------------------------------------------------------------------------
r5144 | hserus | 2010-06-30 11:51:14 -0400 (Wed, 30 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Keep the api document in sync with current changes. The -08 version is still unpublished.

------------------------------------------------------------------------
r5143 | hardaker | 2010-06-30 11:35:14 -0400 (Wed, 30 Jun 2010) | 1 line
Changed paths:
   M /trunk/dnssec-tools/dist/dnssec-tools.spec

updated .spec file
------------------------------------------------------------------------
r5142 | hserus | 2010-06-30 10:51:12 -0400 (Wed, 30 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/Makefile.in

Undo previous change of adding the tools dir to the list of perl build targets since this breaks make install. Will fix later.

------------------------------------------------------------------------
r5141 | hardaker | 2010-06-30 10:41:40 -0400 (Wed, 30 Jun 2010) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

updated tool version number to 1.1
------------------------------------------------------------------------
r5140 | hardaker | 2010-06-30 10:41:28 -0400 (Wed, 30 Jun 2010) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/convertar

updated tool version number to 1.0
------------------------------------------------------------------------
r5139 | hardaker | 2010-06-30 10:26:34 -0400 (Wed, 30 Jun 2010) | 1 line
Changed paths:
   M /trunk/dnssec-tools/NEWS

minor changes to the NEWS file for white space and convertar
------------------------------------------------------------------------
r5138 | hardaker | 2010-06-30 10:26:24 -0400 (Wed, 30 Jun 2010) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm

fix the error message for a missing getopt module
------------------------------------------------------------------------
r5137 | hardaker | 2010-06-30 10:26:11 -0400 (Wed, 30 Jun 2010) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/convertar

+x
------------------------------------------------------------------------
r5136 | hardaker | 2010-06-30 10:25:58 -0400 (Wed, 30 Jun 2010) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/etc/root.hints

updated root.hints from a recent pull
------------------------------------------------------------------------
r5135 | hserus | 2010-06-30 09:20:05 -0400 (Wed, 30 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/dist/makerelease.xml

Add drawvalmap to the list of files where DNSSEC-Tools VERSION is automatically updated 

------------------------------------------------------------------------
r5134 | hserus | 2010-06-30 09:11:20 -0400 (Wed, 30 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap

Make VERSION line consistent with other tools

------------------------------------------------------------------------
r5133 | hserus | 2010-06-29 16:46:23 -0400 (Tue, 29 Jun 2010) | 1 line
Changed paths:
   M /trunk/dnssec-tools/Makefile.in


------------------------------------------------------------------------
r5132 | hserus | 2010-06-29 15:15:04 -0400 (Tue, 29 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/Makefile.in

make distcleant should distclean subdirs also

------------------------------------------------------------------------
r5131 | hserus | 2010-06-29 15:14:17 -0400 (Tue, 29 Jun 2010) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/configure

Recreate configure with autoconf2.59 since that seems to be supporting prompting for user-options properly


------------------------------------------------------------------------
r5130 | hserus | 2010-06-29 13:44:21 -0400 (Tue, 29 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/NEWS

Add some NEWS items pertaining to 1.7

------------------------------------------------------------------------
r5129 | hserus | 2010-06-29 13:07:14 -0400 (Tue, 29 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2/libspf2-dnssec.patch

Update the patch for current release

------------------------------------------------------------------------
r5128 | hserus | 2010-06-29 13:00:52 -0400 (Tue, 29 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm

Bump the version number

------------------------------------------------------------------------
r5127 | hserus | 2010-06-29 12:53:54 -0400 (Tue, 29 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-status/skin/overlay.css

Constrain the size of the dnssec-enabled icon on the address bar

------------------------------------------------------------------------
r5126 | hserus | 2010-06-29 12:53:16 -0400 (Tue, 29 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-status/install.rdf

Extension is known to work on firefox 3.7+

------------------------------------------------------------------------
r5125 | hserus | 2010-06-29 12:51:45 -0400 (Tue, 29 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

Log entry into val_getaddrinfo() and val_getnameinfo() functions

------------------------------------------------------------------------
r5124 | hserus | 2010-06-29 12:48:00 -0400 (Tue, 29 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/README

The dnssec-status extension does not work on Thunderbird

------------------------------------------------------------------------
r5123 | hserus | 2010-06-29 12:46:11 -0400 (Tue, 29 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/Makefile.top

Increment libval revision number

------------------------------------------------------------------------
r5122 | hserus | 2010-06-29 12:00:37 -0400 (Tue, 29 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap

Change the COPYRIGHT date

------------------------------------------------------------------------
r5121 | hserus | 2010-06-29 11:59:27 -0400 (Tue, 29 Jun 2010) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/etc/dnsval.conf

Set default ends0 size to a lower value till such time that we have EDNS0 size
fallback implemented

------------------------------------------------------------------------
r5120 | hserus | 2010-06-29 11:53:44 -0400 (Tue, 29 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c
   M /trunk/dnssec-tools/validator/include/validator/validator.h
   M /trunk/dnssec-tools/validator/libval/val_context.c
   M /trunk/dnssec-tools/validator/libval/val_context.h

Rename free_validator_state as val_free_validator_state

------------------------------------------------------------------------
r5117 | tewok | 2010-06-25 12:11:59 -0400 (Fri, 25 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

Updated version number.

------------------------------------------------------------------------
r5116 | tewok | 2010-06-25 11:42:00 -0400 (Fri, 25 Jun 2010) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm.in
   M /trunk/dnssec-tools/tools/modules/dnssectools.pm
   M /trunk/dnssec-tools/tools/modules/keyrec.pm
   M /trunk/dnssec-tools/tools/modules/keyrec.pod
   M /trunk/dnssec-tools/tools/modules/rolllog.pm
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

Updated copyright dates.
Updated version to 1.5.

------------------------------------------------------------------------
r5115 | tewok | 2010-06-25 11:40:09 -0400 (Fri, 25 Jun 2010) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/timetrans.pm

Updated copyright date.
Added a version line (for 1.5.)

------------------------------------------------------------------------
r5114 | tewok | 2010-06-25 11:39:37 -0400 (Fri, 25 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm
   M /trunk/dnssec-tools/tools/modules/rollrec.pm

Updated version to 1.5.

------------------------------------------------------------------------
r5113 | tewok | 2010-06-25 11:38:52 -0400 (Fri, 25 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/BootStrap.pm
   M /trunk/dnssec-tools/tools/modules/Makefile.PL
   M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm
   M /trunk/dnssec-tools/tools/modules/README

Updated copyright date.

------------------------------------------------------------------------
r5112 | tewok | 2010-06-25 11:37:26 -0400 (Fri, 25 Jun 2010) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tests/Makefile.PL
   M /trunk/dnssec-tools/tools/modules/tests/test-conf
   M /trunk/dnssec-tools/tools/modules/tests/test-keyrec
   M /trunk/dnssec-tools/tools/modules/tests/test-rollmgr
   M /trunk/dnssec-tools/tools/modules/tests/test-rollrec
   M /trunk/dnssec-tools/tools/modules/tests/test-timetrans
   M /trunk/dnssec-tools/tools/modules/tests/test-toolopts1
   M /trunk/dnssec-tools/tools/modules/tests/test-toolopts2
   M /trunk/dnssec-tools/tools/modules/tests/test-toolopts3


Updated the copyright dates.

------------------------------------------------------------------------
r5111 | tewok | 2010-06-25 11:37:07 -0400 (Fri, 25 Jun 2010) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/modules/tests/README

Added a minimally descriptive readme.

------------------------------------------------------------------------
r5110 | tewok | 2010-06-24 18:41:57 -0400 (Thu, 24 Jun 2010) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

Properly placed some error checking in cmd_dspub().
Added a missing error return in cmd_rollnow().

------------------------------------------------------------------------
r5109 | tewok | 2010-06-24 18:40:59 -0400 (Thu, 24 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl

Adjusted error messages for -dspub and -dspuball.

------------------------------------------------------------------------
r5108 | tewok | 2010-06-24 17:46:32 -0400 (Thu, 24 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/cleankrf
   M /trunk/dnssec-tools/tools/scripts/dtdefs
   M /trunk/dnssec-tools/tools/scripts/dtreqmods
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/fixkrf
   M /trunk/dnssec-tools/tools/scripts/genkrf
   M /trunk/dnssec-tools/tools/scripts/getds
   M /trunk/dnssec-tools/tools/scripts/krfcheck
   M /trunk/dnssec-tools/tools/scripts/lsdnssec
   M /trunk/dnssec-tools/tools/scripts/lskrf
   M /trunk/dnssec-tools/tools/scripts/tachk
   M /trunk/dnssec-tools/tools/scripts/timetrans
   M /trunk/dnssec-tools/tools/scripts/trustman

Adjusted copyright dates.

------------------------------------------------------------------------
r5107 | tewok | 2010-06-24 17:43:00 -0400 (Thu, 24 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/bubbles
   M /trunk/dnssec-tools/tools/scripts/cleanarch
   M /trunk/dnssec-tools/tools/scripts/dtck
   M /trunk/dnssec-tools/tools/scripts/dtconf
   M /trunk/dnssec-tools/tools/scripts/keyarch
   M /trunk/dnssec-tools/tools/scripts/rollinit
   M /trunk/dnssec-tools/tools/scripts/rolllog
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor
   M /trunk/dnssec-tools/tools/scripts/signset-editor

Adjusted program versions and copyright dates.

------------------------------------------------------------------------
r5106 | tewok | 2010-06-24 17:29:48 -0400 (Thu, 24 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl

Minor fix to usage message.

------------------------------------------------------------------------
r5105 | tewok | 2010-06-24 17:27:35 -0400 (Thu, 24 Jun 2010) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Modified -zonelog to take multiple zone:loglevel pairs.
Added some minor argument checking to -zonelog.

------------------------------------------------------------------------
r5104 | tewok | 2010-06-24 16:53:40 -0400 (Thu, 24 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl

Modified -skipzone to take multiple zones.

------------------------------------------------------------------------
r5103 | tewok | 2010-06-24 16:49:28 -0400 (Thu, 24 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl

Modified -rollzsk to take multiple zones.

------------------------------------------------------------------------
r5102 | tewok | 2010-06-24 16:40:08 -0400 (Thu, 24 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/Makefile

Added rollerd-manyzones-fast demo.

------------------------------------------------------------------------
r5101 | tewok | 2010-06-24 16:39:36 -0400 (Thu, 24 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/README

Added rollerd-manyzones-fast.

------------------------------------------------------------------------
r5100 | tewok | 2010-06-24 16:37:51 -0400 (Thu, 24 Jun 2010) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/Makefile
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/README
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/phaser
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/rc.blinkenlights
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/rundemo
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-db.cache
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-demo.rollrec
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-dummy.com
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-example.com
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-test.com
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-woof.com
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-xorn.com
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-yowzah.com
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones-fast/save-zero.com


New demo showing lots of zones rolling quickly.

------------------------------------------------------------------------
r5099 | tewok | 2010-06-24 16:14:53 -0400 (Thu, 24 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl

Modified -rollksk to take a list of zones instead of just one zone.

------------------------------------------------------------------------
r5098 | tewok | 2010-06-24 16:01:24 -0400 (Thu, 24 Jun 2010) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl

Changed how -dspub takes a list of zones.  It's no longer a single word with
commas separating the names, but a whitespace-separated list of names.

------------------------------------------------------------------------
r5097 | tewok | 2010-06-24 12:41:44 -0400 (Thu, 24 Jun 2010) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Modified "-dspub zone" can take a comma-separated list of zones.


------------------------------------------------------------------------
r5096 | tewok | 2010-06-24 11:22:01 -0400 (Thu, 24 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl

Minor fix to usage message.

------------------------------------------------------------------------
r5095 | hserus | 2010-06-24 09:40:23 -0400 (Thu, 24 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/README.firefox

Add config settings for enabling DNSSEC libraries

------------------------------------------------------------------------
r5094 | hserus | 2010-06-23 12:50:34 -0400 (Wed, 23 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch
   M /trunk/dnssec-tools/apps/mozilla/dnssec-firefox.patch
   M /trunk/dnssec-tools/apps/mozilla/dnssec-nspr.patch

Changes to support DNSSEC event notification in Firefox 3.6+

------------------------------------------------------------------------
r5093 | hserus | 2010-06-23 08:47:12 -0400 (Wed, 23 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

Return EAI_FAIL in cases of DNS errors, not EAI_NONAME

------------------------------------------------------------------------
r5092 | hserus | 2010-06-23 08:43:02 -0400 (Wed, 23 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Don't set the recursive bit when we are iteratively resolving

------------------------------------------------------------------------
r5091 | tewok | 2010-06-22 11:30:50 -0400 (Tue, 22 Jun 2010) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod

Added an entry for roll_username.
Adjusted copyright date.


------------------------------------------------------------------------
r5090 | tewok | 2010-06-22 11:30:12 -0400 (Tue, 22 Jun 2010) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf


Added a (commented-out) entry for roll_username.


------------------------------------------------------------------------
r5089 | tewok | 2010-06-22 11:28:43 -0400 (Tue, 22 Jun 2010) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Added -username support for running as a different user.
Fixed a typo in a comment.
 

------------------------------------------------------------------------
r5088 | hserus | 2010-06-22 11:21:27 -0400 (Tue, 22 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/README

Changed copyright date

------------------------------------------------------------------------
r5087 | tewok | 2010-06-21 18:31:13 -0400 (Mon, 21 Jun 2010) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf

Added support for rollerd username.
Added -template to the usage message.
 

------------------------------------------------------------------------
r5086 | tewok | 2010-06-21 18:01:36 -0400 (Mon, 21 Jun 2010) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Adjusted copyright date.


------------------------------------------------------------------------
r5085 | tewok | 2010-06-21 17:31:22 -0400 (Mon, 21 Jun 2010) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtconfchk


Added checks for roll_username.

------------------------------------------------------------------------
r5083 | hserus | 2010-06-18 14:10:18 -0400 (Fri, 18 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-thunderbird.patch

Add support for DNSSEC UI elements in thunderbird (the core libraries for DNS resolution are the same as that for firefox)

------------------------------------------------------------------------
r5082 | hserus | 2010-06-18 13:49:09 -0400 (Fri, 18 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-status/content/overlay.js

Fix missing eol marker

------------------------------------------------------------------------
r5081 | hardaker | 2010-06-18 10:01:40 -0400 (Fri, 18 Jun 2010) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/convertar
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Dns.pm

added a tods flag for dns lookups for reading dnskeys but writing DS records
------------------------------------------------------------------------
r5080 | hardaker | 2010-06-18 10:01:24 -0400 (Fri, 18 Jun 2010) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Libval.pm

fix typos
------------------------------------------------------------------------
r5079 | hserus | 2010-06-17 23:56:45 -0400 (Thu, 17 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-status/content/overlay.js

Handle page load error conditions.

------------------------------------------------------------------------
r5078 | hserus | 2010-06-17 13:40:32 -0400 (Thu, 17 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-status/content/firefoxOverlay.xul
   M /trunk/dnssec-tools/apps/mozilla/dnssec-status/content/overlay.js

Don't display DNSSEC indicators when we are not DNSSEC capable

------------------------------------------------------------------------
r5077 | hserus | 2010-06-17 11:56:42 -0400 (Thu, 17 Jun 2010) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/content/enabled.png
   M /trunk/dnssec-tools/apps/mozilla/dnssec-status/content/firefoxOverlay.xul
   M /trunk/dnssec-tools/apps/mozilla/dnssec-status/content/overlay.js
   M /trunk/dnssec-tools/apps/mozilla/dnssec-status/skin/overlay.css

Display DNSSEC-enabled icon when we're doing validation of answers on the page

------------------------------------------------------------------------
r5076 | hserus | 2010-06-16 12:52:22 -0400 (Wed, 16 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Merge cached responses into answer even when we traverse multiple CNAME/DNAME links

------------------------------------------------------------------------
r5075 | hserus | 2010-06-15 11:05:45 -0400 (Tue, 15 Jun 2010) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/apps/mozilla/dnssec-status/Makefile
   M /trunk/dnssec-tools/apps/mozilla/dnssec-status/README
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/build.sh
   D /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome.manifest
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/config_build.sh
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/content
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/content/dnssecstatus.png
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/content/firefoxOverlay.xul
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/content/overlay.js
   D /trunk/dnssec-tools/apps/mozilla/dnssec-status/defaults
   M /trunk/dnssec-tools/apps/mozilla/dnssec-status/install.rdf
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/locale
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/locale/en-US
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/locale/en-US/dnssecstatus.properties
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/skin
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/skin/overlay.css

Make extension FF-3 compatible

------------------------------------------------------------------------
r5074 | hserus | 2010-06-09 16:15:35 -0400 (Wed, 09 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Makefile.PL
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc

Add support for SHA-2 constants

------------------------------------------------------------------------
r5073 | hserus | 2010-06-09 16:08:24 -0400 (Wed, 09 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h
   M /trunk/dnssec-tools/validator/libval/val_crypto.c
   M /trunk/dnssec-tools/validator/libval/val_crypto.h
   M /trunk/dnssec-tools/validator/libval/val_verify.c

Add support for RSASHA256/512 validation (untested)

------------------------------------------------------------------------
r5072 | tewok | 2010-06-08 11:41:30 -0400 (Tue, 08 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm

Single formatting change.

------------------------------------------------------------------------
r5071 | tewok | 2010-06-08 11:40:27 -0400 (Tue, 08 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm

Single spacing change.

------------------------------------------------------------------------
r5070 | tewok | 2010-06-08 11:38:15 -0400 (Tue, 08 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights

Added a check to ensure blinkenlights could contact rollerd.

------------------------------------------------------------------------
r5068 | hserus | 2010-06-02 11:57:05 -0400 (Wed, 02 Jun 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Fetch proper proof assertion when the answer is provably insecure

------------------------------------------------------------------------
r5062 | tewok | 2010-04-28 18:23:30 -0400 (Wed, 28 Apr 2010) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

Added the no-output flag to the dt_confcheck() call.
Made an error message more useful.

------------------------------------------------------------------------
r5061 | tewok | 2010-04-28 18:22:32 -0400 (Wed, 28 Apr 2010) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl

Added no-output flag to dt_confcheck() call.
Made an error message more useful.

------------------------------------------------------------------------
r5060 | tewok | 2010-04-28 18:19:00 -0400 (Wed, 28 Apr 2010) | 25 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm.in

Added a lot more checks to dt_confcheck():
	- The dnssec-tools sysconf directory exists.
	- The dnssec-tools sysconf directory is a directory.
	- The dnssec-tools directory exists.
	- The dnssec-tools directory is a directory.
	- The dnssec-tools config file exists.
	- The dnssec-tools config file is a regular file.
	- The dnssec-tools config file isn't empty.
	- The local state directory name isn't longer than 75 characters
	  (to allow for the rollmgr command socket.)
	- The local state directory is a directory.
	- The local state directory can be created if necessary.
	- The local state directory's dnssec-tools subdirectory can be
	  created if necessary, or is writable if it already exists.
	- The local state directory's run subdirectory can be created
	  if necessary, or is writable if it already exists.

Added a flag to dt_confcheck().  If it's 0, the checks will be performed
quietly; otherwise, error messages will be printed.

Modified makelocalstatedir():
	- Moved the "require File::Path" to just before it's needed. 
	- Added a newline to an error message.
	- Changed some error returns to error exits.

------------------------------------------------------------------------
r5059 | tewok | 2010-04-27 13:18:27 -0400 (Tue, 27 Apr 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollerd

Added calls to dt_confcheck() to ensure the state directory isn't too long.

------------------------------------------------------------------------
r5058 | tewok | 2010-04-27 13:14:14 -0400 (Tue, 27 Apr 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm.in

Added dt_confcheck() to run environment/configuration checks.

------------------------------------------------------------------------
r5056 | tewok | 2010-04-20 21:12:02 -0400 (Tue, 20 Apr 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm

Testing change to the command socket's permissions was fixed.

------------------------------------------------------------------------
r5055 | hserus | 2010-04-20 13:10:00 -0400 (Tue, 20 Apr 2010) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_debug.c


------------------------------------------------------------------------
r5054 | tewok | 2010-04-19 19:32:45 -0400 (Mon, 19 Apr 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm

unix_dropid() returns a failure if it can't create the pid file.

------------------------------------------------------------------------
r5053 | tewok | 2010-04-16 14:33:56 -0400 (Fri, 16 Apr 2010) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/testing/README

Added a bit more info.


------------------------------------------------------------------------
r5052 | tewok | 2010-04-16 12:59:12 -0400 (Fri, 16 Apr 2010) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/testing/README

New file with a brief description of running the DT tests.


------------------------------------------------------------------------
r5051 | tewok | 2010-04-15 17:14:04 -0400 (Thu, 15 Apr 2010) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl

Turned off debugging in Getopt::Long.
Added a missing newline in a DSPUB error message.

------------------------------------------------------------------------
r5050 | hserus | 2010-04-13 16:39:38 -0400 (Tue, 13 Apr 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/Makefile.in

Add a target for universal build

------------------------------------------------------------------------
r5049 | tewok | 2010-04-13 15:10:39 -0400 (Tue, 13 Apr 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/logwatch/README

Fixed to use a working URL.

------------------------------------------------------------------------
r5048 | tewok | 2010-04-13 14:44:40 -0400 (Tue, 13 Apr 2010) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/INSTALL

Added a reference to Perl Tk for some GUI-based tools.
Added a reference to Text::Diff.pm for running tests.


------------------------------------------------------------------------
r5046 | hardaker | 2010-04-10 10:05:54 -0400 (Sat, 10 Apr 2010) | 1 line
Changed paths:
   M /trunk/dnssec-tools/Makefile.in

make install should do a make all as well
------------------------------------------------------------------------
r5045 | hardaker | 2010-04-10 09:51:56 -0400 (Sat, 10 Apr 2010) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Makefile.PL

don't use hard paths for tools that move
------------------------------------------------------------------------
r5044 | hserus | 2010-04-09 12:42:42 -0400 (Fri, 09 Apr 2010) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/dnsval.conf.3
   M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod
   M /trunk/dnssec-tools/validator/include/validator/validator.h
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Add backwards compatibility support for the (now deprecated) 
trust-local-answers policy in dnsval.conf

------------------------------------------------------------------------
r5043 | hserus | 2010-04-09 11:53:51 -0400 (Fri, 09 Apr 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Implement couple of fixes for DLV support

------------------------------------------------------------------------
r5042 | hserus | 2010-04-05 14:46:36 -0400 (Mon, 05 Apr 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/README

Remove trailing newline

------------------------------------------------------------------------
r5041 | hserus | 2010-04-05 14:05:26 -0400 (Mon, 05 Apr 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/README

Removed newline

------------------------------------------------------------------------
r5040 | hserus | 2010-04-05 13:42:19 -0400 (Mon, 05 Apr 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/README

reverted

------------------------------------------------------------------------
r5039 | hserus | 2010-04-05 13:40:38 -0400 (Mon, 05 Apr 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/README

testing commit

------------------------------------------------------------------------
r5038 | hardaker | 2010-04-05 13:29:44 -0400 (Mon, 05 Apr 2010) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

regexp fix
------------------------------------------------------------------------
r5037 | hardaker | 2010-04-05 13:26:49 -0400 (Mon, 05 Apr 2010) | 1 line
Changed paths:
   M /trunk/dnssec-tools/README

white space change for testing
------------------------------------------------------------------------
r5036 | hardaker | 2010-04-05 13:25:23 -0400 (Mon, 05 Apr 2010) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

make child NS record pointers match the child's zone exactly and add glue records
------------------------------------------------------------------------
r5034 | baerm | 2010-03-25 13:12:01 -0400 (Thu, 25 Mar 2010) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf
   M /trunk/dnssec-tools/tools/scripts/rollctl


Make default value of key archive directory get used in dtinitconf


------------------------------------------------------------------------
r5032 | hserus | 2010-03-15 10:09:29 -0400 (Mon, 15 Mar 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/selftests.dist

Updated list of test cases

------------------------------------------------------------------------
r5031 | hserus | 2010-03-15 10:07:18 -0400 (Mon, 15 Mar 2010) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Add another special case for PI checks, so that we won't go into a loop trying to prove the non-existence of RRSIGs for an existing
DS record.

------------------------------------------------------------------------
r5028 | baerm | 2010-03-11 14:49:56 -0500 (Thu, 11 Mar 2010) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Changed Bind program search to only show directories where bind
exectuables are found.


------------------------------------------------------------------------
r5026 | hserus | 2010-03-01 11:06:57 -0500 (Mon, 01 Mar 2010) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

- ignore wildcard check for DS non-existence only for NOERROR responses
- when checking for provably insecure names check trustworthiness of names
  using val_istrusted instead of val_isvalidated, to account for optout zones

------------------------------------------------------------------------
r5025 | hserus | 2010-02-28 22:52:59 -0500 (Sun, 28 Feb 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc

Do away with the VAL_VERIFIED_CHAIN status code

------------------------------------------------------------------------
r5024 | hserus | 2010-02-28 22:49:35 -0500 (Sun, 28 Feb 2010) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Fix following issues:
- find trust anchors that are at the level of the top-query
- fix some of the error messages
- don't check wildcard proofs while verifying DS non-existence in opt-out zones
- check correct pointer value when NCN proof is missing
- Fix another instance of using a cached zonecut when availabile
- Use VAL_NOTRUST in place of VAL_VERIFIED_CHAIN

------------------------------------------------------------------------
r5023 | hserus | 2010-02-28 22:42:42 -0500 (Sun, 28 Feb 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Try to correctly distinguish between referral and a no data response with NS records

------------------------------------------------------------------------
r5022 | hserus | 2010-02-28 22:39:13 -0500 (Sun, 28 Feb 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/val_errors.h

Remove unnecessary (and misleading) error code VAL_VERIFIED_CHAIN

------------------------------------------------------------------------
r5021 | hserus | 2010-02-28 22:38:29 -0500 (Sun, 28 Feb 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_crypto.c
   M /trunk/dnssec-tools/validator/libval/val_verify.c

lower all domain names while verifying signatures

------------------------------------------------------------------------
r5019 | hardaker | 2010-02-12 14:13:48 -0500 (Fri, 12 Feb 2010) | 1 line
Changed paths:
   M /trunk/dnssec-tools/ChangeLog

Update for verison 1.6
------------------------------------------------------------------------
r5018 | hardaker | 2010-02-12 14:12:49 -0500 (Fri, 12 Feb 2010) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/convertar
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow
   M /trunk/dnssec-tools/tools/donuts/donuts
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone
   M /trunk/dnssec-tools/tools/mapper/mapper
   M /trunk/dnssec-tools/tools/scripts/blinkenlights
   M /trunk/dnssec-tools/tools/scripts/bubbles
   M /trunk/dnssec-tools/tools/scripts/cleanarch
   M /trunk/dnssec-tools/tools/scripts/cleankrf
   M /trunk/dnssec-tools/tools/scripts/dtck
   M /trunk/dnssec-tools/tools/scripts/dtconf
   M /trunk/dnssec-tools/tools/scripts/dtconfchk
   M /trunk/dnssec-tools/tools/scripts/dtdefs
   M /trunk/dnssec-tools/tools/scripts/dtinitconf
   M /trunk/dnssec-tools/tools/scripts/dtreqmods
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/fixkrf
   M /trunk/dnssec-tools/tools/scripts/genkrf
   M /trunk/dnssec-tools/tools/scripts/getdnskeys
   M /trunk/dnssec-tools/tools/scripts/getds
   M /trunk/dnssec-tools/tools/scripts/keyarch
   M /trunk/dnssec-tools/tools/scripts/krfcheck
   M /trunk/dnssec-tools/tools/scripts/lsdnssec
   M /trunk/dnssec-tools/tools/scripts/lskrf
   M /trunk/dnssec-tools/tools/scripts/lsroll
   M /trunk/dnssec-tools/tools/scripts/rollchk
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/rollinit
   M /trunk/dnssec-tools/tools/scripts/rolllog
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor
   M /trunk/dnssec-tools/tools/scripts/rollset
   M /trunk/dnssec-tools/tools/scripts/signset-editor
   M /trunk/dnssec-tools/tools/scripts/tachk
   M /trunk/dnssec-tools/tools/scripts/timetrans
   M /trunk/dnssec-tools/tools/scripts/trustman
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Update Version Number: 1.6
------------------------------------------------------------------------
r5017 | hardaker | 2010-02-12 13:57:41 -0500 (Fri, 12 Feb 2010) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/resolver.h

change parameter from class to pclass to not conflict with C++ terms
------------------------------------------------------------------------
r5016 | hardaker | 2010-02-12 13:56:37 -0500 (Fri, 12 Feb 2010) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/convertar

fix documentation bug
------------------------------------------------------------------------
r5014 | baerm | 2010-02-11 12:57:50 -0500 (Thu, 11 Feb 2010) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.c


Fixed 64-bit segfault issue.


------------------------------------------------------------------------
r5013 | baerm | 2010-02-11 12:55:20 -0500 (Thu, 11 Feb 2010) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm


changing parsing to allow email address in rrf files


------------------------------------------------------------------------
r5012 | baerm | 2010-02-04 17:53:27 -0500 (Thu, 04 Feb 2010) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman


Fixed key overwrite during revoke, fixed revoke.
Using the revoke bit is now the default behaviour.
Added numerous white space changes.


------------------------------------------------------------------------
r5011 | baerm | 2010-02-04 17:51:12 -0500 (Thu, 04 Feb 2010) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/testing/t/050trustman-rollerd.t

Updated test to match new default behavior for revoking keys in trustman


------------------------------------------------------------------------
r5010 | baerm | 2010-02-04 17:04:10 -0500 (Thu, 04 Feb 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/testing/TODO
   M /trunk/dnssec-tools/testing/t/010zonesigner.t
   M /trunk/dnssec-tools/testing/t/020donuts.t
   M /trunk/dnssec-tools/testing/t/040rollerd.t
   M /trunk/dnssec-tools/testing/t/050trustman-rollerd.t
   M /trunk/dnssec-tools/testing/t/dt_testingtools.pl

updated testing suite, mostly syntax some processing changes

------------------------------------------------------------------------
r5009 | rstory | 2010-01-28 14:18:39 -0500 (Thu, 28 Jan 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/README
   A /trunk/dnssec-tools/apps/sendmail/spfmilter-0.97_libspf2.patch
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-dnssec-howto.txt

update for 0.97 and spf2-1.2.9

------------------------------------------------------------------------
r5007 | rstory | 2010-01-28 12:23:12 -0500 (Thu, 28 Jan 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2/README.dnssec
   M /trunk/dnssec-tools/apps/libspf2/libspf2-dnssec.patch

update for libspf2 1.2.9

------------------------------------------------------------------------
r5006 | rstory | 2010-01-28 12:18:25 -0500 (Thu, 28 Jan 2010) | 1 line
Changed paths:
   M /trunk/dnssec-tools/configure.in

check for rquired perl modules
------------------------------------------------------------------------
r5005 | tewok | 2010-01-26 11:11:47 -0500 (Tue, 26 Jan 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl

Modified -zonestatus to give a nice format for its output.

------------------------------------------------------------------------
r5004 | tewok | 2010-01-25 19:39:05 -0500 (Mon, 25 Jan 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

Modified to handle long and short phase messages.

------------------------------------------------------------------------
r5003 | tewok | 2010-01-25 19:35:54 -0500 (Mon, 25 Jan 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm

Default to long phase messages.

------------------------------------------------------------------------
r5002 | tewok | 2010-01-25 18:50:29 -0500 (Mon, 25 Jan 2010) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

Added the zonename to the response to "rollctl -zonestatus".  The zonename was
added since split-zones may make the zonename and rollrec name be different.

------------------------------------------------------------------------
r5001 | tewok | 2010-01-25 18:40:41 -0500 (Mon, 25 Jan 2010) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

Deleted some old debugging code.
Modified the response to "rollctl -zonestatus" in case of short phase messages.

------------------------------------------------------------------------
r5000 | tewok | 2010-01-25 18:17:38 -0500 (Mon, 25 Jan 2010) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm

Modified rollmgr_get_phase():
	- extended checking for invalid phase numbers and phase types
	- added ability to have long or short messages
	- added pod to document the routine
Adjusted copyright date and version number.
Adjusted formatting and shortened message content for some messages and
comments.

------------------------------------------------------------------------
r4999 | tewok | 2010-01-25 14:28:23 -0500 (Mon, 25 Jan 2010) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor

Adjusted copyright dates and version.
Added support for new zonename record.
Added a note to the caveat pod section.
Fixed some pod errors.

------------------------------------------------------------------------
r4998 | tewok | 2010-01-25 11:33:33 -0500 (Mon, 25 Jan 2010) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollset

Option changes to accomodate split-views:
	- renamed -zone option to -name (used to select a specific rollrec)
	- added -zone to specify a new zone name
	- added -reset-zonename to copy rollrec name to zonename
	- modified usage() and pod to reflect these changes
Adjusted copyright dates and version.

------------------------------------------------------------------------
r4997 | tewok | 2010-01-24 14:42:28 -0500 (Sun, 24 Jan 2010) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollchk

Added checks for the new zonename record.
Adjusted copyright dates.
Updates version.

------------------------------------------------------------------------
r4996 | tewok | 2010-01-24 13:14:06 -0500 (Sun, 24 Jan 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm

Fixed some spelling errors.

------------------------------------------------------------------------
r4995 | tewok | 2010-01-22 19:16:46 -0500 (Fri, 22 Jan 2010) | 9 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll

Modifications for split-zones:
	- added -zonename option
	- renamed -zone option to -zonefile
	- rename the "Zone" output column to "Name"
	- added the "Zonename" column to the output
	- added pod describing the new behavior

Adjusted copyright dates.

------------------------------------------------------------------------
r4994 | tewok | 2010-01-21 19:58:17 -0500 (Thu, 21 Jan 2010) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollinit

Added zonename field to newly created rollrecs.
Adjusted copyright date and tool version.
Modified pod:
	- added paragraph about zonename field and record name
	- added zonename lines to examples
	- replace "domain" with "zone"
	- adjusted spacing in a few examples

------------------------------------------------------------------------
r4993 | hardaker | 2010-01-21 19:30:28 -0500 (Thu, 21 Jan 2010) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm

copyright year update
------------------------------------------------------------------------
r4992 | hardaker | 2010-01-21 19:30:11 -0500 (Thu, 21 Jan 2010) | 1 line
Changed paths:
   M /trunk/dnssec-tools/COPYING

copyright year update
------------------------------------------------------------------------
r4991 | tewok | 2010-01-21 16:13:52 -0500 (Thu, 21 Jan 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm

Added a default archive directory.

------------------------------------------------------------------------
r4989 | tewok | 2010-01-21 11:53:01 -0500 (Thu, 21 Jan 2010) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

Modified pod:
	- Clarified paragraph about KSK steps 5 and 6.
	- Modified discussion of rollrec names to account for split-zone mods.
	- Modified to not require the rollctl comm pipe to be owned by root,
	  but by rollerd's user.

------------------------------------------------------------------------
r4988 | hardaker | 2010-01-20 18:00:31 -0500 (Wed, 20 Jan 2010) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/dnssectools.pm

actually pass in the mail arguments
------------------------------------------------------------------------
r4987 | tewok | 2010-01-19 20:17:30 -0500 (Tue, 19 Jan 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/rundemo

Fixed usage message.

------------------------------------------------------------------------
r4986 | tewok | 2010-01-19 20:16:59 -0500 (Tue, 19 Jan 2010) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/rundemo

Adjusted copyright date.
Added -reload option.
Changed loglevel to phase.

------------------------------------------------------------------------
r4985 | tewok | 2010-01-19 20:15:32 -0500 (Tue, 19 Jan 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/phaser

Adjusted copyright date.

------------------------------------------------------------------------
r4984 | tewok | 2010-01-19 20:15:10 -0500 (Tue, 19 Jan 2010) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/Makefile

Adjusted the copyright date.
Removed unnecessary refs to db.cache.
Added two commented-out zonesigner commands for using key directories.

------------------------------------------------------------------------
r4983 | tewok | 2010-01-19 20:13:53 -0500 (Tue, 19 Jan 2010) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/tools/demos/rollerd-basic/save-db.cache

Deleted because it isn't used.

------------------------------------------------------------------------
r4982 | tewok | 2010-01-19 20:13:13 -0500 (Tue, 19 Jan 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/README

Adjust the copyright date.

------------------------------------------------------------------------
r4981 | tewok | 2010-01-19 20:11:00 -0500 (Tue, 19 Jan 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-demo.rollrec

Make both zones roll.

------------------------------------------------------------------------
r4980 | tewok | 2010-01-19 20:10:05 -0500 (Tue, 19 Jan 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-example.com
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-test.com

Speed up the test a little.

------------------------------------------------------------------------
r4979 | tewok | 2010-01-19 18:52:48 -0500 (Tue, 19 Jan 2010) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Added code to put the New ZSKs in the zskdirectory.
Adjusted the copyright date.
Fixed a comment typo.
Deleted an extraneous comment.

------------------------------------------------------------------------
r4978 | tewok | 2010-01-19 14:32:37 -0500 (Tue, 19 Jan 2010) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl

Used proper exit code if rollerd isn't running.
Used proper variable in two error messages.
Fixed formatting.

------------------------------------------------------------------------
r4977 | tewok | 2010-01-19 14:29:24 -0500 (Tue, 19 Jan 2010) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm

Added some parens in an ifcond, for clarity.
Fixed a comment typo.

------------------------------------------------------------------------
r4976 | tewok | 2010-01-19 14:26:47 -0500 (Tue, 19 Jan 2010) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl

Used proper exit code if rollerd isn't running.
Used proper variable in two error messages.
Fixed formatting.

------------------------------------------------------------------------
r4975 | tewok | 2010-01-19 14:09:26 -0500 (Tue, 19 Jan 2010) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights

Added support for the special characters the docs say can be used
in rollrec names.
Added quotes around zone arguments sent to rollerd.
Added a dash to the argument sent to rollctl.
Fixed a comment typo.

------------------------------------------------------------------------
r4974 | tewok | 2010-01-19 11:07:38 -0500 (Tue, 19 Jan 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights

Adjusted copyright dates.

------------------------------------------------------------------------
r4973 | tewok | 2010-01-19 11:06:35 -0500 (Tue, 19 Jan 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

Adjusted copyright date.

------------------------------------------------------------------------
r4972 | tewok | 2010-01-19 10:57:30 -0500 (Tue, 19 Jan 2010) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pod

Fixed problem where a roll rollrec was called a zone rollrec.
Added discussion about rollrec names.
Added description of zonename field.
Fixed examples to include zonename fields.
Adjusted copyright dates.

------------------------------------------------------------------------
r4971 | tewok | 2010-01-19 10:52:58 -0500 (Tue, 19 Jan 2010) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm

Modified pod example:
	- added zonename field
	- shortened paths in zonefile, keyrec, and directory fields for
	  better formatting

Modified paragraph about cmds field for clarity, grammar, and spelling.

------------------------------------------------------------------------
r4970 | tewok | 2010-01-18 19:35:09 -0500 (Mon, 18 Jan 2010) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Handle key-name collisions better:
	- add a maximum number of attempts to create the keys
	- move key creation into makekey()

------------------------------------------------------------------------
r4969 | tewok | 2010-01-18 19:30:36 -0500 (Mon, 18 Jan 2010) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights

Added support for split zones:
	- First column is now rollrec name.
	- New second column is zone name.

If the background color couldn't be found, then the skipped-zone color will
be used.

------------------------------------------------------------------------
r4968 | tewok | 2010-01-18 19:26:03 -0500 (Mon, 18 Jan 2010) | 11 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

Added support for split zones:
	- rollrecs now have a zonename field
	- rollrec names are now an identifier only
	- explicitly specified the keyrec file for zonesigner to use
 
Expanded ksk_phase7()'s header to describe the steps it'll take.
Expanded rrfchk()'s header and commands to better describe the things
being checked.
If rrfchk() doesn't find a zonename field in a rollrec, it'll add one that
is the same as the rollrec's name.

------------------------------------------------------------------------
r4967 | tewok | 2010-01-18 18:50:12 -0500 (Mon, 18 Jan 2010) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

Fixed a comment.
Added a keyrec_close() before a keyrec_read() to ensure the file pointers are
properly set.
Added a keyrec_close() if a zone keyrec wasn't found.
Added some pod.

------------------------------------------------------------------------
r4966 | tewok | 2010-01-15 20:07:55 -0500 (Fri, 15 Jan 2010) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm

Added zonename as a valid rollrec field.
Adjusted copyright dates.
Deleted an obsolete comment.

------------------------------------------------------------------------
r4965 | tewok | 2010-01-12 13:54:02 -0500 (Tue, 12 Jan 2010) | 10 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

Modified runner() to:
	- log output if the specified command fails
	- take a report-error flag

Modified signer() to mark a zone as a skip zone if zonesigner fails.

Modified zonekeykr() to close the open keyrec prior to reading a new keyrec.

Deleted a few debugging log messages.

------------------------------------------------------------------------
r4964 | tewok | 2010-01-11 19:43:05 -0500 (Mon, 11 Jan 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm

Fixed a misspelled word.

------------------------------------------------------------------------
r4963 | hserus | 2010-01-11 09:28:02 -0500 (Mon, 11 Jan 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_crypto.c

Check for proper return value from DSA_verfiy and RSA_verify functions

------------------------------------------------------------------------
r4962 | hserus | 2010-01-08 15:49:45 -0500 (Fri, 08 Jan 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

If we already have a DNSKEY we can use to validate, don't try to look for one again

------------------------------------------------------------------------
r4961 | rstory | 2010-01-06 13:51:29 -0500 (Wed, 06 Jan 2010) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/sendmail-dnssec-howto.txt
   A /trunk/dnssec-tools/apps/sendmail/sendmail-spec.patch

add patch for RPM spec file; add RPM building to howto file


------------------------------------------------------------------------
r4960 | rstory | 2010-01-06 13:38:49 -0500 (Wed, 06 Jan 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.14.1_dnssec_patch.txt

clear errno before calling syserr after validation failure; no \n in err text

------------------------------------------------------------------------
r4959 | tewok | 2010-01-05 20:23:08 -0500 (Tue, 05 Jan 2010) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

Centralized command execution in order to ensure the active keyrec file
is flushed to disk prior to running the command.

