = "$1/$2"; $rollflag = $3; $kskphase = $4; $zskphase = $5; # # This isn't the droid we're looking for if the line's zone # name doesn't match either the split-view zone name or the # bare zone name. # if(($lnzone ne $svzone) && ($lnzone ne $zone)) # (($lnzone ne $zone) && ($lnzone !~ /\//))) { next; } # # Handle skipped zones. # if($rollflag eq 'skip') { print "$svzone is not rolling\n"; exit($RC_UNKNOWN); } # # Deal with the zone's rollover phases, exiting appropriately. # if(($kskphase == 0) && ($zskphase == 0)) { print "Normal Operation\n"; # out("$zone: normal operation\n"); exit($normal_op); } if($kskphase == 6) { # out("$zone: KSK phase 6\n"); print "KSK Rollover Phase 6: ATTENTION NEEDED\n"; exit($ksk_6); } if($kskphase > 0) { # out("$zone: KSK phase $kskphase\n"); print "KSK Rollover Phase $kskphase\n"; exit($ksk_other); } if($zskphase > 0) { # out("$zone: ZSK Phase $zskphase\n"); print "ZSK Rollover Phase $zskphase\n"; exit($zsk_allphases); } } print "unknown zone \"$svzone\"\n"; exit($RC_UNKNOWN); } #----------------------------------------------------------------------------- # Routine: zonestats_rollctl() # sub zonestats_rollctl { my $zone = shift; # Zone to check. my $out; # Command's output. my @out; # Output lines array. my $svzone; # Split-view version of name. # # Get the zone status. # $out = runner("rollctl -zonestatus"); @out = split /\n/, $out; # # Build the split-view zone name. # $svzone = $zone; $svzone = "$zone/$zone" if($zone !~ /\//); # # Check each line of the rollctl output. If we find a line whose # zone name matches the one we're looking for, we'll deal with # its rollover phases and exit accordingly. # # We'll also take into account whether this is a full, split-view # zone name or just the bare zone name. # foreach my $line (@out) { my $lnzone; # Zone from line. my $rolltype; # Rollover type. my $rollphase; # Rollover phase. $line =~ /(\w+)\W+\w+\W+(\w+)\W+(\w+)/; $lnzone = $1; $rolltype = $2; $rollphase = $3; # # Skip this zone if the line's zone name doesn't match # either the split-view zone name or the bare zone name. # if(($lnzone ne $svzone) && (($lnzone eq $zone) && ($lnzone !~ /\//))) { next; } # # Handle a non-rolling zone. # if($rolltype eq 'skip') { print "$svzone is not rolling\n"; exit($RC_UNKNOWN); } # # Handle a zone in regular operation. # if($rollphase == 0) { print "$svzone in normal operation.\n"; exit($normal_op); } # # Handle a ZSK rolling zone. # if($rolltype eq 'ZSK') { print "$svzone in ZSK phase $rollphase.\n"; exit($zsk_allphases); } # # Handle a KSK rolling zone. # if($rollphase != 6) { print "$svzone in KSK phase $rollphase.\n"; exit($ksk_other); } print "ATTENTION NEEDED: $svzone in KSK phase $rollphase\n"; exit($ksk_6); } print "unknown zone \"$svzone\"\n"; exit($RC_UNKNOWN); } #----------------------------------------------------------------------------- # Routine: runner() # sub runner { my $cmd = shift; # Command to execute. my $out; # Command's output. my $ret; # Command's return code. # # Run the command. # $out = `$cmd`; $ret = $? >> 8; # # Return the command output if it succeeded. # return($out) if($ret == 0); # # Handle failed commands... # # # Exit if rollerd isn't running. # if($ret == 200) { print "rollerd is not running\n"; exit($RC_UNKNOWN); } # # Exit if the config file has problems. # if($ret == 201) { print "DNSSEC-Tools config file has problems - <$out> $ret\n"; exit($RC_UNKNOWN); } print "Unknown error\n"; exit($RC_UNKNOWN); } #----------------------------------------------------------------------------- # Routine: out() # # Purpose: Temporary output routine. # sub out { my $str = shift; open(OUT,">>$OUTFILE"); print OUT "$str\n"; close(OUT); } #---------------------------------------------------------------------- # Routine: version() # sub version { print STDERR "$VERS\n"; exit($RC_WARNING); } #----------------------------------------------------------------------------- # Routine: usage() # sub usage { print STDERR "$VERS Copyright 2011-2013 SPARTA, Inc. All rights reserved. This script retrieves the DNSSEC rollover phase for a specified zone. The phase is retrieved from the rollerd daemon or the active rollrec file. usage: dt_zonestat [options] options: -rrf rollrec file to consult -Version display program version -help display this message "; exit($RC_WARNING); } 1; ############################################################################### =pod =head1 NAME dt_zonestat - Nagios plugin to retrieve a zone's rollover status from DNSSEC_Tools =head1 SYNOPSIS dt_zonestat [options] =head1 DESCRIPTION B is a Nagios plugin to retrieve a zone's rollover status from DNSSEC_Tools. Zone status is retrieved either by requesting the status from B or by checking a specified B file. By default, B will use B to retrieve zone status information from B. If the B<-rrf> option is specified, then zone status information is found by running the the B command with the specified B file. Given uids of B and web servers, and the file permissions and ownerships of their related files, it is probably safest to use the B<-rrf> method of execution. In looking for the zone's rollover status, B will take into account whether the zone was specified as a full, split-view zone name or given only as the zone name. =head1 NAGIOS USE This is run from a Nagios I object. These are examples of how the objects should be defined: define command { command_name dt_zonestatus command_line $USER1$/dt_zonestat -rrf $ARG2$ $ARG1$ } define service { service_description zone rollover check_command dt_zonestatus!"foo/foo.com"!/dtnag/test.rrf host_name test/test.com active_checks_enabled 1 use dnssec-tools-service } The B program will automatically create all DNSSEC-Tools-related Nagios objects. =head1 OPTIONS The following options are recognized by B: =over 4 =item I<-rrf> The name of the B file to consult (with B.) =item I<-Version> Display the program version and exit. =item I<-help> Display a usage message and exit. =back =head1 EXIT CODES As a Nagios plugin, B must satisfy several requirements for its exit codes. The expected exit codes are used by Nagios in determining how to display plugin output. Plugins may also provide a single line of output that will be included in the Nagios display. The following table shows the exit codes and output for a zone's rollover state: Zone Status Exit Code Output Line zone not rolling 0 Normal Operation all ZSK phases 0 ZSK Rollover Phase KSK phase 6 1 KSK Rollover Phase 6: ATTENTION NEEDED KSK other phases 0 KSK Rollover Phase 0 is the "okay" value; 1 is the "warning" value; 2 is the "critical" value; 3 is the "unknown" value. These codes were selected for these rollover phases to show that KSK phase 6 must be attended to, and all other phases were all operating normally. B uses these for the following errors: Exit Code Output Line 2 No zone specified 3 Rollerd is not running 3 DNSSEC-Tools configuration file has problems 3 Zone is not in rollrec file 3 Zone is not rolling =head1 COPYRIGHT Copyright 2011-2013 SPARTA, Inc. All rights reserved. See the COPYING file included with the DNSSEC-Tools package for details. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =head1 SEE ALSO dt_donuts(1), dt_zonetimer(1) lsroll(8), rollctl(8), rollerd(8) rollrec(5) =cut dnssec-tools-2.0/apps/nagios/dtnagobj0000775000237200023720000004651612107530465020100 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2011-2013 SPARTA, Inc. All rights reserved. See the COPYING # file distributed with this software for details. # # # dtnagobj # # This script builds Nagios host and service objects from a rollerd # rollrec file. These objects let Nagios monitor the rollover state # of the zones in the rollrec. # use strict; use Cwd; use Getopt::Long qw(:config no_ignore_case_always); use Net::DNS::SEC::Tools::conf; use Net::DNS::SEC::Tools::defaults; use Net::DNS::SEC::Tools::rollrec; # # Version information. # my $NAME = "dtnagobj"; my $VERS = "$NAME version: 2.0.0"; my $DTVERS = "DNSSEC-Tools Version: 2.0"; ####################################################################### # # Data required for command line options. # my %options = (); # Filled option array. my @opts = ( "contact=s@", # Contact email. "outfile=s", # Output file. "overwrite", # File-overwrite flag. "Version", # Display the version number. "verbose", # Verbose flag. "help", # Give a full usage message and exit. ); # # Flag values for the various options. Variable/option connection should # be obvious. # my $defcontact = "root\@localhost"; # Default contact email. my @contacts = (); # Contact lists. my $outfile = ''; # Output file. my $verbose = 0; # Verbose flag. ######################################### # # Data for building output. # my @rrfs = (); # List of rollrec files. my @zoneinfo = (); # Rollrec and zone name info. my @hosts = (); # List of hosts. my $ret; # Return code from main(). $ret = main(); exit($ret); #----------------------------------------------------------------------------- # Routine: main() # # Purpose: Run everything. # sub main() { my $argc; # Number of command line arguments. my $errors = 0; # Total error count. erraction(ERR_EXIT); # # Check our options. # $argc = doopts(); # # Read the rollrec files given on the command line. # while($argc > 0) { my $rrf = $ARGV[0]; # Rollrec file. if($rrf !~ /^\//) { $rrf = getcwd() . "/$rrf"; } getrollrecs($rrf); push @rrfs, $rrf; shift @ARGV; $argc = @ARGV; } # # CURRENTLY ONLY HANDLING A SINGLE ROLLREC FILE!!! # # # Write header. # header(); # # Write contacts objects. # contacts(); # # Write command template and objects. # commands(); # # Write host template and objects. # hosts(); # # Write service template and objects. # services($rrfs[0]); return(0); } #----------------------------------------------------------------------------- # Routine: doopts() # # Purpose: This routine parses our command line options. # sub doopts { my %dtconf; # DNSSEC-Tools config values. my $overwrite = 0; # File-overwrite flag. # # Parse the options. # GetOptions(\%options,@opts) || usage(); # # Handle a few immediate flags. # version() if(defined($options{'Version'})); usage(1) if(defined($options{'help'})); # # Set our option variables based on the parsed options. # $overwrite = $options{'overwrite'}; $verbose = $options{'verbose'}; # # Build the contacts array -- either with the user-specified # addresses, the administrative email contact from the DNSSEC-Tools # config file, or the default contact. # if(defined($options{'contact'})) { my $contacts; # Contacts array ref. my %contacts = (); # Contacts hash. # # Get the contacts array. # $contacts = $options{'contact'}; @contacts = @$contacts; # # Get a unique set of names. # foreach my $contact (@contacts) { $contacts{$contact} = 1; } # # Rebuild the contacts array, but without duplicates. # @contacts = (); foreach my $contact (sort(keys(%contacts))) { push @contacts, $contact; } } else { my %dtconf; # Contents of DNSSEC-Tools config file. # # Read the DNSSEC-Tools config file. # %dtconf = parseconfig(); # # If the config file has an administrative contact defined, # we'll use that for the contact address. If not, we'll # use the default. # if(defined($dtconf{'admin-email'})) { push @contacts, $dtconf{'admin-email'}; } else { push @contacts, $defcontact; } } # # Set up an output file, if needed. # if(defined($options{'outfile'})) { $outfile = $options{'outfile'}; # # Maybe let 'em know what we're doing. # if($verbose) { print "writing objects to \"$outfile\"\n"; } # # If the file exists and we aren't supposed to overwrite # it, complain and exit. # if((-e $outfile) && !$overwrite) { print STDERR "output file \"$outfile\" exists, use -overwrite to overwrite it\n"; exit(2); } # # Point stdout to the requested file. # close(STDOUT); if(open(STDOUT,"> $outfile") == undef) { print STDERR "unable to open output file \"$outfile\"\n"; exit(3); } } # # Make sure a rollrec file was given. # usage(2) if(@ARGV == 0); return(@ARGV); } #----------------------------------------------------------------------------- # Routine: getrollrecs() # # Purpose: This routine reads the specified rollrec file and puts the # rollrec name and zone name into an array for later use. # sub getrollrecs { my $rrf = shift; # Rollrec file. my @rrnames; # Rollrec names from file. # # Get the names of the file's rollrec entries. # rollrec_read($rrf); @rrnames = rollrec_names(); # # Add a split-view-ified zonename to the list. # foreach my $rrn (sort(@rrnames)) { my $rr; # Reference to keyrec. my %rrec; # Rollrec. my $zname; # Rollrec's zonename. # # Get the rollrec entry for this name. # $rr = rollrec_fullrec($rrn); %rrec = %$rr; # # The zonename is either taken from the zonename field # of the rollrec or it's the name of the rollrec entry # $zname = $rrec{'zonename'} || $rrn; # # Add the entry to our big ol' list. # push @zoneinfo, "$rrn/$zname"; } } #----------------------------------------------------------------------------- # Routine: header() # # Purpose: Write an explanatory header. # sub header { my $kronos = localtime(time()); # Timestamp. chomp $kronos; print '#' x 72 . "\n"; print "# # Nagios objects required for monitoring DNS data for DNSSEC-Tools. # # Created: $kronos by $VERS. # "; } #----------------------------------------------------------------------------- # Routine: contacts() # # Purpose: Create the necessary contact objects. # sub contacts { my $members; # Members list. my @dtnames; # Contact objects names list. print "#\n"; print '#' x 80 . "\n"; print "# # Basic contacts for DNSSEC-Tools hosts. # "; foreach my $contact (@contacts) { my $name = "dt-admin-$contact"; push @dtnames, $name; print " define contact { contact_name $name use generic-contact alias DNSSEC-Tools Admin email $contact } "; } $members = join(', ', @dtnames); print "define contactgroup { contactgroup_name dt-admin-group alias DNSSEC-Tools Administrators members $members } "; } #----------------------------------------------------------------------------- # Routine: commands() # # Purpose: Create the necessary command objects. # sub commands { print ' ############################################################################### # # Basic commands for DNSSEC-Tools hosts. # define command { command_name dt_zonestatus command_line $USER1$/dt_zonestat -rrf $ARG2$ $ARG1$ } define command { command_name dt_hostcheck command_line $USER1$/check_dummy 0 } '; } #----------------------------------------------------------------------------- # Routine: hosts() # # Purpose: Create the necessary host objects: a host template, # a number of host objects, and a number of hostgroups. # sub hosts { hosttmpl(); hostobjs(); hostgrps(); } #----------------------------------------------------------------------------- # Routine: hosttmpl() # # Purpose: Create the host template object. # sub hosttmpl() { print " ############################################################################### # # Basic template for DNSSEC-Tools hosts. # define host { name dnssec-tools-host check_command dt_hostcheck check_interval 1 contact_groups dt-admin-group event_handler_enabled 1 failure_prediction_enabled 1 flap_detection_enabled 0 max_check_attempts 10 notification_period 24x7 notifications_enabled 1 process_perf_data 1 retain_nonstatus_information 0 retain_status_information 0 register 0 } "; } #----------------------------------------------------------------------------- # Routine: hostobjs() # # Purpose: Create the host objects. # sub hostobjs() { print " ########################################################### # # Objects for DNSSEC-Tools hosts. # "; foreach my $zi (@zoneinfo) { my $alias; # Host's alias. my $addr; # Host's address. $zi =~ /^(.+)\/(.+)$/; $alias = $1; $addr = $2; push @hosts, $zi; print "define host { host_name $zi alias $alias address $addr use dnssec-tools-host } "; } } #----------------------------------------------------------------------------- # Routine: hostgrps() # # Purpose: Create the hostgroups objects. # sub hostgrps() { my $hosts; # Hosts list. $hosts = join(', ', @hosts); print " ########################################################### # # Objects for DNSSEC-Tools hostgroups. # define hostgroup { hostgroup_name dt-hosts alias DNSSEC-Tools Hosts members $hosts } "; } #----------------------------------------------------------------------------- # Routine: services() # # Purpose: Create the necessary service objects: a service template, # a number of service objects, and a number of servicegroups. # sub services { my $rrf = shift; # Current rollrec file. svctmpl(); svcobjs($rrf); svcgrps($rrf); } #----------------------------------------------------------------------------- # Routine: svctmpl() # # Purpose: Create the service template object. # sub svctmpl() { print " ############################################################################### # # Template for DNSSEC-Tools-related services. # # # normal_check_interval is 5. # define service { name dnssec-tools-service active_checks_enabled 1 check_freshness 0 check_period 24x7 contact_groups dt-admin-group event_handler_enabled 1 failure_prediction_enabled 1 flap_detection_enabled 0 is_volatile 0 max_check_attempts 3 normal_check_interval 1 notification_interval 60 notification_period 24x7 notification_options notifications_enabled 1 obsess_over_service 1 parallelize_check 1 passive_checks_enabled 1 process_perf_data 1 retain_nonstatus_information 0 retain_status_information 0 retry_check_interval 1 register 0 } "; } #----------------------------------------------------------------------------- # Routine: svcobjs() # # Purpose: Create the service objects. # sub svcobjs() { my $rrf = shift; # Current rollrec file. print " ########################################################### # # Objects for DNSSEC-Tools services. # "; foreach my $zi (@zoneinfo) { my $alias; # Host's alias. my $addr; # Host's address. $zi =~ /^(.+)\/(.+)$/; $alias = $1; $addr = $2; print "define service { service_description Zone Rollover check_command dt_zonestatus!\"$zi\"!$rrf host_name $zi active_checks_enabled 1 use dnssec-tools-service } "; } } #----------------------------------------------------------------------------- # Routine: svcgrps() # # Purpose: Create the servicegroups objects. # sub svcgrps() { my @members = (); # Group members list. my $members; # Group members string. for(my $ind=0; $ind < @hosts; $ind++) { push @members, $hosts[$ind]; push @members, "Zone Rollover"; } $members = join(', ', @members); print " ########################################################### # # Objects for DNSSEC-Tools servicegroups. # define servicegroup { servicegroup_name Zone Rollovers alias DNSSEC-Tools Zone Rollovers members $members } "; } #----------------------------------------------------------------------------- # Routine: version() # # Purpose: Print the version number(s) and exit. # sub version { print STDERR "$VERS\n"; print STDERR "$DTVERS\n"; exit(1); } #----------------------------------------------------------------------------- # Routine: usage() # sub usage { print STDERR "usage: dtnagobj [options] \n"; print STDERR "\t-contact specify email contact\n"; print STDERR "\t-outfile specify output file\n"; print STDERR "\t-overwrite overwrite existing output file\n"; print STDERR "\t-verbose give verbose output\n"; print STDERR "\t-Version show version information\n"; print STDERR "\t-help full help message\n"; exit(0); } 1; ############################################################################## # =pod =head1 dtnagobj =head1 NAME dtnagobj - Create Nagios objects for monitoring DNSSEC-Tools rollovers =head1 SYNOPSIS dtnagobj [options] =head1 DESCRIPTION B creates Nagios objects for monitoring DNSSEC-Tools rollovers. These Nagios objects will allow easy monitoring of zone rollovers managed by DNSSEC-Tools. Details about the objects are given in the "CREATED NAGIOS OBJECTS" section. Zone rollover in DNSSEC-Tools is managed by the B daemon. Rollover information is centralized in a B file, which contains data for each managed zone such as the zone name, the rollover phase, and the zone file. B gathers information about the managed zones from the B file given on the command line. It builds the necessary Nagios objects, with required interrelations, and writes them either to I or to a user-specified file. The new object file should be edited as needed for each installation. These objects must be included in the main Nagios configuration file, B in order for them to be included in Nagios processing. Assuming the objects have been saved to B, the following line must be added B file: cfg_file=/usr/local/nagios/objects/dnssec-tools.cfg =head1 NAGIOS NOTES The following are Nagios-specific notes: =over 4 =item * It is assumed that the user has some amount of familiarity with Nagios. =item * B does B create a stand-alone Nagios environment. The Nagios objects created by B must be included in an existing Nagios installation. This can be a newly installed Nagios, but the framework must be on the monitoring host. =item * Zone rollover may be the only services monitored by Nagios. These services may also be included with other services. =item * B has been tested with Nagios 3.2.3. =back =head1 OPTIONS B recognizes the following options: =over 4 =item B<-contact> The email address to which Nagios will send notification messages about the DNSSEC-Tools-related services. Multiple B<-contact> options may be given on the command line. If this option is not given at all, the default address of I will be used.. =item B<-outfile> Specify an output file for the newly created Nagios objects. If this is not given, the objects will be written to stdout. =item B<-overwrite> If a specified output file already exists, this option allows the file to be overwritten. Without this option, B will not modify an existing file. =item B<-verbose> Displays verbose information. =item B<-Version> Displays the version information for B and the DNSSEC-Tools package. =item B<-help> Display a usage message and exit. =back =head1 CREATED NAGIOS OBJECTS B entire purpose is to create a collection of Nagios objects. These objects are described below, in the order they are created: =over 4 =item I This object designates a contact used to build a I object. A set of I objects will be created, depending on the command line options and the DNSSEC-Tools configuration file. If any B<-contact> options were given on the command line, then a I object will be built for each value. If no B<-contact> options were given on the command line, then the DNSSEC-Tools configuration file will be consulted. If that file has an B value defined, then a I object will be created for that email address. If there isn't an B value defined, then a I object will be built for the default, I. The I objects reference the standard Nagios I template object. =item I This object designates a group of contact to whom Nagios will send notification email. This group members are the collection of I objects. B creates a single I -- B -- for DNSSEC-Tools use. This group is a list of DNSSEC-Tools administrators, and its members are the I objects. =item I This object defines a command that, when paired with a I object, creates a Nagios I. B creates two I objects. I executes the B Nagios plugin to determine the rollover status of the specified zone. I executes the standard Nagios B plugin to determine the status of the specified host. This is a dummy I and always gives a successful return. =item I This object defines a host that, when paired with a I object, creates a Nagios I. B creates a I for each zone in the specified B file, as well as a I template, which is sused by all other I objects. The I field of each I object is formed from the B name and the zone name, as taken from the B file. The I field of each I object is set to B. Since zones aren't quite hosts, in the real sense of the word, there isn't anything that can really be checked. B creates a I template called B. Any I fields that should be used by all DNSSEC-Tools I objects should be set in this template. =item I This object creates a group of hosts from the I objects created from the B file. B creates a single I -- B -- for DNSSEC-Tools use. =item I This object links a Nagios I object and a I object. B creates a I for each zone in the specified B file, pairing the I objects with the B I object. The I field of each I object is set to "Zone Rollover". This may be changed by editing the object definitions, but this will disable some of the DNSSEC-Tools modifications to Nagios. The I field of each I object is formed from the B name and the zone name, as taken from the B file. B creates a I template called B. Any I fields that should be used by all DNSSEC-Tools I objects should be set in this template. =item I This object creates a group of services from the newly created I objects. B creates a single I -- B -- for DNSSEC-Tools use. =back =head1 COPYRIGHT Copyright 2011-2013 SPARTA, Inc. All rights reserved. See the COPYING file included with the DNSSEC-Tools package for details. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =head1 SEE ALSO B B, B B =cut dnssec-tools-2.0/apps/nagios/README0000664000237200023720000001167312071065274017237 0ustar hardakerhardaker# Copyright 2011-2013 SPARTA, Inc. All rights reserved. # See the COPYING file included with the DNSSEC-Tools package for details. DNSSEC-Tools Is your domain secure? Nagios is an open-source system for monitoring networks and computers. It has been enhanced to monitor zone rollover controlled by DNSSEC-Tools. The modifications were made to Nagios Core version 3.2.3. The DNSSEC-Tools additions to Nagios provide a monitoring service called "Zone Rollover". This service shows most zones in an okay -- green -- state. If a zone is in need of administrative intervention, then the zone's state is the warning -- yellow -- state. These additions work just like other additions to Nagios. A plugin retrieves the appropriate data and provides it to Nagios, which performs the data display. The required Nagios objects (hosts, commands, and services) must be created, and the plugin put in the plugin directory. An optional modification to a base Nagios file is provided as well. This modified file tunes a small amount of Nagios display data specifically for DNSSEC-Tools monitoring. The output is a little nicer, but monitoring is not hindered if the option is not installed. Caveat: When using these modifications with Nagios, you must be aware of the frequency of zone rollover actions and the frequency of Nagios service checks. It is almost certain that there will be some amount of latency between actual zone rollover status and the rollover status displayed by Nagios. This is the nature of the system and it should be expected. This is only a problem if your zones are fast-rolling zones. If a zone has a TTL of just a few minutes, then the Nagios display will lag far behind reality. Files ----- This directory contains files for use in Nagios monitoring of zone rollover controlled by DNSSEC-Tools. Brief descriptions of these files are given below. diff-status.c status.c is a standard part of the Nagios distribution, living in .../cgi/status.c. It is a CGI that builds many of the Nagios status pages. It has been modified to provide DNSSEC-Tools-specific results in the "Status" column of services output. This is a diff of the original version and the version modified for DNSSEC-Tools. This modification is optional, but it provides nicer output for zone rollover monitoring. The file is located in the source hierarchy for Nagios. .../nagios-3.2.3/cgi/status.c dtnagobj This Perl script builds a file containing the Nagios objects required to display zone rollover status. It is given the DNSSEC-Tools rollrec file used to manage a set of zones and it builds everything required to easily slide into a Nagios environment. The resulting objects file is *not* a stand-alone Nagios environment! It must be added to a Nagios configuration. The objects file must be included by nagios.cfg, the main Nagios configuration file, in order for zone monitoring to occur. This should be run in the directory that contains the rollrec file. Otherwise, the resulting object file will need to be executed in order to adjust the pathname for the rollrec file. "perldoc dtnagobj" will give additional information. dt_zonestat This Perl script is a Nagios plugin that determines the status of a zone. It is referenced as part of the service objects created by dtnagobj. dt_zonestat must be installed in the standard Nagios plugin directory. "perldoc dt_zonestat" will give additional information. dt_zonetimer This Perl script is a Nagios plugin that determines when a zone's next rollover phase will occur. dt_zonetimer must be installed in the standard Nagios plugin directory. "perldoc dt_zonetimer" will give additional information. dt_donuts This Perl script is a Nagios plugin that determines if a zone file has any errors. It executes the donuts command to determine if the zone file contains errors. It is referenced as part of the service objects created by dtnagobj. dt_donuts must be installed in the standard Nagios plugin directory. "perldoc dt_donuts" will give additional information. dt-trustman This Perl script is a Nagios plugin that checks for key verification of trust anchors. It executes the trustman command to determine the verification. It is intended to run as a remote plugin, though it can just as easily run on the Nagios host. sample.dnssec-tools.cfg This is a sample file containing the Nagios objects for monitoring three zones whose rollover is managed by DNSSEC-Tools. The three zones are "test.com" and a split-view "example.com" having two views ("example.com" and "inside example".) This file was built by dtnagobj using sample.rollrec as its input. sample.rollrec This is a sample DNSSEC-Tools rollrec file, which was used as input to dtnagobj in order to create the sample-dnssec-tools.cfg file. This file was taken from the Split-View Demo directory, which is part of the DNSSEC-Tools release. dnssec-tools-2.0/apps/nagios/dt_donuts0000775000237200023720000001605512107530465020306 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2011-2013 SPARTA, Inc. All rights reserved. # See the COPYING file distributed with this software for details. # # dt_donuts # # This script checks the validity of a zone files using the donuts # command from DNSSEC-Tools. # # This was written for DNSSEC-Tools. # # Revision History # 1.9.0 Original version: 8/2011 (1.0) # use strict; use Getopt::Long qw(:config no_ignore_case_always); use Net::DNS::SEC::Tools::dnssectools; ####################################################################### # # Version information. # my $NAME = "dt_donuts"; my $VERS = "$NAME version: 2.0.0"; my $DTVERS = "DNSSEC-Tools Version: 2.0"; ######################################################################r # # Data required for command line options. # my %options = (); # Filled option array. my @opts = ( "Version", # Display the version number. "help", # Give a usage message and exit. ); ####################################################################### # # Nagios return codes. # my $RC_NORMAL = 0; # Normal return code. my $RC_WARNING = 1; # Warning return code. my $RC_CRITICAL = 2; # Critical return code. my $RC_UNKNOWN = 3; # Unknown return code. ####################################################################### my $OUTFILE = "/tmp/z.dt_donuts"; my $zonepath = '/home/dt-nagios/zones'; # Directory of zone file. my $zonefile = ''; # Zone file. my $zonename = ''; # Zone name. # # Run shtuff. # main(); exit($RC_UNKNOWN); #----------------------------------------------------------------------------- # Routine: main() # # Purpose: Main controller routine for uem-dnsresp. # sub main { $| = 0; # out("dt_donuts: running"); # # Check our options. # doopts(); # out("\tzone - <$zone>"); # # Get the statistics for this zone. # # out("\tcalling donuts_lsroll($zone)"); make_donuts(); # # Exit with the command's return code (Shouldn't get here.) # print "dt_donuts should not get here\n"; exit($RC_UNKNOWN); } #----------------------------------------------------------------------------- # Routine: doopts() # # Purpose: This routine shakes and bakes our command line options. # sub doopts { # # Parse the command line. # GetOptions(\%options,@opts) || usage(); # # Show the version number or usage if requested. # version() if(defined($options{'Version'})); usage() if(defined($options{'help'})); # # Ensure a zonefile and zone name were specified. # if(@ARGV != 2) { print "dt_donuts: no zone data specified\n"; return($RC_CRITICAL); } # # Return the zone name. # $zonefile = $ARGV[0]; $zonename = $ARGV[1]; } #----------------------------------------------------------------------------- # Routine: make_donuts() # sub make_donuts { my $out; # Command's output. my @out; # Output lines array. # # Get the donuts output. # $out = runner("/usr/bin/donuts $zonepath/$zonefile $zonename"); @out = split /\n/, $out; # # Check each line of the donuts output. When we find a line talking # about the number of errors found, we'll exit with an appropriate # retcode. # foreach my $line (@out) { my $errcnt = 0;; # Error count. # # Take a look at the line. # next if($line !~ /^\d+ errors found in /); $line =~ /^(\d+) errors found in /; $errcnt = $1; # # Handle error-free zones. # if($errcnt == 0) { print "$zonename has no errors\n"; exit($RC_NORMAL); } # # Handle an errorful zone. # print "$zonename has $errcnt errors\n"; exit($RC_CRITICAL); } # # Handle a donuts execution that didn't discuss errors. # print "$zonename has an unknown number of errors\n"; exit($RC_UNKNOWN); } #----------------------------------------------------------------------------- # Routine: runner() # sub runner { my $cmd = shift; # Command to execute. my $out; # Command's output. my $ret; # Command's return code. # # Run the command. # $out = `$cmd`; $ret = $? >> 8; # # Return the command output if it succeeded. # return($out) if($ret == 0); # # Handle failed commands... # # print "Unable to execute donuts\n"; print "Cannot execute \"$cmd\"\n"; exit($RC_UNKNOWN); } #----------------------------------------------------------------------------- # Routine: out() # # Purpose: Temporary output routine. # sub out { my $str = shift; open(OUT,">>$OUTFILE"); print OUT "$str\n"; close(OUT); } #---------------------------------------------------------------------- # Routine: version() # sub version { print STDERR "$VERS\n"; exit($RC_WARNING); } #----------------------------------------------------------------------------- # Routine: usage() # sub usage { print STDERR "$VERS Copyright 2011-2013 SPARTA, Inc. All rights reserved. This plugin runs donuts on a specified zone. The error count is then printed. usage: dt_donuts [options] options: -Version display program version -help display this message "; exit($RC_WARNING); } 1; ############################################################################### =pod =head1 NAME dt_donuts - Nagios plugin to retrieve the B status of a zone file =head1 SYNOPSIS dt_donuts [options] =head1 DESCRIPTION B is a Nagios plugin to find the number of errors in a specified zone file. The error count is then printed. If used as part of a Nagios service, the error count will be included in the Nagios display. The zone file's error count is determined by the DNSSEC-Tools B command. =head1 NAGIOS USE This is run from a Nagios I object. These are examples of how the objects should be defined: define command { command_name dt_donuts command_line $USER1$/dt_donuts $ARG1$ $ARG2$ } define service { service_description zone rollover check_command dt_donuts!test.com.signed!test.com host_name test/test.com active_checks_enabled 1 use dnssec-tools-service } =head1 OPTIONS The following options are recognized by B: =over 4 =item I<-Version> Display the program version and exit. =item I<-help> Display a usage message and exit. =back =head1 EXIT CODES As a Nagios plugin, B must satisfy several requirements for its exit codes. The expected exit codes are used by Nagios in determining how to display plugin output. Plugins may also provide a single line of output that will be included in the Nagios display. The following table shows the exit codes and output for a zone's rollover state: Zone Status Exit Code Output Line donuts found no errors 0 had no errors donuts found errors 2 had errors unable to run donuts 3 Unable to run donuts 0 is the "okay" value; 1 is the "warning" value; 2 is the "critical" value; 3 is the "unknown" value. =head1 COPYRIGHT Copyright 2011-2013 SPARTA, Inc. All rights reserved. See the COPYING file included with the DNSSEC-Tools package for details. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =head1 SEE ALSO dt_zonestat(1), dt_zonetimer(1) =cut dnssec-tools-2.0/apps/nagios/diff-status.c0000664000237200023720000000236512071065274020752 0ustar hardakerhardaker# # Copyright 2011-2013 SPARTA, Inc. All rights reserved. # See the COPYING file distributed with this software for details. # 80a81,85 > /* > * Defines used by the DNSSEC-Tools modifications. > */ > #define ROLL_STATUS "Zone Rollover" > 1253a1259 > char *dt_rollstatus=""; /* DNSSEC-Tools */ 1521a1528 > dt_rollstatus = "PENDING"; /* DNSSEC_Tools */ 1526a1534,1545 > > /* DNSSEC_Tools */ > if((strncmp(temp_status->plugin_output,"KSK Rollover",12) == 0) || > (strncmp(temp_status->plugin_output,"ZSK Rollover",12) == 0)) > { > dt_rollstatus = "ROLLING"; > } > else > { > dt_rollstatus = "NORMAL"; > } > 1536a1556 > dt_rollstatus = "ATTENTION REQUIRED"; /* DNSSEC_Tools */ 1546a1567 > dt_rollstatus = "UNKNOWN"; /* DNSSEC_Tools */ 1556a1578 > dt_rollstatus = "ATTENTION REQUIRED"; /* DNSSEC_Tools */ 1560d1581 < 1786c1807,1815 < printf("%s\n",status_class,status); --- > if(strcmp(temp_status->description,ROLL_STATUS) != 0) > { > printf("%s\n",status_class,status); > } > else > { > /* DNSSEC_Tools */ > printf("%s\n",status_class,dt_rollstatus); > } dnssec-tools-2.0/apps/nagios/dt_zonetimer0000775000237200023720000001652212107530465021005 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2012-2013 SPARTA, Inc. All rights reserved. # See the COPYING file distributed with this software for details. # # dt_zonetimer # # This script determines how long a zone has until its next rollover # phase. It uses the lsdnssec command from DNSSEC-Tools. # # This was written for DNSSEC-Tools. # # Revision History # 1.12.0 Original version: 4/2012 (1.0) # use strict; use Getopt::Long qw(:config no_ignore_case_always); use Net::DNS::SEC::Tools::dnssectools; ####################################################################### # # Version information. # my $NAME = "dt_zonetimer"; my $VERS = "$NAME version: 2.0.0"; my $DTVERS = "DNSSEC-Tools Version: 2.0"; ######################################################################r # # Data required for command line options. # my %options = (); # Filled option array. my @opts = ( 'w=i', # Warning limit (in seconds.) 'c=i', # Critical limit (in seconds.) 'Version', # Display the version number. 'help', # Give a usage message and exit. ); my $DEF_WARN = 3600; # Default warning limit (in seconds.) my $DEF_CRIT = 86400; # Default critical limit (in seconds.) my $warn = $DEF_WARN; # Warning limit (in seconds.) my $crit = $DEF_CRIT; # Critical limit (in seconds.) ####################################################################### # # Nagios return codes. # my $RC_NORMAL = 0; # Normal return code. my $RC_WARNING = 1; # Warning return code. my $RC_CRITICAL = 2; # Critical return code. my $RC_UNKNOWN = 3; # Unknown return code. ####################################################################### my $OUTFILE = "/tmp/z.dt_zonetimer"; my $zone = ''; # Zone name. my $dfile = ''; # Data file. # # Run shtuff. # main(); exit($RC_UNKNOWN); #----------------------------------------------------------------------------- # Routine: main() # # Purpose: Main controller routine for uem-dnsresp. # sub main { $| = 0; # out("dt_zonetimer: running"); # # Check our options. # doopts(); # # Get the statistics for this zone. # # out("\tcalling ztimer()"); ztimer(); # # Exit with the command's return code. (Shouldn't get here.) # print "dt_zonetimer should not get here\n"; exit($RC_UNKNOWN); } #----------------------------------------------------------------------------- # Routine: doopts() # # Purpose: This routine shakes and bakes our command line options. # sub doopts { # # Parse the command line. # GetOptions(\%options,@opts) || usage(); # # Show the version number or usage if requested. # version() if(defined($options{'Version'})); usage() if(defined($options{'help'})); $warn = $options{'w'} if(defined($options{'w'})); $crit = $options{'c'} if(defined($options{'c'})); # # Ensure a zonefile and zone name were specified. # if(@ARGV != 2) { print "dt_zonetimer: must specify a zone name and either a keyrec or a rollrec file\n"; return($RC_CRITICAL); } # # Get the zone and datafile names. # $zone = $ARGV[0]; $dfile = $ARGV[1]; } #----------------------------------------------------------------------------- # Routine: ztimer() # # Purpose: Get the zone-timer info from the rollrec and a zone's keyrec. # We'll massage the output a bit and give an appropriate return # code. # sub ztimer { my $cmd; # Command to run. my $out; # Command's output. my $ret = $RC_NORMAL; # Return code from lsdnssec. # # Run the command. # $cmd = "/usr/bin/lsdnssec -M -z $zone $dfile"; # out("running <$cmd>\n"); $out = `$cmd`; $ret = $? >> 8; # # Strip off the domain and newline. # $out =~ s/^.*?://; chomp($out); # # Handle failed commands... # if($ret != 0) { print "$out\n"; exit($RC_UNKNOWN); } # # Figure out the return code to give for zones that are waiting # for a rollover phase to end. # if($out =~ /: (\d+) seconds\s*$/) { my $secs = $1; # Seconds to go. if($secs < $crit) { $ret = $RC_CRITICAL; } elsif($secs < $warn) { $ret = $RC_WARNING; } $out =~ s/: (\d+) seconds\s*$//; } # # Return the command output if it succeeded. # print "$out\n"; exit($ret); } #----------------------------------------------------------------------------- # Routine: out() # # Purpose: Temporary output routine. # sub out { my $str = shift; open(OUT,">>$OUTFILE"); print OUT "$str\n"; close(OUT); } #---------------------------------------------------------------------- # Routine: version() # sub version { print STDERR "$VERS\n"; exit($RC_WARNING); } #----------------------------------------------------------------------------- # Routine: usage() # sub usage { print STDERR "$VERS Copyright 2012-2013 SPARTA, Inc. All rights reserved. This plugin runs donuts on a specified zone. The error count is then printed. usage: dt_zonetimer [options] options: -w soon-value \"soon-to-phase-end\" value -c imminent-value \"almost-to-phase-end\" value -Version display program version -help display this message "; exit($RC_WARNING); } 1; ############################################################################### =pod =head1 NAME dt_zonetimer - Nagios plugin to determine time until next rollover phase =head1 SYNOPSIS dt_zonetimer [options] =head1 DESCRIPTION B is a Nagios plugin that prints the time until a zone's next rollover phase. It uses the B command from DNSSEC-Tools. I is the name of the zone to be checked. I is either a B file for the zone or a B file that holds a reference to the zone's B file. The timings displayed by Nagios will likely be a little different from those displayed by B. Nagios runs its monitors and then displays the results. Consequently, the times displayed by Nagios could be minutes old, depending on the update-time configured for Nagios. =head1 NAGIOS USE This is run from a Nagios I object. These are examples of how the objects should be defined: define command { command_name dt_zonetimer command_line $USER1$/dt_zonetimer -w $ARG1$ -c $ARG2$ $ARG3$ $ARG4$ } define service { service_description zone rollover check_command dt_zonetimer!3600!86400!zones.rrf!test.com.krf host_name test.com active_checks_enabled 1 ... } =head1 OPTIONS The following options are recognized by B: =over 4 =item I<-w> Specifies the number of seconds before the zone's next rollover phase that defines a "warning" period. This indicates that the next rollover phase will happen soon. This time period is installation- and zone-dependent. At this point, Nagios will display a warning indicator. The default value is 3600 (one hour.) =item I<-c> Specifies the number of seconds before the zone's next rollover phase that defines a "critical" period. This indicates that the next rollover phase is about to occur. This time period is installation- and zone-dependent. At this point, Nagios will display a warning indicator. The default value is 86400 (one day.) =item I<-Version> Display the program version and exit. =item I<-help> Display a usage message and exit. =back =head1 COPYRIGHT Copyright 2012-2013 SPARTA, Inc. All rights reserved. See the COPYING file included with the DNSSEC-Tools package for details. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =head1 SEE ALSO dt_donuts(1), dt_zonestat(1) =cut dnssec-tools-2.0/apps/nagios/sample.dnssec-tools.cfg0000664000237200023720000001015311560633014022720 0ustar hardakerhardaker######################################################################## # # Nagios objects required for monitoring DNS data for DNSSEC-Tools. # # Created: Wed Mar 30 14:05:30 2011 by dtnagobj version: 1.9.0. # # ################################################################################ # # Basic contacts for DNSSEC-Tools hosts. # define contact { contact_name dt-admin-root@localhost use generic-contact alias DNSSEC-Tools Admin email root@localhost } define contactgroup { contactgroup_name dt-admin-group alias DNSSEC-Tools Administrators members dt-admin-root@localhost } ############################################################################### # # Basic commands for DNSSEC-Tools hosts. # define command { command_name dt_zonestatus command_line $USER1$/dt_zonestat -rrf $ARG2$ $ARG1$ } define command { command_name dt_hostcheck command_line $USER1$/check_dummy 0 } ############################################################################### # # Basic template for DNSSEC-Tools hosts. # define host { name dnssec-tools-host check_command dt_hostcheck check_interval 1 contact_groups dt-admin-group event_handler_enabled 1 failure_prediction_enabled 1 flap_detection_enabled 0 max_check_attempts 10 notification_period 24x7 notifications_enabled 1 process_perf_data 1 retain_nonstatus_information 0 retain_status_information 0 register 0 } ########################################################### # # Objects for DNSSEC-Tools hosts. # define host { host_name example.com/example.com alias example.com address example.com use dnssec-tools-host } define host { host_name inside example/example.com alias inside example address example.com use dnssec-tools-host } define host { host_name test/test.com alias test address test.com use dnssec-tools-host } ########################################################### # # Objects for DNSSEC-Tools hostgroups. # define hostgroup { hostgroup_name dt-hosts alias DNSSEC-Tools Hosts members example.com/example.com, inside example/example.com, test/test.com } ############################################################################### # # Template for DNSSEC-Tools-related services. # # # normal_check_interval is 5. # define service { name dnssec-tools-service active_checks_enabled 1 check_freshness 0 check_period 24x7 contact_groups dt-admin-group event_handler_enabled 1 failure_prediction_enabled 1 flap_detection_enabled 0 is_volatile 0 max_check_attempts 3 normal_check_interval 1 notification_interval 60 notification_period 24x7 notification_options notifications_enabled 1 obsess_over_service 1 parallelize_check 1 passive_checks_enabled 1 process_perf_data 1 retain_nonstatus_information 0 retain_status_information 0 retry_check_interval 1 register 0 } ########################################################### # # Objects for DNSSEC-Tools services. # define service { service_description Zone Rollover check_command dt_zonestatus!"example.com/example.com"!/opt/local/dnssec-tools/dt-rel/tools/demos/rollerd-split-view/demo.rollrec host_name example.com/example.com active_checks_enabled 1 use dnssec-tools-service } define service { service_description Zone Rollover check_command dt_zonestatus!"inside example/example.com"!/opt/local/dnssec-tools/dt-rel/tools/demos/rollerd-split-view/demo.rollrec host_name inside example/example.com active_checks_enabled 1 use dnssec-tools-service } define service { service_description Zone Rollover check_command dt_zonestatus!"test/test.com"!/opt/local/dnssec-tools/dt-rel/tools/demos/rollerd-split-view/demo.rollrec host_name test/test.com active_checks_enabled 1 use dnssec-tools-service } ########################################################### # # Objects for DNSSEC-Tools servicegroups. # define servicegroup { servicegroup_name Zone Rollovers alias DNSSEC-Tools Zone Rollovers members example.com/example.com, Zone Rollover, inside example/example.com, Zone Rollover, test/test.com, Zone Rollover } dnssec-tools-2.0/apps/nagios/dt_trustman0000775000237200023720000001216412107530465020644 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2012-2013 SPARTA, Inc. All rights reserved. # See the COPYING file distributed with this software for details. # # dt_trustman # # This script acts as a remote Nagios plugin for monitoring the # state of trustman. # # This was written for DNSSEC-Tools. # # Revision History # 1.12.1 Original version 3/2012 (1.0) # 1.12.2 Modified arguments 6/2012 (1.1) # New arguments for trustman. # use strict; use Getopt::Long qw(:config no_ignore_case_always); # use Net::DNS::SEC::Tools::dnssectools; ####################################################################### # # Version information. # my $NAME = "dt_trustman"; my $VERS = "$NAME version: 2.0.0"; my $DTVERS = "DNSSEC-Tools Version: 2.0"; ######################################################################r # # Data required for command line options. # my %options = (); # Filled option array. my @opts = ( "Version", # Display the version number. "help", # Give a usage message and exit. ); ####################################################################### # # Nagios return codes. # my $RC_NORMAL = 0; # Normal return code. my $RC_WARNING = 1; # Warning return code. my $RC_CRITICAL = 2; # Critical return code. my $RC_UNKNOWN = 3; # Unknown return code. ####################################################################### my $OUTFILE = "/tmp/dt_trustman.out"; # # Run shtuff. # main(); exit($RC_UNKNOWN); #----------------------------------------------------------------------------- # Routine: main() # # Purpose: Main controller routine for dt_trustman. # sub main { my $ret; # Return code from trustman. $| = 0; # out("dt_trustman: running"); # # Check our options. # doopts(); # # Find out what trustman has to say. # $ret = run_trustman(); # out("dt_trustman: trustman exitted with <$ret>"); exit($ret); } #----------------------------------------------------------------------------- # Routine: doopts() # # Purpose: This routine shakes and bakes our command line options. # sub doopts { # # Parse the command line. # GetOptions(\%options,@opts) || usage(); # # Show the version number or usage if requested. # version() if(defined($options{'Version'})); usage() if(defined($options{'help'})); } #----------------------------------------------------------------------------- # Routine: run_trustman() # sub run_trustman { my $out; # Command's output. my $ret; # Return code from trustman. # # Get trustman's opinion. # $out = `/usr/local/bin/trustman -M -k /etc/dnsval.conf`; $ret = $? >> 8; # out("dt_trustman: trustman out - <$out>"); # out("dt_trustman: trustman returned <$ret>"); # # Return the command output if it succeeded. # if($ret == 0) { print "$out\n"; return($RC_NORMAL); } # # Handle failed commands... # print "Unknown error\n"; return($RC_UNKNOWN); } #----------------------------------------------------------------------------- # Routine: out() # # Purpose: Temporary output routine. # sub out { my $str = shift; open(OUT,">>$OUTFILE"); print OUT "$str\n"; close(OUT); } #---------------------------------------------------------------------- # Routine: version() # sub version { print STDERR "$VERS\n"; exit($RC_WARNING); } #----------------------------------------------------------------------------- # Routine: usage() # sub usage { print STDERR "$VERS Copyright 2012-2013 SPARTA, Inc. All rights reserved. This script runs trustman to check for key verification of trust anchors. usage: dt_trustman [options] options: -Version display program version -help display this message "; exit($RC_WARNING); } 1; ############################################################################### =pod =head1 NAME dt_trustman - Nagios plugin to check for key verification of trust anchors =head1 SYNOPSIS dt_trustman [options] =head1 DESCRIPTION B is a Nagios plugin used to check for key verification of trust anchors. B uses B to perform the key verification. The host on which B and B run must be configured with DNSSEC-Tools. B passes the following arguments to B -M -k /etc/dnsval.conf The filename may have to be adjusted, depending on the individual installation. =head1 NAGIOS USE This is run from a Nagios I object. These are examples of how the objects should be defined: define command { command_name dt_trustman command_line ssh $HOSTADDRESS$ dt_trustman $ARG1$ } define service { service_description Trustman check_command dt_trustman!uem-sensor host_name uem-sensor active_checks_enabled 1 use dnssec-tools-service } =head1 OPTIONS The following options are recognized by B: =over 4 =item I<-Version> Display the program version and exit. =item I<-help> Display a usage message and exit. =back =head1 COPYRIGHT Copyright 2012-2013 SPARTA, Inc. All rights reserved. See the COPYING file included with the DNSSEC-Tools package for details. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =head1 SEE ALSO trustman(8), =cut dnssec-tools-2.0/apps/postfix/0000775000237200023720000000000012111172554016556 5ustar hardakerhardakerdnssec-tools-2.0/apps/postfix/README.dnssec0000664000237200023720000000713111302653477020727 0ustar hardakerhardaker postfix DNSSEC HOWTO ===================== (Version 0.1) Introduction ============ This HOWTO describes the installation, configuration and execution steps for adding DNSSEC validation to outbound email for postfix. The 2.5.1 patch have been tested with postfix version 2.5.1. It will likely work, with some patch warnings, with versions down to and including postfix 2.3.8, but this hasn't been tested extensively. This patch may work with versions of postfix newer than 2.5.1. Installation ============ Download postfix-2.5.1.tar.gz from http://www.postfix.org/download.html Unzip and untar it by: tar -xvzf postfix-2.5.1.tar.gz Go to the postfix-2.5.1 directory: cd postfix-2.5.1/ Apply the postfix-2.5.1_dnssec_patch.txt patch found in this directory by: patch -p 1 -b -z .orig #include #include +#include /* DNS library. */ @@ -215,7 +216,15 @@ for (;;) { _res.options &= ~saved_options; _res.options |= flags; - len = res_search((char *) name, C_IN, type, reply->buf, reply->buf_len); + + /* dns query using dnssec validator library */ + val_status_t val_status; + len = val_res_query((val_context_t *) NULL, + (char *) name, + C_IN, type, + reply->buf, reply->buf_len, + &val_status); + _res.options &= ~flags; _res.options |= saved_options; if (len < 0) { @@ -236,8 +245,22 @@ return (DNS_RETRY); } } - if (msg_verbose) - msg_info("dns_query: %s (%s): OK", name, dns_strtype(type)); + + /* check that the dnssec query is trusted */ + if (!val_istrusted(val_status)) { + if (why || msg_verbose) + vstring_sprintf(why, "Validation error during Name Service lookup." + " Error %d : %s for name=%s type=%s", + val_status, p_val_error(val_status), + name, dns_strtype(type)); + + return(DNS_FAIL); + } + + if (msg_verbose) + msg_info("dns_query: %s (%s): OK validation: %s (%d)", + name, dns_strtype(type), + p_val_error(val_status), val_status); reply_header = (HEADER *) reply->buf; if (reply_header->tc == 0 || reply->buf_len >= MAX_DNS_REPLY_SIZE) diff -ur postfix-2.7-20091115.clean/src/util/myaddrinfo.c postfix-2.7-20091115/src/util/myaddrinfo.c --- postfix-2.7-20091115.clean/src/util/myaddrinfo.c 2006-09-29 19:34:20.000000000 -0400 +++ postfix-2.7-20091115/src/util/myaddrinfo.c 2009-11-23 13:44:24.216393943 -0500 @@ -427,7 +427,26 @@ } #endif } - err = getaddrinfo(hostname, service, &hints, res); + + /* + * Call dnssec aware getaddrinfo. If it returns a regular + * getaddrinfo error, return with that error. + * If the return query is not trusted, return a + * dnssec failure condition. + */ + val_status_t vstatus; + err = val_getaddrinfo((val_context_t *)NULL, hostname, + service, &hints, res, &vstatus); + if (VAL_GETADDRINFO_HAS_STATUS(err) && (0 == val_istrusted(vstatus))) { + err = DNSSECAI_FAIL; + msg_warn("DNSSEC, hostname information not trusted for host, %s (status: %d:%s, dnssec status %d:%s, val_getaddrinfo)", + hostname ? hostname : "NULL", err, MAI_STRERROR(err), + vstatus, p_val_status(vstatus)); + } + else if(err) { + msg_warn("failed to get host information for host, %s (status %d:%s, val_getaddrinfo)", + hostname ? hostname : "NULL", err, MAI_STRERROR(err)); + } #if defined(BROKEN_AI_NULL_SERVICE) if (service == 0 && err == 0) { struct addrinfo *r; @@ -543,7 +562,27 @@ } #endif } - err = getaddrinfo(hostaddr, service, &hints, res); + + /* + * Call dnssec aware getaddrinfo. If it returns a regular + * getaddrinfo error, return with that error. + * If the return query is not trusted, return a + * dnssec failure condition. + */ + val_status_t vstatus; + err = val_getaddrinfo((val_context_t *)NULL, hostaddr, service, &hints, + res, &vstatus); + if (VAL_GETADDRINFO_HAS_STATUS(err) && (0 == val_istrusted(vstatus))) { + err = DNSSECAI_FAIL; + msg_warn("DNSSEC, host address information not trusted for host, %s (status %d:%s, dnssec status %d:%s, val_getaddrinfo)", + hostaddr ? hostaddr : "NULL", err, MAI_STRERROR(err), + vstatus, p_val_status(vstatus)); + } + else { + msg_warn("failed to get host information for host, %s (status %d:%s, val_getaddrinfo)", + hostaddr ? hostaddr : "NULL", + err, MAI_STRERROR(err)); + } #if defined(BROKEN_AI_NULL_SERVICE) if (service == 0 && err == 0) { struct addrinfo *r; @@ -769,6 +808,29 @@ #endif + +/* + * dnssec_strerror - looks for dnssec errors (currently there is + * only one), passes back dnssec specific error + * string or calls the system gai_strerror. + */ + +static const char* dnssecai_fail_string = "DNSSEC Error"; +static const char* dnssecai_noerror_string = "DNSSEC Success"; + +const char *dnssec_strerror(int ecode) +{ + switch (ecode) { + case 0: + return (dnssecai_noerror_string); + case DNSSECAI_FAIL: + return (dnssecai_fail_string); + } + /* default response*/ + return (gai_strerror(ecode)); +} /* denssec_strerror */ + + #ifdef TEST /* @@ -797,46 +859,59 @@ msg_info("=== hostname %s ===", argv[2]); if ((err = hostname_to_sockaddr(argv[2], (char *) 0, 0, &info)) != 0) { - msg_info("hostname_to_sockaddr(%s): %s", - argv[2], err == EAI_SYSTEM ? strerror(errno) : gai_strerror(err)); + msg_info("hostname_to_sockaddr(%s): Error: %s", + argv[2], MAI_STRERROR(err)); } else { + msg_info("hostname_to_sockaddr(%s): Success: %s", + argv[2], MAI_STRERROR(err)); for (ip = info; ip != 0; ip = ip->ai_next) { if ((err = sockaddr_to_hostaddr(ip->ai_addr, ip->ai_addrlen, &addr, (MAI_SERVPORT_STR *) 0, 0)) != 0) { - msg_info("sockaddr_to_hostaddr: %s", - err == EAI_SYSTEM ? strerror(errno) : gai_strerror(err)); + msg_info("sockaddr_to_hostaddr: Error: %s", + MAI_STRERROR(err)); continue; } + else { + msg_info("sockaddr_to_hostaddr: Success: %s", + MAI_STRERROR(err)); + } msg_info("%s -> family=%d sock=%d proto=%d %s", argv[2], ip->ai_family, ip->ai_socktype, ip->ai_protocol, addr.buf); if ((err = sockaddr_to_hostname(ip->ai_addr, ip->ai_addrlen, &host, (MAI_SERVNAME_STR *) 0, 0)) != 0) { - msg_info("sockaddr_to_hostname: %s", - err == EAI_SYSTEM ? strerror(errno) : gai_strerror(err)); + msg_info("sockaddr_to_hostname: Error: %s", + MAI_STRERROR(err)); continue; } + else { + msg_info("sockaddr_to_hostname: Success: %s", + MAI_STRERROR(err)); + } msg_info("%s -> %s", addr.buf, host.buf); } freeaddrinfo(info); } + msg_info(" "); msg_info("=== host address %s ===", argv[3]); if ((err = hostaddr_to_sockaddr(argv[3], (char *) 0, 0, &ip)) != 0) { - msg_info("hostaddr_to_sockaddr(%s): %s", - argv[3], err == EAI_SYSTEM ? strerror(errno) : gai_strerror(err)); + msg_info("hostaddr_to_sockaddr(%s): Error: %s", + argv[3], MAI_STRERROR(err)); } else { + msg_info("hostaddr_to_sockaddr(%s): Success: %s", + argv[3], MAI_STRERROR(err)); if ((err = sockaddr_to_hostaddr(ip->ai_addr, ip->ai_addrlen, &addr, (MAI_SERVPORT_STR *) 0, 0)) != 0) { - msg_info("sockaddr_to_hostaddr: %s", - err == EAI_SYSTEM ? strerror(errno) : gai_strerror(err)); + msg_info("sockaddr_to_hostaddr: Error: %s", + MAI_STRERROR(err)); } else { msg_info("%s -> family=%d sock=%d proto=%d %s", argv[3], ip->ai_family, ip->ai_socktype, ip->ai_protocol, addr.buf); if ((err = sockaddr_to_hostname(ip->ai_addr, ip->ai_addrlen, &host, (MAI_SERVNAME_STR *) 0, 0)) != 0) { msg_info("sockaddr_to_hostname: %s", - err == EAI_SYSTEM ? strerror(errno) : gai_strerror(err)); + MAI_STRERROR(err)); } else msg_info("%s -> %s", addr.buf, host.buf); freeaddrinfo(ip); Only in postfix-2.7-20091115/src/util: myaddrinfo.e diff -ur postfix-2.7-20091115.clean/src/util/myaddrinfo.h postfix-2.7-20091115/src/util/myaddrinfo.h --- postfix-2.7-20091115.clean/src/util/myaddrinfo.h 2008-11-27 14:10:17.000000000 -0500 +++ postfix-2.7-20091115/src/util/myaddrinfo.h 2009-11-18 14:19:01.000000000 -0500 @@ -21,6 +21,7 @@ #include #include /* MAI_STRERROR() */ #include /* CHAR_BIT */ +#include /* * Backwards compatibility support for IPV4 systems without addrinfo API. @@ -32,8 +33,6 @@ * provides its own addrinfo() implementation. This also allows us to test * the IPV4 emulation code on an IPV6 enabled system. */ -#undef freeaddrinfo -#define freeaddrinfo mai_freeaddrinfo #undef gai_strerror #define gai_strerror mai_strerror #undef addrinfo @@ -103,6 +102,16 @@ #endif + +/* start dnssec patch additions */ + +#define DNSSECAI_FAIL -600 /* sharing number space with netdb.h errors */ + +const char *dnssec_strerror(int ecode); + +/* end dnssec patch additions (except for MAI_STRERROR below)*/ + + /* * Bounds grow in leaps. These macros attempt to keep non-library code free * from IPV6 #ifdef pollution. Avoid macro names that end in STRLEN because @@ -166,7 +175,8 @@ #define MAI_CTL_END 0 /* list terminator */ -#define MAI_STRERROR(e) ((e) == EAI_SYSTEM ? strerror(errno) : gai_strerror(e)) +/* redefined by dnssec patch */ +#define MAI_STRERROR(e) ((e) == EAI_SYSTEM ? strerror(errno) : dnssec_strerror(e)) /* * Macros for the case where we really don't want to be bothered with things dnssec-tools-2.0/apps/postfix/postfix.spec0000664000237200023720000007413610602774106021145 0ustar hardakerhardaker%define LDAP 2 %define MYSQL 0 %define PCRE 1 %define SASL 2 %define TLS 1 %define IPV6 1 %define POSTDROP_GID 90 %define PFLOGSUMM 1 # On Redhat 8.0.1 and earlier, LDAP is compiled with SASL V1 and won't work # if postfix is compiled with SASL V2. So we drop to SASL V1 if LDAP is # requested but use the preferred SASL V2 if LDAP is not requested. # Sometime soon LDAP will build agains SASL V2 and this won't be needed. %if %{LDAP} <= 1 && %{SASL} >= 2 %undefine SASL %define SASL 1 %endif %if %{PFLOGSUMM} %define pflogsumm_ver 1.1.0 %endif # Postfix requires one exlusive uid/gid and a 2nd exclusive gid for its own # use. Let me know if the second gid collides with another package. # Be careful: Redhat's 'mail' user & group isn't unique! %define postfix_uid 89 %define postfix_user postfix %define postfix_gid 89 %define postfix_group postfix %define postdrop_group postdrop %define maildrop_group %{postdrop_group} %define maildrop_gid %{POSTDROP_GID} %define postfix_config_dir %{_sysconfdir}/postfix %define postfix_daemon_dir %{_libexecdir}/postfix %define postfix_command_dir %{_sbindir} %define postfix_queue_dir %{_var}/spool/postfix %define postfix_doc_dir %{_docdir}/%{name}-%{version} %define postfix_sample_dir %{postfix_doc_dir}/samples %define postfix_readme_dir %{postfix_doc_dir}/README_FILES Name: postfix Summary: Postfix Mail Transport Agent Version: 2.3.3 Release: 2.dnssec.1 Epoch: 2 Group: System Environment/Daemons URL: http://www.postfix.org License: IBM Public License PreReq: /sbin/chkconfig, /sbin/service, sh-utils PreReq: fileutils, textutils, PreReq: /usr/sbin/alternatives PreReq: %{_sbindir}/groupadd, %{_sbindir}/useradd Provides: MTA smtpd smtpdaemon /usr/bin/newaliases Source0: ftp://ftp.porcupine.org/mirrors/postfix-release/official/%{name}-%{version}.tar.gz Source1: postfix-etc-init.d-postfix Source3: README-Postfix-SASL-RedHat.txt # Sources 50-99 are upstream [patch] contributions %if %{PFLOGSUMM} # Postfix Log Entry Summarizer: http://jimsun.linxnet.com/postfix_contrib.html Source53: http://jimsun.linxnet.com/downloads/pflogsumm-%{pflogsumm_ver}.tar.gz %endif # Sources >= 100 are config files Source100: postfix-sasl.conf Source101: postfix-pam.conf # Patches Patch1: postfix-2.1.1-config.patch Patch3: postfix-alternatives.patch Patch6: postfix-2.1.1-obsolete.patch Patch7: postfix-2.1.5-aliases.patch Patch8: postfix-large-fs.patch Patch9: postfix-2.2.5-cyrus.patch # dnssec patch patch10: postfix-2.3.3_dnssec.patch # Optional patches - set the appropriate environment variables to include # them when building the package/spec file BuildRoot: %{_tmppath}/%{name}-buildroot # Determine the different packages required for building postfix BuildRequires: gawk, perl, sed, ed, db4-devel, pkgconfig, zlib-devel Requires: setup >= 2.5.36-1 BuildRequires: setup >= 2.5.36-1 %if %{LDAP} BuildRequires: openldap >= 2.0.27, openldap-devel >= 2.0.27 Requires: openldap >= 2.0.27 %endif %if %{SASL} BuildRequires: cyrus-sasl >= 2.1.10, cyrus-sasl-devel >= 2.1.10 Requires: cyrus-sasl >= 2.1.10 %endif %if %{PCRE} Requires: pcre BuildRequires: pcre, pcre-devel %endif %if %{MYSQL} Requires: mysql BuildRequires: mysql, mysql-devel %endif %if %{TLS} Requires: openssl BuildRequires: openssl-devel >= 0.9.6 %endif #dnssec requires Requires: dnssec-tools-libs >= 1.1.1 Requires: dnssec-tools-libs-devel >= 1.1.1 Provides: /usr/sbin/sendmail /usr/bin/mailq /usr/bin/rmail %description Postfix is a Mail Transport Agent (MTA), supporting LDAP, SMTP AUTH (SASL), TLS %prep umask 022 %setup -q # Apply obligatory patches %patch1 -p1 -b .config %patch3 -p1 -b .alternatives %patch6 -p1 -b .obsolete %patch7 -p1 -b .aliases %patch8 -p1 -b .large-fs %patch9 -p1 -b .cyrus # dnssec patch %patch10 -p1 -b .dnssec %if %{PFLOGSUMM} gzip -dc %{SOURCE53} | tar xf - pushd pflogsumm-%{pflogsumm_ver} patch -p0 < ../pflogsumm-conn-delays-dsn-patch popd %endif # pflogsumm subpackage %if %{PFLOGSUMM} %package pflogsumm Group: System Environment/Daemons Summary: A Log Summarizer/Analyzer for the Postfix MTA Requires: perl-Date-Calc %description pflogsumm Pflogsumm is a log analyzer/summarizer for the Postfix MTA. It is designed to provide an over-view of Postfix activity. Pflogsumm generates summaries and, in some cases, detailed reports of mail server traffic volumes, rejected and bounced email, and server warnings, errors and panics. %endif %build umask 022 CCARGS=-fPIC AUXLIBS= %ifarch s390 s390x ppc CCARGS="${CCARGS} -fsigned-char" %endif %if %{LDAP} CCARGS="${CCARGS} -DHAS_LDAP -DLDAP_DEPRECATED=1" AUXLIBS="${AUXLIBS} -L%{_libdir} -lldap -llber" %endif %if %{PCRE} # -I option required for pcre 3.4 (and later?) CCARGS="${CCARGS} -DHAS_PCRE -I/usr/include/pcre" AUXLIBS="${AUXLIBS} -lpcre" %endif %if %{MYSQL} CCARGS="${CCARGS} -DHAS_MYSQL -I/usr/include/mysql" AUXLIBS="${AUXLIBS} -L%{_libdir}/mysql -lmysqlclient -lm" %endif %if %{SASL} %define sasl_v1_lib_dir %{_libdir}/sasl %define sasl_v2_lib_dir %{_libdir}/sasl2 CCARGS="${CCARGS} -DUSE_SASL_AUTH -DUSE_CYRUS_SASL" %if %{SASL} <= 1 %define sasl_lib_dir %{sasl_v1_lib_dir} AUXLIBS="${AUXLIBS} -L%{sasl_lib_dir} -lsasl" %else %define sasl_lib_dir %{sasl_v2_lib_dir} CCARGS="${CCARGS} -I/usr/include/sasl" AUXLIBS="${AUXLIBS} -L%{sasl_lib_dir} -lsasl2" %endif %endif %if %{TLS} if pkg-config openssl ; then CCARGS="${CCARGS} -DUSE_TLS `pkg-config --cflags openssl`" AUXLIBS="${AUXLIBS} `pkg-config --libs openssl`" else CCARGS="${CCARGS} -DUSE_TLS -I/usr/include/openssl" AUXLIBS="${AUXLIBS} -lssl -lcrypto" fi %endif %if %{IPV6} != 1 CCARGS="${CCARGS} -DNO_IPV6" %endif AUXLIBS="${AUXLIBS} -pie -Wl,-z,relro" export CCARGS AUXLIBS make -f Makefile.init makefiles unset CCARGS AUXLIBS make DEBUG="" OPT="$RPM_OPT_FLAGS" %install umask 022 /bin/rm -rf $RPM_BUILD_ROOT /bin/mkdir -p $RPM_BUILD_ROOT # install postfix into $RPM_BUILD_ROOT # Move stuff around so we don't conflict with sendmail mv man/man1/mailq.1 man/man1/mailq.postfix.1 mv man/man1/newaliases.1 man/man1/newaliases.postfix.1 mv man/man1/sendmail.1 man/man1/sendmail.postfix.1 mv man/man5/aliases.5 man/man5/aliases.postfix.5 sh postfix-install -non-interactive \ install_root=$RPM_BUILD_ROOT \ config_directory=%{postfix_config_dir} \ daemon_directory=%{postfix_daemon_dir} \ command_directory=%{postfix_command_dir} \ queue_directory=%{postfix_queue_dir} \ sendmail_path=%{postfix_command_dir}/sendmail.postfix \ newaliases_path=%{_bindir}/newaliases.postfix \ mailq_path=%{_bindir}/mailq.postfix \ mail_owner=%{postfix_user} \ setgid_group=%{maildrop_group} \ manpage_directory=%{_mandir} \ sample_directory=%{postfix_sample_dir} \ readme_directory=%{postfix_readme_dir} || exit 1 # This installs into the /etc/rc.d/init.d directory /bin/mkdir -p $RPM_BUILD_ROOT/etc/rc.d/init.d install -c %{_sourcedir}/postfix-etc-init.d-postfix \ $RPM_BUILD_ROOT/etc/rc.d/init.d/postfix install -c auxiliary/rmail/rmail $RPM_BUILD_ROOT%{_bindir}/rmail.postfix for i in active bounce corrupt defer deferred flush incoming private saved maildrop public pid saved trace; do mkdir -p $RPM_BUILD_ROOT%{postfix_queue_dir}/$i done # install performance benchmark tools by hand for i in smtp-sink smtp-source ; do install -c -m 755 bin/$i $RPM_BUILD_ROOT%{postfix_command_dir}/ install -c -m 755 man/man1/$i.1 $RPM_BUILD_ROOT%{_mandir}/man1/ done # RPM compresses man pages automatically. # - Edit postfix-files to reflect this, so post-install won't get confused # when called during package installation. ed $RPM_BUILD_ROOT%{postfix_config_dir}/postfix-files <> $RPM_BUILD_ROOT%{sasl_v1_lib_dir}/smtpd.conf mkdir -p $RPM_BUILD_ROOT%{sasl_v2_lib_dir} install -m 644 %{SOURCE100} $RPM_BUILD_ROOT%{sasl_v2_lib_dir}/smtpd.conf %endif mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/pam.d install -m 644 %{SOURCE101} $RPM_BUILD_ROOT%{_sysconfdir}/pam.d/smtp.postfix # Install Postfix Red Hat HOWTO. mkdir -p $RPM_BUILD_ROOT%{postfix_doc_dir} install -c %{SOURCE3} $RPM_BUILD_ROOT%{postfix_doc_dir} %if %{PFLOGSUMM} install -c -m 644 pflogsumm-%{pflogsumm_ver}/pflogsumm-faq.txt $RPM_BUILD_ROOT%{postfix_doc_dir}/pflogsumm-faq.txt install -c -m 644 pflogsumm-%{pflogsumm_ver}/pflogsumm.1 $RPM_BUILD_ROOT%{_mandir}/man1/pflogsumm.1 install -c pflogsumm-%{pflogsumm_ver}/pflogsumm.pl $RPM_BUILD_ROOT%{postfix_command_dir}/pflogsumm %endif # install qshape mantools/srctoman - auxiliary/qshape/qshape.pl > qshape.1 install -c qshape.1 $RPM_BUILD_ROOT%{_mandir}/man1/qshape.1 install -c auxiliary/qshape/qshape.pl $RPM_BUILD_ROOT%{postfix_command_dir}/qshape rm -f $RPM_BUILD_ROOT/etc/postfix/aliases mkdir -p $RPM_BUILD_ROOT/usr/lib pushd $RPM_BUILD_ROOT/usr/lib ln -sf ../sbin/sendmail.postfix . popd %post umask 022 /sbin/chkconfig --add postfix # upgrade configuration files if necessary %{_sbindir}/postfix set-permissions upgrade-configuration \ config_directory=%{postfix_config_dir} \ daemon_directory=%{postfix_daemon_dir} \ command_directory=%{postfix_command_dir} \ mail_owner=%{postfix_user} \ setgid_group=%{maildrop_group} \ manpage_directory=%{_mandir} \ sample_directory=%{postfix_sample_dir} \ readme_directory=%{postfix_readme_dir} %{_sbindir}/alternatives --install %{postfix_command_dir}/sendmail mta %{postfix_command_dir}/sendmail.postfix 30 \ --slave %{_bindir}/mailq mta-mailq %{_bindir}/mailq.postfix \ --slave %{_bindir}/newaliases mta-newaliases %{_bindir}/newaliases.postfix \ --slave %{_sysconfdir}/pam.d/smtp mta-pam %{_sysconfdir}/pam.d/smtp.postfix \ --slave %{_bindir}/rmail mta-rmail %{_bindir}/rmail.postfix \ --slave /usr/lib/sendmail mta-sendmail /usr/lib/sendmail.postfix \ --slave %{_mandir}/man1/mailq.1.gz mta-mailqman %{_mandir}/man1/mailq.postfix.1.gz \ --slave %{_mandir}/man1/newaliases.1.gz mta-newaliasesman %{_mandir}/man1/newaliases.postfix.1.gz \ --slave %{_mandir}/man8/sendmail.8.gz mta-sendmailman %{_mandir}/man1/sendmail.postfix.1.gz \ --slave %{_mandir}/man5/aliases.5.gz mta-aliasesman %{_mandir}/man5/aliases.postfix.5.gz \ --initscript postfix %pre # Add user and groups if necessary %{_sbindir}/groupadd -g %{maildrop_gid} -r %{maildrop_group} 2>/dev/null %{_sbindir}/groupadd -g %{postfix_gid} -r %{postfix_group} 2>/dev/null %{_sbindir}/groupadd -g 12 -r mail 2>/dev/null %{_sbindir}/useradd -d %{postfix_queue_dir} -s /sbin/nologin -g %{postfix_group} -G mail -M -r -u %{postfix_uid} %{postfix_user} 2>/dev/null exit 0 %preun umask 022 if [ "$1" = 0 ]; then # stop postfix silently, but only if it's running /sbin/service postfix stop &>/dev/null /sbin/chkconfig --del postfix /usr/sbin/alternatives --remove mta %{postfix_command_dir}/sendmail.postfix fi exit 0 %postun if [ "$1" != 0 ]; then /sbin/service postfix condrestart 2>&1 > /dev/null fi exit 0 %clean /bin/rm -rf $RPM_BUILD_ROOT %files # For correct directory permissions check postfix-install script. # It reads the file postfix-files which defines the ownership # and permissions for all files postfix installs, we avoid explicitly # setting anything in the %files sections that is handled by # the upstream install script so we don't have an issue with keeping # the spec file and upstream in sync. %defattr(-, root, root) # Config files not part of upstream %if %{SASL} %config(noreplace) %{sasl_v1_lib_dir}/smtpd.conf %config(noreplace) %{sasl_v2_lib_dir}/smtpd.conf %endif %config(noreplace) %{_sysconfdir}/pam.d/smtp.postfix %attr(0755, root, root) %config /etc/rc.d/init.d/postfix # Misc files %attr(0755, root, root) %{_bindir}/rmail.postfix %attr(0755, root, root) %{postfix_command_dir}/smtp-sink %attr(0755, root, root) %{postfix_command_dir}/smtp-source %attr(0755, root, root) %{postfix_command_dir}/qshape %attr(0755, root, root) /usr/lib/sendmail.postfix %dir %attr(0755, root, root) %{postfix_doc_dir} %doc %attr(0644, root, root) %{postfix_doc_dir}/README-* %dir %attr(0755, root, root) %{postfix_readme_dir} %doc %attr(0644, root, root) %{postfix_readme_dir}/* #%dir %attr(0755, root, root) %{postfix_sample_dir} #%doc %attr(0644, root, root) %{postfix_sample_dir}/* %dir %attr(0755, root, root) %{postfix_config_dir} %dir %attr(0755, root, root) %{postfix_daemon_dir} %dir %attr(0755, root, root) %{postfix_queue_dir} %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/active %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/bounce %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/corrupt %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/defer %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/deferred %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/flush %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/hold %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/incoming %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/saved %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/trace %dir %attr(0730, %{postfix_user}, %{maildrop_group}) %{postfix_queue_dir}/maildrop %dir %attr(0755, root, root) %{postfix_queue_dir}/pid %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/private %dir %attr(0710, %{postfix_user}, %{maildrop_group}) %{postfix_queue_dir}/public %attr(0644, root, root) %{_mandir}/man1/[a-n]* %attr(0644, root, root) %{_mandir}/man1/post* %attr(0644, root, root) %{_mandir}/man1/[q-z]* %attr(0644, root, root) %{_mandir}/man5/* %attr(0644, root, root) %{_mandir}/man8/* %attr(0755, root, root) %{postfix_command_dir}/postalias %attr(0755, root, root) %{postfix_command_dir}/postcat %attr(0755, root, root) %{postfix_command_dir}/postconf %attr(2755, root, %{maildrop_group}) %{postfix_command_dir}/postdrop %attr(0755, root, root) %{postfix_command_dir}/postfix %attr(0755, root, root) %{postfix_command_dir}/postkick %attr(0755, root, root) %{postfix_command_dir}/postlock %attr(0755, root, root) %{postfix_command_dir}/postlog %attr(0755, root, root) %{postfix_command_dir}/postmap %attr(2755, root, %{maildrop_group}) %{postfix_command_dir}/postqueue %attr(0755, root, root) %{postfix_command_dir}/postsuper %attr(0644, root, root) %{postfix_config_dir}/LICENSE %attr(0644, root, root) %config(noreplace) %{postfix_config_dir}/access %attr(0644, root, root) %config(noreplace) %{postfix_config_dir}/bounce.cf.default %attr(0644, root, root) %config(noreplace) %{postfix_config_dir}/canonical %attr(0644, root, root) %config(noreplace) %{postfix_config_dir}/generic %attr(0644, root, root) %config(noreplace) %{postfix_config_dir}/header_checks %attr(0644, root, root) %config(noreplace) %{postfix_config_dir}/main.cf %attr(0644, root, root) %{postfix_config_dir}/main.cf.default %attr(0644, root, root) %config(noreplace) %{postfix_config_dir}/makedefs.out %attr(0644, root, root) %config(noreplace) %{postfix_config_dir}/master.cf %attr(0755, root, root) %{postfix_config_dir}/post-install %attr(0644, root, root) %{postfix_config_dir}/postfix-files %attr(0755, root, root) %{postfix_config_dir}/postfix-script %attr(0644, root, root) %config(noreplace) %{postfix_config_dir}/relocated %attr(0644, root, root) %{postfix_config_dir}/TLS_LICENSE %attr(0644, root, root) %config(noreplace) %{postfix_config_dir}/transport %attr(0644, root, root) %config(noreplace) %{postfix_config_dir}/virtual %attr(0755, root, root) %{postfix_daemon_dir}/* %attr(0755, root, root) %{_bindir}/mailq.postfix %attr(0755, root, root) %{_bindir}/newaliases.postfix %attr(0755, root, root) %{_sbindir}/sendmail.postfix %if %{PFLOGSUMM} %files pflogsumm %defattr(-, root, root) %doc %{postfix_doc_dir}/pflogsumm-faq.txt %{_mandir}/man1/pflogsumm.1.gz %attr(0755, root , root) %{postfix_command_dir}/pflogsumm %endif %changelog * Fri Sep 1 2006 Thomas Woerner 2:2.3.3-2 - fixed upgrade procedure (#202357) * Fri Sep 1 2006 Thomas Woerner 2:2.3.3-1 - new version 2.3.3 - fixed permissions of TLS_LICENSE file * Fri Aug 18 2006 Jesse Keating - 2:2.3.2-2 - rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc* (#203001) * Mon Jul 31 2006 Thomas Woerner 2:2.3.2-1 - new version 2.3.2 with major upstream fixes: - corrupted queue file after a request to modify a short message header - panic after spurious Milter request when a client was rejected - maked the Milter more tolerant for redundant "data cleanup" requests - applying pflogsumm-conn-delays-dsn-patch from postfix tree to pflogsumm * Fri Jul 28 2006 Thomas Woerner 2:2.3.1-1 - new version 2.3.1 - fixes problems with TLS and Milter support * Tue Jul 25 2006 Thomas Woerner 2:2.3.0-2 - fixed SASL build (#200079) thanks to Kaj J. Niemi for the patch * Mon Jul 24 2006 Thomas Woerner 2:2.3.0-1 - new version 2.3.0 - dropped hostname-fqdn patch * Wed Jul 12 2006 Jesse Keating - 2:2.2.10-2.1 - rebuild * Wed May 10 2006 Thomas Woerner 2:2.2.10-2 - added RELRO security protection * Tue Apr 11 2006 Thomas Woerner 2:2.2.10-1 - new version 2.2.10 - added option LDAP_DEPRECATED to support deprecated ldap functions for now - fixed build without pflogsumm support (#188470) * Fri Feb 10 2006 Jesse Keating - 2:2.2.8-1.2 - bump again for double-long bug on ppc(64) * Tue Feb 07 2006 Jesse Keating - 2:2.2.8-1.1 - rebuilt for new gcc4.1 snapshot and glibc changes * Tue Jan 24 2006 Florian Festi 2:2.2.8-1 - new version 2.2.8 * Tue Dec 13 2005 Thomas Woerner 2:2.2.7-1 - new version 2.2.7 * Fri Dec 09 2005 Jesse Keating - rebuilt * Fri Nov 11 2005 Thomas Woerner 2:2.2.5-2.1 - replaced postconf and postalias call in initscript with newaliases (#156358) - fixed initscripts messages (#155774) - fixed build problems when sasl is disabled (#164773) - fixed pre-definition of mailbox_transport lmtp socket path (#122910) * Thu Nov 10 2005 Tomas Mraz 2:2.2.5-2 - rebuilt against new openssl * Fri Oct 7 2005 Tomas Mraz - use include instead of pam_stack in pam config * Thu Sep 8 2005 Thomas Woerner 2:2.2.5-1 - new version 2.2.5 * Thu May 12 2005 Thomas Woerner 2:2.2.3-1 - new version 2.2.3 - compiling all binaries PIE, dropped old pie patch * Wed Apr 20 2005 Tomas Mraz 2:2.2.2-2 - fix fsspace on large filesystems (>2G blocks) * Tue Apr 12 2005 Thomas Woerner 2:2.2.2-1 - new version 2.2.2 * Fri Mar 18 2005 Thomas Woerner 2:2.2.1-1 - new version 2.2.1 - allow to start postfix without alias_database (#149657) * Fri Mar 11 2005 Thomas Woerner 2:2.2.0-1 - new version 2.2.0 - cleanup of spec file: removed external TLS and IPV6 patches, removed smtp_sasl_proto patch - dropped samples directory till there are good examples again (was TLS and IPV6) - v2.2.0 fixes code problems: #132798 and #137858 * Fri Feb 11 2005 Thomas Woerner 2:2.1.5-5.1 - fixed open relay bug in postfix ipv6 patch: new version 1.26 (#146731) - fixed permissions on doc directory (#147280) - integrated fixed fqdn patch from Joseph Dunn (#139983) * Tue Nov 23 2004 Thomas Woerner 2:2.1.5-4.1 - removed double quotes from postalias call, second fix for #138354 * Thu Nov 11 2004 Jeff Johnson 2:2.1.5-4 - rebuild against db-4.3.21. - remove Requires: db4, the soname linkage dependency is sufficient. * Thu Nov 11 2004 Thomas Woerner 2:2.1.5-3.1 - fixed problem with multiple alias maps (#138354) * Tue Oct 26 2004 Thomas Woerner 2:2.1.5-3 - fixed wrong path for cyrus-imapd (#137074) * Mon Oct 18 2004 Thomas Woerner 2:2.1.5-2.2 - automated postalias call in init script - removed postconf call from spec file: moved changes into patch * Fri Oct 15 2004 Thomas Woerner 2:2.1.5-2.1 - removed aliases from postfix-files (#135840) - fixed postalias call in init script * Thu Oct 14 2004 Thomas Woerner 2:2.1.5-2 - switched over to system aliases file and database in /etc/ (#117661) - new reuires and buildrequires for setup >= 2.5.36-1 * Mon Oct 4 2004 Thomas Woerner 2:2.1.5-1 - new version 2.1.5 - new ipv6 and tls+ipv6 patches: 1.25-pf-2.1.5 * Thu Aug 5 2004 Thomas Woerner 2:2.1.4-1 - new version 2.1.4 - new ipv6 and tls+ipv6 patches: 1.25-pf-2.1.4 - new pfixtls-0.8.18-2.1.3-0.9.7d patch * Mon Jun 21 2004 Thomas Woerner 2:2.1.1-3.1 - fixed directory permissions in %%doc (#125406) - fixed missing spool dirs (#125460) - fixed verify problem for aliases.db (#125461) - fixed bogus upgrade warning (#125628) - more spec file cleanup * Tue Jun 15 2004 Elliot Lee - rebuilt * Sun Jun 06 2004 Florian La Roche - make sure pflog files have same permissions even if in multiple sub-rpms * Fri Jun 4 2004 Thomas Woerner 2:2.1.1-1 - new version 2.1.1 - compiling postfix PIE - new alternatives slave for /usr/lib/sendmail * Wed Mar 31 2004 John Dennis 2:2.0.18-4 - remove version from pflogsumm subpackage, it was resetting the version used in the doc directory, fixes bug 119213 * Tue Mar 30 2004 Bill Nottingham 2:2.0.18-3 - add %%defattr for pflogsumm package * Tue Mar 16 2004 John Dennis 2:2.0.18-2 - fix sendmail man page (again), make pflogsumm a subpackage * Mon Mar 15 2004 John Dennis 2:2.0.18-1 - bring source up to upstream release 2.0.18 - include pflogsumm, fixes bug #68799 - include smtp-sink, smtp-source man pages, fixes bug #118163 * Tue Mar 02 2004 Elliot Lee - rebuilt * Tue Feb 24 2004 John Dennis 2:2.0.16-14 - fix bug 74553, make alternatives track sendmail man page * Tue Feb 24 2004 John Dennis 2:2.0.16-13 - remove /etc/sysconfig/saslauthd from rpm, fixes bug 113975 * Wed Feb 18 2004 John Dennis - set sasl back to v2 for mainline, this is good for fedora and beyond, for RHEL3, we'll branch and set set sasl to v1 and turn off ipv6 * Tue Feb 17 2004 John Dennis - revert back to v1 of sasl because LDAP still links against v1 and we can't - bump revision for build have two different versions of the sasl library loaded in one load image at the same time. How is that possible? Because the sasl libraries have different names (libsasl.so & libsasl2.so) but export the same symbols :-( Fixes bugs 115249 and 111767 * Fri Feb 13 2004 Elliot Lee - rebuilt * Wed Jan 21 2004 John Dennis 2:2.0.16-7 - fix bug 77216, support snapshot builds * Tue Jan 20 2004 John Dennis 2:2.0.16-6 - add support for IPv6 via Dean Strik's patches, fixes bug 112491 * Tue Jan 13 2004 John Dennis 2:2.0.16-4 - remove mysqlclient prereq, fixes bug 101779 - remove md5 verification override, this fixes bug 113370. Write parse-postfix-files script to generate explicit list of all upstream files with ownership, modes, etc. carefully add back in all other not upstream files, files list is hopefully rock solid now. * Mon Jan 12 2004 John Dennis 2:2.0.16-3 - add zlib-devel build prereq, fixes bug 112822 - remove copy of resolve.conf into chroot jail, fixes bug 111923 * Tue Dec 16 2003 John Dennis - bump release to build 3.0E errata update * Sat Dec 13 2003 Jeff Johnson 2:2.0.16-2 - rebuild against db-4.2.52. * Mon Nov 17 2003 John Dennis 2:2.0.16-1 - sync up with current upstream release, 2.0.16, fixes bug #108960 * Thu Sep 25 2003 Jeff Johnson 2.0.11-6 - rebuild against db-4.2.42. * Tue Jul 22 2003 Nalin Dahyabhai 2.0.11-5 - rebuild * Thu Jun 26 2003 John Dennis - bug 98095, change rmail.postfix to rmail for uucp invocation in master.cf * Wed Jun 25 2003 John Dennis - add missing dependency for db3/db4 * Thu Jun 19 2003 John Dennis - upgrade to new 2.0.11 upstream release - fix authentication problems - rewrite SASL documentation - upgrade to use SASL version 2 - Fix bugs 75439, 81913 90412, 91225, 78020, 90891, 88131 * Wed Jun 04 2003 Elliot Lee - rebuilt * Fri Mar 7 2003 John Dennis - upgrade to release 2.0.6 - remove chroot as this is now the preferred installation according to Wietse Venema, the postfix author * Mon Feb 24 2003 Elliot Lee - rebuilt * Tue Feb 18 2003 Bill Nottingham 2:1.1.11-10 - don't copy winbind/wins nss modules, fixes #84553 * Sat Feb 01 2003 Florian La Roche - sanitize rpm scripts a bit * Wed Jan 22 2003 Tim Powers - rebuilt * Sat Jan 11 2003 Karsten Hopp 2:1.1.11-8 - rebuild to fix krb5.h issue * Tue Jan 7 2003 Nalin Dahyabhai 2:1.1.11-7 - rebuild * Fri Jan 3 2003 Nalin Dahyabhai - if pkgconfig knows about openssl, use its cflags and linker flags * Thu Dec 12 2002 Tim Powers 2:1.1.11-6 - lib64'ize - build on all arches * Wed Jul 24 2002 Karsten Hopp - make aliases.db config(noreplace) (#69612) * Tue Jul 23 2002 Karsten Hopp - postfix has its own filelist, remove LICENSE entry from it (#69069) * Tue Jul 16 2002 Karsten Hopp - fix shell in /etc/passwd (#68373) - fix documentation in /etc/postfix (#65858) - Provides: /usr/bin/newaliases (#66746) - fix autorequires by changing /usr/local/bin/perl to /usr/bin/perl in a script in %%doc (#68852), although I don't think this is necessary anymore * Mon Jul 15 2002 Phil Knirsch - Fixed missing smtpd.conf file for SASL support and included SASL Postfix Red Hat HOWTO (#62505). - Included SASL2 support patch (#68800). * Mon Jun 24 2002 Karsten Hopp - 1.1.11, TLS 0.8.11a - fix #66219 and #66233 (perl required for %%post) * Fri Jun 21 2002 Tim Powers - automated rebuild * Sun May 26 2002 Tim Powers - automated rebuild * Thu May 23 2002 Bernhard Rosenkraenzer 1.1.10-1 - 1.1.10, TLS 0.8.10 - Build with db4 - Enable SASL * Mon Apr 15 2002 Bernhard Rosenkraenzer 1.1.7-2 - Fix bugs #62358 and #62783 - Make sure libdb-3.3.so is in the chroot jail (#62906) * Mon Apr 8 2002 Bernhard Rosenkraenzer 1.1.7-1 - 1.1.7, fixes 2 critical bugs - Make sure there's a resolv.conf in the chroot jail * Wed Mar 27 2002 Bernhard Rosenkraenzer 1.1.5-3 - Add Provides: lines for alternatives stuff (#60879) * Tue Mar 26 2002 Nalin Dahyabhai 1.1.5-2 - rebuild * Tue Mar 26 2002 Bernhard Rosenkraenzer 1.1.5-1 - 1.1.5 (bugfix release) - Rebuild with current db * Thu Mar 14 2002 Bill Nottingham 1.1.4-3 - remove db trigger, it's both dangerous and pointless - clean up other triggers a little * Wed Mar 13 2002 Bernhard Rosenkraenzer 1.1.4-2 - Some trigger tweaks to make absolutely sure /etc/services is in the chroot jail * Mon Mar 11 2002 Bernhard Rosenkraenzer 1.1.4-1 - 1.1.4 - TLS 0.8.4 - Move postalias run from %%post to init script to work around anaconda being broken. * Fri Mar 8 2002 Bill Nottingham 1.1.3-5 - use alternatives --initscript support * Thu Feb 28 2002 Bill Nottingham 1.1.3-4 - run alternatives --remove in %%preun - add various prereqs * Thu Feb 28 2002 Nalin Dahyabhai 1.1.3-3 - adjust the default postfix-files config file to match the alternatives setup by altering the arguments passed to post-install in the %%install phase (otherwise, it might point to sendmail's binaries, breaking it rather rudely) - adjust the post-install script so that it silently uses paths which have been modified for use with alternatives, for upgrade cases where the postfix-files configuration file isn't overwritten - don't forcefully strip files -- that's a build root policy - remove hard requirement on openldap, library dependencies take care of it - redirect %%postun to /dev/null - don't remove the postfix user and group when the package is removed * Wed Feb 20 2002 Bernhard Rosenkraenzer 1.1.3-2 - listen on 127.0.0.1 only by default (#60071) - Put config samples in %{_docdir}/%{name}-%{version} rather than /etc/postfix (#60072) - Some spec file cleanups * Tue Feb 19 2002 Bernhard Rosenkraenzer 1.1.3-1 - 1.1.3, TLS 0.8.3 - Fix updating - Don't run the statistics cron job - remove requirement on perl Date::Calc * Thu Jan 31 2002 Bernhard Rosenkraenzer 1.1.2-3 - Fix up alternatives stuff * Wed Jan 30 2002 Bernhard Rosenkraenzer 1.1.2-2 - Use alternatives * Sun Jan 27 2002 Bernhard Rosenkraenzer 1.1.2-1 - Initial Red Hat Linux packaging, based on spec file from Simon J Mudd - Changes from that: - Set up chroot environment in triggers to make sure we catch glibc errata - Remove some hacks to support building on all sorts of distributions at the cost of specfile readability - Remove postdrop group on deletion dnssec-tools-2.0/apps/postfix/postfix-libspf2-howto.txt0000664000237200023720000000271511012161010023475 0ustar hardakerhardaker The following are the steps for patching the mail server postfix to support libspf2. If you are using a libspf2 library that has been patched to support DNSSEC, this will allow that library to be used by postfix. NOTE: The version of the software that was tested is listed below. It is likely that the following steps will also work with slightly different versions. I. Install dnssec-tools. http://dnssec-tools.sourceforge.net/ II. Use the patch and follow the directions in dnssec-tools/apps/libspf2/ to install a patched version of libspf2-1.2.5 from: http://www.libspf2.org/ III. Download postfix postfix-2.5.1.tar.gz from http://www.postfix.org and untar. Download the spf2 patch for postfix, postfix-2.3.2_libspf2-1.2.x-20060819.patch, from Nigel Kukard at: http://www.linuxrulz.org/nkukard/postfix/postfix-2.3/postfix-2.3.2_libspf2-1.2.x-20060819.patch. IV. Untar and patch postfix: tar xvzf postfix-2.5.1.tar.gz cd postfix-2.5.1 patch -p 1 < (path-to-spf-patch)/postfix-2.3.2_libspf2-1.2.x-20060819.patch NOTE: The patch command will produce warnings that some of the hunks are offset. This is expected. V. Following the instructions that came with the patch. After patching, these instructions are located in postfix-2.5.1/README_FILES/SPF_README. Follow these directions to make and install postfix. dnssec-tools-2.0/apps/owl-monitor/0000775000237200023720000000000012111172554017350 5ustar hardakerhardakerdnssec-tools-2.0/apps/owl-monitor/COPYING0000664000237200023720000000274012107536543020415 0ustar hardakerhardakerCopyright (c) 2013-2013, Parsons, Inc. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. * Neither the name of SPARTA, Inc nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. dnssec-tools-2.0/apps/owl-monitor/sensor/0000775000237200023720000000000012111172553020660 5ustar hardakerhardakerdnssec-tools-2.0/apps/owl-monitor/sensor/conf/0000775000237200023720000000000012111172553021605 5ustar hardakerhardakerdnssec-tools-2.0/apps/owl-monitor/sensor/conf/owl.conf0000664000237200023720000000141412071106161023252 0ustar hardakerhardaker# # Copyright 2012-2013 SPARTA, Inc. All rights reserved. See the COPYING # file distributed with this software for details. # # owl.conf Owl Monitoring System # # Example configuration file for Owl. # # Revision History: # 1.0 121201 Initial version. # 1.1 130102 Generalized keywords. # host name hootie host dnstimer-args -config /home/hootie/conf/owl.conf host transfer-args -config /home/hootie/conf/owl.conf host admin hootie athena@example.com query example.com a a query example.com d a query example.com d aaaa query . h A data dir /home/hootie/data data interval 60 data archive /home/hootie/old.data log dir /home/hootie/log remote ssh-user athena@owl.example.com;-p 1234 remote heartbeat http://owl.example.com/cgi-bin/owl-sensor-heartbeat.cgi dnssec-tools-2.0/apps/owl-monitor/sensor/bin/0000775000237200023720000000000012111172553021430 5ustar hardakerhardakerdnssec-tools-2.0/apps/owl-monitor/sensor/bin/owl-archold0000775000237200023720000002703212107530766023606 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2012-2013 SPARTA, Inc. All rights reserved. See the COPYING # file distributed with this software for details. # # owl-archold Owl Monitoring System # # This script archives archives of old sensor data. # # Revision History: # 1.0 121201 Initial version. # use strict; use Cwd; use Getopt::Long qw(:config no_ignore_case_always); ####################################################################### # # Version information. # my $NAME = "owl-archold"; my $VERS = "$NAME version: 2.0.0"; my $DTVERS = "DNSSEC-Tools version: 2.0"; ################################################### # # Data required for command line options. # my %options = (); # Filled option array. my @opts = ( 'archdir=s', # Archive directory for old archives. 'delete', # Delete flag. "verbose", # Verbose output. "Version", # Version output. "help", # Give a usage message and exit. ); # # Flag values for the various options. Variable/option connection should # be obvious. # my $delflag = 0; # Delete-archives flag. my $verbose = 0; # Display verbose output. ################################################### my $MV = "/bin/mv"; my $RM = "/bin/rm -fr"; my $TAR = "tar -cjf"; my $yy; # Partial GMT year. my $yyyy; # Full GMT year. my $now; # YYMM for GMT now. my $errs = 0; # Error count. ####################################################################### main(); exit(0); #-------------------------------------------------------------------------- # Routine: main() # sub main { my @datadirs = (); # Directories to archive. $| = 0; # # Get the YYMM for right now. # getnow(); # # Check our options. # doopts(); # # Get the data directories to archive. # @datadirs = getdirs(); # # Archive the archive directories given on the command line. # foreach my $arc (@datadirs) { archer($arc); } } #----------------------------------------------------------------------------- # Routine: doopts() # # Purpose: This routine shakes and bakes our command line options. # sub doopts { my $dir; # Archive directory. # # Parse the options. # GetOptions(\%options,@opts) || usage(); # # Handle a few immediate flags. # usage(1) if(defined($options{'help'})); version() if(defined($options{'Version'})); # # Set our option variables based on the parsed options. # $verbose = $options{'verbose'}; $delflag = $options{'delete'}; # # Ensure we were given a directory. # usage() if(@ARGV == 0); # # Go to the directory of archives and remove the directory from # our argument list. # $dir = shift @ARGV; if(chdir($dir) == 0) { print STDERR "unable to go to directory of archives \"$dir\": $!\n"; exit(1); } } #-------------------------------------------------------------------------- # Routine: getnow() # # Purpose: This routine gets the YYMM for the GMT now. # sub getnow { my @tempus; # Time fields. my $mm; # Full GMT month. # # Get the time fields for right now. # @tempus = gmtime(time()); # # Set the base fields. # $mm = $tempus[4] + 1; $yy = $tempus[5] - 100; $yyyy = 2000 + $yy; # # Build the time blob we're looking for. # $now = sprintf("%02d%02d", $yy,$mm); } #-------------------------------------------------------------------------- # Routine: getdirs() # # Purpose: This routine gets the data directories we'll archive. # If directories were given on the command line, they'll be # returned to the caller. Otherwise, getdirs() will look # in the current directory for directories in our standard # naming format. Anything prior to the current month will # be returned for archiving. # sub getdirs { my @dirs; # Directories to archive. my $curarch; # Archive of current month. my $ind; # Loop index. # # If the user specified some data directories, we'll use those. # return(@ARGV) if(@ARGV > 0); # # Get all the data archive directories that are in our expected # name format. We'll sort that list and get the name for the # current month's directory. # @dirs = sort(glob("data-*")); $curarch = "data-$now"; # # Find the current month in the directory list. # for($ind=0; $ind < @dirs; $ind++) { last if($dirs[$ind] eq $curarch); } # # Get rid of anything in the list from this month into the future, # leaving only past months. # splice @dirs, $ind; if(@dirs == 0) { print "no directories were found for archiving\n"; exit(0); } # # Return the list of remaining directories. # return(@dirs); } #-------------------------------------------------------------------------- # Routine: archer() # # Purpose: Archive the specified directory. A compressed tarball will # be created and moved into the archive of archived directories. # If the archive of archived directories doesn't exist, it'll be # created. # sub archer { my $arch = shift; # Archive to archive. my $archfile; # Archive file. my $archdir; # Archive directory. my $cmd; # Archiving command to execute. if(! -e $arch) { if($arch =~ /^\d{4}$/) { $arch = "data-$arch"; vprint("\t$arch: not found, trying data-$arch\n"); return(archer($arch)); } else { print STDERR "$arch not found\n"; return(0); } } print "archiving $arch\n" if($verbose); # # Get the name of our directory of archives. # $archfile = "$arch.tbz2"; $cmd = "$TAR $archfile $arch"; vprint("\trunning \"$cmd\"\n"); # # Archive the archive. # if(system($cmd) != 0) { my $ret = $? >> 8; print STDERR "unable to archive $archfile\n"; return(0); } # # Get the name of our directory of archives. # if(defined($options{'archdir'})) { $archdir = $options{'archdir'} } else { $yy =~ /^data-(\d{2})\d{2}$/; $yy += 2000; $archdir = "$yyyy-data"; } # # Make the archive directory. If we can't make it, we'll assume # it already exists. # mkdir $archdir; # # Move the new archive file into the archive directory. # vprint("\tmoving $archfile to $archdir/$archfile\n"); if(system("$MV $archfile $archdir/$archfile") != 0) { my $ret = $? >> 8; print STDERR "unable to move $archfile into $archdir\n"; return(0); } # # Delete the archive directory. # if($delflag) { vprint("\tdeleting $arch\n"); if(system("$RM $arch") != 0) { my $ret = $? >> 8; print STDERR "unable to delete $arch\n"; return(0); } } return(1); } #-------------------------------------------------------------------------- # Routine: vprint() # sub vprint { my $str = shift; print "$str" if($verbose); } #-------------------------------------------------------------------------- # Routine: version() # sub version { print STDERR "$VERS\n"; print STDERR "$DTVERS\n"; exit(0); } #-------------------------------------------------------------------------- # Routine: usage() # sub usage { print "owl-archold [archive1 ... archiveN]\n"; print "\toptions:\n"; print "\t\t-archdir directory\n"; print "\t\t-delete\n"; print "\n"; print "\t\t-verbose\n"; print "\t\t-Version\n"; print "\t\t-help\n"; exit(0); } ########################################################################### =pod =head1 NAME owl-archold - Archives archived Owl sensor data =head1 SYNOPSIS owl-archold [options] [year-month-archives] =head1 DESCRIPTION The Owl sensors generate a very large number of data files. The number of data file created will negatively impact the Owl system response time if these files are not periodically archived. The B program runs periodically and moves Owl data files from the "active" data directory into year/month-based archive directories. Once a particular month is complete, the B script will archive the year/month archives themselves. B creates a compressed B file of the year/month archive directory. This compressed B file is then moved into a year-based archive directory. The year/month archive directory is left intact, unless the I<-delete> option is specified. For example, B may create the following files: archive directory contains data-1112 Owl sensor data from December, 2011 data-1203 Owl sensor data from March, 2012 data-1209 Owl sensor data from September, 2012 With these three year/month archive directories, B will create the following compressed B files and place them in the given year archives. archive directory tar file year archive data-1112 data-1112.tbz2 2011-data data-1203 data-1203.tbz2 2012-data data-1209 data-1209.tbz2 2012-data The year archive directory on the command line is assumed to contain the year/month archive directories and the directory into which the compressed B files will be moved. This is not a requirement. B will change directory into the year archive directory and operate from there. B will assume the year/month archives are relative to that directory, unless absolute paths are given. The year/month archives are assumed to have the "data-YYMM" format as given in the examples above. However, the directory names may be anything the user wishes; they will be turned into compressed B files and moved into the year archive directory. If the year/month archive directories are given as "YYMM", then B will convert this into the "data-YYMM" format and attempt to archive that file. B should only be run for year/month archives that the user knows are complete. If used in conjunction with B, then it should be safe to run B on the 4th or 5th of a month in order to archive the previous month's data. If no year/month archives are specified on the command line, then the year-archive directory will be searched for names that start with "I". Any file or directory with that format will be assumed to be a year/month archive. All the names whose year and month precede the current year and month will be archived. Assume the current directory contains directories with the names I, I, and I. If B is run in September, 2012, with this command line: $ owl-archold . Only the I and I will be archived. =head1 OPTIONS =over 4 =item B<-archdir> This option specifies the directory to which data archives will be moved. =item B<-delete> This option specifies that the original, uncompressed, untarred data archive will be deleted. This will only be done if the new tarred and compressed archive is successfully created and moved into the archive directory. =item B<-verbose> This option provides verbose output. =item B<-Version> This option provides the version of B. =item B<-help> This option displays a help message and exits. =back =head1 WARNINGS =over 4 =item Current Month Not Archived B will I archive the current month's data. There is an assumption that more sensor data will be gathered for the current month, so archiving the current month's data will provide an incomplete archive. =item Two-Day Archival Lag The current archive timing used by B means that there will be a two-day lag between the day a data file arrives in a sensor's data directory and the day it is moved to the sensor's archive directory. Consequently, B should not be run on the first or second days of a month. More data may still be awaiting archiving, and an early run could result in unarchived data. =back =head1 SEE ALSO B, B B, B =head1 COPYRIGHT Copyright 2012-2013 SPARTA, Inc. All rights reserved. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =cut dnssec-tools-2.0/apps/owl-monitor/sensor/bin/owl-status0000775000237200023720000002245412107530766023520 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2012-2013 SPARTA, Inc. All rights reserved. See the COPYING # file distributed with this software for details. # # owl-status Owl Monitoring System # # This script reports the execution status of the Owl sensor scripts. # The following conditions are reported: # - running status of Owl daemons # - queries being performed # - last instance performed of each query # # # Revision History: # 1.0 121201 Initial version. # use strict; use FindBin; use lib "$FindBin::Bin/../perllib"; use owlutils; use Getopt::Long qw(:config no_ignore_case_always); # # Version information. # my $NAME = "owl-status"; my $VERS = "$NAME version: 2.0.0"; my $DTVERS = "DNSSEC-Tools version: 2.0"; #------------------------------------------------------------------------ # Defaults and some constants. my $DEF_CONFDIR = $owlutils::DEF_CONFDIR; # Default config directory. my $DEF_CONFIG = $owlutils::DEF_CONFIG; # Default config file nodename. #------------------------------------------------------------------------ # # Data required for command line options. # my %options = (); # Filled option array. my @opts = ( "confdir|cd=s", # Specify config directory. "config|cf=s", # Specify config file. "datadir=s", # Specify data directory. "all", # Run all checks. "queries", # Run defined-query checks. "last", # Run last-query checks. "help", # Give help message. "Version", # Give version info. "verbose", # Give verbose output. ); my $lflag = 0; # Last-query flag. my $qflag = 0; # Defined-queries flag. my $confdir = ''; # Config directory. my $config = ''; # Config file. my $datadir = ''; # Data directory. my $verbose = 0; # Verbose flag. #------------------------------------------------------------------------ # Data and log message data. # # # Owl daemons that should be running. # my %owldaemons = ( 'owl-dnstimer' => 0, 'owl-sensord' => 0, 'owl-transfer' => 0, ); my @nservers = (); # Nameservers we check. my @targets = (); # Query targets. my @qtypes = (); # Query types. my @intervals; # Query intervals. my @timeouts; # Query timeouts. my @rollints; # Datafile rollover intervals. my @states; # State of targets. #------------------------------------------------------------------------ main(); exit(0); #------------------------------------------------------------------------ # Routine: main() # sub main { # # Check our options and read the configuration file. # doopts(); owl_setup($NAME,$confdir,$datadir,undef); if(owl_readconfig($config,$datadir,'') != 0) { exit(2); } # # Print configuration data if verbose flag was given. # if($verbose) { print "confdir - $confdir\n"; print "config - $config\n"; print "datadir - $datadir\n"; print "\n"; } # # Perform initialization steps. # startup(); # # Check which daemons are running. # updaemons(); # # Print the queries we're performing. # printqueries(); # # Find the last query for each nameserver. # lastqueries(); } #------------------------------------------------------------------------ # Routine: doopts() # sub doopts { # # Parse the options. # GetOptions(\%options,@opts) || usage(); # # Handle a few immediate flags. # version() if(defined($options{'Version'})); usage(1) if(defined($options{'help'})); owl_printdefs() if(defined($options{'defaults'})); # # Set our option variables based on the parsed options. # $confdir = $options{'confdir'} || $DEF_CONFDIR; $config = $options{'config'} || $DEF_CONFIG; $datadir = $options{'datadir'}; $verbose = $options{'verbose'}; # # Set the flags for our extended checks. # $qflag = $options{'queries'}; $lflag = $options{'last'}; if(defined($options{'all'})) { $qflag = 1; $lflag = 1; } # # Moosh together a few variables to build the config file. # $config = "$confdir/$config" if($config !~ /\//); } #------------------------------------------------------------------------ # Routine: startup() # # Purpose: Get some configuration data set in our utilities. # sub startup { # # Pick up the configuration data. # @nservers = @owlutils::cf_servers; @targets = @owlutils::cf_targets; @qtypes = @owlutils::cf_qtypes; $datadir = $owlutils::datadir if($datadir eq ''); @intervals = @owlutils::cf_intervals; @timeouts = @owlutils::cf_timeouts; @rollints = @owlutils::cf_rollints; @states = @owlutils::cf_states; $datadir = "$FindBin::Bin/../data" if(! -e $datadir); } #------------------------------------------------------------------------ # Routine: updaemons() # # Purpose: Check the execution status of the Owl daemons. # sub updaemons { foreach my $ud (sort(keys(%owldaemons))) { my $state; # Running state of daemon. $state = owl_running($ud); $owldaemons{$ud} = $state; print "$ud:\t" . ($state ? 'running' : 'not running') . "\n"; } } #------------------------------------------------------------------------ # Routine: printqueries() # # Purpose: Print config info for each defined query. # sub printqueries { return if(! $qflag); print "\nqueries:\n"; for(my $ind=0; $ind < @nservers; $ind++) { my $ns = $nservers[$ind]; printf " $ns: $targets[$ind]/$qtypes[$ind]\tinterval %d, timeout %d, %s, rollint %d\n", $intervals[$ind], $timeouts[$ind], $rollints[$ind] ? 'active' : 'inactive', $states[$ind]; } } #------------------------------------------------------------------------ # Routine: lastqueries() # # Purpose: Print config info for each defined nameserver. # # This is what data filenames look like: # 121113.1647,sensor-dc,.,h.root-servers.net,ANYCAST.dns # 121113.1647,sensor-sf,.,m.root-servers.net,A.dns # sub lastqueries { return if(! $lflag); print "\nlast queries:\n"; foreach my $ns (@nservers) { my @files; # Server's data files. my $lastfn; # Last data file. my $msg = "no data files for $ns"; # Msg about last query. # # Get the last data file for this nameserver. # @files = sort(glob("$datadir/*,$ns,*.dns")); $lastfn = pop(@files); # # If we found a data file, get its last entry. # if($lastfn) { my $line; # Last line in file. my @atoms = (); # Pieces of data. # # Get the last entry of the data file and split # it into its pieces. # $line = `tail -1 $lastfn`; @atoms = split / /, $line; # # Build a message with the time of the last query. # $msg = localtime($atoms[0]); chomp $msg; } printf "\t$ns: $msg\n"; } print "\n"; } #---------------------------------------------------------------------- # Routine: version() # # Purpose: Print the version number(s) and exit. # sub version { print STDERR "$VERS\n"; print STDERR "$DTVERS\n"; exit(0); } #----------------------------------------------------------------------------- # Routine: usage() # sub usage { print STDERR "usage: $0 [options]\n"; print STDERR "\t\where options are:\n"; print STDERR "\t\t-all\n"; print STDERR "\t\t-last\n"; print STDERR "\t\t-queries\n"; print STDERR "\t\t-confdir config-directory\n"; print STDERR "\t\t-cd config-directory\n"; print STDERR "\t\t-config config-file\n"; print STDERR "\t\t-cf config-file\n"; print STDERR "\t\t-datadir data-directory\n"; print STDERR "\t\t-help\n"; print STDERR "\t\t-verbose\n"; print STDERR "\t\t-Version\n"; exit(0); } #-------------------------------------------------------------------------- =pod =head1 NAME owl-status - times DNS queries =head1 SYNOPSIS owl-status [options] =head1 DESCRIPTION B reports the status of the Owl sensor. The following things can be printed: - running/not running status of the Owl sensor daemons (always given) - parameters for the defined queries - time of last query for the nameservers If neither the I<-all>, I<-last>, or I<-queries> options are given, then only the "running/not running" status will be given. =head1 OPTIONS =over 4 =item B<-all> Specifies that all checks will be run. If this is not given, then only the running/not running checks will be made. =item B<-confdir config-directory> =item B<-cd config-directory> Specifies the directory that holds the B configuration file. If this is not given, then the default B name will be used. If this is a relative path, it will be relative from the point of execution. The B file is stored in this directory. =item B<-config config-file> =item B<-cf config-file> Specifies the Owl sensor configuration file. given, then the default B name will be used. =item B<-datadir data-directory> Specifies the directory that will hold the Owl sensor data files. If this is not given, then the default B name will be used. If this is a relative path, it will be relative from the point of execution. If this directory doesn't exist, it will be created. =item B<-last> Specifies that the last-query checks will be run. =item B<-queries> Specifies that the defined-query checks will be run. =item B<-help> Prints a help message. =item B<-verbose> Prints verbose output. =item B<-Version> Prints B' version and exit. =back =head1 SEE ALSO B, B B, B =head1 COPYRIGHT Copyright 2012-2013 SPARTA, Inc. All rights reserved. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =cut dnssec-tools-2.0/apps/owl-monitor/sensor/bin/owl-transfer0000775000237200023720000003546212107530766024024 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2012-2013 SPARTA, Inc. All rights reserved. See the COPYING # file distributed with this software for details. # # # owl-transfer Owl Monitoring System # # This script transfers sensor data from the Owl sensor to the Owl # manager. # # Revision History: # 1.0 121201 Initial version. # use strict; use Cwd; use Getopt::Long qw(:config no_ignore_case_always); use POSIX qw(setsid); use Time::Local; use Date::Format; use FindBin; use lib "$FindBin::Bin/../perllib"; use owlutils; ####################################################################### # # Version information. # my $NAME = 'owl-transfer'; my $VERS = "$NAME version: 2.0.0"; my $DTVERS = 'DNSSEC-Tools version: 2.0'; ################################################### # # Data required for command line options. # my %options = (); # Filled option array. my @opts = ( 'confdir=s', # Configuration directory. 'config=s', # Configuration file. 'datadir=s', # Top-level data directory. 'logdir=s', # Top-level logging directory. 'foreground|fg', # Run in foreground. 'stop', # Stop execution. 'verbose', # Verbose output. 'Version', # Version output. 'help', # Give a usage message and exit. ); # # Flag values for the various options. Variable/option connection should # be obvious. # my $verbose = 0; # Display verbose output. my $foreground; # Foreground-execution flag. my $stopper; # Stop-execution flag. ################################################### # # Constants and variables for various files and directories. # my $basedir = "."; # Base directory we'll look in. my $DEF_CONFIG = $owlutils::DEF_CONFIG; # Default config file nodename. my $DEF_CONFDIR = $owlutils::DEF_CONFDIR; # Default config directory. my $DEF_DATADIR = $owlutils::DEF_DATADIR; # Default data directory. my $DEF_LOGDIR = $owlutils::DEF_LOGDIR; # Default log directory. my $DEF_CONFFILE = "$DEF_CONFDIR/$DEF_CONFIG"; # Default Owl config file. my $CONF_DATADIR = "datadir"; # Data directory record. ################################################### my $curdir; # Current directory. my $confdir = $DEF_CONFDIR; # Configuration directory. my $conffile = $DEF_CONFFILE; # Configuration file. my $datadir = $DEF_DATADIR; # Top-level data directory. my $logdir; # Logging directory. # # Every LOGCNT transfer cycles, owl-transfer will write a log message saying # how many log attempts have been made. If any failed, then the failure # count will be reported. A transfer cycle is one pass attempting to transfer # to all ssh-users. If owl-transfer attempts to transfer files once per # minute, then a LOGCNT of 60 will result in a log message once per hour. # my $LOGCNT = 60; my $pidfile; # Name of process-id file. my @sshusers; # user@host for rsyncing. my $xfercnt = 0; # Count of transfers. my $xferint; # Data-transfer interval. my $xlog; # Logging handle. my $errs = 0; # Error count. ####################################################################### main(); exit(0); #-------------------------------------------------------------------------- # Routine: main() # sub main { $| = 0; # # A little directory wiggling. # $curdir = getcwd(); $basedir = $curdir if($basedir eq "."); # # Check our options. # doopts(); # # Perform initialization steps. # startup(); logger("$NAME starting"); # # Grab some globals from the config file. # $pidfile = $owlutils::pidfile; @sshusers = @owlutils::sshusers; $xferint = $owlutils::transfer_interval; if($verbose) { print "configuration parameters:\n"; print "\tcurrent directory \"$curdir\"\n"; print "\tconfiguration file \"$conffile\"\n"; print "\tprocess-id file \"$pidfile\"\n"; print "\tdata directory \"$datadir\"\n"; print "\tdata-transfer interval \"$xferint\" minutes\n"; print "\tssh users \"@sshusers\"\n"; print "\n"; } # # Don't proceed on errors. # if($errs) { my $sfx = ($errs != 1) ? 's' : ''; # Pluralization suffix. print "$NAME: $errs error$sfx found during initialization; halting...\n"; exit(1); } # # Daemonize ourself. # exit(0) if((! $foreground) && fork()); POSIX::setsid(); owl_writepid(); # # Periodically run the rsync to send the data to the manager. # teleporter(); } #----------------------------------------------------------------------------- # Routine: doopts() # # Purpose: This routine shakes and bakes our command line options. # sub doopts { # # Parse the options. # GetOptions(\%options,@opts) || usage(); # # Handle a few immediate flags. # version() if(defined($options{'Version'})); usage(1) if(defined($options{'help'})); # # Set our option variables based on the parsed options. # $foreground = $options{'foreground'} || 0; $stopper = $options{'stop'} || 0; $verbose = $options{'verbose'} || 0; # # Get the configuration file's name. If the user specified one, # we'll use it. If not, we'll try using one of two defaults. # if(defined($options{'config'})) { $conffile = $options{'config'}; } else { $conffile = $DEF_CONFFILE; if(! -e $conffile) { $conffile = glob("$basedir/conf/owl.conf"); } } # # Check our config and data directories. # $confdir = $options{'confdir'} if(defined($options{'confdir'})); $datadir = $options{'datadir'} if(defined($options{'datadir'})); } #----------------------------------------------------------------------------- # Routine: startup() # # Purpose: Do some initialization shtuff: # - set up Owl-specific fields # - set up signal handlers # - ensure we're the only owl-transfer running # - handle the -stop argument # sub startup { # # Read the sensor configuration file. # owl_setup($NAME,$confdir,$datadir,$logdir); if(owl_readconfig($conffile,$datadir,$logdir) != 0) { exit(2); } # # Get the proper data directory name. # $confdir = setparam('confdir',$confdir,$owlutils::confdir,$DEF_CONFDIR); $datadir = setparam('datadir',$datadir,$owlutils::datadir,$DEF_DATADIR); $logdir = setparam('logdir',$logdir,$owlutils::logdir,$DEF_LOGDIR); exit(1) if(owl_chkdir('data', $datadir) == 1); exit(1) if(owl_chkdir('log', $logdir) == 1); # # Set up our log file. # $xlog = owl_setlog($NAME,$logdir); # # Add the base directory if this isn't an absolute path. # We'll also handle a special case so we don't add the base # directory multiple times. # if($datadir !~ /^\//) { if($datadir =~ /^\.\//) { $datadir =~ s/^../$curdir/; } if(($basedir ne ".") || ($datadir !~ /^\.\//)) { $datadir = glob("$basedir/$datadir"); } } # # Set up our signal handlers. # $SIG{HUP} = \&cleanup; $SIG{INT} = \&cleanup; $SIG{QUIT} = \&cleanup; $SIG{TERM} = \&cleanup; $SIG{USR1} = 'IGNORE'; $SIG{USR2} = 'IGNORE'; # # If the user wants to shutdown any other owl-transfers, we'll # send them SIGHUP and exit. # if($stopper) { owl_halt($NAME); exit(0); } # # Make sure we're the only owl-transfer running. We'll also allow a # user to signal the other owl-transfer to shut down. # if(owl_singleton(0) == 0) { print STDERR "$NAME already running\n"; exit(2); } # # Ensure several directories are absolute paths. # $datadir = "$curdir/$datadir" if($datadir !~ /^\//); } #------------------------------------------------------------------------ # Routine: setparam() # # Purpose: Figure out the value of a particular parameter, depending on # whether it was given as a command-line option or a config file # value. It may be a default if none of the others was given. # The precedence (greatest to least) is: # command-line argument # configuration-file value # default # sub setparam { my $str = shift; # Descriptive string. my $arg = shift; # Command line argument. my $cval = shift; # Configuration file value. my $dval = shift; # Default value. my $val; # Value to use. $val = $dval; $val = $cval if(defined($cval)); $val = $arg if(defined($arg)); return($val); } #----------------------------------------------------------------------------- # Routine: teleporter() # # Purpose: This routine periodically transfers files from the sensor # to the Owl manager. # sub teleporter { my $args; # Arguments for rsync. my %errxfers = (); # Count of each ssh-user's failed transfers. # # Set up our immutable command-line arguments. # $args = "--timeout=60 --partial --append --stats"; print STDERR "$NAME starting\n"; # # Forevermore we shall transfer files betwixt hither and yons. # while(42) { # # Go through the list of file destinations, and do an # rsync for each one. # foreach my $sshuser (@sshusers) { my @args; # Separated arguments. my $sensor; # Sensor portion. my $rshargs; # rsh-arguments portion. my $cmd; # Command for rsync. my $out; # Output from rsync. my $err; # rsync return code. # # Set up our command line and arguments. The sshuser # line has this format: # user@host;ssh arguments # The ssh arguments are whatever is needed for # owl-transfer to ssh to this particular sensor. # @args = split /;/, $sshuser; $sensor = $args[0]; $rshargs = "--rsh=\"ssh $args[1]\""; $cmd = "rsync -ar $rshargs $args"; # # Do the transfer for this sensor. # $out = `$cmd $datadir $sensor:`; $err = $? >> 8; # # Give info on this transfer, if it is desired. # if($verbose) { my $chronos; # Timestamp. my $numstr; # Files transferred. my $msg; # Message string. # # Get timestamp for message. # $chronos = gmtime; chomp $chronos; # # Build the message. # $out =~ /(Number of files transferred:\s+\d+)\n/g; $numstr = $1; $msg = "$numstr \t$sensor"; print "$chronos: $msg\n" if($numstr ne ''); logger($msg); } # # If the transfer failed, report an error and bump # the error-transfer count. # if($err) { my $msg = "problem transferring files, error return $err; command - $cmd $sensor"; print STDERR "$msg\n"; logger($msg); $errxfers{$sshuser}++; } # # Write a periodic log message with the count of # transfers that have taken place. This will show # the same number of transfers each time, so it's # more of an "I'm alive" message to the log file. # if($xfercnt == $LOGCNT) { my $msg; # Message text. my $errs = $errxfers{$sshuser}; # Error count. # # Build the message. # $msg = "$xfercnt transfer attempts to $sensor"; $msg .= "; $errs failed" if($errs > 0); # # Write the message. # logger($msg); # # Reset for next round. # $xfercnt = 0; $errxfers{$sshuser} = 0; } } # # Bump our transfer count and wait for a bit. # $xfercnt++; sleep($xferint); } } #------------------------------------------------------------------------ # Routine: cleanup() # # Purpose: Close up shop. # sub cleanup { print STDERR "$NAME shutting down\n"; # # Remove the process-id file. # print STDERR "$NAME: unlinking pidfile \"$pidfile\"\n" if($verbose); unlink($pidfile); exit(0); } #-------------------------------------------------------------------------- # Routine: vprint() # sub vprint { my $str = shift; print "$str" if($verbose); } #-------------------------------------------------------------------------- # Routine: logger() # sub logger { my $str = shift; my $outflag = shift; $xlog->log(level => 'info', message => $str); # vprint("$NAME: $str\n") if($outflag); } #-------------------------------------------------------------------------- # Routine: version() # sub version { print STDERR "$VERS\n"; print STDERR "$DTVERS\n"; exit(0); } #-------------------------------------------------------------------------- # Routine: usage() # sub usage { print "owl-transfer [options]\n"; print "\toptions:\n"; print "\t\t-confdir directory\n"; print "\t\t-config file\n"; print "\t\t-datadir directory\n"; print "\t\t-logdir directory\n"; print "\n"; print "\t\t-foreground\n"; print "\t\t-fg\n"; print "\t\t-stop\n"; print "\n"; print "\t\t-verbose\n"; print "\t\t-Version\n"; print "\t\t-help\n"; exit(0); } ########################################################################### =pod =head1 NAME owl-transfer - Transfers Owl sensor data to Owl manager =head1 SYNOPSIS owl-transfer [options] =head1 DESCRIPTION B transfers Owl sensor data from an Owl sensor host to its manager host. B sets itself up as a daemon and periodically transfers new files to the Owl manager. The manager will display the data so that nameserver response times may be monitored. The data-transfer operations are performed by B over an B connection. The efficiency of B will minimize the impact on network resources. B will protect the sensor data while it is in transit, and it will also protect the Owl manager from unauthorized access. The B configuration file defines the data that will be transferred, the transfer destination, and the transfer frequency. The following fields are used: Configuration Field owl-transfer Use data dir location of data to transfer data interval number of seconds between transfers manager ssh-user user@host for ssh/rsync use The default configuration file is B in the execution directory. If that file is not found, then B will be used. A configuration file may also be specified on the command line. The default data directory is B in the execution directory. It is expected that B will be used in conjunction with B. B will provide the data files to the Owl manager, while B will (in time) move the data files from the sensor's data directory into an archive directory. =head1 OPTIONS B takes the following options: =over 4 =item B<-confdir> This option specifies the directory from which sensor configuration data will be read. The process-id file will also be stored here. =item B<-config> This option specifies the configuration file to use. =item B<-datadir> This option specifies the directory from which sensor data will be transferred to the Owl manager. =item B<-fg> =item B<-foreground> This option causes B to run in the foreground, rather than as a daemon. =item B<-logdir> This option specifies the directory for logging. =item B<-stop> Stops the execution of an existing B process. =item B<-verbose> This option provides verbose output. =item B<-Version> This option provides the version of B. =item B<-help> This option displays a help message and exits. =back =head1 SEE ALSO B, B, B, B, B, B B =head1 COPYRIGHT Copyright 2012-2013 SPARTA, Inc. All rights reserved. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =cut dnssec-tools-2.0/apps/owl-monitor/sensor/bin/owl-needs0000775000237200023720000001123512107530766023266 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2012-2013 SPARTA, Inc. All rights reserved. See the COPYING # file distributed with this software for details. # # owl-needs # # This script reports the presence of Perl modules required by Owl. # # Revision History: # 1.0 121218 Initial version. # use strict; use Getopt::Long qw(:config no_ignore_case_always); # # Version information. # my $NAME = "owl-needs"; my $VERS = "$NAME version: 2.0.0"; my $DTVERS = "DNSSEC-Tools version: 2.0"; #------------------------------------------------------------------------ # # Data required for command line options. # my %options = (); # Filled option array. my @opts = ( "list", # List modules to be checked. "help", # Give help message. "Version", # Give version info. "verbose", # Give verbose output. ); my $listonly = 0; # Only show module list flag. my $verbose = 0; # Verbose flag. #------------------------------------------------------------------------ # # Modules whose presence will be verified. # my @needed_modules = ( 'Cwd', 'Date::Format', 'Exporter', 'FindBin', 'Getopt::Long', 'LWP::Simple', 'Log::Dispatch::FileRotate', 'Log::Dispatch', 'Net::DNS::Packet', 'Net::DNS::Resolver', 'Net::DNS', 'POSIX', 'Time::HiRes', 'Time::Local', 'threads', 'threads::shared', 'Thread::Queue', ); my $errs = 0; # Count of unfound modules. #------------------------------------------------------------------------ main(); exit($errs); #------------------------------------------------------------------------ # Routine: main() # sub main { # # Check our options and read the configuration file. # doopts(); # # Go through the module list and do The Right Thing. # foreach my $nm (@needed_modules) { # # If we're just listing the modules, print the name # and continue onwards. # if($listonly) { print "$nm\n"; next; } # # Check the module's presence and respond appropriately. # if( eval " require $nm " == 0) { if($verbose) { print "$nm not found - $@\n"; } else { print "$nm: $@\n"; } $errs++; } else { print "$nm found\n" if($verbose); } } # # Print a success message -- if we had complete success and we # aren't just listing the modules. # if(($errs == 0) && ($listonly == 0)) { print "\n" if($verbose); print "all Perl modules found\n"; } } #------------------------------------------------------------------------ # Routine: doopts() # sub doopts { # # Parse the options. # GetOptions(\%options,@opts) || usage(); # # Handle a few immediate flags. # version() if(defined($options{'Version'})); usage(1) if(defined($options{'help'})); # # Set our option variables based on the parsed options. # $verbose = $options{'verbose'}; $listonly = $options{'list'}; if($verbose && $listonly) { print STDERR "-verbose and -list are mutually exclusive\n"; exit(1); } } #---------------------------------------------------------------------- # Routine: version() # # Purpose: Print the version number(s) and exit. # sub version { print STDERR "$VERS\n"; print STDERR "$DTVERS\n"; exit(0); } #----------------------------------------------------------------------------- # Routine: usage() # sub usage { print STDERR "usage: $0 [options]\n"; print STDERR "\t\where options are:\n"; print STDERR "\t\t-list\n"; print STDERR "\t\t-verbose\n"; print STDERR "\t\t-help\n"; print STDERR "\t\t-Version\n"; exit(0); } #-------------------------------------------------------------------------- =pod =head1 NAME owl-needs - reports presence of Perl modules required by Owl sensors =head1 SYNOPSIS owl-needs [options] =head1 DESCRIPTION B reports the presence or absence of Perl modules required by scripts on Owl sensors. If no options are given, then those modules that aren't found will be reported. The result of the module's failed B will be reported. The count of unfound modules will be the command's exit code. =head1 OPTIONS =over 4 =item B<-list> Lists the modules that will be checked, but does not perform any checks. This option may not be used with the B<-verbose> option. =item B<-verbose> Prints the found/not-found status of each module to be checked. This option may not be used with the B<-list> option. =item B<-help> Prints a help message. =item B<-Version> Prints B' version and exit. =back =head1 SEE ALSO B, B, B, B, B, B) B =head1 COPYRIGHT Copyright 2012-2013 SPARTA, Inc. All rights reserved. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =cut dnssec-tools-2.0/apps/owl-monitor/sensor/bin/owl-dnstimer0000775000237200023720000006006512107530766024022 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2012-2013 SPARTA, Inc. All rights reserved. See the COPYING # file distributed with this software for details. # # owl-dnstimer Owl Monitoring System # # This script runs timing tests for DNS lookups. It starts a query # entity (thread or subprocess) for each of a set of queries defined in # the Owl configuration file. Each thread periodically sends a DNS # request for a specified host to a particular nameserver. The time # taken to fulfill the request is recorded for later transfer to the Owl # manager. # use strict; # # Version information. # my $NAME = "owl-dnstimer"; my $VERS = "$NAME version: 2.0.0"; my $DTVERS = "DNSSEC-Tools version: 2.0"; use FindBin; use lib "$FindBin::Bin/../perllib"; use owlutils; use Getopt::Long qw(:config no_ignore_case_always); use Net::DNS; use Net::DNS::Packet; use Net::DNS::Resolver; # # Before including the threads module, we'll make sure we're able to. # If we can, we'll be happy campers. # If we can't, we'll continue and be forky instead of thready. # my $runthreaded; # Flag for running threaded. if(eval { require threads } == 1) { require threads; $runthreaded = 1; } else { $runthreaded = 0; } use threads::shared; use Log::Dispatch; use Log::Dispatch::FileRotate; use Date::Format; use POSIX qw(setsid SIGUSR1 SIGUSR2); use Time::HiRes qw(time); #------------------------------------------------------------------------ # Defaults and some constants. my $NSBASE = 'root-servers.net'; # Base name for root servers. my $DEF_CONFIG = $owlutils::DEF_CONFIG; # Default config file nodename. my $DEF_CONFDIR = $owlutils::DEF_CONFDIR; # Default config directory. my $DEF_DATADIR = $owlutils::DEF_DATADIR; # Default data directory. my $DEF_LOGDIR = $owlutils::DEF_LOGDIR; # Default log directory. my $PIDFILE = "$NAME.pid"; # Filename of process-id file. #------------------------------------------------------------------------ # # Data required for command line options. # my %options = (); # Filled option array. my @opts = ( "confdir|cd=s", # Specify config directory. "config|cf=s", # Specify config file. "datadir=s", # Specify data directory. "logdir=s", # Specify log directory. "defaults", # Print defaults. "foreground|fg", # Run in foreground. "stop", # Stop execution. "help", # Give help message. "Version", # Give version info. "verbose", # Give verbose output. ); my $verbose = 0; my $confdir; # Config directory. my $config; # Config file. my $datadir; # Data directory. my $foreground; # Foreground-execution flag. my $logdir; # Log directory. my $logfile; # Log file. my $stopper; # Stop-execution flag. #------------------------------------------------------------------------ # # Error strings for log messages. This is indexed by a code set in nstimer(). # my @errors = ( 'NOERROR', # 0 'FORMERR', # 1 'SERVFAIL', # 2 'NXDOMAIN', # 3 'NOTIMP', # 4 'REFUSED', # 5 'YXDOMAIN', # 6 'YXRRSET', # 7 'NXRRSET', # 8 'NOTAUTH', # 9 'NOTZONE', # 10 'UNASSIGNED', # 11 'UNASSIGNED', # 12 'UNASSIGNED', # 13 'UNASSIGNED', # 14 'UNASSIGNED', # 15 'BADVERS/BADSIG', # 16 'BADKEY', # 17 'BADTIME', # 18 'BADMODE', # 19 'BADNAME', # 20 'BADALG', # 21 'BADTRUNC', # 22 ); my $MAXERR = 22; # Maximum error. #------------------------------------------------------------------------ # # Constants for configuration data. # my $idletime = 1 * 60; # Main thread wait time. #------------------------------------------------------------------------ # Data and log message data. # my $sensorlog; # Sensor's log object. my %loginfo = (); # Logging information. my $nextroll = 0; # Time of next datafile rollover. my $pidfile; # Name of process-id file. my $sensorname; # Sensor's name from config file. #------------------------------------------------------------------------ # Threads and queries. # our @cf_targets = (); # List of targets. our @cf_servers = (); # List of nameservers. our @cf_qtypes = (); # List of query types. our @cf_intervals = (); # List of query intervals. our @cf_timeouts = (); # List of query timeouts. our @cf_rollints = (); # Datafile rollover interval. our @cf_states = (); # State of targets. my @seekers = (); # Query entity objects. my @resolvers = (); # Resolver objects. my @datafiles = (); # Datafiles for queries. my @datafds = (); # Descriptors for datafiles. #------------------------------------------------------------------------ main(); exit(0); #------------------------------------------------------------------------ # Routine: main() # sub main { my $nscount = 0; # Number of query entities started. # # Check our options and read the configuration file. # doopts(); owl_setup($NAME,$confdir,$datadir,$logdir); if(owl_readconfig($config,$datadir,$logdir) != 0) { exit(2); } # # Perform initialization steps. # startup(); exit(1) if(owl_chkdir('data', $datadir) == 1); exit(1) if(owl_chkdir('log', $logdir) == 1); # # Daemonize ourself. # if((! $foreground) && fork()) { print "$NAME started and running as daemon\n"; exit(0); } POSIX::setsid() if(! $foreground); owl_writepid(); # # Build a name resolver object for each target/query. # makeresolvers(); # # Print the nameservers we're using. # printnss(); # # Start a query entity for each nameserver that has a valid entry. # $sensorlog->warning("creating queries for each target/nameserver pair"); print STDERR "master starting query-entities\n" if($verbose); for(my $ind=0; $ind < @cf_targets; $ind++) { $datafds[$ind] = -1; next if($cf_states[$ind] == 0); push @seekers, forge($ind); $nscount++; } # # Complain and exit if we didn't start any query entities. # if($nscount == 0) { $sensorlog->warning("no nameserver query entities started"); print STDERR "no nameserver query entities started\n"; exit(4); } # # Master will just sit here twiddling its thumbs. # while(42) { select(undef,undef,undef,$idletime); } } #------------------------------------------------------------------------ # Routine: doopts() # sub doopts { # # Parse the options. # GetOptions(\%options,@opts) || usage(); # # Handle a few immediate flags. # version() if(defined($options{'Version'})); usage(1) if(defined($options{'help'})); owl_printdefs() if(defined($options{'defaults'})); # # Set our option variables based on the parsed options. # $confdir = $options{'confdir'} || $DEF_CONFDIR; $config = $options{'config'} || $DEF_CONFIG; $foreground = $options{'foreground'} || 0; $stopper = $options{'stop'} || 0; $verbose = $options{'verbose'}; $datadir = $options{'datadir'}; $logdir = $options{'logdir'}; # # Moosh together a few variables to build the config file. # $config = "$confdir/$config" if($config !~ /\//); } #------------------------------------------------------------------------ # Routine: startup() # sub startup { # # Set up our signal handlers. # sigurd(); # # Set up our log file.. # $sensorlog = owl_setlog($NAME); # # Shutdown any owl-dnstimer instances that are running. # if($stopper) { owl_halt('owl-dnstimer'); exit(0); } # # Make sure we're the only owl-dnstimer running. We'll also allow a # user to signal the other owl-dnstimer to shut down. # if(owl_singleton(0) == 0) { # # If we're not the only owl-dnstimer running, we'll # complain and exit. # $sensorlog->warning("$NAME already running"); print STDERR "$NAME already running\n"; exit(2); } # # Get some data set in our utilities. # $pidfile = $owlutils::pidfile; $datadir = $owlutils::datadir; $logdir = $owlutils::logdir; $sensorname = $owlutils::hostname; @cf_targets = @owlutils::cf_targets; @cf_servers = @owlutils::cf_servers; @cf_qtypes = @owlutils::cf_qtypes; @cf_intervals = @owlutils::cf_intervals; @cf_timeouts = @owlutils::cf_timeouts; @cf_rollints = @owlutils::cf_rollints; @cf_states = @owlutils::cf_states; # # Give some extra-tasty output. # if($verbose) { print "confdir - $confdir\n"; print "config - $config\n"; print "datadir - $datadir\n"; print "logdir - $logdir\n"; print "\n"; } } #------------------------------------------------------------------------ # Routine: makeresolvers() # # Purpose: Build a resolver object for each defined nameserver. # These objects will be saved in the @resolvers array. # sub makeresolvers { for(my $ind=0; $ind < @cf_servers; $ind++) { my $nsname; # Name server's name. my $res; # Resolver object. my $timeout; # Query timeout value. $nsname = $cf_servers[$ind]; $timeout = $cf_timeouts[$ind]; # # Build the resolver object. # $res = Net::DNS::Resolver->new( nameservers => [$nsname], recurse => 0, retry => 1, ); # # Set some resolver fields. # $res->cdflag(1); $res->tcp_timeout($timeout); $res->udp_timeout($timeout); # # Save this nameserver's resolver object. # push @resolvers, $res; } } #------------------------------------------------------------------------ # Routine: forge() # # Purpose: This routine creates a new query entity. If the system and # Perl support threads, we'll create a new thread. If threads # aren't supported, we'll create a new child process. # # Most calls will be to start a DNS-query entity, and the # argument is the array index for query information. If # the argument is -1, then a special entity will be created # to handle logging. # sub forge { my $qind = shift; # Query's array index. my $ret; # Return value. if($runthreaded) { # # We're running threaded, so we'll create a thread for # queries or logging. # $ret = threads->create(\&questor,$qind); } else { # # We're not running threaded, so we'll create a process # for queries. # if(($ret=fork()) == 0) { # # We'll set up for clean exits at shutdown. # $SIG{USR1} = \&sigend; # # Do the Right Thing depending on the index -- # logging for negative values, query thread for # other values. # $sensorlog->warning("starting query-proc ($$) for $cf_targets[$qind]/$cf_servers[$qind]/$cf_qtypes[$qind]") if($verbose); print STDERR "starting query-proc (pid $$) for $cf_targets[$qind]/$cf_servers[$qind]/$cf_qtypes[$qind]\n" if($verbose); questor($qind); # # We should never get here, but just in case... # exit(0); } } # # The master entity will return either the thread object or the # process id. # return($ret); } #------------------------------------------------------------------------ # Routine: questor() # # Purpose: This routine runs the nameserver timing queries. It is run # in a separate entity (thread or process) for each target/ # nameserver/query-type triplet. # sub questor { my $qind = shift; # Query's array index. my $target; # Query's target host. my $ns; # Query's name server. my $dfn = ''; # Datafile name. $target = $cf_targets[$qind]; $ns = $cf_servers[$qind]; while(42) { my $now; # Current time. my $later; # Next time to run. my $naptime; # Time to sleep. # # Get the name of the current data file and save it in the # @datafiles array. We may roll the data file. # getdatafile($qind,$ns); # # Give some verbose output about the change in datafile. # if($verbose && ($dfn ne $datafiles[$qind])) { print STDERR "new datafile - $datafiles[$qind]\n"; $sensorlog->warning("new datafile - $datafiles[$qind]"); $dfn = $datafiles[$qind]; } # # Get the time we're supposed to check again. # $later = time() + $cf_intervals[$qind]; # # Run our timing check of the nameserver. # nstimer($qind); # # Calculate how much time we need to sleep, based on # how much time we spent in the ns timing check. # $now = time(); $naptime = sprintf("%1.0f", ($later - $now)); # # And let's wait for our next checkup time. # sleep($naptime); } } #------------------------------------------------------------------------ # Routine: getdatafile() # sub getdatafile { my $qind = shift; # Query index. my $ns; # Nameserver on whose behalf we're working. my $tg; # Target we're querying. my $qt; # Query type. my $ctime = time(); # Current time. my @cronos; # Current GMT time, broken out into atoms. my $datafn; # Full data path to new data file. my $datafd; # File descriptor to new data file. # # Use the current datafile if the next rollover time is yet to come. # return if($nextroll > $ctime); # # Build the filename for the next datafile. # $ns = $cf_servers[$qind]; $tg = $cf_targets[$qind]; $qt = $cf_qtypes[$qind]; @cronos = gmtime($ctime); $datafiles[$qind] = sprintf("%02d%02d%02d.%02d%02d,$sensorname,$tg,$ns,$qt.dns", $cronos[5] % 100, $cronos[4] + 1, $cronos[3], $cronos[2], $cronos[1]); # # Create a new data file. # $datafn = "$datadir/$datafiles[$qind]"; if(($datafd=new IO::File "> $datafn") == 0) { logmsg("$tg:$ns: unable to open $datafn : $!"); $seekers[$qind]->join() if($runthreaded); } # # Close the old data file. # if($datafds[$qind] != -1) { my $dfd; # Datafile descriptor. $dfd = $datafds[$qind]; $dfd = $$dfd; $dfd->close(); } # # Save the new file descriptor. # autoflush $datafd, 1; $datafds[$qind] = \$datafd; logmsg("$tg:$ns: changing to new datafile $datafn"); # # Calculate the time for the next datafile rollover. # $nextroll = $ctime + $cf_rollints[$qind]; } #------------------------------------------------------------------------ # Routine: nstimer() # # Purpose: Send a message to a nameserver and time how long it takes # for a response to arrive. We'll then log the message and # response time for use by a monitor. This is timing how # long it takes a nameserver to respond to a request. # sub nstimer { my $qind = shift; # Query index. my $target; # Target host. my $ns; # Name server. my $resolver; # Resolver object. my $resp; # Resolver's response. my $reply = 'undefined response'; # Reply message. my $rcode = -1; # send() error code. my $qtype; # Query type. my $family = 'IN'; # Address family. my $time0; # Start time. my $time1; # Stop time. my $timediff; # Time difference. # # Get the some objects. # $ns = $cf_servers[$qind]; $target = $cf_targets[$qind]; $qtype = $cf_qtypes[$qind]; $resolver = $resolvers[$qind]; # # Make sure we were given a nameserver. # if(!defined($ns)) { $sensorlog->warning("nstimer: undefined nameserver"); print STDERR "nstimer: undefined nameserver\n"; return; } # # If we want an anycast result, we'll have to adjust some fields. # if($qtype =~ /^anycast$/i) { $target = 'hostname.bind'; $qtype = 'TXT'; $family = 'CH'; } # # Send the query to the nameserver, and time the query. # $time0 = time(); $resp = $resolver->send($target, $qtype, $family); $time1 = time(); $timediff = $time1 - $time0; # # We'll try to make sense of the answer, if one was returned. # if(defined($resp)) { $rcode = $resp->header->rcode; # # If there's an answer, we'll stuff the text response # into the reply string. # if(($resp->header->ancount > 0) && defined($resp->answer)) { foreach my $txtrr ($resp->answer) { $reply = $txtrr->string; } } } # # Send the answer off to be logged. # savedatum($qind,$reply,$rcode,$time0,$timediff); } #------------------------------------------------------------------------ # Routine: savedatum() # # Purpose: Save a data point -- found in nstimer() -- to our data file. # sub savedatum { my $qind = shift; # Query index. my $reply = shift; # Nameserver's reply. my $rcode = shift; # Success value of query. my $cronos = shift; # Time test was run. my $td = shift; # Time to run test. my $qtype; # Query type. my $succstr; # Success code string. my $anycast = ''; # Nameserver's anycast instance. my $msg; # Formatted message to send. my $dfd; # Datafile descriptor. # # Get some data -- local variable for quick-access. # $qtype = $cf_qtypes[$qind]; # # If the anycast request was successful, we'll get the anycast # server's name. # if(($qtype eq 'ANYCAST') && ($rcode eq 'NOERROR')) { $reply =~ /"(.*)"/; $anycast = $1; } # # Get the success string for the query. # $succstr = $rcode; $msg = sprintf("%10.5f $cf_targets[$qind] $cf_servers[$qind] $qtype %10.15f $succstr $anycast",$cronos,$td); # # Send the message to our log file. # logmsg($msg); $dfd = $datafds[$qind]; $dfd = $$dfd; print $dfd "$msg\n"; } #------------------------------------------------------------------------ # Routine: logmsg() # # Purpose: Send the message to our log file -- via the log thread if # we're threaded, directly if not. # sub logmsg { my $msg = shift; # Message to log. $sensorlog->log(level => 'info', message => $msg); } #------------------------------------------------------------------------ # Routine: sigurd() # # Purpose: Set up signal handlers. # sub sigurd { $SIG{HUP} = \&cleanup; $SIG{INT} = \&cleanup; $SIG{QUIT} = \&cleanup; $SIG{TERM} = \&cleanup; $SIG{USR1} = 'IGNORE'; $SIG{USR2} = \&sigmund; } #------------------------------------------------------------------------ # Routine: sigmund() # # Purpose: Dummy signal handler for SIGUSR2. # sub sigmund { print "$NAME: use \"$NAME -stop\" to shutdown\n"; } #------------------------------------------------------------------------ # Routine: sigend() # # Purpose: Signal handler for SIGUSR2 for query subprocs. This is # only used if we're unthreaded. # sub sigend { exit(0); } #------------------------------------------------------------------------ # Routine: cleanup() # # Purpose: Close down query entities. # sub cleanup { if($runthreaded) { # # Shut down the query threads. # $sensorlog->warning("shutting down query-threads"); for(my $qind=0; $qind < @seekers; $qind++) { my $qt = $seekers[$qind]; my $tid = $qt->tid(); $sensorlog->warning("shutting down query-entity for $cf_targets[$qind]/$cf_servers[$qind]") if($verbose); $qt->kill('SIGUSR2')->detach(); } } else { # # Shut down the query subprocesses. # $sensorlog->warning("shutting down query-procs"); for(my $qind=0; $qind < @seekers; $qind++) { my $qp = $seekers[$qind]; $sensorlog->warning("shutting down query-proc for $cf_targets[$qind]/$cf_servers[$qind]") if($verbose); kill(SIGUSR1, $qp); } } # # Remove the process-id file. # $sensorlog->warning("unlinking pidfile $pidfile") if($verbose); print STDERR "\n\nunlinking pidfile \"$pidfile\"\n" if($verbose); unlink($pidfile); # # Wait a moment for the final log message to be written. # $sensorlog->warning("shutting down..."); print STDERR "$NAME shutting down...\n" if($verbose); sleep(1); exit(0); } #------------------------------------------------------------------------ # Routine: printnss() # # Purpose: Print config info for each defined target/nameserver pair. # sub printnss { return if(!$verbose); for(my $qind=0; $qind < @cf_servers; $qind++) { my $msg; $msg = sprintf("%10s/%10s: interval %d, timeout %d, state %s, rollint %d", $cf_targets[$qind], $cf_servers[$qind], $cf_intervals[$qind], $cf_timeouts[$qind], $cf_states[$qind] ? 'active' : 'inactive', $cf_rollints[$qind]); $sensorlog->warning("$msg"); } } #---------------------------------------------------------------------- # Routine: version() # # Purpose: Print the version number(s) and exit. # sub version { print STDERR "$VERS\n"; print STDERR "$DTVERS\n"; exit(0); } #----------------------------------------------------------------------------- # Routine: usage() # sub usage { print STDERR "usage: $0 [options]\n"; print STDERR "\t\where options are:\n"; print STDERR "\t\t-confdir config-directory\n"; print STDERR "\t\t-cd config-directory\n"; print STDERR "\t\t-config config-file\n"; print STDERR "\t\t-cf config-file\n"; print STDERR "\t\t-datadir data-directory\n"; print STDERR "\t\t-defaults\n"; print STDERR "\t\t-foreground\n"; print STDERR "\t\t-fg\n"; print STDERR "\t\t-logdir log-directory\n"; print STDERR "\t\t-stop\n"; print STDERR "\t\t-help\n"; print STDERR "\t\t-verbose\n"; print STDERR "\t\t-Version\n"; exit(0); } #-------------------------------------------------------------------------- =pod =head1 NAME owl-dnstimer - DNS query timer for the Owl Monitoring System =head1 SYNOPSIS owl-dnstimer [options] =head1 DESCRIPTION B runs timing tests of DNS lookups. It starts a set of threads, each of which periodically sends a DNS query for a specified target host to a particular nameserver. The DNS query type, target, and nameserver are defined in the Owl configuration file. The time taken from query to response is saved in a file specifically for that nameserver, target, and query type. The data so collected are intended to be used in the Owl system to track the responsiveness of DNS nameservers. The B configuration file defines which nameservers are contacted, as well as how often they are contacted. B maintains a log file that tracks the status of requests and query status. B's configuration and data files, as well as the layout for the environment, are described in their own man pages. B will run threaded if the operating system or the installed version of Perl allow. In this case, each query will be handled by its own thread. If threaded execution is not allowed, then each query will be handled by its own process. =head2 FILE ORGANIZATION B assumes that the file hierarchy for the sensor is arranged like this: bin/owl-dnstimer conf/owl.conf data/ log/ These directories maybe be in the home directory of the executing user, or they may be located in another directory elsewhere. However, the four directories should be kept together. Several options are available that alter this behavior. If these options are used, then this default file hierarchy need not be followed. =head1 OPTIONS =over 4 =item B<-confdir config-directory> =item B<-cd config-directory> Specifies the directory that holds the B configuration file. If this is not given, then the default B name will be used. If this is a relative path, it will be relative from the point of execution. The B file is stored in this directory. =item B<-config config-file> =item B<-cf config-file> Specifies the B configuration file. If I does not contain any directory nodes, then the specified name will be prefixed with the configuration directory. If it does contain directory nodes, the configuration directory (default or option-specified) will be ignored. If this is not given, then the default B name will be used. =item B<-datadir data-directory> Specifies the directory that will hold the B data files. If this is not given, then the default B name will be used. If this is a relative path, it will be relative from the point of execution. If this directory doesn't exist, it will be created. =item B<-defaults> Print the query default values for B and exit. These are the program defaults, not the configuration- and option-enhanced values. =item B<-foreground> =item B<-fg> B will run as a foreground process if either of these options is given. Otherwise, it will run as a daemon. =item B<-logdir log-directory> Specifies the directory that will hold the B log files. If this is not given, then the default B name will be used. If this is a relative path, it will be relative from the point of execution. If this directory doesn't exist, it will be created. =item B<-stop> Stops the execution of an existing B process. =item B<-help> Prints a help message. =item B<-verbose> Prints verbose output. =item B<-Version> Prints B's version and exit. =back =head1 SEE ALSO B B, B =head1 COPYRIGHT Copyright 2012-2013 SPARTA, Inc. All rights reserved. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =cut dnssec-tools-2.0/apps/owl-monitor/sensor/bin/owl-heartbeat0000775000237200023720000001507112107530766024131 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2012-2013 SPARTA, Inc. All rights reserved. See the COPYING # file distributed with this software for details. # # owl-heartbeat Owl Monitoring System # # This script contacts an Owl manager to give a "heartbeat" notice. # # Revision History: # 1.0 121201 Initial version. # use strict; use FindBin; use lib "$FindBin::Bin/../perllib"; use owlutils; use Getopt::Long qw(:config no_ignore_case_always); use LWP::Simple; # # Version information. # my $NAME = "owl-heartbeat"; my $VERS = "$NAME version: 2.0.0"; my $DTVERS = "DNSSEC-Tools version: 2.0"; #------------------------------------------------------------------------ # Defaults and some constants. my $NSBASE = 'root-servers.net'; # Base name for root servers. my $DEF_CONFIG = $owlutils::DEF_CONFIG; # Default config file nodename. my $DEF_CONFDIR = $owlutils::DEF_CONFDIR; # Default config directory. my $DEF_DATADIR = $owlutils::DEF_DATADIR; # Default data directory. my $DEF_LOGDIR = $owlutils::DEF_LOGDIR; # Default log directory. #------------------------------------------------------------------------ # # Data required for command line options. # my %options = (); # Filled option array. my @opts = ( "confdir|cd=s", # Specify config directory. "config|cf=s", # Specify config file. "datadir=s", # Specify data directory. "logdir=s", # Specify log directory. "help", # Give help message. "Version", # Give version info. "verbose", # Give verbose output. ); my $verbose = 0; my $confdir; # Config directory. my $config; # Config file. my $datadir; # Data directory. my $logdir; # Log directory. my $logfile; # Log file. #------------------------------------------------------------------------ # Data and log message data. # #------------------------------------------------------------------------ main(); exit(0); #------------------------------------------------------------------------ # Routine: main() # sub main { my @hburls; # Heartbeat URLs. my $sname; # Name of this sensor. my $resp; # Response from manager. # # Check our options and read the configuration file. # doopts(); owl_setup($NAME,$confdir,$datadir,$logdir); if(owl_readconfig($config,$datadir,$logdir) != 0) { exit(2); } # # Get some data set in our utilities. # @hburls = @owlutils::heartbeaturls; $sname = $owlutils::hostname; if(@hburls == 0) { print STDERR "undefined heartbeat URL\n"; exit(1); } # # Go through the URL list and try to contact each. # foreach my $hburl (@hburls) { # # Add the sensor's name to the URL. # $hburl .= "?sensor=$sname"; # print "hburl - <$hburl>\n\n"; # # We'll save the response, but for now we're also ignoring it. # $resp = get($hburl); } } #------------------------------------------------------------------------ # Routine: doopts() # sub doopts { # # Parse the options. # GetOptions(\%options,@opts) || usage(); # # Handle a few immediate flags. # version() if(defined($options{'Version'})); usage(1) if(defined($options{'help'})); # # Set our option variables based on the parsed options. # $confdir = $options{'confdir'} || $DEF_CONFDIR; $config = $options{'config'} || $DEF_CONFIG; $datadir = $options{'datadir'}; $logdir = $options{'logdir'}; $verbose = $options{'verbose'}; # # Moosh together a few variables to build the config file. # $config = "$confdir/$config" if($config !~ /\//); } #----------------------------------------------------------------------------- # Routine: version() # # Purpose: Print the version number(s) and exit. # sub version { print STDERR "$VERS\n"; print STDERR "$DTVERS\n"; exit(0); } #----------------------------------------------------------------------------- # Routine: usage() # sub usage { print STDERR "usage: $0 [options]\n"; print STDERR "\t\where options are:\n"; print STDERR "\t\t-confdir config-directory\n"; print STDERR "\t\t-cd config-directory\n"; print STDERR "\t\t-config config-file\n"; print STDERR "\t\t-cf config-file\n"; print STDERR "\t\t-datadir data-directory\n"; print STDERR "\t\t-logdir log-directory\n"; print STDERR "\t\t-help\n"; print STDERR "\t\t-verbose\n"; print STDERR "\t\t-Version\n"; exit(0); } #-------------------------------------------------------------------------- =pod =head1 NAME owl-heartbeat - Provides sensor heartbeat to Owl manager =head1 SYNOPSIS owl-heartbeat [options] =head1 DESCRIPTION B provides a "heartbeat" to the Owl manager. It touches a webpage on the manager host and the manager records the contact's time. The specific webpages are defined in the Owl configuration file with the I entry. B will contact each URL listed, so multiple I entries will result in multiple heartbeats. It is assumed B will be run from B rather than manually. =head1 OPTIONS =over 4 =item B<-confdir config-directory> =item B<-cd config-directory> Specifies the directory that holds the B configuration file. If this is not given, then the default B name will be used. If this is a relative path, it will be relative from the point of execution. =item B<-config config-file> =item B<-cf config-file> Specifies the B configuration file. If I does not contain any directory nodes, then the specified name will be prefixed with the configuration directory. If it does contain directory nodes, the configuration directory (default or option-specified) will be ignored. If this is not given, then the default B name will be used. =item B<-datadir data-directory> Specifies the directory that will hold the B data files. If this is not given, then the default B name will be used. If this is a relative path, it will be relative from the point of execution. If this directory doesn't exist, it will be created. =item B<-logdir log-directory> Specifies the directory that will hold the B log files. If this is not given, then the default B name will be used. If this is a relative path, it will be relative from the point of execution. If this directory doesn't exist, it will be created. =item B<-help> Prints a help message. =item B<-verbose> Prints verbose output. =item B<-Version> Prints B's version and exit. =back =head1 SEE ALSO B, B B =head1 COPYRIGHT Copyright 2012-2013 SPARTA, Inc. All rights reserved. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =cut dnssec-tools-2.0/apps/owl-monitor/sensor/bin/owl-dataarch0000775000237200023720000003143212107530766023740 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2012-2013 SPARTA, Inc. All rights reserved. See the COPYING # file distributed with this software for details. # # owl-dataarch Owl Monitoring System # # This script archives old sensor data. # It is a modified version of the dataarch command. # # Revision History # 1.0 121201 Initial version. # This was adapted from the dataarch script from # the original UEM system. # use strict; use FindBin; use lib "$FindBin::Bin/../perllib"; use owlutils; use Cwd; use Getopt::Long qw(:config no_ignore_case_always); use Time::Local; ####################################################################### # # Version information. # my $NAME = "owl-dataarch"; my $VERS = "$NAME version: 2.0.0"; my $DTVERS = "DNSSEC-Tools version: 2.0"; ################################################### # # Data required for command line options. # my %options = (); # Filled option array. my @opts = ( "archdir=s", # Top-level archive directory. "config=s", # Configuration file. "datadir=s", # Top-level data directory. "verbose", # Verbose output. "Version", # Version output. "help", # Give a usage message and exit. ); # # Flag values for the various options. Variable/option connection should # be obvious. # my $verbose = 0; # Display verbose output. ################################################### # # Constants and variables for various directories and files. # my $DEF_ARCHDIR = $owlutils::DEF_ARCHDIR; # Default archive config dir. my $DEF_CONFIG = $owlutils::DEF_CONFIG; # Default config file nodename. my $DEF_CONFDIR = $owlutils::DEF_CONFDIR; # Default config directory. my $DEF_DATADIR = $owlutils::DEF_DATADIR; # Default data directory. my $DEF_LOGDIR = $owlutils::DEF_LOGDIR; # Default log directory. my $MV = "/bin/mv"; my $curdir; # Current directory. my $archdir = $DEF_ARCHDIR; # Archive directory. my $basedir = "."; # Base directory we'll look in. my $confdir = $DEF_CONFDIR; # Configuration directory. my $conffile = "$DEF_CONFDIR/$DEF_CONFIG"; # Default config file path. my $datadir = ''; # Top-level data directory. ################################################### my @actions = (); # Archive actions to take. my $errs = 0; # Error count. ####################################################################### main(); exit(0); #-------------------------------------------------------------------------- # Routine: main() # sub main { my @keepdate; # Earliest date we'll keep. $| = 0; # # A little directory wiggling. # $curdir = getcwd(); $basedir = $curdir if($basedir eq "."); # # Check our options and read the configuration file. # doopts(); owl_setup($NAME,$confdir,$datadir,undef); if(owl_readconfig($conffile,$datadir,'') != 0) { exit(2); } # # And we'll do a bit more setup(). # setup(); if($verbose) { print "configuration parameters:\n"; print "\tcurrent directory \"$curdir\"\n"; print "\tconfiguration file \"$conffile\"\n"; print "\tarchive directory \"$archdir\"\n"; print "\tdata directory \"$datadir\"\n"; print "\n"; } # # Get the earliest date for files to keep. # @keepdate = getkeepdate(); # # Archive the specified data files. # archer(@keepdate); } #----------------------------------------------------------------------------- # Routine: doopts() # # Purpose: This routine shakes and bakes our command line options. # sub doopts { # # Parse the options. # GetOptions(\%options,@opts) || usage(); # # Handle a few immediate flags. # version() if(defined($options{'Version'})); usage(1) if(defined($options{'help'})); # # Set our option variables based on the parsed options. # $verbose = $options{'verbose'}; $conffile = $options{'config'} if(defined($options{'config'})); $archdir = $options{'archdir'}; $datadir = $options{'datadir'}; } #----------------------------------------------------------------------------- # Routine: setup() # # Purpose: This routine completes our initialization. # sub setup { # # Get the directory names. # $archdir = $owlutils::archdir; $archdir = $DEF_ARCHDIR if($archdir eq ''); $datadir = $owlutils::datadir; $datadir = $DEF_DATADIR if($datadir eq ''); # # Ensure the directories exist. # $archdir = dodir('archive',$archdir,1); $datadir = dodir('data',$datadir,0); # # Don't proceed on errors. # if($errs) { my $sfx = ($errs != 1) ? 's' : ''; # Pluralization suffix. print "$NAME: $errs error$sfx found during initialization; halting...\n"; exit(1); } # # Ensure several directories are absolute paths. # $archdir = "$curdir/$archdir" if($archdir !~ /^\//); $datadir = "$curdir/$datadir" if($datadir !~ /^\//); } #-------------------------------------------------------------------------- # Routine: dodir() # # Purpose: This routine ensures that the given directory exists. # sub dodir { my $dirstr = shift; # Directory explanation. my $dir = shift; # Directory to glob-n-check. my $mkflag = shift; # Make-directory flag. if($dir eq '') { print STDERR "no name given for $dirstr directory\n"; $errs++; return; } # # Add the base directory if this isn't an absolute path. # We'll also handle a special case so we don't add the base # directory multiple times. # if($dir !~ /^\//) { if($dir =~ /^\.\//) { $dir =~ s/^../$curdir/; } if(($basedir ne ".") || ($dir !~ /^\.\//)) { $dir = glob("$basedir/$dir"); } } # # Ensure that the directory exists. If the make-flag is set, we'll # create the directory and try again. # if(! -e $dir) { # # Make the directory and run the checks again. # if($mkflag) { vprint("creating $dirstr directory $dir\n"); mkdir($dir); dodir($dirstr,$dir,0); return($dir); } print STDERR "$dirstr directory \"$dir\" does not exist\n"; $errs++; return($dir); } # # Ensure the directory is a directory. # if(! -d $dir) { print STDERR "$dirstr directory $dir is not a directory\n"; $errs++; return($dir); } # # Return the massaged directory name. # return($dir); } #-------------------------------------------------------------------------- # Routine: getkeepdate() # # Purpose: This routine returns data indicating midnight of the day # before today. These data are returned in an array having # this structure: # # 0 two-digit year (YY) # 1 month number (MM) # 2 day number in month (DD) # 3 YYMMDD.hhmm string (hhmm are always "0000") # 4 seconds since the epoch # sub getkeepdate { my $now; # Current time. my $midnight; # Today's midnight. my $yesterday; # Yesterday's midnight. my @tempus; # Time fields. my @kdate; # Date to keep. # # Get the time fields for right now. # $now = time; @tempus = localtime($now); # # Set the clock back to midnight. # $midnight = timelocal(0, 0, 0, $tempus[3], $tempus[4], $tempus[5]); # # Set the clock to yesterday's midnight. # $yesterday = $midnight - (24 * 60 * 60); @tempus = localtime($yesterday); # # Build the date structure we're looking for. # $kdate[0] = $tempus[5] - 100; $kdate[1] = $tempus[4] + 1; $kdate[2] = $tempus[3]; $kdate[3] = sprintf("%02d%02d%02d.0000",$kdate[0],$kdate[1],$kdate[2]); $kdate[4] = $yesterday; # # Return the date fields we're looking for. # return(@kdate); } #-------------------------------------------------------------------------- # Routine: archer() # sub archer { my @keepdate = @_; # Earliest date info. my @files = (); # Files in data directory. my $lastind; # Last file in @files to save. # # Move into the data directory. # if(chdir($datadir) == 0) { print STDERR "unable to move to directory \"$datadir\"\n"; return; } # # Get a list of the files in the data directory. # @files = glob("*"); @files = sort(@files); # # Get the array index of the first file we won't archive. # $lastind = firstfile(\@files,$keepdate[3]); if($lastind > 0) { # # Must archive some files. # splice @files, $lastind; } elsif($lastind == 0) { # # No need to archive any files. # @files = (); } elsif($lastind == -1) { # # Must archive all files. # } # # Archive the files. # print "archiving $datadir\n"; filesaver(\@files); # # Return to the starting directory. # chdir($curdir); } #-------------------------------------------------------------------------- # Routine: firstfile() # # Purpose: When given a sorted array of filenames and a timestamp, it # returns the index of the first file that is older than the # timestamp. The file's age is taken from the filename. # # Return Values: # -1 All files are older than the timestamp. # 0 No archive is needed. # >-1 The index of the first file older than the timestamp. # sub firstfile { my $fileref = shift; # Reference to matching files. my $keepdate = shift; # First date to keep. my @files; # List of matching files. @files = @$fileref; for(my $ind=0; $ind < @files; $ind++) { if(($files[$ind] cmp $keepdate) >= 0) { return($ind); } } return(-1); } #-------------------------------------------------------------------------- # Routine: filesaver() # sub filesaver { my $fileref = shift; # Reference to file list. my @files; # List of files to archive. my $first; # First file's timestamp. my $last; # Last file's timestamp. # # Get the list of files to archive, and return if the list is empty. # @files = @$fileref; return if(@files == 0); # # Get the YYMM timestamps for the first and last files. # $files[0] =~ /^(....)/; $first = $1; $files[-1] =~ /^(....)/; $last = $1; # # Make sure all our archive directories exist. # for(my $ind=$first; $ind <= $last; $ind++) { my $datatop = "$archdir/data-$ind"; vprint("checking data archive $datatop\n"); dodir("data archive",$datatop,1); } for(my $ind=0; $ind < @files; $ind++) { my $cmd; # File-mover command. my $fn; # File to archive. my $yymm; # Timestamp prefix. my $ddir; # Destination directory. my $ret; # Return code. # # Get the filename and its timestamp prefix. # $fn = $files[$ind]; $fn =~ /^(....)/; $yymm = $1; # # Build the destination directory. # $ddir = "$archdir/data-$yymm/"; dodir("data archive destination",$ddir,1); $cmd = "$MV $fn $ddir"; system($cmd); $ret = $?; vprint("$cmd\n"); if(($ret >> 8) != 0) { print "mv failed\n"; exit(1); } } } #-------------------------------------------------------------------------- # Routine: vprint() # sub vprint { my $str = shift; print "$str" if($verbose); } #-------------------------------------------------------------------------- # Routine: version() # sub version { print STDERR "$VERS\n"; print STDERR "$DTVERS\n"; exit(0); } #-------------------------------------------------------------------------- # Routine: usage() # sub usage { print "owl-dataarch [options[\n"; print "\toptions:\n"; print "\t\t-archdir directory\n"; print "\t\t-datadir directory\n"; print "\t\t-config file\n"; print "\n"; print "\t\t-verbose\n"; print "\t\t-Version\n"; print "\t\t-help\n"; exit(0); } ########################################################################### =pod =head1 NAME owl-dataarch - Archives Owl sensor data =head1 SYNOPSIS owl-dataarch [options] =head1 DESCRIPTION B archives Owl sensor data on an Owl sensor host. The Owl sensor program B generates a very large number of data files. Owl system response time can be negatively impacted if these files are not periodically archived. The Owl sensor configuration file defines the data directory (where data files live) and the archive directory (where they will be archived to.) The default configuration file is in B. The data directory is defined in the I configuration entry. The archive directory is defined in the I configuration entry. The archived files are moved to a monthly archive directory. The directory's name is based on the year and month in which the data files were created. If a data file contains records from two months, such as at the turn of the month, all that file's records will be stored with the first month's data. In other words, files are maintained as is, and no data-splitting will occur. =head1 OPTIONS =over 4 =item B<-archdir> This option specifies the directory to which sensor data will be archived. =item B<-config> This option specifies the configuration file to use. =item B<-datadir> This option specifies the directory from which sensor data will be archived. =item B<-verbose> This option provides verbose output. =item B<-Version> This option provides the version of B. =item B<-help> This option displays a help message and exits. =back =head1 SEE ALSO B, B B =head1 COPYRIGHT Copyright 2012-2013 SPARTA, Inc. All rights reserved. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =cut dnssec-tools-2.0/apps/owl-monitor/sensor/bin/owl-sensord0000775000237200023720000005121512107530766023647 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2012-2013 SPARTA, Inc. All rights reserved. See the COPYING # file distributed with this software for details. # # owl-sensord Owl Monitoring System # # This script is the driver for running timing tests for DNS lookups. # # Revision History: # 1.0 121201 Initial version. # use strict; use FindBin; use POSIX qw(setsid SIGHUP); use lib "$FindBin::Bin/../perllib"; use owlutils; use Log::Dispatch; use Log::Dispatch::FileRotate; use Date::Format; use Getopt::Long qw(:config no_ignore_case_always); # # Version information. # my $NAME = 'owl-sensord'; my $VERS = "$NAME version: 2.0.0"; my $DTVERS = 'DNSSEC-Tools version: 2.0'; #------------------------------------------------------------------------ # Defaults and some constants. my $DEF_CONFIG = $owlutils::DEF_CONFIG; # Default config file nodename. my $DEF_CONFDIR = $owlutils::DEF_CONFDIR; # Default config directory. my $DEF_DATADIR = $owlutils::DEF_DATADIR; # Default data directory. my $DEF_LOGDIR = $owlutils::DEF_LOGDIR; # Default log directory. my $PIDFILE = "$NAME.pid"; # Filename of process-id file. #------------------------------------------------------------------------ # # Data required for command line options. # my %options = (); # Filled option array. my @opts = ( 'confdir=s', # Specify config directory. 'config=s', # Specify config file. 'logdir=s', # Specify log directory. 'heartbeat=i', # Specify heartbeat something. 'hesitation=i', # Sleep time between executions. 'hibernation=i', # Sleep time for minion execution problems. 'quickcount=i', # Consecutive quick executions before pausing. 'quickseconds=i', # Seconds that make a quick execution. 'foreground|fg', # Run in foreground. 'restart', # Restart daemons. 'stop', # Stop execution. 'help', # Give help message. 'Version', # Give version info. 'verbose', # Give verbose output. ); my $verbose = 0; # Verbose flag. my $confdir; # Config directory. my $config; # Config file. my $foreground; # Foreground-execution flag. my $logdir; # Log directory. my $stopper; # Stop-execution flag. my $ahes; # Sleep time between executions. my $ahib; # Sleep time for minion execution problems. my $aqc; # Consecutive quick executions before pausing. my $aqs; # Seconds that make a quick execution. #------------------------------------------------------------------------ # # Defaults and values for preventing runaway executions. # my $DEF_HESITATION = 2; # Sleep time between executions. my $DEF_HIBERNATION = 5 * 60; # Sleep time for minion execution problems. my $DEF_QUICKCOUNT = 5; # Number of consecutive quick executions # before we hibernate for a bit. my $DEF_QUICKSECONDS = 20; # Number of seconds that make a quick execution. my $hesitation; # Sleep time between executions. my $hibernation; # Sleep time for minion execution problems. my $quickcount; # Consecutive quick executions before pausing. my $quickseconds; # Seconds that make a quick execution. #------------------------------------------------------------------------ my $slog; # Sensor's log object. my %loginfo = (); # Logging information. my $pidfile; # Name of process-id file. my %chronos = (); # Start times of children. my %children = (); # Commands run for children. my %quickies = (); # Commands running to quickly. #------------------------------------------------------------------------ main(); exit(0); #------------------------------------------------------------------------ # Routine: main() # sub main { # # Check our options. # doopts(); # # Perform initialization steps. # startup(); # # Write a starting-up log message. # logger("starting $NAME",0); # # And now we'll run our subdaemons. # runner(); } #------------------------------------------------------------------------ # Routine: doopts() # sub doopts { # # Parse the options. # GetOptions(\%options,@opts) || usage(); # # Handle a few immediate flags. # version() if(defined($options{'Version'})); usage(1) if(defined($options{'help'})); # # Set our option variables based on the parsed options. # $confdir = $options{'confdir'} || $DEF_CONFDIR; $config = $options{'config'} || $DEF_CONFIG; $logdir = $options{'logdir'} || $DEF_LOGDIR; $foreground = $options{'foreground'} || 0; $stopper = $options{'stop'} || 0; $verbose = $options{'verbose'}; # # Get values for fast-execution throttling. # $ahes = $options{'hesitation'}; $ahib = $options{'hibernation'}; $aqc = $options{'quickcount'}; $aqs = $options{'quickseconds'}; # # Moosh together a few variables to build the config file name. # $config = "$confdir/$config" if($config !~ /\//); } #------------------------------------------------------------------------ # Routine: startup() # sub startup { my $hostname = `hostname`; # Sensor's hostname. # # Set up the Owl environment. # if(owl_readconfig($config,(),$logdir) != 0) { exit(2); } owl_setup($NAME,$confdir,'',$logdir); $confdir = setparam('confdir',$confdir,$owlutils::confdir,$DEF_CONFDIR); $logdir = setparam('logdir',$logdir,$owlutils::logdir,$DEF_LOGDIR); exit(1) if(owl_chkdir('data', $owlutils::datadir) == 1); exit(1) if(owl_chkdir('log', $owlutils::logdir) == 1); # # Set up our signal handlers. # sigurd(); # # Set up our log file. # $slog = owl_setlog($NAME,$logdir); # # Clean up if the -stop flag was given. # halter() if($stopper); # # Make sure we're the only owl-sensord running. We'll also allow a # user to signal the other owl-sensord to shut down. # if((my $pid = running()) != 0) { # # If the user wants to shutdown the other owl-sensord, we'll # send it SIGHUP. If not, we'll complain and exit. # if($stopper) { print "halting $NAME (pid $pid)\n"; if(kill(SIGHUP,$pid) == 0) { print "unable to send interrupt to shutdown $NAME (pid $pid)\n"; exit(3); } print "$NAME halted\n"; exit(0); } else { logger("$NAME already running",1); exit(2); } } else { # # Complain if the user wanted to halt a non-running owl-sensord. # if($stopper) { print STDERR "no other $NAME process is running\n"; exit(3); } logger("-" x 36,0); logger("$NAME starting",0); } # # Daemonize ourself. # exit(0) if((! $foreground) && fork()); POSIX::setsid(); owl_writepid(); # # Set the fast-execution parameters, mixing in the defaults, the # config file values, and the command line arguments. # $hesitation = setparam('hesitation',$ahes,$owlutils::hesitation,$DEF_HESITATION); $hibernation = setparam('hibernation',$ahib,$owlutils::hibernation,$DEF_HIBERNATION); $quickcount = setparam('quickcount',$aqc,$owlutils::quickcount,$DEF_QUICKCOUNT); $quickseconds = setparam('quickseconds',$aqs,$owlutils::quickseconds,$DEF_QUICKSECONDS); } #------------------------------------------------------------------------ # Routine: setparam() # # Purpose: Figure out the value of a particular parameter, depending on # whether it was given as a command-line option or a config file # value. It may be a default if none of the others was given. # The precedence (greatest to least) is: # command-line argument # configuration-file value # default # sub setparam { my $str = shift; # Descriptive string. my $arg = shift; # Command line argument. my $cval = shift; # Configuration file value. my $dval = shift; # Default value. my $val; # Value to use. $val = $dval; $val = $cval if(defined($cval)); $val = $arg if(defined($arg)); # # Ensure positive values for our numeric throttlers. # if(($val =~ /^[0-9\-]+$/) && ($val < 1)) { print STDERR "$str value ($val) must be positive\n"; exit(1); } return($val); } #------------------------------------------------------------------------ # Routine: running() # # Purpose: Check if another instance of owl-sensord is running. If so, # we'll return the pid of that instance. If not, return zero. # We check the running status by sending it signal 0. # sub running { my $opid; # Process id in file. # # Set the name of the pidfile we'll be using. # $pidfile = "$confdir/$PIDFILE"; # # If the pidfile doesn't exist, we'll assume we aren't running already. # return(0) if(! -e $pidfile); # # Ensure the pidfile is readable. # if(! -r $pidfile) { print STDERR "$NAME: pidfile $pidfile is not readable; exiting\n"; exit(4); } # # Get the pid from the pidfile. # $opid = `cat $pidfile`; chomp $opid; # # If the pidfile exists, we'll check try to send it a signal to # see if it's still alive. If the pid is an active process, we'll # return the process' id. Otherwise, we'll return 0. # return($opid) if(kill(0,$opid) == 1); return(0); } #------------------------------------------------------------------------ # Routine: runner() # # Purpose: Start the owl-dnstimer and owl-transfer daemons running. # sub runner { my $dnstimerargs; # Arguments for sensor. my $xferargs; # Arguments for transfer. my $devnull = '> /dev/null 2>&1'; # /dev/null redirect. # # Get the commands to execute for the sensor and transfer daemons. # $dnstimerargs = $owlutils::dnstimerargs; $xferargs = $owlutils::transferargs; if($verbose) { logger("sensor command: owl-dnstimer $dnstimerargs",1); logger("transfer command: owl-transfer $xferargs",1); $devnull = ''; } # # Make sure the sensor and transfer daemons aren't running. # vprint("$NAME: stopping sensor and transfer daemon (if they're running)\n"); system("owl-dnstimer $dnstimerargs -stop $devnull"); system("owl-transfer $xferargs -stop $devnull"); # # Make sure the sensor and transfer daemons are running. # logger("$NAME: starting sensor daemon owl-dnstimer",1); runcmd("owl-dnstimer -confdir $confdir -logdir $logdir $dnstimerargs -foreground $devnull"); logger("$NAME: starting transfer daemon owl-transfer",1); runcmd("owl-transfer $xferargs -foreground $devnull"); # # Wait forever while children run. If one dies, we'll restart # it -- if it hasn't been started too quickly too many times. # In that case, we'll wait a bit in hopes it's a transient problem. # while((my $pid = wait())) { my $cmd; # Command's name. my $endtime = time; # Time execution stopped. my $elapsed; # Elapsed execution time. # # If owl-sensord has no children, then something odd has # happened. We'll complain and go away. # if($pid == -1) { logger("$NAME: no child processes exist???",1); logger("$NAME: exiting...",1); cleanup(); exit(3); } # # Complain if we're informed of a child that we don't know # about. # (Soap opera plot #2.) # if(!defined($children{$pid})) { logger("unknown child died - $pid",1); next; } # # Figure out which child has died. # $children{$pid} =~ /^(\S+)\s/; $cmd = ($1 =~ /owl-dnstimer/) ? 'owl-dnstimer' : 'owl-transfer'; # # Calculate how long this process was running. If it's # been running too short a time, we'll make sure it isn't # flailing around. If it isn't flailing, we'll restart it. # $elapsed = $endtime - $chronos{$pid}; if($elapsed < $quickseconds) { # # Bump the quick-execution count for this server. # $quickies{$cmd}++; # # We've had too many consecutive quick executions for # this daemon, so we'll whine and then sleep for a bit. # if($quickies{$cmd} >= $quickcount) { senderr($cmd); hibernate($cmd); } } # # Make sure the sensor and transfer daemons are running. # if($cmd eq 'owl-dnstimer') { logger("restarting sensor daemon",1); runcmd("owl-dnstimer -confdir $confdir -logdir $logdir $dnstimerargs -foreground $devnull"); logger("sensor daemon restarted",0); } else { logger("restarting transfer daemon",1); runcmd("owl-transfer $xferargs -foreground $devnull"); logger("transfer daemon restarted",0); } # # Get rid of this child's entries from the lists. # delete $chronos{$pid}; delete $children{$pid}; delete $quickies{$pid}; vprint("$NAME: waiting for children...\n"); } # # Shouldn't get here... # print STDERR "$NAME: no children running; exiting\n"; exit(4); } #------------------------------------------------------------------------ # Routine: runcmd() # sub runcmd { my $cmd = shift; # Command to execute. my $pid; # Process id of command. my $start; # Command's start time. # # Save the execution time and run the command. # $start = time + $hesitation; # # Run the command in a child process. We'll wait a few seconds # before starting to give owl-sensord time to set up things. # if(($pid = fork()) == 0) { sleep($hesitation); close(STDOUT); close(STDERR); # logger("child running \"$cmd\"",0); exec $cmd; logger("\"$cmd\" failed: ret - $?",1); exit(1); } $chronos{$pid} = $start; $children{$pid} = $cmd; } #------------------------------------------------------------------------ # Routine: senderr() # sub senderr { my $cmd = shift; # Command that's causing problems. my $admins; # # Get the administrative contact. # $admins = $owlutils::admins; # # Collapse multiple consecutive blanks into a single blank. # Also, we'll ensure an admin was given. # $admins =~ s/\s+/ /g; $admins = 'root' if(($admins eq '') || ($admins eq ' ')); # # Send the warning message to the admin. # open(ERRMAIL, "|mail -s \"Owl: runaway $cmd\" $admins"); print ERRMAIL "\n$NAME: $cmd is exec\'ing too quickly\n"; close(ERRMAIL); } #------------------------------------------------------------------------ # Routine: hibernate() # sub hibernate { my $cmd = shift; # Command that's causing problems. logger("hibernate: $NAME hibernating for $hibernation seconds",0); sleep($hibernation); $quickies{$cmd} = 0; } #------------------------------------------------------------------------ # Routine: writepid() # # Purpose: Write the pidfile. Complain and exit if we can't write it. # sub writepid { my $pid = $$; # Process id. if(open(PIDFILE,"> $pidfile") == 0) { print STDERR "$NAME: unable to create $pidfile - $!; exiting\n"; exit(4); } print PIDFILE "$pid\n"; close(PIDFILE); return(0); } #------------------------------------------------------------------------ # Routine: sigurd() # # Purpose: Set up signal handlers. # sub sigurd { $SIG{HUP} = \&cleanup; $SIG{INT} = \&cleanup; $SIG{QUIT} = \&cleanup; $SIG{TERM} = \&cleanup; $SIG{USR1} = 'IGNORE'; $SIG{USR2} = 'IGNORE'; } #------------------------------------------------------------------------ # Routine: halter() # # Purpose: Tell the actual owl-sensord to close up shop. # sub halter { my $pid; # owl-sensord's pid. my $tries; # Friendly signal attempts. # # Get the process id of the running owl-sensord. # $pid = owl_getpid(); exit(0) if($pid < 0); # # We'll give five tries to cleanly shutdown owl-sensord. # We'll sleep four seconds between attempts, as that's roughly # how long it takes owl-sensord to shut down its minions. # for($tries=0; $tries < 5; $tries++) { last if(kill(1,$pid) == 0); sleep(4); } # # If we can't shutdown owl-sensord in five attempts, we'll be # more forceful about it. # if($tries == 5) { kill(9,$pid); kill(9,$pid); kill(9,$pid); } # # We'll also ensure the owl-sensord pidfile is gone. # unlink($pidfile) if($pidfile ne ''); exit(0); } #------------------------------------------------------------------------ # Routine: cleanup() # # Purpose: Close down our daemons and zap our pidfile. # sub cleanup { my $pid; # Various process ids. logger("shutting down...",1); # # We're closing down, so we'll ignore death-of-child signals. # $SIG{HUP} = 'IGNORE'; $SIG{CHLD} = 'IGNORE'; logger(" stopping owl_dnstimer",1); owl_halt('owl-dnstimer'); logger(" stopping owl_transfer",1); owl_halt('owl-transfer'); # # Tell our children to shut down. # foreach $pid (keys(%children)) { kill(SIGHUP,$pid); } # # Remove the process-id file. # if($pidfile ne '') { vprint("$NAME: unlinking pidfile \"$pidfile\"\n"); unlink($pidfile); } # # Wait a moment for the final log messages to be written. # print "$NAME halted\n" if($stopper); exit(0); } #-------------------------------------------------------------------------- # Routine: logger() # sub logger { my $str = shift; my $outflag = shift; $slog->log(level => 'info', message => $str); vprint("$NAME: $str\n") if($outflag); } #-------------------------------------------------------------------------- # Routine: vprint() # sub vprint { my $str = shift; print "$str" if($verbose); } #---------------------------------------------------------------------- # Routine: version() # # Purpose: Print the version number(s) and exit. # sub version { print STDERR "$VERS\n"; print STDERR "$DTVERS\n"; exit(0); } #----------------------------------------------------------------------------- # Routine: usage() # sub usage { print STDERR "usage: $0 [options]\n"; print "options:\n"; print "\t-confdir Specify config directory.\n"; print "\t-config Specify config file.\n"; print "\t-foreground Run in foreground.\n"; print "\t-heartbeat Specify heartbeat something.\n"; print "\t-hesitation