------------------------------------------------------------------------
r4958 | tewok | 2010-01-05 15:00:47 -0500 (Tue, 05 Jan 2010) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

Some minor code clean-up.

------------------------------------------------------------------------
r4957 | tewok | 2010-01-05 14:41:56 -0500 (Tue, 05 Jan 2010) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

Deleted the first instance of cmd_logfile().  This only had the first half of
the complete function.

------------------------------------------------------------------------
r4956 | tewok | 2010-01-05 14:39:22 -0500 (Tue, 05 Jan 2010) | 11 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

Changed	"<command>"
to:	'<command>'		(to ensure no interpolation would be performed.

Several uses of	"<command>" had no quotes whatsoever.  These were single-
quoted.

Fixed some comment grammar.
Put some safety parens in a return.
Commented out a debugging print.
Renamed a variable ($name -> $rname) to match what lots of other routines do.

------------------------------------------------------------------------
r4955 | baerm | 2009-12-31 13:31:53 -0500 (Thu, 31 Dec 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman


Changed parsing of dnsval.conf to allow for the use DS records for
domain DNSKEYS


------------------------------------------------------------------------
r4954 | rstory | 2009-12-30 22:09:02 -0500 (Wed, 30 Dec 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/resolver.h

use libsres_msg_getflag iff ns_msg_getflag is not defined
------------------------------------------------------------------------
r4953 | tewok | 2009-12-28 20:47:57 -0500 (Mon, 28 Dec 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights

Do better checks of rollctl's exit code.

------------------------------------------------------------------------
r4952 | tewok | 2009-12-28 19:36:44 -0500 (Mon, 28 Dec 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/krfcheck

Added support for subordinate kskrevs.

------------------------------------------------------------------------
r4951 | hardaker | 2009-12-24 13:09:38 -0500 (Thu, 24 Dec 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/Makefile.in

remove the apps/.libs directory on make clean
------------------------------------------------------------------------
r4949 | hardaker | 2009-12-24 11:58:10 -0500 (Thu, 24 Dec 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/ChangeLog

Update for verison 1.6.pre2
------------------------------------------------------------------------
r4948 | hardaker | 2009-12-24 11:57:03 -0500 (Thu, 24 Dec 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/convertar
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow
   M /trunk/dnssec-tools/tools/donuts/donuts
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone
   M /trunk/dnssec-tools/tools/mapper/mapper
   M /trunk/dnssec-tools/tools/scripts/blinkenlights
   M /trunk/dnssec-tools/tools/scripts/bubbles
   M /trunk/dnssec-tools/tools/scripts/cleanarch
   M /trunk/dnssec-tools/tools/scripts/cleankrf
   M /trunk/dnssec-tools/tools/scripts/dtck
   M /trunk/dnssec-tools/tools/scripts/dtconf
   M /trunk/dnssec-tools/tools/scripts/dtconfchk
   M /trunk/dnssec-tools/tools/scripts/dtdefs
   M /trunk/dnssec-tools/tools/scripts/dtinitconf
   M /trunk/dnssec-tools/tools/scripts/dtreqmods
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/fixkrf
   M /trunk/dnssec-tools/tools/scripts/genkrf
   M /trunk/dnssec-tools/tools/scripts/getdnskeys
   M /trunk/dnssec-tools/tools/scripts/getds
   M /trunk/dnssec-tools/tools/scripts/keyarch
   M /trunk/dnssec-tools/tools/scripts/krfcheck
   M /trunk/dnssec-tools/tools/scripts/lsdnssec
   M /trunk/dnssec-tools/tools/scripts/lskrf
   M /trunk/dnssec-tools/tools/scripts/lsroll
   M /trunk/dnssec-tools/tools/scripts/rollchk
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/rollinit
   M /trunk/dnssec-tools/tools/scripts/rolllog
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor
   M /trunk/dnssec-tools/tools/scripts/rollset
   M /trunk/dnssec-tools/tools/scripts/signset-editor
   M /trunk/dnssec-tools/tools/scripts/tachk
   M /trunk/dnssec-tools/tools/scripts/timetrans
   M /trunk/dnssec-tools/tools/scripts/trustman
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Update Version Number: 1.6.pre2
------------------------------------------------------------------------
r4947 | hardaker | 2009-12-24 11:54:13 -0500 (Thu, 24 Dec 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/dist/makerelease.xml

fix svn URL
------------------------------------------------------------------------
r4946 | hardaker | 2009-12-24 11:53:38 -0500 (Thu, 24 Dec 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Makefile.PL

grep is in /bin on fedora
------------------------------------------------------------------------
r4945 | tewok | 2009-12-23 15:25:51 -0500 (Wed, 23 Dec 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/krfcheck

Changed a print() call to a qprint() call so -quiet would be fully observed.

------------------------------------------------------------------------
r4944 | hardaker | 2009-12-23 13:41:42 -0500 (Wed, 23 Dec 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/convertar
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Bind.pm

make bind support the write_expectations.conf flag
------------------------------------------------------------------------
r4943 | hardaker | 2009-12-23 13:41:29 -0500 (Wed, 23 Dec 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Libval.pm

white space output changes
------------------------------------------------------------------------
r4942 | hardaker | 2009-12-23 13:32:27 -0500 (Wed, 23 Dec 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Libval.pm

remove a debugging output statement
------------------------------------------------------------------------
r4941 | hardaker | 2009-12-23 13:32:11 -0500 (Wed, 23 Dec 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/convertar
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Libval.pm
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm

added option parsing support; made the libval.conf output include a zone-security-expectation section if requested via the write_expectations=1 option
------------------------------------------------------------------------
r4940 | tewok | 2009-12-21 11:21:06 -0500 (Mon, 21 Dec 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Added error checking in case keyrec_read() fails.  Primarily wanted for      
keyname collisions, but godd for other problems.
Minor fixes to a couple code comments.

------------------------------------------------------------------------
r4939 | tewok | 2009-12-21 11:09:34 -0500 (Mon, 21 Dec 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/keyarch

Fixed grammar in an error message.

------------------------------------------------------------------------
r4938 | tewok | 2009-12-17 08:36:35 -0500 (Thu, 17 Dec 2009) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm

Fixed the setting of $keyreclen so it's always fetched anew whenever a
routine uses it, instead of the module maintaining the value itself.

Changed the numbering of new signing set names so they are start prefixed
by three zeroes instead of one.


------------------------------------------------------------------------
r4937 | hardaker | 2009-12-17 08:35:09 -0500 (Thu, 17 Dec 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/dnssectools.pm

support use of dnssec-tools.conf mailer-type and mailer-server for dt_adminmail; document and set file indentation style for emacs
------------------------------------------------------------------------
r4936 | rstory | 2009-12-15 23:08:40 -0500 (Tue, 15 Dec 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/README.firefox
   M /trunk/dnssec-tools/apps/mozilla/README.nspr

tweak readmes

------------------------------------------------------------------------
r4935 | rstory | 2009-12-15 22:46:01 -0500 (Tue, 15 Dec 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-nspr.patch

ifdef dnssec specific code
------------------------------------------------------------------------
r4934 | rstory | 2009-12-15 22:38:41 -0500 (Tue, 15 Dec 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/nspr-spec.patch

add buildreq on openssl-dev; add pkgconfig patch
------------------------------------------------------------------------
r4933 | rstory | 2009-12-15 12:40:03 -0500 (Tue, 15 Dec 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-nspr.patch
   A /trunk/dnssec-tools/apps/mozilla/dnssec-pkgconfig.patch

move linux/fedora/rpm specific patch to its own file; tweak nspr for os x

------------------------------------------------------------------------
r4932 | hserus | 2009-12-11 13:08:50 -0500 (Fri, 11 Dec 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

In get_ac_trust check for trust anchors before trying to query for DS or DNSKEY records

------------------------------------------------------------------------
r4931 | hserus | 2009-12-11 12:02:53 -0500 (Fri, 11 Dec 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.c

Supply better fix for breaking out of loop around trust anchor with expired sigs

------------------------------------------------------------------------
r4930 | hserus | 2009-12-11 11:48:02 -0500 (Fri, 11 Dec 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.c

Revert previous change - breaks other tests

------------------------------------------------------------------------
r4929 | hserus | 2009-12-11 11:43:44 -0500 (Fri, 11 Dec 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.c

Set the correct status if the unchecked trust anchor fails to validate. Still
need to fix the extra DS query generation when there is clearly no trust anchor
above.

------------------------------------------------------------------------
r4928 | tewok | 2009-12-10 20:12:53 -0500 (Thu, 10 Dec 2009) | 17 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

Modified the second argument to signer(), which is what actually executes
zonesigner.  The old argument was a phase-specific, keytype-specific flag to
pass to zonesigner.  The new argument is a string indicating the keytype and
phase.

For example, this call:

	$ret = signer($rname,"-newpubksk",$krr);

was replaced with this call:
	$ret = signer($rname,"KSK phase 2",$krr);

Strictly speaking, this change isn't necessary.  However, it does gather
in one code-icular place exactly what the differences are in zonesigner
executions from phase to phase.


------------------------------------------------------------------------
r4927 | tewok | 2009-12-10 19:18:26 -0500 (Thu, 10 Dec 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

A few minor grammatical fixes in comments and log messages.

------------------------------------------------------------------------
r4926 | rstory | 2009-12-10 11:31:55 -0500 (Thu, 10 Dec 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2/README.dnssec
   D /trunk/dnssec-tools/apps/libspf2/libspf2-1.2.5_dnssec_guide.txt
   D /trunk/dnssec-tools/apps/libspf2/libspf2-1.2.5_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/libspf2/libspf2-dnssec.patch

update to 1.2.5 patch/readme
------------------------------------------------------------------------
r4925 | rstory | 2009-12-10 11:28:57 -0500 (Thu, 10 Dec 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2/README.dnssec
   D /trunk/dnssec-tools/apps/libspf2/libspf2-1.0.4_dnssec_guide.txt

merge 1.0.4 guide into README
------------------------------------------------------------------------
r4924 | rstory | 2009-12-10 11:27:07 -0500 (Thu, 10 Dec 2009) | 1 line
Changed paths:
   A /trunk/dnssec-tools/apps/libspf2/README.dnssec (from /trunk/dnssec-tools/apps/libspf2/libspf2-dnssec-howto.txt:4909)
   D /trunk/dnssec-tools/apps/libspf2/libspf2-1.0.4_dnssec_patch.txt
   D /trunk/dnssec-tools/apps/libspf2/libspf2-dnssec-howto.txt
   A /trunk/dnssec-tools/apps/libspf2/libspf2-dnssec.patch (from /trunk/dnssec-tools/apps/libspf2/libspf2-1.0.4_dnssec_patch.txt:4909)

move away from versioned patch files
------------------------------------------------------------------------
r4923 | rstory | 2009-12-09 23:41:03 -0500 (Wed, 09 Dec 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/README
   M /trunk/dnssec-tools/apps/mozilla/README.firefox
   A /trunk/dnssec-tools/apps/mozilla/firefox-spec.patch

add firefox spec patch, tweak rpm build instructions in readme
------------------------------------------------------------------------
r4922 | tewok | 2009-12-09 21:24:27 -0500 (Wed, 09 Dec 2009) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/bubbles

Modified to ask the user what to do if there no zone names to be displayed.
The user is prompted for one of the following courses of action:
	- stop execution
	- continue as-is
	- ignore the values of display flags and display data

Updated the "Known Issues" section in the pod.

------------------------------------------------------------------------
r4921 | tewok | 2009-12-09 19:39:05 -0500 (Wed, 09 Dec 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/bubbles

Listed all options in -help message.

------------------------------------------------------------------------
r4920 | tewok | 2009-12-09 19:22:08 -0500 (Wed, 09 Dec 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

Clarified and fixed several log messages.

------------------------------------------------------------------------
r4919 | tewok | 2009-12-09 18:47:51 -0500 (Wed, 09 Dec 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

Clarified two error messages, and fixed the grammar in one of the two.

------------------------------------------------------------------------
r4918 | tewok | 2009-12-09 18:44:57 -0500 (Wed, 09 Dec 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

Fixed the grammar in an error message.

------------------------------------------------------------------------
r4917 | tewok | 2009-12-09 18:42:16 -0500 (Wed, 09 Dec 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

Clarified an error message.

------------------------------------------------------------------------
r4916 | rstory | 2009-12-09 16:30:57 -0500 (Wed, 09 Dec 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch

remove nspr patches; minor tweaks for latest firefox
------------------------------------------------------------------------
r4915 | rstory | 2009-12-09 16:25:05 -0500 (Wed, 09 Dec 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-mozconfig.patch

dont disable system nspr/nss; use MOZ_OPT_FLAGS instead of RPMs flags
------------------------------------------------------------------------
r4913 | rstory | 2009-12-09 15:22:12 -0500 (Wed, 09 Dec 2009) | 1 line
Changed paths:
   A /trunk/dnssec-tools/apps/mozilla/README.xulrunner
   A /trunk/dnssec-tools/apps/mozilla/xulrunner-spec.patch

readme/spec patch for xulrunner
------------------------------------------------------------------------
r4912 | tewok | 2009-12-08 13:03:36 -0500 (Tue, 08 Dec 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Fixed so that the KSK-rev keyrec doesn't continue to point to any keyrecs
when the revoked keys move to being obsolete.

------------------------------------------------------------------------
r4911 | rstory | 2009-12-07 16:20:58 -0500 (Mon, 07 Dec 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-nspr.patch

make sure nspr lib links to val libs
------------------------------------------------------------------------
r4910 | rstory | 2009-12-07 14:30:38 -0500 (Mon, 07 Dec 2009) | 1 line
Changed paths:
   A /trunk/dnssec-tools/apps/mozilla/README.nspr
   A /trunk/dnssec-tools/apps/mozilla/dnssec-nspr.patch
   A /trunk/dnssec-tools/apps/mozilla/nspr-spec.patch

new files for nspr rpm building
------------------------------------------------------------------------
r4909 | tewok | 2009-12-01 19:25:57 -0500 (Tue, 01 Dec 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

Fixed the regexp in cmd_logmsg() so the user's message will be properly
parsed.

------------------------------------------------------------------------
r4908 | tewok | 2009-12-01 19:25:14 -0500 (Tue, 01 Dec 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm

Fixed the value of $ROLLCMD_LOGMSG to one that will actually work.


------------------------------------------------------------------------
r4907 | tewok | 2009-12-01 16:34:36 -0500 (Tue, 01 Dec 2009) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/log.test

This file shouldn't have been checked in at all.

------------------------------------------------------------------------
r4906 | tewok | 2009-12-01 15:06:59 -0500 (Tue, 01 Dec 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf

Added display options for set keyrecs.

------------------------------------------------------------------------
r4905 | tewok | 2009-12-01 15:03:48 -0500 (Tue, 01 Dec 2009) | 13 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Modified revocation keyrecs so there is one active "super" kskrev set keyrec
whose "keys" field references a number of subsidiary kskrev set keyrecs.  As
the kskrevs go obsolete, they are individually marked as kskobs.

Added expandrevlist() to get the full set of subsidiary kskrev keys. 
Modified keyrec_signset_new() to take an additional option that specifies
the type of the new signing set.
Moved the bulk of keyrec_age_revoked() from keyrec.pm into age_revoked().
Moved some common code into newrevset().
Moved some common code into expandrevlist().
Clarified several informational and error messages.
Reworked some pod option descriptions.

------------------------------------------------------------------------
r4904 | tewok | 2009-12-01 15:03:29 -0500 (Tue, 01 Dec 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/genkrf

Added key types to the set keyrecs.

------------------------------------------------------------------------
r4903 | tewok | 2009-12-01 15:03:19 -0500 (Tue, 01 Dec 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

Modified pod discussion of RFC5011 to fit formatting conventions.

------------------------------------------------------------------------
r4902 | tewok | 2009-12-01 15:03:03 -0500 (Tue, 01 Dec 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/krfcheck

Validate the set types.
Fixed a grammo.

------------------------------------------------------------------------
r4901 | tewok | 2009-12-01 15:02:41 -0500 (Tue, 01 Dec 2009) | 14 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm

Added a type argument to keyrec_signset_new(), as well as a check to ensure
the type is valid.

Deleted a duplicate reference to "zskpub" from keyrec_keypaths().
Moved the keyrec_keypaths() pod description into its proper (alphabetical)
place.

Renamed keyrec_age_revoked() to keyrec_revoke_check().
Modified to keyrec_revoke_check() just do the actual revocation-period check;
the key manipulation was moved into zonesigner.
Added comments to keyrec_revoke_check()'s header detailing return codes.
Added a description of keyrec_revoke_check() to the pod.
 

------------------------------------------------------------------------
r4900 | rstory | 2009-11-23 22:47:11 -0500 (Mon, 23 Nov 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/postfix/README.dnssec
   M /trunk/dnssec-tools/apps/postfix/postfix-dnssec.patch

update patch for 2.7; add testcase for sender domain to readme

------------------------------------------------------------------------
r4899 | rstory | 2009-11-21 09:46:17 -0500 (Sat, 21 Nov 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/ssh/README.ssh

update patch name
------------------------------------------------------------------------
r4898 | baerm | 2009-11-18 23:23:57 -0500 (Wed, 18 Nov 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Added rollchk path


------------------------------------------------------------------------
r4897 | rstory | 2009-11-18 16:35:25 -0500 (Wed, 18 Nov 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

check for EAI_NODATA before using it

------------------------------------------------------------------------
r4896 | rstory | 2009-11-18 12:20:56 -0500 (Wed, 18 Nov 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/postfix/README.dnssec
   D /trunk/dnssec-tools/apps/postfix/postfix-2.5.1-dnssec-howto.txt
   D /trunk/dnssec-tools/apps/postfix/postfix-2.5.1_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/postfix/postfix-dnssec.patch

update to 2.5.1 patch, remove old files

------------------------------------------------------------------------
r4895 | rstory | 2009-11-18 12:20:01 -0500 (Wed, 18 Nov 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/postfix/README.dnssec
   D /trunk/dnssec-tools/apps/postfix/postfix-2.3.8_dnssec_patch.txt
   D /trunk/dnssec-tools/apps/postfix/postfix-2.3.x-dnssec-howto.txt
   M /trunk/dnssec-tools/apps/postfix/postfix-dnssec.patch

update to 2.3.8 version; remove old files

------------------------------------------------------------------------
r4894 | rstory | 2009-11-18 12:18:10 -0500 (Wed, 18 Nov 2009) | 1 line
Changed paths:
   D /trunk/dnssec-tools/apps/postfix/postfix-2.3.3_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/postfix/postfix-dnssec.patch

update patch to postfix-2.3.3, remove old file
------------------------------------------------------------------------
r4893 | rstory | 2009-11-18 12:17:14 -0500 (Wed, 18 Nov 2009) | 1 line
Changed paths:
   A /trunk/dnssec-tools/apps/postfix/README.dnssec
   D /trunk/dnssec-tools/apps/postfix/postfix-2.2.11_dnssec_patch.txt
   D /trunk/dnssec-tools/apps/postfix/postfix-2.2.x-dnssec-howto.txt
   A /trunk/dnssec-tools/apps/postfix/postfix-dnssec.patch

move postfix-2.2.* files to non-version-sepcific filenames
------------------------------------------------------------------------
r4892 | rstory | 2009-11-17 19:07:44 -0500 (Tue, 17 Nov 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/ssh/ssh-dnssec.pat

add error for untrusted no such name
------------------------------------------------------------------------
r4891 | rstory | 2009-11-17 13:11:56 -0500 (Tue, 17 Nov 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/ssh/ssh-dnssec.pat

change define name to match other patches
------------------------------------------------------------------------
r4890 | rstory | 2009-11-16 13:55:33 -0500 (Mon, 16 Nov 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/ncftp/ncftp-dnssec.patch

fix var used in configure macro
------------------------------------------------------------------------
r4889 | rstory | 2009-11-16 13:49:15 -0500 (Mon, 16 Nov 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/lftp/lftp-dnssec.patch

make val_context local; use new macro to decide when to check val_status
------------------------------------------------------------------------
r4888 | rstory | 2009-11-15 16:17:33 -0500 (Sun, 15 Nov 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/proftpd/README.dnssec
   M /trunk/dnssec-tools/apps/proftpd/proftpd-dnssec.patch

update patch for what will be proftpd 1.3.3 (cvs trunk)
------------------------------------------------------------------------
r4887 | tewok | 2009-11-14 20:49:50 -0500 (Sat, 14 Nov 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/signset-editor

Handle KSKs in Keyrec Display mode.

------------------------------------------------------------------------
r4886 | tewok | 2009-11-14 12:36:55 -0500 (Sat, 14 Nov 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor

Fixed a comment.

------------------------------------------------------------------------
r4885 | tewok | 2009-11-14 12:36:09 -0500 (Sat, 14 Nov 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor

Deleted two unused variables.

------------------------------------------------------------------------
r4884 | tewok | 2009-11-13 18:08:51 -0500 (Fri, 13 Nov 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/signset-editor

Fixed a pod error.

------------------------------------------------------------------------
r4883 | rstory | 2009-11-13 12:25:42 -0500 (Fri, 13 Nov 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

don't unwrap ipv4 addrs if NI_NUMERICHOST set; strip leading 0s in ipv6 addrs

------------------------------------------------------------------------
r4882 | rstory | 2009-11-13 10:23:17 -0500 (Fri, 13 Nov 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

bugfixes: do ipv4 lookup for ipv6 mapped ipv4 addrs; use u_char for addrs;
code cleanup: use sizeof instead of calculating size of array

------------------------------------------------------------------------
r4881 | rstory | 2009-11-12 11:40:11 -0500 (Thu, 12 Nov 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/getname.c

fixes for getname ipv6 support
------------------------------------------------------------------------
r4880 | rstory | 2009-11-11 16:34:30 -0500 (Wed, 11 Nov 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/getname.c

add ipv6 support to getname app
------------------------------------------------------------------------
r4879 | rstory | 2009-11-11 12:08:21 -0500 (Wed, 11 Nov 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

tabs to spaces
------------------------------------------------------------------------
r4878 | tewok | 2009-11-10 20:43:13 -0500 (Tue, 10 Nov 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

Renamed a variable from "$key" to "$keyset".  This was in ksk_expired() and
zsk_expired().

------------------------------------------------------------------------
r4877 | baerm | 2009-11-10 19:49:46 -0500 (Tue, 10 Nov 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/getname.c
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c


adjusted flags and some length checks,
NUMERICHOST and NAMEREQD flags should work correctly


------------------------------------------------------------------------
r4876 | rstory | 2009-11-10 16:57:04 -0500 (Tue, 10 Nov 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

fix another typo in new macro
------------------------------------------------------------------------
r4875 | tewok | 2009-11-10 16:38:41 -0500 (Tue, 10 Nov 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/krfcheck

Small amount of code reorganization.

------------------------------------------------------------------------
r4874 | tewok | 2009-11-10 14:06:17 -0500 (Tue, 10 Nov 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsdnssec

Fixed to handle multikey keysets properly.

------------------------------------------------------------------------
r4873 | tewok | 2009-11-10 12:43:56 -0500 (Tue, 10 Nov 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsdnssec

Made all error exits have an error exit code.
Added option validation for -d.

------------------------------------------------------------------------
r4872 | tewok | 2009-11-10 12:34:57 -0500 (Tue, 10 Nov 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsdnssec

Fixed some typos and grammos.
Fixed the pod to use the format other tools use.
Reworded some pod.

------------------------------------------------------------------------
r4871 | tewok | 2009-11-10 12:20:26 -0500 (Tue, 10 Nov 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/keyarch

Fixed grammos in code comments.

------------------------------------------------------------------------
r4870 | tewok | 2009-11-09 22:00:50 -0500 (Mon, 09 Nov 2009) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/fixkrf


Fixed handling of zone keyrecs to not look for a kskpath field.

--tHis line, and those below, will be ignored--

M    fixkrf

------------------------------------------------------------------------
r4869 | tewok | 2009-11-09 17:53:07 -0500 (Mon, 09 Nov 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/cleankrf


Fixed to handle KSK signing sets.
Fixed a warning message to be a normal message.
 

------------------------------------------------------------------------
r4868 | rstory | 2009-11-09 14:53:54 -0500 (Mon, 09 Nov 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

fix typo in macro
------------------------------------------------------------------------
r4867 | tewok | 2009-11-09 11:56:17 -0500 (Mon, 09 Nov 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/cleanarch


Added a usage clarification to the pod.


------------------------------------------------------------------------
r4866 | tewok | 2009-11-09 11:22:46 -0500 (Mon, 09 Nov 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/cleanarch


Fixed a grammo in the pod.


------------------------------------------------------------------------
r4864 | tewok | 2009-11-08 11:30:55 -0500 (Sun, 08 Nov 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/genkrf


Added a missing double-quote that hosed program compilation.


------------------------------------------------------------------------
r4862 | hardaker | 2009-11-05 18:49:24 -0500 (Thu, 05 Nov 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/ChangeLog

Update for verison 1.6.1.pre1
------------------------------------------------------------------------
r4861 | hardaker | 2009-11-05 18:48:32 -0500 (Thu, 05 Nov 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/convertar

add version number
------------------------------------------------------------------------
r4860 | hardaker | 2009-11-05 18:48:16 -0500 (Thu, 05 Nov 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/dist/makerelease.xml

add convertar
------------------------------------------------------------------------
r4859 | hardaker | 2009-11-05 18:47:30 -0500 (Thu, 05 Nov 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow
   M /trunk/dnssec-tools/tools/donuts/donuts
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone
   M /trunk/dnssec-tools/tools/mapper/mapper
   M /trunk/dnssec-tools/tools/scripts/blinkenlights
   M /trunk/dnssec-tools/tools/scripts/bubbles
   M /trunk/dnssec-tools/tools/scripts/cleanarch
   M /trunk/dnssec-tools/tools/scripts/cleankrf
   M /trunk/dnssec-tools/tools/scripts/dtck
   M /trunk/dnssec-tools/tools/scripts/dtconf
   M /trunk/dnssec-tools/tools/scripts/dtconfchk
   M /trunk/dnssec-tools/tools/scripts/dtdefs
   M /trunk/dnssec-tools/tools/scripts/dtinitconf
   M /trunk/dnssec-tools/tools/scripts/dtreqmods
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/fixkrf
   M /trunk/dnssec-tools/tools/scripts/genkrf
   M /trunk/dnssec-tools/tools/scripts/getdnskeys
   M /trunk/dnssec-tools/tools/scripts/getds
   M /trunk/dnssec-tools/tools/scripts/keyarch
   M /trunk/dnssec-tools/tools/scripts/krfcheck
   M /trunk/dnssec-tools/tools/scripts/lsdnssec
   M /trunk/dnssec-tools/tools/scripts/lskrf
   M /trunk/dnssec-tools/tools/scripts/lsroll
   M /trunk/dnssec-tools/tools/scripts/rollchk
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/rollinit
   M /trunk/dnssec-tools/tools/scripts/rolllog
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor
   M /trunk/dnssec-tools/tools/scripts/rollset
   M /trunk/dnssec-tools/tools/scripts/signset-editor
   M /trunk/dnssec-tools/tools/scripts/tachk
   M /trunk/dnssec-tools/tools/scripts/timetrans
   M /trunk/dnssec-tools/tools/scripts/trustman
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Update Version Number: 1.6.1.pre1
------------------------------------------------------------------------
r4858 | hardaker | 2009-11-05 18:44:34 -0500 (Thu, 05 Nov 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/dist/makerelease.xml

fix closing command tag
------------------------------------------------------------------------
r4857 | rstory | 2009-11-05 16:22:19 -0500 (Thu, 05 Nov 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

add VAL_GET*INFO_HAS_STATUS macros; dont use C++ keywords as agruments/struct members
------------------------------------------------------------------------
r4856 | rstory | 2009-11-05 16:20:12 -0500 (Thu, 05 Nov 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/resolver.h

add extern C wrapper so header can be included in C++ fiels
------------------------------------------------------------------------
r4855 | rstory | 2009-11-05 13:35:20 -0500 (Thu, 05 Nov 2009) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/proftpd/README.dnssec (from /trunk/dnssec-tools/apps/proftpd/proftpd-1.3.x-dnssec-howto.txt:4834)
   D /trunk/dnssec-tools/apps/proftpd/proftpd-1.3.x-dnssec-howto.txt
   D /trunk/dnssec-tools/apps/proftpd/proftpd-1.3.x_dnssec_patch.txt
   A /trunk/dnssec-tools/apps/proftpd/proftpd-dnssec.patch (from /trunk/dnssec-tools/apps/proftpd/proftpd-1.3.x_dnssec_patch.txt:4834)

rename to non-version-specific file names

------------------------------------------------------------------------
r4854 | hardaker | 2009-11-05 13:22:59 -0500 (Thu, 05 Nov 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/dnssecstatusOverlay.js

dump status
------------------------------------------------------------------------
r4853 | tewok | 2009-11-05 10:47:50 -0500 (Thu, 05 Nov 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/krfcheck


Added support for the nsec3rsasha1 algorithm.


------------------------------------------------------------------------
r4852 | hardaker | 2009-11-05 09:40:46 -0500 (Thu, 05 Nov 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/dist/makerelease.xml

sourceforge to our server
------------------------------------------------------------------------
r4851 | tewok | 2009-11-04 17:16:09 -0500 (Wed, 04 Nov 2009) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Deleted some extraneous minor comments.
Added set_type as a signing set keyrec field, and adjusted how signing set
types are notated in the initial example.


------------------------------------------------------------------------
r4850 | tewok | 2009-11-04 15:40:06 -0500 (Wed, 04 Nov 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/krfcheck


Teach krfcheck about kskpub and kskrev keyrecs.


------------------------------------------------------------------------
r4849 | tewok | 2009-11-04 15:19:08 -0500 (Wed, 04 Nov 2009) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Fixed the example keyrecs in the header.
Made keyrec_delval() an exported routine.
Grammatical and formatting fixes.
Added some inadvertently dropped "kskobs" uses.
 

------------------------------------------------------------------------
r4848 | hardaker | 2009-11-04 14:45:07 -0500 (Wed, 04 Nov 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/getds

more error checking and exiting with better messages when problems detected
------------------------------------------------------------------------
r4847 | tewok | 2009-11-04 13:24:48 -0500 (Wed, 04 Nov 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pod


Added a description of the keyrec_type field.
Fixed the examples to be internally consistent.


------------------------------------------------------------------------
r4846 | tewok | 2009-11-03 19:32:52 -0500 (Tue, 03 Nov 2009) | 14 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


In handling a KSK directory, allow for -newpubksk as well as -genksk.

On KSK rollover:
        - delete empty "kskpub" lines in the keyrec instead of giving
		  them empty values.

	- delete empty "keys" lines in the set keyrec instead of giving
	  it an empty value. 

On ZSK rollover:
	- don't give the published ZSK list an empty value.


------------------------------------------------------------------------
r4845 | tewok | 2009-11-03 11:31:17 -0500 (Tue, 03 Nov 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Including a '$' at the start of a scalar always helps...


------------------------------------------------------------------------
r4844 | tewok | 2009-11-03 11:28:58 -0500 (Tue, 03 Nov 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Ensure that a numeric phase is given, even when a phase isn't given in the
rollrec file.


------------------------------------------------------------------------
r4842 | hserus | 2009-10-30 14:04:52 -0400 (Fri, 30 Oct 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/etc/dnsval.conf

Add current DS record for dnssec-tools.org as a trust anchor

------------------------------------------------------------------------
r4841 | hardaker | 2009-10-30 12:59:12 -0400 (Fri, 30 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/configure.in

don't set PREFIX for perl; just the bin prefixes
------------------------------------------------------------------------
r4840 | rstory | 2009-10-29 20:30:29 -0400 (Thu, 29 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/wget/README
   M /trunk/dnssec-tools/apps/wget/wget-dnssec.patch

update patch for wget 1.12
------------------------------------------------------------------------
r4839 | rstory | 2009-10-29 16:36:21 -0400 (Thu, 29 Oct 2009) | 1 line
Changed paths:
   A /trunk/dnssec-tools/apps/wget/README
   A /trunk/dnssec-tools/apps/wget/wget-dnssec.patch

check in renamed patch/readme for 1.10.2
------------------------------------------------------------------------
r4838 | rstory | 2009-10-29 16:29:13 -0400 (Thu, 29 Oct 2009) | 1 line
Changed paths:
   D /trunk/dnssec-tools/apps/wget/wget-1.10.2-dnssec-howto.txt
   D /trunk/dnssec-tools/apps/wget/wget-1.10.2_dnssec_patch.txt

move away from version specific file names
------------------------------------------------------------------------
r4837 | tewok | 2009-10-29 13:36:05 -0400 (Thu, 29 Oct 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Changed "KEK" to "KSK" in a comment.


------------------------------------------------------------------------
r4836 | tewok | 2009-10-28 11:49:27 -0400 (Wed, 28 Oct 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollinit


Fixed formatting on a couple output lines.


------------------------------------------------------------------------
r4835 | tewok | 2009-10-28 11:47:32 -0400 (Wed, 28 Oct 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollinit


Added missing "use rolllog" call.


------------------------------------------------------------------------
r4834 | hserus | 2009-10-26 17:56:56 -0400 (Mon, 26 Oct 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator-internal.h
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_assertion.h
   M /trunk/dnssec-tools/validator/libval/val_context.c
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Do away with the assertion cache within val_context_t

------------------------------------------------------------------------
r4833 | hserus | 2009-10-26 17:47:54 -0400 (Mon, 26 Oct 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap

Change an error code and remove obsolete function

------------------------------------------------------------------------
r4832 | hserus | 2009-10-26 17:39:28 -0400 (Mon, 26 Oct 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

Fixed wrong pointer increment

------------------------------------------------------------------------
r4831 | hserus | 2009-10-26 17:38:39 -0400 (Mon, 26 Oct 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Fixed source of compilation warnings - const correctness and checking for
always true conditions.

------------------------------------------------------------------------
r4830 | hserus | 2009-10-26 17:36:23 -0400 (Mon, 26 Oct 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h
   M /trunk/dnssec-tools/validator/libval/val_get_rrset.c
   M /trunk/dnssec-tools/validator/libval/val_log.c

Fixed const correctness

------------------------------------------------------------------------
r4829 | hserus | 2009-10-26 17:34:34 -0400 (Mon, 26 Oct 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/ns_print.c

Ifdef NSEC3-specific label

------------------------------------------------------------------------
r4828 | hardaker | 2009-10-26 14:14:04 -0400 (Mon, 26 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/ns_print.c

ifdef out the nsec3 printing case if not building with nsec3 support
------------------------------------------------------------------------
r4827 | rstory | 2009-10-25 15:45:42 -0400 (Sun, 25 Oct 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/ssh/README.ssh
   M /trunk/dnssec-tools/apps/ssh/ssh-dnssec.pat

typo in README; update patch for 5.3p1

------------------------------------------------------------------------
r4826 | rstory | 2009-10-23 23:53:11 -0400 (Fri, 23 Oct 2009) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/apps/ssh/openssh-5.0p1-dnssec.patch
   D /trunk/dnssec-tools/apps/ssh/openssh-5.1p1-dnssec.patch
   M /trunk/dnssec-tools/apps/ssh/ssh-dnssec.pat

update patch for 5.1p1; remove version specific patches

------------------------------------------------------------------------
r4825 | rstory | 2009-10-23 23:51:57 -0400 (Fri, 23 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/ssh/ssh-dnssec.pat

update patch for 5.0p1
------------------------------------------------------------------------
r4824 | tewok | 2009-10-23 11:37:53 -0400 (Fri, 23 Oct 2009) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap


Better handling for assigning STDIN to a file-handle variable.
Make sure we could actually open the input file.
Really fix the pod formatting.


------------------------------------------------------------------------
r4823 | hardaker | 2009-10-23 09:57:15 -0400 (Fri, 23 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm.in

fix check of argument count
------------------------------------------------------------------------
r4822 | rstory | 2009-10-22 22:30:51 -0400 (Thu, 22 Oct 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/apps/ncftp/README
   M /trunk/dnssec-tools/apps/ncftp/ncftp-dnssec.patch

add testing section to README. Don't use cached ip for bookmarked sites
when dnssec validation enabled

------------------------------------------------------------------------
r4821 | rstory | 2009-10-21 22:09:17 -0400 (Wed, 21 Oct 2009) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/ncftp/README
   D /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.x-dnssec-howto.txt
   D /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.x_dnssec_patch.txt
   A /trunk/dnssec-tools/apps/ncftp/ncftp-dnssec.patch

remove versiond patch files, rename howto to README, add patch for 3.2.3

------------------------------------------------------------------------
r4820 | hardaker | 2009-10-21 19:59:42 -0400 (Wed, 21 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/Makefile.in
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/configure.in
   M /trunk/dnssec-tools/tools/donuts/Makefile.PL

modified the install process to have --prefix indicate that perl file installation should be where specified, not where perl thinks
------------------------------------------------------------------------
r4819 | tewok | 2009-10-21 13:54:05 -0400 (Wed, 21 Oct 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Added hyphens to the allowable characters in zone names in SOA records.


------------------------------------------------------------------------
r4818 | rstory | 2009-10-20 21:35:22 -0400 (Tue, 20 Oct 2009) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/lftp/README
   D /trunk/dnssec-tools/apps/lftp/lftp-3-5-10_dnssec_patch.txt
   D /trunk/dnssec-tools/apps/lftp/lftp-3.4.7-dnssec-howto.txt
   A /trunk/dnssec-tools/apps/lftp/lftp-dnssec.patch

remove versioned patch files, add patch for 4.0.2, add README

------------------------------------------------------------------------
r4817 | tewok | 2009-10-20 21:19:55 -0400 (Tue, 20 Oct 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Added the -template option.


------------------------------------------------------------------------
r4816 | tewok | 2009-10-20 19:13:23 -0400 (Tue, 20 Oct 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Comment out uses of the viewimage config keyword.  


------------------------------------------------------------------------
r4815 | hardaker | 2009-10-20 18:34:29 -0400 (Tue, 20 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm

allow ENV override of GUI screen
------------------------------------------------------------------------
r4814 | hardaker | 2009-10-20 18:25:50 -0400 (Tue, 20 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm

implement the desired getopt conventions discussed in a meeting: http://www.dnssec-tools.org/wiki/index.php/Command_Line_and_Configuration_File_Loading_Behaviour
------------------------------------------------------------------------
r4813 | hardaker | 2009-10-20 18:25:41 -0400 (Tue, 20 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm.in

allow undef option to be passed into parseconfig()
------------------------------------------------------------------------
r4812 | hardaker | 2009-10-20 18:25:31 -0400 (Tue, 20 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm

commenting a few lines
------------------------------------------------------------------------
r4811 | hardaker | 2009-10-20 18:25:20 -0400 (Tue, 20 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm

support -h / --help even if Getopt::GUI::Long isn't avaliable
------------------------------------------------------------------------
r4810 | tewok | 2009-10-20 14:50:28 -0400 (Tue, 20 Oct 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf
   M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod


Removed entries for viewimage.


------------------------------------------------------------------------
r4809 | tewok | 2009-10-20 14:49:41 -0400 (Tue, 20 Oct 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm


Deleted the viewimage entry.


------------------------------------------------------------------------
r4808 | tewok | 2009-10-20 14:47:31 -0400 (Tue, 20 Oct 2009) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtconfchk


Added file checks for the keyarch, rollchk, and zonesigner entries.
Added file checks for the rollerd logfile, resolv.conf, and trustman directory.
Added a file check for the rndc entry.
Deleted a file check for the viewimage entry.


------------------------------------------------------------------------
r4807 | tewok | 2009-10-20 14:35:43 -0400 (Tue, 20 Oct 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Commented out the viewimage keyword since it isn't currently in use.


------------------------------------------------------------------------
r4806 | tewok | 2009-10-20 12:46:53 -0400 (Tue, 20 Oct 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Added an entry for the rollchk command.


------------------------------------------------------------------------
r4805 | tewok | 2009-10-20 12:30:51 -0400 (Tue, 20 Oct 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf
   M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod


Changed "rollrec-check" to "rollchk".


------------------------------------------------------------------------
r4804 | tewok | 2009-10-20 12:26:58 -0400 (Tue, 20 Oct 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Changed the config key "rollrec-chk" to "rollchk".


------------------------------------------------------------------------
r4803 | tewok | 2009-10-20 12:25:43 -0400 (Tue, 20 Oct 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm.in


Changed "rollrec-chk" to "rollchk".


------------------------------------------------------------------------
r4802 | tewok | 2009-10-20 12:24:31 -0400 (Tue, 20 Oct 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf
   M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod


Changed "rollrec-chk" to "rollrec".


------------------------------------------------------------------------
r4801 | tewok | 2009-10-20 11:45:51 -0400 (Tue, 20 Oct 2009) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Added -dtdir for specifying the locaiton of the DNSSEC-Tools programs.
Renamed the internal "keyarch" variables to "keyarchdir".
Added the specification of the keyarch program, based on the DNSSEC-Tools
directory.
Cleaned up some output.
 

------------------------------------------------------------------------
r4800 | tewok | 2009-10-19 19:26:25 -0400 (Mon, 19 Oct 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap


Added "use strict;" and made a few modifications so this would work.
Fixed some code spacing so it matched the rest of the code.
 

------------------------------------------------------------------------
r4799 | tewok | 2009-10-19 16:33:13 -0400 (Mon, 19 Oct 2009) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap


Added a missing comma to the GetOptions() parameter list.
Changed the -Version exit code to match other tools.
Added an explicit "exit(0)" to the end of processing.
Modified pod formatting to match other tools.
Added a "SEE ALSO" section to the pod.


------------------------------------------------------------------------
r4798 | tewok | 2009-10-19 13:58:12 -0400 (Mon, 19 Oct 2009) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Added a few formatting newlines and tabs to improve the output of the
key-related prompts.
Fixed a variable in a prompt string.
Added checks to ensure the KSK and ZSK lifespans fall within the range set by
minlife and maxlife.


------------------------------------------------------------------------
r4797 | tewok | 2009-10-19 12:35:16 -0400 (Mon, 19 Oct 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Changed a "maxlife" to "minlife" for a verbose message.


------------------------------------------------------------------------
r4796 | tewok | 2009-10-19 12:24:54 -0400 (Mon, 19 Oct 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Added -maxlife and -minlife to allow specification of the maximum and minimum
allowable key lifespans.
 

------------------------------------------------------------------------
r4794 | hardaker | 2009-10-16 20:02:20 -0400 (Fri, 16 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Secspider.pm

make secspider write to a temp file instead of an IO::String which seems to be really really slow
------------------------------------------------------------------------
r4793 | hardaker | 2009-10-16 20:02:06 -0400 (Fri, 16 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/convertar
   A /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Secspider.pm

add support for pulling data from secspider
------------------------------------------------------------------------
r4792 | hardaker | 2009-10-16 20:01:52 -0400 (Fri, 16 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Bind.pm

allow for slightly differently quoted/printed bind files
------------------------------------------------------------------------
r4791 | hardaker | 2009-10-16 20:01:35 -0400 (Fri, 16 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Bind.pm

allow bind to accept a file handle directly
------------------------------------------------------------------------
r4790 | hardaker | 2009-10-16 20:01:20 -0400 (Fri, 16 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Itar.pm
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm

move the URL fetching ability to the base class for reuse
------------------------------------------------------------------------
r4789 | tewok | 2009-10-16 16:02:00 -0400 (Fri, 16 Oct 2009) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Grouped the BIND programs we care about together into an array.
Added a config entry for rndc.
Added a reserved BIND directory of "path", which implies that a program's
path variable should be searched for BIND programs.
Clarified a verbose message.
 

------------------------------------------------------------------------
r4788 | hardaker | 2009-10-15 14:14:24 -0400 (Thu, 15 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/getds

add a -q option to getds
------------------------------------------------------------------------
r4786 | tewok | 2009-10-15 07:50:09 -0400 (Thu, 15 Oct 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Use the correct "rndc" instead of incorrect "bind_rndc".


------------------------------------------------------------------------
r4785 | tewok | 2009-10-15 07:49:18 -0400 (Thu, 15 Oct 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Use the correct "rndc" instead of incorrect "bind_rndc".


------------------------------------------------------------------------
r4784 | tewok | 2009-10-15 07:13:24 -0400 (Thu, 15 Oct 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod


Added a description for the rndc entry.


------------------------------------------------------------------------
r4783 | tewok | 2009-10-14 15:29:19 -0400 (Wed, 14 Oct 2009) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Added the -kskcount option.
Added the -ksklength option.
Very minor code rearrangements


------------------------------------------------------------------------
r4782 | tewok | 2009-10-14 14:57:07 -0400 (Wed, 14 Oct 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Fixed to use "ksklength" instead of "ksklen".
Fixed to use "zsklength" instead of "zsklen".


------------------------------------------------------------------------
r4781 | hardaker | 2009-10-14 12:00:55 -0400 (Wed, 14 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Bind.pm
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Libval.pm
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Mf.pm

fix trailer specifier for certain file formats
------------------------------------------------------------------------
r4780 | hardaker | 2009-10-14 11:54:04 -0400 (Wed, 14 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/convertar

document extension extrapolation
------------------------------------------------------------------------
r4779 | hardaker | 2009-10-14 11:53:54 -0400 (Wed, 14 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm

try and infer a file format from a suffix
------------------------------------------------------------------------
r4778 | tewok | 2009-10-14 09:36:13 -0400 (Wed, 14 Oct 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Made -gends a default option.
Added -nogends to prevent generation of DS records.


------------------------------------------------------------------------
r4777 | tewok | 2009-10-14 09:33:50 -0400 (Wed, 14 Oct 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm


Added -nogends as a standard option.


------------------------------------------------------------------------
r4776 | hserus | 2009-10-13 17:55:05 -0400 (Tue, 13 Oct 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Don't display zonecut in log message since this can be null

------------------------------------------------------------------------
r4775 | hserus | 2009-10-13 17:49:57 -0400 (Tue, 13 Oct 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Add couple of log statements

------------------------------------------------------------------------
r4774 | hserus | 2009-10-13 17:41:59 -0400 (Tue, 13 Oct 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Don't fetch glue if we're already fetching glue -- do this properly.

------------------------------------------------------------------------
r4773 | hardaker | 2009-10-13 16:30:08 -0400 (Tue, 13 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/convertar

rearrange documentation sections
------------------------------------------------------------------------
r4772 | hardaker | 2009-10-13 16:29:53 -0400 (Tue, 13 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/convertar
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Itar.pm
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm

allow the itar: specification to directly download the file over the web
------------------------------------------------------------------------
r4771 | hardaker | 2009-10-13 16:29:31 -0400 (Tue, 13 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/convertar

more documentation fixes
------------------------------------------------------------------------
r4770 | hardaker | 2009-10-13 16:29:13 -0400 (Tue, 13 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/convertar
   A /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Dns.pm

added a DNS convertion type
------------------------------------------------------------------------
r4769 | hardaker | 2009-10-13 16:28:47 -0400 (Tue, 13 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/convertar

handle and document multiple input/output file specfiications
------------------------------------------------------------------------
r4768 | hardaker | 2009-10-13 13:30:38 -0400 (Tue, 13 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/t/partial1.csv
   M /trunk/dnssec-tools/tools/convertar/t/partial2.csv
   M /trunk/dnssec-tools/tools/convertar/t/partialcomplete.csv

added merging of identical names with different DS records
------------------------------------------------------------------------
r4767 | hardaker | 2009-10-13 13:30:27 -0400 (Tue, 13 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm

remove debugging statement
------------------------------------------------------------------------
r4766 | hardaker | 2009-10-13 13:30:12 -0400 (Tue, 13 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm
   M /trunk/dnssec-tools/tools/scripts/trustman

fix broken back and add another back to terminate a starting =over
------------------------------------------------------------------------
r4765 | hardaker | 2009-10-13 12:36:14 -0400 (Tue, 13 Oct 2009) | 1 line
Changed paths:
   A /trunk/dnssec-tools/tools/convertar/t/50merge.t
   A /trunk/dnssec-tools/tools/convertar/t/partial1.csv
   A /trunk/dnssec-tools/tools/convertar/t/partial2.csv
   A /trunk/dnssec-tools/tools/convertar/t/partialcomplete.csv

tests for merging tars together
------------------------------------------------------------------------
r4764 | hardaker | 2009-10-13 12:35:57 -0400 (Tue, 13 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Bind.pm
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Csv.pm
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Dump.pm
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Itar.pm
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Libval.pm
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Mf.pm
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm

make read() returned a blessed module; all modules implement read_content instead for convenience
------------------------------------------------------------------------
r4763 | hardaker | 2009-10-13 12:35:28 -0400 (Tue, 13 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm

merge function
------------------------------------------------------------------------
r4762 | hserus | 2009-10-13 11:23:32 -0400 (Tue, 13 Oct 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/resolver.h

Use correct stagger value when querying different name servers

------------------------------------------------------------------------
r4761 | hserus | 2009-10-13 11:21:30 -0400 (Tue, 13 Oct 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.c

Log the name of the correct function being invoked

------------------------------------------------------------------------
r4760 | hardaker | 2009-10-12 15:06:58 -0400 (Mon, 12 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/getds

actually honor the -z flag
------------------------------------------------------------------------
r4759 | hardaker | 2009-10-12 15:06:47 -0400 (Mon, 12 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/getds

ennumerate the errors in the output
------------------------------------------------------------------------
r4758 | hardaker | 2009-10-12 15:06:38 -0400 (Mon, 12 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/getds

default to both algorithms and allow generation of both
------------------------------------------------------------------------
r4757 | hardaker | 2009-10-12 15:06:29 -0400 (Mon, 12 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/getds

use upper case printing
------------------------------------------------------------------------
r4756 | hardaker | 2009-10-12 15:06:19 -0400 (Mon, 12 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL
   M /trunk/dnssec-tools/tools/scripts/getds

make matching of things exclude everything up to the DS field and the comments
------------------------------------------------------------------------
r4755 | tewok | 2009-10-12 10:32:34 -0400 (Mon, 12 Oct 2009) | 9 lines
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/convertar


Pod changes:
	- Used the standard description section header.
	- Fixed some typos and grammos.
	- Changed in a few place to use our normal pod formats in commands
	  and option names..
	- Added a "see also".


------------------------------------------------------------------------
r4754 | tewok | 2009-10-12 09:50:40 -0400 (Mon, 12 Oct 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Fixed capitalization of a pod header.


------------------------------------------------------------------------
r4753 | baerm | 2009-10-08 11:01:12 -0400 (Thu, 08 Oct 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/INSTALL


Updated perl modules requirements for testing
Test::Simple => Test::Builder, added String::Diff


------------------------------------------------------------------------
r4752 | hardaker | 2009-10-02 09:19:53 -0400 (Fri, 02 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/getds

use normal style command line manual syntax
------------------------------------------------------------------------
r4751 | hardaker | 2009-10-02 09:19:45 -0400 (Fri, 02 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/NEWS

mention new getds functionality
------------------------------------------------------------------------
r4750 | hardaker | 2009-10-02 09:19:31 -0400 (Fri, 02 Oct 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/getds

make getds check the parent DS rceords as well
------------------------------------------------------------------------
r4749 | hserus | 2009-09-30 10:31:20 -0400 (Wed, 30 Sep 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Fix nsec bitmap type checking

------------------------------------------------------------------------
r4748 | hardaker | 2009-09-29 14:06:21 -0400 (Tue, 29 Sep 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/convertar

added copyright and author
------------------------------------------------------------------------
r4747 | hardaker | 2009-09-29 13:31:56 -0400 (Tue, 29 Sep 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/convertar

convertar documentation
------------------------------------------------------------------------
r4746 | hardaker | 2009-09-24 19:17:40 -0400 (Thu, 24 Sep 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/NEWS

updates for 1.6
------------------------------------------------------------------------
r4745 | hardaker | 2009-09-24 19:17:36 -0400 (Thu, 24 Sep 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/ChangeLog

changelog update
------------------------------------------------------------------------
r4744 | hserus | 2009-09-24 16:59:36 -0400 (Thu, 24 Sep 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Fix potential issue with IPv6 glue

------------------------------------------------------------------------
r4743 | hserus | 2009-09-24 15:27:59 -0400 (Thu, 24 Sep 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/NEWS

Added new libval-related news iterms for 1.6

------------------------------------------------------------------------
r4742 | hserus | 2009-09-23 12:36:41 -0400 (Wed, 23 Sep 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Q_LAME_SERVER is not a very useful code since other Q_REFERRAL_ERROR may also indicate that we have a lame nameserver.

------------------------------------------------------------------------
r4741 | hserus | 2009-09-23 12:36:10 -0400 (Wed, 23 Sep 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

Q_LAME_SERVER is not a very useful code since other Q_REFERRAL_ERROR may also indicate that we have a lame nameserver.

------------------------------------------------------------------------
r4740 | hserus | 2009-09-23 12:35:37 -0400 (Wed, 23 Sep 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc

Q_LAME_SERVER is not a very useful code since other Q_REFERRAL_ERROR may also indicate that we have a lame nameserver.

------------------------------------------------------------------------
r4739 | hserus | 2009-09-23 12:13:40 -0400 (Wed, 23 Sep 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Check for referral loops before we bootstrap the new referral. Don't free up the referral structure if we have errors, since we want to be
able to detect referral errors for responses returned from other nameservers too.

------------------------------------------------------------------------
r4738 | hserus | 2009-09-23 10:13:58 -0400 (Wed, 23 Sep 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

Return correct type of buffer

------------------------------------------------------------------------
r4737 | hserus | 2009-09-23 09:56:20 -0400 (Wed, 23 Sep 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc

Remove unused error code

------------------------------------------------------------------------
r4736 | hserus | 2009-09-23 09:55:09 -0400 (Wed, 23 Sep 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

When verifying proof for wildcard expansion don't rely on trusted but
non-validated proof components

------------------------------------------------------------------------
r4735 | hserus | 2009-09-23 09:52:21 -0400 (Wed, 23 Sep 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/val_errors.h

Remove unused constant

------------------------------------------------------------------------
r4734 | hserus | 2009-09-23 00:32:49 -0400 (Wed, 23 Sep 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_assertion.h

Add initial suport for NSEC3. Also rewrote much of the prove_nonexistence logic
so that it was consistent between nsec and nsec3 proof checking.

------------------------------------------------------------------------
r4733 | hserus | 2009-09-23 00:30:07 -0400 (Wed, 23 Sep 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_parse.c

Allow for 0 length NSEC3 bitfields

------------------------------------------------------------------------
r4732 | hserus | 2009-09-23 00:28:53 -0400 (Wed, 23 Sep 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.c

Minor formatting fixes

------------------------------------------------------------------------
r4731 | hserus | 2009-09-23 00:27:49 -0400 (Wed, 23 Sep 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/ns_print.c

Support printing of NSEC3 and DS/SHA256 esource records

------------------------------------------------------------------------
r4730 | hserus | 2009-09-23 00:26:10 -0400 (Wed, 23 Sep 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/resolver.h

define identifiers for SHA1 and SHA256. Although validator.h contains these
definitions, we don't want libsres to have to depend on validator.h

------------------------------------------------------------------------
r4728 | hardaker | 2009-09-17 19:32:38 -0400 (Thu, 17 Sep 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf

use a conditional load of the LWP::UserAgent
------------------------------------------------------------------------
r4727 | baerm | 2009-09-17 12:03:20 -0400 (Thu, 17 Sep 2009) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/testing/Makefile.in
   M /trunk/dnssec-tools/testing/t/010zonesigner.t
   M /trunk/dnssec-tools/testing/t/030trustman.t
   M /trunk/dnssec-tools/testing/t/050trustman-rollerd.t
   M /trunk/dnssec-tools/testing/t/dt_testingtools.pl


Fix trustman-rollerd script use local perl packages.
some output changes
add some verbose options to makefile


------------------------------------------------------------------------
r4726 | tewok | 2009-09-15 13:08:25 -0400 (Tue, 15 Sep 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/Makefile.PL

Fixed the MakeMaker name option.


------------------------------------------------------------------------
r4725 | tewok | 2009-09-15 13:07:20 -0400 (Tue, 15 Sep 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL

Added a line to the cleaning target for deleting the packed trustman.


------------------------------------------------------------------------
r4724 | tewok | 2009-09-15 13:07:02 -0400 (Tue, 15 Sep 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Makefile.PL

Added a line to the cleaning target for deleting the packed donutsd.


------------------------------------------------------------------------
r4723 | tewok | 2009-09-15 13:06:32 -0400 (Tue, 15 Sep 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/Makefile.PL

Added a line to the cleaning target for deleting the packed program.


------------------------------------------------------------------------
r4722 | tewok | 2009-09-15 13:05:32 -0400 (Tue, 15 Sep 2009) | 8 lines
Changed paths:
   A /trunk/dnssec-tools/tools/Makefile.PL

Makefile for building packed commands.  The following targets are provided:

	packed_dist		Gather the packed commands, building if needed.
	packed_distclean	Clean the gathered packed commands.
	packed_commands		Build the packed command files.
	clean_packed		Clean the packed commands.


------------------------------------------------------------------------
r4721 | hserus | 2009-09-14 09:16:34 -0400 (Mon, 14 Sep 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Don't recurse from root if we have a local nameserver listed in resolv.conf

------------------------------------------------------------------------
r4720 | hserus | 2009-09-11 16:38:27 -0400 (Fri, 11 Sep 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc

Add new constants Q_LAME_SERVER and VAL_AC_INVALID_DS
Renamed VAL_AC_NO_TRUST_ANCHOR to VAL_AC_NO_LINK
Fixed couple of switches and reordered cases alphabetically where made sense

------------------------------------------------------------------------
r4719 | hserus | 2009-09-11 15:57:24 -0400 (Fri, 11 Sep 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/etc/dnsval.conf

Remove DLV and NSEC3 related config params for now

------------------------------------------------------------------------
r4718 | hserus | 2009-09-11 15:29:15 -0400 (Fri, 11 Sep 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/etc/dnsval.conf

remove snip zones

------------------------------------------------------------------------
r4717 | hserus | 2009-09-11 15:25:38 -0400 (Fri, 11 Sep 2009) | 15 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator-internal.h
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_cache.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.h
   M /trunk/dnssec-tools/validator/libval/val_support.h

Changed the glue fetching logic -- now only fetch glue if none of our existing
name servers are useful. This means that we now keep pending glue around and
have a separate pointer referencing the current glue being fetched.
bootstrap_referral() may return partial glue, never expect complete sets. Use
new functions in libsres to control when we want to skip the current ns and
when we want to cancel the query entirely.

Misc fixes associated with this change:
- set zonecut where appropriate
- fix find_next_zonecut()
- in verify_provably_insecure() try to use existing zonecut information before
attempting to find one using find_next_zonecut()
- dont fetch DNSKEYs too early in a referral chain    


------------------------------------------------------------------------
r4716 | hserus | 2009-09-11 15:06:07 -0400 (Fri, 11 Sep 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

Define new query error state denoting a lame server

------------------------------------------------------------------------
r4715 | hserus | 2009-09-11 15:03:52 -0400 (Fri, 11 Sep 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_query.c

Rely on libval to control query transactions

------------------------------------------------------------------------
r4714 | hserus | 2009-09-11 15:03:09 -0400 (Fri, 11 Sep 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.h

Define new functions that allow libval to control libsres query transactions to
some extent

------------------------------------------------------------------------
r4713 | hserus | 2009-09-11 15:01:39 -0400 (Fri, 11 Sep 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/resolver.h
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.c

Define functions that enables validator to control libsres query transactions to some extent.
Define new parameter that sets how far apart we should stagger queries to
different authoritative name servers

------------------------------------------------------------------------
r4712 | hardaker | 2009-09-10 18:50:03 -0400 (Thu, 10 Sep 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm
   M /trunk/dnssec-tools/tools/modules/keyrec.pm
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm
   M /trunk/dnssec-tools/tools/scripts/INFO
   M /trunk/dnssec-tools/tools/scripts/zonesigner

modified defaults, documentation and example text to a ZSK size of 1024 (back from 2048) per upcoming NIST reduction in required ZSK size recommendations
------------------------------------------------------------------------
r4711 | tewok | 2009-09-10 12:39:34 -0400 (Thu, 10 Sep 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Fixed references to current directory and away from ".".  This is a follow-on
to the -directory changes.


------------------------------------------------------------------------
r4710 | tewok | 2009-09-09 17:19:39 -0400 (Wed, 09 Sep 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Added a -keydirectory line to the usage output.


------------------------------------------------------------------------
r4709 | tewok | 2009-09-09 17:17:25 -0400 (Wed, 09 Sep 2009) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Added -keydirectory for specifying the directory in which KSK and ZSK keys
will be stored.
Added additional validation checks for the KSK and ZSK key directories.
 

------------------------------------------------------------------------
r4708 | tewok | 2009-09-09 13:47:22 -0400 (Wed, 09 Sep 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Capitalization fix for some option descriptions.


------------------------------------------------------------------------
r4707 | tewok | 2009-09-09 13:29:07 -0400 (Wed, 09 Sep 2009) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Changed the $usensec3 flag check to use boolconvert().
Added documentation for -kskdirectory and -zskdirectory.
Rearranged some of the option descriptions.


------------------------------------------------------------------------
r4706 | baerm | 2009-09-09 11:36:30 -0400 (Wed, 09 Sep 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/testing/t/010zonesigner.t


Added bind version test for nsec3 support.


------------------------------------------------------------------------
r4705 | baerm | 2009-09-08 21:47:14 -0400 (Tue, 08 Sep 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/testing/Makefile.in
   A /trunk/dnssec-tools/testing/saved-named.ca
   A /trunk/dnssec-tools/testing/saved-named.conf
   A /trunk/dnssec-tools/testing/saved-named.rfc1912.zones
   A /trunk/dnssec-tools/testing/saved-rndc.key


Added configuration files for trustman-rollerd test


------------------------------------------------------------------------
r4704 | baerm | 2009-09-08 21:43:09 -0400 (Tue, 08 Sep 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/testing/t/010zonesigner.t
   M /trunk/dnssec-tools/testing/t/020donuts.t
   M /trunk/dnssec-tools/testing/t/025donutsd.t
   M /trunk/dnssec-tools/testing/t/030trustman.t
   M /trunk/dnssec-tools/testing/t/040rollerd.t
   A /trunk/dnssec-tools/testing/t/050trustman-rollerd.t
   M /trunk/dnssec-tools/testing/t/dt_testingtools.pl


Added trustman rollerd interaction test script
Minor updates to other scripts


------------------------------------------------------------------------
r4703 | tewok | 2009-09-08 20:40:33 -0400 (Tue, 08 Sep 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor


Commented out an on-exit debugging message.


------------------------------------------------------------------------
r4702 | hardaker | 2009-09-08 13:28:11 -0400 (Tue, 08 Sep 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/Makefile.PL

don't require XML::SAX when building packed; install on systems where needed?
------------------------------------------------------------------------
r4701 | tewok | 2009-09-08 12:21:48 -0400 (Tue, 08 Sep 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

Moved the execution directory validation code prior to the -parameters
handling.  This forces -parameters to give the actual directory when
-directory isn't given, rather than giving ".".


------------------------------------------------------------------------
r4700 | hardaker | 2009-09-07 18:10:58 -0400 (Mon, 07 Sep 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm

version bump
------------------------------------------------------------------------
r4699 | hardaker | 2009-09-07 18:08:00 -0400 (Mon, 07 Sep 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs.t

fix parsing of SOA names and missing trailing dots in SOA line components; cpan bug 17745
------------------------------------------------------------------------
r4698 | hardaker | 2009-09-07 17:59:39 -0400 (Mon, 07 Sep 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rr-dnssec.t

require at least one digit for a ttl to avoid DS being a possible TTL value
------------------------------------------------------------------------
r4697 | hardaker | 2009-09-07 17:39:12 -0400 (Mon, 07 Sep 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs.t

fix HINFO records with no-spaces and no-quotes
------------------------------------------------------------------------
r4696 | hardaker | 2009-09-07 17:22:54 -0400 (Mon, 07 Sep 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm

apply recommended patch from cpan bug 34445 to fix? wildcard parsing; works for me without it but the patch looks right
------------------------------------------------------------------------
r4695 | hardaker | 2009-09-07 17:20:38 -0400 (Mon, 07 Sep 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs.t

added a wildcard test
------------------------------------------------------------------------
r4694 | hardaker | 2009-09-07 17:13:25 -0400 (Mon, 07 Sep 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rr-dnssec.t

reenable an older failing test, since the white space issues have disappeared
------------------------------------------------------------------------
r4693 | hardaker | 2009-09-07 17:12:41 -0400 (Mon, 07 Sep 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rr-dnssec.t

added a new test entry for a root zone rrsig
------------------------------------------------------------------------
r4692 | hardaker | 2009-09-07 17:08:56 -0400 (Mon, 07 Sep 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm

fix bug 46790 on cpan to allow root (.) RRSIGs
------------------------------------------------------------------------
r4691 | hserus | 2009-09-05 01:10:48 -0400 (Sat, 05 Sep 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Force query to nameserver listed in validator context before trying other options. 
Fix zonecut information only if we receive answer with aa bit set. 
Cache name server information returned in response only if we did not ask for recursion.
Force RD off when we are not sending to the name server listed in the validator context

------------------------------------------------------------------------
r4690 | hserus | 2009-09-04 22:47:50 -0400 (Fri, 04 Sep 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.c

Fix validation of authentication chains that contain DS records with an
incorrect keytag but with a correct hash of the child key

------------------------------------------------------------------------
r4689 | hserus | 2009-09-04 22:43:12 -0400 (Fri, 04 Sep 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.h

In CREATE_NSADDR_ARRAY break as soon as we run out of memory

------------------------------------------------------------------------
r4688 | hserus | 2009-09-04 22:40:14 -0400 (Fri, 04 Sep 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_parse.c

Change return code from val_parse_ds_rdata if hash algorithm is unknown

------------------------------------------------------------------------
r4687 | hserus | 2009-09-04 22:29:34 -0400 (Fri, 04 Sep 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_crypto.c

Add resolver.h to be consistent with other files

------------------------------------------------------------------------
r4686 | hserus | 2009-09-04 22:28:08 -0400 (Fri, 04 Sep 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_get_rrset.c

Include validator-internal.h to get certain structure definitions

------------------------------------------------------------------------
r4685 | hserus | 2009-09-04 22:13:18 -0400 (Fri, 04 Sep 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

Add log support for VAL_AC_NO_LINK and VAL_AC_INVALID_DS error codes

------------------------------------------------------------------------
r4684 | hserus | 2009-09-04 22:12:30 -0400 (Fri, 04 Sep 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Break out of potential infinite loop when recursive name server gives bad name
server hints for DS record

------------------------------------------------------------------------
r4683 | hserus | 2009-09-04 22:11:33 -0400 (Fri, 04 Sep 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c

Fix signed/unsigned mismatch

------------------------------------------------------------------------
r4682 | hserus | 2009-09-04 22:11:05 -0400 (Fri, 04 Sep 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Rename VAL_AC_NO_TRUST_ANCHOR to VAL_AC_NO_LINK

------------------------------------------------------------------------
r4681 | hserus | 2009-09-04 22:10:02 -0400 (Fri, 04 Sep 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod

Rename VAL_AC_NO_TRUST_ANCHOR to VAL_AC_NO_LINK; add description for
VAL_AC_INVALID_DS

------------------------------------------------------------------------
r4680 | hserus | 2009-09-04 22:08:14 -0400 (Fri, 04 Sep 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval-implementation-notes

Rename VAL_AC_NO_TRUST_ANCHOR to VAL_AC_NO_LINK; update possible error codes
for DS record sets

------------------------------------------------------------------------
r4679 | hserus | 2009-09-04 22:04:30 -0400 (Fri, 04 Sep 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/val_errors.h

Add error code for VAL_AC_INVALID_DS. Also rename VAL_AC_TRUST_ANCHOR to
VAL_AC_NO_LINK

------------------------------------------------------------------------
r4678 | tewok | 2009-09-04 14:27:02 -0400 (Fri, 04 Sep 2009) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtconfchk


Added checks for nsec3rsasha1 being a valid algorithm.
Fixed some key-length maximums for several encryption algorithms.
Added checks for validity of the NSEC3 iteration count.
Passed the proper error output flag on ksklength/zsklength not being defined.
 

------------------------------------------------------------------------
r4677 | tewok | 2009-09-02 15:23:43 -0400 (Wed, 02 Sep 2009) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtconfchk


Added support for the NSEC3 booleans:  usensec3, nsec3optout.
Added pod describing valid booleans.
Modified some pod descriptions for boolean fields.


------------------------------------------------------------------------
r4676 | tewok | 2009-09-02 12:47:08 -0400 (Wed, 02 Sep 2009) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Reordered option handling so that -parameters doesn't require
the -rrf option.
Reworded a few comments.


------------------------------------------------------------------------
r4675 | tewok | 2009-09-02 11:33:18 -0400 (Wed, 02 Sep 2009) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Fixed handling of -noreload.
Added pod describing zone reloading.
Fixed a few spelling and grammatical errors.


------------------------------------------------------------------------
r4674 | tewok | 2009-09-01 20:31:29 -0400 (Tue, 01 Sep 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm.in


Added boolconvert() to parse boolean configuration entry values.


------------------------------------------------------------------------
r4673 | tewok | 2009-09-01 20:15:01 -0400 (Tue, 01 Sep 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Added support for the roll_loadzone configuration option.


------------------------------------------------------------------------
r4672 | tewok | 2009-09-01 14:56:36 -0400 (Tue, 01 Sep 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtconfchk


Fixed rollerd's logging levels so they match what the code actually uses.


------------------------------------------------------------------------
r4671 | tewok | 2009-09-01 14:54:24 -0400 (Tue, 01 Sep 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtconfchk


Added checks that roll_loadzone is a valid boolean.
Modified boolean checks so that valid values are 1, 0, yes, no, true, and false.


------------------------------------------------------------------------
r4670 | tewok | 2009-09-01 14:22:50 -0400 (Tue, 01 Sep 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm


Added roll_loadzone as a default.

------------------------------------------------------------------------
r4669 | tewok | 2009-09-01 14:20:30 -0400 (Tue, 01 Sep 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf
   M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod


Added entries for roll_loadzone.


------------------------------------------------------------------------
r4668 | tewok | 2009-09-01 14:14:39 -0400 (Tue, 01 Sep 2009) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm.in


makelocalstatedir() mods:
	- collapsed the two mkpath() calls into one.
	- added checking for the path not ending in a directory

Fixed a minor pod error.

------------------------------------------------------------------------
r4667 | tewok | 2009-09-01 13:26:26 -0400 (Tue, 01 Sep 2009) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Added -noreload to prevent rollerd from calling rndc.
Changed some actual-tabs to "\t" tabs in the -parameters output.
Sorted the pod option descriptions.


------------------------------------------------------------------------
r4666 | tewok | 2009-09-01 11:38:17 -0400 (Tue, 01 Sep 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm.in


Fixed problem in makelocalstatedir() that occurs when the local state
directory consists of multiple nonexistent directories.


------------------------------------------------------------------------
r4665 | tewok | 2009-08-31 18:59:40 -0400 (Mon, 31 Aug 2009) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm.in


Reworked makelocalstatedir():
	- better handles the case when a subdirectory is given
	- gives error returns when errors happen
Added makelocalstatedir() examples to the pod Synopsis section.
Expanded the pod description of makelocalstatedir().
 

------------------------------------------------------------------------
r4663 | tewok | 2009-08-31 11:04:17 -0400 (Mon, 31 Aug 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/Makefile.PL


Added line to clean up the SAX directory, which is needed in packing.


------------------------------------------------------------------------
r4662 | tewok | 2009-08-28 15:17:31 -0400 (Fri, 28 Aug 2009) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/convertar


Added support for running packed:
	- use the packed DNSSEC-Tools config file
	- make sure the packed ParserDetails.ini file is where XML::SAX expects


------------------------------------------------------------------------
r4661 | tewok | 2009-08-28 15:15:51 -0400 (Fri, 28 Aug 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/Makefile.PL


Added support for packed execution of convertar.


------------------------------------------------------------------------
r4660 | tewok | 2009-08-26 13:52:33 -0400 (Wed, 26 Aug 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL


Fixed library inclusion to be less OSX-specific.


------------------------------------------------------------------------
r4659 | tewok | 2009-08-26 13:49:12 -0400 (Wed, 26 Aug 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Makefile.PL


Fixed library inclusion to be less OSX-specific.

------------------------------------------------------------------------
r4658 | tewok | 2009-08-26 12:54:16 -0400 (Wed, 26 Aug 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL


Added /bin and /sbin to the collection of paths to search for BIND programs.


------------------------------------------------------------------------
r4657 | tewok | 2009-08-26 12:52:54 -0400 (Wed, 26 Aug 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Makefile.PL


Added /bin and /sbin to the collection of paths to search for tcpdump.


------------------------------------------------------------------------
r4656 | tewok | 2009-08-25 20:00:28 -0400 (Tue, 25 Aug 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Makefile.PL


Added support for packing donutsd.


------------------------------------------------------------------------
r4655 | tewok | 2009-08-25 19:59:31 -0400 (Tue, 25 Aug 2009) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donutsd


Added support for packed execution:
	- use local copy of donuts
 
Added an error message if an SMTP object couldn't be created.
Slight adjustments to part of the email notice.
 

------------------------------------------------------------------------
r4654 | tewok | 2009-08-25 12:34:59 -0400 (Tue, 25 Aug 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donutsd


Fixed a couple typos.
Reworded a pod sentence.

------------------------------------------------------------------------
r4653 | hardaker | 2009-08-25 12:28:32 -0400 (Tue, 25 Aug 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donutsd

fix examples to match current usage and proper example domain usage
------------------------------------------------------------------------
r4652 | tewok | 2009-08-25 11:45:15 -0400 (Tue, 25 Aug 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donutsd


Add a reference to timetrans for converting large time units to seconds.


------------------------------------------------------------------------
r4651 | tewok | 2009-08-25 11:18:06 -0400 (Tue, 25 Aug 2009) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts


Pod fixes dealing with missing =over's and =back's.
Pod formatting fixes.
Spelling and punctuation fixes.
 

------------------------------------------------------------------------
r4650 | hardaker | 2009-08-24 20:07:46 -0400 (Mon, 24 Aug 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

update documentation based on suggestions from Wayne
------------------------------------------------------------------------
r4649 | tewok | 2009-08-24 19:35:14 -0400 (Mon, 24 Aug 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Makefile.PL


Added support for building packed versions of donuts.


------------------------------------------------------------------------
r4648 | tewok | 2009-08-24 19:20:47 -0400 (Mon, 24 Aug 2009) | 10 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts


Completed support for running in a packed environment.
	- force INC directory for inclusion of packed Perl modules
	- pick up local config file
	- use local tcpdump command

Fixed a comment typo.
Fixed some formatting and punctuatio problems in the pod.
 

------------------------------------------------------------------------
r4647 | tewok | 2009-08-21 14:58:44 -0400 (Fri, 21 Aug 2009) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/Makefile.PL


Added support for building a packed version of mapper.
The following targets are available for general use:

	packed_commands		Build the packed mapper files.
	clean_packed		Clean the packed mapper.


------------------------------------------------------------------------
r4646 | tewok | 2009-08-21 14:41:12 -0400 (Fri, 21 Aug 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/mapper


Added support for packed execution.


------------------------------------------------------------------------
r4645 | tewok | 2009-08-20 18:44:24 -0400 (Thu, 20 Aug 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/mapper


Two pod fixes.

------------------------------------------------------------------------
r4644 | tewok | 2009-08-20 13:34:55 -0400 (Thu, 20 Aug 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/INFO
   M /trunk/dnssec-tools/tools/scripts/README


Added descriptions of dtreqmods.


------------------------------------------------------------------------
r4643 | tewok | 2009-08-20 13:33:20 -0400 (Thu, 20 Aug 2009) | 4 lines
Changed paths:
   A /trunk/dnssec-tools/tools/scripts/dtreqmods


New command to check for Perl modules required by DNSSEC-Tools.


------------------------------------------------------------------------
r4642 | baerm | 2009-08-20 11:52:55 -0400 (Thu, 20 Aug 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_policy.h


Added to parsing of resolv.conf nameserver token
'[address]:port' format can now be used


------------------------------------------------------------------------
r4641 | tewok | 2009-08-19 16:53:46 -0400 (Wed, 19 Aug 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm


Changed the pod Synopsis to reference DTGetOptions() instead of GetOptions().
Minor wording change to description.


------------------------------------------------------------------------
r4640 | tewok | 2009-08-19 16:50:22 -0400 (Wed, 19 Aug 2009) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/getds


Added the initial copyright.
Slightly adjusted an option description.
Modified the pod to include option descriptions and copyright, as well as a
minor grammatical fix.
 

------------------------------------------------------------------------
r4639 | tewok | 2009-08-19 13:34:11 -0400 (Wed, 19 Aug 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL


Added libraries and modules needed for packed trustman.


------------------------------------------------------------------------
r4638 | tewok | 2009-08-19 12:48:23 -0400 (Wed, 19 Aug 2009) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman


Added code so that packed executions will use the local resolv.conf if one
hasn't been specified already.
Changed pod to give options with single dashes instead of double dashes.


------------------------------------------------------------------------
r4637 | tewok | 2009-08-19 11:25:12 -0400 (Wed, 19 Aug 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman


Deleted some debugging prints.


------------------------------------------------------------------------
r4636 | tewok | 2009-08-19 11:17:36 -0400 (Wed, 19 Aug 2009) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman


Modified to validate all options before giving a usage message and dying.
(On errors, that is.)
Tried to bring a little consistency to error messages.
 

------------------------------------------------------------------------
r4635 | tewok | 2009-08-17 20:27:31 -0400 (Mon, 17 Aug 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Added the -ta-tmpdir option for specifying trustman's temporary directory.
Changed "TrustMan" to "trustman" (to match trustman's pod.)


------------------------------------------------------------------------
r4634 | tewok | 2009-08-17 20:00:43 -0400 (Mon, 17 Aug 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman


Changed the invali "tatmpfile" to "tatmpdir".
Fixed a spelling error in a comment.


------------------------------------------------------------------------
r4633 | tewok | 2009-08-17 19:48:47 -0400 (Mon, 17 Aug 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm


Fixed "tadir" to "tatmpdir".

------------------------------------------------------------------------
r4632 | tewok | 2009-08-17 19:47:32 -0400 (Mon, 17 Aug 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm


Added tatmpdir default to specify trustman's temporary directory.


------------------------------------------------------------------------
r4631 | tewok | 2009-08-17 14:41:36 -0400 (Mon, 17 Aug 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Fixed the error messages if dtinitconf can't fetch the root.hints file.
Added pod to better explain what's happening with -genroothints.


------------------------------------------------------------------------
r4630 | tewok | 2009-08-17 14:31:04 -0400 (Mon, 17 Aug 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Modified the -genroothints code to get http://www.internic.net/zones/named.root
rather than use a hard-coded version.


------------------------------------------------------------------------
r4629 | tewok | 2009-08-15 19:57:13 -0400 (Sat, 15 Aug 2009) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL


Added packing of root.hints with trustman.
Added creation of a root.hints file by dtinitconf.
Added explicit packing of Net::DNS::SEC::Validator.pm.
Removed packing of BIND and DNSSEC-Tools commands along with TrustMan.
 

------------------------------------------------------------------------
r4628 | tewok | 2009-08-15 19:50:33 -0400 (Sat, 15 Aug 2009) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman


Changed to stop executing if an invalid option is given.
If running packed and -o wasn't given, use the packed root.hints.
Changed the default root.hints file to null.
Minor changes to a few comments.
 

------------------------------------------------------------------------
r4627 | tewok | 2009-08-15 19:01:42 -0400 (Sat, 15 Aug 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman


Improved the error message if none of -m, -L, and -p (or their configy
equivalents) were given.


------------------------------------------------------------------------
r4626 | tewok | 2009-08-15 15:12:47 -0400 (Sat, 15 Aug 2009) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Added -genroothints.
Fixed a few comments.
Reworked how -help and -Version are handled, and reordered that code.
 

------------------------------------------------------------------------
r4625 | tewok | 2009-08-13 10:19:14 -0400 (Thu, 13 Aug 2009) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Added -ta-resolvconf.
Fixed %opts references for TrustMan-related options to use the correct names..
Added pod for TrustMan-related options.


------------------------------------------------------------------------
r4624 | tewok | 2009-08-13 10:12:32 -0400 (Thu, 13 Aug 2009) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm


Added "taresolvconf" as a default location for the resolv.conf file.
Changed "tasmtpserver" to have a default value of "localhost".
Reordered the TrustMan defaults in the pod.


------------------------------------------------------------------------
r4623 | tewok | 2009-08-13 01:25:26 -0400 (Thu, 13 Aug 2009) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Changed references to the "ta_contact" default to the actual "tacontact" name.
Changed references to the "ta_smtpserver" default to the actual "tasmtpserver"
name.


------------------------------------------------------------------------
r4622 | tewok | 2009-08-12 19:52:10 -0400 (Wed, 12 Aug 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Bind.pm
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Csv.pm
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Dump.pm
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Itar.pm
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Libval.pm
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Mf.pm


Added =cut lines to match the =pod lines.


------------------------------------------------------------------------
r4621 | tewok | 2009-08-12 19:38:15 -0400 (Wed, 12 Aug 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm


Grammar fix in pod.


------------------------------------------------------------------------
r4620 | tewok | 2009-08-12 14:26:26 -0400 (Wed, 12 Aug 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman


Fixed a pod directive.


------------------------------------------------------------------------
r4619 | tewok | 2009-08-12 14:00:18 -0400 (Wed, 12 Aug 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman


Perform better file-checking and give better errors for required files.


------------------------------------------------------------------------
r4618 | tewok | 2009-08-12 12:44:54 -0400 (Wed, 12 Aug 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman


Add a short comment.

------------------------------------------------------------------------
r4617 | tewok | 2009-08-12 12:27:08 -0400 (Wed, 12 Aug 2009) | 11 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman


Added more comprehensive (and unified) checks for necessary files and
directories.

Replaced numerous references to "$opts{'c'}" with "$newconf".

Clarified an error message or two.
Added a few routine headers (to match existing headers.)
Fixed grammar and content in some of the pod.


------------------------------------------------------------------------
r4616 | tewok | 2009-08-12 11:09:05 -0400 (Wed, 12 Aug 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman


Added -dtconf to support alternate config files.
Initial support for packed execution.


------------------------------------------------------------------------
r4611 | tewok | 2009-08-11 14:00:23 -0400 (Tue, 11 Aug 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Fixed formatting issues.