 

Owl Monitoring System

Sensor Installation Manual

3. An Interlude on Sensor Queries

 3.1. Gathering and Storing Sensor Data
 3.2. Transferring Sensor Data
 3.3. Sensor Heartbeats
    

Before running your Owl Monitoring System, you must consider a number of questions. How many Owl sensors will be providing data to the Owl manager? How many queries will the sensors be performing? What queries will the sensors be performing? Will each sensor be performing the same queries? Will the sensor be providing "heartbeat" information to the manager? Who will transfer the sensor data to the manager? These questions are important for the sensor administrator, but they are critical for the manager administrator.

3.1. Gathering and Storing Sensor Data

A query consists of three parts: a nameserver, a target host, and a query type. Responses to each query will be kept in their own datafile. The amount of data generated by each sensor will depend on the number of queries and the frequency with which the queries are performed.

The sensors will have to gather the data and more queries will result in more data that will be collected. The data will all have to be transferred from the sensor to the manager. If the manager is configured for graphing, then data from each query will be stored in its own database. These databases can be quite large, so the manager host must have a good amount of available disk space.

The administrators of an Owl sensor and the Owl manager (if they are different people) must coordinate the queries that the sensor will be performing. The manager's administrator can request that a set of queries be performed, but it is up to the sensor's administrator to actually configure the sensor for the queries. The manager is effectively at the mercy of the sensor.

Sensor data filenames contain metadata about the sensor data contained therein. Therefore, the filenames will reflect the queries that generated the files. The fields are separated by commas and have this format: 

        121129.1701,seattle-sensor,example.com,a.root-servers.net,A.dns
        121129.1701,seattle-sensor,example.com,m.root-servers.net,A.dns
        121129.1701,seattle-sensor,example.com,m.root-servers.net,NS.dns
        121129.1701,portland-sensor,example.com,a.root-servers.net,A.dns

Breaking out the fields of the last example above gives this table:

  Field   Purpose   Example
  Timestamp   File creation timestamp; (YYMMDD.hhmm)   121129.1701
  Sensor Name   Name of sensor that recorded data   portland-sensor
  Target Name   Host whose name was target of DNS lookups   example.com
  Nameserver Name   Name of queried nameserver   a.root-servers.net
  Query Type   Type of DNS query   A
  File suffix   File suffix   .dns

3.2. Transferring Sensor Data

The Owl Monitoring System provides utilities to transfer sensor data from the sensor to the manager. One utility, owl-transfer runs on the sensor and transfers the data to the manager. The other utility, owl-transfer-mgr runs on the manager and transfers the data from the sensor. Both utilities are front-ends for the rsync program and run using an ssh-initiated connection.

In both cases, the transferring host must be able to ssh into the remote host without a password. The FOSS rrsync ("restricted rsync", written by Joe Smith, modified by Wayne Davison) is used to restrict the transferring host's access to the remote host.

The administrators of the sensor and the manager must agree on which host will be transferring data to the manager. The appropriate SSH public keys from the transferring host must be placed on the other host, so that the password-less ssh (as described above) may be performed.

An Owl system with multiple sensors may have a mixed transfer configuration. In such a system, some sensors will transfer their data to the manager, while the manager will transfer data from other sensors.

3.3. Sensor Heartbeats

The "heartbeat" facility allows an Owl sensor to periodically contact a manager to let it know that the sensor is still alive and network accessible. The heartbeat is sent by contacting a particular webpage on the Owl manager.

The heartbeat facility is not necessary for Owl operation and Owl runs perfectly well without it. However, it can provide a useful assurance to the manager administrator that the sensor is still working. Enabling this facility on the sensor is at the discretion of the sensor administrator. Since this requires a webserver to be running on the manager host, that aspect is at the discretion of the manager administrator.



Section 2.
Installation 		Owl Monitoring System
Sensor Installation Manual 		Section 4.
Adding Sensors

DNSSEC Tools

dnssec-tools-2.0/apps/owl-monitor/docs/owl-topography.png0000664000237200023720000020774012057167021024015 0ustar hardakerhardaker‰PNG  IHDR(¤°Ç¯gAMA± üa2tEXtSoftwareXV version 3.10a-jumboFix+Enh of 20070520í2¤ IDATxœìÝw@×ðǯŠA`@YÊ‚€Šàd¸Gµ*â¸êÂj‹­Ö=pk*Š¶®* UÐ ¢(D" ‚ÈP’Dî÷ÇA; I. ßÏ?žÇÝ{ß»\î{¹{ï†aráD‘¼ÈÈë€ü€¼ÈÈë€ü€¼ÈÈë€ü€¼ÈÈë€ü€¼ÈÈë€ü€¼ÈÈë€ü€¼ÈÈë€ü€¼ÈÈë€ü€¼ÈÈë€ü€¼ÈÈë€ü€¼È.D€TU•!¤¬¢¢Bt âÀ®ªb³X,¥îE¢cUUU±X,Ÿ &ð{]V”˜imdßÈàÁÞ>?þv-郠EE_ºžËY8C…~‡“>ã ô¶7ì5ñrájPEÒio#…îÝÕ»wï® 0%¾J$¥2Ïù lq3ñmµ™qZ[WœtõÇIƒ”ºwïN¥R»+) š¸>"¥B¨ÂÚÿ\ª“Ø)ôÆ7PßuCnÃ_Þ¬sÕ7ªÿ”÷Æ*€–«3RèÍ[`yêÝ‹1y"/VôØùç~›oß[ÿh¨Ý• í¾¼þ\ÈoUK:¾+@ç…ÙðiÛ V?Äñ{ãø,¥ þôDC„ýÝ2чSÒ°€ÍÎ"áj;Ù§QBoWŸ¶Ù¶ùµé»YÜ[—<µµÊ§~(xyí.åñ›xk IçàóÙ§š}Ê"À­®®@Öû³þãBºkX±ÈþÕµåÆjím/¢]:-¸/3ºÖOºz™ª¢Ê˜ÄD|εÕ6:”lDk¯Œ²Å³¯¼AõPRM\_>(ôTUDèwIÜ—dWÖý¢1ð½¶XµRÙ…"’r•Œ\Gتué¡ŠPaddbýl»Á^ÚÝQeå7cÃî"©§±¿ÛοXÿ?£+&)º¹+äüÒê:yÇõ¨LA?—;1Y¾&¦¡œ'ÿTŸ””ȶ†v!²¢"B¨:ñÈÌ]×B½(ªí¬)H±âPrï𦘺é +~¢§ü$tùD„z¹Û#Ø·z¾E×6Vo—¨vè´ ¯Ë·Ó·"\ñçÈUé;&›­D¡ß—]”À@!Ä.ωù'6½ä BHMÇÌÎÑÙ’Ñ !T’÷* /äÕŸªXêÓÛXžß0)kqéòÜÄcžåa!eºý !N&!„˜™I™LTƒ©ô¶Ãç”ç$e”#„(†Vô.¡òÜ”Œl S2µ· 4>Q³ËóSŸ=«Äÿ“ƒÔT©¦&†u±Ë’âÿ}ö¢ ! ‡!Ãéõ벋sRÞÕ(Q­Mºÿ{92çKW·aÃ,z4Ž·û÷ûÿùŸä<òV‰Bnbﻪ ªâŒ—oª^>I2´³Å‹-HM|Çb)b=¬ìôBì²ÔÄLBŠš¦–ä¶ãiÉ+×u“ƒÖ¿¼±Í’‚B¿mùißn«®¼CZy`Õ¸ßYI|ï=FõµèÂíÇÁóMU;þïK­.ÔÆv•ç'e¼¯ÁT­,X™.ßM©AÊ:Ö.ÞƒÌñEº™L:wÙ•…Å@U=~”‹¯÷þÕI©Ýt-êŠô£ä-–0ê‚ÍŒ¿q÷Ù„4¬GL¤Ÿ™ô¬Œ¥@1´6¡·ðEHòŸ˜v±ðü-„Ð’•s í´6%!„ÐËB&[óCâ›r%ÄRéimRÿUª*HyùŽÒ4±2 tA¨,)úŸGé¥!%5]{W;}:B¨]Q•›õ¸¸!5ÝažÞ&ôº³wUqÆË7嘢¶“#36üî‹%%º½÷h;F7vqzÄ­Øü/, ‡‘^Ž<½­ÔäÑ7 Ÿ>ÖÝwkt«¹èŸú;‚uó3¯¯jþ)/»˜†aŸ~5hþ|ý·¤òHý¬-ñìœË^¨)ëù¡ÌFóî VlàMç×Iöƒï6­øÕ¿ÑÞë»9Ã0 k£v  ¯ËŠ†¼þ ¬ÅùöWóÙ¼ç}dhoÈÖ[Ÿßü™±ÍÎò¶–o; 4qźþõV¬8~÷C£êò+Òß¼Ù9!„Ðôó, »>ß?…å4*¼î67ÃM8Õü¤ÃMc\VqXþåf™ þÀøɶaMæÜ›ÐÖŽ¯jÈëu{¾ ßQºónbÓ!žK"WXàÿ=”RÝn<Í5œÙ[ÈÁ¬K ên-Ä”²÷š_o5«·nCŒ¼&Õ´'…ƒeìç]'zÖ׋aX»ÛÕä*7ãl‰¯À?ožÌT÷Q6y¾Þ~¼Uó~r h¹Ù ;çd³ˆìgl<ò8½¼þ˜á~­F=ÆܲúëoýU9“›ãm½&ùLÈ-eMÔ‡wEÁu¿†M°k¸<ßó¬ºÙ~0âÝ„¡aÃŒ€¼WÍkoë‹däuYÑn^G1%Uç}¼6´¤{ç_—ËÝî–aó•ý¸‹ÅL&«åÛ £)«º7óG} D\KÃ0,7fwΡ”ê⨺_WÓμÅØq<­‘Ü¢˜XqýélîÅ·-FSžSê×_•^Æd²°ëõiynzY†a¬ì#>:us&œb5: Žº˜˜1èA>»­ß<¯c­ÛK‹sŸU-×>°w+êvòª¬ýxZ¨0qgã]Ú·º€˜AöžyÝ?x/^Ô¸ äÔºŸžnÁ¼y½ÝíjH¨¾Š0 «¼T¹³åAÓ¼ŽaXf}´VËo”1™,>ªhñ£l5¯·FåϺ¿Üx›…aXUŠúËßÖò:†a©—Z¸Ë…²^þžÇ¯×ײ&¼ðÜK³ðÿŽØšÀÓøtTØã ÊcxzÎô߸-ìÁ‡æ»‚}¬¿"7:ôßuûë¾DÓÏ7ÚøMž/ݼ3Ï1 K ž]·{Û¯Èèç&WºO;“^ôfÍÇ£Ûý' ³«î:RB©hiëâÿSë¡©¡¢¢ØÎò‚`h·ÐƧâuê„BºËolg†Ò´6¬þ6æógù.ÞxÖ¼pç釔‡1 «þûäÙÛ¸Èk!„ܦéÙb¥d-š6>¥«¥EQQQ,JKÀ{ýÙ_=±Ñ’‚¢¡ßñ?ëóÕ„7<ýÆížbkÜÊ|W† ­L4Çùà›p,&3÷¿Ø(îRîÄæåÅÜÌA!«µ£õ‘ñ4÷²  í~SÜ{­ÈÖ6qp²E¡çÿ„ýûBé90U{Ó°ŒÛe5c+!Ô}´ïL|Nì™ÍkÕÕÖÂ'Ô´hEAªàç£l% VE] ·5+G*"„ºõûeÏÊvöBæßïÅÊ^ݶÌË®Ñí'ONG¨¯eOX4Bì»!!!„ŒfO³E¡ºJÃpf(((LØþlàTß5›ÖOuÕn¾+º”§Ý®ûVšu-|xýÒõGyœºúRÞ3yjX?‹Žêa7º.¨Qs'Ù „ ¬Lñÿ)gµ[;×eÞ׺Ýú›Òbþ½n¤’¦¡Ó° K6쾓ÔæªHðå¹Ü‹Ø«ÁíUýš/¤¤Z×RÇÕ²w¦•Û|âiÊ;ÔÍa*þ#ìÑ¥Çî#„¸7o‡=õ!„<¦¸´Û¦ç þb׺« Kcî*Ýl¼ë~“½zÇsìg-pS2.KïéøÄÅ£DÜBˆ{w4ùÖ±}—ñüçûƒ@ñp±*kê¦âž7ýcQô­†Ë‘í½Æ0ÕÞn®¡Ü+;v^y‡Ò;ØPãYD€ír³«»–d±êÕºìÒXì¯WÁÏGÙZÍ[®wïÞNz+ÎÍHzñ¬ÖgýÁˆgoXeï£B|êŸ<{ÈF¨›í¤ºÛ6çÿ~šûèÚ-„B—{è‡uþ±¼wËcoýÙw¨¦BïÃIŸQó]¡¬T¿Âç÷?u¼×”5u×XɹE¼‘)à;Úzø¶dª‚B,îI¡vkròºlã¤^Ú[7­¦ˆ*b·ŽÛu!„Ûò½çâ,hsuA—祦Ø)6hqnŠzùîwæûguýƬúh#¤8lâX„ÊùkgÐm„õÚ}‡· CÅí¼ò!„¦ý0œÿaäêO`yÎûÙñøYéÑxz§Õ°„D¤‹ñ`ü¬}ëÀN¼©ü¶c{½Bèßð_É‹GÛ’Š‡‹lÕ¿îŽznྈ¼ªxRÿqiRD¾÷pÕˆê0¢Qí‘î})5–á»´Ô…ìz(Ú²µ0¸»}å…mŽÃy±ÚÀÔÎið¨a׊BH‘¢c;Ô÷ìÙøßߥf—#„á¬5£BýùÃÐ9‘!„¦Í÷ƃÐè¿<›™¼×Ç«/OÑÙË–‡´4j«º~Ê?ðH```àáÇ>|Økc ¦/-Ï°v { ¯Ëœ/ŠJÊ‹‹‹ RcC¦Z.Æçê._åJA/£ïáÿ]~ãÀªýméÈ åRX!6›ÿå…£¤^÷Kãåï?_ÌøŠâÜY?¿®ß”½>B¨Çà±¼9Äuð·!<3ì' kÜ’¹Í 55ñ‰ûõrB±ïmßxŸ7ÐÎDd]š 'Íäiµ§çìîè6§Y¢Õò±ÆBÇCq_RÿhyÏ(mÿ³ ål„3íï-vNëê–ñX3Ùä;$â½W§¦FAÃqÏO:£aŽZˆÅû›O€íªQìúé‹ !ÄõGÙJJºõµü쪡êÌ+óÆm« .FNõä'ønN,®FqÊÓ<Ïìé`Ž'ï¾ã|ñßðoÞà¿®Ýf1B¡òG?z¹Ú[-z@=‘„aXA|ýèÊ Þ(ñ]ÁQ¤ÕÝj@n®3üV®\¹rzŸ'—þ¼ðQI×PЫ6¾k2Œèü€O­6XC!d÷°J=<º~Ψ_·MjhOŒ·ùj\‚bwn㪾óN1½–\¹ô÷ÃôœêjªÓ g;Õûe9y×az!BÈÞŒÜVÉ »Ôa×™ t–†éØ4zDk¶."¤Õ†¹i!„Èv3.¦}QF˜Æ[ž»ÄmÇÓš.ŒÁÇYË£¯üuóÞ›O_BXW†ë¸©Ó½ú6ù`øÛ{Í>—fº>¬Sƒ”ñ=ã²èÊaëOʨ†æ<˜÷¯Vf*ülWÃòF*¼sB=Û¶°@7— 7÷½ñæÓ×®TóÑfäv«hñ£lRl»aTd(ºþ”5âQz¥²2Ò4Ãs\ÑòG„¦f«Ã¸\y9eõ•KïÆåT©¨tCÝ û:1ÖÕRƒw±Ž.vh_"BùNqmæ¹ÇÐvÙäˆóW#Ÿ¤#õ®U¥ÝmGMô™2°înaWÐü.¿y:øâ?ŸºitźY{M›1®nü8“±[Ó?!¤ìlï¥!ë‚a)©9à t7X·ÉΖí×dŸ†aí/òèá:­A»ŠB63ŽEžZ¤ÉL?4o>XoÀƒŠÍ®$áŠ-/(¨bžñ¿áÖ[„ÕÚû/v¹‰.jÚyÐyåý½D¿å†r£”Ýt²-Ùv;õ ”çä•!EuM]ºŠ$^Y äu@~À}x@~@^ääu@~@^ääu@~@^ääu@~@^ääu@~@^ääu@~@^ääu@~@^ääu@~@^ääu@~@^ääu@~@^ääu@~@^ääu@~@^ääu@~@^ääu@~@^ääu@~@^ääu@~@^äG¢+ÿþûïÖ­[I$’êb±XVVV[·nUPP@u€@gîܹß}÷ªûôéShh¨ŽŽŽê„¸wïÞöíÛ%v¦²¶¶Þ²e œ©$FÃ0¢c·nÝš6mÚêÕ«»t‘ÐÕRTT”††ÆÅ‹%S †a¶¶¶ èÙ³§djd2™‡úï¿ÿz÷î-™$EFFNŸ>]’gª»wïjjj†……I¦:y]4ª««·lÙâëë+±JKKKMMMÏž=ëéé)±J„íرãܹs/^¼ÌuÜÊ•+Ÿ>}'±dTUU™˜˜lݺuæÌ™«´¤¤ÄÔÔôüùó#GŽ”X¥äuÑX´hQVVVtt´„ë ÈÌÌìÖ­›„«››Û·oߨ¨¨~ýúI²^‹eff¶zõj???IÖ ÄmÁ‚999wïÞ•p½§OŸÞ¸qcVVV×®]%\u'y]âãã===_¼x!±;¥¼† bbbrìØ1ÉW ÄmðàÁÖÖÖ‡’|Õÿþûï„ ÒÒÒ´µµ%_;‡Gy{{§¤¤ÒxbÈ!¦¦¦G•|Õ äõŽâp8 ,X½z5!¼}û¶oß¾‘‘‘NNN„Ä$88xëÖ­éééDýÄ™5kVqqqDD!µÑâp8æææ~~~?þø#!¼}ûÖÆÆæöíÛýû÷'$€ÎòzG­_¿þîÝ»ÿý÷1ìÙ³çĉ)))kÄ­¸¸ØÌÌìâŋÆ #*†/_¾˜˜˜ìÛ·oÊ”)DÅD姟~ŠŽŽNHH 0†Ý»wŸ®0 suu]ºt©·ˆ‡›››ŸŸ_Ó¹DQqqqT*õíÛ·bÜòN òº0NŸ>­««[UUÕôU÷]rÙ›œyÝ!ä‡ñ|[ÊŸ¬GM;”ÀÂ0Œ•½Ý !½ÍEödÛ0„ÐÈ­·™ëIð„òÜ™Îd'îGYÄaXö „þ¢ùl cÅ™Š ˆ*i1¶E‹¹»»‹y±¨©©144}*æ}DéäÉ“={ö¬®®nú)8¢,X0tèP1ï€N îà ¬´´tíÚµAAA­ ñö¹œÕgì®#žèÑï‚2Pw¥ºùdËSSöÏ1//ÈIJ|óµBeE„ú‚ý†Gª E++„PÀO‹LT5løÕ!„8¹ÿÞDÈzÌPíÊô¤¤LMû‘v]yÙbíYYY!!!"ßp nëÖ­ÓÖÖn­‘±Ç•žžÞúõë}}}¿}û&ú-bPRRâïïÜÚøÄQû÷ïÏÈÈ8sæŒè·¼ÓƒîΛ?þСCÛ’]±êîwæÆIÍ1 §þÞ÷x}úWa=>0ÿÀµ†Er§µBˆ…¾"„!„¢2!„˜ï^¿Aœlr°aUL µ¤[·nÁÁÁ3fÌ=z4Fb!’’’BBBÚè^Lìq…Z·n]XXئM›6oÞ,èÖÉ›?þðáÃÛ’ð3ÕñãÇgÍš5jÔ(8S‰ü^ÌÍ›7>|øÇ´¿(}ôų³Ñóýûû#¤†z¾oÖü×&lû3%'‡‰aO¶™¢·ø‹ +P/üÛÒ"%U-„д3¯1ŒÅd2Y¬O)ñŽÏ¶hmy¡C‡.X°@ЭDÁ0læÌ™«W¯nÿjÄW¡ÐÐЃ¦§§ º@Âþþû︸8)?Syyy¹¹¹-\¸PЭmƒ¼.€ªªªE‹íß¿ŸB¡´±˜ZýDŸ½GxÕ+« „fÌ›l¡¯¯”{sÓ†tô¿Â">êífåîƒÐ…'SªUTT îî±t¼0,«UŽ?{óæM>ŠÄÃúùçŸÛXFŽ+KKË… B'%)Çd2/^ܤ«dsÒpDýñÇ1110V±ˆý€_–Ì;wĈm-Qö!Bºkï7Ì)ºa‡BFw˰⨠ø>·³3àîÿN¬¿&Bë‹0 ðò˜õ¡5u-M>ýŠZ{ð܈ºuŒð§´Öp¹Þùóç Fee¥ð $âõë×d2911±Õ%¤é¸b³Ù½{÷Þ¿‡¶ˆÓìÙ³=<<ÚZBšŽ¨ÐÐPƒÁd2…ß`ÐŒ#˯‡Ž3&%%…Á`´¾TÙ“ÈÇŠfîv MêŠScžæuuîHWDÅ©wÿ¼“Rƒ©™¸y4¬¸óo‘›«VyB\6yÄPsE„PÕ›ès ‡PBìÔØ;¥š]MÈ¡ª‚gW®=xÏRÐ1p3n`[w ê9²gÏž'Nœèනrqqqrr l}é:®âââFýòåKB^ Ú3nܸÔÔÔ=z´¾”tQ#FŒÐÓÓ îà¶äu¾°Ùl33³+V,[¶ŒèXPPP`iiù÷ß4ˆèX@ËŽ=ºwïÞW¯^))µÚ`M ÍŸ??//ïÎ;Da³Ù¦¦¦+W®\ºt)ѱ   ÀÂÂ"<<|À€DÇ" ¯óeíÚµ±±±ñññD"°ƒ:t(--MQ±õæ.€ ………—/_vww':ÁTUUïرcÆŒDǬY³&..îñãÇD"°àãÆÃK);òzû^¼xáêêúôéSccc¢c†““jO0O IDATÓ AƒvïÞMt  )ooo:.£ƒ DDDÌž=;==]]]èXB%''<8!!¡OŸ>DÇ" GGGww÷;wˆÌƒ¼Þ ÃlmmÇŽÛä­ 2$++ËÁÁ!&&ÆÚÚšèX@ƒ?ÿüsÅŠ™™™jjjí/-•&Mšô¿ÿýïÏ?ÿ$:€0 ëÛ·ïĉ7nÜHt,BÊÌÌttt|øð¡¥¥%ѱÈ6èçÖŽ;v°Ùlþ¿*UåEÅåUbJ }úôY±bÅÌ™3áNz|þüyùòåGŽá3©Káq… ºÿ~dd$Ñ´}ûöoß¾µÝU’—QÆÆÆË—/÷ññ3UGÖ_äääÉä„„¾–.º¿ÂU¯aÏLyV!æùÅápÌÍÍ·oßNt  ÎôéÓGÍ×¢R|\avæÌÞ•$(;;›L&?{öŒ¯¥¥øˆâp8fff;vì :Ùy½-ƒ Z¶l˾ûÕ!d´|﹘ø˜ëÁv!ä^$Þù—@&“srrˆ`wïÞ¥ÑhEEüÒ~\a†nHtÚÀ—/_Îß²Ò~D=}ú”B¡À™ª# ¯·*((HOO¯…W!µ¨*Î !€†_öU1ëB˸ï2b}Œ ¿v-âqzqýœOééù̲7QñI¯RS2>6 ÌÀÊÏx™ž_†Oç$>ˆˆˆ¸“Êý{QzzóSJLxxLjY{Ã>p-[¶lРAü. Ä£ººïªË×Ò²p\½ÿžB¡ÄÅÅñ»©cÇŽéëë×ÔÔðµ´,QK–,>>cÇŽn]ÐAB´ ’‰ãêÕ«WT*555U¸Õð3ÕçÏŸ]Q&Ž¨éÓ§?^¸u;9Èë-ô÷:‹ù>11…ÉóßèÃKBºkïã/HhÂ% ®îÛò þê<!«€8vÎIT÷Büj· ·¨²²m¶È*@˜Ç™pL,A¯ËÊq…a˜Ý† „[MÐßë²rDݾ}›F£·¿(hú¯·ìäÉ“·oߎŠŠâsù‚ð_ìì,Ïg|Ãÿ«¨¢3dI` -zÿ2½J­Íw+°ë&ºXûù›¿ Ú³ÿ$B¾³\i¡¯• ——‰ã !´gÏ&“)»c7É®S§NEFFFGGó¹¼LQ_¿~?þ®]»444„+¡³#úÂBz Ôžq !„ |¯&0Y‹õ)6x)BÈekÆNöA Zÿ’‰aõï1tÙšPwSÒPHÊ1üCqÙxÃ0 c]_Ð!û Ç%†aE÷'"„Ð*üî–WÁÐÊTàm‚øl½(ÇU^^•J}üø± +‘8~ü¸žžŸíáeâˆòóóssst-Ày½-‚ô_Ç’‚g7½h´>…a­¼“¸ñ Œq5@¡ tNÝŒºoHÚ{”ð¾í˜Ð+Tzô4DÊ+ ÃÜÝÝ-Z$èZ@„é¿.íGÔ“'O(Jnn®@k^0>|[rssûöíÕ¯_?~–¯*Èø76&=Ÿ¥¬¬¬cí2b¹Jßš½“¸Ñ Œë”g>ˆ{GvÚ—»"bE_ý;ùM¥2]g°×KF—º·Sû»Zò{“êÛ·oVVV¾¾¾ëÖ­ãs V3fÌøüùó7øYXj+„PHHH@@@fff·nÝÚ_ˆÇ›7oìííïÞ½+g* ‹¹sç®]»–ÏU@s×Û±cÇŽsçνxñâ»ï¾#:áDDD<{öLAAèXB}þüÙØØøèÑ£&L :á•––šššž={ÖÓÓ“èX:»mÛ¶]¸p!99Y¦ÏT¿üòKdddbb"ÑÈ6ÈëíÀdÿ}nð–$étùòå¥K—feeÉîûÜ&NœØ¥K—K—.¨{ŸÛ„ ~ýõW¢cRzzº““S\\œ……EûKƒÖA^o_JJÊÀe÷ýëðVc©5jÔ(væÌ¢Fxxøœ9s233) ѱ„dÿýëC‡ݱcÑÈ<Èë|ñ÷÷ðàÁ“'OˆD`8|øð«W¯ºtéBt, ©?š™™]¹rÅÝÝèXSUUÕ§OŸÝ»wO›6èX@ƒ5kÖÄÅÅ=~ü˜è@¶oß¾?þø#55ÎTy/ÇÔÔtùòåË—/':XXX„‡‡0€èX@ËŽ;¶{÷îôôt%%%Ñ–Ì®ªb+*ª(*Š¶XܼyóÞ½{÷Ï?ÿˆ£p 46›mff¶bÅŠeË–‰¾ðª*¤¢"Žã)??ßÊÊêæÍ›p¦ âšâ˘‡R(”üü|Ñ]vßµq÷PQ>|ø¼yóD^,-—üQ„ÄŸždW÷×÷ü鱨GŒ¥R©bù.€‹‰‰ù§SœØpDßøW™‹Æ0 Æ 6þ|Q—ÚyA^ÀܹsGŒ!Ú2Ùùÿø"$†¼Ê`0˜Lfû‹Begg“ÉäÄÄDÑWöBÈ`ò™¨'Ñg1Dé­ÏMцa,«wïÞ]‘@ÄæÌ™3räH‘‡¿Î`ò™¨˜KÛ¦!„FîMh-¾;wNGGÎT"y]L&“Á`„††ŠªÀÌ뫸7N¶ˆ4¯—––Òéô›7oŠ°L >[¶l±°°¨­­íxQ×g!„Ž§×ý7óì„ìïŠîÖš5kú÷ï/²â€TVV2Œ .ˆ¤4|¼¹C)ø4•ƒ²Ù)ª{@¥¥¥"*`Œ/•ãǯ\¹òÓ§O")ðcÚ ›ù's î¸"T#’ë-Z´ÈÕÕuÔ¨Q"-ˆË† þ÷¿ÿmÙ²¥ãE‘~ŠOüÞ¤î¿Ì/%/“+%%%88øìÙ³",ˆ\÷îÝÿøã+V”——w¼4rÿÌOÌ…ß!„PqB\,B–º¢ê±páB777//¯öü#úÂBöL˜0áûï¿e‰U÷íDz>22RCC£¤Dôìø$%%‘É䬬,–Y•rʉì×Umm­ÍÆEQ»ñãÇO™2EdÅUÅáO BA9¢)2""BCC£´´T4Åz×VRRB§ÓEyãH¤y½ªªJWW7$$D$¥IZ¹r¥³³³¨J«J9o‡Bnáùl‘¸}ûvsss‡Óþ¢@ ”””Ðh´[·n‰¦8Vö™½{·ûG!Ïo•Çd2uuuÏœ9#‚Ø@c×…¢««[UU%šâDš×.\8dÈ‘$ŒÅb>|¸ãEÕ¿ÀcTxŽhÒpNN™LNHeƒ) n§OŸå™ Ã0 K:2!’ÞÑãjþüùÆ IH  x¾. ___ccã•+WHSñññ—.] !: EEÅ“'OnܸñÇ)'ëÏ%úÞÛPߕϘ7½õE3Z¸¯¯¯Ÿ¯RbÖ¬Y}úôYµjUû‹¶îCônW×E‰Uuÿ5±ï‡Jyß¡'÷qqq—/_†3•¸}a!«Þ¾}K¡PDóÎé*Ñô_g³ÙÆÆÆ{öìAH€8³fÍòôôzõª üÝØß?È/++*ÊÏÏÏÏ/bu,¤   ==½êêꎗ—G¡Pâãã….¡8v=BhÚ¡ Ã0ÖûÀ‰!·èaÁf³ûôé³oß>á‹m‚¼.¼={ö³Ù~xYöaÓ× 㧟~²··ïh0€h•••=zô nõXÍæ—ïá8 Ñh´»wï _ ÔîÝ»MLL:p¦z·o®^ÿnõ¹g^u$žuëÖõëׯ#%€¶Á8²Ò¯_¿#FlÛ¶­C¥°‹bïþGuaI~`ä´´4—G™››w( ®_¿¾páÂÌÌL2™,èºÅ©1 yleå†955JÃÑ…ÿs̘1$)44TÈõ°··÷ððغu«°°“"/ü›\ðUYÓ}Â$'}K®ÔÔÔÄÇÇ›šš ]häõyõꕳ³³4dÓot7nœŠŠÊ… ˆ ãÚµk‹/ÎÈÈâ Hé¹î·µµ5jÔï¿ÿNlò ÚÍuˆ™™Ù’%K|||ˆ cÏž=L&Svßš;qâÄ;wîÞ½K` _¾|ñóó;xð $uYgnn¾xñâ™3gÆ®]»¾~ýúÛo¿†ÜƒßëõíÛ7ssóùóç¯Y³†Þ¾}kccsûöíþýû““'OnÞ¼9##£k×®„0kÖ¬ââ∈Bj¢Åáp,,,,X°zõjBÈË˳µµ½uëœ©Ä òº,ùªÿý÷ß &¤¥¥ikkK¾v ñññ^^^ÏŸ?'äLåîînnn~äÈÉWÝÙ@^ ??¿ôôô{÷îI¸Þ€€€ÌÌÌnݺI¸j yyy}ûöýçŸ%Y/‹Å233[½zµŸŸŸ$ëâ¶hÑ¢¬¬¬èèh ×KøͧNòºh|ýúµOŸ>›7ož={¶Ä*---511 õððX¥@ÂvíÚuúôé”””ï¾Í3üX¹råÓ§Oãââ$V#Œ›7oNœ8‘N§›™™™››÷ïßÈ!=zôk¥%%%¦¦¦çÏŸ9r¤X+8Èë"sûöí~øáÇìÒ¥¡»Ú·oß>þL¥Rù)¡¼¼<''ÇÆÆæÿã«=ãü1`À€‹/ 1nIIIsæÌéÖ­[zzº¦¦&NïÞ½;ƒÁ0ªïFÌ¿oß¾ñYÀd2<øüùóÞ½{ ZryyyúúúÍçûûû“H¤æó9Ndd$›ÍVRRRRRRVVîÚµ+…BéÓ§O“#ŠÅb}ýúµy!yyy7nÜpww Ýv€¶@^¥‡nÛ¶MUU!„aØË—/óòò¾}û6nÜ8~VÏÍÍMHHPVVÖÓÓ377WTl«Ç1†a–––7nTPPMô@ÊÄÇÇ;;;óÎQTTd³ÙNNN={öä_[[[RRRZZª­­ÝâEdLLÌÇÇÏ{ÑÙ‡säÈqÿ†DÑÖÖþøñ#>­¬¬¬®®^UU5dÈ ‹õ÷ß7™©¬¬lffÖ§O„†a¹¹¹ÙÙÙ•••l6{„ Mòý½{÷JKKííí/\¸`ll,žm4Žœ į[õôô¬¬¬ø\ëóçÏÜÏEYYÙÃÃ#77—Åêà @†1 î!A¥RÆŒƒÿ),,ÌÍÍ­gϞݻwç.@¥R›’——‡¢Ñh«W¯–lø@ºp8œ7np“+‰D2dˆµµuEEEk¹ººò¦ŒqãÆéëëWTT\»vÍÞÞ^¹~$''§6_}Ú´iøŠŠŠC† ÉÏïø«à@; ¯‹Ø•+Wèt:÷;пÿ±cÇò¿z“»XŠŠŠ>>>â‹H³ÊÊÊ1cÆàGB·nÝ<<<úöí[SSƒÿUWW—÷P¡ÑhÚÚÚáááÍËqqqážÇËËË%»@*Ü»woæÌ™4­wïÞË–-C©ªª>ÜÜܼ¬¬A†###¹‡™··7•JMMMÍÉÉiòÑÞ޾ŗS4骣¬¬yò$ÿ«¯X±!¤¢¢baaA"‘nܸ!¾Pºzõª««+™Lž5kVZZ†a3fÌÐÕÕ¥R©ÉÉÉMà&lMMÍ_ÍÂý±?Ù;ŒŒŒ5kÖjhhÌš5+&&¦É¿ýö›µµueee‹«×ÖÖ†††ÚØØhjjTTTDGG+++lØ°»‡Ãéß¿?~~À€666­Åƒ7b0ööö ãáÇ"ÙLÐÈë¢WXXH&“ñ+Y]]Ý'Ožð¿nJJŠ¢¢¢»»»®®.™L¾råŠøâÒãóçÏ[·nÕÓÓ300ؾ}ûçÏŸ¹ÊÊÊB5?Š(Š³³³¢¢¢§§§³³sób‹‹‹•••©T*F£Ñh:::‹-ïÆ‚¼ÿþ·ß~³°° “É“'O¯­­¨„êêê]»võêÕËØØøèÑ£¼¯€£ÓéM^C¡PlmmUTT~þùçÖŠ%“É èÑ£‰DÚ±c‡ Ûy]ôV®\iooäȼa<“Éhu:nnn^^^Ùâ¯4 ORSSgÎœI"‘ÜÜÜø¼=óáÃSSÓ´´´ššüA{óßdxá$ISSS]]]YYYSS“F£ 6LÔˆTRR²gÏž~ýú©ªªz{{‡…… Ñض¨¨hÕªUêêêÎÎÎׯ_owù'OžP©Ô3gÎÔÖÖâý}²³³[[xÖ¬Y¡ààà'OžÉdüFÈë"†_Ãâ‡øëׯwîÜ)h Ü«ì;wêêê–––Š8J@´ÚÚÚ¿þúËÅÅ…L&Ï›7/33“ÏoÞ¼I§ÓçÎË=w¿}ûöÆUUUm¬õðáÃÞ½{w4h M*++?>xð`UUU77·àà`ABà222f̘A"‘FýôéS~VIJJ¢Ñh¼MÚ¾³Èd2¹Y? ÀÜܼ/ƒ탼.J•••ºººÇa™Ó¦Msrrâp8",¨¼¼|Ó¦MºººFFF»wïæÿ\Ìf³—.]J£Ñþúë/A+…¼.7jjjΟ?ïé驪ªêèè(ôullìˆ#H$Òܹssrrø\+55•N§8p@¸J1 stt\²d‰Ð«ƒvA^¥©S§6yÕql6ÛÎÎnÎœ9¢-H^rrò´iÓH$ÒСC###Z7;;ÛÚÚÚÞÞ>//Oˆª!¯Ë:¼ëùĉÉd²••ÕæÍ›;Ò<,,ÌÎÎŽN§oØ°A v”™™™ZZZB܆äõöí[uuõ[·nu¤ÐÈë"séÒ%MMͶû§¨¨ˆÁ`t䨶¶öÂ… NNNT*uÑ¢Em<†l͹sç¨Têš5kmÅy]vñv=÷÷÷ÏÊʺ¨šššÀÀ@===##£C‡ ú>77·G›6m:®ÐÐP---xÂ(&×E£°°F£‰¯[ZBB…B‰ŽŽSù@JKKùåƒall¼oß¾¶·¨ººzúôéZZZ-öaãäu™ÓZ×sá”””¬]»–F£9:: ×Ë&??_WWwݺu ƒ×”)S<<|X„eäuØ·oŸAuuµ¸+Z»v­±±±p­^p8œ3gÎôë×J¥.Y²$77Wè¢öïßO&“·mÛ&’À ¯K¹÷ïßoÚ´ÉÒÒ’L&Oš4éæÍ›B?sázø𡧧'‰Dš5kÖëׯ….§¤¤ÄØØxþüùŒ§¹¸¸82™œ‘‘!ò’;9ÈëõêÕ+ …/™êFŽ 7¯¤PqqñúõëµµµÍÍÍ:ÄÅ]ååå^^^zzzhÔ6ÈëÒ ïzîàà ªªêååuᑼç鯿þêׯN_·n]Ÿa———›››Ï˜1£ãQµhÆ –––ÐíM´ ¯w‡Ã±¶¶^¿~½Äjd2™&&&kÖ¬‘X mOŸ>8q¢ššš——×½{÷:XZll¬ŽŽÎ„ ZãS8×¥J“®çAAA"¹ Çb±8`hhh``°ÿþŽ\\rã´±±™8qbÇckMmm­½½ýŠ+ÄWE'y½CÖ¬YckkÛñ;fÉÉÉÑÐÐ •d¥  6›}êÔ)[[[¶bÅŠ÷ïßw¼L|hXÑŽ€ƒ¼. DØõ¼‰²²²Ÿ~ú‰N§ÛÛÛ_ºtI$eVUU988x{{‹ûü–››K¥R;Ø2ð‚¼.<üáPGº-::šB¡$$$H¾jPXX¸víZMMMKKËcÇŽ‰äÆ)>4¬™™™˜†Ø„¼N ÚÚÚ›7oŠªëyÙÙÙ³gÏ&‘H±±±¢*¶¦¦fÀ€Ç—Ìò=z´ûÆXÀ'ÈëBb2™zzz6æ‡Ãñôôtrr’@^Ÿ?ù Üäua\¹r…N§‡Ãqvvþᇈ CŽåçç¯\¹RCCÃÆÆ&88X´÷$;84¬@ ¯K·ë9Fóõõ}ðàhËg±X‡îÝ»·žžÞž={Ä‘wñ—³ÙÙÙÒ™666–B¡ˆöÞCçy]`EEEt:ýêÕ«D‚aVZZª««ÛÁášAs111£F"‘HãÇG'ÆÐÐÐ +Èëâ#Ž®çM”——ÿüóÏt:ÝÖÖöÂ… â;f¦NjeeUQQ!¦òÛåïïomm ¯¹ê Èë6l˜ÑQ4xùò%•Jˆˆ :yPSSsäÈ MMMq4_Õа¼.rbêzÞDnnî¼yóÈdòðáÃ;>ö\ÛfÏžmjjJì˜íµµµ¶¶¶«V­"09y]0‡ÒÓÓ“¶ß®\¹¢®®Ã6uÄÛ·o—/_N£ÑìííOŸ>-¦_ "V ×E…Éd¹¹¹‰¶ëys cÆŒ!‘HÓ§Oõê•8ªàåççgddDø³E ò³³©TjLJ‚èÌ ¯ ++‹L&ÇÅÅH 6nÜhhhHà 4Ùåé驦¦6iÒ¤§OŸŠ¯"Ñ +ÈëÄb±.\¸àå奪ªêàà°gÏq¼¹wýúuggguuõ•+WJ&Ñ®Y³FOOO„½ï:èäÉ“ ÎfBƒ¼Î¯ÚÚZ¢iÕ˜1cÜÝÝ%xð ©©)ƒÁØ°aƒøNÓ†•——{{{‹vhX@^Þõ|Ò¤Id2ÙÒÒrÓ¦M"€¨El6ûرcÆÆƽzõÚ¹s§oÿN@@ƒÁ@ãMŒ7n̘1DG!« ¯ó맟~’òÕÕÕ–––K—.%:i—››ëççG¥RBCCÅý™âCÃŽ?^´Cà òº x»ž¯]»V¬´+**6nܨ¥¥emm*ÉKómÛ¶iiiuä­0bRQQÁ`0Nœ8At 2 ò:_âãã)ŠžruÐû÷ïµ´´‚ƒƒ‰DJݺukøðájjjS§Níà ­ù$¾¡ayOâîzÞÄÛ·o.\H&“‡ "ù'Êûöí£Óébâ°ãîß¿O¡P²³³‰Dö@^o_uuµ¾¾þþýû‰„/øè¶ÒÙ€(UUU}úôÑÕÕݸq£d†«üðáÀÄ74¬@ ¯·MÜ]Ï›KLL7n‰Dš:ujjjª¸«kîèÑ£4-99YòUóoõêÕ¶¶¶Ò|—T:A^o߬Y³ÜÝ݉ŽBÁÁÁšššÒÓ †@¯_¿^°`…Bqvv¾xñ¢ÄîpâCÃΙ3G|Cà OŒn IDATòz‹òóó7oÞlee%¾®çÍ…‡‡8J¥®X±âÇâ®®E§OŸVWWk+Q‘àp8666k×®%:y½7nÜ Ñh27 û’%K¬¬¬$<¤T 2d‰Dš1cÆË—/%V¯Ä††äu^¥¥¥ŽŽŽªªªžžžçÏŸ—Àå‡Ã 655ÕÕÕݶm}eèTêlj @ YYY EÜ}÷å äõ¶”””Ðét©:A󩶶vðàÁãÇ':I«¬¬Ü¹s§¡¡aÏž=7oÞ\^^.ÉÚ³³³mll$34¬@ ¯c»ž<øøñã’iÉøùóçÍ›7kkk[ZZ†„„ÛcåêÕ«T*5::šÀ¤££óùóg¢‘×Ûâáá!»£¯WTTnܸ‘è@$$33sîܹd2yàÀW®\‘|øа«W¯–®†9¯K²ëyùùù~~~ ÅÍÍMÞ/I¡P"##‰D`£Gî„¿R„y½UÇ×ÕÕ%°oRÇeddP©T)Ê^|®]»6xð`‰äëëKH#5B††H'Ìë’ìzÞ\rròĉÕÔÔ&Ož,ÉÇ@mˆŽŽ–ݳAyy9ƒÁ8uêÑÈÈë-ËÎΖ‡:T*UJÎ,¢õùóç­[·êéééëëoÛ¶¨ÛtÉÉɽ{÷–üаéTyýÁƒ³fÍÒÐÐ@×óænݺ5xð` …²téR¾Ò·ƒ>|H¥RÈDxQQQT*5''‡è@däõÔÖÖÚÛÛËÍ»vìØѳgOb_ç Ziii¾¾¾$ÉÍÍíúõëFràÀ2™¼uëVcàGgÈëIIIK–,ÑÑÑa0‹/~öì™$kçp8'Ož477g0¿ÿþ»TÝç{úô©ººúéÓ§‰¤£~üñG{{{)|Î%m ¯·à—_~±´´í˶‰õÃ?8;;Ëz7ÐÚÚÚ¿þúkÀ€d2yîܹľ§¶W¯^D +9ÎëYYYþþþ½{÷¦Ñh3gμÿ¾„¨¬¬Üºu+ƒÁ077?yò¤´}Ë’““i4ÚÑ£G‰D8Ž¥¥åúõë‰DÚA^o*!!L&KÃX""Äb±ìììæÎKt B*//ß¼ysÏž=ŒŒvíÚEøûôbccuuu‰V ò—×y»žOœ8ñÆ’O¨>|X¶l•J4hЭ[·$\;?ÒÒÒ455‰Dd222(Š¬tÒ# äõFjjj wïÞMt ¢WXXÈ`0}:‰D2dˆ”¼c~ãÆ åرcD"¹Éë„t=o.%%åûï¿WSS›0aÂóçÏ%?^¿~­­­-ý‰uôèQYoÑ,n×™7ož««+ÑQˆKBB…B‘‰®«µµµaaaÎÎÎT*uáÂ…R2F4>4¬©©©ÌÝΑõ¼NT×ó梢¢ÜÝÝÉdòâÅ‹%ÙÀ^Pyyy:::¿üò ш…——×äÉ“‰ŽBzA^oA£Ñ¤§ «8„††jhhHs›ÒÒÒRüÅ‘ÆÆÆ{[e»¤mhXÈh^g±XaaaÞÞÞ’ïzÞDmmmHHˆµµµ¶¶ö¦M›¤|Œ”‚‚==½Õ«Wˆ¸”••iii;wŽè@¤äõ:¥¥¥ZZZ.\ :±[³f‰‰ ᨛKLLœ2e ‰D1bÄ;wˆ§‡ÃY¶lF»téѱI¶òzmmmxxøäÉ“Éd²……Åo¿ýFà/㪪ª;vèêêššš?~\ú›Ó.Y²„è@ÄëÎ;T*UÚv”×ëx{{wž;#FŒðôô$:Š:çܹsêêêK–,ÉÍÍ%:¢F²³³­­­¥phXÈJ^çv=744\³fMFFÁþøãT*ÕÅÅ%<<œÀHøWVVfll¯óv=ïׯßîÝ»‰êzÞ\ffæŒ3H$Ò¨Q£ž>}Jt8«­­õöövtt”žaˆ©®®.Í#IRçÍë‹-rqq!: ©PZZª««»k×.‘”VPP°jÕ* kkëàà`i¾åÎ%‹Cà Dby]ªºž7;bĉ4wî\i‰O&LèÛ·¯\^‰ añâÅNNNDG!:i^ÇÇ4ª3±’““©TjdddG ‰‰‰5j”ššÚ¸qãd¥…jaa¡Œ + äu©êzÞ\XX˜Nß°aCYYÑáˆÀôéÓ-,,d®‰Ÿø°X,33³ß~ûè@ˆ×ózyy¹¶¶6ŒAØÄåË—ÕÕÕ…xù)‹Å:zô¨¥¥¥–––¿¿aa¡8™V âËëÏŸ?_ºt©®®®”t=o¢¦¦&00POOÏÈÈèСC2q÷ˆóæÍ366–žGR"%%…L&Ëô³‘èŒy}ìرãÇ': i`hhÈÿø}úÐh4Ÿ{÷p‘())ñ÷÷§ÑhŽŽŽW®\!:QZ¶l™¡¡¡ ]@KR`` A'opÐéòzHHH=***ˆDJ=zÈ!ímqïÞ=///‰4iÒ$™»:–¡a"ª¼Žw=·¶¶&“É&L¸~ýºv˜ÎÊÊòõõÅG=’•çAü[·n]Ïž=áb†:cÆ ¢£ RçÊëoß¾UWW—ÄĤººÚÂÂbÙ²e­ýõàÁƒfffÚÚÚëׯ—Åa[äfhXt0¯7éz*O.âââ<==I$Ò¬Y³^¿~Mt8¢·iÓ&ƒ!-þĪ¸¸˜N§w’[q-ê\yÝÙÙÙÏÏè(¤Ýû÷ï555Oœ8Á;377wÉ’%êêêçΓÂ_ií’³¡a"\^—Ú®çÍýõ×_ýúõÓÐÐX·n]ii)ÑáˆÅÎ;µ´´„hÓ Ý¼y“F£åçç1:Q^ߺu«±±±Ü4œ«‡’É丸8 Ãnß¾w š2eJbb"Ñ¡ Iþ††ˆ@yÅb]¼xÑÛÛ[MMMÚºž7Áb±8`hhh``°ÿ~鼋 ¤Óé)))D"3,XÐi{2w–¼žœœL&“Ÿ?Nt 2ãÈ‘#d2ÙÐÐPGG' @¦Éåаá'¯×ÖÖFDD|ÿý÷ ÅÜÜü·ß~“Úü1 +++û駟ètº½½½Üßq ¢ÑhIIID"Kð‘ǶlÙBt èyÅb™ššþþûïD"²³³.\H¥R †žžž¾>•øаzzzò74¬@ÚÎë111³gϦÓ醆†«W¯~õê•$cTvvöœ9sH$’‡‡Gll,ÑáˆÝ¹sç¨Tj'?€…ƒÿœ“¶¾— €aâ[vvvee¥¾¾>™LÆç”——çååq°±±áN¿}û¶¬¬ Ÿ&“ÉúúúÜ?¥¤¤|ûö ŸÖÕÕ¥Ñhøô—/_Þ¼yÃ]Ì¢K—.øt~~~II >ݽ{÷Þ½{s{õê‹Å§ Nǧ«ªª²²²BgÏžÍÊÊúóÏ?»víŠÿ©°°ðãÇøt·nÝŒ¹¥effVWWãÓššš=zôÀ§Y,Ö«W¯¸‹õéÓGEEŸ....((À§ÍÍ͹‹½~ýšÉdâÓ:::ø4‡ÃIMMå.fhh¨¦¦†O—––¾ÿŸþî»ï,--¹‹åææVTTàÓT*µW¯^Ü?%''s§õôô( >]QQ‘››Ëý“µµµ‚‚>Íû©©©FFFîÝ»÷¿ÿþ›:uê˜1ctuu7oÞ¬¤¤†/Æd2_¿~Í-ÍÜÜ\QQŸ.(((..ƧUTTúôéÃ]Œ÷ÒÖÖÖÒÒ§«««333¹‹™˜˜p? ?âÓÊÊʦ¦¦ÜŲ²²ªªªðiÞˆÍf§¥¥qëÝ»÷óçϧL™âàà°ÿþòòr|~“?¤ñiuuõž={âÓß¾}ËÎÎæ=0øïKKËï¾ûŸóîÝ»OŸ>áÓøNæ.œššÊápði ÞB¸‹ñ¹“ÓÓÓkjjðiÞüõë׌ŒŒ×¯_>|xÿþýÆÆÆݺuÃÿ{ýúu¼Å¸£££O¿~ýð?ñîd:Î`0ðéæ;¹{÷îø4ïqÛ¥K îboÞ¼ùòå jüTaaáãÇ/\¸pçαcÇñ%⃉0 {ñâw1Þ³œ@_"îbBœåx?_ü,wùòåùóç߸qCCCCÐ/ïY®É—H´g9Þ/Qg9‰„OúôéÝ»wøtg9 …¢§§ÇýÓ‹/¸ «³ïpÇŽ·oßÞ³g¢¢¢X¿€"?Ëp AýŸ½óŽÇêûø1+ä± e*-4I}KCKiX•h)¥½ô”2¢iïiˆB*¤/FH4Œì½åîïûý>?_•î½Ï}–¼ÿðâyÎùœsï9ŸsÏ=ŸÏEµ˜˜ø¾—سgüá7ieZ[[uuuUUU´ÿ“ÏÔÔB™™™=¢U!û÷yófuu5í«ŠŠŠåË—oܸñýû÷”æå566†û4;;;..Žv±mmmáËp÷îÝ’’øC--­ÚÛÛÃÃÃiÓ77÷Úµkái¨  àÞ½{½½½ðW;wî„'‹ô½G-,,d2944”f¼¹¸¸V¬X¡©© €´[gøðáÛ·o‡‡÷ãÇß¾}K“6jÔ(kkkø÷ððpÚmÍÅÅÕÑÑ1{öl@yyydd$™L†¿âçç·°°€'Ü´´´§OŸÒ¤‰‰‰íÝ»—vhë!¸'õõõµµµ}/ !!¡¦¦ÆÊÊêÌ™3/^¼xûöíÛ·o§L™ÒÚÚzöìÙ3gÎÀ¨²²’V¥¼¼ÜÐÐÐÒÒrãÆ ÚLÁÃÃcll Åœœœô½@666ð}ïÞ½¾ãGMMmãÆ€®®®°°°¾hÕªUS¦LFGGÓ¦Ë#FìرžãââòòòhÒz{{¯]»æìì¼}ûök×®Ñæ..®eË–ÁìË—/QQQ}/жmÛàua|||NNθqãLLL2:;;/]ºAP]]Ý_ýEëdš¹åååÝ´i<³¼yó&11‘Ö-BBBû÷ï‡'£[·nѦ<@IIÉêÕ«­­­ý:ÙÈÈh„ €÷ïßß¿Ÿvß îÙ³¶ß÷î݃W·ººº±±±***3gÎ xðàÁ’%K„……—,Yw2mòúøñãÝ»wÚÉñññ}Ÿ¼¼¼¥¥%‚ ¾ÜÕÕ5cÆ Àׯ_oÞ¼IëdCCCxt âÆ_¾|éíí0a‚³³óرcaeÞ½{G+#++keeÿÖÖÖFS¦³³sÖ¬Y€²²²¾Ê 6̶j))))))4iâââ666ðïááá}g¹ææf===@uuu¿YÎÄĶCýf9aaáÀ¿GEEÑ $àÛ·o+V¬455…‡‡Óf9EEŽ{÷Þ¹sgäÈ‘wîÜé;ˆöíÛÇÏϸsç<ËÁŒ?~Æ €ÎÎÎ~³Üš5k`óùáÇ{÷îÑ®¯€€ÀŽ;`‹—ŸŸO“¦  °eË…BùÕ,÷ùóç[·nõD–––°LJJzýú5MZßY.,,Œ6ËÚÚÚ´µµÖY.""‚fnõõõ‹-ÔÖÖB4þü¸¸8nnî ¼\‹ŠŠ¢- Á€pݺu°1ÎÍÍ}ðàÁO`LL <aTTT6oÞ èîî§u)77÷Ê•+áãÂÂÂÛ·o ØÚÚÂW-Üȋ“&<•À¨©©ñóóóñññññ 6Œö|#**:jÔ(¾‘’’¢-WÇŽ;bÄøs~~þ¾D&Lè+Ö  àèÑ£i_‰ŠŠÒVC ‚‚‚4iãÆãæþ矚8q"??ÿ÷ïßyyy‡ F[`Ž1BAA&@ ÈËËÃ_ÉËËš4Úà ,öM77÷¸qãh_ Òv&dddÄÄÄh //O{¸™0a°aÃhÒ~եǧíLˆ‹‹KIIѤÉÈȈŠŠÂ_©¨¨ô•ÖwÝׯKÕÔÔàÏ………eeeyyy©TjwwwSS“]YYÙéÓ§ÕÕÕû^ --­k×®ÅÄÄô넾 L~HFFþj̘1ÂÂÂ4iÊÊÊ4ûѯKi£}%,,L{¨’••é{hÏ'N„;———D"eff¦§§ïܹ“‡‡§ïPRR‚«À·%­Kåääh|ðìÜwÙñ[`ï#ø ŸYYYš|IIIÚf’²²²€€@ßQ@»oÕÕÕûv2íN3f í+Úct¿NVRRê×É<<<ð\:}úôOŸ>9::Λ7oøðáp­‘#GÒŒdeeEEEiÒFMêêê}ï´¾媪ª4ÝFŒA{0’––†;þû>»ü2™ìéé©¢¢òðáCššmOeüøñ¿D}•>|8¼HHHôD´g>55µ_IûÕ é;ËIJJÒžùúÍr}ìúI£ "!!¡¾ƒˆŸŸÿСC7nÜX´hј1cFŽIû|ìر´çÑ~ƒˆvE† Öo–£õ›œœ\ßYn̘1}g¹Ÿ^_•¾³ín‘––î7Ë ÑþS„³Í ¿@H @““ãçç'‘HÜÜÜ’’’4Ãñã¤IûÕ1bD¿YŽ¶Ï¡  0ð¤}E“ÆÇǧ¤¤Ôw–ë;ÝÝÝ}ÉÐ|ËþÂ… gϞ嬣gFFF†††¬Ö‚‰ÕÓÓ¶°°ømhôøøxQQQŽ8‹›€KhØââb"‘xîÜ9äUòòòˆD"»Óinn¾zõê¤I“xyyYîzžÐ!¥¥¥åäÉ“RRR‘‘‘wïÞ%‰111ŒÖMxþü¹¨¨èÝ»wY­È !66V\\¼ººšÕŠ ‚B¡‰Ä³gÏböÓC±¿eË–¢¢"x;”#ˆˆˆxõêUß×EC´··{xxøúú¬­­ƒžŒŒŒµk׺»»±Z—AªU«ãx÷x¿¨PCÐOOOϸq㜜œX­"ïܹƒykmÐÚõyóæY[[³Z ¶àîÝ»óæÍ#Û¶m£'{&‰DÒÐÐؾ};Žºá-4,{®9˜@?×s{{û~®çlb×_½zõÓ©êÁƒsæÌ;pà@]]ócòòò$$$<<Ý»w/44weh|ùòåøñãjjj .lmm ­¬¬ôöö¦Å“aH$ÒÎ;ÇŒ“––™››kjjúÛ#Båå倾±ß¾}›?¾……ÅéÓ§Y­ËàçöíÛ±±±÷ïßgµ"¿‚ ððpšw;Z0†³a[:$((hooÏjE˜JKKË•+WwîܹsçNšC*#055ÍÉÉY²dIvv6Cú)mmm›7oÎËË{òäÉÌ™3ÔJ}}}sssßп¥§§‡J¥Òb³àHuuuPPÐíÛ·KKK.\èââbhhHó`æjkk{{{ß¼yÓÓÓó÷ß÷ Xö'SSS£««»nÝ:GGGVëòG ##ãëëkee¥­­M‹'ÁVôöö–••qqqµ¶¶bó¯Añ¼Îþ¤¦¦†††Þ¾}›.Ž"''gÓ¦McÆŒIOO ,**:pàl­››Û˜1cÖ­[Çè†úñêÕ+8¬c~~>ãŒ:›ÐÒÒríÚµ9s横ª¾|ùòðáÃõõõ÷îÝ[½z5gõ‡êèè888LLLnÞ¼9dÔatuu—,YråÊVëòadd´lÙ280ß …]—””äããCâîÌ:;;MLL.^¼Ø7ý`…J¥FDDÌš5K___LL ~x…‚2˜˜˜ÏŸ?=z”i-ž9sfùòå§NŠ‰‰aÛûþ5eWWW`` ¾¾þèÑ££££ÍÍÍ«ªª=zdjjŠ-¨$« R©'NܱcDze˲²²Ž= øD &Œ,lpGÝž3gŽ«uùãðññ)++ssscµ" Å>üæÍ›úFág+,--§L™B =Xill¼|ùrpp0@صk—µµ5-‹“LLLœ9sæ´iÓ6mÚÄжjkk×­[×ÐОžÞ7%ãàùäU$%%á€ÇØZ$“É÷îÝ OMMUUUÝ°aÃíÛ·qt€ tvv^¾|ÙËËKBBâÈ‘#ffftn0Ì›7OLLl0=å···ëêêNž<™¡2†øÇ¿s玾¾¾A߬3löQƒÛ>–%%%ÅÑ9ÂË›7oÖ¯_?räÈ¥K—>}ú”ÕêüCrr2@ÈÊÊb\phØ­[·2Ù;%''§¦¦U•¶¶6„qRiôöö>|øpÆ ¢¢¢?u=Ǧ‡¯¬¬Ü½{·ˆˆˆžž^RRZäDººº´´´V®\‰Öáb|qppPSScC··²²²ß†÷€Á`׫««ÅÅÅqwèb(Jpp°–––¸¸øÞ½{1éÓÉÕ«WeeeN„B¡ìÝ»WLLìÖ­[¸ g9/_¾„ÓÇ)))ÙÙÙÑ3Œ ìznnîºuëFŽ¹~ýúÜÜÜ ´¶¶zyy±á ÌdzzzæÌ™³dÉ’?6Œ[¡­­=ø"˜¡°ëõõõŒS3zzzÛ¶mcµøSSSsäÈiiiuuuOOO6\TÒزe‹––=—?òåË—©S§â–MÈÍÍÝ»w¯¼¼ü¨Q£vìØñúõk&4ÊP»ž˜˜8þ|‘={öTUUýªì¿îïïY©_… IDAT­•ÁšL&ÏŸ?Á‚h÷u†`pÄqø±L&ß¼y“ÕáŠssAAA?î›—¸råJyy¹§§'«Á“ÌÌ̵kתªª~øðáöíÛùùù»wïfç3S¼¼¼pªf\ˆˆˆ˜>}úÂ… 333iIZ™LiiiKK òò$)::º  à§ßÒ\Ï,XÐÜÜZUUåãã')çD¨Tjpp°ººº¥¥å¢E‹***<<vìü;™LæååÍÉÉ üŽ;III+V¬pss{òäÉÉ“'™¡+®P(”Û·o»¸¸P©Ôžžž%K–”””¤¦¦îÚµ‹å󸯯/m™8gÎÀoA455ÁÑcddd®^½úôéS}}ý¹s犋‹FGGO›6 ƒ&‚‚‚VVV¿}ÿSà§NŠ¡.«èìì„Ú“ÉäžžžÆÆFTa‰‡`&&&k×®´¶¶ÖÕÕ‘ÉdVëE,=µ‡…¾§¨TUU§M›¦¬¬Ìj¥PPQQakk+..®¡¡ˆïr^Þÿ¿ÙQVVvssûUùÈÈH¸Ø°aƾ|ùò¶¶6f*<0555®®®”¡¹žÃYÏOŸ>íçç—™™É4%?²ÃëAAA¦P(´ØSÇ––&‰luu8‚~I\DDD8q¾ýCøðáÃÒ¥K…„„„……%%%ã·ôöözxx\¹r¥¥¥›λÏà 999°qãÆÏŸ?³Z)D<{ölÙ²eÂÂÂFFFÌñnb2{öì‘”””’’(((¬Y³æW…ûÆX¼x13UEBccã¯2‚3Óõœ~ž>}ÊÇÇ·hÑ"eeåßB100èkB`` ^š´µµý9‘XÆwà¼yóæÌ™ V+5Ä@dddÀ{ZÑÑѬդ££³Q‡ ˆ ÂävÂB†®££“=mÚ´k×®©««³Z£ß@"‘üüü¼½½›šš¶nÝzàÀöL"„ p+W®TUU >œï§G´‚‚‚,--iÀŽ;\\\˜§+zÞ¿C¥RW®\iiiÉ4/µââbz2Å­]»¶¹¹ÙÎÎÎÐÐp€bwïÞurrêíí%‘H EHHHAAïÖ/_¾DFF.\¸ýß7544À™aéaîܹÊÊÊ•••¢¢¢‹-Z½zõ¯ÞAÈÉÉ ²Ð÷ÍË—/uttX­] °ëiii………7nÄå•áׯ_á-tTµ zÿþýÈ‘#edd+… ¨¡¡áÝ»w222è5ÅNYY™««ëÍ›7•••÷îÝkbbÂYi¸~JKK‹ººzkkëÀ¾… ¥§§çû÷ïâââ?~ Ÿ3çáá ¨··—L&óññ >üÇÃe6l¸yó& ON}ýú5 ::º¡¡aÙ²e[·ný•—‰DBU ¡¡¡[¶l¡ÇŸD"uttˆŠŠÜmmmd2yøðá\\\ÝÝÝ#FŒèîî.,,?~<æÖa’““_½z%++‹!‰CmmmHH¼GB§¿åÛ·o'Näáá—›ØèíímjjâããìûrêG::::;;?|ø€v2¢/¥¥¥AAALknÚ´ik×®eZshAáç–ššJ¡P¾~ýJÿé•OŸ>͘1Ãß߃Ïëׯ_1 €–––)S¦Ão¹MRRÒ¥K—ÒÓÓ—.]š””¤©©É„F™Ã¢E‹6oÞ {Lý–úúúŸNÄp‚W• &¨««Oœ8q€Ü²ëׯ?zôèÅ‹1ëŒ*•———]RR¢¯¯ÿÛ¬ç ¡¡¡JJJøø÷ïßÛÚÚ«¨¨à(v š:uêúõëO:ÕÑÑA¥R™3jàÕ«Wß¿ÿûï¿W­ZÅè¶ 8€Äk/œœœ ß¿?Öý,áÇêêê ,••eN‹ÇŽsrrbüÜÜÜööö9sæ`»%Ðù¯ãµiofffeeÅäô·÷îÝÛ¹sgTTãšèîîöõõõööîèèضm[dd¤˜˜ãšc>W®\ioowrrø„Ưræ¾}ûy£3gÎ4552e òZ˜imm }üø±¦¦&—±±1’ÀG555………8*A™™Ù˜fÔ\\\áááóçÏß´iü’˜å0íu¡‹‹ ‰D:sæ sšƒ9vìXTTÔùóç™Üîà‚ Í›7ÛÛÛŸ={–iž;wNSSÓØØXCCwáT*566–››[YYÛJ…þëׯ_olltttdr»þþþOŸ>MLLd„ð¯_¿îÚµKNNîÖ­[D"±¢¢ÂÁÁaõÊÊÊsçÎ#4êx¡ªªºoß> †NîÝÝÝAAA .”““»sçÎ_ýÅËËËÇÇgnnÎÂh†ÎÎÎ åÔ©SLnwêÔ©–––æææ8Ê„·d„……q”‰/eeeNNN¡¡¡L~n†RW®\ùôé3Û8;;“Éd{{{f6ª¬¬|øða333ÆMJôHFg×éÇY]]M$ƒ‚‚˜zE\\ÜÕÕÕÚÚº»»G±>\´h‘††F[[Û‹/ÒÓÓ7mÚÄ¡a4ÆÂÂÂØؘ%‡žÎœ9C"‘qªv=744”––öòòZ²dIiiéË—/±…OÁ—ÒÒRæ›ggçÚÚZ3/Ì;×ÀÀÛK æ ( SSS–DìŸ2eŠ•••™™ó›æhX8FNœ8ÁÍÍ}þüy&·‹äGç¿|ù’@§¿õ’%KX›{mÁ‚;wî¤_Ngg§««ëرcG}öìYz|8‚ÐÐP99¹_ù}17oÞ„’’\¤ýèzÞ/k\qq1‘HÆd455Oœ8ñãçuuuúúú¯^½êûa[[›“““¢¢¢‚‚Â… Z[[™¥&[/))ÙØØÈjE ‚’’’ÄÅÅëêêú}ÞÛÛ ¿øˆˆèû9œõ\UUUTTÔÄÄ$99™‰ÊbgÅŠ¦¦¦ÈË×¥ÇDEEEÅ¦ä— 3›¤’üw_›-mcbb¤¤¤èÓ”žžN$ïܹƒ­:ã^ ýÚÛ²²²ýnã!~ÄÐÐÐÄÄ„ÕZ@¥¤¤ˆŠŠ²Ãë*(ìzDD„³³sEE†f%$$êëë–gèÈ ¨  €@ ô{æîéé‘‘‘áåå?~<üɇ¶lÙB tuucbb LtvvÊÉÉ…‡‡#¯ÂèkgbbbhhØïÃÙ³gdddŒ!¢e=^½zõ½{÷( ò3ÅÅÅôÛ¿èèhiiiÄËÇožf“ÿsdFcgJÿeÏ4À2éZmÕªU›6mBXøW$%%‰Ä_m· LVV‘HÌÉÉ¡S‡éèè‘‘‰ŠŠBVœ½ýàÁIIÉææf„åÿ@PŽ†OJ[·n500@X˜  °ë.\À6´ºººFýÛ„ÿÂŒ‘AÐñãǵ´´ú~BóD$:::aÛ¶m………ÈÅ2¬¬¬-Z„¸83®]kk«´´tßÎóçχ[ãååš5k–ÐâÅ‹CCC1¿ jiiqwwG&úóçÏçÏŸwwwÇÖ"L[[›´´4â‡ZR˜}Ý AD*N½¦ ˜v¼ä7›Á¡T¤Ûoõõõâââ=BXþ§Ðc×£££‰Dbll,= ü4˜ÔÛ­Y³fÆ ÈËÿQ #̘”ð}]ÕÛÛ{ãÆ ??¿^, 3ü×íììÆ·uëVeÉáæ£÷„çýgädûÌ_|¢ôw5E(? ‡¿sçε··_ºt þsãÆÙÙÙðï\\\®®®Ë—/¯¬¬ ¤?‚&‡òêÕ«»w„ +Τk',,ìáá±{÷îöövÀ_ý•’’E¡P¸¸¸&MšTUUõøñcz\Ïëêê Wéîî¦P(tæâ´±±™>}:ï·P ÍÃÁj¿Â‹æ3€OEgßãä ÇÉ;îÅ£u©Ð•wtݲ å@ùxfÙ:ÿìö4Žc...ÖÖÖ´tìLbŒ—ð‹/îß¿0þ(Óz08اƒfŒ0iRôòò²µµÅ%oooïçÏŸ«««[ZZ°I`¸]ÏÌÌŒŠŠBh˜9rxyyÃÂÂΟ?_^^îäätëÖ-ÚW--- ÅÌÌ C˜ÛA…BÙ²eË™3gäää•gâµ[·nÝôéÓmllŽ=šœœÜ7Ô‰  `MM ˳žcãùóçqqqËw6• u`ýÖó×ðè-ixIô^¿€Öw±£O¦‘èÎ{p.1ZRuäsKKK%%¥C‡¡­HCAA››{„ ˜%à ™L¶´´tpp@˜6‚™½Í `ƒ€çÏŸÇÇÇ )ÌÌIiõêÕsæÌÙµkºjŒ…]áååEeê¨Tª¹¹ùÉ“'¦¬`æÈÌš5kãÆfff'NœPVVž ‚ (Óq€ãuôòÌ,P8^ ANhÓÈÏÏ'œDºººŒ=À|Ο?¯®®Ž>R$ zúu°? lc„%“Rii©¨¨hFF†ºx®766¾{÷aa777UUUôËLÖŒö‰…ÇrJKKEDD0…cc͵spp˜4iGGó=wîÜäÉ“1þ äÜ3ºýöàŒãKþY“ue¹À¾Gµ<=àÇ‚Ýxö&cìó£GNŸ>m-ØÏÍßß[£OŸ>ÅV±t­YÑÛ? ¶ñ§uŒ°fRrqq?~B7H@rrò«W¯dee­¬¬Ð6ŸŸ?mÚ´U«V¡­ÛoooWW×?òóóÓ#‡ÉP(uuukk냲Z ­­={öìË—/c–ÀüI©  `îܹŸ@tõêU …bii‰Í»üaaaEEEñññôQÔÐUÔè¿Ê ª±pá?¿òIÍ¢ýøTgý´< ‚ƒƒ'Mšdaaã±[¢¡¡áèÑ£7oޤǨV\»iÓ¦mÛ¶ÍÜÜüï¿ÿ¦GN_:;;{zzÈdòï‹þä e€§§gmm­³³3ÚVXŽ¶¶öúõë·lÙ’””„ª"s2©ÿ”ÚÚÚ“'OFGGs–QÿÛ000X¿~=BŸáA.c„ù“’ººúÎ;ÍÌÌÞ¼yƒ¶nooo[[æsõ8Ç¥ijj:x𠟟߈#ð•Ìdee‰Dâ¶mÛ0Ì惀íÛ·/^¼ø¯¿þbµ"Xpqq©­­õôôdµ"(¨©©9}út`` _ß)ŽàêÕ«?~Dî*6cÆ qqql7.«KKKCCà Ð/ŠùÀÁ6¶lÙÂjE˜ mŒpÜR pþüùÖÖÖ«W¯2¿iv}âĉBBB{u[[[/X°`Ù²et+ÆöíÛ'..Žjup›žžîííÍjE0ÂÇÇhoo_]]ÍZM[ mÛ¶­ZµJOO‘ê0__߃655!)O lll°ù÷Oš4  ®®Ž¡.ÌÝ»wß¾}ëááY˹|ùò§OŸÇu XZZ®\¹’CÇ//oHHÈÙ³g+++™Ý6òWñ eàÜÉl•Ð3ÅÅÅ!77—ÕŠ0TI :+?&'ÄDEÅ&ecLJÀ0Ðäðø ÕÕÕ...ÞÞÞÈ«ttt¤¦¦")5jÔ¨¶¶6$…Ù¹Ï×­[·nÝ:&4ÔÓÓƒ¹.œ+èîÝ»H ³so?|øPBBâ ¶qëÖ-„c„m±¶¶^¸p!ª*½½½×®]sssÃœÓ7ÿõÎÎNYYÙ7n -ÏƃÇÞÞ~êÔ©í:… äæ0Û¿_òã$:NùâÊœ›¿¡¦¦†Aþ---ÒÒÒ÷îÝCR˜Íû¼±±QRR2>>Iážž– +SSÓ+V )Éæ½ ý1Á6Pˆ JWW—œœ\hh(ªZ---ÈÓšÿnv}ûöíýõÂÂl>x(ÊĉœœX­3HII­ªªú}Ñ®çšÌ=|§²“APì j‚èˆiÄÄÄHIIÑŸ¡lÞ¼yåÊ•ˆŠrBŸ‡‡‡ËÉÉý6§dii©ƒƒ¦Ðt‘œœ,&&†('ôölÅa{ƒ’ !!ÁÌlvýõë×ÁÁÁ?½iii¢¢¢ˆqÂàyóæ @())aµ"Œ…D")++{xx *Ýü\€Cñ5´2.o[²ï¼UT”àºLS 0ÏÔù]3APAØÁ}—nY ÐÐ1I‡7I/ýêj*0ÖÀ꟒éKØ™ÍÊ µ÷R"üYAØA+û+G¦¥õ7?¢κjÕªM›6!/Ïd’’’ÄÅÅ‘†]ã>_´h‘••ÕoÿqÌqiÝÜÜ0ÌŒ=== Hæ9¤·}° tc„ Ó^WÁ °ë.\8{ölNNN¿ÏÉdò¸qã®^½ŠT‡ ž½{÷êèè /ωØÙÙÍ™3qñ¶J czÔ/êá»ÿß&*Ý ˜g{åa‚¯ìúH‚2g€Î°[îFÊ‹|Ò?%ûÇ>¼å¦ ˜çÓ 5]ÖŒµ÷½uÙ ¿=Žý[]wÝÚ¥;~ˆð<õõõâââOž°ü‡#~þ À'©8iéösiÇx]Û#$0 **ù˜ŸŸ_T”—šœì´ânÊ’ š›‹²’<÷rÝpY1yuj{í¤ ôéç•‘blllbb¢¯¯OŸü±··'“ÉȃgqJŸøðÁÛÛ;<<|€2ºººúúúÆÆÆäc‹K3nܸƒš››CÈ‚rJoÌÌÌvïÞ=qâDúÄ°ŠŠŠnnnh*q†AùðáãGˆD"úª¨Aa×W¯^­®®>a„~Ÿ¯]»væÌ™{öìA(‡S¹¹ùÖ­[544èÁî„……yyy}øðIa%­yÜÞiTÚEPº>úx†0VHHZe<iùd95uuuéÚDÝE‹k>§•=Á¯±h÷ñëÑ »hç“RWïˆWhŽôô`”Ñ¥ÜÝݱ‹À777/ï@±™yxxBCC/^¼øõëW$29¥ÏMMMmll~œú¡££ƒ-pØ’%KFµhÑ"´O:ÕÛÛ‹ðfà”Þ¾téR{{û¹sç°‹`cÂÃÃýýýsss–çƒbff¶gÏ&-Å°=æ÷£®®N\\án<œBgÞ¾À’NAäÎÂËfòg‘;ý— hgÐkI½8ŸÑúÓÍ®—G¤ØUAÕ'ì@ëia´2síAAMfr¬HïĸÙåå奤¤DO( NMª(ÒÃ3ýƒ€žN(ƒ ˆ\rW€¦®Ìs©„àkt>ÒÚòr? ©êÊ‚£*Ž¯«¦A͔鹔µ`!‡bÊ ÿVGNUU•¨¨(Âà0ÐÖÖæë뇪Öëׯ‘âEs˜‹úüâÅ‹jjj,ÌJ90YYYáóçÏÊr@oÓ•-“C ‰S¦LAøºŠ# Š«««ššÂÄå½½½·nÝ îêêBÙÎ?àæ¿îç秠 €ì¤»žššQQÑgÏž¡ï΃L&«©©¹ºº",ß\ò.&*ÔßÃ?4êáǾN¢_Bý<<ü£’³áZÍEé)ïJiߦ&gÔ‘ ‚:+óbBý<<ücR hñ ëòSB=<üCo½«üçVþOuÄ,Y²dÛ¶mhk1øH¦¯¯/ÂòìÜçeee"""H çåå ³’AØÚÚÎ;aavîm‚ôõõwìضgGqttDVœÝ ª1‚ (ò´’Éäîînaaá_ÐÕÕ6mÚõëבHk)Íz‘™ßÐ@â—›¥ÿ—-^×ׇwŸ–´sIŒŸn¸pš-Åï;Féj*Àß¾L¯¯;K’tUå?IN¯lç’›¢½\g"œ:£¾ 5ñEi¤¤æ"CMÙ _ud¬X±B\\<44yŽ&33ÓÀÀ 77—ÓSEݼyóСCÅÅÅ‚‚‚¬Öå7<}útÆ ÒÒÒ¬Ö….ôõõÇïååõÛ’oÞ¼yøðá”)SÖ¬Yƒ¡¡¦¦&l9+$iüøñ‡Þµk6 lBhhè©S§Š‹‹91±*²²²ôõõ³²²”••_š½ Š¾¾¾ššS³o _DEE¹¸¸ ˜¬¤¤„@ ¼yó‡õë¸s玴´4§%FËÎ;,XÀj-袹¹YJJ ƒ‹3Ž”––"¿s7e[‚‚‚Fp·?·ÜÜ\"‘˜Ÿí2AгgÏÄÄĪ««1K`9 ¬V„I Ž"ÁÁÁòòò˜wÔ±âÜÜ—/_º»»ëêê~U@QQñرcT*% hkk³±±ñôô9r$«ua*ƒ UÔÎ;çλjÕ*\¤µ··ûùùÅÇÇ#¯RZZ°¼§§ç›7o¢££1)Èz>Ìœ¤ÌŸ?¦ýÄÆ‚ V¬X±}ûvü”b6œž--nnnååå~~~¬V;‡ò÷÷G5F º}ûvHHHww7¶vqο~ôèQ>>>Î=¨¹{÷î™3gý¾èàbĈþþþ‡jlldµ.Xxüøqrr2ŽS@MMMuuuvv6ò*d2y {xxìÙ³§½½“Ž,ÆÊÊjÑ¢ELh Büºp<<<Þ½{wûömúE1Ÿ„„„ÔÔTV+Â<øùùOœ8Q[[Ëj]0‚mŒôöö–——777ckg»ÎÅÅuãÆk×®ã+ù_š³2 º#:99ùÑ£GŒÏîÀQ¾!¼¥4?333« ”Ìáß¿ß¾}»«««„„Ä3uëÖMŸ>¹(rêKó333‹JG•@G\\\ZZ*3#''ÇÍÍ=vìX©ô[FŽééé¹oß¾¶¶65QUUTOÁ]lWW—µµõ•+W0Ÿ0àP.\¸téRÝeÁ0Fð…]9r$€€ÀÀÅ&MšdmmmffFŸb?'‘¸LkΪ¿[ð—L"‘¶oßîää$))‰¿tÁÇÇ'---..W©u;¦ˆ*Mž={¶Ö$%~ÝxÛv;;;•­[·þ¾(û˜ðìÙ3üDvÞÞ?IJiòìÙ³Ç+‹Ì;ó÷µTggçÎ;¯]»&""‚¼Ö„ ¬­­çÏŸ¡E¸¡í"¶±{÷n:åü”î‚kr“´¹¦á.ÙÖÖV]]ÝÄÄwÉ짧çÛ·oïÞ½‹¯XrW]}Zð$ð¹zõ*ª1‚È_Å·´´ [H&“ÇŽ{íÚ5lïüNs¡§ÙdÌwÇ ú‰ŒŒÄ7Uì]z8æAõYÁšh_ÀódeFF†ˆˆºà(..>{ö,ª8²ÎÎÎÁÁÁhÛòööVTTÄ+XÜá{£>@Tpk7Àï#ΞåÛ¶m[²d ¾2 ^nB¨‚m €œk @û4Ξåè²eFîܹ###ÓÚÚŠ£Ì—gþCiï¿ñbñÂÒÒrñâÅØê25><*^¾|)**ŠY­yj Ð;zt #ìú’•!øº€ß²›:ïlÉ?u\ÖòøM| EMMíâÅ‹x ì Ú|nÕÔÔ`;ø:wî\[[[ „\ùâ‚}À?¯êèãRSSñÚÌM° ¤ÄZJË—)ƒÉ¸ÚuÔÙ2)Ë—/733ÃO^Çeÿ‡¢ËÏʯhÆ3_;ýæyùÜÐBÏ‚åGêòßU’ r–Ë?ÉðŽàä䄧PN¯m?B. R`ñ¥\¼ž8qBSS/i,äË—/ž‘ÜŸÎ/ÉQîfš»"Ü„B$iìرׯ_ÇV722CuF ££³wï^¼¤Õ?=ˆ*©òÔÁsÙ AÐáÇgÎœ‰£@¥¦¦FLLŒžLNÿœkÀÞ˜O$RSs'Î’è#x®777çåå!/ßÙÙ)++{ãÆ ôZý’ÿ'MÂô)¶?×®]7nΡÁJè€ÝGœ¤Â)­èñif+.\¸ ®®ŽW4Vx7€EznÏ"œ={6¶º°ÿ:Š¼ÚÿååË—Ø*þ<ƒm4?×`µ_!‘5À¤Ó¸½fÊËË#………x ähð|]U÷@³Ï&ü\«@´Ñ|àСC³fÍÂOPØõk×®988 ºÉâââ$%%q\¡ãn׋‹‹ ÂÉg‡˜5kÖ¡C‡ð’VŸá£ Ûü®––Ö±cÇp÷555¨Îôöö>}úíÖ}ßêS¦L9{ö,¶ê?…\ùØùÃÏq‘–››K Š‹‹±U§'.Í“'OˆDbrr2¶¦Š““Óĉé^Hu„™V$•”¥Û*°Öûc>AH¦Nzúôi\D ðz]Õ’z`ré~IåׇžÛ~‡~è#ÿ×°¥¥¾¾þ÷å~ŠóðT*µ§§y•+Vèèè°sìF333++«©S§²Z¶mV¥({xRröά¥g?’Bfãt8ôÊ•+íííøˆûššš°°0äU ^¾|9p®Òàââ ƒa“SŸ}Ïñò#Ø”Wv®–¨xòºž‰ 233;pà€ŠŠ ÝÂP{¦uttà(§`_Òñ‹Ô””Ôæ\+àÞ®ñRnô»ì¸¸¸H¤3gÎÐ-ið’••E§‚Ž#A7ìV*Ê*-Ýí`þöKÄeŒ˜››ÛÚÚÒ9F  iiÁxáì¿þ#~~~ÏŸ?øð!£ÂÀõë×™ŸÐ“#PQQ±µµµ°°€è B)V\î湔ܷW&wuuuuÑíRRYYyîܹààà“¢ÒC{{û÷ïßÐV¤§»¦NjiiiaaY ëÓ­“—e·@Õ«´l0yå<ú}7)Ê©S§è”ƒ-“:#À)؆ԑ¬ÚºººººæÎæÂ3XÝm†NÓ¹|-++srr åáá¡OÒ BYYùÈ‘#æææt†4­ÏŽ÷{öo> qD†ñÑ­ž³³3™L¶··§SNoooKKKWWWWÆX- ·ëâââ®®®;vìÀï?›xGO\ÕÕÕD"1((ˆþ :8±··'“ÉÎÎÎôIòÚiG•ø¹ø¥Ð©˜………±±±¶¶6rØggçÚÚZÌÖž´U{5 Zó5¹ä–<~vôvTii©‹‹ fFCCCXX›ÿ:ƒV“&M²²²277§Gˆ€ˆ”¤¤¤¤¤ˆ€ˆ4È@D–þ=) SSÓ3fÐ-i°qüøqž .Ð#¤ëS¸µÅBxíK©ŠóóÚæút^5\Æ^ °ëjjjÒOYXX¨ªª8pmÅœ´#)µ@½Ü­[·®Y³FGGYƒžÐÐЋ/~ýú³±›RRÿCrúnuz´ ûøñãÕ«WéÂ8è´@|||ÁÁÁöööÕÕÕEðN¹úµ)#&dÛ*ËИ—ux¼û077777Ÿ>}:=BÄÅÅ1oã? ªªJ?ÅÑѱ±±aÊß!´9#åÝþitJ (--ussÃC¥Á.¯«Öž´þwíË'·ò¡¢ß^ºîm€ÓÁ ä¯âÉdrgg'¶×øååå"""éééتãîÑW1l±‡i)­*++œœÜÝÝ‘WimmõòòÂål×Ö­[ è—ƒ ¾¾¾ŠŠŠøz{cß°$}Á=Ø=ÀasžrÎ@ÿõ~¸¹¹©ªª’Éxºÿc£¹¹YRRòÁƒ¬V„3èééQPPðõõeµ"AFFFëׯgN[Œ³%ÓÑÑ!++É’Öû¨èll¾Á6èaåÊ•›7ofµì‰DRVVFµìfŒ#ôäfž]‡ HKKëøñãÌlñ§lØ°aÍš5¬Ö‚“HNN««ÃÑÉ ñññøºM²3±±±RRRÍÍ ˆ™Œ†+V˜ššâ"ª¢¢ÂÁÁ!++ iøˆ`ˆ‰‰‘’’jiia­AJJŠ¨¨hUU« MLLX­Å@a×sss###éÙj€‰ 2Ï %$$èq ü3155]±b èì씓“ g¡LfõêÕ7nd¡ÑÑÑÒÒÒxmZЗ¦µµÕÝݽ­­ M~ îÁ6ÐÒÑÑ!##Å*8vx]…ïÁ çæ>}úTTT„ù]þ„ öìÙàToHèî¶¾xñ"Ç%ôd9žžžoÞ¼‰ŽŽf•û÷ïŸ0a‚©©)ÓZ|ûömUUòò°íILLÄKÿ¤¤¤Çã%ííí»wïöðð ?‹Z_ L~€ÉÉɸf½ë˃mØØØhhhlØ°U pîîîïß¿¿yó&«hooß³gÏõë×ñ#€ÒÒÒüü|ÌÕQØux!€¹%˜sçÎutt°ê¨§Ý¸qã84¡'köððسgO{{;ó[õêÕÝ»wCBB˜ÖâçÏŸ>|„¼Ê·oßšššèšACBBÂÕÕuûöíß¿ÇK&rlll¦OŸ¾nÝ:æ7ý#ôÏ}úž={˜Ü.…BÙ²eË™3gäää˜Ö(mG‹i-þ”­[·ª¨¨ØÙÙ1¹ÝçÏŸÇÅÅâ(“››ÀÏÏ£L|wss³¶¶Æ'ØbÈd²¥¥¥ƒƒƒŒŒ 3Û¬ZµJ[[›%»,ÏŸ?`|8e ¶ºèì:.Ñ!fÍšµiÓ¦-[¶Ð/ 9T*ÕÜÜüäÉ“cÆŒaf»ƒŒÀÀÀ„„†n‡þÈÉ“'EEEmmm™Ù(ûróæÍÌÌL¦µH"‘,--/\¸€!XÅèëëÏ›7Û>3Ó¢Ôál9G•––fþŠypàïœüèÑ#f6 ‘óçϳçR EÎeË–àâòåËššš£GÖÓÓC^«···  `òäÉZ|ôèÑ„ :„¡î4¤¥¥ýýý.\8kÖ,øñ 9ííí#GŽDÛ"‰DúôéÓû÷ïÑVd \\\¸[ 1cÆÄÄÄÌž={Ø°a‡ ˆJ¥"¬K¥R¹¹¹*ðû÷ï'OždÄ3ÐÂ… 1W¬¨¨@5]`æÞ½{ãÇ÷õõ>|8íC‚àç§{‚ ´7…B9r$Iþd$$$.^¼hiiéããƒjRª©©IOO_³f †F½½½GŶ©O¸X¸Óhoo¶u11±5kÖ  þ*..¾ÿ~TU†øYYY?~D[ËÄÄ$""Cszzz²²²*ÒCkkë7FµvíZäµ^½z5nÜ8|sa¾ÿÞÛÛû«o?}ú´lÙ²]»v!ß±‰‰±±±¹ÿþO#d `TtP@¡PH$íw__ß«W¯JHH\»vmæÌ™TìììDÛ???ã2ü!x{{Ÿ9sfÔ¨QËwvvVTTÈËË ¢m«··WTTôñãÇ#FŒ@[ EFFvuu™˜˜`‰L=}O7ªªªŸ>}bµ.C ƒãn6N!++KJJŠH$¢­èëë+..ÎÌôÞEEEì™ !d2ùÚµkrrrS§NEÆjè&ç.^¼(""2ˆ] QÜ… …å±$aŽ?.&&ÏjE†@ÁДÇž?.&&výúulÕÏŸ?/++[QQ¯V?%++‹H$ÆÅÅa«Ž9ˆ5Èdòõë×ååå‘[t˜¡›œÍ!‘H7n=ztnn.«ua (ÞFÜ¿ßÃ㶶˶®8::˜™™={–Õº 1Äÿ©ªªÂœZ±±±«W¯¾~ýúÞ½{±I8yòäúõëuuu›ššðÕíGØ\w ]]]éK¨Š …âî¤àáá‘““chhÈèF‡`ÕÕÕ3gÎüöí[NNΔ)SX­Aa×?~üØÙÙYSSÃ8m³fÍš¿ÿþ;,,ÌÐÐÉN)Cü tuu'%%!¯R^^É8­ú¼mÛ¶›7oš˜˜Ð#çêÕ«³fÍÒ××gæŠ-………´Ÿ ‚J¥öµè¹¹¹«V­b\sC0™¿ÿþ[CCcÖ¬Y)))bbb¬Vg ºÿ~dd$æÀÌö_Ç‘ñãÇçääôôôL›6žD¢C ñ#•••åååÈ«´µµ‘H$ælh¹¹¹>|8..néÒ¥ôK‹ˆˆ‘‘100 “ÉôKc#÷R©TEEÅ€€ww÷!‹>øX¾|¹ƒƒƒ;äG˜ÞÞÞœœœÏŸ?cÞEã`»9rä“'OÖ¬Y3cÆ –D‰bæsüøq77·/^Ì;\\\qqqd2yíÚµŒ³ 222ÜÜÜŠŠŠ ’šE÷÷÷‡-úêÕ«Y­ÔxB¥RwîÜyêÔ©„„+++V«Ã$P8W´··³a¸(ggç3f˜˜˜ØÙÙ:uŠÕê 1±²²JJJÊÈÈÀ×@òññ%''Ïœ9sÛ¶mÁÁÁ8J¦1iÒ$aaal.‹°3—¤_A¥R}||œÅÄÄÜÝ݇Ìù ¤©©iåÊ•ÙÙÙÈ]à(ž×ÍÍÍW®\9aÂÆiƒ##£´´´   U«V ½nÐæççg„ó: •J]³fÍ«W¯233ñÔ+((˜’’’’’¸ðMcÆŒÁæ¨m``°`Á‚E‹ѯ•JõôôTTTôõõ½~ýúÐ3ú`åýû÷£G~ýú5'uº"\±ø<>®´¶¶.\¸p„ %%%¬ÖeˆþpÖÍF¡P’““‹ŠŠPÕª¨¨èèè`„>ÝÝÝ ,˜1c£3B–••ÉÈÈ8;;3´–@¡P<<<äåå'Ož|ïÞ=F4ÁY7ù æÖ­[¢¢¢...¬V#999/_¾„Cb`Þ…‡ôè«â? My˜immÕÒÒÒ××gN‰‚‚qqñ€€|ÅR(”˜˜fº¡÷mÚÓÓsôèÑŒ³è0C79;päÈ‘?Ü ¸ [[[™šŠ¢¢¢DDDY­ÈÿghÊÃFMMÍøñã×®]K¡P˜Öhzzºˆˆ¾&0))‰H$b^.¼~ýC-šEŸ4iRtt4¶¦‘3t“³–ŽŽŽÅ‹«©©}ùò…Õº°ï×ÃÃÃïÞ½Ëù 6lØ––æëë»víZ–ä®bÐÔÔ„ö¬Æßÿ¯Ÿ[iié¬Y³ttt¢££™éŸ3{öì›7onݺõÅ‹øJ Êý<{öìáǨ”¡R©^^^ÊÊÊÞÞÞW¯^ÍËËCêŽãóçÏššš|||YYYÊÊʬV‡.:;;[[[1WGa×[[[©T*;¯è‹ººznnnKK‹––VYY«Õ‚è­­ Dd¦   )) ÇÃäùùù³gÏÞ´i“ŸŸ^2‘c``àååµvíÚììlæ·Þææf™ŽJ¥z{{ÃýòåËCýO 11qöìÙFFFñññœžµ‚ ̦³ý׆@ <{öÌÀÀ`úô騇 1D[[[WWWUUò*¨T*. ¼zõJOOïðáÃNNN¸ÄÀæ͛Ϟ=»dÉ’ÏŸ?ã%“¡™ÔiÝÓÓ¶èFFFŒkn6ÁÙÙÙÄÄÄÇÇÇÑÑ‘Õºà@oooCCCkk+†Ü€0ƒ?9à¥K—¦OŸ¾aÆcÇŽ9r„Õê 1Äïyøð¡©©é¥K—¶nÝÊZMöîÝ[__¿`Áú…&Ožœ••¥­­¡îoWT*ÕßßßÙÙYHHèòåËCæüD"™šš¾~ýúåË—êêê¬V‡]@aו””¾}û&))É8mĦM›ÔÕÕW¬XñæÍ›ˆˆ6 ­3Ä þçшˆ›àà`6ñ«>wî\CCƒžžÞëׯ f9ÒÒÒ˜ÖcÇŽÍËË;vì_Ñ,º   ››Ûºuë0k8gQUUµtéR““#""ÂjuØûðFFF;vìÀ.ŠåL™2%//¯¾¾^SSóÛ·o¬VgvG@@€ŸŸ_XXyyyy111 zÚuwwß·o_LL ›u//¯É“'/\¸U§P§Nº{÷îI“&õýŽ7vìXwww77·‚‚‚!£þç––¦©©9oÞ¼”””AfÔ¹¹¹GŒ1lØ°aÆaÁêùL¥··×ÖÖVBBâéÓ§¬Öåƒãn¶’’’ææff¶H$%%%³²²˜Ù(B(Ê‚ ,XÀLw»_ÑÛÛëëë«  0qâÄ;wî°ZÿÃq79‡âíí-""‚{ˆö¡¾¾¾¼¼sõ?ñ.¼qã@puueµ"CSÞÀìÞ½[^^þÓ§O¬Vä—twwkiiÁ¹a0P]]íä䔟ŸO}-ú­[·èņnrFC¡P¶oß.##“‘‘Áj]Ø.qú¦âââ‚‚‚+VðññaÜ`rss µµµÃ†^·3..7ÛA›6mÊÎÎ~þü9›¿çjkkƒýé1¸Þ%''¿zõJNNnûöíhëvwwGDDÉdAAÁ3gΣ†nr†ÒØØhhhH"‘âããeddX­û‚âýzttt^^Þ‡§ Ó˜:ujNNNeeåôéÓ+++Y­ÎìHnn.ª 3mmm>>>Ïž=CÕ ‰D200(..ÎÌÌds£~ñâÅãÇOœ8M³AÐõë׿}û–––æââRPPÀžF}¥Ÿ IDAT†’““3mÚ4eeåôôôAoÔËËË 1WGa×á|Ì-±bbb©©©zzz¸Õ‚Óùúõ냂‚‚W)//¯­­MOOG^¥³³sþüùÝÝÝiiiœröGZZúùóçW¯^et[ùûû+))½ÿž››ÛØØxÆ ŒnôìÝy\ŒÛÿð3m¨h“í´jCÉš5ĵäZ®” ¹–kß×еæ—2-ŠHIJQ–ZTJ‹6íÛ´NÍöüþxîß|£Ì<³<3ÓyÿáUó<ç<Ó™ó™g9ç@BèîÝ»3fÌؾ}û;wÄà‚qïètz@@@XXæÉ+Åüz/•+WÆ·xñâcÇŽmß¾ïˆ aA§Ó Fãß!¦M›¦££†mõR¼èèè¼xñbÆŒÊÊÊNNN••`ë\A___xzzJIIeggc y»víò÷÷¿ÿ>Oê t:@ `žäŠ³Þ„¯sEáÅÉÉi̘1 .LMMõóóû/ƒ0(++³µµ:u*‘HÅ•™™Ù£G.\¨¢¢booÏN‘Y³fQ©ÔéÓ§÷¾3£÷ïßÿÌ™3+W®„……ñ hHÔ´¶¶.Y²¤²²255UKK ïpD×ág̘1bÄ===þEƒ ‹OŸ>7Ž£©C!ˆ@`'IçææÚØØ,Y²ÄÏÏO“:jÊ”)«W¯~ûö-›Eæ͛׿ÿž¶"âã㣣£sáÂ…3gÎäææ¢I0uêT99¹É“'ó nHDXZZÊÊÊ~üø&uÎàñ¾b0›7oVUU}ýú5Þ±ˆ!ÑjlMMM^^^wïÞe¿F‹-))é}·äääÁƒ{xxp ° ‰ÊÊÊYYYÜTÂ`0|||´µµ 8zÏ…h5raöäÉeeåC‡á ‘HôöönkkÃVl…݉DEEE///¼7"×åQ©TƒÁÛ:cbb”””þùçÞV‹¯sçΩ©©ÿtÏââb*•Êú 3£ëëëó+DA¹F.œNž<©¤¤†w ¸¡ÑhÝ>)á ¢a>’IMMUWWwtt¤P(xÇ">`—÷àÁ!œM…{{öìÑÔÔ¬­­íeŸÌÌÌcÇŽEGG£¿¢]GG‡ÍŒÎM7'0°‘s‰L&/Y²D[[;''ïXD÷ןµµµ€òòrAnß¾­§§wîܹ“'Oæåå­Zµª÷ú =<<ŠŠŠx7$LÊËË­¬¬H$Rzzº‘‘Þáˆ0òzVVV[[[™ÅEEE%11ÑÊÊÊÂÂâÍ›7x‡ :ÁGTTTøúú†„„|¿éôéÓ|öì™Ô!‰ÚÚÚsæÌ¡P(½ìVWW§§§çéé‰fôß~ûÊ?}ú€CÝÄXBB¸qãlmm_¾|ÉͲâáÙ³g¡¡¡½”zÁA^ïk$%%oܸááá±`Á‚k×®á$Pß¾}+,,LLLd¿HSSSWW×·oߺ½þçŸ^»v-!!ÁÊÊŠ§1 ððpiié_~ùåûq·‚dee1Œòòò“'O~ùò…ÍŒÎ,ÎÓH!áríÚµE‹yzz^¹rEtGˆð NONNþüù3æ«ã0¯ÿ„››[LLŒ‡‡ÇÚµkù:K $~qrrŠˆˆxÿþ½¡¡!Þáð””ÔóçÏ«««™/"B$õôô"##%$$.\ÈQF‡ÄNwuuõððxñâÅÚµkñGLp×edd$$$Dkb,ž?~ü§OŸrss­­­«««ñ 4máÂ…ÉÉÉx‡#  xõêÕ‡þøãfF?{öì‰'âââV¯^=gÎ Õ¢£ÞáMb¦¾¾~âĉYYY™™™ãÇÇ;ñÁA’vqq)..666æ_4BkðàÁïÞ½Û´i“¹¹yXXØĉñŽâ;N¯ÊËËKKK+)):::ìììètúû÷ïåääø RTT|ýúµ©©iHHˆ’’Ò‰'V¯^nÂ<«•½½½ŒŒÌìÙ³y&„³´´´_~ùeæÌ™¾¾¾}ðtñ§¸ºçÃø"èæÍ› ׯ_Ç;Ñ#ZB¡DFFfddpTª¨¨¨¥¥¥©©ÉÜÜÜÎή««‹Oá 3"‘¨£££¥¥¥  píÚ5¼Ã(Ñjä8 TRRº|ù2Þ©÷ïß¿xñóØNØ 9–””4tèP‘P+<úH—WQQ1jÔ¨•+Wò|NáG$uuuGˆ Hjjª’’ëüqÏž=#“ÉøÈw}¤‘siûöíªªª/_¾Ä;±E@Ø~дµµµ¶¶VWWûÅqQSS³`ÁÀ“'OÔÔÔðG446UXX8}úôE‹]½zïXÊßßÿäÉ“‡b]á-..néÒ¥!!!vvv/_¾|ó憆†‹‹ †C|úôÉÔÔ”w!óE_häÜhiiY¼xqMMMtttßyèDð8xn.((èÞ½{pj€ššZRR’©©©¹¹yrr2Þá@|ÑÒÒÂÑøÑôôô5kÖ¬[·®O%u==½S§N9r$??¿Û²­3fÌðõõ]¹reJJ šð° *ILL gHåååYXX(((|üø&õÞuvv¶··c.ÎA^oll¤Ñhmmm˜&N$%%}}}=jggwóæM¼Ãx¬¾¾þÖ­[ÁÁÁlîÿêÕ«µk×Î;wÀ€| LxŒ5 Íè=-ÄîàààééiooÏÍT•è\u}a²Kq9iÒ$''§ððð^Öôƒ‚øùùùúú¶´´`«>…È•7ššš:88¤¦¦Þ¸qCRRïˆ Þhjjjkkëèè`gçG¹¸¸œ9s¦¦¦†J¥ò;6ÜœúŠ¸žÞ¹sgôèÑ2:Ó… JKK7oÞÌæUVÚÚÚMMMN B8*++;vl[[[zzºÞáô!\‡_¶lYkk«ªª*ÿ¢]RRRD"ñÚµkvvvçÏŸwssÃ;"ˆ+ýúõ“––îׯ_/û8pàöíÛqqqèsÚÆ SPPÐÒÒPˆ‚rçÎ'NÐéôÇs9Óç;wæÏŸogg'--Í~AKKK55µáÇsstHâããW¬X±zõêK—.á‹èA{ì,â9ÈN%&&ª©©mØ°¡¬UÏ>‘klùùùõõõ=m]·n††Fqq1ë‹ Cœ†­Ž=ZWW—H$òªN …bcccoo/No“È5r>ñòòRTTD§1€0¨®®îÖ·pŽ¶ä½ªª*{{û~ýú=yòDEEïp„…Ø í¥Óé¿þúk^^^||¼¸Î^„ž£95|øpkkëqãÆùùùq_­P›FŽFsss‹ŒŒ´´´Ä;œ>Šƒû륥¥ÏŸ?ÿ~F¨›aÆ¥¤¤Œ5ÊÔÔôÇx‡ñRggçìÙ³ËËË“’’Ä2©éëë9rdß¾}...¼zb ##£££#!!ANNîÕ«W‰‰‰;wîd³,F ‚ * ¹ºº:›¼¼¼ÌÌL˜ÔqÄA^NNNÎÎÎæ_4bCJJ* `ß¾}³fÍ"‰x‡añùóçnZZZЇÞ¿ÒÞÞN$ß¼y#¸y*88˜™Ñ y˜ÑY¡§³ƒŽ¿{÷îÙ³gÙ)õøñ㨨(žÇñJjjª¹¹ù˜1cÞ½{7xð`¼Ãm•••˜‹s×Ñ ÷˜ÔýñÇ‘‘‘ûöíÛ¼y3|ëDKIIIXXëw²šškkkMM͘˜˜N¬Q\\\VVöúõk†ÉhF?|øðÞ½{ù—Ñ»ÑÐЈ=þ¼ÏOw†!çïï?gÎœýû÷ß¾}NãÁ%:N$yòd555t‚ˆ#ÒÒÒwîÜÙ¹sçôéÓðâÀÛ·ommmwíÚuæÌ™ŸîL „?¡ýàÁƒ»wïLFGIII-[¶ìûçæÎ{ýúu‡^¾õNœ8QFFÆÚÚšÏ1Bøüù³……ÅàÁƒSRRFŽ‰w8 .‡ÙA‰WUUuwwËÁ»½­ÆV__éÒ¥K—.)))ݾ}›" åñãÇ_¾|áwl˜hkkûøø[ üûï¿UUUóóóñ„+¢Õȹ¦¬¬Œ.ñƒÁðññ¹zõjKK ¶úJ+ß¾}3554iRCCÞ±”ÈuyJJJáááxÂè9º¶¶ö­[·pÌè½Ì×täÈ‘#FTVV 2$Þ¹FŽÍ¡C‡”••###ñDlQ(2™Œ¹xŸh…¦««kåÊ•#FŒHOOÇ;Á­.ïÊ•+JJJñññxÂ-4£kiiá›ÑÉÉÉ9~üxlll/ûlÚ´iôèÑ$I`Qñ–h5r :::ìííõôôDýÊŠxãàþztt´——Wcc#?nô)222wïÞݾ}ûôéÓïܹƒw8PwÇ?uêÔË—/mmm9*H"‘( ‚âXHHˆ‘‘ÑþýûwîÜùõë×uëÖá{ï=ÿúõk/ûx{{3fæÌ™d2™õõÒÒÒãÇ—••ñ9F¨7%%%cÇŽ¥P(iii£FÂ;¨Gäõôôt‰T^^οhú”;w>|øðÏ?ÿܶm‡ç -[¶øøøÄÇÇýú599™ý‚UUU7oÞ|ðàÿbcšÑ÷îÝ»cÇaÈè QPP°··g]îãÇ8œG/_¾´²²š?þ‹/ˆw8b.>>>22ó‹pœžf̘ññãǸ¸¸iÓ¦‘H$¼ÃéëY¹reLLLrr²´´tvvö‹/Ø/ÞÐÐ@&“KJJøàϱfôâââõë׋PFGIJJFGG·´´,_¾œù"ü⋯K—.-[¶ìòåËçÏŸÇ;ñG§Ó222jkk±Õó:ÎFŽùñãÇaÆ™™™}úô ïpú. …2wîÜüüü÷ïß«««ãÇîß¿oll,Ì]QQ‘@ 2ä§{ÊÈÈÄÅÅååå­_¿^A½ R©ŽŽŽ/^Œÿí·ßð§áæ»,y]RR’@ À9yNFF&$$ÄÝÝ}Ú´iwïÞÅ;œ¾¨½½ÝÖÖ–L&¿yóFYYïp8ƒfô={ölÛ¶M83:jܸqË–-³··ggçAƒÅÇÇÇÄÄìß¿€v;°ó°êêj›¯_¿fdd˜››ãÄ.æ‘uuu-((011á_4}Ùž={,--W®\™ššzñâE¼ÃéClmmµ´´ÂÃÃ¥¤þÿÁiv0`€”””‚‚¯ìÑýû÷?ÞÞÞ~àÀ¡M笌ŒŒØßYMM-..nâĉC† Ù±c‡””Ô‚ øÔMrrò’%Kìííoܸ¿Q Wg\ŸÆ‡º+--522Bo·ã gc+++ÓÑÑqrrê6¬««+444))‰£Ú¾|ù"˜?܃ŒŒŒ455¯_¿Þˈp1‘‘¡¬¬ìïïw lÎFŽ¯¯¯¢¢¢··7ÞôQèssT*[q1i…â„L&;88hjjfeeá / a——››«®®¾cǼá€Hgôøøø®®.NK%$$(**ŠÄ,(BØÈ9Å`06oÞpà@Oûtvvr:~433³¡¡ëèº{ø𡉉ɟþéîî^TT´qãFQ¼ß‰¾™Ì¥o9¢¢¢²|ùò={öÀ1#ü“““cnn>tèÐÔÔTQ"N¨Tjgg'æâäõÚÚZ*•ÚÜÜŒù`Gììì>|øðôéÓ3f´´´àŽø ýõ×_oܸ±aÆžöihh¸qãFHHûÕæçç?~üØÏÏ!þ‡5£ýúuÓ¦M¢˜Ñ¹WUU°··Ÿ3g<µà‡‡N™2å÷ß¿ÿ¾ŒŒ Þáôi‚øúú¶¶¶b«Ž_jZZZiiiŠŠŠfffŸ?Æ;qpóæÍ 6Ü¿ŸuÚ“ï566677÷>éi7 …Á`pó-›UXXؘ1cÄ/£s󔯉‰ÉÚµkmmmëêêxtàÀßÿ=((Uá‹Á`|ûö­¡¡æu±Õ¿ÿ°°°uëÖMž<944ïpDÛ™3g<øìٳٳgãKÐŒ¾}ûöM›6‰SF=z´¤¤$—àϞ=;kÖ¬iÓ¦aîò VóçÏøðaRRÒ¼yóðâ òú°aÃdddù Ô“ƒmܸqïÞ½xÇ"ªvîÜyõêÕ„„+++þ…›óÑ°°0SSS4£oÞ¼Y<2:JCCcß¾}ãÆÃPvĈô¦¯žžÞìÙ³…g‰õõëWKKKAÒÒÒôôôðâòúŠ+œ555ù Ô‹yó楤¤DDDÌš5 ž¬pAggçG½ÿÞÐÐ"222RRRýúõcÿ(jjjòòòúúú" G3úï¿ÿ.~‰uÚŽX[[;::Ž?ý5,,¬_¿~ .¤Ó鼋®o‰‰‰±²²Z´hQtt´œœÞá@ÿCZZZJJ s'@@à‚ "…L&¯\¹2+++**ŠÍ%$|F[²dIiii\\ÜàÁƒÙ/øùógUUUUUUö‹tvvJKKsôi ?zôhSSÓ¾}ûDôAw\Éä‰'êëëß»wïXþ^œSçÎ;}úô7V¬Xw,ÐTVV¶··c_ ÏAvV'NœPRR Ã;àÒØ:::¦L™bccÓÒÒ"ø£÷=G1bÄÕ«WEq<:§ššš._¾\TTÄà GåîîΫ ¹'ü=*…BY¹råÈ‘#333ñŽâ®Ã×ÕÕ½yóã׈§>èææŸ_í‰D²±±‘••}õê•P­ýèÑ#33³?þøcýúõ%%%îîî}á4ýÇ$)..[ñGu{EQQñÕ«WÇç:º>¡ªªÊÊʪ¼¼<##ÃÔÔïp ~á ¯ûøøÄÅÅeffò/ˆ}ööö©©©aaasæÌiooÇ;¡SYYieeehh…mÄsºººééé+V¬055ŽŽ=z4Þý@QQQXXúó¹sçãÆ›>}:_ZXX8}úôE‹]½z[ eee÷ïßïß¿ÿÎ;Ù,RTTTPPPRRÂ|¼‹UDDÄ‘#G÷îÝ+6Cצ—žgÔ¨QÏž=›5k–²²òªU«Szzzll,ú3ÚÈmmmØ ðâãã³{÷î¿þú .i/üèt:‘H¬[·Ž£G‚˜0>ž YYÙÈÈÈ£GN˜0áöíÛ‹/Æ;¢îŽ?ˆþ¼gÏô‡´´4 >1==}îܹ7näæòlWWFëèèà´à÷ˆ™Ñ÷ìÙ³iÓ&ÌÏ„‹~,&kiiêàà ¤¤4wî\ž×ÿS[¶ly÷îúóž={¤¥¥©Tê·o߆.ø`º¡Óéîîî=ŠŠŠš8q"Þá@léêê"˜GrÂyiÄÁñãÇÜÜÜ:„w,ݹ»»³þjaa¡ªªÊåä$½xõêÕ¬Y³<( ÷\#""ÌÍÍ·lÙ²nݺâââ?þø£/'õÉ“'kkk/Y²CÙŸ~˜1c†¯¯ïªU«’““1EÇ•n?^___’zccã´iÓ’““ÓÓÓaRï;8ÈëãÇWVV†ã×…Ó‚ ’’’îß¿?oÞ<¡ºÝnmm=hÐ æ¯ óæÍãÇI ""bÉ’%W®\Ùºu+?êÿ)€þ×"##ÑŒîêê 3:ªÿþNNN***ÊŽ?^RR²÷9m–.]ú×_ÙÛÛçææb#GGÇnSÕ³OŸ>YXXŒ92%%eØ°ax‡ ŽÏâC<×ÖÖ6þüQ£FåççãËÿcÎOÙ¿ /^ðã(·oßVTTŒŠŠâImuuuçÏŸ'‰ì!“É!!!D"ÑÌÌløðá^^^T*•'Á@ì;}úô°aÃÊÊÊ|\æ}%EEÅÜÜ\ÐMHHˆ’’’§§'¾a@0Œëׯ_¹r¥¹¹[ 0¯‹¡ƒ*++GFFâÈ¿’’’Ð.½Ï`0¸¯³®®ŽL&3=þ¼ŠŠÊ›7o¸¯™©¹¹¹««‹ýýŸ+æ:~èl9‚<ô÷öìÙ£¢¢òìÙ3|À0#“Émmm˜‹Ã¼.žÂÃÕ””>Œw ÿB/ÅÛÚÚ:99ñ¤Â±cǼ½½Ù¿¿ššŽól=~üø5kÖlß¾ýÈ‘#˜ëÉÈÈ°µµõòòêß¿?ÃëÅׯ_-,,rssY'‚e¯  0~üøOŸ>]ºt‰·yý‡˜}÷îÝpè§Ð)ú9ƒ©œœÜ«W¯¬¬¬þüóÏ‹/²Yj÷îÝ/_¾„ tlëÓ§OÑ_3£Ÿ;wftÞJLLtèP<„„N§c¼8zn®²²’B¡455a>$<\]]³²²˜¿¶µµvëPnnn .œ>}º`£ûOOÏšššk×®ñ¼æçÏŸ?ÞÙÙ™™Ñ¥¥¥I$’··wHHûõ„……q:Tbz:Q^^Ž¹t•RÖÕä9{ö, ®®nÿþý>>>ÀÙ)))ÿ£G²Î¬7sæLÖY󺺺¶oßþöí[<„AÀÀÀ[·na^™®¿ÞG 0@NNnøðáÌç“›››:ÄÚ¡„††~øðáêÕ«lÖY—Ÿô($$$$"!§„½Ù;©%9iÅ$¶¾–JKKûúú>|¸ººšÍx~Š™Ñ—/_^^^ŽfttS]]]SSSAAûµuuuÑétl磿©¨¨ÔÕÕ-\¸PNN}zœD"eee¥§§»¹¹Í;—ý™ùÚÎ'Mš´lÙ2æL´ýõsôŠ¬¬¬ÍäÉ“;::Þ¿Ïf´Èa0¥¥¥uuu˜gm‡y½ºvíÚ«W¯ìììäååÕÔÔ†  ÌkÝ---[¶lñööF§ù™oÞN¦Côm–¬\¹råâi&Ú2–›ê~ZªíºÉX-lÆlkk»hÑ"WWW6÷ïÅóçÏ­¬¬˜}÷îÝØÆ_AìÓÑÑ‘””3f .G—’’°_DI[ÅÝÓYMi:PÀhÖJüòó_ú'¯9sÄø'åç? ȳn.æ)­ìéé¹nÝ:tH4Ó76mÚ„þ,%%¥¯¯ÏÌè{÷îÅw>”œœ\[[ûüùslÅ£££yÌÞ½{‡Êœï…‚oçÎÎΣGÞ±cÖ  >Šƒ¼N$Ÿ?žÍ¿h |Ñétggç}ûöiii±_JNI €ÿ<Îc}±9ùŽ¶tÖÔ=ÚÀ×ÛûA‰îJ'—eÀ÷Ô©ãÅà·\­)éæ榭­ÍúT0kR455566æååaÎè%%%M2C¡P>|˜““ƒáX}‚iõÉÈÈÈ”””¨¨(žÄžžîççÇéL¸´s??¿û÷ï¿{÷Ž›J ‘S__ÏÍ•-ò:ºLG+A¢åĉÒÒÒ¬Óm²c€ñ:ìlxäQ.z‘²>Ýï— GØôûl5F8¬Ÿ•àå•–Wךò‹uB` ÐÜ?[KÐûÃÀßß?(((%%póæMÖ¤ ÑhrrrÌ^9UQQÌQןŸŸŸíˆP/( €›¸˜ÿVÖÓÓ㨠.í|äÈ‘tqqáÉÿ t:H$£kRcï¯Cÿ*((ðòò à|¤–œÛ½Ì£SÁÉ%F2@PµtIËŸÿm, cæ΀­ÓT3u"`ŒÓu¤ÐEÁ°¦¦æ¾}ûÖ®]{ýúõßÿ ¢¢2zôè±cÇN˜0aìر‚\¾|[åT*µ¥…Ý1ÇLØÎGûÜÇzxx<ÈyQ|ÚùÎ;xäÈŒå!ÔÑÑÑÕÕÕÕÕ…­øW’†ú 5kÖ¬_¿ÞÔÔKa)Óc¯‘µé ó[A?-ý±Ó§Éþ·q€Åú´Ø±Ò† Sö%ÅÚ+Žµ ï–ôš¢ÃÎÐáÛ»wo@@z—TEE¥½½oDWWwÔ¨Q†††¶¶¶˜+‡xËÆƦ¸¸ØÞÞCY^}(**:þ|||<Æ qjç666ŽŽŽFFF˜+úòº™™Y~~þˆ#ø „—+W®444œ>}š›J´,¦jYLýÑ%‹™3ÿýQzˆ5óg =Úú‡ûs $$ÄÆÆæìÙ³vvvºººøžÜÏG…–œœûƒ,º177ÏÊÊ233ã2†5kÖ¸ººZXXpS‰àÛ¹¡¡¡»»ûš5k>~üÈM=PÁñŠUø©¬¬411‰ˆˆ@§é9{÷îGo´óJMMM`` ’’’›››EÈdòÇGmeeÅÃH ^ñöö¾páBnn®(ŽŒ ÓéFFFëׯ‡3ÈŠ=A¼½½©Tª‹‹ {3!vó:æÎ;|øp___¼ÁˆF£mÞ¼yûöí<¬¶±±qÀ€ àa}\kk«¼¼<.—4ª««ŒŒÂÂÂD÷ÖLrròܹs333544ðŽâ¯ööv†-©˜×¡»wïîÚµ+??_NNïX°{ûöíÂ… ³²²ØŸf°¢¢¢ààà™3g¢K¦ ˜½½½ªªªŸŸŸàÍC›7oÎËË‹‹‹Ã;H¨qð<ü›7onݺÕÚÚÊ¿h #‘HÛ¶m»qãÆ’zS~zzZZ~Çÿ¼Ø^’“–Æîò”‚ÓmuK¼P(8´'ÅÅÅ ÛøþššOOϺºŸ/öC÷ïßOKKûûï¿¿Û"JpñâÅ‚‚"‘ˆw Pã ¯'$$TUU1†ÄÀÆ'Ož¼páÂl#¥®²´;VÿÁ–DU¢m2v¬É²×Ì×" —/_ÎÍÍE£ãNÍËËûù®ÿ©¯¯ÿûï¿áøu~xûömgg'¶éYš››·nÝzíÚµ¬E)j¼ÿþ>>>»wﮯ¯Ç;ˆ233ß¼yƒùj:gã×áE{qòìÙ³ØØØ[·nýxs?™¡‚cþÿ+ãé#…ð¹#YYÙ›7oîر£±±‘ûÚ¾~ýúöíÛ°_¤ººº­­-77—û£CÝpÓ󸻻÷¸â°¨5r€Ý¬Y³6lØ€w ¿ÐéôGÅÇÇWUUa«ÎKÓG‘Éä 6œ;wNEE¥÷=_øFTþûã·»ç#-ç3Ÿ™oŠ¾¶{ÚX`9ÕùVB5€œÿpÃoï#c ]Û­×âÿ½˜Y÷ñÌïºAOoÞÏ´Ï„Úã®íž¦K ¦Ÿñ¹¶ÁaZÐ*_ï]6…@ èX.G«|ܵáèå}ËÌ :Ëï}ùŸiá™æÏŸokk‹ÎQ ô ÄAƒ ò ±±±Ïž=ûé3¡"ÔÈ7nÜxûö-¼2$Þ¸:‹fé7ãÇgdd`^<7nœ>}zo{tÄO`ÛÅÝ¿<‚ Ô/×° |t ]­2ù´5`ýÅÀ¨G77L,øØŽ’ŽÐ=pfÃ$Àùd)Ú ®†G=ººK°:”‚ é×–ñyt ºcÓ„ MñSÎþQQ7ŒœOkF¦.[:ï÷îke²hhhª &^HE$ù´° ªL÷`lBSÇË«»ûÿ»BpeÔÆÆ4ýÛåýý‘Œ ‚dÎ`WB=Bͽ¸uëÝ<‚ Ò²aÐÌщîó:×áuttæÏŸ/%§žÇŽ[¾|9•ú“g~yƒÅX½ÛMµÁòÜþ˜«Št0`Ɔí&Æꂺý%–û‘ºÚ:ýŒœ¬@Ê`£û‚<º ¿âfÙO¦ùsd1Ø5Ç-£j8@€g+¡S·©O (›Í@Ãø§ƒØ²³³Ïž=ËÑ}ñ>|¸††G3Ì,\¸ÐÅÅ…ËCCß“‘‘qvvæt>™ýû÷8pÏž=½ï&rü7¿ý‰'8zC ‘ !!ann®§§§¬¬Œ±Þ‰Š­[·ª¨¨8p ÷Ý:»ú™/] €?1ÐÇ Ø:ÏQ¦R€ÈÞ3G¬81kG@lÚ—œ§;`€Td>vÜ…N@RùÐDÎñ­}÷ž¦W<ÝcÊ@Ff(MÔ6¢4ÿwÈ6–Ç~ù’ý%;éõë÷kÙ\ÁA5kÖlݺÕÀÀ€Í÷¡'²²²...vvv•277ÿéó }Ù‡~úU’·oß¾žžÞË>¢ÕÈŸ?ööö`»$J¢E‹~ûí·þýûc«ƒ¼N¡P0/ ¡ÀÀÀ[·neffö´ƒ<€Ò4î±(úÓé X½~‚4zª´Ü¸D0æðO÷53-´³Ÿ¿` øîl ]ž²¹èãWÎ_¾¶~Å< µ’»}2`üJà»äHR Öû”z2¤4B €û¹M*ÆÆÆÆúW&L›ö×6ÿGžžž åèÑ£¿ÿ%%%EEEa~Ú Û³Áººº»vírrrBzx Iä9`Íš5îîîp ¨Gì_² :{öì·oß°]ñ‡„Б#GÌÌÌ Æ¶5=×`Wl=òßã<DU#BJ܈m¢8€åüù–ÿµ¥SIÍèÖÿn6îàØz¤#~>èÎÿÿÇŒ³)Rïð?Ñöu‚ åç€ÎTt©Œ±è=ËÄ=CØ_Ûóÿ¥¤¤DAA!%%…çïûòóóI$Ž³˜˜˜cǎݼyCÙ´´´cÇŽa{h—Á`˜˜˜œèééýÏQkäeeeæææOŸ>0a†÷ ‚wtt¬^½ZVVöç¾óz_÷áÇY³feddhii öÈMg´•”lz]|Âäx,µõJß”GñÖ—ÆR—Ï©S§òòò0ߑꦠ  88XBBâðáÃlÉÎÎ~øð¡””úLÔ 7yýáÇÙÙÙ˜ó:`ÇŽ)))oß¾ÅV+^6rÀŒ3ôõõ¯_¿ÎÓ !áB§ÓO:E Ö­[§®®Ž¡øÜ\_7nÜ8''''''Yiwüã5–קi«Ѷõ"ý–w[WWW·oß>^%uˆ455%$$ q9º§§guuµ···`˳Fðóó+((¸xñ"O#„Äy]QQQJJJ¤Wý‚~èüùóeee=N(Ë7RZ >"ííMííÈ×ûKô1fåuëÖ¡“kò6<ˆ·FõÇLš4 CYt”æa?__ßC‡UWWc®^5ò†††Ý»wß¼y. ýƒÑkjjºß ‚DÚå-_¾|ñâŪªª|8BSZR¥ÁãÞ)’•UÂré?áááÉÉÉ_¾|ᢎ |ñUVV0`¶ëf}„¢"ûƒ¹þ‡­­­‚‚‚……7G·µµýå—_ÜÜÜ¢¢¢¸©ç‡H%Ù_jÚ¥åÕÆk}BÎe#lØ°aÆŒóæÍã®H4 ý@ÀXççö ¡áèè¸`Á~Ôüôètcz›–––aÆݻw÷U#Hjj*§ó=544Éd~ñLφ1ÿߥNÙŸeªÜÞDFFªªª65ñá# ¥ââ⬬,ÌÅa^‡þÕÜܬ¦¦ÊËJ›r¯­A»<ÛÞç»ÆÆÙÙyþüù¼¯⃎Ž__ßÚÚÞ‡qñ]XX˜šš‡#v¤yv‡F¤.h ÀDT^UŽ H{{»ººzPPë„Ä—ÓÒÒ0^€„Þ Aƒ®^½êîîÞÚÚúó½ÙwÌÐ=PeïÞ%¼ªÕ«W¯?~üÓ¥º !ñöíÛòòrÌóÒÄÅÅñ$Œ%K–X[[oÞ¼™'µ¾Ô˜M>¾y±!`°Å¯Ž ¬“«Ê[·n511ùí·ßxX'$Þ8ÈëD"1**êóçÏü‹ÂײeËÆÇÃá×cÖ¬ ÄŸZ1eNÞ R©®®®§N:t(okfª¨¨hiiaUPPÀ§xÄ‚iõɧOŸ&&&>{öŒ'1øøø<þ<66–'µZ~!#ñˆZþý«éÀHQž'5Þ¼yF$yU!$¹yÀ“ƒ¼ÞÕÕÅ`0<½3$`¾¾¾QQQ¼:7R5¶T—í”W’ÆlïÞ½C‡åáYW7•••MÁ——÷áÃî—œ¾G&“]]]<©MUUõìÙ³ëÖ­ëìäiË,‰œ©ïúüyåSžÔG¥R]\\Ž;ÆìSñ÷÷ lllÄV¿ý55µS§N­[·ŽBáåµDÞÊÈȸ}û6_×½hooïêêjjjâ´ ¶óѾû#¾<µnÝ:MMÍÝ»wóªÂúäÆjÿ’œß7]À*„¶lÙ¢©Ùãäç½011ó0MMÍýû÷;;;Óétnê¡åµìOƒÉžÅGt¨\ß«DÄÑÑqÛ¶m£Gæ¶.¨ïá ¯/\¸pëÖ­ü™·.:::»wïæ¾Ëûµ €<¹¬_TTtþüù€€~§Ï0€£Ö®­­=bĈ)S¦ü|WˆC£GÞ¿?ϯÐìÝ»WFFæøñãÜTãí oöjËdääääääv½æ20OOO*•zäÈ.ëD‘„„„¢¢¢œœ¶E_Gë¾@} ‚ æææÜw.,«cqkÒ¤IVVV—.]⺦Ÿ«©©‘——‡'ó…B‘––ªKÙÙÙ“'ONJJ200ÀVC~rB …õD‘b6A0æJJJÌÍÍcccLJ¹H¤577S©ÔÁƒ1¶"˜×¡effN›6-55uÔ¨QxÇׯ_?wî\^^žŒŒ Þ±@+-- œ3gŽ••Þ±ü½{÷ÆÇǧ¤¤àÈ¿x»â0Ôqp>55ÕÏϯ££ƒÑ@BÅÌÌÌÍÍÍÙÙï@ ¦¦æàÁƒ¾¾¾0©‹¨‚‚:þéÓ' e/\¸€yØOï<<<ššš¼¼¼øQ9§nݺUZZzîÜ9¼Dy=&&¦¬¬ N»Ñ§œ={¶¦¦æÚµkxÜÜÜ.\8}útñÝ»wåååìïßÐÐpùòåÈÈHþ…$°] |õêU[[[bb"ÏãHIIùùù?~¼¢¢‚õ³¯®®nÿþýpÅa¨  €›Ç–9ç/Ú÷5ÒÒÒD"ñðáÃUUU8†úáÇ«W¯ ìˆ111~~~쩪ªjnnÆv> õŽß=ϤI“\\\øz”Ÿrss›;w.\q¸£ÓéÁÁÁQQQ•••Øj€ãסŸ˜:uêâÅ‹]]]ñ  ¥¥eË–-ÞÞÞÄ+ˆ{è ¡]>ÜËËëóçÏwîÜÁ+€ððð””a¸6 n¾Ër–×…êAVH`þþûïÌÌÌ{÷îárôÍ›7[YY-]º—£C¼2uêÔ3f,_¾CYô<²²²ÿüóÏŸþɧ»ø½kmmݼyó•+WtHÌp×/^llllhhÈ¿h á$''wýúõ­[·677 øб±±Ïž=‰EÛ$$$‚””Þ¯)S¦`{ìÑÎÎnØ°aü¾@moo?uêÔ7òõ(?ôÇXZZbûÒAÝÀqn»–,YÒ¿ÿ»wï ìˆ\¿~½ÀŠjmm½{÷®ººú‚ Ø/•ššª¥¥çn]úúúþþþóçÏØA_½zµtéÒÏŸ?óoqBH„ òàÁƒŽŽŽ*l©C IDAT+V`»oó:Ä®††}}} M—ñèÑ£1cƼ|ùR0‡ƒø-;;[___ZšGë¢ðGppðêÕ«œœúõë'€Ã!âããóÏ?ÿlØ°A‡ƒúò:•J%“Ƀ âk@0ëèèäÜ–#GŽÜ¶m›ÀñUjjêÓ§OÍÌÌ/^Œ¡xcc£²²2Ï£ú¡7oÞNŠõ‚Ü¿ßÏÏL&c«Ž_‡ ¨®®®ªªJOOg¿H[[•Jmhhà_T}| ê; FnnnYYYSS¶`^‡ H†.!!¡««‹w $æ8k;pàÀææfÌ+ÂBÔ—nØ°ÛÒ“ŠŠŠøÐ.±ƒƒ¼îääTQQ!$KvB¿q:Ç™‚‚BÿþýÕÔÔøÀüæÌœ9S^^ÞÚÚš·ñ@ÐâfŽE8~‚~ìÝ»w#GŽ9r$ûEjjj $´S C$ Z[[---±‡y‚ A R©¡¡¡vvv†A}ÏÍ‘H¤ììlþ…A{ýúu~~~XX¶âoÞ¼ám<$®8¸¿ÐÒÒ"%%e``À¿€ HHÔÔÔÈËËËÉɱ¹?‚ ñññ£FâèÒ}_ƒíaLLÌ»wﺺºfÎœÉó HØ477S©Tl™ŽÎ×ÛÚÚètzWW¶#A©®®öóó `¿HNNNbbb`` ÿ¢ê³ZZZmmmxA|‡ ˆŸŸŸ¿¿?‰DÂV\S‚~ µµµ³³“B¡pZ>°Ò;¬¤A"Á`H$ÐÑÑŽð䜗‚ A°°°4hдiÓ0”…ß ˆ}äu}}}YYY8<‚z3POTTTvìØm ô™žÑ£Gó:(C\‡_´hQWWûAè’““ëׯŸ¼¼<ûE444† s?íرÎ7õƒ ¢Ñhýû÷ÇV¿A?VQQ1pà@˜K °ÆÆF …2tèPlÅa^‡ H***üüüìííÍÍÍñŽ‚Ä÷×?}útïÞ½ÎÎNþEA¸ÊÍÍ¥Ñh>|ÀP¶¥¥åêÕ«­­­< ‚Äy=***??ÿË—/ü‹‚„LJ*++Ùß¿¹¹ùï¿ÿŽŽŽæ_HbÛÂØØ؆††¸¸8žÇAB¨¤¤„›Ù]9Èë‚À‹öPQXXøôéS"‘È~‘òòòÆÆÆ´´4þEÕgÁžê;ètº¿¿ÿ£Gªªª°ÕǯCРßb Þˆ €ŒŒ Þ@`0˜¿Îr6ß› A63fÌ@dÒ¤IÊž‚ØÇÁùúüùóuuuáð\ê @€¨3gÎÄ6$wæÌ™JJJ¶¶¶¼Ž‚Äçëæææp€ ÔG 2dðàÁÆ c¿ˆ‰‰Iss³žžÿ¢ê³¶nÝŠw$zzz˜'‡pü:A“ŸŸ¯££#%—›‚ >âà:U@¡Pîß¿_ZZŠn4h“““‚‚ ¡¡H$2§×××_¼x1z^’ššà {þüùèí öðáÃÂÂB´ˆ¬¬¬³³³²²2€D"|? Ç!C~ûí7tŠþšššÛ·o3Ø677···GŽ‹‹{ÿþ=3þ•+Wêèè:;;CBB¾}û†nRTT\³f :Oj}}=‘Hd.Kjhh¸dÉôVqRRÒË—/™µ-Z´ÈØØ@¥RCCC¿~ýŠn’——wvvF/566´··£›tuu—-[†¾OŸ>e¾³gÏ?~<€N§‡‡‡3gGèׯŸ‹‹Ë˜¦¦æ²eËЖŸŸʬmÊ”)S¦LAw‹ˆˆ`•””tssSUU´¶¶1Ø°aÃV­Z5`À@EE…¿¿?³¶ñãÇÏž=p"777<<œYôiÓÐÇĉˆˆÈÉÉAw“’’ruueÆØÔÔ„nRWW_¹r%OYYÙ;w˜µY[[Ïœ9Ý-::š9 Ž@ ¸¹¹¡ŸŽŽŽàààšštÚ`RSSß¾}ËÜyùòåèÍ‚ÎÎÎû÷ï———£›Ö¬YóÃöl``°xñbIII@rrrll,³¶ ˜šš~ßää䜜œ˜íÙÏÏý 2Ç‘œœœÐÐP `oooff Ñh¡¡¡EEE=”Ùutt–-[&-- ÈÎÎ~üø1ó9s¦µµ5€N§GDDäææ¢Eddd\\\ hii d®‡=bĈ+V °¨¨($$„Y›ÍôéÓÑÝž2VPPÀ<ÛSUUe.ïÛÙÙÉÚñéêê¢_óõõõÌNYFF†uäkSQQa>ÎÖ­ikk3×dm`’’’†††ÌÝzj`‚0O©Áÿ606Q©TÖ Yãihh`öÝâ)))a¦=%%¥áÇ£?Óétæ¹#@CCƒ¹M·obbÂü¹¬¬ŒÙÉ¢ ¦[{`mÏl¶‡¡C‡¢§­à»öþÌ̾½ôr\¶ên½G­ý¹—†¡—ãæ“àssA$Nà|sA$>`^‡ ‚ ñó:A‰˜×!‚ H|À¼AAâæu‚ 0¯CAø€y‚ ‚ÄÌëA$>`^‡ ‚ ñó:÷¨%ééÅ$ëÌIã´Nj]^Ú—fž†áEU{~NRrrò—JOÀp!-*=)))§®¸Ëg0¯sôv¦¥å¥¼M¨M—MÆz×ÂA Ú§ÝC Çzgð4 'x7*Zå‹ey}› & WZzúO#ïH¯œòú–666&Ãå«y ô?`^çš¼üex[©Òö´÷G&bsïúœ°eÒf^LT“æm>ðnT ^k‚å1ÅBI¼¶2üàô«9ÝW„D Þ-*úØÊ@°àIAj®9€]SoÕñ6ˆÌëÕ'û9MÓ&Æ9¹NøïErþ“í˦Ëå·Ñ5Û·9½ví÷iÚ‚žãéÇ¥ùOœÆ=Ç£¡hË®Jôs²· ºcm·^|Ö””{¾Éíhñ3>Û§izóÖxf ‹ôBÕÄ!}þ2ì{E™Ð4ª¦ ’Þâ »gi @zòo.:”þ_{w×Ô±þü’°)û¢ˆ²©@E-ÁªuA­;Ø^«E«•Ú_ëRÛ‚ÖªýJ/ui‹U[—ZµWmoAë®Øꂢą¨@« @•D…ˆ ’@Iïüþ8!Dj-LŸ÷¾Æ™9“9'žäœ™sJÿiÐÄTZ͈Һ<¿àÓ]+#½¬Þ!nÀ5™¶…Â?#A¼ÏÀ˜ÿ;˜òýÀ§e¬dŸ?€Ð·“R’—Oè >£Œ±ò„PŸ°uÃÂqÜ1Ÿš°uÑâOVh 6ðº$9-eõœQ\&c勘4ƒÍnLZÀ{Á¡†ÑÜ>{¶€1͆AðŽ?mŠÃAšC«TD«_°S\ÛbG‚4Ö7¢d'’VÏ÷z8áaÞº´/Øv;mhí;ƒý,,,,<^ÊnüR Œ ëÂ%ùÖ Ì†.¡›©Ö6¨´Ç×ü«ûëzÆî=ºtH3í#iI­mD¡ÏûiŒ±ÂƒóŠ¿zéóŒ¿2/˜üׇ¦¦>¶u÷Æ l >NúÑ\US @ Ô(Ñÿ9_.³F //]Ú.o})äåتgç$§ˆ r÷ °û>5èâçþd÷‡´­lP©öÌ ›÷Ó”/Oÿ¾î»fØ?ÒÒZÓˆÒŠ’¾ü:å÷Ÿ®‘“ÃXÐö'…âúãð è‰ëoÏ©P&:º àìÝ ×?Þ.ºò#Ë—^ÁˆPwÀšÐàFi”_%­›;.¢O»Ò¼l@Y®Ô—6Ø„˜±V5¨Î­ùפ͹SÖŸÿ~^µZ­V«i>uZÓˆÒdm3v]þ8ðß ÀšOgŸŠë£kô ƒ#p ówï7@5Ð5:aq8bú¹u,°ð•Š±GÆPJP£ÑmØ8:Xî0$2ÌÂkøÇÖ§\4¬i¸‰FYŽŠ¦>=59¸tWÓD!iíZÑ ª½°tÞ1;bžã[XØÛÛÛÛÛpìΓ?¤9µ¢û×V­Vñ» ³è6icÏؽï÷}Ôu¼ä¯²`Œ=¼1B!J=|A|'hHd§ªÿþ!îV€*'õç3â;í:ö9Ћ@[(:[Wj<-ÍIK=SÀÚù‡¿4ÂSvábU‡pW])3ØÊÂÌ‹åÂûùí4'ã†Ý3ýÝZô0æÔ:•V&Ê,¸ï¢aÏ:YµìÑ _ëQ­üRÊE5Öa#"›ø#FšÅuB!Ä|ÐyxB!Ä|P\'„BÌÅuB!Ä|P\'„BÌÅuB!Ä|P\'„BÌÅuB!Ä|P\'„BÌÅuB!Ä|P\'„BÌÅuB!Ä|P\'„BÌÅuB!Ä|P\'„BÌÅuB!Ä|P\'„BÌÅuB!Ä|P\'„BÌÅuB!Ä|P\'„BÌÅuB!Ä|P\'„BÌÅuB!Ä|P\'„BÌÅuB!Ä|X™ºðçŸÞ¸q€¯¯¯½½=—yçÎÒÒR.mii¬¯ýúõªª*.íääÔ±cG.Í»|ù²¾Z§N¸tEEEqq±¾¨{÷îúôÍ›7+++¹t»ví:wî¬/º|ù2cŒKwìØÑÉÉ©A‡9AAAmÚ´áÒR©T¡Ppi{{{___}µüüü{÷îqéöíÛ»ºº>±!„BþÓÇu•Jµzõj.íããóÆo`ŒmÛ¶­¢¢‚Ë·°°ˆˆˆèÝ»7‰D²cÇ­VËÙØؼñÆžžžŽ?~êÔ)}Ëžžžo¿ý6—Þ¶mÛ;wôEýû÷ •J·oß®Ñh¸|>Ÿ?uêÔN:‰D‡ÖÇuggçØØX.½k×.©Tªo­oß¾£GpçÎíÛ·WWWsùVVV¯¾új@@€œœœŸþYßšƒƒCLLŒ•ÕcIêú_ؘ÷"»<´Ú~͘Æ«¦-Iú"ÉkòÜᾶÆJer~ —Ó#ôE+-»zñÜ !„aúóðW®\áVVV\äøúúZÕ±±±ñññáò]]]õEúå]»våñx\>ÇëÒ¥>žè7áñxþþþ\¾“““»»»¾ÈÕÕÕÅÅEß>Ÿ¯/Òo K—.†/ÔµkW.ßÞÞÞÓÓS¿ ×8WÔ©S'[[[}‘þ'þc(>ùiÌ‘’‡V“Û´æŒÜxYíõoãâ2nh•©6ó Z{åQzR-ZÜ1èkÕC$„ÒB,ô¿ Måúõë;vìðõõ?Ó¸S=bŒ)³7¾qýãO3uºÀ Ç?µÕ¶ê‹Àï?gÝ DË!¤ù™>®ß»wïÈ‘#½zõòòò2u_ZkzfÃõ_çùF¬ñ‹x=zØË®¾7i] ¸¨©ÑÍJsuò€~kÁT5 ` ŒÑUÓTÝŸí6ì3YÁ‹?î?¼uÑØu‹F®ÿýð{ Ûëèìú€^ÁºÑ Ùöÿ¿™ˆønˆÝ&¼öu¸Îð›6~Ä@ÔÔðùcŒ®é`×äq!¬Zòóš¼¹óF?šº¨AñãšÅÛŽJƒ#FØj|šlü}µù[W%×Mdµqóï5üÅüìà–ðûo„V³â¦ÖýTÛ°®rø¼—m -ùqóö§_VÛ¹ö>)úõÜMÓûÇ¢-ÚúénßY †{™>Öüs˜þ<|NNιsç¶oßnꎴ"7E‡ÐyenJâÒyS½î–Õ*ÛàÑ¡Øuø hß^™‹ ÐöÑlk,Í%ŽØÝcUÙôE+S®U%„âòòGïUÝÙôjíý-y{-¶¼6i]é§1#´ul quØ«ÑÓ§OŸV¾dÆ:‰ætÙåÉÑÿèƒ •ñÂG]ÔP-Z?nÞzÛn!Ï8æ6ÝiU¥›ââö:•uêÔ©CÛf¾:Ìß~hŠ´Àµc+—}•p¦®ªFøÞGéÅ* èÃ@ïqïí°  q‘0m˜Ç˜¯šXâÒ*ÕÞX¾,îð• S÷ãŸÅôqó€¯fÉ¢©RÏ€ž¸±p`dTd€Å 8®/IßÙ´¢xÕh‹°!aëÄPÜÕ FS (¹ŸçZ¥û¥®¼RR£©OVÓ§ë=ǾŠ­/ZÆFn—ƒ·G|Çö¸ôÉ€ gê›2Þ+€ÙË=|ã®kê_Å6t˜ýZ_ÏÌ\=Ço€oÎ ™-~mÞK¾¿ÆÏŒ­Y³&66öîÝ»«¨*ÌÉÌ̾®„|ly\ž²$G$ EòjPJ±\k¬Ô )ñõÛÀ¼/ùwD`; ®5­,G”!åp›«å%%ÊZ®@*‘(¹6µ q]óͨ°°pòäÉëׯo «W¯Ž1"??ÿ!õ¬Á¶ö`ʾ”””“ÙLq:'ÆÆlS|ëŽÎ|4`K^Ý»ïk>j ¬ã€ìêæK–¬= Ì\ŠCsR%÷Œ4®, …™eZµL*¯´r±T÷NÝ—†$/S(æJu#A-/‘+•…"QöR©XªŸú¢U–HŽ*I^¶P(Ì.¸U¿¹Z+/Ìn0ºä…ÙÂœ[·µÜ<žûiåR¹ZY"ŠÄÊZjiP(ÌÌ“ÔWQ—äˆ22DyòºÁ&•+Õr±H(Ì|K¸ r-k¡Ê3ܶqkÆŽƒY1Ý”=óçÏ/Y²äóÏ?7uGZŽF£9xð`nnîêˆ3IÜ’”œ–£Ò”çff–¨cLUr!9qó®´œqV–XÉXUnffQ9cŒ1Õµ³gsUŒ1Æ⬬|¥A Z}º>S%ÎJNLLÜu0«H­{yÕµ´ää“ùr}SM÷ª*7ãhrŠP¦Q¼ Sˆ³ÎæË v¨<3eç–-I¿djþÞÑ3cÜ=ìììæÍ›×ä í•…~à^+ŒÉ3V~¨¿È,3\ÔиTߘ2si]öCiËŒ©s¿3X"1dg~õ±9@ÏoTŒ±’}F®ÿ1&Ù=˜-n¦}ÏËË?~¼³³3î~MÍÔpKàN7òx¼çž{îÊ•¦—{¨ÓCvTQŸ!Oy;©`¢„¾ð›6+À<1cŒ•/öÃüŒ2&ûɽðÛì÷Á‘‰Å·U n°X¦ã‚3º/eŒ1¦Ð§¬L1Xóò&€ùiÜð¸½èøÙùûûodŽ°~sXŸ]Á& 7Ìü4£ìþvêWèôøì|^Ò»õUÇo’1Öx‘Ž2c÷^Œûò<36P®ýiÜšÑã`NLÿááâúŠ+LÝBLqã]æIDATÌð¾Lvvv|ðAãèž³a0ñ¬‚1V•4Ó ½V(˜jà x/àÖ–'„Â{Aº.š±*c¥õt+SŠ¸DùêP`êw Æ»½u0ð›[¢¥ÀlƤ߀Ñß1Æ’&píÿ-¹¹¹ãÆã¹á¾ÛÚÚþÍ–[Ò¶mÛôçñx}úô)((0R¯Q\Wf.­‹ëAèµN.?,à–°²ª_]TÎÙRöÆÌXr4¿ºQ»U«Cû4L·X¦Güi¦Nâ¹€Z—–ìžÔ¯L†œTqëZ'ž,QÈdÊÝÑÀË?hÓlp ä¾—)LšÌævL²{"°LƸͧU0Æn'„¢ã‚3Lº@|ÚuƘ$åè»apž±{e ™üÆOþÀüäëŒ1¦8=˜’x•kSÌc7?4hýÙ î è'Ëc’ƒó€° …¢ñ@U×µ¬[ûÄŸ¬hÜšÑã`NL?—¡k×®nnnÏ>û¬©;BžVqqqúEƒÜÕ ý5ŽÆ £ùMÕôü¦^î/µSVV¦oJ­Voܸñ«¯¾ªªª2\Z%“búÜ~Nì_ysÚë›k»w2ªž?öóšå sNenËAÿ±ºúÎ`ßT)Gsÿ4K‹ê+s0Ý'ðxe΢éá¿ÜZ>‹ÓóÊ‚S“"¯¥ž¼\ÑóÇý˜w߯£¿jþüù_~ù¥Ñ¢ÚÚÚ¡C‡â)yã Ÿ=¡ÕjÏ;ýí·ß>øð­@ØPÔعܕ4©Ûë’¦ŠœÀMuyvú×lÊÇy—Ο=~xSÜ’[–|Ÿ_;-ÐàJVõ•´ÄoÁàÔòœúÅ2z\úæ5#+S¢ Ö¼Œš±᫳µS¬÷¯ÃÀu£îŸÊÜxÐÔTv\0«ŸaQA¨¸š ‰x¾3Ÿ‘£Ãßxǹ:îN—~+öo‰¯<À`+ßxçÞ\7ªá"ŠswÙÂ]øŒœŽÕÇ΋Ò ÔKê Æk/ù9•næ+tL×ß}÷݇×3/¶¶¶ÿ¨UûOΘ1c¹4c Ó5$šÊÿßÿþ÷—ê?4¿AƒØNFF÷_77·°°°ß~ûÍÑÑÑØ<ŒÃF»gV×I›o™ùaä´÷ü!<ðJ­h€Á" kv<ÛÀ‰ÑX¾ekÀf»ÅÙ+O¥öÛ²‰·Ó6Æ6~TS¦L)**JOO·¶¶æñx·oßÖ?÷ÁÒÒ2::OÉצM‘H€ÇãõíÛW£Ñž}iJÁ™ @>¸É * kô¦Õ[vOýž@ŒHàò¶7Gì“¿ÿíî}#»÷œ¾hî\‹€Gÿ˜dÐŒ¦Êàmlç ýErÆÍ—àssZù0²2Es¬~Í‹ã èh,ß™ü#âòßJžÔ`e„ñ1†ý¨12g¨É¹½ y†1Эº6ŽoÛ5Эß‹töôàdäÏåý•Ïc™ºµ?—ü|bì84ÕͧÒ;@šTZZºjÕªmÛ¶™º#¤uñ÷÷o×®ÝèÑ£===ÃÂÂRSS×ÉYݘ«aŒ1aB_t^©T§‡o%—2Æ»<èñÙyî”»þ|l£Òzu§ßõ‰Û‹ýôçí5ç´‡Ï2còcïà.¨Œ ¯ówÕÖÖú¨ªªÊH=î<¼Œ1ƘF%ÉXçôø81&JB畺3ô%û¸Ó Ÿž¬§ÌŸ|™+Qì1)¥÷·[µ:ˆý‰1Æص9çá¹ûN*3WˆÏ(ËÛ0 ˜˜­aŒ1mî&?„í× w\pFß–Hwi|âÙF§¦…‹ƒÑy%—-Lè ŸE%ŒnÎ¥µâoQ7C» Mœ‡ç2¹ÊŸž¬à:¿0S6ÿ~lá3˜þ3·kÜ•#î<ü÷ùµŒ1yZ–¦5¨JcW·fô84õæ>(®›@^^Þ’%K>ùä“G©¬ÿôÙ—¿6×Õ­øH3¶Fš×¨Q£ôîÝû×_m²’ö÷™î X&cª c`BôÝ„~£bU\æ€ÏÒŒ•ÖS ßÉ ºyv¡‘áþ@ÝEM¦HxùƘ$i’‘?Ö[mmmrrò+¯¼Â=¬¹y¢ÒÒÒ¸ººÆÇÇ«TM¼‡\·è<~­˜1Ƙp¡wð9…I“ ›Âv{k´î9Ôº·oÌ q£©§ºys‚Á\ûýãO3¦Ù=³@7Ír~ZÓþ>Ç""Àk?¨ÎbOÔ·%þÁðÖ}K¸׫ЈWô7¬>PrßæútêÂg¸W©Ÿ‹Wü 2-À?‚kuìI“g,ãF`D8|švK?ÁspijF}vš¨ŠÃþ@ ×r]ºqkFƒ91ýs_îܹ“””Ô³gÏaÆ™¶'-æòåË{÷îmӦͿÿýï‡V®8õ¾Ó [Kh–›QTœ‹sšh«Ä?ÊXI S*•"‘ˆ‹î¢• SÒó+÷¯*µé!ðáie”ô‚J‹n‚ž÷þ3+_Ö¯O]tìÈE^ðÀpÿÿ)Õ7¦gY† |P—àZinJZv¥µ»à…!îÜÕ:­$'«Ü9XàëuQfVEРÐ'4ŠjkkÅb±þ1‰O…]»v½ôÒKvv>«ÈÖ]öæ;uòÓß5H-ͽXîÚ/¤î OPåeäZõ t² -Ì<—SXYcã:¸oW^ã†ZiÖcÙün¬DÍ`[‹W>(rŽ¸T¤ ‰Ù^QTã'ð³ ¥¾$ÕvèÑodß®<@)É.ª :Ö5t&Œ7`JvÅ¡_E"JɸTîà×cd¸8»Ð¹G_;Yýæ†Mq5}ÇwÖÞâû ¼î;0ª#~¶Ü®Ü##²2þð .ШFU•'ʵëÖ×φé­qïEƒã`NL×/\¸’’bkk»páBÓö¤Å½zåÙ/²ª5W¹ {›vgÞß–»§ß:ÀpÕéç;óZl÷ !OÎ3Ñ_5£×cmjýŸÓ¬hÏ«!k™Ã“`ÛýÿmßòýXD¦ë–––––¦ïIKêÖ­›“S“£´J&Åôhýeü^£[U<³~±&NýrImaìynö=B‚¬a;ä¤âJðÕ­K>œ9ìíìû_¢ÁªÓ'¹¯„BZŽé£©@ :tè[o½eꎴ6ÆN:=h±&WAÿ ?é9é{)ž™6÷A‡×èªSB!O£Vq}}РA¤Rim-w{8::::êægjµÚ[·né+·oß^;—ÊÊJ¥RÉ¥­¬¬ ŸôZZZª©»“VÛ¶m]\\¸ô½{÷JJJôÕ<< Owl Monitoring System -- Manager Installation Manual -- Setting Up the Owl Monitoring System