------------------------------------------------------------------------
r4610 | tewok | 2009-08-11 13:16:41 -0400 (Tue, 11 Aug 2009) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


ZSK phase 2 rollover wasn't updating the zone serial number.  zonesigner
actually was updating it, but rollerd was zapping the new serial number
and returning to hte previous one.


------------------------------------------------------------------------
r4609 | tewok | 2009-08-03 16:50:51 -0400 (Mon, 03 Aug 2009) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL


Added support for creating packed versions of zonesigner, rollerd, and rollctl.
The following targets are available for general use:

	packed_commands		Build the packed command files.
	clean_packed		Clean the packed commands.


------------------------------------------------------------------------
r4608 | tewok | 2009-08-03 16:28:59 -0400 (Mon, 03 Aug 2009) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Changed -roll-sleep to -roll-sleeptime.
Fixed option processing to look for "roll-sleeptime" instead of "roll_sleep".
This allows that option to actually work now.


------------------------------------------------------------------------
r4607 | tewok | 2009-08-03 13:19:01 -0400 (Mon, 03 Aug 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Fixed how the config file is reported and various informational messages.
Added some variable comments.

------------------------------------------------------------------------
r4606 | tewok | 2009-07-30 11:54:28 -0400 (Thu, 30 Jul 2009) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm


Added -dtconfig as a standard option.
If -dtconfig is given, the specified config file will be used in place of the
standard config file.
 

------------------------------------------------------------------------
r4605 | tewok | 2009-07-30 11:50:06 -0400 (Thu, 30 Jul 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Added -dtconf to zonesigner invocations to ensure zonesigner is using the
same configuration file rollerd is using.


------------------------------------------------------------------------
r4604 | tewok | 2009-07-30 11:47:24 -0400 (Thu, 30 Jul 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Minor comment changes.


------------------------------------------------------------------------
r4603 | tewok | 2009-07-29 11:50:11 -0400 (Wed, 29 Jul 2009) | 13 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Support for packed executions:
	- use the packed Perl module hierarchy
	- default to the execution directory as the current directory
	- default to the DNSSEC-Tools config file in the packed hierarchy

Pass the config file (default or user-specified) to the keyarch command.

Add the config file name to several info-reporting places.

Added pod describing the -dtconfig option.


------------------------------------------------------------------------
r4598 | tewok | 2009-07-01 19:51:54 -0400 (Wed, 01 Jul 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Clarified a new pod comment about -archivedir.


------------------------------------------------------------------------
r4597 | tewok | 2009-07-01 19:40:31 -0400 (Wed, 01 Jul 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Modified to use the current directory as the archive directory if one isn't
specified on the command line or the config file.

------------------------------------------------------------------------
r4596 | tewok | 2009-07-01 19:35:36 -0400 (Wed, 01 Jul 2009) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Fix the execution directory to match the pod.  If -directory isn't
given, the current directory will be used as the execution directory,
not the configuration directory.


------------------------------------------------------------------------
r4595 | tewok | 2009-07-01 13:17:41 -0400 (Wed, 01 Jul 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/keyarch

Added the -dtconfig option.


------------------------------------------------------------------------
r4594 | baerm | 2009-06-30 14:07:04 -0400 (Tue, 30 Jun 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/testing/t/010zonesigner.t


Fixed key size issue, added some diagnosis output


------------------------------------------------------------------------
r4593 | baerm | 2009-06-29 19:35:08 -0400 (Mon, 29 Jun 2009) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/testing/Makefile.in
   A /trunk/dnssec-tools/testing/saved-nsec3.example.com
   M /trunk/dnssec-tools/testing/t/010zonesigner.t
   M /trunk/dnssec-tools/testing/t/020donuts.t
   M /trunk/dnssec-tools/testing/t/025donutsd.t
   M /trunk/dnssec-tools/testing/t/030trustman.t
   M /trunk/dnssec-tools/testing/t/040rollerd.t
   A /trunk/dnssec-tools/testing/t/dt_testingtools.pl


Updated to handle changes in tools
Changed output to make it easier to read
Added a couple tests
Added a 'make verbose' option for debuging


------------------------------------------------------------------------
r4592 | baerm | 2009-06-29 19:29:23 -0400 (Mon, 29 Jun 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


added a argument for keyarch's location
fixed some whitespace usage output


------------------------------------------------------------------------
r4591 | baerm | 2009-06-25 13:07:52 -0400 (Thu, 25 Jun 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Fixed some typos in help output


------------------------------------------------------------------------
r4590 | hardaker | 2009-06-25 12:57:16 -0400 (Thu, 25 Jun 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/modules/rollmgr.pm
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm

Fix the rollmgr port of solaris and make more generic
------------------------------------------------------------------------
r4589 | hardaker | 2009-06-25 12:45:42 -0400 (Thu, 25 Jun 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/modules/rollmgr.pm
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm

Port the rollmgr functionality to solaris
------------------------------------------------------------------------
r4588 | tewok | 2009-06-25 11:21:12 -0400 (Thu, 25 Jun 2009) | 10 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added -krev to display revoked KSK keys.
Added -kinv to display revoked and obsolete KSK keys.
Added -zrev to display revoked ZSK keys.
Added -zinv to display revoked and obsolete ZSK keys.
Added -rev to display revoked KSK and ZSK keys.
Added -invalid to display revoked and obsolete KSK and ZSK keys.
Added pod to describe the new options.


------------------------------------------------------------------------
r4587 | tewok | 2009-06-24 22:09:32 -0400 (Wed, 24 Jun 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/keyarch


Add support for revoked keys.
When running in a packed configuration, use the local config file.
 

------------------------------------------------------------------------
r4586 | tewok | 2009-06-22 12:03:59 -0400 (Mon, 22 Jun 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/keyarch
   M /trunk/dnssec-tools/tools/scripts/rollchk
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/zonesigner


For packed executions, forced the use of the package directory's module tree.

------------------------------------------------------------------------
r4585 | tewok | 2009-06-17 12:53:37 -0400 (Wed, 17 Jun 2009) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm.in


Added some DNSSEC-Tools commands to @COMMANDS.
Added %CMD_PACKAGES, which lists which package the @COMMANDS belong to.
Fixed the missing-command error messages in cmdcheck() to request the
correct package be installed.
Grammar fix in the pod.

------------------------------------------------------------------------
r4584 | hardaker | 2009-06-15 20:48:23 -0400 (Mon, 15 Jun 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/README

white space change for testing #15
------------------------------------------------------------------------
r4583 | hardaker | 2009-06-15 20:44:43 -0400 (Mon, 15 Jun 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/README

white space change for testing #14
------------------------------------------------------------------------
r4582 | hardaker | 2009-06-15 20:41:32 -0400 (Mon, 15 Jun 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/README

white space change for testing #13
------------------------------------------------------------------------
r4581 | hardaker | 2009-06-15 20:39:39 -0400 (Mon, 15 Jun 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/README

white space change for testing #12
------------------------------------------------------------------------
r4580 | hardaker | 2009-06-15 20:35:52 -0400 (Mon, 15 Jun 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/README

white space change for testing #11
------------------------------------------------------------------------
r4579 | hardaker | 2009-06-15 20:23:12 -0400 (Mon, 15 Jun 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/README

white space change for testing #10
------------------------------------------------------------------------
r4578 | hardaker | 2009-06-15 20:17:50 -0400 (Mon, 15 Jun 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/README

white space change for testing #9
------------------------------------------------------------------------
r4577 | hardaker | 2009-06-15 20:13:25 -0400 (Mon, 15 Jun 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/README

white space change for testing #8
------------------------------------------------------------------------
r4576 | hardaker | 2009-06-15 19:56:26 -0400 (Mon, 15 Jun 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/README

white space change for testing #7
------------------------------------------------------------------------
r4575 | tewok | 2009-06-15 19:22:35 -0400 (Mon, 15 Jun 2009) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Better handling of getting PAR-packed status.
Set specific paths for our called scripts if we're running packed.
Added the execution directory to our initial status log.


------------------------------------------------------------------------
r4572 | tewok | 2009-06-13 22:27:16 -0400 (Sat, 13 Jun 2009) | 11 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Added support for PAR-packed executions.  In particular, the following
changes were made for PAR-packed execution:
	- use dnssec-tools.conf in package directory
	- use BIND tools in package directory
Made the -rfc5011 and -norfc5011 options mutually exclusive.
Changed several uses of "$opts{'rfc5011'}" to instead use "$rfc5011".
Added parens in several places for clarity.
Made some grammar, punctuation, and spacing fixes.


------------------------------------------------------------------------
r4571 | tewok | 2009-06-13 14:33:02 -0400 (Sat, 13 Jun 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Deleted the unnecessary $version option flag.

------------------------------------------------------------------------
r4570 | tewok | 2009-06-13 14:21:53 -0400 (Sat, 13 Jun 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


If run as a PAR-packed command, rollctl will use its own local config file
and not the system-wide dnssec-tools.conf file.

------------------------------------------------------------------------
r4569 | tewok | 2009-06-13 14:16:06 -0400 (Sat, 13 Jun 2009) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm.in


Added runpacked() to indicate when a script was running from a PAR package.
Modified cmdcheck() to check for calls from PAR-packed scripts.  If in one,
it redirects itself to look for BIND commands in the package directory and
chmods the commands to be executable.  (Apparently, PAR ignores file modes
when packing or unpacking.)
 

------------------------------------------------------------------------
r4568 | hardaker | 2009-06-12 12:19:45 -0400 (Fri, 12 Jun 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/README

remove a single blank line for svn commit testing: 6
------------------------------------------------------------------------
r4567 | hardaker | 2009-06-12 12:13:24 -0400 (Fri, 12 Jun 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/README

add a single blank line for svn commit testing 5
------------------------------------------------------------------------
r4566 | hardaker | 2009-06-12 12:00:20 -0400 (Fri, 12 Jun 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/README

remove a single blank line for svn commit testing: 4
------------------------------------------------------------------------
r4565 | hardaker | 2009-06-12 11:58:37 -0400 (Fri, 12 Jun 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/README

add a single blank line for svn commit testing
------------------------------------------------------------------------
r4564 | hardaker | 2009-06-12 11:57:50 -0400 (Fri, 12 Jun 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/README

remove a single blank line for svn commit testing
------------------------------------------------------------------------
r4563 | hardaker | 2009-06-12 11:46:43 -0400 (Fri, 12 Jun 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/README

add a single blank line for svn commit testing
------------------------------------------------------------------------
r4562 | hardaker | 2009-06-12 11:40:37 -0400 (Fri, 12 Jun 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/README

remove a single blank line for svn commit testing
------------------------------------------------------------------------
r4561 | baerm | 2009-06-11 21:17:32 -0400 (Thu, 11 Jun 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/testing/t/040rollerd.t


Fixed so that perl libraries are handled more correctly


------------------------------------------------------------------------
r4560 | baerm | 2009-06-11 21:16:23 -0400 (Thu, 11 Jun 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Got rid of -dtlibs abomination, the command line option has been removed


------------------------------------------------------------------------
r4559 | baerm | 2009-06-11 12:27:57 -0400 (Thu, 11 Jun 2009) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/testing/t/030trustman.t
   M /trunk/dnssec-tools/testing/t/040rollerd.t


Better error handling:
error suggestion for trustman script.
rollerd script will fail without overwriting log info.


------------------------------------------------------------------------
r4558 | baerm | 2009-06-10 15:40:47 -0400 (Wed, 10 Jun 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/testing/t/030trustman.t


comment out debug message


------------------------------------------------------------------------
r4557 | baerm | 2009-06-10 15:23:25 -0400 (Wed, 10 Jun 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/testing/t/030trustman.t


Adjusted the time parsing


------------------------------------------------------------------------
r4556 | tewok | 2009-06-10 10:26:55 -0400 (Wed, 10 Jun 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Fixed some pod formatting.
Fixed some pod wording.

------------------------------------------------------------------------
r4555 | hardaker | 2009-06-09 19:16:24 -0400 (Tue, 09 Jun 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm.in
   M /trunk/dnssec-tools/tools/modules/defaults.pm
   M /trunk/dnssec-tools/tools/modules/keyrec.pm
   M /trunk/dnssec-tools/tools/modules/keyrec.pod
   M /trunk/dnssec-tools/tools/modules/rollrec.pod
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollset
   M /trunk/dnssec-tools/tools/scripts/zonesigner

changed default key length from 1024 to 2048 per NIST 2010 recommendations
------------------------------------------------------------------------
r4545 | tewok | 2009-06-08 19:49:35 -0400 (Mon, 08 Jun 2009) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Fixed how $dtplibs is referenced in perl executions.  (If it isn't set, then
the program to be executed was taken as the argument to -I.)
Modified how configuration files are selected.
Added support for packed execution.
Added some grouping parents in conditionals for clarity.
Capitalization and terminal-period fixes in some comments.

------------------------------------------------------------------------
r4541 | hserus | 2009-06-05 12:03:44 -0400 (Fri, 05 Jun 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/README

Changed copyright date to 2009

------------------------------------------------------------------------
r4534 | marz | 2009-06-04 10:57:01 -0400 (Thu, 04 Jun 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

condition aging and signing with kskrev based on rfc5011 option
------------------------------------------------------------------------
r4533 | baerm | 2009-06-01 17:09:13 -0400 (Mon, 01 Jun 2009) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/INSTALL


Adding some missing/new requirements

(openssl and perl mod's: ExtUtils::MakeMaker, Test::Simple, MailTools)


------------------------------------------------------------------------
r4532 | tewok | 2009-06-01 13:10:23 -0400 (Mon, 01 Jun 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm.in


Added the setconffile() interface.

------------------------------------------------------------------------
r4531 | marz | 2009-05-31 12:33:24 -0400 (Sun, 31 May 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm
   M /trunk/dnssec-tools/tools/modules/keyrec.pm
   M /trunk/dnssec-tools/tools/modules/keyrec.pod
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm
   M /trunk/dnssec-tools/tools/scripts/zonesigner

age revoked keys
------------------------------------------------------------------------
r4530 | baerm | 2009-05-28 13:13:30 -0400 (Thu, 28 May 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Added support for passing in perl libraries to be include when
running zonesigner and keyarch (-dtplibs)


------------------------------------------------------------------------
r4529 | baerm | 2009-05-27 17:11:59 -0400 (Wed, 27 May 2009) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/testing/TODO
   M /trunk/dnssec-tools/testing/t/010zonesigner.t
   M /trunk/dnssec-tools/testing/t/020donuts.t
   M /trunk/dnssec-tools/testing/t/025donutsd.t
   M /trunk/dnssec-tools/testing/t/040rollerd.t


Added better directory clean up to donuts(d), zonesigner scripts

Fairly major changes to rollerd script to handle even more local
perl libraries.


------------------------------------------------------------------------
r4528 | baerm | 2009-05-22 15:52:14 -0400 (Fri, 22 May 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/testing/t/030trustman.t


Use local Validator.pm
More robust cleanup


------------------------------------------------------------------------
r4527 | baerm | 2009-05-22 15:10:43 -0400 (Fri, 22 May 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/testing/t/020donuts.t


Adding use of local Rule.pm


------------------------------------------------------------------------
r4526 | baerm | 2009-05-21 19:32:24 -0400 (Thu, 21 May 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/testing/Makefile.in
   M /trunk/dnssec-tools/testing/t/010zonesigner.t
   M /trunk/dnssec-tools/testing/t/020donuts.t
   M /trunk/dnssec-tools/testing/t/025donutsd.t
   M /trunk/dnssec-tools/testing/t/030trustman.t
   M /trunk/dnssec-tools/testing/t/040rollerd.t


Adding updates to better allow for testing without an installed
dnssec-tools.


------------------------------------------------------------------------
r4525 | baerm | 2009-05-21 19:31:13 -0400 (Thu, 21 May 2009) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Added command line options to pass the location of the tools to use
for key generation, zone signing, and zone checking.

Currently, this means the Bind Named Tools: dnssec-keygen,
dnssec-signszone, and named-checkzone.


------------------------------------------------------------------------
r4524 | baerm | 2009-05-21 19:28:15 -0400 (Thu, 21 May 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Added command line option to pass the location of rollerd's pid file
to rollctl.


------------------------------------------------------------------------
r4523 | baerm | 2009-05-21 19:27:16 -0400 (Thu, 21 May 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Added command line options to pass the locations of zonesigner and
dnssec-tools.conf to rollerd.


------------------------------------------------------------------------
r4522 | tewok | 2009-05-19 18:00:43 -0400 (Tue, 19 May 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Turn off case-sensitivity for the SOA lines in zone files.

------------------------------------------------------------------------
r4520 | hardaker | 2009-05-18 12:00:54 -0400 (Mon, 18 May 2009) | 1 line
Changed paths:
   D /trunk/dnssec-tools/lib

removed older unused directories
------------------------------------------------------------------------
r4519 | marz | 2009-05-07 12:34:36 -0400 (Thu, 07 May 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm
   M /trunk/dnssec-tools/tools/scripts/zonesigner

additional zonesigner fixes to spport rfc5011
------------------------------------------------------------------------
r4518 | baerm | 2009-05-06 17:15:07 -0400 (Wed, 06 May 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/testing/t/040rollerd.t


Getting the rollerd test to use the local validator libraries


------------------------------------------------------------------------
r4517 | hardaker | 2009-05-05 09:57:03 -0400 (Tue, 05 May 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in

check for socket() in -lsocket if needed
------------------------------------------------------------------------
r4516 | hardaker | 2009-05-05 09:23:32 -0400 (Tue, 05 May 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Makefile.PL

remove TrustAnchor from the list of modules; it moved
------------------------------------------------------------------------
r4515 | hardaker | 2009-05-05 09:23:09 -0400 (Tue, 05 May 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/Makefile.in

add convertar to the list of tools to build
------------------------------------------------------------------------
r4514 | baerm | 2009-05-04 21:20:24 -0400 (Mon, 04 May 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/testing/t/025donutsd.t


Adjusting some bad paths in output checking


------------------------------------------------------------------------
r4513 | baerm | 2009-05-04 20:46:51 -0400 (Mon, 04 May 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/testing/t/030trustman.t


Adding fixed output check
Adding local libval/libsres library loading


------------------------------------------------------------------------
r4512 | baerm | 2009-04-30 15:04:49 -0400 (Thu, 30 Apr 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman


Added a debugging check


------------------------------------------------------------------------
r4511 | baerm | 2009-04-30 15:04:15 -0400 (Thu, 30 Apr 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donutsd


adding a run count option (-o runs once -O N runs N times)


------------------------------------------------------------------------
r4510 | hardaker | 2009-04-29 23:55:30 -0400 (Wed, 29 Apr 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/dist/makerelease.xml

update makerelease script to not work in a subdir
------------------------------------------------------------------------
r4509 | hardaker | 2009-04-29 23:53:09 -0400 (Wed, 29 Apr 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Changes
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm

version update and changes update
------------------------------------------------------------------------
r4508 | hardaker | 2009-04-29 23:51:22 -0400 (Wed, 29 Apr 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm

patch from Chris Adams to allow for negative offsets in GENERATE statements
------------------------------------------------------------------------
r4507 | baerm | 2009-04-28 17:49:46 -0400 (Tue, 28 Apr 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/testing/Makefile.in
   A /trunk/dnssec-tools/testing/TODO
   A /trunk/dnssec-tools/testing/rollerd-example.com
   A /trunk/dnssec-tools/testing/saved-example.com
   A /trunk/dnssec-tools/testing/saved-example.rollrec
   M /trunk/dnssec-tools/testing/t/010zonesigner.t
   M /trunk/dnssec-tools/testing/t/020donuts.t
   A /trunk/dnssec-tools/testing/t/025donutsd.t
   A /trunk/dnssec-tools/testing/t/030trustman.t
   M /trunk/dnssec-tools/testing/t/040rollerd.t


adding/re-arranging testing files


------------------------------------------------------------------------
r4506 | baerm | 2009-04-28 17:03:04 -0400 (Tue, 28 Apr 2009) | 3 lines
Changed paths:
   D /trunk/dnssec-tools/testing/Makefile
   D /trunk/dnssec-tools/testing/donuts
   D /trunk/dnssec-tools/testing/rollerd
   D /trunk/dnssec-tools/testing/trustman
   D /trunk/dnssec-tools/testing/zones

re-arrangeing structure of testing directory


------------------------------------------------------------------------
r4505 | marz | 2009-04-23 13:55:33 -0400 (Thu, 23 Apr 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm
   M /trunk/dnssec-tools/tools/scripts/zonesigner

add -revoke option to zonesigner to set revoke bit as per rfc5011
------------------------------------------------------------------------
r4504 | hardaker | 2009-04-22 12:04:42 -0400 (Wed, 22 Apr 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

make signer() use system instead of back-ticks and return the real system status instead of output (which could be errors or success)
------------------------------------------------------------------------
r4503 | hardaker | 2009-04-21 18:40:32 -0400 (Tue, 21 Apr 2009) | 1 line
Changed paths:
   A /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Mf.pm
   A /trunk/dnssec-tools/tools/convertar/t/15mf.t

read and write the master file format
------------------------------------------------------------------------
r4502 | hardaker | 2009-04-21 18:40:00 -0400 (Tue, 21 Apr 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm

pass data to write_header and trailer
------------------------------------------------------------------------
r4501 | hardaker | 2009-04-21 18:39:29 -0400 (Tue, 21 Apr 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Libval.pm

allow for comments with leading space
------------------------------------------------------------------------
r4500 | hardaker | 2009-04-21 18:09:41 -0400 (Tue, 21 Apr 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Bind.pm
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Libval.pm
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm

added a new init_extras function and make bind/libval use it
------------------------------------------------------------------------
r4499 | hardaker | 2009-04-21 18:03:04 -0400 (Tue, 21 Apr 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Bind.pm

use the reusable writing functions
------------------------------------------------------------------------
r4498 | hardaker | 2009-04-21 18:02:33 -0400 (Tue, 21 Apr 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Libval.pm

print a newline after the trailing ;
------------------------------------------------------------------------
r4497 | hardaker | 2009-04-21 18:00:49 -0400 (Tue, 21 Apr 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Libval.pm
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm

use the reusable writing functions
------------------------------------------------------------------------
r4496 | hardaker | 2009-04-21 17:55:35 -0400 (Tue, 21 Apr 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Csv.pm

remove older write function
------------------------------------------------------------------------
r4495 | hardaker | 2009-04-21 17:51:18 -0400 (Tue, 21 Apr 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Dump.pm

didn't add use strict because it does odd things; but comment why
------------------------------------------------------------------------
r4494 | hardaker | 2009-04-21 17:50:43 -0400 (Tue, 21 Apr 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/t/10itar.t
   M /trunk/dnssec-tools/tools/convertar/t/11csv.t
   M /trunk/dnssec-tools/tools/convertar/t/12dump.t

use auto-removed tmp files
------------------------------------------------------------------------
r4493 | hardaker | 2009-04-21 17:50:06 -0400 (Tue, 21 Apr 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/t/itar.xml

added a straight dnskey
------------------------------------------------------------------------
r4492 | hardaker | 2009-04-21 17:49:37 -0400 (Tue, 21 Apr 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Itar.pm

use strict
------------------------------------------------------------------------
r4491 | hardaker | 2009-04-21 17:49:10 -0400 (Tue, 21 Apr 2009) | 1 line
Changed paths:
   A /trunk/dnssec-tools/tools/convertar/t/itar-nods.xml

an itar file with only dnskeys
------------------------------------------------------------------------
r4490 | hardaker | 2009-04-21 17:48:55 -0400 (Tue, 21 Apr 2009) | 1 line
Changed paths:
   A /trunk/dnssec-tools/tools/convertar/t/99cleanup.t

an end-test to remove tmp files
------------------------------------------------------------------------
r4489 | hardaker | 2009-04-21 17:48:29 -0400 (Tue, 21 Apr 2009) | 1 line
Changed paths:
   A /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Libval.pm
   A /trunk/dnssec-tools/tools/convertar/t/13libval.t

module for writing to libval conf files
------------------------------------------------------------------------
r4488 | hardaker | 2009-04-21 17:47:59 -0400 (Tue, 21 Apr 2009) | 1 line
Changed paths:
   A /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Bind.pm
   A /trunk/dnssec-tools/tools/convertar/t/14bind.t

module for writing to bind conf files
------------------------------------------------------------------------
r4487 | hardaker | 2009-04-21 17:47:17 -0400 (Tue, 21 Apr 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Csv.pm

reuse the writing functionality from TA.pm
------------------------------------------------------------------------
r4486 | hardaker | 2009-04-21 17:46:46 -0400 (Tue, 21 Apr 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm

Added a bunch of reusable functionality for writing files and reading/writing comment fields
------------------------------------------------------------------------
r4485 | hardaker | 2009-04-21 17:46:19 -0400 (Tue, 21 Apr 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/convertar

fail properly if no tar was created
------------------------------------------------------------------------
r4484 | tewok | 2009-04-20 15:36:19 -0400 (Mon, 20 Apr 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/INFO
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL
   M /trunk/dnssec-tools/tools/scripts/README
   M /trunk/dnssec-tools/tools/scripts/blinkenlights
   A /trunk/dnssec-tools/tools/scripts/bubbles


Added the bubbles command.

------------------------------------------------------------------------
r4483 | hardaker | 2009-04-17 20:36:51 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   A /trunk/dnssec-tools/tools/convertar/t/11csv.t
   A /trunk/dnssec-tools/tools/convertar/t/12dump.t

add dump and csv tests
------------------------------------------------------------------------
r4482 | hardaker | 2009-04-17 20:34:56 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Itar.pm

close the file handle
------------------------------------------------------------------------
r4481 | hardaker | 2009-04-17 20:32:48 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Dump.pm

rearrange the dump format to match function ordering of others
------------------------------------------------------------------------
r4480 | hardaker | 2009-04-17 20:10:37 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm

remove debugging statement
------------------------------------------------------------------------
r4479 | hardaker | 2009-04-17 20:09:03 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Dump.pm

added read support for dump output
------------------------------------------------------------------------
r4478 | hardaker | 2009-04-17 19:33:48 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/convertar

prop for ignore
------------------------------------------------------------------------
r4477 | hardaker | 2009-04-17 19:31:48 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   A /trunk/dnssec-tools/tools/convertar/Makefile.PL

Makefile for convertar
------------------------------------------------------------------------
r4476 | hardaker | 2009-04-17 19:29:33 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   A /trunk/dnssec-tools/tools/convertar/t
   A /trunk/dnssec-tools/tools/convertar/t/10itar.t
   A /trunk/dnssec-tools/tools/convertar/t/itar.xml
   A /trunk/dnssec-tools/tools/convertar/t/itar.xml.sig

test files for ITAR input/output
------------------------------------------------------------------------
r4475 | hardaker | 2009-04-17 15:44:45 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   A /trunk/dnssec-tools/tools/convertar/lib
   A /trunk/dnssec-tools/tools/convertar/lib/Net
   A /trunk/dnssec-tools/tools/convertar/lib/Net/DNS
   A /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC
   A /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools
   A /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor (from /trunk/dnssec-tools/tools/modules/TrustAnchor:4474)
   D /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/lib
   A /trunk/dnssec-tools/tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor.pm (from /trunk/dnssec-tools/tools/modules/TrustAnchor.pm:4472)
   D /trunk/dnssec-tools/tools/modules/TrustAnchor
   D /trunk/dnssec-tools/tools/modules/TrustAnchor.pm

move modules to new convertar sub-location
------------------------------------------------------------------------
r4474 | hardaker | 2009-04-17 15:30:45 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   A /trunk/dnssec-tools/tools/modules/TrustAnchor/lib

lib directory
------------------------------------------------------------------------
r4473 | hardaker | 2009-04-17 15:29:03 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   A /trunk/dnssec-tools/tools/convertar
   A /trunk/dnssec-tools/tools/convertar/convertar (from /trunk/dnssec-tools/tools/scripts/convertar:4472)
   D /trunk/dnssec-tools/tools/scripts/convertar

move convertar to it's own directory for future sub-packaging
------------------------------------------------------------------------
r4472 | hardaker | 2009-04-17 12:23:31 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   M /
   M /branches/dnssec-tools-1.5/tools/scripts/zonesigner
   M /trunk/dnssec-tools/tools/scripts/zonesigner


------------------------------------------------------------------------
r4471 | hardaker | 2009-04-17 12:19:09 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   M /
   M /branches/dnssec-tools-1.5/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/rollerd


------------------------------------------------------------------------
r4470 | hardaker | 2009-04-17 12:14:51 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   M /
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm


------------------------------------------------------------------------
r4469 | hardaker | 2009-04-17 12:11:21 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   M /
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/dist
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/dist/makerelease.xml


------------------------------------------------------------------------
r4468 | hardaker | 2009-04-17 12:08:04 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   M /
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs.t


------------------------------------------------------------------------
r4467 | hardaker | 2009-04-17 12:05:04 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   M /
   D /trunk/dnssec-tools/testing/zones/example.com
   A /trunk/dnssec-tools/testing/zones/saved-example.com
   D /trunk/dnssec-tools/testing/zones/tmp


------------------------------------------------------------------------
r4466 | hardaker | 2009-04-17 12:02:04 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   M /
   A /trunk/dnssec-tools/testing/trustman


------------------------------------------------------------------------
r4465 | hardaker | 2009-04-17 11:59:05 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   M /
   D /trunk/dnssec-tools/testing/donuts/tmp


------------------------------------------------------------------------
r4464 | hardaker | 2009-04-17 11:56:22 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   M /
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm


------------------------------------------------------------------------
r4463 | hardaker | 2009-04-17 11:54:00 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   M /
   M /trunk/dnssec-tools/Makefile.in
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Makefile.PL
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.xs
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/const-xs.inc


------------------------------------------------------------------------
r4462 | hardaker | 2009-04-17 11:51:25 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   M /
   M /trunk/dnssec-tools/validator/apps/validator_driver.c
   M /trunk/dnssec-tools/validator/libsres/res_query.c
   M /trunk/dnssec-tools/validator/libval/val_parse.c
   M /trunk/dnssec-tools/validator/libval/val_support.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c


------------------------------------------------------------------------
r4461 | hardaker | 2009-04-17 11:49:27 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   M /
   M /trunk/dnssec-tools/validator/Makefile.top


------------------------------------------------------------------------
r4459 | hardaker | 2009-04-17 11:45:53 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   M /
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/configure.in
   A /trunk/dnssec-tools/testing/Makefile
   A /trunk/dnssec-tools/testing/Makefile.in
   A /trunk/dnssec-tools/testing/donuts
   A /trunk/dnssec-tools/testing/donuts/example.com
   A /trunk/dnssec-tools/testing/donuts/tmp
   A /trunk/dnssec-tools/testing/rollerd
   A /trunk/dnssec-tools/testing/rollerd/dsset-example.com.
   A /trunk/dnssec-tools/testing/rollerd/save-example.com
   A /trunk/dnssec-tools/testing/rollerd/save-example.rollrec
   A /trunk/dnssec-tools/testing/rollerd/tmp
   A /trunk/dnssec-tools/testing/t
   A /trunk/dnssec-tools/testing/t/010zonesigner.t
   A /trunk/dnssec-tools/testing/t/020donuts.t
   A /trunk/dnssec-tools/testing/t/040rollerd.t
   A /trunk/dnssec-tools/testing/zones
   A /trunk/dnssec-tools/testing/zones/example.com
   A /trunk/dnssec-tools/testing/zones/tmp


------------------------------------------------------------------------
r4458 | hardaker | 2009-04-17 11:44:20 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   M /
   A /trunk/dnssec-tools/testing


------------------------------------------------------------------------
r4457 | hardaker | 2009-04-17 11:43:04 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   M /
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-example.com
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-test.com


------------------------------------------------------------------------
r4456 | hardaker | 2009-04-17 11:41:57 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   M /
   M /trunk/dnssec-tools/tools/scripts/trustman


------------------------------------------------------------------------
r4455 | hardaker | 2009-04-17 11:40:56 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   M /
   M /trunk/dnssec-tools/tools/scripts/rollctl


------------------------------------------------------------------------
r4454 | hardaker | 2009-04-17 11:39:14 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   M /
   M /trunk/dnssec-tools/tools/scripts/rollerd


------------------------------------------------------------------------
r4453 | hardaker | 2009-04-17 11:38:24 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   M /
   M /trunk/dnssec-tools/validator/libsres/Makefile.in
   M /trunk/dnssec-tools/validator/libval/Makefile.in
   M /trunk/dnssec-tools/validator/libval_shim/Makefile.in


------------------------------------------------------------------------
r4452 | hardaker | 2009-04-17 11:37:37 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   M /
   M /trunk/dnssec-tools/validator/apps/validator_driver.c


------------------------------------------------------------------------
r4451 | hardaker | 2009-04-17 11:36:56 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   M /
   M /trunk/dnssec-tools/validator/libval/val_support.c


------------------------------------------------------------------------
r4450 | hardaker | 2009-04-17 11:36:24 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   M /
   M /trunk/dnssec-tools/validator/libval/val_assertion.c


------------------------------------------------------------------------
r4449 | hardaker | 2009-04-17 11:36:00 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   M /
   M /branches/dnssec-tools-1.5/tools/scripts/rollerd
   M /branches/dnssec-tools-1.5/tools/scripts/zonesigner
   M /branches/dnssec-tools-1.5/validator/apps/validator_driver.c
   M /branches/dnssec-tools-1.5/validator/libsres/res_query.c
   M /branches/dnssec-tools-1.5/validator/libval/val_parse.c
   M /branches/dnssec-tools-1.5/validator/libval/val_support.c
   M /branches/dnssec-tools-1.5/validator/libval/val_x_query.c
   M /trunk/dnssec-tools/Makefile.in
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/configure.in
   D /trunk/dnssec-tools/testing
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-example.com
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-test.com
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Makefile.PL
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.xs
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/const-xs.inc
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm
   D /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/dist
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs.t
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm
   M /trunk/dnssec-tools/tools/modules/rollrec.pm
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/trustman
   M /trunk/dnssec-tools/tools/scripts/zonesigner
   M /trunk/dnssec-tools/validator/Makefile.top
   M /trunk/dnssec-tools/validator/apps/validator_driver.c
   M /trunk/dnssec-tools/validator/libsres/Makefile.in
   M /trunk/dnssec-tools/validator/libsres/res_query.c
   M /trunk/dnssec-tools/validator/libval/Makefile.in
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_parse.c
   M /trunk/dnssec-tools/validator/libval/val_support.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c
   M /trunk/dnssec-tools/validator/libval_shim/Makefile.in


------------------------------------------------------------------------
r4448 | hardaker | 2009-04-17 11:34:59 -0400 (Fri, 17 Apr 2009) | 2 lines
Changed paths:
   M /
   A /trunk/dnssec-tools/tools/modules/TrustAnchor.pm

base class

------------------------------------------------------------------------
r4447 | hardaker | 2009-04-17 11:34:51 -0400 (Fri, 17 Apr 2009) | 2 lines
Changed paths:
   M /
   M /trunk/dnssec-tools/tools/modules/TrustAnchor

ignore props

------------------------------------------------------------------------
r4446 | hardaker | 2009-04-17 11:34:39 -0400 (Fri, 17 Apr 2009) | 2 lines
Changed paths:
   M /
   A /trunk/dnssec-tools/tools/modules/TrustAnchor/Dump.pm

added a dump output module

------------------------------------------------------------------------
r4445 | hardaker | 2009-04-17 11:34:31 -0400 (Fri, 17 Apr 2009) | 2 lines
Changed paths:
   M /
   M /trunk/dnssec-tools/tools/modules/Makefile.PL
   A /trunk/dnssec-tools/tools/modules/TrustAnchor
   A /trunk/dnssec-tools/tools/modules/TrustAnchor/Csv.pm
   A /trunk/dnssec-tools/tools/modules/TrustAnchor/Itar.pm
   A /trunk/dnssec-tools/tools/modules/TrustAnchor/Makefile.PL
   A /trunk/dnssec-tools/tools/scripts/convertar

beginning of convertar

------------------------------------------------------------------------
r4443 | hardaker | 2009-04-17 11:16:26 -0400 (Fri, 17 Apr 2009) | 1 line
Changed paths:
   M /
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm
   M /trunk/dnssec-tools/tools/modules/rollrec.pm
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/zonesigner


------------------------------------------------------------------------
r4442 | hardaker | 2009-04-15 12:58:42 -0400 (Wed, 15 Apr 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/scripts/zonesigner
   M /trunk/dnssec-tools/tools/scripts/zonesigner

fix documentation describing -usensec3
------------------------------------------------------------------------
r4441 | hardaker | 2009-04-14 11:37:23 -0400 (Tue, 14 Apr 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/rollerd

Add a forced -zone flag to zonesigner for filenames that differ from the zone name
------------------------------------------------------------------------
r4440 | hardaker | 2009-04-02 16:42:51 -0400 (Thu, 02 Apr 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm

Update Fast.pm Version Number: 1.02
------------------------------------------------------------------------
r4439 | hardaker | 2009-04-02 16:42:29 -0400 (Thu, 02 Apr 2009) | 1 line
Changed paths:
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/dist
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/dist/makerelease.xml

makerelease for the Fast module
------------------------------------------------------------------------
r4438 | hardaker | 2009-04-02 16:30:33 -0400 (Thu, 02 Apr 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs.t

Parse SPF records
------------------------------------------------------------------------
r4437 | baerm | 2009-04-02 13:20:41 -0400 (Thu, 02 Apr 2009) | 6 lines
Changed paths:
   D /trunk/dnssec-tools/testing/zones/example.com
   A /trunk/dnssec-tools/testing/zones/saved-example.com
   D /trunk/dnssec-tools/testing/zones/tmp


cleaning up testing directory:
remove etraneous files
only keep base test files


------------------------------------------------------------------------
r4436 | baerm | 2009-04-02 13:14:57 -0400 (Thu, 02 Apr 2009) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/testing/trustman

adding a new testing directory


------------------------------------------------------------------------
r4435 | baerm | 2009-04-02 13:13:04 -0400 (Thu, 02 Apr 2009) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/testing/donuts/tmp

remove etraneous tmp directory

------------------------------------------------------------------------
r4434 | marz | 2009-04-02 07:36:31 -0400 (Thu, 02 Apr 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm

bump version and copyright
------------------------------------------------------------------------
r4433 | marz | 2009-04-02 07:34:19 -0400 (Thu, 02 Apr 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/Makefile.in
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Makefile.PL
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.xs
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/const-xs.inc

fix warnings and test failures in addrinfo and Validator perl mods
------------------------------------------------------------------------
r4432 | hardaker | 2009-03-20 15:06:13 -0400 (Fri, 20 Mar 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c
   M /trunk/dnssec-tools/validator/libsres/res_query.c
   M /trunk/dnssec-tools/validator/libval/val_parse.c
   M /trunk/dnssec-tools/validator/libval/val_support.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

update to add sys/types inclusion ahead of arpa/nameser.h
------------------------------------------------------------------------
r4431 | hardaker | 2009-03-20 15:04:42 -0400 (Fri, 20 Mar 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/Makefile.top

update libtool version
------------------------------------------------------------------------
r4429 | baerm | 2009-03-20 00:29:39 -0400 (Fri, 20 Mar 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/configure.in
   A /trunk/dnssec-tools/testing/Makefile
   A /trunk/dnssec-tools/testing/Makefile.in
   A /trunk/dnssec-tools/testing/donuts
   A /trunk/dnssec-tools/testing/donuts/example.com
   A /trunk/dnssec-tools/testing/donuts/tmp
   A /trunk/dnssec-tools/testing/rollerd
   A /trunk/dnssec-tools/testing/rollerd/dsset-example.com.
   A /trunk/dnssec-tools/testing/rollerd/save-example.com
   A /trunk/dnssec-tools/testing/rollerd/save-example.rollrec
   A /trunk/dnssec-tools/testing/rollerd/tmp
   A /trunk/dnssec-tools/testing/t
   A /trunk/dnssec-tools/testing/t/010zonesigner.t
   A /trunk/dnssec-tools/testing/t/020donuts.t
   A /trunk/dnssec-tools/testing/t/040rollerd.t
   A /trunk/dnssec-tools/testing/zones
   A /trunk/dnssec-tools/testing/zones/example.com
   A /trunk/dnssec-tools/testing/zones/tmp


adding testing directory and associated files
added related changes to configure/.in


------------------------------------------------------------------------
r4428 | baerm | 2009-03-19 19:51:59 -0400 (Thu, 19 Mar 2009) | 4 lines
Changed paths:
   A /trunk/dnssec-tools/testing


adding testing directory


------------------------------------------------------------------------
r4427 | baerm | 2009-03-19 19:41:57 -0400 (Thu, 19 Mar 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-example.com
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-test.com


fixed to so SOA can be found


------------------------------------------------------------------------
r4426 | baerm | 2009-03-19 19:37:00 -0400 (Thu, 19 Mar 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman


added --root_hints_file -o option for trustman


------------------------------------------------------------------------
r4425 | baerm | 2009-03-19 19:24:24 -0400 (Thu, 19 Mar 2009) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


added some additional error checking,
changed some command line parsing


------------------------------------------------------------------------
r4424 | baerm | 2009-03-19 19:23:51 -0400 (Thu, 19 Mar 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

typo fix on help

------------------------------------------------------------------------
r4423 | marz | 2009-03-17 11:04:45 -0400 (Tue, 17 Mar 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/Makefile.in
   M /trunk/dnssec-tools/validator/libval/Makefile.in
   M /trunk/dnssec-tools/validator/libval_shim/Makefile.in

fix make clean to clean up old libs
------------------------------------------------------------------------
r4422 | hserus | 2009-03-13 19:00:27 -0400 (Fri, 13 Mar 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

Don't try and free val_result_chain when val_resolve_and_check returns an error

------------------------------------------------------------------------
r4421 | hserus | 2009-03-13 17:42:59 -0400 (Fri, 13 Mar 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.c

Fix nsec_sig_match check

------------------------------------------------------------------------
r4420 | hserus | 2009-03-13 17:42:36 -0400 (Fri, 13 Mar 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Add couple of checks for NULL

------------------------------------------------------------------------
r4419 | marz | 2009-03-12 10:23:51 -0400 (Thu, 12 Mar 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs

fixed pointer const warning
------------------------------------------------------------------------
r4411 | hserus | 2009-03-04 09:28:55 -0500 (Wed, 04 Mar 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.c

Ensure that rr_next points to NULL.

------------------------------------------------------------------------
r4410 | hserus | 2009-03-04 09:28:15 -0500 (Wed, 04 Mar 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_get_rrset.c

Use appropriate routine for freeing up val_rr_rec structure

------------------------------------------------------------------------
r4409 | hserus | 2009-03-04 09:27:30 -0500 (Wed, 04 Mar 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

Reorder some params in structure

------------------------------------------------------------------------
r4408 | hardaker | 2009-03-03 19:43:21 -0500 (Tue, 03 Mar 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/scripts/lsdnssec
   M /trunk/dnssec-tools/tools/scripts/lsdnssec

recognize rrf files too
------------------------------------------------------------------------
r4406 | hardaker | 2009-03-03 14:15:59 -0500 (Tue, 03 Mar 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/mapper

fix typo
------------------------------------------------------------------------
r4405 | hardaker | 2009-03-02 16:58:54 -0500 (Mon, 02 Mar 2009) | 1 line
Changed paths:
   D /trunk/dnssec-tools/apps/mozilla/dnssec-both-ff3.0.patch
   D /trunk/dnssec-tools/apps/mozilla/dnssec-firefox-ff3.0.patch

remove older FF3 patches
------------------------------------------------------------------------
r4404 | hardaker | 2009-03-02 11:17:51 -0500 (Mon, 02 Mar 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/README.firefox
   M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch
   M /trunk/dnssec-tools/apps/mozilla/dnssec-firefox.patch
   M /trunk/dnssec-tools/apps/mozilla/dnssec-mozconfig.patch
   M /trunk/dnssec-tools/apps/mozilla/firefox.spec

update for 3.0.6
------------------------------------------------------------------------
r4403 | hserus | 2009-02-28 05:05:30 -0500 (Sat, 28 Feb 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_selftest.c
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_policy.h

Add flag to specify if spaces are to be used as delimiters in val_get_token
Make the quote in the trust-anchor dnsval.conf statement optional. This allows us to use the trust
anchor format specified for BIND

------------------------------------------------------------------------
r4402 | hardaker | 2009-02-27 12:42:06 -0500 (Fri, 27 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/modules/conf.pm.in
   M /trunk/dnssec-tools/tools/modules/conf.pm.in

Document the new  ENV overrides
------------------------------------------------------------------------
r4401 | hardaker | 2009-02-27 12:35:34 -0500 (Fri, 27 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/modules/conf.pm.in
   M /trunk/dnssec-tools/tools/modules/conf.pm.in

Allow ENV overrides for config directories
------------------------------------------------------------------------
r4400 | hardaker | 2009-02-27 12:26:55 -0500 (Fri, 27 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/modules/conf.pm.in
   M /trunk/dnssec-tools/tools/modules/conf.pm.in

ensure mkpath doesn't die on errors
------------------------------------------------------------------------
r4399 | hserus | 2009-02-27 09:48:13 -0500 (Fri, 27 Feb 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Trigger DLV logic only when security expectation is set to validate and 
we don't have a trust anchor available 

------------------------------------------------------------------------
r4398 | hserus | 2009-02-27 09:46:37 -0500 (Fri, 27 Feb 2009) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Fetch DNSSEC meta-data when security-expectation is set to validate _and_ we
have a (possible) trust point available
Don't free the respondent server when we create an empty nonexitence proof

------------------------------------------------------------------------
r4394 | hardaker | 2009-02-26 12:02:08 -0500 (Thu, 26 Feb 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm

shortern descriptive strings a bit
------------------------------------------------------------------------
r4393 | hardaker | 2009-02-26 12:01:36 -0500 (Thu, 26 Feb 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-status/install.rdf

update the max version number
------------------------------------------------------------------------
r4392 | hardaker | 2009-02-23 16:48:00 -0500 (Mon, 23 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/scripts/lsdnssec
   M /trunk/dnssec-tools/tools/scripts/lsdnssec

made a lsdnssec timeline for rolling periods
------------------------------------------------------------------------
r4391 | hardaker | 2009-02-23 14:47:20 -0500 (Mon, 23 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/modules/QWPrimitives.pm
   M /branches/dnssec-tools-1.5/tools/scripts/lsdnssec
   M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm
   M /trunk/dnssec-tools/tools/scripts/lsdnssec

use allow_once to ensure lsdnssec run without args will work
------------------------------------------------------------------------
r4390 | hardaker | 2009-02-23 14:01:03 -0500 (Mon, 23 Feb 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

make -alwayssign also sign zones even if being rolled
------------------------------------------------------------------------
r4386 | hardaker | 2009-02-16 17:46:37 -0500 (Mon, 16 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/scripts/lsdnssec
   M /trunk/dnssec-tools/tools/scripts/lsdnssec

only print expiry warings if -d is > 1
------------------------------------------------------------------------
r4385 | hardaker | 2009-02-16 17:46:12 -0500 (Mon, 16 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/scripts/lsdnssec
   M /trunk/dnssec-tools/tools/scripts/lsdnssec

only print expiry warings if -d is > 2
------------------------------------------------------------------------
r4384 | hardaker | 2009-02-16 17:35:10 -0500 (Mon, 16 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/scripts/lsdnssec
   M /trunk/dnssec-tools/tools/scripts/lsdnssec

fix lsdnssec to only report active keys
------------------------------------------------------------------------
r4383 | hardaker | 2009-02-16 17:17:19 -0500 (Mon, 16 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/INSTALL
   M /branches/dnssec-tools-1.5/README
   M /branches/dnssec-tools-1.5/podmantex
   M /branches/dnssec-tools-1.5/podtrans
   M /branches/dnssec-tools-1.5/tools/demos/Makefile
   M /branches/dnssec-tools-1.5/tools/demos/README
   M /branches/dnssec-tools-1.5/tools/dnspktflow/Makefile.PL
   M /branches/dnssec-tools-1.5/tools/dnspktflow/dnspktflow
   M /branches/dnssec-tools-1.5/tools/donuts/Makefile.PL
   M /branches/dnssec-tools-1.5/tools/donuts/Rule.pm
   M /branches/dnssec-tools-1.5/tools/donuts/donuts
   M /branches/dnssec-tools-1.5/tools/donuts/donutsd
   M /branches/dnssec-tools-1.5/tools/drawvalmap/Makefile.PL
   M /branches/dnssec-tools-1.5/tools/drawvalmap/drawvalmap
   M /branches/dnssec-tools-1.5/tools/etc/Makefile.PL
   M /branches/dnssec-tools-1.5/tools/etc/README
   M /branches/dnssec-tools-1.5/tools/logwatch/README
   M /branches/dnssec-tools-1.5/tools/maketestzone/Makefile.PL
   M /branches/dnssec-tools-1.5/tools/maketestzone/maketestzone
   M /branches/dnssec-tools-1.5/tools/mapper/Makefile.PL
   M /branches/dnssec-tools-1.5/tools/mapper/mapper
   M /branches/dnssec-tools-1.5/tools/modules/BootStrap.pm
   M /branches/dnssec-tools-1.5/tools/modules/Makefile.PL
   M /branches/dnssec-tools-1.5/tools/modules/QWPrimitives.pm
   M /branches/dnssec-tools-1.5/tools/modules/README
   M /branches/dnssec-tools-1.5/tools/modules/conf.pm.in
   M /branches/dnssec-tools-1.5/tools/modules/defaults.pm
   M /branches/dnssec-tools-1.5/tools/modules/dnssectools.pm
   M /branches/dnssec-tools-1.5/tools/modules/keyrec.pm
   M /branches/dnssec-tools-1.5/tools/modules/keyrec.pod
   M /branches/dnssec-tools-1.5/tools/modules/rolllog.pm
   M /branches/dnssec-tools-1.5/tools/modules/rollmgr.pm
   M /branches/dnssec-tools-1.5/tools/modules/rollrec.pm
   M /branches/dnssec-tools-1.5/tools/modules/rollrec.pod
   M /branches/dnssec-tools-1.5/tools/modules/timetrans.pm
   M /branches/dnssec-tools-1.5/tools/modules/tooloptions.pm
   M /branches/dnssec-tools-1.5/tools/scripts/Makefile.PL
   M /branches/dnssec-tools-1.5/tools/scripts/README
   M /branches/dnssec-tools-1.5/tools/scripts/blinkenlights
   M /branches/dnssec-tools-1.5/tools/scripts/cleanarch
   M /branches/dnssec-tools-1.5/tools/scripts/cleankrf
   M /branches/dnssec-tools-1.5/tools/scripts/dtck
   M /branches/dnssec-tools-1.5/tools/scripts/dtconf
   M /branches/dnssec-tools-1.5/tools/scripts/dtconfchk
   M /branches/dnssec-tools-1.5/tools/scripts/dtdefs
   M /branches/dnssec-tools-1.5/tools/scripts/dtinitconf
   M /branches/dnssec-tools-1.5/tools/scripts/expchk
   M /branches/dnssec-tools-1.5/tools/scripts/fixkrf
   M /branches/dnssec-tools-1.5/tools/scripts/genkrf
   M /branches/dnssec-tools-1.5/tools/scripts/keyarch
   M /branches/dnssec-tools-1.5/tools/scripts/krfcheck
   M /branches/dnssec-tools-1.5/tools/scripts/lskrf
   M /branches/dnssec-tools-1.5/tools/scripts/lsroll
   M /branches/dnssec-tools-1.5/tools/scripts/rollchk
   M /branches/dnssec-tools-1.5/tools/scripts/rollctl
   M /branches/dnssec-tools-1.5/tools/scripts/rollinit
   M /branches/dnssec-tools-1.5/tools/scripts/rolllog
   M /branches/dnssec-tools-1.5/tools/scripts/rollrec-editor
   M /branches/dnssec-tools-1.5/tools/scripts/rollset
   M /branches/dnssec-tools-1.5/tools/scripts/signset-editor
   M /branches/dnssec-tools-1.5/tools/scripts/tachk
   M /branches/dnssec-tools-1.5/tools/scripts/timetrans
   M /branches/dnssec-tools-1.5/tools/scripts/trustman
   M /branches/dnssec-tools-1.5/tools/scripts/zonesigner
   M /branches/dnssec-tools-1.5/validator/README
   M /branches/dnssec-tools-1.5/validator/apps/getaddr.c
   M /branches/dnssec-tools-1.5/validator/apps/gethost.c
   M /branches/dnssec-tools-1.5/validator/apps/getname.c
   M /branches/dnssec-tools-1.5/validator/apps/getquery.c
   M /branches/dnssec-tools-1.5/validator/apps/getrrset.c
   M /branches/dnssec-tools-1.5/validator/apps/libval_check_conf.c
   M /branches/dnssec-tools-1.5/validator/apps/validator_driver.c
   M /branches/dnssec-tools-1.5/validator/apps/validator_driver.h
   M /branches/dnssec-tools-1.5/validator/include/validator/resolver.h
   M /branches/dnssec-tools-1.5/validator/include/validator/val_errors.h
   M /branches/dnssec-tools-1.5/validator/include/validator/validator-internal.h
   M /branches/dnssec-tools-1.5/validator/include/validator/validator.h
   M /branches/dnssec-tools-1.5/validator/libsres/res_mkquery.h
   M /branches/dnssec-tools-1.5/validator/libsres/res_query.c
   M /branches/dnssec-tools-1.5/validator/libsres/res_support.c
   M /branches/dnssec-tools-1.5/validator/libsres/res_support.h
   M /branches/dnssec-tools-1.5/validator/libval/val_assertion.c
   M /branches/dnssec-tools-1.5/validator/libval/val_assertion.h
   M /branches/dnssec-tools-1.5/validator/libval/val_cache.c
   M /branches/dnssec-tools-1.5/validator/libval/val_cache.h
   M /branches/dnssec-tools-1.5/validator/libval/val_context.c
   M /branches/dnssec-tools-1.5/validator/libval/val_context.h
   M /branches/dnssec-tools-1.5/validator/libval/val_crypto.c
   M /branches/dnssec-tools-1.5/validator/libval/val_crypto.h
   M /branches/dnssec-tools-1.5/validator/libval/val_get_rrset.c
   M /branches/dnssec-tools-1.5/validator/libval/val_getaddrinfo.c
   M /branches/dnssec-tools-1.5/validator/libval/val_gethostbyname.c
   M /branches/dnssec-tools-1.5/validator/libval/val_log.c
   M /branches/dnssec-tools-1.5/validator/libval/val_parse.c
   M /branches/dnssec-tools-1.5/validator/libval/val_parse.h
   M /branches/dnssec-tools-1.5/validator/libval/val_policy.c
   M /branches/dnssec-tools-1.5/validator/libval/val_resquery.c
   M /branches/dnssec-tools-1.5/validator/libval/val_resquery.h
   M /branches/dnssec-tools-1.5/validator/libval/val_support.c
   M /branches/dnssec-tools-1.5/validator/libval/val_support.h
   M /branches/dnssec-tools-1.5/validator/libval/val_verify.c
   M /branches/dnssec-tools-1.5/validator/libval/val_verify.h
   M /branches/dnssec-tools-1.5/validator/libval/val_x_query.c
   M /trunk/dnssec-tools/INSTALL
   M /trunk/dnssec-tools/README
   M /trunk/dnssec-tools/podmantex
   M /trunk/dnssec-tools/podtrans
   M /trunk/dnssec-tools/tools/demos/Makefile
   M /trunk/dnssec-tools/tools/demos/README
   M /trunk/dnssec-tools/tools/dnspktflow/Makefile.PL
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow
   M /trunk/dnssec-tools/tools/donuts/Makefile.PL
   M /trunk/dnssec-tools/tools/donuts/Rule.pm
   M /trunk/dnssec-tools/tools/donuts/donuts
   M /trunk/dnssec-tools/tools/donuts/donutsd
   M /trunk/dnssec-tools/tools/drawvalmap/Makefile.PL
   M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap
   M /trunk/dnssec-tools/tools/etc/Makefile.PL
   M /trunk/dnssec-tools/tools/etc/README
   M /trunk/dnssec-tools/tools/logwatch/README
   M /trunk/dnssec-tools/tools/maketestzone/Makefile.PL
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone
   M /trunk/dnssec-tools/tools/mapper/Makefile.PL
   M /trunk/dnssec-tools/tools/mapper/mapper
   M /trunk/dnssec-tools/tools/modules/BootStrap.pm
   M /trunk/dnssec-tools/tools/modules/Makefile.PL
   M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm
   M /trunk/dnssec-tools/tools/modules/README
   M /trunk/dnssec-tools/tools/modules/conf.pm.in
   M /trunk/dnssec-tools/tools/modules/defaults.pm
   M /trunk/dnssec-tools/tools/modules/dnssectools.pm
   M /trunk/dnssec-tools/tools/modules/keyrec.pm
   M /trunk/dnssec-tools/tools/modules/keyrec.pod
   M /trunk/dnssec-tools/tools/modules/rolllog.pm
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm
   M /trunk/dnssec-tools/tools/modules/rollrec.pm
   M /trunk/dnssec-tools/tools/modules/rollrec.pod
   M /trunk/dnssec-tools/tools/modules/timetrans.pm
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL
   M /trunk/dnssec-tools/tools/scripts/README
   M /trunk/dnssec-tools/tools/scripts/blinkenlights
   M /trunk/dnssec-tools/tools/scripts/cleanarch
   M /trunk/dnssec-tools/tools/scripts/cleankrf
   M /trunk/dnssec-tools/tools/scripts/dtck
   M /trunk/dnssec-tools/tools/scripts/dtconf
   M /trunk/dnssec-tools/tools/scripts/dtconfchk
   M /trunk/dnssec-tools/tools/scripts/dtdefs
   M /trunk/dnssec-tools/tools/scripts/dtinitconf
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/fixkrf
   M /trunk/dnssec-tools/tools/scripts/genkrf
   M /trunk/dnssec-tools/tools/scripts/keyarch
   M /trunk/dnssec-tools/tools/scripts/krfcheck
   M /trunk/dnssec-tools/tools/scripts/lskrf
   M /trunk/dnssec-tools/tools/scripts/lsroll
   M /trunk/dnssec-tools/tools/scripts/rollchk
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollinit
   M /trunk/dnssec-tools/tools/scripts/rolllog
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor
   M /trunk/dnssec-tools/tools/scripts/rollset
   M /trunk/dnssec-tools/tools/scripts/signset-editor
   M /trunk/dnssec-tools/tools/scripts/tachk
   M /trunk/dnssec-tools/tools/scripts/timetrans
   M /trunk/dnssec-tools/tools/scripts/trustman
   M /trunk/dnssec-tools/tools/scripts/zonesigner
   M /trunk/dnssec-tools/validator/README
   M /trunk/dnssec-tools/validator/apps/getaddr.c
   M /trunk/dnssec-tools/validator/apps/gethost.c
   M /trunk/dnssec-tools/validator/apps/getname.c
   M /trunk/dnssec-tools/validator/apps/getquery.c
   M /trunk/dnssec-tools/validator/apps/getrrset.c
   M /trunk/dnssec-tools/validator/apps/libval_check_conf.c
   M /trunk/dnssec-tools/validator/apps/validator_driver.c
   M /trunk/dnssec-tools/validator/apps/validator_driver.h
   M /trunk/dnssec-tools/validator/include/validator/resolver.h
   M /trunk/dnssec-tools/validator/include/validator/val_errors.h
   M /trunk/dnssec-tools/validator/include/validator/validator-internal.h
   M /trunk/dnssec-tools/validator/include/validator/validator.h
   M /trunk/dnssec-tools/validator/libsres/res_mkquery.h
   M /trunk/dnssec-tools/validator/libsres/res_query.c
   M /trunk/dnssec-tools/validator/libsres/res_support.c
   M /trunk/dnssec-tools/validator/libsres/res_support.h
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_assertion.h
   M /trunk/dnssec-tools/validator/libval/val_cache.c
   M /trunk/dnssec-tools/validator/libval/val_cache.h
   M /trunk/dnssec-tools/validator/libval/val_context.c
   M /trunk/dnssec-tools/validator/libval/val_context.h
   M /trunk/dnssec-tools/validator/libval/val_crypto.c
   M /trunk/dnssec-tools/validator/libval/val_crypto.h
   M /trunk/dnssec-tools/validator/libval/val_get_rrset.c
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/validator/libval/val_log.c
   M /trunk/dnssec-tools/validator/libval/val_parse.c
   M /trunk/dnssec-tools/validator/libval/val_parse.h
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.h
   M /trunk/dnssec-tools/validator/libval/val_support.c
   M /trunk/dnssec-tools/validator/libval/val_support.h
   M /trunk/dnssec-tools/validator/libval/val_verify.c
   M /trunk/dnssec-tools/validator/libval/val_verify.h
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

copyright year update
------------------------------------------------------------------------
r4382 | hardaker | 2009-02-16 16:59:57 -0500 (Mon, 16 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/scripts/lsdnssec
   M /trunk/dnssec-tools/tools/scripts/lsdnssec

add a -r and -k flag to lsdnssec for showing only certain types of output
------------------------------------------------------------------------
r4381 | hardaker | 2009-02-16 16:50:14 -0500 (Mon, 16 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/NEWS
   M /branches/dnssec-tools-1.5/tools/modules/rollmgr.pm
   M /branches/dnssec-tools-1.5/tools/modules/rollrec.pm
   M /branches/dnssec-tools-1.5/tools/scripts/lsdnssec
   M /branches/dnssec-tools-1.5/tools/scripts/rollerd
   M /branches/dnssec-tools-1.5/tools/scripts/rollinit
   M /trunk/dnssec-tools/NEWS
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm
   M /trunk/dnssec-tools/tools/modules/rollrec.pm
   M /trunk/dnssec-tools/tools/scripts/lsdnssec
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/rollinit

Add minimal RFC5011 support for extended pauses during KSK rolling
------------------------------------------------------------------------
r4380 | hardaker | 2009-02-16 12:05:53 -0500 (Mon, 16 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/donuts/donutsd
   M /branches/dnssec-tools-1.5/tools/maketestzone/maketestzone
   M /branches/dnssec-tools-1.5/tools/scripts/getdnskeys
   M /branches/dnssec-tools-1.5/tools/scripts/getds
   M /branches/dnssec-tools-1.5/tools/scripts/lsdnssec
   M /trunk/dnssec-tools/tools/donuts/donutsd
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone
   M /trunk/dnssec-tools/tools/scripts/getdnskeys
   M /trunk/dnssec-tools/tools/scripts/getds
   M /trunk/dnssec-tools/tools/scripts/lsdnssec

fixed perl use typo
------------------------------------------------------------------------
r4379 | hardaker | 2009-02-14 13:01:25 -0500 (Sat, 14 Feb 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/cleanarch

make executable
------------------------------------------------------------------------
r4378 | hardaker | 2009-02-14 13:01:13 -0500 (Sat, 14 Feb 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtck

make executable
------------------------------------------------------------------------
r4377 | hardaker | 2009-02-14 13:01:07 -0500 (Sat, 14 Feb 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/getds

make executable
------------------------------------------------------------------------
r4375 | hardaker | 2009-02-14 13:00:57 -0500 (Sat, 14 Feb 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor

make executable
------------------------------------------------------------------------
r4370 | hardaker | 2009-02-14 12:52:06 -0500 (Sat, 14 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/donuts/donutsd
   M /branches/dnssec-tools-1.5/tools/maketestzone/maketestzone
   M /trunk/dnssec-tools/tools/donuts/donutsd
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

Use standardized DTGetOptions
------------------------------------------------------------------------
r4369 | hardaker | 2009-02-14 12:49:13 -0500 (Sat, 14 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/scripts/getdnskeys
   M /branches/dnssec-tools-1.5/tools/scripts/getds
   M /branches/dnssec-tools-1.5/tools/scripts/lsdnssec
   M /branches/dnssec-tools-1.5/tools/scripts/trustman
   M /trunk/dnssec-tools/tools/scripts/getdnskeys
   M /trunk/dnssec-tools/tools/scripts/getds
   M /trunk/dnssec-tools/tools/scripts/lsdnssec
   M /trunk/dnssec-tools/tools/scripts/trustman

Use standardized DTGetOptions
------------------------------------------------------------------------
r4368 | hardaker | 2009-02-14 12:45:30 -0500 (Sat, 14 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/scripts/lsdnssec
   M /trunk/dnssec-tools/tools/scripts/lsdnssec

add a -z option for limiting to a single zone
------------------------------------------------------------------------
r4367 | hardaker | 2009-02-14 12:44:15 -0500 (Sat, 14 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/dnspktflow/dnspktflow
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow

Use standardized DTGetOptions
------------------------------------------------------------------------
r4366 | hardaker | 2009-02-14 12:42:38 -0500 (Sat, 14 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/mapper/mapper
   M /trunk/dnssec-tools/tools/mapper/mapper

Use standardized DTGetOptions
------------------------------------------------------------------------
r4364 | hardaker | 2009-02-14 12:39:26 -0500 (Sat, 14 Feb 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

convert older getoptions to DT standardized one
------------------------------------------------------------------------
r4363 | hardaker | 2009-02-14 12:38:41 -0500 (Sat, 14 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/modules/QWPrimitives.pm
   M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm

Created a default DTGetOptions function for gui/nogui support based on config
------------------------------------------------------------------------
r4362 | hardaker | 2009-02-13 18:35:07 -0500 (Fri, 13 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/NEWS
   M /branches/dnssec-tools-1.5/tools/scripts/Makefile.PL
   A /branches/dnssec-tools-1.5/tools/scripts/lsdnssec
   M /trunk/dnssec-tools/NEWS
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL
   A /trunk/dnssec-tools/tools/scripts/lsdnssec

A new lsdnssec file to collect and summarize information from various DT sources
------------------------------------------------------------------------
r4361 | hardaker | 2009-02-13 18:24:57 -0500 (Fri, 13 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/NEWS
   M /trunk/dnssec-tools/NEWS

NEWS update for -alwayssign
------------------------------------------------------------------------
r4360 | hardaker | 2009-02-13 18:23:44 -0500 (Fri, 13 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/rollerd

Document the new -alwayssign flag
------------------------------------------------------------------------
r4359 | hardaker | 2009-02-13 18:20:21 -0500 (Fri, 13 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/rollerd

Added a new -alwayssign flag that tells rollerd to sign existing zones that aren't in the middle of rolling; useful for complete management of zones via rollerd
------------------------------------------------------------------------
r4358 | hardaker | 2009-02-13 17:18:12 -0500 (Fri, 13 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/scripts/rollinit
   M /trunk/dnssec-tools/tools/scripts/rollinit

fix left-over line from last patch
------------------------------------------------------------------------
r4357 | hardaker | 2009-02-13 15:35:00 -0500 (Fri, 13 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/scripts/rollinit
   M /trunk/dnssec-tools/tools/scripts/rollinit

changed -zone flag to -zonefile for clarity when compared to other tools like zonesigner
------------------------------------------------------------------------
r4350 | hardaker | 2009-02-06 15:37:23 -0500 (Fri, 06 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/maketestzone/maketestzone
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

nsec3 support
------------------------------------------------------------------------
r4349 | hardaker | 2009-02-05 19:57:50 -0500 (Thu, 05 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/modules/conf.pm.in
   M /branches/dnssec-tools-1.5/tools/modules/rollmgr.pm
   M /branches/dnssec-tools-1.5/tools/modules/rollrec.pm
   M /trunk/dnssec-tools/tools/modules/conf.pm.in
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm
   M /trunk/dnssec-tools/tools/modules/rollrec.pm

make makelocalstatedir accept a subdir argument
------------------------------------------------------------------------
r4348 | hardaker | 2009-02-05 19:56:58 -0500 (Thu, 05 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/rollerd

make rollerd remember int/hup signals for later processing
------------------------------------------------------------------------
r4347 | hardaker | 2009-02-05 17:34:20 -0500 (Thu, 05 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/modules/conf.pm.in
   M /branches/dnssec-tools-1.5/tools/modules/defaults.pm
   M /branches/dnssec-tools-1.5/tools/modules/rollmgr.pm
   M /branches/dnssec-tools-1.5/tools/modules/rollrec.pm
   M /trunk/dnssec-tools/tools/modules/conf.pm.in
   M /trunk/dnssec-tools/tools/modules/defaults.pm
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm
   M /trunk/dnssec-tools/tools/modules/rollrec.pm

make a new makelocalstatedir() function which creates the state directory if it doesn't exist before returning it's value
------------------------------------------------------------------------
r4346 | hardaker | 2009-02-05 17:22:05 -0500 (Thu, 05 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/validator/configure.in
   M /trunk/dnssec-tools/validator/configure.in

consistent wording in the configure output
------------------------------------------------------------------------
r4345 | hardaker | 2009-02-05 17:20:14 -0500 (Thu, 05 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/validator/configure
   M /branches/dnssec-tools-1.5/validator/configure.in
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in

attempt to carefully define gethostbyname: take 3
------------------------------------------------------------------------
r4344 | hardaker | 2009-02-05 17:18:41 -0500 (Thu, 05 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/validator/configure
   M /branches/dnssec-tools-1.5/validator/configure.in
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in

attempt to carefully define gethostbyname: take 2
------------------------------------------------------------------------
r4343 | hardaker | 2009-02-05 17:16:44 -0500 (Thu, 05 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/validator/configure
   M /branches/dnssec-tools-1.5/validator/configure.in
   M /branches/dnssec-tools-1.5/validator/include/validator-config.h.in
   M /branches/dnssec-tools-1.5/validator/libval_shim/libval_shim.c
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in
   M /trunk/dnssec-tools/validator/include/validator-config.h.in
   M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c

attempt to carefully define gethostbyname: take 1
------------------------------------------------------------------------
r4342 | hardaker | 2009-02-05 17:03:12 -0500 (Thu, 05 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/validator/configure
   M /branches/dnssec-tools-1.5/validator/configure.in
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in

attempt to carefully define getnameinfo: take 3
------------------------------------------------------------------------
r4341 | hardaker | 2009-02-05 17:00:37 -0500 (Thu, 05 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/validator/configure
   M /branches/dnssec-tools-1.5/validator/configure.in
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in

attempt to carefully define getnameinfo: take 2
------------------------------------------------------------------------
r4340 | hardaker | 2009-02-05 16:56:17 -0500 (Thu, 05 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/validator/configure
   M /branches/dnssec-tools-1.5/validator/configure.in
   M /branches/dnssec-tools-1.5/validator/include/validator-config.h.in
   M /branches/dnssec-tools-1.5/validator/libval_shim/libval_shim.c
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in
   M /trunk/dnssec-tools/validator/include/validator-config.h.in
   M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c

attempt to carefully define getnameinfo
------------------------------------------------------------------------
r4339 | hardaker | 2009-02-05 15:04:10 -0500 (Thu, 05 Feb 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.5/tools/modules/defaults.pm
   M /trunk/dnssec-tools/tools/modules/defaults.pm

use getprefixdir to find install path
------------------------------------------------------------------------
r4334 | hardaker | 2009-02-05 13:01:07 -0500 (Thu, 05 Feb 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/NEWS

added news blurbs from branch
------------------------------------------------------------------------
r4331 | hardaker | 2009-02-05 11:51:14 -0500 (Thu, 05 Feb 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

documentation for the nsec_check feature
------------------------------------------------------------------------
r4330 | hserus | 2009-02-05 11:48:53 -0500 (Thu, 05 Feb 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

Set the value of the addrinfo return param

------------------------------------------------------------------------
r4329 | hserus | 2009-02-05 11:48:21 -0500 (Thu, 05 Feb 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_cache.c

Fix logic in removal of first element of the zoneinfo linked list

------------------------------------------------------------------------
r4328 | hserus | 2009-02-05 11:47:08 -0500 (Thu, 05 Feb 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/ssh/openssh-5.1p1-dnssec.patch

Fix compile issues

------------------------------------------------------------------------
r4327 | hardaker | 2009-02-04 18:08:23 -0500 (Wed, 04 Feb 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

change KSK/ZSK starting phase to 1 from 2, making the initial waiting period for cache flush active.  Though not frequently needed, it's better to be safe than sorry (and more important during single-run flags).
------------------------------------------------------------------------
r4326 | hserus | 2009-02-04 16:20:09 -0500 (Wed, 04 Feb 2009) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/ssh/openssh-5.1p1-dnssec.patch

Add new patch for openssh-5.1p1

------------------------------------------------------------------------
r4325 | hardaker | 2009-02-02 10:54:39 -0500 (Mon, 02 Feb 2009) | 1 line
Changed paths:
   A /trunk/dnssec-tools/tools/donuts/rules/nsec_check.rules.txt

NSEC checking rules; requires feature: nsec_check
------------------------------------------------------------------------
r4324 | hserus | 2009-01-30 12:28:10 -0500 (Fri, 30 Jan 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Version submitted as -07

------------------------------------------------------------------------
r4323 | hserus | 2009-01-29 15:36:39 -0500 (Thu, 29 Jan 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

reorder rr_next element to be last in the val_rr_rec structure

------------------------------------------------------------------------
r4322 | hserus | 2009-01-29 15:07:04 -0500 (Thu, 29 Jan 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Add reference to new IPR text 

------------------------------------------------------------------------
r4321 | hardaker | 2009-01-29 14:39:44 -0500 (Thu, 29 Jan 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm

try again at portable base32 calling
------------------------------------------------------------------------
r4320 | hserus | 2009-01-29 14:38:37 -0500 (Thu, 29 Jan 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Set zonecut when restarting query from root

------------------------------------------------------------------------
r4319 | hserus | 2009-01-29 13:53:49 -0500 (Thu, 29 Jan 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Make DS query less dependent on zonecut information (DNSKEY name is sufficient)

------------------------------------------------------------------------
r4318 | hserus | 2009-01-29 13:40:37 -0500 (Thu, 29 Jan 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

restructure code for digest_response

------------------------------------------------------------------------
r4317 | hserus | 2009-01-29 13:37:00 -0500 (Thu, 29 Jan 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_cache.c

 No longer keep separate caches for key and DS records

------------------------------------------------------------------------
r4316 | hserus | 2009-01-29 13:36:11 -0500 (Thu, 29 Jan 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_query.c

Set the RD bit only if the RES_RECURSE option is specified

------------------------------------------------------------------------
r4315 | hserus | 2009-01-29 13:31:53 -0500 (Thu, 29 Jan 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Display the query state in error response log message

------------------------------------------------------------------------
r4314 | hserus | 2009-01-29 13:11:46 -0500 (Thu, 29 Jan 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/resolver.h

Retry queries at least once 

------------------------------------------------------------------------
r4312 | hardaker | 2009-01-29 12:25:44 -0500 (Thu, 29 Jan 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm

fix base32 requirement support for nsec3
------------------------------------------------------------------------
r4311 | hserus | 2009-01-28 15:28:48 -0500 (Wed, 28 Jan 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/dnsval.conf.3
   M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod
   M /trunk/dnssec-tools/validator/doc/libsres.3
   M /trunk/dnssec-tools/validator/doc/libsres.pod
   M /trunk/dnssec-tools/validator/doc/libval-implementation-notes
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod
   M /trunk/dnssec-tools/validator/doc/val_get_rrset.3
   M /trunk/dnssec-tools/validator/doc/val_get_rrset.pod

Keep documentation in sync with API

------------------------------------------------------------------------
r4310 | hserus | 2009-01-28 15:27:10 -0500 (Wed, 28 Jan 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Current version of validator API to be submitted as -07

------------------------------------------------------------------------
r4309 | hserus | 2009-01-28 14:58:06 -0500 (Wed, 28 Jan 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/apps/ssh/ssh-dnssec.pat

No longer require ns_name_pton function since val_resolve_and_check now accepts
names as char *

------------------------------------------------------------------------
r4308 | hserus | 2009-01-28 14:57:28 -0500 (Wed, 28 Jan 2009) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/apps/ssh/openssh-5.0p1-dnssec.patch

No longer require the ns_name_pton function since val_resolve_and_check now
accepts names as char *

------------------------------------------------------------------------
r4307 | hserus | 2009-01-28 14:55:57 -0500 (Wed, 28 Jan 2009) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap

- Remove older status codes and replace with most recent set

------------------------------------------------------------------------
r4306 | hserus | 2009-01-28 14:54:52 -0500 (Wed, 28 Jan 2009) | 13 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/README
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc

Changes to comply with latest set of API changes
  * Changes to status codes
    - removed the VAL_AC_TRUSTED_ZONE and VAL_TRUSTED_ZONE codes
    - renamed *PROVABLY_INSECURE* to *PINSECURE*
    - renamed VAL_LOCAL_ANSWER to VAL_OOB_ANSWER
  * Changes to function prototypes
    - using u_char in place of u_int8_t to represent character buffers
    - using higher order types instead of u_int* variants for exported
    functions
    - using size_t where appropriate
    - No longer pass OTW format domain names for val_resolve_and_check()


------------------------------------------------------------------------
r4305 | hserus | 2009-01-28 14:49:13 -0500 (Wed, 28 Jan 2009) | 24 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/getrrset.c
   M /trunk/dnssec-tools/validator/apps/selftests.dist
   M /trunk/dnssec-tools/validator/apps/validator_driver.c
   M /trunk/dnssec-tools/validator/apps/validator_driver.h
   M /trunk/dnssec-tools/validator/apps/validator_selftest.c
   M /trunk/dnssec-tools/validator/etc/dnsval.conf
   M /trunk/dnssec-tools/validator/include/validator/resolver.h
   M /trunk/dnssec-tools/validator/include/validator/val_errors.h
   M /trunk/dnssec-tools/validator/include/validator/validator-internal.h
   M /trunk/dnssec-tools/validator/include/validator/validator.h
   M /trunk/dnssec-tools/validator/libsres/res_debug.c
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.c
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.h
   M /trunk/dnssec-tools/validator/libsres/res_mkquery.c
   M /trunk/dnssec-tools/validator/libsres/res_mkquery.h
   M /trunk/dnssec-tools/validator/libsres/res_query.c
   M /trunk/dnssec-tools/validator/libsres/res_support.c
   M /trunk/dnssec-tools/validator/libsres/res_support.h
   M /trunk/dnssec-tools/validator/libsres/res_tsig.c
   M /trunk/dnssec-tools/validator/libsres/res_tsig.h
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_assertion.h
   M /trunk/dnssec-tools/validator/libval/val_cache.c
   M /trunk/dnssec-tools/validator/libval/val_cache.h
   M /trunk/dnssec-tools/validator/libval/val_crypto.c
   M /trunk/dnssec-tools/validator/libval/val_crypto.h
   M /trunk/dnssec-tools/validator/libval/val_get_rrset.c
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/validator/libval/val_log.c
   M /trunk/dnssec-tools/validator/libval/val_parse.c
   M /trunk/dnssec-tools/validator/libval/val_parse.h
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_policy.h
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.h
   M /trunk/dnssec-tools/validator/libval/val_support.c
   M /trunk/dnssec-tools/validator/libval/val_support.h
   M /trunk/dnssec-tools/validator/libval/val_verify.c
   M /trunk/dnssec-tools/validator/libval/val_verify.h
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

* Changes to status codes
    - removed the VAL_AC_TRUSTED_ZONE and VAL_TRUSTED_ZONE codes
    - renamed *PROVABLY_INSECURE* to *PINSECURE*
    - renamed VAL_LOCAL_ANSWER to VAL_OOB_ANSWER
* Changes to types
    - using u_char in place of u_int8_t to represent character buffers
    - using size_t where appropriate
    - Decoupled val_rrset_rec from other internal structures. Moved members
    from older val_rrset_digested structure to rrset_rec structure
    - No longer store complete header information in val_rrset_rec; only keep
    rcode information
* Changes to function prototypes
    - using higher order types instead of u_int* variants for exported
    functions
    - val_add_valpolicy() now takes a void * as the second argument
    - No longer pass OTW format domain names for val_resolve_and_check()
* policy-related
    - No longer define a "trusted" zone security expectation since there is no
    way to give it special treatment in the high-level API; the "ignore"
    condition subsumes the "trusted" condition.
    - Define new libval_policy_definition_t structure to encapsulate the
    libval-specific policy definition parameters in val_add_valpolicy()


------------------------------------------------------------------------
r4304 | hardaker | 2009-01-27 15:48:00 -0500 (Tue, 27 Jan 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

NSEC and NSEC3 support improvements
------------------------------------------------------------------------
r4303 | hardaker | 2009-01-27 15:45:09 -0500 (Tue, 27 Jan 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-for-1.4.2/tools/modules/ZoneFile-Fast/Changes
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Changes

Changes for upcoming release
------------------------------------------------------------------------
r4301 | hardaker | 2009-01-27 11:59:19 -0500 (Tue, 27 Jan 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Makefile.PL
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rr-dnssec.t
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs.t

support for NSEC3 and misc fixes due to changes in recent Net::DNS modules
------------------------------------------------------------------------
r4300 | hardaker | 2009-01-27 10:48:09 -0500 (Tue, 27 Jan 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-for-1.4.2/tools/donuts/rules/dnssec.rules.txt
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

check for null-names in NSEC checks
------------------------------------------------------------------------
r4299 | hardaker | 2009-01-27 10:46:16 -0500 (Tue, 27 Jan 2009) | 1 line
Changed paths:
   M /branches/dnssec-tools-for-1.4.2/tools/donuts/rules/check_nameservers.txt
   M /branches/dnssec-tools-for-1.4.2/tools/donuts/rules/dns.errors.txt
   M /branches/dnssec-tools-for-1.4.2/tools/donuts/rules/dnssec.rules.txt
   M /branches/dnssec-tools-for-1.4.2/tools/donuts/rules/parent_child.rules.txt
   M /branches/dnssec-tools-for-1.4.2/tools/donuts/rules/recommendations.rules.txt
   M /trunk/dnssec-tools/tools/donuts/rules/check_nameservers.txt
   M /trunk/dnssec-tools/tools/donuts/rules/dns.errors.txt
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt
   M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt
   M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt

copyright year update
------------------------------------------------------------------------
r4297 | hardaker | 2009-01-27 09:50:23 -0500 (Tue, 27 Jan 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

allow for -s in SOA records
------------------------------------------------------------------------
r4296 | hardaker | 2009-01-26 16:48:52 -0500 (Mon, 26 Jan 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm
   M /trunk/dnssec-tools/tools/scripts/zonesigner

make nsec3salt support a random:64 type syntax for random salts of a particular length
------------------------------------------------------------------------
r4295 | hardaker | 2009-01-26 15:48:16 -0500 (Mon, 26 Jan 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm
   M /trunk/dnssec-tools/tools/scripts/dtinitconf
   M /trunk/dnssec-tools/tools/scripts/zonesigner

initial NSEC3 support for zonesigner
------------------------------------------------------------------------
r4293 | hardaker | 2009-01-22 18:45:13 -0500 (Thu, 22 Jan 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_query.c

move arpa/nameserv include higher since it's needed before the validator headers
------------------------------------------------------------------------
r4292 | hardaker | 2009-01-22 18:18:26 -0500 (Thu, 22 Jan 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow
   M /trunk/dnssec-tools/tools/mapper/mapper
   M /trunk/dnssec-tools/tools/scripts/blinkenlights
   M /trunk/dnssec-tools/tools/scripts/cleankrf
   M /trunk/dnssec-tools/tools/scripts/dtinitconf
   M /trunk/dnssec-tools/tools/scripts/fixkrf
   M /trunk/dnssec-tools/tools/scripts/genkrf
   M /trunk/dnssec-tools/tools/scripts/getdnskeys
   M /trunk/dnssec-tools/tools/scripts/lskrf
   M /trunk/dnssec-tools/tools/scripts/lsroll
   M /trunk/dnssec-tools/tools/scripts/rollchk
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/rollinit
   M /trunk/dnssec-tools/tools/scripts/rolllog
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor
   M /trunk/dnssec-tools/tools/scripts/rollset
   M /trunk/dnssec-tools/tools/scripts/signset-editor
   M /trunk/dnssec-tools/tools/scripts/tachk
   M /trunk/dnssec-tools/tools/scripts/trustman
   M /trunk/dnssec-tools/tools/scripts/zonesigner

local tool version update
------------------------------------------------------------------------
r4282 | hardaker | 2009-01-07 12:53:42 -0500 (Wed, 07 Jan 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/ns_parse.c
   M /trunk/dnssec-tools/validator/libsres/res_debug.c
   M /trunk/dnssec-tools/validator/libsres/res_support.h

rename ns_msg_getflag to libsres_msg_getflag to avoid tricky compiling issues
------------------------------------------------------------------------
r4281 | hardaker | 2009-01-07 11:22:50 -0500 (Wed, 07 Jan 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm

use getconfdir() to find named.conf instead of hard-code
------------------------------------------------------------------------
r4280 | hardaker | 2009-01-06 17:31:38 -0500 (Tue, 06 Jan 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm

copyright update
------------------------------------------------------------------------
r4279 | hardaker | 2009-01-06 17:24:56 -0500 (Tue, 06 Jan 2009) | 1 line
Changed paths:
   M /trunk/dnssec-tools/COPYING

update copyright for the near year
------------------------------------------------------------------------
r4278 | hardaker | 2008-12-31 13:18:32 -0500 (Wed, 31 Dec 2008) | 2 lines
Changed paths:
   M /
   M /trunk/dnssec-tools/tools/scripts/rollerd

added a -foreground option

------------------------------------------------------------------------
r4277 | hardaker | 2008-12-31 13:18:16 -0500 (Wed, 31 Dec 2008) | 2 lines
Changed paths:
   M /
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm
   M /trunk/dnssec-tools/tools/modules/rollrec.pm

fix filename typos; allow /perl/ to match rollerd processes

------------------------------------------------------------------------
r4276 | hardaker | 2008-12-31 13:17:57 -0500 (Wed, 31 Dec 2008) | 2 lines
Changed paths:
   M /
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm

move the unix sock location to /var as well

------------------------------------------------------------------------
r4275 | hardaker | 2008-12-31 13:17:37 -0500 (Wed, 31 Dec 2008) | 2 lines
Changed paths:
   M /
   M /trunk/dnssec-tools/tools/modules/rollrec.pm

switch the lock file to the statedir directory for alignment with modern unix expectations