 

Owl Monitoring System

Manager Installation Manual

Setting Up Managers for the Owl Monitoring System

The Owl Monitoring System uses timed Domain Name System (DNS) queries to monitor basic network functionality. The system consists of a manager host and a set of sensor hosts. The Owl sensors perform periodic DNS queries and report to the Owl manager the time taken for each query. Over time, this shows the responsiveness of the DNS infrastructure.

An Owl sensor is configured to send DNS queries to a set of DNS nameservers. The queries may be for a variety of DNS resource record types, and they are sent to a specific nameserver to request data about a specific target host. For example, one query might request that the D root nameserver return NS records for the "www.example.com" host, while another query might request that a local (non-root) nameserver return AAAA records for the "mail.example.com" host. Data will be collected for each configured query and given to the Owl manager to whom the sensor reports. The different sensors in the sensor set may perform different queries or the same queries.

A configuration file controls the behavior of the Owl sensor. This file defines the queries that the sensor will perform, the Owl manager (or managers) to whom the sensor reports, locations of data and log files, frequency of queries, and other important behaviors.

An Owl sensor may provide its data to more than one Owl manager. In such situations, the managers operate independently of each other and do not know of each other's existence. Throughout the installation manuals, it will be assumed that an installation will have a single manager. Special instructions for multiple-manager environments will be given where needed.

This document provides an operational overview of the Owl system, installation instructions for the Owl manager and the third-party software that supports it. Instructions for configuring the Owl manager are also given.

Organization of Installation Manual

Sections:
  0.   Setting Up Managers for the Owl Monitoring System
  1.   Operational Overview of the Owl Monitoring System
  2.   Owl Manager Installation
  3.   An Interlude on Sensor Queries
  4.   Adding Owl Sensors to an Existing Owl Installation
  5.   Defining Graphs
  6.   Changing Queries on Existing Owl Sensors
  7.   Owl Manager Commands
       

Full Table of Contents



Sponsors:

This work was implemented by the following companies and organizations:

Parsons

This work is funded in part by the following organizations:

U.S. Department of Homeland Security/Science & Technology (S&T)

The Owl logo is copyright © 2012 by Wayne Morrison (Wayne@WayneMorrison.com). All Rights Reserved.
This logo is used for the Owl Monitoring System by the DNSSEC-Tools Project (dnssec-tools.org) by permission.

Owl Monitoring System
Installation Manual 		Owl Monitoring System
Manager Installation Manual 		Section 1.
Operational Overview

DNSSEC Tools

dnssec-tools-2.0/apps/owl-monitor/docs/owl-sensor-data.odp0000664000237200023720000004057012063677522024044 0ustar hardakerhardakerPKO¢‘A3&¬¨//mimetypeapplication/vnd.oasis.opendocument.presentationPKO¢‘A¹¬Mmeta.xml Wayne Morrison2010-03-28T06:56:286P23DT22H39M37S2012-12-17T15:18:30LibreOffice/3.5$MacOSX_x86 LibreOffice_project/e0fbe70-dcba98b-297ab39-994e618-0f858f0PKO¢‘A settings.xmlÝZÝsâ6ï_‘ñô¡} †—&pCHh˜ãȵ×7a/ FÖz$9ýë+“rÆGÆNó[úýV»ëý—Ÿ^vô BRäm§q\wŽ€{èS>o;“~íÜùÔùág3êAËG/ €«š¥ôy¤·sÙZÝn;‘à-$’Ê'È–òZ_okm®n%d«+/Œò§¶³P*l¹nÇÇñ‡cs·qqqá&w×KCRC•\ŒpsÏ&­‡|FçEQV«7÷#â«ÐfÃê`‰à'õzÓ]ý¿^-ÊŠr™µ5ƒPË ÑÎÝžïÊ3L(ƒjiB+‘ߤI-­ã¹--ÿˆœe«C ^u÷9¡‹±€ä6ë–íçH×tsAÂÅ8 ‚Š¦‹‰Á£*«2ƒºÄ@W1æ}]Ÿ Ér;8­Î0®é¦YdNYŠ2çá+^Ì¥cPQ¶jï÷cò _W¯?ÜóCYÅ#õ:Îýi·vjþú:áê”L Ùžäû¾.?éÒÝ­wAÜ]ouþPKmí¦d#Ÿ$PKO¢‘A content.xmlí]Ù’ã¶}ÏW¨ä8•¥HqÅÎtO9eûifâò´«RyqA$$ÑÃ-ÔRû)ÿ?Èoä-Ÿ’/É@R (.’ZÝêNÕ¨Eà¸ËÁ½Ø½y»ÂÑÎHÄ·c]ÕÆ#{‰ÄËÛñO÷ß+³ñۻ߼I‹ÀÃ7~â­#SÅKb GP:&7"÷v¼Î⛑€ÜÄ(Âä†z7IŠã¢ÔL}ÃÛ)„>†½‹sb¹4Å[Ú·0£­”Eóþ-sb¹´Ÿ¡MßÂŒ”*_$} oI¨,Ðz”"ìq± ƒøÓíxEiz3™l6ucªI¶œè®ëNxnÉ°WÒ¥ë,äT¾7Á!f‘‰®ê“‚6ÂõåÑÊ,ÅëhŽ³ÞªAÕ¬šf˜ ˆË€Ù¯"¹L_ËÞèzX6¨Ù[¡¬7Î8q*¦ß*¦/—]5Øw6y™üãý»®²¨o[Œ¶¢*/ ÒÞb j¹|’$%«¬€èìœ]CÓ¬‰x–¨7­ä›, 8“ȽVr…^©ñ$:¤4 Ó'@¡àù²1E†ÆDd—ÄÄo¬úoïß}ôV8B;â ›X bBQ¼Ó ‰‚°·€¶´(zCÑÖºNÆÀШq{’á4Éhi Eÿ ­¥ŽV4 ›]Ë-H—™ï$vÌ ¸3p&ÊC€7_+Ñ©˜î0¹«ï*‰äXÐZ@×&Œ¦ì¤ P’æ*ÃÛgÓ 蕈@ #$éTºK²hÛ¯:þÄ_ì׸çíÍ‘÷i™%ëØ´‘€#h¶ÆÍdÉüìQ²OÎ{†j’„/¥@§£_-ø?9º*È» |4/ªç­p°\Ñ<³Â“4D0¢H(‹ÒØ.H¸V‹h¾@!i"„n‡D…X`ò‰dÚ6;Ogç‚›F~‡dW!ü2«|™¡tÅ )’S”±ñ6PD!(|”ùI*Á;½ÔZ^›¬0ŽB³ä.£ž<©„”ªS†)«@£Æÿåšeâ_’{ÖqãNT3w²"e•dÁ¯ óU ƒ%ÔøËšÐ`ñ¸OøÀòvdQ‘¡hˆõm:Þ¦ì¹ èÔgó…&)TŸºLP)cžPÊFgØ{y!^°N¥Ö2²¼»ír6 |%IÅ6Nö| 6jãl<"”}™þvüMgülh?›5Š]å†^ú,)ÛÃ1•:ÛsŒÙ´ ]– e6#k?ëT`‹*óÕ¡*"WßÅ>C•= ê Qe½l۳ճŜÓìW3Æ•{0âë7ât0âë7¢óÚ§yø¦Ø¢ikç4m1\ŠâŸÁ(áÒ“›kEøìµ#ü3ÀƵN|Ý×4E\Ü0’ô´WÞ‹ uX zhÖŸ‡0ÜŽs p|æà8gù*À1Œß®â×:EÕÏYÔþü†r¯®_Öî…×ì‡}Í1ú…÷p\38^ýÃŽËcXžÀÑŽÖçÅá×M@WÉš2mwB¡iüY³]—â9q׸xÛÂm.s–P üzD›iý¨|Ä´E£ßâZ‡T‰¡]ráíù:jűYSÄe¢n¨¶eÊz‹ÿC]z”!.D)R™" ÅZFÙÏŸc;O,@Ÿ§2/Préš_óD†›*bª²KbRò wuÌgŸ˜«Ë!fm%í5‰™ç°wq˜C‰D 3…ÎK©À/òÊØ‹ ¨¼’"¿GXŠļ媌¼<ë8€¡YzŒbk«Pý{H1Í’ög©¶jp[_¦µÉäK³~ÍЫM®.§¬gòRµÁ•Jtͨ¨ œOߦX¹Z–¬  ¸)“½äâíÑF© X`ƒÍ6ýÌÜéß^Él ©MÉSÓþR•l=’Mu¦J>¨dû’ÿûŸãul«ÚlÐñAO_\ÇΠã‹ëx6èøâ:v_\Ç쥕Aɧ)YÊÎç]“ÆË®òŒyâ?–òvïݾÝÊ.¯ù&1<ë幆Çr ˜ß‘•o–Š³üÆ"y{xïÆ"ùAP‡è1YÓ¼Ð7ïô{mœsá­ ð¯Jq½m~uQ¹ÿ^Ù™f»<êfç?EâÈF:zqŒ£XÇf#ÿ2fµŽêêåYGfU·Ù™ Ù9¥Ö÷f¶ÅQþœÖ‰(‰Æq=ÿò¿E>R€wnkFZØ==£nc|Çn«›®v²/Ã.!7ŽWìÊ@`ŸD˜f\Qì$ >m¤ }ªåŸ…µøýgö(Š—å±”²ª”ß5ù~Ä ¿Ë‹Wªíþj£¿>ðRÃKÎ![œ>£:f3t¶:‡€k%&tæpì™[‚Æà‡œ’ž§êÌží@“–ü2æ:ø4OæÓT á >u]Y³ £¶êXVmœÈëé:=Ä«!N4·òjèN¯].ÄjäÙît!†ª»ö¾ ÑTÇ0%|O]«êCfšs¤×ɵôt«£§›ã;¼ÅÞšbÒÙÙ‹Æž²»G$QHJ ͸lï²·} {[­öÖUk:{{3Ï>Z„Éæ‹6øô ƒ3Ÿãºu‹»öT¶¸êÎtÉà0Äœ>·¹­|ð=˜{„bôïì0Æýê&#øBWxô×M8úˆc’d_4(œFP8=¼€mÖ0p €WÆ„¡šæ“ûüi(ìñÝøÖÛÒ½‡¬=þˆ3v!ï³,—á+iÄ”°0;ËÁ"¾‰OPð=eê¨k§ò9S§f…O6¯Ìr‹é÷QóñÎ¥§æµ§îlÂDÜìêÁŽê¶Ôƒ¡ÐT‘.Lø€ÑzðE{p'âš—Wž(f°Å]¯ íØ©ÌÓ@ŽÿÂbˆ/¹æåG·s½&JúTÕggN”Îœ­8ã;˜¹²Þ£Ò÷(FËg†pdY’IoŠîݨ!²‹×«™Ãôi˜>]Éô©q˜Ø¼\ß1L´aþS&VÆl˜XÝëû –yêxödF¡UÇ•-ØØ턘àCeFAýÔ=›3µaB`ÊœÂøߨn„9ªeÙ2«–j¸]:í JÍkøO·í[zƒÚô…¶}¿É¼Uðнˆ'5÷Í0 }å˜Ýá§lû÷D¯Õ áÉ>ß êN´7o`<Ñ°ßQ§Ž<ê/üË ¬ژɇQÿ‹¬ \uV‰fŽ-‡‚ …Qw©Ï´jŒªc´3 ½ÁêZÖêìÄÍNO²tˆ¬†5Ĭ—ŒYeCÈW7]x¥ª2~ÉÅÌ  "Ö+‹XlÝÉpÛcÖÍÙQ«eɬ˜ùU·\ôt†êÜÏR-§²™lÛz K•Ã·ü¦¦:oìP¥ƒ¿ ]­£yŒ‚ð†ÖÙ‡+ݳìÚÌúv÷X¹ò§K—¸V~ùTß;Cì…ˆq(¹\ÏXdÀ_•Læ;- ·°í¨†eÔø.®”*øF§{ãeƒð:Ȥ¸kï tˆ<ÌÜFùó¯¹Æód[ÚKu+L {V&˜²Ëö~™6JÖï~úW¬üMvgÅ«§À'•ƒâÅSñÚŠÓ3ø{÷PKˆ~íj ¾PKO¢‘A¦&ï÷5 5 Thumbnails/thumbnail.png‰PNG  IHDRÀd*1 üIDATxœíë’ „Ùª¼ÿ+Ÿlb…%ÀŒ 0Ì¥¿_ç‚2J7‚ þú|> €¨ü:'@h`„¡@h`šWøúúÊŸóxÂ÷åØB7Íøþ¿7É{ÙüJÜMÙî‡IürÏÏ‚ò¼½\åúõ—üc[êY å_YRå¶ •¤ªm«¿ª}Rž¤RR›·¿gÃ_'Š9Æv*%Xβ&£Åêâ0¨ãnõYm[Š¯ ¦LFí§Ê½Ýmן¼]»ÿ¶V9VÙQ;;xk€®J(‰Œ×ŽÔ9ŽË´û×øæ|¨LðTŽSÙµ¼2@Y]QUWÙ ¢¾VÛvSRÝæ{»ÃÛ_¦6o¨áàQ€Ýà. B€ÐÀ 40 B€ÐÀ 4s°Ä˜ÎAP@³L šæù2X èhÐŒ`¼Ú(g1P@Ï2ÀìùÂ)ô˜éN0ÎðĽ¨G©'?ògøD†ö¿Òýœ› Âà}õ€:f+LõÏ|­þ ^@œÞŸà'w7åÃõÏ 41p}~¾Ôr»øÊŠ¯âƹ^aVp(—_Q»Ð]Q&5ýQ@iä @Êö÷ò„âäŠQ6~ÚÕ(¨å†P@£M ‘Ζ](‡ËG²G±!Ìv°ô×.íRVÏÒ(Á_‰1qp0Ûvª+ϯjÃGÉe:ôû•7ËîÍË]=L`pLQ›2–ë•ï\ÄhåÉTˆ…:ÈlM§ ªËTÒ›N¼@óT“ÝůüðÁ- úææ“<›2è{Á:_aH YÓ V(‚ò­Ô]lÕôÚÊB3þïu'qð0tßú\²øI +žRÍåR·/nyË‹Bt–‚ZV^Ty  &¦ë¡~4„žóo…ÅM UAÏñê‰Äëû= œógxî—ÝÙû×3 õ?f‹ô\ÊñÚ´H¬dõÄ®+€¤EÔê^Ïy¶ÈÆ&*¤æµò¯ñç´ÝUu†-²· Ämc}dT˜™ø@ý+Œ†skíàãÉ}*¼r4íUdï8€<ßJ;UrÜØ` 8¢†ÊÁæ¼· ¡+€°Äò:Ò‚ú"×ó€¼>$í õ¯E´°[(ïÏÈ4‡ þå˜ï·³O±cÔ¹äøºDÚËkÊÏ¿7A(Ç ¯Eg‹W€Û'­fÅ¡M7ÔÚ|>™‡;ãLˆš’Pý[b±Êœm1ÎQ~¤v9`æAu†[W¨’Ȫf^US¨:FH`í¥¼Ü•’FÂ&¥–=l ‡é9ì.¼ãÓÔdÆže2ŠƒdªçãÓÔ?{Åü8@Ë©©G|Žy-&4-„K½{e·¨ ¾k>u ˜¿ùkñähCô À/T˜‡´˜­Z˜ÇVνË’îêZåHHup¬¬åØH0³îZWš%Òú­ QѬÉÁ>¤Ÿ`”Q‰€ùÑÊÙ¶A™uþüY½Ú?Kž Ú~î*ƒŠÎRG‹Ü(ïEb„c”Aô‰°´ºüî,"£?DŸK{fwé™1áqà.Ðõá}‰ªÕD„ctñ>5#š2L©„ÇhóàvDl0¥!"£QΠÂÁTˆ[ª‘à³ÁG*¼Þ_Ñ»Ñn¯¸tµE ÀëEhÀ€’;x:ëØ0@räGá3H.<`=~X2@rá  c0 ¬«{0z°sì ô€­hCaÒÉ €N¬ Ùñ€‰ Ãb؉õ€ðLJâP¿rl€Gr] êw¨_9æ `¥!tbÞI«†Z< éó€ª`ƒ$MPÁ’&+¸2EwUêîr¶Ušgyw †¬àÍÔE /YE­W^>¤K­Ë{›»˜òº+­ç_Ò:?»Ç›.øuG(õ´ëWÏf*/5¬´þŸhéÊšY}‡Œ–ìSóÙqhªUÐ~n7|œéHõÕ*Ä¡Ò‰Uw n£ø4ƒÀ?(¿{H½  o˜%ºÚÎñ> -l•u»ïÝŨažè¸Pÿ¾Ý*ÉÎ(Ñ `T%TØFç Ñ ‚€ÐÀ 40 BãÙ˜ nqk€g7•ƒå¸5#À 40 B€ÐÀ 40 ð΀ÐÀ?` 8 0À¯…x[Ñ*'¢Z ¾eìˆÈlEkŽ@(—Iß]€djo°­]B`ÕZËï,T- Á¹6•}µŽô’}î“éŽhÝàÖå½JX2Ò„ ºø4€äs-YXor”Œã}%> À•Ú.'Ȩpk£ÿv·Tš6ª+%-Þ¤VâЕÄ/ªòÎB)¯›Uªâc¦ò­’¡šÇ¡J-f)PBï¾1©}u’¤žncîFÑ?áJJA—õ\÷wEƼ:‰ÉèYõß^:˜˜™¨v¿ßÉ+> Ъ*~óŽ-vóƒ˜g£B Ä§„y/)ˆòn p{3d K²»CA€·HÍ+£üò}¶oÍÑz³.Ú=Ö€’lEëÿÈt_¡•X}Œ§\Ž­híÈ™‘¦nÊ­ ÞäQ­" ¢J ÀT¦Ç£u pˆø,0ÀI þãÀÇ€ú5œêW p¨_0€4P¿*`€f/T?æf8V àî…¡:À³¨±ÕÛ1×Oï\2ÂÊš¦¢êþx$Tx6ÀZÄšKæÒ-‰$0 BãÙ¶šÂ¶¢uƒ[ØjÛŠÖn À0 B€ÐÀ 40 B€ÐÀ 40 BóL)^í`ö•ÜIEND®B`‚PKO¢‘AConfigurations2/images/Bitmaps/PKO¢‘AConfigurations2/popupmenu/PKO¢‘AConfigurations2/toolpanel/PKO¢‘AConfigurations2/statusbar/PKO¢‘AConfigurations2/progressbar/PKO¢‘AConfigurations2/toolbar/PKO¢‘AConfigurations2/menubar/PKO¢‘A'Configurations2/accelerator/current.xmlPKPKO¢‘AConfigurations2/floater/PKO¢‘A styles.xmlí]Í’ã8r¾û)ÏÄî: )‘5SÝ1ëµ#Ñ=1±Ý±öeƒ%Rg(R&©úé“ßÀ|÷køæGÙ'q (þ TIª*5f¢»%"A&¾Iè‡÷›H»Ò,LâÛ FÆD âEâ‡ñêvòËçÖÉûw÷C²\†‹àÆO»Mçz–?EA¦Aå8»á…·“]ß$^f7±· ²›|q“lƒXTº©Jß°Gñ+ìf²Õ™pµv<沕©l­®w'ÿd&\­í§Þƒle* ˜V«/ÙÊY¤/}‘l¶^6´xŒÂø·ÛÉ:Ï·7ÓéÃÃz0Q’®¦ØuÝ)+-^”rÛ]1)1 ¢€>,›b„§Bv䞬~T¶ªR¼ÛÜ©44^ºMƒ D ¹´_ÊݨZ§Ö¿îWÒ½ë~Õóbí¥ÒýŒ ×»ŠéËwÓ¯ÖÝxùºÇ¾Îô#²¿>~Ø÷«t#û,*[ƒj‘†[éfréjý$IJUi>Ø™ºÄ0¬)ÿ^‘~HÃ~:¨©¨ž=ey°i+,Ê÷jW$¨æB€ë_t„¢ ¢ìËZ”mÿøS—j”ýE¸ŽÏÞ`Ò¾íÕ¿”èoA)ÒÙ†²t6[QýËO“}¬~Ñ«®€{,ê<|/õ'ãDÅMÂ}’(ô'ZÓuÖfÅ£<„>ódÔr4|.€†Àz«¬ˆö°V¾€ÁK—¥|ÄÖ`dT§¥]•©›«7¯Óñ±’„ú‹Ð3¾­ÊÂ`Uor³l„«u^-¤NÃ'¦¯“4üÄ‹À †+访î²<\>±Q¹õ|ÆÑÁÑVabÓ;T î’<§«¤®²(Xæ ‹fAZhS”p£®=Ÿ­äBߧ.¡rQꜹþȪf£Ž(~ê)î4º¨ZAôÝ,´Á„§täªX+Àˆ ë<`¡ñBzM¯Å-v.“=huÙå+wØ÷úiŸWg.’7Ä`ÿ5]+6  t|©×§üÝ.Š‚¼¦<ðlö•é4q;ùÛü×°þ¼›aõ»Ú°õÏœ…mÂX¼;¨TŽ•¹kVyEGË/8Y= dŽÕÍnÿg<ÈÙÖÈ3ÓþZA¶NÖ“Mä`r'ÈvÈÿ÷¿ã1¶‘á(Œ;1ž)ŒÏŽñ\a|vŒ…ñÙ1vÆgǘÆúÈÇ\).BÓ¾HÀ`l+ì…Œ/7‹µfq1­,|÷Wùr¶~­\É—Y„N,œ]ó[v‘Çù:™öWCØ1‡ %²_+’ؼ L²RZ÷ê“*Vr‡‹ÕÈaÁ‚Q,FÈaÁjŒ•>Á9š)A9®<Â39IŒ,SN’ 9ȱ‰\II9ëà²å̃çh.gì"CÎ@Ä@¦œ…F¶œ‰AŽœ‰ˆ…°œ‰ˆ 8§­awDü¾ÃÃV“]N|D¬1G¯Ód·Zs§J7HâºPeÈ«1_Ýš=Xxý´qìq~Mè–n胄!À–Î;pt)wsÕV‰Û=NZܯ­øØ݃q›¼qÕB6Ó¥Zq…š[#³У|YÞ¯~³X°Ù®=núª5Yõ4ˆÂ`Ùaæä¾ËÊ]ÅøØolU_Á&*_jqÜäî×`‘?„9p5¾ÓÌ5kìKˆAî¥eª¢Þ ÷–έ‹ŽÝ „íž 1ð[e†ÈÀÖÅ|xë‚oöî\˜5W&&¼ç„³ð÷a².Ý»C0¸?p`wàˆ–ƒG¦[-çiú¡¾Á·ØH‘VŽ¥ ô{>|Ÿ¥å]â?½¤¦Ã«­bj›Ý*ºÉ¶ ƒÞ}Ñ˵®oUU]êˆ-ÁÑÍä‹¢×ÛÈKÇú"ÍƸÉ<Ì+“ð+íÈ–5ª#Ó&á—hSï^¹ÑÞà½Àt!?Šø,k2ÞäìsPÉŒýÎ}ÍËåbắË2ƒœ?¥!B¸'FTtØ·3"$itsÔdB=)~yÏrúM‹ôÁI°ñ9¬e8Û°~•~¨ÒUúá[Y¥ªôëÀX¥ªôÃkÀX¥ªôÃkÀX¥ªôC•~¨ÒUú¡J?¼Tú¡Ê1T9†/ŸcØÎ#ØŽ“ž†âŠG(qýúgôŠ6íìõßÊ[\ôwòTh|ò·ÿþÏñ¼f§AÚ?†ô‚òéis—”cm—p¯¼¦¾ 1l@dÙˆkƒFä*êJ‡ÐðÒñ­"ÔQ> !‚†·FÞ*Bñà£2¯ŸÎXîqø\©ŸîŒÄ…u¥~º3Žz$B×駻£ GAd¿-G}¶æ‹Ç/+]é(2ñH–R!“¬ÊÒd¢‘,Ì/Œ”LÕœ£‘LTu\ÙH¤ìc`d™r’I,ec€6"rÖÁ3dË™ÏÑ\Î>ØE’ ²Ä@¦œ…F¶œ‰A’?JB,„åLD¸ïUQÊþ(¥uÍw[oùàîå¯$JY ;ê[o/z‚!T‹ÄýøÁøLèáUé›môjDÐõ´ZAr÷k°€î¶ö€í(x÷«›Gö d6£©ôûÿõ+S|/ˆÌüG©ØEA/t³ð5ÏÓ\»…­V¢ ¬1yi ^B‰& O‚|I ŽSb:<žFŽ7üÙ=ÜĶ‚ü`#Àˆö6­2‘-¶*Ç)Pɺï3¯c:R:W#²ÀN“å2\~ HCñÕÛÁrĺ(L£ôŸ?“™îµ”ÌiIJ‹=ORPµòºÀ„Ì‘kUÖNiÎ=ICÊíd›¤yê…y¶Ž.Ø ~@;]܉F†1„ ‚Ñ-¼m0Œû»Öúþ¶Ü7â࿾Éíð w ÚNäb ¬Q6 ÿÖO ]¢o>,:CÉBu° ×S%xˆ¤3[¢]$²L‰Ý(³å¾„FKõdË'½8aÑÓQ–jýXÃK•ÑÙ¬.ðñ¾”‡9:©ÌrȈÒbx÷:©™`kôºð ž6o¦Õ˜õ |YŒ¨DÏ1èÿ£zFë¤nÕ3TÏ`=£uLëWÒ3äèËWÞ9ZÇô©Î¡:·â¶½RyLÓ~]̓MÙK­ßÆÙÑÂN¿ÛhË#úsP±6Ø6«æ­¶¶5*6Ý…å~+¡lkÅÚV¶/w¡šPÄþáË·®ý3ìGµ®X±xpûw[åÌ‹ž™A1BÏöïÂI4"„ØŸÒ‘x2.±dD[Û?sóÆÚzž.Ð>àÿ²°T<È‹t‹öÆWÐþ³t•Ï­™*ûú&µÏ­Iíž‘¯vÞ* f(ÞuÞÅy 5ù4æÁ­ùæЃû^`¹ÌÝ-ó‚â¤özÁˆ¯.¾æ׊ԉ[êÄ­·²:qK¸u«·Ô‰[×€±:qK¸u «·NzâVofQ°ñ²×PXD^–ÝNxö¡Ðœéu—<£x[ ¶†¢E)ŒÁ¸Cà3nfRóg”šÖŸ·Â‚û'O÷>Orr<1ýLËË1°’Ñ°–9²ä¥z*™ÁRÜ샖gž·»òg\Ôów×a`+ùÃ'ïµ¼úþﾋòïùÇïVù÷ÛŠÀ±Ð³{äk¸Iì…Ñ(D‰k5!wnU­¢‰,ñ&Ê…ŸLO¯(_úѲ‰{¹Gc²_ôæã/|ëùø§])˜¥“©›ýLÝåÞÅË¥U3ï_,í^¨ DK‡LÕ,4^ì²<ÙГ)¶Ýk «_së’š³'1”Eàë« ÙyúÄ„ïÃàá ­®Á3£ø»Poëåô´4ÈëmBß8¥s‚á <ÕXÛiò0ŒŠ÷KS{¿´à fBâiЀ}q”¢ëÅ«’¯l?\†Aš±½Ïz;è£J¸Ótÿ üy¿t´ì_WûWv·è|Æ¢y)þ¥BÊÏ«€) ÿ¦ý$údðïü€¦jÔk)ZFÓ v‘Gµ*Yhgܬð÷†ö‡,Œ÷~ ~· §Ø1~ÿûá›æM@[í&ž™ÓùÌœ W6›•iFÕ?¼_m¸žÕ¬—'[‰jv³ËÕÒWœ5+ò”n‰šóÎÐÃÕœ®¬åö¨y°"nõŽLµ"]FD…?áŸ+Çò€àþU¢4{ ‘íÀï$WËRLþ¨oÂ8Üìhn|O¹÷ÈËùÐ-½]Ëiˆ‚ªïSîP¹Cå•;TîP¹Cå•;TîP¹Cå•;TîP¹Cå•;TîP¹Cå•;TîP¹Cå•;Tîð;l$³>Å‹þˆÙÎy0e9Gh"Çp+ΠþL'vê®@^2K‹%ŒÒ{ŽˆÕ>1›¾2L*zƒž³Z²¤‰ÈÌéÓ¼ÐâdZ]ó—Ý?ÍÆà"³•¬HÏÌrz¦/Ý@†zãà˜ •®¼dûP^²9ò%…ÓduYiÖo%çÔV¢9áØ•6Õ9R뺬5m­K%ÜulþBÊ%ð_,ûî4£ê"9y]Fr^rT ZêõÛï6ShzH$/AUæ0]Ó–åˆÒ«d’Då IÒÒÀÎëìIþì—3Ó5[زݦºñõÆB]æãxëî³µuPtl™¸r»vÐUÓ e*k´¢Ò&NØñY0_êä!B*çÜÃÄ-Hñ²æn‚3‰©¼ 4Qñ"=X{¤ißgãŽÙ}¡26 º„<àp‡Ä85€˜ê«XÞ=öfÈq¶)m…Ò,”ÔG¡sŒoö?®ßVÊ8IàÙp½DXé?u¿¿þéîPK+¿–âPKO¢‘A3&¬¨//mimetypePKO¢‘A¹¬MUmeta.xmlPKO¢‘Amí¦d#Ÿ$ settings.xmlPKO¢‘Aˆ~íj ¾ u content.xmlPKO¢‘A¦&ï÷5 5 Thumbnails/thumbnail.pngPKO¢‘Aƒ"Configurations2/images/Bitmaps/PKO¢‘AÀ"Configurations2/popupmenu/PKO¢‘Aø"Configurations2/toolpanel/PKO¢‘A0#Configurations2/statusbar/PKO¢‘Ah#Configurations2/progressbar/PKO¢‘A¢#Configurations2/toolbar/PKO¢‘AØ#Configurations2/menubar/PKO¢‘A'$Configurations2/accelerator/current.xmlPKO¢‘Ae$Configurations2/floater/PKO¢‘AkOƒ8»R ›$styles.xmlPKO¢‘A+¿–â×;META-INF/manifest.xmlPK6,=dnssec-tools-2.0/apps/owl-monitor/docs/install-guide.html0000664000237200023720000001054412110717521023731 0ustar hardakerhardaker Owl Monitoring System -- Installation Manual -- Setting Up the Owl Monitoring System


 

Owl Monitoring System

Installation Manual

Setting Up the Owl Monitoring System

The Owl Monitoring System uses timed Domain Name System (DNS) queries to monitor basic network functionality. The system consists of a manager host and a set of sensor hosts. The Owl sensors perform periodic DNS queries and report to the Owl manager the time taken for each query. Over time, this shows the responsiveness of the DNS infrastructure.

The Owl Monitoring System was designed such that the Owl sensor hosts need not be under the same administrative control as the Owl manager host. In fact, each sensor in a set of Owl sensors may be under administrative control of different organizations and still report to a single Owl manager.

An Owl sensor may provide its data to more than one Owl manager. In such situations, the managers operate independently of each other and do not know of each other's existence. Throughout the installation manuals, it will be assumed that an installation will have a single manager. Special instructions for multiple-manager environments will be given where needed.

Contact between sensors and their manager may be initiated and performed by the sensor or the manager. This is a configuration decision that must be made on a case by case basis. The push or pull model may cover all of an Owl manager's sensors. For example, a particular manager may initiate sensor data retrieval from all of its sensors. Also, the push/pull model may be specific to each sensor, so a particular manager could retrieve data from one sensor but wait for another sensor to provide its data.

This document provides an operational overview of the Owl system, installation instructions for the Owl and supporting third-party software. Configuration instructions for the Owl software are also provided, along with configuration information for the required third-party software.

How To Use This Manual

There are two installation manuals, one for the manager and one for the sensor. Sensor administrators only need to read the Owl Sensor Installation Manual. Manager administrators only need to read the Owl Manager Installation Manual As you might expect, those who are administrators for both manager and sensor hosts must read both installation guides.

  Owl Manager Installation Manual   Owl Sensor Installation Manual  



Sponsors:

This work was implemented by the following organizations:

     Parsons

This work is funded in part by the following organizations:

     U.S. Department of Homeland Security/Science & Technology (S&T)

The Owl logo is copyright © 2012 by Wayne Morrison (Wayne@WayneMorrison.com). All Rights Reserved.
This logo is used for the Owl Monitoring System by the DNSSEC-Tools Project (dnssec-tools.org) by permission.

  Owl Monitoring System
Installation Manual 		 

DNSSEC Tools

dnssec-tools-2.0/apps/owl-monitor/docs/install-sensor-4-adding-sensor.html0000664000237200023720000003413112110717521027037 0ustar hardakerhardaker Owl Monitoring System -- Sensor Installation Manual -- Adding Sensors


 

Owl Monitoring System

Sensor Installation Manual

4. Adding Sensors

 4.1. Firewall Configuration
 4.2. SSH Set-up
 4.3. Get Configuration Data from Manager
 4.4. Set Up the Owl Configuration File
 4.5. Test Transfer to Manager
 4.6. Add Start-up Entries
 4.7. Add cron Entries
 4.8. Start Owl Daemons
    

Whenever a new Owl sensor is added to those handled by an Owl manager, there are a number of actions that must take place on both the sensor and the manager. These actions should be followed consecutively within each section. However, there is some amount of necessary interleaving of sensor actions and manager actions. For example, a particular sensor action may be required before a particular manager action.

It is acceptable for the Owl sensor and Owl manager to be under completely different administrative control. Each host may even be owned by different commercial, educational, governmental, or other such entity. All that is required is that there be some initial coordination between administrators when the sensor is first configured, along with (probably) aperiodic support from time to time later.

The discussions on adding Owl sensors assumes that the sensor and manager are under different administrative control. Required actions will not change if they are under unified administrative control, but they may be easier to accomplish.

This section describes the configuration and testing actions that must be undertaken in order to have a working Owl sensor. It assumes the installation procedures detailed in section 2.1 have been completed.

4.1. Firewall Configuration

The Owl sensor and the Owl manager communicate by way of SSH and HTTP. If the Owl sensor is protected by a firewall (either on the sensor host itself or by an enterprise-level firewall) then the firewall must be configured to allow data to be transferred between the sensor and the manager. The direction of this transfer (initiated by sensor or initiated by manager) depends on the Owl configuration. These firewall modifications are far beyond the scope of this document.

4.2. SSH Set-up

You must generate a new SSH key for the sensor's Owl user.

If the sensor will be transferring data to the manager, then you must provide the public key to the administrator of the Owl manager. This key will allow owl-transfer to pass Owl sensor data to the manager. You must generate keys with key characteristics (e.g., length and type) that are acceptable to the manager's administrator.

If the manager will be pulling data from the sensor, then the manager's administrator must provide you with the manager host's public key. You must add this key to your authorized_keys file. This key will allow owl-transfer-mgr to retrieve Owl sensor data. If you have particular key requirements (e.g., length and type), then you must give them to the manager's administrator.

4.3. Get Configuration Data from Manager

There are several pieces of information that must be provided by the administrator of the Owl manager. These include values for the sensor's configuration file and the sensor's name.

The following data will allow the sensor to work with the Owl manager as expected. These data are used, in conjunction with the manager keyword, in the sensor's configuration file.

Configuration Field   Purpose   Example
ssh-user   User on Owl manager with which owl-transfer will connect via ssh.
This is only required if the sensor will be transferring data to the manager. 		  sensor-ottawa@owl-manager.example.com
heartbeat   URL to provide "heartbeat" data to manager.
This is only required if the sensor will be providing heartbeat data. 		  http://owl.example.com/cgi-bin/owl-sensor-heartbeat.cgi

In addition to these data, it would be a good idea for you and the manager administrator to agree on a name for the sensor. This is not a hostname, but is a name by which your sensor will be known to the Owl Monitoring System. Name agreement between sensor and manager isn't required, but it will probably make things easier for you both in the long run to refer to the sensor by the same name.

The sensor name can be very generic, such as sensor42, sensor-d, or owl-us-east. It can also be very specific, such as washdc-1600-penn-ave-nw or cheltenham-bldg4. The intent is to provide distinguishing information to the intended audience of the DNS monitoring data. You should use names that easily distinguish sensors and are acceptable to the manager and sensor administrators.

4.4. Set Up the Owl Configuration File

The Owl configuration file must be initialized. The data fields include sensor information, query definitions, file locations, transfer intervals, and information about contacting the manager.

The following is a sample owl.conf file: 

	host name rome-sensor
	host sensor-args	-config /home/owl/conf/owl.conf
	host transfer-args	-conf /home/owl/conf/owl.conf
	host admin		owl-mgmt bob@example.com

	query		example.com	d	ns
	query		example.com	d	a
	query		.		h	A
	query		.		m

	data	dir		data
	data	interval	60

	log	dir		log

	remote	ssh-user	owl-mgr@owlmonitor.example.com

	remote	heartbeat	http://owlmonitor.example.com/cgi-bin/owl-sensor-heartbeat.cgi

The full definition of the configuration file may be found in the owl-config.pod manpage.

The sensor configuration file must include a set of query definitions. These are best specified by the administrator of the Owl manager, but you must be willing to generate and transfer the volume of data required by those queries. The impact won't be as large for the sensor as it will be for the manager since the manager is likely to have multiple sensors for which it will store data.

In addition, the manager-contact fields must be set with data provided by the administrator of the Owl manager. The ssh-user field is required for transfer of data files. The heartbeat field is optional, but must be specified if the sensor will provide "heartbeat" information to the manager.

When translated to the configuration file format, the example lines from section 4.3 will look like the following: 

	manager ssh-user        sensor-ottawa@owl-manager.example.com
	manager heartbeat	http://owl.example.com/cgi-bin/owl-sensor-heartbeat.cgi

4.5. Test Transfer to Manager

At this point, the manager should be ready to accept data from the Owl sensor. Test that this will succeed with the following steps:

  1. Ensure the Owl manager's administrator is ready for this test.
  2. Put a file in the data directory -- specified in the data dir field of the configuration file. It doesn't matter what the file's name is nor its contents.
  3. Inform the manager's administrator of the name of the file.
  4. Run a test transfer in one of these ways:
    • If the sensor will be transferring data to the manager, then run "owl-transfer -config <config-file> -foreground".
    • If the manager will be transferring data from the sensor, then the manager's administrator must run the owl-transfer-mgr command.

If the file was successfully transferred, then the Owl sensor is ready to start generating data and providing it to the manager.

If not, you must determine why the file wasn't transferred. owl-transfer uses the rsync and ssh commands to perform the transfer, so problem diagnosis should start with them.

4.6. Add Start-up Entries

As discussed in section 1.1, you must decide whether you will run the Owl sensor using the owl-sensord daemon or if you will run owl-dnstimer and owl-transfer directly. Both methods are acceptable; the first is more robust in the case of problems.

In any event, you must add entries to your operating system's boot process to start the appropriate Owl daemons. This is highly dependent on the operating system, and may involve such things as adding some lines to /etc/rc.local or adding a start-up file to /etc/rc.d/rc2.d.

These lines executing the Owl sensor daemons may look something like this: 

        /home/owl/bin/owl-sensord -config /home/owl/bin/conf/owl.conf
or 
        /home/owl/bin/owl-dnstimer -config /home/owl/bin/conf/owl.conf
        /home/owl/bin/owl-transfer -config /home/owl/bin/conf/owl.conf

It is incumbent upon the installer to determine the proper method of Owl start-up and the proper place to set up execution.

4.7. Add cron Entries

The owl-dataarch, owl-archold, and owl-heartbeat programs provide additional services for the Owl Monitoring System. These programs are not required, but they can ease some of the burden of administering an Owl sensor. However, due to the volume of data generated by an Owl sensor, it is strongly advised that owl-dataarch be run.

These programs may be set up as cron jobs. This will remove the necessity for the administrator to run these programs manually, and it will provide regularity to their execution.

owl-dataarch periodically moves sensor data from the data directory to an archive directory. It should be run on a daily basis.

owl-archold will create a compressed tarfile of a month's data that has been previously stored in the archive directory. It should be run on a monthly basis -- but not on the first or second day of the month. If the sensor host is used for much other than as an Owl sensor, then it would be best to run owl-archold whenever the system is normally at "off hours."

owl-heartbeat touches a webpage (specified in the configuration file) and is intended to inform the Owl manager that the sensor is up and running. This may be run as often as desired. The more frequently it's run, the more up-to-date is the information on the Owl manager. The less frequently it's run, the lower the granularity of the sensor-availability information on the manager. Once per minute or hour is probably sufficient for most purposes.

Program Frequency of Execution
 owl-dataarch  once per day
 owl-archold  once per month,
 on the 3rd of the month or later
 owl-heartbeat  as desired,
 but once per minute or hour is reasonable

4.8. Start Owl Daemons

Installation and configuration are complete for the Owl sensor. The Owl sensor is now ready to gather timing data on DNS queries. If the sensor will be transferring data to the Owl manager, it is ready for that task as well. To start the Owl sensor daemons, you can either start them manually (either by running just owl-sensord or by running both owl-dnswatch and owl-transfer) or by rebooting your system.



Section 3.
An Interlude on
Sensor Queries 		Owl Monitoring System
Sensor Installation Manual 		Section 5.
Adding Queries

DNSSEC Tools

dnssec-tools-2.0/apps/owl-monitor/docs/owl-sensor-data.png0000664000237200023720000012557612063677522024060 0ustar hardakerhardaker‰PNG  IHDRØç”—Û¶gAMA± üa2tEXtSoftwareXV version 3.10a-jumboFix+Enh of 20070520í2¤ IDATxœìg@IÇŸœ‚ˆ… `HPPšŠQTÀ‚Âyz€¨§X°V<‡¯zÞ +vO)"Mš•& å¤ H(%¼y?, ]JÂRæ÷EwwvžÿÌÏNffŸ¡ „ƒÁ`0äñÙ0 ¦§ƒ1ƒÁ vÄ C2Øc0 É`GŒÁ`0$ƒ1ƒÁ vÄ C2Øc0 É`GŒÁ`0$ƒ1ƒÁ vÄ C2Øc0 É`GŒÁ`0$ƒ1ƒÁ vÄ C2Øc0 Éô&[@]*ß_q*AT´/pÊ`ø0ÕéƦE[p7'™‘Ø_MSºo‹Í%_q¬ÆAYYá™GNýÊ;¸âP\™”ù1ç%J"­,†€©L<¾þXDeÞ!k•:ÚÊâ¯Ú8ŠJÔ­²2öÐù.'Í[R‡üâû³¨|Ïßš¬]Ʋ²2èÛWœ*¯5ËlÙŒQ?¾™—üš3Yo”𼯻Q,?ÿÈ©e£Û¯ª=4¬+‹cÎ ÛSW<¦—Ëù+÷‚Ò>}*ј¿jó–eº²-¿¿ÙÊa‡\r>ûØ'-1»M™cu*XzªÔ9”öƒ;‹ž8.€~í77|g`Í¥ýÁ­É°chZ[1ãPÏÙžÙqúê> –&@«MÓ4UFÓ3o›¿1Ÿñ—Àa&B9jŒÝÆUm¥^]ñ£ÕqÞÚÈ7R?j›n²Z¬ªéÊ)½»Y¥a濺Ĵ]0¡NÖ#îý`‘ÝŸ‹Uú~ýĸ²÷F$@¨ƒ…ãÌ°=Sš¼±2úðž;@í׿Íæ*€ËåJ¨*AŸ¤ÖdÔ±ôþ¡¶MgnhIþWuÀåV G°¨ïÔ{ýTìΟɮè3e´íl:}üÀò‚”—çÝNx²ý|üÆk*BM¦O ¸ :bý@¤?ÀaþªjõꪺAöjsëc_¶šà’ g´û{S‰Â7g·oz˜ 1ÿ³´Õštk½%¹TUNà Åa'ÎÆ€ÎjgÇu3…s›lò¸msl»Å]ÍŽüÍÕÍ ûMPN 1}]^}*ÏQ—P:÷5!Äe\?j¬)O£Ñh4š®Ñš;‘ù•^·’!Ñôôî¼ÏF¨8îáf3"™††ÉN—Pn3æ"¾5u©¦o’y›È€®cy0(ƒ qZ©§§·êÜ[„âÅØ™Ÿ*@ñ’n™éÏ1Úúº^?„âjg¡I(£i.ÚôG"›8ÿÞÎÌh΢Ý^Áwlôä@^ãg— Ü껜lfÓäiÓì6A]m5T÷çF6,,ÓÇR×ØÌÌÈâÀS.Bˆéccddf¬ûë±@„â¦\ؼNºÎ¢ÝA©•5÷¥ùýe®'t:¦¹hÓŸ±,„âÄ]1ÖÓ›½ªª“Uë]ïYpxïW[ZZÙþî6Íê6¯n´;’ÍrÒP_í|ÉÁ´Ú\aŽ—ýÊцÐ@£iNÛxÆ»©¾d£­¢Åe©ßn9Õ­ÎÒÑi³±:]^ãg—×ÕO¹égT'ΙÈpÄê›ß¤Uÿ§ÑŒ¦ZE‹ËÒ ®ª[]]ˆ.H“Ϩ±ÊѺ“Vç|úÝõ ïŸðð¤çâ*J©.©uB(í2qà’TД#F¼·µÚ¯–åêƒnžQµüfS"›©fj»éÖ©÷”­ãégu%º‚#®j[t—¸Â'v¦4möÎûl„òƒOmË—…rg‰§¸Ê%4-›É‰»¨G£É©¯}ÍBˆý~³<À”c ZUãíþ0³¾’ê¶"oí™”“yÛŒ0¦s"?‡è Ðï0QòùyUÈÚ3›hʳë \²ßo6V—­£~¹q«†ÛwVmq䜉lnò“mDfûý 8‘' ªtoبÈËa4¨¥ºuUŸêñÙõFsûˆJ¾Nô(µ\"K/ÁÑh$ ßôñb¬I‹œYìIç"Êj¢ü›5µw- ¥&Ôí³«õ7âˆÊñløúýÿm®!5S!M×vs­¥æ/W×ÞÓïÎ9÷è†:»]iùšpo±''2žlÒbÜbi¶åbÕy€aãÆ+€Ü¸±rÒR}UÖ¥¼s?=+ò¢¹‘õÙ4(o2gMS@S~Ü"©úÃŒÅy‰°ÿÚÿŒ‡ ÓXzæør€P3Ìu % ,8<²*}ÆëWÑ~!f&u{¢c=£"F¥ÝÞb¾à—³ñÄéÚ­í×*‰ 213®.^ÒË0âÊ–ÕDAÜh—]ãSšµ0²Ü²¹šÕ–6ZC‰É€Ñž_©ùÛaqëâ2:䥤ÈÓJ#î]º’” Ÿ‚£ ØE`³s­UtԂÉqIL{ƒfý ýÚã¬õžEídŸ"c`ñÿN¯”“’ÒYõ;ñ÷ùÄ;’SfÊþcÖ’½¥§NÕht˜²šÔÈ àà¨Ôª£ÅžöRM=z!ª¼Ò¡:šZ*r5ƒ™cw:XkHö–§!óÝ\)Y¢.L½'LÈØrÛ±msê6Ý*ÞSZX–¦êŠh²“gÔtšzFùu3îC,˜0 n#®y@¨³—-€¾oÂ^Uׄ‡ùù†À¬ŸI7ÐYG³ñ~ÄMyr~¿•ñ÷ßGÎqOÿöC‘VHSµÝLk)«ÎpÿÑÝÆ3–løE­YÉ]€N6YלÏy0BfH¯76¨,»@œ§×™uàÿTpy9/Ldf{µØÄÊÛ{µ6y¹z (<âßÁ£ªÖô  .øeÞžg®{­ýS²6ÍJ£øÆ×ÛÌ2S@ÖÞD©WݼX——]u#›8ФCdJs„·– 6F¦úĦræ:\ùC»±i«ÞŠ“f¸Àˆ1ŠD’ARòávÛêûuR ¨ò Ü €>ý”Të$¨v-̪gT•šø§êYÔ‚ýµ@–>¤J[?eM‰‡´v}¥Üú'êC?öøš®î7hˆroýá£ÿZç…\=YWË\ß)îÁgWmÙì )!SBþ½Qç,+dS Ϧ[Eš)KuU•ç÷›|Fu¡Ê€—!ï¿èé}oÒÞ^5öÆÌœG÷ÔG§Is›E‘..¶HÉóªe s&ÈtÉ;<?sèð[¸Îc…ºÓ]v åCVñ¸–‰lam7ÛZª_”úm¬‹ÒI{Äßg‹#ný@Ns$•õÏ`„å&BcŸëôa€Šª÷*qã·^ o”ÍA¨´ÑÑÀÚ4tu/Wež›Ã"NÄ>÷€þý…aŒ‰) RRR`²Íþõ&šš S–Í­×¹¨Œ¿Kxácžÿ"„ÜwÏh¶×â’1÷ˆ®E^zâî(­h¢@»VºTÿÿÕÞ ç#Ë (Ÿè7®‹e#.—äwÇÍÝëõUTn!a0-ø÷ý2:EsÚÏ×ãKª²È*&z²YQßmÔ}µ®¬ñ"<‡8ñéåÓxk8Q ZËhY:ºººººÚšµz¸?~ô?\'ÁÉ.V_¶ùnd\Ä×36Æê¡ß×MÖL«èÓâB4]WõhòÕM&6BƒÞ·|SpuG´ üÖ‡ÂԌԨr3­4 %%æ®Û³™8J¹m†*Í­_Î~õçžC'Ï^üwÔ!q]ÍšßX-Y‡¦k»™Ö"Yu³–]¢™¼»Ô_ÙµÈÄÄÄdÚ4Šøxb-Ά?ìD†dæJf´Z ”õ ¨c¦k<<½ÙÎñ~…È€´²Ü¬4ï?7m €6/T¢Ž1Õ¸´d”Õñ?ÿܵP{ ß´a’(€Ü,óêáÓIÚ£&ëÕÌÎ/ýE³~VB}ˆV›—õ!äï-«Ÿ|ý}YÝ™4€ˆ¹fë.Ýp2Ÿa‘úƒ;^n12©®Þ¶H”„™q’º6[ˆß¼µ¶Åó`¬qtqç¡+á¾—WÏ\j½Äxò@SŸ£pÙzö® —š/»‘ QÁ*z÷n9@Æñ7½oì¯ú;¯®®ÚÏ¢¤–,*m#ʹ‘\ªg–škä[ƒz—˜>õ;èJ¬ž¨ 'š~ÕLt^õÄñº¤FJø}Ž¸6wÒ*ë[¬{â4¿á] eW¯0iÝ?ãeõÈò¶4„ò=«×ŸXÜb#®—]½ŠëËD!^ÚƒzãÑãv>å"„XÍsÊßJÔyùÅu ’^=ãWïgˆ¡"b Áð6,£–ockÊ8‘M>úê©$€ýÁ™M›+ºd%S/ƒ_Ï5öÁB“­¢¥ei¾®ê¶&ŸQÃ<½4¨:ñ#Œ€—T5¿BÌV­ð8Qö#Á(¾jFÝú©ú £)‘ÍTHsµÝdk©ª™ÆÛ@W„‚P‹ßÞ+Ä+¨„kz} S;V†Z3–Í‹÷ºý4<‰2Z2»_V̇ÜÒþ#µgjƒâØWž},¡ ×6Zn¬ÎNºõ0€ Ô1:sgÓ¿¼z“Å 7k†zÝ7(+Ü+(— #§ÎÕ”ª7\Î ñzUÈ­?K©Ê:+Üë高œâr ë-X:cLÍ,/?Ö3,@rª‰Ž”äDù½É(ªa2©±ï>9©ÿÜ~™U!E×^4_)åÕÛj+Eu-²B¼‚j H¿sÇ+‰š³dî ¬°è\ŠÂÔYªueJ„…ëõÞ¸\œ¨"ú&*†ªÍž$߀åå› =Ëx¢(@zøã;^Ñå""R2Ú‹Ì ¤kjŠ“íuûnxV‰ˆÈq³šh«:_{÷–ïf]Ûhþ±ˆ—1_(Î%ª¥Ö³Xa,ýºnMòò½žû}ø”}FN51×SªúÐ#=Ü/:·t‚ŽžªdÍaÿ‘:35%k¦ª¶…%§ê4˜W(nòѳÃï^ øðµÏ`ú,‹Eý“^6c.=ÜÓóÕ{fq¹ˆX‘ h¼U´°,ðƒºjØšxF à¤G>ô|þ‘Yƒé“ŒÍäë$f†¨ÍàÝ[3ê—\#›]&Öhò¨&5·Ö€@¸µ²š9ÓPG²¬Dttõ¥ÔŒÑ#FìÝ»wÅŠñññ½{wĦP ¦…XYYÙÚÚŽ=ºUw32?s¨ÕgÊÞûEÁ€ÞBªV–Òßy ñBó†—þ¾=n}ñ{ìªT[å={vÔ¨Q·nݲ°°hk­¡Í}i‡3|øðk×®ý(] hùVý–(r2Åœ@=€ßF!ôÁ`ì±·ÄÐÄþà„P1ã€V !„BFËì|ÅK» Gƒˆ Ð; øÕ%æ‡:µ´´ìííÛ\L ÃwNž<©¬¬ÌãñZ}'ÓG`ö±@.qÈzg¸å‡Ø¨(F Và’T†P‘£\«‡&<<<¤¤¤ Ûpoki»#^³fÁÓ±|À£fP'û&Èf"ö#3+³ª9¿8Å>4€~¡â-@xðÍ›^"„ü €fLLâÍ b5eõ;>|‹okA1 ?ÉÈÈ R© £m·ç3΀–±±:€º}"á•9azÃw"„®›Àº4„*²«v)m`Ñ¢E‹/nÛ½­¢Ÿ83 ccãèèè‘#Gþ(-+*<]^SƒZµ` ò“#S¸Ã&©3Ä30é EQÓ`òð¯‰<­I2Éáq¢ŠÚòâœTÆû²q“TDŠÓ#S+èšJbåç‘ÞGRYw–Ž´h‹ÔvÀ¶+ ¦…())]¼x±íYp˜á¯ÃÒ ~6J}²¦lµkœøÈ ™qòÔÞœœ¸Ä¯C5•$xéñÉÂò*-ôõ(,,TVV¾~ýº‘‘QÛÕ¶„68obÑÉéÓ§ùýV<OIIéÔ©Sd Á`z:W¯^>|xZWzíڵܖñ† >|ø ˆƒ€øðხ®nhhhk'0 ‘””|úôiGÆ}o?‹-êÛ·ï­[·g¢-Ž¸3ÄQn-FFFÆ »rå ÙB0˜ÍöíÛ_¿~Ý…•†‡‡Ï™3'&&¦ðm§-‹ìZG™—ýÏ…ËÌÍÍ—­qºßv…|ÀÝÝ=&&æܹs¤ªÀ`0ðûï¿çåå]¸p¡á¥²¨¿´(”…Žß}tYü_š…3Œ/(°ÄN{öì¨hÇòµiÓ¦ÙÚÚ6q1ÅNè«í6/˜sV Q~š¡¸¸XJJêÉ“'$ÙÇ`0u 4hPNNN½óÅ "ì±Ú!„üíÀþ –†ìá;{÷îÕÐÐèCmwÄéééT*5<<¼á%^ÒExTíz‰ú½–VI¦Å½ŽÍ®üf3?1Y¬$#29=--›[ ›ù)•ÉA!n^$#(˜ɬºÆef3Ù¬OŒ`F*‹‡PiZ\Dp0#‘Ùøhú’%KLMMÛ\L Ãw–/_nddTï$ñé àtDBˆø¼ª>à»î3Ö”§Ñ4-Üg"„8oí¼pýÂo4 ÏYý{ !„r‚¯ZéiÐhšs, ü󕃙¦¹ÙÑqÓêã‰\„Ø)6Ϧ]Çò ‘&Îýˆƒ“£™†üF·µõ$$$ˆ‰‰ÅÅÅ º6P;cMüþûï£G®¬¬¬ù”0Çîrdv•ód¦¥å±By̾wÆsK@…;HVŸøŽ2ª¾×°{&†—ö@ïûúÒ*kRsôtÔý~™ T›/^HHHäçç·§˜ †¿”––:ÔÝݽöÉâ`{Ð9tc—ŠÌÆ—¡âp{ÐXk£;‚ ÒŸ, »1’“·õvW³tf<²¾? åÜ€Mn¡iI¯ô@fç+„²ìäa¤åÅÈ8ß]z åÇb9é,rŽLK¼n7`[¿`µƒKPnm=ãÇßµkWÇTH{ƒþ¨««ïÛ·¯áù(×ïaÒŒVôM,C¥ß]\óFŽçVý 6 wÔX”Íb2ó]V=Cq"Ohù2y®F‹®°Bˆ{Ý `Î'P`ܦûL3çÝ_p- !„BœæOÝt¿v¸²²²#F\¾|¹eÄ`0|çñãǃ...®9Sn#ϦÇ;Xg#äe)máê¤ ;‚ ØÌĈˆ¤ì´D†ß5câêÇá IDATã[N hù±B(ùüŒá;;/’™–Éðp0†±ûÃó)€Vá’þÐòÏx© °É-€Ìy²®%V†;Œ&¾«“““¢¢b[¾ýkíuÄÍÅQfçÅ1<\7Øk‰•!ŽÚ`deceeec¦;‚ ÂFÎ!”ï¿`nBþ›‡Àœ+<Þ{+Ð3·±²²´²1×û|N &À~¢ãÌ‹!¾eÔ0ZsþqH½ïìÖ¯_¯¯¯ßÎb0±`Á‚¥K—Ö‡Ûœä ,+€óÁ~– Ìa9ÉÁŽà‚âÈ‹štc3³ªQãZ±ŠƒíÇn|‰Xïl44ŒÍõÆîã%]¬ “€X>ò åŸóZ€flnfffffµzõæ;qÅD…ÚšÛéB0´7Žªªêš5k–-[öæÍ›š“n¬œódbâõ*Ú&*Ú&«ì·l¡Ðoûþ{ä­ê@E…°ðÜ©s*é¢\— n”Ô[nj×ÿù'÷lÞ¿ù½yI…:S 4}åRúÌ:OX™ €êÀ@½Ç]g¥Z?{tïŸþ½Aç,+d äÍ›7·oߎŽŽng1Œ€puu=z´¯¯o­…°å†Û8hëêÍ„9Wnô €Xw‡ÈU>ÈuÀ§-”‡eõ½SÊ $î¦KÔ¶ltFÀ{´M9·÷ˆqšñ>í‹žÆÀŒÿ¤T”l=é¾A¥”½²™ý÷ñ~ …-_¾ÜÜܼñ.Dû}yÃ8Êùžë`ÿ㪑ï⤇š=?Ç_˜°8’‹B¼¸‹ò u'­²ÞëÈßaXÇqB¥NPÓ_q\s.× ´8!T‡´*óÊÊJeeå'N´¿t Fp¸ººÊÊÊ–••!„ŠCÖlc"Ä‹s†ªˆ`Ev¿ùÆŸŸV66zD`šMÏk±)ö_«|8qΠgec¥'UÑÏ]—Nx»Å¯Ù(Üi[YÑ`ÎEV­P67nÜ‘‘ir§ ÁÀŸ=ëBCCÅÅÅ?}úT}"ï’tªúHã"Ä‹Ù,`l¬ `q‹Ý ˆDä„P1À6ÍX€ˆ Ïò¡ì ¢xpÞZЉ ‡ozJܵoß>uuu¾ ƒÁ”ï aÙŸ"âÒ¸!TGLôg'Ŧ²xq“îî^iLVvblb>BE±IĨ—•›ZŒb%½~ìþØ72Íú‘Îã~ò|ì—––˜ÆL÷ß p˜HÏŒ rww÷Ž'|-+-¶f×wº m úÓÕ«Wgdd¼xñ¢æLN2ãMTò— i%iÚ£ªs°Â½|bsxÃÆNš¥=J¨n@`Ç×Äý^~¬g@Ô— 1E=ýIrbU ÆjËQ<8Ù!/BÓ¾Pj¬$&&Nš4)44TUU•/EÃ`0‚###CMMÍ××w„ üÎ;u …î²èÐÝ_ú¹ý²ãý¦§©gç 5{ÃâÅ‹ÿûï¿ð[Éà›#æp8£F:yòdÅQnš‰'NŸ>ýĉäÊÀð‘oß¾UTT”——÷êÕ«OŸ>"""d+Âð“'N¸¹¹ÅÆÆöêÕ‹¿9óòcÝ/=ˆÈ+W˜l¶ò—‰Í‡`óòò²¶¶NJJ4heü¾9bðôô\±bEbbbÇ£†³gÏž?>!!oÉÑUàñxIIIÉÉÉ)))iiiŸ>}****))ùòåËׯ_+**x<Ç®¬¬$œrŸ>}„„„úöí;`À*•*&&6xð`YYYyyyEEE“Šá!MMÍyóæ>|˜, eee£Frtt\¶lYÇ[ç§#ssóŸ~úéÞ½{|̳åää䨨¨xxxtèt'¦•úúú¾{÷....999//J¥6LFFFNNŽF£IHHHJJ%[KÏeÑ¢E‹/¨‰ŒŒ *•Ê`0j¥…Ð#„ìíí: Î`0¨TjFFýxð˜ $$„N§O™2¥áž7Ý€GIJJþòË/xe)HJJzyy ÎÄôéÓ×®]+¸ü[Ÿ××£²²RUUuþüù-ÿÖ.33!$++ûÔ¡cÇŽ|þü¹ºº:ÙZÎÆÏŸ?ŸœœŒ}qÇóøñã¿ÿþ»_¿FB×ðõëWƒñõëW055m¡Ÿ©¬¬¼ÿ¾°°0„¶r;ä ©ùؼwïÞT*µ¦û0­ÂÎÎNZZºG ]¼xQTTÔßߟl!˜:TVVZYYIêêê._¾œlEm§Ó9âìììš—„’’R'|Uôd¶nÝ*//ß-…›çöíÛâââ¹4Ó<¾¾¾ââU¡rÅÄÄ$$$Þ¾}K¶¨¶Ó龸—––åp8&Løøñ£½½=ÙŠ0U\¾|ÙÝÝ=**jÈ!dkéh–.]Z^^njj=tèP²åôtÞ¾}[kw%PSSËËË?~<‰’ÚI‹ÆS:˜áÇϜ93))‰Çã-\¸l9€¬¬,;;»»wïö@/L°bÅ ccãåË—“-Dùšy¶ŠŠ KKKRµOÖµ__ßY³fÅÆÆ9::FFFöØ?þÎüyó†~ñâE²…Iyy¹‚‚ÂùóçMMMÉÖÒÓÉÌÌÔÐÐ(//dÄ-ôó~[Tɇ¬:nŠï“[nÑìZ§(Š©©é7HÕ㉉‰Y¿~ý;wäääÀÉÉIT´ù½èºÝ€¤¤äÓ§O:@¶–žH||üO?ýÄŸ-±ûtŠ/™Z„°HjŸzÛ4¿zõŠE=žÂÂÂyóæíÙ³§öª‰n@pÄ ¡¡qþüù%K–ddd­¥ÇC§ÓëŸå$^ÚµN¡P( ãmžÉ%püW]³éD‚â—k¦i¬vªrX¹^G44Ö½)¦4e¥2Ýw‹¹.B¡PŒ¬çT÷šyÙ7Z|7”^ì{[f¯vzzãàB …BQPX´ùJ¸áÓƒ«µ( EsÚÏç=?6#€}oË"+çÝæê eÓõÖ?lÒR P( Ëž ˆ†Lœ8133³•µˆáß¾}›7ož®®n7Œj@öBæV°mÛ¶1cÆtü&L=œS§NÍŸ?¿î¹›åtWtrXE4$—¸²¨ óÀ%© !”ãµ@n[Bq/™ÀºdN &ÀþàÑŠy1VZ›ŽÛ ‰óut-w99n¤hÝI«D¨ˆ8@·±³3טr, !äï0ŒVtrÚ©çâÊš\;€©K‚¿Ý$ݵǫÌèœhQHHˆ” Ÿz8«W¯ÖÔÔì–5ß•1BÈÀÀ SÀ–'N˜™™Õ>“|ý0=Sõ!'î" æ\ä¤ÝÓs ¡'›U@ëQ6B¼0c€±;QSŽ˜f oGñçWªíŽ`£|¿=ð«KBU²ìš#V?àV9Pý;iÄ l@í³êüº¤êôF&nqÅM fWçó(­!.¨sΑá9‘δ&±¨¨h§Úü©'pñâÅ¡C‡æææ’-D t±5aOždê«òËÝuÛr¿”Êͳ“‡“ž/+7ô<O36/¯€¨¢yÒ~^GÍ4"‰[*s^ÿíI ƒððE–4 xlA¡;Yš›/Yx ÊVBCüඋê§åJN1@ÖÛÅ` jFsäzÀPe]€/ âÚ“ ä¢墑å33·p)!}Ú¸`6‘Ït¹^½x‰1Á;vXëQûj,[¥±eÏ×úRVVÝ`‚¨ ¶{÷nŸîúYcsÄ ðööžJAÜì¤×6φô¿FrK˜p”*"þܶõà†M¯gæÄû?+›¼+(±˜©þ®Ûiû®4#¸6bt-ÀÇÔü:Éàã㣩©Ùò Ä´.—kdddfföÛo¿‘­E€t=G sçÎݺu«‰‰É—/ º+~#$$4uêÔ+W®Ôœkd ²tÕÉtðBÿ°;™c 'JôÕ˜e™sL”FÏšEܲbÉ亙ŠKËÉÉIKKËÉÉIKQ²Ÿš,Ybjw«„¤'ékI@_aÐœ¿6î<W ðáž­êÌE†'Þ6-–å:sé\-ÛàœJª”¼ÁÌÉTè;°ÁuÏɉx’¥`0WUª7;ÊË7½âÜc„€ÇôôJÜ`®¦TÃÉ v¼ÿ³§Á å"Túè F¦:5ÝÕœ(»Ïß—‹Hѵ™H‹/9Ä#Tê»fÔ9ÌOúÇ3,«˜"6‚>Ëx‘ªtï¦×˧JÿCwŸ%”13Í5„“ÿ­P5Ñû¾q—––Ö’%KvîÜÉŸjÅ4···……Epp0>&êäý&h™™™RRR×®]#[H÷'88X\\üÓ§Od !“S§N)**v†Ý×»=ÿþû¯„„Äýû÷ÉÒAtá1Appð‚ ^¼xA„(ÅŽ7¾~ý:<<¼W¯^dk!¨¨(ÜÒ:6›­©©iffæèèH¶–¢Ë;b8þüñãÇ£££»t@ÒÎOeeå´iÓ$$$þùç ¥É•»%qqq3gÎÜ¿¿­­-ÙZº?³gÏòðð [HÇÑ1¬\¹266öõë×8l±@)++›2eÊ Aƒ^¼xÑsúÅñññªªªŽŽŽxã®`÷îÝ?ŽŠŠêQŸÌtÉåk quuý駟º÷JÃÎ@ß¾}_¿~œœÜ»wo‡óãº>þþþººº...Ø w÷îÝ»té’··wòÂ]|²®6ùùù222ÎÎÎd éþTVVþüóÏt:=**Šl-‚ÅÙÙ™J¥Þºu‹l!=‚˜˜qqñçÏŸ“-„º#FEDDˆ‹‹ûûû“-¤GpäÈ111{{{²…„ììì)S¦Ðéô.½I{¢°°päÈ‘'Nœ [9t+GŒºq㆔”Tzz:ÙBz êêêcÇŽ}ñâÙZøFEEÅÁƒ%$$6lØPQQA¶œAeeåÔ©S—,YB¶Òè&cÄ5XZZZZZ!²0EYY922ÒÚÚÚÒÒÒÀÀàÇd+j¡«W¯ÊËËûøøxxxœ;wNXX˜lQ=[[[6›}ýúu²…Ùo0}úô ­¢Áf³íììÄÅŧM›æííM¶œVSVVæèè8|øp%%¥'Ož-§gáââ2dÈœœ²…I÷tÄ_¾|¡Ñh$[HÏ¢¤¤äèÑ£222Äb¯üü|²ýƒ±bÅ ]]]²åô8¨TjXXÙBH¦{:b„PRR’¸¸8îÝt<¹¹¹ªªªÓ§Oïß¿ÿÌ™3]]];aЖ˜˜mmmiiéÁƒ¯Y³&&&†lE=‘œœœ!C†¸ºº’-„|ºÛq ŠŠŠ×¯__±bEbb"ÙZzãÆÓÔÔ HOO744¼|ù²ŒŒÌøñã^½zõíÛ7²´?zôÈÚÚzĈ,++344üã?ÆG–ª Ç322Z¸páªU«ÈÖB>Ýä˺¦8|ø°››[TTÔÀÉÖÒÍár¹6lxôèÑ_ýU/\ïׯ_=zôìÙ³·oß©¨¨L:UKKkâĉ ‚“T^^ööíÛœœ%%%===333]]]ÈÏÏ_ºtiZZÚÝ»wÇ/8%˜†,]º4+++((¨ç|¢Ù ÝÜ€©©éׯ_ýüüzZx„Ž$..ÎÜÜ\RRòÞ½{ÒÒÒͤüüùó‹/‚ƒƒãââ>~üXQQA§Óåååeeeåå奤¤¨Tj3™ÔãÛ·oL&3777)))%%%===+++))‰Éd2DQQQKKkÆŒººº®‚8sæÌ‘#G¶oß¾ÿþV—Ó&Nž}ÊËË+--­¬¬ìׯ߀ú÷ïß«W/!!!aaa^-*++KJJJKK9N¿~ý¨Tê°aÃFŒ!++K£Ñ444ÔÕÕEDDZ"ƒx‘ 4èÁƒÍ¿H0íÇÇÇgéÒ¥/_¾Ä#B5tG ™™™ãÇ?}úô²eËÈÖÒ­ÈÏÏ_²dIzz:ßÚ———3™Ì¼¼¼/_¾”——WTóÓO?õ©¦oß¾RRRƒ–””lÿÏ·qãÆüù矋/æK)0 IIIÑÖÖÆ•\rç ;ŒÀÀ@*•Š?Wå#Ïž=“’’²²²âp8dkáD¡,--»S¡:l6[QQq×®]d étôˆ1Á¹sç~ÿýw¶¸ýp¹Ü7>|ø°á¼\7   `É’%©©©wïÞÅ1àù‹‘‘…Bñòò"[H§£Û._kÈÆgÍšebbRYYI¶–.L\\ܸqãâââÞ¿ßý¼0HJJúùù­åðáÃdËé>ìÙ³'%%åÁƒd éŒô G ®®® ¯[l3§OŸÖÑѱ´´ ëÞ“Z[·n ¹sçΔ)SrrrÈ–Óåyðà‹‹KO 4ÜBÈéhòó󥥥Ϟ=K¶.“É400 Ñh=jœËå®Y³FBBâîÝ»dkéÂÄÆÆŠ‹‹{yy‘-¤óÒã1B(""‚J¥-¤ËÐ-çåZŽ‡‡‡”””……EÏ,~;a±X²²²Ç'[H§¦MÖÕææ͛۶m{÷îÝÈ‘#ÉÖÒ©áñx6lè®ór-§  `éÒ¥)))x¯U „ôôô¤¥¥ïÞ½K¶–NMÏ#®ÁÒÒÒÂÂÂÈȨ¼¼œl-—¸¸8UUÕnOHH [Ép¹\¼T«åäççÏœ9S^^þÍ›7dkéDp¹\ ²…t%z}úÿû_TT”„„ÙZºdwÉ; eeecƌٲe ÙB:xðà¾}û@Íʼ[·n‘­«§Àår‰ßUBBB½{÷&ÁŽ;ÈÖÅO>|8hРÿý—l!]Ü#nœüü|uuõÝ»woܸ±²²òÍ›7S¦L![T«‘——ÿôéÓܹsõôô¤¤¤Ö¬Y£¦¦öêÕ+²uõ "##µµµ÷ìÙ3zôèÐÐPooïÔÔÔÌÌÌ#F´3çÊÊÊüüü‚‚‚òòrWQQÁåry<B¨OŸ>ÂÂÂ}úôêÛ·¯¤¤¤„„„¤¤d¯^½øR.‚øøx]]Ý›7oó1ÛvÄMòîÝ;CCëW¯ÚÚÚæääddd´!fæׯ_SSSÓÓÓsrrXÕs8œŠŠŠÊÊJbgøÿþû履~ªé:‰ŠŠR©TqqqqqñAƒ 6LNNŽF£ 0 …¦Ï;·}ûö;v8::€Á«W¯âââZ[ L{3fLVVVaa¡°°0›Í–””ÔÑÑñõõmɽ_¾|‰ŽŽŽÏÈÈÈÎÎÎÎÎÎËË+,,,--­¨¨èׯ_¿~ýÄÄÄzõêÕ»wïšÆóßÿñª©¬¬üöí[II ›Íæp8"""ýû÷ ²•® IDAT—””:t¨ŒŒÌðáÃåääTUUÕÔÔˆ_N-§¤¤DMMÍÆÆfÏž=mªÌw°#nŽ½{÷^LNNnûöí6lh&q^^^tttlllBB¿ÿþûéÓ§ÂÂB7hР¡C‡4HLL¬Æ·Š‰‰n·¦çBlOôhx<^III×...f±XŸ?.**’””>|¸‚‚ÂèÑ£ÕÔÔÔÕÕn‡úíÛ7…¢¢¢‚‚!!¡ààà9sæLŸ>ÝÓÓS€õ…iŒ?Ž3fãÆgÎœ[[[WW×÷ïß+++×K‰ŠŽŽ yóæMRRRFFFii©´´4N—–––‘‘‘••%ÞÇT*µµJBEEE………)))ééé™™™Ÿ>}ÊÍÍýøñãçÏŸ%$$deeG­­­­««;zôè泚6mÚСCïÝ»×Z˜†`GÜ$gϞݱc±Ó(F›8qâ;wj'(** zõêUDDD|||yy¹ŒŒ FSVV;v¬’’’¼¼<ßçg>þœššúï¿ÿÆÆÆ&&&¦¤¤ää䈈ˆ¨¨¨Œ?~Ê”)úúúT*uïÞ½'Ož444d±X¹¹¹Ÿ?®¨¨øüùsw/êäèëëIII <˜N§{{{7îÝ»wÀår}}}½½½ FRRÒÀUTT´µµ‰^ª’’…Bé…•••ñññ111±±±oß¾ýðá—Ë3fÌ”)SLLLôôôêilØ°!$$äí۷ ¯Ûƒq“üòË/ÏŸ?¯¬¬äp8bbbC† IJJ*++óñññöö ÉÊÊ¢ÑhÚÚÚzzz***dIf0ÑÑÑ©©©#GŽ$ºÏ0pà@III™5kÖXXX¥°‡Ãápˆ}=òóó‹‹‹B•••ëׯŒŒŒ1b„®®îìÙ³utt:Ï›2333$$ÄÇÇ'44´°°PKKkÎœ9VVVÆ »råÊž={"""zø÷Ü|;â&ÉÍÍ}ðà³³3‹Åúöí[YY™¶¶vtt´¬¬ì´iÓŒŒŒfÏž-$$D¶Ìúðx¼çÏŸß¿?,,ŒÉdN˜0ÁÌÌÌ¢ ¿d1|'%%åÒ¥K>ÌÍÍ544œ7oÞ¼yó$%%ÉÖõ²²²<<<=zÄ`0FŒ‘‘‘qëÖ-SSS²uu#HZ­Ñ5àñxW¯^3f áp7oÞ\XXH¶¨VPXXèää4uêÔ~ýúéèè\»v˜RÇt0\.×ÍÍmòäÉT*ÕÌÌìÁƒ\.—lQmÍf/\¸PGGgÀ€†††Ož<ùï¿ÿÈÕÀŽ¸q>~ü¸nÝ: ‰qãÆ?žÅb}øðlQm‡Åbýïÿ;v¬¤¤äúõë?~üH¶¢žBIIÉîÝ»¥¤¤TUUÙl6ÙŠøCAAÁáÇi4šŒŒÌ‰'***ÈVÔµÁŽ¸>ñññ .³´´ì~1ÉÞ¼yC S,\¸°K¿Z:?,kÛ¶mââↆ†Ý¯!Õàëë«­­=xðàÇ—••‘-§«‚ñwÒÓÓMLLÄÄÄlmm È–#@ lmmÅÄÄLLL222È–Ó 9w„Äܹs###ÉÖÒèééIKKã0Rm;b„ª¨¨°··Û°aC×n………¶¶¶´··Ç?-ùEddä¸qãýüüÈÖÒѸ»»KKKëè褤¤­¥‹1 ‘““›4iRll,ÙZH 66vÒ¤Iòòò!!!dkéò9rDLLìøñã•••dk!‡²²²;vˆ‹‹_¾|™l-]‰žîˆ9"..Ž·›½xñ¢¸¸ø‘#GÈÒU©¨¨˜3gΨQ£zæë¼AAAÆ [±bÙBº =w1BhñâÅQQQ^^^ŠŠŠdË!Ÿäää™3g\»vl-] „F3119uêTk#6tWrss¥¥¥×¯_ÿ¿ÿý¿‘†º%=Ô#„fÍšõùóçü¥C %%%JJJcÇŽõòòê„ߪtNØlöäÉ“‰Ž0ÙZ:l6{Ø°a†††wïÞí6¡½DOÜï!dllܧOŸˆˆì…k#&&–žž^QQ±}ûvìVZȼyódeequ5¤_¿~………YYY+W®$[Kg§':b;;»ÌÌÌGáx% ñóó °³³#[KàÀyyy="[H'EHHèÅ‹þþþW¯^%[K§¦Ç M„††ÎŸ??**JVV–l-—ÌÌLuuõ'Ožèéé‘­¥ó’œœ}úÚŸU·…œÅ$qÿþ}ÆÏÙïíŒÌÜ⊔®ô®©Å§m 4ÀN‹ˆÍæ!„Ò=ÌY´;¢£ÂÐétü¡TSdff8°¤¤D ¹³5v7òygÔ…yt_–@ÌVÁ ÔÐ222w‰äO“““©T*‡ÃáKnÝžÕ#¾xñâÚµkù™#·ÐÏûalQåÓ¥ø>¹åÍn½…²ø¿úÉk¹%”@Ö›³ÏÝ/â¶Ah[X»ví_ýÕAƺ×®]›>}úÀ’{€Æ×ÁUäŒ Ðí’…„`–Ë]/¯û«5øSÀQ£F)**Þ½{—/¹u?z#ær¹áááË—/çg¦ÍüÁÔAX¤?µOV„ q™@í×töf0™ï¦uÔBkkë7oÞp¹åø»-Ú1““xi×B:…B¡P4Œ·y&—@Àñ_uÍN¤ Š_®™¦±Ú©jG×\¯#ëÞ7¾+LJ;̶½x9Ii®kÔ—ä{ûôŒ×îÞ²ˆN¡¨N®dÞ;¾iN¡P(ôñ‹6_I'F0ÊÞmÑ3ùãÞ½Ý&² …®¥àn ‘aeºïs]:…B¡(Y Ω,‹¿j2qC0ÀÇ›+çØ\)^öƒß‹^ì{[Y98ï6W§P(›®'ü°&fÎœéçç÷ãë™Ý%ï8ÂÂÂètz“—Ù ®v¦4P7Úê‘TŒòw\ª³è÷4"+ÐFO}Õ™0â(Çó°ºúÚ𜗚ûû ‰Pѧšt [98˜ÑÔN°J~²WÇhëõëG‰Y0 £5‰U1«âŸ2ÖÓ i­r¼ÇDˆ—t«j²Œ¦µÊ%†¸7‚çíf]cGW×ÍÆê §aý(.?þî6BÿœM—³«EpÒ^l6SºÅÙD\ÎÛÍFFvŽ;iò&×âš š¥  Üšjî)ÈÊÊFDDü(Õ‡Íòº«:9¬"ž¤K\YÔ…yà’T†ÊñZ ·- !ôöî<®¦üÿøû·]{ÒBu#¥ýF¥å–B´‘Œulƒƒ¬ù2–aF~ÌØÓ`Æ:d ‘RI5íÚ£î-íë½éÞêÞêóûãV–V”s«Ïó÷žÏ9çÕYÞ>gCÜ?Ý`m'¬ÓíŠqÿÀØý;¿¬úXï©üiR5¬]ôP#÷MÇÎ\BPÝþ!„jÂZ·"㯽¼VSàTZ=â¥,0ñô>vÈË ¶ddßötŸ ÆîK6ì½ÉFeÞÖÖßì8æ½`âKoB¨šÿ=€&`ö¹Ì—Ø­[·&MšôñKzHB…ø¯¿þ²³³ëb`ï0¡'^æÖkµn¾V‡kŠlÛy¬¿Ù±c‰%ë§#ÄK;@[ê}ú¨§ãÐßÅ+ ö00vœûóŒHo3“Ç5ïìZ´¥;<ÝÚ­º{îXBS€é§RB<ú5 €æê½Ç÷yXò3”£wF×Ô0ñ+ê¿•½½ýùóç?sÉJ²²²EE]/8„B9WæÀ죭ÏÀä¤ùP`†‡~ fŸÊDxòß°eâW„/Ê@{êz»J:f`ÃE!~!^t.!ÄcÆ»Àâkm _{j(Gm}¾3N–#„bFþÄ9QŽàÖ:JúéofòÏ@ÄÑ~Žn@U„ì€Eíu¶è`ôê[ÜÖBlëGoB¨WO¹ˆˆ?~|/ECèv6›ÝÕí§/¯î?I‡ÙGãü·L€5_›èé­õØv‰ã³à^Ð#Æj-íÿ‚#áIÅ >2Îï6èoŸ7®«™Õ?Ý$fœ,°QÀs†¦uSð/]^t.óÚjm°‘Õs<þŠ ¼Äøù§S;i’ðý µ¹®‘ Å\å¹gþ:|ŽºÃ}Ïß?˜ ÿwFAk—Hûô§ O¶?³Í?ÿ—Ùc ~F¾Ø”’ò:žïÞÅy`âWï¦ ›[}«µtÇ•¤5[µßǃ®{LÄÅÅëêê>nA _}õUCCC÷mÊ ¶ß;‘ÿQTwþzëµ[JjëÔ]¼4àÈý§Më%ÂN¦S!((4©ÚE9$àgw*@"”¦âè³7[W·ªÛòY܆:ÑF6€4¼0Y4Û†K™ÜB¨"'ñIÀ?tzn\Ôƒ:€áÛÞ0}k þ»¾¥&ÚÓ`/YBü“4}3wî·½Iß«Ô×Õ4òꄳ"ŸÀõàsz…#H¤b&Àë¸ &؉€áÌ)êÆõ¦Ï­±±ßëÜ•!Tˆ%%%»ª)}¾ÃÌ0Êضm1Ó5^ºÊxÓ®7ü¶oLV|Ýú*u9E Q!Uª!춑ú‹6wɬy³~{´YYXÜhÛ+>ˆ­?i"úÒÀÖeúQÃÆà PWÈ€ÿs?&#ôx–Ã/Äü=³Û[™ß¼yÓ_ç£899¹üü| …ÒM  fÇïÉ â²ÚìÈ®°ˆd‘{ë÷îee] u” X6›* mgÙy7×o=Ñ6ž¦ú׳Þ›ÒzÛÿÙwvL›}$šÿæè˜ÇÞÆÁL£í¿ÜÖÝ`¸Á•šxãž>éÿ÷‘„¿ìõ5ÑI>æïlh#G$ßý3‰!£´ª£µ’¬Â'œí(((ÉŸÖÁ*Ä::: £ÓA}¾Ãü´àƒI‰HÔ¾ýØØá:PQ]Ïâ©œ<të@Ä­[ÁbûçGºù‰L©ªï}戽?S¸ú÷ßþåÀÒ£i4c¹¶Û -Þî™]b0&Lè±Ù¤­­=eÊ”nÚԱꘕþÑ+°K ¤y&3®MÛWÆå³­™Y«îþ_¾vP]µ[— íÛ•”ÙÞ"º'WHHˆËå ‰«HC@ëJ|0z )çæì#Ñ`µ?áŸúÊÒd¨ù‘*»ÿM[þoû0éAÁ¯l~ôÛ|‚Wœ“ðûߟüãvÂÏæo›pYåpêNözÝÖƒÙô'þ%zŸpÕF\\œžžÞÇ7$ ¡«&&MšÄd2_¿~ÝqÐÛ¦»´€Ô¶ÃÀÍí+ðwš«nÁ/_;îŠU]5W÷£)³½Et:½¨¨ˆN§EÏ62¦¼Ê«xo‚oÑሂ™Á{ú~b—¥Eø.¡Âó_þ/¼í·ƒ°Ð‡#Ô(Ëvý¯¡¶½z•ËsaïæŸ7L]í™ï+**ª®®æ¿û€ƒƒCPPP÷môg:ä.\u„ÁÞ³ã^Gè ?ÍT@Ôxº@b"f8Й>?ÊŠ“ß›YFY]]]YYY]]]¹ý8ô =»²ÃÜ)ªTcª²4xÏ~_·?é½#⎚Šî:-X0ÛëÈÊZæ¶&ÊÐa« º.€ Û¦12n~¯7uδÃqÝÿàzô葳³ó'Œ8 ¡BL"‘¬­­;½0¶Ïw˜á ã,<ÖÞÈn€ÿþÜw„Þa®ï˹½fÁë‚^ØH]k;s þqmæ‹lNÇqHÝß_5ÒÌÕà˜×±0@ù_+iSÝœ®çöгÙÎÇÇÇÊÊ ÷ëuê›o¾IOOÏÉÉ馔ÙίÉð`‡†‰D²Þâ ê[|òÿÊÑqôP‹ibJ“¦Pl§N–hä2ê;»nPHJ a9UÁí|·±à5¿Õp-›©…¿¹’HcI$!ëïo<‹Ìãt˜ZÛÇáºKϸÃëóßÈH$IwéE0Ú¹Ø\îÝöÃuW>ñž öéËH$’îüßœŸ]D`¤tüÓ®s?ær¹ÓÛvìCDŸ-ü¢BBB”””:{“97Àëýª¾%­­U‡9š‚Båwù;L8ÿö¶š` À¶NÎn3c¸¬Õ”#¹OçÝ;£Þ~,þà±£BˆEk=hß„ÖÆïÏ÷ýiVï€ía!ÄKñ4~¢s.Ôtûíár•••?~üQKxHY¿~½³³sÍè1~Ǽ÷îõ>vù~ì»7ı‹âýoø§–óBÕ%Þ÷÷ IoÝè¸e!7üZ} .ÆÿÒéÓ磋kèÏoø?)oߜٹçîÝ»÷èéÊ95ÙOoÜxRÄí0µ÷>Ö¥…øzïÝ»×ûØeÿÈò.æ^”xï˜÷Þ½{½O]~RÔzc'7;ÂÏ/"§7 !D¥Rùå—^6‚†ÜC,,,¦L™rðàÁŽƒ±þþ¡ÉLÖ4´tu4mÿ³ŸSœð(òõX;g=…áì¤ Ç a-gû dà•?ñ{.cçLU褷SœpûFð+iÂÔ¹ÆB9/õœhjLFtpr½“ÿïL#ú^ûGN^Ðí ØW"ÒŠ¶NNÆ­Ä(N zž-¤a9kBýÃØzë9vÊðÞ|™9áÁÃ윬ÈÀKX"c>•ªìØ€k¡IE "Ò¬œçXë16ßîÝ»Ÿåº®AéñãÇóçÏ?}ú4®Â½Btß‘vïÞ­¨¨Ft6räÈmÛ¶d :v옌ŒÌo¿ýFtâíÚµKFFÆ××—è Æ.Ä¡¿ÿþ[VVÖËË‹ÇëôR¡!Çãmß¾]VVöÚµk=·Æº­¦¦6uêÔ—/_… &&&úúú™™=? k7D»&Ú-^¼8666,,lܸq=Þ(5(7.<<<66vÑ¢EDÇØÌÍÍ333utt&Nœ¸uëV¯Ÿßh$HÞ¼y³bÅ ;;;—¤¤$mmm¢ (Dÿ&þù§‚‚‚««kFFÑY¾ŒŒ ggg…?ÿü“è,ƒMff&FSTTü駟ýûjjj¶nÝ*''çêêÚã£A±N õ#âv+W®ÌÍÍUQQ™ q¢¢¢NŸ>ýøñc)))—eË–÷<š`HLL¼|ùr`` ‹Åš>}úúõë-,,z ëOQQQW¯^ jjj¢Ñh...òòòDçêÒëׯïÞ½ûøñ㈈yyy—¥K—kPÁ…¸WB>ä 455™™™M›6ÍÍÍm̘1DGûPAAŸŸ_HHHLLŒÐÔ©S-Zäàà@"uþb`Œ(qqqþþþaaa©©©£G¶´´455µ¶¶ÖÑÑ!6B(999222...**ªªªŠJ¥ò7x³ V¸´ôôô»wï>yò$>>^DDd„ 'N´°° Ñh²²²_>OuuuxxøóçÏÒÓÓ¹\îĉííí]]]ñË5.—ûøñãÐÐЄ„„ŒŒ .—«§§§¥¥¥£££¯¯oll¬¨¨Ø¯ RRRRSS333³²²²²²$%%uuu'Nœ8mÚ4†ŸIÝßp!þ,iii±±±ÉÉÉyyyÂÂÂcÆŒ;v¬®®®¦¦¦ºº:…BéÃóÈÅÅÅyyy ãåË—¯^½*((àr¹ ÅØØØÌÌŒF£éêêöÕì0Bäç燇‡§¦¦feeåååÉdYYYEEEeeeUUU555iii999999yyù‘#G u|È$Çãr¹ ååå•••UUUÕÕÕÕÕÕ………%%%eeeUUU_}õÕ˜1c455µµµŒŒh4Ú¨Q£ùÙ‡,\ˆûRnnnJJJZZZVVV~~~YYYeeeCCƒ‚‚‚¤¤¤¤¤¤””””””ŒŒŒ¤¤ä°aÄڈˆˆÔ××ów.—ÛÜÜÌb±˜L&‹Åb±XµµµL&³ªªJDDD^^^QQQ]]][[[OOÏÐаû÷Wbƒ@û/àüüüׯ_—””0™ÌÚÚÚÚÚZ6›Íápx<^SSSSS™Læñx¢¢¢---d2yøðád2YLLlĈ#FŒ”””‘‘QRR=z´ššš†††¦¦¦‚‚BÏ!°þ„ q¿«¯¯ÏÍÍ-))©ªªªªªª©©©®®f³ÙüšË/¾……… ÃÊÊJ\\œ_š%$$ddddddø>***¢¢¢Dÿ4˜€ª®®ž2eÊ‹/ $$ÄÂÂBDDŸ(p!Ë—/ÏÉɉŠŠÂ;ö±~ÿý÷mÛ¶Õ××Oš4©¼¼¼«·•c ßY'(Ο?Ïf³7mÚDtl a2™ÆÆÆßÿ}}}= Ï™3‡èPØGÃGÄäõë×T*õôéÓóçÏ': 6 „¤¥¥kkkùeddZZZ¢££ñEf>" £G¾zõêÚµk»I;†ñ‘H$ƒö›$uuuUTTpˆp!,3fÌX¿~½‹‹ ‡Ã!: 6DFFº»»“Édhnnvww':ö)pׄ š>}º¸¸¸¿¿?ÑA0AÇ`0LLL6nÜxüøq‡“››;zôh¢Ca bAT[[k``°nÝ:///¢³`‚‹ËåR©Ô™3gþòË/¯_¿~þü9>»0@áB, ^¼xA£ÑîÞ½K£ÑˆÎ‚ ¨%K–0Œˆˆ|Éã@‡ûˆ”ÁñãÇçÍ›WZZJtL;w.44ÔßßWáA ´Õ«W§¤¤DGG㧮`ïJJJ²³³ ´´´$: Öð±@óññinnÞ°aÑA0Âb±ÜÜÜvïÞ«ð ˆ]qq±‘‘щ'ð+–1¾éÓ§KHHøùùë3>74ÊÊʾ¾¾sçÎ522ÂÏÆöíÛÇ`0RRRˆ‚õ%|D<0üüóÏ/^|ñâ…¸¸8ÑY0„„„|ýõ×ÑÑÑÚÚÚDgÁú.Ć““‰D $:F ~'ÕÉ“'.\Ht¬áB<`°Ùlƒo¿ýö‡~ : ö¥577›ššš™™ýþûïDgÁú.ÄIzzºµµõ¿ÿþkooOtì‹Z³fM|||ll,¾qP—¯ $ººº§NZ¸paqq1ÑY°/çÚµk~~~÷îÝÃUx°ÂGÄÏÚµkãââbbb:¾,|233---oÞ¼9uêT¢³`ý<§OŸ&‘HëÖ­#:Öï8Ž««ë¦M›pÜðñ€TZZjddôÿ÷Ë—/': ÖfÏžÝÐÐððáC¢ƒ`ý ÿm; 5êÆnnnT*ÕÀÀ€è8X¿øõ×_“““ù/fÆ7|D<€>|ØÇÇ'55µýe9Ø åääôôéS###¢³`ýâÍÕÕ•Çã=xð€è X_ª¬¬Ô××ÿ駟V­ZEtìKÀ…x`ãp8FFF .Ü¿?ÑY°¾²¶¶¦P(W®\!: ö…à«&611±»wïž:u*88˜è,Xßضm‹Åú믿ˆ‚}9¸xÚÚÚ>>>ß|óÍëׯ‰Î‚}.ÿË—/ß»wÿbflˆÀ]ƒÄÆ#""âââðÕ>@}óÍ7áááøe C¾¡cðPPPø÷ß]\\LLLŒ‰Žƒ}„?þø#,,ìÅ‹¸ Møˆx°9~üøñãÇSSS¥¤¤ˆÎ‚õJbb¢ÝÇÍÍ͉΂âAhîܹ555Ož"´nß¾ýÝwß%$$¨©©}Ît6lØpåÊQQѾ 6”••]¸paÅŠŸ3‘ààà… >þ¿’Ã…x0Û²eKHHH||¼Ð'OÄÅÅÅÎÎ÷`¾kãÆ---§OŸþä)ž:ujÁ‚}  ð-΃ÙÑ£G¥¤¤¾ýö[¢ƒ`ïijjrqq™7o®Â.ă‰D  óññ!: öÖ÷ßÿÕW_ýöÛoDÁ>Y7ÈÉÉÉùùù988Lœ8qÒ¤IDÇÁàï¿ÿHNNƯdÆÚá#âÁÏÌÌ짟~š3gNuu5ÑY†ºŒŒŒ7^¿~]II‰è,˜Á…xHØ°aƒ•••››ÑA†4þ+™7oÞlooOtL°àBâ¡BHHèÞ½{“&M²´´œ5kÑq†œ#GŽ¤¦¦¦¤¤Døˆx¡P(—.]úöÛoñr_سgϼ½½$%%‰Î‚ "\ˆ‡—U«V¹ºº644e¨¨¬¬œ;wîÑ£G ‰Î‚ (\ˆ‡œÃ‡+((,_¾œè CBÈÕÕuÆŒ+W®$: &¸p!Š¢¢¢ð _ÀÖ­[ëêêΟ?OtL á“uC‘´´´¿¿ÿ´iÓ&NœhaaAtœAËßßÿÊ•+ ø®X÷ðñ5qâÄC‡}ýõו••DgœrssW­ZuéÒ¥Ï|ú6àBf °ñéÇdÌõ2Š‰û’%6Tþœœ—#„'Ͷ…T~Ì?ц ¾ÿþûŽßÛÙÙÍ;÷ ª¸A^³g£ïá® ¬ÕíÛ·~ýõ×M$Àè@{ÙeÅï ømò8Õí˜BPúŠâ½Ÿ+öï#Iàp0Œ›ëÊ•§ (éÊ €À-§ž™[Òâ—¿ïìÙ³§°°ðÊ•+DP¼šô¤˜4F§¼¸˜ÉÿšY\\Áá“‘›”^Á{Û>'))Îâÿ¿‚ÉvEàUÀ‘€Ì’"~;Fzbb:£}}t `ö¹Ì—Ò…¸°°P^^þƽYƒƙ3gÆG&“………ÅÄÄvìØѱÇzkÃâ[\„xEw5Àäíö°'¤q¨—²ëâ>ñ©²ýy¤×HØø!„è·Vmü;?r³þ†§!Tli¸¿±½ÕaOt'f'ÀÚ,.BèµÀ¶V¤Àœ åÑ#|ý*¾ô²øl¸cïáñxªªªü]EAA!00ðÓ qì1{Ûðë=À9œÝöý>3“Ç5!î1cÐ?‡Bœ8wX|­mìמïuw´c„¡¾ûÅfû¹güCg^âaø9º!”se>Ì>ך1͇3|Ø­…ØÖÞ„—Ç‹s€'ÛÂW› ó;ŒàÝBÌãñŒ;í2þ|MMM------ý1ñOvîÜ9---2™,!!±k×.:njjJ&“ÅÄÄvíÚÅápÚ[þã¡Äÿcc›S‰,„Êöi¨Aˆ—}@¡P€J3¶\ýW—ù†wzù™‘›Ú ±¡ÚÎrT½O¶ETæü³45@“J¥®<•‚jâwðÿ&ÒøÚ7ùå—ÉgÂWM`o544hjjó?’Éä‹/~æ4Mw>æ®-JŒ¾•ÎHK‹ Œ°¨k€.€èÄ[Uä$> ø‡NÏ‹zB0îxÝ…šýö´Ž‘”ùüÙã ¯…ÿâaõðåÃGØÜhäÕ—2l¿ÿv",QÝùë­×n)©eˆ€áÌ)êÆAá‹$xèâPj’„=€ò*6€toÀµk×’Éä“'O~æ‚ê(99ÙØظû6Ç·îÂ$éÝï¿úêÃÓ?üíÍ>hÿA³Ž ÞýøæÍX»ví‰'„„„ 66Ö×××ÓÓÓÛÛ»¡¡áèÑ£ü–ÊÒͪ{®ä°(<¿ïßÉã%óozî§ÛÒ`ï÷W]ûZÉ¥ÔxšTFž½\oÿ¦¥¥åÝü‡?´ã÷ŒÞñûÞLÿùóçëׯ?þü­[·|||wìØ‘nnn[¶liOk¾ö¸†%•±‰uâ¶äüo.ªÍ¿t6 yˆøÔÇÚš×÷l°Ÿâé)sò¤ÿžóµÇ5,Yžìs'kö†hЋþt°©q/¼}û5ì$ƒ°ª6¬ž\\\\XXØÍÍ­¤¤¤“v5y!÷ý#ÒÙqËóR³Z;p˳R³Ê9!zâcÿû©Em5™!þþüOì¢Ôû!iEåtz!Ä.Œ‰ˆÈ«á!Tè?²¨­×«<-Úßÿ~tÖÀë F¸ëÔÙ³g%%%%%%GŽ9jÔ¨ž 1¬ Ó³³³³Ó‚ÎïáwãþÃB¨úÌLõ-ü‹ */ÒlÃÙˆ_ˆaæá¬6/Û‡ ºñ.B!nä™С¸#„ø=ƒ ±ìFDN ›]SSøäüú¶Š˜1‡`ñ¹ÿبµ(ÃÌÃt.Bˆyl!èoˆ>(Ä(×Àö\L BˆG¿ëàÜ›>b …òóÏ?ÊòDüüüììì:/ÁX¯áBŒu®¨¨ÈÆÆFBBº+75Áï=k³íFëu`A^øßhj¾34¤¡º3m01³‘ÙÍè —×ÆŠÈõK2ì³ðj˜]þzíaÌ zZƒÃãÔÔ Ì'«õ.Ę€`ç$ÅÄ$æ3A ÔD[¯ƒ`%ÅÆFFÆfWÔpòr ˜ôÖG&~0 ðîIX6K€øX÷XŒdöTtü¾øö÷“ÝýÓ?{$E_GdÐv}¯Ð~ËG0|‹3&š²vhé¡·}4< •‘¿(мڛüSiºú$àüâÙêZw¬Ã>ºÕLJÂO¼4]|IÙ—S]]ýâÅ [[Û.[pŠÒ²Ø£”H£ [¯ ¬`¤Öð¤Uõ5†ç? ô÷=Ài1àTг ™bÒ”ño¯ Ì|=¶d±ÿoT¢—¬¨0¯&=dTõÔ€WSÌ$)+H°+*x Ò¼Š ¶‚B¯Ÿ"ð1F¼äsëÐçE× „ê®x(çæ^mO¬ö6†·SMw>ð6Õ=QQ»t:€—!7Àmž.±?ÌsíÚµ)S¦¨ªªúùùuÚĸm"®:kóje×(!çêRÒHåÞ»¿¥Œ$_É)½é€Ïž /2®.IÙ}ðmŠôâ+m¯hzáíxàØ<¿Y@€¦â{6B²z«VékŒ4ôºW_|Ceäw9¬g»GŽœÁÈ93räOz 6\ˆ1âÕ•ê%æÒ >÷ÛeÒ ¶.¢î®CÍñC^KfíJ‚1"­WÑɈw6”~>pÑÒIþ C›Í€¢¢¢ ¨ªªúûû777·ñÙËÛ•ÎI< ÌƦ¦‚ŠQ‡Ò¸ñÿÞvÞ]5þ5yžG®­×dThù¦Öß¿”~Þ%5¾¬uüág’þp$úïR€ æ䪼=Q(!q¢¤q½‹f{ÁÍpFsvH0@ndvÃËû×õ.T bQ|Ü5 ˆ®VæÝünÜüs%3=v8-[OH¿‡6¥\ÔÜt{Ì—‹ÜÏÒÓÓ§L™Òãs){ß Óï;>³ûf~ð=‹ÅâäñxóæÍÛ±cÇÏ?ÿ 5‘3fû耨¶©¥ô#4\ÛJ«ÐUˆ”š…{<Ë€6ˆ›Zª,Ó]@µçí³c¿!4°ùÛ©.äßò—õD g«CT®Ð7ûÌöùûþ7aß¾ñÏnóÂÊ=|zxv¨Â…#ž„ÔØþût]2$„†ÂwR}Ô™s%+ýKÿœ­ùÝ|Ëw*ugCë‚"`Þ­w,Ô5--­çÏŸ£y@eÇf¿GùÀÌîçû÷ߟ={v̘1:::111S¦LY°`AÛO c=mäÚ'ŒfP–WÀ%å_7[ó¸MU€;KTžp„ëaŒŒäm2_3!¤ä¾ý¨’›+žµ¿ˆ@ ýù¥HÂlšÒÏq °6ÈbÀ\9ê¨åõæ=´:YñÊUå¹Õ·Ðuûþ‘¤ýî‹=Õ zxCGŸà¥xh:ÒÔà@9bŸ™ à¾Ä½õ¡Ž#7΂*_–W¯:¾íqO¼òì¼&Êxe2³(›#>^Y˜ô'ÏSœ®Ù8~›Šì4Þh=e±·ÿpp!Æzð… ñ€‚ 1Ö·ðU†aÃ…Ã0Œ`¸c† b Ã0‚áBŒaF0\ˆ1 Æ 1†aÁp!Æ0 #.ĆaÃ…Ã0Œ`¸c† b Ã0‚áBŒaF0\ˆ1 Æ 1†aÁð«’°H¤={ö„††H$Ay|vIIÉÌ™3‰N ‚²ec‹Åb]¸pèÀãñ>|èââBtVøIùXÂ…˜Læèѣ߼yCt ë{¸Ã0Œ`¸c† b Ã0‚áBŒaF0\ˆ1 Æ 1†aÁp!Æ0 #.ĆaÃ…Ã0Œ`¸c† b Ã0‚áBŒaF0\ˆ1 Æ 1†aÁp!Æ0 #.ĆaÃ…Ã0Œ`¸c† b Ã0‚áBŒ º   I“&ÙÙÙ566Nš4iùòåD'°>†_Š ºeË–]¹råÝo._¾¼téR¢ò`XŸÃ…tjjjüÿ7®´´´´´TLLŒØTÖ‡†Ãz0fÌ…ŠŠ PUUÕÔÔÄUdp16899ñÿS^^>þ|bÃ`XŸÃ]ØÀï;vlYYî—ÀÜ5 üÞ yyyÜ/ J¸kœœœ²³³,X@t ë{øˆ,\.·¢¢¢²²²ªªêÍ›7\.—ËåŽ?žÃáÔÕÕ]¼xQXXXHHHXXxĈ rrròòòÇãY 444TTTTUUµ¯AÇår›››…Þ!,,,---''§   ++;lØ0¢³÷chhhHKKKMMÍÍÍ-,,,***--­¨¨xóæ Ç“çÿ;lØ02™L&“‡.,,ÜÐÐÐÔÔÄår›ššZZZÞ¼ySWWÇf³9Žˆˆˆ¤¤¤‚‚‚’’’ŠŠÊ˜1cÆŽkhh8~üø¡¼‡÷“úúú/^¼xñ"//¯¨¨ˆ¿+++ëêêš››ÅÄÄÄÅÅ¥¤¤„……ù뎿…„„x<Çã¯ÁÚÚÚö5(&&&))©¨¨8jÔ(UUUþ466;v,‰D"ú'î_¸c_BAAÁÓ§OcbbÒÓÓóòò*++ù¾£GæïrêêêcÇŽUTT”””ü„é#„X,V~~>ƒÁÈÏÏ/(((..ÎÍÍÍÏÏg±XÊÊÊFFF666rrr}þz/_¾Œˆˆà¯ÁüüüªªªQ£Fñ× ŠŠŠššÿlêÈ‘#GŒñ ÓGUWWÐéôÖ ‡ÃQQQ¡P(ÆÆÆ–––ÖÖÖRRR}þ b¬¿$%%†††¦§§s¹\*•:iÒ$===!!¡/ƒÍf'%%¥¥¥ÅÆÆ&%%½|ùRVVÖÐÐpÚ´i³fÍRWWÿ21„Plll``àÓ§O322¾úê+*•jhh¨««ûÅú‚X,VbbbzzzLLLrr2NWPP R©S§N5k–ŠŠÊ—‰Ñ¯p!Æú›ÍþçŸüüüþû￯¾úÊÜÜÜÑÑÑÚÚZGG‡èh­š››Ÿ>}/%%eaa1þ|gggÜË L&óúõëwî܉‹‹Ÿ}ñâÅí·ÿ ¸cŸ%))éĉwîÜÑÑÑ™3gÎ’%KFEt¨OñòåË‹/Þ¹s§ªªjÑ¢Ežžží¸Ü¢¢¢Nž<lbbâææ¶xñbYYY¢C}Š”””+W®Ü¹s§±±qéÒ¥6lH›"°OâïïO¥Råää¾ûî»ÌÌL¢ãô™ÈÈȹsçJJJ:88ÄÆƧ]½zu„ ŠŠŠ›6mb0DÇé3>trr’””tuuMMM%:N¯àBŒ}´k×®éêêŽ=úôéÓ\.—è8ý‚ÅbíÚµKVVÖÆÆ&""‚è8}ììÙ³ eìر—/_njj":N¿¨¬¬Ü¸q£´´ôÌ™3‰ŽÓ\ˆ±ššjnn®¡¡qöìÙÁº¿‹ÍfÿøãòòòsæÌ)))!:Nˆ‰‰Ñ×ן0aµk׈Îò%ÔÔÔlÛ¶MZZzÙ²e555DÇé.ÄX¯Ô××÷ÝwRRR;wî %ø]µµµß|ó´´´··7ÑY>]mmíÂ… ¥¥¥:Dt–/­´´tÖ¬YrrrgÏž%:Kçp!Æz–’’¢©©igg7˜z?Vllì„ &Ož\\\Lt–öìÙ3UUU77·ÒÒR¢³&$$DMMmúôéxhŒúƒõÀ×××ÖÖvÍš5Ož<"tÊÔÔ4%%ÅÀÀÀØØøÅ‹DÇù§OŸvrrÚ¿¿ŸŸŸ¢¢"ÑqcooŸ™™)--mhh˜ŸŸOtœ÷ý›hþþþ#FŒxôèÑAÈæÍ›@ðÏÿð>}âââˆ"@æÍ›ÙÙÙDy b¬KÇŽ€ÿþûè g÷îÝ222÷ïß':Hþ÷¿ÿ@tt4ÑAŽ‡‡‡¬¬¬à,\ˆ±ÎÈÉÉÅÄÄD@ñ—OZZÑAºtþüyEEE:î(üå“ŸŸOt„ÂwÖa(..644¼xñ¢³³3ÑY×Áƒ¯^½úâÅ‹/ö£ÞËÌÌ´´´ ´°° :‹àÚ°aC\\\LL ÑAð-ÎXgœGŽyᢃ:sss[[Ûÿû¿ÿ#:ȇLMM§NêííMtÖÜܧϲu#ãÞuÿb´ÒÑѱ²²:~üxæùh¿üòËÖ­[û뙽]›=ÝÞ/öž’ôfCjekkK¡PΟ?ßûÙö\ˆ±÷p¹Ü°°°7öåD…D{n'$" -Lî¶ Ô¾¢xß낈€´T/ç±fÍšÛ·o÷kžRQQ‘––æááÑ_3èíÚühµØ»MÒ› é­+V\¿~½÷³í¸cŒTRRRRRê|0'ëÏnš$‰D2vÜr?‡¡‡Y»fð0Ÿ~gc¼úØsþ§’ ŸŒ×þÇìæЬæÎñ&cI$ÒØ¥?þUôv@NЩ¥6T‰D"¥9®ñOgÔ\õpß’©­±vܙƀò›‡6Úhj’H$’æÄ9ž¼nF¨ßäè¸ã—“&‰Dq¾HŒ:à IDATœÞœ¬ßw|cB"‘H$k÷!ŒúÖñS¢~ûqµ&‰D;vŽç…btÅÁÁáõë×,«§Eû…ëêꊈˆôÜ´ï×fç«#çænšãšÿmš£I"9ÈæAE’ߦ¹Ö$‰Dšø;[oo‹•î·Éɘ¿6Ýw¼]ËïèrCêÑœ9s^¼xÑÜÜüãô9b{F0Asüøqggç.fxjX¯þñؾUüíç\Z}Ò8—]*Z  ¾…ŽBÜ?Ý`m'Œ °'¢“ŽÔ'^æÖkyo ð§hu¸¡Š]N{Ùç1Öf#v€÷J*;­Þx<›ËýÇC ŒÜ7;sp @uûCÔåèÕ„ÑøsÑÔ0ñ/*Úg `õÍÇö-€y‰¼êcÖ­V{íãOÖâ`w7DŒ?>,,ì³–{ßñòòZ¹re/öùÚìruÄzOåOŸª `u¸‚qÂ_¼ÞÇv¸€êª{u¹Ø9‰'øß{zÛ±ÄÀh'!ôN’®6¤^RTT|ùòe¯›÷=\ˆ±÷ìÞ½{Ù²eʹ2fm-Iœ4 ÌðáЯÀìS™¡O]0ñ+Bˆå ¿= uµërÂh0ãd9ÿSâ JÛþë=À9¼ílKì>3“Ç5!î1cÐç—ENœ;,nŠØkO £åÝŒþî¹\fÌ~p8ÅoÆøg9ì‰(8f ¶~tþ³2<À°»½ÚÜÜüßÿíÕòí«W¯öòòê±Y?¬ÍîW,:—‚âr¹JšgêBÕ™ Î1œš.;ûÌL0¹”Õú¨©Hï©°Á?ÿm’®7¤^7n\TTT¯›÷=ü’.ì=d2¹±±±ÓAe… Ûï¿Èÿ(ª;½õÚ-%µuê.^päþÓ¦õa'Ó)ŽŽšTí¢ð³; ‘?JSqôÙ‰ü®=Ra”°mÛbþ—®2Þ´ë €éÎÇܵE‰Ñ÷¯Òii1!±¶Bu ÐÀx ¡ŠœÄ'ÿÐé¹qQBè†ÂäîF°°¶P2™þ<ÀdÃêÖ+mÕæ«q>'-Vw ݦ¨ó_˜4JÛ ¶»…ÖÐÐ ,,ü±‹ºŸÉ䆆†›õùÚt[>««ÕðÀdÑl “ë2âJÀðð<*¿óD|Ýör#×<‡N{«Àjõ×ã[ß_eµv;uWÈÓ¤˜”ˆDkÉ+yò“òÔ½ü/)TÈí4ûÎŽi³Dó?Ðó`DÏ£[˜i¼óiĈ·§‡ÈÒo/é¹–µ«¬¬œÇ!©ªª&$$ôجÏצÆ×ÓãÙwº:FÐÛgѾ–Ûfùî:.vÔ•%þöñoÛKŒx„¸ü/¸ueŒõá,zRUUE¡P>b„¾†OÖaï155ÍÌÌìtP«€YÉiÿ‚]Z@jä˜ÌXpsûÊyàlkfFsÕ-øåkÇ]±ª«æê¾sêZÊloN/**¢ÓéEѳŒ)¯ò*Þ› @Í¥í{l/Ç0Ø\”›ðôö1û÷¢ˆ@SÎÍÙG¢ÁjBQ ¡ðûï3xÓÃèu¢í‡>ÂbOé¯ÛÎÒ0Ÿ~Gµñúç㮫¬¬d2™&Lø¨±úÏĉÓÒÒzlÖçksJù.V¼=¢u\^C“Ù>çü€ÝÆ´-IœÎÏ"Q4†Ô›Ú·x ,ýöVJÓ¤‹ ©WÒÒÒÄÅʼn}S.ÄØ{tuuÉdrTTTÇAú3r®:ÂàïÙq¯#tПfª j<Ý 1‘3œÆèLŸÎeÅ‚ÉïM‚,£¬®®®¬¬¬®®®¬0\aœ%@€ÇÚÙ ðߟûŽ´6IP§š›©‰‘¡2é’ç–'m»^ê³Ðl& ‘ J5¦*K“÷ì÷uû“ZÁº½ÞT7X¾ù(ƒì;‡vKŠ¥ÕÅ#]ðõõ511>\Pþ¸´µµ---e0Ý7ëóµIîzu¼o¤õ×fhûéxfÂñ-“#«…„ººÅWÆhÚÈ?´ét<8Y?nþ¬-µÞ™d—RoøúúZYY}ÄýÀþiL0yzzº»»w6„àõþ®¨¾%­í•uJ`q4!„ÊïRl[O—ÕS¶…trÕ3æð‡[¤Úr„‚¼Z055ßÙR‚PÝ™¶sëA̬¶keßiÎ ì®GïäIÛ ýVs|jPõ> 8PÞÚäƒÒÕÕ½xñâ§,è~³hÑ¢uëÖõÔªÏ×fFW«#rŸ€æãösg¼Oã÷æ¼áÆËËùœ8÷Ú[î}È}?IWRZZZTTTÐ+~Öö¡²²²ñãÇGEEéêêvʈõ÷Mf‚´¦¡¥«£©tÛ÷œâ„G‘¯ÇÚ9ë) `'=fk9ÛO ¯ü‰ßs;gªB'‡œâ„Û7‚_±H¦Î5ÊyÙ¨çDSà¥]¿›"ŠSœL†‡ûʼn›:˜kˆ3ëæ­'HÕmù,e^Þ뉯YR#umç¹Pjþ Nj¶žc§LîbtÕ7“'þó0ŽÙ ¢I›µÐ~x9‘é çf=x9‘ÒAËÙz\Ç|}}wíÚõêÕ«aÆ}þ’ï+YYYæææ™™™]^Þ¦×&§óÕ!Vœ\oçd§ðv ÖDþsëYF!H±tšK/=,ö¶öÒŠ“lܦR• C’.6¤=zôÚµk‰‰‰½X®ýb¬{öì¹ÿ>á[§€«­­ÕÒÒòññqss#:ˇ¾û¼¼ÇD Þ5 1Ö‰ææfSSS++«“'OEpÙÛÛ›˜˜9r„è ¨¯¯700X±bÅ®]»ˆÎ" ššš&Mšdccsâĉž[÷3A9À ”aƘ››khhÿ„@dcc#--½ÿ~¢ƒtNTTôÎ;4MYYyùòåDÇD&&&†††G%:.ÄXWF>^OOOOO/::z@TaPRRzùòåóçϧNZ]]Mt‚…††êëë;88|¸¿Þû ØØlöúõëeddŽ?Nt–OQ__¿téR¢³£¦¦fÙ²errr‚vÑ7.ÄXoEDDèéé?^p^Bþeøúú***ÚÛÛû¤ÄÏwÿþ}MMMCCÃÝ»w×ÔôþÙdžœœÜ¬Y³ŠŠŠˆÎÒ9\ˆ±ÐÒÒrâÄ 999[[ÛÈÈH¢ãô»7nèéé©©©ùûû¥p¹\þƒâttt‰NÔ¿ZZZþüóOMMM--­¢ãtb죱X¬½{÷*((Ðh4ÿÁ×YÑØØxîÜ9 Gt¢ÏÕÒÒò¿ÿýO\\´´´dee===eddf̘Aøݽý¡®®î·ß~SSSÓÑÑùûï¿Å…ûDÇÛÛ›B¡¨¨¨ìر£´´”èD} 33sÕªU222T*õâÅ‹‚¿÷Æ$%%ÛO ™™™ýðÃ!‹µk×.UUU ýû÷3™}þbf$&&.^¼XJJÊÂÂBpžÖß#\ˆ±Ïâêê*))ijjzèÐ!í†ëFFFÆŽ;tttdddV¬X‘ššJt¢>ÓÒÒòîÉySSS‹õn›»wïNŸ>]RRÒÊÊêĉD¥ýd žžžššš ëÖ­ËÉÉ!:ÑÇÁ×c}£¶¶öæÍ›ÿþûott´––Fsrr²±±œçC~€Ãá<|øðÁƒööö .tqq!“{ùòßãáÇîî¬LLL:½©·ªªÊ××÷Ö­[ úúú4ÍÙÙÙÒÒ’Dêæm¡Dª­­½ÿ~pppddä›7o.\èàà X×¥õ.ÄXãp8wîÜáï'N411±°° ÑhrrrÄf{ýúuxxxttt\\\zzº¦¦¦ÍÌ™3èÞÛK¥¥¥FFFÕÕÕãÆ+,,ÌÍÍ•——ï¦}mm­ŸŸß£G¢¢¢X,–©©©‰‰‰¥¥¥µµµ””Ô‹Ý©W¯^EDDÄÄÄÄÅÅåäähkkÛØØ899ÙÙÙ ì/ŒÞÀ…ëGÅÅÅÏŸ?OJJzõꕬ¬¬®®î¸qãtuu Œûõ᪪ªäääÔÔÔŒŒŒW¯^¥¥¥566êèèP©TkkkGGGÂËÊPUUennnooïàà0gÎœ={ö8p ÷£3Œ{÷îÅÆÆ&''Óéô‘#GêèèŒ?ž¿ŒŒúõÆ–²²2þÌÌÌä¯AÐÑÑ111±±±qppàŸ~p!ƾæææ„„þ¡hVVN/++SPP5j”’’Ò˜1cäååeeeåääääääå奤¤„„„„„„DDDÚ{ ¸\nCC—Ëår¹555ÕmJJJ ‹‹‹ËÊʪ««UUU555ù…ÃÂÂBp^hôe°X¬É“'Oš4éòåËðìÙ³ÏyÞ#Ç‹ÏÈÈÈÉÉ¡Óé•••âââ ŠŠŠ***cÆŒi_}rrr#GŽç¯>!!¡ö5È_}<¯²²²ªªªºººªªª¦¦¦¸¸¸°°°¤¤¤¬¬¬ªªª¹¹yôèÑ E[[[OOÏÊÊjìر}³h .ÄaBt:N§3Œ‚‚‚¢¢¢ŠŠŠÚÚZ‹õæÍ›7oÞp¹\×ÒÒÂãñx<™LæÿK&“‡ F&“EDD$$$FŒ!)))+++//?zôh555uuu ¢D"±Ùl --­ÿý·ŸfÑÔÔÄ`0øk0??¿¨¨¨ªªŠÅbÕÖÖÖÖÖ²Ù솆†æææææ榦¦ö5(,,\TT”¿¥¤¤dddÚ× …B5jT?%4¸c“ÉTUU­««#:ÈÀP__O£ÑFu÷î]é€×† !WWW‡óôéÓÁwAô † 1† sæÌ)++‹ˆˆ!: öp!Æ°Abñâů^½zöìÙ ¹ºvèÀ…ÃU«VÅÇÇGGG…»T\ˆ1lÀóôô ŽŽ–••%: ö)p!Æ°m×®]~~~111ŠŠŠDgÁ>.Ä6€ýôÓO—.]zþüù¿p Ã…ê_ýõôéÓ‘‘‘êêêDgÁ> .Ä6 9sæðáÃaaaZZZDgÁ>.Ä6ð\¼xqÏž=!!!zzzDgÁú¾ÅÃ__ß­[·R©T¢³`}cØ@âïï¿nÝ:??? ¢³`}b 0"Æ11±úúz°°°`2™éééD'êwEEEfffË–-;xð ÑY>W}}½””Ç[[Û¦¦ÿoïÞš*ÿ?€¿g‚€ókb*Þ ,M%À’~¥DPSIÍ ^J)M‘L1ð§d ¦_ÉKyICÄ05P`ä’*n%Cu@ d#Ÿßc\Pä ý¼þÚöœóœÏ·}ØžsÎsªE"×AéúFLÚ ÕÆس0(qóæM[[Û©S§>U€¡¡á€TËÊʦNÊm<:ˆ 1i¼¼¼tíÚõÒ¥KóæÍã:œ'ëÎ;vvvcÇŽ ä:–V³`Á¦¦¦yyy³gÏæ:CC¤}0226lXYYÙ¥K—¸Žå *--9r¤µµuHH×±´&Õè„ cŒÆ%¢oĤ}°°°ÉdO÷å r¹\  <ø)«Â¨¸~ý:K4Š¾“&Èår] ¸yóæ¹sçƧ ·(V(+W®´µµmÅ>+++íííMLLŽ?ÎãñZ±ç²²²3fµbŸ ???33sâĉúúúÜFàÞ½{›6mÒÓo¨“&øùùùûû¯^½šë@tÈ;wÒÓÓ[«C¥Réààйs瘘˜Ž[ù2+ÐÐÐö~\ëºqãF~~~LL רѕu¤i...>>>\G¡CÂÃÓ’’Z«·êêj''§çž{.::ºÕ«°ÊŒ3(ƒÚ¶nÝ*‹¹Ž¢bB¸Ä›8q¢\.OHHÐÓÓã: *Ä„pÉÕÕõæÍ›"‘ÈÀÀ€ëXg¨™Y³f]½zõܹsºp’pˆ 1!ÜX¸paZZÚùó繎…pŒ 1!ðôôŒ‹‹KIIéÖ­×±îQ!&¤­ùøø=z4%%¥G\ÇBtbBÚÔ† öïߟœœÜ»wo®c!º‚ 1!mgË–-Û¶m‰Dýû÷ç:¢C¨ÒFvîÜùõ×_'$$ 8ëXˆn¡BLZ¢úÊÆÅ~—yF†¨¨¬ä1vëÙÓR0m¦Ëà¦/EPJ3r;X éÙ²-–œ_µ @ÚÛ90èÃî-[S~Ì×=ü´nB½IþŠÙðÉr¿­Úpö…ýû÷¯Y³æôéÓC† i»­6DÔMŒ‡Ú°aÃÔ©SÕOdñ‚FÿŒ¦l-j¢›»v€GBK·ž³g‚j [Ò+[¸ê]K ßW ù¾˜ÇÊZK­C‡1¢ùˇ……ñùü¤¤¤GßäcXºt駟~ª~BdŒ1èââòèë·6š“´D'tðFígC.M[%"<Ý·_yèšú(ÇÐ-½l¡ Øÿ¸êQÐ÷Ñ- Ö  À7n¸IÛÕ¥Ùó[Úß#ŠŒŒ\´hQDDÄÈ‘#Ûh“AÔITˆIËué¤ùkÔËúëcñÎ@ÔÒoóy1ÛæØ[ñx<ïeó'‘9¥€ì€»ëòLdýð‰³wv€¢Ã=ìÍÍy<Ï|ø”eû$ÊF¶S™yt³³‚Ï…»÷¼¾g{\‰¦!ÍÓÙyÕF/sÏl|pÎ=T\Ù¹j¶5Çãñì\½ã$•ê%/&}ûåBs÷òËS–í+TÀÕÿ)s¿Ê®(Ùëîd뾯¶×¼ƒÎVöÛSÊTJb=ßCõ.fûþTØXxÍqêÔ©ùó燅…=ú»x(ƒº†›/â¤ý¨34Qï ÀvS½…Qî=‡X+Žó€.kvøº;å2y”ÿGV,]zæ*áî=¼áê°ÃÏM¦+O5Üt̲×óˆ"V!ô0iÛEuƒæ÷µ¹9`)•úZ€íì/|g¦e(ïØ©Zèå«ÚÊH¿ Œ1‘ÿÀ:VÆb¼æaâjU¯gjž*Å¡fª×úºÛMÚ?›94qöìY>ŸÑÂ]ÞÊê MPcº74A…˜4¡9…85` à(c©þŽÀøDyÍë¾ê cŠK õ»Àc\Ì ­Yûú²u~,×l+ÉÀ”} Æ»ä ÿrqMNAEŒ1…¢$e€±~êXIø<k„ØpˆPJ/¹°Ø$c,Õ„*ZeîwÆ~s1Æ”Ý8}'gŠ7ÖRu y!ólÉ(Õ„ÖœBœ””ÄçóþXhN!~Ö2¨k…˜Îš ­é-ïXÅ"iFrô±$;;%îD*à å÷ÜS€áð#Œçeœ‰ ‹ó/$Œêµÿë×ÐFU)"ôË -Ì€P¡ïjÁ ªFÚì@OO|^X/]¨í7m·lün¾Qy ‹É£û?xé5; ¬Î&:œâk¹hÝ·…ˇwN ?,]:Ùåé‘»¿ü1Uât±ñyŸ[oæ~HKK›0aB@@À|ÐÂ]È1Ê '¨“Ç'KŠ=8(€gÖ÷r\«zÕÌÊù./?¶êI›“UOÎÎ×<_¿ÏˆovÀO‹?Õ¾úAG½óUø‘#h-ÿüóµÇtôøµg5Ý{hä&³>›¾nÎÆ8ÉrãÃþÀ´ùïôdªù(üô“™êþ5ü>e·fßß';;ÛÉÉiýúõóçÏoî:£ rŒÖ‘ÇU™²ü$`;y8_öãʵ€CpŠD®`ùé GÆÔYÔ@@uÞáI›“a».]*S0–ý“¯%ðOÝN%'·‹Ðgö>©LV$•J¥E²¢?¼,ˆ'  0Ô|®: âëÿªŸ–$|leïž×œà_™ð¡ØºvuÀn˜®üÐR€ò^9€åÒ?ÿÌWIÙ·ö³ Kßy¥9æåå3æ‹/¾X¼xqs–×”AÎQ!&-wN’%‘äåååådœÜ»ÖÖÊÀ†-óø€ñK@+›ýŒôp;óÇeËÏ@Íç-ëÜÙÜ’  Ê 0µ²´êÅ׃òÜÎÅë2ëŸú-lÿ5`ÞB×^|~÷^½zõêÎï>tÁgÓôïL«ÎÇÉæ}öD @~l£ÏîLáK›wÝô§³{gØ-V͵˜Œ˜hxÄW@Ñ '»ÌøW3H$öööK—.]±bE³¶ÎÊ ®ázšèººtœ¶jì¯hÅ¡Kªö/õmqÍ͵Zãn0V¾£æxLÉwu‹ÖBŸ^s€ˆ)/ºÀÜÜz¡¨µO˼ý«°"匿c€¦|'cw}ÐAª}*ò¤}9@‰ÐúyK5Ý)/.³¬û§ìÓ>ºÕèÁº‚‚SSSooïGÝÓOJÝ :(ƒŒÑÁ:Ò¾ñßÜyµ÷CïÒ­ßkC_7©Ñ·é÷lûƒ¿¤^ƒAa£]ÆZwLŒ¸ÐÙÌ0\üËåœ)f¦F¯Ž“ç;ŒÊ¸^jlòºÃ´ f²ßNgþû’æXë¶(òÐü—lêÏÈÀµ3îDö?†&†CvŠì:¬v>õÿzÇJN„ŸºPrÏÀ\ðÞŒ1ƒõ œa!5—Õv™|Âù€Õ¼ ª\3"ilçiÁ^ÓKÓ]Ça[3ÊgD…žÍ”Þ3à¶?Å_|ëÖ-[[[WWWÿïÕ¶DÔI<¦Ì&äüüü.^¼xøða®Ñ!ááá)))ª§wîÜyûí·G½k×.nk”‡‡Çýû÷·oßÎu :dëÖ­qqq'Nœà:5#&ä±”–– ݬ¤] BLÈ£“Ëåöööƒ á:ÒŽQ!&äÝ»wÏÁÁÁÔÔôçŸæ:Ò¾Q!&\’ÄlÛýg—”×öúnŒ+¬~Ð*•’ãþ§*Ô¬,Ê-,yP#€ÒÌï®=ÝòHë»ÿ¾££#ŸÏŠŠâñxßa;Õ~3¨S¨.$nXú«´ÎKÕoüÊçôåÒ­¢(8»ús¡¼ñFùÎ1=^Ûzù![L^”jð¸7Nþ÷ßóóó;tèÓ±ã3}êQ;Í ®y¦ÿ†H›SJrÒ¯ßUš˜µ—!vëÍÔgRçe\¾Å{¥ÒTûš«Zò¼Ì¬»¬gO¡ŸúT¤ifnA¹&¯ {µ»!*®å%âbåÛÝõ´@Á/A˜›ý¸÷Ȉá…Ξ=ûìUá§$ƒºæYû3"ºö¥½ù:¡úÉÌÝCÓ´ÛøŽOœæé»õV­¾²jà Í⚧›Üý¯»ÀK³È–”Ûvg‰=³&õxÌ.¾^ëç#ºáFb¦e¿nð˜ïÄÑÑ1++ëÙ«ÂOOu M6ri¯ç:áøX©’1–¾ø û”HÍ0âP;Ÿ¸5q1Æ$ÑëTÕ]÷÷ÝK6‹§%Ëcå!îªÓö+¯öª™÷®¿%¶ÍzËû¤¿%L×$%ù jØ àjÜ!Lžöz[¾í§eðÉyÖþ¥ÎÜ-ø³6;öê`ð”:X.Š ¨IDATYì<Ÿ_ú ôÏÀÁùí¾ú½ë$À@yfÇÚãWuÂ=ÖwһŅXàiÃÐùýçÎÙ]-–¿}æxàF¯Ìs)21r¼úÇpWèÜX«2qω™ËwpóþÛ?Êà“C߈IÒ >ô¾5]@yçï¬ÌììììÌ?ò ÔN/ IYwTæ¦Å€Ñ´M‘‰ÑÑÑÑÂSA³^4~{£T릟=‹¾¼Ê¤»o|y3f×ןNz#F=C£Zc­•é1BL³má-݉eð jãI†H»SgöµÇQqÁÌß0jí)c¢eê;´«&ý²rVOð¥=/cŒ)/ª×ô|UÄä;Æ€«›«™jÛïå¬\õâ(¿¸†­ÑË€•ç[á4ûžu:¢Îìkã)Ê Í¾FžU†Ãw±[³£âsËxŸ­·s´ê `ˆgzz•9€q›rÄS¢…Ywû†÷UÞÐP÷DÑŽÃv)nÍŽŽ¿RöB`˜YùM>Œ»54:>·ŒçáõýÛ¦ÿ¤_Qê¡óâ#ù¯þú‡Þ ÁÊú­wÃßx““·þ”  >14ûi;ÖP½Ù×t;Ö;F!¤*Ä„Â1*Ĥe®þ|áž?Z­»š^$1Û¾‰ú³Éśݭ4dãÆ8I¥ökՒ؇Í5Ó´k]?Ž+~ÜÐtM+'ô‘=Û)£BLZ¢ø¸ÓôÛwZëʦÚ^ 7¬ˆ—6¹B³;¾ºÎÇçôõ:ayQüêo/(½S³1Ã…ïÌÙÿÐ3hÛ›VNècx¶SF…˜´ÀÙ- ®Í:2·ÿsÅÒâ eq^†H”*® ÏI Sòj?FÊ¢ÌT¡(5³¸æC ½Jnq%­^ÃnCõJ ³k[ë)‘f¦¦jµ*‹ ‹+J¤©¢TqI5€ŠÂÜT‘(%ût0„¼03E˜š£ŠÁØr¥ôü'|¥L")Ô|2+Š¥bU‡ ä’œ íxÞòüÁêÔ‡»rtøfÀ-¤NhïªBq¡&wÊiá÷IÓ‰hþ’”²Z\Ÿ?Gt]íyÄÊ ÎÀámƘÈ÷E­?"kgͧì“3V‘½OëVÁaW*¬‚m¥©þ#TGú]И¦KM»qŸ×„¸ä; 9hÒ»÷¾e­ºÔë°ã°Å¾6›'M:€¹óÝ`háh‰sò—§Ï™³`Û€üˆ¹»2nüö¯ëÿqû|×‘ß £æá\’ê+UÅM1ú½e¢ÿ4\Z7¡ƒ–ø;MŸ„i ÞíÑè>©h*µt/efFÐeTˆIsšYX!ýé=(¹,­Rs-‘@¦à€R¤W¡û’àÍÿsâY·7ןtsKÈb~ÝUjë¿„¬õ£FùŸo¬U³á7§Ã“_zÎûæ¼Á»¬“é• EP©Zª—ë_›õŽ/Z»¸ðÌ‚SЇƒYP¢j­R¨+d@¥ê—`æ\¦+ç½® ó‡ßmÅÞ ¸"–×ö”ý»”Ïu­©ÿL‘×íûÒ³Oo½<5,km/®#jUí&etÖi[ïX[®càˆÙ¦ÌD®ch}5 Mrã:’' Ý¤Œ¾BǨBǨBǨBǨBǨBÇèô5Ò4¥Ryýúu®£€:Ü¿Ÿë(PUUU]Ý`ú#¦P((ƒÚªªª˜.ÝÀž§SÑ”––öæ›ovíÚ•ë@ùWWWôÑG\Ò,B¡ÐÞÞž2¨M¡Pøùù-[¶Œë@Ô¨BÇhŒ˜B8F…˜B8F…˜B8F…˜B8F…˜B8F…˜B8F…˜B8F…˜B8F…˜B8F…˜B8F…˜B8F…˜B8F…˜B8F…˜B8F…˜B8F…˜B8F…˜B8F…˜B8F…˜B8F…˜B8F…˜B8F…˜B8F…˜B8öÿŽ|›=G¾ªtIMEÜ Fé'›IEND®B`‚dnssec-tools-2.0/apps/owl-monitor/docs/install-manager-6-mod-queries.html0000664000237200023720000001047112110717521026640 0ustar hardakerhardaker Owl Monitoring System -- Manager Installation Manual -- Adding Queries