------------------------------------------------------------------------
r4274 | hardaker | 2008-12-31 13:17:26 -0500 (Wed, 31 Dec 2008) | 2 lines
Changed paths:
   M /
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm
   M /trunk/dnssec-tools/tools/modules/rollrec.pm
   M /trunk/dnssec-tools/tools/scripts/rollerd

properly handle rollerd singlerun shutdowns; make sure read/writes of rollrec files don't repoduce handled cmd statements

------------------------------------------------------------------------
r4273 | hardaker | 2008-12-31 13:17:15 -0500 (Wed, 31 Dec 2008) | 2 lines
Changed paths:
   M /
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm
   M /trunk/dnssec-tools/tools/modules/rollrec.pm
   M /trunk/dnssec-tools/tools/scripts/rollerd

allow cmd statements to be put into the rollrec files for immediate execution of a command

------------------------------------------------------------------------
r4272 | hardaker | 2008-12-31 13:17:03 -0500 (Wed, 31 Dec 2008) | 2 lines
Changed paths:
   M /
   M /trunk/dnssec-tools/tools/scripts/rollerd

allow the pid file to be specified; allow a -singlerun option to indicate not to run as a daemon and do just one round of processing

------------------------------------------------------------------------
r4271 | hardaker | 2008-12-31 13:16:49 -0500 (Wed, 31 Dec 2008) | 2 lines
Changed paths:
   M /
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm

make the pid file settable and not just hard-coded

------------------------------------------------------------------------
r4270 | hardaker | 2008-12-31 13:16:40 -0500 (Wed, 31 Dec 2008) | 2 lines
Changed paths:
   M /
   M /trunk/dnssec-tools/tools/scripts/zonesigner

fix serial number incrementation with stricter matching

------------------------------------------------------------------------
r4269 | hardaker | 2008-12-31 13:16:24 -0500 (Wed, 31 Dec 2008) | 2 lines
Changed paths:
   M /
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow

allow svg, svgz and ps output

------------------------------------------------------------------------
r4266 | hardaker | 2008-12-16 13:43:47 -0500 (Tue, 16 Dec 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm
   M /trunk/dnssec-tools/tools/scripts/rollerd

Use descriptive text to describe rolling states from rollctl/rollerd output
------------------------------------------------------------------------
r4265 | hardaker | 2008-12-12 19:15:09 -0500 (Fri, 12 Dec 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf
   M /trunk/dnssec-tools/tools/scripts/rollinit

use real stdout file descriptors rather than a tty so scripts can properly redirect to a file if need be
------------------------------------------------------------------------
r4264 | hardaker | 2008-12-12 19:14:30 -0500 (Fri, 12 Dec 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

mention rollinit earlier in the documentation
------------------------------------------------------------------------
r4263 | hardaker | 2008-12-09 19:24:40 -0500 (Tue, 09 Dec 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/ns_parse.c

rename a variable so it doesn't conflict with the structure name with stricter compilers
------------------------------------------------------------------------
r4262 | hardaker | 2008-12-09 19:03:20 -0500 (Tue, 09 Dec 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/dist/Makefile.pp

more needed auto-include modules
------------------------------------------------------------------------
r4261 | hardaker | 2008-12-09 19:02:33 -0500 (Tue, 09 Dec 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

create System* commands to auto-print what's run when running in verbose
------------------------------------------------------------------------
r4260 | hardaker | 2008-12-09 19:01:06 -0500 (Tue, 09 Dec 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm

remove the - from -wax for bsd related systems
------------------------------------------------------------------------
r4259 | hardaker | 2008-12-04 18:53:19 -0500 (Thu, 04 Dec 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm

fix bug 2059932: increment proper number on set-number changes incase a zone contains a number in it
------------------------------------------------------------------------
r4258 | hardaker | 2008-12-04 18:14:02 -0500 (Thu, 04 Dec 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

patch from Ondrej Sury to honor specified zone checker command line options
------------------------------------------------------------------------
r4257 | hardaker | 2008-12-04 17:54:00 -0500 (Thu, 04 Dec 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/Makefile.in

patch from Ondrej Sury to fix the mkdir process for man page directories
------------------------------------------------------------------------
r4256 | hardaker | 2008-12-04 17:37:38 -0500 (Thu, 04 Dec 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

patch from Ondrej Sury to fix auto-serial number incrementing for SOAs without parens
------------------------------------------------------------------------
r4247 | hardaker | 2008-11-05 11:25:55 -0500 (Wed, 05 Nov 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/ssh/openssh-5.0p1-dnssec.patch
   M /trunk/dnssec-tools/apps/ssh/ssh-dnssec.pat

spelling fixes from Michael Sinatra
------------------------------------------------------------------------
r4246 | hardaker | 2008-10-21 10:42:06 -0400 (Tue, 21 Oct 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/mapper

add --node-style, --edge-style and --dump-styles options
------------------------------------------------------------------------
r4245 | hardaker | 2008-10-07 13:27:14 -0400 (Tue, 07 Oct 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm

version update
------------------------------------------------------------------------
r4244 | hardaker | 2008-10-07 13:27:02 -0400 (Tue, 07 Oct 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Changes

update
------------------------------------------------------------------------
r4243 | hardaker | 2008-10-07 13:20:41 -0400 (Tue, 07 Oct 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/ttl.t

fix a test case for broken seconds
------------------------------------------------------------------------
r4242 | hardaker | 2008-10-07 13:06:32 -0400 (Tue, 07 Oct 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm

fix CPAN bug #39360: die within an error handler actually will die appropriately
------------------------------------------------------------------------
r4239 | hserus | 2008-09-26 14:22:45 -0400 (Fri, 26 Sep 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_crypto.c

Fix buffer overflow problem. Still need to figure out how RSAMD5 keys need to be parsed. 


------------------------------------------------------------------------
r4238 | hserus | 2008-09-26 11:06:18 -0400 (Fri, 26 Sep 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_parse.c

Do some more sanity checking of input values

------------------------------------------------------------------------
r4236 | hardaker | 2008-09-17 13:00:54 -0400 (Wed, 17 Sep 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs.t

allow MX records to contain a . as the destination (indicating no mail delivery)
------------------------------------------------------------------------
r4233 | hardaker | 2008-09-01 15:10:59 -0400 (Mon, 01 Sep 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL

add getds
------------------------------------------------------------------------
r4232 | hardaker | 2008-09-01 15:07:37 -0400 (Mon, 01 Sep 2008) | 1 line
Changed paths:
   A /trunk/dnssec-tools/tools/scripts/getds

print DS records for a zone
------------------------------------------------------------------------
r4231 | hardaker | 2008-09-01 12:17:19 -0400 (Mon, 01 Sep 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm

fix pushing of questions onto stack
------------------------------------------------------------------------
r4230 | hardaker | 2008-08-27 18:11:00 -0400 (Wed, 27 Aug 2008) | 1 line
Changed paths:
   A /trunk/dnssec-tools/tools/donuts/dist/Makefile.pp

a script to create a self-contained binary for donuts
------------------------------------------------------------------------
r4229 | hardaker | 2008-08-27 18:10:36 -0400 (Wed, 27 Aug 2008) | 1 line
Changed paths:
   A /trunk/dnssec-tools/tools/donuts/dist

new dist directory for distribution tasks
------------------------------------------------------------------------
r4228 | hardaker | 2008-08-27 18:10:19 -0400 (Wed, 27 Aug 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

load the rules from the PAR archive if being run from a par archive
------------------------------------------------------------------------
r4225 | hardaker | 2008-08-14 13:53:40 -0400 (Thu, 14 Aug 2008) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.4/validator/configure
   M /branches/dnssec-tools-1.4/validator/configure.in
   M /branches/dnssec-tools-1.4/validator/include/validator-config.h.in
   M /branches/dnssec-tools-1.4/validator/libval_shim/libval_shim.c
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in
   M /trunk/dnssec-tools/validator/include/validator-config.h.in
   M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c

Add configure checks to test for gethostby* function conformance
------------------------------------------------------------------------
r4224 | hardaker | 2008-08-14 09:49:17 -0400 (Thu, 14 Aug 2008) | 1 line
Changed paths:
   M /branches/dnssec-tools-1.4/tools/modules/Net-DNS-SEC-Validator/Validator.xs
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs

Add the validator-config.h include for u_int* typedefs
------------------------------------------------------------------------
r4214 | hserus | 2008-07-22 10:01:21 -0400 (Tue, 22 Jul 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_support.c

Don't use random()

------------------------------------------------------------------------
r4213 | hserus | 2008-07-22 09:16:19 -0400 (Tue, 22 Jul 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.c
   M /trunk/dnssec-tools/validator/libsres/res_mkquery.c
   M /trunk/dnssec-tools/validator/libsres/res_support.c
   M /trunk/dnssec-tools/validator/libsres/res_support.h

Use random source port and transaction ids

------------------------------------------------------------------------
r4212 | hserus | 2008-07-09 17:08:06 -0400 (Wed, 09 Jul 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.c

Revert previous change. Code not ready for prime time.

------------------------------------------------------------------------
r4211 | hserus | 2008-07-09 15:52:17 -0400 (Wed, 09 Jul 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.c

Randomize the source port. Code is still not IPv6 safe. 

------------------------------------------------------------------------
r4210 | hserus | 2008-07-09 15:46:56 -0400 (Wed, 09 Jul 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/resolver.h

Add correct type code for nsec3

------------------------------------------------------------------------
r4209 | baerm | 2008-07-03 17:42:07 -0400 (Thu, 03 Jul 2008) | 4 lines
Changed paths:
   D /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0-dnssec-howto.txt
   A /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.x-dnssec-howto.txt (from /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0-dnssec-howto.txt:4208)


renaming how to for accuracy


------------------------------------------------------------------------
r4208 | baerm | 2008-07-03 17:41:33 -0400 (Thu, 03 Jul 2008) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0-dnssec-howto.txt
   D /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0_dnssec_patch.txt
   A /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.x_dnssec_patch.txt (from /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0_dnssec_patch.txt:4207)


Updated the text to match testing with the 3.2.1 ncftp software.


------------------------------------------------------------------------
r4207 | tewok | 2008-07-02 18:11:09 -0400 (Wed, 02 Jul 2008) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/README
   M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/README
   M /trunk/dnssec-tools/tools/demos/rollerd-subdirs/README


Added an explanation for the potential problem of the demo log not be
automatically displayed.

------------------------------------------------------------------------
r4206 | tewok | 2008-07-02 18:06:54 -0400 (Wed, 02 Jul 2008) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/rundemo
   M /trunk/dnssec-tools/tools/demos/rollerd-subdirs/rundemo


Mostly fix a hanging demo problem.
(If the error manifests, the demo still runs, but the log isn't displayed.)

------------------------------------------------------------------------
r4205 | tewok | 2008-07-02 17:49:21 -0400 (Wed, 02 Jul 2008) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/rundemo


Mostly fix a hanging demo problem.
(If the error manifests, the demo still runs, but the log isn't displayed.)

------------------------------------------------------------------------
r4204 | tewok | 2008-07-02 12:22:32 -0400 (Wed, 02 Jul 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Fix an important typo in the pod.

------------------------------------------------------------------------
r4203 | tewok | 2008-07-01 18:34:49 -0400 (Tue, 01 Jul 2008) | 9 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Reorganized commands:
	- Created ZSK Commands menu.
	- Moved "Roll Selected Zone's ZSK" and "Roll All Zones' ZSKs" into
	  the new ZSK Commands menu.

Renamed kskcmd() to kskcmds().
 

------------------------------------------------------------------------
r4202 | tewok | 2008-07-01 13:23:17 -0400 (Tue, 01 Jul 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Fixed a typo.

------------------------------------------------------------------------
r4201 | tewok | 2008-07-01 13:09:09 -0400 (Tue, 01 Jul 2008) | 4 lines
Changed paths:
   A /trunk/dnssec-tools/tools/demos/Makefile
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/Makefile
   M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/Makefile
   M /trunk/dnssec-tools/tools/demos/rollerd-subdirs/Makefile


Added a top-level demo makefile for cleaning and building the demos.
Modified the demo makefiles to obey their superior.

------------------------------------------------------------------------
r4200 | tewok | 2008-07-01 12:50:07 -0400 (Tue, 01 Jul 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-subdirs/save-demo.rollrec


Defining reality.

------------------------------------------------------------------------
r4199 | tewok | 2008-07-01 12:48:57 -0400 (Tue, 01 Jul 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/README


Fixed to reflect reality.

------------------------------------------------------------------------
r4198 | tewok | 2008-07-01 12:43:50 -0400 (Tue, 01 Jul 2008) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/Makefile
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/README
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/phaser
   A /trunk/dnssec-tools/tools/demos/rollerd-basic/rc.blinkenlights
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-demo.rollrec
   D /trunk/dnssec-tools/tools/demos/rollerd-basic/save-dummy.com


Modified whole demo to:
	- delete dummy.com
	- move all zones out of subdirectories and into current directory

There are now two zones:  example.com and test.com.  example.com starts as a
rolling zone; test.com starts as a skipped zone.

------------------------------------------------------------------------
r4197 | tewok | 2008-06-30 22:54:10 -0400 (Mon, 30 Jun 2008) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/demos/rollerd-subdirs
   A /trunk/dnssec-tools/tools/demos/rollerd-subdirs/Makefile
   A /trunk/dnssec-tools/tools/demos/rollerd-subdirs/README
   A /trunk/dnssec-tools/tools/demos/rollerd-subdirs/phaser
   A /trunk/dnssec-tools/tools/demos/rollerd-subdirs/rc.blinkenlights
   A /trunk/dnssec-tools/tools/demos/rollerd-subdirs/rundemo
   A /trunk/dnssec-tools/tools/demos/rollerd-subdirs/save-db.cache
   A /trunk/dnssec-tools/tools/demos/rollerd-subdirs/save-demo.rollrec
   A /trunk/dnssec-tools/tools/demos/rollerd-subdirs/save-dummy.com
   A /trunk/dnssec-tools/tools/demos/rollerd-subdirs/save-example.com
   A /trunk/dnssec-tools/tools/demos/rollerd-subdirs/save-test.com


Adding subdirectory-based demo.

------------------------------------------------------------------------
r4196 | tewok | 2008-06-30 16:36:04 -0400 (Mon, 30 Jun 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/rundemo


Fixed an option name.

------------------------------------------------------------------------
r4195 | tewok | 2008-06-30 16:35:38 -0400 (Mon, 30 Jun 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/Makefile


Added a phaser call for the small rollrec file.

------------------------------------------------------------------------
r4194 | tewok | 2008-06-30 16:31:51 -0400 (Mon, 30 Jun 2008) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/phaser
   M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-demo-smallset.rollrec
   M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-demo.rollrec


Fixed phasestart manipulation so The Right Thing would be done.


------------------------------------------------------------------------
r4193 | tewok | 2008-06-30 15:45:09 -0400 (Mon, 30 Jun 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/rundemo


Fixed an option name.

------------------------------------------------------------------------
r4192 | tewok | 2008-06-30 15:43:40 -0400 (Mon, 30 Jun 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/phaser


Added a bit of explanatory commenting.

------------------------------------------------------------------------
r4191 | tewok | 2008-06-30 15:42:29 -0400 (Mon, 30 Jun 2008) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-demo.rollrec


Fixed the phasestart lines for each zone so they'll be properly adjusted
by phaser at demo start.

------------------------------------------------------------------------
r4190 | tewok | 2008-06-27 16:44:23 -0400 (Fri, 27 Jun 2008) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor


Added editing of the zsargs field.


------------------------------------------------------------------------
r4189 | tewok | 2008-06-27 15:08:54 -0400 (Fri, 27 Jun 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor


Fixed a few minor comment errors.

------------------------------------------------------------------------
r4188 | tewok | 2008-06-27 13:13:11 -0400 (Fri, 27 Jun 2008) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollchk


Fixed a bug wherein a rollrec's directory wasn't being added to relative
paths for the file checks.

------------------------------------------------------------------------
r4187 | tewok | 2008-06-27 12:29:06 -0400 (Fri, 27 Jun 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollchk


Added checking for null zsargs.

------------------------------------------------------------------------
r4186 | tewok | 2008-06-26 21:52:34 -0400 (Thu, 26 Jun 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights
   M /trunk/dnssec-tools/tools/scripts/cleanarch
   M /trunk/dnssec-tools/tools/scripts/cleankrf
   M /trunk/dnssec-tools/tools/scripts/dtck
   M /trunk/dnssec-tools/tools/scripts/dtconf
   M /trunk/dnssec-tools/tools/scripts/dtconfchk
   M /trunk/dnssec-tools/tools/scripts/dtdefs
   M /trunk/dnssec-tools/tools/scripts/dtinitconf
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/fixkrf
   M /trunk/dnssec-tools/tools/scripts/genkrf
   M /trunk/dnssec-tools/tools/scripts/getdnskeys
   M /trunk/dnssec-tools/tools/scripts/keyarch
   M /trunk/dnssec-tools/tools/scripts/krfcheck
   M /trunk/dnssec-tools/tools/scripts/lskrf
   M /trunk/dnssec-tools/tools/scripts/lsroll
   M /trunk/dnssec-tools/tools/scripts/rollchk
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/rollinit
   M /trunk/dnssec-tools/tools/scripts/rolllog
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor
   M /trunk/dnssec-tools/tools/scripts/rollset
   M /trunk/dnssec-tools/tools/scripts/signset-editor
   M /trunk/dnssec-tools/tools/scripts/tachk
   M /trunk/dnssec-tools/tools/scripts/timetrans
   M /trunk/dnssec-tools/tools/scripts/trustman
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Brought consistency to option formatting in the pods.

------------------------------------------------------------------------
r4185 | tewok | 2008-06-26 15:49:21 -0400 (Thu, 26 Jun 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollset


Make pod option format consistent.

------------------------------------------------------------------------
r4184 | tewok | 2008-06-26 15:44:47 -0400 (Thu, 26 Jun 2008) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollset


Added -zsargs and -del-zsargs for handling the rollrec zsargs field.
Used a better method of determining that rollset was given something to do.


------------------------------------------------------------------------
r4183 | tewok | 2008-06-26 14:45:48 -0400 (Thu, 26 Jun 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm


Added zsargs to the list of valid rollrec fields.

------------------------------------------------------------------------
r4182 | tewok | 2008-06-25 22:09:32 -0400 (Wed, 25 Jun 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollinit


Added a message that zsargs can't be set by rollinit.

------------------------------------------------------------------------
r4181 | tewok | 2008-06-25 22:02:14 -0400 (Wed, 25 Jun 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll
   M /trunk/dnssec-tools/tools/scripts/rollinit


Fixed some "see also" references in the pod to be consistent with other files.

------------------------------------------------------------------------
r4180 | tewok | 2008-06-25 21:50:50 -0400 (Wed, 25 Jun 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pod


Modified for the zsargs entry.

------------------------------------------------------------------------
r4179 | tewok | 2008-06-25 21:27:46 -0400 (Wed, 25 Jun 2008) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Added the -zsargs argument for displaying the user-specified zonesigner
arguments.

------------------------------------------------------------------------
r4178 | tewok | 2008-06-23 11:29:44 -0400 (Mon, 23 Jun 2008) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Used much cleaner method of determining single command specification.
Fixed a function header.

------------------------------------------------------------------------
r4177 | tewok | 2008-06-20 17:31:35 -0400 (Fri, 20 Jun 2008) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Fixed the method of determining single command specification.  The previous
version didn't like text arguments.

------------------------------------------------------------------------
r4176 | tewok | 2008-06-20 10:08:31 -0400 (Fri, 20 Jun 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Remove -quiet and -version from the "one-argument-only" restriction.

------------------------------------------------------------------------
r4170 | tewok | 2008-06-19 19:45:53 -0400 (Thu, 19 Jun 2008) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Added pod describing the -zsargs option.


------------------------------------------------------------------------
r4169 | tewok | 2008-06-19 19:31:13 -0400 (Thu, 19 Jun 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Change the zsargs options arguments to expecting a leading '='.

------------------------------------------------------------------------
r4168 | tewok | 2008-06-19 19:12:19 -0400 (Thu, 19 Jun 2008) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Modified to only allow a single command per execution.


------------------------------------------------------------------------
r4167 | tewok | 2008-06-19 18:49:58 -0400 (Thu, 19 Jun 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Added the -zsargs command.

------------------------------------------------------------------------
r4166 | tewok | 2008-06-19 18:39:32 -0400 (Thu, 19 Jun 2008) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Added support for ROLLCMD_ZSARGS.
Added pod for all ROLLCMD_ commands.


------------------------------------------------------------------------
r4165 | tewok | 2008-06-19 18:17:18 -0400 (Thu, 19 Jun 2008) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Added support for the -zsargs command from rollctl.  This entailed added code
for handling the ROLLCMD_ZSARGS command and for digging up the "zsargs" field
from a rollrec entry.
 

------------------------------------------------------------------------
r4163 | hardaker | 2008-06-18 18:06:35 -0400 (Wed, 18 Jun 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/ChangeLog

Update for verison 1.4
------------------------------------------------------------------------
r4162 | hardaker | 2008-06-18 18:03:41 -0400 (Wed, 18 Jun 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/dist/makerelease.xml
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow
   M /trunk/dnssec-tools/tools/donuts/donuts
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone
   M /trunk/dnssec-tools/tools/mapper/mapper
   M /trunk/dnssec-tools/tools/scripts/blinkenlights
   M /trunk/dnssec-tools/tools/scripts/cleanarch
   M /trunk/dnssec-tools/tools/scripts/cleankrf
   M /trunk/dnssec-tools/tools/scripts/dtck
   M /trunk/dnssec-tools/tools/scripts/dtconf
   M /trunk/dnssec-tools/tools/scripts/dtconfchk
   M /trunk/dnssec-tools/tools/scripts/dtdefs
   M /trunk/dnssec-tools/tools/scripts/dtinitconf
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/fixkrf
   M /trunk/dnssec-tools/tools/scripts/genkrf
   M /trunk/dnssec-tools/tools/scripts/getdnskeys
   M /trunk/dnssec-tools/tools/scripts/keyarch
   M /trunk/dnssec-tools/tools/scripts/krfcheck
   M /trunk/dnssec-tools/tools/scripts/lskrf
   M /trunk/dnssec-tools/tools/scripts/lsroll
   M /trunk/dnssec-tools/tools/scripts/rollchk
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/rollinit
   M /trunk/dnssec-tools/tools/scripts/rolllog
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor
   M /trunk/dnssec-tools/tools/scripts/rollset
   M /trunk/dnssec-tools/tools/scripts/signset-editor
   M /trunk/dnssec-tools/tools/scripts/tachk
   M /trunk/dnssec-tools/tools/scripts/timetrans
   M /trunk/dnssec-tools/tools/scripts/trustman
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Update Version Number: 1.4
------------------------------------------------------------------------
r4161 | hserus | 2008-06-18 17:12:03 -0400 (Wed, 18 Jun 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/Makefile.in

Add getname objects to the list of files to be cleaned up 

------------------------------------------------------------------------
r4160 | hserus | 2008-06-18 16:42:28 -0400 (Wed, 18 Jun 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

Initialize retval to NO_ERROR to keep compiler happy

------------------------------------------------------------------------
r4159 | hserus | 2008-06-18 16:36:16 -0400 (Wed, 18 Jun 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/configure

Use autoconf version 2.59 to generate the configure script

------------------------------------------------------------------------
r4158 | hardaker | 2008-06-18 16:28:08 -0400 (Wed, 18 Jun 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in

use 2.59 and remove double target check
------------------------------------------------------------------------
r4157 | hserus | 2008-06-18 16:25:48 -0400 (Wed, 18 Jun 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/configure

Use autoconf 2.59 to create configure script

------------------------------------------------------------------------
r4156 | hardaker | 2008-06-18 16:21:11 -0400 (Wed, 18 Jun 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/Makefile.in

honor datarootdir
------------------------------------------------------------------------
r4155 | hardaker | 2008-06-18 16:18:10 -0400 (Wed, 18 Jun 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/Makefile.top

honor datarootdir
------------------------------------------------------------------------
r4154 | hardaker | 2008-06-18 16:09:18 -0400 (Wed, 18 Jun 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/dist/makerelease.xml

proper version check; attempt 3
------------------------------------------------------------------------
r4153 | hardaker | 2008-06-18 16:00:23 -0400 (Wed, 18 Jun 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/dist/makerelease.xml

proper version check; attempt 2
------------------------------------------------------------------------
r4152 | hardaker | 2008-06-18 15:48:39 -0400 (Wed, 18 Jun 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/dist/makerelease.xml

proper version check
------------------------------------------------------------------------
r4151 | hardaker | 2008-06-18 13:06:54 -0400 (Wed, 18 Jun 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/configure.in

add help options for arguments passed to the validator's config file
------------------------------------------------------------------------
r4150 | tewok | 2008-06-17 18:05:39 -0400 (Tue, 17 Jun 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Fixed a few spacing issues.

------------------------------------------------------------------------
r4149 | hardaker | 2008-06-11 19:27:56 -0400 (Wed, 11 Jun 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs

return straight chars instead of const for sun compatability
------------------------------------------------------------------------
r4148 | hardaker | 2008-06-11 18:02:18 -0400 (Wed, 11 Jun 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

define getprogname for solaris
------------------------------------------------------------------------
r4147 | hardaker | 2008-06-11 17:06:50 -0400 (Wed, 11 Jun 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c

allow for other types of _r functions to be overridden depending on the system type
------------------------------------------------------------------------
r4146 | hardaker | 2008-06-11 17:05:50 -0400 (Wed, 11 Jun 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval_shim/Makefile.in

include LDFLAGS in the shim compilation
------------------------------------------------------------------------
r4145 | hardaker | 2008-06-11 17:05:05 -0400 (Wed, 11 Jun 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in

define a -D flag for setting the operating system type we're compiling for
------------------------------------------------------------------------
r4144 | hardaker | 2008-06-06 19:58:50 -0400 (Fri, 06 Jun 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c

include the validator config file so it picks up the typedefs being used
------------------------------------------------------------------------
r4143 | hserus | 2008-06-04 08:36:24 -0400 (Wed, 04 Jun 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Continue to operate if included file does not exist

------------------------------------------------------------------------
r4142 | hserus | 2008-06-03 19:42:59 -0400 (Tue, 03 Jun 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c

create a default context if function argument is NULL

------------------------------------------------------------------------
r4141 | hserus | 2008-06-03 19:39:40 -0400 (Tue, 03 Jun 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_get_rrset.c
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

create a default context if function argument is NULL

------------------------------------------------------------------------
r4140 | hserus | 2008-06-03 19:37:11 -0400 (Tue, 03 Jun 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

- create a default context if function argument is NULL

------------------------------------------------------------------------
r4139 | hserus | 2008-06-03 19:31:45 -0400 (Tue, 03 Jun 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

NULL check

------------------------------------------------------------------------
r4138 | hserus | 2008-06-03 19:30:48 -0400 (Tue, 03 Jun 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.14.1_dnssec_patch.txt

fix indentation

------------------------------------------------------------------------
r4137 | hardaker | 2008-06-03 18:10:34 -0400 (Tue, 03 Jun 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

-h ouput for -T
------------------------------------------------------------------------
r4136 | hardaker | 2008-06-03 17:18:45 -0400 (Tue, 03 Jun 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

document the -T flag
------------------------------------------------------------------------
r4135 | hardaker | 2008-06-03 17:09:08 -0400 (Tue, 03 Jun 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

yet more code aggregation for better parsing
------------------------------------------------------------------------
r4134 | hardaker | 2008-06-03 15:34:29 -0400 (Tue, 03 Jun 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

send notification on death
------------------------------------------------------------------------
r4133 | hardaker | 2008-06-03 15:27:37 -0400 (Tue, 03 Jun 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

remove debugging comments
------------------------------------------------------------------------
r4132 | hardaker | 2008-06-03 15:26:23 -0400 (Tue, 03 Jun 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

more usage of common infrastructure for parsing dnsval.conf file
------------------------------------------------------------------------
r4131 | hardaker | 2008-06-03 14:05:01 -0400 (Tue, 03 Jun 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

better deal with leading comments
------------------------------------------------------------------------
r4130 | hardaker | 2008-06-03 13:53:06 -0400 (Tue, 03 Jun 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

reset the record separator
------------------------------------------------------------------------
r4129 | hardaker | 2008-06-03 12:42:05 -0400 (Tue, 03 Jun 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

merge tepm file handling into a single location; make it try and use the same directory by default
------------------------------------------------------------------------
r4128 | hserus | 2008-05-30 10:54:44 -0400 (Fri, 30 May 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Set correct defaults for val_astatus_t and val_status_t

------------------------------------------------------------------------
r4127 | hserus | 2008-05-30 10:54:13 -0400 (Fri, 30 May 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/getaddr.1
   M /trunk/dnssec-tools/validator/doc/gethost.1
   M /trunk/dnssec-tools/validator/doc/getname.1
   M /trunk/dnssec-tools/validator/doc/libsres.3
   M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.3
   M /trunk/dnssec-tools/validator/doc/val_gethostbyname.3
   M /trunk/dnssec-tools/validator/doc/val_res_query.3
   M /trunk/dnssec-tools/validator/doc/validate.1

Add man files corresponding to the changed pod

------------------------------------------------------------------------
r4126 | hserus | 2008-05-29 15:24:40 -0400 (Thu, 29 May 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

Reorder values for VAL_QUERY_DONT_VALIDATE and VAL_QUERY_NO_AC_DETAIL

------------------------------------------------------------------------
r4123 | hardaker | 2008-05-28 19:40:40 -0400 (Wed, 28 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/ssh/README.ssh
   A /trunk/dnssec-tools/apps/ssh/openssh-5.0p1-dnssec.patch

added a patch for 5.0p1
------------------------------------------------------------------------
r4122 | hardaker | 2008-05-27 18:29:18 -0400 (Tue, 27 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/doc/Makefile.in

clean up whitespace
------------------------------------------------------------------------
r4121 | hardaker | 2008-05-27 18:28:33 -0400 (Tue, 27 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/Makefile.in

use DESTDIR for installing man pages
------------------------------------------------------------------------
r4120 | hardaker | 2008-05-27 14:41:54 -0400 (Tue, 27 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/NEWS

NEWS update
------------------------------------------------------------------------
r4119 | hardaker | 2008-05-27 14:41:48 -0400 (Tue, 27 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/dist/makerelease.xml

use rsync for uploading files; use svn log -v
------------------------------------------------------------------------
r4118 | hardaker | 2008-05-27 14:41:24 -0400 (Tue, 27 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/ChangeLog

verbose mode for svn log
------------------------------------------------------------------------
r4117 | hserus | 2008-05-27 12:57:18 -0400 (Tue, 27 May 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

version submitted as draft-hayatnagarkar-dnsext-validator-api-06

------------------------------------------------------------------------
r4116 | hserus | 2008-05-26 18:15:18 -0400 (Mon, 26 May 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

More tweaks to API

------------------------------------------------------------------------
r4114 | hardaker | 2008-05-26 13:29:57 -0400 (Mon, 26 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/ChangeLog

Update for verison 1.4.rc1
------------------------------------------------------------------------
r4113 | hardaker | 2008-05-26 13:27:01 -0400 (Mon, 26 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rr-dnssec.t

update to fix a recent RRSIG test to include the trailing dot
------------------------------------------------------------------------
r4112 | hardaker | 2008-05-26 13:12:42 -0400 (Mon, 26 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/dist/makerelease.xml
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow
   M /trunk/dnssec-tools/tools/donuts/donuts
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone
   M /trunk/dnssec-tools/tools/mapper/mapper
   M /trunk/dnssec-tools/tools/scripts/blinkenlights
   M /trunk/dnssec-tools/tools/scripts/cleanarch
   M /trunk/dnssec-tools/tools/scripts/cleankrf
   M /trunk/dnssec-tools/tools/scripts/dtck
   M /trunk/dnssec-tools/tools/scripts/dtconf
   M /trunk/dnssec-tools/tools/scripts/dtconfchk
   M /trunk/dnssec-tools/tools/scripts/dtdefs
   M /trunk/dnssec-tools/tools/scripts/dtinitconf
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/fixkrf
   M /trunk/dnssec-tools/tools/scripts/genkrf
   M /trunk/dnssec-tools/tools/scripts/getdnskeys
   M /trunk/dnssec-tools/tools/scripts/keyarch
   M /trunk/dnssec-tools/tools/scripts/krfcheck
   M /trunk/dnssec-tools/tools/scripts/lskrf
   M /trunk/dnssec-tools/tools/scripts/lsroll
   M /trunk/dnssec-tools/tools/scripts/rollchk
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/rollinit
   M /trunk/dnssec-tools/tools/scripts/rolllog
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor
   M /trunk/dnssec-tools/tools/scripts/rollset
   M /trunk/dnssec-tools/tools/scripts/signset-editor
   M /trunk/dnssec-tools/tools/scripts/tachk
   M /trunk/dnssec-tools/tools/scripts/timetrans
   M /trunk/dnssec-tools/tools/scripts/trustman
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Update Version Number: 1.4.rc1
------------------------------------------------------------------------
r4111 | hardaker | 2008-05-26 13:04:32 -0400 (Mon, 26 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/dist/makerelease.xml

typo
------------------------------------------------------------------------
r4110 | hardaker | 2008-05-26 11:35:40 -0400 (Mon, 26 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm
   M /trunk/dnssec-tools/tools/donuts/donuts
   M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm
   M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm
   M /trunk/dnssec-tools/tools/modules/keyrec.pm
   M /trunk/dnssec-tools/tools/modules/rolllog.pm
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm
   M /trunk/dnssec-tools/tools/scripts/blinkenlights
   M /trunk/dnssec-tools/tools/scripts/dtinitconf
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/trustman
   M /trunk/dnssec-tools/tools/scripts/zonesigner

app specific version number update
------------------------------------------------------------------------
r4109 | hardaker | 2008-05-26 11:24:21 -0400 (Mon, 26 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/docs/dnssec-tools.1

add link to the tutorials page
------------------------------------------------------------------------
r4108 | hardaker | 2008-05-26 11:17:03 -0400 (Mon, 26 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/configure.in
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in

version number update
------------------------------------------------------------------------
r4107 | hardaker | 2008-05-26 11:14:28 -0400 (Mon, 26 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/Makefile.top

update libtool version
------------------------------------------------------------------------
r4106 | hardaker | 2008-05-26 11:09:12 -0400 (Mon, 26 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/INSTALL
   M /trunk/dnssec-tools/README
   M /trunk/dnssec-tools/apps/README
   M /trunk/dnssec-tools/apps/mozilla/README
   M /trunk/dnssec-tools/apps/mozilla/README.firefox
   M /trunk/dnssec-tools/apps/mozilla/README.thunderbird
   M /trunk/dnssec-tools/apps/mozilla/spfdnssec/README
   M /trunk/dnssec-tools/apps/mozilla/spfdnssec/content/spfdnssec/spfDnssecOverlay.js
   M /trunk/dnssec-tools/apps/mozilla/spfdnssec/content/spfdnssec/spfDnssecOverlay.xul
   M /trunk/dnssec-tools/apps/sendmail/README
   M /trunk/dnssec-tools/podmantex
   M /trunk/dnssec-tools/podtrans
   M /trunk/dnssec-tools/validator/README
   M /trunk/dnssec-tools/validator/apps/README
   M /trunk/dnssec-tools/validator/apps/getaddr.c
   M /trunk/dnssec-tools/validator/apps/gethost.c
   M /trunk/dnssec-tools/validator/apps/getname.c
   M /trunk/dnssec-tools/validator/apps/libval_check_conf.c
   M /trunk/dnssec-tools/validator/apps/validator_driver.c
   M /trunk/dnssec-tools/validator/apps/validator_driver.h
   M /trunk/dnssec-tools/validator/doc/README
   M /trunk/dnssec-tools/validator/doc/getaddr.pod
   M /trunk/dnssec-tools/validator/doc/gethost.pod
   M /trunk/dnssec-tools/validator/doc/getname.pod
   M /trunk/dnssec-tools/validator/doc/libsres-implementation-notes
   M /trunk/dnssec-tools/validator/doc/libsres.pod
   M /trunk/dnssec-tools/validator/doc/libval-implementation-notes
   M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.pod
   M /trunk/dnssec-tools/validator/doc/val_gethostbyname.pod
   M /trunk/dnssec-tools/validator/doc/val_res_query.pod
   M /trunk/dnssec-tools/validator/doc/validate.pod
   M /trunk/dnssec-tools/validator/etc/README
   M /trunk/dnssec-tools/validator/include/validator/resolver.h
   M /trunk/dnssec-tools/validator/include/validator/val_errors.h
   M /trunk/dnssec-tools/validator/include/validator/validator-internal.h
   M /trunk/dnssec-tools/validator/include/validator/validator.h
   M /trunk/dnssec-tools/validator/libsres/README
   M /trunk/dnssec-tools/validator/libsres/res_mkquery.h
   M /trunk/dnssec-tools/validator/libsres/res_query.c
   M /trunk/dnssec-tools/validator/libsres/res_support.c
   M /trunk/dnssec-tools/validator/libsres/res_support.h
   M /trunk/dnssec-tools/validator/libval/README
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_assertion.h
   M /trunk/dnssec-tools/validator/libval/val_cache.c
   M /trunk/dnssec-tools/validator/libval/val_cache.h
   M /trunk/dnssec-tools/validator/libval/val_context.c
   M /trunk/dnssec-tools/validator/libval/val_context.h
   M /trunk/dnssec-tools/validator/libval/val_crypto.c
   M /trunk/dnssec-tools/validator/libval/val_crypto.h
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/validator/libval/val_log.c
   M /trunk/dnssec-tools/validator/libval/val_parse.c
   M /trunk/dnssec-tools/validator/libval/val_parse.h
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.h
   M /trunk/dnssec-tools/validator/libval/val_support.c
   M /trunk/dnssec-tools/validator/libval/val_support.h
   M /trunk/dnssec-tools/validator/libval/val_verify.c
   M /trunk/dnssec-tools/validator/libval/val_verify.h
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

copyright updates
------------------------------------------------------------------------
r4105 | hardaker | 2008-05-26 11:01:25 -0400 (Mon, 26 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/NEWS

beginning of NEWS update
------------------------------------------------------------------------
r4104 | hardaker | 2008-05-26 10:50:02 -0400 (Mon, 26 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm
   M /trunk/dnssec-tools/tools/scripts/tachk

copyright updates
------------------------------------------------------------------------
r4103 | hardaker | 2008-05-26 10:40:48 -0400 (Mon, 26 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/demos/README
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/phaser
   M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/Makefile
   M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/README
   M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/phaser
   M /trunk/dnssec-tools/tools/donuts/rules/check_nameservers.txt
   M /trunk/dnssec-tools/tools/donuts/rules/dns.errors.txt
   M /trunk/dnssec-tools/tools/drawvalmap/Makefile.PL
   M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap
   M /trunk/dnssec-tools/tools/etc/Makefile.PL
   M /trunk/dnssec-tools/tools/etc/dnssec-tools/blinkenlights.conf.pod
   M /trunk/dnssec-tools/tools/modules/BootStrap.pm
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/README
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.xs
   M /trunk/dnssec-tools/tools/modules/rollrec.pm
   M /trunk/dnssec-tools/tools/scripts/dtdefs
   M /trunk/dnssec-tools/tools/scripts/rolllog

copyright updates
------------------------------------------------------------------------
r4102 | hardaker | 2008-05-26 10:38:09 -0400 (Mon, 26 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/README
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/Makefile
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/README
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/rundemo
   M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/rundemo
   M /trunk/dnssec-tools/tools/dnspktflow/Makefile.PL
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow
   M /trunk/dnssec-tools/tools/donuts/Makefile.PL
   M /trunk/dnssec-tools/tools/donuts/Rule.pm
   M /trunk/dnssec-tools/tools/donuts/donutsd
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt
   M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt
   M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt
   M /trunk/dnssec-tools/tools/etc/README
   M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod
   M /trunk/dnssec-tools/tools/linux/ifup-dyn-dns/README
   M /trunk/dnssec-tools/tools/logwatch/README
   M /trunk/dnssec-tools/tools/maketestzone/Makefile.PL
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone
   M /trunk/dnssec-tools/tools/mapper/Makefile.PL
   M /trunk/dnssec-tools/tools/mapper/mapper
   M /trunk/dnssec-tools/tools/modules/Makefile.PL
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs
   M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm
   M /trunk/dnssec-tools/tools/modules/README
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm
   M /trunk/dnssec-tools/tools/modules/conf.pm.in
   M /trunk/dnssec-tools/tools/modules/defaults.pm
   M /trunk/dnssec-tools/tools/modules/dnssectools.pm
   M /trunk/dnssec-tools/tools/modules/keyrec.pm
   M /trunk/dnssec-tools/tools/modules/keyrec.pod
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm
   M /trunk/dnssec-tools/tools/modules/rollrec.pm
   M /trunk/dnssec-tools/tools/modules/rollrec.pod
   M /trunk/dnssec-tools/tools/modules/tests/Makefile.PL
   M /trunk/dnssec-tools/tools/modules/tests/test-conf
   M /trunk/dnssec-tools/tools/modules/tests/test-keyrec
   M /trunk/dnssec-tools/tools/modules/tests/test-rollmgr
   M /trunk/dnssec-tools/tools/modules/tests/test-rollrec
   M /trunk/dnssec-tools/tools/modules/tests/test-timetrans
   M /trunk/dnssec-tools/tools/modules/tests/test-toolopts1
   M /trunk/dnssec-tools/tools/modules/tests/test-toolopts2
   M /trunk/dnssec-tools/tools/modules/tests/test-toolopts3
   M /trunk/dnssec-tools/tools/modules/timetrans.pm
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL
   M /trunk/dnssec-tools/tools/scripts/README
   M /trunk/dnssec-tools/tools/scripts/blinkenlights
   M /trunk/dnssec-tools/tools/scripts/cleanarch
   M /trunk/dnssec-tools/tools/scripts/cleankrf
   M /trunk/dnssec-tools/tools/scripts/dtck
   M /trunk/dnssec-tools/tools/scripts/dtconf
   M /trunk/dnssec-tools/tools/scripts/dtconfchk
   M /trunk/dnssec-tools/tools/scripts/dtinitconf
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/fixkrf
   M /trunk/dnssec-tools/tools/scripts/genkrf
   M /trunk/dnssec-tools/tools/scripts/keyarch
   M /trunk/dnssec-tools/tools/scripts/krfcheck
   M /trunk/dnssec-tools/tools/scripts/lskrf
   M /trunk/dnssec-tools/tools/scripts/lsroll
   M /trunk/dnssec-tools/tools/scripts/rollchk
   M /trunk/dnssec-tools/tools/scripts/rollinit
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor
   M /trunk/dnssec-tools/tools/scripts/rollset
   M /trunk/dnssec-tools/tools/scripts/signset-editor
   M /trunk/dnssec-tools/tools/scripts/tests/README
   M /trunk/dnssec-tools/tools/scripts/tests/test-kskroll
   M /trunk/dnssec-tools/tools/scripts/timetrans
   M /trunk/dnssec-tools/tools/scripts/trustman

copyright updates
------------------------------------------------------------------------
r4101 | hardaker | 2008-05-23 10:05:45 -0400 (Fri, 23 May 2008) | 1 line
Changed paths:
   A /trunk/dnssec-tools/apps/mozilla/dnssec-both-ff3.0.patch
   A /trunk/dnssec-tools/apps/mozilla/dnssec-firefox-ff3.0.patch

initial patches for firefox3; not enirely working yet
------------------------------------------------------------------------
r4100 | hserus | 2008-05-22 22:13:41 -0400 (Thu, 22 May 2008) | 10 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_assertion.h
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

* Create function for resetting query params so that it will use EDNS0 
  the next time it sends out the query
* Set EDNS0 in find_nslist_for_query() in ask_resolver(). Set EDNS0 when we are
  looking for some DNSSEC meta-data or if the zone expection is validation. 
* Reissue query with EDNS0 if a negative response was returned by a zone 
  that was authoritative for both parent and child, but only child had a
  zone security expectation of validate
* Do not reissue query for positive answers, since this can mess up cname
  chains 

------------------------------------------------------------------------
r4099 | hserus | 2008-05-22 22:00:50 -0400 (Thu, 22 May 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/resolver.h

Add macro to identify DNSSEC meta-data query types

------------------------------------------------------------------------
r4098 | hardaker | 2008-05-22 19:41:14 -0400 (Thu, 22 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-xs.inc

constants update from the validator header file
------------------------------------------------------------------------
r4097 | tewok | 2008-05-21 22:30:30 -0400 (Wed, 21 May 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/rc.blinkenlights


Adjusted the fontsize.