 

Owl Monitoring System

Manager Installation Manual

6. Changing Queries on Existing Owl Sensors

 6.1. Adding New Queries
 6.2. Deleting Old Queries
    

From time to time, you might decide to change the queries being performed by the Owl sensors. This could be adding new queries to some or all of the sensors, stopping some of the queries from being performed, or modifying existing queries. Regardless of the changes, there are actions that must be taken on the Owl manager and all affected Owl sensors.

6.1. Adding New Queries

Adding new queries to the Owl manager is a matter of informing Nagios that it should report on new data. This is accomplished by adding new Nagios objects for the sensor. The following actions must be performed:

  1. Wait for the query changes to take place in the Owl sensor. You will know this has happened when new sensor data files start appearing in the sensor's data directory, if you are adding queries, or fewer data files are arriving, if you are removing queries.

  2. Build new Nagios objects for the new queries' data files. This may be most simply accomplished by rerunning owl-newsensor for the affected sensor. This will rebuild all the sensor's Nagios objects, so you must take this into account if you have made manual changes to the object file. See section 4.7 and section 4.8 for more information on creating new Nagios objects.

  3. Perform the actions in section 4.10. in order to restart Nagios.

  4. With sensor query data arriving, you might want to consider modifying your graphs to display the changes in sensor data. See section 5 for information on defining graphs.

6.2. Deleting Old Queries

Deleting existing queries to the Owl manager is a matter of informing Nagios that it should stop reporting on existing data. This is accomplished by deleting Nagios objects for the sensor. The following actions must be performed:

  1. Edit the Nagios object files to delete the objects for the unwanted queries. See section 4.7 and section 4.8 for more information on Nagios objects.

  2. Perform the actions in section 4.10 in order to restart Nagios.

After performing these steps, the old data files will still exist on the manager. They can be archived or deleted as desired.



Section 5.
Defining Graphs 		Owl Monitoring System
Manager Installation Manual 		Section 7.
Owl Manager Commands

DNSSEC Tools

dnssec-tools-2.0/apps/owl-monitor/docs/install-sensor.html0000664000237200023720000001164712110717521024152 0ustar hardakerhardaker Owl Monitoring System -- Sensor Installation Manual -- Setting Up the Owl Monitoring System


 

Owl Monitoring System

Sensor Installation Manual

Setting Up Sensors for the Owl Monitoring System

The Owl Monitoring System uses timed Domain Name System (DNS) queries to monitor basic network functionality. The system consists of a manager host and a set of sensor hosts. The Owl sensors perform periodic DNS queries and report to the Owl manager the time taken for each query. Over time, this shows the responsiveness of the DNS infrastructure.

An Owl sensor is configured to send DNS queries to a set of DNS nameservers. The queries may be for a variety of DNS resource record types, and they are sent to a specific nameserver to request data about a specific target host. For example, one query might request that the D root nameserver return NS records for the "www.example.com" host, while another query might request that a local (non-root) nameserver return AAAA records for the "mail.example.com" host. Data will be collected for each configured query and given to the Owl manager to whom the sensor reports. The different sensors in the sensor set may perform different queries or the same queries.

A configuration file controls the behavior of the Owl sensor. This file defines the queries that the sensor will perform, the Owl manager (or managers) to whom the sensor reports, locations of data and log files, frequency of queries, and other important behaviors.

An Owl sensor may provide its data to more than one Owl manager. In such situations, the managers operate independently of each other and do not know of each other's existence. Throughout the installation manuals, it will be assumed that an installation will have a single manager. Special instructions for multiple-manager environments will be given where needed.

This document provides an operational overview of the Owl system, installation instructions for the Owl sensor and the third-party software that supports it. Instructions for configuring the Owl sensor are also given.

Organization of Installation Manual

Sections:
  0.   Setting Up Sensors for the Owl Monitoring System
  1.   Operational Overview of the Owl Monitoring System
  2.   Owl Sensor Installation
  3.   An Interlude on Sensor Queries
  4.   Adding Owl Sensors to an Existing Owl Installation
  5.   Adding New Queries to Existing Owl Sensors
  6.   Owl Sensor Commands
       

Full Table of Contents



Sponsors:

This work was implemented by the following companies and organizations:

Parsons

This work is funded in part by the following organizations:

U.S. Department of Homeland Security/Science & Technology (S&T)

The Owl logo is copyright © 2012 by Wayne Morrison (Wayne@WayneMorrison.com). All Rights Reserved.
This logo is used for the Owl Monitoring System by the DNSSEC-Tools Project (dnssec-tools.org) by permission.

Owl Monitoring System
Installation Manual 		Owl Monitoring System
Sensor Installation Manual 		Section 1.
Operational Overview

DNSSEC Tools

dnssec-tools-2.0/apps/owl-monitor/docs/owl-logo.jpg0000664000237200023720000004256512110717407022556 0ustar hardakerhardakerÿØÿàJFIFÿáÄExifMM*bz‚(1Š‡ižPhotosmart C4500 seriesddApple Image Capture æ EÿÛCÿþçOwl logo. Used by the DNSSEC-Tools Project (dnssec-tools.org) by permission for the Owl Monitoring System. This image is copyright 2012 by Wayne Morrison. All Rights Reserved. Wayne may be contacted at Wayne@WayneMorrison.com. ÿÀ اÿÄ ÿĵ}!1AQa"q2‘¡#B±ÁRÑð$3br‚ %&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzƒ„…†‡ˆ‰Š’“”•–—˜™š¢£¤¥¦§¨©ª²³´µ¶·¸¹ºÂÃÄÅÆÇÈÉÊÒÓÔÕÖ×ØÙÚáâãäåæçèéêñòóôõö÷øùúÿÚ?þþ(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(£üÿŸóÍWžêXd¸¹q ¼J^YŸý\h£sÉ#.áQ¨c,²mŽ5™‚‚Õñ?‹?à¦ðO/éºÞ§âÛsöXDðåÔ¶Τ|tøoâÙßÛÜ}šãO_ x_ÄZω.õiC}¯N²Ò®o­9¥¹·Š8'hþ4—þÿ‚IÿièÖ´ýö£i¬Üj6©®Z|øú4›9ôã4Ae7_ íõ;øõÈËKŸAÓ5‹kÉÙeÇg›‘¨Ÿðp'üZMJ &?ÚQ›P»š8,maýŸ¿i©®u’/7uœ_Þòõ“•x ·{ §æÑMÀú#á?ü›þ ½ñ©/‚l_‚Öw6ZÕ—‡$Ò~#øŽO‚þ ¸×5 û.ÓLÓ|7ñŽÓÀzþ¯w.£k-‹E¥i·­ Ñ‚ ü¹níVoИ.!º†+‹yRkyâŽh'‰ÖH¦Še‘:’®’#+£ƒµ••”Ù©¨¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š) 1 ª f$$“ÀrIà ü¸ý«¿nωz7Æ/ö5ý†þè¿´?í[¨ÚiÄ­_^ñÚGÁ/ÙÂ'·’_ü@ý 5O«ÝêW›_èÿô›ÅÞ)ðLz†«±®ü5ðÇÄ>ºÿ‚5üøÏuiâ_Û¿ã¿í!ûuøÂK¦¿³ø¡ñïá¿Â øÂoèþ×›ðj v×HIî4OøŠú&¹ž[ÝJïTÕµ û7Hÿ‚~þšÑ%Ó¿c_Ùr+߶.«Ïðá…ö¿gu¤ùgOÔá!¿ðÅιq«Àñ$í¬]jj“Ýo»¸»–æY% ¾ü/økð“ÂV>øWð÷Á? < ¥Í©Üiž ð…´?øONŸZÔnõ}b{øzÇNÒ-&ÕukûíSQ’ÞÎ7½ÔonïnZK›™¥~à*¨UT `é€nÞ•óGíûþË_µŽu£þÐÿ~üTûF‹'‡­|Aâ |u è³]G.ŸáˆúAÓ|à˜¥½‰nž_ø—E¸2É;‰CO)Îÿ]ð§ÁmZãÅ?ðOßÚ¿öý†u¹µá¯ÂáÏÜ|dýžõB]óÃ÷ZŸ‹¾ üGÔ|w«ÿgÏký7‹üi«éºUÎcs“+XéÉcà/Ú÷öÓýƒõk/ÿÁT¬4‰u)îSÃßðQ/ƒ¾Ÿ|5¨k~5¸Ñ¼1á¿Úgáÿ‡ü1áÈ>­áÖ|/áÍÆV……›ZÖü)᯷øÖñüeã¿þÚhšÞâMIñ‡µM;]Ð5í6ÏYÑ5ÍöÛRÑõ#R·ŠóMÕt­JÎY¬õ3R³žÍ>þÎi­/låŠæÚi`–7mJ(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¯Ëø*íñà/Ãÿ|ý–mŸÄß·/ík«]|0ý›<9ag§ê×~–êÚEñoÇjÇRÑøÿÿnñ•Ïí7û&øoÄŸ?à™wZοûVþÄúMþ¡­ø¯öb¾­yâ~ÑŸ²|Z´·Ÿcð:Þßk>,øƒð’MSFðg†5IüA«ß ‡>0þʾþñg†|yáo øßÁzö•â¯øÇ@ѼUáOè7¶úž‡â? x‡N¶Õ´=wFÔ­K]CJÕôË»[ý>úÚI-î­gŠh]Ñ®†Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢£•¶E#îDÚŒÅäm±¨PIgl¨%›#hÉÏüçþË?¥×| ûzÁ|¾$ZË©Cã†?üû|=ÖæñO…u ö4ýuÏCà6óJñLJü¬ø[Æ_¶ůZüD»ðÕlj´M2ÛZðF¥à½~ÞïÇ-Ó¥ûßþ [û+Üüý4Œß´ÏÝþØ¿µ¶ƒáÏŽÿµß¼}¥M¢|E¿ø—ã¨õ†þ"ð÷öž££x>Ïà²xÊóᶟá/Ááÿ Ù\hš†£§xkFmNm:ÛôìªAU õ$ò:I<÷ç­~xþÝðMßÿ¶Æ†Þ"¼›Qø5ûMxSMVø#ûXü3ŸPðçÅ¿„¾*Ón­õ? jcSðÞ­áGÆ~ÓõKQ×…µrÚæßIÕ|B< â?‡þ,Ôí†äß·†þøSEð~>§%®›q«]ØhV–p^kvv6V÷ºµà¸Ô¯c´·û]äí 0ù›ö¼ý„þ~Ó:u·Ž'| ñôÚÃÿ‰~ñ¿á½N×OÔ.t¯è»ß³/ÆXÿj„ÿ|ñ»À>Òþ-ü3ñ·û>~ÖuZÔ<SÃ:&±­Ááè|i£Ckãï‚?~ø×Â_~j¤ëºf¿ð÷Ç–ñ-Ì~-Ñ|a¢é_Á2íïÿbOÚãçüC\–Kßü<ðÝ÷í{ûk&[­JéÿeŠ5M Ç?ý¾¼á_ØGÃwñx ÷âf›àý ö…²ññŸâ?‰¼¥xŸÂ®§áφ³¶…ñ‡Ç÷“ÙkvÑé²øj SYÃÖZ½Í¯žÁH~|'ðßü¿á샦x*x¿gMgö‡ÿ‚_þÈ·þYÕæ[€¿íµû/ü$¿ð]÷‰n|D¾(›M¿ø}$ž¼Õ¿µuÜŨ¼÷|÷z͇ëðïŒéÎyÏõ'<óê2ih¯Å_ÚîÃKý•?à§ÿ°Ÿí‰c¬x7Á> ý¬oýŠ<©Üé:¼GÄ?Ø):×ÅŸØjðdò蚇‡uŸøoJðÄAkà_êVº¿íG‚üá/‡~𧀼 áÝÂ> ð7†´Oø/¾±ƒLÐ øãÙ ÆÚ—Â[|Aø“ðwâ'ìÝûQxKáì‡_ûgÄßÙö—øCûQ^ü>ðü>ðïŠ|Awâÿhÿ/üàÝ;MÐïfÕ¼Q­iS½…µåÅüKü øãð—ö”øKàŽüu |JøOñ#F]Á¾4ðÕËO¦jÖ^|öW¶ÒÁ2C}¤kš¯i¨x{Å>Ö-l|AáOéZdž|I¦ézþ“©é¶¾µE~`ÿÁcm~2|\ð‡ü#â/þÊž$øûjx^ÏÆ“XXiCþ×ã·ÃÚ[ÅqC­ßØj_ðßêß¾øÇÖú½¥¤·±E®\ZAâòKiü+þ ¸ÚwíKûcÁAà¢7wþ'ðüÿáý…¿e­RÑ´;ÍÛàì险|Jñ§ÁˆÚ5åì-ø=ûAün×®¼C(³šîÃþ¯…w¶ú½Ôw1iš/í þ<ŸÌò}M-øûtø\Ö?à³_ðBmCA𞵫¯„âÿ‚Ÿø‹Åþ)ÓìïçÓGŒÜÎu›]SK—Gµ¼vÚÌÚF³¥~ÁÑEQEQEQEQEQEQEQEQEQE„€ Ÿ`3“Ç=?ýUùãá?_ ><~ß ¢ü&Ðøâ_|sû6ø‹Äÿgñíô¶¶~,øÁ¢Ÿ†z ׋ü+௯€XͤxÚãFñ,é6?¡ÇôÆOÓÞ¿2>'xkÃßðO?üCý«~øf÷Oýšþ#ø‚÷âí»ð×Á:¯®?…h¶_|=§§¾x“EøÍú5áxoÆÞÐ<_àïh~,𧊴M/ÄžñG†um?^ð爼=®YC©hºîƒ®iwZn±£jú}Äú^©§\ÜØêSÃwk<¶òÇ#oWÀðVòÿà–ßðR‰ldý?lV*É'ü3¿Ä` 0!–BN”†ñ’N|Óþ£ðšãàÏüËö1ð­Æ¨ºÇü$? n¾1[ß-Ä—ì?h_x£ãæ™l·R+®§|JµÓU\‰f±ƒòâ¿R¨¦“·±98ÇSÐvãü$ømàŸˆ~ñF¯á-[Eøm«éB-7ÆV5Òt¿vý½ô¨üUñþ §à;©á¶Ó|Wÿ𞯨O#Iç+|ý•?koÚ[D†ÍB%»ð_íßûHøbîòÂ} Ä–ö:F©uûü×ÓO1^ü_ñW‡µ«y~6ü@ðž«ßìñà½FÇYÑ~5ø¯Ã’x;ô/á¯Ã/|ð?‡¾ü,ðw‡>ø–ÓZx{Â^Ò­4]KŠêòëR¾{k (¢‡í:ž©{}«j·’+Ýêz­ýî§}5Æ¡uqs7uM*­œŽXHʶ$|ˆI%H ©$Œ_žÿ ¿`ùfÏV>9ý˜þ4x‹á'ìÙ¯¿ˆ/>*~Å×^´ñwÁ µ««-R_ k_³½¼ú¾sû/OiâwXñŽt_[x—Á^?·—HУð—…-¼5¢][þ…WÉÿ·‡Ã_|gý‰kŸƒ¿´»msÇ?f¯ß |1¢]%›G®j¾7øoâO Á¡Ç&¡¬hm­æ²57Ó4ëíWV³ÒtýBêÚ÷Ui4û{˜%í¿eƒ°~Îÿ³ìåû?ÚÞÏ©[| øð‹àå¾£t¨—7Ð|0ð‡üåÊFÏÜ\¦†³N#fA+¸V ÷ªÇ×|A¡x_CÖ|MâmkJð÷†ü9¥êZïˆ|C®jšF‡ èš=¬×ú¶³­jú„Öú~—¥iV6÷º–¡{q¥½ÅÍÌÑC®Ÿƒÿ´wíI­ÁPüJÿ°§ì'Š|KðÄšî©áÛƒöÛðõ®£ |2ðÃ/kÉcãoƒ?<_¬Z®™ñâOÄý6Þ]*ßTÒt|=×¼â½÷K‡Æ øOOðGÆ޷ðß„¼7§å[K(î.¯µ-Bök­SÄ$×õ+‹ÝÅž+×oux³ÄÚŽ«âoêZž¿«êz•ßÆß´µ{ã_ø(üãඪxsÊøqáïÚ»ö×ñ~ywo>º–_~h²„ìôû( º†œÚíÿí»âZ Nò(´›Û_‡Úæ—²j+´ý¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Šü¶ý³¿i‹*ø»ðëöýŽ!x¢k»;?xSUñ‡µ›Û žîÓSð­þ»àïE÷¯Á/ƒ~ýŸ~ø àÇÃM i øuáûOè±J¶Ï©jF^çWñ'ˆ¯­íí¶¼aâÝnãQñW#Õ¥¹Õ5Kˉ}RŠ(¢€À‚‚ B;QÞ€v<ôéÉäýO5ùÕûKé_ðTOxú÷Á?³ˆd€§›K²“ãŸ.¾"|[øü4ýCNðíΫâ|%¸ð.ƒð‡Ã¾#𶯌4« øÏÄ|=ã-_ k¿ð‘xGV¼Õ´Ƽ!ÿxø;â蟿mߌÿà _ômn/éÿð¿.ºÓ|3áí+BÐu«á5캄št¶²Ãäß°§ìÇ⯂>ñÅŽãÁ:ÿíŸûIjÐüKý«þ#ø7LÔí¬u?´º“øá¨ëþ ñV·ðÃöpðn©oð‹á”r궚MÖŸ¥kž:Ò¼/àíGâˆ4Tû®Š(¢Š(£üþ](¢¿à«Þ5×>8é>ÿ‚Vüñ}¾‰ñÓöð7ÚÅ]zÊÊï_Ÿà7ìC£Ûj×ß´GÅÿhðxÇÞ·Ó>%hš%çìÕð×Gø‹uðÏFø•ã¿‰×Ú_„~"éºçƒõY,?X| ௠|6ðW„>øÚ?ƒü à øÁ~ ð‡tûm'Ãþ🅴‹= Þд«DŽÓLÑô=ÂÏLÓ4ûX㶳²¶†ÞXãUMQEQEQEQEQEQEQEQEQErÞ8ñ·…¾ø;ÅŸ|s­YøkÁ^ðƽã/øRǧhðÆ›>³¯k7î¡å[M3K´º¾¸h£‘Ä6òmF¢7äÿ쉦ø¿öüøÙ§ÁD¾.h>"ð·À?i³hðO_‚þ&³µ‚ ÿë6W]ý´üac=Ö§-çŽþ%éµÇ…~ͧ[øWÃÚÃ)5kL´ø§£ø£á¿ÆÏØ‘Çÿ^Š(¢Š)’1T%U˜åFe€fU/·>X%Êà’€2kæØóã‰ÿhO‚’üCñ–™áý'ÄzwƯڋá%ý¿…“Y‹AºOÙóöžøÁð ÃZ°_ÚqÿÂC¦ü3´×î£y.m"½Ô®cÓo/4ä´º›ê(¯Îox;ÂqÿÁZþ.xûRÑtûÿ^Á;?gŸø3ÄW6·×Z¯†|-¥þÓ´þ½ñ7DÒ/ßN:n‘§øÛXÖ~ßø‚Ê-a¯µû‡Þšm2 _ YÜËú3EQEQEQEQEQEQEQEQEQLw¹ 㜑РcÀUX‘Ø ±P.µ=Wþ óñžM K´’ø%§ìõñþx§PµÒu¿ÁF¾/ø:Q§¿„¼§êÚmî‹ã_ÙOá‹–ê]oâ¹Õüñâ‡tËo‡Óê¾"ðtþ+øcû‡qÃpÃEH‘Ej©Q¢…HãEQ@TEU@>Š(¢Š+ Äþ$Ñ<á½{ž%ÔaÒ<;áQñ½ªÜö}7FÑí%Ôu;ë‚ßȵ²¶šiDhò”B"F ¯Ïßø$V©ÙÁ8eOk:f“¢êß¼ªþÓz–¢O¬Ýiú=÷íaã~Ó7ZB\øƒÌ÷:dßZÇQ–ú8$“R·»hí­a1ÛÅú?Eùƒâ«+;ø,ÇÀN×P·TÕ¿à™_µ®Ÿ®é ¶¹ºÓü=ûTþÅWÔå”Ç»W‚ÎãÄþ4³²/‡žþWU€øžMߧ£‘ÿÖ#·¿?çE-QEQEQEQEQEQEQEQEQ_œ?¶·ÄŸŠð†t[ai¤èÐ-!Óô]*ÂÛsùpiöVð@ŒÏ$²4fY»u´QEQE~NÿÁY>!_xƒá¯Ø+Á—WIñ;þ [ñ^×öR £Ýx ©­ßYØÇ éö×z¢ë_ ~ËŸ²þ‡û6è>5½½ñV¯ñSã_Æ¿ÄÏÚ㧊lìôÿüYø6—c¡ÛÝG¤ií&™à¿‡þ ðÞ—¤xáGÃ=ItxDÒô¶¾ñˆ§ñ‹|Eõ QEQ\‡Ä/xGág€|qñ?â»iáü8ð‡‰|yãoj s%‡‡|#á ÷Ä>%×oc³Š{·´Ò4m:÷P¹KX&¹hmÝ`ŠIJ¡üÒýŒ¼!â_ÚÃãÁP~/xvo éÞ'øeð¿öø[7ŒüIâðGì«âzßÅ’þÐ>5ð̺‹ü<ðçíûX‹ ø›W> ÑTð?À­ á_à sźö½Ž!_Õ°Øú”´S¶ ¸“…\à³`ž9'TbI¯Êÿø&…ΡñÇ_ý°?o­jÓK6µ¯Çi|)û:k:Wˆ!ñ¯y4Q»"ü:µ¶»Ö.´Û¿xšÛPo‰þ>× Óü,/üAâQ~~|%ñ~§ñ Â÷?¯QEQEE$©³¹Uw@ÀÁ$œd³E\³²¢³ÈßÍ«ÁQ¾ [xÏšÿðLo‡¾)ðÇ‹ýþ xõþþÐ߶ֻâ/…þñí’Kq«ü!ø;á ¼MûJ|wÓa¶’;«}sÀ ÚO ü.ÔÆlmÿho‰¿ìµ¹,ô KWÕ4ß·¾øÁß | ࿆Ÿ|;¤øCÀ_<'áÏøšºÚh¾ð„´{=ÃÒ-W‹}/EÑ4ë/O·_’;HbŒ*¨°¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Šü‘øïiûv~×úìGsðÿMø‡û#þÏú^ƒñ‡öÌÕ|@._Á¾4ø¬šÕ¥ÿìùû6Ýh·º®‰ñ+ÆÿJ×~&|ZðÅï†"][]Ôþ΢Š(¢œ=‡æq_~ÖßðP„ÿ²ïˆüð[MÓ5¯ŸµïƨL³ßìðÙ ¸øñ?R–òâÆ-K\Ö.”ø_áGÃm%4Ïø—Æ> _éº6à‡:øåñ£ÄöžøsðóDŸZ×µ{œ=ÅÃŽßLдK"É&±âj·z†4 FmG^×oì´½>®nGÇŸ²÷Â?|{ñæûyþÕ¯<'ñlè~"Ó?e?‚¾/´¸‹Sý¾ øöÚÃûQõ{‰mli¿Œ=¦˜ÿüN¨ºç‚ü5—Á ô .ˆðøßô«üŸóÎãýh¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢³5­gIð摪ëúö§§hº‡¦ßkγ«ßZišN“¥i–³_j:ž©©_Moe§éÖpMw{}w<6¶–ÐËqs,PÆò/äÿìWðûÇŸ´íEñ›þ Yñu[ø£A±ø-ÿðøgâ};\Ò5_…ÿ²ýµ¾—©|BøѨhwWÚFgãÚãâ —ŒôáâEñ/Á |5àÿ ÝøóQÑ|[wàÿ þ¹N9$ŸÄžOÔóEQE5Ø"–;ŽpªÎǯ ª cÇ@ îx¯Ç?‰?¶÷Å¿ÛÄw?ÿà”ºß„µëK=ZËEøÉÿñˆþ4ý™~ ØÍ-»x‹@ø-=|rÖ¼/gug¡kŸ~'kuâ -GUÿ„gÃâîÛž ƒWÔ¬ü èVz…å¼ßXQEäŸþ;|#ý›þø»ãÇ/xsá§Ã?éSë>&ñg‰¯–ÖÎÎÖžHm,í&ÔõÝ{U–&Óü;áŸØêÞ"ñ.±%®‹ iz–¯yke'çïÀ¿ƒÿlÏŠ^ý³¿lφ×~ ð?‚õ7Ä¿°¿ìkñ#DÒî|Cð F]ÃIþжiöý2oÚ»Æe4ËxÝkìŸá:ÛIÒuø]^!ø™ªi«€œwäÒÑEQEQEQEQEQEQEQEQE~^~ÔzwŽÿl?¾ýŠü-§^Aû-x"O|Eý¾¼m¨xj]ǺdÌþ øû‹kÝ+Äòj·-àÐ|sûQx6âË÷vŸ²ßˆ¼#¡jšÕ¶‘ûFxj×^ýAP01‚ Žùç'êI?:Š(¤'ž¸œuàgÜûWÍß´wí_ð[ö[Ð4Gâˆ/'ñGŒN¡eð³á‚t›ßüpøÙâ==´Ø¦ðÁ¯„žŽûƵاÖt…ÕÛEÒäÑ|#§ê âOêþ𥮣®Ù|â/Ùö¡ÿ‚†Ë7í§â/~Ì¿²=î±âm#öøEâÛKo‰|+mªi:n‰û`üðv«~bÓ¼_¡Xx¾çTýŸ¾j¶^ÒthÞ$øâ/øÛP‡õ/áÇÃO‡ÿ| ü:ø_àß øÀž·š×Ãþðž‘e¢h:L77w:…Ù³Óì ‚ç¿Ô¯¯õMNì«]ꚶ¡¨jºŒ÷:…ýÝÌÝÍRŽß–==ÿô¸åÚ·öÃø+ûø*ÃÅu­NïÄ^*¾AøSð‹Àšt>,ø×ñÏÆ÷úV—¤ü9ø9ðæ+Û=SÆ^-ñ·®h^³Hå±Ñt½C^Ó&ñ&¹ i× ¨¾~Ë¿¿hÿ|$ý¨ÿooøzÃÆ¿ 5ñÿÀ?ÙÂÞ#›Å f]Cuã?ˆ¾$µ’ö…ý¥¼7¥O1xóû:Ûáo ÇÁ] R×|;§|mñGér.ÑŒ‚ryÚå,Háp¤ñ’7`gú(¢Š(¢Š(¢Š(¢Š(£üÿ?ðÿ<Ñø/ñ¢Š?ÏçEù1âÏø*ûxWÇ<ðLðMoø+ŠWÀÞ5ñwƒ"ñ‡„¿d5_øÙ<'â­cÂëãk2üI³¸ÖüâˆôøJ<%­ÜéÚmÖ¯áMOGÕL³ŸPŠÀcÜÁLÿhëˆ.5]þ 1ûsÝèË4ÒO¯Y|<ð߈šÞ(ælÛøCþMWX¼¸p›[´É$’‰,ZöÛdòü÷ñþ ûûqü<ԚϟðDÿÚãÆÐÁo$÷w2ëÞ'–0%°ÓþÁ'Â/€¿4ý^kˆ®îí¬µ7»ÓÚ1‹k˜êêÓ‡ð×üöÊkŸ'ÇðC?ÛëEƒH&ðG„>0øÙÌO4É'Éâ/٫ᵸš8£I¼Vo0 Mº#K_V[Á_uY|;£x‚oø%‡üÑWÞœ²¤·ÖrG%Ê´wú5ÏÄ‹i›–Êé ›YðÞ—m3-°¬Z¦‘5þˆ¿à±~1H&²ð7üsþ ¿¯xœ^›k~Ëà 4‘Ï ¼ÓÞø·MñGÅš5ÂOâè×p]ÙÇ=Õ‹\Ãçñý'þ WûQÜkº~³ÿRÿ‚†XYÛ´­mw¦xÆÚ­ÅŲ_EoÒE}ð£AÒcymeûRÅi®ß¨‘e·Yž;MBîËè3ÿ9ý¦µÛí*çÀ?ðH¿ÛŸSðž¡oSêŸSá§Âo[ë mÍí¢x7Ä~&¼º]*1qo†·«êz긚ÆÒK ¥õ á'|Uñ á÷†ü]ão…¾)ø-â}nÞö}KáŸuk¾'ðзÕoìlN§©xÄ~+ð´ÃXÓ­m5ë(ìµ¹ï,ì5KkvÏG×­µ-"ËÃ?moÚWXý™þ I­xÁwþ=üJñð‹öhøA§[Ásyñ?㟋ìõI¼-¢^ÝwÂzF™áiºF¹ñâ/ˆ5ïø?EÐ>øCÅZ­ï‰´†µ†sÓþʳ‡ìÏðª?Mâ)|}ñÅž!Ö>'|sø¹¨èúF‹â/Œÿ¼f-n­mñGã/üÛá%¹ãF¼øIð/öø˨º,É8šóþÇ„¶V³H¿è“ìuke‡{E šæ9tÍχ²7í“g¡ÞÚügÿ‚¦üñ¶½r÷k£ð£ö{ý‹þhöÖwSêDZÿcx“àÆQ¥µ´¸ÒáµÔ ñE­ô7zl÷«>ÍI¬í}‹à?ìCû9þÎÞ$½øá^x¯ãn¹¢Yh~/ý¡¾-xZø±ñ÷ÆVÖöZu•Úküy«øƒMÓ5‰4Û]KQð„¥ð×#Ô#GÒ|+¦[Áiiï‰ÿmØÛÁ­ö…ã?ÚËöhð†³¥ë:¯‡5=+Äÿ¾è:Ž›â- TºÐõ­P±Õ1ü:ð¶­oykp–—V³éºçˆìoa¸µ»u¶¹†HKyˆI•”4šoí_û-ë1ùÚ?í'ð V‹¼Ý3ãÃËøÂbö¾"•Bí!‹gH9ÁðwðPØBÂòm:ûöÖý’lµ wòî,nÿiƒ–÷pÈ…¢–Úo,©2ùRn‰”:„f8ã2÷þ 3ÿþÓá–âçößý’<¸bYm¿h¿„7—S´a;KOÍw6á*¶Ø`‘‚üØÁRÞ/áø,/üëâÔÖ~/øïâ$Ðj/¤I'ÿÙö­ñå“jK,íõ üÕì.¥ºµ yaö{‰¡c-½í‰¸´¸‚i5+ðí½×š-ü[áÝzþÊöÆ#¨‹KdqòÿÁcÿnï joe?üçöþ´M;K¿{í'[ñWˆ@þÒÓšù­Áð—ÀéÏ=¬ÑOksz«ÝÚ:Dš®{uoa'ðÇþ Ïûd|LÔ5ÚÿÁlïø“NÑg×eOÞ§Ãï Mimuao-­§Ž¾(xÀZþ´Ë¨Á%¦§›½oQòï[N°º·Òµ‹7ÒGí×ÿ8Õôå¾ð¿ü‹Ç so%ÍŒ>.ý¶?gß6È%Hæ”úEö¥¦I²Xä‚ìË›«°eû<%!–et?¶ü’FDðEЩ&XH¿ðQoÙ½ŒhY„m)òJªI·žáŒeZ(ÙJ“ÿ¶Ïür/%#ÿ‚0\I<×—–‘)ÿ‚‚üHÐÚÄY§žèøím­]·ˆ.®¤ŠÒe-fžW†9.AûkÁT,VæëÄ¿ðF]NÛK³Žie›Âß·ßìïâíZH-H2½¯‡ÓÃÚ]íìòÆOÙl즺»žeͨ‘:#mÔtøÆ­¥´+ óážùç@I¢’8ëIÿ&ÿ‚øcY‚×â/üKã.™ Üin‡RøcûJxã6«Ëý™íì®´o |8Ó´û2Ö¿ok„“Ä#P³¸‚ÒÎ],K|Ík‰ÿ௟tØ ‡Ã_ðGÿø(Æ»­-Õž™¨Yêÿ o4 "-NêÝŽ¯i:W‹âÔôH.|è_Ä ge`–ð=ÝѶ-qšçü3þ i¢ê76-ÿ7øÓxЧÚ¶´…®§lÖL bæ÷Dø ¬éñæm>×P¼¹ ·ETÅkpñîOÿ)ÿ‚¥éúv¨ÝÁ~#˜ï•æ’-7ö»ð>©w ’FytÛƒ“jvÓ; Qk©XØ^9sû•˜Å þ@ŸðY¯ø(l-qo?ü›ö²’X¯/â/Šüzm¶¤†x7L¿³EÜgÍ™s²C9ŒÍiw–ÂÏ«ðïüWöؼš8üMÿAý¶ôU¸´Y!m?ëíöµyZHf]Kà…¢‚ÔZ¬r¥Ó\šâ_²=Œl¢Wþ„¨¢ŠLAùQµwnÀÜÇ88ÈÏà)h¦¶@ù@'#‚HGRãŽ;à üÄø£ûW~ÛjMFá¯~þÌV¹û.þÉ–âÆÂïþ<øâü/â?Ú³ö“Ðõ-KÁ6¡—©Ùx_ö`øgâïøõô¸ÿáý¦ôMgK¿‹Äöw6ÿ§ƒ­§üëþ ›ca&›oû|#{yü/¬µ­RñPGŽybÔµ=fïQ‚x„›¬f†î9tÉ#†m1¬æ¶¶’ë_ø%üŠÆöÿQ´ýŒ?gïµê3YÏp·ž°Ôl¬+n–šUóϧiÐ:[Æ—–Úm½¶ ›Òþ‘#î݃þ ƒÿ𶸖å?bÏÙªIeµ‡í?|u D'k…0[\érÛZβ¹Qug½ßÙ–+/“áµ—†tß]þÈ¿õ[ëÝé·Ú-·Ž5¿èº×Åä»Ò$šÂm||NÔ|`Þ, "ÜÅâ¦ÖaÔ!†þ;¨Óô’Š(¯ø÷ûHü ý—ü?Ä_¼)ðˈ×ÖÚ}ψoØêþ(Ölt]WÄžð®Ÿ÷Šþ"øæûHÑ5k½À>Ñ|Gãoý‚â ÃúÌfù—Kñ—í·ûLÇa}àŸ ZþÃõXôû¸|YñkBѾ"þØ^)ЯWÁú“Oáÿ‚ëyyðötÔî´ÛÏÚiz¯Æg㯊t]BÛKOˆ³‡‡u(µ?ÃÓ| ÿ‚y~Íß üc£|Z×ô~П´§éú|_´wí=â½GãwÆ8Æ™«kºå•Ç†õOð§ÂÑmªx“VšÛIø/á†Þ²·šÚÒÒÖ(~âNÜcý?¥-QEQEQEQEQERŸÌÈ‘úã4´QEQEQEQEQLxÒU)"«©Á!†FAÈ#Ñ”€U†  €kò÷_ðÿÆ_ØOã_‹~$|2ð—ıgíñ-ücñoà¿4ÅñWÅOØÿãÄ gí~<üðNŸñÅ?Ùûâߊõ+¯ˆ_´Áï Á®|WðÅ­kÅß>ø{â]—Åx;Àÿ{|!øÑðŸãï‚l>$|ø‹àߊÔ®.¬í|Qàoiž$Ò£§¸‡SÑ®îtÉçn½£Ýn³×xP¬zëYü+ø¥¤ÚÃ¥î¿a?1~ξ3ñt> y?á¼ñ¬Ÿ|káMâ©¢YÍ&‹e¨üDðÿŠîÓËiáÃ)Ñ4í:ÆÓǬ?à›—¶zuÞ…7üþ Q¨xzâ »ht»¿ÚOEŽž³ÞC¨ZÍiãËO†v¿$»Ó®Òsoq¨xâøÜÙÞM¤ê‰¨hðiº~ŸÞüÿ‚qþÍ? ;ý£>'xyou»vëQðtÿõWÂ? õ‹›©Ò ½KáO„| q{§ÚZXߨ!e¼¨¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¯ÿÙdnssec-tools-2.0/apps/owl-monitor/docs/install-manager-7-commands.html0000664000237200023720000001312312110717521026205 0ustar hardakerhardaker Owl Monitoring System -- Manager Installation Manual -- Owl Commands


 

Owl Monitoring System

Manager Installation Manual

7. Owl Manager Commands

The Owl manager has a number of Owl-specific commands required for its operation. This section provides a brief overview of the commands available to it. These are all Perl scripts and have self-contained man pages, which contain greater details about their use. These scripts are intended to run as an unprivileged user.

This section briefly describes the software used on the Owl manager.

  • owl-archdata
    This script archives Owl sensor data for all the defined sensors. Old data are moved from the Owl data directory to an archive directory. owl-archdata runs the owl-dataarch-mgr script for each sensor.
    This script is assumed to live in the Owl user's home or bin directory.

  • owl-archold
    This script archives previously archived Owl sensor data into monthly archives. A compressed tar file is created that contains the archived data files from a particular month. It should only be run on a particular month's archive after the month has been completed. This script is exactly the same as the owl-archold on the Owl sensor hosts. owl-archold is executed by owl-monthly, but may be used on its own.
    This script is assumed to live in the Owl user's home or bin directory.

  • owl-dataarch-mgr
    This script archives Owl sensor data for a single sensor. Old data are moved from the Owl data directory to an archive directory. owl-dataarch-mgr is executed by owl-archdata, but may be used on its own.
    This script is assumed to live in the Owl user's home or bin directory.

  • owl-dnswatch
    This script retrieves Owl sensor DNS response data and makes it available to the Nagios monitoring system.
    This script should live in the Nagios libexec directory of plugins.

  • owl-initsensor
    This script creates the required directories and heartbeat file when adding a new Owl sensor.
    This script is assumed to live in the Owl user's home or bin directory.

  • owl-monthly
    This script archives previously archived Owl sensor data for all the sensors defined for an Owl manager. Compressed tar files are created that contain the archived data files from a particular months, one tar file for each sensor. owl-monthly executes owl-archold to perform the actually archiving.
    This script is assumed to live in the Owl user's home or bin directory.

  • owl-newsensor
    This script creates required Nagios objects for a new Owl sensor. The objects to be created are based on the data files from the new sensor that have arrived on the Owl manager.
    This script is assumed to live in the Owl user's home or bin directory.

  • owl-perfdata
    This script is translates Owl sensor data from the format provided to Nagios into the format required by the graphing and database software.
    This script should live in the Nagios libexec directory of plugins.

  • owl-sensor-heartbeat.cgi
    This script records a "heartbeat" for Owl sensors. When a sensor runs this script (by way of the Owl manager's web server), the time of the execution will be recorded for that sensor.
    This script should live in the cgi-bin directory for either the web server or for Nagios.

  • owl-stethoscope
    This script gathers Owl sensor "heartbeat" data and makes it available to the Nagios monitoring system.
    This script should live in the Nagios libexec directory of plugins.

  • owl-transfer-mgr
    This script periodically transfers Owl sensor data from the sensor host to the manager host.
    This script is assumed to live in the Owl user's home or bin directory.



Section 6.
Changing Queries on
Existing Owl Sensors 		Owl Monitoring System
Manager Installation Manual 		 

DNSSEC Tools

dnssec-tools-2.0/apps/owl-monitor/docs/install-manager-full-toc.html0000664000237200023720000002222512110717521025770 0ustar hardakerhardaker Owl Monitoring System -- Manager Installation Manual -- Table of Contents


 

Owl Monitoring System

Manager Installation Manual

Table of Contents

 0. Setting Up the Owl Monitoring System
    
 1. Operational Overview of the Owl Monitoring System
 1.1. Owl Sensor Overview
 1.2. Owl Manager Overview
 1.3. Data Retention on Owl Hosts
    
 2. Owl Manager Installation
 2.1. Manager Installation
 2.1.1. Preparatory Steps
 2.1.2. Installing Third-Party Software
 2.1.2.1. Nagios Core and Plugins
 2.1.2.2. nagiosgraph
 2.1.2.3. rrdtool
 2.1.2.4. drraw.cgi
 2.1.2.5. Perl modules
 2.1.3. Installing the Owl Monitor Software
 2.1.3.1. Unpacking the Owl Monitor Software
 2.1.3.2. owl-dnswatch
 2.1.3.3. owl-perfdata
 2.1.3.4. owl-newsensor
 2.1.3.5. owl-transfer-mgr
 2.1.3.6. Data-Archiving Programs
 2.2. Modifying Configuration Files
 2.2.1. Save Files!
 2.2.2. nagios.cfg (Nagios)
 2.2.3. cgi.cfg (Nagios)
 2.2.4. resource.cfg (Nagios)
 2.2.5. share/config.inc.php (Nagios)
 2.2.6. nagiosgraph.conf (nagiosgraph)
 2.2.7. map (nagiosgraph)
 2.2.8. htpasswd.users (Apache)
    
 3. An Interlude on Sensor Queries
 3. An Interlude on Sensor Queries
 3.1. Gathering and Storing Sensor Data
 3.2. Transferring Sensor Data
 3.3. Sensor Heartbeats
    
 4. Adding Owl Sensors to an Existing Owl Installation
 4.1. Create Directories and Files for Sensor's Data
 4.2. Firewall Configuration
 4.3. SSH Set-up
 4.4. Configuration Settings
 4.4.1. Provide Configuration Information to Sensor Administrator
 4.4.2. Receive Configuration Information from Sensor Administrator
 4.5. Test Transfer from Sensor
 4.6. Wait for Sensor Data
 4.7. Build Nagios Sensor Objects
 4.8. Nagios Modifications
 4.8.1. nagios.cfg
 4.8.2. owl-hostgroups.cfg
 4.9. Graphing Modifications
 4.10. Restart Nagios
    
 5. Defining Graphs
 5.1. Graphing with nagiosgraph
 5.2. Graphing with drraw.cgi
 5.3. Adding Graphs to the Nagios Sidebar
    
 6. Changing Queries on Existing Owl Sensors
 6.1 Adding New Queries
 6.2 Deleting Old Queries
    
 7. Owl Manager Commands
    
  



DNSSEC Tools

dnssec-tools-2.0/apps/owl-monitor/docs/install-sensor-5-adding-queries.html0000664000237200023720000000466212110717521027212 0ustar hardakerhardaker Owl Monitoring System -- Sensor Installation Manual -- Adding Queries


 

Owl Monitoring System

Sensor Installation Manual

5. Adding New Queries to Existing Owl Sensors

From time to time, you might decide to change the queries being performed by the Owl sensors. This could be adding new queries to some or all of the sensors, stopping some of the queries from being performed, or modifying existing queries. Regardless of the changes, there are actions that must be taken on the Owl manager and all affected Owl sensors.

It is relatively painless to modify queries for a sensor. The following actions must be performed:

  1. The query entries in the Owl configuration file must be changed to reflect the new set of queries that should be performed. Add new query entries to add new queries; delete or change existing query entries to remove or modify current queries. See section 4.4 for information about query entries.

  2. Restart owl-dnstimer.

If you have correctly set up your configuration file, then owl-dnstimer will start collecting data for the new queries.

Stopping collection of certain queries only requires deleting (or commenting out) the appropriate entries from the configuration file. owl-dnstimer, of course, must be restarted.



Section 4.
Adding Sensors 		Owl Monitoring System
Sensor Installation Manual 		Section 6.
Owl Sensor Commands

DNSSEC Tools

dnssec-tools-2.0/apps/owl-monitor/docs/install-sensor-full-toc.html0000664000237200023720000001113512110717521025665 0ustar hardakerhardaker Owl Monitoring System -- Sensor Installation Manual -- Table of Contents


 

Owl Monitoring System

Sensor Installation Manual

Table of Contents

 0. Setting Up Sensors for the Owl Monitoring System
    
 1. Operational Overview of the Owl Monitoring System
 1.1. Owl Sensor Overview
 1.2. Owl Manager Overview
 1.3. Data Retention on Owl Hosts
    
 2. Owl Sensor Installation
 2.1. Create an Owl Sensor Account
 2.2. SSH Initialization
 2.3. Install the Owl Environment
 2.4. Install Required Perl Modules
    
 3. An Interlude on Sensor Queries
 3.1. Gathering and Storing Sensor Data
 3.2. Transferring Sensor Data
 3.3. Sensor Heartbeats
    
 4. Adding Sensors
 4.1. Firewall Configuration
 4.2. SSH Set-up
 4.3. Get Configuration Data from Manager
 4.4. Set Up the Owl Configuration File
 4.5. Test Transfer to Manager
 4.6. Add Start-up Entries
 4.7. Add cron Entries
 4.8. Start Owl Daemons
    
 5. Adding New Queries to Existing Owl Sensors
    
 6. Owl Sensor Commands
    
  



DNSSEC Tools

dnssec-tools-2.0/apps/owl-monitor/docs/install-manager-4-adding-sensor.html0000664000237200023720000004613612110717521027150 0ustar hardakerhardaker Owl Monitoring System -- Manager Installation Manual -- Adding Sensors


 

Owl Monitoring System

Manager Installation Manual

4. Adding Owl Sensors to an Existing Owl Installation

 4.1. Create Directories and Files for Sensor's Data
 4.2. Firewall Configuration
 4.3. SSH Set-up
 4.4. Configuration Settings
 4.4.1. Provide Configuration Information to Sensor Administrator
 4.4.2. Receive Configuration Information from Sensor Administrator
 4.5. Test Transfer from Sensor
 4.6. Wait for Sensor Data
 4.7. Build Nagios Sensor Objects
 4.8. Nagios Modifications
 4.8.1. nagios.cfg
 4.8.2. owl-hostgroups.cfg
 4.9. Graphing Modifications
 4.10. Restart Nagios
    

Whenever a new Owl sensor is added to those handled by an Owl manager, there are a number of actions that must take place on both the sensor and the manager. These actions should be followed consecutively within each section. However, there is some amount of necessary interleaving of actions. For example, a particular sensor action may be required before a particular manager action.

It is acceptable for the Owl sensor and Owl manager to be under completely different administrative control. Each host may even be owned by different commercial, educational, governmental, or other such entity. All that is required is that there be some initial coordination between administrators when the sensor is first configured, along with (probably) aperiodic support from time to time later.

The discussions on adding Owl sensors assumes that the sensor and manager are under different administrative control. Required actions will not change if they are under unified administrative control, but they may be easier to accomplish.

This section describes the various actions that must be performed on the Owl manager in order to configure a new sensor for it. This assumes the installation and configuration procedures detailed in section 2 have been completed.

4.1. Create Directories and Files for Sensor's Data

A set of directories and files must be created for a new sensor. These are the sensor directory, the sensor's data directory, the history directory, the data archive directory. The heartbeat file, if the sensor will be providing heartbeats, must also be created.

These files are best created by the owl-initsensor command, but they may also be created manually. If they are created manually, you must use the names and organization as given in the examples below. The locations of the directories may change (i.e., the /owl/data and /owl/archive portions), but that's it.

For example, when adding the new sensors helsinki and canberra, you might create the following sets of directories:

sensor directory
data directory
heartbeat file
history directory
archive directory
  /owl/data/helsinki/
/owl/data/helsinki/data/
/owl/data/helsinki/heartbeat
/owl/data/helsinki/history/
/owl/archive/helsinki/
  /owl/data/canberra/
/owl/data/canberra/data/
/owl/data/canberra/heartbeat
/owl/data/canberra/history/
/owl/archive/canberra/

The archive directory must be writable by the manager's Owl user, but the others must be writable by the manager's Owl user and the manager's web server.

4.2. Firewall Configuration

The Owl manager and the Owl sensor communicate by way of SSH and HTTP. If the Owl manager is protected by a firewall (either on the manager host itself or by an enterprise-level firewall) then the firewall must be configured to allow data to be transferred between the manager and the sensor. The direction of this transfer (initiated by sensor or initiated by manager) depends on the Owl configuration. These firewall modifications are far beyond the scope of this document.

4.3. SSH Set-up

First, you must generate a new SSH key for the manager's Owl user.

If the manager will be pulling data from the sensor, then the you must provide the sensor administrator with your Owl user's public key. This key will allow owl-transfer-mgr to retrieve Owl sensor data. You must generate your key in compliance with particular key requirements (e.g., length and type) specified by the sensor administrator.

If the sensor will be transferring data to the manager, then the sensor administrator must provide you with the public key of their Owl sensor user. This key will allow owl-transfer to pass Owl sensor data to the your manager. You must add this key to your .ssh/authorized_keys file. The key must be generated with key characteristics (e.g., length and type) that are acceptable to you. See the example below.

The authorized_keys file restricts access to known sensor hosts and controls where each Owl sensor's data are stored. This file should only have one entry per sensor, and each sensor should have a unique data directory.

Example entries (with abbreviated keys): 

    command="/usr/local/bin/rrsync /owl/data/sensor1" ssh-rsa AAAA...Qw== sensor@sensor1.example.com
    command="/usr/local/bin/rrsync /owl/data/sensor8" ssh-rsa AAAA...gM== sensor@sensor8.example.au
The parts of the line from "ssh-rsa " to the end of the line are the public SSH key provided by the sensor's administrator. You will add everything before the "ssh-rsa ", using the proper paths for rrsync and the sensor's data directory.

4.4. Configuration Settings

With Owl's capability of having either the sensor or the manager transfer sensor data to the manager, there are configuration settings that must be made to allow the transfer. These are described in the subsections below. Regardless of how your Owl installation handles data transfer, you should read both subsections to ensure you are making all the required settings.

It would be a good idea for you and the sensor administrator to agree on a name for the sensor. This isn't required, but it will probably make things easier for you both in the long run to refer to the sensor by the same name.

The sensor name can be very generic, such as sensor42, sensor-d, or owl-us-east. It can also be very specific, such as washdc-1600-penn-ave-nw or cheltenham-bldg4. The intent is to provide distinguishing information to the intended audience of the DNS monitoring data. You should use names that easily distinguish sensors and are acceptable to the manager and sensor administrators.

4.4.1. Provide Configuration Information to Sensor Administrator

If the Owl sensor will be transferring data to the manager, then you must provide the sensor administrator with an SSH user. All Owl sensors may use this single SSH user, and the data will be distinguished by the SSH key used to connect from the sensor.

The sensor will use the heartbeat URL to provide a heartbeat to the manager. If this is to be used, it must be set on the sensor regardless of who initiates sensor data transfer.

The data values will be added to the sensor's configuration file.

The following example data will allow the sensor to work with the Owl manager as expected. These data are used, in conjunction with the remote keyword, in the sensor's configuration file.

Configuration Field   Purpose   Example
ssh-user   user on Owl manager with which owl-transfer will connect via ssh   sensor-ottawa@owl-manager.example.com
heartbeat   URL to provide "heartbeat" data to manager   http://owl.example.com/cgi-bin/owl-sensor-heartbeat.cgi

4.4.2. Receive Configuration Information from Sensor Administrator

If the Owl manager will be pulling data from the sensor, then the sensor administrator must provide you with an SSH user. The owl-transfer-mgr program will use this SSH user to copy data from the sensor.

The following data will allow the manager to connect to the Owl sensor as expected. These data are used, in conjunction with the remote keyword, in the sensor's configuration file.

Configuration Field   Purpose   Example
ssh-user   user on Owl sensor with which owl-transfer-mgr will connect via ssh   sensor-meatcove@owl-sensor.example.com

4.5. Test Transfer from Sensor

At this point, you are ready to test your Owl manager. When the sensor administrator reaches section 4.5 in their installation instructions, both sensor and manager are ready to test the data transfer.

Coordinate with the sensor administrator to test data transfer. The sensor administrator must put a data file (of any sort, it doesn't have to be an Owl data file) in their data directory. If the manager will be transferring data, you must run owl-transfer-mgr to attempt to retrieve the test file. If the sensor will be transferring data, the sensor administrator must run owl-transfer to attempt to retrieve the test file. After the transfer command appears to have transferred the file without error, you must check that sensor's data directory on the manager to ensure the file has arrived as expected.

Once the test file successfully appears in the new sensor's data directory, the sensor is ready to start collecting data and transferring it to the manager. You must inform the sensor administrator of this, so they can start the Owl sensor daemons.

4.6. Wait for Sensor Data

The sensor should now be in the process of collecting DNS response data. Whichever host will be transferring data must have the appropriate transfer daemon executing. You must now wait for sensor data to show up in the sensor's data directory. The time this takes will depend on how frequently the data is transferred to the manager. This is set in the configuration file.

You will know when the sensor is transferring data because the new sensor's data directory will start holding files whose names reflect the queries you are expecting. You may proceed when you have found files for all the queries the sensor will be performing.

4.7. Build Nagios Sensor Objects

Once all the sensor's data directory contains files for all the queries expected from the new sensor, Nagios objects must be built for those queries. This may be done automatically using the owl-newsensor command. A file containing these Nagios objects must be created, and it will be added to the Nagios environment in section 4.8.1.

owl-newsensor can be used like this to create the Nagios objects: 

    $ owl-newsensor -out sensor8.cfg /owl/data/sensor8/data

Passing owl-newsensor the -heartbeat option will cause an object to be created that will allow Nagios to display heartbeat information about the new sensor.

4.8. Nagios Modifications

Several Nagios configuration files must be modified to account for the new sensor. These changes will allow Nagios to start reporting current status of the new sensor as well as saving historical data to be used in graphing.

4.8.1. nagios.cfg

The following modifications must be made to the nagios.cfg file to prepare Nagios for monitoring Owl sensor data.

  • Add the following entries to nagios.cfg: 
        cfg_file=/owl/nagios/etc/objects/owl-contacts.cfg
    cfg_file=/owl/nagios/etc/objects/owl-hosts.cfg
    cfg_file=/owl/nagios/etc/objects/owl-commands.cfg
    cfg_file=/owl/nagios/etc/objects/owl-services.cfg
    These files contain basic Nagios object definitions used by the Owl sensor objects. They should follow all the other standard cfg_file lines.

  • Once Nagios object configuration files have been created for your sensors (as described in section 4.7), nagios.cfg must be modified to include the new files. Add a new cfg_file entry for each of the sensor object files. These entries will look something like this: 
        cfg_file=/owl/nagios/etc/objects/owl-sensor21.cfg
    cfg_file=/owl/nagios/etc/objects/sensor-london.cfg
    The sensor lines should follow all four of the cfg_file lines listed in the previous point.

  • Add the following line after the sensor cfg_file lines described in the previous point. 
        cfg_file=/owl/etc/objects/owl-hostgroups.cfg
    Modification of the owl-hostgroups.cfg file is described below.

  • Find the service_perfdata_command line and change it to: "service_perfdata_command=service-perfdata-for-owl"

  • Find the service_perfdata_file_processing_command line and change it to: "service_perfdata_file_processing_command=service-perfdata-for-owl"

Examples for the cfg_file modifications may be found in nagios.cfg-owl.mods in the Owl manager distribution.

4.8.2. owl-hostgroups.cfg

This file contains the "DNS Response Time Sensors" Nagios hostgroup object that lists the Owl sensor hosts. All your Owl sensors should be listed in the "DNS Response Time Sensors" object.

  • Add the new sensor name to the members field in the "DNS Response Time Sensors" object. The names must be separated by commas.

You may add your own hostgroup objects to this file. Use the "DNS Response Time Sensors" object as a guide to create custom groups. This can be used, for example, to group all the sensors in a geographical region or those that are running a particular operating system. The hostgroup object allows you to group a set of hosts in a manner that makes sense for your purposes.

4.9. Graphing Modifications

The new sensor's data must be made available to the drraw.cgi script. To do this, the new sensor's data sources must be added to the %datadirs hash in the drraw.conf file. See 2.1.2.4.

 drraw.cgi for more details.

4.10. Restart Nagios

Nagios must be restarted in order for it to see your new sensor's objects.

Prior to the restart, verify that your object modifications won't cause a problem for Nagios. Execute this command (assuming you are in the directory containing the Nagios files): 

    $ nagios -v nagios.cfg
It will read the configuration files and ensure they all look okay. If there are problems, they must be resolved before Nagios is started.

Once the Nagios configuration file is validated and without problems, Nagios may be restarted: 

    $ nagios stop
    $ nagios start

It will probably take several minutes for Nagios to check all its services. Clicking on the "Services" link in the left-hand sidebar will bring up the configured services and you can watch the status of your new sensor.



Section 3.
An Interlude on
Sensor Queries 		Owl Monitoring System
Manager Installation Manual 		Section 5.
Defining Graphs

DNSSEC Tools

dnssec-tools-2.0/apps/owl-monitor/docs/install-sensor-6-commands.html0000664000237200023720000001125312110717521026105 0ustar hardakerhardaker Owl Monitoring System -- Sensor Installation Manual -- Owl Commands


 

Owl Monitoring System

Sensor Installation Manual

6. Owl Sensor Commands

The Owl sensor has a number of Owl-specific commands required for its operation. This section provides a brief overview of the available commands. These are all Perl scripts and have self-contained man pages, which contain greater details about their use. These scripts are intended to run as an unprivileged user.

This section briefly describes the software used on the Owl sensor hosts.

  • owl-archold
    This script archives previously archived Owl sensor data into monthly archives. A compressed tar file is created that contains the archived data files from a particular month. It should only be run on a particular month's archive after the month has been completed. This script is exactly the same as the owl-archold on the Owl manager host.
    This script is assumed to live in the Owl user's home or bin directory.

  • owl-dataarch
    This script moves data from the Owl sensor's active data directory to a year/month-specific archive directory. This script archives Owl sensor data by moving old data from the Owl data directory to an archive directory.
    This script is assumed to live in the Owl user's home or bin directory.

  • owl-dnstimer
    This script is the primary part of the Owl sensor. It sends periodic DNS requests to the root nameservers and records the time each request takes. These query records are provided to the Owl manager for aggregation and display.
    This script is assumed to live in the Owl user's home or bin directory.

  • owl-heartbeat
    This script periodically contacts the Owl manager to let it know the sensor is still alive. owl-heartbeat is an optional service for the benefit of the Owl manager's administrators; the Owl sensor will run just fine if a sensor's administrator elects not to run it. This is intended to be a cron job that runs once a minute, but other time periods may be chosen.
    This script is assumed to live in the Owl user's home or bin directory.

  • owl-sensord
    This script executes the owl-dnstimer and owl-transfer daemons and monitors their execution. If either of the daemons exits unexpectedly, then owl-sensord will restart it. In order to keep configuration or other problems from causing rapid re-executions, owl-sensord will temporarily suspend execution of one of the daemons if a certain number of execution attempts fail within a short period of time.
    This script is assumed to live in the Owl user's home or bin directory.

  • owl-status
    This script gives the user a simple view of the status of the three primary Owl sensor components. It reports whether or not owl-dnstimer, owl-sensord, and owl-transfer are running. An additional option shows the query parameters used by owl-dnstimer and the time that each root nameserver was last queried.
    This script is assumed to live in the Owl user's home or bin directory.

  • owl-transfer
    This script periodically transfers Owl sensor data from the sensor host to the manager host.
    This script is assumed to live in the Owl user's home or bin directory.



Section 5.
Adding New Queries to
Existing Owl Sensors 		Owl Monitoring System
Sensor Installation Manual 		 

DNSSEC Tools

dnssec-tools-2.0/apps/owl-monitor/docs/install-manager-3-about-queries.html0000664000237200023720000001667712110717521027206 0ustar hardakerhardaker Owl Monitoring System -- Manager Installation Manual -- Sensor Queries


 

Owl Monitoring System

Manager Installation Manual

3. An Interlude on Sensor Queries

 3.1. Gathering and Storing Sensor Data
 3.2. Transferring Sensor Data
 3.3. Sensor Heartbeats
    

Before running your Owl Monitoring System, you must consider a number of questions. How many Owl sensors will be providing data to the Owl manager? How many queries will the sensors be performing? What queries will the sensors be performing? Will each sensor be performing the same queries? Will the sensor be providing "heartbeat" information to the manager? Who will transfer the sensor data to the manager? These questions are important for the sensor administrator, but they are critical for the manager administrator.

3.1. Gathering and Storing Sensor Data

A query consists of three parts: a nameserver, a target host, and a query type. Responses to each query will be kept in their own datafile. The amount of data generated by each sensor will depend on the number of queries and the frequency with which the queries are performed.

The sensors will have to gather the data and more queries will result in more data that will be collected. The data will all have to be transferred from the sensor to the manager. If the manager is configured for graphing, then data from each query will be stored in its own database. These databases can be quite large, so the manager host must have a good amount of available disk space.

The administrators of an Owl sensor and the Owl manager (if they are different people) must coordinate the queries that the sensor will be performing. The manager's administrator can request that a set of queries be performed, but it is up to the sensor's administrator to actually configure the sensor for the queries. The manager is effectively at the mercy of the sensor.

Sensor data filenames contain metadata about the sensor data contained therein. Therefore, the filenames will reflect the queries that generated the files. The fields are separated by commas and have this format: 

        121129.1701,seattle-sensor,example.com,a.root-servers.net,A.dns
        121129.1701,seattle-sensor,example.com,m.root-servers.net,A.dns
        121129.1701,seattle-sensor,example.com,m.root-servers.net,NS.dns
        121129.1701,portland-sensor,example.com,a.root-servers.net,A.dns

Breaking out the fields of the last example above gives this table:

  Field   Purpose   Example
  Timestamp   File creation timestamp; (YYMMDD.hhmm)   121129.1701
  Sensor Name   Name of sensor that recorded data   portland-sensor
  Target Name   Host whose name was target of DNS lookups   example.com
  Nameserver Name   Name of queried nameserver   a.root-servers.net
  Query Type   Type of DNS query   A
  File suffix   File suffix   .dns

3.2. Transferring Sensor Data

The Owl Monitoring System provides utilities to transfer sensor data from the sensor to the manager. One utility, owl-transfer runs on the sensor and transfers the data to the manager. The other utility, owl-transfer-mgr runs on the manager and transfers the data from the sensor. Both utilities are front-ends for the rsync program and run using an ssh-initiated connection.

In both cases, the transferring host must be able to ssh into the remote host without a password. The FOSS rrsync ("restricted rsync", written by Joe Smith, modified by Wayne Davison) is used to restrict the transferring host's access to the remote host.

The administrators of the sensor and the manager must agree on which host will be transferring data to the manager. The appropriate SSH public keys from the transferring host must be placed on the other host, so that the password-less ssh (as described above) may be performed.

An Owl system with multiple sensors may have a mixed transfer configuration. In such a system, some sensors will transfer their data to the manager, while the manager will transfer data from other sensors.

3.3. Sensor Heartbeats

The "heartbeat" facility allows an Owl sensor to periodically contact a manager to let it know that the sensor is still alive and network accessible. The heartbeat is sent by contacting a particular webpage on the Owl manager.

The heartbeat facility is not necessary for Owl operation and Owl runs perfectly well without it. However, it can provide a useful assurance to the manager administrator that the sensor is still working. Enabling this facility on the sensor is at the discretion of the sensor administrator. Since this requires a webserver to be running on the manager host, that aspect is at the discretion of the manager administrator.



Section 2.
Installation 		Owl Monitoring System
Manager Installation Manual 		Section 4.
Adding Sensors

DNSSEC Tools

dnssec-tools-2.0/apps/owl-monitor/docs/owl-topography.odp0000664000237200023720000004234112057167021024005 0ustar hardakerhardakerPK…uA3&¬¨//mimetypeapplication/vnd.oasis.opendocument.presentationPK…uAMUQGmeta.xml Wayne Morrison2010-03-28T06:56:288P23DT23H18M45S2012-11-20T19:04:11LibreOffice/3.5$MacOSX_x86 LibreOffice_project/e0fbe70-dcba98b-297ab39-994e618-0f858f0PK…uA settings.xmlÝZßsâ6~ï_‘ñô¡} .¹$Là†Ð0Ç%4k¯oÂ^@¬õHrú×W2&åÀG¶;æ!!¶ô}«Ýõþ—Ÿ^vô BRäm§q\wŽ€{èS>o;“~íÜùÔùág3êAËG/ €«š¥ôy¤·sÙZÝn;‘à-$’Ê'È–òZ_okm®n%d«+/Œò§¶³P*l¹nÇÇñ‡cs·qqqá&w×KCRC•œpsÏ&­‡|FçyQV«7÷#â«ÐfÃê`‰àÍzýÄ]ý¿^-Êòr™µ5ƒPËx%¢‚è#2‡/DÌ)—Õ‘˜ßCÊ¡BŠûéŸà©¾Ð«&¡~„ö¥ÅG,’·„û d—ÅdY¡óÇÕ®™õƒÆª0Î £åDÁÙ2QÛP_P]C—•§uË€=»\U˜(µÇ,uÖÛÆ'>ž\i!ÄÒ鸹ÎÛv²Œt€Tä¿"ͽ'ðßÅ}ê»JGÿi¼Ã2ܱ¸³?D D•éÆ„êÏ: o'Ê ýìX>8c`:¤oÀKÈľ _MôºÆH«¹Ç¨÷4uãÓ½I¸HàOz Âçð€«¾¢|š1£>ȈŒ³pb€µVŒÆJ'"¶]' º–ö]Cß¡ÚIeàš4ˆQfñjYþï†óŠK|SÀö û¥?=±Tü?àd/„Þ×…ë!Á‹!”ÚÚÔ«‰Ð¿ßE¢PTÈq “â+›¥@ûöÊñí_8Ç·jÎ1IÁkhn¸©×ö¶s¢A¯ ®þ1¸çÅAŽ¬—qqs*°ïv:hÈ^ AåŸ(­.D"ÉÚï-uÃ-%ˆk¢HùéþŠ*}Љq…LJឹÇ?EZ€ŸSW¦üXâÔŽU1‚èROô00cR3´›hÊR«¾¤¸¶>™gGzMäšӷ䄉˜Ò´c•]L4šg¹•¸ÂÖG1¥¾üÕ|ÅçmC]ÍFõ~ª+බ ÿÔDZeuB%;¶5G3ysÊÍðÉá†û÷soç(âS fíâs;ͧ¸¼EAÿB®+?ÞåÙ?» Û„üïJíW£ˆ{*:ØÖè™ÍâƒjfÄ›WÄ{ª¢Þä88í.L¢óm5Ó‚º ±ñ¨ª¤ïSu¨R*~€ìž¸L‚$Õ˜CT2ªO8²%á>Rl7Z—H`´swàk†â Ê ZGšÐJä7iRgKëxnK‹Äâ#gÛÕGYsWÝ}NAèb, ™Íºeû9Ò5Ý\p1Ž‚ ¢ábbð_#¨ÚÖN‘9] b «ó6‚®O†d¹œÖFg×tÓ,2§,D™ñðå/æRŒ1¨h»jï×cò _W/?ÜóCYÅ#õ:ÎŽýi·öÑü1ôuÂÕ)=˜@²É÷}]~Ò¥»;o‚¸ûÞ-êü PKêÒg $PK…uA content.xmlí]Ë’Û¸Ýç+Tš$‹¤Hñýè¸íš”3+Û™÷T¥²qA$$qL Iµºg•Èä7²Ë§äKr>’"EµÄ~v¹Ý.ˆ‹{Ï=ˆ‡Þ¼»‹ÂÙ-N³€Ä×sUVæ3{Äâõõüç›$gþîíoÞÕ*ðð•O¼m„ã\òHœÃÿ3(gWEîõ|›ÆWeAv£gW¹wEW¥®xé+VW‘’å÷áèâL˜/ã»|la*Û(‹–ãkfÂ|i?E»±…©,•/¾"c ße¡´"`õ(AyÐÒâ. â¯×óMž'W‹Ån·“wºLÒõBu]wÁrk…½Z.Ù¦!“ò½1­,[¨²º¨d#œ£±úQY^¥x-q:Ú4(G¯&)Î@šK9îA|™¾n×£Ñu»î1³·Aéhœ1á&TtBÚ» |Ú5(^ÔÍÛà`½ÉË̆N~%!º‡Éi/}@íJ„YµêÍW(Ìú!ì°”QÕ,pù‚sퟵËù¹Òfƒ‘¤eÏ¢ñë´òuŠ’ …d‘œ ”Ž·Ù©(D; ¥~mš²o†,OÉW\à †6eRYÑ, .«‚œÂþ”°ŠPú§°øõ<ʾOS²ûKìÑ”/fGbÿpM­qÉe{8Î9ƒršJ0TÅ¿X„EL#6b㣡A9 †¤ Iƒ_ %< …ÁžâUÞ–º¥Öòö29IJJ Äí®£RÝ—øtz$4m¥ªÓVréK’çtìq ‹*Á,c¶2Ò2V÷9;pªD’bøK?œ‚ªNH€ªR$ ²¦Àu4àZ¾:ßy¿l³5ÄŸxÝI@\@|jˆ?ñªœ€¸€øÔk–â¯âX´,ö`î‚|C¶9µöQ@óaðèóÝ1ßҲs–´ÆF¨²M¤4åzþ@•âÿ=|Â,¾hΗ[”~ÑÜ/=m÷E´£Ð¿ƒÑª+æ¡`:˜ÿ„Q` ¬|vòê(pœÞ0`Y§€â‰WÄV¢‹Ö9+OÕùò¼÷ :Ìojw„öÄë‚6.AÚcœèq¨ñþ<‰lªÚi]—ÖûÖt@µ²])ÉaÄ­ ~=a •tVð'7¬ö¯Ð6Ì¥êÍ&Fy™Åi”–ÅUM6“Lþc·õ(E¬u“ê¾QP3¨*ˆ ‚®žEcRxGć:ÂTÊ—'¨ÔÁÀx• ËXƒ=Êx+CªL¬b­LeÚ±Š—‰…ÅXZQ|¥‘^>ÔªJS ö0z~‘…=%KÇŽÇWg} aVsSoVž|è$ù Æ꼃}jcW½ónm:Õ[(ªEW)Ï´EÏйº°!ØPOòÆci²„²Å}™ô˜wˆïÊìñöï¼QxyößØÎLù¬Þo|½¹Ý¹õƒ¨ªåû4@a*EŽ´Æ1«Ò9T„â†DäÌÌn”e§Ø ³|b‰Íc5Vr=õVÙûÚÇÆ@YMG©%ûT©ú•y`ÌÝtaÔ‘ó‘Ô Ñ–CZˆâõ­! Ç,ÁƒùpžÂÓ~þÜo7m˜;´“ÚѹÒgT;ªB»rÈ»$¡ßh@‘Qµ¯/»n!ßÂÎpë”gyÊö”q’§:c¯SÚ¡ŸÕŽ‡ôVì6¦ýË…F[Ø+†½@ˆoqXMÔØ‘üY‘IÓáùUÝ'Ñ«,€¨n8÷„}ó‡èµýN¬e)EùkÌz}Ê/·aˆó†ò_ìc‘%Ñ»ƒ®çÿû翆õ/ÊÐq<C›1»|æÝ+Ë¢SÈ-¡PýÎvõb9®cù=JHö§› ‚¼Ox7û‰rh‘xîæ,#¶:ÁÈúa#ÿût#ÓÙø‘-ÝüVl\ ɺì¨ÂÈl2òÿsºMYq„ÚØ6žÜƶ°ñä6v„'·±+l<¹éé)a䇙Ë.ç]‹ÞÛøÊŒ%ñïëüÂÙÛ7láŠÞŒV,a•ËmðY­ðïëÅ4v‰_¹êŸå8-¯TãÚZWªñ éÝ“m^úþƒz£ÌK-èëÃnìNµzm¸±¶÷c•ϤûŠG»!îT`KYÕœj{Ä=$¨¶ì*õ†‰;Ú\¶,»–Ñ :T-ÑœP‡Ôê•šzÛ ,-e”ÔXëÕXë׸„¬&«®Y)´_¤µ5½Ö„tÙ´öM£ïedÕÖ›j³Šp¼¡÷úUa˜ö³ôBÍ?x2Sfšj)åÏJov©b”)KrM©”®Ÿ•°l?ÎhéeùÆsfûÿ•ÙßgŸæµyÓ´¦>…5 ΚªÁ[Ó–M¶±†£´’|¸ê[¯4ŠK +ûwÅÔ+q`°¸›£·ÎV!Ù•QN%«ˆO¡_Õ¶Oz=7Îp¸ªË†¥w=îšçqC¶ŒFøÈŠúèþÖæoßSÿþ†® ÝìÈ쯻pö‘ÄANÒ ^Ï>ßÏFÙ7 ³æˆø7u·UvmCƒ.ktYaظ(Œ#X¬|‚ßFûyŸ>Ϋø3Noqz´j®¢ U¬Ž¬ó2 ^‡[,%$ˆóŒR¾S¢³ø­øÉ#˜¥ðÈ£ÛҠ仕>+þô_#b6ø­év¤bŒDü`à ™Fý¬N½[aôn¥Î•³”â3•©ªÈ£AUYã[6¾âGp«ª:úò|¢ëùo•Ù|1TBm—`JGËijúŒešn —ÔÛ%ß­´ÙUl5XÎ8¬)õJ]Œì‡%¿ƒï‹[ ™†ûý„enŠbÞI0‡¢-Ý"Ø“îŠü 5±u09Àx}#]ë¡#]CV,ƒé´Hsù®&+ºÆsa˜Ë˜ñœq®Ý«¯uf6e› Æë~Z“E;‘œÏ$*ȇNù0UóÐ(†ùУó®ñؼiJRnçoëÄV‘]í÷mf ÎœýL8û:Ss¡jÈúþ´‡ à 5Gd(ÈPáeÉÐ~`è:Ç…t4k<*œ”±>ã8#‚*U ª|T©*“YUÜ&Y²“Œ‚,'¬Xd)ÈRå…ɲ/À…ÈR‘mKk ,]Á•â…¤àJÁ•/‹+ûw!MõFR ,¡bC¥ KA–&ËþM†—"KȲ5 \9qŦàJÁ•‚+/Ì•ýûs/´!³óÆr’=™öSíÉQñ4{2GTü¸k<‚õë½Ö›|ºjÉ®jMÍzb'úŠw±F°ž`½gÂz½g.f½tùjÊ–¶ß™ )nçheSD+7,Ûs~†FšÑTÈqm^¡æqP­<+¦M¤¦È¦m [È’Mµ¥¦8SH•-gØBª!ÛÍSSk¤î¿jà F¶ìpF,0äšÆT É®3 jKV\ëÑ d˪ª êÓ”87Æ|þDµe›{¹U@QŒfô)vã µ#ë–õèŠ:Õ—8ôž”Tºzƒ'Z˦iqKô€¦¦lÏBSÛµÚš6)²£µ-âúqUeS铲[ÎçEJ“Ú­©}GÇ÷Mr­¶šúãüj«ƒºvÛaô~…)<¯rjŠšf“Iµý­´è1z::gì? çô+\ÎÙÒ먪æŒD¶]ÅTøƒìUpÁk Rìå0⬿eç‰NOoKèÊmÕÆ<þ2Ãv¶1û¦¨1eSºRã5³ÿè×ñû*(æ:o†Ú”²ÑxÆÔ9½ÄÚáˆËIOg¤YžÂ<øöø ¢ßÒŒ¹…D(ˆõUÍóº 㬰Õe}?†èã@÷:ú“Þ9WÿÙ¤cƒˆjªW"Ü'E‡ä—¿OªÿŒÀq†1e}?ãé½É”-÷ì+Îñ÷Ÿ>Ïþ±Å€'û³g ‰³±\óC~•BÛú¼«³{™.Z—·Ñ«X0g/‚}_ñ’Ü]tùÁ­h|¦.+ð¾\´ÔYì-÷ôVte×´ŸÎŠÚë°"XͶŒ§3£~36î>d_9Ö5§ŸhU£Ø…ˆùf-c„-?êƳýÔ¶^[TdÃvÁîð©h²Ê}‡cq#»çžÝ½ßh†¢,+×4 ¤4Äx½“t +­Ô† ·ÑÔßVé ŠZ` .n><¤dñ-o­+(Cäá }ªû:Ÿ¤-'.º^¬$¨Z^ÎpN¿Ú&kV‘m†¥Û –!®vzÑŠ^¹hÜÓY}ò‰·è7y$Îáÿ·ÿPKœ+³’Þ«PK…uAN*ûÂD D Thumbnails/thumbnail.png‰PNG  IHDRÀd*1 IDATxœíëŽÝ* …3Rß»§O>gk¢"ÊÅ1`›EìïG5Í&Á€˜’_ßßßWxå×n‚`'!€À5!€À5!€À5!€À5!€À5!€À5!€À5!€À5!€À5!€À5(øúúJ§åIŸƒùR¥fšú:õOéDbáS3Í}µû§ûÞÅ‹ãÍ”´%½SUPpýõ‰¯ÒÁÚc’Gæ?å^˜Ÿ~L¾[;ôõ¯gß¹§ŸrÒ‘ú§æÁ¦y¹ñu.Í+×U$€Dî…—ƒCÏY I4¯üxnó`SBu¦ùEF…J›Ù]™,{v"  éU½†'œ8+OLȬyäñâLS‹a‡ãÙáýz  ïª{}ÿm^¡™¸w }ýQSkiÿ­Š°G¼˜G‘ ® ® ® ® ® ® ® ® ® ®±sEæ×i¹FàïöÜâÁx@Ëm0z›ªð9Úø˱?b!€ä=Ħªbý0Nknü•|åf¨ ¯Ö“zûKpãÆ×Æ·Ü»¨·½ãˆ?×øs-·AWÓ= BoäÐxËQÀbUîm ·Æ{Ó€ÝmÐûk6Œ1Z(z‘üµ"ÍôÍæÙÕ97ÞÕ  %€¢™¯ß)ØÕ Î÷ãý—YÔë#mr_$Œ1ŠXI÷öCnwÕý_Ú#Ýs?™AŸ¿…®ù+¬ñø–Ë¡gàÌ09×r%Ô01ãôCD?Šß‰6'¼ÇrK,F€žõ¢ ¨fhïý7µñ§XnF„@ïÇ­ss°» úúMUžñÄBèàÆzh†¤h~Ó$i8_NŒi9±ü!™]—Å'¦èM`ÇèÚËÓߘ·SY_ ¶T˜.>)< ¹¿¿žV¼Õe-ˆ=p›â÷Òô$XãWzÖº%ÊØ `·'˜N³½ö{}< OpV87‹óX–í­`Dt³¥ö9óEK{ø~ßLãͳ™˜nŠÄR­ŠáHQª8Þ¸=Á ðèO ÀÜÌ%^W J 0:ÃßÄÈœ¸ò¸›âaº5Â,üâÉO»D~£=Á£H5¿GßÕÞ~ÏOŒÐà †@7+  Ñ›Š3”﨑|WHÕþ„ðeHœ×Öi‰‡A@^²UÆlƒQ¯Jg™µî„…Ó®/X®×k7JÐm0ç%fÝê´2GOÉÏ}±¿Š#,û>uoIdqÿ1á÷£gW/Ú»IèUSÞ‹^²ý)›àYõE êÿeÝ|ÿ»‡cÕ°gZ–RV½ÕAµ)ðçÏŸß¿þ%Îé%ø4À}¼— LÐä¿æl»O¿ÿÈ|Ò§¿ó²s,ÌI/®ßÌ(OsŸXœ2ÑEͬ7A‘ ]®‹âãÐÍ-¤î'ï]ŸàjõŽŸ_»ºúÊÅ))í©„…tÿX{ŸÓ?þD'ã7A¯BÖ› Y“¿`^á†ó^@C "0ŠGeÞÂïù["ï±%?]Ê'"òYD@‚m°~¤¸š¬a+WSZÞgìýï› —Õ¤ªcÈÃ8Í ¸”ˆoXï Ÿ€§¸ÂzL¼Ë_¦ö$˜sæ×O7…Dzë”ËâEî+Ô¿ž5l[aݸK!ЊÄ£K¢sZ=Ú;ÑÀ9özÞ7ä+aæX V–jj4áœ÷çRì¿×Þ„ h8õL8Ùöqà}ÿ 7j6Fqð1(ç${¤ésÓ¹äš!Ê>q5šÇˆy)›pœÓß* V´Ø‚]¾ˆ/¦æ¬ç¦A ”Å›Ô7ÂiWv†,©O©yìþ3•ºCÂÏôˆ{2°/Žš5Þ‹¹‘xÃð-)Œéé°ˆCê°¤çâDH 2ÊTU"Rœ¾åeÀƒê"åµP7‰^cŒZ¢dÌc¦M›.Óu ¤¨ÄXTW‡¨1X–4›Ÿ“ií+OW8™šyÞ.)êA `®N•úݹ N³X„¹|W2¯vp)JÑ}PüRÉÖŠ%"ÆhLå9+FÅ3åƒÓúÚ°žpf~ò¦u22°dh¶ÝË”öƒÇ ÷D¦Jž‡Óú´C ¢‹Âsâ?‚s–LS¤ŸËt´øë™Jy?NëЊ4;úºRå_·„oL/,™Ët./ÕL™à´¾ó«AßG^öÅ>ìñ\"ÔœËô Ÿƒ¢{§1hK§hwèL•næЕ ëýÓe×0Fê6h¯èêÍȹæœ1EÌúìï‚Ûßt¼“‹SÌì€Ò÷ŠÞ—B]€†=D¦„äð{\ä¸úA£Ý€^cô,Ñ‹zî8”ãhóó3Uõþ¡²k£ÄóÀ×€vù‡ÔÕÈ] Në+úZ(ø¿øÔß2GŸ°¶Dâ4Æ_̯6qW ÉЄ{%£upZ_îs‘Va£%ô¨!è hïB ší"Ôc>JÛªƒ€nx©‡ÿÈUŠlÛ4Ks€».^Ó%Ð]òc×_ÀîõšV.˜Ku~ÛY+Ä஽×û/©»@/‡V–‘&è× WÚ‹½ÿ¼ zb8ÄÙ•2Zœ¦šc ~]Iéùˆðs€³Â¡Ç[1â«è®¿^…ÿJ"ÁvD~(ÿ ì, ôX,BQ wóç*ò7#®F')TžŸ>%_Dôqwü.?áÇû/½¥'N nmNÁ)Þt·5Çê2hŽ ‡­MÎÔ\GŸÕRR¨o‰<%úúùpˆ‘Ey¿[_C›úôþËf5(~8tÛ¶>1%¤Ž_üÝVìÁn94`8”nÎÜV­tÉGŒr56fCu¦ûÐ4PÜœYùn—öJ! ÌìA‹÷r¬7Ä M Í`–¥ù¶¥½àX²— ;Â@¦‹ É8u 0¶¶û¿6n‰Üë iÖ;Ñ6‹#Ø]ðOè5wú"[†ßÚì ‡¦…7mmý¶•-K!46oŠ·‡æòZ*ÂjÐðþ&o…0 ‡æ^uvéŒQ–A`xÝ¥| ¼aôúªá™Ùœêž @o‡ž›0ß’2ägN3q_ˆYÒâ”p}ˆ(¡4%zŸÜõ–þ2¼Ÿ–nDƒ¼¿ì]*ë6º¾F åý°÷@/L\d8ÔŒŠƒùY„ÜqHÊhã.­¦FKš'Àñþ+ž̑¡+kN~¸Ìy |…ÓüùΡ‰A^Q˜ëãƒ+€áúñ›žI» ÷~Øîÿ:E7¹ Š&/Bô ÅÎt¨¶IƒÀhIÍ-­žsÐ@?ßä÷k“Š­‰˜}d¢)]fIM |è ("f:ÍÑ.Â)i0ÇhvŠÄÓÁãüÞOIA@Y A°Ò´CžaYvñ·ð†æZ A“z½6¶,;‘—AIƒzTßy ‚›3H|gòSR(ÐP4jý´èñ „OL([Õ’î3¦¸A@"÷ŒâàôýÍÇeoA£¤{©Ø&àqd'~é™ÍÏ|~פ¤Çq€®¾gЭŽãü.°WR: Â)éqœ!€~Z=\\‰žÜŒÞâ÷¢ž{«!zéÁK Î1Ï®©E°Ðõü¦’‚sv‹Ý0ïˆÏuŠÛ—B䨖4Hœݼ~)D"œÛ€׸ÔRˆƒ\±®€¹â} W¬k˜ÛüAÀä.Ð9!€À5‡=x QÏ 4žÔ‰>­E_OÀLÓd:Aí…w¬Â·yÚªâ'Õ2ÒÅᤑª@¸#Àãñõ¹ &¸Z¦NÛó˜¬þI¯ŒÅᤑª4b¸&¸f§Ž^ÊÛ{›ù%*Þ)}„ÍJ¨ €^ÒX¸š$†ŒG{o!Çx4›í±è—ÙCy m<šz šÆ;÷þË@½wYjç+Âñh…âf³=1 \\\\\\\\3 €|Á·È rN¦ù÷‚êo¨Äsœ`‘± ¹vnyÚ&[Ç·ù¸¾ùÕ ð/¤ø€†@ÌEf»Örm‹ê¯'E0Ç~Ô_ª? 4÷yêq©8žÿ—6iq¼*rüî|>žø²XoÜĸ×èm¿Ö×WLkE¬ê)³—ËèWgVÄ~ ­¹E°£Z_ªd ggo€"®3ô‘ŽsÙ/€zÍ}0ÇD5:©ù1h¼&äè Áé `è%+É‚À ¸(, ® ® ® ® ® ® ® ® ® ® ® ® ® ® ® ® ® ® ® ® ® ®ùëŠ xÎBºIEND®B`‚PK…uAConfigurations2/images/Bitmaps/PK…uAConfigurations2/popupmenu/PK…uAConfigurations2/toolpanel/PK…uAConfigurations2/statusbar/PK…uAConfigurations2/progressbar/PK…uAConfigurations2/toolbar/PK…uAConfigurations2/menubar/PK…uA'Configurations2/accelerator/current.xmlPKPK…uAConfigurations2/floater/PK…uA styles.xmlí]ÍŽã8’¾ïSîéF÷ DK”dKÙUèÙÙ¨j4¦ª™½”’l«K–<’œ?}Ú7ØÃö¾¯±·}”y’ ’¢¬SNÿdªX…ÊJ‹A)øü Ñ?¼}Ü„“{?Iƒ8ºjHNüȽ ZÝNùøgÅš¾}ó/?ÄËeàú7^ìî6~”)iöúé*Gé +¼î’è&vÒ ½‰œŸÞdîM¼õ#^é¦,}CŮЛ‰V§ÂåÚ™ÿ˜‰V&²•ºÎø“©p¹¶—8¢•‰,`Z®¾ŒE+?¦¡²Œ7Þl,¨iñÑçÛé:˶7³ÙÃÃzÐQœ¬fšmÛ3ZZ(ìrÛ]R)Ïù¡O–Î4¤Í¸ìÆÏQýˆlY¥h·¹óahœÌiXu›ø)ˆ@sI¿»Q¹N¥ݯ„{×ýªfwí$ÂýŒ W»Šî‰wÝ+×Ý8ٺþÖì=ÒïßíûU²}‘­@å&ÁV¸™Lº\?ŽãBUR vª.VUcÆ>—¤zÅ’ ó“’¸Û+î:¡[ oÚ@9mŠOº|ÑîM ·d;:‰ÂÐÙFWMø-4g‰¿“¬d)îtá)¸pëlv» RÊEW‰çµŠ‚:ú Ü ^å>ð¾šVfƒþŽ`×:u­‡ªP¡²ïí­ ©3"S ß4Õ³¶v|üËŒ”)djç—ÏN¥OßðéÍzo~ 7†a™|ö“ ý@;ý1Ibx ø‚ÈãÇÛ©:Q'Xè*»N`£Á5E#×ÖXým:ë¼ß&¥wü·Èû„ÕO攕yAº '¥.31Û­Ñ凛p™ü„Ëk~ì5H³$þì+ž“®Ëjü >´VHé„å3y⻎³TË•ÐVħ©HÅî¦T„«’¸C2H3'"Œ#¿| "Ÿ4€¨êS,?aëÓ½“|Âö§ÖF‘&>ù¿;®}š½øº¡3½³)Ïó—Î.Ì Õ„][:àažn§«ÄÙ®wÊeóÏÊ6Þžd0bÖ¼ÕnÆ0ç~e©äoþØe†E‰»ôKè%Ëøæn¥Ä[6»F±B>ï•Ú:‰CVy-"ÃDqvYœnÒšÀóc&ê„Ûµ3ÍŶ»ÈÍvÔ½Ñ{ßNÓ`³%ו+ñ•»Äw€¹€þÁ“•—DIÙÄÜ>L”ìŽ-c`žAäùÄ¿JïB¡lué„©_€Þ@·)´jÖݬBœ´«ÑÚ]ê+@Û¼øA¡Ï‘Ì’Oa¤¹¹¾q¶qúýǼðä'ÿaò—xãDìb¥L^Yù‘ ‡ÞDä*Û s¡û@Ç ˜ÏãJƒßll3z-t¢ÕÎYÁ%?¢Üxe èòˇ¶GÂ4áD\Ñáæáä—(¶ïOÞ8¨)¯ž>¥™¿i*ÌË÷j—$ˆæ\€éŸw„¼ ¼ì·5/ÉÛ þõ§6ÕÈ4úàì>:k€±OûB´SÿB¢»…HkŠÒuPoEQôï?M÷=²2úyW,»授ëðœÄ›w%¿÷‰ÃÀ›Nê¾²ââKå!ð¨ï%Ž÷£a³4ˆoQí}v¥Ü…ÁKÖlÄV`d÷T'¥m•‰›«6¯ÕñÑ’˜ø‹ ÐS¿.Ë[U›\/[ûÁj• ‰ÓpÀ‰)ë8 ~ƒNâ„àƒt×_wi,Ÿè¨Ü:YO+àH«4l’;” îâ,#tµ­,ô—Å¢^äÚä%̨kÇ£”:ð<âJà0©Ÿ)´Šª×êð⧎âV£óª%Dßü@×Ø!LwJOG.‹…@ÅC&¬°•ã„’ëtjÍo±Û(d½â@«‹._ºÃ¾×Ϻ¼:u‘¬!*ýSw­šªÒÉyÖ§^—òw»0ô³Šò@¹éGV¤uáíôÿùßýú³:t†Uî|h³O‰è‚…m‚H ;¨TŒ•…­3&ÔÙò NVÏ™a5d½äÿ2F¦Ñò\7¿T“õdYš¹d³ äÿÿ¿á›Hµ$Æ­Ï%ÆgÇx!1>;Æ–ÄøìÛã³cL¢“äã@.ç!„YW$ 7¶‡öŠ@Æ–›ùZ3¿˜”¾û«l9[½V¬dóË4BÇζþ5½ÈbˆlLû« ìñ˜ÃÕB‰4À׈$Ö/pã4`TµÒ½º¤ò•ÜaÁ|5rX0gÔ‡órXpŽjc¥KpæXHÐB–-Š´¹˜¤† ]L#1È5Ù‚’&ÂbÖÑæÈ3¶@ 1ûh6RÅ „U¤‹YkÈ3ÆÈ36&f"l¢ÎYcØ¿oñ°%Áx—‘_KEÔdë$Þ­ÖÌ©’ ’¨*Tò_O¨¯nÌ4¼~Ú¸¿fåqvë–lȃ¸å!À†Î;pt ssåVñÛ=äNšß¯©øÐ݃a›¬qåB:Óå¥-Z1…{ê[²С|QÞ­~‡µ˜¿Ù®fú²5iõÄÙbæø¾ÍÊmùøØol•_Î&J*qÜøîWßÍ‚ ¸ÛófšÕö%ø w’"gLi‚»KëÖEËîÒÌŽ >ðÅV}ÏÖÅ¢ë‚mvî\èW&Œ&¼ç„3÷÷AÐ.ݹCл?p`wàˆ–ƒG&[-çiú¡¾Á¶èHVŒ¥ ô{6|Ÿ¥å]ì=]SÓþÕV>µÍÁnÙd[~ç¾èåZ×µª*/uø–ààf²EÑËm䀥cu‘‡æCÜdd¥Iø…vdÃÔ‘I“´k´©s¯\mnð^`ºEl5n|ö9¨` ê~ç¾bƒåÒumûeÙ@d³§Ô#DHëˆ-öm ]4™¬}Ç#|øúžåô9šî‚kâ £«¸ªëT]póò]zá;“[y±Ð-±Š ƒAî>Ñ碌äãµ¹è<ÉÒ²-­­µ^G2\ɶܥƒCßEA–¯KEm„‡ø€?幊wŽûy•Ä»¨A»Ëïßœ™,éŸÃ©w|©ÊÝ“‡»{©Màyá@¿çÇBƼé³É:ìo;Œô–ÄÄ®¤Äö„ÄŽlÄᩈÏa-ýÙ†ÝðËôC™~(Ó_È2ýP¦Žc™~(ÓÇ€±L?”é‡cÀX¦ÊôC™~(Óeú¡L?¼Tú¡Ì1”9†×Ï1lælGqæ?/˜Ý¿u%ßeZȘ®ŒéʘîkYÆteLw˘®ŒéŽcÓ•1Ý1`,cº¯:¦‹4Ó×-b#ç ìVÎ2°[”ÝC‚2°û%v/ð^ùÅN™¥ÙÁ¯'|¦³j åB:[^#d|Öól;Ú9Ú7Øyì8±[NÄ>iÖ6!ço+«$~(8Pîo9ÝH]p*õì¼n±`|¨ŒÇËx¼ŒÇ¿&e<^ÆãG±ŒÇËxü0–ñxÆ2ÿãñÈ6koú‘gL•ßäØ\k¥Ð$×~l ×*Ò5ÁØ/2-ѾeŠIHÜ0‘.£ž£ù\Lrl]LÒFXDIEÆBPTC C8B¯ŠšÉ@XÐNš‰LACisd ZJ³*º`#]ÐV˜¸OAQ Ù‚ÖÂ:Ò­… dpk#X†mýu…å‡EÛõ—mBïPþK ¡78ª„Ðù`ožÊÓ8@c0RçúóiŒ¡jϧ1,>;^c,÷ÏaÒ“$s®˜$™rÅ$ÉŒ+&I&\1I2ߊI’éV%2Ý '$ت (™nEÉt+(j¢…hòÄÙ‚–ƒM4Æ´&QP”xAQé‚Ö3Wç£1/˜«à1¿L†_óËdÊ_õe²œè§áx nÓ|>À¶ý|Á‚Xãåõ ]7°“ѸõDx„aˆI’)OL’Ìxb’d“$ó Jd¾%ó (™ïEÉ|'(j"KÐPÚi‚–aš xÄ\ÐV˜Ä%E1‚ÖaZ xÄ‚[ë çm‡ÉŽ†G¯™G´+ÿx„q¡ã|~y.8ŶŠä’GH!y„äœG¨cæêkæíÊ¿až†GÃxŸ5žÉ#´SìkH!y„äãç’Hr ÉÁ r0? 90%9ä@’I$9ä@’ƒ‘ƒÅiÈÁ\’I$9ä@’I$9 9°NC’Hr É$’Hr ÉÁHÈ}r`Ir É$’Hr É$¯¤»»,ÈJjŸý¬âúÄ›ÀóBѯå+Ô•'÷é/O–'¿4åIÀò$àQ`,O–'cy°< x Ë“€Çz°hÈ×…•ªŸÈc€{c¾ò`¡˜¯<X,_äXü ¾phúè¯ÑËcؤ³W¿+Ͻè÷äÉÐøôÿó_Ãy?ÌN½´éÿ=äÃÓæ..ÆÚ.õá^xMe?rbXƒÈ0/×>! áQ"Ô”>¡þ¥ãkE¨5¢|Bõo¼V„ZãÁG!¤ŸÖXîqøŒÔO·FbBÈ©Ÿn£‰Ð8ýt{ô(ˆÌ×å¨ÏüzüRqè2OG‰GÒ” ‘dUš ¤a~‘`¤`ªæͱ`¢ªe‹F"E¿CC†.&‰‘pÀR4h",fmŽL1óh ´³f#ÁY¬"]ÌBXC¦˜‰0F‚_J‚ ¤‰™3ß+£”ÝQJcÌw¯ùàîåG¥,‡•­³ò=ÁªDâ~|§~Ääp²ôÍ6zµŽCèz“JA|÷«ïBw[;À‡v¼ûÕÍ#ý2“ÒTòù‰}û•Î?çD fö¥Tô"§ŠŠ°žûšçé®ÝÐŒ++QV€¾6×P¢èÄ’ ¯ ÄqJÌúÇÓÀñ¦}T7¾­ >Ø00¢½Íy«tdò­Êa ”²î»Ìké–ÀÕ°(°³x¹ ÜܯiÈ?:;X®€¸«ðÎ4ÚAÿù½:m‘i_K‰,,»èó8 9U+®sLðÙFií”àÜã$à¨ÜN·q’%N•aké‚h/h§­µ" !U÷BÂèN]gë÷c@VZÿÞÛûFœç‘í1²È$7( )_llÌÝ9îçðËÈËyÝ]œxd\Ú£Kã0ðJWødýÕ’þßO•_%:HåÊ(ö‚Fø€í€Æ…H¸Õ ›¿˜Vwî$3Ïpl_‰w6lÈlÅ®ìcˆ*.(B^T_§–nDW£¿ÆÝhÏúˆƒ[ü<ø&¶ÃÏÝ) k2‘ó%ð„ø°Aø7¾Jè}óÙ`‘Jªƒ]¸š*ÁB$­ÙÍ"žeŠÍZŸ-÷%$ZªÄ[6éE1ž²TãËXªˆÎ¦U÷ï´Ky˜£“ZÀ,‡ŒX+͇w§“šs¶F®s_P3àióf€Z?Ǘƈ ô,•üÔ3'uËž!{ícZ¿ž!F_¾ðÎÑ8¦OvÙ9˜·Í•ÚÀcšöëjlJ¯µ~fGC³ºíØD[ÑŸ›€ò ´i϶Y9oµ±­QÚ°i/,ö3hñe+Ö¦²]¹ å„?ò§h\¾uͯa?ªuùŠmÀƒ›ßÛ*ö`VôÌ Šz6¿N !Äî|”–Ä“a‰%ÚÚüš›WÖÖótæÿ—…¥äA®Ò-šg ýgé*3QöåMj“Ú!=C'Z휕O̿뼋²jþòaȃóÍ¡w½Àr™7ºæ9ÅIí×÷‚[]|ɯÉ·ä‰[¯ dyâ–äšS½îâÇ|oóÁVS4/…1µ|Ôê™ÔìE§&õøï[nÁý“g{ Ÿƒ'>9žùL‹Ë!°âÁ°9²øZ=Ïa)®wAË2aÏÛ]Ù3. êù»k?°¥üá“÷ZV}ÿ€7ß„Ù÷ì×oVÙ÷Û’À±ÐÓ{dk¸Iäá D±mÔ#{a”-£‰ þ&Ê…ŸLNä¯(_úÑ2±}¹Gk e^ôúã/|ãù%øgm<‡³Ÿœêõ*ø<»£ÛhíÜF«r›Š)‹ÖŽ\G›HÛ¿»´5Š¤Y@’§¨S0²è­.-סëªâd‚ŠW™u{ôƒÎß„4?¶·|·fé= 7øK\m Ïõ¸DÓYª‘xsç0‚Zf.C«[y^î÷6ÒtãX¶EI-3Sm/ŠqT>W˜Ôðp*Ö|Òþ’8©8™,díßN첃̅!l‡^jv #àm/Ì0¬"u!l€ÃîLV8¿{†‰*€DÐÒÞ|ŽOfieêz7S×¹wþriÙÌûKÛêÑÂ!5sÝ]šÅr2Ŷ}atkn\Rsú$?‚âúž²òãŸ%OTø>ðþ“êu‚µ¹šÿÌÕÛ:9-$ñ3w½É§dNP­§ªm;I†Qñv©OÞ. øg¿9—xÚú$`G^%è:Ѫà+›Ø –Ÿ¤tï³Úòh€î´Ýÿ ÿÞ.­É;ú¿=ù½ÎZô~×xóþšÿO„Þ¿[´‚FPøÉO¼Oúg4•£^KÞ2’± r¨UÁB[+hõ ¿S'¿OƒèÛ·KøåÛm0Ó,õ»ïúo‚ë7m'¿×µ¹>[Ìõye½^™dTýáíOúëõzY¼¨fÖ«Ñ\-åpÅy½"K騹hm!Ý_ÍjkàÁZv‡š+j¾Ã)W$ˈ0÷'ì÷Ò±< ¸U'/MHdÛ÷ø;É岓¯<*› 6;’ßQî<²r6t o×p¼ ìû¤;”îPºCé¥;”îPºCé¥;”îPºCé¥;”îPºCé¥;”îPºCé¥;”îPºCé¥;<äkÉl§Oñ"ߢ7sTdVÉêÈRí’3Ĩ;Ó‰žºË‘ÌҢɃô^ l4OÌ&¯ ã’Þ ç¼’,©#<·º4ϵ8Y†VÛüevÏ_ó!ØHo$+’3³¬ŽéKQ‘ªjG½qpL†J[^²y(/Yø’Âi²‡Ú¬4ﶒuj+‘œpÍ6Õ9RëÚ¬µl­K%ܵlq¥aEø/–}wšQu‘œ¼6#Y×U½–:OšÞÑÃê%$ïÍšÙ{E†{)—}ÿ’cí]F~Ù‹Ýݦ8Ò0}óOPKq©Ð9DPPK…uAMETA-INF/manifest.xml­SÁnà ½÷+"î­§ %íaÒ¾ ûFœ S5?©m¦©S£õ„í÷žõ ÙŸ­N“ñزWþÂ*@í;ƒCË>õÛï6ShzH$/AUæ0]Ó–åˆÒ«d’Då IÒÒÀÎëìIþì—3Ó5[زݦºñõÆB]æãxëî³µuPtl™¸r»vÐUÓ e*k´¢Ò&NØñY0_êä!B*çÜÃÄ-Hñ²æn‚3‰©¼ 4Qñ"=X{¤ißgãŽÙ}¡26 º„<àp‡Ä85€˜ê«XÞ=öfÈq¶)m…Ò,”ÔG¡sŒoö?®ßVÊ8IàÙp½DXé?u¿¿þéîPK+¿–âPK…uA3&¬¨//mimetypePK…uAMUQGUmeta.xmlPK…uAêÒg $ settings.xmlPK…uAœ+³’Þ« r content.xmlPK…uAN*ûÂD D =Thumbnails/thumbnail.pngPK…uA·&Configurations2/images/Bitmaps/PK…uAô&Configurations2/popupmenu/PK…uA,'Configurations2/toolpanel/PK…uAd'Configurations2/statusbar/PK…uAœ'Configurations2/progressbar/PK…uAÖ'Configurations2/toolbar/PK…uA (Configurations2/menubar/PK…uA'B(Configurations2/accelerator/current.xmlPK…uA™(Configurations2/floater/PK…uAq©Ð9DP Ï(styles.xmlPK…uA+¿–â@?META-INF/manifest.xmlPK6•@dnssec-tools-2.0/apps/owl-monitor/docs/owl-manager-data.png0000664000237200023720000023272512063704676024155 0ustar hardakerhardaker‰PNG  IHDRúK€ ÃSgAMA± üa2tEXtSoftwareXV version 3.10a-jumboFix+Enh of 20070520í2¤ IDATxœìw@IÀwÒÑ„Ži*½+H@EQ°ã©§rêÙî¬'§XÑ“;±cCýPOOO±J°H -J9!¨% JIÐýþØ$¡%DÏýýÙÝ™7o§¼™}£€ `````ü×ùFÞ `````ô˜¹ÇÀÀÀø*ÀÌ=ÆWfî1000¾ 0sñU€™{ Œ¯ÌÜc```|`æã«3÷_˜¹ÇÀÀÀø*ÀÌ=ÆWAy+€ñŸÇfó¸\®’:^MQÞº`´AF½{FÔŽ–®-ðôô øå·˜Ü×]•[Á뎜ÜÿºŠÁÂiþ&'÷Aa ¥ÂÀƒ™ïº“€üà<ýAa «¥å¼Èq×Åä¿s—ŸÉìÞVX,̧÷/¥¼@˺,Pù¢ù@ xùú~·vÇ) ³K’D+$ãÄŽ]-øÿ¯k2z—^ÈçšÜë¿ÌôPPPRWW×ÔÔTWRððßL¢ÔwK#Jb®Š¥…qKEó•òD3´Ú[( ùâuo€È„ºPvSœ~0½“Rª2Ïø[€ë}Fw”`fîlW çºH€à”Úî$ ?„š»‹ÍLIùàÕ½ü”&ÜÊsAÓÀxCzBÖe!©2À¬ŒÎeH› )Èg§½tY(Ýsz%Ÿs#ç´—³óÂÓº.¯ƒ\mU”7¡çy%§EÏqºÕ`ŽŠà‡Ñ×ZÞ¼I!“Ñ31¿ºoZâ¡Ý‘ Æ_?/ºVý•”z¨Ž«¯¯~óQCC½•…:@·Þ¾ Zå¿ï«Þ»hõ4?{ ‡|ü‡}±0ÏWNI çbAœ¢¬G,}}­ ¡á -…\†ž¹¼,ôÇ‚}>ES!U$…—?móYêÔ§þî²ô’àÈrþÚ™–Êu·öE¢­ýªQZF/ŽNÐ%™Â\íLU¸—òï+k fÝíR*_!²»÷:s›DTvñžïl6Çü¾æÄO¹Á†ÀcRSî¦×¾€¾F6„a#í U ¶4½(Rô$ã±–¥¹½™®„ðpÛõ?Ò–!mÏ‹Õä1r3æT5è˜3n˜®"°JsKYЈ¨ $Xé0©¹%LÀ[8˜ëöf¥¤š‡ JÖ®vx1õ”W‘›œò¨ä=(÷³rá6|šàRÕÓÂW Ÿ…·LðlqmÆiAµí Ü[@¿)ÐÖõz+ Øé‚&¡éÉo> F˜`0Gì[›q¹Yd.‚ð²Zžå7j‰M¯ãüì årSæˆ^!]ZÞ—¤ÌLÝaÓZ²iˆLGenî“bÏ»^§ñD+X¸6ÛÓÍ4¤.´U.;íeJ /†æjáò]ÐŽAÖl¢r[à× ÚÕ6-Ï_ÅM±KíÀò"UôFøÓÍõ~Æé¶6+l¬PÐl6V“Þ´Ì4‘š7êAjREÚ­èwlîÁ‚àéK@X‘ ÂË6QA§Žñ&AK¬*vE³F":Èá £œÕ¸ùç¼ \qÏQÑ3mÍPpr}—ÊiÓæEóìÌz •ÁaC‚ \.‹A{êï$È‚# éj…dtTplò^4Oÿ€¢P¢iˆØ+Ý»–œÏm%Ȩï°ÜÛMBŒiæF/ãwTƒSj»Ò|ê:gî-}gò¥ 4!%‡ÐßDÿ‰‚D‘Žš^‡ùÙAô”¦äÌÌ õ†–øß1•ò2÷œRË.¹àëaÑÏ=– B»ÉχQ{"‰úl¸Bc!R}|éôË6î:xíp´Bêw-!ŸP ÍïÁÉõ•{k„Ï3ÁT°(BsœR[“ÐùæÓYsyÈ/¾ü§çf£ÒÂ"ƒEÌ}M¯£ü”½AØ0}¶ßá"ÂÎ^+踧w˜™"æ~Ò%rI楈dOÜK y~f¥:xî9RJ1½|£Sõ‰ÝA3=§ìエé£G}ûë騩)v¾ ô×þ,]$êz=j»=@ÑbÅŸ—ù­÷zvÃIèïî=~MIKiŽø0+çez| xÍcÒF²úÔ’sJ¨·~bÜ ß¸Ü’ß¡vóZ¶Èú ž:­ñi9%n}ÿêo[&«Þõ·C+ڑК¶½ûá&üY;U—µY-_Eƒ"½ñÀ|v‡Ÿ·6*oÒb£c½hâ¢T²€K§ TZ7Y Ç'gäW1X×Gˆ™*h±漯¾6^­ííÊ¢\d’Ýaþ2¢.¨O^ðz&õIiLj`2ÿô™¥ÖÐõ )"ÃkùC Çx£WI­QòîþïŒÔ,gehûyÍú-ß™‰k—þ]KÈg‡`T‚¢×T¾Ñ©ª¨é¨ÜÛ¥°ªJòÂ7¿î6Ÿö(3°: ïîÅs7˜Žt·î[Þ¦³M¯ü”½¹a®_磪C¶X×|½Ó™9-bÿl—ÁÃg/%Êv2µ·?³úÀÿï5ÜZ€ucãŒiûîu:vWÃóqØT°Ï‹ÇVHEq«?UøfÐ~°®àœª“ßDˆ¿ E/? `ÿ7 E9ù,- ¬àÎùä„×f»é¶• œÒfZÍ‹ïPQ3¾­ä NÑ… ^ â L;^gR“ÄMÕò¶zÞýüãXþOe%Á}Ä-×"N~]dí„ð¹iæ2¬}=x¼¢‡ÂÛƒm‚tX¯X P¼|Ìåòe½g6‹ƒ¹_ÐwvªªúýŒ­ÜÆùff7+˜˜‚«(~Å«á?ˆXù7²<ùü¾äóû6›Ì?]ð÷"|k)Ò¿k ùÜVÂãçÕ–{+¹ ü_é950·å+=ñvBó‘j÷›O{ ½ˆvûrŸV\Ûƒ¾eOõ´ÐÊ Óɦ×^~JŽÞv½„ººAóAG™)dˆc×f§»M¯šû¦§Ñ[Rù¿û*B}ê.AÓòZspñÜÑN<#ÚÞÕðBúª(A;6^A‹xñšvüz]–yýaª¥ÞÇÖ*ü}¨WöF8n8´Gó¨ï–„Ôþ+íÜïlj3­ôÃsø5ÆÙÿ—u?~oñö?œÐX¿ ¥fÅl„/%,ÖÉ÷Ò  }sÿàßDŽNþ:ÿÎ74Gp6(ì¸4‚’’€²²rc£2°„ÖChP*Ï’jõ†Ø[6,|gTVâçyyjvg€ŽÊB[½9¤¾VÛ<“„Û’ßöŠ[¦=¨`í€ÞŠs•¾+I1×/žßw,¸ôêüÇWùoÞ¯UÙÝu[ÚJè ¹Üv뺄sNH€Š°C¤ ý~ÍËë³þ4vKK=<À·ÞÝl>íÂÍ¡ã‰pä©ðŒÏhg|£¨¹ïlÓk'?;ˆ.l‚‡0ß¼‰ÞQf £s{iM¸¬sÞ¿¦×2kjjªªž¦þ5Çþgô¬ñš@"  ‡«ân œ?ÜEÌÅKá×ùðÝBIOýñð·WÙ¼»·ÿžE°R„þžSEÆèéî5f¨È ×™Þ-ç÷Q„ït¦›ï]=ôƒï0}1à½øÓ‚NDܱÓO <|g{ÃA­%òó¿%håªÏÚ7vg¦hè»[ÝÃɵø½ð"Î_±nݺuóeE_¾“]­dl®†ú¡œxÐT°Û{áª9¾#ì­®¾ú(O¢==U¤£'ªŸÄ|ÑqYiTèbSùÐnß¿«²ù¸‚{µÊÓÕÕ|ÄZõ€³9‚p+£cñ*HÛà2¼ë¶ù,^‚Är·hkŒñ£W æL2:—ÍäëÙ?#6òÃLXÿÕ·Ým>íÓب 3Ì]d‚ÔÒ{˜>pE^d:ÝôÄçFÑ•Œåµ5èt §ôÚ’i'š¯w53{ÙL Hš*p£#‚< Ÿ,83iGXèÌæE èoËOCö¦Ÿ"1|k:úô´õô p6 ÀÂSti`¬yr†¿òŒÝ¼~/[¸èÑcéo»ƒ¦ c´žªmž›j1×-œ ß™D‘ Þ©Zþý²›µšù :ÈNpô3…‹ -Ö$X. Zë+HÔxäåb! "±9«Fa´\±01`™HIñ³ºÕÄipJmWËBÂl°Ø<é°2 ]¯ôŽ îi¤P åÒí‡Âv,ˆ´¼Hmj«€ì|n+Ar¹‹~SÔˆ·AôN;Ù|:9U‹Î-—­m~$R„-zƒ5½r£ÓÑÛÒ™ÌÊn¯NJY™ûm«¢˜w‘Âä‡b$ù¶jqÌ ArEVAiH ³ƒð­cqËD×zçF.j+|õÙ·[p¯Äz³àGDºwÝ™|n#Ar¹‹G{¸Llq›/ˆ+n±|³sͧm®¶ Õ-Ä.ˆœwµíUÉM¯ÃÜè¨å¶./aOLðô•”™Âu÷ÂÔeŒÆî5&nŒÐ}¯ ,rJ©¯®Ù ç!Óæ—¼‰Qu(êq½Š€Ýä%ßÙÔ^!€ö5p^w%¡ï‰Ë)%UUk÷ 8ÜPÉá[¡n992Ü´]­Äj‰heK~tç%§Y¾+¯EßH+¦r8 šæ#¾_¾h„ÈW»ƒ&o=îÁP²o ¹àÈ?ý X0rÖÀö²cغŠUDäe¼ ‚w\°Ä¿!ýò“ÚoÄH@cÌƈð÷\¥¾N‚áY‰ÛÿÔ­å!J6Cð >ëÏB»©Ç"/RتªfC§.g—ýÏej£‚áH±4ú7Êâ®56*»9ª¼žp,r‚Jc#8L_¨ ªn'É×F?ªSVnü€hrÔÀxÅÕrÏø3‘—îÖ©ê¨ ªŽ¾sçO&ãTœøÛ=úÔ¸ãgoV¦‡iàè·pÑÁ'±{³*Ý"þŒÏª`«j Ÿ¸ðG/•[k…Y­êöOÉ­C'n–×}PÑ´lƒS‡®•EÛ²wO1¶§ÃÊÐå ‰ç×s g¼9…ëŸw-îvSA•ÃQ1á?wý²TÒ½ëÎäs ’Ë] } =ÿ$s×$^»rëAyÝ@T ‰ÓæÌóunÕ,;×|Úæj „™àjƒ·Ÿ®…;Ö)C£öHÏYd£5½óSrtvU‰"q9aü£âee0ó˜ïÕô§¢ý/ §§ÑafÚ·/\÷  7Ò ( ˆ˜AD ɤmÔ÷ØG§ù'ãOÿ¤Ç*>¶d<ê:"8¹>„Øz*^î`æ£;¼¸±ÒLtn¶™IÉŒ[Äž.ž’>ØnVÝÁtêáÄð[{Ž‚I}†¶°Þ=Fà1*J©Õ\%PRÓÔ³0ëÀá©ÁÌ=ÆW6˜ƒñU€™{ Œ¯ÌÜc```|`æã«3÷_˜¹ÇÀÀÀø*ÀÌ=ÆWfî1000¾ 0sñU€™{ Œ¯ÌÜc```|`æã«3÷_˜¹ÇÀÀÀø*ÀÌ=ÆWfî1000¾ úÈ[ Œÿ8MMM4­²²²¡¡Ãá|øðÃá|úôIYYYUUUUUUEEE__ßØ؇ÃÉ[YŒÿ2˜¹ÇÀL&3;;;??¿¸¸¸´´´²²’Á`°X¬¾}ûjkk+)))++£ûôéóáÇÆÆF.—ÛÔÔÄ`0êëëÇëêêZZZZYYÙÛÛ;99ÙÙÙÉû¶0þ#`›þùøñ#›ÍF{‘>|eee55555µo¿ýVÞ þ§(--½uëÖ£GòòòÞ¼ycfffnnneeegggoooddd``ÐÉ<÷îÝË—/+**ÐÆ¿ÿþ[QQñáÇáÇ{zzúøø())ÉúŽ0þ«`æþKåãÇ¥¥¥………EEE¥¥¥¯_¿~ûöm]]Ý»wï8Ž¢¢bŸ>}úô飨¨øÍ7ßp¹\×ÔÔÄãñTTTp8œ¦¦¦ŽŽŽ¾¾þ Aƒlmm¬¬¬úôÁÞö:ESS‰Dºqãƃ†:räH"‘èî(å©+**ÒÒÒÈdrEEÅ!C&Ož<{ölCCCé&ô•€ H]]ÝÛ·okkkëêêØl6ÇCˆ°™(******‰Ð¯_?´Éhkk÷íÛWÞ7ÑM0sÿ%‘ŸŸŸœœœ™™™››ûòå˾}ûš˜˜XZZÚÚÚöïß¿ÿþFFF†††úúú„ÔÔÔÐh´ªªªªªª7oÞ<{ö¬¬¬ìåË—ïÞ½366vvv1b„§§§‹‹‹‚‚B¯Ýڗ“'ONž|øðþý{tö…Çãihhhhhèèè 0ÀÌÌÌÞÞ^rë“/˜¹ÿÜ©©©¹víZ|||ZZšªªªÝСC=<<<==¥ÛÎ?|ø–––’’’M¡PÜÜÜ|}}ýýý ¤˜Ð—HSSSTTÔáÇ߾};}úô+V8;;ËQ6›uîܹ²²²éÓ§oß¾ÝÌÌLŽúÈ‘¦¦&2™üøñcô5—J¥¾~ýZMMÍÄÄDOOOh‹ `nn®©©©¥¥ÕÃñL.—[SSS[[K¥R_¾|‰>Q^¿~M§Ó_¾|ùí·ßš˜˜XXX ³/nnn”ÖÍö9˜ûªª* è…QHt»¬¬ Mñ ¢®®îÌ™3/^,--uttôññ™9s¦M¯)ðï¿ÿ^½zõÎ;yyyfffßÿýâÅ‹uuu{Mχ³ÿþ“'OêéémÙ²eæÌ™ŸÕäÇóçÏCBBnܸáååµsçNù>„zÜÜ\´_’ŸŸ_^^®¥¥eoooiiiccãàààää$Ç5N¯^½*(( P(ÅÅÅÏŸ?öì‚ ÖÖÖ...Æ óöö622’—n½mšlllV¬XÐ;)’H¤-[¶üûï¿jjj½“b‰‹‹;|øpVV–««k@@@@@€|gçx<ÞÅ‹Ï;—••E Ö¬Yãïï/G}z“ÈÈÈàà`kkëmÛ¶y{{Ë[v©©© ={öìøñã>üŸ|£P($éÁƒÙÙÙªªªöööÁÍÍÍÃÃÇË[;I”——§¦¦feeååå={ö Ç»¹¹y{{ûùùõöÈÒ» :´—7nÜ’%Kz9Ñ®ÒØØxìرAƒ™˜˜ìÙ³§¦¦FÞµæíÛ·‡277733Û¿?›Í–·F2$++ËÞÞ~àÀ·nÝ’·.åíÛ·óæÍÃáp[¶lijj’·:R€Ëå^¿~}Îœ9zzzººº¾¾¾())‘·^ÝçÓ§OÉÉÉ7n9r¤††ÆàÁƒùå—Ç÷Nê½jî q8\QQQo&Š Hee¥¦¦fZZZ/§ÛI>}útüøñþýû»ººþóÏ?Ÿ>}’·FpíÚµ‘#Gêêêîß¿ÿ¿aVDár¹›6mÂápaaa_âÝåå幺º:::~¹f±±±ñ¯¿þòóóÃáp666ëׯÏÏÏ—·RÒ‡ËåÆÇÇÏŸ?ýÈnÉ’%III2M±Wͽ““Spppo¦(äСCƒ âñxrI]111ƒ ²¶¶Ž—·.]#99ÙÉÉÉÔÔôÂ… òÖEj¼xñý¸é˵•‚|úôióæÍ8.<<\ÞºtŒŒŒ9sæàp¸!C†„„„”••É[£^"%%姟~211155]¿~}ee¥,Ré=s¿gÏ9v—†$¯ÔÛòöíÛ3fDFFÊ[—îsþüy“ &¼yóFÞºô”ŒŒ ==½7~‰ú¶<~ü¸ÿþ?ÿü³¼éngg§««øE?k{È;wfΜٯ_¿ñãÇ'$$HWx/™ûŠŠ ×kCTb)**Âáp………rÔAHtt´žžž¿¿ÿ»wïä­KOáp8?üðƒ––ÖéÓ§å­K÷ÉÎÎÆápòVDšTUUÀêÕ«?Û‹ÅÚ¶m›žž@8þüg«g/S[[b```ooÿÏ?ÿHKl/™{OOÏ•+WöNZضm›‹‹‹Üǃ‚‚tuu¯_¿._5¤Ë½{÷ ¿ˆ¾d[®_¿111òVDú°Ùl;;»1cÆ|n#™¿ýö›¶¶¶——×g;¯&_šššN:enn>xð`©TÎÞ0÷‘‘‘¦¦¦§Ò’ º tÏž=rT`üøñVVV/^¼—²£¦¦¦_¿~S¦LùÜ,‹dnß¾ÇãÿK3­àp8C‡õóó“{GGÈùó猌FŒ‘••%o]>w>}útúôiCCÑ#GöpÊZææžN§kkkß»wOÖ u’Çãñx*•ÚûIs8[[[ggg‹Õû©÷#GŽ´··g2™òÖ¥ôS±ikkÇÅÅõ¦>½—Ëutt\½zµ¬ÊËË“\½+**<<<Œÿ“ïR²£±±qûöí8nÅŠÝ"ss?uêÔï¿ÿ^Ö©t‰•+Wzzzör¢l6{èСNNNG'"练¥åÜcÙ­£SN¦l}¾Ëðò׺€ÉŒ“Œž j—OŸ>Íœ9ÓÁÁás°øgÎœ±µµUTT422JLLlu•Çã988üúë¯rÑ­—)++ÓÒÒ"‘H2’õêUGGGeeeeeåÅ‹‹5ú'NœÀãñëÖ­ûÞõ» —Ūc°X\®u R©^^^–––Ý›•­¹‰‰ÑÓÓûš½(gÀ€QQQ½–"Çóòòš2eJGoÓu¡è×o–Å-ž ÌÌàœÞSUw `Bï© puu•c«>uꔵµµ²²²ŠŠÊš5kp8œ¢¢¢±±ñƒ„aV¬XA$å¥a匿«K§K¹ðE ý¼yóÜÜÜ[}‡3}út“ÔÔ{_VŸ†K/ˆÜ±„(â„Åœ8s×Ù4Y½¡wBùÇãñøÇwU¶ (°X¬>|xöìÙ2J¢Û$$$Ì™3§¨¨¨wœÀlÛ¶íÊ•+yyy95c"j¦€éfjE¨™àB}V~Ä·àôô·žéÂÈŠO~­læ7ÖYÊŽz[ÒÔÔ„nͱiÓ&PPP@ýkŠþýæ›o$\j{RÂ%Ñ“.\ˆŠŠ*//ÿöÛogÍšuàÀ]]ݦ¦¦°°°]»vq8ª‰†› IDATœþýû_¹rEOOÏÉÉéÉ“'ƒ ’eN|^Lš4I]]}Æ R‘–——·ÿþ/^€ŸŸßÑ£GQ‡0 eùòåÙÙÙß|óÍ’%K¶nÝêããc``põêÕ~ý>î&jmIˈ⒥V͈¤VÉ™÷\5}Ȧ!ôŠà6ïúÜ#Â/åü#KG&“ùG3N2®ý$}ï ̇žš£SœöÒó‚$(Ÿ=cÆŒqãÆ:uªóžkeèß|ÕªU...Ÿ¡­oooŸ%K–ܸqCÖiÅÇÇÿïÿ{òäI×X¾Ø=/tRú–öë=›–•ñ¸ZÕØ}l†»­tûˆ^M½—X@{}½§øé3‹‹ëúºLAÃdà@uDKD+7ñ^NqU#€¡õhŸ±¶¢®…ªž¦¤‘KjÞqûêX<¼ì ;{ }úôqqq¹|ùòÇUUUÑÎ…ð*ú[xFôPìÉc‰~øðáãÇZZZ7nÜ1b„PŸ   {{û_ýµ¸¸xøðá~~~ßÿýWeë <<ÜÚÚúÑ£GRqôÆãñеž{öìúú···ßµkׯ¿þJ&“?7~üøˆˆ`¨ðc—-ó 'Ò§‘ø¡'H1¯•Ízj‹9梶Þ姸¿··ë¯<ÆãK»†ÿp®ÿ¼>Ö7jÚ)(,Š2h@_Ü:th~~þ?þ8yò丸¸Î ïêë@'IJJÒÔÔ|ýúu7â2è4FgÈv>“ÉdêëëËz5$‡Ã166>sæLç‚×…yÀ¬ãÇW£¥Aᆴ̩IÙ×ÖÃgp?·Ù”Ó1EízŸ ì$ÑÁõ¦+A.?%óßõ¢×¶Þ6oõ¥vç<ÅrëÖ-]]]Cv3bhhhضm›ººº¢¢â AƒÈd2‚ qqq...è€Ã¤I“ñxüxÎ\+W®œ5k–TD555%%%ÙÛÛ+**ª©©mØ°Çã%%% :TEEEYYyôèÑàëë+ ­ä|Üv5OŠ±dUf&\Œ ?“XLo¹â‹U™s6<<<üll1ƒÇ fäTpA¸´’ÂÂbšÈ({9ázdxxxxøõ„§­JFIŽ>~öR|!­ÙTV¨7€ÙOÅm†ëŸ†OpÚË@áRÉ…åLFÉÃÈðð³1©t®då¹TrF•Éc‘ÎF„‡‡Ÿ%eÑ…I°“|`ÔR—r)"<<<âl|!]üR7‹S¦L{µ-21÷\.×¢p3)D •™ÇOÉòÆ&ï€?2ë»”\tt´L?tÚºukWF‡Ñ–0)“Ç:‡:4ÝLE¤UKàå£ÞDG­9‘B)¡d^_ë; ¹òñò—¡Ù7qS™’xîW=÷Jf+ZMËÖ Lü¥Ì§””‹hPÓš KÁü»c¤¬’’œsAÓ`RN-ä”)S䲟ÃálÙ²EhôQCïçç‡.ÊúñÇ—/_ÞûZ}Ðh4'ݵ´´4Ôèkhh Y=f̘¼¼<;;;CCÖa¿”>MÙZs€?RjÅÜ0;;4hw\F‚ #©•&ëj%)ÏnmYשMèU_°´lqù@²85¤¦¦ÆÖÖvÅŠ)&™˜ûuëÖ9²«±jRBÐÛ›™™¾ͯc9O÷¡%XlÁHÄ××wÁ‚]ÕIÞ½{§¥¥•——×éhKðJf!ã.ÝÑ–À¦œ´çæ>3/|sÏL٠༙&¸XCÚmÍ=*Ì~¢4÷,ÒѧÌr=›|íe 4D.õ™±tOaÍ=•JÅápÝ{Ïë9l6{óæÍjjj“'O®¨¨ž×ÕÕíJ¹ü×5jÔñãÇ¥.6--ÍÖÖvìر¥¥¥‚|ÿý÷â–À}!}vQ2 àº,hí(³™5…’”oo¹+&‹Zòp#ÚÔöÒ[^Ý›™r}-zÕ¹Ýå4MGGçÒ¥KôÍ}nn.‡û÷ß»ïÙ2€YÉ¢÷D»Jø¹„]YXHd{µ¤°œÎçbЊ‹Ë™Ý6÷¯_¿ÖÔÔ”‘#ºÐÐÐ1cÆt%†ÀÜ3A*bW Åþg1Â#·~Ïå²ê¨”œRLdXp€¯‡°2¡o Ó"DÝŽ¢ý”Ö- )ú6 HêŽá07¢ˆWrZб°œ¸lcDL*­»#3fÌø¬;fff¶ér~>pé4Îér¿Ý»w·`‘>±±±úúúõõm_¸¿Œ> ¯ä´…È£½šröXXxxxxxxXXXXØÁð¢Zø Yyaøࡽâ?ÛdÔ·•ÆÏ%ôaзoßÖÕÕ}ûö­äB‘²¹ÿô铃ƒCHHHW#¢¥2÷ìóVçÑ1²ÿ]€àäzAx%'æ]EAªƒ`ú…n›{AŽ?naaÑí/$àààpñâÅ®Ähaî¤!ÊŸÿ`ÏÍ:"jî³"WB[DŒ8šWbÄŠ´„Üã“ÛfÝaC‚ O£[½º¯9ßE| ¦¦¦]'+~ÿý÷ï¾û®‡B²B‡Ã€}Òž”xµ[е‹k!º.Ô$.ÃåÑí ¾ÜI}(ŠAôì.—;`À€èèhq¿> í*`VFs/§:¨u“ãù Ÿ4¢™ÐŽòüð¦ÍÏ*¡JÁÉõÍÒ„é¶#¿sæÌ A¾c5z@hhè§OŸ¶mÛÖ½è¶V­—™Uº£ýb(Pš’ p!±ªR¯¬_9¦':¯X±B__]/(E^½zUQQ1sæÌÈP_u—yÛ]†¯žåä¾ô8xÌßy)69§‚Iã÷’€Ûø *Dä°ÞTŠ‘έç@V6­í¥a®–`;ë`ÒP’y?2tƒ/ ýèüc©o»zcÇŽåp8¹¹¹](#òòòqç]£^ ª´¤©4ns<̽œ™™9L½kqÉǧlý½¸“íììX,ÖÛ·].ÊNòçŸjkkÏš5«Ã¦S÷¡}šås~§ðZ,¥yµJI]ËÜÞÕÛoúÒÀßÿŽOèÛÀÁÊP$¸¦©±ùJ8UëaÕâ¤r_(ü÷MŸÁ‹}š²Û{—M÷0RWµöB hjkиÂxz‹S®_ºtéRLLlä*èۼϜó˜"êKV¾lˆÞ-_¥'‚6º¸ù^XXØÍ›7_½z%!Œ4Í}yyùþýûÿþûïίm…1¾uçÂ@¾µ™µ Ï%2—qçÜ#WÁë´Ëåà5Ùµ§[µ;wîÌ™3ÒµG7nÜ6lXŸ>=[êŠNÐýRøð8lHJù{Ï’ÙS‰SuFQŠàªµÇXˆ=u©Jp¦6ñä>ªÙ&Np/æNMó¹Êk‘ `h¨öìï–D× î½dó>R» +Uœ¬ŽðòòŠíFDY@£ÑÚî]̬ $ÆÇÇǧRÀ¦Q(lþEVE)…ZÃᇬ*)¡¶këyLjI“Í,NŒOÍ­á‰^£g%’bcã3Kjg%%Ul&51>>3¯ìqJ6h™Y9t€‘›šŸZÁd«hˆˆ©¡f%&ÆÇǧd–ò5dÓ*˜ú¯ *jÑkJɉññññ‰daZ-ÑÕÕ-++ë0¯ºGddäš5k:ösíÓ¨ÚŽv€‡ÇO?Fì1}öìÙ³§M›ºdo+qÊBû,YyЀ×ï¸-⿇!fü£Q]^EÚ¿ÿÑ£G;vLR Éÿ.áææöË/¿t/.3%Ö'´©I\dÖ×Ö¸’J2ü¶GG,‰É;0á4«SµBBBB¤èCjáÂ…7nìb¤Vƒ9(‚!Á{îÓÈ9Îë2hl„Ë¢¦œÔ¼I,D0 "œÅÚÖî,;è´ôd1ƒÅ¢„8À¬ REZ‡Ê<›YÁⲪ(·ÐESÝËäLž<¹eµµuK‡ ÜøãDÅ®„üÕþøaV¨µØÁœÔ­¶çOG±)§E¼Ïö;\afm9'²DdÍC„Þj7gtD¢4:°ÅYçÍTI Ò[&0Q-6¿öÙ%fÈÙÙùæÍ›ÒÏ\yñâ‡kßYˆ˜J^!Ò§A+yVØX *¢ð(è8û^‚Ô$lAï½yì>AüØ=¿ø~dίÉOÏ-€Å—^ ¯¡}šñ»²)^(¬­î¡&óˆ€×ýVm A:T^08cùUx]° (³¾­´Næ ?xð` ¤fîOœ8annÞýpúML8Ùr:°:´yV'‰à0À+…Å:ç@ð´UÏÍý§OŸìííÿý÷nKh…§§ç©S§º©n‡ ðEa ‹À­@Œ¤Ö= è*&õª¸^÷­(ˆ[.fy,÷/ ri#cÂÒnݺåèèØ­¨ÒÇÂÂBÔ#j)œÖœ§sýÑZðJ¬)ôþp9ÿù ?— B»j°>áu{æ,vßp“… LòiL¿ÀCׇ˜ý”Lã!7õøN¨åO$:¯K gÞO®¨ˆ_«cþEnô²þ–R^#HC|èT¾äe£¶€ÊEÉ=·ˆo#nâ0ÝLåò!sesá–íöï3cäȑ팭÷”#GŽøøø´ý êÓÔŸÈ—ëì¿é,)•LÎHˆ‰Xëï¢Ê´1Ð(/\{c¾à~1“Ç(:à Íï¹ÿôéSß¾}%l4$sÿæÍ--­¶.¨ºDj¨· Tx‚péaÆàÃ÷¡!¨£ö2š[ WA¤aî!“Éx<¾ëkŠÄcgg×õÍh¸ä˜?†GSÛ,Ë e^¿˜,XJH/ˆÜ¾f~À²¥K×¥qjÂŃÓ©l„˪c°¸¬ÊôK‰U5ýA8³_—pöØ1Qô‚s¡«—.]´víöðËhæ hÈŒ9ºvÙü€€€¥kƒ"b²ºýUR~~¾±±qwcK[[[ѺšºÃ`Yçèâ¼õ µÑËLCW`‰,/ÒªèYhÚ{½¼¤¤„J¥S«YHVèp€ðÄ [€À+N[8®¹RRRH&SJ2϶'ñë­à¥Vä•¢.Ô`‰pWôgügO•’SLc°•%”ŒèйÂjßüøaUSÈ:‹E§•“3ïïð~ Ôù]ºt©Ä…X_VŸæÕñeâ¿l7±3ƒÆCq~¨$+Ï{Õõ¯N;ÒîÄä˜8nß¾ÝÞUé8QX¼xñ¤I“ÆŒéÑ”é¨Í—ÏUûýpägëÈŸ…'Ý×\¹8Ô‰Sgõh‡Ñ£ð#=.ÓDwtr—û8\qr;‹‹ËÂ… ,XžžÞ#AÐØب®ÞÅé6Pt™¶¬mõÃáÓW9ÖuX²óÈÑc玨OÝ¢EÜ Nso/ ¯o¬¼†JÐûê±ÐBTÀæ£­Æ ¨Ÿ¶zø´.Þ„8úõë×ØØ(AÒ@KKKtFKICÌ­«:Œ"¨*Á˜©ë âÆ£Òq·¯ÁöèhêìÙ‰óyq—aÂé!x ¢gî²{„ÿ{uBí|¨SKá`ŠÞ ¹¨@µŽ~gu´Y 7D0ϧØòƒypJÒrÁh”p^ÒÀÅ’ÔÙO¯ÌÞE†öQãfœ ^z$¦ùÌ(1¡jjjPÿ6Rçõë×666í_טºýÏ~4üÀVïu1ózÌ“*msôD/ˆ J¦~PUQ56zá‚©Ü”K×óß:j!Àc¿ÇOŒeU¦ÜŠ/®å*éØLûíj]¯kNð0tßÙcEà‚¦ ã±¡Œ>áï¨ÈTê7šj 2È}î¼éVxÔôYì%7̈=}ñöã:Ž‚ŠVÿ¡^þó¦ ™%5^ñgú”ûñ÷’²Kê8DUËÆÑm‚ŸÁ 'ÐÜù÷ÈcåJ.ê"÷"Iy”Q{ÉGíbOÞ(ÿ ÐßÙ{ñßYáÒÎ+GD¥ ÝwöX1X:ub8_GG§²RÜ$JÇÏ‹Ž¸r劾¾¾´¾MePs¢#ÃÃ###ÎÆæP[~øÇ("Åß×e’HÉÅ‚onYe ¤„òºž¦ÞØØhaa!•/Plmmïß¿ßs9]†Îÿ,Ãÿ—ðsçv¯Žô’KÒykéùùùFFFrT@”ùóçoÛ¶Mx˜ºÃ†?Pƒ ˆ`¤>8¡Vòø¡°7M§dH ¤„B:/+t8@ ­…ðÀg¹‡¿Î˜Ëb±¸Ü:Jfra›ïED«C]Àx͘ê spNçQO€ÙÄM ä’jV‹—Z¡>¹ac`Fèe •Êíõ‹ÀãñÔÔÔdäCÂÛÛ[ÖÛ/ó×ÝO8-| ®BGÿŽÇ|v ½{Ù¨:yòd ž2{jîëëëõõõ¯^½ÚC9Ÿ=ñö#Š›››7™ìU GZ-3œwð<½t#Ƚ{÷ìííåªB3aaa'N¢–búAt>óU˜?X^§ñ$J»_|¶Aõ*&œfó Àc3úMri ¸íÊnßÜ7œó׿(AJcÀ-8 °š„ÎV0ïô1SÈâNqŽ £Þô³ÀV[}§§§›™™I5S›™:uêþýûe$œÏgÙ§é,mG祇§§§]=5÷óçÏŸ4iR…|n,X° çßΞ=»Ÿ›IjI!™L&SJdûfç8qâÄøñãå­ŸÿýWKKKäD`) ßM‰Ð{é¹Ù ˜°åQNŠöSƒô6·åûÕ¡Ó¯8‚L|óiø™Âå÷R… ÒZÒï¶òb¼! áe£ Kbó˜ß´cEˆ SQÑü¯^sa˜¿¨-ÖÉlÞ¼Yv›.^¼XFÂ…|†}šÎ‚ÎËfÏ SSÓÌÌÌö®öÈßý?ÿü³eË–üü|×qè/‡C V­Zµr¥¸W;ÇþýûSRRnݺ%Ež\.\¨¯¯¿wï^y+ÂÇÒÒòèÑ£~~~‚¼ÒÔk¤4*ÒÏxˆ÷D¢•ÿ4³8þaù÷ñöº}Yñ–ÃЫÌÒÌôWýƵmå¨öñn›á—ç’Ï{>º—ÚÖ¾3'š F‚ÙU9×b’+¹ FæC§L…vyâCªÅȱæšhˆÖ‡ñ×âó+y6c&Ù‹7ø¡D+0‹c¯&ÕpœÜ§Œ³§e&½Öîm§@O½C}§b?q† =éò=J#Ò×ÊËÏÇ¢þÞÃ*K/¢`´ÀÖÖ6$$¤g߶Kttô¾}ûrrrd!¼%¬ŠR*ƒÅ%uóÁƒñ2ÝÀAªðØ hàÕ¤¬1“É411©©©QQQ¢'O6›Ýï¾_ RqÛK¡P´µµ¥¥Ò—Ž™™YnI—7N:U’Ûäù|ÈÍÍÕÖÖ–ÝöñïÞ½ÓÐШ­íÑ29Œn!Ù7e¾ªUUUˆˆØ°aƒì¾Æî}ØlöòåËÑíÁz"ÇÎÎN]]=))©ç*=Þ=BÁt?³ç‚äÄÓ§Oß¿ïéé)oEšY»víÇ_¾|)uÉÜÆZxÉàuPn„„„Ì;·§ß{·Oß¾}===>,#ùíñçŸ.Z´HRˆž?RfÍš5cÆŒžËùLX¼x±´F™gÎœÙs9Ÿ‡Q2Ë—/_¸p¡¼µ@ zþœï†oÅŠ¢¶Ò‚˪£Ñ?ß²JMMÕÒҒņ3ÑÑÑè^h*ÚÚÚ RO¥]ØI„Öž¥F—ÜÏÉÆw^Çܾ}[___ò‡®R0÷ CWWWFd÷2©©©ššš4Z÷>mÍëׯq8\eee÷¢Ó($)ƒZ“Ú¢Õ•d&“H¤„„ÌrÑO¢¸Õ™ q11¤Œâæ aèÅÅt—^’A"‘’sЭŠH1¤„LÑêÈ &H$RŠp%+—Q^Lc#¬²R )!¥EB]¤¾¾‡ÃuTö€¢¢¢»»ûóçÏëëëutt>«!¦^ÀÑÑqïÞ½²¬¦¦žžž¨Ñ=zôÚµke‘xØÙk=|ÿ¢t¼7F7ÈÚ¡Òis/‡ÎYSS“­­í¡C‡$“ÎWµ.\044lw/·Ž’™ŒZÑ,Z¬ ’“@"%¤[x]gUf&Ä‘Hmm\%%..å)ƒÛnêbÔärxäÈ‘®Ý¼D-ZÔ­~›MvÐe[´»þ-ÎZ¢;‰õÇ‚ u­¶%,k^ÌàBC±îb1Ž_\/RÛsÒË–-“Ñ(y7Þjôûí7SSÓ^í„Ê•?þøÃÊÊŠË•É aÞ‰DtA³„U"Ò¦VNcqi(.¦r‘JJ\ )AÔ2°èÅ™) $RBa¹è=\*9™D"ÝOiÞÔK//¦1è%$R •V½ÖàçdjMËŒk SYÜ:2*S°ë¡\Ìý¦M›\\\:tùÕ£•9¢øøø˜˜˜DEEµ¾À|8Ssô5áᨽ´Ô C€ÇÇ¿¾ê’à¬å”´_= Ò~³õØYÔÒÊdÍ1{÷÷rû"ªšO§Í±R©M=:œ¸V°I<¸o¸roßL5`ì&hm¸¶ M¾—ã9¾mêbÙ°aCjjjfff—o¾}jkk­­­cbb<<<:- >õwéâ8uêÔýû÷oݺåïïß·oߎ#Èž'Nˆ*++ëééÙÛÛÇÇÇËK¥^ãÁƒèF’ºº­ÝŒK…ß~ûÃáX__Ÿ——'£[À¼g©é3#¡v¿kŽ¥¦Ï+Kà Ü}N;–³ÊñEüV3¿PaðiáÙ1+‡¯m|œ×备Ô@Ô™¸¾z„ËûŒçÞÂ=æCKÍÑBûëc^ìŸ6àñn›áÿû‘ñbCO7Fï4§OŸ ÊÊʲlµáa¤æùÌ™3ׯ_OKKkuþß[ÿ»pŒÒ„ ÈÓs‹ m㙬wœ§ÿ¾ê’û†+tAXE;|ËÖ×æò@IÙ|¶ß¤s‘ª”#z: ˜Ù‡#ª¦ËG„G½I€œ §2 ‰kËÍܧ±¤.vǸôýßmŠ} *`y”•LJóâTÛÔÅê_PPyîÜ9ieŠŽŽÎÎ;ÐM„;IaâE€YǶMVè?|Í~¿C·âœœø æŸ*J)9Ïߢ~Ÿ›*Þpœ2Ö ¡87·TÏÕ‡›R–^åaŠ¼Çx­^æ®ê#½ÜʲŠß§ÆÌ:s`ž®"ôѹûÔ^€‡wsÞ¼pݲq²®"ô÷X¼J¬c‡NðàÁ'''---ÅÏ¡bè{ß~ûí!CŠŠŠvíÚÕÍ;üB¨ªªš;w®µµuYYY¦løô隇óññÑÓÓ{þüùÔ©S “)ûuÊJƪJÊJÖ¼¾ë2hlãÉZˆ=p£ÿl ì(R6bW…?åAÚ¹›ã-w‘þE¤†|†wÈumßMØ~…œyÿò…"û9[Ê` f?å0„W´ƒ¦o ³Åk';îß¿¿xñâ³gÏvhë¤êùÈ‘#lõªˆúœsöÿ%"&•J§3X\D°uË.Rn %‡\R’6‚“ë³B‡¸ ¶qiCwðAwò5÷Û~™L¥Ñ,A˜™{`}œp³®gËøΕêB]–^•z[>}úäää´}ûv)æ†(³fÍ·ig»d…ZƒÓVó!ìžM½¹Œh&Z|nÁéüÊ[âœÞj $ÑwLá×›­_n[¶lYL·ªM©E÷˜~¹–Ëo;¬ãóƒ‘2ŸÒètA=UüœRRB&“KJrvûòÝR¢†(AÐÅÏ°“ˆ« ±îízs0'33³_¿~ÉÉÉ /ÍíMÖ¬Y£¥¥µuëVÑ“ý}7 š–wíð²éæzz.3·“™ ¡§[ý\¬ì] VVco( «×Æä–Âý€þWõºó;J Y5‹`n¤§éžú¸L00.&3°ö€ÊŒ´á`Ð_BêmÙ»w/ÇÛ¾}»sC”Ó§OWWWµÙû¬¸ Oqt„n¦Áøߌ))fIYå4Â+Zð@ICÚøcùs‘xÑmzI¥ ›Ê R€ õ0@³‹Ûé´`Ïž=.\è ™PQQ¡¯¯êfjj < ûõ×_å­ô)..¶¶¶^¿~ýÎ;ešQçê˜ IDATWVV~ñâÅÞ½{‹ŠŠæÌA}NÀ®]»~üñGWWWÉ-I—ÆÆ&ô—ßvÔ–]z¸Œhv~ß:¿vFzzó÷ßaƒ¢Šœ$ZY++×Íñ/2žñMÄx›ŽÀ{°ôqÔF«Z 4b½Á7&NœxäÈ"‘ØqhînVpþüùˆˆˆ‚‚á“åòc$—[Gɼ4½âöž…aêé®q4Âb±X\½8%%s‘N¼•á1A³¹\zINlx0®8W«  õï…XoRÁaôVãebSo%¾¢¢bÏž=gÏžýöÛo¥šͨ««ß»wïÒ¥KëׯïLxkég7¡ªVÝÛ·¥4ø3~Xí;ÌÜÿìú±€¾*Jª£þ‰:Ea+ª©©UÝ?`?ÂsùÅ;“¥Ëh€“ü„ òØ–Ÿ,]lzút``àáÇïÝ»§­­ÝCQÒåúõëÏž=z!666ÏŸ? ùÎö¿@jjê¨Q£Ö¯_¿nÝ:Y§uðàÁƒŠz!§Nš5k–««ë;wd­4à5T[žã1¸›®>c1ÊSH-ó5Ù:ñBi㇀QGèj‡¸ô’œäÌð!êÐÉå•ñý¼rJ“é¥O{7nܸxñâ .,\¸° Ѥþ~±}ûv'''áqê×ë躎š+Áéè†Ó&qAÎ-3€ˆâ¦–ïAü1vîN˜‘ ßk•iH êwbÔÎb‘}ÆÌo5ò 6õV {xx¬^½ZêùЖ/^˜˜˜üðÃÛÀ÷â"3 ¡ó·¼°p%‡éœöÒÛñÇ‚ u;@°¥Ž¨ß,âÝÅ´tÓBN‡¬Zµ JJJ:ú™A§Ó ‚——WÏä}=zTSSóï¿ÿ–·"|¢££uttV®\)“zÙID‘Á¡×9Ô¤0‘¢à[vD°yÖ1Ê»Øeý\#2P'EIþ¨7ÓV2B÷sÂ-I‰»ŸYʤh2ã$Ažõ&e°d¾2§²²ÒÝÝÝÎήMLúæ]º{÷nôG½€î-`ÉwØ„߆sËìÑÓèU‡ wv­ º§€…+5ýÂ]Üø6nâ^Z‹XRo&""ÂÔԔÑÉrݶÔ××@ÿþý;‘"—’p1,4ôØ¥T*5ç~ÊSôÑH&ýu04,<"¶Îc”dÄ%ðW±hOÎ… ;“ÊJH‰K.ä/DCóç.å ¤„rþÐ$·$åbXhèÁðsB‡Ò ê£æÀ·DDŽx<Þwß}gjj*-oؽOccãüùóµµµ…CÏ_"555£G633ëÅu¢¢¢ÂÍÍmðàÁ<²hÆ] ´#ü ˆˆIA…A`.èˆÐÄ7w”$×"müß ÝÏ]¢ÑƒéˆÈ¦T‚®ê³=ßyRaÿþýZZZ«V­êÞ¾R[ˆ)Ê“'O¼½½óòòÌÌÌ ‰YLº•PVÉS6²öž2N誩45æþ“ŠFDÉÊm’ßS`Vd¤—án§x¥©÷Þh'Úë0rão>,©B”Œ½¼½íøCó슌k¤ŒJ®Š…£×䱶j¼§©÷Þòc„Ô ¦¦ÆÆÆæÒ¥KÞÞÞÐ[p¹ÜiÓ¦UTTÄÆÆ<¸×Ò•5/^¼ð÷÷WSS»yófýOȉ´xñbÇËhÙqüøñ;wNš4éøñ㪪ªGèuŽ;¶sçÎ1cÆÐÒ¤T=½ÿ°ð]£²‘µûd_g5AÄÄë7òË”u<}gØö1þï„îç&k?x©4Øsø EÎCOµÑΗ}¸ÏŠkT†øM“ì;¯‡‡Ã-_¾]û%ŽõllÉ|¯¯¯ïåå5uêToooÙí@Ô–?&%%ýõ×_¹¹¹4ÍÇÇgÉ’%ãÆë0"‚ Ë–-»}ûö½{÷lmm{AU¹C&“}Z[[;xðàQ£Fùøøx{{·»¸Ìè s'OžÜ¿qqq'…,@ÄÑÑqöìÙÛ¶m“—=áÕ«WwïÞ}ôèQNNÎóçÏuuuMLLheeåàà`bbbddÔy5uuuhG²°°°¤¤äùóç¯^½ª®®¶°° #GŽœ0a‚™™ÙÞ½{7mÚ$qàÀwîÜ錷ÕK—.ýüóÏaaaìŸùÕðñãG6›Íf³9ÎÇUUUUTTÔÔÔz¿Ùÿx÷î]ZZÚ£GÈd2…Byûö­®®.úReccckkëèèh``ÐkÏ÷âÅ‹üüü§OŸ?þüåË—ïß¿733spp:t¨»»û!Czó½-½dîÀÝÝ}Ø°a‡êäÚòûï¿_¹r%??ÿ3ìt•¦¦¦¼¼< …RTTTZZZ^^ŽvÃy<‡Ããñ}úôQRRRRRRVVþæ›o>|øÐØØÈår?~üÈd2™LfŸ>}p8œ¶¶¶¹¹ùàÁƒmllìììB«dT pÛŠÖÔÔüôÓO{öì錞iiiÓ§O_¾|ùü!ý\ÀÀÀf³ 322***Þ¼yóæÍ6›Çãuuuõõõ ŒŒðx¼–mmm===´())‰âr¹hÃihh¨©©yûöÿìy<”ÛÇ¿“}ËT(kBÈY+ŠD‰ê¶j÷«î­´éV·å¦´kQ·nZµ¨nÅ-K *$CY²¯ BF–Á =¿?\!fÆÔyÿÑ«yÎù~Ï×,Ÿçû|Ÿóœó¹²²²²²’J¥R©Ô¢¢¢’’’²²²ŠŠŠššIII|f‘ººº––ÖرcÕÕÕûoáÅ^0prŸ››k``ðüùs}ýÞn–Ñrrr 95ú€A£Ñ>~üXVVV__ßÐÐP_____ŸÞ$%%I$’‚‚¾³(38::†„„ÀСCEDD,,,XÚ&;;{òäɦ¦¦×¯_T_}ĉ›››¢¢¢——444äåååçç•––âUµêêêšššÚÚZ†Ó𪚀€///þ’Á`à»â 2DPPPDDDTT´©©IRRRAAAJJJ^^~äÈ‘ŠŠŠÊÊÊ#FŒà‚¯wß nϾ}û´´´82/{üøñ6løq0yòäÞ™çååñòòŠ‹‹››› œ={–UŸ?622277<´?*‹-úã?zaøõëWVUUUQQßhé²›««kÛú\›×»ïžíÛ·2dà¯ëÿúë¯OŸ>1YøñX¸p!¼zõª°°°æJJJJJJÚÚÚ•••aaa»víêPÍï))©×¯_KKK äó!!!¼Â)..ÎÁ»ŒýÇ€Ê=@¸víÚ±cDz³³lÐÒÒÒ?þøãâÅ‹?äç×#Ÿ?Žˆˆ|¹^°m۶¸¸¸‰'ÆÆÆþóÏ?³gÏnjjbÞ¾ùŽ±±qbbbÏ‚Ý ômb]]Ýõë׫©©Íž=›U[¼šÆ|ÑçÁƒîîî&L`u¸ƒ… 2 (// ,,,TPP`ÕɲeË–-[†ÿ_EE…L&ÛÛÛ[YY=zôH\\œy?'NœPUU4iÒµk×Y @ôÌ úóÏ?ŒŒÚopÈ$‰‰‰ïß¿oÓ&™5kÖœ9sXëÇ -µÇÁüëׯ÷Ñ­„„DTTÔܹs ÃÃÃ;lØ=k×®URRrssÛ»w/¾ï83 ÔÉÉÉÉɉU«Ë—/WTTtØúÑ [·nåááQPPhjj2d@¸qㆷ·w/üðññÝ»woóæÍãÆ 666fÞÖÉÉéÉ“'ŽŽŽ999œ˜‹@ül hí¾`öL™Hlll† &**ZSSÃ`0ÄÄÄF]]]Í.ÿGݳgÏ”)SY2422Š >}:^kB ý ’û™yóæåçç'%%YXXxxx$%%eddhkk³qˆÕ«W߸qcùòå'Nœ`ÉpäÈ‘ñññT*uüøñ•••l @t —É=§C@tƒƒÃ³gÏ>¼víZ– ÅÅÅ_¼x1zôh##£œœœ~ @àp™Ü£ì~p¢§§>mÚ4:μ!ÏÍ›7çÍ›gjjúúõëþ‹@ ¹G°yyù·oßÒh4SSÓÏŸ?³d»ÿþC‡988ܹs§ŸÂC Ü$÷_¿~Er?˜ ×ÖÖ600ÈÊÊbÉvÙ²ewïÞ]µjÕ¡C‡ú)<â'‡›äe÷ƒÿeË–?>::š%[[[Ûèèh___wwwtŸ`;Hîìg÷îÝÇŽsrrºqãK†ZZZoß¾‰‰™2eJ۪˂- ¹Gô ‹/ \¿~ýþýûY2>|ø›7o‚‰‰É§OŸú)<â'É=¢¿˜8qâË—/Ï;·lÙ2–Š3BBB?611122JKK뿈Ÿ $÷ˆ~DCCƒL&'$$ØØØÐh4æ ‚ŸŸßš5k,--Û/ûƒ@ z ’{DÿB"‘âââŒKJJX²Ý¶mÛ™3gfÍšuùòå~ øyà&¹G1¹AAÁ°°0+++##£””–lçÎûðáCOOO.ÝPvì3†äããÓÐШ««{ö왇‡‡¤¤¤§§'z ëGeçÎBBB`llŒWØ»éÜÜÜ\SSS^^^XXH¡P*++ëëë»÷ìرŠŠŠ›7oîرNŸ>ÍÆà^NÀHîNjkk۪𥥥!!!_¾|‘èÞJDDdìر¡¡¡ ffffffNNN¶¶¶/^\µjUÿGhxyy7lØpäÈ‘¤¤¤ .`–žžžœœüáǬ¬¬²²²ŠŠŠÊÊÊ/_¾Ô××766 óòòòóó7773 ƒÑØØ($$$***)))-----=räHuuu---¥K—nÚ´iݺuµµµÜ˜ÚÃ0NÇÀ,Û·o/..¾rå §á>f̘aee…_Šr ƒD"µ¿é*''÷믿nß¾½G[2™ljjºÿþ-[¶àG¤¤¤$$$òòòú+\çÀ0,>>ÞÄÄFýñãG11±‘#Gªªªjjj’H$999999yyù¡C‡òññué¡¡¡áãÇ ¥¸¸¸¤¤„B¡¤§§çååQ(”!C†H¤ììl^^ÞÈÈH33³ÿû Ê¼¼<ƒØØX‰ÄÃÃS^^^UUåççnj܉Ľ{÷ÚÚÚêëëÀªU«Ž=š˜˜ˆ¿DüP(”»w…ÅÆÆŠŠŠÚÛÛY™››ãµæ!BBBjjjjjj[‹‹‹Ÿ={¶lÙ2QQQ))©‰':99ÙÙÙ±:§à¦ìþ÷ß/++»té§á>¸7»Ç©¬¬ }òäÉË—/?}úD£ÑŽ?®©©‰_€Óét:ÞÔÔÄÃÃ# Àߊ€€@ttô®]»øøøøøø†nooïçç7eÊ´V>·S\\ìççwçÎÂÂBccc{{û_~ùEQQqÀˆˆˆ zöìÙÇÍÌÌÜÜÜfÍšÕåEÃà›ä~ëÖ­ø(Kp‘Üdeeåççà—ÕŸ>}ªªªª­­­««Ãó/^^^™!C†ðòòâRŽa­4551Œ¯_¿ÖÕÕÕÔÔÐh´ÆÆÆö£,X°@YYYQQQIIIMMm eÑš››¯_¿þ÷ß'''[YY-[¶lÆŒø„NQ^^~îܹ۷oO:uëÖ­cÇŽå`<Ý€Š9N’ššúæÍ›ÔÔÔôôôÜÜÜ¢¢"¡C‡>\NNnĈÆÆÆÊÊÊÆ “‘‘!‘H½¾j®¯¯///OMM }ÿþ½ŒŒL^^Þ«W¯JKK?}úD§ÓGŽ©¢¢¢¡¡¡­­mll¬¥¥ÅÞ¿ÑG¾|ùrêÔ©sçÎIHHüöÛo‹-ãtP$içÎ;wîLKK;{ö¬µµµ¶¶¶§§§““§Cë7e÷[¶lÁ붜„û<Ù}QQÑóçÏcccÉdò‡ÕÕÕÕÔÔ455utt H$ÒÀGU^^N&“ñY999>|hhhÐÔÔ4000558qâÈ‘#>*NCCƒ··÷éÓ§õôô¶nÝjggÇ鈺ƒF£:uêï¿ÿöññTÑr“ÜoÞ¼¹ººúüùóœ„ûà¬ÜWUU?zôèÕ«WUUUãÇ·¶¶´2ZTTƒŸ–$%%ÍÍͧL™âèè(%%Åéè~"NŸ>ííí­¬¬|æÌ===N‡Ã¾¾¾ûöíÓÐÐ8yòä ‰œ›ä~Ó¦Mµµµÿý7§á>8"÷™™™W®\yøðannî˜1c&Nœèàà`mmÍu9 Ã"##CCC_¼x‘––¦¬¬ìèè¸xñb N‡ö#“››»`Á*•zôèQGGGN‡Óêëë½¼¼Îž=»råJoooÎÞcôT-‚í¤¥¥mÞ¼Y]]ÝÄÄ$##ÃËË«¢¢">>þðáÃ&LàÆO@ L˜0áðáÃoÞ¼)//÷òòÊÊÊ?~¼ººúæÍ›ÓÒÒ8àÈÁƒñJÚ‡¸Të@HHÈÛÛûíÛ·Ïž=ÓÖÖ&“ÉœÉ=‚=Ðh´'NèééYYYQ(”Ç———ß»wÏÙÙ™[f%3ƒ³³óÝ»w+**Ž=J¡P¬¬¬ôôôNž<‰Vac 3gμxñâÓ§O?þüäUUUß¾}»téR[[[F‚äÑWòóóW®\)//ïÞ=’’’€€ŽOëoxxxœœœJKK=<<îÞ½+//¿bÅŠüü|N‡ÆÅÔÔÔùòåýû÷ÆÆÆœ‡lݺõÞ½{‹/æà¾(Hî½çÇÎÎκººMMM¯^½ŠŽŽ^²dÉ Ò„íðòò.Y²$::úÕ«WÍÍͺºº3fÌ@ž^ðéÓ'qqq--­ˆˆˆ銰‰'æääìܹsáÂ… É=¢7¹ººŽ?^YY9;;ûòåËcÆŒátPf̘1—/_ÎÎÎVQQ133sqq),,ätP\CQQ‘‘‘‘³³ó­[·úégžva0êXluۑ̈@ryS_ýÖ¿ýŸAÁõ\}UTT222Þ¾}»hÑ¢¾ŽË:Ü$÷h½ûÁ@SSÓ–-[ttt¤¥¥³²²Ž?Α™òƒ‰tüøñ¬¬¬¡C‡Ž;vË–-hÉ婬¬´¶¶^²dI```ÿR[žó¥õãHúkºº­KÀû>oyÖX›žE9ÕL~ÌÒÒÒ ‰‰‰kÖ¬éëÐ,ÂMꉲ{Žóüùs55µØØØׯ_Ÿ? ý÷ ‘Hç΋‰‰yóæÍèÑ£Ÿ={Æéˆ5 .3fŒ——W?óÍS¸ô/õ@ísíQD@ ˜w$""zçÎ;wîôutVছiHî9†aëÖ­»qãÆ‘#G–/_Îép¸MMÍÈÈÈK—.Íš5kÞ¼y§OŸF_àÎìÛ·/;;ûÝ»w¬1òj‰š#IwŸ¦ðËëÚŽ#6iŒ%%?ü÷}… ŽíT!ËÊ IDAT+u(NŠˆI®n×±*((Üf_žŸ’œÿ ^½Îf¨®„'.u‰OÒ‹ä4&ÚÙŒþfÐî[YCAAáÖ­[sæÌ1005jT<±Æ=¬ZµÊÃÃÓQp%Ó§O?zôh¯ÍKJJÆgllœŸŸÏƨ~ LLL ‹‹‹9Ëà"++KBB"))‰53êsƒoulá’·Žö–auþîÚogT†}òüæØÆ2 cä=pí°a‰þªÈ²–»k¥=w‹CTÖÿ|sssÖíz *æ z ??ßØØXWW7..­Ù;bbbÆŽ«¡¡Ñ~«ĺuë–,Y¢««Ëš™ oùŸ¡»çz ¥Å“Fà¯õ§þo½«®ó±©Uw~u;Ÿ ºåêËòÃõVíí%W“ŸX4,èì|ÅÆq»!?ü侫ißm¦=·Øû¥ïyxx '$$ôÝÕÀ›7o¤¥¥ëêêX¶Äj€}Qø8o[‹C­éx¥·>ÀÚÀ‚V›´õÊ-Ù=†aX¢ ì‹iÀ0¬*öO¥U)ô¶!^¹ÀQò—î[û’ÝcvõêÕÑ£G÷Ê”ePvø.iiizzz ,8xð [²ô¶þ…‹íúÛÙÔî{}»`~/9~üøüaooŸ’’Âw\Ζ.]*,ÜëøKéö¯Í&Z´L¨ÏIH€ ³&(´6jÎ_iÒ¾3½ŒZÈx f+iµÝo2óØmä·ÅÝ·ö6øÜÜÜCBBúè‡ЭZD×TVVN›6mݺuüñG÷=«òSÒ ALs¼¥²$’’ËPÑV¨ËÏÌÃ$U•IBPUœñ©qx·Î¨‰Ñä’þ1f*‚¢-‡Ê32°‘êüc_§U È*Ž7Ñj‘5•œ\ð¹Vt¸–‘¢pËXÊ$^(ÏϨ©–[p´²Ô¼*y­ÑDFyù}îçÆFQ©QF¦£…*ÒÓ«yyUzÊDa¨*NIH*lÓo)' P H¨ÊO|“VB—Rgª.Óë7vÛ¶mÁÑÑ1!!AZZºgƒ”ºººˆˆˆãÇ÷Þ…Þ¤QÄo˜™¨¶ý_@S¡]u‹iq]zâ—Kõo ˆ@rV)¿Rw­½¿• œ?~Ú´i}wÕ=Hî]³páBƒž´ž¶gšÃŸOÛ^ï/øUôŠŽéî‘_öZ‰7e^SV_ îb×]ÊÈkžy#î{ÏÆ׿v6¿Ö=P/ØklÏowÔâ%ÚS®êÅ,ɉ÷Ú,~>éWuãÐ1?G€û•5N‚#™þPŸ’þvÒß(S÷\:xÓè_|þs¥·-/Ñã¬Áê\¸¾L%ú#5'ù€³Íö[{¨ž'“WjÀp€VŠ;Z:ŸŽüÕ¨Ûw¦;~ÿý÷ÄÄÄyóæ=yò¤×N¸ÿý·¯ûˆ‰ t¸.k{—NøPH¥ÖN”Œï>êŒOÊŒ‹§€eÇð8CUznw­9½Œ¿••+Wêë뀾¡b¢ üýýSSSoܸÑ}·Šˆ=>Õ]w½ŒŽ1Ê^¯×‡¶‹T]\‚ÂS 3*àFD&GßØüë¤ï8cÜñ˜u TF•`Xm¨÷ €Á‘ z4¼€ŽU†îž /·²ž»à›Ò„aXªÿRx¹õRÂh÷õÃáÂó|(Ž{ü,¹€ví ,XiÄÿÖã°8”GÇ0 Kô_ InÄ î/¾k ³îA]þNÑÔs6Ûÿ»òzcP;@ŽûÒ+õµ ·!†BcPßoµ‚ ÃÏ™y„²®]»–}áÂ…¾¹ábÂÂÂ&OžÌf§„ÖG„4 õàExÌçÖ¶º÷ou¶à€‘º:ð$ðQù-ïù…€œœp÷­}ZIIIZZ:22²ï®ºÉ=¢# žžžÿý·  `÷=Ó£æ\>º€Ä¼¤ñ.xöNvŽ;$ûGT#æþ{B.†’—wra‚“áÅZy^fff~~~FF~9­6'¾VœØd9@d궋jðxjÖÙd£À’fØÀ—º:Qi9¸¸{³_ÐKaûCÔ:úqs§e>±ÅPÿ,øu>Ô¿¹kçÛðòjžIIH¿í>´Ž’™›ù±é ^¢´(€Ø0ia€”È»†Ç/ ñ¯Ü?òÓàs3ð‚íΓ{Lå„x‰:sÇAáÛܾ-ÉÏÏïçç·}ûöŸvÍ÷ïß›››÷›{É©+œÀËv–_\ƒVöïž…¿†uÑïeàؔى³àåÖÉîç2ªh´òäãnÓçÀéî[ÙîرccccÙâªÜ#:âëë«¢¢booßcO~ Œ”[ï_ éXXñä àß×™ a÷`×íÛ‹ 'âÍ»ðà;`ïfÔ®–»_E]]]YYYCCyÿó7/A^¨í¹ÇáúúÐvóTG¢å¸Æ8|B¬ÃïþžÎI÷N¸Ï´T:TÖ.rȘMsˆˆ~÷*ô/XyéÚúáOBb’^<É… ³Ì†ˆÐRïÏ——‘¡®=þ—í7Ûÿ-5 ЪRü-åôm§™*òâÙ}kæHo ”UÒYxK»ÄÆÆFSSóĉ}uÄP(”Þ¯³ÔH/€¢Æ¶u è¨o÷¡è­¹pÆ^¸›*ñ‹ sþ3?ÞÖ‡_€G‡—×qOä5»uXàßj I‘¡c7^{ êãgJ궵S0½@UU5;;»˜Õî¹téÒž={˜éIo$@a^®áM¹ï£¬é c6Ý ŽÞ·7&¬wtÌw7¯õÏÈ°ü–mûK_•1!Sêa¸±æ}xOhhmd”VdWƒÖâÍUuúËüèû.e’žÜÿkãáƒK|œÞïÕuq…íËŒ‚åöüñpr¿GYØŸ5"BSþ%­_ö+Mý=|ÿRõÑÉ{‰¦»p‰1AzC-@smëX§Î¼‘úõ×Ãàï|ˆu<<<<==·oßÎg܆aÕÕÕÊÊʽ´'êyùùæòë‹´О}ø´xŽjûï×Ð5wkÇ]º–òùs½ìÄ¥f †Ü"Öl飷æŸpþKO²Ê%t$d,·ä”Ù_»à7DRÕÌç/˜©NlQÈîZñ`ÄôD ÷(((|øð¡˜c`æ{²77·íÛ·s: ®„ùy÷ÒÒÒLº-Z3á³ã‹|\@õ>…aµðiɇ¨–ê7&—a†Åykt5ï¾Öß ¯¤Ôc–´Ìv¾ê8ŸöÜ `gTEônÃûyM†aåÿ¨@KŸüÛø²Sª £ÜÅ„\q+ k[½6¤Ã0 ûtf‘<à³éiñ®xí¾µOË_Äøà©  ¸·¼uP<„8o€ ‘T «Ë  I.c0ùvu ‰DJNNî‹n„F£ s:ŠAÄÅ‹'MšÔߣ bâÔP‚—8?ƒjò0<ç#C`½†íôÉêD’ýƒ¨à>m%ا“kå¦È¯Ñ]ꇠ»Êéò[ÏMŸ¬M‰}^"% ²öÖ[ù2&mLáE'›,¼…ÿEf3g™Ê c>(‚ö’‹Á–BfDž´q·òñJÖßäöhkkÿ„\ ‰ŠŠ ´¨*NEEÅ@<„Ñß—ldþüù»víât\ óÅ;;»Ó§O÷w,ÃÅL˜0áéÓ§=÷û ¨ªªÊÎζµµíïÜ#¾AQQ133“ÓQüD¤§§+))q: 0{öì„„f¯lê_O#tÄÀjq`FC/ZU ½o³´›Jÿ §§'"Ò—™œLäñ ÉÉÉlwûæ€)AñÓ ”ùø»íÝTã½ëŸ*¨aM ì«î®÷ æÝ»wzzzœŽ‚ÈÉÉikkûùù1×^ S¿zëÖÕ«Woݺåã¹ 1ÚßEcq*ƒ¹VËU§ýNŸ>}Ú{÷º‘‰!;æêÍ<ý¾ßþ8Ö¸råÊÂ… b¤þ¾9ÀFfÏž½oß>NGÁ•0«¶¸¸¯&³7€ï̵ïZì6ÕÈnWAÛ-°—ŠµÎÄdÃbôƒÁ(((è¹ëÈÝ»wUTT˜êJ{n`¶?¾ý±ÔÓNp>¥žåVÆ»õú0!˜‚a†Ñ+Sb#CBB"ò»úÒÕæ¥çÕÑ+ÉQá!!áÉZûãt¬6%öiÛñ²”ÈÀÀÈö,{ùò%‰D¢Óé=wí3h"&âdeeµ´´.\¸ðÛo¿uÓ‹ÓÊ3’Ó?~®M#me FFf)1?9KGGMR€Q_RC®Ùºò0’_5  ä}~…Ù°îV'îg×#â0òcÒJjù¥ÕÌLÔZ«éŒÌĘì’Z~1%3Ë–½IË32#GBÞû¤‚JQE}+­våûΡvË… ÔÕÕzìùCâêêºk×.__ßµk×ö¼´¼@UL¤ë-Á;´Ö4´[`wì“ž´Ú—]=M˜ÜaiUJ´§\{GUñ6sÛØXpÄY¡ÓqÕEîj×Î?Â_0¿fêÆ×­[ÇÇ×çÒ™aN)ìÂÕÕÕÛÛ›ÓQp%,íf ¤¤ôõë×ï´ÓCw³áþðüaT<ÅfdœXpð–MAgÞø^vŸòÍúΧã«â¶µ½\^AK¹Ô~×9»]èí9´õ€jDñ ‡o¿ÒΧã¿g—#b†1>xê·;ª·-Ža´øõí*­Š¡bmÛ$µ1rá%<%ì2ÔîQUU½zõ*“ŸËÉ“'OH$RUUUýð£¬Ü|p¼w­_d ¸-‰V+è¸3#ãÌ¿šéÿ ´_Zµó¶e¸s¥U T c|ØmsêZëmK 2ªÈgU&ÜJ)gÔ½ßj ¸· ë™Ë—/+**6662ÿŽõn’{—p: ®„%¹ÿúõ«¦¦¦¯¯o—­åáÛ ý¢Ç"Ê“][Q­K&¬ÎÀZ–1Ø^ò¹¯ôÖPÜFÁ0 ûä3§Ð±â †Áy4 ËYJ«") £GŸ™ ;Ã+0Œ±[·åÑ[~ÌíW'Æê2Îp*µË#v›À–À4¬uýçóÙAë‡ÀÎÀ, Ãò£«ÀÌt¬ÒÇT†—`=Úg:´ì÷½P¿Ë_ý5zô覦&&?——žwÇlÝ­°=öÞÊèLµv–ûÖ Ï«â  çêq>0:¯¬ŒZ×éM{n°¶õ£¤µe6ßT?yë¬xˆ÷Idj{NìãÇ$)88¸§ŽlݪEt„@ œ;wnÏž=%%%[ٺ豀„(@Á­[O„ÆUürµ¬Ž~E‹„¥‰ FjÊñ`ìt›áµé‰‰™C í ‚¢’øD0À$‰­WÀW'î2ÎÇ 5]X÷ fÞØï¬ j3þˆ ù}2–ø VÞÝë< -·øyŽÀ€ØzBC-ÀŠ›l†ðYl8îø:÷û¡vͧOŸvîÜyæÌö}t\Éõë×ïß¿¿sçÎî»Õþ'Ùµ>Ó ¸´±­Ó}kgêßGEØXªw¹´jj@ÕnlË#¯BêVв\˃Äÿžk%ŠÔÒ[v¬m‹a˜†>€ ?“¡â`æää´|ùò˜j=øºÿþ™3gBCC»ïÙº:¶È¤ wýÉ¿?5{¥³­ß> ÷$à€ªêHbËÒªôʔا>ž3óÃ.ñyÝa\ä$å´|ðõoÈ€õµÔîææfllìííÝG?,äÑ5Ge0®®®Ž·-zŒƒ/z -‹'Þ·÷L°utœì ¼Öï¹Ë—tZô8$<<<<<$Ü}¬0•>ü÷»iuÔܨ+îŠ;¦ÞÈl]™øE‡Àü«ÙF¯««£Ó+Sb#ÿ^ªÕcðüß“ÑÕˆ5_j!9¯mÓQF¨Ï®3ï‡ÍRþf?rz# !Ù¦ãÔ‚D€:K¡Îž=›——wÿþý=þ!? ÚÚÚ , d΂oÑ©ë7¯/gªµèSqyUyyyq~&ùÚž™Î'SÁeÇl%ž¸ãt4ìƒ)âZ&¶¶ÌWiéÎÈŒ Ë“Q€¿\.øxîÈVG#qüx/À0ÌÑÑ1##ãÔ©S}m7`e£¾3}úô#GŽp: ®„¥Ú}T*u̘1ºººí²uÑã´E`q¿©•´|Sê«bÿP½šR…1Þ-ËmÉuÖz—ŸQçm°1¹î¿%‘qm«wgPqjW#V¹Ë¨ž'Á0¬Š|ÌN'Ü^†øAFÞ]+Ð=Dm©Ý;âk/'ú/€å· » µRRR«W¯þüù3«ÇOhh(‘H¼téRmÔÇ*#¶¾ªö'O€eXû-ûžãëiã!mn©éWî€Ö¢=‡lëòVmSS“‘‘ш#z¾;Ýp“Ü;99õB³XoåÃ0*•Š/Ô×n¢Nå…Eòí¿ýó}[D Ÿä€—P)g¡E1ìû?€Ä3N¸ÜÙÔCeF#šío›H£Ú2Úê|§YüõíOÛýê°èÝšªO©ß³Ë1êsüT¥¢‚ÿö'Ôaå±Ã·B^µÈ}»\Îâã÷Bmãëׯ“'O&‰6ƒëÈÈÈ€E‹uj©Œ ŽIï ‘µäðàðX*­ámDÅ&ç}óMdP?ùûóö9}54Šï^@ψ ~›IÇZò‰u·"Bü}ó‹L/o1£Š oëŸÜÖDÍxžÚy^VEE…‘‘‘¡¡á÷§½õ/Œ{–œvrrš4iÒ† 8÷1cÆ ++«M›6õ¶¹¹ÙÊÊŠN§‡……ÉÈàsÉ™Ñ],z Ué¡/ŗh“x¨q¡1ªãðÖªÌØWEâSlÆt.y§> }‘\Ý( ¯aîä ‡W~òãB¢’+å ¦ÚÈЊîF~¤䕧;[´Þ(‹z”W-¨ckQ›ôa¨™5¾µPU~Ì«¡‰6¸Ÿ®ãìrD`P"ßP2*ºÎ.“H|mCßQjÅT4l§LU–ê©[¶ÿ\±«{þ¦R~ÜD'½¶jÕwBøüùó´iÓ† òôéÓx\ž{ÉÎζ³³300¸råÊ x£ê_X O´Žü²×J¼/nâãã]\\lll.\¸ÀËË¡ž8r’éÓ¦M;~ü8§£àJzÝã0 ww÷aÆ…„„°1*îäÛݵ˜#44tøðákÖ¬˜‡'¹êêj{{{99¹Añ}Ë6QÝͩ탱aà ‰ïMn0¸ì©Z´2Gàååýûï¿­­­ÝÜÜœO:õs.âˆÓ˜ɶÌnLN£ÑÖ¯_xâĉZ…û »~ýº›››££ãÑ£G[/+9qb,¥L„Ô˽G¢¢¢ÜÝ݉DbBB‚jk™Sp“zbhfG™?~rrrII‰ššÚ•+W8§ô(£|ÚfÁL׫W¯ª©©Q(”÷ïß#­g•… ¦§§WWW5jÛ¶m F§ý.>’I˜õ‰—iiiS¦LqqqYµjUll,ǵÜ#XBVV6$$äôéÓ{÷î522ŠˆˆàtD€H’*ÙÃeñ³gÏŒŒŒöìÙãëë*''×}D—ÈÈÈÜ¿ÿÅ‹111 {÷悥Oß½{7wî\333mmí¼¼<NGÔ’{ËÌœ9333sÎœ9óçÏ·²²züø1§#D<}úÔÊÊjîܹsæÌÉÊÊrqqátD\žžÞ‹/®]»öâÅ …•+Wæææöl6à`bnn>qâD‰ôáÃ11±ž- $÷ˆÞÀËËëééYPP`oo¿téR==½óçÏ777s:.ŽÑÜÜìç积¯¿xñb;;»ÂÂBOOOŽMÀø±µµ}öìYlllCCƒ¡¡áÑ£G¿|éy¹‚€L&¯ZµJVVvíÚµ3fÌøøñ£¯¯¯¬l_w:c;Hî½GPPpûöíEEE¿ýöÛ¹sçdeeW­Z•––Æ鸔´´4ü§þ×_­Y³¦°°pÇŽ‚‚}ÚÀñ=444®]»VZZú믿†„„Œ1ÂÜÜÜËËkà¿ut:=88ØÝÝ]]]}Ê”)t:=(((77×ÓÓsÐNdà¦ìÉýà„‡‡gÅŠ+V¬ “ɾ¾¾–––Æ ›>}úâÅ‹5559]ñáÇ«W¯>|ø°´´túôé¡¡¡FFL­oŽè;‚‚‚Ë–-[¶lYeeåÝ»wƒƒƒOœ8!""bhhhjjjii9nܸþ¸´ª¬¬ŒŒŒ|ùò%™L~ûö­¼¼ü¤I“Nœ8aooÏÒÄer&bf ._¾ÜÔÔôàÁƒ€€sssgggGGGssó`éÇæææW¯^UTTØØØìÝ»wÆŒ¨hÃ)¤¤¤ÜÝÝÝÝÝàõë×ÏŸ?ùòåÙ³gËËËUTTG­©©9vìXYYY999æ?©ººº¢¢¢üüüää䌌Œììì‚‚‚²²²Q£FΛ7ïæÍ›ƒ°\Ó=ÜôT­ÍܹsW®\Éé@¸¾|¸œœœ¢¢¢ŒŒŒ””””””ŒŒŒ´´4‰Dgj½ªêêêòòòÏ­TVV–——R(”ÒÒÒŠŠŠªª*qqqü|3f̘9sæèêêŽ5ª?ßÄ ‚@ংvArà0£F5jTû}Tètznnn^^^~~~QQQAAABB—/_jjjª««ëêêêêêèt:O+¼¼¼<<<üüüt:½¹¹¹¹¹¹©© ÿ??¿ˆˆˆˆˆˆ˜˜˜¸¸¸„„„ŒŒŒ¼¼üøñã•”””””TTTøù»Þs ñ3€ä~‚äþ'ŸŸ_CCCCC£ûn t:N§766â÷¼WDÒ IDATÙÚn¾áÿ¢ÉïˆAr?HArh   tDßùyäž›¦±#¹G ìå§Êî¹Iî¿~ýŠf:#6‚ä~‚²{Á^Âׯ_9ÅÁMrhÞ=`+(»¤ ì@°$÷ƒ$÷‚í ¹Œ ¹G ìe÷ƒ´2`/Hî)(»G ìÍ̤ ¹G ìe÷ƒ$÷‚ ¹¤ ì@°$÷ƒ$÷‚í ¹Œ ™9‚½ ì~‚²{Á^ÜRÜ#ö‚&b^Ü#6‚²ûAÊׯ_Qí@°$÷ƒTÌA ìÉý ÍÌA ìÉýàe÷‚ ¹¤ b`;Hî#Hî{AÙý É=` æææ@ <{öÌÝÝÿtt4§ãê_Ü#ˆŸOOO>>¾¶—ÖÖÖ$ÉÄÄ„ƒ! Ü$÷€fæ ˆ¾3cÆ YYYüÿ555üüüœª¿á&õDÙ=`gÏžÅ|“¢¢¢7r:¢~‡—Ó°’{¢GÂÂÂh4§£à¤¤¤>}úT\\lccÂépXcìرjjj,™ ¹G ~æÏŸoddÄé@¸"‘øùó碢" ‰ƒr:¨¯¯OMMeuN’{âÇ¡¸¸ØÉÉéÁƒœ„k033³³³Û½{7§aÏŸ?+))±jÅMrèV-`+¯_¿æt7Éý”ÝS(”¤¤¤®¼¼<==몓ý„¬¬¬§£@ $÷œA[[[NNŽ—w€Þÿ’’ …òæÍ›nóþýû´´4MMMN‚@ (\&÷?L1GHHèŸþ3f §ùQQQ©®®ætÄ@ÃMêù#É=@ 0ܤž?R1@ $÷ñSÀµûsçÎ%%%„êêêC‡‘H¤_~ùÅÜÜœÓq!7Ár¿yó溺:üÿ·nÝõõõ­¨¨––æl`ÁEpA1çøñãí—*522Z¹r%Òz` .û•+WŠ‹‹ãÿ700 “É^^^œ @ ¸.{ðòòŸH›?þ°aÃ8@pÜ!÷«W¯=ztRRÒÞ½{9@pƒ÷VíçÏŸ)JMMMCCCCCÃÌ™3¯_¿ncc/(((,,,...///!!ÁéH‚ à¼Ü—––&%%¥¦¦fdddgg—””|þü¹ººšH$ ðóóóñññññ)**R(”mÛ¶Ñét:ÞÐÐPUU…a˜„„„””Ôˆ#ÔÔÔ444´´´ôõõ‰D"§ÿ2Dp@š"""^¾|ùæÍ›”””ÚÚÚ#F(++=zÞ¼yjjjòòò#FŒbÆ[MMMQQQiiiZZZzzúÇ}}}‹‹‹¥¥¥uuuMLL¬­­Ñ$}8¹ÏÉɹÿþ£Gâããåääôôô<¨¯¯ß·bbbcÆŒ3f̤I“Ú655ÅÅÅEEEÅÅÅ?¾ººÚÜÜÜÁÁÁÅÅÝæE ?'ý.÷ååå/^ (,,7nœ““Ó•+WFŽÙ¯ƒòòòš››·%õéééwïÞ½yóæï¿ÿ®­­½páB777‘~@ ý83çÑ£G666***ááá›6mª¨¨xüø±‡‡Gk}g444þøãèèè’’’¹sç^½zUVVÖÕÕõíÛ· @p öË}ssó_ý¥©©¹bÅ ›‚‚‚ððp777¶Å*ÂÂÂk×®MMMUTT´³³355½}û6§ãB ˆ~‡ÍÅœ›7onß¾]RRrÛ¶m , ß%#GŽôñññöö>{öìöíÛ½½½}||lll81ðÔ]ûß”=o:Le®nj9gÙj[u æ»Õ§ž3×>J0hßC™¤i6}Ñ27óïÍ–ëU—dFÖŽu2 õ¤lMï=ÆéÞW>ûþÞªŸhÆ&bbbtuu¯_¿Î.Ÿ†‰Dš0aBffæÀŒ(++›šš:0c!: ¬¬Ëé(ú…£G:99±hTémÙB¨žO©b¾[UìŸßí¢´*Úu½³êLâ'Ø^ÑsWês+Ð=TƬïÁEEE…¨¨(«Vl(æ444¬]»vêÔ©‹/ÎÎÎ^°`Aß}06lÈÏÏ711166>pà@ss3§#B AØR€aôVêòÈ÷@Žû®û Vº(mL¡RËÊÊÊÊÊ(yÉ¡~›U ÿœáòË´nâèU;è_ê€(Ê×cOQ`¢ëC_‹9d2yÖ¬Yrrr‰‰‰JJJì‰3 Æx·,Öý•’‘{½ƒÂ£ü'÷ª»nE§ºãŸÛºµ¥‘(Ïö ‰ËÈHð÷tÆ£J¨Ã0ìSËoSñ­¨Ä”Øû-n-NödÈ*÷¿ýödeeõÎœ+ˆŽŽ?räH8ï£Ü·üðn¥ÕQ?á¥Î”Øà­ø7À7¥ž/qÞ¶°/¶c²ÆtÿEº O$—ÑðCå)÷©èlyÞgÿý ’ûoiù:uÞ¶ä:ºu#Ü-bçr©³¸1gU{a‘<üñ´º­5ÎÛvFµ¤‰>6°/¦Ã0ZÊYÐÛûŸOÆ+«Nr¿³-aÄ»ÀQò—îmiäm Ža†Õú­´sYy0¹£¥œPÚ˜÷ß_³^àhB}7†¬Ò;¹ïMí~õêÕOž<)((PPPè…9·`aamccÃÃóaÃN‡ÓJ²òÂDq¼,H"É ‰'N¶-Öî XvoiK¹ð;õÇÞ:ÿ£¶¦`ÑÖõÚ¤–C2Z.¾~«¯ÙœM>ò¤üðèÒ?Ô%FMá—×:Í‚ÄÝ×@lFÅÚU_¦¾¾,44?0ójÒ}7Ý^vëD^B"è¨*³ô!¶³Yîÿq¹?£¼øcbô›Â’ÜÄבÏƵïLo @#£@@HkU¶ŠA£RRÉ …yä¨ðQ¼ëm[eÓº/¯ÑšÝ¦÷þŒýR˲ìΖODàåzI©©î³fNuœvâÑ a€‚ìL€|rà… ü И•𥮎oØw VÏ^^^ŠŠŠøR”?YYY2227oÞd¯[¶d÷mIMŒ”³0¯¨|¿þÈb¡ó;Xx^ÏmŸ˜Ð?ņG%$w韑÷ÀµÃú«"ñypÔç߶l¯è¶Ú'Pvÿ-­Eù˜ü5£ì¹»rËžBg­[7yz´· °\»ÿÖªìõz«.D¬í‡€_Pþ÷Òï×.z[´Ïî7RÚÕÞ¼;[ K½½±ÃwÙ|Ýõ2 ‹óùî³;xUó{†¬2ÅœÈÈH ‰¤¤$V‡áj>|())ÉÞÊU?É}ë©cd]÷õG ȼ½¤íûjéú?ïÓþ‘ ù픿“,g=Þ[Õ­ØÔ”¨¼òŠ{)XûBª¡»çz ¥Å±Ô²nj }Éý·tõu¢Üm9/¸Ag¥Û÷…; ?7Ì?ÿ¡sÌYÕž™ *Öž>ãÒ˨»Má;rßR9°\¸ÕïVPdB~å±|+÷z{ÛKmtki¨Ûj3bŸúyoqhMUvFU¤úÍ°?›AÉÍh%///==ïS]w†=}Féw¹¯¨¨6lÛó\®`Ïž=šššt:½ç®ÌÑ_rÕúLðM¨ï¡vÉR¡³+bý6uºP]q,¬í[ÝÞËïYiÕÙ"íU[©´Mî÷µþEÝ×@YǾÉý·týuÊôÿ¥EŒZªÛLukù -N~[Ž¦‡îž Ž1]Õ©™²¢=·0 þïYëç:ÚMj¹]Ó€µ&Úmw’0 cà_ªo²{Ãûÿ¥÷iîø—0öK÷¶©þK`ù­Â¶Ö w€)ûãiø¢·­ÝY¤Öo‘€¡oÌ—n »xSº¥ß³Z¿~½……żyó˜7ùaؽ{·°°ð¾}û8HO4å$†Àå‘‚BZ«r0Œþê·ªTrDhÐ…ã»ÜfüÞ¾vٮР=vîŒÉŠ£9XmFlðï-³¬” 禩ëïÒ:ùÏx f+iµÍk2óØmä·Å­‡&Xê´RËÚÕ@Ïœ9sæÌ™ ‚Új }y‡L¢¶è~åe»)•Áb·—_»æïïíšßñžÓ ùþ| óÏ1í¦TݽŸ( áñƒx­*ýÚV—•÷>@ôÛÌoÝ܈M)#@òÓ±ÅõÀ åG_™¡íð2:ý¿§¶\,–„çiªJ?î6å<(n[j"Þ½­¤4.Î]ãW@cÐJRƒï½0±T2t^IŒ]“‹«hU”;{f®¼– ¦¡!Þ!SIßaò´””D$KKKY=Ÿü0$&&‰Ä²2ö¢òœ=”g¢£_Ľ¯¶µoo‚?ÝOKéÞÆªäˆ ´e~xzög3.ÚAmKÒÈÏÏßØ’#;z@ô ÉÙ§¯ˆç1&Œí´í³Òü°ÆÓ¼ZLL’Æ\7‚†ëÕÓòtÿZùÅå”Õô õ徟׋0ge±-4E÷²_ÀËza!A¢ò„™‹gŽýrûrD¹˜ÞAoÍ?áü—žd• JèÅ­CÊÞ_8}!2¯AHPHiÜÄ%‹gУnÝ÷y¬D=/?ßrÙIÖré'|ƒ4†I˜¬Ù°\¨—8¡;[P9D®u ºö¦²ž (%k<Áuó8[ߥçâTrQ-a¤Nû{;u™‰É•˜¬¡%1¡RRÓ@¾6ôV`F5ATFeü¤o¨K~ó>¿äÆZ;ZªuyBÂ0LLLìãÇm µöˆ¨¨h]]ðññß¼ySQQQNN.<<|̘1L:A°•€€NÂ~Ž;ùàÁN‚è_>þ¬¤¤TSSÃ’UÏÙ}ff戨»ãaòËÉÔö‡ÖÞJ;õ‹f·Mðr½Ñ¨õíÏ G#+6Yá5\FTðG#q¨záj0‘ÜÎÉ–ðB£‡S»ò¬p{µáÆhp>Ÿ¸²eyƦüÛêËVçÓæà~øTÑ~ÐØŠM&ÒÅOfÉÛ}S’×ÛüÊG»Ó-s@$%%%………yyyùøøøøøøÛ! €ÿ‹#((H§Óq[ƒñúõkuuu¶]*!ˆ^À —HrÄ>îmRU^ ÄÞ{é£y/èùVmYYY—™l}â™_N¦vXÌÓw®'™Ö]S99ª[ü‚b£îã‹`l^ÿW9ÞÐôîßk..c…`xK÷–gëùo}dzȢß7@ÿ½¶û»±0åØ*EhñÃÈQÝâàŽºùF@Ù¹v÷@ñ­ØÔĨˮ*IÇ7Ÿ{Ûå2tèÐû÷ï—––fff¾}ûöÙ³g—/_>yòäÞ½{7lØ°|ùrWWW[[[ccãQ£Fµ6ÌÎÎNBBâáÇ=¾íB=`@¹ë5§Ã¨aM ì«î²±$t£¼¼G^Ÿ‡0*†Üõ]tON”´‹ÂZ ÑõɯîÌ·/üMçÇ;,¥áÔ'žüžg™)ó]áø½—çÿÍß´X‰àõíᆫæŽxÑâ'’¼ÃJL:\ÓÀ¨O¼²=æļ¼b* cn=ø§íñØÿYÕF£Î':!!¡ÆÆF11111±ß=8pà€‚‚‚††ÆÛ·o«««/^¼èèè('7oL }„„‘ýHQN‡ÑBcc×Ç£ï]G÷ÍyE¿¹0ÇÙ€Ùybtz4Ò½3g =˽ˆˆÖÅV‘ݬÚôý&¨Ç­'X¶N¿à€waªe™ o¹Æv¶zŠb 7¯ÂÔý†À¤RkŒªVñ¾v6b”*•äR‡›W¼“·ÊmríΕ+Wlll„&5̳Á$^d¢%4~-¼#DÌÞs¨ŒUïÝúÆå…ÿÕ]]ˆP€·,¿ó5Ò(ðèäLÐxèq´µµ“’’š™!R?šfÛb¶œb:ÙÕ^gk&ÌÂVšŽb ùH@¼fW2p?ü !„èu¸`\FÊõ¿WH¨éÿÀe¦ÅGG%½|€ÃÎO Ž¦1ùÇXTj.XiÑAÁáqÔ¢šÌ j|txppx*í‹`SYÉQÁÁÁaÑéüš¹ 5¿„‘ý./R__Ußuñ…ðôúÏŽn^…©S:ÛõÙÓ©¬¬">p€w¦zCÖ¿«Æ)ÉöÑ32ut[ À »ÕŽwµAu߰攀º&ÿÑ ú GøûZÚuã…õî/oðžê¨§ªj>mKR HH"6ˆ¿ÖÛÀ|$€ÀrrqñF,©†¿ Dm9€””…÷\”SA(,æ”$\J)C ¯ÓÊâîòñžíååµÈgý‰;ñ¬¦“ ‚.>|>F gqØùÃGÎ3Ø/ÖOp\{>] þ‚ “u27Þ(BÕ›(Û—P«žºÖ;Â|}ÁÝlooï-'ƒ …y ¢££ÕÔÔ¾ÿ.t”ZDKåžøÿØo¹ÇB(?î ðö™jÀÕÈ ßj :¾4BÜÂmEã „PrµÃÕ81—v“·‹¬þˆuGîfòTU¨§•zì×Ý(D±2¶ºÏë%Üù[ìoÎw”ìŸÄÿ*ÀGüî¼Aå±t¦^æÔ÷"„‡w{«×xBõÇ­»ÇBmu}b¹áý¨+[ÅþæÃBÿ:rØO]Àa[¦À¯nì¾WÑ[ûXÞ¦U!„ㆾÀÅcÜ–{L„Igù6Ô‘{á–ð|÷‰:“ùÎÞºÝáÉ}°ï—FP½·3Øm‰h´•Z:^·ÿ\°¹¯þëm£qBÅ'½L‰œ‚Å[MÇn^8kÖ¬E‹µ´và¾òÖƒ¶<i—Í›7·KU-•ûè­Æ‚ÏÂ׫rß°«‘ÿ³+£¥&fÒ™,æjjìþ³øÿL¾³$z%ñ£_wí¥àe®O«5ì J¦¦&&Q©áû'ó¦0¿¬£Ž³×ÿ—F/,dqB[õÝä7¾Þ„Ø_·Ž‡”·ðÅVÞ°oa›]ŸXî…À|¤/pú¢×«ø"ÎÞú–üû¶a» *‰;Pç†Ø¯öÊþ=¥QpÂn:BÜêP ,ï+!ýüM ùLeñö<©6©!KxÁÀkò8ά߭Æá%™žuo ˆhƒ'2«m…? !ìàðñ#­md­l¡ÜÞ ðÇjmX‘`ñVÓ±rÿîÝ;EEÅ·o߶´Î£0ÂÛÑ‘w’.àíExx¸ªª*›Ý>0[*÷ñþƒ`XÍNžü•9lÚ=oÞÆ<ìêÝ{¦ý÷G{ü¢ŠwÖÞT"ÚeYjØ9oWâ_3{Ë©D:ÑÍâ½eÝ ™¼}© ~…ì'€åAŸj &nèO-œºó›qO¿öÊWbòÊ$>êxYRпÕÅ ñ +;9¡ gëƒå^œ‚¨ °Ìjw“öì~X!„Ê’‚ÎíóßäD@J!—I½–ÆBÅ™‰©4Zf\Øýи¬ÜèíÀ»eäP£îG¦0ˆJX´gŽìóßôZXÿ§Ëef\8¼Ïÿ‘óÁ¼æXRS©´ÔÄ°  DZa´ÿ Þɬ찠°œb¾‰Â-ñ7‡¡ën$…Ûç¿ÿZX2«Áî$³YG¶ìO¬½€I}rŸ_ªÁVñP•¸ó{O„½ãe¯m¤`6~ý'ìÛ¹ïb*–S\»xkéð­ÉW®\iooßÒ:æ£êKèD¡n÷¶Àápôõõ=Ú^¶jv_ãßlܵŠÕ–všPê°$j«æÞ³Ž“ úd¿/žÏ¸} Â=­þÖ–÷é\Äb±XVafTT\“Û€ó—SHËÌ)d³˜9QA¼+ÊIêÛõzËmyw ÓcYu<¤ ¼'znû®E ìiÞF×'–û¶Bü×)ä ÄÊØïÙÀ¹ÕÞ âærí7¡’ÔËD€ô&•UÃ_ú)Zt¸Ü———ìÚµ«¥mt:5%))U¨Û½ÌŸ?¿}/u-•{bmòÔ}Oª~<;lwƒ®UÞ|yuJµ¾WOº Žzi±:NÌZ0sö/_~X¸§µÚ’bêwÁ[“w/,Ìù[‚2ˆÇïÄõ77`)N-ýÏ ,O$}Aqi7ùÿð:r¿Âcåí¸Ü:F¶Ýõ‰å¾í+Üù,¿–Þt™†àfl­µ²gâ}:·éRÜB„ý‘k횉-¡ë¸>…Òv×'–ûvU˜—ôÙ|unš•(ìÝÆÆaÒ ŠÛn@7£c·&'066Þ¿ÿ/¿ü§¯_¯¡HLLÌüqëÖ­¾}û6»‘]pf3÷VÈsš¸¾ãDk™·ï¥A|ú¿oN¹ñªX²¯ßyw7m拧ïåeÌV]‰Ò{H+• =ô&3#àfxƒ£µáŸÉc†Ðã">É(dnÙo;®_ãMŠé΢2-‚ò?p%}¹Lc¤Ø @ÖëßëÙwB_äV" #»‰n6:²fç‚ÂT-y/ Yp¬‚"€ÊÒ{ô¡ÁORJ+%ײŸäj&šcƒ8¯¿¢—É­ä2v‚žÀwï•o|'>{OLšÐy»9c@FÅÈZŨ*×4´ÐlUÐ2Em°Ù´â²wï^•—/_¶¢l÷âܹs ·nÝj÷š»JÌ‘Ïî1ÝΘݬY³!dccóàÁggçö¾u.]º4oÞ¼1cÆ4ƒÁ`º6MQÊÚµkoܸ1räÈÇ·¯A]„­[·®X±"..k=ƒé´fvO0qâĨ¨¨iÓ¦½}ûöÿûŸ„„DÓeº%%% .LNNŽ‹‹34lã ÓUhåìžÀÑÑ1)))!!ÁØØ8&&¦½l"‘Û·o¼|ùk=ƒéI´Iî@KKëéÓ§+W®œRRRS¦L™2e ¼ÿ>22òÙ³gX²dI¯^½´µµõôô UUU555µµµ544©ðÛ·ot:=?????ÿÓ§OT*õÍ›74N§KHH˜˜˜XYYmÙ²eĈÊÊ îuŽÁ`0"Bçɽ ýúõ›={öìÙ³‰¯yyy)))iiiT*õúõëEEEL&³¤¤¤¢¢BLLLLLL\\\BBB\\¼²²’ËåVUUq¹\.—Û»woEEÅ>}ú¨¨¨èêêŽ7nðàÁ¦¦¦í~»€Á`0Ýrä¾ýû÷ïß¿¿››[ãUUUeeeåÕp8)))iii)))999 …BŠÁ ÓíèrßbbbŠŠŠŠŠÇ?Ç`0<”••]\\È6¤A*++ÅÄÄÚ÷…BéÌÕ]ïß¿—••µ´T—–{ Ó"æÍ›'!!Ñ !è4öíÛçàà`mmÝŽuþðÃß¿oÇ »hi,÷LbÖ¬Yd›Ð—.]1bÄœ9sÈ6DéÀu÷ ƒé:àÙ=9ÿòË/ššÝu›Íní-¥ÑhRRRd[Át6XîÉ!))),,Œl+ZO·–û¥K—6Œl+0˜ÎË=9˜˜˜˜˜˜mƒ!°ïƒÁ`D,÷ #`¹Ç`0‘Ë=ƒÁˆXî1 F$ÀrÁ`0"–{ ƒ °Üc0ŒH€åƒÁ`D,÷ #`¹Ç`0‘Ë=ƒÁˆXî1 F$ÀrÁ`0"–{ ƒ °Üc0ŒH€åƒÁ`D,÷ #`¹Ç`0‘Ë=ƒÁˆXî1 F$ÀrÁ`0"–{ ƒ °Üc0ŒH€åƒÁ`D,÷ #`¹Ç`0‘Ë=ƒÁˆXî1 F$ÀrÁ`0"–{ ƒ ÄÈ6@9vìXPP…B!ÛLW¤¬¬ìàÁƒÃ† #ÛLOË= üþûïþþþ222d‚éŠäæænÙ²åîÝ»d‚éi`¹' )S¦˜˜˜m¦+²gÏžÜÜ\²­Àô@°ïƒÁt8“'O–••íÝ»w\\ÜâÅ‹{÷îm``‘‘A¶]¢–{ Óá³Ùl‹ÅårËËË ðéÓ' ²í-°Üc0˜gçÎrrrü¯²²²‹/VTT$Ñ$Ë=ƒépÄÄÄÖ®]+&&666~~~d%r`¹Ç`0Á¦M›ˆÕh?üðï¿þŠ§ö–{ Óˆ‰‰­Y³FAA˜Ús8œŠŠ ²-ðBL ÓÎTTT¤¦¦¦¦¦fddäçç3Œ¢¢¢âââÒÒÒ/_¾ˆ‹‹+))‰‹‹‹‰‰•——KKK‹‰‰‰‹‹ËÊÊöéÓGYYYEEE]]ÝÈÈhÈ!C‡UPP »C=,÷ ¦­”––FEEÅÄÄ<þ<33³¸¸XUUUGGÇÐÐPGGÇÚÚZ³iii)))™^½zBˆÍf———WVVÐéô?~úôéÓ§O·nÝÚ·oßÇeddhiiiooïì쬮®Nvw»+Xî1LkøöíÛ“'OîÞ½ž——§££cnn>mÚ4gggCCCâ©l“P(YYYYYYÐÒÒ²°°¨“!ôîÝ»ÈÈÈØØؽ{÷.Z´HYYÙÙÙyÒ¤I®®®ÒÒÒíß±ž –{ ÓB÷ïß?sæLDDDŸ>}œwîÜéææ&..ÞÍQ(]]]]]ݹsç­ÇÄÄܺuëÏ?ÿœ3gŽµµõìÙ³þùg¬ûÍ?ªÅ`0Í"++kÁ‚ªªª«V­4hЫW¯rrrÎœ9ãîîÞAZ_ …âèèxàÀ”””¼¼<77·£Gª««O:5::ºslè¾`¹Ç`0Mêââ2|øð^½z=xðàíÛ·»víÒÑÑ!×*eeå5kÖ$&&¾zõÊØØØÓÓÓÌÌìüùóß¾}#×°. –{ Ó óæͳ··ÿþý‰'¬¬¬È6ª.ºººþþþùùù‹/Þ½{·®®îÙ³gÉ6ª+‚åƒÁ!55ÕÅÅeúôé^^^yyyÛ¶m“——'Û¨Æ[¼xqzzúáÇÿúë¯Áƒ“mT×Ë=ƒ©Å·oß|}}œœÌÌÌrssW­ZE,šì.¸»»¿}ûvñâÅóçÏŸ1cÆ—/_ȶ¨«€åƒÁÔœœljjòüùó½{÷K$» eùòåoÞ¼©¬¬444¼yó&Ùu °Üc0.\=zôìÙ³_¼x1`À²Íi+rrrÇŽ[ºtéºuëÈ6‡|ðº{ °råÊ+W®Ü»wÏÁÁl[ÚOOO[[Û!C†dgg߸q£{9¦Ú<»Ç`0àíí}ûöíçÏŸ÷0­'ÐÔÔ¤ÓéÙÙÙÇÿúõ+Ùæ–{ FÔ™9sfdddrr²®®nGÔŸ~j>…2`_\)ÿHVø$FU[ë-ñ›¥¿ç?%ÍÈ+--ýòåK---ggg‘U|,÷].›‘Ï`sÉ6€Í %ÇGEGGÇÅ¥ÑKÚüçl.“‘ÏhfwÙ%…ŒZ”tÜ@•0…Ìëu—aÁ‚ÉÉÉÊÊÊÔD# û —wª^›läâqõu›ÌT–e&ÃûìÒfþ(ʽ{÷ àââÂåv?X§ƒå¾Ëñ%î/U-Õ­QŸI´¡$íþonº²ªú6#œœœlm‡h+‰›yîNe·[Ï÷NPÕRÝÝœþ2ŽRS­…’¬ÅÜuuµ™‘ÓYÏ/®]qòUÓËŸŒVUU¹¿93ÇîË•+Wƒƒƒ‰G: 9Á/œ/å Ø»Íq$¡7ÈAó+¢P(—/_®¨¨X½zu[[ï†àGµ] )– ­ýò´”†,ç[&[(N‹>²çÔ«ÛM¿ÐrýuÛ¹A¹¦³T#ÕÀÉÓKG€ý9÷VpôËO|pïDjê¢ÁRÿ½ÓzÎ>S?æ´¥rЃ'éééË—/¿q㆖–V³ qs“˵¹/o†¦Jh sùQ%/¯jÐP•”À»¯‹¤L]&8õ€ü´¨ðØ”ÒJyS— RR5×FnjJn$>}FU³4ÒUVrxHbf~%€æ ‘ãF›Ô¾ø4žÚ2ÄÄÄ>|hfffoo?sæÌ6ÔÔ A˜NGCC#--­þq!„¸I»À/ª¨³Í"àføè ]t©Pð8ó©·À‚;ïÚ·Áxø+¶¡ê!hâýŽà'˜‹“½ß³€Ùö ò ÆÖngBÓf±#\Àá !„·ªÙ½{·»»{'4diiéëëÛ²2̈:ŠgÏ3©}`{!b]ðR_jü¢Š*X_ëØêB„¸´{žúµ³š/Ž¬>—¥òÎÑnfËû~ÿþ}&³E»1Ø™ÓøpýÏ_ ( ŠžëêO²x‡Ù)+̽wÛ8­?…BÑuÚ”VZïr£ÏÍq3§ 0Áû • Pþb¥“¹ƒÿ)VáQ¯ Nsüï/OÍ×·˜x­ž¤(äÄA€îê»'~QLP´Ûsj|Î)€ô‹ËÌ–;¶Î€B¡P¬û/ K êõJ's¯]§m˜J$Öw¿$=<¾ÒM‡"!A¡ ˜à}<·ÑIõW–ÀqýU×n{ÀË-'ây…ZRžvÖÚb<ûc¦¹ëê$vƒ9kˆ ݾуB‘ lË-ç§4R°(ùê7s …B¡è[LÜòŸ€ïˆ‘¸kŽ¯”³@FcýìHÎœ9SZZºsçΖ“„ê½E,½×û8èÎÕ_›øn>á7Ïaîû&”\ÿ}ΉTƒuçcR“}œË+-I Ýå5ÖŸŽL\¡9kõ&ßÊ0_|-.-5ꪗ>@ò?#†ïÈ€&R[›››£££È-Æ'ûz#ŠÔžÝ—]ð"N…¥—·ãU„˜®µÎ•o~IÝ#ÑÛ‰Oææx{çþå2½ßj–÷‰yPá=bRV=7/ØjΑõ&7ñþÖ°àü[¡–ó'ßÄ”œÏò O%QÂ-á „˜ü¿¼£×JoW"’¢shaª \='𠲄´Ï›Ý×7;|« ø…!„²äKÒqþÌT×qq"«ÁœT=s$R=½¦ñ:À³¹±‚ô›ú¼R¿ñ“–Ã^xWùOÞÞ<‡Ò¸}uo5:avÿýûwÛ·o·¸dõ°üU}÷É;}»«§ãÅþæ]F¡tâ~‘Ú¼4TßÏ•ÄmÐ]œÊ¿ƒb?õ€½I_OmËì!D§ÓòòòZUº[‚åžåžzæÆ¿Yú#â×ìU„Ø<•\{-Ã*ÈÌ)©{„F?êXû¯UøÈ xnøý£`ÙO¡ü U„¸h/ D!úM ð8SÏIÁùÏ{ü÷¥æ³€.“…ørGß&·03³ÃjľÙËϧ‰ÁëmÀtÅÃZU±BˆK»lÄþ‡”ûè­Ö`ç÷¡²F,a'oƒgNc9ùºVm3'ÀÇL×=l¼`I”/˜ú=%Rá«ø_¼5`êÎ"‰K»ç à|¿¶ªäþÊ•+ƒ jMIÞ°ÔœâôÙU÷±<¡î9"æ~µ¯ÄW^ñOÚàÍY'2Om£Ü#„fÎœ¹|ùòÖ–î~`gÉÐbã`Áy?Eлëä ~jo0Û¾~†±¸Œª‘žBÝ#ºš?]ÈLJJý?÷þ\63?—ý” €$Å,ÆN€€ xJTø!,"àcÌý$€Ó]ê-i(ËÎH€ÊÊšCñ»Lµ1ÛÇ_¬²vëš!Šb*FF*â2XÂ3[Çwãc¢àßm)QÏ«}Kà÷×Æ!2bº.“Ì^%æ´d§ü+|mÄѯ 4•“‡Ž¯Ïfñ)Û6Z¤„>g4^P eÇ ï­ÇÂâ߈9îæpÐëív9¡Àa´^~nnVVV¡ì7Oxÿº³Wa>}šØª•˜ X뀵ÿ³ €q Fn Õ$¡ £j””€”7ŸOm­õ5øøø\¿~!ÔöªºXîI¦ì+¤••øG´Mk? ë-YW”Ž¨è*å=ù×qEB¶–Þ §©+¢€·ÔElðX=øp*âcUNÄÉT˜}àâVȽû’Q}ÿ€åÔQýꙣä8Áʹ5ZÛÇrÑl/ïE‹|x®‰~’ü$i=Œ±ÊL§ÕäçV4q1¯-¬¾·^\¡7s„˜Pú¨k€õ`Õ&-¤96×<ÀÕ <›)¨ðãÊ£žÚ‰'·ÿ>ÆÆPIBbòüÝIŒ*(ÿô†°ÆFWKOÏÈÈHKUÿ÷[åЩ”——ÇÇÇ/Z´¨õUô–¬³6FZŽ¿w ‡ ‘'pµ¦SÓª‰X”Ÿ@¯Ÿô£¥Aã©-³Y666ÒÒÒ‘‘‘m¯ª[€bv ”ä[7¿à^œ£6ç"xzO´0²r´—=iãq‘÷ΠþäŸL¤ àî4qÒ ض+øú­Š‹sìU„Ô¨¦míìSÿÑž„›Lÿëât"ñŇ‹kE¯ÑèÆ-`2Ëj¾T}ÊNÖØ2Ç–¬Dýp1é¨6Ç’æÛœ’’Égž´q9Ÿ›UPuéÍ÷?eEÞ½ôèá›Q¹/m|˜B)‰%‚øÿ·ÏX@e%ENNúUhA_ÛÌ£GôõõÛù¥*þ/AÚØÒn%? ‹ýì4šh‚õäöµú%$Å{@¿a¦a!w2V­þ=~¸u2 45eúÉ5–Ú.†5*00ÐÙÙ¹]jëâàÙ=Éô3 )ü#)C›[¸üé©‹0=’ùöæ¿6­ží8¨WÔÌO-=f$þî¾< `´®‚©³ÀÉe /Ìš3VQX•§ÍqøpyÚ’ ™u[KKÉ€¯Â4º)Kz|8\½äª¨/n€œTëÞ´‘¨})xyj˶dX2ÉF¾IK¤$ši3|Êã/ªÊI .u”F füå¤ï|Xè»çF$Kä ¯¼¨ÔnŠCGNqwwwwwŸ1cŠrþã3gî¥tê»»qqqMçk%JN€.ÓNÆ¿ã² ïþ9û÷BòÅܹ—úQcä4WˆÙ0Æûj ›ÍHù{ŽÛLw5Un<µ]̵¶¶NNNn—ªº>XîIFÃl¤@ÊÿF®ÿï¸o‚ÿúySX ëȦъ€Ÿøç¬)IÃs|+Xºzòò̵7ìŠfã͉¯“Æ ^™´ó© ¿Àé¹Ææs|ÿ ž•KMŽú¿•ãe†ÌÏhä%Æ-)8>ßçr>ÊsCŸ´,›*ô’ÓïÜ||ýâ‘•ÓÌÌ€…×V6i ‡ô˜à¨¬Uç$x¹ËÅû2ƒ 幡ó'¯€¾?+4Zò55šùÛªíIŒr.-ãÕ'е0VÔtýÉ qâ¸%aÔ/¬—w7Û,ÚwëÖ 9µ&Þk_Þ¼ychhØt>¡Tr>ÀûJþ%ŸSI€rÏ›ÙÒSG=à‰·®„¬šû¶â8?„€‡{Øšz'‹ÙÚ£ðêä’AJ²²ªCW_| `p8ö¤"€t£©õŒiƒ~÷î]*èVý¬X©óšUn€÷¹×†!æ# Ðx{¨Þ‘àõ&õËÀáÔr„BÞ*ÏêE8Ñ[t|#)þäïB«uXt<“YSÏÚ°šwÁ³„]gý(Ï$&ZUñV=° ²Þ‚HÂòÏ›e‰À’Ðs´ªFs>ª?î7›gsc¹¯¼ë›wí B¡ì­õbÖáWu:ÙÑ+sìíí¯\¹ÒÚÒA'>Ã_&ËL <²ïH$];[YÒC>ÞÞ³=½ÖyœOvrß‘H:?OqØɽëׯ߲ó"ø]¾¾à¿|Ñ"Ÿõ>>[Ž\ÏdrkUÖ`jAÐÉǯE [³Û\>~ü¨¤¤Ô† º$2O¥»šššú1¿ IDATaaa&&5’Q’yörPæ§/ FnKgêÇ%ë¸ýl£Y|á.CÙ~–›Iõ„º°ÞnrÀÙkO^0Ù2ºÃì&ÿâ¡Mxã Ótê4Mi(I ½ûNyˆÛT ¨Ê½œ&Wýµ1Øôè ðØ´’J HJöl7ÖeìMÞ9FÚý€gl[w!*üÇ? [¢ï&32ØÑ7lëÐÀÇLд3ßFZèÝØO6S~®®Š›|åÅ×~?ÍUoîÏM¾•ø™+ÁÿÑJ*hiö7µ4W•©­á1a$ß¿ô0¥ìþÕIW¬áœ_ƒ/ÜE¦c?:v=‘-­8|ìÏó\Íš7ì…Ñÿ]¿ûšÉ–QÒ3tóøÅÉHA  g¯…¼()§(¨›8K0‰Çž={bccïܹÓÄ j-VVV~~~S¦Lé ú»,KUU•Åb5µûƒåžêË}§ü‰›ÌÈàa»™/×·Ê{#Zt´ÜÛÚÚúøøˆ\¸˜`0 ‘ýl±ïÓñT¾ûžn¬¡¨¨Èd2ɶ¢«À`0z÷îM¶^ˆ‰éx${2‡•n¹Ëu£_¿~ÙÙÙd[ÑU R©êêêMçë`¹Çt<ÒVÿ&aŸaWaøðáW¯^%ÛŠ®B||ü!BâwöH°3Ó\Jù%îŽ!¥QÒ›îPÆŽ›˜˜XUÕó7êj?9r$ÙVtXî1Í£ü‰¥ªÖѤÒZÇ’÷P(”ñ¥ êˆF; æ. ÊÐ-ÏÈhºSÑÑÑQWW iVîògn”ºX8ͽCįnaª¾ÅDÿÿš±•XgQRR’™™9uêT² é$°3Ó,ŠïæÀtw yÁƒNTr:j,´ÑÎĦ;OOÏÿý×ÕUÈëõà”À„ççšAe¥¤¤d~Ràê=<U¤rþÜœTÇÅGæ J(ed=Üvè™A ŒWw– íØ6cÇŽY[[+(tj Ár/*0¨©Å} ŒTx çÙ ZN±¤‘‘¦8#+éõÛO• ©n0̨/p´®RŸ²Ì„·\c;[=E±„›Waê~Cq.#3.!§Ryà@.…W;—IÍ)ï§Vû,C¶¿ùPµŠ÷µ‹s´¤×9Ÿ++{÷`ec(¬Ü,R¤§"Œ\j1ôáícÇ.L£•h 6T¨i”ËLKJy÷¹¬·ú`+ þ"ûú–7ÒMv~jì˼J3¶uÔ« IÇLŽNúøUÂÄN_J`†`{kÖ¬100ÈÍÍÕÕÕmN~;Ï93¬x_fÌ׿tð²ëϲÎÖoFêø¿/ä¥ún^°òÇa—ûyD¸i6xZ«aåRªú Ô¸¤_¡¿™]õk¬\*CËH%+>öÝg qœ‘õôMYŸþæNM½PR BèèÑ£çÎkfþžÉ¯y‰$ m^Ø‘›NøÒ¿êlg¢âS^µö)·ó)â¿| Zëž!”í0ëZB(?l{ŸÐ_QE%ñ¾¦_Ùj"X<ë¿Ú¯ ›ùær\€¾ÞûLLâ „PòþœcY¨¦Qf„§`q‡Ýt„pËê&Š?"¸ÌÜ`oÔG„b?õªÝ—êÐê5ýí|:góÂE‹5«v„S½í÷Ž0¸J«jN*?ô?¯¾¨màù¥Ó*3¢Î®…k‰ ê7ðòÏÿâ~¤;S"„Úµk—¥¥e33÷ °Ü“rr–À "¸í2Ì:ÿ–éY‡8!Nö.W^„b[‰ñ[n$Å…Ææ°í4ܦ#„^y€ÙªD&BÌœü¢Šx»™­ KŠ Ì,—CìAA¼.Ÿ|áWø+îK€:ÀjªÙþiob9O ‰m¡ªͺ0§V!„Òª‹7d¹Ðn²S€ýº…!VÆVW˜žÄáüç­Q-ýeÁþS€¿MGMI säžÁ`(++GFF6‘€á4g?ÿ/_Z3RëË=—z†8)BO«¦u'2âflu€é‰¬êãf¾‰LnIÒq}çk© .ëõ§ÚAGšê~TTTóG¬€åžH‘{Ä~ê `º%ñ6ºrŽd"Ä*HMJ-d± é9Iq¡[=yÛHÅû[X†UÇ"ɺ0‘˜2{oñ·%bÇm”{¿0þvE‚ÅËh©‰™t&‹ùšûŸÿ,¢#l\¥#FÀRb^6öpb?ÔXôI°Qb+.3Ï•'îDÓ ™,B Z.´›ÄþG;ƒ’©©‰ITjøþÉà•çoοÃ@¥{Uk¿iRè´­É>¬§§Çb5rFX¼£ñþ÷ 9ÍJ­/÷Õ7O…ŸÖz9—‡Õþ±E~!ŽûE׆Á“˜ìo ý÷4gs«1cÆÌž=»{xeŽÈ mçí£ž²ýúG ßZ¿,³UáÄž÷S••UÕÒ·°³í–` à±Æœÿ$‡SœºýÔÜÿ7oÿ³†-ÒͲ/…–÷é\Äb±XVafTTܼáCÌB©¨¶™û©”j÷·Çsþüy:þÇ4ž­ú’(;jÕÍ ^Z¯ý´èBvsSkGw¹zÀÀ Ÿ¢ÐÓZ§] d¿Ìæm¤YN}ž¨­OÏïÞ½{æÌ™€€)©N;ÝÀr/BH›O[o{6ýtWÿd- )³þ4XWW"7pÛ¦LøáSaíR_^‡EÁDWSy6µwØñÇ\.0Ïýõw“² >À¤e+G›ªÊ^>z$%Äd]¦/…¨›Q`àò£Z_³Ñú™ ç¹ÈÔn4þÀ¦ƒÆߧ˶vYµnï1]Ö×ïæ G$ž¾Õ‘‘‘áÜÚ<ÊÉÉ&´P^[>úã|Z¼¹»{ äj7Ýã‘‘‘yôèѹsçšTüjĽ]r¸2wa£Y©ï ò% #?7+éâŸSݦÇ?éö~Z›ÿ†˜8ôø÷gþù߀‰®VòÄñÖqöìÙyóæ]¹r¥õÿ»5dz’Dr|÷!„’Ž¥„,,jÉŸ£UE¯WàÅÄöpø‡ïßåGç篎XVTå 1ë‹#n±ÃÀɜ߄ûá „*¼§À{`‹²} ˆ¤‚ri—‰¶ xFZÞ¦U5d¹Ðn"TvÁ›xQÞ€¨ÊtÝC„*|D¸ž ª÷=Õ^Q§¿O§ùîùdggkjj.Y²DHó‘>€öºÁcÄópp8XRÒDª[¤ ÛRX5pZ*X°º >àž…Ä¶ÌGú5?¶â­Pm@­^=N:>lõ@uwpd 3rIfø“mç±FŠ¼W.i¡×CR+‘œ‘³Û8ý/!Oò œÔ _<}/?v´‰8@ü…}¯µ~Z4ºMY‘7C +U§ÌUö2CÕv´ždNøš¾íhb={IV¿8ÑhÀÍð Gk˜ýä1CèqûX» î ÀM‹ù(>ÄÅFrãÃÒÊ4…6ZU’–ý+©5ÈeòÂx¡–óúU¯›}'ôEn%’0²›èf£Ã;ÊÎ ¾üê×xÔDx÷Iq¸dü©:ýíd::²PŠŠŠTTT´´´h4šx­g0ÌøðgHÛÁ¦V\~Vrø“Ð×n´!µ©Ô2¨ö™HôVë§?D·f‹da§•›’'a8Âz xù“2#Í®…ã¤g2¤¬ÜÜŒúp £CSTíFùÓ¢C>«ZI%Y‘Oß«Ôüððóó;tèPbbâ€ÚmÔºXîI@äâÝcZ)rl6ÛÍÍ­¤¤äÞ½{ýúõëäÖ…Pþd„ÌÈ‘_¶;µÉ±Æf³çΛ””ôàÁõáTƒ}÷ @FFæñãÇŽŽŽC‡=räÙæTr>”SÚ¢ãÑ£G†††ZZZ/_¾q­,÷ †…B9tèP``àþýûGõöí[2­QG/Üf£ÜºÒÅÅÅ ,˜5kÖ_ýuàÀ99¹¦Ëôt°Üc0˜Z888dff<ØÒÒrÁ‚Ÿ?&ÉqM™–/¼är¹[¶l0`@aaaffæ¼yóÚß´î –{ S ‰Ã‡§¤¤|ùòeàÀ«W¯þôéÙF5 ›ÍÞ½{·žž^xxøÇUTTš.&2`¹Ç`º………åååd[пÿ›7oFDDäääýôÓO©©©d%œOŸ>-[¶L[[;00ðßÿ}úôé?þH¶Q],÷L×âÎ;=’““377ß¾};y¾Æ HOOWWWwrr~üH®U,ëرcvvvFFF………111nnndÛÕEÁ 1I/ÄÄ4Â’%KþùçÁ#ªªªçÏŸ?~|CE: .—{ëÖ­óçÏÇÄÄ :ÔÅÅÅÃÃcØ°alF^^Þ­[·‚ƒƒŸ?nbbòË/¿Ì™3G^^$^„n x{ ¦k¡§§'##Ãf³‰¯ššš?üðÃ¥K—º‚Ü‹‹‹Ïœ9sæÌ™¥¥¥×¯_ :~üx¯^½~üñG'''++«^½zuDÓééé‘‘‘±±±qqqÇŸ0aÂ… 44š»Ÿ ÏîIÏî1°gÏžóçϧ§§€¢¢¢ŠŠŠ¾¾þƒ(J“eI!!!áÁƒÏŸ?ýúuqq±‘‘‘®®®¡¡¡±±ñ°aÃttt[T!›ÍŽÍÎÎþøñ#•JÍÍÍMOO—2dÈðáÃ]\\FŽ)&†§ª-Óå000ÈÎΦP(¶¶¶‘‘‘ãÇï²ZÇ>|8ñ¹¨¨(&&&==J¥FEEååå@Ÿ>}””””••ÅÅÅ%%%%$$¤¤¤ÄÄÄX,‡Ã©¬¬är¹%%%L&óË—/\.WLLLIIÉÞÞÞÐÐpòäɶ¶¶:::Zi,÷L—ƒp0Œ”””gÏžMŸ>}Ê”)7oÞ¬ͦ+Ò·o_wwwwwwâk`` ‡‡GUUÕ•+WBååå!©j¤¥¥ûô飩©©­­­¬¬ìå奫«»cÇr»ÓÃÀrÁtE¶mÛöóÏ?¿xñBMM-!!ÁÍÍÍÎÎ.44´¥Žrñóó#\ù‡ h~A û™Û¼ƒéŠØÛÛçåå©©©€¼¼|DDÄ€,,,²³³›,ÛE¸sçNffæ„ FL§Ó›_Ë}G€åƒéˆ‰‰]½zuæÌ™¶¶¶ÏžÕÝõ©kòçŸÀ‘#G.]º+V¬h~Y,÷–{ ¦Ûàïï¿k×.77·ëׯ“mKܼy“J¥Nœ8QKKKEEeĈùùùÍ,Žå¾#ÀrÁt',Xpýúõ%K–ìÙ³‡l[ãï¿ÿ¦P(Ç'¾úúúþðÃK–,ifq,÷–{ ¦›1f̘ÈÈȃþöÛo]V/_¾üíÛ·M›x{Lnܸþ÷¿ÿ5³8–ûŽË=Óý2dHbbâ³gÏÆ×Eâ©ÕAWWwèС—.]*..ŽˆˆHIIqttlþ#Xî;¼“Bß¿ç¿%ÁÿmA¾ÿÞœlêêêñññS¦L±±± ë‚‘~¯_¿>hÐ __ßÄÄD„ß±Ó~øá‡fŽ¦ù`¹'UUUSSS))©¦³Šø¿-HEEE3222!!!‹-²°° 166îhÛZ„¾¾þ!CΟ?ÎÎÎ-ÚÏ:,÷$ðêÕ+²MÀô(Ê©S§üýýnܸ1jÔ(²-ªÅõë×(..~ôèÑÄrß`ß=ÓíÙ´iÓ‘#G<<<Î;G¶-µ0`€±±ñ Aƒ ZTË}G€g÷LOàçŸîׯßÔ©S³³³»T¨™ÖE¯ÄrßàÙ=ÓCpppxöìÙ¥K—~ùå—oß¾‘m„P+Âyb¹ï°Üc0=‡¾xñ‚J¥:;;ýú•ls°Üw%°Üc0= eeågÏž))) >¼EQÉ:,÷],÷LOCBBâÞ½{ãƳ²²JNN&ۜր×ævXî1˜žÉÁƒ7nÜ8zôè   ÍÀ³û®–{ ¦ÇâããsöìÙÙ³g;vŒ,°ÜwðBL ¦'3eÊ”ÐÐP77··oßîß¿¿ó ÀrßuÀ³{ ¦‡cee•äîîÎårÉ6§Y`¹ï°Üc0=Ÿþýû'$$ÙÙÙ•””tfÓxvßuÀrÁˆòòòOž|xVV–¯¯o»›$²`¹Ç`D …rúôé%K–8::>~ü¸}+o©Ü÷êÕkÓ¦Mâââ°hÑ"99¹öµG”Á‹[Û‡SZZZ^^^QQQ^^^YY)---%%%------//×tçëׯl6›?ø’’’222ÄàËÉÉ"‚iˆ+W®,]ºôÀóæÍk¯:gÏž­¯¯¿}ûvþ„З/_Øl6ñ7a³Ùâââ222RRR222ÄùRQQ)---**tåcÚ–ûV’“““’’’žžN¥Rß¿_TTT\\\ZZZYY)!!!&&&......))YQQÁår«ªª¸\.—Ë•’’RTTìÓ§Oß¾}uuuŒŒøoÞ¼3fŒ½½½‹‹Ëüùóþþûï_ýµÉ‚¥¥¥‘‘‘111 ééé,KSS“Ífkiiyyy©««khhhiiikk7®ÚÅÅÅ>|ÈÏÏÿøñc^^^FFFvvöû÷ï¿~ýª¯¯onnnkkëää4xðàöë´H€å¾1ÊËË>|øäÉ&“É—ceeåömëýû÷áááÄå$++K[[{ôèÑS¦L9r¤hÎh***=ztïÞ½'OžZƒß·oßöm‹N§‡……={ö,11ñÍ›7ššš£FrwwwvvMÿÏçÏŸ‰'· LHHh(s||ü;w¨Tª®®®¹¹¹ÍÈ‘#àöíÛ}ûöurrj»Ul6;<<œ¸œ¤¥¥ýðÃNNNnnn“'OVTTl{ý=„©GUUÕÍ›7ÝÜÜäååMLL–/_Ö™p¹Ü€€€ùóçëëë+**Îœ9344´3 ‘ªªª[·nMœ8QNNÎØØxÙ²e¡¡¡ß¿ï4¸\î½{÷.\¨¯¯¯  0}úô‡vZë]„ÜÜ\¾JÈÉɽzõªNž„„ooo555MMÍ3f\¼x‘Åbu¦‘ÏŸ?߸q£¥¥¥œœÜˆ#Nž<Éf³;Ó€n–ûZ¼yóæ×_URR222òóóûøñ#Ù¡7oÞ¬\¹²_¿~«V­ê &uoß¾]°`²²²¡¡áæÍ›óóóɶegg¯^½ZGGG]]ÝÇǧ+˜Ô9hkk N 544æÌ™C$•––îرÃÐаoß¾óçÏOHH ×T¤½{÷º?uêÔøøx²-ê¢`¹ç:fÌyyù ÔŸÈt¢¢¢<==åää¦M›–˜˜H¶9íIxxø¸qãäååçÏŸŸœœL¶9BˆŽŽþ駟äää<<}ºŠŠÊµk×ȶ¥|ÿþýСC ‹/î¦×*„ЇfÍš¥¬¬|ùòe²mé(bbbôõõ_¾|I¶-­¤²²òÏ?ÿTRRZµjU÷šUt¢(÷yyy666OŸ>%Û–v @MMÍÕÕµë{¢Bt:ÝÖÖV__?&&†l[Úû÷ïkhhŒ?¾ûN„Âår½½½:D¶-íF³¶¶644ì –IDäbæDEEYZZÚØØdddØÙÙ‘mN;0eÊ”¬¬¬¡C‡š™™¥§§“mNcÄÄĘ››[YYeddØÛÛ“mN;àææF¥R•••‡ –ššJ¶9íƒÁ°³³KMM}õêÕòåËÉ6§ÐÕÕ‹‹[²dɘ1cΟ?O¶9äAöõ¦S¹té’¢¢â¹sçÈ6¤CX½z5tÍ•-¡k×®)**ž>}šlC:„ 6@˜<~øðASSsÞ¼y=rYKHH?~œlCÈA„äþÔ©SE¶!È•+W¤¥¥¯^½J¶!u9{ö,<~ü˜lC:k×®III]ºt‰lCZOJJ üùçŸdÒdgg÷íÛ—ÿH!*r¿gÏUUÕèèh² épBCC»ÔÃÛ¿ÿþ[EE%""¢Ñ\e'gÛƒÁ¬Ãu'ÈìÔãîûÚþ\YYù?þ Û‡Á` 8pÞ¼ydÒÙˆ„ÜŸ>}ZUU5;;›lC:‰¸¸8%%¥² A¡sçΩ¨¨¼y󦩌ÅþŽ„ÑàDf­E±%qÛÀίÍÏÕ™,@g{a[+jŒ„„%%¥td#íÏ›7oTTTΟ?O¶!DYYÙ AƒV­ZE¶!JÏ—û´´4EEEщ9CpòäIuuuÒJS©TEEÅæi_ñ~ÇêJ:¾4„v“{TtçNX2§Í5q…ëFá.8ÎСC—/_N¶!ÊÛ·oûôé@¶!GßjƒÍfOž#j~½Ÿ±_o*ÍN=c!ägnÊDˆ!8ø\Ú=Ï:™/Žä˜²ÿ|êÆR_~-½ù}¯ªª244Ü»woó‹Edd¤’’R7ºi_¼½½]\\ȶ¢“èÉrŸ››«¨¨Ø—}Ïñ'DEE©¨¨”••uJkµøðჂ‚BVVV³Kƒ?1ŽËºàYëÔ|î+/pXq,*•šwÛǵ?À°ÝL„÷•7qú&l KJ ¿°¦ZÏ#™±#\Àa7!„²}ª%þZ\ZjÔU/"«Îv:Bì¤Ýz?Š§R/¬w€‰‰-‰ïÓ·oßÒÒÒ”!ƒ¡C‡þý÷ßd[Aåååêêê"ãº';s|}}§OŸ®¯_.Ø º¹?ÀÑÑÑÂÂbçÎþþþ-*Øv6mÚäáá1pàÀ–+«äÈxztêÖ¸(a§ œúì)˜m<¸DÀðÀ]µdqû(ø{í˜ùÒƒý5À|o¼²¤Š›¾‰¿tt§Æ,&Rû³eìo½Ûr5Ùg)Hh9ÌvýQÀp÷¥J¦çphIOìíí­­­wìرgÏžBçqýúõ²²²•+W’miHIImÞ¼Ù××wܸqdÛÒñ}½é(>þ,//O§Ó[R¨GùbccUUU;9\II‰‚‚»wïZRˆ|çH&Bå,%ºüo&â&Õ½µâ°Ši©‰aAwNî÷óruàÍîãý]Àý„`¬Êl=¨?»'rÚí¬u»½ÕfÈàRÏT¹Áï 'îDÓ[µoGBB‚ŠŠ ‡Ó9÷r­ÁÆƦg„Ih UUUjjj=#ªGãôØ gÏžµ²²jÕ~ßlKïÿ#ü ÞnÛsë§W½^í´>§ž?aÇš %PõzåùIPߟ GÌ Õ Ÿ¤8@ÎZ½É·rjû’ÿ1|G>@yòÑÓêøÏ\ŸÄnYglll”””[>­çüùóÆ ëß¿«kЙ²ç”'Ào3w¤rk=Õ~~j™„l½!–.nS­Þq18@®&ƒ©‘àIWÒ©µQ iíhTë ¤¤¼ù$føkÚ«õ²œØí=ÕQK–âàs™ÑÂ^XYY©¨¨Ü½{·…å: bØ… ¶s½å/~³ ô÷ü§¤ëí(zõê5cÆŒ'NmH‡Ócå> `Ú´i­*Êó'8áÒyV'YПà8Øp°õÔw¯ò7âð'ìm>x”×Þø MB›ô'Ì°6ì8óBêSOx·åjr)ø -¼v_:¹hœÇ¢–ù&Ož|ýúõ–—k=wîÜiíàó‘]@œ‚—[Ì­}øGË“Z/: Ž³7œ¼™˜[BÄ|NåWHy+PëÓ!µs¾”@|½~Ò–`2}_6*£Æ…žô_çjðôÐìÃÑŸ[Ú)S¦tòà7Biié»wïø_¯^½jkk+-Ý2aÓT–e&ÃûìRn;×ÛÌž=›ˆ¯Ð³é™rzùòåO?ýÔÊòű–À³?ìOPAV@e¥/ÎFˆótYIZRxpÀ©¿·Ì™²1ª:•“îKçðg˜}]øè i„ú8ìy æï}-m·r«5$½È—•‡ÿgïÌã¡ÜÞþ(û63–e«$"-ˆö¨[Ò­Ûâ¶Ém»©n›nrÓM¥R.ê^Ä¥…~ÙJÚh1*TFeo1£‹d›!3˜Qç÷ÇËKÖƒæû‡Ï;ç=ïsž÷ÌxÞó>ç9Ï€ÇΡQ6¿ìˆI·9{'ÒŸ¾d;¢:ÆÞÞþéÓÖ-nñüùóVÂB$©çϦé+à$ãQ,Œßóxñ¸ãòE–ÆêRÔv絘 1‹›JÊïŸ÷$·#{„áx¸}‡cÀ^ÇKf_\/$$äxµrŒÙ,Gϸ4ãšÔž¬Y²dIrrrw¯â:oß¾3gŽŠŠŠŽŽŽ­­mEE$$$ØØØp¿11´§û¤I“BYYYüV„· NsÿòåK<mºÖc‡?&NœXVVöùóçî_ÚqqqFFF3fÌÐÓÓc'ãÌÉÉ‘’’RVVî}쯀´Œ"dÄßH)®ƒ’ôï"ý“r 0sµ¼<¦jãr?=ëÁEW³YíÏQ«X/µ€Çûf;ýGc0Ê2ÎülëI€e6ãå òx¸ðÓ–ÐÔ‹ñ1ëfä 3‹öžÛbbbB£Ñh4¾96Þ¼y3{öl###"‘¨­­moo¯¢¢²páÂììl ‹ÎEtFQRL¨ŸŸ_hÌãrº"4þÜX”ô”LríMb Ÿ_hÌã2VÛ’F ©÷£ýüüüBcä•5ýMzJJ…ý¢À(ÎLMMÍ,®m*`Q²RRH½“7nïFEý„Á™“——§ªªÚk1Rï†FÎ%¾Ô1`ÜÒ_l6†ßzyfŠê™–Wß|‘[7ÙX×Q¨¹ôÖíã³nç<Í€zf üWω©!DO3˽¯6 ØÜTKÛ'9`2ÀfÛ^£3žé7×L¾¹†-bž÷¦nö< Éˡ„„Œ;vÈ!ت«vÿ2¤m!vÐõSœu*++8ðêÕ«/_¾èèèœ;wK:íáá±uëÖ»wï²X,WW×K—.áp¸îÞ'µYÁæØ|'Øè‡öÄÞØšóÔÞë7ýÀY²;¡|Ÿh™åÞü–\>ºOÍßh<&ñÔ³ðÀº¹üò‹v—™Q+E€öÐ^. Öä¡Çôæ444Þ½{×;ýÁiîKJJ”””¸ ?'4f‹ÆâsœeÍþO+¬¤!+¦¥?!5æBxñ6ÌæuèOH¸}§l—bcY ‚ÞÏÁÂ?.Ÿ…¹®ÿ"´ØR“Èm"''üâÅ Ìâ°&Ái>Ú=‹•Óh´?þøãÓ§OC† ™3gŽºº:üöÛoô÷÷?~¼ššš¶¶vw5^tèÙ"ü(©–Åx«°”¨èÅòã5±q¥¯}Éuâ¦Ök×,bã^UÈ!`1>ãçÇÐ ‰±·rË™¢ º fýUÑ*Òp¾!&y†øä€Ö‚‚Åž÷¥ó.$‘‡$A|ô´•«ìtðØ„Ö RÍ’˜ °ÛÏ*k…ÄåT&YÙ¯ZlÚ}G‡;s挴´4B+ÁÚþm[È.ïbýV…ÅÅÅ`gg"#Óøú©®®~áÂ…5kÖܽ{÷æÍ›$ÉÚÚºGw ¹Xl‚úüÃNÚ %ÿ=s£oóY1hzË3qÚkžý?šý$ÙÌ–%K ?îRlŒ}ðpš)W“à¾ÃûÖ‡#¿…îz¹sëjU⥴»i%³f*äܼÑ÷Þ°Vê‰ÀǧwHã÷¬è¥­€áǵ3—3¨èË0 >ãèѣ˗/ïþu-b›¨aû°XÀ¬€Ÿ&ìL.b &L nr.H¦#„²[®ô9øÍ•>Œ'Ø…†ÏçRéôÒ×^Ø Á²d**ŽÛ‰É I¡Ð™ôâÌXcWbO6G511100˜5kÖÌ™3g̘ammmmmmeeeee5}útKKK sssssóiÓ¦M:uJ“'O6333554iÒĉÙï&L “ÉœM<þœ½]Œµµu”ì=4¢ À¼ väc1æýÇañ‰éÓ§ó+õØ»wשּׂ­EDDÄÄÄjjjJKKíììp8œ˜˜˜ˆˆHDDD/ãD±eÐØEn*¡\]ÛÜçØàOöï¶M #ó¼LpoþŽXO,›$`ßàøíwB,¬&{Ý{Œ“ ü™RÕ›[ÀðððX¶lYïåôg§¹?{öìÂ… »]¥›4ÈsB}ˆÅ~¨íyˆ}üÖô–OZ-BˆEŽh¯‚U<µu…öâ÷µ}’±ßîû½FmdÌóîÖ:6&&&ÜJUUUµqãFÌX˜ššR(”gÏžM:UBBBLLlÊ”)ûöí›?>WÚê6Œ'Ø75Á~‡ohè1g;¬ÛÃ;ÍÇÉCÌÌÌ"""ø¨@vvöôéÓ1£////&&¦¥¥B z/<Ëw!´ZpÎxhÙ<¦ÁþY8†PmKBß^K¨w-@cWQS[Óm&Àbÿwe;,#qcaƒ««ë O‚?89òòòXìA7´þ„ŠŠ ®Ì€¬¬¬¿¿ÿñãÇ÷ìÙsùòåÑ£G‹‰‰±X¬I“&ùùù„‡‡?zôˆ+mu‰©á Þ f9“"Ïn‹l,[uúÁ¹å£ø£TTT 6Œ èêê>zô(;;{óæÍ¡¡¡666 NNN,KD¤W45L!˜jÆᾓ7ψœ‘fŒj•°eɳÀmØ|X 0ç~Òòù@¼}ýYñþÏc–:ºxÏ­•1‰/˧—]±q™7b€JJJzÜ1à÷ó†'¤¦¦jhhð¥é~èOøúõ«´´4/öÎ.//_·n©©iff&»D"1‚ëmu‡r^‰D"eæQûÁ‚VYYÙÒÒ>ȉ×m”••³³»½N»é^?ÀÔ£›Ï°ž;@KgŽ9Ç¿M ƒt³E­×R4ÕÁܧ½üÀüoúÏ4×Û7vßäN–ï¹sçúúúrET¿epš{&“)))YUÅ^·éþ‰¤ªªÚgÍ544HKKWTTôY‹ý™ÌÌL%%%~kÑ>ÖÖÖþþþ½Òè»7?Á~ 5šoó®šûT¯™0ó”"„berH@‘/³}žsN¿BÅlÔo*XÈ¥aŒªª*‰D⎬þÊàŒ»ÑÓÓ‹ŠŠâCÛSü^FžÝöóÏ.ÞÑÀoBtt´©©iŸ57tèÐñãÇó§óûQQQ}ÙùÝÂÂÂâÖ­[½‚3˜e÷Ív¢0åYQÆ;Øq÷ÓñZ K‡¦y¬…VcÀÔ¶i%õ’%¹±qDNNƒÁ02j;]6¸à÷ó†W>|xÁ‚×cÒK©tŽO••=J†…˜ôÊJÇçîù¨äÜ 2¯Þ÷ŒŒ.^¼È#áírôèQ.b<4pMlý––êa#=»6ª«ô0‚ñíe®f•>=êú¿. »Ób &NœxáÂ…î_×äääÈËË÷>ƒ-åD;–‹Gh»ÁC;%Ä> ¬ÿšgeË®aãý•áz©<†‹‹‹½½=WDõg­¹/**’••íÔaMKÚàÂþå%íØþ¨ÍarÚi¬(ÂnÉÙŽ•À^]GÎóæ…s?33SNN®¾¾ž²¿ÉÇeeeËË{3ÚÆsg ››ò’²IõÛ{sŸê¦àÞesßõ›ÉËË# £›×õÿþûoïå°Š^ø¹mwppX½z_\^1)úŸðT&B}Š ðñ yÌ1ˆj[‚Péë€CÛW;8mÜè|4 ¦ˆ‰È a§Oû&’Mòøúú7ÊDU&„øøú†fpéF]]}Àm/Ü­¹Gýðûvíê¸-Õ…ó>ÕMWuÏS„½4ŸDÊ,¤6 Ø™•™¤döœI¥R©Ÿr9Fîl9ÔR*“þ)³éZÊÕµ›3èí¡R©ÔÒü̼·±{•Àî2¦C)9ƒD"å—6·›G"eäÓÚU£+,]ºtÛ¶m]¯Ï-ìì윻w ³23%1...1Òd jŠò‹èM\”™—L.Kj1Öf’I‰qqqñĬö^Ì*=Œ`üÑ'Ô¢Œ¸¸¸„”ÌÆ:ô«Îz›ÉeLTCÎ%3QMfJ|\\BF!Tš™—˜VŒUÿ駟6mÚÔÍ‹ú”ÀÀ@}}}~kÁg.^¼¨££Ão-ú‚Álî333q8\Ç»²µ2÷Inºª{žÇíÐ^jo§’«PéC{°´1˜vè¡$·Æ—Íæ„ør*±3ÆÆ N.÷›°ØçU!•M2¦`i‚WùCÀd©Íø7¯ݵK-,3{5:…D"¾„…dggãp¸nì7@}Ø";Žù‰"„õ®Àî„òv²ÿcóxÌ÷Ç8v¶ÙpŠc‡²¦ KJÚËŽŒÔ¾_ð¨åêm§æÍuû>G=2÷þüøNCCƒ––Vpp0¿á,K]]ýòåËüV¤/Ìæ!´fÍšE‹uP¡]sŸ´`IP)BdbXTZYªÇXXÁDˆUtCLâ©(ÉMWmÏöäTzh€kJB(fõð_Ê).žtÌ^pI R=4cÈÒ=ƪº>G¬œÓ{Že2B5öj¿&”'íÛï „9Âqû¥„c­ÕèccãC‡õ¤ã¸Áúõëmmm»XùMèrðÉl@e…®l©$ã¡%€+±œFt€i‡nÐ*Nñ6†Æ8¿$3í£qoBe¤`cpŒm)3÷Ú§ ˜¨æ¾×Maæ}7]Pw!3›bE&¸¤QY4¶nÓ*<³ŒE½Ï²ÑËÜsojjzàÀî\Á¢££•••ûÿ&‹<â÷ßÇÒa~ ÎÈ6^^^©©©¡¡¡ß¬Á¬…‘âìO¢rxs—ûÊ×Ò\U/&B¡TÁå}c…„D,ã¤sÉÕP‹ûin»éÆXuxKKY>˜L¨£´RQ‡·œ;M jê… ŽÂcÍÇþ *$$d¸1²/ Z¿þ0@Ã>À{U¹âææVWWwðàÁnö×ðòòJOO ê¼*€´üp¸à¶; æ±ä¼T:ów3Y¨€ŒûaË|.”P1Û~²ql^št-`ŽÅ¨¯ééé•R?ÚÄ?-n)¹®Àñìo3GŠ€”¥í|(¥ÓD¤Å ^°V\½÷ã…qFK[®§ ,9þ§yf€Ä{°ˆçÏ?ÿÄò uÿÒ¾fñâÅ&&&‡æ·"|àÅ‹çÎ ä·"}Ä 7÷rrrÛ·o'‘Z'ìÃÀiO„·^7¦§-¼r8g®Å˜¤ˆ;fþ 1ïÿœ¹Â?e8þ‹škè{„Ðû˜Í YéÈ@ý·mqJ¨FŠK´"î٘KŸrÅlcÊ?¥¡w1«‡Ó˜u÷ íÞ|£]_p_Ûªñ-bcc}}}¯_¿ÞË5“½‡ÃEEEíÚµëÙ³gVV±ÙºwñËȳNvšÃ†-=DâÈ,*†ÀpšNÓ­Hã5* ". ç-utŒutL\n$g·I6<^¥qs`á–­O`!,‡®g}&Tuõn9¸uë–——Wll,;¿[\½z5**êèÑ£üV¤OùôéÓÂ… === :¯=(äæ¦M›æââ²xñâöÓ*¨,ux; d»t©¶ÐouÇɲòºd¬Î/ûöì9œ³ÒD}òæ3¢G¦ÿ¼s©ö§5r’À¬'3ê„ZÈaRjYU/ ™,h¬#EЀ{çìm%„ ÉQ³6§¨ž JÃ-!ÍýàþK',¾T}7còæ3J'§Úü²c:anÑ?ü¸Å«•ßâÝ»wëׯ÷óó5ŠŸÉÀÌÌìàÁƒöööæ´`ÑèFë˜ÌÊÌ”x¯½v”ÛÇ×z5'gÖ Á+GéF+\W`î]ŠN§3™¥yi‰)¾[åÀh³¦çwÓ%òóó×®]ëãã3fLï³4öRRR§OŸNHHà·.}DCCÃâÅ‹7lØÀý½û3üõ%õÎÎÎ#GŽ,,,l÷,òŸò†=ÏWš™—œ[Öø™šŸ}³)öƒ^”Û´ƒA/Ì%—"Ä,ÊÍ¥¶¬S”™œ˜Fi#¤¹&³4?·ˆŠb–æ$DÇ%çÓé…X ¢æ$DGÇ“(íªÑ.ØMIIÉÚÚzÇŽ4íÛÕû‚ß~ûMMM­ãÊ“ÜL¢È 5FUw}ÂöÝ—%»ÓOB¨è®=`¾{fŒ“ €‰r9B¨q*v!„˜ŸˆqqiùŒÖ˜MQc(÷® z‹ÂVõÙ.û.úîSRR==={ØS|%..Ž@ p+•^†Á`Lš4iîܹ,«óÚƒˆïÅÜ#„¶mÛ†íòÁoEx‘ؘx_BBË€(&†m%ñññ|TlçÎ!++ë[XM åµ±£L¢È œ‘9ªìLúØ:Ò¦xž¦òS‰å!D½ €-¡¨töýf(Ýk&vÉÕœxva«úI{‡aË2ØðäÉ8{öl/ûŠÜ¼ySVV600ߊð*•ª¦¦¶`Á‚††~ëÒ×|Gæ!äéé 7nÜà·"§=¼|Cnåb/OÌOĸ„ÆcÄÌLóòðð O"“Óâ‰Y¡¨ÌO áþ§=¼|®f±×+°G÷ÌLâÍÄŒ2Žr¶ÀOÄ諤¢¢­o&6½ÕQóÝLÈb"DÍKƾŕ+Wðxüµk×zØ;ý†7oÞÀúõëù­OÈÎÎÖÔÔ´³³ã·"üáû2÷¡+W®„3gÎð[nÂb±vïÞ­¨¨øàÁ„PMM„„„»6mxüøqþéˆBáááx<þäÉ“üUƒ»444ìÛ·OAA!!!ߺp‡¼¼)ÛL}}=¦¶‡‡Gïósñ :¾wï^wôèÑÁê STT\¹reqq1¿ué9ÁÁÁJJJK—.åÅ–‹ïÔÜc<{öÌÄÄDMM-((ˆßºt¯_¿ž8qBAAÁÚÚú[ï(111€MÕŠ‹‹~ÿþ}kÛ.iii“&MRUUˆƒ§NRTT´²²zóæ ¿uá-åååË—/Çáp»víª­m«®ŸsïÞ====--­ï!ܨ+|×æãÚµkÚÚÚ.\èÿÃ4ƒqòäI ###ÌSß999ááá'Ož\¹r¥‰‰‰ŠŠ ¨©©½zõªo´í”ÈÈÈQ£Féëëôÿ׬ÚÚZ///---ƒAã©ï ™™™³fÍRTTÜ¿?òž7nLŸ>]QQÑÛÛ»ÿÿS÷sB þþþzzzJJJ‡.++ëüš>§  ÀÙÙ™@ L™2%22²ÇrŽ9‚Ãá:ôõëW.ª×c¾~ý0~üx%%¥?þø£îó÷áÃ,–ÔÌÌìêÕ«üV‡?‰ÄùóçËÊÊ®Zµªƒ˜Z>B§Óýüü´µµGŽéááÑŸSOó¹oÁýû÷gÏž---mmmÔ<Ë555gÏž4i’ŒŒÌÒ¥K¹²¿Zff¦¾¾¾‘‘Q¿Z…ðàÁƒ¹sçJKK[YYö“Î÷öö633“‘‘Y²dIZZ¿5â?d2yãÆòòòãÆ;|øpI w¶Ší%QQQ .”‘‘155 ï'C™þ†ÀÜ·CEE…§§§‘‘‡›9sæÉ“')Jç—q•ÌÌÌÇO:UFFÆÜÜüŸþÁf\¹>ØÃ"+**Nž}âĉBBB_ßX,Vrr2‘H¼zõjAA¨¨è´iÓlmm—,Y¢  ÀݶØ<þ|ÕªUŠŠŠaaa#GŽäQ+=ã¿ÿþ‹ŒŒ¼}ûvJJÊ°aÃØ?iÒ$®w~CCÖù©©©¯^½úüù³¹¹¹½½½¢¢"wÛdÐéôëׯ߼y“H$2™LCCCSSSssóéÓ§KJ~;¯SOÉÊÊJLLLNN~ùò%™L644œ;w®½½½žž^ç÷Ì}—øòåË£G?~üìٳׯ_WUU©ªªjjjŽ=zìرcÇŽUVVVSS“‘‘銴ÊÊÊâââ’’’ìììÜÜÜ·oßR(”?bO”/_¾TTT<~ü˜×ù÷] IDAT7…Ád2wíÚuåÊM›6õM£ÝâË—/D"1))éÙ³g¯^½jÕù:::***ªªª²²¥eC£Ñ [u~qq1ûqnii9uêT^ßÔ $'''!!³ÅŠŠŠ£FÒÑÑÑÓÓSQQQSSëâ㳶¶¶¨¨¨°°B¡dee½yó†L&Šˆˆèé陚šN›6möìÙâââËЄÀÜw›W¯^-\¸0(((++ ³ÅÅÅ•••ÕÕÕBBBATTTDDDTTTLLLTT´¾¾¾¾¾žÅb1™ÌúúúÊÊJaaaG FŒÙ,Ì“Ž=-þþûïÈÈÈøøø¾¼©G­]»vôèÑ—.]RRRê˦»KEEEzz:»ó?~üXQQñùógèJç:Ç·êü &tñi! ‹0™ÌôôôÌÌÌœœœ7oÞTVVVUUÕÕÕáñxIIIì›ûúõkii)Öÿ,‹ÅbQ©T‹%++K TTT´µµ±†Áˆ#ø}g¹ï6¹¹¹VVV%%%mOÑh´âââÏŸ?×ÖÖÖÕÕÕÖÖ2™L111 qqqYYÙ‘#Gvü’òèÑ#^ÝÀ7`0[·nõöö^µjU·Þ{ª««ÿûï¿šššÞt¾^Ãd2 +++³³³cccŸÝ¸qcùòå[ÏG£ûn#$$$&&VWWÇ£ °~bî@AA!...88xùòåöööýõ— îM@Ðh´ÐÐЫW¯¾~ýÚÔÔÔÉÉiÅŠ‚WÃþƒ`tß„……ëêêx$\\\œ§sÝeݺuoß¾7nÜÓ§O;¿@ÀwÆçÏŸÿþûokkë#FDDD¬\¹²°°ðþýûŽŽŽ[߯Œî{‚ˆˆƒÁè}N»ˆ‹‹ó×wß–áÇ?|øÐÇÇÇÖÖvݺužžžÂ‚_Î÷NmmmxxxXXXrr²¾¾þ²eË"""äååù­—€o"Ý÷Þ¹ïû¡¹Çøõ×_ÓÒÒ?~<~üø—/_ò[üÉd^¹reÁ‚JJJ~~~3fÌxûömrròÎ;¶¾Ÿ#0÷=×æ¾_9s8ÑÒÒzö왃ƒƒ•••«««`Þ÷CCCCdd¤Ý°aÃNœ8ajjš••õâÅ‹ýû÷+++ó[;]B°ª¶'hhh\»vmÒ¤I¼^YY©®®Žeè·dgg¯X±BHH(<<|ìرüVG¯øòåËíÛ·/^¼¯¬¬lgg·~ýzmmm~ë% 'F÷=ALLŒw£{ ‰þéÌádܸq$ÉÆÆfòäÉ'Nœà·:¸O||¼ƒƒƒ’’ÒÎ;GŽùäÉ“ììì£G lýÀE0ºï6Ÿ>}RWWß·oßáÇy!!4dÈò½H¤+VÈÉÉ…‡‡«««ó[½…H$þûï¿qqq‹-Z¿~½¡¡!¿•À£ûn³}ûöúúz__ß/_¾ðB>;®Ÿ¹Ž±±qff¦©©é„ Î;ÇouôÔÔÔM›6©ªª®\¹R\\<66–B¡x{{ lý`B0ºï CMMMXX˜F£9rdß¾}¼hEZZº°°Gž<âñãÇ«W¯ÖÖÖ¾t鶺€þÏË—/ƒ‚‚nܸQWW·`Á‚5kÖXXXð[)¼B0ºï{öìa0ÇWSS;räƒÁàE+ÂÂÂ<ÍÓÀ ÌÍÍsrr444ÆÊoutDNNÎîÝ»G5kÖ,XRR(°õƒÁè¾444Œ1¢¾¾¾¢¢âÕ«W¦¦¦[¶l9{ö,×RPPxñâ…††×%÷wîÜÙ°aƒ±±qHHÈÀJ¡<èyÿþ=–|øÓ§OsæÌqpp°±±$¤ü~Œî»Á‘#G¨TêîÝ»…„„&L˜ §§÷Ï?ÿTTTp½!žÆõóšyóæåääHII;6::šßê€>>|ØÀÀÀÄÄ$77÷èÑ£¥¥¥ááᶶ¶[ÿ]1ô?þà·GGǺººëׯ:ªªª>|($$4sæL®Èÿôé¶êµk×ddd²²²@UU•+Âû11±¥K—jkkoÚ´‰D"Í;WLLŒßJ}w”””øøøìرãèÑ£ÂÂÂ[¶l ^¹r¥®®î!‚qÞw ÐeRRRDDDöíÛ‡}ÔÒÒ’””d0Ü’ßj×fÌDR(nÉï{ÊËËmmm‡~çÎ~ëò½PVVvêÔ)333iié9sæsñ'*`@#ðÝw===2™üñãÇÈÈÈM›69::r1úð¯¿þÚ½{7{Õœ9s¾~ýÚÇ{”ó‚ÐÐÐ]»v-^¼ØÇÇGBB‚G­|úôéÅ‹YYYoß¾­ªª¢Óéµµµ’’’RRRx<~̘1ãÆ333¬Ó UUU/^¼zõêË—/'MšôÓO?­X±Ûì^€ ¹ïoß¾ÕÓÓ[µjÕ‹/Þ¾}[TTÄÝ´PÆ +++EEE„Ptt´¹¹9åó‹?®ZµŠL&_¼x‘‹wôåË—ëׯ_»v-55µ¢¢B]]]SSsìر²²²222²²²UUUŸ?®ªªÊÉÉ¡P(ÊÊÊ“'O^¾|ùàð\Óéô+W®„……=þÜÐÐpùòå+„W@ßÁç·‹ˆ¹¹¹ˆˆˆˆˆˆ½½=×…_»v Ûîgîܹ“&Mâº|þâëëK ¶oßÎd2{)êýû÷k×®•““ÓÑÑùý÷ß>|ØÐÐÐéU,+>>~ïÞ½ÚÚÚŠŠŠNNN………½Ô„/0ŒÿýwîܹÒÒÒ¦¦¦'Ož,++ã·Rú;‚Ñ}·ÉÉÉ100hhh8vìØ!C¨T*F£ÑhÕÕÕµµµ,«¡¡Åba_¿~2dˆˆˆˆ°°0û¯¤¤¤¬¬,ÇãñANNNNNN]]]CCCNNNCC£¬¬LNNÎÇÇgñâÅü¾].C¡PV¬XQYYfllÜ ïß¿ß±c‘H\¶lÙ¯¿þj``Ð3Mž?îëë3{öì3gÎŒ1¢grú‹yéÒ¥¤¤$mmí¥K—®[·N°¨M@˜ûoRUUõêÕ«ŒŒŒœœœüüü’’’²²²ÊÊJ¶ùÖ××Çápl«-///..."""******&&†ý­¯¯¯¯¯grP[[[YYÉùœøüùó§OŸ*++@ZZúÓ§O8níÚµãÆÓÓÓ300dNØ'N;vlëÖ­îîîX˜SW¨««;xð`@@Àúõë8Ðjf»g9r$,,lÛ¶mnnnýs'Õ†††ØØØ‹/>xð`Ĉ˜•9r$¿õ0À˜ûFB¯_¿~üøñóçÏ322>|øÀ`0TTT455ÇŒ£«««¦¦¦¡¡¡¥¥%++Ë;5*++)ÊÁƒ•””DEEß¾}K¡PJJJdddÔÕÕ LMMÍÍÍÇÇ;ú†ÜÜÜåË—@XXXWn'33ÓÎÎNUUõï¿ÿæzÊåW¯^ýòË/555ÑÑÑ£Gæ®ðƒº}ûvhhè½{÷† ¶dÉ’õë×5Šßz °ðÕ•ÄgªªªÂÃÃ7lØ`dd$%%¥¬¬PæÁƒ!88¸ÚjKRRÒ† ”””FŽù믿¦§§óE ƒ•ïÅÜ×ÔÔÙÚÚÊÊÊêëëoÚ´)**jàŽ‹9©ªª [¿~ý˜1cÂ’%KÂÂÂjkkù­W7`±X;vìÀãñýõW«S§NÂáp}¦ ¶Ðáܹs}ÖbjjêæÍ›UUU‡þË/¿¤¤¤ôYÓ¾+¹¹¯¯¯ÿ÷ß­­­¥¥¥'NœxäÈ‘o !999À¦vmll®^½:€Æû?ÖÔÔ´²²***ÂJ¼¼¼àÍ›7}¬Izzº¼¼ü… xÚÊ«W¯œÕÕÕ•””Ö­[—˜˜ÈÓæ´æ>##cݺuÁÐÐðÌ™3ËWÓ{ ÿüóO]]]…-[¶¼{÷Žßu‰ÚÚÚ7ÊÉÉGDDÈËË÷帞“ôôtpïÞ=®KÎÉÉÙ³gÏèÑ£åååW­ZuïÞ½þ3K$`p3Í}ttô”)Säää6lØ““Ãouø ‰DZ¹r%Ÿ1cFBB¿Õéñññ***òòò×®]ã£Ç¯¨¨àŠ´÷ïßÿþûïãÆÃãñ?þøã7Ћ—€ÁÁ  Ä ;|ø0“Éܼy³³³³¨¨(¿5ê/|þüÙËËËßß_YYÙÝÝÝÖÖ–ßuÂÔ©Suuu/\¸À_5~þùç²²²Û·o÷XBQQQPPPDD…B±¶¶^½zõâÅ‹………¹¨¤]…ßÏîpçÎ===--­ÀÀ@~ëÒùúõ«———ššš©©iߺôŒ+W®¨©©õ‡Ù檪*EEÅ[·nu÷Â’’’ãÇ›˜˜`“(—.]ª¯¯ç…†toî lll”””Ξ=Ëo] îîîòòòË—/ï‡SµµµÃ‡ŽŽæ·"iiiq:^˜LfdddQQQ[oLEEÅ™3g&Ož,--=kÖ¬ . Žè/ƒƒmî½½½ ‚£££ £ww¡R©Ë–-SPP¸té¿uiÁ©S§LMMù­E tuuƒ‚‚°c‹¥££666ì UUU~~~ÒÒÒÓ§O?þ|UUŸ” à› Ts_VVfmm­¥¥õìÙ3~ëÒ˜tz%•NïubÈ^’0|øp;;»ššþj‚ñõë×#FÄÄÄð[‘;!Äb±Øùdee©Tj``àŒ3¤¥¥§L™âííÍ­y]xÁ€ÜÃŒD"ªªªfg?õ×N¡Q£Vù¾hU§6ëo!!;¯Öåݦáõc¡‘öÓz+€U–øÇÆéÚB¢RRr))QQ­é?z„>apCx;t¦üÌ™3sss †Á›7ox¤E×Ávm\´hïšh(Nôp;—×_»v-ƒÁ¸{÷®‘‘Qvv6V8tèP,ϼyóòóóŸ>}º}ûöÁºwŠ€A¿Ÿ7ÝæÆrrrçÏŸG!Téa݇¶n G*-å0Lu}ÒÛö¨w@ݽ÷Nné¬VsÇk·Hÿ»ä<µ×òÛúÐ Otª¼»»»¢¢bRR/´è: ,puuåi´¤ÚñÝìîmÛ¶µÚÇF^^~æÌ™¼ÑQ€ž0ÀF÷?vpp¸xñâ¦M›°ñÆ3ïæºRxÑ$~Ò¹¸èè {»?PíÓ•Æ;òÀhÓÍÌb&z—––†˜•©¡¿DmÞó¡÷ʶF ¤@:ÍêëêêêêêjaaQPPÀ}5ºFmm-‘Hd³íÀ¢RŠË¥ìcZq^jR)ó#«¹fiz*1)5½¬±ˆUV\Æ ¥&¥ÒØOY:%‹”””šWVÛ©n£Fª¨¨5j”®®®–––¢¢bMMMjjjmmç× ÐOHñ¿Ïž=³°°ˆŒŒ´±±içtÁ±U ž˜úÍëE©ÉÏ2ÈÅõõ £ªk6ÍRGQ˜ólÒ½û¯‹>ƒŒÚ¬l•h¹¹•2&Æê" =bÔ()Äù’NO¿/-·¸`øXë¹3ÇIrœ+Î">&å•U3e´Œ-¬ô‡7nÍúì¬Û-ÐØ”›z^‡m}E¦§²ªßèm‹½ðGø©Å{ñÀ¢¤§ÕàuÕX/#â3EU çÛš+Št <‹’žVIÐ5À¼w#‰ü™)£9iþlSÅ^€št5âu9STFkÊüÙúŠí|ï¿þú«¾¾~RRÒ„ ¾Ù<ãÁƒXÞ˜oU¨Ju×´(EŠU¤cØ1ùÜ"³­7D´õ`Õeú¥•¢”È™šK‰YE‘씞ÌSµ&À„×6.q…/:f©v ©±Ò¯Ñ-î(}¼³³ó±cÇæÍ›Çd2Édò‡êëë«««I$Ò´iÓ¸sÿð~¿^t•7oÞÈËË=z´eq¥—,óóû»ÿÌÆ`íVÎœ2¢§V›{wMøˆedµ·¯’I<!ÆCNg‹|þ• £M‰¾’š«Îz­DüžBè½³&ÀŸÄòvîñÜcﱛɄ¢>l¥Éî„òŽ”g´® ¢È ØYìÁ¨­Ýâô©ÄöÔ@!töìY•’’’|G½ÄÙÙyýúõT ¥º¸S[r˜ëû!ÄÊaS 0`I!„˜¡ó‚Œ‡–Û¯•RK?ÑVþ%#„P’×Ó¶_ë4^ÒÞÞþСC-ô¡Ñzv§ð…aî öïßßæ fè¡ö îBFµ2÷¬W`¾ý13/3%ÊÙf$€á *BˆõÊ ³‚ó÷'2ï‡þÖd[­©MÓü!„Þ;7™øð”¬Lb˜VUݽ!é€æ>q©yyi¡{±}¤Ñb<´ÄvjTš 4€‰Ó^gs5)e)ß\_ûht*9ïÑ>KÀΖ¶<»' &…åŒÐÑTÄÚµk­¬¬ºÿ-õ33³°°°*´gî™WT4m÷œþ_F)«ñ»¶\êäà°ÚÁi©1¸”1¸¦pG6ý$ŒæÿâÔO¾ŸŸŸÀY/`@30Ìý±cÇôõõÛË$…™{«D:BÔ»˜)›zô jiî™çµ`‚{ó5ë‰e“Ť]&¸5,‹;Ю¹Çd‚ƦLvü$ã ö”9EªbΘ{7µR°qî’Ç3舕¤Åñ(ÂÎC|¼|}}}}}½¼¼¼¼Nû^ç4Ðì÷€Ž•g×wM`Ø ٩䪶Ò{©ÃÉÛÚÚÚ#F„„„töµp•Ž¢ÑR]@½±)lÓ_“™ææl§ }5û± €¹ó™ð€€ÐЫ!!Ñ©,ÌÜ·zµ¢æ'„žr²7lù­}“‡Ž=º÷'@Ÿ澺ºZNNî‹þ›Ì=!„(1[°¡ì?¹ˆEj™Ã¤W’3Ó⢼\l,ØäTY°ØŸ3™æ{imØã„M’›¬ôÏaå59K´ç;íóN*bå‹"Œ–%7î?í…V4úŽlØO¾¥|c}õæg[%×Īfiìv¿!¿‘‘‘jjj,«£J\¥¾¾^LLŒÙáBÑ…­ù}·É0Ò“Æzm°;¾¡Æª= ¼Œc±K’<Á¼ó4ÆCË–æž–r` !„PqÌZ€e¤Î–@TTTHJJöüôôÒB*Ÿ´ôS@dΩS§LLL&OžÜiMõEžö¿üt$“Õ"”æYà6Q)9M}“Y¶vw¹x+ €c»ïñ:œ3„uµvä‹â$`¦…N‹B1Èx["w¬<HÀÇjf‹ë?Àø‰ŸÌ5zEºeË–àààî_×Ch4š˜˜X'•$¦†•æÄ…rÞ›TD-LKûY DMÏK¹¹cù½qIEÌsz"€3sf–¾ŽöX¿Ü9&™L;¹x$à§ÝHIÙ2…#p^bb(½}tùòmñ)oò½vEIQQѪªª^Ü¥€F(Y)III™ÅX+B¡4‡ÌR(E´€¶Ñ´Œâ¼Ô¤¤”Ì•ÉÅ4ö…äb ªò)UÅäƨ\Fq^RRRJ…CDQz*‘˜šÅ)ö{߯ðþý{÷íÌà-œ9l—49sR½fÀø=ÙuX™˜Ÿý¡²„-}÷ íûî‹ãvbWq8¾ÿÛ« àJ,Ï ]Â?°ÏÅ8Ì9ú!ôæêZL¥£ ­î¡,Å[ À*¾õÌ0êTù&çŒ6d‚õYcPJU[i]tæ „h4š¤¤duuu'õ¸D||ü¸qãú¦­3räÈ´´4~kÑ©®®^·n‡³¶¶þøñc‡u?ùÙ7ÛŸ !9e;€á :B”«kà©ŠEŽàÓXa‘fé?±‹F¬ºÌ`<ÔØù訵öß7­»´Š§¢¬Ð­Í2–œ/EˆE¾Ìɶ ¾ßeä-ýÝÜX[[û|;æ¡šÀ¦ßfî³°_É„ÉE Ĥ“‰ÁM£éÉtÔøkvdÎÁoFæ0ž`n<ŸK¥ÓK_{9À²djÓĤPèLzqf¬ƒqã“SÕo~£Ü öûCâ’H¤ä„hglª­L݉òìØÍ5ñ¹45ÇÏa<@“7¿æ!4~üøäþí"÷ïßÿý÷ßÙÓñññúúúþœßZô/ª««×¬Y#///&&¦¥¥%&&&""2cÆŒo}ÊÕe °Ÿ_qÜNlb ›÷²ß»×`±Ï+„˜íFÓ8†g#„°°ˆÐìÍS2ìéÆC#l¬ô†Àîè„¢>±Xò.Õà ` !„þ;daá“ü}e²ëïæÞÙÙyË–-ß>_éf“œœ`ÉÔ°A1õakoI>iµ!9¢½ VñÔÖIÚ ×núѼßkÔFÆ/½èÐ?²EøQR-‹ñVa)QÑ/ŠåÇkbãJ_ú&’ë$Ä%4L­×®YÄ$†G½ª0CÀb|ÆÏ¡coå–3EtÌú«¢U¤á|C<Lò ñÉ#¬‹=ïKç] H"!H‚øèi+WÙéà±nÔ:AªYvûYe­¸œÊ$+ûU‹M9fIÕ¶üód­[fü­{ŸçUÖÖ" 9]ƒ©ólçkàš4Ÿp$À'_ÔHŠã^:RÃüé/½˜ó×óë„T&ÌÚ°þG|“´PŸ|Ä)m’gˆO.hvÁÃárss_¼x!***...******&&ÆþÛ¹ˆoÓÐÐÕÕÕûöí;zôèîÝ»ëêêZT ÄzF‰ìØ5¯›ÓÌ<¤¾¾^VV–’ Éd²gá·>öYyǪ«««««%%%ÏŸ?¿nÝ:씊ŠÊµk×(Ê?ü@ PËýòD@sÍ’ÙæP_/*º`Ú¼ú1Ú’@-¯(ùP  Áª©07š6ÃXî3SHlÁ´…¢cñègp­¬LT6ÉÞø©³fÍ6W¨­qsó%Ò£u&[•æ-¼è²ÀÛeŽÏ«»Û Ú»npÒß7/ttt”““óôôä]UIð–Ç`^óö:ì‡óñúÖá‹ÏAÝ¥ÏIDATá ê˽½M•ÃkjÙJZßâª+W®¼wïž´´tC_¾|ihhøúõ+‹Åb±XbbbC‡:t(v€ ‹ˆˆ`±‘&„……EEEEDD7Ko«<‰yÕH²þ£èAN]D=-i¼oohèÇŸ~¸çΞægŒ¥w™Ä¢€ðøØb â7ëážV=ûÊ"ý}tÇãy ›¸ÀŽï¬7]úÚq‘ñç´hïhptYÒO MçÈt^¥Ðét—ß~ûí[êêê˜Lf}}=ö;ÀÀŽY,g!»„Åb%&&6ê.#cffößÿååå½yóFWW·Q:’€‘­(/#_JÍ@_Œ²"ºˆ5/¯Fi¬±X¥é¤Ükl¤(Œ²"ªˆ’*^€UL)’TÕÀ‹°¨äÂ5MEFQzÆûÏ ¯k¬ÇÎ)DÉJù¯’EОˆe7j-ŸƒŒŒ eee^ØzÀápWêgÚÚÚ¾ÿ~ëÖ­±±±ÊÊÊ–––¯_¿Æ&ù9²sçζ»òŽsòr>eh,ú?‹[·’`ÕåEøÔ¥šû`UÄ ûrÕtÅ™ó¶[•9v×ä…B¦Ûào‘`wô_8•‘÷Ý&Ïœ¥gcCºu æy¯›b¥ê¤²ÜNý‰±&‰D†ÆX[Qx¿`˜ÐŸ‰U÷ÝÂgNÇÙØÀ­[ù° ñGƒq?åB¡4[™¸[éðçɱ|è8>ÒÇΣîòï¿ÿš››óº•âïV™gV~00j`³ÇÜÈÏÜ–±cÇ&$$ð@p£p))©9s樫«kkkÿóÏ?ÆÆÆì k˜›Xìû!”ê¦ÐTà^Ü"Ó‘UXní}gƒ¿é¡¢˜ãó 5Î n~Ki’Ñ6D¤…üV^çÀÀÀ£¾kÞ½{7gÎqqqàååÕٽʔ¸°€€Ð›)o˜1KsˆÄ”¢Æÿ7f)19· !Ä,}“LnÎMD&Ň„F'¤7ùð+I Q!þWÓŠ¨E™iùt„¢æ%GGÇåRY¡"R|H@@8ÇšG:9-:$$$<&-ÿ»Û¯¿›û?JKK÷ɶÎ5ä¼ ‰DÊÌXKò˜ôJ*û—””HIIñ®çmmmÀÀÀ€'góæÍ›6mbWÀÌýQâG„Л«[¬’é(Õà `Ybµ´´ØË`u!„>Ú˜ÿý1õ0€ ¡b,w^B(ÔÔ\Ÿ´ Éh7D„-ÿSiëôF+V¬h/k“€fž={öí˜iü§¿›{„ÁÅ‹ù­Åw‡§§çŒ3x'ŸF£Ý¾}›³$22ÒÀÀ ¹Bª Àf2öñÄà©*ÕM·1Aã‰%Ànbc è° µ*ÃàtfÙ-'mK€5Y´ö§ÒjÛ†d´"Ò,¿ ZZZ<à~GÐW €UµëÖ­;wî?5¨}4]Hèhj5ÿ4 3qèi_6èääÄ;ù8nÞ¼yœ%³gÏÎÏϯ¬¬ä(Sáœ>)©a1T ‹c™M+#Å@RDBg™\ ¼à/éö§§„œÿ;Ö,4W˜y´4/9ÀcI]¬Ë“ás}_³CD,--§ýp $ Ô^[²µü&>|øPQQannÎ¥» € s¿uëÖ‚‚‚Û·oóWúz>6.ª6qî¼íFšñ„ÀÀÀ!C†,_¾¼ÏZ™)S¦üóÏ?Ÿ‘8À¡kYuð19Ž&sÇsfAe­ áw±¤¬GW‚A]_SDdÆÚ/½]"aŽ…‘™œu TÛ³b Àƒ}zÃN–;ºxƽ¯ñ0‚ì•Ò8i ךüäàèè¸Ò¤òÞæ7CKýüüfÍšÕqJú;ü~½èÁÁÁ#FŒ`0údj…Y™™’—˜Fitß2%IñqqqØ<»v)1...ž˜…U¦åf›æMéŸr›gjÈ™™E­ìL2vyÊWq%‰˜—QÄ —æç1BÔ¢ü"j§Éò¹Cyy¹‚‚B+OKßldd„7&¦˜n3æž~‚JrØþ«PFô0²µÔ`ïÙ‚ícw!D ]MËpʈîXeK€?>"Ö+,Û„ –atÕezKùœŒ=úÆ}ÒðŠaîB3fÌX½z5Ï›¡>´ç|šŸhNEÀ%‚Ï9—ÑjlJ¦¢[N° KˆŸêa»±Lôä ÍǬœ«p'¸ä2b™HbØ´’Ñ"D¤­|Œˆˆ ö¶[ ` 1`Ì}ii©ššÚüÁÓVÞ„.ŸÌ„–ò K4f YkXÔ×û,FzRŠqV×è·! –\Áîr9Ñs3TbÙš°ìfY ›Rô4rßm2ì‰ÎF½‰Ù‹ýs®:©hŸ"~D¨æ¾× hLûSéaã]Ÿ´«3w±´´3f ÞGom9|ø0_öÒêooo~k!@@o0æ!”™™)))É»,.¨)çåûþÑIäÒÒÆG,ûRbcHº—)À2ã“›&ÀÆæ8ñû{Ç,Hªza0çTb=hLé7ÁŠ˜~v—9\9Ÿ<Œ8K*‰qq)äl7MPÛ~§©Î{³ò}dîwïÞ ååßÜɶ¨®®VTT|øð!uà$::ZUUµOBà-`ª–žžÞû÷ï]\\Nž<É£&Tlö‡î]ü2ò¬“…æ°aFK‘hØ"BA Ì:!€Rjñ³‹dPÃ7OJãejê¿þä÷e§$aYLÌïðòArvb\løÙœc¦O ' ã'Ži*!XØؘáÿ{HŽLûRÊF@åÑ­¶ÁÝÝýâÅ‹ÅÅÅòò턦ô222üñÇÆ¿|ùÂG50êêê¶mÛvêÔ©^&  ?0Ì=(++?þüôéÓ¬ìï ,Ýh}“Y™™ïµ×ŽrûøZ¯öÃEä—j¶ˆ×aÖÀ0)QáYö[àN Û±Ë0oÞœ9³,áÑÁÍ{oÕOV#90«j ƒ\Ânù–×!¿4)#Ž}´è%é@àö=¶…Åb­Y³&888))©Ã„t}Ä/¿ü"))éîîÎoE`ÿþýêêê?ýôSçUtŸZJ¬‡×Æ·N³JóŠi]C½~fûR›¥®¾ÿt$M ÈœVŽ?~Ú´i%%%Ü•œä¦`‚í¥€Ê®ia¾”–;¦z˜X%RYWÀÄŸT…jÜÛ?¶i“ôÅ>9l>Ì;OE1?ãâÒò1cœT´±Ëi¤ó0ÕçÕ-g%íSÄ„j’ü~ÞûîÉd²¾¾þöíÛùëÃiÅÛ·o ïR8t…¨¨(yyù¢¢¢Î« è´¤.ßÈÿQãg°çi§B)‡`µ³Û•Ðmß–&¡å»ç¤¾¾~Æ òòòì%ø\E¾Œ¥³×6Ö€FÓO½«ÅT“ä¦  OE¨è®MËÊa¹µ¡¦MWÀ'³¶©~ÓÖçÔ»M¡~MQ@ZZX›kÒè±^9·Lš™{Eæœ;wŽ@ ìÞ½»®}PVV..æORòwïÞ)((\½z•/­PV¬X±gÏžŽ÷—G!T“GJNN£P’€zSn"j!)%…HLÉ-e „ýµ³&ÀÆË¥ÌöÎrˆÊºº`W.•EKuiÎtÄüDJI$¦°Ë饅…T,v‹YD&7ÆF3+óóKT”Þ2PÍ=F\\œªªêÌ™3) ·d²¨91¡>§=¼|CnaY–ó1.¡ñ!*ùéMv†&faBˆÿi/ÿð[ù•ÍB¨yÉÑqIØ@ƒYú:.ú~.ö3lݳ/÷ñððò¿_ÊD1É$R™œ™G,¢æ¸i‚šë„˜yÄ›‰œñþ½%''ÇÔÔTKKëÉ“¾øéûöíÓÐÐèl3<îC&“àøñã}Üî@GFF¤¥¥]\\¾iôY9Ø~Ÿž ²—P4q*¥ b€©GŸ·=ËÆ‘GÏêNÂgt'w¹/:¦¿0°Í=BˆN§oݺÇoݺµÏ6Vå5~° ¾ˆ35`}ók÷(//ÿùçŸq8ܺ0ã37n€÷ïß÷Y‹ïÞ½Ãápîîî}Öâ ÆYXXXZZúÀmßÓýfb›}"Tê4 OPÝÏÔö`i•FØ&t•FØX§¦½³Í0RõM£ûÊnåÎãq—ô/ú{¾ûN‘””ôõõuvvÞ±c‡†††££ãÁƒ±QÆDjÝù  úëg«6îà4rõyÿ\KÉ]QQqèС+W®Ì™3'++KUU•[’y‡¿¿?‡³²²JHH3f ¯›{ýúõœ9s6oÞìêêÊë¶8±±±ÉÏÏïî~RÝÝ—ª÷õ;¾½YCCCMMŸŸŸ‡‡j¹RMi18©¥ë×üì_ ¹…X3å~ì™c{Ó§\L‡© ã Rß:‹Ádr~¡Úœ˜tØím¶ÔÙÅÑò懱ÇìÁíaV¹î­hmË÷·³« ®GÂŽ­Ÿr¼¹Ç=zt\\‰DÂB)~üñǃŽ1‚ßzu ½uiLÛ¬ÌüJ¦AIK_C‘+bß¾}ëîîkmmýôéÓæ-D'Ož$“'O>}ú4{“<^àãããææöÇlß¾w­´‹»»ûçÏŸQ7÷“ê´>êæ~U=®lÚ´©¾¾LLL¤¤¤^¾|ù ¦VQ­¬ÿý2z¹ÿÇùNûl×lÓ‚¤¨nœÅ²ãµ¡½Üyǵý%ÝHžoM8/ k<ŒÅÛ»xðÒ—¯}CVVÖÊ•+eeeg̘ó=¯}g±X—/_ž2e wtt$“ÉüÖ¨ç–^¯Ÿ˜˜˜™™1 <O¡P(•ÊÒÒÒD×u³0 ëíí•H$mmmMMMùùùÿç‡f³yrrrxxØb±Ô×׫Õj©TzÓÕp(îãl6Ûøøøôôôââ"B¨ººZ&“ÕÔÔÈåòää{0u …´Z­N§Óét†Q©T™LÖØØØÜÜ, ]Ý­ ƒƒƒƒ£££ƒN§3™LƒÁd2÷ά­­Ùív«Õ‹ÅÊËË[ZZ”J%NOôp{È÷­¬¬LLL`f2™¶¶¶rrrJJJ*++‹‹‹%É]HOÇÇÊÊŠÙl^XXX]]õx<|>ŸØFB¡PÜÂòÄ{A¯×/--Y,»Ý C¡P$INNNMMe0"‘¨¨¨¨²²’x¾ ‘=î/ ‡ÃZ­V«ÕF‡Ã±±±Fù|þ£GD"ÇB¡0//ï&öÃqÜív;N—˵¾¾îv»­V«Óét»Ý4M ”••ÕÖÖVUUÝ‹!€;âþ*^¯×h4®®®:ŽÍÍMdz½½íóù"‘—Ë¥Óéiii ƒÁ`°X,‡ó除¤¤¤¤$*•J¥R#‘H4Åb±Xìèèˆøôûý@  ƒÁýýýp8ìóùh4—ËÍÌÌÌÎÎæóù"‘H,K¥R‹õßµÀ• î?D8v¹\^¯×çóùý~¿ß¿»»»··wxxOvÂÉÉ …B¡P(Ä €¸¤¤¤0™L6›Íáp8—ËMOOÏÍÍ…1;àæ@Ü)ܳכø0÷@ ÷@ ÷@ ÷@ ÷@ ÷@ ÷@ ÷@ ÷@ ÷@ ÷@ ÷@ ÷@ ºŠ K»}tIMEÜ "6‡5IEND®B`‚dnssec-tools-2.0/apps/owl-monitor/docs/install-sensor-1-overview.html0000664000237200023720000002675512110717521026162 0ustar hardakerhardaker Owl Monitoring System -- Sensor Installation Manual -- Operational Overview