------------------------------------------------------------------------
r4096 | tewok | 2008-05-21 22:30:13 -0400 (Wed, 21 May 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/README
   M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/README


Changed references of "-rollzone" to "-rollzsk".

------------------------------------------------------------------------
r4095 | tewok | 2008-05-21 22:29:11 -0400 (Wed, 21 May 2008) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Added the ROLLCMD_RC_KSKROLL and ROLLCMD_RC_ZSKROLL return codes.
Renamed the rollcmd_rollall() to rollcmd_rollallzsks().


------------------------------------------------------------------------
r4094 | tewok | 2008-05-21 22:26:54 -0400 (Wed, 21 May 2008) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Added support for the "rollksk" command.
Adjusted spacing for option sets.
Renamed the "rollall" command to "rollallzsks".

------------------------------------------------------------------------
r4093 | tewok | 2008-05-21 22:23:55 -0400 (Wed, 21 May 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/runtest


Renamed the -loglvl option to -loglevel.

------------------------------------------------------------------------
r4092 | tewok | 2008-05-21 22:22:37 -0400 (Wed, 21 May 2008) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Renamed cmd_rollall() to cmd_rollallzsks().
Added an error check after keyrec_fullrec().

------------------------------------------------------------------------
r4091 | tewok | 2008-05-21 22:20:34 -0400 (Wed, 21 May 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Renamed the "rollall" command to "rollallzsks".

------------------------------------------------------------------------
r4090 | hardaker | 2008-05-21 19:51:59 -0400 (Wed, 21 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/dist/makerelease.xml

add note saying website needs updating
------------------------------------------------------------------------
r4089 | hardaker | 2008-05-21 19:42:43 -0400 (Wed, 21 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

use proper tempfile creation
------------------------------------------------------------------------
r4088 | tewok | 2008-05-20 21:14:22 -0400 (Tue, 20 May 2008) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Collapsed cmd_rollksk() and cmd_rollzsk() into cmd_rollnow().
 

------------------------------------------------------------------------
r4087 | tewok | 2008-05-20 18:29:39 -0400 (Tue, 20 May 2008) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Renamed rollzsk() to rollnow().

Modified rollnow() (nee rollzsk()) to do either KSK or ZSK rollovers,
depending on the key-type argument.

Allow user-initiated KSK rollovers.

------------------------------------------------------------------------
r4086 | tewok | 2008-05-20 14:09:21 -0400 (Tue, 20 May 2008) | 11 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Clarified header comment for cmd_rollall().

Added code to cmd_rollzsk() to disallow a rollksk command or additional
rollzsk commands while in ZSK rollover. 

Added cmd_rollksk() to handle the rollksk command.

Added rollksk() stub to (eventually) provide support for the rollksk command.


------------------------------------------------------------------------
r4085 | hserus | 2008-05-20 12:53:29 -0400 (Tue, 20 May 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/dnsval.conf.3
   M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod

Add a note that, for DLV, zones should not be marked trusted or untrusted

------------------------------------------------------------------------
r4084 | hserus | 2008-05-20 12:48:51 -0400 (Tue, 20 May 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Don't do DLV validation if we've explicitly marked a zone as trusted or untrusted

------------------------------------------------------------------------
r4083 | tewok | 2008-05-19 17:37:29 -0400 (Mon, 19 May 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Renamed a bunch of "rollzone" references to "rollzsk".

------------------------------------------------------------------------
r4082 | tewok | 2008-05-19 17:36:34 -0400 (Mon, 19 May 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Renamed "-rollzone" to "-rollzsk".

------------------------------------------------------------------------
r4081 | tewok | 2008-05-19 16:14:01 -0400 (Mon, 19 May 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Renamed the "rollzone" command to "rollzsk".

------------------------------------------------------------------------
r4080 | tewok | 2008-05-19 15:41:00 -0400 (Mon, 19 May 2008) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights

Changed use of "rollctl -rollzone" to "rollctl -rollzsk".  Several routines
also changed name as a result of this.

Moved the code to find the path of rollctl to before it's used.

Gave the -q option to a rollctl execution.
 

------------------------------------------------------------------------
r4079 | hserus | 2008-05-19 14:31:36 -0400 (Mon, 19 May 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Expand environment variables in the dnsval.conf "include" line

------------------------------------------------------------------------
r4078 | hardaker | 2008-05-19 14:24:36 -0400 (Mon, 19 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

don't require spaces
------------------------------------------------------------------------
r4077 | tewok | 2008-05-18 21:38:34 -0400 (Sun, 18 May 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Fixed a bit of the help message.

------------------------------------------------------------------------
r4076 | tewok | 2008-05-17 11:47:20 -0400 (Sat, 17 May 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Ensure that rollerd is actually running prior to sending a command.

------------------------------------------------------------------------
r4075 | tewok | 2008-05-17 11:33:28 -0400 (Sat, 17 May 2008) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Added the rollmgr_running() interface and pod to determine when rollerd is
running.

------------------------------------------------------------------------
r4074 | tewok | 2008-05-16 16:23:07 -0400 (Fri, 16 May 2008) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Modified the -loglevel option so that a list of valid options is printed if
the new level isn't specified.

------------------------------------------------------------------------
r4073 | tewok | 2008-05-16 14:38:26 -0400 (Fri, 16 May 2008) | 10 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/Makefile
   M /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/README
   M /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/runtest


Folded the phaser script into runtest.

Moved some of the pre-defined tests from Makefile into runtest.

Added new options to runtest:  -ttl, -ksklife, -zsklife, -short,
-medium, and -long.

Updated README to reflect the above changes.

------------------------------------------------------------------------
r4072 | hardaker | 2008-05-15 19:33:12 -0400 (Thu, 15 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

allow -w to use a special -42 value for immediate; add --nomail to the help output; fix parsing of the dnsval.conf file when adding new entries
------------------------------------------------------------------------
r4071 | hserus | 2008-05-15 14:30:48 -0400 (Thu, 15 May 2008) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

Don't simply remove *all* semicolons. 
This would result in config file errors if the dnsval.conf file contains other (non key) policy constructs.


------------------------------------------------------------------------
r4070 | hardaker | 2008-05-14 22:12:01 -0400 (Wed, 14 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc

new constants updates
------------------------------------------------------------------------
r4069 | hardaker | 2008-05-14 19:19:51 -0400 (Wed, 14 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_selftest.c

changed failure wording to use succeeded instead
------------------------------------------------------------------------
r4068 | hserus | 2008-05-14 18:48:14 -0400 (Wed, 14 May 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/NEWS

Add some news snippets

------------------------------------------------------------------------
r4067 | hserus | 2008-05-14 18:47:13 -0400 (Wed, 14 May 2008) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.14.1_dnssec_patch.txt

Fix bug that causes sendmail to crash. Still need to figure out why sendmail
insists on queuing email that fails validation checks instead of dropping these
emails.


------------------------------------------------------------------------
r4066 | tewok | 2008-05-14 16:32:04 -0400 (Wed, 14 May 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/Makefile


Changed to have three test cases of varying lengths.

------------------------------------------------------------------------
r4065 | tewok | 2008-05-14 16:30:39 -0400 (Wed, 14 May 2008) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/save-example.com


Change the hard-coded TTL value to a placeholder that will be changed by
the makefile.

------------------------------------------------------------------------
r4064 | baerm | 2008-05-12 20:34:16 -0400 (Mon, 12 May 2008) | 4 lines
Changed paths:
   A /trunk/dnssec-tools/apps/postfix/postfix-libspf2-howto.txt (from /trunk/dnssec-tools/apps/postfix/postfix-spf-howto.txt:4063)
   D /trunk/dnssec-tools/apps/postfix/postfix-spf-howto.txt


renaming again to even better describe this file :).


------------------------------------------------------------------------
r4063 | baerm | 2008-05-12 20:33:24 -0400 (Mon, 12 May 2008) | 3 lines
Changed paths:
   D /trunk/dnssec-tools/apps/postfix/postfix-howto.txt
   A /trunk/dnssec-tools/apps/postfix/postfix-spf-howto.txt (from /trunk/dnssec-tools/apps/postfix/postfix-howto.txt:4062)

changing the postfix howto name for spf to be more descriptive
it's going to change in again, sigh.

------------------------------------------------------------------------
r4062 | baerm | 2008-05-12 20:29:51 -0400 (Mon, 12 May 2008) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/apps/postfix/postfix-howto.txt


Updated the libspf2 postfix instructions to reflect a new patch
that works with the current 2.5.1 version of postfix.


------------------------------------------------------------------------
r4061 | hserus | 2008-05-12 14:32:04 -0400 (Mon, 12 May 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

Return non-existence status codes when available

------------------------------------------------------------------------
r4060 | hserus | 2008-05-12 14:29:01 -0400 (Mon, 12 May 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/getquery.c

Print validation status value

------------------------------------------------------------------------
r4059 | hserus | 2008-05-12 13:31:01 -0400 (Mon, 12 May 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c

Use val_does_not_exist() instead of checking for proof count (which may be 0 when no authentication chain details are returned)

------------------------------------------------------------------------
r4058 | tewok | 2008-05-12 12:01:51 -0400 (Mon, 12 May 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Cleaned up the usage message a little.

------------------------------------------------------------------------
r4057 | tewok | 2008-05-12 11:59:34 -0400 (Mon, 12 May 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Clarified usage message for -sleeptime.

------------------------------------------------------------------------
r4056 | hserus | 2008-05-12 11:36:08 -0400 (Mon, 12 May 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

Set correct default return value

------------------------------------------------------------------------
r4055 | tewok | 2008-05-12 11:00:14 -0400 (Mon, 12 May 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/phaser


Fix copyright.

------------------------------------------------------------------------
r4054 | tewok | 2008-05-10 20:36:19 -0400 (Sat, 10 May 2008) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/scripts/tests/test-rollzone
   A /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/Makefile
   A /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/README
   A /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/log.test
   A /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/phaser
   A /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/rc.blinkenlights
   A /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/runtest
   A /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/save-db.cache
   A /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/save-example.com
   A /trunk/dnssec-tools/tools/scripts/tests/test-rollzone/save-test.rollrec


New test for rolloerd and zonesigner.

------------------------------------------------------------------------
r4053 | tewok | 2008-05-10 19:50:21 -0400 (Sat, 10 May 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Added two assignments so that key lifespans would be added during rollovers.

------------------------------------------------------------------------
r4052 | tewok | 2008-05-10 19:49:07 -0400 (Sat, 10 May 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Added a small, but critical, comment.

------------------------------------------------------------------------
r4051 | tewok | 2008-05-09 12:51:11 -0400 (Fri, 09 May 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/tests/test-kskroll


A couple minor comment fixes.

------------------------------------------------------------------------
r4050 | hserus | 2008-05-09 09:02:09 -0400 (Fri, 09 May 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_cache.c

Reset the cache head when the current head element times out. 

------------------------------------------------------------------------
r4049 | hardaker | 2008-05-08 22:09:30 -0400 (Thu, 08 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsDNSService2.cpp
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsDNSService2.cpp.orig
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsDocShell.cpp.orig
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/patch.base
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/prnetdb-real.c
   M /trunk/dnssec-tools/apps/mozilla/firefox.spec

updated files based on modified newer firefox files as well as changes to libval
------------------------------------------------------------------------
r4048 | tewok | 2008-05-08 21:18:33 -0400 (Thu, 08 May 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Clarified a bit of directory-related pod.

------------------------------------------------------------------------
r4047 | hardaker | 2008-05-08 17:24:35 -0400 (Thu, 08 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/Makefile
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/autoconf.mk.in
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/autoconf.mk.in.orig
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/patch.base
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/paths

added autoconf.mk.in to the list of generated patch files
------------------------------------------------------------------------
r4046 | tewok | 2008-05-08 11:57:37 -0400 (Thu, 08 May 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Added some clarifying pod about the option/config file relationship.

------------------------------------------------------------------------
r4045 | tewok | 2008-05-07 23:01:14 -0400 (Wed, 07 May 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Add a check to ensure that the logfile's directory exists.

------------------------------------------------------------------------
r4044 | hardaker | 2008-05-07 18:37:25 -0400 (Wed, 07 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

document the dnssec-tools.conf file tokens that can be used
------------------------------------------------------------------------
r4043 | tewok | 2008-05-06 18:04:53 -0400 (Tue, 06 May 2008) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

Added -rrfile and -parameters to usage message.
Unbuffered stdout output.


------------------------------------------------------------------------
r4042 | tewok | 2008-05-06 17:08:50 -0400 (Tue, 06 May 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Updated the copyright dates.

------------------------------------------------------------------------
r4041 | tewok | 2008-05-06 17:08:04 -0400 (Tue, 06 May 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Fixed the -Version output in the usage message.

------------------------------------------------------------------------
r4040 | tewok | 2008-05-06 17:05:39 -0400 (Tue, 06 May 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Added pod for -rollksk.

------------------------------------------------------------------------
r4039 | tewok | 2008-05-06 17:04:28 -0400 (Tue, 06 May 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollerd


Added pod for the -Version option.

------------------------------------------------------------------------
r4038 | tewok | 2008-05-06 16:45:27 -0400 (Tue, 06 May 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollerd


Updated copyrights.

------------------------------------------------------------------------
r4037 | tewok | 2008-05-06 14:14:55 -0400 (Tue, 06 May 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Fixed the zone name variables in some logging messages.

------------------------------------------------------------------------
r4036 | tewok | 2008-05-06 14:13:54 -0400 (Tue, 06 May 2008) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Added some error checking to ensure a valid logging level was given
for -loglevel.

------------------------------------------------------------------------
r4035 | tewok | 2008-05-06 14:12:12 -0400 (Tue, 06 May 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Added three missing command to the %roll_commands validation list.

------------------------------------------------------------------------
r4034 | tewok | 2008-05-05 21:27:05 -0400 (Mon, 05 May 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/README


Added entries for a few modules.

------------------------------------------------------------------------
r4033 | tewok | 2008-05-05 21:19:01 -0400 (Mon, 05 May 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rolllog.pm


Added rolllog_validlevel() to allow for easy checking of valid levels.

------------------------------------------------------------------------
r4032 | tewok | 2008-05-05 21:05:46 -0400 (Mon, 05 May 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/README


Changed log file name.

------------------------------------------------------------------------
r4031 | hardaker | 2008-05-05 17:32:56 -0400 (Mon, 05 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

usage output section separation
------------------------------------------------------------------------
r4030 | hardaker | 2008-05-05 17:04:18 -0400 (Mon, 05 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

use the original TTL for the holddown time, as specified per 5011; a bit more debugging output
------------------------------------------------------------------------
r4029 | hardaker | 2008-05-05 16:40:49 -0400 (Mon, 05 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

fix holddown computation to use TTL as a minimum amount
------------------------------------------------------------------------
r4028 | hardaker | 2008-05-05 14:26:35 -0400 (Mon, 05 May 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

add a new --nomail option to prevent sending of mail\nclean up of a few verbose output statements\nskip file addition checks if the filename wasn't specified\ndefault to verbose => off
------------------------------------------------------------------------
r4027 | baerm | 2008-05-01 19:44:02 -0400 (Thu, 01 May 2008) | 4 lines
Changed paths:
   A /trunk/dnssec-tools/apps/postfix/postfix-2.5.1-dnssec-howto.txt
   A /trunk/dnssec-tools/apps/postfix/postfix-2.5.1_dnssec_patch.txt


Addinig posttfix 2.5.1 patch update and howto changes.


------------------------------------------------------------------------
r4026 | hserus | 2008-05-01 10:23:22 -0400 (Thu, 01 May 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in
   M /trunk/dnssec-tools/validator/include/validator/validator.h
   M /trunk/dnssec-tools/validator/include/validator-config.h.in
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

Define freeaddrinfo() if it does not exist

------------------------------------------------------------------------
r4025 | baerm | 2008-05-01 01:29:59 -0400 (Thu, 01 May 2008) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/apps/postfix/postfix-2.3.8_dnssec_patch.txt


updated patch to work with current library (i.e. to work with
changes in getaddrinfo api)


------------------------------------------------------------------------
r4024 | hserus | 2008-04-30 17:19:32 -0400 (Wed, 30 Apr 2008) | 6 lines
Changed paths:
   D /trunk/dnssec-tools/apps/lftp/lftp-3-4-7_dnssec_patch.txt
   A /trunk/dnssec-tools/apps/lftp/lftp-3-5-10_dnssec_patch.txt

Use revised val_getaddrinfo() function.

Move to more recent version of lftp. However, 
I've still not managed to get this to compile on MacOSX 
so the status marked in the howto file is still valid.

------------------------------------------------------------------------
r4023 | hserus | 2008-04-30 17:15:23 -0400 (Wed, 30 Apr 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/proftpd/proftpd-1.3.x_dnssec_patch.txt

Use new val_getaddrinfo() prototype

------------------------------------------------------------------------
r4022 | hserus | 2008-04-30 17:12:17 -0400 (Wed, 30 Apr 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-dnssec-howto.txt

Minor update to documentation

------------------------------------------------------------------------
r4021 | hserus | 2008-04-30 17:11:44 -0400 (Wed, 30 Apr 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2/libspf2-1.0.4_dnssec_guide.txt
   M /trunk/dnssec-tools/apps/libspf2/libspf2-1.0.4_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/libspf2/libspf2-1.2.5_dnssec_guide.txt
   M /trunk/dnssec-tools/apps/libspf2/libspf2-1.2.5_dnssec_patch.txt

Do not use additional enable/disable logic for validation in libspf. Delegate that to the dnsval.conf file.
Also use the new val_res_query() interface instead of the now obsoleted val_query() function.

------------------------------------------------------------------------
r4020 | hserus | 2008-04-30 16:34:27 -0400 (Wed, 30 Apr 2008) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-0.97_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt

Do not use modified API from libspf2. Use existing functions.
libspf2 will perform validation based on dnsval.conf


------------------------------------------------------------------------
r4019 | hserus | 2008-04-30 16:32:37 -0400 (Wed, 30 Apr 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.14.1_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/sendmail/sendmail-dnssec-howto.txt

No longer define the RequireDNSSEC policy. Validation policy will only be read from dnsval.conf

------------------------------------------------------------------------
r4018 | hserus | 2008-04-30 16:04:51 -0400 (Wed, 30 Apr 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/apps/ssh/ssh-dnssec.pat

Don't use the VAL_QUERY_MERGE_RRSET flag. Use new elements of the
val_result_t structure.

------------------------------------------------------------------------
r4017 | hserus | 2008-04-30 15:52:10 -0400 (Wed, 30 Apr 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/wget/wget-1.10.2_dnssec_patch.txt

Use new val_getaddrinfo() prototype

------------------------------------------------------------------------
r4016 | hserus | 2008-04-30 15:26:42 -0400 (Wed, 30 Apr 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap

Use latest set of error codes

------------------------------------------------------------------------
r4015 | hserus | 2008-04-30 15:23:03 -0400 (Wed, 30 Apr 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Don't increment number of proofs in result structure if we're not going to be storing details about them

------------------------------------------------------------------------
r4014 | hserus | 2008-04-30 15:22:39 -0400 (Wed, 30 Apr 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c

Specify the VAL_QUERY_NO_AC_DETAIL flag to val_resolve_and_check

------------------------------------------------------------------------
r4013 | hserus | 2008-04-30 15:22:02 -0400 (Wed, 30 Apr 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validate.1
   M /trunk/dnssec-tools/validator/doc/validate.pod

The -m option is no longer defined.

------------------------------------------------------------------------
r4012 | hserus | 2008-04-30 15:21:26 -0400 (Wed, 30 Apr 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c
   M /trunk/dnssec-tools/validator/apps/validator_driver.h
   M /trunk/dnssec-tools/validator/apps/validator_selftest.c
   M /trunk/dnssec-tools/validator/doc/val_res_query.3
   M /trunk/dnssec-tools/validator/include/validator/validator.h
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

Obsolete val_query/val_free_response and the VAL_QUERY_MERGE_RRSETS flag

------------------------------------------------------------------------
r4011 | hardaker | 2008-04-25 17:07:04 -0400 (Fri, 25 Apr 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

extra documentation and more information in the usage output
------------------------------------------------------------------------
r4010 | hardaker | 2008-04-23 18:57:33 -0400 (Wed, 23 Apr 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

put multiple instances of key saving code in a common function; more Verbose() output; better parsing of libval.conf to ignore comment lines; changed -w switch to be time from now rather than an absolute time
------------------------------------------------------------------------
r4009 | hserus | 2008-04-23 13:04:55 -0400 (Wed, 23 Apr 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_assertion.h
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

Change flag size to u_int32_t

------------------------------------------------------------------------
r4008 | hserus | 2008-04-23 13:03:50 -0400 (Wed, 23 Apr 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod

Change flag size to u_int32_t

------------------------------------------------------------------------
r4007 | hserus | 2008-04-23 13:02:49 -0400 (Wed, 23 Apr 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c
   M /trunk/dnssec-tools/validator/apps/validator_driver.h
   M /trunk/dnssec-tools/validator/apps/validator_selftest.c

Change flag size to u_int32_t

------------------------------------------------------------------------
r4006 | hserus | 2008-04-23 13:01:56 -0400 (Wed, 23 Apr 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator-internal.h
   M /trunk/dnssec-tools/validator/include/validator/validator.h

Change flag size to u_int32_t

------------------------------------------------------------------------
r4005 | hserus | 2008-04-23 11:19:50 -0400 (Wed, 23 Apr 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

Make error list ordering consistent with API draft

------------------------------------------------------------------------
r4004 | hserus | 2008-04-23 11:19:30 -0400 (Wed, 23 Apr 2008) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Use single error codes VAL_AC_DNS_ERROR and VAL_DNS_ERROR instead of all the
possible variants
Rename unsecure to insecure
Rename VAL_DONT_GO_FURTHER to VAL_BARE_TRUST_KEY
Use single VAL_BOGUS state instead of differentiating between
VAL_BOGUS_PROVABLE and VAL_BOGUS_UNPROVABLE

------------------------------------------------------------------------
r4003 | hserus | 2008-04-23 11:18:57 -0400 (Wed, 23 Apr 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.h
   M /trunk/dnssec-tools/validator/libval/val_verify.c

Rename unsecure to insecure

------------------------------------------------------------------------
r4002 | hserus | 2008-04-23 11:18:35 -0400 (Wed, 23 Apr 2008) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

rename unsecure to insecure
Print config file information as LOG_NOTICE
Check for NULL before using global options

------------------------------------------------------------------------
r4001 | hserus | 2008-04-23 11:18:17 -0400 (Wed, 23 Apr 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

Use single VAL_DNS_ERROR condition instead of a bunch of types

------------------------------------------------------------------------
r4000 | hserus | 2008-04-23 11:17:55 -0400 (Wed, 23 Apr 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/Makefile.in
   M /trunk/dnssec-tools/validator/doc/README
   M /trunk/dnssec-tools/validator/doc/getaddr.1
   M /trunk/dnssec-tools/validator/doc/getaddr.pod
   M /trunk/dnssec-tools/validator/doc/gethost.1
   M /trunk/dnssec-tools/validator/doc/gethost.pod
   M /trunk/dnssec-tools/validator/doc/libval-implementation-notes
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod
   M /trunk/dnssec-tools/validator/doc/libval_check_conf.1
   M /trunk/dnssec-tools/validator/doc/libval_check_conf.pod
   M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.3
   M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.pod
   M /trunk/dnssec-tools/validator/doc/val_gethostbyname.3
   M /trunk/dnssec-tools/validator/doc/val_gethostbyname.pod

bring doc in sync with current code

------------------------------------------------------------------------
r3999 | hserus | 2008-04-23 11:16:53 -0400 (Wed, 23 Apr 2008) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Document val_get_rrset()
Change size of flags to 32 bits
Change UNSECURE to INSECURE

------------------------------------------------------------------------
r3998 | hserus | 2008-04-23 11:16:10 -0400 (Wed, 23 Apr 2008) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/validator/doc/val_get_rrset.3
   A /trunk/dnssec-tools/validator/doc/val_get_rrset.pod

Document val_get_rrset()

------------------------------------------------------------------------
r3997 | hserus | 2008-04-23 11:15:34 -0400 (Wed, 23 Apr 2008) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/validator/doc/getname.1
   A /trunk/dnssec-tools/validator/doc/getname.pod
   A /trunk/dnssec-tools/validator/doc/getquery.1
   A /trunk/dnssec-tools/validator/doc/getquery.pod
   A /trunk/dnssec-tools/validator/doc/getrrset.1
   A /trunk/dnssec-tools/validator/doc/getrrset.pod

Add documentation for various command line programs

------------------------------------------------------------------------
r3996 | hserus | 2008-04-23 11:14:38 -0400 (Wed, 23 Apr 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/etc/dnsval.conf

Rename unsecure to insecure

------------------------------------------------------------------------
r3995 | hserus | 2008-04-23 11:14:14 -0400 (Wed, 23 Apr 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/libval_check_conf.c

Use the dnsval.conf file given with the -d option, else use the system
dnsval.conf file

------------------------------------------------------------------------
r3994 | hserus | 2008-04-23 11:13:45 -0400 (Wed, 23 Apr 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/getaddr.c
   M /trunk/dnssec-tools/validator/apps/gethost.c
   M /trunk/dnssec-tools/validator/apps/getname.c
   M /trunk/dnssec-tools/validator/apps/getquery.c
   M /trunk/dnssec-tools/validator/apps/getrrset.c

Add usage for -o option

------------------------------------------------------------------------
r3993 | hserus | 2008-04-23 11:13:05 -0400 (Wed, 23 Apr 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/selftests.dist
   M /trunk/dnssec-tools/validator/apps/validator_selftest.c

Use latest set of error codes from val_errors.h

------------------------------------------------------------------------
r3992 | hserus | 2008-04-23 11:11:44 -0400 (Wed, 23 Apr 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

Renamed unsecure to insecure

------------------------------------------------------------------------
r3991 | hserus | 2008-04-23 11:11:18 -0400 (Wed, 23 Apr 2008) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/val_errors.h

Remove all out of date comments
Replace all DNS error codes with a single error code
Make error list ordering consistent with API draft
Renamed UNSECURE to INSECURE

------------------------------------------------------------------------
r3990 | hardaker | 2008-04-21 19:15:12 -0400 (Mon, 21 Apr 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

more verbose output when doing various tasks; newline wraps
------------------------------------------------------------------------
r3989 | hardaker | 2008-04-21 17:19:12 -0400 (Mon, 21 Apr 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

print an error if neither .conf exists
------------------------------------------------------------------------
r3988 | hardaker | 2008-04-21 16:57:48 -0400 (Mon, 21 Apr 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

remove a bit of duplicate code; change -d to -z code to match -z docs
------------------------------------------------------------------------
r3987 | hardaker | 2008-04-21 14:30:13 -0400 (Mon, 21 Apr 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

trailing white space removal
------------------------------------------------------------------------
r3986 | hardaker | 2008-04-21 14:29:25 -0400 (Mon, 21 Apr 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf

added new options for minimal trustman config
------------------------------------------------------------------------
r3985 | hserus | 2008-04-21 14:24:27 -0400 (Mon, 21 Apr 2008) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/validator/doc/val_query.3
   D /trunk/dnssec-tools/validator/doc/val_query.pod
   A /trunk/dnssec-tools/validator/doc/val_res_query.3 (from /trunk/dnssec-tools/validator/doc/val_query.3:3983)
   A /trunk/dnssec-tools/validator/doc/val_res_query.pod (from /trunk/dnssec-tools/validator/doc/val_query.pod:3984)

Remande val_query to val_res_query

------------------------------------------------------------------------
r3984 | hserus | 2008-04-21 14:22:49 -0400 (Mon, 21 Apr 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/val_query.pod

Remove reference to val_query

------------------------------------------------------------------------
r3983 | hserus | 2008-04-17 12:21:55 -0400 (Thu, 17 Apr 2008) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod

Add documentation on val_log_add_optarg()
Remove description for functions that allow users to manipulate locations for
various configuration files

------------------------------------------------------------------------
r3982 | hserus | 2008-04-16 13:28:59 -0400 (Wed, 16 Apr 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/dnsval.conf.3
   M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod

Document some of the new policy hooks

------------------------------------------------------------------------
r3981 | hserus | 2008-04-15 16:38:09 -0400 (Tue, 15 Apr 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Incremental fix for EDNS0; still have to figure out best way to handle EDNS0 queries

------------------------------------------------------------------------
r3980 | hserus | 2008-04-15 16:29:28 -0400 (Tue, 15 Apr 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

changes to make dlv logic work a little better. EDNS0 logic in dlv still needs
to be fine-tuned

------------------------------------------------------------------------
r3979 | hserus | 2008-04-15 16:23:34 -0400 (Tue, 15 Apr 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_context.c

Move code for reading VAL_LOG_TARGET to val_policy

------------------------------------------------------------------------
r3978 | hserus | 2008-04-15 16:22:38 -0400 (Tue, 15 Apr 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Remove existing log targets before adding new ones during a conf file
re-read

------------------------------------------------------------------------
r3977 | hserus | 2008-04-15 16:21:29 -0400 (Tue, 15 Apr 2008) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h
   M /trunk/dnssec-tools/validator/libval/val_log.c

change val_log_add_* functions so that we add log target to the given list
instead of a static object
Add new funtion val_log_add_optarg_to_list() to add a log target to given list

------------------------------------------------------------------------
r3976 | hserus | 2008-04-15 16:20:25 -0400 (Tue, 15 Apr 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator-internal.h

Add log target to context

------------------------------------------------------------------------
r3973 | hardaker | 2008-04-15 13:14:05 -0400 (Tue, 15 Apr 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/dist/makerelease.xml

type typos
------------------------------------------------------------------------
r3971 | hardaker | 2008-04-15 11:51:32 -0400 (Tue, 15 Apr 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/configure.in

fixed bug #1603912: typo in --help
------------------------------------------------------------------------
r3965 | hserus | 2008-04-10 11:06:58 -0400 (Thu, 10 Apr 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_context.c

read VAL_LOG_TARGET only after context is created

------------------------------------------------------------------------
r3964 | hserus | 2008-04-10 11:03:50 -0400 (Thu, 10 Apr 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_cache.c

check for in-bailiwick condition before attempting to store name server
information to cache

------------------------------------------------------------------------
r3963 | hserus | 2008-04-10 11:02:44 -0400 (Thu, 10 Apr 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Ensure that log target from environment is specified at the correct time. 

------------------------------------------------------------------------
r3961 | marz | 2008-03-28 11:01:46 -0400 (Fri, 28 Mar 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/Makefile.in

fix man page install
------------------------------------------------------------------------
r3960 | marz | 2008-03-27 19:07:39 -0400 (Thu, 27 Mar 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

fix for linux progname
------------------------------------------------------------------------
r3959 | marz | 2008-03-26 10:23:19 -0400 (Wed, 26 Mar 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval_shim.3
   M /trunk/dnssec-tools/validator/doc/libval_shim.pod
   M /trunk/dnssec-tools/validator/libval_shim/README.libval_shim
   M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c

libval_shim changes related to logging env. var. support in libval
------------------------------------------------------------------------
r3958 | hserus | 2008-03-19 15:28:23 -0400 (Wed, 19 Mar 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c

Check for non-existence

------------------------------------------------------------------------
r3957 | hserus | 2008-03-19 14:13:55 -0400 (Wed, 19 Mar 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

rename gopt to g_opt
------------------------------------------------------------------------
r3956 | hserus | 2008-03-19 14:08:07 -0400 (Wed, 19 Mar 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Save current log channel to context

------------------------------------------------------------------------
r3955 | hserus | 2008-03-19 13:28:36 -0400 (Wed, 19 Mar 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_context.c
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Add support for reading logging preference from the VAL_LOG_TARGET env variable and from a "log" global option

------------------------------------------------------------------------
r3954 | hserus | 2008-03-19 13:26:14 -0400 (Wed, 19 Mar 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

Add definition for log_target

------------------------------------------------------------------------
r3953 | marz | 2008-03-19 13:23:51 -0400 (Wed, 19 Mar 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval_shim.3
   M /trunk/dnssec-tools/validator/doc/libval_shim.pod
   M /trunk/dnssec-tools/validator/libval_shim/README.libval_shim
   M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c

related changes to support moving policy context label enviroment variable app name logic to libval itself
------------------------------------------------------------------------
r3952 | hserus | 2008-03-18 15:51:06 -0400 (Tue, 18 Mar 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/etc/dnsval.conf

Add default for env-policy and app-policy

------------------------------------------------------------------------
r3951 | hserus | 2008-03-18 15:49:40 -0400 (Tue, 18 Mar 2008) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_context.c

* rename the_null_context to the_default_context
* the default context is not necessarily the "null" context, since labels may be overriden by global
options. In such cases, the default policy is the overriding policy.

------------------------------------------------------------------------
r3950 | hserus | 2008-03-18 15:49:17 -0400 (Tue, 18 Mar 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.h

Modify prototype for read_val_config_file() function

------------------------------------------------------------------------
r3949 | hserus | 2008-03-18 15:49:05 -0400 (Tue, 18 Mar 2008) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

* Add logic to parse new fields in global options
* if there is duplication in policy, use the first definition and ignore later
(instead of doing the reverse)
* Change the dnsval.conf file parsing logic -- allow the app-policy and
env-policy options to control how the files get (re-)read with the correct label.

------------------------------------------------------------------------
r3948 | hserus | 2008-03-18 15:48:16 -0400 (Tue, 18 Mar 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

add definitions for app-policy and env-policy global options

------------------------------------------------------------------------
r3947 | hserus | 2008-03-18 11:30:35 -0400 (Tue, 18 Mar 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/val_gethostbyname.3

Check in modified man page

------------------------------------------------------------------------
r3946 | hserus | 2008-03-18 11:04:52 -0400 (Tue, 18 Mar 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/Makefile.in
   A /trunk/dnssec-tools/validator/apps/getquery.c

Add test program from val_res_query()

------------------------------------------------------------------------
r3945 | hserus | 2008-03-17 11:23:47 -0400 (Mon, 17 Mar 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/etc/dnsval.conf

Remove policy bits that are no longer pertinent

------------------------------------------------------------------------
r3944 | hserus | 2008-03-17 09:41:10 -0400 (Mon, 17 Mar 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/etc/dnsval.conf

Remove keys that had grown stale

------------------------------------------------------------------------
r3942 | marz | 2008-03-12 10:31:15 -0400 (Wed, 12 Mar 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t

 removed previous bogus test and update num tests
------------------------------------------------------------------------
r3941 | hserus | 2008-03-12 10:24:19 -0400 (Wed, 12 Mar 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

Change value for VAL_QUERY_MERGE_RRSETS flag

------------------------------------------------------------------------
r3940 | marz | 2008-03-08 14:24:19 -0500 (Sat, 08 Mar 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/t/basic.t
   M /trunk/dnssec-tools/validator/apps/getname.c
   M /trunk/dnssec-tools/validator/include/validator/validator.h
   M /trunk/dnssec-tools/validator/include/validator-config.h.in
   M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c

changes relsated to recent API update
------------------------------------------------------------------------
r3939 | hserus | 2008-03-07 10:22:00 -0500 (Fri, 07 Mar 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

Use addrinfo instead of val_addrinfo
Use val_get_rrset() instead of val_resolve_and_check()

------------------------------------------------------------------------
r3938 | hserus | 2008-03-07 10:21:44 -0500 (Fri, 07 Mar 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.h

Add new flag to bootstrap_referral() to allow the calling function to specify
that it does not want any partial name server information returned

------------------------------------------------------------------------
r3937 | hserus | 2008-03-07 10:21:23 -0500 (Fri, 07 Mar 2008) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

* Rename struct val_rrset to struct val_rrset_rec
* Populate new values of val_result_chain structure: val_rc_rrset and
 val_rc_alias
* Rename VAL_QFLAGS_AFFECTS_CACHING to VAL_Q_ONLY_MATCHING_FLAGS
* Do not return complete authentication chain(s) if VAL_QUERY_NO_AC_DETAIL was
 specified

------------------------------------------------------------------------
r3936 | hserus | 2008-03-07 10:21:02 -0500 (Fri, 07 Mar 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_cache.c

remove elements in cache that have reached their expiry time
Ensure that nameservers returned from cache are not incomplete

------------------------------------------------------------------------
r3935 | hserus | 2008-03-07 10:20:49 -0500 (Fri, 07 Mar 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/validator/libval/val_log.c
   M /trunk/dnssec-tools/validator/libval/val_support.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

Rename struct val_rrset to struct val_rrset_rec

------------------------------------------------------------------------
r3934 | hserus | 2008-03-07 10:20:11 -0500 (Fri, 07 Mar 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/Makefile.in
   A /trunk/dnssec-tools/validator/libval/val_get_rrset.c

Add definition for val_get_rrset() and val_free_answer_chain() functions

------------------------------------------------------------------------
r3933 | hserus | 2008-03-07 10:19:04 -0500 (Fri, 07 Mar 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/getaddr.c

Use addrinfo instead of val_addrinfo

------------------------------------------------------------------------
r3932 | hserus | 2008-03-07 10:18:38 -0500 (Fri, 07 Mar 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/Makefile.in
   A /trunk/dnssec-tools/validator/apps/getrrset.c

Add new utility for testing the val_get_rrset() function

------------------------------------------------------------------------
r3931 | hserus | 2008-03-07 10:16:17 -0500 (Fri, 07 Mar 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Add description for VAL_QUERY_NO_AC_DETAIL and changes in structure
definitions.