 

Owl Monitoring System

Sensor Installation Manual

1. Operational Overview of the Owl Monitoring System

 1.1. Owl Sensor Overview
 1.2. Owl Manager Overview
 1.3. Data Retention on Owl Hosts
    

The Owl Monitoring System has a conceptually simple method of operations. There is a manager host and a set of sensor hosts. The sensors periodically make a set of DNS queries and time how long it takes to get a response. The response times are saved to data files. After a certain amount of time, the data files are transferred from the sensor to the manager host. For any particular sensor, this data transfer may be configured to be initiated by either the manager or by the sensor. The manager transfers the data into a monitoring package, which allows easy display of the data.

Below is a diagram of the flow of Owl sensor data through two Owl monitoring installations.

Take note of the following:

  • There are three distinct administrative domains, two of which have Owl managers.
  • Owl Manager 1 receives sensor data from all three domains.
  • Owl Manager 2 receives sensor data from itself and one other domain.
  • Domain 1's sensors do not provide data to other domains.
  • Domain 2 contains an Owl sensor, but not an Owl manager.
  • Owl sensors in the domains 2 and 3 provide data to Owl managers outside of their own domain.
  • Owl sensors can query multiple name servers.
(Domains in this example are defining administrative control and are not DNS domains.)

The remainder of this section provides a little more information on the components that make up the sensor and manager software.

1.1. Owl Sensor Overview

An Owl sensor makes timed DNS queries and records the time required for a response. The response time data are transferred to the Owl manager after a certain period of time. The transfer may occur at the instigation of either the manager or the sensor. The Owl sensor's three primary programs that handle these tasks are described below.

The Owl sensor's actions are controlled by a configuration file. This file defines the queries that must be performed, how often the queries must happen, how frequently the response data files are transferred to the manager, data and logging information, and other required information.

The owl-dnstimer program performs periodic DNS lookups, as specified by the configuration file. These lookups are timed so that the sensor can record how long it took to make a particular request. The configuration parameters used by owl-dnstimer include the nameserver to query, the target zone to query about, the type of DNS record, and the frequency of queries.

If the Owl system is configured so that the sensor transfers its data to the manager, then the transfer is performed by the owl-transfer program. The transfers are performed using rsync over an ssh connection. The sensor host must be able to do a password-less ssh into the manager host. The frequency of transfers is defined in the configuration file. Choosing the transfer frequency is a trade-off between lower impact on the sensor, manager, and network (less frequent) and lower latency of data display on the manager (more frequent.)

The owl-sensord program is an optional controller for owl-dnstimer and owl-transfer. If used, it will run these daemons and restart them if they stop. If one of the daemons tries to restart too often in too short a time, then owl-sensord will warn an administrator (via email) and temporarily stop trying to execute the program. owl-sensord is not required in order to run owl-dnstimer and owl-transfer; the Owl sensor can run fine without it. However, it provides a convenient way to keep them running.

As part of the installation process, you must decide whether you will run the Owl sensor using the owl-sensord daemon to control execution or if you will run owl-dnstimer and owl-transfer directly.

The Owl sensor has a number of programs for administrative support. Most of these are not required, but they assist in sensor administration. In particular, the owl-dataarch and owl-heartbeat programs are intended to run as cron jobs. owl-dataarch moves "old" sensor data into an archive directory, in order to keep the sensor-manager data transfer from bogging down (within rsync) as the data collection grows. The owl-heartbeat program periodically touches a webpage hosted on the Owl manager, in order to let the manager know that the sensor host is still running. owl-heartbeat is not critical and can be left off, but owl-dataarch is essential. There are a few other administrative commands available; see section 6 for a brief description of all the Owl sensor commands.

1.2. Owl Manager Overview

The Owl manager's purpose is to receive sensor data and make it available for display. The majority of the Owl manager is actually third-party packages, and the Owl manager software provides the "glue" that allows the Owl sensor data to work with those packages. In particular, Owl provides data to the Nagios monitoring system, which then displays the data.

The Owl sensors may report to managers that are under separate administrative control. A particular installation of the Owl Monitoring System may use multiple manager hosts, but this document assumes that there is only one.

The manager can have either an active or passive role in the process of moving Owl sensor data from the sensor to the manager. If the manager is active, it will use the owl-transfer-mgr program to pull sensor data from the Owl sensor host. If the manager is passive, then the sensor will transfer the data when it sees fit.

The are two groups of "glue" programs that Owl uses to interface with Nagios. The owl-dnswatch and owl-perfdata inject Owl sensor DNS response data into Nagios for display and graphing. The owl-sensor-heartbeat.cgi and owl-stethoscope programs insert Owl "heartbeat" data into Nagios so it can track availability of the Owl sensors.

The Owl manager also has a number of programs for administrative support. Most of these are not required, but they assist in manager administration. In particular, the owl-archdata and owl-monthly programs are intended to run as cron jobs. owl-archdata moves "old" sensor data into an archive directory, in order to keep data transfer from the sensor from bogging down as the data collection grows. The owl-monthly program archives the previous month's sensor data into a compressed tarfile. owl-newsensor and owl-initsensor assist in setting up the manager for a new sensor. There are a few others available; see section 7 of the Owl Manager Installation Manual for a brief description of all the Owl manager commands.

The following third-party software packages are used in with this distribution of the Owl Monitoring System. The packages are not included with the Owl distribution, but must be retrieved as required for your operating system. These packages must be installed on the manager:

 
  • Nagios
    		• Monitoring system.
     
  • Nagios plugins
    		• Monitoring system.
     
  • nagiosgraph
    		• Provides graphing for Nagios.
     
  • rrdtool
    		• Database tool for use by nagiosgraph.
     
  • drraw.cgi
    		• Draws graphs for nagiosgraph of data stored by rrdtool.

    Instructions are given in this document for integrating these packages with the Owl software. It would be for the best to read the installation instructions below for each package prior to installing them.

    Different management, graphing, and database tools may be used instead of those listed above, if so desired. Integrating the Owl manager software with other packages is beyond the scope of this manual.

    David Josephsen's Building a Monitoring Infrastructure with Nagios is very helpful for understanding Nagios and how the various pieces work together. If you're going to be running a Nagios monitor, you would be doing yourself a favor to read this book.

    1.3. Data Retention on Owl Hosts

    Owl sensors generate a large amount of DNS response data. For example, a sensor running five queries, once a minute each, generated roughly 517KB of data per day. (Due to the way the data are stored, this will be affected by the amount length of target and nameserver hostnames used.) You may or may not want to retain any of this data. The data files can be useful for rebuilding the Owl manager's rrdtool databases (or building with different parameters.)

    On both the Owl manager and the Owl sensors, sensor data are stored in a data directory. After a few days, the data files are moved to a data archive directory. A full month's data files will be collapsed into a compressed format.

    The Owl Monitoring System provides tools that assist with managing Owl sensor data. After the sensor data have been moved from the sensor to the manager, the sensor has no further need of the data. On the manager, after the data have been moved into the data archive, the Owl Monitoring System has no further need of the old data; it may be retained or deleted. (The data will have been moved into the manager's rrdtool databases by then, so the data is not lost.) Each installation must decide their own data retention policy.



    Section 0.
    Introduction         		Owl Monitoring System
    Sensor Installation Manual         		Section 2.
    Installation

    DNSSEC Tools

    dnssec-tools-2.0/apps/owl-monitor/docs/install-manager-1-overview.html0000664000237200023720000002671612110717521026260 0ustar hardakerhardaker Owl Monitoring System -- Manager Installation Manual -- Operational Overview


    		 

    Owl Monitoring System

    Manager Installation Manual

    1. Operational Overview of the Owl Monitoring System

     1.1. Owl Sensor Overview
     1.2. Owl Manager Overview
     1.3. Data Retention on Owl Hosts
        

    The Owl Monitoring System has a conceptually simple method of operations. There is a manager host and a set of sensor hosts. The sensors periodically make a set of DNS queries and time how long it takes to get a response. The response times are saved to data files. After a certain amount of time, the data files are transferred from the sensor to the manager host. For any particular sensor, this data transfer may be configured to be initiated by either the manager or by the sensor. The manager transfers the data into a monitoring package, which allows easy display of the data.

    Below is a diagram of the flow of Owl sensor data through two Owl monitoring installations.

    Take note of the following:

    • There are three distinct administrative domains, two of which have Owl managers.
    • Owl Manager 1 receives sensor data from all three domains.
    • Owl Manager 2 receives sensor data from itself and one other domain.
    • Domain 1's sensors do not provide data to other domains.
    • Domain 2 contains an Owl sensor, but not an Owl manager.
    • Owl sensors in the domains 2 and 3 provide data to Owl managers outside of their own domain.
    • Owl sensors can query multiple name servers.
    (Domains in this example are defining administrative control and are not DNS domains.)

    The remainder of this section provides a little more information on the components that make up the sensor and manager software.

    1.1. Owl Sensor Overview

    An Owl sensor makes timed DNS queries and records the time required for a response. The response time data are transferred to the Owl manager after a certain period of time. The transfer may occur at the instigation of either the manager or the sensor. The Owl sensor's three primary programs that handle these tasks are described below.

    The Owl sensor's actions are controlled by a configuration file. This file defines the queries that must be performed, how often the queries must happen, how frequently the response data files are transferred to the manager, data and logging information, and other required information.

    The owl-dnstimer program performs periodic DNS lookups, as specified by the configuration file. These lookups are timed so that the sensor can record how long it took to make a particular request. The configuration parameters used by owl-dnstimer include the nameserver to query, the target zone to query about, the type of DNS record, and the frequency of queries.

    If the Owl system is configured so that the sensor transfers its data to the manager, then the transfer is performed by the owl-transfer program. The transfers are performed using rsync over an ssh connection. The sensor host must be able to do a password-less ssh into the manager host. The frequency of transfers is defined in the configuration file. Choosing the transfer frequency is a trade-off between lower impact on the sensor, manager, and network (less frequent) and lower latency of data display on the manager (more frequent.)

    The owl-sensord program is an optional controller for owl-dnstimer and owl-transfer. If used, it will run these daemons and restart them if they stop. If one of the daemons tries to restart too often in too short a time, then owl-sensord will warn an administrator (via email) and temporarily stop trying to execute the program. owl-sensord is not required in order to run owl-dnstimer and owl-transfer; the Owl sensor can run fine without it. However, it provides a convenient way to keep them running.

    As part of the installation process, you must decide whether you will run the Owl sensor using the owl-sensord daemon to control execution or if you will run owl-dnstimer and owl-transfer directly.

    The Owl sensor has a number of programs for administrative support. Most of these are not required, but they assist in sensor administration. In particular, the owl-dataarch and owl-heartbeat programs are intended to run as cron jobs. owl-dataarch moves "old" sensor data into an archive directory, in order to keep the sensor-manager data transfer from bogging down (within rsync) as the data collection grows. The owl-heartbeat program periodically touches a webpage hosted on the Owl manager, in order to let the manager know that the sensor host is still running. owl-heartbeat is not critical and can be left off, but owl-dataarch is essential. There are a few other administrative commands available; see section 6 for a brief description of all the Owl sensor commands.

    1.2. Owl Manager Overview

    The Owl manager's purpose is to receive sensor data and make it available for display. The majority of the Owl manager is actually third-party packages, and the Owl manager software provides the "glue" that allows the Owl sensor data to work with those packages. In particular, Owl provides data to the Nagios monitoring system, which then displays the data.

    The Owl sensors may report to managers that are under separate administrative control. A particular installation of the Owl Monitoring System may use multiple manager hosts, but this document assumes that there is only one.

    The manager can have either an active or passive role in the process of moving Owl sensor data from the sensor to the manager. If the manager is active, it will use the owl-transfer-mgr program to pull sensor data from the Owl sensor host. If the manager is passive, then the sensor will transfer the data when it sees fit.

    The are two groups of "glue" programs that Owl uses to interface with Nagios. The owl-dnswatch and owl-perfdata inject Owl sensor DNS response data into Nagios for display and graphing. The owl-sensor-heartbeat.cgi and owl-stethoscope programs insert Owl "heartbeat" data into Nagios so it can track availability of the Owl sensors.

    The Owl manager also has a number of programs for administrative support. Most of these are not required, but they assist in manager administration. In particular, the owl-archdata and owl-monthly programs are intended to run as cron jobs. owl-archdata moves "old" sensor data into an archive directory, in order to keep data transfer from the sensor from bogging down as the data collection grows. The owl-monthly program archives the previous month's sensor data into a compressed tarfile. owl-newsensor and owl-initsensor assist in setting up the manager for a new sensor. There are a few others available; see section 7 for a brief description of all the Owl manager commands.

    The following third-party software packages are used in with this distribution of the Owl Monitoring System. The packages are not included with the Owl distribution, but must be retrieved as required for your operating system. These packages must be installed on the manager:

     
  • Nagios
    		• Monitoring system.
     
  • Nagios plugins
    		• Monitoring system.
     
  • nagiosgraph
    		• Provides graphing for Nagios.
     
  • rrdtool
    		• Database tool for use by nagiosgraph.
     
  • drraw.cgi
    		• Draws graphs for nagiosgraph of data stored by rrdtool.

    Instructions are given in this document for integrating these packages with the Owl software. It would be for the best to read the installation instructions below for each package prior to installing them.

    Different management, graphing, and database tools may be used instead of those listed above, if so desired. Integrating the Owl manager software with other packages is beyond the scope of this manual.

    David Josephsen's Building a Monitoring Infrastructure with Nagios is very helpful for understanding Nagios and how the various pieces work together. If you're going to be running a Nagios monitor, you would be doing yourself a favor to read this book.

    1.3. Data Retention on Owl Hosts

    Owl sensors generate a large amount of DNS response data. For example, a sensor running five queries, once a minute each, generated roughly 517KB of data per day. (Due to the way the data are stored, this will be affected by the amount length of target and nameserver hostnames used.) You may or may not want to retain any of this data. The data files can be useful for rebuilding the Owl manager's rrdtool databases (or building with different parameters.)

    On both the Owl manager and the Owl sensors, sensor data are stored in a data directory. After a few days, the data files are moved to a data archive directory. A full month's data files will be collapsed into a compressed format.

    The Owl Monitoring System provides tools that assist with managing Owl sensor data. After the sensor data have been moved from the sensor to the manager, the sensor has no further need of the data. On the manager, after the data have been moved into the data archive, the Owl Monitoring System has no further need of the old data; it may be retained or deleted. (The data will have been moved into the manager's rrdtool databases by then, so the data is not lost.) Each installation must decide their own data retention policy.



    Section 0.
    Introduction         		Owl Monitoring System
    Manager Installation Manual         		Section 2.
    Installation

    DNSSEC Tools

    dnssec-tools-2.0/apps/owl-monitor/docs/install-manager-5-define-graphs.html0000664000237200023720000001220512110717521027116 0ustar hardakerhardaker Owl Monitoring System -- Manager Installation Manual -- Defining Graphs


    		 

    Owl Monitoring System

    Manager Installation Manual

    5. Defining Graphs

     5.1. Graphing with nagiosgraph
     5.2. Graphing with drraw.cgi
     5.3. Adding Graphs to the Nagios Sidebar
        

    After Owl sensor data has been gathered for several hours and rrdtool has been adding it to the RRD databases, you can consider how you will graph the data. Graphing capabilities are provided by nagiosgraph and drraw.cgi. Both are very useful and have their place in your Owl monitor. It isn't a question of which to use; the question is how you want to use each and how you want to display your monitoring data.

    5.1. Graphing with nagiosgraph

    nagiosgraph provides menus for easy selection of data, available through three CGI scripts. These are simple graphs that only display a single sensor/root server/DNS record per graph. For these scripts, the host is an Owl sensor and the service is a root server/DNS record type. Links for these scripts are included in the example-side.php file.
    • show.cgi - Provides graphs for a user-selected host/service pair. A graph is provided for the current day, week, month, and year.

    • showhost.cgi - Provides graphs for a user-selected host. A graph will be displayed for any service with that host. A graph is provided for the current day, week, and month.

    • showservice.cgi - Provides graphs for a user-selected service. A graph will be displayed for any host with that service. A graph is provided for the current day, week, and month.

    5.2. Graphing with drraw.cgi

    drraw.cgi provides a much more complex graphing capability than is available through nagiosgraph. It allows data from multiple sensor/root server/DNS record groups to be displayed on a single graph. Set-up for the graphs is not difficult and is done through a browser-based interface. However, there are a number of things that must be specified before the graph can be displayed.

    The graph-definition webpage talks about selecting data sources to be displayed. This is referring to the group of RRD databases you want drraw.cgi to use for this particular graph.

    Defining simple graphs, even those with multiple data sources, is not complicated. However, you can define fairly involved graphs (e.g., averaging data from different databases) with drraw.cgi.

    5.3. Adding Graphs to the Nagios Sidebar

    The share/side.php script builds the left sidebar of links on the Nagios page. Several simple modifications will improve access to the graphing facilities. Obviously, this step must wait until after the system has been set up and site-specific graphs have been defined.

    The example-side.php file (in the Owl manager distribution) contains sample lines for both drraw.cgi and nagiosgraph. Add the contents of this file to the share/side.php file after the "Quick Search" text-entry box.

    The sample lines must be modified for your installation in the following ways:

    • The paths in the links must match the way you installed it.

    • If links to specific drraw.cgi graphs are to be included in the sidebar, then the graph id in the link must be set. The id for a particular graph may be found from the graph's URL, and is the field following "Graph=".



    Section 4.
    Adding Sensors         		Owl Monitoring System
    Manager Installation Manual         		Section 6.
    Changing Queries on
    Existing Owl Sensors

    DNSSEC Tools

    dnssec-tools-2.0/apps/owl-monitor/docs/install-manager-2-installation.html0000664000237200023720000010574012111166360027107 0ustar hardakerhardaker Owl Monitoring System -- Manager Installation Manual -- Installation

    		 

    Owl Monitoring System

    Manager Installation Manual

    2. Owl Manager Installation

     2.1. Manager Installation
     2.1.1. Preparatory Steps
     2.1.2. Installing Third-Party Software
     2.1.2.1. Nagios Core and Plugins
     2.1.2.2. nagiosgraph
     2.1.2.3. rrdtool
     2.1.2.4. drraw.cgi
     2.1.2.5. Perl modules
     2.1.3. Installing the Owl Monitor Software
     2.1.3.1. Unpacking the Owl Monitor Software
     2.1.3.2. owl-dnswatch
     2.1.3.3. owl-perfdata
     2.1.3.4. owl-newsensor
     2.1.3.5. owl-transfer-mgr
     2.1.3.6. Data-Archiving Programs
        
     2.2. Modifying Configuration Files
     2.2.1. Save Files!
     2.2.2. nagios.cfg (Nagios)
     2.2.3. cgi.cfg (Nagios)
     2.2.4. resource.cfg (Nagios)
     2.2.5. share/config.inc.php (Nagios)
     2.2.6. nagiosgraph.conf (nagiosgraph)
     2.2.7. map (nagiosgraph)
     2.2.8. htpasswd.users (Apache)
        

    This section gives installation procedures for setting up the Owl Monitoring software on manager hosts. There are two sections, an installation section and a configuration section. The installation instructions discuss software installation of Owl software and supporting third-party software packages. System configuration is also detailed in this section, but only for non-Owl-specific configuration. There are a number of Owl-specific configuration actions that must be performed and these are detailed in section 4.

    The Owl manager requires Perl. You must install it on your system if it isn't already available.

    2.1. Manager Installation

    The basic Owl manager configuration consists of the Owl software and the Nagios monitoring system. This configuration allows for monitoring of current sensor status, but does not provide any view into past monitoring data. In order to get the historical view, especially as provided by a graphing capability, several additional software packages must be installed on the manager. Since the historical view provides a great deal of useful information, these instructions will assume that you will be installing the additional software.

    It is possible (and not too difficult) to run multiple instances of the third-party software packages (e.g., Nagios, nagiosgraph) on a single host, but care must be taken when configuring, building, and installing the software. Without careful work, an existing installation may be overwritten by a later installation. These instructions assume that only one instance of each package will be installed on the manager host.

    Below is a diagram of the flow of Owl sensor data on the Owl manager. The details may not make sense at this stage, but this will show how the various pieces fit together.

    2.1.1. Preparatory Steps

    Several actions must be taken on the manager host to prepare it for installing the required software. These steps are listed below. During the installation procedures, don't be shy about backing up things; it might not be necessary, but better safe than sorry.

    • It is advisable to run a backup of your system before starting. Depending on your level of paranoia, it couldn't hurt to run an incremental backup after completing each step of the installation.

    • An unprivileged user account must be created for the Owl manager software. An existing account may be used, but it would probably be best to use a new account as this will segregate files and processes from existing users. The user's name and group are not required to be any particular values.

      You may want to create two unprivileged users for use by the Owl manager. One would run the various Owl commands, and the other would be used for sensor data transfers (in the case that the sensor is to initiate transfers.) The first user will need rwx permission to all the Owl directories and files. The second user will need to be able to write data into the Owl data directories.

      In the following instructions, it is assumed that a single user will created for the Owl manager and it will be referred to as the Owl User.

    • SSH utilities and a web server must be installed on the manager host. These instructions assume that the OpenSSH and the Apache web server will be used. Others may be used instead, but the you must determine the appropriate commands and options to use. Apache support is included in Nagios.

    • Install the rrsync utility. This is a front-end to rsync that restricts the locations to which rsync may copy data. This tool is available here: http://ftp.samba.org/pub/unpacked/rsync/support/rrsync

    • Create the directories required for each sensor. There must be a data repository and a data archive. Each sensor will have their own subdirectory in the repository and in the archive. There must be a data and a history directory within each sensor's repository directory.

      The following is a possible set of directories:
       /owl/datatop-level data repository
       /owl/old.datatop-level data archive
       /owl/data/sensor-portland/dnstimer  sensor-portland's DNS timer-data directory
       /owl/data/sensor-portland/historysensor-portland's monitoring history (for Nagios)
       /owl/old.data/sensor-portlandsensor-portland's data archive
       /owl/data/sensor-oslo/dnstimersensor-oslo's DNS timer-data directory
       /owl/data/sensor-oslo/historysensor-oslo's monitoring history (for Nagios)
       /owl/old.data/sensor-oslosensor-oslo's data archive

    • Create an SSH key for the Owl user. This is commonly done with the ssh-keygen command.

    • Consider the users you want to access your Owl monitor, as well as the types of access they should be allowed. These users will be added to the Owl-specific password file used by Apache and the users and access rights will be added to a Nagios configuration file. These users are web-based users only, and are not (necessarily) related to users on the Owl manager host.

    • Install the software as described in the following sections. The Owl software will be installed after all the third-party software, since some of the Owl software will be installed in directories created by the third-party software.

    2.1.2. Installing Third-Party Software

    The third-party software packages should be built and installed as specified by each package. Owl-specific notes for each will be given below. While many of these packages are available as pre-built distributions, configuring and building them yourself will provide for additional control that may be useful. This includes the installation location and the user and group that will be used for executing the commands.

    Nagios, along with a web server, should be installed such that they will be restarted at system boot time.

    This table shows the most recent software versions that were tested with the Owl Monitor.
      Package Version Tested with Owl
     Nagios Core3.4.1
     Nagios Plugins1.4.16
     nagiosgraph1.4.4
     rrdtool1.4.7
     drraw.cgi2.2b2

    2.1.2.1. Nagios Core and Plugins

    If building Nagios Core and Nagios Plugins from source, it is recommended that the configure command be given arguments that will allow specification of the installation-path prefix, the Nagios user, and the Nagios group. A possible command line could be: 
        $ ./configure --with-command-group --prefix=/owl --with-nagios-user=owl-monitor --with-nagios-group=owl-monitor

    The same prefix, username, and groupname must be used when building Nagios Core and Nagios Plugins.

    Multiple instances of Nagios can be installed on a single machine. This can be useful for segregating different things being monitored. However, you must be careful when doing this. In particular, even if the --prefix option was given to configure, the "make install-init" and "make install-webconf" commands will overwrite existing Nagios files.

    2.1.2.2. nagiosgraph

    The README file for nagiosgraph contains instructions for automated installation (using install.pl) and for manual installation. You should read this file and decide which method you want to use.

    If you choose the manual installation, you may skip most of this section and pick up at the discussion of the map file.

    If you choose to install with install.pl, you must know that it looks like several of the steps are not performed by the script. After running install.pl you must verify that the manual steps from "Restart nagios" to the end have actually been taken.

    install.pl will configure the package, install its files in the appropriate places, and modify Nagios and httpd files as needed. A variety of options allow for site-specific installation layouts. In addition, you will be prompted for many directory and file names prior to install.pl completing its work. If it can't find one or another file that it must update, then at the end of execution it will provide a set of steps that you must manually perform in order to complete the installation.

    The --dry-run option will show you what install.pl would do, so that you may verify where things are being copied. It isn't required, but it wouldn't be a bad idea to use this option prior to the actual install.

    One thing install.pl is likely to say is that you must add a Nagios command file. This file probably already exists, and you must find it. It is likely to be called something like commands.cfg and be located in the etc/objects directory in your Nagios installation. Check names carefully when making this modification, as commands.cfg already has a process-service-perfdata command and install.pl will have you add a process-service-perfdata-by-nagiosgraph command.

    install.pl logs all its actions, including the manual-intervention actions, in the install-log file. Unfortunately, the command line is not recorded in the log file, so it might be useful to save that somewhere yourself.

    I have used this command to successfully install nagiosgraph: 

        $ install.pl --prefix /owl/nagiosgraph --nagios-user owl-manager --nagios-cgi-url /nagios-owl/cgi-bin \
    --nagios-perfdata-file /owl/var/service-perfdata.out --log-dir /owl/var --layout standalone
    I do not let install.pl update the Nagios or Apache configurations, which it will prompt for; I prefer to make those modifications myself. Refer to the install-log file to see what remains to be done.

    The README file contains steps for manual installation and it looks like several of the steps are not performed by install.pl. If you use install.pl to install nagiosgraph, verify that the manual steps from "Restart nagios" to the end have actually been taken.

    You may have to manually copy the nagiosgraph.ssi file into place. This file is in .../nagiosgraph/examples/nagiosgraph.ssi and it should be copied into your equivalent of /owl/share/nagiosgraph.ssi.

    Before nagiosgraph can be used by the Owl manager, the map file must be modified to recognize data from the Owl plugins for Nagios. The required modifications are discussed in section 2.2.7.

    2.1.2.3. rrdtool

    No Owl-specific configuration or actions were required for building and installing rrdtool.

    2.1.2.4. drraw.cgi

    To install drraw.cgi, copy the drraw.cgi and the drraw.conf files into the Nagios sbin/ directory. So, if you have installed Nagios in /owl/nagios, then you should copy the two drraw files into /owl/nagios/sbin.

    The drraw.conf must be edited for this installation. Some of these edits are required and some are optional. Each will be marked as to whether or not you must make the change. This file is a Perl file, so the configuration values are set according to Perl's language rules.

    • Set the $title variable if you don't want the default page title in the Nagios-displayed graphing pages.
      (optional)

    • Set the %datadirs variable to hold the paths to your sensors' RRD databases. There are two fields required for each entry. The first is the path to that sensor's database files, and should not have a terminating slash. The second is a name by which those databases will be identified when defining new graphs. 
          '/owl/nagiosgraph/var/rrd/sensor1%20h-root%20foo.com%20A'  => '[Kyoto H foo A]',
    '/owl/nagiosgraph/var/rrd/sensor1%20h-root%20foo.com%20NS' => '[Kyoto H foo NS]',
    '/owl/nagiosgraph/var/rrd/sensor5%20h-root%20foo.com%20A'  => '[Cairo H foo A]',
      The identifier should be unique for each database directory.
      (required)

    • Set the vrefresh variable for the number of seconds the graph viewer will wait before automatically refreshing its display.
      (optional)

    • Set the drefresh variable for the number of seconds the dashboard viewer will wait before automatically refreshing its display.
      (optional)

    • Set the @dv_def, @dv_name, and @dv_secs array variables for the graphs that will be generated each time a predefined graph is displayed. These are time based values and a particular element of one array is directly related to that same element in the other arrays.

      The @dv_def array is used to select data from the database. The @dv_name array is used to provide titles for each graph. The @dv_secs array is used to provide the count of seconds for each graph.

      The following example values show the relation between the three arrays. 

          @dv_def  = ( 'end - 15 minutes', 'end - 60 minutes', 'end - 4 hours',
		 'end - 12 hours',   'end - 24 hours',   'end - 1 week' ,
		 'end - 1 month',    'end - 1 year');

    @dv_name = (
	'Past 15 Minutes',
	'Past 60 Minutes',
	'Past 4 Hours',
	'Past 12 hours',
	'Past 24 Hours',
	'Past Week',
	'Past Month',
	'Past Year'
    );

    @dv_secs = ( 900, 3600, 14400, 43200, 86400, 604800, 2419200, 31536000 );
      (optional)

    • The $saved_dir variable defines where definitions for your predefined graphs will be stored. It must be set to match your path configuration and it must exist and be writable by the web server. It might be something like: 
          $saved_dir = '/owl/nagios/var/drraw/saved';
      (required)

    • The $tmp_dir variable defines where cached graphing file will be stored until they time out and are deleted. It must be set to match your path configuration and it must exist and be writable by the web server. It might be something like: 
          $tmp_dir = '/owl/nagios/var/drraw/tmp';
      (required)

    • The $ERRLOG variable defines where graphing errors will be logged. It must be set to match your path configuration and it must exist and be writable by the web server. It might be something like: 
          $ERRLOG = '/owl/nagios/var/drraw/errors.log';
      (required)

    2.1.2.5. Perl modules

    There is a set of Perl modules required by the Owl manager and the third-party software packages. Some of the software packages may install these packages themselves, but you must ensure that these are available. These should be available through CPAN.

    Modules required by the Owl manager:

    • Cwd.pm
    • Fcntl.pm
    • File::Path.pm
    • Getopt::Long.pm
    • Time::Local.pm

    It is likely that some of the third-party software may require other Perl modules. The installation documentation or process should inform you of what must be installed on your system.

    2.1.3. Installing the Owl Monitor Software

    There is a small amount of manager-specific software in the Owl Monitor. Most of the work on the manager is performed by Nagios and the other third-party software. The Owl Monitor software on the manager host consists of two Nagios plugins that will interpret Owl sensor data for Nagios and add Owl sensor data to graphing databases. There is also a small number of administrator programs for managing the large amounts of Owl sensor data.

    2.1.3.1. Unpacking the Owl Monitor Software

    The Owl Monitor software comes in a bzip2'd tar file. In most modern Unix systems, this can be unpacked with this command: 
            $ tar xzf owl-monitor.tar.gz
    This command unpacks the Owl distribution in the current directory. This can be unpacked anywhere you want, but it is a good idea to do it in the Owl manager's home directory.

    Most of the Owl commands will be in the owl-manager/bin directory. These commands can stay in that directory or be moved elsewhere. If they remain in their own directory, it would be helpful to add the directory to your shell's path.

    2.1.3.2. owl-dnswatch

    The owl-dnswatch command is a Nagios plugin that reads Owl monitoring data and reports the latest results to Nagios. Each execution of owl-dnswatch requires an Owl sensor name, a target host, a DNS server, and a DNS query type. The appropriate monitor datafile is consulted based on those inputs. The following actions must be taken to install owl-dnswatch.

    • Set the $OWLDATA value in owl-dnswatch to the top-level directory that holds the Owl monitoring data. This path will depend on your installation hierarchy, but it will likely look something like: 
              my $OWLDATA = "/owl/data";

    • Copy owl-dnswatch to the Nagios plugin directory. This directory is probably something like /owl/nagios/libexec.

    2.1.3.3. owl-perfdata

    The owl-perfdata command is a Nagios plugin that acts as a front-end for inserting Owl monitoring data into an RRD database. These databases are used for graphing the monitoring data. The following actions must be taken to install owl-perfdata.
    • Set the $GRAPHINSERT value in owl-perfdata to the path to the insert.pl command. This path will depend on where you have installed nagiosgraph, but it will likely look something like: 
              my $GRAPHINSERT = "/owl/nagiosgraph/bin/insert.pl";

    • Copy owl-perfdata to the Nagios plugin directory. This directory is probably something like /owl/nagios/libexec.

    2.1.3.4. owl-newsensor

    There are a set of Nagios objects that must be created for each Owl sensor. Once the Owl manager has sensor data files in its data directory, the owl-newsensor program can be used to create these objects. The actions required for this are described in section 4.7.

    No local modifications are required for owl-newsensor.

    Copy owl-newsensor to a directory which will be its home. This could be anything that is convenient for you; e.g., /usr/bin, /usr/local/bin, ~/mystuff, or /owl/scripts.

    2.1.3.5. owl-transfer-mgr

    If the Owl manager transfers data from a sensor, it will use the owl-transfer-mgr to retrieve the data.

    No local modifications are required for owl-newsensor.

    2.1.3.6. Data-Archiving Programs

    The following programs assist the administrator with managing the large amount of Owl monitoring data that accumulates on the Owl manager host. These programs work together to create a two-stage archival process. It is helpful to have cron run these programs, though this is not essential.

    The first stage of the archive process moves old data from the sensor's data directory to the sensor's archive directory. Data is considered old if the file's timestamp (in its name) is older than two days. This part of the data archiving should be performed once per day, depending on how frequently the sensors perform their own data archiving.

    The second stage of the archive process combines a month's worth of sensor data into a single compressed tarfile. This should be performed several days after the end of the previous month.

    The Owl data-archival programs assume that all sensor data are stored in a common directory and all the archived data are stored in a common directory. They will segregate data by sensor in order to prevent it from getting mixed together. For example, when handling data for the sensors dresden and kvothe, these programs might expect the following directories to exist: 

        /owl/data/dresden
    /owl/data/kvothe
    /owl/data-archive/dresden
    /owl/data-archive/kvothe

    This first set of programs will archive data for all the sensors that report to an Owl manager. They must be told where the sensor data are stored and where the data archive is kept.

    • owl-archdata - Archives data for all sensors without having to name them explicitly. The sensors in the given data directory will be archived. The data are stored in year-month subdirectories in the sensor's archive. owl-archdata is used in the first stage of the archival process.

    • owl-monthly - Archives all sensors' archived data in a compressed tarfile, in order to minimize space taken by the archive. The tarfiles are stored in another subdirectory, divided by year. owl-monthly is used in the second stage of the archival process.

    This second set of programs will archive data for a single sensor that reports to an Owl manager. They must be told where the sensor data are stored and where the data archive is kept.

    • owl-dataarch-mgr - Archives data for a single sensor. This is intended to be run by owl-archdata, and it is a slightly modified version of the Owl sensor's owl-dataarch utility.

    • owl-archold - Archives a sensor's archive data in a compressed tarfile. This is intended to be run by owl-monthly. The Owl manager's version of owl-archold is exactly same as the Owl sensor's utility of the same name.

    More information about each of these programs is available in their man pages.

    Copy these archiving programs to a directory which will be their home. This could be anything that is convenient for you; e.g., /usr/bin, /usr/local/bin, ~/mystuff, or /owl/scripts.

    2.2. Modifying Configuration Files

    Several files must be modified in order to provide Nagios monitoring and graphing. These files belong to Nagios, Apache, and nagiosgraph. This section describes the required modifications. These modifications do not provide any monitoring of Owl sensor data; further steps to supply that functionality will be given later.

    In the basic Nagios installation, /nagios/etc holds sample configuration files, which can be modified for use.

    2.2.1. Save Files!

    Before starting to modify any existing file -- e.g., Nagios object files and Apache configuration files -- it would be a very good idea to make a back-up copy of the files. This will provide reference copies of the files in case they might be needed later.

    2.2.2. nagios.cfg (Nagios)

    This file is the primary configuration file for Nagios. There are quite a few changes that must be made to this file. The modifications listed in this section will not incorporate monitoring of Owl sensor data. That will be described in section 4.8.1.

    The various configuration parameters for Nagios could be included in a small number of files, but the standard arrangement groups the parameters into separate files. The nagios.cfg file is the primary configuration file for Nagios, and at run-time it acts as the focal point to collect the disparate configuration files for the Nagios daemon.

    A cfg_file line is used to tell Nagios to include the specified line. Adding or deleting these lines will control which files are included in the Nagios configuration.

    As a result of the Nagios build and installation process, the nagios.cfg file should be mostly configured already. The Nagios configuration file is well-documented, so figuring out how to adjust its fields shouldn't be too difficult. There are a few things that must be done to prepare it for Owl monitoring. These directions assume that Owl monitoring is the only monitoring that will be performed by this installation.

    • Make sure these cfg_file lines are deleted or commented out:
      • localhost.cfg
      • printer.cfg
      • switch.cfg
      • windows.cfg
      (This is not strictly necessary. These files may provide some monitoring information that you would find useful.)

    To allow for graphing of monitoring results, several performance-processing fields must be set in nagios.cfg. Unless otherwise stated, do not include the double quotes when setting these fields.
    • Find the process_performance_data line and change it to: "process_performance_data=1"

    • Find the service_perfdata_file line and change it to: "service_perfdata_file=/owl/var/service-perfdata.out"

    • Add this line: "service_perfdata_file_template=$LASTSERVICECHECK$||$HOSTNAME$||$SERVICEDESC$||$SERVICEOUTPUT$||$SERVICEPERFDATA$"

    • Find the service_perfdata_file_mode line and change it to: "service_perfdata_file_mode=a"

    • Add this line: "service_perfdata_file_processing_interval=30"

    2.2.3. cgi.cfg (Nagios)

    This is the configuration file for CGI scripts run by Nagios. Most of it is set up during the Nagios configuration process. The following things must be set to ensure your installation's needs are met.
    • The url_html_path field contains the path portion of the URL for the Nagios monitor. For example, if the desired URL to reach your Nagios monitor is http://www.example.com/owl-dns-monitor, then url_html_path must be set to /owl-dns-monitor. Check this field to ensure it is set as required.

    • The cgi.cfg file allows you to specify different types of information and actions that can be taken by different users. The authorized_for_ values may be set for multiple users. The user names are those in the htpasswd.users file.

    2.2.4. resource.cfg (Nagios)

    Ensure USER1 points to the plugins directory. This should be something like /owl/libexec.

    2.2.5. share/config.inc.php (Nagios)

    Nagios uses this file to hold a small amount of file-location data. The following actions must be taken:

    • Ensure that has the correct path for the $cfg[] fields. If your configuration doesn't use the default paths, this may not be set properly.

    • Add an entry for the $cfg['ng_cgi_base_url'] field to be set to the path of the nagiosgraph CGI directory. This will depend on how you installed nagiosgraph, and should look something like this: 
          $cfg['ng_cgi_base_url']='/nagiosgraph/cgi-bin';
    $cfg['ng_cgi_base_url']='/nagiosgraph-owl/cgi-bin';

    2.2.6. nagiosgraph.conf (nagiosgraph)

    This is the configuration file for Nagiosgraph. Several settings must be checked and some Owl-specific setting copied in. The following actions must be taken:

    • Copy the contents of ng-owl-conf After the lines setting xffs. These are reasonable values, but don't change them unless you know what you're doing.

    • Ensure that nagiosgraphcgiurl path points to the appropriate directory, as defined by your web server's configuration.

    • Ensure that javascript path points to the appropriate directory, as defined by your web server's configuration.

    • Ensure that stylesheet path points to the appropriate directory, as defined by your web server's configuration.

    2.2.7. map (nagiosgraph)

    nagiosgraph uses a file of data definitions that describe how to extract data from Nagios plugins and how to handle the extracted data. The file is a collection of Perl expressions that are evaluated by nagiosgraph. This file is named something like /owl/nagiosgraph/etc/map.

    The Owl manager distribution contains a set of additional, Owl-specific definitions that must be added to the map file. These definitions are in ng-owl-map. Copy the contents of this file into the map.

    2.2.8. htpasswd.users (Apache)

    Strictly speaking, this file is not a Nagios file, but is instead an httpd file. The Nagios configuration file for httpd gives the name of an htpasswd.users file. Use the htpasswd command to create and populate this file with the users that should be allowed to access the Owl monitor. These users must have their permissions defined in the Nagios cgi.cfg file.

    Proceed to Section 3. An Interlude on Sensor Queries for important information about defining the queries gathered by your Owl manager.
    If you have already read Section 3, you may continue on with Section 4. Adding Sensors to complete the installation of the manager.



    Section 1.
    Operational Overview         		Owl Monitoring System
    Manager Installation Manual         		Section 3.
    An Interlude on
    Sensor Queries

    DNSSEC Tools

    dnssec-tools-2.0/apps/owl-monitor/docs/install-sensor-2-installation.html0000664000237200023720000002264212111166360027005 0ustar hardakerhardaker Owl Monitoring System -- Sensor Installation Manual -- Installation


    		 

    Owl Monitoring System

    Sensor Installation Manual

    2. Owl Sensor Installation

     2.1. Create an Owl Sensor Account
     2.2. SSH Initialization
     2.3. Install the Owl Environment
     2.4. Install Required Perl Modules
        

    This section gives installation procedures for installing the Owl Monitoring software on sensor hosts. Installation of the Owl sensor is relatively simple. This requires the creation of a sensor account, SSH initialization, software installation, and a few other set-up activities. The most complicated aspect is likely to be coordinating SSH access with the Owl manager host. The required actions for installing an Owl sensor are described in this section.

    The installation instructions discuss software installation of Owl software and supporting third-party software packages. There are a number of Owl-specific configuration actions that must be performed, and these are detailed in section 4.

    The Owl sensors require Perl. You must install it on your system if it isn't already available. If the sensor host's Perl or operating system does not support threading, then each query will run in its own process, rather than all queries running in their own threads within a single process.

    Below is a diagram of the flow of Owl sensor data on the Owl sensor. The details may not make sense at this stage, but this will show how the various pieces fit together.

    2.1. Create an Owl Sensor Account

    The Owl sensor will run several daemons and cron jobs. It is a good idea, but not an imperative one, for these to run as their own user. It is easier to segregate the Owl sensor's actions, processes, and files if they are performed by a dedicated user.

    However, it is certainly acceptable to run them as yourself or some other existing user. If you choose to do this, you may disregard the rest of this section.

    There are no requirements on the Owl username; it may be anything that makes sense to you. Some possibilities are: owl, owl-sensor, owl-user, bob, and tricorder.

    To create a new user, use your operating system's user-creation command (e.g., adduser or useradd) to create a new unprivileged user.

    Examples of commands to create a new user:

      Operating System Example CommandNotes
      Centos useradd hoots-monremember to add a password
     FreeBSD adduser you'll be prompted for all user information
     Mac OS X "Users & Groups" in System Preferences you'll be prompted for all user information
        

    2.2. SSH Initialization

    Owl sensor data are transferred to the Owl manager using the rsync and ssh commands. You must initialize the Owl sensor user's SSH environment by generating keys for the ssh command to use. This may be dependent on your operating system or the version of SSH installed.

    The OpenSSH package is a widely available SSH package, and its ssh-keygen command is used to create SSH keys. This manual will assume that OpenSSH is being used.

    There are no specific key parameters required by Owl. The generated key must be sufficient to allow the sensor and the manager to transfer files without having to manually enter a password.

    Example of a command to generate a new SSH key: 

        $ ssh-keygen -b 1024 -t dsa

    If the Owl sensor will be pushing data to the manager, then the newly generated public key must be transferred to the Owl manager host. This key must be added to the list of authorized keys for the Owl manager's account. For OpenSSH, the public key will be in a file called id_rsa.pub and it will be added to the authorized_keys file on the manager host. Once the sensor's public key has been added to the Owl manager, you must ensure that the Owl sensor user may successfully transfer files to the manager without need of a password.

    If the Owl manager will be pulling data from the sensor, then you must do the following things. First, install the rrsync utility. This is a front-end to rsync that restricts the locations to which rsync may copy data. rrsync is available here: http://ftp.samba.org/pub/unpacked/rsync/support/rrsync. Next, the manager's administrator must provide you with a public SSH key. This public key must be added to the authorized_keys file belonging to the Owl sensor account.

    The authorized_keys entry should look something like this: 

        command="/usr/local/bin/rrsync /owl/data" ssh-rsa AAAAB3Nza...A3Q== owl-manager@owl.example.com

    2.3. Install the Owl Environment

    You must select a place to install the Owl sensor's files. The files and directories may live in the Owl sensor user's home directory, a subdirectory beneath that home directory, or somewhere else entirely. For ease of finding these files later, it may be helpful to keep the Owl sensor's files all beneath a single directory.

    There are a set of directories that will be used by the Owl sensor: bin, conf, and perllib. These names shouldn't be changed.

    Additional modifications to the Owl sensor environment will be discussed in section 4.1.

    Several installation examples are given below. For each, it is assumed the Owl sensor user is named owl-sensor.

    Installation example 1: In this case, the software will be installed in the sensor user's home directory by unpacking a tar file located in /tmp/owl-sensor.tar.gz. 

        $ cd ~owl-sensor
    $ tar xzf /tmp/owl-sensor.tar.gz

    Installation example 2: In this case, the software will be installed in a subdirectory within the sensor user's home directory by unpacking a tar file located in /tmp/owl-sensor.tar.gz. 

        $ mkdir ~owl-sensor/owl-dir
    $ cd ~owl-sensor/owl-dir
    $ tar xzf /tmp/owl-sensor.tar.gz

    2.4. Install Required Perl Modules

    There is a set of Perl modules required by the Owl sensor. These should be available through CPAN.

    Modules required by the Owl sensor:
    • Cwd.pm
    • Date::Format.pm
    • FindBin.pm
    • Getopt::Long.pm
    • LWP::Simple.pm
    • Log::Dispatch.pm
    • Log::Dispatch::FileRotate.pm
    • Net::DNS.pm
    		 
    • Net::DNS::Packet.pm
    • Net::DNS::Resolver.pm
    • POSIX.pm
    • Time::HiRes.pm
    • Time::Local.pm
    • threads.pm
    • threads::shared.pm

    If the two threads-related modules are unavailable for your system, or if your version of Perl doesn't support threading, then the Owl sensor will run each query in its own process. In this case, these two modules are not needed.

    Proceed to Section 3. An Interlude on Sensor Queries for important information about defining the queries performed by your Owl sensor.
    If you have already read Section 3, you may continue on with Section 4. Adding Sensors to complete the installation of the sensor.



    Section 1.
    Operational Overview         		Owl Monitoring System
    Sensor Installation Manual         		Section 3.
    An Interlude on
    Sensor Queries

    DNSSEC Tools

    dnssec-tools-2.0/apps/owl-monitor/docs/owl-manager-data.odp0000664000237200023720000004264412063704676024152 0ustar hardakerhardakerPK‘¨‘A3&¬¨//mimetypeapplication/vnd.oasis.opendocument.presentationPK‘¨‘A"<”œœmeta.xml Wayne Morrison2010-03-28T06:56:282P23DT22H11M8S2012-12-17T16:04:33LibreOffice/3.5$MacOSX_x86 LibreOffice_project/e0fbe70-dcba98b-297ab39-994e618-0f858f0PK‘¨‘A settings.xmlÝZÝsâ6ï_‘ñô¡} †—&pCHh˜ãȵ×7a/ FÖz$9ýë+“rÆGÆNó[úýV»ëý—Ÿ^vô BRäm§q\wŽ€{èS>o;“~íÜùÔùág3êAËG/ €«š¥ôy¤·sÙZÝn;‘à-$’Ê'È–òZ_okm®n%d«+/Œò§¶³P*l¹nÇÇñ‡cs·qqqá&w×KCRC•\ŒpsÏ&­‡|FçEQV«7÷#â«ÐfÃê`‰à'õzÓ]ý¿^-ÊŠr™µ5ƒPË ÑÎÝžïÊ3L(ƒjiB+‘ߤI-­ã¹--ÿˆœe«C ^u÷9¡‹±€ä6ë–íçH×tsAÂÅ8 ‚Š¦‹‰Á£*«2ƒºÄ@W1æ}]Ÿ Ér;8­Î0®é¦YdNYŠ2çá+^Ì¥cPQ¶jï÷cò _W¯?ÜóCYÅ#õ:Îýi·vjþú:áê”L Ùžäû¾.?éÒÝ­wAÜ]ouþPKmí¦d#Ÿ$PK‘¨‘A content.xmlí]]’ã¶~Ï)Trì‡$¤Hð¼;[IÙN¥j×ÙZïV¥òâ‚HH¢—!¨ÑŒŸr‡Ü ×È[Ž’“¤þ E‰4›[µ3# v7¾n4 ôêÍ}MîHNÃ4y=ÕUm:!‰Ÿa²|=ýôñ;ž¹ýÍ«t±}r¤þ:&I¡øiRÀï ´NèMYûzºÎ“›ÓÞ$8&ô¦ðoÒŒ$u«‘ú†?«,¡ÅC4¸9'[ä¾Ú˜ÑJmñ|ø“9±Ø:ÈñfhcF J›/Ò¡ïi¤,RÐzœá"lqq…Éç×ÓUQd7³Ùf³Q7†šæË™îyÞŒ×6 û ]¶Î#Nø3ö0:ÓU}VÓƤÀCùc´"KÉ:ž“|°jp;£šå„ ˆË€9¬#±„¯»å`tÝ-{Ôì¯p>gœX†Š ‡Šˆmc\¬zÆ×½ƒJþãÝÛ-®òxè³­¤*?³Áb–Ôbû4MVYƒÒØ9»HÓÌYùY Þì%ßäaArÜßKîãÈo4žÆ»”tú (rÇ ßSíi€feuCLƒÞ®ÿöîíþŠÄxK&V„8Ùj†Æa4x€¶´8 CÑvL'g`èÕ¸5ËI–æE3@‹á“<5:ZqÔïÂXmMºÌƒ`')°cÌÀ3QîB²ùb*ÍNûéµ€É]ý¡&œHœ ö6е£iŒ4$QíÒJeä>#yÈ´…#z%¦0„4»ZËsIßëŽ? í[ŽÀ§Ô(véù㇫SØT “Eõ$!„@ÓÛ:^(ý5x]¤ d¾Â>½}U:~þsRþ͘~= 2}Z,0üŠÊ)TÉð’Lë–b¡’<$/BB'Ò\Pä8¡!ûS)2è’8Tf¦½Ô4#FióS‹hŽýÏË<]' †<Œ(ò5é'Kç?¿ mr&Œg ¦iB u”Â4úÅ‚ÿkÀTAÞM°©AóãnÝŠ„ËUQUJ<!Í"üEZ°YzÛ5 ×j=›/pDûÁìˆR„q- ùLÚ}㌞nœknV$» á—yäËg+ɲ8Ã9‹·ù¥lÄ&ŠçAM…T&x«7Z«zÆqB‹<ýLÄAÔS5R5d3äU55þo*ö¤@”I~JCp쬓4!QÍÜ ÈŠ•Uš‡?§ÌW)8 —ÐãOkZ„‹‡6áÈß’Å!Ì õƒ˜m+`x›Æª\¤ Ó€­o”"͘ ºí1A…ŠyZ,z€:dµê"²`F¥v*òÊܶ5P¾’fe›¤ û| 6:†1bcÄF… cÄƈl˜#6Flô`ñ1b£ö ظbœ&¹BX—Åô9èüÛ$øi?ZŠmçHoÖHBµO’Bî/06¦‡Ð`y´Œ~dµ« ¬cQå¼8TqL±%$e¨B#ª®Uî8óX6¼#6úòmÚŽ}à³±#8zÁ1¦cGpô‚ã”|ìÅW9ðdv”eïê™Óì[é”»Ö:ã ýe­¥ô1a°Cßx×$ë¾k"¾Ì²”ß^G…’Às陓ݱ-_ЕÇaÒêHµLc1Xü÷]éqŽ¹HM‰({2Ηðð ªÂU)³•†KÏø’2X×H.=ï¶8L(©:¨ú˜ƒ|f!ýâ1;SäK³ªaoý2³‹ÓDŠr¥˜7R÷à±WJPy/4Ã>¿± ~ýª$æO–eäí™á†ÜìÅv¼ùpÅîRL¿¤ÃYêø³ŒõY`ÚÙUxnÖ¯zäýù”u!/ÕId_©D׌ŠNyôô}Š5³Bê–+˜†8é«d×)D侪<(;Qãlº‡Ívà½|p²\ã%‘dZ¶['EøôÃìu¢ƒÙ3‡°wÍwæçEÓNMÛ/šv”hyþDÑœ“Dsö‹æ%Z'8Q4t’hh¿hè(Ñ:³ö!Ñ®TŽÎ\}ŒƒüWÓhSÍ3ó4 $ÊŠZ¾¾êFBN0\ÂÎLzŒ„—wü³mfH’…燶¹#Q½˜ç7YLÊJVý×φ:…݃Y²\èa+þ¾)÷GÕ¾äÂìc¯ùù:ŠH!1sÿXV)ìÊ­×Óÿýó_ûù/Û°0:% 3áwÖ8,ZáU,Íá94jÒeŽg”©†ý€¨ÑóÎRúõÇ0†ºïÉfò!qRJc]Ò+K’ˆ‰Xv è$Š,,|ààçay×ЩJ.uu„’ÝJþ÷ñJf›}J¶ ëתdóÉl¨®>*y§’­]JþïŽ×±¥jî¨ã:¶GŸ]ÇΨã³ëØu|v{£ŽÏ®cö¶ë¨äÇ)Y¨®Ö]³ÞK,«Šy<4ÄÍÕÛW|s“](XnsV[²ðYoöÚš W~÷eudƒ$¯n"7c[7ŠJê?¤ë¢jôÇ·úGmZqá¯)ð¯ÐÎH÷ÙüJÂf3^Ú~_Ÿ3¾Ùá‘òå1‚ †ª;f}´ Ù¬U=­9o«ZSÕì†è­ Gì ‚ÂÃ[ Ûò†Çª$ë’¿oÈÇI·þ#Ô—aJ«fdõ g'ô‹¦·&qšìîwÖa[T IVì*à`ŸÆ¤È¸¢Ø¶JA}ÚD› ÝÖªŸÕ˜,£5Q²4L Ê îjŒÌÐm£ü¡MÊ2þAwMé Êžªþ³*áµe k$‚‚Ñ€§l{š×tüšUEaÖ0jäÊø…ÖŸêgt~›¶6ùûä{n¦ÐÄ1:7ŽuC5<[²¥š–ý @Îó HÓèé‘üáÃ7TÍâÊÏ eã(›ªi†2R=«å“mýÙ|òŸÙžåÓÃ9L(Ä#jÖc)# /hó@[ªSžéͲ‹ºh]5‘è›]Õ²ŸÃ7ƒ |ƒ <Ç”œ!ÖH¸½ð=þÄÀ3˜ fFw §œøN–Q ÞMXã·Us©›Éö÷éÀ²žÚS¶D:’påhΑ¸ Ÿ†*†¨É,ÍξxöUT| + šæ_-‹¯CªéŠ*Ù$»HF?îõÒ=Y @tŽä6Bm Ä0¥{Âd›5ü2æðé<–Oð®®‹Œ"ÕñL‘Qpu‰œÖ$áôÑÕÁæÊ ºšSP˜Ì¨LÁulq3½4£žã‰Œ:ªaÛ-N=×9uUûÐØrzîÙW:€Côz/:†;.uÆÈð©#CïÜX† ÝðD(ƒ;vžÊgI?ÓÛO°È™ü…Ê\`¿'>}1@ëÚ¹mÔ‚~±ˆßLÀ¨ìKÀF0?7˜Ï¾9¡†‡Ìk@sƒ8#âÎŒ¸'_×Hé!ƒë6”8bΦ!ÆàŒ]~¦©ºe·Xµ]y½æàZ-^ùK­—eU^ êÜ,]ËðÛ«E[bÕTmã±j}ü*ÌP MF€®êšÓâU¤AåŠÆtN\ˆé§ì9Ùªaºm÷ØM?Ž#/ÄÌË/ÄÌÊ;Nx¢¾Éo>ýÌÏRšüI3ŠïÈ/;µÙgzÿîÏaã貃1UÓÕ%K9-ÿ¢i'Â) ~ŒÕÖ%CpU]Ú¬éíV[åÁ•§|¡óyžn ÿ1y¦ ä”9ȱQËòlÍjÍAŽ-› u‹Ï—ºêRÆÚP-Ën±ªYÒÔ^“\6 ±`6”85U½•_•IÊL°8A^†SGu\W~Wu5$rjßu¥ÑwT„9Þs Õ²¤œ5ða»RzÝSM[fÕS5÷ò¬JÒTÍë Õ“·, Ê~†È¾Å©Ît¨ïç”ÓX§Î¼ý; ÖÁ™©ºgµg^"!̼Œq9ƒ h°žüŸy`z´§·äžøë¢o[ýÌQaLS…fÒÐyÃÞoO' ¸y`À˸òÒζ¦'‹(½tZæÊF¼ß/qïÝíŠr;äž%F×­·zà¼Å¤ÃeÜ©Î9|>ÁI0ù–Û{˜&“÷ p:?Š™üuMÞá//)_.¦˜šõT™OŠ™YJW³œ>$þ¸0zi #–í¦A§yb`ÄR\ž‰qè0ÇAãèßXvL“ž±`Úã3‘j˜O|2Ì>`îôœá‘yˆ–'ÁÇYOy l§±É)/Ùa@oƤüo²ÿ’é¬È=^²«yYœá"$94²Ì¦¯Ž/³(½ù›…>‘ÎKÊÏŒ¦öëe3´ZÿXó÷tÊþK%/êDZKÖ~=ý­6a–ÙßBo·àT¶C;žô;]ÓfÈ0÷·4Ú-ß,Ðä÷ººÚÛÎÜÍ)•¦!(9ˆ*Ã-ÿ†±§ay¿&p¸½¶ªÍq²$ʽ‡I¯Ù…ž=õø¾¬/Ò¸Ž&/é,˜¤å!øraØ{bê¶ÌÊZè÷]¥Õ_†cøñÒ6‡!ühmc:ªmI–$–œì ›Í >ÚE˜ªc-N-ב%ÇöÚœ:Ý~4§vçH¹.™SP²)ï¶zª¥ŸìÎú£¸Ü™àqûOV!a—˜ç’Ýc7[O<ìî&ÝDJÐ .üÕ&ƒ°§f€¤X¥ÔO³ÃG Ïþ*Þã÷ÁBS74ùì† Ñ…äô¬< ê?qQלž¡ºrÖÜU]«uÐßF§® Q¿f;CÕ̃ŽDf›ç]­çq$É,:ñËJœ8ªfë²iX’MÃótÑ4jŠ ï|¶øì¼U¶ E-Œ`Ox%ÝsÁ¿‚ Ëo¡zuÍ/¿(Vëxžà0ÚiíæA›Ö ÕëÚ´&îØÞo/[ÛÚ´ðe+å•üNC~Ï¢$†aJËû?šð"þd2‘יּ—cÛŽŠLÔá»þ®„šo`TJT´¨ÜßÝÅdù­­ëF"ì“UŒ~s%‡Ë<½oÆKº£XS0%´F™’‚Ý Må‡Æéšå.¤á<"õw~̶ײȮ̤;YêOAê¯cv™´Ÿ&ü¾ý?PKÝÊÐq¡PK‘¨‘AØ‹CµÎ Î Thumbnails/thumbnail.png‰PNG  IHDRÀd*1 •IDATxœíë’ë( „™ªóþ¯œÝ:©õ2BBâjúû1•IlCân®ÿù|> €[ù³:¬W€«ÀÕÀàj`p50¸\f€ŸŸŸçõ3_öï›ùÜ{Œ‘丹+XNÿÌY^G98xe’ùï L)žH¥øÞÔŸ¿ ´m›Ø7âI¾Î¶ßîtDäcåý EŽ²§L"™ÛÇîä‚edSßÀò³”ýcãÅiT]_®Ò²WÓådÞ—P.q|¼¼é\ÒÛ–>µ§5n®ã•Ô›@åOÿq«j°ÐåN—nštSµVžXÍ’/W7Sßn\ÇËm2÷@*j96EåGŠ©‡j¡û ¦ÀÞ‹Š©Q½†•Øy%K](PM®¯Á£@ɬ?v2¸ûÐꪩ€ç[è1ó²u&T(ŸÃÂùùÿ:lÓHêjo>½ÐJ° ì4lŽKÞ}?t×±³¹he—&xÄ9ØIö@B[Ø8ÛIŽlCU,o€$”úh o0@J}xTy‰¾ [ Zy•<y›Ò±¨N5nžÿCy¡’q}tÜÆvñN°TÃlÖ"Æ%è~$¯5»p'm,&¥‚"ëζý 'òµ¾¡%ª²&Á9Þ­-{}±ÁdUù¤Üe=ør°z) \Š0AUlBz+ˆ ‡ ‚i€qw}ŽªˆšsÝ·nñ‚À§ ‡@‘fëºMåø ×|$wÛ‘«p˜’0\( q’ ²¢R÷Ì|ååÉ5í8tÄLßžœg)­IsBZek,ÝGKj̓%œd6® _ÜÆIÔ9o0»1ã¶ãƒy³ª×ö'¨ÇÜœd€G:R÷·T9²<=¿È*È€Þ{Ðûr’e÷WJÙ=‰A%k^ ”ÃÒøº1#8ÒÕî¯tpÎZÝÎ3À—r>Ø­‰…Ñ R¢»uÓ_Ì©xRéífã‘«@ˆÛ4Ž7ÀƒZ\=ÜÌ{ @€Ê…× 0¸\ ®W€«6 áçø™ ÑH˜ ±„ØVd¨@Œ,3€ñ º‘Û Lfe °J…(ÁƒÓÐx”‹VÑ¢‡b2@5€N‡R1€} Á¦ãØÑxvC+ö]lóŸsQˆ,1@ü¸mP‡tÌ>”ô&a!?ÙȨÜëšP׌_ 5@Çu¨¾…­º8>Ñ·ßa·òW?¾|MÞ)ë ŒÂõbß™`EåžpKrÈÂf›T†lÎË×’ÏŸOQ ıv‚Ý?wë¹Uq$N+;ÀnðV~qýS0™_`«ìrÏÊ$”»ÆÛiܯA¹tzÁÔJ㵬Ó=Ý}ÊéÝ@Kf-â(+YIÇUX6?#Ÿ’‘‹ÇÖ*Iï“(]c>Á/HíuV¾dgã8¥€ˆb”æYj©ŽÆ¡ÈWé·äc½ßºãjêÔú¦J5—%e5Fc&y‰ÀZ± "èÿ‚l4 ªßoK½´lÞ ï ¡èØXÞ   ? ”Âò]Þ%À‚Ø Æó@ýà*}Å•¿™ƒñ p(¦N0;š¡À)xF ÷ÌpŸÎÊaÐÓÕã(06°Ë €Øh" €ùÀàj`p50¸\ ®W€«ÀÕìþ„˜}ÀÔõ+¹ñ 1ºØõ8Ïßš@³ÁÚ‰­€Æ¢Ëì æŒÂ²4´Ü.wBÆ@ Їš»lDÀ= *6˜ ÐEµJC_ÙˆkÇæpª$U·ÑÍÏ}N jNÚ:€Ý_lÂ.k‚É6·–ÓŸíAËÍ–«W(E™?v¥uów;åÅõ#Q Œf— —šñÆKO²ŸË^Aº¬~5%ÑàÅÁPvœ ¶(ØØžv_? ï#Ø¥ˆÁï1ÀBH{Ýø4°[ÀñÐ!v3Óü”Qy•³—?Þ&qÒ3†ð¶6y ûh­¼ß¬œ–ª?źì`[ ™ŸªÂ>°l•âIf¤Ù1){˜ žÉî8ˆ¦@EýþL`+FiâÁ"g ¡ìéêOa€’kZÈš˜ÀX çTk° wxÚ÷Û²K4è) Xÿeà 1Z›CÕàg° 4œ ^ÿÀ~F¬˜“B Kp:0@Í!t 6èšC‡2Ïe™7G+ÓÒ­F¡ÔßáÐwÅy^w¥1ÝIKiMþ€…¨6 ÊP™."hJ·oÒùušöíž `dˆVmŽé;½KÒfXèl€U›cÆu³Ðݳìt3¹g‘ý[O$;2DÆæ#çvœ ÀôÂ4zÖeÛZߣA97ªtÁ‰ ì—;#°¯¥@1w°M0ÝHÒ%‘Æ Â&ÐÇÒ}úüÞª$qe>}wš=qBº$IÞÛ‡ääÉa0QÐ…Q5»)ˆ26/¡ÒCÓU’v“×9¾,îL …p÷Jç§Ûz–ä¶BÛfú`á5&ý´FÊñ¢qÙ°OÆUŒšc;š­eª{,’ vÈ›þ#’îÎ&Ùx7£š@¬ÚæÜÑRâdPÈ>H ^O7äò ª¼uèОtþ©°µtŸÞ+ ‰þañh‚É3¸Oº)¬¹…¿ðÑ¿ Ô7ž§I ¾2¸{q»0¢ ´2vÀ ÏÚ5Ý+Ý8ûä(ŒÈ[&ÒlhµŒw4oØY0öÓÑì“À2o",Þ¼ŽÄÙ/S¿{rÒ¢øxOw>Ðýæ¬7@ë,rÇÑÆq@÷§0oQ|G¶­  ûã˜QŒfÙ¤*€îÏe†ô¢:REØ«‚Vî_ÀʱR¿hgEßeüO—HøuÀŒ †ËÿUԙªb«‚Rî@÷¯¤§‘ÏÊä¨/"(ü”®ÐdèþÝt[œz¯ÞŠL{Yúzÿº¿„¨ÆÃ[í¾(4èþ6ü Z1ŽÊW›IDñ;¯ÏõI¯ ï‡@÷·ª>ÿíùaox¤¢‘#]–í¼¶–ël^Óâ]ðnœÈ5DºžäÍ” ºÜ"A:%Yù^=¾5c›dã*zî Qê;]Žx*¯•Tìsj›ˆ‰]ˆ\ºÝ²~tÇcRü“É»VÙæ‘Žt\0Bp®Zj†uL¸ñ Z´±wµ-UJ2¯È‰À`ƆBômÔ¯Ö«Þ„Ó–æ8;4”ºCÝÙk²Ï(•ofÆ3ÂØ^`kaìX4³¹²ËѪÍ3üJüÐc0¥­¬Æ2NsLÂú¿ü(ahщ°›ÑLJc¤«Lî9@ú3éÐê[€uì°aŽú¤£"õU0ŸQϳÏIž½ VSàÝ BÌ¥1G‘Ð=`™´$ú{²~_ €«ÀÕüyD!ŠÎEbIEND®B`‚PK‘¨‘AConfigurations2/images/Bitmaps/PK‘¨‘AConfigurations2/popupmenu/PK‘¨‘AConfigurations2/toolpanel/PK‘¨‘AConfigurations2/statusbar/PK‘¨‘AConfigurations2/progressbar/PK‘¨‘AConfigurations2/toolbar/PK‘¨‘AConfigurations2/menubar/PK‘¨‘A'Configurations2/accelerator/current.xmlPKPK‘¨‘AConfigurations2/floater/PK‘¨‘A styles.xmlí]ËŽã8–Ý÷W®©BwD‹ÔÃRTE&ª§g€2 …Î( »7 …$Ûª”%$Ç#Wó³˜Åìç7f7ŸÒ_Ò|ˆ²”L9üˆp² ™i‹—Òå¹äåáåýÃû§u>‚G¤Ùr]×ÑÒJa¿’Ûl³˜Jþ,ŒCò°|œqÙuXx²úÙºJÉv}fÒÐx…×±ê& s,‚›Kú¥Üêuýëa)Ý»–=0û+/“îgT¸ÙUŒ@¾«A½îÚ+V=öufq!ýëã‡]¿ÊÖ²Ï"² ¨ü,ÚH7“I×ë§iZ©J*°ÁNÕEºnÎØ÷šôã øcaV÷Å}/ö+ÄÓµ4,gXB H—¯Ú½ŽbéVcÙžNâ%‘4ôD¶ÓU3~o ­YnÒ¬¨YÈ;]üT¹ŒU±Žû])å¢Ë,„¢Xc†Ý¼ÚC>~3mÌÃÁmuêZ÷U¡Buß;Xê3"S ß<7 Q;îþ4#e™°ó+g§ÚŒˆ¦ïøôÇf½w?ãa™}³ ýL ¿þ˜e)~ ö!7‘?¤O·S}¢O>1tv;5Ä×4H®­þe:¾ß*ô‚üoHÿœ²² Ê7±÷¬µe&Pðh 8.tvŸszye¸f¬Y¶©‘oøCuÙ‰5ü×dîÌW䊼ŠhŸŠH ¢¡ëúÄÆÕ²tª<ù‡kÍOùôe­OLs®A4·'ȲŒIó“F> ©þÇt‹ûQ»´›@u&3é3ì©Ñ]çôÉÿšDMK¨âNfb‰ú¤ê½Ï"šã¿ñ商ÿÚiYú9Ô/_5Âßû{ )ð¢’Êe¡_pá´È!Gõ¯Z&K2©é@GþºV„š’¨G2Ê /!”³¼ŒÀD.¼m\òÓ »¶ð°Ã~¾.3o³Šü)—-¿k› ;¬ˆ0Ÿ% • øiœb ó£“ÿË/¢8®JüE8_`ÌéÍ#¾•–nYIR|ß)µñ2>¬ñ(ZD¼Žæm‹4ßx¤=Q¦LÔ‹7+oZŠm¶‰_lélAï};Í£õ†xCVŽI^¨Ýg¡‡‰ Ö?"è³2ƒbÞ©­Óß>δâž-RLä£$ÉtAH=½ Q„’ÿ…çav¾Ôt“ãVÍú›U‰“vuZ»ÍC ³à }ÔèÃK$‹lRéEn®ï¼MšáImòSø8ùSºöv±Ñ&¯-Ã$Ä Ç}È5$6Qáã.ôàe›Bø£òè ™›‚^‹½d¹õ–øR˜Ð ~ºMŠ ëòË'Ñ#ñ¬ë%\ÑñÍãÉ/I„Oáä㧽šòêùs^„ë®Â¼|§vM‚hΘþeG(›À˾¬xIÙ^ð/?‰T#¬&±ë¸óVÆ!í+Ñ^ý+‰þT"Â6T¥«¨ÝŠªèßšîzdcôó®XwÌcçxY0ï jnß'£`:i»Î†Ã¬y”Ç( žŒ¸±}Ž†Í¸!xQU;Ø(÷ñà%Ë-6bxdT'¥¢ÊÄÍ5›'t|´$%þ¢ÀèéßÖe1·]6›Ü.[…ÑrUÔ ‰Óð°ÓVi}ÁÄ‹±Œ–¸»þºÍ‹hñLGåÆ HxBÃÞˆ´ "‹Ü¡VpŸaÿ¢²8\‹vAVjS–0£®¼€®P¢ .¡vQÔ0 í‰VÑV^üÜS,4:¯ZCôÝ4dã OèÈu±¯lb&¬±…ø„’ëtz-o±]kdùçáVW]¾v‡]¯Ÿõyuê"YCtú_ÛµB·ŒÏ!õú”¿ßÆqX4”Çü‘~eEYfßNÿþŸÿ=¬?«CgXí>Äm)¯Ÿ£Ð¢u”h±w+Uceîu^!hù'«Ì°²!ùǃŒ€elÖ× ²y´žl*… ["ÿÿÿÆclÝQ 1¶Æ'Çx®0>9ÆŽÂøä» ã“cLb} äÃ@®—!„Y_$`0¶‡ŽWØK[n–kÍòbV[øålóZµ’-/Ó_8»Æ·ô"‹!²u2 ì®F4°Çc %Ò_'’ؾÀLóˆRõF÷ê“*WrûËÕÈ~Á’Qï,GÈ~A´ÆJŸàØHJÐŽ+ -' iÈI" 94€+)i$ghKμuÁ¶{w.Œ†+“F“ ÞSÂYz‡‡(h—îÝ!Üس;p@˱G&[-§iú¾¾Á¶èH‘VŒ¥3ô{6|_¤å}<_RÓáÕV9µÙØŽnÙd[Daï¾èùZ×·ªª/uø–àèf²EÑëm䈥cs‘ì1n²ˆŠÚ$üJ;²iŽêȤIðmêÝ+×»¼g˜.äG›€eÍÆ›|ªX‚¾Û¹oØ`±ð}×}]6äì)í€=1¢ª@`_aDHÒèƨɄ$z>|yϲúMõÁ‰ ñ%¬e8Û°~•~¨ÒUúá[Y¥ªôëÀX¥ªôÃkÀX¥ªôÃkÀX¥ªôC•~¨ÒUú¡J?Ø»ÇöÇ#h ºm¼œÆ˜:|9añÙë¥1æ\rƒOºr’dΕ“$S®œ$™qå$É„+'Iæ[9I2ÝJ¢D¦[éŒW—%Ó­¤(™n%E-0—Í®°+i)Lc¤©0±$m…È@”%ÞCRÔ†¤µ0±uûl4æstÍo›¡·ü¶Yò}Û¬$ÆqxÇ#ˆÛ´^Î#뾜G° Öõòˆv®ŸG¸’ÙjÜz2<Â4å$É”''If<9I2áÉI’ùN%2ßIŠ’ùNR”Ìw’¢d¾“µ€#i(8PÒR˜G˜’¦Â<–´"qIIQ¤µ00%­…yÄœ[ë+ç¢Óf¯†G˜o™Gˆ• <Â<0Æñ>¿¼”Gc[EñÅ#PøwöÊ6éìÍßÊóÏú;y*4>ýûÿü×xÞg§AÚ?†ôÂ=äÓóú>­ÆÚ6ñ½ì5µÝX(‰a "Ó:C\û„ @W‰8(}BÃKÇ·Š0¢|B o¼U„„ñàƒ2®a,÷0|®ÔO #±!d^©ŸÆQDè:ý´8 zDÖÛrÔ'‹a^<~©_qè²LG‘‰GÒ” ™dUš ¤a~™`¤dªæØH2QÕqe#‘²?ŽiÈI" °”ZÉYÚÀ’3œƒ¹œ}  $d‘ 9 !,9!$”™Ê™1ß«¢”ýQJóšî6ßòÁÝ=Ê_I”²vÔ6Þ2ļè¡F$îÇú"‡kÔ¥o61¦W«4Æ]oÒ(Hï }ÜÝVæC[ÞÃòæ‰þ™Ei*ùþÌ~ýÊàßK"†gö£Tô"§šQúš—é€]» Í +ѯ!º4—P¢ Ö‰%A^ˆÃ”˜ §‘ã Þ飇ßVl3¢Íy« `ñ­Êq Ô²îûÌ뎔˜«!Y`gébù¥_ä¡üêmñr‹û/àLC úÏõ©@F¼–’Y XvÑçq@JªV]瘠9pÍÚÚ)‹°sO³ˆ£r;ݤY‘yQQ‡MÐ{€¯ÜN €@×íAb<ºsßÛ„Ãп­ÿlª}#ÎóÈöYd’TÐÔ/v6æî=ÿóóË$(yÝ}šd\Û£ËÓ8 jWødýÍ‚þ'¿ŸˆUîü”è(•£8ˆr<Ÿ1ØÖ˜‡.„"‹4-öˆÐG±Í¯Š‰ ¯Àœ<"í¡·“oý2묌Tý£ûÞo^àâeÁQ¶XEÖc%Äùh¸#bï?¾ÉíðswŠ‡5™ÈùxB|Ø(ü;?%tŽ¾ùb°È % ÕÞ.ÜL•`!a¶D·ˆg™"«UÀgË] ‰–jé†MzIJ£§£,Õù±†–ª¢³ySàãx.spR 6Ë>#¶JËáÝë¤lÎÖÈuî Z(Žj¿¡ŒØêâk~­H¸¥NÜzk «·Ô‰[W±:qK¸u «·Ô‰[×€±:që¨'nõ¦a–k//¬ºJë±÷L.‘;î¾³˜;[²±,>¢¸|·O #Ã÷zE} D–ÆëÐË·$a? ©Ô¬Ý†~™t¬±F73áú2[µFò}µGÒ.'y«|Ëãy·sFrK¥¾$¡ tÕæVsãíg^D›"­žÄëò«F/0Ü*ê‰Ç™X&0ýÜ@Á½<¿²ìC®9Õë>}*Gñ¦l-EËR<ÀlgR³gTšÔãŸ7Ü‚»'Ïv¾Ott›í ÆPâ;ͱîÆÞ/œÉú¯;ù ½ÎZô†¼y.ÿ%BªÏ­ üÄûdø쀦zÔkÁ[FÒ ¶±GµªX¨°lWø'}òûwØJf;~Šù=£›ó ÓtjŽÐŽîÖœ!ý™NôÔ]Ž¼d–M¥÷ ³{b6yeÕôÆzÚdI ÛéÓ¼ÔâhZ¢ùËꟿì1¸Àè$+’3³œžéKӮÃÞ88$CE”—líËK6F¾¤pœì!‘•ì~+9ǶÉ ‡®´©N‘Z'²Ö|´µÎ•p'2ØüBÊ&ðŸ-ûî8£ê,9y"#9—Uƒ–:MšÞÁÃê5$ïͺÙ{U†{-—}÷’cë]F~9Hýíº:Ò0÷PKñ™)‘´QPK‘¨‘AMETA-INF/manifest.xml­SÁnà ½÷+"î­§ %íaÒ¾ ûFœ S5?©m¦©S£õ„í÷žõ ÙŸ­N“ñزWþÂ*@í;ƒCË>õÛï6ShzH$/AUæ0]Ó–åˆÒ«d’Då IÒÒÀÎëìIþì—3Ó5[زݦºñõÆB]æãxëî³µuPtl™¸r»vÐUÓ e*k´¢Ò&NØñY0_êä!B*çÜÃÄ-Hñ²æn‚3‰©¼ 4Qñ"=X{¤ißgãŽÙ}¡26 º„<àp‡Ä85€˜ê«XÞ=öfÈq¶)m…Ò,”ÔG¡sŒoö?®ßVÊ8IàÙp½DXé?u¿¿þéîPK+¿–âPK‘¨‘A3&¬¨//mimetypePK‘¨‘A"<”œœUmeta.xmlPK‘¨‘Amí¦d#Ÿ$ settings.xmlPK‘¨‘AÝÊÐq¡ t content.xmlPK‘¨‘AØ‹CµÎ Î Thumbnails/thumbnail.pngPK‘¨‘A"'Configurations2/images/Bitmaps/PK‘¨‘A_'Configurations2/popupmenu/PK‘¨‘A—'Configurations2/toolpanel/PK‘¨‘AÏ'Configurations2/statusbar/PK‘¨‘A(Configurations2/progressbar/PK‘¨‘AA(Configurations2/toolbar/PK‘¨‘Aw(Configurations2/menubar/PK‘¨‘A'­(Configurations2/accelerator/current.xmlPK‘¨‘A)Configurations2/floater/PK‘¨‘Añ™)‘´Q :)styles.xmlPK‘¨‘A+¿–â@META-INF/manifest.xmlPK6XAdnssec-tools-2.0/apps/owl-monitor/README0000664000237200023720000000507212110742164020233 0ustar hardakerhardaker ------------------------------- ABOUT THE OWL MONITORING SYSTEM ------------------------------- The Owl Monitoring System uses timed Domain Name System (DNS) queries to monitor basic network functionality. The system consists of a manager host and a set of sensor hosts. The Owl sensors perform periodic DNS queries and report to the Owl manager the time taken for each query. Over time, this shows the responsiveness of the DNS infrastructure. The Owl Monitoring System was designed such that the Owl sensor hosts need not be under the same administrative control as the Owl manager host. In fact, each sensor in a set of Owl sensors may be under administrative control of different organizations and still report to a single Owl manager. Besides the code written specifically for Owl, some third-party software is also used. The manager and sensor require Perl modules that must be installed (via CPAN or your local system's repository. The manager also relies on several software packages (e.g., Nagios and rrdtool) for displaying the collected Owl sensor data. The third-party software is not included in the Owl distribution. The "Owl Monitoring System Installation Guide" provides information on installing and configuring the Owl software and the supporting third-party software. ------------------ DIRECTORY CONTENTS ------------------ This directory contains the Owl Monitoring System files. These are divided into functional groups -- manager files, sensor files, documentation, and files common to both manager and sensor. Brief descriptions of these files are given below. common This directory contains the Perl modules and manual pages that are shared by the Owl manager and the Owl sensor. docs This directory contains the Owl Monitoring System Installation Guide. This document provides an operational overview of the Owl system, installation instructions for Owl and supporting third-party software. Configuration instructions for the Owl software are also provided, along with configuration information for the required third-party software. This guide is in HTML format and should be viewable with any web browser. manager This directory contains the software that implements the Owl manager. There are also fragments of files that are needed for configuring some of the required third-party software. sensor This directory contains the software that implements the Owl sensor. There is also a sample Owl configuration file. --------------- GETTING STARTED --------------- To get started, please see the "docs/install-guide.html" file. dnssec-tools-2.0/apps/owl-monitor/manager/0000775000237200023720000000000012111172554020762 5ustar hardakerhardakerdnssec-tools-2.0/apps/owl-monitor/manager/nagiosgraph-files/0000775000237200023720000000000012111172553024363 5ustar hardakerhardakerdnssec-tools-2.0/apps/owl-monitor/manager/nagiosgraph-files/ng-owl-map0000664000237200023720000000166412057163671026305 0ustar hardakerhardaker ############################################################################### # # Service type: Owl Monitor - DNS response data from owl-dnswatch # template: /perfdata:owl-dnswatch=t:n ms/ # # example: owl-dnswatch=1350339723:26 ms # /perfdata:.*owl-dnswatch=(\d+):(\d+) ms;/ and push @s, [ 'dnswatch', [ 'dnswatch', GAUGE, $2 ] ]; /perfdata:.*owl-dnswatch=(\d+):(\d+) ms$/ and push @s, [ 'dnswatch', [ 'dnswatch', GAUGE, $2 ] ]; # # Service type: Owl Monitor - DNS anycast response data # template: /perfdata:owl-anycaster=t:n ip h/ # # example: owl-anycaster=1350491407:112 ms 128.63.2.53 H2 # /perfdata:.*owl-anycaster=(\d+):(\d+) ms (\S+) (\S+);/ and push @s, [ "anycast_$4", [ 'anycast', GAUGE, $2 ] ]; /perfdata:.*owl-anycaster=(\d+):(\d+) ms (\S+) (\S+)$/ and push @s, [ "anycast_$4", [ 'anycast', GAUGE, $2 ] ]; ############################################################################### dnssec-tools-2.0/apps/owl-monitor/manager/nagiosgraph-files/ng-owl-conf0000664000237200023720000000123712057163544026450 0ustar hardakerhardaker ######################################################################### # # Owl values: # # heartbeat = 120 heartbeat = 2400 stepsize = 60 step = 1 10 60 1440 resolution = 525600 105120 43824 3650 xff = 0.9 # # Owl values should result in these data being used to create the RRDs: # # step=60 # heartbeat=120 # RRA:AVERAGE:0.9:1:525600 # raw data for a year # RRA:AVERAGE:0.9:10:105120 # 10-minute chunks for 2 years # RRA:AVERAGE:0.9:60:43800 # 1-hour chunks for 5 years # RRA:AVERAGE:0.9:1440:3650 # daily chunks for 10 years # ######################################################################### dnssec-tools-2.0/apps/owl-monitor/manager/bin/0000775000237200023720000000000012111172553021531 5ustar hardakerhardakerdnssec-tools-2.0/apps/owl-monitor/manager/bin/owl-archold0000775000237200023720000002716712107530766023720 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2012-2013 SPARTA, Inc. All rights reserved. See the COPYING # file distributed with this software for details. # # owl-archold Owl Monitoring System # # This script archives archives of old sensor data. # # Revision History: # 1.0 121201 Initial version. # use strict; use Cwd; use Getopt::Long qw(:config no_ignore_case_always); # use Time::Local; ####################################################################### # # Version information. # my $NAME = "owl-archold"; my $VERS = "$NAME version: 2.0.0"; my $DTVERS = "DNSSEC-Tools version: 2.0"; ################################################### # # Data required for command line options. # my %options = (); # Filled option array. my @opts = ( 'archdir=s', # Archive directory for old archives. 'delete', # Delete flag. "verbose", # Verbose output. "Version", # Version output. "help", # Give a usage message and exit. ); # # Flag values for the various options. Variable/option connection should # be obvious. # my $delflag = 0; # Delete-archives flag. my $verbose = 0; # Display verbose output. ################################################### my $MV = "/bin/mv"; my $RM = "/bin/rm -fr"; my $TAR = "tar -cjf"; my $yy; # Partial GMT year. my $yyyy; # Full GMT year. my $now; # YYMM for GMT now. my $errs = 0; # Error count. ####################################################################### main(); exit(0); #-------------------------------------------------------------------------- # Routine: main() # sub main { my @datadirs = (); # Directories to archive. $| = 0; # # Get the YYMM for right now. # getnow(); # # Check our options. # doopts(); # # Get the data directories to archive. # @datadirs = getdirs(); # # Archive the archive directories given on the command line. # foreach my $arc (@datadirs) { archer($arc); } } #----------------------------------------------------------------------------- # Routine: doopts() # # Purpose: This routine shakes and bakes our command line options. # sub doopts { my $dir; # Archive directory. # # Parse the options. # GetOptions(\%options,@opts) || usage(); # # Handle a few immediate flags. # usage(1) if(defined($options{'help'})); version() if(defined($options{'Version'})); # # Set our option variables based on the parsed options. # $verbose = $options{'verbose'}; $delflag = $options{'delete'}; # # Ensure we were given a directory. # usage() if(@ARGV == 0); # # Go to the directory of archives and remove the directory from # our argument list. # $dir = shift @ARGV; if(chdir($dir) == 0) { print STDERR "unable to go to directory of archives \"$dir\": $!\n"; exit(1); } } #-------------------------------------------------------------------------- # Routine: getnow() # # Purpose: This routine gets the YYMM for the GMT now. # sub getnow { my @tempus; # Time fields. my $mm; # Full GMT month. # # Get the time fields for right now. # @tempus = gmtime(time()); # # Set the base fields. # $mm = $tempus[4] + 1; $yy = $tempus[5] - 100; $yyyy = 2000 + $yy; # # Build the time blob we're looking for. # $now = sprintf("%02d%02d", $yy,$mm); } #-------------------------------------------------------------------------- # Routine: getdirs() # # Purpose: This routine gets the data directories we'll archive. # If directories were given on the command line, they'll be # returned to the caller. Otherwise, getdirs() will look # in the current directory for directories in our standard # naming format. Anything prior to the current month will # be returned for archiving. # sub getdirs { my @dirs; # Directories to archive. my $curarch; # Archive of current month. my $ind; # Loop index. # # If the user specified some data directories, we'll use those. # return(@ARGV) if(@ARGV > 0); # # Get all the data archive directories that are in our expected # name format. We'll sort that list and get the name for the # current month's directory. # @dirs = sort(glob("data-*")); $curarch = "data-$now"; # # Find the current month in the directory list. # for($ind=0; $ind < @dirs; $ind++) { last if($dirs[$ind] eq $curarch); } # # Get rid of anything in the list from this month into the future, # leaving only past months. # splice @dirs, $ind; if(@dirs == 0) { print "no directories were found for archiving\n"; exit(0); } # # Return the list of remaining directories. # return(@dirs); } #-------------------------------------------------------------------------- # Routine: archer() # # Purpose: Archive the specified directory. A compressed tarball will # be created and moved into the archive of archived directories. # If the archive of archived directories doesn't exist, it'll be # created. # sub archer { my $arch = shift; # Archive to archive. my $archfile; # Archive file. my $archdir; # Archive directory. my $cmd; # Archiving command to execute. if(! -e $arch) { if($arch =~ /^\d{4}$/) { $arch = "data-$arch"; vprint("\t$arch: not found, trying data-$arch\n"); return(archer($arch)); } else { print STDERR "$arch not found\n"; return(0); } } print "archiving $arch\n" if($verbose); # # Get the name of our directory of archives. # $archfile = "$arch.tbz2"; $cmd = "$TAR $archfile $arch"; vprint("\trunning \"$cmd\"\n"); # # Archive the archive. # if(system($cmd) != 0) { my $ret = $? >> 8; print STDERR "unable to archive $archfile\n"; return(0); } # # Get the name of our directory of archives. # if(defined($options{'archdir'})) { $archdir = $options{'archdir'} } else { $yy =~ /^data-(\d{2})\d{2}$/; $yy += 2000; $archdir = "$yyyy-data"; } # # Make the archive directory. If we can't make it, we'll assume # it already exists. # # mkdir($archdir,022); mkdir $archdir; # # Move the new archive file into the archive directory. # vprint("\tmoving $archfile to $archdir/$archfile\n"); if(system("$MV $archfile $archdir/$archfile") != 0) { my $ret = $? >> 8; print STDERR "unable to move $archfile into $archdir\n"; return(0); } # # Delete the archive directory. # if($delflag) { vprint("\tdeleting $arch\n"); if(system("$RM $arch") != 0) { my $ret = $? >> 8; print STDERR "unable to delete $arch\n"; return(0); } } return(1); } #-------------------------------------------------------------------------- # Routine: vprint() # sub vprint { my $str = shift; print "$str" if($verbose); } #-------------------------------------------------------------------------- # Routine: version() # sub version { print STDERR "$VERS\n"; print STDERR "$DTVERS\n"; exit(0); } #-------------------------------------------------------------------------- # Routine: usage() # sub usage { print "owl-archold [archive1 ... archiveN]\n"; print "\toptions:\n"; print "\t\t-archdir directory\n"; print "\t\t-delete\n"; print "\n"; print "\t\t-verbose\n"; print "\t\t-Version\n"; print "\t\t-help\n"; exit(0); } ########################################################################### =pod =head1 NAME owl-archold - Archives archived Owl sensor data =head1 SYNOPSIS owl-archold [options] [year-month-archives] =head1 DESCRIPTION The Owl sensors generate a very large number of data files. The number of data files created will negatively impact the Owl system response time if these files are not periodically archived. The B program runs periodically and moves Owl data files from the "active" data directory into year/month-based archive directories. Once a particular month is complete, the B script will archive the year/month archives themselves. B creates a compressed B file of the year/month archive directory. This compressed B file is then moved into a year-based archive directory. The year/month archive directory is left intact, unless the I<-delete> option is specified. For example, B may create the following directories in a sensor's archive directory: archive directory contains data-1112/ Owl sensor data from December, 2011 data-1203/ Owl sensor data from March, 2012 data-1209/ Owl sensor data from September, 2012 With these three year/month archive directories, B will create the following compressed B files and place them in the given year-archive subdirectory. archive directory tar file year archive data-1112/ data-1112.tbz2 2011-data/ data-1203/ data-1203.tbz2 2012-data/ data-1209/ data-1209.tbz2 2012-data/ The archive directory on the command line is assumed to contain the year/month archive directories and the directory into which the compressed B files will be moved. This is not a requirement. B will change directory into the archive directory and operate from there. B will assume the year/month archives are relative to that directory, unless absolute paths are given. The year/month archives are assumed to have the "data-YYMM" format as given in the examples above. However, the directory names may be anything the user wishes; they will be turned into compressed B files and moved into the year archive directory. If the year/month archive directories are given as "YYMM", then B will convert this into the "data-YYMM" format and attempt to archive that file. B should only be run for year/month archives that the user knows are complete. If used in conjunction with B, then it should be safe to run B on the 4th or 5th of a month in order to archive the previous month's data. If no year/month archives are specified on the command line, then the archive directory will be searched for names that start with "I". Any file or directory with that format will be assumed to be a year/month archive. All the names whose year and month precede the current year and month will be archived. Assume the current directory contains directories with the names I, I, and I. If B is run in September, 2012, with this command line: $ owl-archold . Only the I and I will be archived. =head1 OPTIONS =over 4 =item B<-archdir> This option specifies the directory to which data archives will be moved. =item B<-delete> This option specifies that the original, uncompressed, untarred data archive will be deleted. This will only be done if the new tarred and compressed archive is successfully created and moved into the year-archive directory. =item B<-verbose> This option provides verbose output. =item B<-Version> This option provides the version of B. =item B<-help> This option displays a help message and exits. =back =head1 WARNINGS =over 4 =item Current Month Not Archived B will I archive the current month's data. There is an assumption that more sensor data will be gathered for the current month, so archiving the current month's data will provide an incomplete archive. =item Two-Day Archival Lag The current archive timing used by B means that there will be a two-day lag between the day a data file arrives in a sensor's data directory and the day it is moved to the sensor's archive directory. Consequently, B should not be run on the first or second days of a month. More data may still be awaiting archiving, and an early run could result in unarchived data. =back =head1 COPYRIGHT Copyright 2012-2013 SPARTA, Inc. All rights reserved. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =head1 SEE ALSO B, B B, B =cut dnssec-tools-2.0/apps/owl-monitor/manager/bin/owl-dataarch-mgr0000775000237200023720000003264112107530766024627 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2012-2013 SPARTA, Inc. All rights reserved. See the COPYING # file distributed with this software for details. # # owl-dataarch-mgr Owl Monitoring System # # This script archives old sensor data. # It is a modified version of the owl-dataarch command for Owl sensors. # # Revision History # 1.0 121201 Initial version. # use strict; use Cwd; use Getopt::Long qw(:config no_ignore_case_always); use Time::Local; ####################################################################### # # Version information. # my $NAME = "owl-dataarch-mgr"; my $VERS = "$NAME version: 2.0.0"; my $DTVERS = "DNSSEC-Tools version: 2.0"; ################################################### # # Data required for command line options. # my %options = (); # Filled option array. my @opts = ( "verbose", # Verbose output. "Version", # Version output. "help", # Give a usage message and exit. ); # # Flag values for the various options. Variable/option connection should # be obvious. # my $verbose = 0; # Display verbose output. ################################################### my $MV = "/bin/mv"; my $archdir; # Archive directory. my $curdir; # Current directory. my $datadir; # Data directory. my $sensor; # Name of sensor being archived. my $errs = 0; # Error count. ####################################################################### main(); exit(0); #-------------------------------------------------------------------------- # Routine: main() # sub main { my @keepdate; # Earliest date we'll keep. $| = 0; # # Save our current directory. # $curdir = getcwd(); # # Check our options. # doopts(); if($verbose) { print "configuration parameters:\n"; print "\tcurrent directory \"$curdir\"\n"; print "\tdata directory \"$datadir\"\n"; print "\tarchive directory \"$archdir\"\n"; print "\tsensor name \"$sensor\"\n"; print "\n"; } # # Don't proceed on errors. # if($errs) { my $sfx = ($errs != 1) ? 's' : ''; # Pluralization suffix. print "$NAME: $errs error$sfx found during initialization; halting...\n"; exit(1); } # # Get the earliest date for files to keep. # @keepdate = getkeepdate(); # # Archive the specified data files. # archer(@keepdate); } #----------------------------------------------------------------------------- # Routine: doopts() # # Purpose: This routine shakes and bakes our command line options. # sub doopts { # # Parse the options. # GetOptions(\%options,@opts) || usage(); # # Handle a few immediate flags. # version() if(defined($options{'Version'})); usage(1) if(defined($options{'help'})); # # Set our option variables based on the parsed options. # $verbose = $options{'verbose'}; # # Get our sensor name, data directory, and archive directory. # usage(2) if(@ARGV != 3); $sensor = $ARGV[0]; $datadir = $ARGV[1]; $archdir = $ARGV[2]; # # Ensure these directories are absolute paths. # $datadir = "$curdir/$datadir" if($datadir !~ /^\//); $archdir = "$curdir/$archdir" if($archdir !~ /^\//); # # Check our data directory. # checkdir($archdir,'archive',1); checkdir($datadir,'data',0); } #-------------------------------------------------------------------------- # Routine: checkdir() # # Purpose: This routine validates the given directory with the # following checks: # - directory exists # - directory is a directory # - directory is executable # - directory is readable # sub checkdir { my $dir = shift; # Directory to glob-n-check. my $dirstr = shift; # Directory explanation. my $mkflag = shift; # Make-directory flag. if(! -e $dir) { # # Make the directory and run the checks again. # if($mkflag) { vprint("creating $dirstr directory $dir\n"); mkdir($dir); return(checkdir($dir,$dirstr,0)); } print STDERR "$dirstr directory \"$dir\" does not exist\n"; $errs++; return(0); } if(! -d $dir) { print STDERR "$dirstr directory $dir is not a directory\n"; $errs++; return(0); } if(! -x $dir) { print STDERR "$dirstr directory $dir is not searchable\n"; $errs++; return(0); } if(! -r $dir) { print STDERR "$dirstr directory $dir is not readable\n"; $errs++; return(0); } # # Return success. # return(1); } #-------------------------------------------------------------------------- # Routine: getkeepdate() # # Purpose: This routine returns data indicating midnight of the day # before today. These data are returned in an array having # this structure: # # 0 two-digit year (YY) # 1 month number (MM) # 2 day number in month (DD) # 3 YYMMDD.hhmm string (hhmm are always "0000") # 4 seconds since the epoch # sub getkeepdate { my $now; # Current time. my $midnight; # Today's midnight. my $yesterday; # Yesterday's midnight. my @tempus; # Time fields. my @kdate; # Date to keep. # # Get the time fields for right now. # $now = time; @tempus = localtime($now); # # Set the clock back to midnight. # $midnight = timelocal(0, 0, 0, $tempus[3], $tempus[4], $tempus[5]); # # Set the clock to yesterday's midnight. # $yesterday = $midnight - (24 * 60 * 60); @tempus = localtime($yesterday); # # Build the date structure we're looking for. # $kdate[0] = $tempus[5] - 100; $kdate[1] = $tempus[4] + 1; $kdate[2] = $tempus[3]; $kdate[3] = sprintf("%02d%02d%02d.0000",$kdate[0],$kdate[1],$kdate[2]); $kdate[4] = $yesterday; # # Return the date fields we're looking for. # return(@kdate); } #-------------------------------------------------------------------------- # Routine: archer() # # Purpose: Archives the files from before the time given in the # specified time array. # sub archer { my @keepdate = @_; # Earliest date info. my @files = (); # Data files to check. my $lastind; # Index of last old file. # # Move into this sensor's data directory. # if(chdir($datadir) == 0) { print STDERR "unable to move to directory \"$datadir\"\n"; next; } # # Get a list of the Owl DNS response-data files in the directory. # @files = glob("*.dns"); @files = sort(@files); # # Get the array index of the first file we won't archive. # $lastind = firstfile(\@files,$keepdate[3]); if($lastind > 0) { # # Must archive some files. # splice @files, $lastind; } elsif($lastind == 0) { # # No need to archive any files. # @files = (); } elsif($lastind == -1) { # # Must archive all files. # } # # Archive the files. # print "archiving $datadir/*.dns\n" if($verbose); filesaver(\@files,$datadir); } #-------------------------------------------------------------------------- # Routine: firstfile() # # Purpose: When given a sorted array of filenames and a timestamp, it # returns the index of the first file that is older than the # timestamp. The file's age is taken from the filename. # # Return Values: # -1 All files are older than the timestamp. # 0 No archive is needed. # >-1 The index of the first file older than the timestamp. # sub firstfile { my $fileref = shift; # Reference to matching files. my $keepdate = shift; # First date to keep. my @files; # List of matching files. @files = @$fileref; for(my $ind=0; $ind < @files; $ind++) { if(($files[$ind] cmp $keepdate) >= 0) { return($ind); } } return(-1); } #-------------------------------------------------------------------------- # Routine: filesaver() # # Purpose: This routine moves a list of files from their original data # directory into an archive directory. The archive directory # is specific to the sensor, and the files are moved into sub- # directories named by the files' YYMM. # sub filesaver { my $fileref = shift; # Reference to file list. my $destdir = shift; # Destination directory. my @files; # List of files to archive. my $first; # First file's timestamp. my $last; # Last file's timestamp. my $archtop; # Top dir of sensor's archive. my %yymms = (); # List of YYMM prefixes. # # Get the list of files to archive, and return if the list is empty. # @files = @$fileref; return if(@files == 0); # # Get the YYMM timestamps for the first and last files. # $files[0] =~ /^(....)/; $first = $1; $files[-1] =~ /^(....)/; $last = $1; # # Get the set of YYMM prefixes. # for(my $ind=$first; $ind <= $last; $ind++) { my @fns = glob("$datadir/$ind*"); if(@fns > 0) { $yymms{$ind}++; } } # # Make sure our directories (sensor's directory and monthly # directories) exist, and create them if they don't. # $archtop = "$archdir/$sensor"; foreach my $ind (sort(keys(%yymms))) { vprint("checking data archive $archtop\n"); checkdir($archtop,"data archive",1); vprint("checking data archive $archtop/data-$ind\n"); checkdir("$archtop/data-$ind","data archive destination",1); } # # Move the files in the old-files list into their YYMM archive # directories. Create the archive directories if they don't exist. # for(my $ind=0; $ind < @files; $ind++) { my $cmd; # File-mover command. my $fn; # File to archive. my $yymm; # Timestamp prefix. my $ddir; # Destination directory. my $ret; # Return code. # # Get the filename and its timestamp prefix. # $fn = $files[$ind]; $fn =~ /^(....)/; $yymm = $1; # # Build the destination directory. # $ddir = "$archtop/data-$yymm/"; $cmd = "$MV $fn $ddir"; print "saving $fn to $ddir\n" if($verbose); system($cmd); $ret = $?; vprint("$cmd\n"); if(($ret >> 8) != 0) { print "mv failed\n"; exit(1); } } } #-------------------------------------------------------------------------- # Routine: vprint() # sub vprint { my $str = shift; print "$str" if($verbose); } #-------------------------------------------------------------------------- # Routine: version() # sub version { print STDERR "$VERS\n"; print STDERR "$DTVERS\n"; exit(0); } #-------------------------------------------------------------------------- # Routine: usage() # sub usage { print "owl-dataarch-mgr [options] \n"; print "\toptions:\n"; print "\t\t-verbose\n"; print "\t\t-Version\n"; print "\t\t-help\n"; exit(0); } ########################################################################### =pod =head1 NAME owl-dataarch-mgr - Archives Owl sensor data on an Owl manager =head1 SYNOPSIS owl-dataarch-mgr [options] =head1 DESCRIPTION B archives data from a single Owl sensor that are stored on an Owl manager host. The Owl sensors generate a very large number of data files and transfer them to the manager. Owl system response time can be negatively impacted if these files are not periodically archived. B may be run standalone, but it is intended to be run by B. The data files for I are moved from I to I. If these directories are not absolute paths, then (internally) they will be converted to absolute paths from the execution directory. B does not archive every file in the data directory. Rather, it archives those files that are two days or older than the time of execution. The file's age is determined by the timestamp in the file's name; it is B determined by the timestamp of the file itself. If a data file contains records from two months, such as at the turn of the month, all that file's records will be stored with the first month's data. In other words, files are maintained as is, and no data-splitting will occur. (The "two-days or older" limit on archived files is due to the lack of data-splitting of files that cross day boundaries.) The data files are not put straight into the archive directory; they are put into year/month-specific subdirectories within a directory specific to the named sensor. The subdirectory's name is based on the year and month in which the data files were created. The format of the names of these subdirectories is //data- For example, data for sensor I for September, 2012, to be stored in B will be stored in this directory: /owl/backups/kvothe/data-1209 These directories are created as required for the data to be archived. The data files are archived one file at a time, which increases the execution time of B. The reason for this involves several factors: the long length of Owl data filenames, the maximum command-line length in most operating systems, and the number of distinct queries being performed by a sensor. With long data filenames, relatively few files could be archived before the O/S maximum command-line length would be exceeded. If an Owl sensor is running very many queries, then the length of one move command (e.g., I) could very easily exceed what the operating system allows. =head1 OPTIONS =over 4 =item B<-Version> This option provides the version of B. =item B<-help> This option displays a help message and exits. =item B<-verbose> This option provides verbose output. =back =head1 CAVEATS B is not a general-purpose archiver. While there are somewhat generalized aspects to it, B is strongly biased to the hierarchical structure laid out for the Owl sensor data. =head1 COPYRIGHT Copyright 2012-2013 SPARTA, Inc. All rights reserved. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =head1 SEE ALSO B, B bzip2(1), tar(1) =cut dnssec-tools-2.0/apps/owl-monitor/manager/bin/owl-archdata0000775000237200023720000001637012107530766024045 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2012-2013 SPARTA, Inc. All rights reserved. See the COPYING # file distributed with this software for details. # # owl-archdata Owl Monitoring System # # This script retrieves the DNS response data gathered by an Owl sensor. # It runs on the Owl manager and provides data for use by a Nagios # monitoring environment. # # Revision History # 1.0 121201 Initial version. # This was adapted from the uemarch script from # the original UEM system. # use strict; use Getopt::Long qw(:config no_ignore_case_always); use Fcntl ':flock'; use File::Path; ####################################################################### # # Version information. # my $NAME = "owl-archdata"; my $VERS = "$NAME version: 2.0.0"; my $DTVERS = "DNSSEC-Tools version: 2.0"; ####################################################################### # # Data required for command line options. # my %options = (); # Filled option array. my @opts = ( 'verbose', # Display verbose information. 'Version', # Display the version number. 'help', # Give a usage message and exit. ); my $verbose = 0; # Verbose output flag. my $datadir = ''; # Directory for Owl sensor data. my $archdir = ''; # Archive directory for sensor data. ####################################################################### my $err = 0; main(); exit(0); #------------------------------------------------------------------------ # Routine: main() # sub main { my $cron1 = time; my $cron2; my $cdiff; # # Get our arguments. # argulator(); print "Owl archive started: " . localtime() . "\n"; # # Archive the sensor data. # archsensors(); # # Get elapsed time. # $cron2 = time; $cdiff = ($cron2 - $cron1) / 60; print "\nOwl archive ended: " . localtime() . "\n"; printf("elapsed time: %5.2f minutes\n",$cdiff); } #------------------------------------------------------------------------ # Routine: argulator() # # Purpose: Get our options and arguments from the command line. # sub argulator { # # Parse the command line. # GetOptions(\%options,@opts) || usage(); # # Show the version number or usage if requested. # version() if(defined($options{'Version'})); usage() if(defined($options{'help'})); $verbose = $options{'verbose'}; usage() if(@ARGV != 2); # # Get the paths from the arguments. # $datadir = $ARGV[0]; $archdir = $ARGV[1]; # # Ensure the directories are reasonable. # checkdir($datadir,'data',0); checkdir($archdir,'archive',1); if($verbose) { print "data directory $datadir\n"; print "archive directory $archdir\n"; print "\n"; } } #------------------------------------------------------------------------ # Routine: checkdir() # # Purpose: Ensure the named directory is valid. Checks for: # - directory exists # - directory is a directory # - directory is executable # - directory is readable # sub checkdir { my $dir = shift; # Directory name. my $dtype = shift; # Directory type. my $mkflag = shift; # Make-directory flag. if(! -e $dir) { # # Make the directory and run the checks again. # if($mkflag) { print "creating $dtype directory $dir\n" if($verbose); mkdir($dir); return(checkdir($dir,$dtype,0)); } print STDERR "$dtype directory \"$dir\" does not exist\n"; exit(10); } if(! -d $dir) { print STDERR "$dtype directory \"$dir\" is not a directory\n"; exit(11); } if(! -x $dir) { print STDERR "$dtype directory \"$dir\" is not searchable\n"; exit(12); } if(! -r $dir) { print STDERR "$dtype directory \"$dir\" is not readable\n"; exit(13); } } #------------------------------------------------------------------------ # Routine: archsensors() # # Purpose: Archive the data for each sensor in the data directory. # sub archsensors { # # Go through the list of sensors and archive each one's data. # foreach my $sdir (sort(glob("$datadir/*"))) { my $sensor; # Name of this sensor. my $ddir; # Sensor's data directory. my @files; # Sensor's data files. # # Get the actual name of this sensor. # $sensor = $sdir; $sensor =~ s/^$datadir\///; # # Go to next sensor if it has no data files. # @files = glob("$sdir/data/*"); next if(@files == 0); print "archiving sensor $sensor\n"; # print "\t\tfiles to check: " . @files . "\n"; # # Archive this sensor's data. # system("du -skh $ddir") if($verbose); print "running \"./owl-dataarch-mgr $sensor $sdir/data $archdir\"\n" if($verbose); system("owl-dataarch-mgr $sensor $sdir/data $archdir"); system("du -skh $ddir") if($verbose); } } #------------------------------------------------------------------------ # Routine: version() # sub version { print STDERR "$VERS\n"; print STDERR "$DTVERS\n"; exit(0); } #------------------------------------------------------------------------ # Routine: usage() # sub usage { print "usage: owl-archdata [options] \n"; exit(0); } ############################################################################### =pod =head1 NAME owl-archdata - Archive DNS response data from Owl sensors =head1 SYNOPSIS owl-archdata [options] =head1 DESCRIPTION B archives DNS response-time data from an Owl sensor node that is stored on the Owl manager. The Owl sensors generate a very large number of data files and transfer them to the manager. Owl system response time can be negatively impacted if these files are not periodically archived. B runs standalone, and should likely be set as a daily B job. Data from a set of sensors will be archived by a single execution of B, with B performing the actual archive operations. The I is assumed to be organized as for the Owl manager. Therefore, this directory will be a high-level directory that contains subdirectories for each sensor. The sensor directories will contain a directory (cunningly named "B") that will contain the data gathered by that sensor. For example, if the I is B and the sensors are named B and B, then data in the following directories will be archived: /owl/data/dresden/data /owl/data/kvothe/data Data from these directories will be move to I. See the documentation for B for a discussion of how the archived data are organized in I. The path of the executing process B contain the path in which B lives, or B will not be able to execute it. =head1 OPTIONS The following options are recognized by B: =over 4 =item I<-Version> Display the program version and exit. =item I<-help> Display a usage message and exit. =item I<-verbose> Display the verbose information. =back =head1 CAVEATS B is not a general-purpose archiver. While there are somewhat generalized aspects to it, B is very strongly biased to the hierarchical structure laid out for the Owl sensor data. =head1 COPYRIGHT Copyright 2012-2013 SPARTA, Inc. All rights reserved. See the COPYING file included with the DNSSEC-Tools package for details. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =head1 SEE ALSO B B, B =cut dnssec-tools-2.0/apps/owl-monitor/manager/bin/owl-needs0000775000237200023720000001074512107530766023374 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2012-2013 SPARTA, Inc. All rights reserved. See the COPYING # file distributed with this software for details. # # owl-needs # # This script reports the presence of Perl modules required by Owl. # # Revision History: # 1.0 121218 Initial version. # use strict; use Getopt::Long qw(:config no_ignore_case_always); # # Version information. # my $NAME = "owl-needs"; my $VERS = "$NAME version: 2.0.0"; my $DTVERS = "DNSSEC-Tools version: 2.0"; #------------------------------------------------------------------------ # # Data required for command line options. # my %options = (); # Filled option array. my @opts = ( "list", # List modules to be checked. "help", # Give help message. "Version", # Give version info. "verbose", # Give verbose output. ); my $listonly = 0; # Only show module list flag. my $verbose = 0; # Verbose flag. #------------------------------------------------------------------------ # # Modules whose presence will be verified. # my @needed_modules = ( 'Cwd', 'Fcntl', 'File::Path', 'Getopt::Long', 'Time::Local', ); my $errs = 0; # Count of unfound modules. #------------------------------------------------------------------------ main(); exit($errs); #------------------------------------------------------------------------ # Routine: main() # sub main { # # Check our options and read the configuration file. # doopts(); # # Go through the module list and do The Right Thing. # foreach my $nm (@needed_modules) { # # If we're just listing the modules, print the name # and continue onwards. # if($listonly) { print "$nm\n"; next; } # # Check the module's presence and respond appropriately. # if( eval " require $nm " == 0) { if($verbose) { print "$nm not found - $@\n"; } else { print "$nm: $@\n"; } $errs++; } else { print "$nm found\n" if($verbose); } } # # Print a success message -- if we had complete success and we # aren't just listing the modules. # if(($errs == 0) && ($listonly == 0)) { print "\n" if($verbose); print "all Perl modules found\n"; } } #------------------------------------------------------------------------ # Routine: doopts() # sub doopts { # # Parse the options. # GetOptions(\%options,@opts) || usage(); # # Handle a few immediate flags. # version() if(defined($options{'Version'})); usage(1) if(defined($options{'help'})); # # Set our option variables based on the parsed options. # $verbose = $options{'verbose'}; $listonly = $options{'list'}; if($verbose && $listonly) { print STDERR "-verbose and -list are mutually exclusive\n"; exit(1); } } #---------------------------------------------------------------------- # Routine: version() # # Purpose: Print the version number(s) and exit. # sub version { print STDERR "$VERS\n"; print STDERR "$DTVERS\n"; exit(0); } #----------------------------------------------------------------------------- # Routine: usage() # sub usage { print STDERR "usage: $0 [options]\n"; print STDERR "\t\where options are:\n"; print STDERR "\t\t-list\n"; print STDERR "\t\t-verbose\n"; print STDERR "\t\t-help\n"; print STDERR "\t\t-Version\n"; exit(0); } #-------------------------------------------------------------------------- =pod =head1 NAME owl-needs - reports presence of Perl modules required by the Owl manager =head1 SYNOPSIS owl-needs [options] =head1 DESCRIPTION B reports the presence or absence of Perl modules required by Owl scripts on the Owl manager host. If no options are given, then those modules that aren't found will be reported. The result of the module's failed B will be reported. The count of unfound modules will be the command's exit code. =head1 OPTIONS =over 4 =item B<-list> Lists the modules that will be checked, but does not perform any checks. This option may not be used with the B<-verbose> option. =item B<-verbose> Prints the found/not-found status of each module to be checked. This option may not be used with the B<-list> option. =item B<-help> Prints a help message. =item B<-Version> Prints B' version and exit. =back =head1 SEE ALSO owl-archdata(1), owl-archold(1), owl-dataarch-mgr(1), owl-initsensor(1), owl-monthly(1), owl-newsensor(1) owl-dnswatch(1), owl-perfdata(1), owl-stethoscope(1) =head1 COPYRIGHT Copyright 2012-2013 SPARTA, Inc. All rights reserved. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =cut dnssec-tools-2.0/apps/owl-monitor/manager/bin/owl-monthly0000775000237200023720000002157212107530766023770 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2012-2013 SPARTA, Inc. All rights reserved. See the COPYING # file distributed with this software for details. # # owl-monthly Owl Monitoring System # # This script archives previously archived Owl sensor data. # It runs on the Owl manager. # # Revision History # 1.0 121201 Initial version. # This was adapted from the owl-archdata script. # use strict; use Getopt::Long qw(:config no_ignore_case_always); use Fcntl ':flock'; use File::Path; ####################################################################### # # Version information. # my $NAME = "owl-monthly"; my $VERS = "$NAME version: 2.0.0"; my $DTVERS = "DNSSEC-Tools version: 2.0"; ####################################################################### # # Data required for command line options. # my %options = (); # Filled option array. my @opts = ( 'archdir=s', # Archive directory. 'delete', # Delete archive. 'verbose', # Display verbose information. 'Version', # Display the version number. 'help', # Give a usage message and exit. ); my $adflag = ''; # Directory for archived archives. my $delflag = ''; # Delete-archive flag. my $verbose = 0; # Verbose output flag. ####################################################################### my $archdir = ''; # Directory for archived archives. my $err = 0; main(); exit(0); #------------------------------------------------------------------------ # Routine: main() # sub main { my $cron1 = time; my $cron2; my $cdiff; # # Get our arguments. # argulator(); print "Owl monthly archive started: " . localtime() . "\n"; # # Archive the sensor-data archives. # archarch(); # # Get elapsed time. # $cron2 = time; $cdiff = ($cron2 - $cron1) / 60; print "\nOwl monthly archive ended: " . localtime() . "\n"; printf("elapsed time: %5.2f minutes\n",$cdiff); } #------------------------------------------------------------------------ # Routine: argulator() # # Purpose: Get our options and arguments from the command line. # sub argulator { # # Parse the command line. # GetOptions(\%options,@opts) || usage(); # # Show the version number or usage if requested. # version() if(defined($options{'Version'})); usage() if(defined($options{'help'})); # # Pick up some options. # $adflag = "-archdir $options{'archdir'}" if(defined($options{'archdir'})); $delflag = "-delete" if(defined($options{'delete'})); $verbose = $options{'verbose'}; usage() if(@ARGV != 1); # # Get the paths from the arguments. # $archdir = $ARGV[0]; # # Ensure the directories are reasonable. # checkdir($archdir,'archive'); if($verbose) { print "archive directory $archdir\n"; print "\n"; } } #------------------------------------------------------------------------ # Routine: checkdir() # # Purpose: Ensure the named directory is valid. Checks for: # - directory exists # - directory is a directory # - directory is executable # - directory is readable # sub checkdir { my $dir = shift; # Directory name. my $dtype = shift; # Directory type. if(! -e $dir) { print STDERR "$dtype directory \"$dir\" does not exist\n"; exit(10); } if(! -d $dir) { print STDERR "$dtype directory \"$dir\" is not a directory\n"; exit(11); } if(! -x $dir) { print STDERR "$dtype directory \"$dir\" is not searchable\n"; exit(12); } if(! -r $dir) { print STDERR "$dtype directory \"$dir\" is not readable\n"; exit(13); } } #------------------------------------------------------------------------ # Routine: archarch() # # Purpose: Archive previous months' data for each sensor in the # archive directory. # sub archarch { # # Go through the list of sensors and archive each one's old data. # foreach my $sdir (sort(glob("$archdir/*"))) { my $sensor; # Name of this sensor. my @files; # Sensor's data files. # # Get the actual name of this sensor. # $sensor = $sdir; $sensor =~ s/^$archdir\///; # # Go to next sensor if this one has no archived files. # @files = glob("$sdir/*"); next if(@files == 0); print "archiving sensor $sensor\n"; # # Archive this sensor's data. # system("owl-archold $adflag $delflag $sdir"); } } #------------------------------------------------------------------------ # Routine: version() # sub version { print STDERR "$VERS\n"; print STDERR "$DTVERS\n"; exit(0); } #------------------------------------------------------------------------ # Routine: usage() # sub usage { print "usage: owl-monthly [options] \n"; exit(0); } ############################################################################### =pod =head1 NAME owl-monthly - Make monthly archives of previously archived Owl Monitor data =head1 SYNOPSIS owl-monthly [options] =head1 DESCRIPTION The Owl sensors generate a very large number of data files and transfer them to the Owl manager. After the data have been used by Nagios and added to the graphing databases, B archives the data files to the Owl archive directory. To conserve space in the long run, B will archive those previously archived data files by creating a compressed tarfile of the data from a particular month. B runs standalone, and should likely be set as a monthly B job. Data from a set of sensors will be archived by a single execution of B, with B performing the actual archive operation for each sensor. The I is assumed to be organized as expected by the Owl manager. Therefore, this directory will be a high-level directory that contains subdirectories for each sensor. The sensor directories will contain a set of subdirectories that contain the data gathered by that sensor for a particular month and year. The general format for these subdirectory names is "data-YYMM". When B runs, it creates an additional subdirectory that collects all the compressed tarfiles for a given year. For example, if the I is B, the sensors are named B and B, and the sensors have been running for two months in 2012, the B will have copied data into the following directory: /owl/archive/dresden/data-1209 /owl/archive/dresden/data-1210 /owl/archive/kvothe/data-1209 /owl/archive/kvothe/data-1210 Running B on the B directory will result in the following directories and files being created: /owl/archive/dresden/2012-data /owl/archive/dresden/2012-data/data-1209.tbz2 /owl/archive/dresden/2012-data/data-1210.tbz2 /owl/archive/kvothe/2012-data /owl/archive/kvothe/2012-data/data-1209.tbz2 /owl/archive/kvothe/2012-data/data-1210.tbz2 The B<.tbz2> files are the tarfiles creating by B running B on the B directories. It also copies the resulting tarfiles into the two B<2012-data> directories. If it had been given the I<-delete> option, then the original B directories would have been deleted. See the documentation for B for complete information on how files and subdirectories are named during this archival process. The path of the executing process B contain the path in which B lives or B will not be able to execute it. =head1 OPTIONS The following options are recognized by B: =over 4 =item I<-archdir archive-directory> Directory to hold archived archives. Pass-through option to B. =item I<-delete> Archive-delete flag. Pass-through option to B. =item I<-Version> Display the program version and exit. =item I<-help> Display a usage message and exit. =item I<-verbose> Display the verbose information. =back =head1 WARNINGS =over 4 =item Current Month Not Archived B will I archive the current month's data. There is an assumption that more sensor data will be gathered for the current month, so archiving the current month's data will provide an incomplete archive. =item Two-Day Archival Lag The current archive timing used by B means that there will be a two-day lag between the day a data file arrives in a sensor's data directory and the day it is moved to the sensor's archive directory. Consequently, B should not be run on the first or second days of a month. More data may still be awaiting archiving, and an early run could result in unarchived data. =back =head1 CAVEATS B is not a general-purpose archiver. While there are somewhat generalized aspects to it, B is very strongly biased to the hierarchical structure laid out for the Owl sensor data. =head1 COPYRIGHT Copyright 2012-2013 SPARTA, Inc. All rights reserved. See the COPYING file included with the DNSSEC-Tools package for details. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =head1 SEE ALSO owl-archdata(1), owl-archold(1), owl-dataarch-mgr(1) bzip2(1), tar(1) =cut dnssec-tools-2.0/apps/owl-monitor/manager/bin/owl-transfer-mgr0000775000237200023720000003707712107530766024714 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2013 SPARTA, Inc. All rights reserved. See the COPYING # file distributed with this software for details. # # owl-transfer-mgr Owl Monitoring System # # This script transfers Owl sensor data from the sensor to the manager. # # Revision History: # 1.0 130116 Initial version. # use strict; use Cwd; use Getopt::Long qw(:config no_ignore_case_always); use POSIX qw(setsid); use Time::Local; use Date::Format; use FindBin; use lib "$FindBin::Bin/../perllib"; use owlutils; ####################################################################### # # Version information. # my $NAME = 'owl-transfer-mgr'; my $VERS = "$NAME version: 2.0.0"; my $DTVERS = 'DNSSEC-Tools version: 2.0'; ################################################### # # Data required for command line options. # my %options = (); # Filled option array. my @opts = ( 'config=s', # Configuration file. 'sensorsdir=s', # Top-level sensors data directory. 'logdir=s', # Top-level logging directory. 'foreground|fg', # Run in foreground. 'stop', # Stop execution. 'verbose', # Verbose output. 'Version', # Version output. 'help', # Give a usage message and exit. ); # # Flag values for the various options. Variable/option connection should # be obvious. # my $verbose = 0; # Display verbose output. my $foreground; # Foreground-execution flag. my $stopper; # Stop-execution flag. ################################################### # # Constants and variables for various files and directories. # my $basedir = "."; # Base directory we'll look in. my $DEF_CONFIG = $owlutils::DEF_CONFIG; # Default config file nodename. my $DEF_CONFDIR = $owlutils::DEF_CONFDIR; # Default config directory. my $DEF_LOGDIR = $owlutils::DEF_LOGDIR; # Default log directory. my $DEF_SENSORSDIR = $owlutils::DEF_SENSORSDIR; # Default sensors data dir. my $DEF_CONFFILE = "$DEF_CONFDIR/$DEF_CONFIG"; # Default Owl config file. ################################################### my $curdir; # Current directory. my $confdir = $DEF_CONFDIR; # Configuration directory. my $conffile = $DEF_CONFFILE; # Configuration file. my $sensorsdir; # Sensors' data directory. my $logdir; # Logging directory. # # Every LOGCNT transfer cycles, owl-transfer-mgr will write a log message saying # how many log attempts have been made. If any failed, then the failure # count will be reported. A transfer cycle is one pass attempting to transfer # to all ssh-users. If owl-transfer-mgr attempts to transfer files once per # minute, then a LOGCNT of 60 will result in a log message once per hour. # my $LOGCNT = 60; my $pidfile; # Name of process-id file. my @sshusers; # user@host for rsyncing. my $xfercnt = 0; # Count of transfers. my $xferint; # Data-transfer interval. my $xlog; # Logging handle. my $errs = 0; # Error count. ####################################################################### main(); exit(0); #-------------------------------------------------------------------------- # Routine: main() # sub main { $| = 0; # # A little directory wiggling. # $curdir = getcwd(); $basedir = $curdir if($basedir eq "."); # # Check our options. # doopts(); # # Perform initialization steps. # startup(); logger("$NAME starting"); # # Grab some globals from the config file. # $pidfile = $owlutils::pidfile; @sshusers = @owlutils::sshusers; $xferint = $owlutils::transfer_interval; if($verbose) { print "configuration parameters:\n"; print "\tcurrent directory \"$curdir\"\n"; print "\tconfiguration file \"$conffile\"\n"; print "\tprocess-id file \"$pidfile\"\n"; print "\tsensors data directory \"$sensorsdir\"\n"; print "\tdata-transfer interval \"$xferint\" minutes\n"; print "\tssh users \"@sshusers\"\n"; print "\n"; } # # Don't proceed on errors. # if($errs) { my $sfx = ($errs != 1) ? 's' : ''; # Pluralization suffix. print "$NAME: $errs error$sfx found during initialization; halting...\n"; exit(1); } # # Daemonize ourself. # exit(0) if((! $foreground) && fork()); POSIX::setsid(); owl_writepid(); # # Periodically run the rsync to send the data to the manager. # teleporter(); } #----------------------------------------------------------------------------- # Routine: doopts() # # Purpose: This routine shakes and bakes our command line options. # sub doopts { # # Parse the options. # GetOptions(\%options,@opts) || usage(); # # Handle a few immediate flags. # version() if(defined($options{'Version'})); usage(1) if(defined($options{'help'})); # # Set our option variables based on the parsed options. # $foreground = $options{'foreground'} || 0; $stopper = $options{'stop'} || 0; $verbose = $options{'verbose'} || 0; # # Get the configuration file's name. If the user specified one, # we'll use it. If not, we'll try using one of two defaults. # if(defined($options{'config'})) { $conffile = $options{'config'}; } else { $conffile = $DEF_CONFFILE; if(! -e $conffile) { $conffile = glob("$basedir/conf/owl.conf"); } } # # Check our config and data directories. # $confdir = $options{'confdir'} if(defined($options{'confdir'})); $sensorsdir = $options{'sensorsdir'} if(defined($options{'sensorsdir'})); } #----------------------------------------------------------------------------- # Routine: startup() # # Purpose: Do some initialization shtuff: # - set up Owl-specific fields # - set up signal handlers # - ensure we're the only owl-transfer-mgr running # - handle the -stop argument # sub startup { # # Read the sensor configuration file. # owl_setup($NAME,$confdir,'',$logdir); if(owl_readconfig($conffile,'',$logdir) != 0) { exit(2); } # # Get the proper data directory name. # $confdir = setparam('confdir',$confdir,$owlutils::confdir,$DEF_CONFDIR); $logdir = setparam('logdir',$logdir,$owlutils::logdir,$DEF_LOGDIR); $sensorsdir = setparam('sensorsdir',$sensorsdir,$owlutils::sensorsdir,$DEF_SENSORSDIR); exit(1) if(owl_chkdir('log', $logdir) == 1); exit(1) if(owl_chkdir('sensors-data', $sensorsdir) == 1); # # Set up our log file. # $xlog = owl_setlog($NAME,$logdir); # # Add the base directory if this isn't an absolute path. # We'll also handle a special case so we don't add the base # directory multiple times. # if($sensorsdir !~ /^\//) { if($sensorsdir =~ /^\.\//) { $sensorsdir =~ s/^../$curdir/; } if(($basedir ne ".") || ($sensorsdir !~ /^\.\//)) { $sensorsdir = glob("$basedir/$sensorsdir"); } } # # Set up our signal handlers. # $SIG{HUP} = \&cleanup; $SIG{INT} = \&cleanup; $SIG{QUIT} = \&cleanup; $SIG{TERM} = \&cleanup; $SIG{USR1} = 'IGNORE'; $SIG{USR2} = 'IGNORE'; # # If the user wants to shutdown any other owl-transfer-mgrs, we'll # send them SIGHUP and exit. # if($stopper) { owl_halt($NAME); exit(0); } # # Make sure we're the only owl-transfer-mgr running. We'll also allow a # user to signal the other owl-transfer-mgr to shut down. # if(owl_singleton(0) == 0) { print STDERR "$NAME already running\n"; exit(2); } # # Ensure the top-level sensors data directories is an absolute path. # $sensorsdir = "$curdir/$sensorsdir" if($sensorsdir !~ /^\//); } #------------------------------------------------------------------------ # Routine: setparam() # # Purpose: Figure out the value of a particular parameter, depending on # whether it was given as a command-line option or a config file # value. It may be a default if none of the others was given. # The precedence (greatest to least) is: # command-line argument # configuration-file value # default # sub setparam { my $str = shift; # Descriptive string. my $arg = shift; # Command line argument. my $cval = shift; # Configuration file value. my $dval = shift; # Default value. my $val; # Value to use. $val = $dval; $val = $cval if(defined($cval)); $val = $arg if(defined($arg)); return($val); } #----------------------------------------------------------------------------- # Routine: teleporter() # # Purpose: This routine periodically transfers files from the sensor # to the Owl manager. # sub teleporter { my $args; # Arguments for rsync. my %errxfers = (); # Count of each ssh-user's failed transfers. # # Set up our immutable command-line arguments. # $args = "--timeout=60 --partial --append --stats"; print STDERR "$NAME starting\n"; # # Forevermore we shall transfer files betwixt hither and yons. # while(42) { # # Go through the list of file destinations, and do an # rsync for each one. # foreach my $sshuser (@sshusers) { my @args; # Separated arguments. my $sensor; # Sensor portion. my $datadir; # Sensor's data dir. my $rshargs; # rsh-arguments portion. my $cmd; # Command for rsync. my $out; # Output from rsync. my $err; # rsync return code. # # Set up our command line and arguments. The sshuser # line has this format: # user@host;ssh arguments # The ssh arguments are whatever is needed for # owl-transfer-mgr to ssh to this particular sensor. # @args = split /;/, $sshuser; $sensor = $args[0]; $rshargs = "--rsh=\"ssh $args[1]\""; $cmd = "rsync -ar $rshargs $args"; # # Build this sensor's data directory. # # Beware: If this sshusers field contains spaces, # so with the directory name. # next if($args[2] eq ''); $datadir = "$sensorsdir/$args[2]"; # # Do the transfer for this sensor. # $out = `$cmd $sensor: $datadir`; $err = $? >> 8; # # Give info on this transfer, if it is desired. # if($verbose) { my $chronos; # Timestamp. my $numstr; # Files transferred. my $msg; # Message string. # # Get timestamp for message. # $chronos = gmtime; chomp $chronos; # # Build the message. # $out =~ /(Number of files transferred:\s+\d+)\n/g; $numstr = $1; $msg = "$numstr \t$sensor"; print "$chronos: $msg\n" if($numstr ne ''); logger($msg); } # # If the transfer failed, report an error and bump # the error-transfer count. # if($err) { my $msg = "problem transferring files, error return $err"; print STDERR "$msg\n"; logger($msg); $errxfers{$sshuser}++; } # # Write a periodic log message with the count of # transfers that have taken place. This will show # the same number of transfers each time, so it's # more of an "I'm alive" message to the log file. # if($xfercnt == $LOGCNT) { my $msg; # Message text. my $errs = $errxfers{$sshuser}; # Error count. # # Build the message. # $msg = "$xfercnt transfer attempts to $sensor"; $msg .= "; $errs failed" if($errs > 0); # # Write the message. # logger($msg); # # Reset for next round. # $xfercnt = 0; $errxfers{$sshuser} = 0; } } # # Bump our transfer count and wait for a bit. # $xfercnt++; sleep($xferint); } } #------------------------------------------------------------------------ # Routine: cleanup() # # Purpose: Close up shop. # sub cleanup { print STDERR "$NAME shutting down\n"; # # Remove the process-id file. # print STDERR "$NAME: unlinking pidfile \"$pidfile\"\n" if($verbose); unlink($pidfile); exit(0); } #-------------------------------------------------------------------------- # Routine: vprint() # sub vprint { my $str = shift; print "$str" if($verbose); } #-------------------------------------------------------------------------- # Routine: logger() # sub logger { my $str = shift; my $outflag = shift; $xlog->log(level => 'info', message => $str); # vprint("$NAME: $str\n") if($outflag); } #-------------------------------------------------------------------------- # Routine: version() # sub version { print STDERR "$VERS\n"; print STDERR "$DTVERS\n"; exit(0); } #-------------------------------------------------------------------------- # Routine: usage() # sub usage { print "$NAME [options]\n"; print "\toptions:\n"; print "\t\t-confdir directory\n"; print "\t\t-config file\n"; print "\t\t-logdir directory\n"; print "\t\t-sensorsdir directory\n"; print "\n"; print "\t\t-foreground\n"; print "\t\t-fg\n"; print "\t\t-stop\n"; print "\n"; print "\t\t-verbose\n"; print "\t\t-Version\n"; print "\t\t-help\n"; exit(0); } ########################################################################### =pod =head1 NAME owl-transfer-mgr - Transfers Owl sensor data to Owl manager =head1 SYNOPSIS owl-transfer-mgr [options] =head1 DESCRIPTION B transfers Owl sensor data from an Owl sensor host to its manager host. B sets itself up as a daemon on the Owl manager and periodically transfers new data files from the Owl sensor. The Owl configuration file specifies the sensors that B. will contact. Only those sensors listed in a I line that have the third subfield defined -- the sensor name subfield -- will be contacted for data retrieval. No other sensors will be contacted by B. The data-transfer operations are performed by B over an B connection. The efficiency of B will minimize the impact on network resources. B will protect the sensor data while it is in transit, and it will also protect the Owl sensor from unauthorized access. The B configuration file defines the data that will be transferred, the transfer destination, and the transfer frequency. The following fields are used: Configuration Field owl-transfer-mgr Use data sensors end location of transferred data data interval number of seconds between transfers remote ssh-user user@host for ssh/rsync use The default configuration file is B in the execution directory. If that file is not found, then B will be used. A configuration file may also be specified on the command line. Since B is run on the manager, it is likely to be retrieving data from multiple sensors. All the data will be segregated according to the source sensor, and each sensor's data will be stored in a subdirectory beneath the I. This directory may be specified with the B<-sensorsdir> commandline option or in the configuration file. If it is not given either way, then the default will be used. The default sensors directory is specified in the B module. =head1 OPTIONS B takes the following options: =over 4 =item B<-confdir> This option specifies the directory from which the Owl configuration data file will be read. The process-id file will also be stored here. =item B<-config> This option specifies the configuration file to use. =item B<-fg> =item B<-foreground> This option causes B to run in the foreground, rather than as a daemon. =item B<-logdir> This option specifies the directory for logging. =item B<-sensorsdir> This option specifies the directory to which sensor data will be transferred from the Owl sensors. This is a top-level directory and the sensors' data directories will be beneath this directory. =item B<-stop> Stops the execution of an existing B process. =item B<-verbose> This option provides verbose output. =item B<-Version> This option provides the version of B. =item B<-help> This option displays a help message and exits. =back =head1 SEE ALSO B, B, B, B B =head1 COPYRIGHT Copyright 2013 SPARTA, Inc. All rights reserved. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =cut dnssec-tools-2.0/apps/owl-monitor/manager/bin/owl-initsensor0000775000237200023720000001575512107530766024501 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2012-2013 SPARTA, Inc. All rights reserved. See the COPYING # file distributed with this software for details. # # owl-initsensor Owl Monitoring System # # This script initializes files and directories for new Owl sensors. # It runs on the Owl manager. # # Revision History # 1.0 121201 Initial version. # use strict; use Getopt::Long qw(:config no_ignore_case_always); use Fcntl ':flock'; use File::Path; ####################################################################### # # Version information. # my $NAME = "owl-initsensor"; my $VERS = "$NAME version: 2.0.0"; my $DTVERS = "DNSSEC-Tools version: 2.0"; ####################################################################### # # Data required for command line options. # my %options = (); # Filled option array. my @opts = ( 'verbose', # Display verbose information. 'Version', # Display the version number. 'help', # Give a usage message and exit. ); my $verbose = 0; # Verbose output flag. ####################################################################### my $archdir = ''; # Directory for archived archives. my $datadir = ''; # Directory for archived archives. main(); exit(0); #------------------------------------------------------------------------ # Routine: main() # sub main { # # Get our arguments. # argulator(); # # Build a set of directories and files for each named sensor. # foreach my $sensor (@ARGV) { print "creating sensor $sensor\n"; buildsensor($sensor); } } #------------------------------------------------------------------------ # Routine: argulator() # # Purpose: Get our options and arguments from the command line. # We'll also ensure that the specified data directory # and archive directory already exist. # sub argulator { my $errs = 0; # Error count. # # Parse the command line. # GetOptions(\%options,@opts) || usage(); # # Show the version number or usage if requested. # version() if(defined($options{'Version'})); usage() if(defined($options{'help'})); $verbose = $options{'verbose'}; # # Ensure we have the necessary command-line arguments. # usage() if(@ARGV < 3); # # Pick up the required directories. # $datadir = shift @ARGV; $archdir = shift @ARGV; # # Ensure the data directory actually exists. # if(! -e $datadir) { print STDERR "data directory $datadir does not exist\n"; $errs++; } # # Ensure the archive directory actually exists. # if(! -e $archdir) { print STDERR "archive directory $archdir does not exist\n"; $errs++; } # # Stop here if either of the directories doesn't exist. # exit(1) if($errs); } #------------------------------------------------------------------------ # Routine: buildsensor() # # Purpose: Create the needed directories and files for a sensor. # These are (and are structured like this): # - sensor directory # - data directory # - heartbeat file # - history directory # - archive directory # sub buildsensor { my $sensor = shift; # Sensor to build. my $datapath; # Path to data directory. my $node; # Node to create. # # Get the path to the sensor's data directory and ensure it # doesn't yet exist. # $datapath = "$datadir/$sensor"; return if(checksensor($sensor,$datapath) == 0); # # Create the sensor directory. # if(mkdir($datapath) == 0) { print STDERR "unable to create data directory $datapath\n"; return; } vprint("\t$datapath"); # # Create the sensor's real data directory. # $node = "$datapath/data"; if(mkdir($node) == 0) { print STDERR "unable to create $node\n"; return; } chmod(0775,$node); vprint("\t$node"); # # Create the sensor's history directory. # $node = "$datapath/history"; if(mkdir($node) == 0) { print STDERR "unable to create $node\n"; return; } chmod(0775,$node); vprint("\t$node"); # # Create the sensor's heartbeat file. # $node = "$datapath/heartbeat"; if(open(ND,"> $node") == 0) { print STDERR "unable to create $node\n"; return; } close(ND); chmod(0664,$node); vprint("\t$node"); # # Create the sensor's archive directory. # $node = "$archdir/$sensor"; if(mkdir($node) == 0) { print STDERR "unable to create $node\n"; return; } chmod(0775,$node); vprint("\t$node\n"); } #------------------------------------------------------------------------ # Routine: checksensor() # # Purpose: Ensures the named sensor's directory is doesn't exist. # sub checksensor { my $sensor = shift; # Sensor name. my $dir = shift; # Directory name. if(-e $dir) { print STDERR "sensor $sensor already exists\n"; return(0); } return(1); } #------------------------------------------------------------------------ # Routine: vprint() # sub vprint { my $str = shift; # String to print. print "$str\n" if($verbose); } #------------------------------------------------------------------------ # Routine: version() # sub version { print STDERR "$VERS\n"; print STDERR "$DTVERS\n"; exit(0); } #------------------------------------------------------------------------ # Routine: usage() # sub usage { print "usage: owl-initsensor [options] \n"; exit(0); } ############################################################################### =pod =head1 NAME owl-initsensor - Initialize files and directories for new Owl sensors =head1 SYNOPSIS owl-initsensor [options] =head1 DESCRIPTION When adding a new Owl sensor to the set of sensors handled by an Owl manager, several directories and a file must be created. These are: - sensor directory - data directory - heartbeat file - history directory - archive directory The data, heartbeat, and history files B have those names. They are also organized as given above. These may be created manually or they may be created by B. The sensor directory should be in the Owl data directory and the archive directory should be outside of the data directory. For example, the sensors B and B might have the following sets of files: /owl/data/dresden/ /owl/data/dresden/data/ /owl/data/dresden/heartbeat /owl/data/dresden/history/ /owl/archive/dresden/ /owl/data/kvothe/ /owl/data/kvothe/data/ /owl/data/kvothe/heartbeat /owl/data/kvothe/history/ /owl/archive/kvothe/ The files and directories in the data directory must be writable by the manager's Owl user and the manager's web server. The archive directory must be writable by the Owl user. =head1 OPTIONS The following options are recognized by B: =over 4 =item I<-verbose> Display verbose information. =item I<-Version> Display the program version and exit. =item I<-help> Display a usage message and exit. =back =head1 COPYRIGHT Copyright 2012-2013 SPARTA, Inc. All rights reserved. See the COPYING file included with the DNSSEC-Tools package for details. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =head1 SEE ALSO owl-archdata(1), owl-archold(1), owl-dataarch-mgr(1), owl-monthly(1) =cut dnssec-tools-2.0/apps/owl-monitor/manager/bin/owl-newsensor0000775000237200023720000003220412107530766024313 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2012-2013 SPARTA, Inc. All rights reserved. See the COPYING # file distributed with this software for details. # # owl-newsensor Owl Monitoring System # # This script builds a set of Nagios objects from a list of Owl data # files. This is used when adding a new Owl sensor to a manager. # # Revision History # 1.0 121201 Initial version. # This was adapted from the owl-archdata script. # use strict; use Cwd; use Getopt::Long qw(:config no_ignore_case_always); # # Version information. # my $NAME = "owl-newsensor"; my $VERS = "$NAME version: 2.0.0"; my $DTVERS = "DNSSEC-Tools version: 2.0"; #------------------------------------------------------------------------ # # Data required for command line options. # my %options = (); # Filled option array. my @opts = ( "host=s", # Host field. "domain=s", # Sensor's domain. "out=s", # Output file. "heartbeat", # Heartbeat flag. "help", # Give help message. "Version", # Give version info. "verbose", # Give verbose output. ); my $verbose = 0; # Verbose flag. my $outfile = ''; # Output file. my $domain = ''; # Domain field. my $host = ''; # Host field. my $heartbeat = 0; # Heartbeat flag. #------------------------------------------------------------------------ my $datadir = ''; # Directory of data files. my @files = (); # List of files to examine. my %nagobjs = (); # Data for Nagios objects. my $contents = ''; # New objects. my @sensors = (); # Names of sensors. my %services = (); # Hash of sensors' services. main(); exit(0); #------------------------------------------------------------------------ # Routine: main() # # Purpose: Do everything. # sub main { doopts(); getfiles(); parsefiles(); topheader(); buildobjects(); writecontents(); } #------------------------------------------------------------------------ # Routine: doopts() # # Purpose: Handle our options and arguments. # sub doopts { # # Parse the options. # GetOptions(\%options,@opts) || usage(); # # Handle a few immediate flags. # version() if(defined($options{'Version'})); usage(1) if(defined($options{'help'})); # # Set our option variables based on the parsed options. # $verbose = $options{'verbose'}; $outfile = $options{'out'}; $domain = $options{'domain'}; $host = $options{'host'}; $heartbeat = 1 if(defined($options{'heartbeat'})); usage(2) if(@ARGV == 0); $datadir = $ARGV[0]; } #------------------------------------------------------------------------ # Routine: getfiles() # # Purpose: Get the files from the data directory. # sub getfiles { my $cur; # Current directory. # # Run some validity checks on the user's data directory. # if(! -e $datadir) { print "$datadir does not exist\n"; exit(1); } if(! -d $datadir) { print "$datadir is not a directory\n"; exit(2); } if((! -r $datadir) || (! -x $datadir)) { print "unable to access $datadir\n"; exit(3); } # # Go to the data directory. # $cur = getcwd(); chdir($datadir); # # Get a list of the sensor data files. # @files = sort(glob("*.dns")); # # Make sure we found some files. # if(@files == 0) { print "no Owl data files found in $datadir\n"; exit(10); } print "files to examine: " . @files . "\n" if($verbose); # # And return from whence we came. # chdir($cur); } #------------------------------------------------------------------------ # Routine: parsefiles() # # Purpose: Parse the data filenames into a hash-of-hash-of-hash-of-hash. # sub parsefiles { foreach my $fn (@files) { my @atoms; # Pieces of the filename. my $sensor; # Sensor from filename. my $target; # Target from filename. my $server; # Server from filename. my $query; # Query type from filename. # # Ensure we're looking at one of our data files, then # get rid of the suffix. # next if($fn !~ /\.dns$/); $fn =~ s/\.dns$//; # # Break the name into its pieces. # @atoms = split /,/, $fn; $sensor = $atoms[1]; $target = $atoms[2]; $server = $atoms[3]; $query = $atoms[4]; $nagobjs{$sensor}{$server}{$target}{$query}++; } # # Make sure we found some files. # (This shouldn't happen, given a similar check in getfiles().) # if(keys(%nagobjs) == 0) { print "no Owl data files found in $datadir\n"; exit(11); } # # If the user didn't specify a name for the host object, we'll # make one from the sensors we found. # if($host eq '') { $host = join(', ', sort(keys(%nagobjs))); } } #------------------------------------------------------------------------ # Routine: buildobjects() # # Purpose: Build all our Nagios objects. We'll deal with these # by sensor, server, target, and finally query type. # sub buildobjects { # # Build our host objects. # foreach my $sensor (sort(keys(%nagobjs))) { newhost($sensor); } separator(); # # Build our service objects. # @sensors = sort(keys(%nagobjs)); foreach my $sensor (@sensors) { my %servers; my $servers; $servers = $nagobjs{$sensor}; %servers = %$servers; # print "sensor $sensor\n"; foreach my $server (sort(keys(%servers))) { my %targets; my $targets; # print "\tserver $server\n"; $targets = $nagobjs{$sensor}{$server}; %targets = %$targets; foreach my $target (sort(keys(%targets))) { my %queries; my $queries; # print "\ttarget $target\n"; $queries = $nagobjs{$sensor}{$server}{$target}; %queries = %$queries; foreach my $query (sort(keys(%queries))) { newservice($sensor,$server,$target,$query); } } separator(20); } separator(40); # # Create a heartbeat service if asked. # if($heartbeat) { newservice($sensor,'heartbeat'); } } separator(); # # Build our servicegroup objects. # foreach my $sensor (sort(keys(%nagobjs))) { newsvcgrp($sensor); } } #------------------------------------------------------------------------------ # Routine: topheader() # # Purpose: Write the file header. # sub topheader { my $kronos = gmtime(time()); $contents = "############################################################################### # # Hosts and services required for monitoring DNS data for Owl Monitor. # # Built $kronos by $NAME. # "; } #------------------------------------------------------------------------ # Routine: separator() # # Purpose: Add a separator of varying lengths. # sub separator { my $cnt = shift; # Number of characters in line. $cnt = 79 if($cnt <= 0); $contents .= "\n" . ('#' x $cnt) . "\n"; } #------------------------------------------------------------------------ # Routine: newhost() # # Purpose: Add a new Nagios host object. # sub newhost { my $sensor = shift; # Sensor name. my $addr; # Sensor's domain name. $addr = ($domain eq '') ? $sensor : "$sensor.$domain"; $contents .= " define host { host_name $host alias $sensor address $addr use owl-sensor }\n"; } #------------------------------------------------------------------------ # Routine: newservice() # # Purpose: Add a new Nagios service object. If $server is 'heartbeat' # then we'll make a special heartbeat service for the sensor. # Otherwise, we'll build a service for handling DNS response # data normally gathered by Owl. # sub newservice { my $sensor = shift; # Sensor name. my $server = shift; # Nameserver name. my $target = shift; # Target name. my $query = shift; # Query type. # # Handle a heartbeat service specially. # if($server eq 'heartbeat') { $contents .= " define service { service_description $sensor host_name Owl Sensor Heartbeats check_command owl-stethoscope!$sensor active_checks_enabled 1 use owl-service }\n"; return; } # # Now we'll create a regular ol' service. # $services{$sensor} .= "$server $target $query, "; # print "$sensor\t$target\t$server\t$query\t$nagobjs{$sensor}{$server}{$target}{$query}\n"; # printf("%-15s\t%-15s\t%-15s\t%-10s\t%d\n",$sensor,$server,$target,$query,$nagobjs{$sensor}{$server}{$target}{$query}); $contents .= " define service { service_description $server $target $query host_name $sensor check_command owl-dnswatch!$sensor!$target!$server!$query active_checks_enabled 1 use owl-service }\n"; } #------------------------------------------------------------------------------ # Routine: servicegroups() # # Purpose: Create the servicegroup objects. # sub servicegroups { separator(40); $contents .= " # # Collected servicegroup objects. # ############################################################################### # # Objects for Owl servicegroups. # "; # # Add the servicegroups. # foreach my $sensor (@sensors) { newsvcgrp($sensor); } } #------------------------------------------------------------------------------ # Routine: newsvcgrp() # # Purpose: Create a new servicegroups object. # sub newsvcgrp { my $sensor = shift; # Host for entry. my $services; # Sensor's collection of services. my @services; # Split-up collection of services. my $svcgrp = ''; # Constructed service group. # # Massage the list of this sensor's services into a usable form. # $services = $services{$sensor}; $services =~ s/, $//; @services = split /, /, $services; # # Build the members value for the service group. # foreach my $svc (@services) { $svcgrp .= "$sensor, $svc, "; } $svcgrp =~ s/, $//; my $members = ''; # # Add the servicegroup. # $contents .= " define servicegroup { servicegroup_name $sensor services alias Services for sensor $sensor members $svcgrp } "; } #------------------------------------------------------------------------------ # Routine: writecontents() # # Purpose: Write the created service objects. # sub writecontents { if($outfile ne '') { open(OUTFILE,">$outfile") || die "unable to open $outfile"; print OUTFILE "$contents\n"; close(OUTFILE); } else { print "$contents\n"; } } #------------------------------------------------------------------------ # Routine: version() # sub version { print STDERR "$VERS\n"; print STDERR "$DTVERS\n"; exit(0); } #------------------------------------------------------------------------------ # Routine: usage() # # Purpose: Write a usage message and exit. # sub usage { print STDERR "usage: owl-newsensor [options] \n"; print STDERR "\toptions are:\n"; print STDERR "\t\t-domain \n"; print STDERR "\t\t-host \n"; print STDERR "\t\t-heartbeat\n"; print STDERR "\t\t-out \n"; print STDERR "\t\t-quiet\n"; print STDERR "\t\t-verbose\n"; print STDERR "\t\t-help\n"; exit(0); } ############################################################################### =pod =head1 NAME owl-newsensor - builds Nagios objects for a new Owl sensor =head1 SYNOPSIS owl-newsensor [options] =head1 DESCRIPTION B builds the required Nagios objects for a new Owl sensor. It builds a I object for the sensor and a set of I objects for the nameserver/target-host/query-type sensor queries. It also builds a I object that associates the I objects with the I object. Only one sensor's objects will be created per execution. The sensor name will be used for several fields in the I object, unless either the I<-domain> or I<-host> option are given. If the I<-heartbeat> flag is given, then a "heartbeat" object will be created. This object will be used in conjunction with B for keeping track of the availability of the sensor host. The newly created objects are written to the terminal, unless the I<-out> option is used. After running B, you should check the objects to ensure they look reasonable. Look for the following: =over 4 =item * Check the objects for accuracy. (This nebulous statement will become clearer with exposure to Nagios objects. The Nagios distribution contains examples, which may help.) =item * Adjust the address fields in I objects, if necessary. =item * Set the I fields in I objects as desired. =item * Set I fields in I objects as desired, but any changes must also be reflected in the I and I objects. =item * Add a "I" entry for this file to the B file. =back 4 =head1 OPTIONS =over 4 =item B<-domain domainname> If this option is given, then the I

    field of the I object will have this domain name appended to the sensor's name. Otherwise, the I
    field will only contain the sensor's name. =item B<-heartbeat> Specifying this option indicates that B should create a "heartbeat" object along with the other objects. =item B<-host hostname> If this option is given, then the I field of the I object will have this host name. Otherwise, the I field will contain the sensor's name. =item B<-out filename> The name of a file to which the Nagios objects will be written. =item B<-help> Display a help message. =item B<-verbose> Give verbose output. =item B<-Version> Display the tool version. =back =head1 SEE ALSO B, B =head1 COPYRIGHT Copyright 2012-2013 SPARTA, Inc. All rights reserved. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =cut dnssec-tools-2.0/apps/owl-monitor/manager/README0000664000237200023720000000070412057163273021652 0ustar hardakerhardaker Owl Monitoring System This directory contains the files for the Owl manager. In addition to the programs for the Owl manager, there are several data files and examples. The directories contained herein are: bin Utilities for to assist in management. libexec Nagios plugins specifically for Owl. nagios-files Files for use by Nagios. nagios-objects Owl-specific Nagios object files. nagiosgraph-files Files for nagiosgraph. dnssec-tools-2.0/apps/owl-monitor/manager/libexec/0000775000237200023720000000000012111172554022375 5ustar hardakerhardakerdnssec-tools-2.0/apps/owl-monitor/manager/libexec/owl-dnswatch0000775000237200023720000004053412107530766024753 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2012-2013 SPARTA, Inc. All rights reserved. # See the COPYING file distributed with this software for details. # # owl-dnswatch # # This script retrieves the DNS response data gathered by an Owl sensor. # It runs on the Owl manager and provides data for use by a Nagios # monitoring environment. # # File organization: # /owl/data/owldev1/data/ # /owl/data/owldev1/history/ # /owl/data/owldev1/history/dnstimer # # # Revision History # 1.0 Initial version. 10/2/2012 # This was adapted from the uem-dnsresp plugin from # the original UEM system. # use strict; use Getopt::Long qw(:config no_ignore_case_always); use Fcntl ':flock'; use File::Path; ####################################################################### # # Version information. # my $NAME = "owl-dnswatch"; my $VERS = "$NAME version: 2.0.0"; my $DTVERS = "DNSSEC-Tools version: 2.0"; ####################################################################### # # Paths. # # The installer must set the value of $OWLDIR to reflect the # desired file hierarchy. # The $sub_data and $subhist values may be set, but the values # given below are sufficient. # my $OWLDIR = '/owl'; # Owl directory. my $sub_data = 'data'; # Subdirectory for dnstimer data. my $sub_hist = 'history'; # Subdirectory for history data. ##### my $OWLDATA = "$OWLDIR/data"; # Owl DNS data directory. my $hist_dnstimer = 'dnstimer'; # History file for dnstimer data. my $historydir; # History data directory. my $datadir; # Data directory. # # Array indices into history file's data. # my $LASTSVC = 0; my $LASTFILE = 1; my $LASTTIME = 2; my $nohist = 1; # History file not-found flag. ####################################################################### # # Nagios return codes. # my $RC_NORMAL = 0; # Normal return code. my $RC_WARNING = 1; # Warning return code. my $RC_CRITICAL = 2; # Critical return code. my $RC_UNKNOWN = 3; # Unknown return code. my $WARNING_THRESHOLD = 0; # Warning threshold for averaged errors. my $CRITICAL_THRESHOLD = 9; # Critical threshold for averaged errors. ######################################################################r # # Data required for command line options. # my %options = (); # Filled option array. my @opts = ( 'paths', # Display the paths. 'Version', # Display the version number. 'help', # Give a usage message and exit. ); ####################################################################### # # Data from command line. my $sensor = ''; # Owl sensor host. my $target = ''; # Target host. my $server = ''; # Nameserver host. my $query = ''; # Type of DNS query. my $tetrad = ''; # Combination of arguments. ####################################################################### my $rc = $RC_UNKNOWN; # Command's return code. my $outstr = ''; # Accumulated DNS response data. my $count = 0; # Count of response lines handled. my $errors = 0; # Count of errors encountered. my $totalresp = 0; # Accumulated total response times. my $totalprobs = 0; # Total count of reported problems. my $totaldrops = 0; # Total count of drops. my $totalerrs = 0; # Total count of errors. # # If a particular sensor tries to update a large number of response entries # at a single time, the whole system could get bogged down. Some Nagios # services might appear to be timing out and not returning data. In order # to prevent a single sensor from consuming a huge amount of processor time, # we'll restrict the maximum number of entries we'll handle at a time. # This number isn't very large, but given the behavior seen so far, it should # be sufficient to allow things to catch up. Eventually. my $MAXENTRIES = 20; ################################################################################ # # Run shtuff. # $rc = main(); exit($rc); #----------------------------------------------------------------------------- # Routine: main() # # Purpose: Main controller routine for owl-dnswatch. # sub main { my $srvc; # Service to check. my $retcode = 0; # Service's return code. my @fns = (); # Filenames to check. my @lasts = (); # Last file and record checked. my $lastfn = ''; # Last filename we checked. my $kronos; # Last time checked. # # Check our options. # doopts(); # # Get the names of our directories. # getdirs(1); # # Get the last file and entry checked for this sensor/name server # pair. # @lasts = getlast(); $lasts[$LASTFILE] = '' if(@lasts == 0); # # Get the names of the files to check for response lines. # @fns = getfns($lasts[$LASTFILE]); # # Get the DNS timer data for this tetrad from the recent files. # foreach my $fn (@fns) { my $ret; # This invocation's return. ($ret,$kronos) = timerdata($fn,$lasts[$LASTTIME]); $retcode = $ret if($ret != $RC_NORMAL); # # Save the last filename we examined. # $lastfn = $fn; # # Make sure we don't exceed the maximum number of entries # we can handle at a time. # last if($count == $MAXENTRIES); } # # Write a line of data to Nagios. # nagiout($retcode); # # We'll move to now if no final time was returned. # $kronos = time() if($kronos eq ''); # # Update the history file. # updatehist($lastfn,$kronos); # # Exit with the command's return code. # return($retcode); } #----------------------------------------------------------------------------- # Routine: doopts() # # Purpose: This routine shakes and bakes our command line options. # sub doopts { # # Parse the command line. # GetOptions(\%options,@opts) || usage(); # # Show the version number or usage if requested. # version() if(defined($options{'Version'})); usage() if(defined($options{'help'})); showpaths() if(defined($options{'paths'})); usage() if(@ARGV != 4); # # Set a few parameters. # $sensor = $ARGV[0]; $target = $ARGV[1]; $server = $ARGV[2]; $query = $ARGV[3]; # # Combine the arguments. # $tetrad = "$sensor,$target,$server,$query.dns"; } #----------------------------------------------------------------------------- # Routine: getdirs() # # Purpose: Build the data and history directories' names. # If they don't exist, we'll try to create them. # If we can't create a directory, exit with a critical error. # sub getdirs { my $mkflag = shift; # Flag for creating directories. # # Build the directory names we'll need. # $datadir = "$OWLDATA/$sensor/$sub_data"; $historydir = "$OWLDATA/$sensor/$sub_hist"; # # Ensure the data directory exists. # if(! -e $datadir) { if($mkflag) { if(mkpath($datadir) == 0) { print "data directory \"$datadir\" does not exist\n"; exit($RC_CRITICAL); } } } # # Ensure the history directory exists. # if(! -e $historydir) { if($mkflag) { if(mkpath($historydir) == 0) { print "history directory \"$historydir\" does not exist\n"; exit($RC_CRITICAL); } } } } #----------------------------------------------------------------------------- # Routine: getlast() # # Purpose: Get the last file and entry for this sensor/service pair. # sub getlast { my $lfn; # Last file for this server. my @lasts = (); # Files matching this service. my @lines; # Lines in last file. # # Get the history file for this sensor. # $lfn = "$historydir/$hist_dnstimer"; # # If the history doesn't exist, we'll create it and return. # if(! -e $lfn) { open(LFN,">$lfn"); close(LFN); return(@lasts); } # # Get the lines from the sensor's history file. # open(LFN,"<$lfn"); flock(LFN,LOCK_EX); @lines = ; flock(LFN,LOCK_UN); close(LFN); # # Search the file contents to find the line for this service. # foreach my $line (@lines) { chomp $line; next if($line eq ''); $line =~ /(\S+)\s+(\S+)\s+(\S+)/; # # Grab some data if this is the server's line. # if($server eq $1) { $lasts[$LASTSVC] = $1; $lasts[$LASTFILE] = $2; $lasts[$LASTTIME] = $3; $nohist = 0; last; } } # # Return whatever we found -- if anything. # return(@lasts); } #----------------------------------------------------------------------------- # Routine: getfns() # # Purpose: Get the data files for this server needs to deal with. # sub getfns { my $lfile = shift; # Last file. my @files; # Files matching this service. my @newfiles; # Subset of files. my $ind; # Loop index. # # Get the list of extant files for this tetrad. Give an unknown # error if there aren't any. # @files = sort(glob("$datadir/*,$tetrad")); if(@files == 0) { print "no data available for \"$tetrad\"|$outstr"; exit($RC_UNKNOWN); } # # If we didn't find a last file in the history file, we'll return # the last file that matches this tetrad. # if($lfile eq '') { return($files[0]); } $lfile = "$lfile,$tetrad"; # # Look for the last file accessed or the first one written after # that file. # for($ind=0; $ind < @files; $ind++) { my @pathbits = split /\//, $files[$ind]; last if($pathbits[-1] ge $lfile); } # # Get the latest files from the last accessed to the most recent # written. # @newfiles = splice @files, $ind; # # Return the most recent file from our sorted list. # return(@newfiles); } #----------------------------------------------------------------------------- # Routine: timerdata() # # Purpose: Get the DNS timer info from a sensor's data file. # The relevant data are stored in $outstr. # sub timerdata { my $fn = shift; # Service's last data file. my $lasttime = shift; # Timestamp of last entry. my @lines; # Files matching this service. my $tempus; # Timestamp to return. my $rc = $RC_NORMAL; # Return value. # # Open our data file. # if(open(SF,"<$fn") == 0) { return($RC_NORMAL,''); } # # Get the list of extant files for this tetrad. # @lines = ; close(SF); # # Return if the file is empty. It isn't necessarily an error, so # we won't complain. # return($RC_NORMAL,'') if(@lines == 0); $lasttime = 0 if((!defined($lasttime)) || ($lasttime eq '')); # # Only keep the final line if the service wasn't found in the # history file. # if($nohist) { @lines = $lines[-1]; } # # Handle any file entries more recent than the last time we ran. # foreach my $line (@lines) { my $kronos; # Timestamp from file. my $thost; # Target host from file. my $nsrvr; # Nameserver from file. my $qtype; # Query type from file. my $resptime; # DNS response time from file. my $errval; # Error value from file. # # Make sure we don't exceed the maximum number of entries # we can handle at a time. # last if($count == $MAXENTRIES); # 1349291568.73732 . h.root-servers.net A 0.011641979217529 NOERROR # # Split the line into its atoms. # $line =~ /^([0-9]+).[0-9]+\s+(\S+)\s+(\S+)\s+(\S+)\s+(\S+)\s+(\S+)/; $kronos = $1; $thost = $2; $nsrvr = $3; $qtype = $4; $resptime = $5; $errval = $6; # # Skip the line on a few conditions. # next if($errval eq 'UNANSWERED'); next if($kronos eq ''); next if($lasttime ge $kronos); # # Convert the response time to milliseconds and make it a # reasonable number. # $resptime *= 1000; $resptime = sprintf("%.0f", $resptime); # # Keep a running total of response time, for later averaging. # $totalresp += $resptime; # # Add shtuff to the output string and bump our entry count. # if($nohist) { $outstr .= "owl-dnswatch=$resptime ms;"; } else { $outstr .= "owl-dnswatch=$kronos:$resptime ms;"; } $count++; # # Save a valid timestamp. # $tempus = $kronos; } # # Convert error codes into a Nagios value. # $rc = $RC_WARNING if($rc ne $RC_NORMAL); # # Return the response data. # return($rc,$tempus); } #----------------------------------------------------------------------------- # Routine: nagiout() # # Purpose: Generate a line of DNS timer output for Nagios. # sub nagiout { my $rc = shift; # Command's return code. $outstr =~ s/;$//g; if($rc == $RC_NORMAL) { $totalresp /= $count if($count != 0); $totalresp = sprintf("%.1f", $totalresp); print "DNS response time - $totalresp ms|$outstr\n"; } else { print "$totalprobs problems found|$outstr\n"; } } #----------------------------------------------------------------------------- # Routine: updatehist() # # Purpose: Update the history file for this execution. # sub updatehist { my $file = shift; # New last file. my $kron = shift; # New last time. my $filetime; # Time from file's name. my @nodes; # Nodes in new last file name. my $lfn; # Last file for this server. my @lines; # Lines in history file. my $line; # Line from @lines. my $added = 0; # Added-line flag. # # Do nothing if we found nothing. # return if($count == 0); # # Get the node of the new history file. # @nodes = split '/', $file; $file = $nodes[-1]; # # Get the timestamp from the last file's name. # $file =~ /^([0-9]+\.[0-9]+),/; $filetime = $1; # # Get the history file for this sensor. # $lfn = "$historydir/$hist_dnstimer"; # # Open and lock the sensor's history file. # open(LFN,"+<$lfn"); flock(LFN,LOCK_EX); # # Read the file's contents and then zap it. # @lines = ; seek LFN, 0, 0; truncate LFN, 0; # # Copy the old contents to the file, replacing the appropriate line. # foreach $line (@lines) { if($line =~ /^$server/) { $line = "$server\t$filetime\t$kron\n"; $added++; } print LFN "$line"; } if($added == 0) { print LFN "$server\t$filetime,$tetrad\t$kron\n"; } # # Unlock and close the file. # flock(LFN,LOCK_UN); close(LFN); } #----------------------------------------------------------------------------- # Routine: showpaths() # # Purpose: Display the data and history directories' names. # sub showpaths { # # We'll use a dummy sensor name. # $sensor = ''; getdirs(0); print "Owl directory $OWLDATA\n"; print "Owl data directory $datadir\n"; print "Owl history directory $historydir\n"; exit(0); } #---------------------------------------------------------------------- # Routine: version() # sub version { print STDERR "$VERS\n"; print STDERR "$DTVERS\n"; exit(1); } #----------------------------------------------------------------------------- # Routine: usage() # sub usage { print STDERR "$VERS $DTVERS Copyright 2012-2013 SPARTA, Inc. All rights reserved. This script retrieves the DNS timer data gathered by a Owl sensor. usage: owl-dnswatch [options] options: -paths display paths to be used -Version display program version -help display this message "; exit(1); } 1; ############################################################################### =pod =head1 NAME owl-dnswatch - Nagios plugin to retrieve DNS response data from an Owl sensor =head1 SYNOPSIS owl-dnswatch [options] =head1 DESCRIPTION B retrieves DNS response-time data from an Owl sensor node. The data directories are hard-coded in B. DNS response time data are in B/data>. The specified service name determines which file will be selected from the appropriate data directory. The file names in the data directory have this format: timestamp,sensor,target,nameserver,query.dns The most recent file whose I matches the service name given on the command line will be consulted. The DNS response data will be taken from the last entry in that file. B is expected to only be run by the Nagios monitoring system. =head1 NAGIOS USE This is run from a Nagios I object. These are examples of how the objects should be defined: define command { command_name dnsresp command_line $USER1$/owl-dnswatch $ARG1$ $ARG2$ $ARG3$ $ARG4$ } define service { service_description d.root-servers.net example.com A host_name sensor3 check_command owl-dnswatch!sensor3!example.com!d.root-servers.net!A active_checks_enabled 1 ... } =head1 OPTIONS The following options are recognized by B: =over 4 =item I<-paths> Display the paths B will use. =item I<-Version> Display the program version and exit. =item I<-help> Display a usage message and exit. =back =head1 COPYRIGHT Copyright 2012-2013 SPARTA, Inc. All rights reserved. See the COPYING file included with the DNSSEC-Tools package for details. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =cut dnssec-tools-2.0/apps/owl-monitor/manager/libexec/owl-stethoscope0000775000237200023720000002150712107530766025477 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2012-2013 SPARTA, Inc. All rights reserved. # See the COPYING file distributed with this software for details. # # owl-stethoscope # # This script retrieves the sensor heartbeat data collected from # Owl sensors. It runs on the Owl manager and provides data for # use by a Nagios monitoring environment. # # # Revision History # 1.0 Initial version. 11/9/2012 # use strict; use Getopt::Long qw(:config no_ignore_case_always); use Fcntl ':flock'; use File::Path; ####################################################################### # # Version information. # my $NAME = "owl-stethoscope"; my $VERS = "$NAME version: 2.0.0"; my $DTVERS = "DNSSEC-Tools version: 2.0"; ####################################################################### # # Paths. # # The installer must set the value of $OWLDIR to reflect the # desired file hierarchy. # The $sub_data and $subhist values may be set, but the values # given below are sufficient. # my $OWLDIR = '/owl'; # Owl directory. my $OWLDATA = "$OWLDIR/data"; # Owl DNS data directory. my $hbfile = 'heartbeat'; # File containing heartbeat data. ####################################################################### # # Nagios return codes. # my $RC_NORMAL = 0; # Normal return code. my $RC_WARNING = 1; # Warning return code. my $RC_CRITICAL = 2; # Critical return code. my $RC_UNKNOWN = 3; # Unknown return code. ####################################################################### # # Data required for command line options. # my %options = (); # Filled option array. my @opts = ( 'warning=i', # Warning time. 'critical=i', # Critical time. 'Version', # Display the version number. 'help', # Give a usage message and exit. ); ####################################################################### # # Data from command line. my $sensor = ''; # Owl sensor host. # # Default time limits. These are in minutes, but will be adjusted to # seconds when the actual variables are set in doopts(). # my $DEF_WARNLIMIT = 60; # Sensor-missing minutes before warning. my $DEF_CRITLIMIT = (24 * 60); # Sensor-missing minutes before critical. my $warnlimit = $DEF_WARNLIMIT; # Warning limit variable. my $critlimit = $DEF_CRITLIMIT; # Critical limit variable. ####################################################################### my $rc = $RC_NORMAL; # Command's return code. ################################################################################ # # Run shtuff. # main(); exit($rc); #----------------------------------------------------------------------------- # Routine: main() # # Purpose: Main controller routine for owl-stethoscope. # sub main { my $lastbeat; # Sensor's last heartbeat. # # Check our options. # doopts(); # # Get the name of our heartbeat file. # gethbfile(); # # Get the last time the sensor thub-thupped. # $lastbeat = getbeat(); # # Write a line of data to Nagios. # nagiout($lastbeat); } #----------------------------------------------------------------------------- # Routine: doopts() # # Purpose: This routine shakes and bakes our command line options. # sub doopts { # # Parse the command line. # GetOptions(\%options,@opts) || usage($RC_UNKNOWN); # # Show the version number or usage if requested. # version() if(defined($options{'Version'})); usage($RC_NORMAL) if(defined($options{'help'})); # # Get our time-limit options. # $warnlimit = $options{'warning'} if(defined($options{'warning'})); $critlimit = $options{'critical'} if(defined($options{'critical'})); # # Ensure valid limits. # if($warnlimit >= $critlimit) { print "$NAME: warning limit ($warnlimit) must be LESS than critical limit ($critlimit)\n"; exit($RC_UNKNOWN); } # # Adjust the minutes counts into usable seconds. # $warnlimit *= 60; $critlimit *= 60; # # Ensure we were given a sensor name and then save it. # usage($RC_UNKNOWN) if(@ARGV != 1); $sensor = $ARGV[0]; } #----------------------------------------------------------------------------- # Routine: gethbfile() # # Purpose: Build the heartbeat filename. # sub gethbfile { # # Ensure the data directory exists. # if(! -e "$OWLDATA/$sensor") { print "invalid sensor: \"$sensor\"\n"; exit($RC_CRITICAL); } # # Build the directory names we'll need. # $hbfile = "$OWLDATA/$sensor/$hbfile"; # # Ensure the data directory exists. # if(! -e $hbfile) { print "heartbeat file \"$hbfile\" does not exist\n"; exit($RC_CRITICAL); } } #----------------------------------------------------------------------------- # Routine: getbeat() # # Purpose: Get the last time the sensor's heart beat. # sub getbeat { my $hbline; # Data from heartbeat file. my $tstmp; # Timestamp of last heartbeat. my $tempus; # Local time of last heartbeat. my $now; # Current time. my $tdiff; # Time difference. # # Get the contents of the heartbeat file. # open(HBF,"< $hbfile"); $hbline = ; chomp($hbline); close(HBF); # # Get the time of the last heartbeat and convert it to the local time. # $hbline =~ /^(\d+)\s/; $tstmp = $1; $tempus = localtime($tstmp); # # Calculate how long it's been since the sensor last contacted us. # $now = time(); $tdiff = $now - $tstmp; # # See if we fall into any of the exceptional time limits. # if($tdiff > $critlimit) { $rc = $RC_CRITICAL; } elsif($tdiff > $warnlimit) { $rc = $RC_WARNING; } # # Return the converted timestamp. # return($tempus); } #----------------------------------------------------------------------------- # Routine: nagiout() # # Purpose: Generate a line of heartbeat output for Nagios. # sub nagiout { my $tempus = shift; # Timestamp of sensor's last heartbeat. print "last heartbeat - $tempus\n"; } #----------------------------------------------------------------------------- # Routine: out() # # Purpose: Debugging output routine. # sub out { my $str = shift; open(OUT,">>/tmp/z.stethoscope"); print OUT "$str\n"; close(OUT); } #---------------------------------------------------------------------- # Routine: version() # sub version { print STDERR "$VERS\n"; print STDERR "$DTVERS\n"; exit(0); } #----------------------------------------------------------------------------- # Routine: usage() # sub usage { my $rc = shift; # Exit code. print STDERR "$VERS $DTVERS Copyright 2012-2013 SPARTA, Inc. All rights reserved. This script retrieves the heartbeat of an Owl sensor. usage: owl-stethoscope [options] options: -warning set threshold for warning outages -critical set threshold for critical outages -Version display program version -help display this message "; exit($rc); } 1; ############################################################################### =pod =head1 NAME owl-stethoscope - Nagios plugin to retrieve Owl sensor's heartbeat data =head1 SYNOPSIS owl-stethoscope [options] =head1 DESCRIPTION B retrieves heartbeat data from a Owl sensor node. The data are stored on the Owl manager, after the sensor touches an installation-specific webpage. The heartbeat data file contains the time of the most recent time the named sensor contacted web-based heartbeat script available via the Owl manager's web server. The time is given in seconds since epoch. For display in Nagios, the seconds count is converted to local time. The data locations are mostly hard-coded in B. The actual path to the heartbeat data file is installation-specific, but it will look something like BsensorE/heartbeat>. EsensorE is the name of the sensor whose heartbeat is being checked. B is assumed to only be run by the Nagios monitoring system. =head1 NAGIOS USE This is run from a Nagios I object. These are examples of how the objects should be defined: define command { command_name heartbeat command_line owl-stethoscope $ARG1$ } =head1 OPTIONS The following options are recognized by B: =over 4 =item I<-critical> The time that has elapsed since the last heartbeat from this sensor after which the sensor will be considered to be in a critical state. This value must be greater than the warning value. This is measured in minutes. The default value is one day. =item I<-warning> The time that has elapsed since the last heartbeat from this sensor after which the sensor will be considered to be in a warning state. This value must be less than the critical value. This is measured in minutes. The default value is one hour. =item I<-Version> Display the program version and exit. =item I<-help> Display a usage message and exit. =back =head1 COPYRIGHT Copyright 2012-2013 SPARTA, Inc. All rights reserved. See the COPYING file included with the DNSSEC-Tools package for details. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =head1 SEE ALSO B =cut dnssec-tools-2.0/apps/owl-monitor/manager/libexec/owl-perfdata0000775000237200023720000001306412107530766024724 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2012-2013 SPARTA, Inc. All rights reserved. See the COPYING # file distributed with this software for details. # # owl-perfdata # # This script handles the Nagios perfdata commands for the Owl # Monitoring System. # # Revision History # 1.0 Initial version 10/18/2012 # This was adapted from the uem-perfdata plugin # from the original UEM system. # use strict; use Getopt::Long qw(:config no_ignore_case_always); use Fcntl ':flock'; ####################################################################### # # Version information. # my $NAME = "owl-perfdata"; my $VERS = "$NAME version: 2.0.0"; my $DTVERS = "DNSSEC-Tools version: 2.0"; ####################################################################### # # Paths and commands. # my $GRAPHINSERT = "/owl/nagiosgraph/bin/insert.pl"; ######################################################################r # # Data required for command line options. # my %options = (); # Filled option array. my @opts = ( "Version", # Display the version number. "help", # Give a usage message and exit. ); ####################################################################### my $rc = 0; # Command's return code. my $argstr; # Non-option argument string. # # Run shtuff. # main(); exit($rc); #----------------------------------------------------------------------------- # Routine: main() # # Purpose: Main controller routine for owl-perfdata. # sub main { # # Check our options. # doopts(); # # Write a line of data to Nagios. # svcperf(); } #----------------------------------------------------------------------------- # Routine: doopts() # # Purpose: This routine shakes and bakes our command line options. # sub doopts { # # Parse the command line. # GetOptions(\%options,@opts) || usage(); # # Show the version number or usage if requested. # version() if(defined($options{'Version'})); usage() if(defined($options{'help'})); # # Build the argument string from the remaining arguments. # $argstr = join ' ', @ARGV; if(length($argstr) == 0) { print "owl-perfdata: no data given\n"; exit(0); } } #----------------------------------------------------------------------------- # Routine: svcperf() # # Purpose: Deal with service-related performance data. # Anycast lines may have multiple pieces of data, each of which # will be inserted separately. # Non-anycast lines will contain a single datum, and will be # inserted as is. # sub svcperf { my $cmd = ''; # Command to execute. my @perfstr = (); # Atomized performance string. my @perflines = (); # Data to insert. # # If this is an anycast service, then we'll divide the string into # pieces insert them one at a time. # If this is not an anycast service, we'll submit it as is. # if(($argstr =~ /owl-anycaster/) || ($argstr =~ /owl-dnswatch/)) { my $prefix; # Data prefix. # # Divide the argument into its components, then build # the unvarying prefix string. # @perfstr = split /\|\|/, $argstr; $prefix = "$perfstr[0]||$perfstr[1]||$perfstr[2]||$perfstr[3]"; # # Divide the performance data into pieces, along lines # of the trailing semi. # @perflines = split /;/, $perfstr[4]; # # Insert each performance datum separately. # foreach my $pdata (@perflines) { my $perfstr; # # Remove any leading blanks. # $pdata =~ s/^[ ]*//; # # Build the command with this performance datum. # $perfstr = "$prefix||$pdata"; $cmd = "$GRAPHINSERT \'$perfstr\'"; # # Execute the command string. # system($cmd); $rc = $? >> 8; } } else { # # Build the command string. # $cmd = "$GRAPHINSERT \'$argstr\'"; # # Execute the command string. # system($cmd); $rc = $? >> 8; } } # /owl/nagiosgraph/insert.pl "$LASTSERVICECHECK$||$HOSTNAME$||$SERVICEDESC$||$SERVICEOUTPUT$||$SERVICEPERFDATA$" #---------------------------------------------------------------------- # Routine: version() # sub version { print STDERR "$VERS\n"; print STDERR "$DTVERS\n"; exit(1); } #----------------------------------------------------------------------------- # Routine: usage() # sub usage { print STDERR "$VERS $DTVERS Copyright 2012-2013 SPARTA, Inc. All rights reserved. This script handles the Nagios perfdata commands. usage: owl-perfdata [options] options: -Version display program version -help display this message "; exit(1); } 1; ############################################################################### =pod =head1 NAME owl-perfdata - Front-end to handling Nagios performance data for the Owl Monitor =head1 SYNOPSIS owl-perfdata [options] =head1 DESCRIPTION B is a front-end for handling Owl performance data by Nagios. Performance data are inserted in the Nagiosgraph system to be used for graphing results from Owl DNS query data. =head1 NAGIOS USE This is run from a Nagios I object. These are examples of how the objects should be defined: define command { command_name perfdata command_line $USER1$/owl-perfdata "$LASTSERVICECHECK$||$HOSTNAME$||$SERVICEDESC$||$SERVICEOUTPUT$||$SERVICEPERFDATA$" } =head1 OPTIONS The following options are recognized by B: =over 4 =item I<-Version> Display the program version and exit. =item I<-help> Display a usage message and exit. =back =head1 COPYRIGHT Copyright 2012-2013 SPARTA, Inc. All rights reserved. See the COPYING file included with the DNSSEC-Tools package for details. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =head1 SEE ALSO Nagios =cut dnssec-tools-2.0/apps/owl-monitor/manager/nagios-objects/0000775000237200023720000000000012111172553023670 5ustar hardakerhardakerdnssec-tools-2.0/apps/owl-monitor/manager/nagios-objects/owl-services.cfg0000664000237200023720000000156312057165575027017 0ustar hardakerhardaker############################################################################### # # owl-services.cfg - For monitoring DNS data for Owl Monitor. # ################################################################ # # Template for Owl-related services. # define service { name owl-service active_checks_enabled 1 check_freshness 0 check_period 24x7 contact_groups owl-admins event_handler_enabled 1 failure_prediction_enabled 1 flap_detection_enabled 0 is_volatile 0 max_check_attempts 3 # normal_check_interval 5 normal_check_interval 3 notification_interval 60 notification_options w,u,c,r notification_period 24x7 notifications_enabled 1 obsess_over_service 1 parallelize_check 1 passive_checks_enabled 1 process_perf_data 1 retain_nonstatus_information 0 retain_status_information 0 retry_check_interval 1 register 0 } dnssec-tools-2.0/apps/owl-monitor/manager/nagios-objects/owl-commands.cfg0000664000237200023720000000207112057165312026755 0ustar hardakerhardaker############################################################################### # # owl-commands.cfg - Commands required for monitoring DNS data for Owl Monitor. # ############################################################################### # # Handles Owl's DNS request data. # define command { command_name owl-dnswatch command_line $USER1$/owl-dnswatch $ARG1$ $ARG2$ $ARG3$ $ARG4$ } # # Handles heartbeat data for Owl sensors. # define command { command_name owl-stethoscope command_line $USER1$/owl-stethoscope $ARG1$ } # # Handles heartbeat data for Owl sensors, but with specified limits. # define command { command_name owl-stethoscope-limits command_line $USER1$/owl-stethoscope -w $ARG1$ -c $ARG2$ $ARG3$ } # # Dummy check for for Owl hosts. # define command { command_name check-none command_line $USER1$/check_dummy 0 } # # Service performance data for Owl services. # define command { command_name service-perfdata-for-owl command_line $USER1$/owl-perfdata "$LASTSERVICECHECK$||$HOSTNAME$||$SERVICEDESC$||$SERVICEOUTPUT$||$SERVICEPERFDATA$" } dnssec-tools-2.0/apps/owl-monitor/manager/nagios-objects/sensor42.cfg0000664000237200023720000000443212057166006026040 0ustar hardakerhardaker############################################################################### # # Hosts and services required for monitoring DNS data for Owl Monitor. # # Built Wed Oct 10 16:32:23 2012 by owl-newsensor. # define host { host_name sensor42 alias sensor42 address sensor42 use owl-sensor } ############################################################################### define service { service_description d.root-servers.net example.com A host_name sensor42 check_command owl-dnswatch!sensor42!example.com!d.root-servers.net!A active_checks_enabled 1 use owl-service } define service { service_description d.root-servers.net example.com AAAA host_name sensor42 check_command owl-dnswatch!sensor42!example.com!d.root-servers.net!AAAA active_checks_enabled 1 use owl-service } define service { service_description d.root-servers.net example.com NS host_name sensor42 check_command owl-dnswatch!sensor42!example.com!d.root-servers.net!NS active_checks_enabled 1 use owl-service } #################### define service { service_description h.root-servers.net . A host_name sensor42 check_command owl-dnswatch!sensor42!.!h.root-servers.net!A active_checks_enabled 1 use owl-service } define service { service_description h.root-servers.net . ANYCAST host_name sensor42 check_command owl-dnswatch!sensor42!.!h.root-servers.net!ANYCAST active_checks_enabled 1 use owl-service } #################### define service { service_description m.root-servers.net . A host_name sensor42 check_command owl-dnswatch!sensor42!.!m.root-servers.net!A active_checks_enabled 1 use owl-service } #################### ######################################## define service { service_description sensor42-status host_name Owl Sensor Heartbeats check_command owl-stethoscope!sensor42 active_checks_enabled 1 use owl-service } ############################################################################### define servicegroup { servicegroup_name sensor42 services alias Services for sensor sensor42 members sensor42, d.root-servers.net example.com A, sensor42, d.root-servers.net example.com AAAA, sensor42, d.root-servers.net example.com NS, sensor42, h.root-servers.net . A, sensor42, h.root-servers.net . ANYCAST, sensor42, m.root-servers.net . A } dnssec-tools-2.0/apps/owl-monitor/manager/nagios-objects/owl-hostgroups.cfg0000664000237200023720000000104512057165464027401 0ustar hardakerhardaker############################################################################### # # owl-hostgroups.cfg - object config file defining Owl hostgroups. # ############################################################################### # # This is a sample hostgroup, for future reference. # # define hostgroup { # hostgroup_name DNS Response # alias DNS Response # members owl-us-dc, owl-us-sf, owl-scotland, owl-svalbard # } # define hostgroup { hostgroup_name DNS Response Time Sensors alias DNS Response Time Sensors members sensor42 } dnssec-tools-2.0/apps/owl-monitor/manager/nagios-objects/nagios.cfg-owl.mods0000664000237200023720000000111012057165164027373 0ustar hardakerhardaker #------------------------------------------------------------------------ # # Standard Nagios templates and objects for use by the Owl Monitoring System. # cfg_file=/owl/nagios/etc/objects/owl-contacts.cfg cfg_file=/owl/nagios/etc/objects/owl-hosts.cfg cfg_file=/owl/nagios/etc/objects/owl-commands.cfg cfg_file=/owl/nagios/etc/objects/owl-services.cfg # # Insert cfg_file lines for sensors here. # # # And one final one for Owl's hostgroups file. # cfg_file=/owl/nagios/etc/objects/owl-hostgroups.cfg #------------------------------------------------------------------------ dnssec-tools-2.0/apps/owl-monitor/manager/nagios-objects/owl-hosts.cfg0000664000237200023720000000204712057165533026324 0ustar hardakerhardaker############################################################################### # # owl-hosts.cfg - object config file defining basic Owl Monitor hosts. # ############################################################################### # # Basic template for Owl hosts. # define host { name owl-host notifications_enabled 1 event_handler_enabled 1 flap_detection_enabled 0 failure_prediction_enabled 1 process_perf_data 1 retain_status_information 0 retain_nonstatus_information 0 notification_period 24x7 contact_groups owl-admins check_interval 1 max_check_attempts 10 register 0 } ############################################################################### # # Templates for Owl hosts. # define host { name owl-sensor use owl-host check_command check-none register 0 } define host { name owl-manager use owl-host check_command check-none register 0 } define host { name Owl Sensor Heartbeats host_name Owl Sensor Heartbeats alias Owl Sensor Heartbeats use owl-host # address sensor42 # register 0 } dnssec-tools-2.0/apps/owl-monitor/manager/nagios-objects/owl-contacts.cfg0000664000237200023720000000103012057165406026770 0ustar hardakerhardaker############################################################################### # # owl-contacts.cfg - Basic contact info for Owl Monitor. # ############################################################################### define contact { contact_name root use generic-contact alias Root-Boy email root@localhost service_notification_commands notify-service-by-email host_notification_commands notify-host-by-email } define contactgroup { contactgroup_name owl-admins alias Owl Administrators members root } dnssec-tools-2.0/apps/owl-monitor/manager/nagios-files/0000775000237200023720000000000012111172553023341 5ustar hardakerhardakerdnssec-tools-2.0/apps/owl-monitor/manager/nagios-files/README0000664000237200023720000000072712057164016024233 0ustar hardakerhardaker example-side.php This file contains example lines that may be added to Nagios' side.php file in order to make graphing more easily available. The side.php file lives in .../share/side.php. owl-sensor-heartbeat.cgi This file is a script run by the webserver in order to register that an Owl sensor has sent a "heartbeat" signal. The owl-sensor-heartbeat.cgi script lives in .../sbin -- or wherever your installation wants to store CGI scripts for the webserver. dnssec-tools-2.0/apps/owl-monitor/manager/nagios-files/example-side.php0000664000237200023720000000236212057166555026450 0ustar hardakerhardaker
    OWL Graphs

    DRRAW Graphing

    Nagiosgraph Graphing

    dnssec-tools-2.0/apps/owl-monitor/manager/nagios-files/owl-sensor-heartbeat.cgi0000775000237200023720000000776612107530766030126 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2012-2013 SPARTA, Inc. All rights reserved. See the COPYING # file distributed with this software for details. # # owl-sensor-heartbeat.cgi Owl Monitoring System # # This CGI script records "heartbeats" from the Owl Monitoring Systems' # sensor nodes. It will record web contacts from Owl sensor nodes, # with the record intended for use by Nagios or some other management # system as a means of tracking sensor availability. # # Revision History: # 1.0 121201 Initial version. # use strict; #------------------------------------------------------------------------ # Version information. # my $NAME = 'owl-sensor-heartbeat.cgi'; my $VERS = "$NAME version: 2.0.0"; my $DTVERS = "DNSSEC-Tools version: 2.0"; #------------------------------------------------------------------------ # Defaults and some constants. # # $DIR must be adjusted for each site. # my $sensor = ''; # Sensor's name. my $hbfile = ''; # Constructed heartbeat file. my $DIR = '/owl/data'; # Heartbeat directory. my $HBFILE = 'heartbeat'; # Heartbeat file. #------------------------------------------------------------------------ main(); exit(0); #---------------------------------------------------------------------------- # Routine: sensorize() # # Purpose: Run the whole shebang. # sub main { sensorize(); reply("Thanks for reporting, $sensor!"); } #---------------------------------------------------------------------------- # Routine: reply() # # Purpose: Send a generic reply to the sensor. # sub reply { my $msg = shift; # Message to send sensor. print "Content-type: text/plain\n\n"; print "\n\n$msg\n\n"; } #---------------------------------------------------------------------------- # Routine: sensorize() # # Purpose: Add a line to the sensor's heartbeat file. # sub sensorize { my $url = $ENV{'REQUEST_URI'}; # URL that started us. my $chronos; # Timestamp. # # Get the sensor's name. # $url =~ /\?sensor=(.*)$/; $sensor = $1; $sensor = $ENV{'REMOTE_ADDR'} if($sensor eq ''); # # Get the timestamp. # $chronos = time; # # Build the name of the heartbeat file. # gethbfile(); # # Write our record. # open(SHB,"> $hbfile"); print SHB "$chronos $sensor\n"; close(SHB); } #---------------------------------------------------------------------------- # Routine: gethbfile() # # Purpose: Build the name of the heartbeat file. # sub gethbfile { # # Ensure we recognize the sensor. We don't want to be recording # heartbeats from just anyone. # if(! -e "$DIR/$sensor") { reply("unrecognized sensor - \"$sensor\""); exit(1); } # # And now build the filename. # $hbfile = "$DIR/$sensor/$HBFILE"; } #---------------------------------------------------------------------------- =pod =head1 NAME owl-sensor-heartbeat.cgi - Records heartbeat contacts from Owl sensor nodes =head1 SYNOPSIS http://owl.example.com/cgi-bin/owl-sensor-heartbeat.cgi?sensor= =head1 DESCRIPTION B records "heartbeats" from Owl sensor nodes. This is a simple heartbeat, as only the most recent will be saved for a particular sensor. An historical record is not maintained. B will record web contacts from Owl sensor nodes, with the record intended for use by Nagios or some other management system as a means of tracking sensor availability. This is only intended to be called as a result of a web access; it is not intended for direct use by users. The sensor name is taken from the REQUEST_URI environment variable. If that is not set, then the sensor host's IP address (as given in the REMOTE_ADDR environment variable) will be used instead. Only valid sensors will have their heartbeats recorded. A valid sensor, in this case, is one that has a sensor directory in the Owl data directory. =head1 SEE ALSO owl-dnstimer(1), owl-heartbeat(1), owl-sensord(1), owl-stethoscope(1) =head1 COPYRIGHT Copyright 2012-2013 SPARTA, Inc. All rights reserved. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =cut dnssec-tools-2.0/apps/owl-monitor/common/0000775000237200023720000000000012111172547020642 5ustar hardakerhardakerdnssec-tools-2.0/apps/owl-monitor/common/manpages/0000775000237200023720000000000012111172547022435 5ustar hardakerhardakerdnssec-tools-2.0/apps/owl-monitor/common/manpages/owl-data.pod0000775000237200023720000000460512071065274024664 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2012-2013 SPARTA, Inc. All rights reserved. See the COPYING # file distributed with this software for details. # # owl-data.pod Owl Monitoring System # # This module contains contains the pod describing the data files # created by the Owl sensor scripts. # # Revision History: # 1.0 121201 Initial version. # 1; =pod =head1 NAME owl-data - Data file format for Owl sensor programs =head1 DESCRIPTION Each query thread run by B writes the results of its queries to its own data file. These files are periodically rolled so the data aren't stored in a single file and the file size doesn't grow too large. =head2 Filename Format The format of the data file names is as follows: .,,,,.dns where: YYMMDD - year, month, day hhmm - hour, minute sensor - name of sensor that generated the data target - target host's name ns - nameserver's name query - type of DNS query; e.g., A, AAAA, NS Examples of the data file names: 121208.1710,sensor41,example.com,h.root-servers.net,A.dns 121208.1710,sensor41,example.com,h.root-servers.net,NS.dns 121208.1710,sensor41,example.com,m.root-servers.net,A.dns 121208.1740,sensor41,.,d.root-servers.net,ANY.dns 121208.1740,sensor41,example.com,h.root-servers.net,A.dns 121208.1740,sensor41,example.com,h.root-servers.net,NS.dns =head2 Data Format Each line in the data file contains a single query response. The line format follows: where: timestamp - timestamp from the epoch target - target host ns - nameserver name query type - type of DNS query query time - time in seconds from query to response return code - success/error indicator If an ANYCAST query is performed, then a I field will be appended to the data line. This is the field returned by the nameserver. Examples of data file entries: 1354951630.21238 tislabs.com ns1.local A 0.009197950363159 NOERROR 1354951630.28425 tislabs.com ns1.local NS 0.008725881576538 NOERROR 1354951690.23512 tislabs.com h.root-servers.net ANYCAST 0.009922981262207 NOERROR H3 =head1 SEE ALSO B =head1 COPYRIGHT Copyright 2012-2013 SPARTA, Inc. All rights reserved. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =cut dnssec-tools-2.0/apps/owl-monitor/common/manpages/owl-config.pod0000775000237200023720000002030612075642214025213 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2012-2013 SPARTA, Inc. All rights reserved. See the COPYING # file distributed with this software for details. # # owl-config.pod Owl Monitoring System # # This module contains contains the pod describing the configuration # file used by the Owl scripts. # # Revision History: # 1.0 121201 Initial version. # 1; =pod =head1 NAME owl-config - Configuration file for Owl sensor programs =head1 DESCRIPTION The Owl configuration file contains values that control the various Owl programs. These values include such things as the details of DNS queries to perform, where data files are to be stored, and the location of the log files. Some of the entries are intended for specific programs, while others are more widely used. If a particular line is not included, then its values will be taken from the command-line options or the defaults. These configuration values may be overridden by the command-line options. Precedence, from highest to lowest, is command-line options, configuration file values, default values. Each non-comment line in the configuration file has (roughly) the same format: where: type - the type of the line; e.g., query, data, sensor specifier - a specific instance of the type (optional) arguments - data specific to the the type/specifier pair =head1 CONFIGURATION TYPES There are five types of configuration I lines. These are: data log remote host query The format and purpose of these lines are defined below. =head2 Data Configuration Lines The B line defines the specifics on how the Owl scripts store data files. The B lines have the following format: data The I may be one of the following: archive interval dir sensors The I field specifies the archive directory that contains old Owl sensor data. The I field specifies the data directory that contains Owl sensor data. The I field specifies the frequency with which sensor data is transferred from sensor to the manager. This is given in seconds. The I field specifies the location of the sensors' data directories. This is used by B to specify the top-level directory that holds each sensor's data subdirectory. It is only used on the Owl manager. =head2 Host Configuration Line The B line defines properties relating to the specific host and the Owl programs it will run. These properties include the name of the Owl host, a list of administrator email addresses, and how the host's programs will be run. The B lines have the following format: host The I may be one of the following: name name of the host (all) admin email addresses of administrative contacts (all) transfer-mgr-args arguments to pass to owl-transfer-mgr (manager) dnstimer-args arguments to pass to owl-dnstimer (sensor) transfer-args arguments to pass to owl-transfer (sensor) hesitation sleep time in seconds between executions of owl-dnstimer or owl-transfer (sensor) hibernation sleep time if owl-dnstimer or owl-transfer is executing too frequently (sensor) quickcount number of consecutive fast executions of owl-dnstimer or owl-transfer before a hibernation occurs (sensor) quickseconds number of seconds that define a fast execution (sensor) The I is intended to be used in communications with the Owl manager. The last six keywords are used by B when starting the B and B programs. I, I, and I may contain spaces, but the other four all must be positive numbers. =head2 Log Configuration Lines The B line defines the specifics on how the Owl host handles logging. The B line has the following format: log Currently, the only I is "dir", which defines where the log files will be stored. =head2 Query Configuration Lines The B configuration lines define the DNS queries that will be performed. These are used by the B program to determine the target host, nameserver, and query type groupings that will have timing data collected. The configuration file must contain at least one B line. The B lines have the following format: query The I field specifies the target host for which a nameserver will be queried. The I field specifies the nameserver that will be queried. If this is a single letter from 'a' to 'm', then it will be appended with '.root-servers.net'. The I field specifies the DNS resource record that the nameserver will be queried for. If this is not included or is given as '-', then an 'A' query will be performed. The I field specifies the interval between nameserver queries, in seconds. If this is not included or is given as '-', then the interval will be 60 seconds. The I field specifies the maximum length of time for each nameserver query, in seconds. If this is not included or is given as '-', then half the I value will be used. The I field specifies the interval between data file rollovers, in minutes. If this is not included or is given as '-', then the data file rollover time will be 30 minutes. =head2 Remote Configuration Line The B line defines several ways the host will communicate with either the Owl manager or an Owl sensor. The B lines have the following format: remote The I may be one of the following: heartbeat ssh-user The I field specifies the URLs which B will use to contact a remote Owl host. Multiple hosts may be contacted by specifying multiple instances of this line. The I field specifies the user on a remote host that B or B will use when moving data to/from the remote host. The user running B or B must have B access to the remote host. B on both hosts must be configured so a password will not be required to be entered. The data for this field is divided into the following subfields: user@host This is the user and host field given to ssh. ssh args These are arguments passed to the ssh command. sensor name The name of the sensor associated with this line. The subfields are separated by semicolons. The first subfield is required; the second subfield is optional; and the third subfield is only required on the Owl manager. B will ignore any I line that does not contain the third subfield. Multiple I lines may be given in the B file, and data will be transferred to/from each I field specified. This will allow disparate remote Owl hosts to require different connection characteristics. =head1 EXAMPLE CONFIGURATION The following is an example configuration file: # # Owl sensor configuration file. # host name svalbard-owl host admin bob@example.com host dnstimer-args -config /owl/conf/owl.conf host transfer-args -config /owl/conf/owl.conf query . d query example.com d AAAA - 42 query www.example.com d - - - 60 query . ns1.local query example.com ns1.local AAAA - 42 data archive /owl/archived-data data dir /owl/data-files data sensors /owl/sensor-data log dir /owl/log-files remote ssh-user sensor1@xyzzy.example.com;-p 6543;sensor-1 remote ssh-user svalbard@owl.dnssec-tools.org;svalbard remote heartbeat http://owl-mgr.local/cgi-bin/owl-sensor-heartbeat.cgi =head1 SEE ALSO B, B, B, B, B, B =head1 COPYRIGHT Copyright 2012-2013 SPARTA, Inc. All rights reserved. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =cut dnssec-tools-2.0/apps/owl-monitor/common/perllib/0000775000237200023720000000000012111172547022273 5ustar hardakerhardakerdnssec-tools-2.0/apps/owl-monitor/common/perllib/owlutils.pm0000775000237200023720000011047512107530766024534 0ustar hardakerhardaker#!/usr/bin/perl # # Copyright 2012-2013 SPARTA, Inc. All rights reserved. See the COPYING # file distributed with this software for details. # # owlutils.pm Owl Monitoring System # # This module contains routines used by the Owl scripts. # # Revision History: # 1.0 121201 Initial version. # package owlutils; use strict; require Exporter; use POSIX; use Log::Dispatch; use Log::Dispatch::FileRotate; # # Version information. # my $NAME = 'owlutils.pm'; my $VERS = "$NAME version: 2.0"; our @ISA = qw(Exporter); #------------------------------------------------------------------------ # Exported interfaces. # our @EXPORT = qw( owl_setup owl_chkdir owl_getpid owl_halt owl_printdefs owl_readconfig owl_running owl_setlog owl_singleton owl_writepid ); #------------------------------------------------------------------------ # Defaults and some constants. my $NSBASE = 'root-servers.net'; # Base name for root servers. our $DEF_ARCHDIR = "$FindBin::Bin/../old.data"; # Default archive dir. our $DEF_CONFDIR = "$FindBin::Bin/../conf"; # Default config dir. our $DEF_DATADIR = "$FindBin::Bin/../data"; # Default data dir. our $DEF_LOGDIR = "$FindBin::Bin/../log"; # Default log dir. our $DEF_SENSORSDIR = "$FindBin::Bin/../sensors"; # Def. sensors data dir. our $DEF_CONFIG = "owl.conf"; # Default config file. #------------------------------------------------------------------------ # # Constants for configuration data. # my $DEF_INTERVAL = 60; # Default interval between transfers. my $MIN_INTERVAL = 60; # Minimum interval between transfers. my $MININT = 10; # Minimum query interval. my $DEF_QUINT = 60; # Default query interval. # Default query timeout is half query interval. my $MINTO = 5; # Minimum query timeout. # # Amount of time between rolling the data files. # # my $DEF_ROLLINT = 60 * 60; # Roll once per hour. # my $DEF_ROLLINT = 60 * 30; # Roll once every 30 minutes. # my $DEF_ROLLINT = 60 * 20; # Roll once every 20 minutes. # my $DEF_ROLLINT = 60 * 15; # Roll once every 15 minutes. my $DEF_ROLLINT = 60 * 30; # XXX - testing my $MIN_ROLLINT = 60 * 10; # Minimum file rollover interval. # # The default and valid DNS queries. # my $DEF_QUERYTYPE = 'A'; my %dnsqueries = ( 'A' => 1, 'AAAA' => 1, 'ANY' => 1, 'ANYCAST' => 1, 'CNAME' => 1, 'DNSKEY' => 1, 'DS' => 1, 'MX' => 1, 'NS' => 1, 'NSEC3' => 1, 'RRSIG' => 1, 'SOA' => 1, 'TSIG' => 1, 'TXT' => 1, ); #------------------------------------------------------------------------ # Data. # my $progname; # Program we're part of. my $owllog; # The log object. my $OWL_SENSOR = 1; # Sensor daemon. my $OWL_MANAGER = 1; # Sensor manager. my %owldaemons = # Owl daemons. ( 'owl-dnstimer' => $OWL_SENSOR, 'owl-sensord' => $OWL_SENSOR, 'owl-transfer' => $OWL_SENSOR, 'owl-transfer-mgr' => $OWL_MANAGER, ); #------------------------------------------------------------------------ # Shared data. # our $archdir = $DEF_ARCHDIR; # Archive directory. our $confdir = $DEF_CONFDIR; # Configuration directory. our $conffile; # Configuration file. our $datadir = $DEF_DATADIR; # Data directory. our $logdir = $DEF_LOGDIR; # Log directory. our $sensorsdir = $DEF_SENSORSDIR; # Sensors' data directory. our $transfer_interval = $DEF_INTERVAL; # Actual transfer interval. our @heartbeaturls = (); # URLs for heartbeat to remote hosts. our $pidfile = ''; # Filename of process-id file. our $hostname = ''; # Name of this host from config file. our @sshusers = (); # Users on remote hosts for data. # # Fields specific to programs on Owl sensors. # our $dnstimerargs; # Arguments for the owl-dnstimer daemon. our $transferargs; # Arguments for owl-transfer daemon. our $transfermgrargs; # Arguments for owl-transfer-mgr daemon. # # Fields specific to programs on Owl managers. # our $transfermgrargs; # Arguments for owl-transfer-mgr daemon. our $admins = 'root'; # Administrator email. our $hesitation; # Sleep time between executions. our $hibernation; # Sleep time for minion xtn problems. our $quickcount; # Consecutive quick xtns before pausing. our $quickseconds; # Seconds that make a quick execution. #---------------------------------------------------- # Exported fields from the Owl configuration file. # our @cf_targets = (); # List of targets. our @cf_servers = (); # List of nameservers. our @cf_qtypes = (); # List of DNS query types. our @cf_intervals = (); # List of query intervals. our @cf_timeouts = (); # List of query timeouts. our @cf_rollints = (); # Datafile rollover interval. our @cf_states = (); # State of targets. #---------------------------------------------------- our %loginfo = (); # Logging information. #=============================================================================== # # Exported routines. # #------------------------------------------------------------------------ # Routine: owl_setup() # # Purpose: Initializes a few variables used by the rest of the module. # sub owl_setup { my $pname = shift; # Our program. my $cdir = shift; # Configuration directory. my $ddir = shift; # Data directory. my $ldir = shift; # Log directory. # # Set the name of our program. # $progname = $pname; # # Set the directories as requested. # $confdir = $cdir if(defined($cdir) || ($cdir ne '')); $datadir = $ddir if(defined($ddir) || ($ddir ne '')); $logdir = $ldir if(defined($ldir) || ($ldir ne '')); # # Set the name of the pidfile we'll be using. # $pidfile = "$confdir/$progname.pid"; } #------------------------------------------------------------------------ # Routine: owl_halt() # # Purpose: This routine will halt other instances of a given Owl # program running. The current process will not be HUP'd. # # Return Values # On error, zero is returned. # On success, the number of processes that were successfully # sent a SIGHUP is returned. # sub owl_halt { my $target = shift; # Program to kill. my $moi = $$; # Our process id. my $cnt = 0; # Count of halted processes. my $prevcnt = 0; # Previous count of halted processes. # # Ensure we're only zapping our known programs. # return(0) if(!defined($owldaemons{$target})); # # Go through the list of running processes and send SIGHUP to any # with $target in the process list. # foreach my $sig (SIGHUP, SIGKILL) { my @psout; # Output from ps. # # Get the running processes. # open(PS,"/bin/ps wax |"); @psout = ; close(PS); foreach my $psline (@psout) { my $pid; # Process id from ps line. my $cmd; # Command line from ps line. # # Get the process id and command line from the # ps output line. # $psline =~ /^\s*(\d+)\s+\S+\s+\S+\s+\S+\s+(.+)$/; $pid = $1; $cmd = $2; # # Skip this line if it doesn't contain the caller's # target. # next if($cmd !~ /$target/); # # Skip this line if it's our own process. # next if($pid == $moi); # # Send SIGHUP to the process and increment our count # of hup'd processes. # if(kill($sig,$pid) > 0) { $cnt++; } } # # Drop out if we there isn't anything else to signal. # last if($cnt == $prevcnt); $prevcnt = $cnt; # # Give things a moment to deal with the signal. # sleep(1); } # # Return the number of processes we successfully signaled. # return($cnt); } #------------------------------------------------------------------------ # Routine: owl_printdefs() # # Purpose: Print query defaults and exit. # sub owl_printdefs { print "default archive directory $DEF_ARCHDIR\n"; print "default config directory $DEF_CONFDIR\n"; print "default data directory $DEF_DATADIR\n"; print "default log directory $DEF_LOGDIR\n"; print "default sensors directory $DEF_SENSORSDIR\n"; print "default config file $DEF_CONFIG\n"; print "\n"; print "default query interval $DEF_QUINT\n"; print "minimum query interval $MININT\n"; print "minimum query timeout $MINTO\n"; print "default query type $DEF_QUERYTYPE\n"; print "default datafile rollover interval $DEF_ROLLINT\n"; print "minimum datafile rollover interval $MIN_ROLLINT\n"; print "default interval between transfers $DEF_INTERVAL\n"; print "minimum interval between transfers $MIN_INTERVAL\n"; exit(0); } #------------------------------------------------------------------------ # Routine: owl_readconfig() # # Purpose: Parse an Owl configuration file, building a set of # variables along the way. # sub owl_readconfig { my $config = shift; # Configuration file. my $ddir = shift; # Data directory. my $ldir = shift; # Log directory. my $errs = 0; # Error count. # # Ensure the config file exists. # $conffile = $config; if(! -e $config) { print STDERR "owl_readconfig: config file \"$config\" does not exist\n"; return(1); } # # Ensure the config file exists. # if(open(CONF,"< $config") == 0) { print STDERR "owl_readconfig: unable to open config file \"$config\"\n"; return(1); } # # Go through each line of the config file. # while() { my $line = $_; # Config line. my @atoms; # Pieces of config line. # # Massage the line a little. Get rid of the trailing newline, # any leading spaces, and collapse whitespace to a single space. # chomp $line; $line =~ s/^\s+//g; $line =~ s/\s+/ /g; # # Skip comment and blank lines. # next if(($line =~ /^\#/) || ($line eq '')); # # Split the line into its pieces. # @atoms = split / /, $line; # # Look at the line's keyword to figure out what it's for. # data - parameter for data storage # host - data about the host # log - parameter for logging # query - defines a field for a target/nameserver pair # remote - data about the remote hosts we'll contact # if($atoms[0] =~ /^data$/i) { $errs += conf_dataline($ddir,@atoms); } elsif($atoms[0] =~ /^host$/i) { $errs += conf_hostline(@atoms); } elsif($atoms[0] =~ /^log$/i) { $errs += conf_logline($ldir,@atoms); } elsif($atoms[0] =~ /^query$/) { $errs += conf_queryline(@atoms); } elsif($atoms[0] =~ /^remote$/i) { $errs += conf_remoteline(@atoms); } else { print STDERR "owl_readconfig: unrecognized config line: \"$line\"\n"; } } close(CONF); # # Check the configuration values to make sure they're okay. # for(my $ind=0; $ind < @cf_targets; $ind++) { my $eid; # Entry's identifier. my $interval; # Root's query interval. my $rollint; # Root's rollover interval. my $timeout; # Root's query timeout. # # Get shortcuts for the values. # $eid = "$cf_targets[$ind]/$cf_servers[$ind]"; $interval = $cf_intervals[$ind]; $rollint = $cf_rollints[$ind]; $timeout = $cf_timeouts[$ind]; # # Get the query interval and ensure it's okay. # if($interval < $MININT) { print STDERR "$eid: invalid query interval \"$interval\"; it must be $MININT or greater\n"; $errs++; $cf_states[$ind] = 0; } # # Get the query timeout and ensure it's okay. # if($timeout < $MINTO) { print STDERR "$eid: invalid query timeout \"$timeout\"; it must be $MINTO or greater\n"; $errs++; $cf_states[$ind] = 0; } if($timeout >= $interval) { print STDERR "$eid: invalid query timeout \"$timeout\"; it must be less than the interval ($interval)\n"; $errs++; $cf_states[$ind] = 0; } # # Get the rollover interval and ensure it's okay. # if($rollint < $MIN_ROLLINT) { print STDERR "$eid: invalid rollover interval \"$rollint\"; it must be $MIN_ROLLINT or greater\n"; $errs++; $cf_states[$ind] = 0; } } # # Command-line values take precedence over config-file values. # $datadir = $DEF_DATADIR if(!defined($datadir)); $datadir = $ddir if(defined($ddir)); $logdir = $DEF_LOGDIR if(!defined($logdir)); $logdir = $ldir if(defined($ldir)); # # Bail on errors. # if($errs) { print STDERR "configuration errors: $errs found\n"; } return($errs); } #------------------------------------------------------------------------ # Routine: owl_running() # # Purpose: This routine returns a boolean indicating if the named # Owl program is running. # sub owl_running { my $prog = shift; # Owl program to check. my $curpf; # Current pid file. $curpf = "$confdir/$prog.pid"; return(running($curpf)); } #------------------------------------------------------------------------ # Routine: owl_setlog() # # Purpose: This routine initializes logging for an Owl program. # sub owl_setlog { my $pname = shift; # Program's hostname. my $newlogdir = shift; # New log directory (optional.) my $realhost; # Actual hostname. my @chron; # Current times. my $tstmp; # Timestamp for logname. # # Get the name of the host we're sitting on. # $realhost = `hostname`; chomp $realhost; # # Build the timestamp to be added to the log's name. # @chron = gmtime(); $tstmp = sprintf("%02d%02d%02d", $chron[5] % 100, $chron[4] + 1, $chron[3]); # # Get the (optional) new logging directory. # $logdir = $newlogdir if(defined($newlogdir)); # # Set up the logging directory and file. # $loginfo{logdir} = $logdir; $loginfo{logfile} ||= "$progname-$tstmp.log"; # # Set up the log handler. # $owllog = new Log::Dispatch( callbacks => sub { my %h = @_; my $msg; $msg = Date::Format::time2str('%B %e %T', time); $msg .= " $realhost $progname: $h{message}\n"; return($msg); } ); # # Build the name of the log file we'll be using. # $loginfo{filename} = File::Spec->catfile($loginfo{logdir},$loginfo{logfile}); # # Make sure the log will rotate periodically. # $owllog->add(Log::Dispatch::FileRotate->new( name => "$pname logfile", min_level => 'debug', mode => 'append', filename => "$loginfo{filename}", size => 2000000, max => 60) ); # # Let the caller use our log. # return($owllog); } #------------------------------------------------------------------------ # Routine: owl_singleton() # # Purpose: This routine will ensure that there's only one instance of # a given Owl program running. If the argument is non-zero, # we'll exit if another instance is running. # sub owl_singleton { my $exitflag = shift; # Exit-on-multiples flag. # # Make sure we have no doppelganger. # if((my $pid = running()) > 0) { exit(2) if($exitflag); return(0); } # # Let the log know we're starting. # if($owllog) { $owllog->warning("-" x 36); $owllog->warning("$progname starting"); } # # Our caller might also want to know we're starting. # return(1); } #------------------------------------------------------------------------ # Routine: owl_getpid() # # Purpose: Return the contents of the pidfile. # sub owl_getpid { my $pid; # Process' id. if(open(PIDFILE,"< $pidfile") == 0) { print STDERR "$NAME: unable to open $pidfile - $!\n"; return(-1); } $pid = ; close(PIDFILE); chomp $pid; return($pid); } #------------------------------------------------------------------------ # Routine: owl_writepid() # # Purpose: Write the pidfile. Complain if we can't write it. # sub owl_writepid { my $pid = $$; # Process id. if(open(PIDFILE,"> $pidfile") == 0) { print STDERR "$NAME: unable to create $pidfile - $!\n"; return(1); } print PIDFILE "$pid\n"; close(PIDFILE); return(0); } #------------------------------------------------------------------------ # Routine: owl_chkdir() # # Purpose: Ensure a specified directory exists. # sub owl_chkdir { my $dirtype = shift; # Type of directory. my $dir = shift; # Directory to check. if($dir eq '') { return(0); } # # Make the directory if it doesn't exist. # If it does, make sure we can use it. # if(! -e $dir) { if(mkdir($dir) == 0) { print STDERR "unable to create $dirtype directory \"$dir\"\n"; return(1) } } elsif((! -w $dir) || (! -x $dir) || (! -d $dir)) { print STDERR "bad $dirtype directory \"$dir\"\n"; return(1); } return(0); } #=============================================================================== # # Un-exported routines. # #------------------------------------------------------------------------ # Routine: conf_dataline() # # Purpose: Handle a "data" line from the config file. # # Type data config values: # 0 - "data" (keyword) # 1 - field keyword # 2 - value # # sub conf_dataline { my $ddir = shift; # Directory maybe from command line. my @atoms = @_; # Components of the data config line. my $atoms = @atoms; # Count of line's atoms. # # Ensure we've got enough fields. # if($atoms < 2) { print STDERR "no values given for \"data\" line\n"; return(1); } # # Get the data directory value and ensure it exists and is usable. # We'll only pick this up if it wasn't specified on the command line. # if($atoms[1] =~ /^dir$/) { # # Command-line options override the config file. # return(0) if(defined($ddir)); $datadir = $atoms[2]; } elsif($atoms[1] =~ /^archive$/) { $archdir = $atoms[2]; } elsif($atoms[1] =~ /^interval$/) { $transfer_interval = $atoms[2]; if($transfer_interval < $MIN_INTERVAL) { print STDERR "data transfer interval ($transfer_interval) is less than minimum allowed ($MIN_INTERVAL)\n"; return(1) } } elsif($atoms[1] =~ /^sensors$/) { $sensorsdir = $atoms[2]; } return(0); } #------------------------------------------------------------------------ # Routine: conf_hostline() # # Purpose: Handle a "host" line from the config file. # # Type host config values: # 0 - "host" (keyword) # 1 - field keyword # 2 - value # # sub conf_hostline { my @atoms = @_; # Components of the host config line. my $atoms = @atoms; # Count of line's atoms. my $keyword; # Line's field keyword. # # Ensure we've got enough fields. # if($atoms < 2) { print STDERR "no values given for \"host\" line\n"; return(1); } # # We don't need the line keyword, but we do need the field keyword. # shift @atoms; $keyword = shift @atoms; # # Pick up one of the host configuration values. # if($keyword =~ /^name$/i) { $hostname = $atoms[0]; } elsif($keyword =~ /^dnstimer-args$/i) { $dnstimerargs = join(' ', @atoms); } elsif($keyword =~ /^transfer-args$/i) { $transferargs = join(' ', @atoms); } elsif($keyword =~ /^transfer-mgr-args$/i) { $transfermgrargs = join(' ', @atoms); } elsif($keyword =~ /^admin$/i) { $admins = join(' ', @atoms); } elsif($keyword =~ /^hesitation$/i) { $hesitation = $atoms[0]; } elsif($keyword =~ /^hibernation$/i) { $hibernation = $atoms[0]; } elsif($keyword =~ /^quickcount$/i) { $quickcount = $atoms[0]; } elsif($keyword =~ /^quickseconds$/i) { $quickseconds = $atoms[0]; } else { print STDERR "unknown keyword given for \"host\" line: $keyword\n"; return(1); } return(0); } #------------------------------------------------------------------------ # Routine: conf_logline() # # Purpose: Handle a "log" line from the config file. # # Type log config values: # 0 - "log" (keyword) # 1 - field keyword # 2 - value # # sub conf_logline { my $ldir = shift; # Directory maybe from command line. my @atoms = @_; # Components of the log config line. my $atoms = @atoms; # Count of line's atoms. # # Ensure we've got enough fields. # if($atoms < 2) { print STDERR "no values given for \"log\" line\n"; return(1); } # # Get the log directory value and ensure it exists and is usable. # We'll only pick this up if it wasn't specified on the command line. # if($atoms[1] =~ /^dir$/i) { # # Command-line options override the config file. # return(0) if(defined($ldir)); $logdir = $atoms[2]; } return(0); } #------------------------------------------------------------------------ # Routine: conf_queryline() # # Purpose: Handle a "query" line from the config file. # # Type target config values: # 0 - "query" (keyword) # 1 - hostname of target # 2 - nameserver to query for target # 3 - type of query (optional) # 4 - keyword (optional) # 5 - value (optional) # sub conf_queryline { my @atoms = @_; # Components of the log config line. my $atoms = @atoms; # Count of line's atoms. my $target; # Target name. my $nsname; # Nameserver's name. my $qtype; # Query type. my $interval; # Entry's query interval. my $timeout; # Entry's query timeout. my $rollint; # Datafile rollover interval. # # Ensure we've got at least target and nameserver names for this entry. # if($atoms < 2) { print STDERR "owl_readconfig: no target or nameserver given for \"target\" line\n"; return(1); } elsif($atoms < 3) { print STDERR "owl_readconfig: no nameserver name given for \"target\" line\n"; return(1); } # # Get the target. # shift @atoms; $target = shift @atoms; # # Get the nameserver and ensure it's okay. # $nsname = shift @atoms; $nsname = "$nsname.$NSBASE" if($nsname =~ /^[a-m]$/i); # # Get the query type and ensure it's okay. # if(@atoms > 0) { $qtype = shift @atoms; $qtype = uc($qtype); if(! defined($dnsqueries{$qtype})) { print STDERR "owl_readconfig: invalid query type \"$qtype\" for $target:$nsname target\n"; return(1); } } # # Pick up the rest of the arguments. # $interval = shift @atoms if(@atoms > 0); $timeout = shift @atoms if(@atoms > 0); $rollint = shift @atoms if(@atoms > 0); # # Account for default query type and missing query type. # if(($qtype eq '') || ($qtype eq '-')) { $qtype = $DEF_QUERYTYPE; } # # Account for default interval and missing interval. # if(($interval eq '') || ($interval eq '-')) { $interval = $DEF_QUINT; } # # Account for default timeout and missing timeout. # if(($timeout eq '') || ($timeout eq '-')) { $timeout = $interval / 2; } # # Account for default rollover interval and missing rollover interval. # if(($rollint eq '') || ($rollint eq '-')) { $rollint = $DEF_ROLLINT; } else { $rollint *= 60; } # # Save the data for this entry. # push @cf_targets, $target; push @cf_servers, $nsname; push @cf_qtypes, $qtype; push @cf_intervals, $interval; push @cf_timeouts, $timeout; push @cf_rollints, $rollint; push @cf_states, 1; return(0); } #------------------------------------------------------------------------ # Routine: conf_remoteline() # # Purpose: Handle a "remote" line from the config file. # # Type remote config values: # 0 - "remote" (keyword) # 1 - field keyword # 2 - value # # sub conf_remoteline { my @atoms = @_; # Components of the remote config line. my $atoms = @atoms; # Count of line's atoms. my $keyword; # Line's field keyword. # # Ensure we've got enough fields. # if($atoms < 2) { print STDERR "no values given for \"remote\" line\n"; return(1); } # # We don't need the line keyword, but we do need the field keyword. # shift @atoms; $keyword = shift @atoms; # # Pull out the value. # if($keyword =~ /^heartbeat$/i) { push @heartbeaturls, $atoms[0]; } elsif($keyword =~ /^ssh-user$/i) { push @sshusers, join(' ', @atoms); } else { print STDERR "invalid keyword given for \"remote\" line\n"; return(1); } return(0); } #------------------------------------------------------------------------ # Routine: running() # # Purpose: Check if another instance of a program is running. If so, # we'll return the pid of that instance. If not, return zero. # We check the running status by sending it signal 0. # # Return Values: # -1 pidfile is not readable # 0 program isn't running (pidfile doesn't exist OR # pidfile contains stale pid) # pid program is running # sub running { my $pf = shift; # Pid file to check. my $opid; # Process id in file. # # Get the pidfile to check. If we weren't passed one, we'll use # the currently defined pidfile; otherwise, we'll use what we were # given. # $pf = $pidfile if(! defined($pf)); # # If the pidfile doesn't exist, we'll assume we aren't running already. # return(0) if(! -e $pf); # # Ensure the pidfile is readable. # if(! -r $pf) { print STDERR "$progname: pidfile $pf is not readable\n"; return(-1); } # # Get the pid from the pidfile. # $opid = `cat $pf`; chomp $opid; # # If the pidfile exists, we'll check try to send it a signal to # see if it's still alive. If the pid is an active process, we'll # return the process' id. Otherwise, we'll return 0. # return($opid) if(kill(0,$opid) == 1); return(0); } 1; #-------------------------------------------------------------------------- =pod =head1 NAME owlutils - Utility routines for Owl programs. =head1 SYNOPSIS use owlutils; owl_setup('owl-dnstimer', 'conf', 'data-2011', 'logfiles'); owl_readconfig('owl.conf',undef,'log-data'); owl_running('owl-sensord'); owl_singleton($exitflag); owl_chkdir('archive','oldfiles'); owl_setlog('owl-dnstimer'); owl_getpid(); owl_writepid(); owl_halt('owl-dnstimer'); owl_printdefs(); =head1 DESCRIPTION The B module provides a set of common routines for the Owl programs. These routines provide for a variety of things, such as program initialization, ensuring only one instance of a particular program is running, manipulation of process-id files. =head1 DEFAULTS The B module contains definitions for several defaults used by the Owl programs. There are externally available defaults and internal-only defaults. =head2 External Defaults Externally available defaults may be referenced in this manner: $owlutils::DEF_DATADIR The default directories are relative to the B directory from which the Owl programs are executed. The B Perl module is used to locate this starting-point directory. DEF_ARCHDIR "$FindBin::Bin/../old.data" Default archive directory. DEF_CONFDIR "$FindBin::Bin/../conf" Default config directory. DEF_DATADIR "$FindBin::Bin/../data" Default data directory. DEF_LOGDIR "$FindBin::Bin/../log" Default log directory. DEF_SENSORSDIR "$FindBin::Bin/../sensors" Default sensors data directory. DEF_CONFIG "owl.conf" Default config file. =head2 Internal Defaults Internal-only defaults are used by B for such cases as providing default values for configuration entries. As the name implies, these are not available outside B. Default interval between transfers 60 seconds Minimum interval between transfers 60 seconds Default query interval 60 seconds Minimum query interval 10 seconds Default query timeout is half the query interval. Minimum query timeout 60 seconds Minimum file rollover interval 10 minutes Default DNS query type A records =head1 CONFIGURATION FILE DATA The data from the parsed Owl configuration file may be referenced externally to B. Most of the fields are independent, but several arrays are tied together. Most of these configuration data may be referenced in this manner: $owlutils::confdir @owlutils::heartbeaturls =head2 Associated Arrays The associated arrays of Owl configuration data hold the contents of the I lines from the configuration file. They are associated in that a particular I line has its data distributed across the arrays all at the same index. Therefore, I<$cf_servers[4]> holds a datum for the same I line as I<$cf_targets[4]> and I<$cf_qtypes[4]>. If a I line does not contain data fields for each array, then a default value will be used. Data set from a I line: @cf_targets List of targets. @cf_servers List of nameservers. @cf_qtypes List of DNS query types. @cf_intervals List of query intervals. @cf_timeouts List of query timeouts. @cf_rollints Datafile rollover interval. Data set according to the validity of the associated I line: @cf_states State of targets. =head2 Independent Data The independent configuration data are, roughly speaking, unrelated to each other. Data specified by calling programs or built by B: $archdir Archive directory. $confdir Configuration directory. $conffile Configuration file. $datadir Data directory. $logdir Log directory. $pidfile Filename of process-id file. $hesitation Sleep time between executions. $hibernation Sleep time for minion execution problems. $quickcount Consecutive quick executions before pausing. $quickseconds Seconds that make a quick execution. Data specified on a I line: $admins Administrator email addresses. $dnstimerargs Arguments for the owl-dnstimer daemon. $hostname Name of this host. $transferargs Arguments for owl-transfer daemon. $transfermgrargs Arguments for owl-transfer-mgr daemon. Data specified on a I line: $datadir Data directory. $sensorsdir Sensors data directory. $transfer_interval Actual transfer interval. Data specified on a I line: $logdir Log directory. Data specified on a I line: @heartbeaturls URLs for heartbeat to remote hosts. @sshusers Users on remote hosts for data transfer. =head1 INTERFACES =over 4 =item I I will ensure that the specified directory I exists. If it doesn't exist, I will attempt to create the directory. If it does exist, I will ensure that it is a writable, searchable directory. The I parameter gives a little information about the named directory and is only used in error messages. Return Values: 0 - The directory is a writable, searchable directory. This return value is also given if no directory name is specified. 1 - The directory could not be created. This is also given if the directory name was not a directory, was not searchable, or was not writable. =item I I will return the process id stored in the process-id file for the running Owl program. If it couldn't open the file, then -1 will be returned. =item I I will halt all instances of the named Owl program. It tries to send SIGHUP to the program and reports the success or failure of the attempt. This assumes that SIGHUP will (soon) cause the named program to stop execution. Return Values: 0 - Unable to halt the specified program. This is also used if a non-Owl program is named. >0 - Program halted; the count of halted programs is returned. =item I This routine prints the default values used by this module, then it exits. =item I I reads an Owl configuration file and parses its contents. Several classes of configuration data are available. Data constructed at program compile-time: $owlutils::confdir - Owl configuration directory $owlutils::conffile - Owl configuration file $owlutils::logdir - log directory $owlutils::pidfile - program's process-id file %owlutils::loginfo - log file information Data from "host" lines: $owlutils::admins - email addresses for Owl administrators $owlutils::dnstimerargs - arguments for the owl-dnstimer daemon $owlutils::hesitation - time between Owl daemon executions $owlutils::hibernation - sleep time upon execution problems $owlutils::quickcount - count of quick executions before pausing $owlutils::quickseconds - seconds count that makes a quick execution $owlutils::hostname - name of this host $owlutils::transferargs - arguments for the owl-transfer daemon $owlutils::transfermgrargs - arguments for the owl-transfer-mgr daemon Data from "data" lines: $owlutils::datadir - data directory $owlutils::sensorsdir - sensors data directory $owlutils::transfer_interval - transfer interval Data from "log" lines: @owlutils::logdir - log directory Data from "query" lines: @owlutils::cf_intervals - query intervals from "query" lines @owlutils::cf_qtypes - DNS query types from "query" lines @owlutils::cf_rollints - interval from "query" lines @owlutils::cf_servers - nameservers from "query" lines @owlutils::cf_states - targets from "query" lines @owlutils::cf_targets - targets from "query" lines @owlutils::cf_timeouts - query timeouts from "query" lines Data from "remote" lines: @owlutils::heartbeaturls - URLs for sending heartbeats to remote hosts @owlutils::sshusers - contact info for transferring data to remote hosts See B for a definition of the configuration file's format. I is the name of the configuration file to read. The I parameter is assumed to be the data directory given as a command-line option. If none was given, this should be undefined. If a data directory wasn't specified on the command line nor in the configuration file, then a default value is used. The I parameter is assumed to be the log directory given as a command-line option. If none was given, this should be undefined. If a log directory wasn't specified on the command line nor in the configuration file, then a default value is used. Blank lines and lines starting with a pound sign are ignored. The return value is the number of errors encountered when reading and parsing the configuration file. Calling programs should not trust an Owl configuration data if any errors were encountered while reading the configuration file. =item I This interface returns a boolean value indicating if the Owl program named I is executing. This is determined by checking for a process-id file in the configuration directory and then checking if the program is running. Signal 0 is sent to the process id to determine if the program is running. Return Values: 0 - The program does not have a process-id file. Signal 0 could not be sent to the program. 1 - Signal 0 was successfully sent to the process id. =item I This routine initializes logging for an Owl program. The log file will be rotated when it reaches a size of 2MB, and a maximum of 60 files will be kept. The %loginfo hash is given values for the log file name and location. The name of the log file has this format: /-YYMMDD.log The Log::Dispatch object used to manage the log file is returned. =item I This routine initializes a few variables used by the rest of this module. It should be called prior to any of the other routines. The variable naming the program's process-id file will be built, following this format: /.pid I is the name of the program calling I. I is the name of the configuration directory. If this is undefined, then the default value will be used. I is the name of the data directory. If this is undefined, then the default value will be used. I is the name of the log directory. If this is undefined, then the default value will be used. =item I I ensures that there's only one instance of the calling Owl program is running. (The program name is taken from the I argument passed to a prior invocation of I.) If the argument is non-zero the calling program will exit if another instance is running. Return Values: 0 - Another Owl program with the same name is running. 1 - Another Owl program with the same name is not running. =item I This routine creates a new process-id file for the calling program and writes the process id to the file. Return Values: 0 - The process-id file was created and the process id written to the file. 1 - The process-id file could not be created. =back =head1 SEE ALSO B, B, B, B B B, B =head1 COPYRIGHT Copyright 2012-2013 SPARTA, Inc. All rights reserved. =head1 AUTHOR Wayne Morrison, tewok@tislabs.com =cut dnssec-tools-2.0/apps/ssh/0000775000237200023720000000000012111172554015657 5ustar hardakerhardakerdnssec-tools-2.0/apps/ssh/ssh-dnssec.pat0000664000237200023720000005556512026144043020454 0ustar hardakerhardakerdiff -u -r -b -w -p -d '--exclude-from=/home/rstory/.rcfiles/diff-ignore' -I ''\''$Id[:$]'\''' openssh-5.8p2-redhat/configure.ac openssh-5.8p2-dnssec/configure.ac --- openssh-5.8p2-redhat/configure.ac 2012-08-21 10:50:30.069985810 -0400 +++ openssh-5.8p2-dnssec/configure.ac 2012-08-20 16:43:40.425939065 -0400 @@ -3560,6 +3560,44 @@ if test "x$ac_cv_libc_defines_sys_nerr" AC_DEFINE(HAVE_SYS_NERR, 1, [Define if your system defines sys_nerr]) fi +LIBVAL_MSG="no" +# Check whether user wants DNSSEC local validation support +AC_ARG_WITH(local-dnssec-validation, + [ --with-local-dnssec-validation Enable local DNSSEC validation using libval], + [ if test "x$withval" != "xno" ; then + if test "x$withval" != "xyes" ; then + CPPFLAGS="$CPPFLAGS -I${withval}" + LDFLAGS="$LDFLAGS -L${withval}" + if test ! -z "$need_dash_r" ; then + LDFLAGS="$LDFLAGS -R${withval}" + fi + if test ! -z "$blibpath" ; then + blibpath="$blibpath:${withval}" + fi + fi + AC_CHECK_HEADERS(validator/validator.h) + if test "$ac_cv_header_validator_validator_h" != yes; then + AC_MSG_ERROR(Cannot find validator.h) + fi + AC_CHECK_LIB(sres, query_send) + if test "$ac_cv_lib_sres_query_send" != yes; then + AC_MSG_ERROR(Cannot find libsres) + fi + LIBVAL_SUFFIX="" + AC_CHECK_LIB(val, p_val_status,LIBS="$LIBS -lval", + [ AC_CHECK_LIB(pthread, pthread_rwlock_init) + AC_CHECK_LIB(val-threads, p_val_status, + [ LIBS="$LIBS -lval-threads -lpthread" + LIBVAL_SUFFIX="-threads"], + AC_MSG_ERROR(Cannot find libval or libval-threads)) + ]) + AC_CHECK_LIB(resolv, res_query,LIBS="$LIBS -lresolv") + AC_DEFINE(DNSSEC_LOCAL_VALIDATION, 1, + [Define if you want local DNSSEC validation support]) + LIBVAL_MSG="yes, libval${LIBVAL_SUFFIX}" + fi + ]) + # Check libraries needed by DNS fingerprint support AC_SEARCH_LIBS(getrrsetbyname, resolv, [AC_DEFINE(HAVE_GETRRSETBYNAME, 1, @@ -4466,6 +4504,7 @@ echo " MD5 password support echo " libedit support: $LIBEDIT_MSG" echo " Solaris process contract support: $SPC_MSG" echo " Solaris project support: $SP_MSG" +echo " Local DNSSEC validation support: $LIBVAL_MSG" echo " IP address in \$DISPLAY hack: $DISPLAY_HACK_MSG" echo " Translate v4 in v6 hack: $IPV4_IN6_HACK_MSG" echo " BSD Auth support: $BSD_AUTH_MSG" diff -u -r -b -w -p -d '--exclude-from=/home/rstory/.rcfiles/diff-ignore' -I ''\''$Id[:$]'\''' openssh-5.8p2-redhat/dns.c openssh-5.8p2-dnssec/dns.c --- openssh-5.8p2-redhat/dns.c 2012-08-21 10:50:30.055985926 -0400 +++ openssh-5.8p2-dnssec/dns.c 2012-08-20 16:46:17.900640952 -0400 @@ -35,6 +35,10 @@ #include #include +#ifdef DNSSEC_LOCAL_VALIDATION +# include +#endif + #include "xmalloc.h" #include "key.h" #include "dns.h" @@ -178,7 +182,11 @@ verify_host_key_dns(const char *hostname u_int counter; int result; unsigned int rrset_flags = 0; +#ifndef DNSSEC_LOCAL_VALIDATION struct rrsetinfo *fingerprints = NULL; +#else + struct val_result_chain *val_res, *val_results = NULL; +#endif u_int8_t hostkey_algorithm; u_int8_t hostkey_digest_type; @@ -201,6 +209,7 @@ verify_host_key_dns(const char *hostname return -1; } +#ifndef DNSSEC_LOCAL_VALIDATION /* * Original getrrsetbyname function, found on OpenBSD for example, * doesn't accept any flag and prerequisite for obtaining AD bit in @@ -220,7 +229,7 @@ verify_host_key_dns(const char *hostname } if (fingerprints->rri_flags & RRSET_VALIDATED) { - *flags |= DNS_VERIFY_SECURE; + *flags |= (DNS_VERIFY_SECURE|DNS_VERIFY_TRUSTED); debug("found %d secure fingerprints in DNS", fingerprints->rri_nrdatas); } else { @@ -269,6 +278,90 @@ verify_host_key_dns(const char *hostname xfree(hostkey_digest); /* from key_fingerprint_raw() */ freerrset(fingerprints); +#else /* DNSSEC_LOCAL_VALIDATION */ + + result = val_resolve_and_check(NULL, hostname, DNS_RDATACLASS_IN, + DNS_RDATATYPE_SSHFP, 0, &val_results); + if (result != VAL_NO_ERROR){ + verbose("DNS lookup error: %s", p_ac_status(val_results->val_rc_status)); + return -1; + } + + /* Initialize host key parameters */ + if (!dns_read_key(&hostkey_algorithm, &hostkey_digest_type, + &hostkey_digest, &hostkey_digest_len, hostkey)) { + error("Error calculating host key fingerprint."); + val_free_result_chain(val_results); + return -1; + } + + counter = 0; + for (val_res = val_results; val_res; val_res = val_res->val_rc_next) { + struct val_rrset_rec *val_rrset; + struct val_rr_rec *rr; + + val_rrset = val_res->val_rc_rrset; + if ((NULL == val_rrset) || (NULL == val_rrset->val_rrset_data)) + continue; + + for(rr = val_rrset->val_rrset_data; rr; + rr = rr->rr_next) { + + if (NULL == rr->rr_rdata) + continue; + + /* + * Extract the key from the answer. Ignore any badly + * formatted fingerprints. + */ + if (!dns_read_rdata(&dnskey_algorithm, &dnskey_digest_type, + &dnskey_digest, &dnskey_digest_len, + rr->rr_rdata, + rr->rr_rdata_length)) { + verbose("Error parsing fingerprint from DNS."); + continue; + } + + ++counter; + + /* Check if the current key is the same as the given key */ + if (hostkey_algorithm == dnskey_algorithm && + hostkey_digest_type == dnskey_digest_type) { + if (hostkey_digest_len == dnskey_digest_len && + memcmp(hostkey_digest, dnskey_digest, + hostkey_digest_len) == 0) { + debug("found matching fingerprints in DNS"); + *flags |= DNS_VERIFY_MATCH; + } + } + xfree(dnskey_digest); + } + if (val_istrusted(val_res->val_rc_status)) { + /* + * local validation can result in a non-secure, but trusted + * response. For example, in a corporate network the authoritative + * server for internal DNS may be on the internal network, behind + * a firewall. Local validation policy can be configured to trust + * these results without using DNSSEC to validate them. + */ + *flags |= DNS_VERIFY_TRUSTED; + if (val_isvalidated(val_res->val_rc_status)) { + *flags |= DNS_VERIFY_SECURE; + debug("found %d trusted fingerprints in DNS", counter); + } else { + debug("found %d trusted, but not validated, fingerprints in DNS", counter); + } + } else { + debug("found %d un-trusted fingerprints in DNS", counter); + } + } + if(counter) + *flags |= DNS_VERIFY_FOUND; + + xfree(hostkey_digest); /* from key_fingerprint_raw() */ + val_free_result_chain(val_results); +#endif /* DNSSEC_LOCAL_VALIDATION */ + if (*flags & DNS_VERIFY_FOUND) if (*flags & DNS_VERIFY_MATCH) debug("matching host key fingerprint found in DNS"); diff -u -r -b -w -p -d '--exclude-from=/home/rstory/.rcfiles/diff-ignore' -I ''\''$Id[:$]'\''' openssh-5.8p2-redhat/dns.h openssh-5.8p2-dnssec/dns.h --- openssh-5.8p2-redhat/dns.h 2010-02-26 15:55:05.000000000 -0500 +++ openssh-5.8p2-dnssec/dns.h 2012-08-20 16:43:40.427939048 -0400 @@ -45,6 +45,7 @@ enum sshfp_hashes { #define DNS_VERIFY_FOUND 0x00000001 #define DNS_VERIFY_MATCH 0x00000002 #define DNS_VERIFY_SECURE 0x00000004 +#define DNS_VERIFY_TRUSTED 0x00000008 int verify_host_key_dns(const char *, struct sockaddr *, Key *, int *); int export_dns_rr(const char *, Key *, FILE *, int); diff -u -r -b -w -p -d '--exclude-from=/home/rstory/.rcfiles/diff-ignore' -I ''\''$Id[:$]'\''' openssh-5.8p2-redhat/readconf.c openssh-5.8p2-dnssec/readconf.c --- openssh-5.8p2-redhat/readconf.c 2012-08-21 10:50:30.077985743 -0400 +++ openssh-5.8p2-dnssec/readconf.c 2012-08-20 16:43:40.427939048 -0400 @@ -134,6 +134,7 @@ typedef enum { oServerAliveInterval, oServerAliveCountMax, oIdentitiesOnly, oSendEnv, oControlPath, oControlMaster, oControlPersist, oHashKnownHosts, + oStrictDnssecChecking, oAutoAnswerValidatedKeys, oTunnel, oTunnelDevice, oLocalCommand, oPermitLocalCommand, oVisualHostKey, oUseRoaming, oZeroKnowledgePasswordAuthentication, oKexAlgorithms, oIPQoS, @@ -254,6 +255,13 @@ static struct { #else { "zeroknowledgepasswordauthentication", oUnsupported }, #endif +#ifdef DNSSEC_LOCAL_VALIDATION + { "strictdnssecchecking", oStrictDnssecChecking }, + { "autoanswervalidatedkeys", oAutoAnswerValidatedKeys }, +#else + { "strictdnssecchecking", oUnsupported }, + { "autoanswervalidatedkeys", oUnsupported }, +#endif { "kexalgorithms", oKexAlgorithms }, { "ipqos", oIPQoS }, @@ -546,6 +554,14 @@ parse_yesnoask: *intptr = value; break; + case oStrictDnssecChecking: + intptr = &options->strict_dnssec_checking; + goto parse_yesnoask; + + case oAutoAnswerValidatedKeys: + intptr = &options->autoanswer_validated_keys; + goto parse_yesnoask; + case oCompression: intptr = &options->compression; goto parse_flag; @@ -1137,6 +1153,8 @@ initialize_options(Options * options) options->batch_mode = -1; options->check_host_ip = -1; options->strict_host_key_checking = -1; + options->strict_dnssec_checking = -1; + options->autoanswer_validated_keys = -1; options->compression = -1; options->tcp_keep_alive = -1; options->compression_level = -1; @@ -1251,6 +1269,10 @@ fill_default_options(Options * options) options->check_host_ip = 1; if (options->strict_host_key_checking == -1) options->strict_host_key_checking = 2; /* 2 is default */ + if (options->strict_dnssec_checking == -1) + options->strict_dnssec_checking = 2; /* 2 is default */ + if (options->autoanswer_validated_keys == -1) + options->autoanswer_validated_keys = 0; /* 0 is default */ if (options->compression == -1) options->compression = 0; if (options->tcp_keep_alive == -1) diff -u -r -b -w -p -d '--exclude-from=/home/rstory/.rcfiles/diff-ignore' -I ''\''$Id[:$]'\''' openssh-5.8p2-redhat/readconf.h openssh-5.8p2-dnssec/readconf.h --- openssh-5.8p2-redhat/readconf.h 2012-08-21 10:50:30.077985743 -0400 +++ openssh-5.8p2-dnssec/readconf.h 2012-08-20 16:43:40.428939039 -0400 @@ -137,6 +137,9 @@ typedef struct { int use_roaming; + int strict_dnssec_checking; /* Strict DNSSEC checking. */ + int autoanswer_validated_keys; + } Options; #define SSHCTL_MASTER_NO 0 diff -u -r -b -w -p -d '--exclude-from=/home/rstory/.rcfiles/diff-ignore' -I ''\''$Id[:$]'\''' openssh-5.8p2-redhat/sshconnect.c openssh-5.8p2-dnssec/sshconnect.c --- openssh-5.8p2-redhat/sshconnect.c 2012-08-21 10:50:29.844987676 -0400 +++ openssh-5.8p2-dnssec/sshconnect.c 2012-08-20 16:50:14.098693894 -0400 @@ -26,6 +26,10 @@ #include #include +#ifdef DNSSEC_LOCAL_VALIDATION +# include +#endif + #include #include #include @@ -66,6 +70,9 @@ char *client_version_string = NULL; char *server_version_string = NULL; static int matching_host_key_dns = 0; +#ifdef DNSSEC_LOCAL_VALIDATION +static int validated_host_key_dns = 0; +#endif static pid_t proxy_command_pid = 0; @@ -77,6 +84,7 @@ extern uid_t original_effective_uid; static int show_other_keys(struct hostkeys *, Key *); static void warn_changed_key(Key *); +static int confirm(const char *prompt); /* * Connect to the given ssh server using a proxy command. @@ -342,7 +350,11 @@ ssh_connect(const char *host, struct soc int on = 1; int sock = -1, attempt; char ntop[NI_MAXHOST], strport[NI_MAXSERV]; - struct addrinfo hints, *ai, *aitop; + struct addrinfo hints; + struct addrinfo *ai, *aitop = NULL; +#ifdef DNSSEC_LOCAL_VALIDATION + val_status_t val_status; +#endif debug2("ssh_connect: needpriv %d", needpriv); @@ -357,9 +369,59 @@ ssh_connect(const char *host, struct soc hints.ai_socktype = SOCK_STREAM; hints.ai_flags = AI_V4MAPPED | AI_ADDRCONFIG; snprintf(strport, sizeof strport, "%u", port); +#ifndef DNSSEC_LOCAL_VALIDATION if ((gaierr = getaddrinfo(host, strport, &hints, &aitop)) != 0) fatal("%s: Could not resolve hostname %.100s: %s", __progname, host, ssh_gai_strerror(gaierr)); +#else + gaierr = val_getaddrinfo(NULL, host, strport, &hints, &aitop, + &val_status); + debug2("ssh_connect: gaierr %d, val_status %d / %s; trusted: %d", + gaierr, val_status, p_val_status(val_status), + val_istrusted(val_status)); + if (gaierr != 0) { + if (VAL_GETADDRINFO_HAS_STATUS(gaierr) && + !val_istrusted(val_status)) { + error("@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@"); + error("@ WARNING: UNTRUSTED ERROR IN DNS RESOLUTION FOR HOST! @"); + error("@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@"); + error("The authenticity of DNS response is not trusted (%s).", + p_val_status(val_status)); + } + fatal("%s: Could not resolve hostname %.100s: %s", __progname, + host, ssh_gai_strerror(gaierr)); + } + if (!val_istrusted(val_status)) { + error("@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@"); + error("@ WARNING: UNTRUSTED DNS RESOLUTION FOR HOST IP ADRRESS! @"); + error("@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@"); + error("The authenticity of DNS data for the host '%.200s' " + "can't be established.", host); + if (options.strict_dnssec_checking == 1) { + fatal("DNS resolution is not trusted (%s) " + "and you have requested strict checking", + p_val_status(val_status)); + } else if (options.strict_dnssec_checking == 2) { + char msg[1024]; + for (ai = aitop; ai; ai = ai->ai_next) { + if (ai->ai_family != AF_INET && ai->ai_family != AF_INET6) + continue; + if (getnameinfo(ai->ai_addr, ai->ai_addrlen, + ntop, sizeof(ntop), strport, sizeof(strport), + NI_NUMERICHOST|NI_NUMERICSERV) != 0) { + error("ssh_connect: getnameinfo failed"); + continue; + } + error(" IP address %s port %s", ntop, strport); + } + snprintf(msg,sizeof(msg), + "Are you sure you want to attempt to connect " + "(yes/no)? "); + if (!confirm(msg)) + return (-1); + } + } +#endif /* DNSSEC_LOCAL_VALIDATION */ for (attempt = 0; attempt < connection_attempts; attempt++) { if (attempt > 0) { @@ -808,6 +870,7 @@ check_host_key(char *hostname, struct so } break; case HOST_NEW: + debug("Host '%.200s' new.", host); if (options.host_key_alias == NULL && port != 0 && port != SSH_DEFAULT_PORT) { debug("checking without port identifier"); @@ -852,6 +915,17 @@ check_host_key(char *hostname, struct so "No matching host key fingerprint" " found in DNS.\n"); } +#ifdef DNSSEC_LOCAL_VALIDATION + if (options.autoanswer_validated_keys && + validated_host_key_dns && matching_host_key_dns) { + snprintf(msg, sizeof(msg), + "The authenticity of host '%.200s (%s)' was " + " validated via DNSSEC%s", + host, ip, msg1); + logit("%s", msg); + xfree(fp); + } else { +#endif snprintf(msg, sizeof(msg), "The authenticity of host '%.200s (%s)' can't be " "established%s\n" @@ -867,6 +941,9 @@ check_host_key(char *hostname, struct so xfree(fp); if (!confirm(msg)) goto fail; +#ifdef DNSSEC_LOCAL_VALIDATION + } +#endif } /* * If not in strict mode, add the key automatically to the @@ -941,6 +1018,8 @@ check_host_key(char *hostname, struct so key_msg = "is unchanged"; else key_msg = "has a different value"; +#ifdef DNSSEC_LOCAL_VALIDATION + if (!validated_host_key_dns) { error("@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@"); error("@ WARNING: POSSIBLE DNS SPOOFING DETECTED! @"); error("@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@"); @@ -949,6 +1028,19 @@ check_host_key(char *hostname, struct so error("%s. This could either mean that", key_msg); error("DNS SPOOFING is happening or the IP address for the host"); error("and its host key have changed at the same time."); + } + else { +#endif + error("@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@"); + error("@ WARNING: HOST IP ADDRESS HAS CHANGED! @"); + error("@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@"); + error("The %s host key for %s has changed,", type, host); + error("and the key for the according IP address %s", ip); + error("%s. The IP address for the host", key_msg); + error("and its host key have changed at the same time."); +#ifdef DNSSEC_LOCAL_VALIDATION + } +#endif if (ip_status != HOST_NEW) error("Offending key for IP in %s:%lu", ip_found->file, ip_found->line); @@ -964,11 +1056,53 @@ check_host_key(char *hostname, struct so * If strict host key checking is in use, the user will have * to edit the key manually and we can only abort. */ +#ifdef DNSSEC_LOCAL_VALIDATION + if ((options.strict_host_key_checking == 2) && + options.autoanswer_validated_keys && + matching_host_key_dns && validated_host_key_dns) { + logit("The authenticity of host '%.200s (%s)' was " + " validated via DNSSEC.", + host, ip); + /* + * If not in strict mode, add the key automatically to the + * local known_hosts file. + */ + if (options.check_host_ip && ip_status == HOST_NEW) { + snprintf(hostline, sizeof(hostline), "%s,%s", + host, ip); + hostp = hostline; + if (options.hash_known_hosts) { + /* Add hash of host and IP separately */ + r = add_host_to_hostfile(user_hostfile, host, + host_key, options.hash_known_hosts) && + add_host_to_hostfile(user_hostfile, ip, + host_key, options.hash_known_hosts); + } else { + /* Add unhashed "host,ip" */ + r = add_host_to_hostfile(user_hostfile, + hostline, host_key, + options.hash_known_hosts); + } + } else { + r = add_host_to_hostfile(user_hostfile, host, host_key, + options.hash_known_hosts); + hostp = host; + } + + if (!r) + logit("Failed to add the host to the list of known " + "hosts (%.500s).", user_hostfile); + else + logit("Warning: Permanently added '%.200s' (%s) to the " + "list of known hosts.", hostp, type); + } + else +#endif if (options.strict_host_key_checking) { error("%s host key for %.200s has changed and you have " "requested strict checking.", type, host); goto fail; - } + } else { continue_unsafe: /* @@ -1032,6 +1166,7 @@ check_host_key(char *hostname, struct so * by that sentence, and ask the user if he/she wishes to * accept the authentication. */ + } break; case HOST_FOUND: fatal("internal error"); @@ -1056,10 +1191,19 @@ check_host_key(char *hostname, struct so error("Exiting, you have requested strict checking."); goto fail; } else if (options.strict_host_key_checking == 2) { +#ifdef DNSSEC_LOCAL_VALIDATION + if (options.autoanswer_validated_keys && + matching_host_key_dns && validated_host_key_dns) { + logit("%s", msg); + } else { +#endif strlcat(msg, "\nAre you sure you want " "to continue connecting (yes/no)? ", sizeof(msg)); if (!confirm(msg)) goto fail; +#ifdef DNSSEC_LOCAL_VALIDATION + } +#endif } else { logit("%s", msg); } @@ -1114,12 +1258,45 @@ verify_host_key(char *host, struct socka if (!key_is_cert(host_key) && options.verify_host_key_dns && verify_host_key_dns(host, hostaddr, host_key, &flags) == 0) { +#ifdef DNSSEC_LOCAL_VALIDATION + /* + * local validation can result in a non-secure, but trusted + * response. For example, in a corporate network the + * authoritative server for internal DNS may be on the internal + * network, behind a firewall. Local validation policy can be + * configured to trust these results without using DNSSEC to + * validate them. + */ + if (!(flags & DNS_VERIFY_TRUSTED)) { + error("@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@"); + error("@ WARNING: UNTRUSTED DNS RESOLUTION FOR HOST KEY! @"); + error("@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@"); + } + if (flags & DNS_VERIFY_SECURE) + validated_host_key_dns = 1; +#endif + if (flags & DNS_VERIFY_FOUND) { if (options.verify_host_key_dns == 1 && flags & DNS_VERIFY_MATCH && flags & DNS_VERIFY_SECURE) +#ifndef DNSSEC_LOCAL_VALIDATION + return 0; +#else + { + if (flags & DNS_VERIFY_MATCH) + matching_host_key_dns = 1; + if (options.autoanswer_validated_keys) + return check_host_key(host, hostaddr, + options.port, + host_key, RDRW, + options.user_hostfile, + options.system_hostfile); + else return 0; + } +#endif if (flags & DNS_VERIFY_MATCH) { matching_host_key_dns = 1; @@ -1244,9 +1423,18 @@ warn_changed_key(Key *host_key) error("@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@"); error("@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @"); error("@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@"); +#ifdef DNSSEC_LOCAL_VALIDATION + if (matching_host_key_dns && validated_host_key_dns) { + error("Howerver, a matching host key, validated by DNSSEC, was found."); + } + else { +#endif error("IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!"); error("Someone could be eavesdropping on you right now (man-in-the-middle attack)!"); error("It is also possible that a host key has just been changed."); +#ifdef DNSSEC_LOCAL_VALIDATION + } +#endif error("The fingerprint for the %s key sent by the remote host is\n%s%s.", key_type(host_key),key_fingerprint_prefix(), fp); error("Please contact your system administrator."); dnssec-tools-2.0/apps/ssh/README.ssh0000664000237200023720000001266312026144022017335 0ustar hardakerhardakerLocal DNSSEC validation with OpenSSH ==================================== Tested with OpenSSH 6.0p1 (Previous versions tested with OpenSSH 4.5p1, 4.7p1, 5.0p1,5.3p1 and 5.6p1) Introduction ------------ OpenSSH contains support for performing local DNSSEC validation for all DNS lookups (including initial host to IP address and SSHFP key fingerprint lookups). This document contains very brief instructions on how to use this feature. Configuring DNS is out of the scope of this document. Background ---------- A detailed description of DNSSEC is out of scope for this document, but a basic background is provided. DNS response packets are fairly easy to spoof, so an attacker situated in the network path between a ssh client and its configured DNS server could possibly inject DSN response packets, causing the ssh client to connect to another host. For clients which have already connected to the intended server, ssh already provides a warning that the host key has changed. However, a new client might not check the fingerprint presented upon connecting, simply accepting it. The VerifyHostKeyDNS option can be used to check the key fingerprint via DNS, but we've already established that DNS is too easy to spoof. DNSSEC introduces cryptographic signing of DNS records, allowing a resolver to verify that a response has not been spoofed. This is done by configuring 'Trust Anchors', which are know good keys used to sign a zone. Rational for Local Validation ----------------------------- As DNSSEC deployment grows, more ISPs are offering DNS servers which are DNSSEC aware and perform DNSSEC validation. Also, OpenSSH already has code to verify DNS key fingerprint records (SSHFP), so one might wonder why they would want local validation. There are several reasons. - Deployment of DNSSEC is progressing slowly, so end users might not have DNS servers which are capable of, or configured for, DNSSEC processing. - DNSSEC only guarantees the integrity of the DNS response to the DNS server. The response from the DNS server to the local host has no protection. Thus an attacker who can inject packets in the path between a DNS server and a stub resolver can not only redirect the client, but can make it belive a response was authentic! - Even if a DNSSEC server is on a local and trusted network, an end user might not have any influence over local policy. In other words, they might not be able to get a new Trust Anchor configured for a zone which they trust. - A DNSSEC server will not return data to an application for a response which cannot be validated. The means that, to the client, the DNS lookups will appear to have failed, even if the DNS server did get a response. With local validation, the application can distinguish between a non- responsive domain and validation failure. And since ssh performs its own validation of host keys upon connecting to a host, it may be an acceptable risk to return the questionable response to the application, along with a warning, and allow the end user to decide if they want to proceed. Requirements ------------ This code requires that the DNSSEC-Tools resolver and validator libraries and headers be installed. The DNSSEC-Tools package can be obtained from: http://www.dnssec-tools.org/resources/download.html Note that the Perl requirements are not needed if you only want to install/use the resolver and validator libraries. By default, the validator library will use the resolver specified in /etc/resolv.conf when performing DNS queries. If the resolver(s) configured in /etc/resolv.conf are not DNSSEC aware, the validator won't be able to get the data is needs for local validation. In this case, you may need to tweak the RESOLV_CONF definition in the validator library header (dnssec-tools/validator/libval/validator.h) before building and installing the libraries. You can specify an alternate location (eg '/etc/resolv-dnssec.conf') which contains a namesever which is DNSSEC aware. If there is not a DNSSEC aware nameserver you can use, simply leave the file empty, and the library will perform all validation itself, starting from the root nameservers. Using DNSSEC validation ----------------------- The extra validation code in OpenSSH is optional, and must be enabled by specifying --with-local-dnssec-validation when configuring OpenSSH. You may also need to specify the path to the directory where the libraries are installed using '--with-ldflags=-L/path'. # tar xvfz openssh-5.3p1.tar.gz # cd openssh-5.3p1 # patch -p0 < ssh-dnssec.pat # autoconf # autoheader # ./configure --with-local-dnssec-validation --with-ldflags=-L/usr/local/lib/ # make Once configured and built, clients may specify a new option: StrictDnssecChecking. Possible settings include yes, no and ask. Any DNS response which is not trusted will always trigger a warning. If StrictDnssecChecking.is yes, the command will abort. If it is 'ask', they user will be prompted to continue. An example invocation, which will perform validation on both the host lookup and any key fingerprint lookups, would be: ssh -o VerifyHostKeyDNS=ask -o StrictDnssecChecking=ask ssh.example.com Another new option, AutoAnswerValidatedKeys, is used in conjunction with VerifyHostKeyDNS. If VerifyHostKeyDNS is set to 'ask', and AutoAnswerValidatedKeys is set to yes, any time ssh would normally prompt to accept a key, the prompt will be supressed and the key will be accepted if a matching SSHFP host key was found and validated by DNSSEC. Robert Story DNSSEC-Tools Dev SPARTA, Inc. dnssec-tools-2.0/apps/jabberd-2/0000775000237200023720000000000012111172554016612 5ustar hardakerhardakerdnssec-tools-2.0/apps/jabberd-2/jabberd-dnssec.pat0000664000237200023720000003710010571572160022174 0ustar hardakerhardakerIndex: configure.in =================================================================== RCS file: /home/cvs/jabberd2/configure.in,v retrieving revision 1.95 diff -u -p -r1.95 configure.in --- configure.in 21 Aug 2005 10:06:06 -0000 1.95 +++ configure.in 1 Mar 2007 15:28:33 -0000 @@ -63,6 +63,10 @@ for libpath in $split_libs ; do LDFLAGS="-L$libpath $LDFLAGS" done +# Check whether user wants DNSSEC local validation support +AC_ARG_WITH(dnssec-local-validation, + [ --with-dnssec-local-validation Enable local DNSSEC validation using libval (no)], want_dnssec=$enableval, want_dnssec=no) + dnl dnl header checks dnl @@ -132,7 +136,39 @@ if test "$ac_cv_lib_nsl_gethostbyname" = fi dnl res_query has been seen in libc, libbind and libresolv -if test "x-$ac_cv_header_resolv_h" = "x-yes" ; then +if ! test "x-$want-dnssec" = "x-no" ; then +dnl if test "x$withval" != "xyes" ; then +dnl CPPFLAGS="$CPPFLAGS -I${withval}" +dnl LDFLAGS="$LDFLAGS -L${withval}" +dnl if test ! -z "$need_dash_r" ; then +dnl LDFLAGS="$LDFLAGS -R${withval}" +dnl fi +dnl if test ! -z "$blibpath" ; then +dnl blibpath="$blibpath:${withval}" +dnl fi +dnl fi + AC_CHECK_HEADERS(validator/validator.h) + if test "$ac_cv_header_validator_validator_h" != yes; then + AC_MSG_ERROR(Can't find validator.h) + fi + AC_CHECK_LIB(ssl, SHA1_Init) + AC_CHECK_LIB(sres, query_send) + if test "$ac_cv_lib_sres_query_send" != yes; then + AC_MSG_ERROR(Can't find libsres) + fi + AC_CHECK_LIB(val, p_val_status, + LIBS="$LIBS -lval" + have_val_res_query=yes, + [ AC_CHECK_LIB(pthread, pthread_rwlock_init) + AC_CHECK_LIB(val-threads, p_val_status, + have_val_res_query=yes + LIBS="$LIBS -lval-threads -lpthread" + LIBVAL_SUFFIX="-threads", + AC_MSG_ERROR(Can't find libval or libval-threads)) + ]) + AC_DEFINE(DNSSEC_LOCAL_VALIDATION, 1, + [Define if you want local DNSSEC validation support]) +elif test "x-$ac_cv_header_resolv_h" = "x-yes" ; then AC_CHECK_FUNCS(res_query) if test "x-$ac_cv_func_res_query" = "x-yes" ; then have_res_query=yes @@ -174,7 +210,9 @@ if test "x-$ac_cv_header_windns_h" = "x- LIBS="$save_libs"]) fi -if test "x-$have_res_query" = "x-yes" ; then +if test "x-$have_val_res_query" = "x-yes" ; then + AC_DEFINE(HAVE_VAL_RES_QUERY,1,[Define to 1 if you have the 'val_res_query' function.]) +elif test "x-$have_res_query" = "x-yes" ; then AC_DEFINE(HAVE_RES_QUERY,1,[Define to 1 if you have the 'res_query' function.]) elif test "x-$have_dnsquery" = "x-yes" ; then AC_DEFINE(HAVE_DNSQUERY,1,[Define to 1 if you have the 'DnsQuery' function.]) Index: etc/resolver.xml.dist.in =================================================================== RCS file: /home/cvs/jabberd2/etc/resolver.xml.dist.in,v retrieving revision 1.12 diff -u -p -r1.12 resolver.xml.dist.in --- etc/resolver.xml.dist.in 29 Oct 2003 23:30:06 -0000 1.12 +++ etc/resolver.xml.dist.in 1 Mar 2007 15:28:34 -0000 @@ -78,4 +78,14 @@ --> + + + 5 + + + + + Index: resolver/dns.c =================================================================== RCS file: /home/cvs/jabberd2/resolver/dns.c,v retrieving revision 1.8 diff -u -p -r1.8 dns.c --- resolver/dns.c 15 Dec 2004 11:09:13 -0000 1.8 +++ resolver/dns.c 1 Mar 2007 15:28:34 -0000 @@ -48,6 +48,9 @@ #ifdef HAVE_WINDNS_H # include #endif +#ifdef DNSSEC_LOCAL_VALIDATION +# include +#endif /* compare two srv structures, order by priority then by randomised weight */ @@ -72,7 +75,7 @@ static int _srv_compare(const void *a, c /* unix implementation */ -#ifdef HAVE_RES_QUERY +#if defined(HAVE_RES_QUERY) || defined(HAVE_VAL_RES_QUERY) /* older systems might not have these */ #ifndef T_SRV @@ -156,13 +159,16 @@ static void *_srv_rr(dns_packet_t packet } /** the actual resolver function */ -dns_host_t dns_resolve(const char *zone, int query_type) { +dns_host_t dns_resolve(const char *zone, int query_type, resolver_t r) { char host[256]; dns_packet_t packet; int len, qdcount, ancount, an, n; unsigned char *eom, *scan; dns_host_t *reply, first; unsigned int t_type, type, class, ttl; +#ifdef DNSSEC_LOCAL_VALIDATION + val_status_t val_status; +#endif if(zone == NULL || *zone == '\0') return NULL; @@ -186,8 +192,37 @@ dns_host_t dns_resolve(const char *zone, } /* do the actual query */ +/* xxx-rks */ +#ifndef DNSSEC_LOCAL_VALIDATION if((len = res_query(zone, C_IN, t_type, packet.buf, MAX_PACKET)) == -1 || len < sizeof(HEADER)) return NULL; +#else + len = val_res_query(NULL, zone, C_IN, t_type, + packet.buf, MAX_PACKET, &val_status); + + /** val_status not set for internal errors */ + if ((len == -1) && (NETDB_INTERNAL == h_errno)) { + log_write(r->log, LOG_NOTICE, "internal err resolving %s",zone); + return NULL; + } + + /** log validation status */ + log_write(r->log, LOG_DEBUG, "ValStatus: %strusted:%s", + val_istrusted(val_status) ? "" : "not", + p_val_status(val_status)); + + if(len == -1) { + return NULL; + } else if (r->drop_untrusted && !val_istrusted(val_status)) { + log_write(r->log, LOG_NOTICE, "dropping untrusted response for %s",zone); + return NULL; + } else if ((len < sizeof(HEADER)) || (len > MAX_PACKET)) { + log_write(r->log, LOG_NOTICE, "packet size err resolving %s",zone); + return NULL; + } + +#endif /* DNSSEC_LOCAL_VALIDATION */ + /* we got a valid result, containing two types of records - packet * and answer .. we have to skip over the packet records */ @@ -246,6 +281,9 @@ dns_host_t dns_resolve(const char *zone, reply[an]->type = type; reply[an]->class = class; reply[an]->ttl = ttl; +#ifdef DNSSEC_LOCAL_VALIDATION + reply[an]->val_status = val_status; +#endif reply[an]->next = NULL; Index: resolver/dns.h =================================================================== RCS file: /home/cvs/jabberd2/resolver/dns.h,v retrieving revision 1.6 diff -u -p -r1.6 dns.h --- resolver/dns.h 26 Apr 2004 05:05:47 -0000 1.6 +++ resolver/dns.h 1 Mar 2007 15:28:34 -0000 @@ -37,6 +37,9 @@ typedef struct dns_host_st { unsigned int ttl; void *rr; +#ifdef DNSSEC_LOCAL_VALIDATION + unsigned int val_status; +#endif } *dns_host_t; typedef struct dns_srv_st { @@ -48,7 +51,9 @@ typedef struct dns_srv_st { char name[256]; } *dns_srv_t; -extern dns_host_t dns_resolve(const char *zone, int type); +struct resolver_st; + +extern dns_host_t dns_resolve(const char *zone, int type, struct resolver_st *r); extern void dns_free(dns_host_t dns); #endif Index: resolver/resolver.c =================================================================== RCS file: /home/cvs/jabberd2/resolver/resolver.c,v retrieving revision 1.50 diff -u -p -r1.50 resolver.c --- resolver/resolver.c 8 Aug 2005 02:15:17 -0000 1.50 +++ resolver/resolver.c 1 Mar 2007 15:28:35 -0000 @@ -20,6 +20,24 @@ #include "resolver.h" +#ifdef DNSSEC_LOCAL_VALIDATION +# include + +// typedef void (*val_log_cb_t) (struct val_log *logp, int level, +// const char *buf); + +void _resolver_log(struct val_log *logp, int level, const char *str) +{ + resolver_t r; + + if ((NULL == logp) || (NULL == str)) + return; + + r = (resolver_t) logp->a_void; + log_write(r->log, LOG_NOTICE, str); +} +#endif + static sig_atomic_t resolver_shutdown = 0; static sig_atomic_t resolver_lost_router = 0; static sig_atomic_t resolver_logrotate = 0; @@ -116,6 +134,11 @@ static void _resolver_config_expand(reso } r->resolve_aaaa = config_count(r->config, "ipv6") ? 1 : 0; + +#ifdef DNSSEC_LOCAL_VALIDATION + r->drop_untrusted = config_count(r->config, "dnssec.drop_untrusted") ? 1 : 0; + r->dnssec_log_level = j_atoi(config_get_one(r->config, "dnssec.log_level", 0), 5347); +#endif } static int _resolver_sx_callback(sx_t s, sx_event_t e, void *data, void *arg) { @@ -323,17 +346,28 @@ static int _resolver_sx_callback(sx_t s, log_debug(ZONE, "trying srv lookup for %s", zone); - srvs = dns_resolve(zone, DNS_QUERY_TYPE_SRV); + srvs = dns_resolve(zone, DNS_QUERY_TYPE_SRV, r); if(srvs != NULL) { /* resolve to A records */ for(srvscan = srvs; srvscan != NULL; srvscan = srvscan->next) { log_debug(ZONE, "%s has srv %s, doing A lookup", zone, ((dns_srv_t) srvscan->rr)->name); - as = dns_resolve(((dns_srv_t) srvscan->rr)->name, DNS_QUERY_TYPE_A); + as = dns_resolve(((dns_srv_t) srvscan->rr)->name, DNS_QUERY_TYPE_A, r); for(ascan = as; ascan != NULL; ascan = ascan->next) { - log_write(r->log, LOG_NOTICE, "[%s] resolved to %s:%d (%d seconds to live)", zone, (char *) ascan->rr, ((dns_srv_t) srvscan->rr)->port, ascan->ttl); + log_write(r->log, LOG_NOTICE, +#ifdef DNSSEC_LOCAL_VALIDATION + "[%s] resolved to %s:%d (%d seconds to live; %strusted:%s)", + zone, (char *) ascan->rr, + ((dns_srv_t) srvscan->rr)->port, ascan->ttl, + val_istrusted(ascan->val_status) ? "" : "not ", + p_val_status(ascan->val_status) +#else + "[%s] resolved to %s:%d (%d seconds to live)", + zone, (char *) ascan->rr, ((dns_srv_t) srvscan->rr)->port, ascan->ttl +#endif + ); eip = nad_insert_elem(nad, 1, NAD_ENS(nad, 1), "ip", (char *) ascan->rr); @@ -354,10 +388,22 @@ static int _resolver_sx_callback(sx_t s, for(srvscan = srvs; srvscan != NULL; srvscan = srvscan->next) { log_debug(ZONE, "%s has srv %s, doing AAAA lookup", zone, ((dns_srv_t) srvscan->rr)->name); - as = dns_resolve(((dns_srv_t) srvscan->rr)->name, DNS_QUERY_TYPE_AAAA); + as = dns_resolve(((dns_srv_t) srvscan->rr)->name, DNS_QUERY_TYPE_AAAA, r); for(ascan = as; ascan != NULL; ascan = ascan->next) { - log_write(r->log, LOG_NOTICE, "[%s] resolved to [%s]:%d (%d seconds to live)", zone, (char *)ascan->rr, ((dns_srv_t) srvscan->rr)->port, ascan->ttl); + log_write(r->log, LOG_NOTICE, +#ifdef DNSSEC_LOCAL_VALIDATION + "[%s] resolved to [%s]:%d (%d seconds to live; %strusted:%s)", + zone, (char *)ascan->rr, + ((dns_srv_t) srvscan->rr)->port, ascan->ttl, + val_istrusted(ascan->val_status) ? "" : "not ", + p_val_status(ascan->val_status) +#else + "[%s] resolved to [%s]:%d (%d seconds to live)", + zone, (char *)ascan->rr, + ((dns_srv_t) srvscan->rr)->port, ascan->ttl, +#endif + ); eip = nad_insert_elem(nad, 1, NAD_ENS(nad, 1), "ip", (char *)ascan->rr); @@ -387,10 +433,19 @@ static int _resolver_sx_callback(sx_t s, /* A lookup */ log_debug(ZONE, "doing A lookup for %s", zone); - as = dns_resolve(zone, DNS_QUERY_TYPE_A); + as = dns_resolve(zone, DNS_QUERY_TYPE_A, r); for(ascan = as; ascan != NULL; ascan = ascan->next) { - log_write(r->log, LOG_NOTICE, "[%s] resolved to [%s:5269] (%d seconds to live)", zone, (char *) ascan->rr, ascan->ttl); - + log_write(r->log, LOG_NOTICE, +#ifdef DNSSEC_LOCAL_VALIDATION + "[%s] resolved to [%s:5269] (%d seconds to live; %strusted:%s)", + zone, (char *) ascan->rr, ascan->ttl, + val_istrusted(ascan->val_status) ? "" : "not ", + p_val_status(ascan->val_status) +#else + "[%s] resolved to [%s:5269] (%d seconds to live)", + zone, (char *) ascan->rr, ascan->ttl +#endif + ); eip = nad_insert_elem(nad, 1, NAD_ENS(nad, 1), "ip", (char *) ascan->rr); nad_set_attr(nad, eip, -1, "port", "5269", 4); @@ -407,11 +462,20 @@ static int _resolver_sx_callback(sx_t s, if(r->resolve_aaaa) { log_debug(ZONE, "doing AAAA lookup for %s", zone); - as = dns_resolve(zone, DNS_QUERY_TYPE_AAAA); + as = dns_resolve(zone, DNS_QUERY_TYPE_AAAA, r); for(ascan = as; ascan != NULL; ascan = ascan->next) { - log_write(r->log, LOG_NOTICE, "[%s] resolved to [%s]:5269 (%d seconds to live)", zone, (char *)ascan->rr, ascan->ttl); - + log_write(r->log, LOG_NOTICE, +#ifdef DNSSEC_LOCAL_VALIDATION + "[%s] resolved to [%s]:5269 (%d seconds to live; %strusted:%s)", + zone, (char *)ascan->rr, ascan->ttl, + val_istrusted(ascan->val_status) ? "" : "not ", + p_val_status(ascan->val_status) +#else + "[%s] resolved to [%s]:5269 (%d seconds to live)", + zone, (char *)ascan->rr, ascan->ttl +#endif + ); eip = nad_insert_elem(nad, 1, NAD_ENS(nad, 1), "ip", (char *)ascan->rr); nad_set_attr(nad, eip, -1, "port", "5269", 4); @@ -596,6 +660,15 @@ int main(int argc, char **argv) r->sx_env = sx_env_new(); +#ifdef DNSSEC_LOCAL_VALIDATION + { + val_log_t * vallog; + vallog = val_log_add_cb(r->dnssec_log_level , &_resolver_log); + if (vallog) + vallog->a_void = r; + } +#endif + #ifdef HAVE_SSL if(r->router_pemfile != NULL) { r->sx_ssl = sx_env_plugin(r->sx_env, sx_ssl_init, r->router_pemfile, NULL); Index: resolver/resolver.h =================================================================== RCS file: /home/cvs/jabberd2/resolver/resolver.h,v retrieving revision 1.14 diff -u -p -r1.14 resolver.h --- resolver/resolver.h 26 Apr 2004 05:05:48 -0000 1.14 +++ resolver/resolver.h 1 Mar 2007 15:28:35 -0000 @@ -88,5 +88,13 @@ typedef struct resolver_st { /** true if we're currently bound in the router */ int online; + +#ifdef DNSSEC_LOCAL_VALIDATION + /** DNSSEC library log level */ + int dnssec_log_level; + + /** DNSSEC policy; true if we want to drop untrusted responses */ + int drop_untrusted; +#endif } *resolver_t; dnssec-tools-2.0/apps/openswan/0000775000237200023720000000000012111172554016714 5ustar hardakerhardakerdnssec-tools-2.0/apps/openswan/libval.patch0000664000237200023720000003147510664616550021232 0ustar hardakerhardaker--- adns-orig.c 2007-08-24 15:14:43.000000000 -0400 +++ adns-val.c 2007-08-27 14:38:46.000000000 -0400 @@ -57,7 +57,12 @@ #include #include #include -#include +#ifdef DNSSEC_LOCAL_VALIDATION +# include +# include +#else +# include +#endif #include /* ??? for h_errno */ #include @@ -78,6 +83,19 @@ static bool debug = FALSE; +#ifndef TESTING +#define ERROR syslog +#else +#define ERROR(level, format, args...) do { \ + if (debug) { \ + fprintf(stderr, format , ## args); \ + fprintf(stderr, "\n"); \ + } \ + else \ + syslog(level, format , ## args); \ + } while (0) +#endif + /* Read a variable-length record from a pipe (and no more!). * First bytes must be a size_t containing the length. * HES_CONTINUE if record read @@ -91,32 +109,55 @@ size_t n = 0; size_t goal = minlen; + if (debug) + fprintf(stderr, "read_pipe: fd %d, %lu-%lu\n", fd + ,(u_long)minlen, (u_long)maxlen); do { - ssize_t m = read(fd, stuff + n, goal - n); + ssize_t m; + +#ifdef TESTING + m = read(fd, stuff + n, maxlen - n); +#else + m = read(fd, stuff + n, goal - n); +#endif + if (debug) + fprintf(stderr, "read_pipe: fd %d, m %d\n", fd, m); if (m == -1) { if (errno != EINTR) { - syslog(LOG_ERR, "Input error on pipe: %s", strerror(errno)); + ERROR(LOG_ERR, "Input error on pipe: %s", strerror(errno)); return HES_IO_ERROR_IN; } } else if (m == 0) { + if(debug) + fprintf(stderr,"fd %d, empty message\n", fd); return HES_OK; /* treat empty message as EOF */ } else { +#ifdef TESTING + if(stuff[n+m-1] == '\n') { + stuff[n+m-1] = 0; + --m; + if (m == 0) + return HES_BAD_LEN; + } +#endif n += m; if (n >= sizeof(size_t)) { +#ifndef TESTING goal = *(size_t *)(void *)stuff; +#endif if (goal < minlen || maxlen < goal) { if (debug) - fprintf(stderr, "%lu : [%lu, %lu]\n" - , (unsigned long)goal + fprintf(stderr, "fd %d, %lu : [%lu, %lu]\n", fd + , (unsigned long)goal , (unsigned long)minlen, (unsigned long)maxlen); return HES_BAD_LEN; } @@ -124,6 +165,9 @@ } } while (n < goal); + if (debug) + fprintf(stderr, "read_pipe: fd %d, got %lu/%lu\n", fd, (unsigned long)n + , (unsigned long)maxlen); return HES_CONTINUE; } @@ -138,6 +182,8 @@ size_t len = *(const size_t *)(const void *)stuff; size_t n = 0; + if(debug) + fprintf(stderr, "write_pipe: %d bytes to %d\n",len,fd); do { ssize_t m = write(fd, stuff + n, len - n); @@ -146,7 +192,7 @@ /* error, but ignore and retry if EINTR */ if (errno != EINTR) { - syslog(LOG_ERR, "Output error from master: %s", strerror(errno)); + ERROR(LOG_ERR, "Output error from master: %s", strerror(errno)); return HES_IO_ERROR_OUT; } } @@ -174,7 +220,14 @@ # define OLD_RESOLVER 1 #endif -#ifdef OLD_RESOLVER +#if defined ( VALIDATOR_H ) + +# define res_ninit(statp) 0 +# define res_nquery(statp, dname, class, type, answer, anslen) \ + val_res_query(NULL, (char*)dname, class, type, answer, anslen, &val_status) +# define res_nclose(statp) 0 + +#elif defined( OLD_RESOLVER ) # define res_ninit(statp) res_init() # define res_nquery(statp, dname, class, type, answer, anslen) \ @@ -193,44 +246,75 @@ static int worker(int qfd, int afd) { + if (debug) + fprintf(stderr, "worker: starting worker, pipes %d/%d\n", qfd, afd); { int r = res_ninit(statp); if (r != 0) { - syslog(LOG_ERR, "cannot initialize resolver"); + ERROR(LOG_ERR, "cannot initialize resolver"); return HES_RES_INIT; } +#ifndef VALIDATOR_H #ifndef OLD_RESOLVER statp->options |= RES_ROTATE; #endif statp->options |= RES_DEBUG; +#endif } for (;;) { struct adns_query q; struct adns_answer a; +#ifdef VALIDATOR_H + val_status_t val_status; +#endif enum helper_exit_status r = read_pipe(qfd, (unsigned char *)&q , sizeof(q), sizeof(q)); + if (debug) + fprintf(stderr, "worker: data from master pipe\n"); if (r != HES_CONTINUE) return r; /* some kind of exit */ if (q.qmagic != ADNS_Q_MAGIC) { - syslog(LOG_ERR, "error in input from master: bad magic"); + ERROR(LOG_ERR, "error in input from master: bad magic"); return HES_BAD_MAGIC; } a.amagic = ADNS_A_MAGIC; a.serial = q.serial; + if (debug) + fprintf(stderr, "worker: sending query to resolver\n"); a.result = res_nquery(statp, q.name_buf, C_IN, q.type, a.ans, sizeof(a.ans)); a.h_errno_val = h_errno; a.len = offsetof(struct adns_answer, ans) + (a.result < 0? 0 : a.result); +#ifdef VALIDATOR_H + /** val_status not set for internal errors */ + if ((a.result == -1) && (NETDB_INTERNAL == h_errno)) { + if (debug) + fprintf(stderr, "internal err resolving %s\n", q.name_buf); + } + else { + /** log validation status */ + if (debug) + fprintf(stderr, "ValStatus: %strusted:%s\n", + val_istrusted(val_status) ? "" : "not ", + p_val_status(val_status)); + + if((a.result >= 0) && ((size_t)a.result > sizeof(a.ans))) { + if (debug) + fprintf(stderr, "packet size err resolving %s\n" + , q.name_buf); + } + } +#endif #ifdef DEBUG if (((q.debugging & IMPAIR_DELAY_ADNS_KEY_ANSWER) && q.type == T_KEY) @@ -285,9 +369,12 @@ int afds[2]; pid_t p; + if(debug) + fprintf(stderr,"spawn_worker: starting worker\n"); + if (pipe(qfds) != 0 || pipe(afds) != 0) { - syslog(LOG_ERR, "pipe(2) failed: %s", strerror(errno)); + ERROR(LOG_ERR, "pipe(2) failed: %s", strerror(errno)); exit(HES_PIPE); } @@ -300,7 +387,7 @@ /* fork failed: ignore if at least one worker exists */ if (wi_roof == wi) { - syslog(LOG_ERR, "fork(2) error creating first worker: %s", strerror(errno)); + ERROR(LOG_ERR, "fork(2) error creating first worker: %s", strerror(errno)); exit(HES_FORK); } close(qfds[0]); @@ -343,6 +430,9 @@ pid_t p; int status; + if (debug) + fprintf(stderr,"closing pipes to worker fds %d/%d\n", w->qfd, w->afd); + close(w->qfd); w->qfd = NULL_FD; @@ -361,13 +451,19 @@ if (q == NULL) { + if (debug) + fprintf(stderr, "forward_query: no pending queries\n"); if (eof_from_pluto) send_eof(w); } else { - enum helper_exit_status r - = write_pipe(w->qfd, (const unsigned char *) &q->aq); + enum helper_exit_status r; + + if (debug) + fprintf(stderr, "forward_query: sending query to worker\n"); + + r = write_pipe(w->qfd, (const unsigned char *) &q->aq); if (r != HES_CONTINUE) exit(r); @@ -386,13 +482,16 @@ struct query_list *q = free_queries; enum helper_exit_status r; + if (debug) + fprintf(stderr, "query: reading pipe\n"); + /* find an unused queue entry */ if (q == NULL) { q = malloc(sizeof(*q)); if (q == NULL) { - syslog(LOG_ERR, "malloc(3) failed"); + ERROR(LOG_ERR, "malloc(3) failed"); exit(HES_MALLOC); } } @@ -401,14 +500,28 @@ free_queries = q->next; } +#ifdef TESTING + { + r = read_pipe(PLUTO_QFD, q->aq.name_buf, 7, 100); //sizeof(q->aq.name_buf)); + if (r == HES_BAD_LEN) + return; + q->aq.name_buf[7] = 0; + q->aq.qmagic = ADNS_Q_MAGIC; + q->aq.len = sizeof(q->aq); + q->aq.type = ns_t_a; + } +#else r = read_pipe(PLUTO_QFD, (unsigned char *)&q->aq , sizeof(q->aq), sizeof(q->aq)); +#endif if (r == HES_OK) { /* EOF: we're done, except for unanswered queries */ struct worker_info *w; + if (debug) + fprintf(stderr, "query: EOF from pluto\n"); eof_from_pluto = TRUE; q->next = free_queries; free_queries = q; @@ -427,7 +540,7 @@ } else if (q->aq.qmagic != ADNS_Q_MAGIC) { - syslog(LOG_ERR, "error in query from Pluto: bad magic"); + ERROR(LOG_ERR, "error in query from Pluto: bad magic"); exit(HES_BAD_MAGIC); } else @@ -435,6 +548,8 @@ struct worker_info *w; /* got a query */ + if (debug) + fprintf(stderr, "query: got a query; looking for worker\n"); /* add it to FIFO */ q->next = NULL; @@ -450,15 +565,23 @@ if (w == wi_roof) { /* no free worker */ - if (w == wi + MAX_WORKERS) + if (w == wi + MAX_WORKERS) { + if (debug) + fprintf(stderr, "query: no free worker\n"); break; /* no more to be created */ + } /* make a new one */ + if (debug) + fprintf(stderr, "query: spawning new worker\n"); if (!spawn_worker()) break; /* cannot create one at this time */ } if (!w->busy) { /* assign first to free worker */ + if (debug) + fprintf(stderr, "query: forwarding '%s' to worker\n", + q->aq.name_buf); forward_query(w); break; } @@ -471,13 +594,17 @@ answer(struct worker_info *w) { struct adns_answer a; - enum helper_exit_status r = read_pipe(w->afd, (unsigned char *)&a - , offsetof(struct adns_answer, ans), sizeof(a)); + enum helper_exit_status r; + + if (debug) + fprintf(stderr, "answer: reading from workeron fd %d\n", w->afd); + r = read_pipe(w->afd, (unsigned char *)&a + , offsetof(struct adns_answer, ans), sizeof(a)); if (r == HES_OK) { /* unexpected EOF */ - syslog(LOG_ERR, "unexpected EOF from worker"); + ERROR(LOG_ERR, "unexpected EOF from worker"); exit(HES_IO_ERROR_IN); } else if (r != HES_CONTINUE) @@ -486,23 +613,29 @@ } else if (a.amagic != ADNS_A_MAGIC) { - syslog(LOG_ERR, "Input from worker error: bad magic"); + ERROR(LOG_ERR, "Input from worker error: bad magic"); exit(HES_BAD_MAGIC); } else if (a.continuation != w->continuation) { /* answer doesn't match query */ - syslog(LOG_ERR, "Input from worker error: continuation mismatch"); + ERROR(LOG_ERR, "Input from worker error: continuation mismatch"); exit(HES_SYNC); } else { /* pass the answer on to Pluto */ - enum helper_exit_status r - = write_pipe(PLUTO_AFD, (const unsigned char *) &a); + enum helper_exit_status r; + + if (debug) + fprintf(stderr, "answer: sending answer to pluto\n"); + r = write_pipe(PLUTO_AFD, (const unsigned char *) &a); if (r != HES_CONTINUE) exit(r); + + if (debug) + fprintf(stderr, "answer: worker now available\n"); w->busy = FALSE; forward_query(w); } @@ -512,6 +645,8 @@ static int master(void) { + if (debug) + fprintf(stderr, "master: loop\n"); for (;;) { fd_set readfds; @@ -529,6 +664,8 @@ { if (w->busy) { + if (debug) + fprintf(stderr, "master: selecting on busy worker fd %d\n",w->afd); FD_SET(w->afd, &readfds); ndes++; if (maxfd < w->afd) @@ -536,21 +673,28 @@ } } - if (ndes == 0) + if (ndes == 0) { + if (debug) + fprintf(stderr, "master: no busy workers or pluto fd, done!\n"); return HES_OK; /* done! */ + } do { ndes = select(maxfd + 1, &readfds, NULL, NULL, NULL); } while (ndes == -1 && errno == EINTR); if (ndes == -1) { - syslog(LOG_ERR, "select(2) error: %s", strerror(errno)); + if (debug) + fprintf(stderr, "master: selecting on %d fds, done!\n", ndes); + ERROR(LOG_ERR, "select(2) error: %s", strerror(errno)); exit(HES_IO_ERROR_SELECT); } else if (ndes > 0) { if (FD_ISSET(PLUTO_QFD, &readfds)) { + if (debug) + fprintf(stderr, "master: query from pluto!\n"); query(); ndes--; } @@ -558,6 +702,8 @@ { if (w->busy && FD_ISSET(w->afd, &readfds)) { + if (debug) + fprintf(stderr, "master: answer from worker fd %d\n",w->afd); answer(w); ndes--; } @@ -584,7 +730,7 @@ for (; *sp != NULL; sp++) fprintf(stderr, "%s\n", *sp); - syslog(LOG_ERR, fmt, arg); + ERROR(LOG_ERR, fmt, arg); exit(HES_INVOCATION); } @@ -609,6 +755,12 @@ } } +#ifdef VALIDATOR_H + if(debug) { + val_log_t *logp = val_log_add_optarg("5:stderr", 1); + } +#endif + return master(); } dnssec-tools-2.0/apps/openswan/README.dnssec0000664000237200023720000000721010664616550021064 0ustar hardakerhardakerLocal DNSSEC validation with OpenSwan ===================================== Introduction ------------ These patches add support for performing local DNSSEC validation for all DNS lookups. This document contains very brief instructions on how to use this feature. Configuring DNS is out of the scope of this document. There are 3 patches: - makefile.patch, which add some defines and libraries - libval.patch, which adds local validation to adns - libval-threads.patch, which adds local validation to adns, using pthreads instead of forked processes. Background ---------- A detailed description of DNSSEC is out of scope for this document, but a basic background is provided. DNS response packets are fairly easy to spoof, so an attacker situated in the network path between a host and its configured DNS server could possibly inject DSN response packets, DNSSEC introduces cryptographic signing of DNS records, allowing a resolver to verify that a response has not been spoofed. This is done by configuring 'Trust Anchors', which are know good keys used to sign a zone. Further rational for why one might want to use local validation is give at the end of this document. Requirements ------------ This code requires that the DNSSEC-Tools resolver and validator libraries and headers be installed. The DNSSEC-Tools package can be obtained from: http://www.dnssec-tools.org/resources/download.html Note that the Perl requirements are not needed if you only want to install/use the resolver and validator libraries. By default, the validator library will use the resolver specified in /usr/local/etc/dnssec-tools/resolv.conf when performing DNS queries. If the resolver(s) in that file are not DNSSEC aware, the validator won't be able to get the data is needs for local validation. In this case, you may need to tweak the RESOLV_CONF definition in the validator library header (dnssec-tools/validator/includes/validator/validator.h) before building and installing the libraries. If there is not a DNSSEC aware nameserver you can use, simply leave the file empty, and the library will perform all validation itself, starting from the root nameservers. Using DNSSEC validation ----------------------- The extra validation code in OpenSwan is optional, and must be enabled by specifying "-DDNSSEC_LOCAL_VALIDATION" in the CFLAGS defined in the programs/pluto/Makefile. Additionally, -DADNS_THREADS may be specified to use pthreads instead of forked processes. The advantage of using pthreads is that all threads will share a local DNS cache. Rational for Local Validation ----------------------------- OpenSwan already has code to verify DNSSEC validity for DNS records, so one might wonder why they would want local validation. There are several reasons. - Deployment of DNSSEC is progressing quite slowly, so end users might not have DNS servers which are capable of, or configured for, DNSSEC processing. - DNSSEC only guarantees the integrity of the DNS response to the DNS server. The response from the DNS server to the local host has no protection. Thus an attacker who can inject packets in the path between a DNS server and a stub resolver can not only redirect the client, but can make it belive a response was authentic! - Even if a DNSSEC server is on a local and trusted network, an end user might not have any influence over local policy. In other words, they might not be able to get a new Trust Anchor configured for a zone which they trust. - A DNSSEC server will not return data to an application for a response which appears to have been modified. The means that, to the local host, the DNS lookups will appear to have failed, even if the DNS Robert Story SPARTA, Inc. dnssec-tools-2.0/apps/openswan/libval-thread.patch0000664000237200023720000004221410664616550022470 0ustar hardakerhardaker--- adns-orig.c 2007-08-24 15:14:43.000000000 -0400 +++ adns-thr.c 2007-08-27 14:38:23.000000000 -0400 @@ -57,7 +57,12 @@ #include #include #include -#include +#ifdef DNSSEC_LOCAL_VALIDATION +# include +# include +#else +# include +#endif #include /* ??? for h_errno */ #include @@ -78,6 +83,43 @@ static bool debug = FALSE; +#ifndef MAX_WORKERS +# define MAX_WORKERS 10 /* number of in-flight queries */ +#endif + +struct worker_info { + int qfd; /* query pipe's file descriptor */ + int afd; /* answer pipe's file descriptor */ +#ifndef ADNS_THREADS + pid_t pid; +#else + int wqfd; /* worker query pipe's file descriptor */ + int wafd; /* worker answer pipe's file descriptor */ + pthread_t thread; +#endif + bool busy; + void *continuation; /* of outstanding request */ +}; + + +static void send_eof(struct worker_info *w); + + +#ifndef TESTING +#define ERROR syslog +#else +#define ERROR(level, format, args...) do { \ + if (debug) { \ + fprintf(stderr, format , ## args); \ + fprintf(stderr, "\n"); \ + } \ + else \ + syslog(level, format , ## args); \ + } while (0) +#endif + +/**************** read/write funcs **************/ + /* Read a variable-length record from a pipe (and no more!). * First bytes must be a size_t containing the length. * HES_CONTINUE if record read @@ -91,32 +133,54 @@ size_t n = 0; size_t goal = minlen; + if (debug) + fprintf(stderr, "read_pipe: fd %d, expect %lu-%lu\n", fd + ,(u_long)minlen, (u_long)maxlen); do { - ssize_t m = read(fd, stuff + n, goal - n); + ssize_t m; +#ifdef TESTING + m = read(fd, stuff + n, maxlen - n); + if (debug) + fprintf(stderr, "read_pipe: fd %d, m %d\n", fd, m); +#else + m = read(fd, stuff + n, goal - n); +#endif if (m == -1) { if (errno != EINTR) { - syslog(LOG_ERR, "Input error on pipe: %s", strerror(errno)); + ERROR(LOG_ERR, "Input error on pipe: %s", strerror(errno)); return HES_IO_ERROR_IN; } } else if (m == 0) { + if(debug) + fprintf(stderr,"fd %d, empty message\n", fd); return HES_OK; /* treat empty message as EOF */ } else { +#ifdef TESTING + if(stuff[n+m-1] == '\n') { + stuff[n+m-1] = 0; + --m; + if (m == 0) + return HES_BAD_LEN; + } +#endif n += m; if (n >= sizeof(size_t)) { +#ifndef TESTING goal = *(size_t *)(void *)stuff; +#endif if (goal < minlen || maxlen < goal) { if (debug) - fprintf(stderr, "%lu : [%lu, %lu]\n" - , (unsigned long)goal + fprintf(stderr, "fd %d, %lu : [%lu, %lu]\n", fd + , (unsigned long)goal , (unsigned long)minlen, (unsigned long)maxlen); return HES_BAD_LEN; } @@ -124,6 +188,9 @@ } } while (n < goal); + if (debug) + fprintf(stderr, "read_pipe: fd %d, got %lu/%lu\n", fd, (unsigned long)n + , (unsigned long)maxlen); return HES_CONTINUE; } @@ -138,6 +205,8 @@ size_t len = *(const size_t *)(const void *)stuff; size_t n = 0; + if(debug) + fprintf(stderr, "write_pipe: %d bytes to %d\n",len,fd); do { ssize_t m = write(fd, stuff + n, len - n); @@ -146,7 +215,7 @@ /* error, but ignore and retry if EINTR */ if (errno != EINTR) { - syslog(LOG_ERR, "Output error from master: %s", strerror(errno)); + ERROR(LOG_ERR, "Output error from master: %s", strerror(errno)); return HES_IO_ERROR_OUT; } } @@ -174,7 +243,14 @@ # define OLD_RESOLVER 1 #endif -#ifdef OLD_RESOLVER +#if defined ( VALIDATOR_H ) + +# define res_ninit(statp) 0 +# define res_nquery(statp, dname, class, type, answer, anslen) \ + val_res_query(NULL, (char*)dname, class, type, answer, anslen, &val_status) +# define res_nclose(statp) 0 + +#elif defined( OLD_RESOLVER ) # define res_ninit(statp) res_init() # define res_nquery(statp, dname, class, type, answer, anslen) \ @@ -190,47 +266,107 @@ #endif /* !OLD_RESOLVER */ +#ifdef ADNS_THREADS +static void +worker_exit(enum helper_exit_status r, struct worker_info * w) +{ + if (debug) + fprintf(stderr, "worker exiting: %p\n", (void*)w->thread); + + /** close fds so master knows we've quit */ + if (NULL != w) { + close(w->wqfd); + close(w->wafd); + w->wqfd = w->wafd = NULL_FD; + } + + pthread_exit((void*)r); +} + +static void * +worker(void *args) +#else + +#define worker_exit(r, w) return(r) + static int worker(int qfd, int afd) +#endif { +#ifdef ADNS_THREADS + struct worker_info * w = (struct worker_info *)args; + int qfd = w->wqfd, afd = w->wafd; +#endif + + if (debug) + fprintf(stderr, "worker: starting worker, pipes %d/%d\n", qfd, afd); { int r = res_ninit(statp); if (r != 0) { - syslog(LOG_ERR, "cannot initialize resolver"); - return HES_RES_INIT; + ERROR(LOG_ERR, "cannot initialize resolver"); + worker_exit( HES_RES_INIT, w); } +#ifndef VALIDATOR_H #ifndef OLD_RESOLVER statp->options |= RES_ROTATE; #endif statp->options |= RES_DEBUG; +#endif } for (;;) { struct adns_query q; struct adns_answer a; +#ifdef VALIDATOR_H + val_status_t val_status; +#endif enum helper_exit_status r = read_pipe(qfd, (unsigned char *)&q , sizeof(q), sizeof(q)); + if (debug) + fprintf(stderr, "worker: data from master pipe\n"); if (r != HES_CONTINUE) - return r; /* some kind of exit */ + worker_exit(r, w); /* some kind of exit */ if (q.qmagic != ADNS_Q_MAGIC) { - syslog(LOG_ERR, "error in input from master: bad magic"); - return HES_BAD_MAGIC; + ERROR(LOG_ERR, "error in input from master: bad magic"); + worker_exit(HES_BAD_MAGIC, w); } a.amagic = ADNS_A_MAGIC; a.serial = q.serial; + if (debug) + fprintf(stderr, "worker: sending query to resolver\n"); a.result = res_nquery(statp, q.name_buf, C_IN, q.type, a.ans, sizeof(a.ans)); a.h_errno_val = h_errno; a.len = offsetof(struct adns_answer, ans) + (a.result < 0? 0 : a.result); +#ifdef VALIDATOR_H + /** val_status not set for internal errors */ + if ((a.result == -1) && (NETDB_INTERNAL == h_errno)) { + if (debug) + fprintf(stderr, "internal err resolving %s\n", q.name_buf); + } + else { + /** log validation status */ + if (debug) + fprintf(stderr, "ValStatus: %strusted:%s\n", + val_istrusted(val_status) ? "" : "not ", + p_val_status(val_status)); + + if((a.result >= 0) && ((size_t)a.result > sizeof(a.ans))) { + if (debug) + fprintf(stderr, "packet size err resolving %s\n" + , q.name_buf); + } + } +#endif #ifdef DEBUG if (((q.debugging & IMPAIR_DELAY_ADNS_KEY_ANSWER) && q.type == T_KEY) @@ -242,7 +378,7 @@ r = write_pipe(afd, (const unsigned char *)&a); if (r != HES_CONTINUE) - return r; /* some kind of exit */ + worker_exit(r,w); /* some kind of exit */ } } @@ -252,18 +388,6 @@ #define PLUTO_QFD 0 /* queries come on stdin */ #define PLUTO_AFD 1 /* answers go out on stdout */ -#ifndef MAX_WORKERS -# define MAX_WORKERS 10 /* number of in-flight queries */ -#endif - -struct worker_info { - int qfd; /* query pipe's file descriptor */ - int afd; /* answer pipe's file descriptor */ - pid_t pid; - bool busy; - void *continuation; /* of outstanding request */ -}; - static struct worker_info wi[MAX_WORKERS]; static struct worker_info *wi_roof = wi; @@ -278,30 +402,70 @@ static struct query_list *newest_query; /* undefined when oldest == NULL */ static struct query_list *free_queries = NULL; +#ifdef ADNS_THREADS +static void +master_exit(enum helper_exit_status r) +{ + int i; + + if (debug) + fprintf(stderr, "master exiting\n"); + + /** for each worker, send eof and wait for worker termination */ + for(i=0; i < MAX_WORKERS; ++i) { + send_eof(&wi[i]); + } + pthread_exit((void*)r); +} +#else +#define master_exit(r) exit(r) +#endif + static bool spawn_worker(void) { int qfds[2]; int afds[2]; pid_t p; +#ifdef ADNS_THREADS + int rc; +#endif if (pipe(qfds) != 0 || pipe(afds) != 0) { - syslog(LOG_ERR, "pipe(2) failed: %s", strerror(errno)); - exit(HES_PIPE); + ERROR(LOG_ERR, "pipe(2) failed: %s", strerror(errno)); + master_exit(HES_PIPE); } wi_roof->qfd = qfds[1]; /* write end of query pipe */ wi_roof->afd = afds[0]; /* read end of answer pipe */ +#ifdef ADNS_THREADS + wi_roof->wqfd = qfds[0]; /* write end of query pipe */ + wi_roof->wafd = afds[1]; /* read end of answer pipe */ + + if(debug) + fprintf(stderr,"spawn_worker: starting worker thread\n"); + + rc = pthread_create(&wi_roof->thread, NULL, worker, + (void *)wi_roof); + if (rc) + p = -1; + else + p = 1; +#else + if(debug) + fprintf(stderr,"spawn_worker: starting worker process\n"); + p = fork(); +#endif if (p == -1) { /* fork failed: ignore if at least one worker exists */ if (wi_roof == wi) { - syslog(LOG_ERR, "fork(2) error creating first worker: %s", strerror(errno)); - exit(HES_FORK); + ERROR(LOG_ERR, "error creating first worker: %s", strerror(errno)); + master_exit(HES_FORK); } close(qfds[0]); close(qfds[1]); @@ -309,6 +473,7 @@ close(afds[1]); return FALSE; } +#ifndef ADNS_THREADS else if (p == 0) { /* child */ @@ -322,17 +487,20 @@ close(w->qfd); close(w->afd); } - exit(worker(qfds[0], afds[1])); + master_exit(worker(qfds[0], afds[1])); } +#endif else { /* parent */ struct worker_info *w = wi_roof++; - w->pid = p; w->busy = FALSE; +#ifndef ADNS_THREADS + w->pid = p; close(qfds[0]); close(afds[1]); +#endif return TRUE; } } @@ -340,8 +508,13 @@ static void send_eof(struct worker_info *w) { +#ifndef ADNS_THREADS pid_t p; int status; +#endif + + if (debug) + fprintf(stderr,"closing pipes to worker fds %d/%d\n", w->qfd, w->afd); close(w->qfd); w->qfd = NULL_FD; @@ -350,7 +523,11 @@ w->afd = NULL_FD; /* reap child */ +#ifndef ADNS_THREADS p = waitpid(w->pid, &status, 0); +#else + pthread_join(w->thread, NULL); +#endif /* ignore result -- what could we do with it? */ } @@ -361,16 +538,22 @@ if (q == NULL) { + if (debug) + fprintf(stderr, "forward_query: no pending queries\n"); if (eof_from_pluto) send_eof(w); } else { - enum helper_exit_status r - = write_pipe(w->qfd, (const unsigned char *) &q->aq); + enum helper_exit_status r; + + if (debug) + fprintf(stderr, "forward_query: sending query to worker\n"); + + r = write_pipe(w->qfd, (const unsigned char *) &q->aq); if (r != HES_CONTINUE) - exit(r); + master_exit(r); w->busy = TRUE; @@ -386,14 +569,17 @@ struct query_list *q = free_queries; enum helper_exit_status r; + if (debug) + fprintf(stderr, "query: reading pipe\n"); + /* find an unused queue entry */ if (q == NULL) { q = malloc(sizeof(*q)); if (q == NULL) { - syslog(LOG_ERR, "malloc(3) failed"); - exit(HES_MALLOC); + ERROR(LOG_ERR, "malloc(3) failed"); + master_exit(HES_MALLOC); } } else @@ -401,14 +587,28 @@ free_queries = q->next; } +#ifdef TESTING + { + r = read_pipe(PLUTO_QFD, q->aq.name_buf, 7, 100); //sizeof(q->aq.name_buf)); + if (r == HES_BAD_LEN) + return; + q->aq.name_buf[7] = 0; + q->aq.qmagic = ADNS_Q_MAGIC; + q->aq.len = sizeof(q->aq); + q->aq.type = ns_t_a; + } +#else r = read_pipe(PLUTO_QFD, (unsigned char *)&q->aq , sizeof(q->aq), sizeof(q->aq)); +#endif if (r == HES_OK) { /* EOF: we're done, except for unanswered queries */ struct worker_info *w; + if (debug) + fprintf(stderr, "query: EOF from pluto\n"); eof_from_pluto = TRUE; q->next = free_queries; free_queries = q; @@ -423,18 +623,20 @@ } else if (r != HES_CONTINUE) { - exit(r); + master_exit(r); } else if (q->aq.qmagic != ADNS_Q_MAGIC) { - syslog(LOG_ERR, "error in query from Pluto: bad magic"); - exit(HES_BAD_MAGIC); + ERROR(LOG_ERR, "error in query from Pluto: bad magic"); + master_exit(HES_BAD_MAGIC); } else { struct worker_info *w; /* got a query */ + if (debug) + fprintf(stderr, "query: got a query; looking for worker\n"); /* add it to FIFO */ q->next = NULL; @@ -450,15 +652,23 @@ if (w == wi_roof) { /* no free worker */ - if (w == wi + MAX_WORKERS) + if (w == wi + MAX_WORKERS) { + if (debug) + fprintf(stderr, "query: no free worker\n"); break; /* no more to be created */ + } /* make a new one */ + if (debug) + fprintf(stderr, "query: spawning new worker\n"); if (!spawn_worker()) break; /* cannot create one at this time */ } if (!w->busy) { /* assign first to free worker */ + if (debug) + fprintf(stderr, "query: forwarding '%s' to worker\n", + q->aq.name_buf); forward_query(w); break; } @@ -471,38 +681,48 @@ answer(struct worker_info *w) { struct adns_answer a; - enum helper_exit_status r = read_pipe(w->afd, (unsigned char *)&a - , offsetof(struct adns_answer, ans), sizeof(a)); + enum helper_exit_status r; + + if (debug) + fprintf(stderr, "answer: reading from workeron fd %d\n", w->afd); + r = read_pipe(w->afd, (unsigned char *)&a + , offsetof(struct adns_answer, ans), sizeof(a)); if (r == HES_OK) { /* unexpected EOF */ - syslog(LOG_ERR, "unexpected EOF from worker"); - exit(HES_IO_ERROR_IN); + ERROR(LOG_ERR, "unexpected EOF from worker"); + master_exit(HES_IO_ERROR_IN); } else if (r != HES_CONTINUE) { - exit(r); + master_exit(r); } else if (a.amagic != ADNS_A_MAGIC) { - syslog(LOG_ERR, "Input from worker error: bad magic"); - exit(HES_BAD_MAGIC); + ERROR(LOG_ERR, "Input from worker error: bad magic"); + master_exit(HES_BAD_MAGIC); } else if (a.continuation != w->continuation) { /* answer doesn't match query */ - syslog(LOG_ERR, "Input from worker error: continuation mismatch"); - exit(HES_SYNC); + ERROR(LOG_ERR, "Input from worker error: continuation mismatch"); + master_exit(HES_SYNC); } else { /* pass the answer on to Pluto */ - enum helper_exit_status r - = write_pipe(PLUTO_AFD, (const unsigned char *) &a); + enum helper_exit_status r; + + if (debug) + fprintf(stderr, "answer: sending answer to pluto\n"); + r = write_pipe(PLUTO_AFD, (const unsigned char *) &a); if (r != HES_CONTINUE) - exit(r); + master_exit(r); + + if (debug) + fprintf(stderr, "answer: worker now available\n"); w->busy = FALSE; forward_query(w); } @@ -512,6 +732,8 @@ static int master(void) { + if (debug) + fprintf(stderr, "master: loop\n"); for (;;) { fd_set readfds; @@ -529,6 +751,8 @@ { if (w->busy) { + if (debug) + fprintf(stderr, "master: selecting on busy worker fd %d\n",w->afd); FD_SET(w->afd, &readfds); ndes++; if (maxfd < w->afd) @@ -536,21 +760,28 @@ } } - if (ndes == 0) + if (ndes == 0) { + if (debug) + fprintf(stderr, "master: no busy workers or pluto fd, done!\n"); return HES_OK; /* done! */ + } do { ndes = select(maxfd + 1, &readfds, NULL, NULL, NULL); } while (ndes == -1 && errno == EINTR); if (ndes == -1) { - syslog(LOG_ERR, "select(2) error: %s", strerror(errno)); - exit(HES_IO_ERROR_SELECT); + if (debug) + fprintf(stderr, "master: selecting on %d fds, done!\n", ndes); + ERROR(LOG_ERR, "select(2) error: %s", strerror(errno)); + master_exit(HES_IO_ERROR_SELECT); } else if (ndes > 0) { if (FD_ISSET(PLUTO_QFD, &readfds)) { + if (debug) + fprintf(stderr, "master: query from pluto!\n"); query(); ndes--; } @@ -558,6 +789,8 @@ { if (w->busy && FD_ISSET(w->afd, &readfds)) { + if (debug) + fprintf(stderr, "master: answer from worker fd %d\n",w->afd); answer(w); ndes--; } @@ -584,7 +817,7 @@ for (; *sp != NULL; sp++) fprintf(stderr, "%s\n", *sp); - syslog(LOG_ERR, fmt, arg); + ERROR(LOG_ERR, fmt, arg); exit(HES_INVOCATION); } @@ -609,6 +842,12 @@ } } +#ifdef VALIDATOR_H + if(debug) { + val_log_t *logp = val_log_add_optarg("5:stderr", 1); + } +#endif + return master(); } dnssec-tools-2.0/apps/openswan/makefile.patch0000664000237200023720000000101710664616550021523 0ustar hardakerhardaker--- Makefile.orig 2007-08-27 12:26:31.000000000 -0400 +++ Makefile 2007-08-27 14:39:59.000000000 -0400 @@ -237,6 +237,7 @@ ${EXTRA_CRYPTO_DEFS} \ $(HAVE_THREADS_DEFS) \ $(SMARTCARD_DEFS) \ + -DDNSSEC_LOCAL_VALIDATION -DADNS_THREADS \ -DPLUTO \ -DKLIPS \ -DBUILDER=\"${BUILDER}\" \ @@ -272,7 +273,7 @@ endif LIBSADNS = $(OPENSWANLIB) -LIBSADNS += -lresolv # -lefence +LIBSADNS += -lpthread -lval-threads -lsres -lcrypto # -lefence # Solaris needs -lsocket -lnsl LIBSWHACK = whacklib.o ${OPENSWANLIB} dnssec-tools-2.0/apps/libspf2/0000775000237200023720000000000012111172554016423 5ustar hardakerhardakerdnssec-tools-2.0/apps/libspf2/README.dnssec0000664000237200023720000000521511330344000020551 0ustar hardakerhardaker DNSSEC extension to libspf2-x: HOWTO ======================================== Introduction ------------ The DNSSEC extension to libspf2 provides DNSSEC validation to DNS queries in libspf2. This document describes how to install libspf2 with DNSSEC validation functionality. libspf2 can be downloaded from http://www.libspf2.org/download.html This patch was most recently tested with version libspf2-1.2.9. Unzip and untar the distribution using the following command (replace x by the correct version number): tar -xvzf libspf2-x.tar.gz Now apply the patch by (replace x by the correct version number): patch -p 0 -b -z .orig +#endif + typedef int SPF_dns_stat_t; typedef struct SPF_dns_server_struct SPF_dns_server_t; diff -I '\$Id: ' -u -r -b -w -p -d --exclude-from=/home/rstory/.rcfiles/diff-ignore --new-file libspf2-1.2.9/src/include/spf_response.h libspf2-1.2.9.dnssec/src/include/spf_response.h --- libspf2-1.2.9/src/include/spf_response.h 2008-10-15 20:08:12.000000000 -0400 +++ libspf2-1.2.9.dnssec/src/include/spf_response.h 2009-12-16 14:37:00.585318575 -0500 @@ -151,6 +151,10 @@ enum SPF_errcode_t { , SPF_E_INCLUDE_RETURNED_NONE /**< If an include recursive query returns none it's a perm error */ , SPF_E_RECURSIVE /**< Recursive include */ , SPF_E_MULTIPLE_RECORDS /**< Multiple SPF or TXT records found */ + +#ifdef SUPPORT_DNSSEC +, SPF_E_DNSSEC_FAILURE /* DNSSEC validation failure */ +#endif } SPF_errcode_t; typedef diff -I '\$Id: ' -u -r -b -w -p -d --exclude-from=/home/rstory/.rcfiles/diff-ignore --new-file libspf2-1.2.9/src/libspf2/spf_dns_resolv.c libspf2-1.2.9.dnssec/src/libspf2/spf_dns_resolv.c --- libspf2-1.2.9/src/libspf2/spf_dns_resolv.c 2008-10-27 12:26:06.000000000 -0400 +++ libspf2-1.2.9.dnssec/src/libspf2/spf_dns_resolv.c 2010-06-03 11:18:10.000000000 -0400 @@ -58,6 +58,11 @@ # include #endif +#ifdef SUPPORT_DNSSEC +#undef HAVE_DECL_RES_NINIT +#include +#endif /* SUPPORT_DNSSEC */ + #include "spf.h" #include "spf_dns.h" #include "spf_internal.h" @@ -79,13 +84,17 @@ static const struct res_sym ns_sects[] = static const int num_ns_sect = sizeof(ns_sects) / sizeof(*ns_sects); +#ifdef SUPPORT_DNSSEC +# define SPF_h_errno h_errno +#else #if HAVE_DECL_RES_NINIT # define SPF_h_errno res_state->res_h_errno #else # define SPF_h_errno h_errno #endif +#endif -#if HAVE_DECL_RES_NINIT +#if HAVE_DECL_RES_NINIT && ! defined(SUPPORT_DNSSEC) static pthread_once_t res_state_control = PTHREAD_ONCE_INIT; static pthread_key_t res_state_key; @@ -239,14 +248,16 @@ SPF_dns_resolv_lookup(SPF_dns_server_t * size_t rdlen; const u_char *rdata; -#if HAVE_DECL_RES_NINIT +#if defined(SUPPORT_DNSSEC) + val_status_t dnssec_status = VAL_INTERNAL_ERROR; +#elif HAVE_DECL_RES_NINIT void *res_spec; struct __res_state *res_state; #endif SPF_ASSERT_NOTNULL(spf_dns_server); -#if HAVE_DECL_RES_NINIT +#if HAVE_DECL_RES_NINIT && ! defined(SUPPORT_DNSSEC) /** Get the thread-local resolver state. */ res_spec = pthread_getspecific(res_state_key); if (res_spec == NULL) { @@ -292,7 +303,14 @@ SPF_dns_resolv_lookup(SPF_dns_server_t * for (;;) { int dns_len; -#if HAVE_DECL_RES_NINIT +#ifdef SUPPORT_DNSSEC + dns_len = val_res_query( NULL, domain, ns_c_in, rr_type, + responsebuf, responselen, &dnssec_status ); + if (dns_len >= 0) { + SPF_debugf( "val_res_query() returned dnssec_status = %s\n", + p_val_status( dnssec_status ) ); + } +#elif HAVE_DECL_RES_NINIT /* Resolve the name. */ dns_len = res_nquery(res_state, domain, ns_c_in, rr_type, responsebuf, responselen); @@ -314,6 +332,16 @@ SPF_dns_resolv_lookup(SPF_dns_server_t * return SPF_dns_lookup(spf_dns_server->layer_below, domain, rr_type, should_cache); } +#ifdef SUPPORT_DNSSEC + if ( !val_istrusted(dnssec_status) ) { + if ( h_errno == NETDB_SUCCESS ) { + h_errno = DNSSEC_FAILURE; + } + return SPF_dns_rr_new_init( spf_dns_server, + domain, rr_type, 0, h_errno ); + } + else +#endif return SPF_dns_rr_new_init(spf_dns_server, domain, rr_type, 0, SPF_h_errno); } @@ -348,6 +376,16 @@ SPF_dns_resolv_lookup(SPF_dns_server_t * /* * initialize stuff */ +#ifdef SUPPORT_DNSSEC + if ( !val_istrusted(dnssec_status) ) { + if ( h_errno == NETDB_SUCCESS ) { + h_errno = DNSSEC_FAILURE; + } + spfrr = SPF_dns_rr_new_init( spf_dns_server, + domain, rr_type, 0, h_errno ); + } + else +#endif spfrr = SPF_dns_rr_new_init(spf_dns_server, domain, rr_type, 0, NETDB_SUCCESS); if (!spfrr) { @@ -369,6 +407,7 @@ SPF_dns_resolv_lookup(SPF_dns_server_t * } +#ifndef SUPPORT_DNSSEC if (spf_dns_server->debug > 1) { SPF_debugf("msg id: %d", ns_msg_id(ns_handle)); SPF_debugf("ns_f_qr quest/resp: %d", ns_msg_getflag(ns_handle, ns_f_qr)); @@ -379,6 +418,7 @@ SPF_dns_resolv_lookup(SPF_dns_server_t * SPF_debugf("ns_f_ra rec avail: %d", ns_msg_getflag(ns_handle, ns_f_ra)); SPF_debugf("ns_f_rcode: %d", ns_msg_getflag(ns_handle, ns_f_rcode)); } +#endif /* FIXME the error handling from here on is suspect at best */ @@ -596,6 +636,14 @@ SPF_dns_resolv_lookup(SPF_dns_server_t * if (spfrr->num_rr == 0) spfrr->herrno = NO_DATA; +#ifdef SUPPORT_DNSSEC + if ( !val_istrusted(dnssec_status) ) { + if ( spfrr->herrno == NETDB_SUCCESS ) { + spfrr->herrno = DNSSEC_FAILURE; + } + } +#endif + free(responsebuf); return spfrr; } @@ -606,7 +654,7 @@ SPF_dns_resolv_free(SPF_dns_server_t *sp { SPF_ASSERT_NOTNULL(spf_dns_server); -#if ! HAVE_DECL_RES_NINIT +#if ! HAVE_DECL_RES_NINIT && !defined(SUPPORT_DNSSEC) res_close(); #endif @@ -619,7 +667,9 @@ SPF_dns_resolv_new(SPF_dns_server_t *lay { SPF_dns_server_t *spf_dns_server; -#if HAVE_DECL_RES_NINIT +#if defined(SUPPORT_DNSSEC) + ; +#elif HAVE_DECL_RES_NINIT pthread_once(&res_state_control, SPF_dns_resolv_init_key); #else if (res_init() != 0) { diff -I '\$Id: ' -u -r -b -w -p -d --exclude-from=/home/rstory/.rcfiles/diff-ignore --new-file libspf2-1.2.9/src/libspf2/spf_get_exp.c libspf2-1.2.9.dnssec/src/libspf2/spf_get_exp.c --- libspf2-1.2.9/src/libspf2/spf_get_exp.c 2008-10-02 18:07:42.000000000 -0400 +++ libspf2-1.2.9.dnssec/src/libspf2/spf_get_exp.c 2009-12-17 13:05:30.631935143 -0500 @@ -173,6 +173,13 @@ SPF_request_get_exp(SPF_server_t *spf_se RETURN_DEFAULT_EXP(); break; +#ifdef SUPPORT_DNSSEC + case DNSSEC_FAILURE: + SPF_response_add_warn(spf_response, SPF_E_DNSSEC_FAILURE, + "DNSSEC validation failed for the SPF (TXT) record of '%s'.", + *bufp); + break; +#endif case NETDB_SUCCESS: break; diff -I '\$Id: ' -u -r -b -w -p -d --exclude-from=/home/rstory/.rcfiles/diff-ignore --new-file libspf2-1.2.9/src/libspf2/spf_interpret.c libspf2-1.2.9.dnssec/src/libspf2/spf_interpret.c --- libspf2-1.2.9/src/libspf2/spf_interpret.c 2008-10-22 11:47:43.000000000 -0400 +++ libspf2-1.2.9.dnssec/src/libspf2/spf_interpret.c 2009-12-18 10:19:04.607247133 -0500 @@ -284,6 +284,14 @@ SPF_i_set_received_spf(SPF_response_t *s char *p, *p_end; +#ifdef SUPPORT_DNSSEC + int firstdnssecerr; + int i; + int num_errs; + SPF_error_t *err; + SPF_errcode_t errcode; + const char *errmsg = ""; +#endif SPF_ASSERT_NOTNULL(spf_response); spf_request = spf_response->spf_request; SPF_ASSERT_NOTNULL(spf_request); @@ -358,6 +366,57 @@ SPF_i_set_received_spf(SPF_response_t *s } #endif +#ifdef SUPPORT_DNSSEC + /* add in the DNSSEC validation status */ + firstdnssecerr = 1; + num_errs = SPF_response_warnings( spf_response ); + for ( i = 0; i < num_errs; i++ ) + { + err = SPF_response_message( spf_response, i ); + if ( err ) + { + errcode = SPF_error_code ( err ); + if ( errcode == SPF_E_DNSSEC_FAILURE ) + { + errmsg = SPF_error_message( err ); + if ( errmsg == NULL ) errmsg = ""; + + if ( firstdnssecerr ) + { + p += snprintf( p, p_end - p, + " x-dnssec=\"fail (%s", + errmsg ); + firstdnssecerr = 0; + } + else + { + p += snprintf( p, p_end - p, ", %s", errmsg ); + } + } + if ( p_end - p <= 0 ) break; + } + } + + if ( p_end - p <= 0 ) break; + + if ( firstdnssecerr ) + { + if ( spf_response->result != SPF_RESULT_NONE ) + { + p += snprintf( p, p_end - p, " x-dnssec=\"pass\";" ); + } + else + { + p += snprintf( p, p_end - p, " x-dnssec=\"none\";" ); + } + } + else + { + p += snprintf( p, p_end - p, ")\";" ); + } + + if ( p_end - p <= 0 ) break; +#endif /* FIXME should the explanation string be included in the header? */ /* FIXME should the header be reformated to include line breaks? */ @@ -787,6 +846,15 @@ SPF_record_interpret(SPF_record_t *spf_r return DONE_TEMPERR(SPF_E_DNS_ERROR); /* REASON_MECH */ } +#ifdef SUPPORT_DNSSEC + if ( rr_a->herrno == DNSSEC_FAILURE ) + { + SPF_response_add_warn( spf_response, + SPF_E_DNSSEC_FAILURE, + "DNSSEC validation failed for the A record of '%s'.", + lookup ); + } +#endif for (i = 0; i < rr_a->num_rr; i++) { /* XXX Should this be hoisted? */ if (rr_a->rr_type != fetch_ns_type) @@ -828,6 +896,15 @@ SPF_record_interpret(SPF_record_t *spf_r return DONE_TEMPERR(SPF_E_DNS_ERROR); } +#ifdef SUPPORT_DNSSEC + if ( rr_mx->herrno == DNSSEC_FAILURE ) { + SPF_response_add_warn( spf_response, + SPF_E_DNSSEC_FAILURE, + "DNSSEC validation failed for the MX record of '%s'.", + lookup ); + } +#endif + /* The maximum number of MX records we will inspect. */ max_mx = rr_mx->num_rr; max_exceeded = 0; @@ -859,6 +936,21 @@ SPF_record_interpret(SPF_record_t *spf_r return DONE_TEMPERR(SPF_E_DNS_ERROR); } +#ifdef SUPPORT_DNSSEC + if ( rr_a->herrno == DNSSEC_FAILURE ) { + if ( spf_request->client_ver == AF_INET ) { + SPF_response_add_warn( spf_response, SPF_E_DNSSEC_FAILURE, + "DNSSEC validation failed for the A record of '%s'.", + rr_mx->rr[j]->mx ); + } + else { + SPF_response_add_warn( spf_response, SPF_E_DNSSEC_FAILURE, + "DNSSEC validation failed for the AAAA record of '%s'.", + rr_mx->rr[j]->mx ); + } + } +#endif + for (i = 0; i < rr_a->num_rr; i++) { /* XXX Should this be hoisted? */ if (rr_a->rr_type != fetch_ns_type) @@ -941,6 +1033,14 @@ SPF_record_interpret(SPF_record_t *spf_r return DONE_TEMPERR( SPF_E_DNS_ERROR ); } +#ifdef SUPPORT_DNSSEC + if( rr_a->herrno == DNSSEC_FAILURE ) { + SPF_response_add_warn( spf_response, SPF_E_DNSSEC_FAILURE, + "DNSSEC validation failed for the A record of '%s'.", + rr_ptr->rr[i]->ptr ); + } +#endif + for (j = 0; j < rr_a->num_rr; j++) { /* XXX MX has a 'continue' case here which should be hoisted. */ @@ -1012,6 +1112,14 @@ SPF_record_interpret(SPF_record_t *spf_r return DONE_TEMPERR( SPF_E_DNS_ERROR ); } +#ifdef SUPPORT_DNSSEC + if( rr_aaaa->herrno == DNSSEC_FAILURE ) { + SPF_response_add_warn( spf_response, SPF_E_DNSSEC_FAILURE, + "DNSSEC validation failed for the AAAA record of '%s'.", + rr_ptr->rr[i]->ptr ); + } +#endif + for( j = 0; j < rr_aaaa->num_rr; j++ ) { /* XXX MX has a 'continue' case here which should be hoisted. */ if ( spf_server->debug ) { @@ -1150,6 +1258,32 @@ SPF_record_interpret(SPF_record_t *spf_r spf_response = save_spf_response; save_spf_response = NULL; +#ifdef SUPPORT_DNSSEC + /* Copy any DNSSEC validation warnings from + * spf_response_subr to spf_response + */ + do { + int num_errs; + int i; + SPF_error_t *err; + SPF_errcode_t errcode; + char *errmsg; + + num_errs = SPF_response_warnings( spf_response_subr ); + for ( i = 0; i < num_errs; i++ ) { + err = SPF_response_message( spf_response_subr, i ); + if ( err ) { + errcode = SPF_error_code( err ); + if ( errcode == SPF_E_DNSSEC_FAILURE ) { + errmsg = ( char * ) SPF_error_message( err ); + SPF_response_add_warn( spf_response, + SPF_E_DNSSEC_FAILURE, + errmsg ); + } + } + } + } while (0); +#endif /* Rewrite according to prefix of include */ switch (SPF_response_result(spf_response_subr)) { case SPF_RESULT_PASS: @@ -1234,6 +1368,15 @@ SPF_record_interpret(SPF_record_t *spf_r SPF_FREE_LOOKUP_DATA(); return DONE_TEMPERR(SPF_E_DNS_ERROR); } + +#ifdef SUPPORT_DNSSEC + if( rr_a->herrno == DNSSEC_FAILURE ) { + SPF_response_add_warn( spf_response, SPF_E_DNSSEC_FAILURE, + "DNSSEC validation failed for the A record of '%s'.", + lookup ); + } +#endif + if ( rr_a->num_rr > 0 ) { SPF_dns_rr_free(rr_a); SPF_FREE_LOOKUP_DATA(); diff -I '\$Id: ' -u -r -b -w -p -d --exclude-from=/home/rstory/.rcfiles/diff-ignore --new-file libspf2-1.2.9/src/libspf2/spf_server.c libspf2-1.2.9.dnssec/src/libspf2/spf_server.c --- libspf2-1.2.9/src/libspf2/spf_server.c 2008-11-03 19:09:49.000000000 -0500 +++ libspf2-1.2.9.dnssec/src/libspf2/spf_server.c 2009-12-30 14:44:18.995746790 -0500 @@ -400,6 +400,13 @@ retry: SPF_debugf("get_record(%s): NETDB_SUCCESS", domain); break; +#ifdef SUPPORT_DNSSEC + case DNSSEC_FAILURE: + SPF_response_add_warn(spf_response, SPF_E_DNSSEC_FAILURE, + "DNSSEC validation failed for the SPF (TXT) record of '%s'.", + domain); + break; +#endif default: if (spf_server->debug > 0) SPF_debugf("get_record(%s): UNKNOWN_ERROR", domain); diff -I '\$Id: ' -u -r -b -w -p -d --exclude-from=/home/rstory/.rcfiles/diff-ignore --new-file libspf2-1.2.9/src/libspf2/spf_strerror.c libspf2-1.2.9.dnssec/src/libspf2/spf_strerror.c --- libspf2-1.2.9/src/libspf2/spf_strerror.c 2008-10-06 19:54:08.000000000 -0400 +++ libspf2-1.2.9.dnssec/src/libspf2/spf_strerror.c 2009-12-30 14:45:16.005861646 -0500 @@ -166,6 +166,12 @@ SPF_strerror( SPF_errcode_t spf_c_err ) return "Multiple SPF or TXT records for domain."; break; +#ifdef SUPPORT_DNSSEC + case SPF_E_DNSSEC_FAILURE: + return "DNSSEC Validation of SPF record failed"; + break; +#endif + default: return "Unknown SPF error code"; break; dnssec-tools-2.0/apps/curl/0000775000237200023720000000000012111172555016030 5ustar hardakerhardakerdnssec-tools-2.0/apps/curl/README.curl0000664000237200023720000000110012100601451017632 0ustar hardakerhardakerThis patch adds DANE support to curl. Local validation of the TLSA record is enabled through dnsval (libval, libsres) from the dnssec-tools package. The validation of the SSL/TLS certificate against the certificate provided in the TLSA record is currently enabled only when openssl is used as the crypto engine. The DANE support can be tested as follows: $ curl -v https://www.dnssec-tools.org/readme/README.curl ... * DANE: TLSA record for www.dnssec-tools.org exists. ... * DANE: SSL certificate verified using DANE. * DANE: Skipping additional ceritificate checks. ... dnssec-tools-2.0/apps/curl/curl-7.28.0.patch0000664000237200023720000001145212100601451020541 0ustar hardakerhardakerdiff -r -u curl-7.28.0/configure.ac curl-7.28.0.dnssec/configure.ac --- curl-7.28.0/configure.ac 2012-09-08 16:39:18.000000000 -0400 +++ curl-7.28.0.dnssec/configure.ac 2013-01-25 16:11:07.000000000 -0500 @@ -683,6 +683,12 @@ CURL_CHECK_LIB_XNET +AC_CHECK_LIB(val-threads, val_getdaneinfo, + [ + LIBS="$LIBS -lval-threads -lsres -lpthread" + AC_DEFINE([HAVE_DNSVAL_DANE], [1], [Perform local DANE Validation using dnsval]) + ]) + dnl gethostbyname without lib or in the nsl lib? AC_CHECK_FUNC(gethostbyname, [HAVE_GETHOSTBYNAME="1" diff -r -u curl-7.28.0/lib/sslgen.c curl-7.28.0.dnssec/lib/sslgen.c --- curl-7.28.0/lib/sslgen.c 2012-08-08 17:38:25.000000000 -0400 +++ curl-7.28.0.dnssec/lib/sslgen.c 2013-01-25 16:11:55.000000000 -0500 @@ -161,6 +161,9 @@ Curl_safefree(sslc->cipher_list); Curl_safefree(sslc->egdsocket); Curl_safefree(sslc->random_file); +#ifdef HAVE_DNSVAL_DANE + val_free_dane(sslc->danestatus); +#endif } #ifdef USE_SSL diff -r -u curl-7.28.0/lib/ssluse.c curl-7.28.0.dnssec/lib/ssluse.c --- curl-7.28.0/lib/ssluse.c 2012-10-08 18:35:40.000000000 -0400 +++ curl-7.28.0.dnssec/lib/ssluse.c 2013-01-25 16:25:54.000000000 -0500 @@ -69,6 +69,11 @@ #include #endif +#ifdef HAVE_DNSVAL_DANE +#include +#include +#endif + #include "warnless.h" #include "curl_memory.h" #include "non-ascii.h" /* for Curl_convert_from_utf8 prototype */ @@ -1451,6 +1456,13 @@ #endif #endif +#ifdef HAVE_DNSVAL_DANE + int dane_retval; + int dane_verify; + struct val_daneparams daneparams; + struct val_danestatus *danestatus = NULL; +#endif + DEBUGASSERT(ssl_connect_1 == connssl->connecting_state); /* Make funny stuff to get random input */ @@ -1699,12 +1711,38 @@ data->set.str[STRING_SSL_CRLFILE]: "none"); } +#ifdef HAVE_DNSVAL_DANE + /* + * Check if a TLSA record is available. If yes, then don't try to + * verify the peer at the time of the SSL_connect(). + */ + dane_verify = 0; + daneparams.port = conn->port; + daneparams.proto = DANE_PARAM_PROTO_TCP; + + dane_retval = val_getdaneinfo(NULL, conn->host.name, + &daneparams, &(data->set.ssl.danestatus)); + if (VAL_DANE_NOERROR == dane_retval) { + dane_verify = 1; + infof (data, "DANE: TLSA record for %s exists.\n", conn->host.name); + } else if (VAL_DANE_IGNORE_TLSA != dane_retval) { + /* Error condition */ + failf(data, "DANE: TLSA record for %s could not be validated.\n", + conn->host.name); + return CURLE_PEER_FAILED_VERIFICATION; + } +#endif + /* SSL always tries to verify the peer, this only says whether it should * fail to connect if the verification fails, or if it should continue * anyway. In the latter case the result of the verification is checked with * SSL_get_verify_result() below. */ SSL_CTX_set_verify(connssl->ctx, - data->set.ssl.verifypeer?SSL_VERIFY_PEER:SSL_VERIFY_NONE, + data->set.ssl.verifypeer +#ifdef HAVE_DNSVAL_DANE + && dane_verify == 0 +#endif + ? SSL_VERIFY_PEER:SSL_VERIFY_NONE, cert_verify_callback); /* give application a chance to interfere with SSL set up. */ @@ -2460,6 +2498,26 @@ } #endif +#ifdef HAVE_DNSVAL_DANE + /* + * Check if we can validate the cert through the DANE protocol + */ + if (data->set.ssl.danestatus) { + int do_certchk = 1; + if (VAL_DANE_NOERROR != val_dane_check(NULL, connssl->handle, + data->set.ssl.danestatus, &do_certchk)) { + connssl->connecting_state = ssl_connect_done; + return CURLE_PEER_FAILED_VERIFICATION; + } + infof (data, "DANE: SSL certificate verified using DANE.\n"); + if (do_certchk == 0) { + infof (data, "DANE: Skipping additional ceritificate checks.\n"); + connssl->connecting_state = ssl_connect_done; + return CURLE_OK; + } + } +#endif + /* * We check certificates to authenticate the server; otherwise we risk * man-in-the-middle attack; NEVERTHELESS, if we're told explicitly not to diff -r -u curl-7.28.0/lib/urldata.h curl-7.28.0.dnssec/lib/urldata.h --- curl-7.28.0/lib/urldata.h 2012-09-09 08:46:58.000000000 -0400 +++ curl-7.28.0.dnssec/lib/urldata.h 2013-01-25 16:12:06.000000000 -0500 @@ -150,6 +150,11 @@ #include #endif +#ifdef HAVE_DNSVAL_DANE +#include +#include +#endif + #include "timeval.h" #ifdef HAVE_ZLIB_H @@ -354,6 +359,10 @@ char *password; /* TLS password (for, e.g., SRP) */ enum CURL_TLSAUTH authtype; /* TLS authentication type (default SRP) */ #endif + +#ifdef HAVE_DNSVAL_DANE + struct val_danestatus *danestatus; +#endif }; /* information stored about one single SSL session */ dnssec-tools-2.0/apps/mozilla/0000775000237200023720000000000012111172577016536 5ustar hardakerhardakerdnssec-tools-2.0/apps/mozilla/mozilla-xulrunner/0000775000237200023720000000000012111172576022244 5ustar hardakerhardakerdnssec-tools-2.0/apps/mozilla/mozilla-xulrunner/xulrunner-spec.patch0000664000237200023720000000441511764156360026271 0ustar hardakerhardaker--- xulrunner.spec.orig 2012-04-24 05:35:03.000000000 -0400 +++ xulrunner.spec 2012-06-07 01:07:26.767103575 -0400 @@ -1,3 +1,7 @@ +# DNSSEC-Tools +%define dist .1.dnssec +#%define _default_patch_fuzz 2 + # Use system nspr/nss? %define system_nss 1 @@ -21,7 +25,7 @@ %global libvpx_version 1.0.0 %if %{?system_nss} -%global nspr_version 4.9 +%global nspr_version 4.9-2.1.dnssec %global nss_version 3.13.3 %endif @@ -104,6 +108,16 @@ Patch46: mozilla-724615.patch Patch47: mozilla-691898.patch +# DNSSEC-Tools +# - mozilla-base patches +Patch1001: moz-base-0001-take-advantage-of-new-DNSSEC-functionality-in-NSPR.patch +Patch1002: moz-base-0002-support-functions-in-preparation-for-async-support.patch +Patch1003: moz-base-0003-take-advantage-of-new-async-functionality-in-NSPR.patch +Patch1004: moz-base-0004-make-netwerk-DNSSEC-validation-aware.patch +# - mozilla-browser patches +Patch1101: moz-browser-0001-update-browser-local-overrides-for-DNSSEC.patch +Patch1102: moz-browser-0002-add-DNSSEC-preferences-to-browser.patch + # --------------------------------------------------- %if %{?system_nss} @@ -132,6 +146,9 @@ BuildRequires: mesa-libGL-devel BuildRequires: libcurl-devel BuildRequires: libvpx-devel >= %{libvpx_version} +BuildRequires: autoconf213 +BuildRequires: dnssec-tools-libs-devel +BuildRequires: openssl-devel Requires: mozilla-filesystem %if %{?system_nss} @@ -242,6 +259,23 @@ %patch46 -p1 -b .724615 #%patch47 -p1 -b .691898 +############################### +# DNSSEC-Tools +# - mozilla-base patches +%patch1001 -p1 -b .dnssec-moz-base +%patch1002 -p1 -b .dnssec-moz-base +%patch1003 -p1 -b .dnssec-moz-base +%patch1004 -p1 -b .dnssec-moz-base +# - mozilla-browser patches +%patch1101 -p1 -b .dnssec-moz-browser +%patch1102 -p1 -b .dnssec-moz-browser + +# rebuild configure(s) due to dnssec patches +/bin/rm -f ./configure +/usr/bin/autoconf-2.13 +# end dnssec related patches +############################### + %{__rm} -f .mozconfig %{__cp} %{SOURCE10} .mozconfig %if %{enable_mozilla_crashreporter} @@ -306,6 +340,8 @@ echo "ac_add_options --disable-tracejit" >> .mozconfig %endif +echo "ac_add_options --with-system-val" >> .mozconfig + #--------------------------------------------------------------------- %build dnssec-tools-2.0/apps/mozilla/mozilla-xulrunner/mozilla-central/0000775000237200023720000000000012111172576025341 5ustar hardakerhardaker././@LongLink0000000000000000000000000000020300000000000011560 Lustar rootrootdnssec-tools-2.0/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0003-support-functions-in-preparation-for-async.patchdnssec-tools-2.0/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0003-support-functions-0000664000237200023720000001400012102537574034106 0ustar hardakerhardakerFrom c60a6a3eb7940a08b029f565cde74dfc19af7ce3 Mon Sep 17 00:00:00 2001 From: Robert Story Date: Mon, 30 Jan 2012 17:40:30 -0500 Subject: [PATCH 17/25] XULRUNNER support functions in preparation for async support - factor out some code from GetHostToLookup into new functions GetHostToLookupNoWaiting(), GetHostLookupTimeout() and GetHostLookupIdleWait(). --- netwerk/dns/nsHostResolver.cpp | 126 +++++++++++++++++++++++++++-------------- netwerk/dns/nsHostResolver.h | 4 ++ 2 files changed, 86 insertions(+), 44 deletions(-) diff --git a/netwerk/dns/nsHostResolver.cpp b/netwerk/dns/nsHostResolver.cpp index 4a66b2d..b96d97f 100644 --- a/netwerk/dns/nsHostResolver.cpp +++ b/netwerk/dns/nsHostResolver.cpp @@ -786,70 +786,108 @@ nsHostResolver::DeQueue(PRCList &aQ, nsHostRecord **aResult) (*aResult)->onQueue = false; } +void +nsHostResolver::GetHostLookupTimeout(PRIntervalTime &timeout) +{ + mLock.AssertCurrentThreadOwns(); + + timeout = (mNumIdleThreads >= HighThreadThreshold) ? + mShortIdleTimeout : mLongIdleTimeout; +} + +bool +nsHostResolver::GetHostToLookupNoWaiting(nsHostRecord **result) +{ + mLock.AssertCurrentThreadOwns(); + + if (mShutdown) + return false; + + // remove next record from Q; hand over owning reference. + // Check high, then med, then low + + if (!PR_CLIST_IS_EMPTY(&mHighQ)) { + DeQueue (mHighQ, result); + return true; + } + + if (mActiveAnyThreadCount < HighThreadThreshold) { + if (!PR_CLIST_IS_EMPTY(&mMediumQ)) { + DeQueue (mMediumQ, result); + mActiveAnyThreadCount++; + (*result)->usingAnyThread = true; + return true; + } + + if (!PR_CLIST_IS_EMPTY(&mLowQ)) { + DeQueue (mLowQ, result); + mActiveAnyThreadCount++; + (*result)->usingAnyThread = true; + return true; + } + } + + return false; +} + +void +nsHostResolver::GetHostLookupIdleWait(PRIntervalTime &epoch, + PRIntervalTime &timeout, bool &timedOut) +{ + mLock.AssertCurrentThreadOwns(); + + PRIntervalTime now; + + // wait for one or more of the following to occur: + // (1) the pending queue has a host record to process + // (2) the shutdown flag has been set + // (3) the thread has been idle for too long + + mNumIdleThreads++; + mIdleThreadCV.Wait(timeout); + mNumIdleThreads--; + + now = PR_IntervalNow(); + + if ((PRIntervalTime)(now - epoch) >= timeout) + timedOut = true; + else { + // It is possible that PR_WaitCondVar() was interrupted and returned + // early, in which case we will loop back and re-enter it. In that case + // we want to do so with the new timeout reduced to reflect time + // already spent waiting. + timeout -= (PRIntervalTime)(now - epoch); + epoch = now; + } +} + bool nsHostResolver::GetHostToLookup(nsHostRecord **result) { bool timedOut = false; - PRIntervalTime epoch, now, timeout; + PRIntervalTime epoch, timeout; MutexAutoLock lock(mLock); - timeout = (mNumIdleThreads >= HighThreadThreshold) ? mShortIdleTimeout : mLongIdleTimeout; + GetHostLookupTimeout(timeout); epoch = PR_IntervalNow(); while (!mShutdown) { - // remove next record from Q; hand over owning reference. Check high, then med, then low - - if (!PR_CLIST_IS_EMPTY(&mHighQ)) { - DeQueue (mHighQ, result); + + if (GetHostToLookupNoWaiting(result)) return true; - } - if (mActiveAnyThreadCount < HighThreadThreshold) { - if (!PR_CLIST_IS_EMPTY(&mMediumQ)) { - DeQueue (mMediumQ, result); - mActiveAnyThreadCount++; - (*result)->usingAnyThread = true; - return true; - } - - if (!PR_CLIST_IS_EMPTY(&mLowQ)) { - DeQueue (mLowQ, result); - mActiveAnyThreadCount++; - (*result)->usingAnyThread = true; - return true; - } - } - // Determining timeout is racy, so allow one cycle through checking the queues // before exiting. if (timedOut) break; - // wait for one or more of the following to occur: - // (1) the pending queue has a host record to process - // (2) the shutdown flag has been set - // (3) the thread has been idle for too long - - mNumIdleThreads++; - mIdleThreadCV.Wait(timeout); - mNumIdleThreads--; - - now = PR_IntervalNow(); - - if ((PRIntervalTime)(now - epoch) >= timeout) - timedOut = true; - else { - // It is possible that PR_WaitCondVar() was interrupted and returned early, - // in which case we will loop back and re-enter it. In that case we want to - // do so with the new timeout reduced to reflect time already spent waiting. - timeout -= (PRIntervalTime)(now - epoch); - epoch = now; - } + GetHostLookupIdleWait(timeout, epoch, timedOut); } - // tell thread to exit... mThreadCount--; + + // tell thread to exit... return false; } diff --git a/netwerk/dns/nsHostResolver.h b/netwerk/dns/nsHostResolver.h index dfa08eb..408be4b 100644 --- a/netwerk/dns/nsHostResolver.h +++ b/netwerk/dns/nsHostResolver.h @@ -259,6 +259,10 @@ private: nsresult Init(); nsresult IssueLookup(nsHostRecord *); bool GetHostToLookup(nsHostRecord **m); + bool GetHostToLookupNoWaiting(nsHostRecord **m); + void GetHostLookupTimeout(PRIntervalTime &timeout); + void GetHostLookupIdleWait(PRIntervalTime &epoch, + PRIntervalTime &timeout, bool &timedOut); void OnLookupComplete(nsHostRecord *, nsresult, PRAddrInfo *); void DeQueue(PRCList &aQ, nsHostRecord **aResult); void ClearPendingQueue(PRCList *aPendingQueue); -- 1.7.11.7 ././@LongLink0000000000000000000000000000017000000000000011563 Lustar rootrootdnssec-tools-2.0/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0001-add-dnssec-options-to-configure.patchdnssec-tools-2.0/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0001-add-dnssec-options0000664000237200023720000001115012102537574034006 0ustar hardakerhardakerFrom bd017f03a870b9f7e1adff895383e3d5fd976435 Mon Sep 17 00:00:00 2001 From: Robert Story Date: Thu, 13 Oct 2011 01:34:28 -0400 Subject: [PATCH 15/25] XULRUNNER add dnssec options to configure --- configure.in | 101 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 101 insertions(+) diff --git a/configure.in b/configure.in index 1de24b9..07b9bc5 100644 --- a/configure.in +++ b/configure.in @@ -8325,6 +8325,107 @@ if test "$MOZ_APP_COMPONENT_MODULES"; then fi dnl ======================================================== +dnl = Add DNSSEC support +dnl ======================================================== + +AC_ARG_WITH(system-val, +[ --with-system-val[=PFX] + Use system DNSSEC validator [installed at prefix PFX]], + , + [with_system_val=no]) + +AC_ARG_WITH(system-openssl, +[ --with-system-openssl[=PFX] + Use system openssl libraries [installed at prefix PFX]], + , + [with_system_openssl=no]) + +VAL_LIBS="" +VAL_CFLAGS="" +VAL_LDFLAGS="" +OPENSSL_LIBS="" +MOZ_DNSSEC="" +if test "x$with_system_val" != xno; then + if test "x$with_system_val" != xyes; then + VAL_CFLAGS="-I${with_system_val}/include" + VAL_LDFLAGS="-L${with_system_val}/lib" + fi + CFLAGS="$CFLAGS $VAL_CFLAGS" + if test -n "$_WIN32_MSVC"; then + VAL_LIBS="${with_system_val}/lib/libval-threads.a ${with_system_val}/lib/libsres.a ${with_system_val}/lib/libcrypto.a ${with_system_val}/lib/libpthread.dll.a ${with_system_val}/lib/libgcc.a user32.lib gdi32.lib Ws2_32.lib" + AC_DEFINE([MOZ_DNSSEC], [1], [Define if DNSSEC is enabled]) + else + LDFLAGS="$LDFLAGS $VAL_LDFLAGS" + dnl echo "with_system_openssl='"$with_system_openssl"'" + if test "x$with_system_openssl" != xno; then + if test "x$with_system_openssl" != xyes; then + CFLAGS="$CFLAGS -I${with_system_openssl}/include" + LDFLAGS="$LDFLAGS -L${with_system_openssl}/lib" + OPENSSL_PATH="${with_system_openssl}/lib" + else + OPENSSL_PATH="/usr/lib" + fi + else + OPENSSL_PATH="/usr/lib" + fi + AC_CHECK_LIB(crypto, EVP_md5, OPENSSL_LIBS="-lcrypto") + + dnl because of conflict with nss, we need static version of openssl + AC_CHECK_LIB(ssl, SSL_get_SSL_CTX, , [AC_MSG_ERROR(Cannot find OpenSSL libraries.)]) + if test -n "$HAVE_64BIT_OS"; then + if test -e "${OPENSSL_PATH}64/libssl.a"; then + OPENSSL_LIBS="$OPENSSL_LIBS ${OPENSSL_PATH}64/libssl.a" + elif test -e "${OPENSSL_PATH}/libssl.a"; then + OPENSSL_LIBS="$OPENSSL_LIBS $OPENSSL_PATH/libssl.a" + else + AC_MSG_ERROR("Static SSL library not found.") + fi + else + if test -e "${OPENSSL_PATH}/libssl.a"; then + OPENSSL_LIBS="$OPENSSL_LIBS $OPENSSL_PATH/libssl.a" + else + AC_MSG_ERROR("Static SSL library not found.") + fi + fi + + dnl with static openssl, apparently we need to pull in libkrb5 + AC_CHECK_LIB(krb5, krb5_init_context, OPENSSL_LIBS="$OPENSSL_LIBS -lkrb5") + AC_CHECK_LIB(k5crypto, krb5_checksum_size, OPENSSL_LIBS="$OPENSSL_LIBS -lk5crypto") + + dnl val-threads check + AC_CHECK_LIB(val-threads, val_gethostbyname, + [VAL_LIBS="-lval-threads -lsres ${OPENSSL_LIBS} ${_PTHREAD_LDFLAGS}" + MOZ_DNSSEC="1" + AC_DEFINE([MOZ_DNSSEC], [1], [Define if DNSSEC is enabled])], + [AC_MSG_ERROR(Can't find val_gethostbyname.)], + -lsres ${OPENSSL_LIBS} ${_PTHREAD_LDFLAGS}) + fi + dnl functions added in 1.11 + AC_CHECK_LIB(val-threads, val_getaddrinfo_submit, + AC_DEFINE(HAVE_VAL_GETADDRINFO_SUBMIT), , + -lsres ${OPENSSL_LIBS} ${_PTHREAD_LDFLAGS} ${OS_LDFLAGS}) + dnl functions added in 1.12 + AC_CHECK_LIB(val-threads, val_context_setqflags, + AC_DEFINE(HAVE_VAL_CONTEXT_SETQFLAGS), , + -lsres ${OPENSSL_LIBS} ${_PTHREAD_LDFLAGS} ${OS_LDFLAGS}) + + dnl functions added in 1.13 + AC_CHECK_LIB(val-threads, val_freeaddrinfo, + AC_DEFINE(HAVE_VAL_FREEADDRINFO), , + -lsres ${OPENSSL_LIBS} ${_PTHREAD_LDFLAGS} ${OS_LDFLAGS}) + AC_CHECK_LIB(val-threads, val_getaddrinfo_cancel, + AC_DEFINE(HAVE_VAL_GETADDRINFO_CANCEL), , + -lsres ${OPENSSL_LIBS} ${_PTHREAD_LDFLAGS} ${OS_LDFLAGS}) +fi +LIBS="$LIBS $VAL_LIBS" +NSPR_LIBS="$NSPR_LIBS $VAL_LDFLAGS $VAL_LIBS" +NSPR_CFLAGS="$NSPR_CFLAGS $VAL_CFLAGS" +AC_SUBST(VAL_LIBS) +AC_SUBST(VAL_CFLAGS) +AC_SUBST(VAL_LDFLAGS) +AC_SUBST(MOZ_DNSSEC) + +dnl ======================================================== dnl = dnl = Maintainer debug option (no --enable equivalent) dnl = -- 1.7.11.7 ././@LongLink0000000000000000000000000000016600000000000011570 Lustar rootrootdnssec-tools-2.0/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0007-add-DANE-checks-for-SSL-certs.patchdnssec-tools-2.0/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0007-add-DANE-checks-fo0000664000237200023720000000646012102537574033423 0ustar hardakerhardakerFrom 2ef7e56dfd2787c611e2a98bab9debb77539acd4 Mon Sep 17 00:00:00 2001 From: Robert Story Date: Tue, 8 Jan 2013 00:24:32 -0500 Subject: [PATCH 21/25] XULRUNNER add DANE checks for SSL certs --- .../en-US/chrome/pipnss/nsserrors.properties | 3 +++ .../manager/ssl/src/SSLServerCertVerification.cpp | 25 +++++++++++++++++++++- 2 files changed, 27 insertions(+), 1 deletion(-) diff --git a/security/manager/locales/en-US/chrome/pipnss/nsserrors.properties b/security/manager/locales/en-US/chrome/pipnss/nsserrors.properties index 188222a..2c796c0 100644 --- a/security/manager/locales/en-US/chrome/pipnss/nsserrors.properties +++ b/security/manager/locales/en-US/chrome/pipnss/nsserrors.properties @@ -122,6 +122,9 @@ SSL_ERROR_NEXT_PROTOCOL_DATA_INVALID=SSL received invalid NPN extension data. SSL_ERROR_FEATURE_NOT_SUPPORTED_FOR_SSL2=SSL feature not supported for SSL 2.0 connections. SSL_ERROR_FEATURE_NOT_SUPPORTED_FOR_SERVERS=SSL feature not supported for servers. SSL_ERROR_FEATURE_NOT_SUPPORTED_FOR_CLIENTS=SSL feature not supported for clients. +SSL_ERROR_DANE_QUERY_FAILED=Could not fetch a DANE record or prove its absence. +SSL_ERROR_DANE_UNAUTHORIZED=DANE certificate mismatch. +SSL_ERROR_DANE_INIT_FAILED=SSL DANE Support could not be initialized. SEC_ERROR_IO=An I/O error occurred during security authorization. SEC_ERROR_LIBRARY_FAILURE=security library failure. SEC_ERROR_BAD_DATA=security library: received bad data. diff --git a/security/manager/ssl/src/SSLServerCertVerification.cpp b/security/manager/ssl/src/SSLServerCertVerification.cpp index 56ac90f..6dab105 100644 --- a/security/manager/ssl/src/SSLServerCertVerification.cpp +++ b/security/manager/ssl/src/SSLServerCertVerification.cpp @@ -421,6 +421,20 @@ CreateCertErrorRunnable(PRErrorCode defaultErrorCodeToReport, return nullptr; } + // if we have a DANE validation failure don't do anything else + if (defaultErrorCodeToReport == SSL_ERROR_DANE_INIT_FAILED) { + PR_SetError(SSL_ERROR_DANE_INIT_FAILED, 0); + return nullptr; + } + if (defaultErrorCodeToReport == SSL_ERROR_DANE_QUERY_FAILED) { + PR_SetError(SSL_ERROR_DANE_QUERY_FAILED, 0); + return nullptr; + } + if (defaultErrorCodeToReport == SSL_ERROR_DANE_UNAUTHORIZED) { + PR_SetError(SSL_ERROR_DANE_UNAUTHORIZED, 0); + return nullptr; + } + if (defaultErrorCodeToReport == 0) { NS_ERROR("No error code set during certificate validation failure."); PR_SetError(PR_INVALID_STATE_ERROR, 0); @@ -1034,10 +1048,19 @@ SSLServerCertVerificationJob::Run() if (mInfoObject->isAlreadyShutDown()) { error = SEC_ERROR_USER_CANCELLED; } else { + SECStatus rv; + int do_pathval = 1; + int32_t port; + mInfoObject->GetPort(&port); // Reset the error code here so we can detect if AuthCertificate fails to // set the error code if/when it fails. PR_SetError(0, 0); - SECStatus rv = AuthCertificate(mInfoObject, mCert); + rv = SSL_DANECheck(mInfoObject, (const char *)(mInfoObject->GetHostName()), + port, (CERTCertificate *)mCert, &do_pathval); + + if (rv == SECSuccess && do_pathval) { + rv = AuthCertificate(mInfoObject, mCert); + } if (rv == SECSuccess) { nsRefPtr restart = new SSLServerCertVerificationResult(mInfoObject, 0); -- 1.7.11.7 ././@LongLink0000000000000000000000000000017300000000000011566 Lustar rootrootdnssec-tools-2.0/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0002-use-NSPRs-new-DNSSEC-functionality.patchdnssec-tools-2.0/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0002-use-NSPRs-new-DNSS0000664000237200023720000002731312102537574033414 0ustar hardakerhardakerFrom 2b4e34be37c64fefab5952064fa587d4c221e7d7 Mon Sep 17 00:00:00 2001 From: Robert Story Date: Tue, 16 Oct 2012 23:33:24 -0400 Subject: [PATCH 16/25] XULRUNNER use NSPRs new DNSSEC functionality --- netwerk/dns/nsDNSService2.cpp | 25 ++++++++++++ netwerk/dns/nsDNSService2.h | 4 ++ netwerk/dns/nsHostResolver.cpp | 88 +++++++++++++++++++++++++++++++++++++++--- netwerk/dns/nsHostResolver.h | 29 +++++++++++++- 4 files changed, 138 insertions(+), 8 deletions(-) diff --git a/netwerk/dns/nsDNSService2.cpp b/netwerk/dns/nsDNSService2.cpp index 3bc5b5e..5a1f11c 100644 --- a/netwerk/dns/nsDNSService2.cpp +++ b/netwerk/dns/nsDNSService2.cpp @@ -346,6 +346,12 @@ nsDNSSyncRequest::EqualsAsyncListener(nsIDNSListener *aListener) //----------------------------------------------------------------------------- +#ifdef MOZ_DNSSEC + +val_context_t *nsDNSService::mValContext = nullptr; + +#endif + nsDNSService::nsDNSService() : mLock("nsDNSServer.mLock") , mFirstTime(true) @@ -423,6 +429,11 @@ nsDNSService::Init() } } +#ifdef MOZ_DNSSEC + if (nullptr == mValContext) + val_create_context((char*)"mozilla-browser", &mValContext); +#endif + // we have to null out mIDN since we might be getting re-initialized // as a result of a pref change. nsCOMPtr idn; @@ -440,6 +451,9 @@ nsDNSService::Init() nsresult rv = nsHostResolver::Create(maxCacheEntries, maxCacheLifetime, lifetimeGracePeriod, +#ifdef MOZ_DNSSEC + mValContext, +#endif getter_AddRefs(res)); if (NS_SUCCEEDED(rv)) { // now, set all of our member variables while holding the lock @@ -471,14 +485,25 @@ nsDNSService::Init() NS_IMETHODIMP nsDNSService::Shutdown() { +#ifdef MOZ_DNSSEC + val_context *ctx = nullptr; +#endif nsRefPtr res; { MutexAutoLock lock(mLock); res = mResolver; mResolver = nullptr; +#ifdef MOZ_DNSSEC + ctx = mValContext; + mValContext = nullptr; +#endif } if (res) res->Shutdown(); +#ifdef MOZ_DNSSEC + if (nullptr != ctx) + val_free_context(ctx); +#endif return NS_OK; } diff --git a/netwerk/dns/nsDNSService2.h b/netwerk/dns/nsDNSService2.h index 6126dd2..1500ebc 100644 --- a/netwerk/dns/nsDNSService2.h +++ b/netwerk/dns/nsDNSService2.h @@ -37,6 +37,10 @@ private: // mLock protects access to mResolver and mIPv4OnlyDomains mozilla::Mutex mLock; +#ifdef MOZ_DNSSEC + static val_context_t *mValContext; +#endif + // mIPv4OnlyDomains is a comma-separated list of domains for which only // IPv4 DNS lookups are performed. This allows the user to disable IPv6 on // a per-domain basis and work around broken DNS servers. See bug 68796. diff --git a/netwerk/dns/nsHostResolver.cpp b/netwerk/dns/nsHostResolver.cpp index db99b46..4a66b2d 100644 --- a/netwerk/dns/nsHostResolver.cpp +++ b/netwerk/dns/nsHostResolver.cpp @@ -24,6 +24,7 @@ #include "nsAutoPtr.h" #include "pratom.h" #include "prthread.h" +#include "prnetdb.h" #include "prerror.h" #include "prtime.h" #include "prlong.h" @@ -145,7 +146,11 @@ private: // this macro filters out any flags that are not used when constructing the // host key. the significant flags are those that would affect the resulting // host record (i.e., the flags that are passed down to PR_GetAddrInfoByName). +#ifdef MOZ_DNSSEC +#define RES_KEY_FLAGS(_f) ((_f) & (nsHostResolver::RES_CANON_NAME|nsHostResolver::RES_EXTENDED_ERRS)) +#else #define RES_KEY_FLAGS(_f) ((_f) & nsHostResolver::RES_CANON_NAME) +#endif nsHostRecord::nsHostRecord(const nsHostKey *key) : addr_info_lock("nsHostRecord.addr_info_lock") @@ -161,6 +166,10 @@ nsHostRecord::nsHostRecord(const nsHostKey *key) memcpy((char *) host, key->host, strlen(key->host) + 1); flags = key->flags; af = key->af; +#ifdef MOZ_DNSSEC + saved_status = NS_OK; + security_status_flags = 0; +#endif expiration = NowInMinutes(); @@ -335,10 +344,17 @@ HostDB_RemoveEntry(PLDHashTable *table, nsHostResolver::nsHostResolver(uint32_t maxCacheEntries, uint32_t maxCacheLifetime, - uint32_t lifetimeGracePeriod) + uint32_t lifetimeGracePeriod +#ifdef MOZ_DNSSEC + , val_context_t *valContext +#endif + ) : mMaxCacheEntries(maxCacheEntries) , mMaxCacheLifetime(maxCacheLifetime) , mGracePeriod(lifetimeGracePeriod) +#ifdef MOZ_DNSSEC + , mValContext(valContext) +#endif , mLock("nsHostResolver.mLock") , mIdleThreadCV(mLock, "nsHostResolver.mIdleThreadCV") , mNumIdleThreads(0) @@ -500,6 +516,10 @@ nsHostResolver::ResolveHost(const char *host, if (!net_IsValidHostName(nsDependentCString(host))) return NS_ERROR_UNKNOWN_HOST; +#ifdef MOZ_DNSSEC + flags = flags | RES_EXTENDED_ERRS; +#endif + // if result is set inside the lock, then we need to issue the // callback before returning. nsRefPtr result; @@ -561,7 +581,17 @@ nsHostResolver::ResolveHost(const char *host, Telemetry::Accumulate(Telemetry::DNS_LOOKUP_METHOD2, METHOD_NEGATIVE_HIT); status = NS_ERROR_UNKNOWN_HOST; + if (!he->rec->resolving) + // return the cached failure to the caller, but try + // and refresh the record in the background + IssueLookup(he->rec); + } +#ifdef MOZ_DNSSEC + else { + // use the cached status value + status = he->rec->saved_status; } +#endif } // if the host name is an IP address literal and has been parsed, // go ahead and use it. @@ -856,6 +886,9 @@ nsHostResolver::OnLookupComplete(nsHostRecord *rec, nsresult status, PRAddrInfo rec->expiration += 1; /* one minute for negative cache */ rec->negative = true; } +#ifdef MOZ_DNSSEC + rec->saved_status = status; +#endif rec->resolving = false; if (rec->usingAnyThread) { @@ -946,6 +979,25 @@ nsHostResolver::CancelAsyncRequest(const char *host, } } } +// - - - - - - - - - - - - - - - - - - - - - - - - - +#ifdef MOZ_DNSSEC +static nsresult +_ns_translate_dnssec_error(PRErrorCode err) +{ + switch(err) { + case PR_DNSSEC_VALIDATION_ERROR: + return NS_ERROR_DNSSEC_VALIDATION_ERROR; + break; + + case PR_DNSSEC_DNE_ERROR: + return NS_ERROR_DNSSEC_DNE_ERROR; + break; + } + + return NS_ERROR_UNKNOWN_HOST; +} + +#endif // MOZ_DNSSEC //---------------------------------------------------------------------------- @@ -971,13 +1023,26 @@ nsHostResolver::ThreadFunc(void *arg) flags |= PR_AI_NOCANONNAME; TimeStamp startTime = TimeStamp::Now(); - - ai = PR_GetAddrInfoByName(rec->host, rec->af, flags); + +#ifdef MOZ_DNSSEC + if (rec->flags & RES_EXTENDED_ERRS) { + ai = PR_GetAddrInfoByNameExtended(rec->host, rec->af, flags, + &(rec->security_status_flags)); #if defined(RES_RETRY_ON_FAILURE) - if (!ai && rs.Reset()) + if (!ai && rs.Reset()) + ai = PR_GetAddrInfoByNameExtended(rec->host, rec->af, flags, + &(rec->security_status_flags)); +#endif + } else +#endif + { ai = PR_GetAddrInfoByName(rec->host, rec->af, flags); +#if defined(RES_RETRY_ON_FAILURE) + if (!ai && rs.Reset()) + ai = PR_GetAddrInfoByName(rec->host, rec->af, flags); #endif - + } + TimeDuration elapsed = TimeStamp::Now() - startTime; uint32_t millis = static_cast(elapsed.ToMilliseconds()); @@ -992,7 +1057,11 @@ nsHostResolver::ThreadFunc(void *arg) millis); } else { +#ifdef MOZ_DNSSEC + status = _ns_translate_dnssec_error(PR_GetError()); +#else status = NS_ERROR_UNKNOWN_HOST; +#endif Telemetry::Accumulate(Telemetry::DNS_FAILED_LOOKUP_TIME, millis); } @@ -1009,6 +1078,9 @@ nsresult nsHostResolver::Create(uint32_t maxCacheEntries, uint32_t maxCacheLifetime, uint32_t lifetimeGracePeriod, +#ifdef MOZ_DNSSEC + val_context_t *valContext, +#endif nsHostResolver **result) { #if defined(PR_LOGGING) @@ -1018,7 +1090,11 @@ nsHostResolver::Create(uint32_t maxCacheEntries, nsHostResolver *res = new nsHostResolver(maxCacheEntries, maxCacheLifetime, - lifetimeGracePeriod); + lifetimeGracePeriod +#ifdef MOZ_DNSSEC + , valContext +#endif + ); if (!res) return NS_ERROR_OUT_OF_MEMORY; NS_ADDREF(res); diff --git a/netwerk/dns/nsHostResolver.h b/netwerk/dns/nsHostResolver.h index 7a592f0..dfa08eb 100644 --- a/netwerk/dns/nsHostResolver.h +++ b/netwerk/dns/nsHostResolver.h @@ -11,6 +11,7 @@ #include "prclist.h" #include "prnetdb.h" #include "pldhash.h" +#include "prerror.h" #include "mozilla/CondVar.h" #include "mozilla/Mutex.h" #include "nsISupportsImpl.h" @@ -77,7 +78,16 @@ public: uint32_t expiration; /* measured in minutes since epoch */ - bool HasResult() const { return addr_info || addr || negative; } +#ifdef MOZ_DNSSEC + uint16_t security_status_flags; /* DNSSEC information (bitmask) */ + nsresult saved_status; +#endif + + bool HasResult() const { return addr_info || addr || +#ifdef MOZ_DNSSEC + security_status_flags || +#endif + negative; } // hold addr_info_lock when calling the blacklist functions bool Blacklisted(PRNetAddr *query); @@ -87,6 +97,8 @@ public: private: friend class nsHostResolver; + PRIntervalTime start; + PRCList callbacks; /* list of callbacks */ bool resolving; /* true if this record is being resolved, which means @@ -168,6 +180,9 @@ public: static nsresult Create(uint32_t maxCacheEntries, // zero disables cache uint32_t maxCacheLifetime, // minutes uint32_t lifetimeGracePeriod, // minutes +#ifdef MOZ_DNSSEC + val_context_t *valContext, +#endif nsHostResolver **resolver); /** @@ -227,11 +242,18 @@ public: RES_SPECULATE = 1 << 4, //RES_DISABLE_IPV6 = 1 << 5, // Not used RES_OFFLINE = 1 << 6 +#ifdef MOZ_DNSSEC + , RES_EXTENDED_ERRS = 1 << 7 +#endif }; private: nsHostResolver(uint32_t maxCacheEntries = 50, uint32_t maxCacheLifetime = 1, - uint32_t lifetimeGracePeriod = 0); + uint32_t lifetimeGracePeriod = 0 +#ifdef MOZ_DNSSEC + , val_context_t *valContext = nullptr +#endif + ); ~nsHostResolver(); nsresult Init(); @@ -259,6 +281,9 @@ private: uint32_t mMaxCacheEntries; uint32_t mMaxCacheLifetime; uint32_t mGracePeriod; +#ifdef MOZ_DNSSEC + val_context_t *mValContext; +#endif Mutex mLock; CondVar mIdleThreadCV; uint32_t mNumIdleThreads; -- 1.7.11.7 ././@LongLink0000000000000000000000000000017200000000000011565 Lustar rootrootdnssec-tools-2.0/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0004-use-NSPRs-new-async-functionality.patchdnssec-tools-2.0/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0004-use-NSPRs-new-asyn0000664000237200023720000002516012102537574033617 0ustar hardakerhardakerFrom af58d40d500a3e60ca1d3d96ba4d4f300beb394e Mon Sep 17 00:00:00 2001 From: Robert Story Date: Tue, 16 Oct 2012 23:23:53 -0400 Subject: [PATCH 18/25] XULRUNNER use NSPRs new async functionality --- netwerk/dns/nsHostResolver.cpp | 223 +++++++++++++++++++++++++++++++++++++++++ netwerk/dns/nsHostResolver.h | 19 ++++ 2 files changed, 242 insertions(+) diff --git a/netwerk/dns/nsHostResolver.cpp b/netwerk/dns/nsHostResolver.cpp index b96d97f..8643abd 100644 --- a/netwerk/dns/nsHostResolver.cpp +++ b/netwerk/dns/nsHostResolver.cpp @@ -169,6 +169,9 @@ nsHostRecord::nsHostRecord(const nsHostKey *key) #ifdef MOZ_DNSSEC saved_status = NS_OK; security_status_flags = 0; +#ifdef HAVE_VAL_GETADDRINFO_SUBMIT + asyncStatus = nullptr; +#endif #endif expiration = NowInMinutes(); @@ -720,7 +723,11 @@ nsHostResolver::ConditionallyCreateThread(nsHostRecord *rec) mThreadCount++; PRThread *thr = PR_CreateThread(PR_SYSTEM_THREAD, +#if defined(MOZ_DNSSEC) && defined(HAVE_VAL_GETADDRINFO_SUBMIT) + ThreadFuncAsync, +#else ThreadFunc, +#endif this, PR_PRIORITY_NORMAL, PR_GLOBAL_THREAD, @@ -1035,6 +1042,222 @@ _ns_translate_dnssec_error(PRErrorCode err) return NS_ERROR_UNKNOWN_HOST; } +#ifdef HAVE_VAL_GETADDRINFO_SUBMIT +struct nsHR_s { + nsHostResolver *resolver; + nsHostRecord *rec; + uint16_t *asyncPending; + + uint32_t ret_val; + + val_status_t *vstatus; +}; + +/** simple wrapper which calls nsHostResolver::async_callback */ +int +_pr_callback(void *callback_data, int eai_retval, struct addrinfo *res, + val_status_t val_status) +{ + struct nsHR_s *cbd = (struct nsHR_s*)callback_data; + + if (cbd && cbd->resolver) + cbd->resolver->async_callback(cbd, eai_retval, res, val_status); + + return 0; /* OK */ +} + +void +nsHostResolver::async_callback(void *cb_data, int eai_retval, + struct addrinfo *res, val_status_t val_status) +{ + struct nsHR_s *nsHR = (struct nsHR_s *)cb_data; + PRErrorCode err; + PRAddrInfo *ai = (PRAddrInfo *)res; + nsresult status; + + if (NULL == nsHR) + return; + + err = PR_dnssec_result_checks(&nsHR->rec->security_status_flags, + val_status, ai != NULL); + if (err) { + LOG(("nsHostResolver:Async error %d for %s\n", err, nsHR->rec->host)); + if (ai) { + PR_FreeAddrInfo(ai); + ai = nullptr; + } + } + + PRIntervalTime now = PR_IntervalNow(); + PRIntervalTime dif = (PRIntervalTime)now - nsHR->rec->start; + LOG(("%s lookup completed in %u ticks %u s, s %u n %u...\n", + nsHR->rec->host, dif, PR_IntervalToSeconds(dif), + nsHR->rec->start, now)); + + // convert error code to nsresult. + if (!ai) { + status = _ns_translate_dnssec_error(PR_GetError()); + Telemetry::Accumulate(Telemetry::DNS_FAILED_LOOKUP_TIME, dif); + } else { + status = NS_OK; + Telemetry::Accumulate(!nsHR->rec->addr_info_gencnt ? + Telemetry::DNS_LOOKUP_TIME : + Telemetry::DNS_RENEWAL_TIME, + dif); + } + + OnLookupComplete(nsHR->rec, status, ai); + --(*nsHR->asyncPending); + LOG(("nsHostResolver:Async lookup complete for %s ... %d/%d async/ns pending\n", + nsHR->rec->host, *nsHR->asyncPending, mPendingCount)); + + free(nsHR); +} + +void +nsHostResolver::ThreadFuncAsync(void *arg) +{ + LOG(("nsHostResolver::ThreadFuncAsync entering\n")); + nsHostResolver *resolver = (nsHostResolver *)arg; + nsHostRecord *rec; + uint16_t asyncPending = 0, asyncPendingMax = 15, *security_flags; + bool timedOut = false, gotOne, advertiseIdle = true; + PRIntervalTime epoch, timeout, maxTimeout = 8000, + qstart = 0, now, total = 0, diff; + struct nsHR_s *cb_data = NULL; + { + MutexAutoLock lock(resolver->mLock); + resolver->GetHostLookupTimeout(timeout); + ++resolver->mNumIdleThreads; /* we're always ready! */ + } + { + static int log = 0; + if (!log) { + log = 1; + val_log_add_optarg("7:stderr", 1); + } + } + qstart = epoch = PR_IntervalNow(); + while (1) { + PRIntn rc; + + // make sure we can allocate a cb struct before we get a record + if (NULL == cb_data) { + cb_data = (struct nsHR_s *)calloc(1,sizeof(struct nsHR_s)); + if (NULL == cb_data) + break; + } + if (asyncPending) { + MutexAutoLock lock(resolver->mLock); + gotOne = resolver->GetHostToLookupNoWaiting(&rec); + if (resolver->mShutdown) { + --resolver->mThreadCount; + if (advertiseIdle) { + advertiseIdle = false; + --resolver->mNumIdleThreads; + } + break; + } + } else { + now = PR_IntervalNow(); + diff = now - qstart; + total += diff; + LOG(("nsHostResolver:Async work completed in %u ticks (%u total)...\n", + diff, total)); + + // if nothing asyncPending, sleep and wait for a record + gotOne = resolver->GetHostToLookup(&rec); + if (!gotOne) + break; /* thread count already decremented */ + qstart = PR_IntervalNow(); + } + // check for new requests we can submit + if (gotOne) { + LOG(("nsHostResolver:Async submitting %s for resolution...\n", + rec->host)); + ++asyncPending; + + cb_data->resolver = resolver; + cb_data->rec = rec; + cb_data->asyncPending = &asyncPending; + + PRIntn flags = PR_AI_ADDRCONFIG; + if (!(rec->flags & RES_CANON_NAME)) + flags |= PR_AI_NOCANONNAME; + + rec->start = PR_IntervalNow(); + if (rec->flags & RES_EXTENDED_ERRS) + security_flags = &(rec->security_status_flags); + else + security_flags = NULL; + rc = PR_AsyncSubmit_GetAddrInfoByNameExtended + (rec->host, rec->af, flags, security_flags, + resolver->mValContext, &_pr_callback, cb_data, + &(rec->asyncStatus)); + if (rc || NULL == rec->asyncStatus) + _pr_callback(cb_data, EAI_SYSTEM, NULL, VAL_AC_UNSET); + + cb_data = NULL; + continue; // try and submit another one + } + + if (asyncPending) { + // if more than asyncPendingMax are pending, stop advertising + // as idle. When there are less than asyncPendingMax, start + // advertising again. + if ((asyncPending > asyncPendingMax) && advertiseIdle) { + MutexAutoLock lock(resolver->mLock); + --resolver->mNumIdleThreads; + advertiseIdle = false; + } else if (!advertiseIdle && (asyncPending < asyncPendingMax)) { + MutexAutoLock lock(resolver->mLock); + ++resolver->mNumIdleThreads; + advertiseIdle = true; + } + + now = PR_IntervalNow(); + if (timeout > maxTimeout) + timeout = maxTimeout; + LOG(("nsHostResolver:Async %d asyncPending, e %u n %u t %u\n", + asyncPending, epoch, now, timeout)); + rc = PR_AsyncDNS_Idle(resolver->mValContext, &timeout); + LOG(("nsHostResolver:Async idle rc %d, %d asyncPending...\n", rc, + asyncPending)); + if (rc <= 0 && asyncPending) { + timedOut = true; + + LOG(("nsHostResolver:Async bail: rc %d, %d asyncPending\n", + rc, asyncPending)); + + // XXXXXXXXXXXXXXXXX call callbacks XXXXXXXXXXXXXXXXXXXXXXXXX + + asyncPending = 0; + } + } + else { // bail if there is nothing to do + LOG(("nsHostResolver:Async no asyncPending requests...\n")); + + MutexAutoLock lock(resolver->mLock); + if (timedOut || resolver->mShutdown) { + --resolver->mThreadCount; + if (advertiseIdle) { + advertiseIdle = false; + --resolver->mNumIdleThreads; + } + break; + } + else + resolver->GetHostLookupIdleWait(timeout, epoch, timedOut); + } + + } + // free unused cb_data + if ((NULL != cb_data) && (NULL == cb_data->rec)) + free(cb_data); + NS_RELEASE(resolver); + LOG(("nsHostResolver::ThreadFuncAsync exiting\n")); +} +#endif // HAVE_VAL_GETADDRINFO_SUBMIT #endif // MOZ_DNSSEC //---------------------------------------------------------------------------- diff --git a/netwerk/dns/nsHostResolver.h b/netwerk/dns/nsHostResolver.h index 408be4b..07f33e8 100644 --- a/netwerk/dns/nsHostResolver.h +++ b/netwerk/dns/nsHostResolver.h @@ -108,6 +108,10 @@ private: bool onQueue; /* true if pending and on the queue (not yet given to getaddrinfo())*/ bool usingAnyThread; /* true if off queue and contributing to mActiveAnyThreadCount */ +#if defined(MOZ_DNSSEC) && defined(HAVE_VAL_GETADDRINFO_SUBMIT) + val_gai_status *asyncStatus; +#endif + // a list of addresses associated with this record that have been reported // as unusable. the list is kept as a set of strings to make it independent // of gencnt. @@ -163,6 +167,14 @@ public: /** * nsHostResolver - an asynchronous host name resolver. */ + +#if defined(MOZ_DNSSEC) && defined(HAVE_VAL_GETADDRINFO_SUBMIT) +extern "C" { + int _pr_callback(void *callback_data, int eai_retval, struct addrinfo *res, + val_status_t val_status); +} +#endif + class nsHostResolver { typedef mozilla::CondVar CondVar; @@ -271,6 +283,13 @@ private: static void MoveQueue(nsHostRecord *aRec, PRCList &aDestQ); static void ThreadFunc(void *); +#if defined(MOZ_DNSSEC) && defined(HAVE_VAL_GETADDRINFO_SUBMIT) + static void ThreadFuncAsync(void *); + void async_callback(void *cb_data, int eai_retval, struct addrinfo *res, + val_status_t val_status); + friend int _pr_callback(void *callback_data, int eai_retval, + struct addrinfo *res, val_status_t val_status); +#endif enum { METHOD_HIT = 1, -- 1.7.11.7 ././@LongLink0000000000000000000000000000017500000000000011570 Lustar rootrootdnssec-tools-2.0/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0005-make-netwerk-DNSSEC-validation-aware.patchdnssec-tools-2.0/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0005-make-netwerk-DNSSE0000664000237200023720000004644612102537574033600 0ustar hardakerhardakerFrom a3f6b19e8739c20ad1b66b9038558053d2881821 Mon Sep 17 00:00:00 2001 From: Robert Story Date: Mon, 4 Jun 2012 15:53:32 -0400 Subject: [PATCH 19/25] XULRUNNER make netwerk DNSSEC validation aware --- docshell/base/nsDocShell.cpp | 22 ++++++++++++++++ docshell/resources/content/netError.xhtml | 4 +++ dom/locales/en-US/chrome/appstrings.properties | 2 ++ dom/locales/en-US/chrome/netError.dtd | 26 +++++++++++++++++++ netwerk/base/src/nsSocketTransport2.cpp | 21 +++++++++++++++- netwerk/dns/nsDNSService2.cpp | 13 +++++++--- netwerk/dns/nsHostResolver.cpp | 35 ++++++++++++++++++++------ netwerk/protocol/http/nsHttpChannel.cpp | 17 +++++++++++-- netwerk/protocol/http/nsHttpHandler.h | 13 ++++++++++ xpcom/base/nsError.h | 6 +++++ 10 files changed, 146 insertions(+), 13 deletions(-) diff --git a/docshell/base/nsDocShell.cpp b/docshell/base/nsDocShell.cpp index 46d24e2..fcdd80b 100644 --- a/docshell/base/nsDocShell.cpp +++ b/docshell/base/nsDocShell.cpp @@ -4111,6 +4111,26 @@ nsDocShell::DisplayLoadError(nsresult aError, nsIURI *aURI, formatStrCount = 1; error.AssignLiteral("dnsNotFound"); } + else if (NS_ERROR_DNSSEC_VALIDATION_ERROR == aError) { + NS_ENSURE_ARG_POINTER(aURI); + // Get the host + nsAutoCString host; + nsCOMPtr innermostURI = NS_GetInnermostURI(aURI); + innermostURI->GetHost(host); + CopyUTF8toUTF16(host, formatStrs[0]); + formatStrCount = 1; + error.AssignLiteral("dnsDNSSECValidationError"); + } + else if (NS_ERROR_DNSSEC_DNE_ERROR == aError) { + NS_ENSURE_ARG_POINTER(aURI); + // Get the host + nsAutoCString host; + nsCOMPtr innermostURI = NS_GetInnermostURI(aURI); + innermostURI->GetHost(host); + CopyUTF8toUTF16(host, formatStrs[0]); + formatStrCount = 1; + error.AssignLiteral("dnsDNSSECDNEError"); + } else if(NS_ERROR_CONNECTION_REFUSED == aError) { NS_ENSURE_ARG_POINTER(aURI); addHostPort = true; @@ -6698,6 +6718,8 @@ nsDocShell::EndPageLoad(nsIWebProgress * aProgress, // Errors to be shown only on top-level frames if ((aStatus == NS_ERROR_UNKNOWN_HOST || + aStatus == NS_ERROR_DNSSEC_VALIDATION_ERROR || + aStatus == NS_ERROR_DNSSEC_DNE_ERROR || aStatus == NS_ERROR_CONNECTION_REFUSED || aStatus == NS_ERROR_UNKNOWN_PROXY_HOST || aStatus == NS_ERROR_PROXY_CONNECTION_REFUSED) && diff --git a/docshell/resources/content/netError.xhtml b/docshell/resources/content/netError.xhtml index 731a837..0f51cfb 100644 --- a/docshell/resources/content/netError.xhtml +++ b/docshell/resources/content/netError.xhtml @@ -271,6 +271,8 @@

    &generic.title;

    +

    &dnsDNSSECValidationError.title;

    +

    &dnsDNSSECDNEError.title;

    &dnsNotFound.title;

    &fileNotFound.title;

    &malformedURI.title;

    @@ -298,6 +300,8 @@
    &generic.longDesc;
    &dnsNotFound.longDesc;
    +
    &dnsDNSSECValidationError.longDesc;
    +
    &dnsDNSSECDNEError.longDesc;
    &fileNotFound.longDesc;
    &malformedURI.longDesc;
    &protocolNotFound.longDesc;
    diff --git a/dom/locales/en-US/chrome/appstrings.properties b/dom/locales/en-US/chrome/appstrings.properties index f6a00c0..fee2ce4 100644 --- a/dom/locales/en-US/chrome/appstrings.properties +++ b/dom/locales/en-US/chrome/appstrings.properties @@ -5,6 +5,8 @@ malformedURI=The URL is not valid and cannot be loaded. fileNotFound=The file %S cannot be found. Please check the location and try again. dnsNotFound=%S could not be found. Please check the name and try again. +dnsDNSSECValidationError=The domain name %S failed DNSSEC validation checks. Please contact a system administrator for help. +dnsDNSSECDNEError=DNSSEC validation indicates that the domain name %S does not exist. protocolNotFound=%S is not a registered protocol. connectionFailure=The connection was refused when attempting to contact %S. netInterrupt=The connection to %S has terminated unexpectedly. Some data may have been transferred. diff --git a/dom/locales/en-US/chrome/netError.dtd b/dom/locales/en-US/chrome/netError.dtd index 5ef66ca..a7b0c33 100644 --- a/dom/locales/en-US/chrome/netError.dtd +++ b/dom/locales/en-US/chrome/netError.dtd @@ -16,6 +16,32 @@ The browser could not find the host server for the provided address.

    • Did you make a mistake when typing the domain? (e.g. ww.mozilla.org instead of www.mozilla.org)
    • Are you certain this domain address exists? Its registration may have expired.
    • Are you unable to browse other sites? Check your network connection and DNS server settings.
    • Is your computer or network protected by a firewall or proxy? Incorrect settings can interfere with Web browsing.
    "> + +The provided domain name failed DNSSEC validation checks.

    +
      +
    • This may be an attempt by a malicious entity to redirect + you to a different site than you intended.
      • +
    • The browser has canceled the request for your protection + and security.
      • +
    • This failure may be temporary; clicking on Try Again at a + later time may work.
      • +
    +"> + + +The browser securely verified that the provided domain name + does not exist.

    +
      +
    • Did you make a mistake when typing the domain? (e.g. + ww.mozilla.org instead of + www.mozilla.org)
      • +
    • This domain address does not exist. Are you sure it is supposed to? + Maybe it used to but it no longer does?
      • +
    +"> +
  • Could the item have been renamed, removed, or relocated?
  • Is there a spelling, capitalization, or other typographical error in the address?
  • Do you have sufficient access permissions to the requested item?
    • "> diff --git a/netwerk/base/src/nsSocketTransport2.cpp b/netwerk/base/src/nsSocketTransport2.cpp index 33ac94c..78653b0 100644 --- a/netwerk/base/src/nsSocketTransport2.cpp +++ b/netwerk/base/src/nsSocketTransport2.cpp @@ -34,6 +34,8 @@ #include "nsIPipe.h" #include "nsIProgrammingLanguage.h" #include "nsIClassInfoImpl.h" +#include "nsIDNSService.h" +#include "nsISupportsPrimitives.h" #if defined(XP_WIN) || defined(MOZ_PLATFORM_MAEMO) #include "nsNativeConnectionHelper.h" @@ -1467,11 +1469,28 @@ nsSocketTransport::OnSocketEvent(uint32_t type, nsresult status, nsISupports *pa // For SOCKS proxies (mProxyTransparent == true), the socket // transport resolves the real host here, so there's no fixup // (see bug 226943). - if ((status == NS_ERROR_UNKNOWN_HOST) && !mProxyTransparent && + if ((status == NS_ERROR_UNKNOWN_HOST || + status == NS_ERROR_DNSSEC_VALIDATION_ERROR || + status == NS_ERROR_DNSSEC_DNE_ERROR) && !mProxyTransparent && !mProxyHost.IsEmpty()) mCondition = NS_ERROR_UNKNOWN_PROXY_HOST; else mCondition = status; + + switch (status) { + case NS_ERROR_UNKNOWN_HOST: + SOCKET_LOG(("NS_ERROR_UNKNOWN_HOST")); + break; + case NS_ERROR_DNSSEC_DNE_ERROR: + SOCKET_LOG(("NS_ERROR_DNSSEC_DNE_ERROR")); + break; + case NS_ERROR_DNSSEC_VALIDATION_ERROR: + SOCKET_LOG(("NS_ERROR_DNSSEC_VALIDATION_ERROR")); + break; + default: + SOCKET_LOG(("NS ERROR UNKNOWN")); + break; + } } else if (mState == STATE_RESOLVING) mCondition = InitiateSocket(); diff --git a/netwerk/dns/nsDNSService2.cpp b/netwerk/dns/nsDNSService2.cpp index 5a1f11c..a5be12e 100644 --- a/netwerk/dns/nsDNSService2.cpp +++ b/netwerk/dns/nsDNSService2.cpp @@ -143,6 +143,7 @@ nsDNSRecord::GetNextAddr(uint16_t port, PRNetAddr *addr) // Both mHostRecord->addr_info and mHostRecord->addr are null. // This can happen if mHostRecord->addr_info expired and the // attempt to reresolve it failed. + mDone = !mIter; return NS_ERROR_NOT_AVAILABLE; } memcpy(addr, mHostRecord->addr, sizeof(PRNetAddr)); @@ -270,8 +271,14 @@ nsDNSAsyncRequest::OnLookupComplete(nsHostResolver *resolver, // the caller to be able to addref/release multiple times without // destroying the record prematurely. nsCOMPtr rec; - if (NS_SUCCEEDED(status)) { - NS_ASSERTION(hostRecord, "no host record"); +#ifndef MOZ_DNSSEC + if (NS_SUCCEEDED(status)) { + NS_ASSERTION(hostRecord, "no host record"); +#else + { + // create the instance even if status is not success, since this + // might be an error/non-existence condition we want to propagate up +#endif rec = new nsDNSRecord(hostRecord); if (!rec) status = NS_ERROR_OUT_OF_MEMORY; @@ -486,7 +493,7 @@ NS_IMETHODIMP nsDNSService::Shutdown() { #ifdef MOZ_DNSSEC - val_context *ctx = nullptr; + val_context_t *ctx = nullptr; #endif nsRefPtr res; { diff --git a/netwerk/dns/nsHostResolver.cpp b/netwerk/dns/nsHostResolver.cpp index 8643abd..d5fbc51 100644 --- a/netwerk/dns/nsHostResolver.cpp +++ b/netwerk/dns/nsHostResolver.cpp @@ -167,8 +167,10 @@ nsHostRecord::nsHostRecord(const nsHostKey *key) flags = key->flags; af = key->af; #ifdef MOZ_DNSSEC - saved_status = NS_OK; security_status_flags = 0; + // we should probably define our own error code to mean + // that saved_status isn't valid yet.. but we'll re-use this one for now + saved_status = NS_ERROR_DOCUMENT_NOT_CACHED; #ifdef HAVE_VAL_GETADDRINFO_SUBMIT asyncStatus = nullptr; #endif @@ -407,6 +409,8 @@ nsHostResolver::Init() void nsHostResolver::ClearPendingQueue(PRCList *aPendingQ) { + LOG(("nsHostResolver::ClearPendingQueue() %p\n", this)); + // loop through pending queue, erroring out pending lookups. if (!PR_CLIST_IS_EMPTY(aPendingQ)) { PRCList *node = aPendingQ->next; @@ -590,9 +594,10 @@ nsHostResolver::ResolveHost(const char *host, IssueLookup(he->rec); } #ifdef MOZ_DNSSEC - else { - // use the cached status value + // use the cached status value if available + if (NS_ERROR_DOCUMENT_NOT_CACHED != he->rec->saved_status) { status = he->rec->saved_status; + LOG((" using cached status %x", status)); } #endif } @@ -681,6 +686,7 @@ nsHostResolver::DetachCallback(const char *host, nsResolveHostCallback *callback, nsresult status) { + LOG(("nsHostResolver::DetachCallback() %p\n", this)); nsRefPtr rec; { MutexAutoLock lock(mLock); @@ -712,6 +718,8 @@ nsHostResolver::DetachCallback(const char *host, nsresult nsHostResolver::ConditionallyCreateThread(nsHostRecord *rec) { + LOG(("nsHostResolver::%s() %p\n", __FUNCTION__, this)); + if (mNumIdleThreads) { // wake up idle thread to process this lookup mIdleThreadCV.Notify(); @@ -739,10 +747,8 @@ nsHostResolver::ConditionallyCreateThread(nsHostRecord *rec) return NS_ERROR_OUT_OF_MEMORY; } } -#if defined(PR_LOGGING) else LOG(("Unable to find a thread for looking up host [%s].\n", rec->host)); -#endif return NS_OK; } @@ -750,6 +756,7 @@ nsresult nsHostResolver::IssueLookup(nsHostRecord *rec) { nsresult rv = NS_OK; + LOG(("nsHostResolver::%s() %p\n", __FUNCTION__, this)); NS_ASSERTION(!rec->resolving, "record is already being resolved"); // Add rec to one of the pending queues, possibly removing it from mEvictionQ. @@ -901,6 +908,8 @@ nsHostResolver::GetHostToLookup(nsHostRecord **result) void nsHostResolver::OnLookupComplete(nsHostRecord *rec, nsresult status, PRAddrInfo *result) { + LOG(("nsHostResolver::%s() %p status %x\n", __FUNCTION__, this, status)); + // get the list of pending callbacks for this lookup, and notify // them that the lookup is complete. PRCList cbs; @@ -973,6 +982,7 @@ nsHostResolver::OnLookupComplete(nsHostRecord *rec, nsresult status, PRAddrInfo nsResolveHostCallback *callback = static_cast(node); node = node->next; + LOG((" calling OnLookupComplete callback\n")); callback->OnLookupComplete(this, rec, status); // NOTE: callback must not be dereferenced after this point!! } @@ -989,6 +999,7 @@ nsHostResolver::CancelAsyncRequest(const char *host, nsresult status) { + LOG(("nsHostResolver::%s %p\n", __FUNCTION__, this)); MutexAutoLock lock(mLock); // Lookup the host record associated with host, flags & address family @@ -1029,6 +1040,8 @@ nsHostResolver::CancelAsyncRequest(const char *host, static nsresult _ns_translate_dnssec_error(PRErrorCode err) { + LOG(("nsHostResolver::%s err %x\n", __FUNCTION__, err)); + switch(err) { case PR_DNSSEC_VALIDATION_ERROR: return NS_ERROR_DNSSEC_VALIDATION_ERROR; @@ -1039,6 +1052,7 @@ _ns_translate_dnssec_error(PRErrorCode err) break; } + LOG(("nsHostResolver:translate %x unknown\n", err)); return NS_ERROR_UNKNOWN_HOST; } @@ -1078,6 +1092,8 @@ nsHostResolver::async_callback(void *cb_data, int eai_retval, if (NULL == nsHR) return; + LOG(("nsHostResolver::%s\n", __FUNCTION__)); + err = PR_dnssec_result_checks(&nsHR->rec->security_status_flags, val_status, ai != NULL); if (err) { @@ -1194,7 +1210,11 @@ nsHostResolver::ThreadFuncAsync(void *arg) (rec->host, rec->af, flags, security_flags, resolver->mValContext, &_pr_callback, cb_data, &(rec->asyncStatus)); - if (rc || NULL == rec->asyncStatus) + if (NULL == rec->asyncStatus) { + LOG(("nsHostResolver:Async ERROR for %s (null asyncStatus).\n", + rec->host)); + } + else if (rc) _pr_callback(cb_data, EAI_SYSTEM, NULL, VAL_AC_UNSET); cb_data = NULL; @@ -1326,8 +1346,8 @@ nsHostResolver::ThreadFunc(void *arg) Telemetry::Accumulate(Telemetry::DNS_FAILED_LOOKUP_TIME, millis); } + LOG(("Lookup completed for host [%s] status %x.\n", rec->host, status)); resolver->OnLookupComplete(rec, status, ai); - LOG(("Lookup completed for host [%s].\n", rec->host)); } NS_RELEASE(resolver); LOG(("DNS lookup thread ending execution.\n")); @@ -1349,6 +1369,7 @@ nsHostResolver::Create(uint32_t maxCacheEntries, gHostResolverLog = PR_NewLogModule("nsHostResolver"); #endif + LOG(("nsHostResolver::%s\n", __FUNCTION__)); nsHostResolver *res = new nsHostResolver(maxCacheEntries, maxCacheLifetime, lifetimeGracePeriod diff --git a/netwerk/protocol/http/nsHttpChannel.cpp b/netwerk/protocol/http/nsHttpChannel.cpp index b4adfcc..002c19d 100644 --- a/netwerk/protocol/http/nsHttpChannel.cpp +++ b/netwerk/protocol/http/nsHttpChannel.cpp @@ -25,6 +25,7 @@ #include "nsIOService.h" #include "nsICacheService.h" #include "nsDNSPrefetch.h" +#include "nsIDNSService.h" #include "nsChannelClassifier.h" #include "nsIRedirectResultListener.h" #include "mozilla/TimeStamp.h" @@ -4872,12 +4873,24 @@ NS_IMETHODIMP nsHttpChannel::OnStopRequest(nsIRequest *request, nsISupports *ctxt, nsresult status) { SAMPLE_LABEL("network", "nsHttpChannel::OnStopRequest"); - LOG(("nsHttpChannel::OnStopRequest [this=%p request=%p status=%x]\n", - this, request, status)); + LOG(("nsHttpChannel::OnStopRequest [this=%p request=%p status=%x" + "(code %d module %d severity %d)]\n", + this, request, status, NS_ERROR_GET_CODE(mStatus), + NS_ERROR_GET_MODULE(mStatus), NS_ERROR_GET_SEVERITY(mStatus))); if (mTimingEnabled && request == mCachePump) { mCacheReadEnd = mozilla::TimeStamp::Now(); } + if (mStatus == NS_ERROR_DNSSEC_VALIDATION_ERROR) { + LOG(("nsHttpChannel::dnssec status validation error\n")); + gHttpHandler->OnDNSSECResponseUntrusted(this); + } else if (NS_FAILED(mStatus)) { + LOG(("nsHttpChannel::dnssec status error\n")); + gHttpHandler->OnDNSSECResponseError(this); + } else { + LOG(("nsHttpChannel::dnssec status trusted\n")); + gHttpHandler->OnDNSSECResponseTrusted(this); + } // allow content to be cached if it was loaded successfully (bug #482935) bool contentComplete = NS_SUCCEEDED(status); diff --git a/netwerk/protocol/http/nsHttpHandler.h b/netwerk/protocol/http/nsHttpHandler.h index c3d7a16..c40edd0 100644 --- a/netwerk/protocol/http/nsHttpHandler.h +++ b/netwerk/protocol/http/nsHttpHandler.h @@ -200,6 +200,19 @@ public: NotifyObservers(chan, NS_HTTP_ON_EXAMINE_MERGED_RESPONSE_TOPIC); } + void OnDNSSECResponseUntrusted(nsIHttpChannel *chan) + { + NotifyObservers(chan, "dnssec-status-untrusted"); + } + void OnDNSSECResponseError(nsIHttpChannel *chan) + { + NotifyObservers(chan, "dnssec-status-error"); + } + void OnDNSSECResponseTrusted(nsIHttpChannel *chan) + { + NotifyObservers(chan, "dnssec-status-trusted"); + } + // Called by channels before a redirect happens. This notifies both the // channel's and the global redirect observers. nsresult AsyncOnChannelRedirect(nsIChannel* oldChan, nsIChannel* newChan, diff --git a/xpcom/base/nsError.h b/xpcom/base/nsError.h index 3481054..1853092 100644 --- a/xpcom/base/nsError.h +++ b/xpcom/base/nsError.h @@ -425,6 +425,12 @@ typedef enum tag_nsresult * hostname cannot be resolved. */ NS_ERROR_UNKNOWN_PROXY_HOST = FAILURE(42), + /* DNSSEC specific error codes: */ + + /* A DNS lookup failed DNSSEC validation. */ + NS_ERROR_DNSSEC_VALIDATION_ERROR = FAILURE(88), + /* A DNS lookup was proven to not exist. */ + NS_ERROR_DNSSEC_DNE_ERROR = FAILURE(89), /* Socket specific error codes: */ -- 1.7.11.7 ././@LongLink0000000000000000000000000000017200000000000011565 Lustar rootrootdnssec-tools-2.0/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0006-add-DNSSEC-preferences-to-browser.patchdnssec-tools-2.0/apps/mozilla/mozilla-xulrunner/mozilla-central/dt-xulrunner-0006-add-DNSSEC-prefere0000664000237200023720000001261512110764367033460 0ustar hardakerhardakerFrom 08994fba05fae8d257e13fea689423966b8afa08 Mon Sep 17 00:00:00 2001 From: Robert Story Date: Mon, 4 Jun 2012 15:55:16 -0400 Subject: [PATCH 20/25] XULRUNNER add DNSSEC preferences to browser --- browser/components/preferences/advanced.xul | 20 ++++++++++++++++++++ .../en-US/chrome/browser/preferences/advanced.dtd | 10 ++++++++++ layout/base/nsPresContext.cpp | 17 +++++++++++++++++ 3 files changed, 47 insertions(+) diff --git a/browser/components/preferences/advanced.xul b/browser/components/preferences/advanced.xul index ad07e28..af8f3ec 100644 --- a/browser/components/preferences/advanced.xul +++ b/browser/components/preferences/advanced.xul @@ -97,6 +97,9 @@ + #ifdef HAVE_SHELL_SERVICE @@ -114,6 +117,7 @@ + @@ -408,6 +412,22 @@ + + +
    + &dnssec.description; + + + + + + + + diff --git a/browser/locales/en-US/chrome/browser/preferences/advanced.dtd b/browser/locales/en-US/chrome/browser/preferences/advanced.dtd index 5eddbb7..6442f54 100644 --- a/browser/locales/en-US/chrome/browser/preferences/advanced.dtd +++ b/browser/locales/en-US/chrome/browser/preferences/advanced.dtd @@ -120,3 +120,13 @@ + + + + + + + + + + diff --git a/layout/base/nsPresContext.cpp b/layout/base/nsPresContext.cpp index cfac149..df1fbe5 100644 --- a/layout/base/nsPresContext.cpp +++ b/layout/base/nsPresContext.cpp @@ -36,6 +36,8 @@ #include "nsIWeakReferenceUtils.h" #include "nsCSSRendering.h" #include "prprf.h" +#include "prnetdb.h" +#include "nsContentPolicyUtils.h" #include "nsAutoPtr.h" #include "nsEventStateManager.h" #include "nsThreadUtils.h" @@ -293,6 +295,11 @@ nsPresContext::~nsPresContext() Preferences::UnregisterCallback(nsPresContext::PrefChangedCallback, "image.animation_mode", this); +#ifdef MOZ_DNSSEC + Preferences::UnregisterCallback(nsPresContext::PrefChangedCallback, + "security.dnssec.dnssecBehavior", + this); +#endif #ifdef IBMBIDI Preferences::UnregisterCallback(nsPresContext::PrefChangedCallback, "bidi.", @@ -783,6 +790,11 @@ nsPresContext::GetUserPreferences() // prescontext or we are being called from UpdateAfterPreferencesChanged() // which triggers a reflow anyway. SetBidi(bidiOptions, false); + +#ifdef MOZ_DNSSEC + PR_set_dnssec_validate_policy(Preferences::GetInt("security.dnssec.dnssecBehavior")); +#endif /* MOZ_DNSSEC */ + } void @@ -981,6 +993,11 @@ nsPresContext::Init(nsDeviceContext* aDeviceContext) Preferences::RegisterCallback(nsPresContext::PrefChangedCallback, "image.animation_mode", this); +#ifdef MOZ_DNSSEC + Preferences::RegisterCallback(nsPresContext::PrefChangedCallback, + "security.dnssec.dnssecBehavior", + this); +#endif #ifdef IBMBIDI Preferences::RegisterCallback(nsPresContext::PrefChangedCallback, "bidi.", -- 1.7.11.7 dnssec-tools-2.0/apps/mozilla/drill-firefox/0000775000237200023720000000000012111172576021303 5ustar hardakerhardakerdnssec-tools-2.0/apps/mozilla/drill-firefox/Makefile0000664000237200023720000000041010571651156022742 0ustar hardakerhardakerall: drill-0.6.xpi drill-0.6.xpi: drill.jar \rm -f drill-0.6.xpi zip -0 -r drill-0.6.xpi defaults install.rdf chrome/drill.jar \rm -f chrome/drill.jar drill.jar: cd chrome;\ zip -0 -r drill.jar content skin clean: \rm -f drill-0.6.xpi chrome/drill.jar dnssec-tools-2.0/apps/mozilla/drill-firefox/README0000664000237200023720000000260710571651156022174 0ustar hardakerhardakerThis firefox extension contains modifications to the Drill Extension for Firefox available from: http://www.nlnetlabs.nl/dnssec/drill_extension.html These modifications allow validation to be performed with the libval-related command-line utilities for doing hostname validation, namely "getaddrinfo". Note: The current extension is not compatible with Firefox 2.0+ Building: ======== make clean make The extension has the name drill-0.6.xpi Installation ============ Open the Firefox Browser Open File: Select drill-0.6.xpi Follow directions to complete the installation. Operation ========= 1. Ensure that libval has been configured and installed on the system 2. The extension can be configured by clicking on the icon that appears on the right bottom corner of the Firefox window. a) Select the "Use libval to perform validation" option b) Specify the location for the "Libval hostname validating utility", aka getaddr. The default location for this file is /usr/local/bin/getaddr 3. For sites that are VALIDATED, a green check mark icon appears on the right bottom corner 4. For sites that are BOGUS/INDETERMINATE, a red cross mark icon appears on the right bottom corner 5. For sites that are TRUSTED but NOT VALIDATED, the Drill icon is cleared. 6. Moving the mouse pointer over the Drill icon gives the validation status for the DNS name specified in the address bar. dnssec-tools-2.0/apps/mozilla/drill-firefox/chrome/0000775000237200023720000000000012111172576022560 5ustar hardakerhardakerdnssec-tools-2.0/apps/mozilla/drill-firefox/chrome/content/0000775000237200023720000000000012111172576024232 5ustar hardakerhardakerdnssec-tools-2.0/apps/mozilla/drill-firefox/chrome/content/drill/0000775000237200023720000000000012111172576025340 5ustar hardakerhardakerdnssec-tools-2.0/apps/mozilla/drill-firefox/chrome/content/drill/about.xul0000664000237200023720000000224310571651156027211 0ustar hardakerhardaker