------------------------------------------------------------------------
r3930 | hserus | 2008-03-07 10:15:45 -0500 (Fri, 07 Mar 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/getaddr.1
   M /trunk/dnssec-tools/validator/doc/getaddr.pod
   M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.3
   M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.pod

Use addrinfo instead of val_addrinfo

------------------------------------------------------------------------
r3929 | hserus | 2008-03-07 10:15:01 -0500 (Fri, 07 Mar 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/val_query.3
   M /trunk/dnssec-tools/validator/doc/val_query.pod

Remove help for val_query() and val_free_response(). These functions will soon
be obsoleted; only val_res_query() will remain.

------------------------------------------------------------------------
r3928 | hserus | 2008-03-07 10:14:08 -0500 (Fri, 07 Mar 2008) | 19 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

* Add new flag VAL_QUERY_NO_AC_DETAIL to prevent authentication chain details
 from being returned
* Rename VAL_QFLAGS_AFFECTS_CACHING to VAL_Q_ONLY_MATCHING_FLAGS
* Define new struct rr_rec, containing only rr information
* Reorder elements of struct val_rr_rec so that it can be directly typecast to
 struct rr_rec
* Rename struct val_rrset to struct val_rrset_rec
* Add two new members to the val_result_chain structure:
  - val_rc_alias points to name referenced by the cname/dname alias in result
  (if any)
  - val_rc_rrset points to the val_rrset_rec structure for the answer
    returned in val_rc_answer
* Define new structure val_answer_chain that contains only rrset
 information (without details) and validation status for a given
 name/class/type
* Add prototypes for new val_get_rrset() and val_free_answer_chain()
 functions


------------------------------------------------------------------------
r3927 | hserus | 2008-03-07 10:12:46 -0500 (Fri, 07 Mar 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator-internal.h

Rename struct val_rrset to struct val_rrset_rec

------------------------------------------------------------------------
r3926 | marz | 2008-03-03 09:57:48 -0500 (Mon, 03 Mar 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t

work around odd anomaly with validating query for MX mail.marzot.net
------------------------------------------------------------------------
r3925 | marz | 2008-02-25 15:45:04 -0500 (Mon, 25 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/doc/Makefile.in

libval-shim doc makefile change
------------------------------------------------------------------------
r3924 | marz | 2008-02-25 15:41:48 -0500 (Mon, 25 Feb 2008) | 1 line
Changed paths:
   A /trunk/dnssec-tools/validator/doc/libval_shim.3
   A /trunk/dnssec-tools/validator/doc/libval_shim.pod

libval_shim docs
------------------------------------------------------------------------
r3923 | hardaker | 2008-02-22 18:37:12 -0500 (Fri, 22 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/check_nameservers.txt
   M /trunk/dnssec-tools/tools/donuts/rules/dns.errors.txt
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt
   M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt
   M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt

misc fixes and wide spread use of the new donuts_error function
------------------------------------------------------------------------
r3922 | hardaker | 2008-02-22 18:36:31 -0500 (Fri, 22 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

comment, fix and make compare_arrays return a defined result value
------------------------------------------------------------------------
r3921 | hardaker | 2008-02-22 18:36:04 -0500 (Fri, 22 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm

return undef to ensure no positive return
------------------------------------------------------------------------
r3920 | hardaker | 2008-02-22 18:35:15 -0500 (Fri, 22 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm

fix issues with dropped trailing dot on signame of RRSIG; sort the typelist for a NSEC
------------------------------------------------------------------------
r3919 | hserus | 2008-02-22 11:31:27 -0500 (Fri, 22 Feb 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod
   M /trunk/dnssec-tools/validator/doc/validator_api.xml
   M /trunk/dnssec-tools/validator/include/validator/validator.h
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_cache.c
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/validator/libval/val_log.c
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_support.c
   M /trunk/dnssec-tools/validator/libval/val_support.h
   M /trunk/dnssec-tools/validator/libval/val_verify.c
   M /trunk/dnssec-tools/validator/libval/val_verify.h
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

Global search and replace rr_rec to val_rr_rec

------------------------------------------------------------------------
r3918 | hserus | 2008-02-22 11:21:51 -0500 (Fri, 22 Feb 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h
   M /trunk/dnssec-tools/validator/libval/val_context.c

Dont use the policy label from the enviroment. Delegate this to libval_shim

------------------------------------------------------------------------
r3917 | hserus | 2008-02-22 09:45:18 -0500 (Fri, 22 Feb 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_context.c

Look for a label specified in the environment VAL_CONTEXT_LABEL if one is not
specified by the application

------------------------------------------------------------------------
r3916 | hserus | 2008-02-22 09:43:10 -0500 (Fri, 22 Feb 2008) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Don't fail if one of the included dnsval.conf files is missing.
Fix order for included dnsval.conf files
Use default /etc/resolv.conf file if user-specified file is missing

------------------------------------------------------------------------
r3915 | hserus | 2008-02-22 09:39:41 -0500 (Fri, 22 Feb 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

Define VAL_CONTEXT_LABEL and VAL_DEFAULT_RESOLV_CONF. Also fix algorithm
identifiers for NSEC3

------------------------------------------------------------------------
r3914 | hserus | 2008-02-21 16:16:43 -0500 (Thu, 21 Feb 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Try to operate even if root.hints was missing

------------------------------------------------------------------------
r3913 | hserus | 2008-02-21 13:26:01 -0500 (Thu, 21 Feb 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Don't lose the value of matched_q->qc_ns_list during cname lookup 

------------------------------------------------------------------------
r3912 | hserus | 2008-02-21 13:24:50 -0500 (Thu, 21 Feb 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_cache.c

Swap big and little arguments to namename

------------------------------------------------------------------------
r3911 | hserus | 2008-02-21 13:24:23 -0500 (Thu, 21 Feb 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Properly read the "forward" line

------------------------------------------------------------------------
r3910 | hserus | 2008-02-20 14:16:00 -0500 (Wed, 20 Feb 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/etc/root.hints

Updated root.hints

------------------------------------------------------------------------
r3909 | hserus | 2008-02-20 12:46:22 -0500 (Wed, 20 Feb 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Minor fixes

------------------------------------------------------------------------
r3908 | hserus | 2008-02-19 20:29:47 -0500 (Tue, 19 Feb 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_parse.c
   M /trunk/dnssec-tools/validator/libval/val_parse.h
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_policy.h
   M /trunk/dnssec-tools/validator/libval/val_verify.c
   M /trunk/dnssec-tools/validator/libval/val_verify.h

Support DS record trust anchors 

------------------------------------------------------------------------
r3907 | hserus | 2008-02-18 15:57:20 -0500 (Mon, 18 Feb 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Changes to the API based on comments received

------------------------------------------------------------------------
r3906 | marz | 2008-02-18 11:16:59 -0500 (Mon, 18 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

handle val_addrinfo platform specific structure definition
------------------------------------------------------------------------
r3905 | marz | 2008-02-18 11:05:43 -0500 (Mon, 18 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c

macosx compile
------------------------------------------------------------------------
r3904 | marz | 2008-02-18 11:02:51 -0500 (Mon, 18 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c

macosx compile
------------------------------------------------------------------------
r3903 | marz | 2008-02-18 10:59:26 -0500 (Mon, 18 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c

macosx compile
------------------------------------------------------------------------
r3902 | marz | 2008-02-18 10:53:39 -0500 (Mon, 18 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c

 handle getprogname() vs program_invocation_shortname
------------------------------------------------------------------------
r3901 | hserus | 2008-02-18 10:09:42 -0500 (Mon, 18 Feb 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/configure

Use autoconf version 2.59

------------------------------------------------------------------------
r3900 | marz | 2008-02-17 13:59:43 -0500 (Sun, 17 Feb 2008) | 1 line
Changed paths:
   D /trunk/dnssec-tools/validator/libval_shim/Makefile
   A /trunk/dnssec-tools/validator/libval_shim/Makefile.in

Makefile fixes
------------------------------------------------------------------------
r3899 | marz | 2008-02-17 13:58:55 -0500 (Sun, 17 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/Makefile.in

add libval_shim suport to validator makefile
------------------------------------------------------------------------
r3898 | marz | 2008-02-17 13:57:54 -0500 (Sun, 17 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/configure.in

add libval_shim support to configure
------------------------------------------------------------------------
r3875 | hserus | 2008-02-14 16:16:48 -0500 (Thu, 14 Feb 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Add another log message during glue fetch operation

------------------------------------------------------------------------
r3874 | hserus | 2008-02-14 16:11:54 -0500 (Thu, 14 Feb 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c

revert previous change

------------------------------------------------------------------------
r3873 | hserus | 2008-02-14 16:04:28 -0500 (Thu, 14 Feb 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c

Return EINVAL if address family is neither AF_INET6 nor AF_INET. 


------------------------------------------------------------------------
r3872 | hserus | 2008-02-14 15:51:28 -0500 (Thu, 14 Feb 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/val_errors.h
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_log.c
   M /trunk/dnssec-tools/validator/libval/val_verify.c

Fix ciritical bug in validation algorithm: the chain was being marked valid without checking if the key marked as the trust anchor has a signature over the apex DNSKEY RRset.

------------------------------------------------------------------------
r3871 | hserus | 2008-02-14 15:30:03 -0500 (Thu, 14 Feb 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_policy.h
   M /trunk/dnssec-tools/validator/libval/val_verify.c

Allow clock skew policy to contain negative values

------------------------------------------------------------------------
r3870 | hserus | 2008-02-14 14:56:36 -0500 (Thu, 14 Feb 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

Change order of VAL_FROM_* definitions so that API reads better

------------------------------------------------------------------------
r3869 | hardaker | 2008-02-13 17:36:23 -0500 (Wed, 13 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/dnssecstatusOverlay.js

wording change and comment out of log message that was causing a freeze
------------------------------------------------------------------------
r3868 | hardaker | 2008-02-13 17:20:27 -0500 (Wed, 13 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsSocketTransport2.cpp

updated patch to do better logging and remove a harmful break (moving it later)
------------------------------------------------------------------------
r3867 | hardaker | 2008-02-13 17:14:54 -0500 (Wed, 13 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch

updated patch to do better logging and remove a harmful break (moving it later)
------------------------------------------------------------------------
r3864 | marz | 2008-02-13 11:37:54 -0500 (Wed, 13 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval_shim/README.libval_shim
   M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c

doc fixes, fail on unimplemented wrapper
------------------------------------------------------------------------
r3862 | marz | 2008-02-12 20:27:46 -0500 (Tue, 12 Feb 2008) | 1 line
Changed paths:
   A /trunk/dnssec-tools/validator/libval_shim/README.libval_shim

libval shim README
------------------------------------------------------------------------
r3861 | marz | 2008-02-12 18:45:27 -0500 (Tue, 12 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c

handle context creation based on app name or env var LIBVAL_SHIM_CONTEXT
------------------------------------------------------------------------
r3860 | hardaker | 2008-02-12 12:03:24 -0500 (Tue, 12 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm

rework the run_test function and made the record test use it
------------------------------------------------------------------------
r3859 | hardaker | 2008-02-11 20:04:31 -0500 (Mon, 11 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

fix closing rule test defitition in code memory
------------------------------------------------------------------------
r3858 | hardaker | 2008-02-11 20:03:35 -0500 (Mon, 11 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm

add a new dnssec_error() function for rules to report errors with
------------------------------------------------------------------------
r3857 | marz | 2008-02-11 19:00:12 -0500 (Mon, 11 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c

set logging only once
------------------------------------------------------------------------
r3856 | marz | 2008-02-11 16:54:22 -0500 (Mon, 11 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c

fixes to val_getnameinfo() and val_getaddrinfo() flag handling
------------------------------------------------------------------------
r3855 | hardaker | 2008-02-10 23:47:16 -0500 (Sun, 10 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

remove debugging print
------------------------------------------------------------------------
r3854 | hardaker | 2008-02-10 23:46:09 -0500 (Sun, 10 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

fix nsec/rrsig only test
------------------------------------------------------------------------
r3853 | hardaker | 2008-02-10 23:45:31 -0500 (Sun, 10 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm

print record details if possible during error for high verbosity levels
------------------------------------------------------------------------
r3852 | hardaker | 2008-02-10 23:40:29 -0500 (Sun, 10 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm

fix parsing of quoted TXT records with ;s in them
------------------------------------------------------------------------
r3851 | hardaker | 2008-02-10 22:44:57 -0500 (Sun, 10 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm
   M /trunk/dnssec-tools/tools/donuts/donuts

make the -v switch produce increasing amounts of output
------------------------------------------------------------------------
r3850 | marz | 2008-02-08 13:39:40 -0500 (Fri, 08 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/getname.c
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval_shim/Makefile
   M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c

libval_shim fixes
------------------------------------------------------------------------
r3849 | marz | 2008-02-07 11:32:19 -0500 (Thu, 07 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

fix port and service handling in getnameinfo
------------------------------------------------------------------------
r3848 | marz | 2008-02-07 11:30:30 -0500 (Thu, 07 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/getname.c

fix port passing
------------------------------------------------------------------------
r3847 | marz | 2008-02-06 17:02:02 -0500 (Wed, 06 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval_shim/Makefile

make support
------------------------------------------------------------------------
r3846 | marz | 2008-02-06 15:32:50 -0500 (Wed, 06 Feb 2008) | 1 line
Changed paths:
   A /trunk/dnssec-tools/validator/libval_shim/Makefile

make support
------------------------------------------------------------------------
r3845 | marz | 2008-02-06 12:32:53 -0500 (Wed, 06 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c

fix getaddrinfo for locally trusted answer
------------------------------------------------------------------------
r3844 | marz | 2008-02-04 18:29:42 -0500 (Mon, 04 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval_shim/libval_shim.c

fixed return of trusted result
------------------------------------------------------------------------
r3843 | marz | 2008-02-04 16:38:36 -0500 (Mon, 04 Feb 2008) | 1 line
Changed paths:
   A /trunk/dnssec-tools/validator/libval_shim/libval_shim.c

wrappers for key functions
------------------------------------------------------------------------
r3842 | marz | 2008-02-04 15:47:02 -0500 (Mon, 04 Feb 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/Makefile.in
   A /trunk/dnssec-tools/validator/apps/getname.c

testprogram for getnameinfo
------------------------------------------------------------------------
r3841 | hardaker | 2008-01-31 16:41:37 -0500 (Thu, 31 Jan 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch
   M /trunk/dnssec-tools/apps/mozilla/dnssec-firefox.patch
   M /trunk/dnssec-tools/apps/mozilla/dnssec-mozconfig.patch

updated patches for 2.0
------------------------------------------------------------------------
r3840 | hardaker | 2008-01-31 16:41:07 -0500 (Thu, 31 Jan 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-status

ignore the generated .xpi file
------------------------------------------------------------------------
r3839 | hardaker | 2008-01-31 16:40:06 -0500 (Thu, 31 Jan 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/dnssecstatusOverlay.js
   M /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/dnssecstatusOverlay.xul

wording changes based on group discussion
------------------------------------------------------------------------
r3838 | hardaker | 2008-01-31 16:39:42 -0500 (Thu, 31 Jan 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-status/install.rdf

allow firefox 2.0+
------------------------------------------------------------------------
r3837 | hardaker | 2008-01-31 16:38:26 -0500 (Thu, 31 Jan 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow

use QWizard to allow qwparam to work
------------------------------------------------------------------------
r3836 | hardaker | 2008-01-31 16:18:16 -0500 (Thu, 31 Jan 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo

ignore patterns
------------------------------------------------------------------------
r3835 | hardaker | 2008-01-31 15:59:16 -0500 (Thu, 31 Jan 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/firefox-files
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/.mozconfig
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/Makefile.in
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/advanced.dtd
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/advanced.xul
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/appstrings.properties
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/appstrings.properties.orig
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/autoconf.mk.in
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/configure.in
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/netError.xhtml
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/netError.xhtml.orig
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsDocShell.cpp
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsDocShell.cpp.orig
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsHttpChannel.cpp
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsHttpChannel.cpp.orig
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsNetError.h
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsNetError.h.orig
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsPACMan.cpp
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsPACMan.cpp.orig
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsPresContext.cpp
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsSocketTransport2.cpp
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsSocketTransport2.cpp.orig
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsWebShell.cpp
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsWebShell.cpp.orig
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/nspr-config.in
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/platlibs.mk

updated firefox code
------------------------------------------------------------------------
r3826 | marz | 2008-01-24 15:09:48 -0500 (Thu, 24 Jan 2008) | 1 line
Changed paths:
   A /trunk/dnssec-tools/validator/libval_shim/gen_shim_code.pl
   A /trunk/dnssec-tools/validator/libval_shim/libval_shim.funcs

libval_shim infrastructure
------------------------------------------------------------------------
r3825 | marz | 2008-01-24 14:47:20 -0500 (Thu, 24 Jan 2008) | 1 line
Changed paths:
   A /trunk/dnssec-tools/validator/libval_shim

libval_shim infrastructure
------------------------------------------------------------------------
r3822 | lfoster | 2008-01-21 17:35:52 -0500 (Mon, 21 Jan 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

Clarify -f vs. -S options.


------------------------------------------------------------------------
r3819 | lfoster | 2008-01-18 16:50:50 -0500 (Fri, 18 Jan 2008) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

Added comments and documentation referring to RFC 5011 where appropriate.


------------------------------------------------------------------------
r3816 | hardaker | 2008-01-15 20:14:50 -0500 (Tue, 15 Jan 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

put the extra zone file arguments in a separate array; load local user rules by default too
------------------------------------------------------------------------
r3815 | hardaker | 2008-01-15 20:14:12 -0500 (Tue, 15 Jan 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm

put the extra zone file arguments in a separate array
------------------------------------------------------------------------
r3814 | rstory | 2008-01-08 18:53:55 -0500 (Tue, 08 Jan 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone

update files to ignore

------------------------------------------------------------------------
r3813 | rstory | 2008-01-08 18:52:49 -0500 (Tue, 08 Jan 2008) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts
   M /trunk/dnssec-tools/tools/drawvalmap
   M /trunk/dnssec-tools/tools/etc
   M /trunk/dnssec-tools/tools/mapper
   M /trunk/dnssec-tools/tools/modules
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast
   M /trunk/dnssec-tools/tools/scripts

add or update files to ignore

------------------------------------------------------------------------
r3812 | rstory | 2008-01-08 18:44:48 -0500 (Tue, 08 Jan 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/include

ignore generated files
------------------------------------------------------------------------
r3811 | rstory | 2008-01-08 18:42:42 -0500 (Tue, 08 Jan 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator

ignore generated files
------------------------------------------------------------------------
r3810 | rstory | 2008-01-08 18:29:58 -0500 (Tue, 08 Jan 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/Makefile.in
   M /trunk/dnssec-tools/validator/doc/Makefile.in
   M /trunk/dnssec-tools/validator/libsres/Makefile.in

use $(RM) instead of rm
------------------------------------------------------------------------
r3809 | hardaker | 2008-01-07 12:50:10 -0500 (Mon, 07 Jan 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm

fix example to use a reference
------------------------------------------------------------------------
r3808 | hardaker | 2008-01-07 11:31:25 -0500 (Mon, 07 Jan 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

add a bunch of warnings after run in case odd run cases exist (no rules, no data, ...)
------------------------------------------------------------------------
r3807 | hardaker | 2008-01-06 12:25:03 -0500 (Sun, 06 Jan 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm
   M /trunk/dnssec-tools/tools/donuts/donuts
   M /trunk/dnssec-tools/tools/donuts/rules/check_nameservers.txt
   M /trunk/dnssec-tools/tools/donuts/rules/dns.errors.txt
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt
   M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt
   M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt

rewrite the eval section of the code to do automatic variable binding; rewrite the tools to use the new variable binding for better readability; improved a bunch of documentation; changed the copyright to include 2008
------------------------------------------------------------------------
r3806 | hardaker | 2008-01-02 13:09:17 -0500 (Wed, 02 Jan 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Makefile.PL

fix donuts binary hard-coded paths
------------------------------------------------------------------------
r3805 | hardaker | 2008-01-02 13:08:58 -0500 (Wed, 02 Jan 2008) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm

use more readable variable names
------------------------------------------------------------------------
r3804 | hardaker | 2007-12-11 12:40:12 -0500 (Tue, 11 Dec 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm

added a note that we don't support SOAs with floating point numbers
------------------------------------------------------------------------
r3803 | hardaker | 2007-12-05 22:30:03 -0500 (Wed, 05 Dec 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/Makefile.in
   A /trunk/dnssec-tools/docs
   A /trunk/dnssec-tools/docs/dnssec-tools.1

Added a top level manual page for dnssec-tools
------------------------------------------------------------------------
r3802 | baerm | 2007-12-03 20:58:10 -0500 (Mon, 03 Dec 2007) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/apps/ssh/README.dnssec
   A /trunk/dnssec-tools/apps/ssh/README.ssh (from /trunk/dnssec-tools/apps/ssh/README.dnssec:3794)

name consistency change

------------------------------------------------------------------------
r3797 | baerm | 2007-12-03 20:11:38 -0500 (Mon, 03 Dec 2007) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/apps/lftp/lftp-3-4-7_dnssec_howto.txt
   A /trunk/dnssec-tools/apps/lftp/lftp-3.4.7-dnssec-howto.txt (from /trunk/dnssec-tools/apps/lftp/lftp-3-4-7_dnssec_howto.txt:3794)
   A /trunk/dnssec-tools/apps/libspf2/libspf2-dnssec-howto.txt (from /trunk/dnssec-tools/apps/libspf2/libspf2_dnssec_howto.txt:3794)
   D /trunk/dnssec-tools/apps/libspf2/libspf2_dnssec_howto.txt
   A /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0-dnssec-howto.txt (from /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0_dnssec_howto.txt:3794)
   D /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0_dnssec_howto.txt
   A /trunk/dnssec-tools/apps/postfix/postfix-2.2.x-dnssec-howto.txt (from /trunk/dnssec-tools/apps/postfix/postfix-2.2.x_dnssec_howto.txt:3794)
   D /trunk/dnssec-tools/apps/postfix/postfix-2.2.x_dnssec_howto.txt
   A /trunk/dnssec-tools/apps/postfix/postfix-2.3.x-dnssec-howto.txt (from /trunk/dnssec-tools/apps/postfix/postfix-2.3.x_dnssec_howto.txt:3794)
   D /trunk/dnssec-tools/apps/postfix/postfix-2.3.x_dnssec_howto.txt
   A /trunk/dnssec-tools/apps/proftpd/proftpd-1.3.x-dnssec-howto.txt (from /trunk/dnssec-tools/apps/proftpd/proftpd-1.3.x_dnssec_howto.txt:3794)
   D /trunk/dnssec-tools/apps/proftpd/proftpd-1.3.x_dnssec_howto.txt
   A /trunk/dnssec-tools/apps/wget/wget-1.10.2-dnssec-howto.txt (from /trunk/dnssec-tools/apps/wget/wget-1.10.2_dnssec_howto.txt:3794)
   D /trunk/dnssec-tools/apps/wget/wget-1.10.2_dnssec_howto.txt

making howto names consistent 

------------------------------------------------------------------------
r3791 | tewok | 2007-11-06 16:34:15 -0500 (Tue, 06 Nov 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Log an error if rollerd couldn't reload the zone.

------------------------------------------------------------------------
r3790 | hardaker | 2007-11-05 12:05:25 -0500 (Mon, 05 Nov 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm

Patch from Eric Waters to fix some generate syntax so there can be more than one word between the left and right parts
------------------------------------------------------------------------
r3789 | tewok | 2007-11-04 22:01:04 -0500 (Sun, 04 Nov 2007) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Slightly modified the format of key information displayed to the user.
Modified to allow multiple zones to be kept in a single keyrec file.
Modified the pod to reflect the zone being included in the default signing
set name.

------------------------------------------------------------------------
r3788 | tewok | 2007-11-04 21:57:13 -0500 (Sun, 04 Nov 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Modified default signing set name to include the zone name.

------------------------------------------------------------------------
r3786 | tewok | 2007-10-31 22:25:16 -0400 (Wed, 31 Oct 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Modified to properly handle keys stored in non-dot directories.

------------------------------------------------------------------------
r3785 | tewok | 2007-10-31 22:24:32 -0400 (Wed, 31 Oct 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Added keyrec_keypaths(), which returns a list of paths to a zones keys
of a given type.

------------------------------------------------------------------------
r3784 | tewok | 2007-10-31 20:50:35 -0400 (Wed, 31 Oct 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Makefile.PL


Fixed a typo.

------------------------------------------------------------------------
r3783 | hardaker | 2007-10-31 17:53:09 -0400 (Wed, 31 Oct 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/dist/makerelease.xml

final typo fixes
------------------------------------------------------------------------
r3781 | hardaker | 2007-10-31 17:48:56 -0400 (Wed, 31 Oct 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/ChangeLog

Update for verison 1.3
------------------------------------------------------------------------
r3780 | hardaker | 2007-10-31 17:47:13 -0400 (Wed, 31 Oct 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm

Update Fast.pm Version Number: 0.9
------------------------------------------------------------------------
r3779 | hardaker | 2007-10-31 17:46:49 -0400 (Wed, 31 Oct 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/dist/makerelease.xml

version modification issue
------------------------------------------------------------------------
r3778 | hardaker | 2007-10-31 17:45:34 -0400 (Wed, 31 Oct 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor

Update Version Number: 1.3
------------------------------------------------------------------------
r3777 | hardaker | 2007-10-31 17:45:19 -0400 (Wed, 31 Oct 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/dist/makerelease.xml

case sensitivity
------------------------------------------------------------------------
r3776 | hardaker | 2007-10-31 17:43:28 -0400 (Wed, 31 Oct 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/dist/makerelease.xml

path typo
------------------------------------------------------------------------
r3775 | hardaker | 2007-10-31 17:41:51 -0400 (Wed, 31 Oct 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/NEWS

1.3 update
------------------------------------------------------------------------
r3774 | hardaker | 2007-10-31 17:37:12 -0400 (Wed, 31 Oct 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/configure.in

1.3 version stamp
------------------------------------------------------------------------
r3773 | hardaker | 2007-10-31 17:28:24 -0400 (Wed, 31 Oct 2007) | 1 line
Changed paths:
   A /trunk/dnssec-tools/dist/makerelease.xml

a makerelease script for generating releases
------------------------------------------------------------------------
r3772 | hardaker | 2007-10-31 16:20:52 -0400 (Wed, 31 Oct 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs.t

Added support for DNAME records
------------------------------------------------------------------------
r3771 | hardaker | 2007-10-31 16:04:00 -0400 (Wed, 31 Oct 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rr-dnssec.t
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs-naptr.t
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs.t

patch from Eric Waters to support naptr records
------------------------------------------------------------------------
r3770 | tewok | 2007-10-30 20:53:46 -0400 (Tue, 30 Oct 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Fixed how the ZSKs are moved into the ZSK directory.

------------------------------------------------------------------------
r3769 | tewok | 2007-10-30 20:30:57 -0400 (Tue, 30 Oct 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Moved $zskpub into a local loop, the only place it's used.
Commented out another (erroneous) use of $zskpub.

------------------------------------------------------------------------
r3768 | tewok | 2007-10-30 18:20:41 -0400 (Tue, 30 Oct 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Updated the command version.
Fixed to allow all columns to select the zone.

------------------------------------------------------------------------
r3767 | hserus | 2007-10-29 16:14:40 -0400 (Mon, 29 Oct 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/etc/dnsval.conf

Add new key for dnssec-tools.org

------------------------------------------------------------------------
r3766 | hserus | 2007-10-29 16:03:23 -0400 (Mon, 29 Oct 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/etc/dnsval.conf

Add SNIP zones to dnsval.conf file

------------------------------------------------------------------------
r3765 | hserus | 2007-10-23 13:28:31 -0400 (Tue, 23 Oct 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

Bug fix: keys were always being considered as expired.
Also don't automatically start a rollover operation for a key with rollsecs
value of 0.  


------------------------------------------------------------------------
r3764 | lfoster | 2007-10-19 13:44:28 -0400 (Fri, 19 Oct 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

re-enable usage of both dnsval.conf and named.conf files in the same instantiation.

------------------------------------------------------------------------
r3762 | rstory | 2007-10-09 11:18:25 -0400 (Tue, 09 Oct 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_debug.c

add OpenBSD to list of systems w/non const res_sym
------------------------------------------------------------------------
r3761 | rstory | 2007-10-09 11:15:04 -0400 (Tue, 09 Oct 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_mkquery.c

do not include local arpa/header.h if system one exists
define NS_ versions of (H|Q|RR)FIXEDSZ if needed

------------------------------------------------------------------------
r3760 | rstory | 2007-10-09 11:12:38 -0400 (Tue, 09 Oct 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.c
   M /trunk/dnssec-tools/validator/libsres/res_query.c

do not include local arpa/header.h if system one exists
------------------------------------------------------------------------
r3759 | rstory | 2007-10-09 09:47:35 -0400 (Tue, 09 Oct 2007) | 1 line
Changed paths:
   A /trunk/dnssec-tools/validator/include/val_ns_types.h

define various constants if not found in any system header
------------------------------------------------------------------------
r3758 | rstory | 2007-10-09 09:46:19 -0400 (Tue, 09 Oct 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

do not include local arpa/header.h if system one exists
------------------------------------------------------------------------
r3757 | rstory | 2007-10-09 09:44:24 -0400 (Tue, 09 Oct 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

use EINVAL instead of EBADMSG
------------------------------------------------------------------------
r3756 | rstory | 2007-10-09 09:43:43 -0400 (Tue, 09 Oct 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator-internal.h

include pthreads if needed
------------------------------------------------------------------------
r3755 | hserus | 2007-10-08 17:04:55 -0400 (Mon, 08 Oct 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

Test for the revoke bit (bit 8)

------------------------------------------------------------------------
r3754 | hserus | 2007-10-05 09:48:49 -0400 (Fri, 05 Oct 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

Define the EAI_NODATA code if it is not defined by the system (FreeBSD for
example)

------------------------------------------------------------------------
r3753 | hserus | 2007-10-05 09:17:25 -0400 (Fri, 05 Oct 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in
   M /trunk/dnssec-tools/validator/include/validator-config.h.in
   M /trunk/dnssec-tools/validator/libsres/ns_netint.c

Use the predefined __NetBSD__ instead of defining a new macro

------------------------------------------------------------------------
r3752 | hserus | 2007-10-05 09:06:50 -0400 (Fri, 05 Oct 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/Makefile.in

Export ns_get(put)16(32) symbols from libsres

------------------------------------------------------------------------
r3751 | hserus | 2007-10-05 09:01:23 -0400 (Fri, 05 Oct 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in
   M /trunk/dnssec-tools/validator/include/validator-config.h.in
   M /trunk/dnssec-tools/validator/libsres/ns_netint.c

Hack to declare different prototypes for ns_(get/put)(16/32)

------------------------------------------------------------------------
r3750 | hserus | 2007-10-04 15:29:53 -0400 (Thu, 04 Oct 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in
   M /trunk/dnssec-tools/validator/include/validator-config.h.in
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.c

Use select if pselect is not available

------------------------------------------------------------------------
r3749 | hserus | 2007-10-04 11:31:18 -0400 (Thu, 04 Oct 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_policy.h
   M /trunk/dnssec-tools/validator/libval/val_verify.c

Use exact sizes for ttl and clock skew

------------------------------------------------------------------------
r3748 | hserus | 2007-10-04 11:08:45 -0400 (Thu, 04 Oct 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_parse.c
   M /trunk/dnssec-tools/validator/libval/val_support.c

Be precise about sizes

------------------------------------------------------------------------
r3747 | tewok | 2007-10-03 13:19:22 -0400 (Wed, 03 Oct 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Added confdir and conffile to -v -v -v output.

------------------------------------------------------------------------
r3746 | hserus | 2007-09-28 09:50:27 -0400 (Fri, 28 Sep 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Add closing bracket if nsec3 is not defined

------------------------------------------------------------------------
r3745 | hserus | 2007-09-26 16:13:51 -0400 (Wed, 26 Sep 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/etc/resolv.conf

Set the default resolv.conf file to be empty, so that validate has a better chance of succeeding.


------------------------------------------------------------------------
r3744 | hserus | 2007-09-25 23:28:49 -0400 (Tue, 25 Sep 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/Makefile.in

Revert previous change. Better to check for portability before commiting this change in.

------------------------------------------------------------------------
r3743 | hserus | 2007-09-25 23:26:12 -0400 (Tue, 25 Sep 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/Makefile.in

Export symbols for ns_getxx and ns_putxx. This will probabaly have some portability issues, so it will need to be tested.

------------------------------------------------------------------------
r3742 | hserus | 2007-09-25 23:20:29 -0400 (Tue, 25 Sep 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/dnssecstatusOverlay.js

Comment out code that is not used (also happens to conflict with Thunderbird code)
Reset counters to 0 on unload and page change events

------------------------------------------------------------------------
r3741 | hserus | 2007-09-25 16:39:45 -0400 (Tue, 25 Sep 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-status/install.rdf

Specify Thunderbird as another target application; remove the updateURL reference

------------------------------------------------------------------------
r3740 | hserus | 2007-09-25 16:38:21 -0400 (Tue, 25 Sep 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/contents.rdf

Register messenger as another chrome package 

------------------------------------------------------------------------
r3739 | hserus | 2007-09-25 16:26:33 -0400 (Tue, 25 Sep 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/dnssecstatusOverlay.xul

Set DNSSEC label values as "secure", "insecure" and "errors" 
Use default location for placement of status window so that it works for
firefox and thunderbird


------------------------------------------------------------------------
r3738 | hserus | 2007-09-25 16:12:18 -0400 (Tue, 25 Sep 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/README
   A /trunk/dnssec-tools/apps/mozilla/README.firefox
   A /trunk/dnssec-tools/apps/mozilla/README.thunderbird

Moved firefox related README information to README.firefox; added new README for thunderbird and
only retained directory content information in README.

------------------------------------------------------------------------
r3737 | hserus | 2007-09-25 15:20:32 -0400 (Tue, 25 Sep 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/README

apps/thunderbird no longer exists

------------------------------------------------------------------------
r3736 | hserus | 2007-09-25 15:19:42 -0400 (Tue, 25 Sep 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/README

Thunderbird is no longer a sub-directory

------------------------------------------------------------------------
r3735 | hserus | 2007-09-25 15:17:26 -0400 (Tue, 25 Sep 2007) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/mozilla/dnssec-thunderbird.patch

Patch for adding DNSSEC-related UI hooks in Thunderbird

------------------------------------------------------------------------
r3734 | hserus | 2007-09-25 15:09:36 -0400 (Tue, 25 Sep 2007) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/apps/thunderbird

Removed the thunderbird directory

------------------------------------------------------------------------
r3733 | hserus | 2007-09-25 15:08:24 -0400 (Tue, 25 Sep 2007) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/mozilla/spfdnssec (from /trunk/dnssec-tools/apps/thunderbird/spfdnssec:3732)
   D /trunk/dnssec-tools/apps/thunderbird/spfdnssec

Moved spfdnssec extension to the mozilla directory

------------------------------------------------------------------------
r3732 | hserus | 2007-09-25 10:32:40 -0400 (Tue, 25 Sep 2007) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/validator/libsres/ns_netint.c

Re-introduce the ns_netint.c file

------------------------------------------------------------------------
r3731 | hserus | 2007-09-25 10:31:39 -0400 (Tue, 25 Sep 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Use label_bytes_cmp in place of nsec3_order_cmp.
Changed log levels for certain log messages
Perform sanity check of zonecut seen on RRSIGs for DS records

------------------------------------------------------------------------
r3730 | hserus | 2007-09-25 10:28:21 -0400 (Tue, 25 Sep 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.c
   M /trunk/dnssec-tools/validator/libval/val_support.h

No longer using recursive logic for labelcmp. Instead, break this function into
two sub-functions: label_bytes_cmp and labelcmp. No longer using
nsec3_order_cmp since this is exactly the same as label_bytes_cmp.


------------------------------------------------------------------------
r3729 | hserus | 2007-09-25 10:16:47 -0400 (Tue, 25 Sep 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Do not bypass zonecut saving logic when current zonecut is NULL

------------------------------------------------------------------------
r3728 | hserus | 2007-09-25 10:14:33 -0400 (Tue, 25 Sep 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_context.c

Change log level for an informational message

------------------------------------------------------------------------
r3727 | hserus | 2007-09-25 10:12:12 -0400 (Tue, 25 Sep 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

flush log data once we write to the file

------------------------------------------------------------------------
r3726 | tewok | 2007-09-21 09:42:07 -0400 (Fri, 21 Sep 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Updated usage message.

------------------------------------------------------------------------
r3725 | rstory | 2007-09-20 10:47:29 -0400 (Thu, 20 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/ssh/README.dnssec
   M /trunk/dnssec-tools/apps/ssh/ssh-dnssec.pat

add AutoAnswerValidatedKeys functionality
------------------------------------------------------------------------
r3724 | rstory | 2007-09-18 15:45:42 -0400 (Tue, 18 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_selftest.c

include netinet/in.h (FreeBSD needs it)
------------------------------------------------------------------------
r3712 | hserus | 2007-09-17 13:25:30 -0400 (Mon, 17 Sep 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/wget/wget-1.10.2_dnssec_patch.txt

Use "struct val_addrinfo" instead of "struct addrinfo"

------------------------------------------------------------------------
r3709 | hardaker | 2007-09-14 16:28:37 -0400 (Fri, 14 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch
   M /trunk/dnssec-tools/apps/mozilla/dnssec-firefox.patch
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/netError.dtd

fix error display messages in firefox
------------------------------------------------------------------------
r3707 | rstory | 2007-09-14 15:44:54 -0400 (Fri, 14 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/doc/Makefile.in

usr DESTDIR when removing old man files
------------------------------------------------------------------------
r3706 | rstory | 2007-09-14 15:37:40 -0400 (Fri, 14 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/Makefile.in
   M /trunk/dnssec-tools/validator/Makefile.in

use DESTDIR when creating directories
------------------------------------------------------------------------
r3705 | rstory | 2007-09-14 15:29:03 -0400 (Fri, 14 Sep 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Makefile.PL

fix checked in conflicted file

------------------------------------------------------------------------
r3704 | hardaker | 2007-09-14 13:16:35 -0400 (Fri, 14 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow
   M /trunk/dnssec-tools/tools/donuts/donuts
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone
   M /trunk/dnssec-tools/tools/mapper/mapper
   M /trunk/dnssec-tools/tools/scripts/blinkenlights
   M /trunk/dnssec-tools/tools/scripts/cleanarch
   M /trunk/dnssec-tools/tools/scripts/cleankrf
   M /trunk/dnssec-tools/tools/scripts/dtck
   M /trunk/dnssec-tools/tools/scripts/dtconf
   M /trunk/dnssec-tools/tools/scripts/dtconfchk
   M /trunk/dnssec-tools/tools/scripts/dtdefs
   M /trunk/dnssec-tools/tools/scripts/dtinitconf
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/fixkrf
   M /trunk/dnssec-tools/tools/scripts/genkrf
   M /trunk/dnssec-tools/tools/scripts/getdnskeys
   M /trunk/dnssec-tools/tools/scripts/keyarch
   M /trunk/dnssec-tools/tools/scripts/krfcheck
   M /trunk/dnssec-tools/tools/scripts/lskrf
   M /trunk/dnssec-tools/tools/scripts/lsroll
   M /trunk/dnssec-tools/tools/scripts/rollchk
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/rollinit
   M /trunk/dnssec-tools/tools/scripts/rolllog
   M /trunk/dnssec-tools/tools/scripts/rollset
   M /trunk/dnssec-tools/tools/scripts/signset-editor
   M /trunk/dnssec-tools/tools/scripts/tachk
   M /trunk/dnssec-tools/tools/scripts/tests/test-kskroll
   M /trunk/dnssec-tools/tools/scripts/timetrans
   M /trunk/dnssec-tools/tools/scripts/trustman
   M /trunk/dnssec-tools/tools/scripts/zonesigner

change version stamp to DT 1.3
------------------------------------------------------------------------
r3703 | hardaker | 2007-09-14 13:13:59 -0400 (Fri, 14 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/prnetdb-real.c
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/prnetdb.c

change unknown error code to bogus
------------------------------------------------------------------------
r3702 | hardaker | 2007-09-14 12:13:01 -0400 (Fri, 14 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval-config.in

make libval-config use the proper PACKAGE_VERSION autoconf variable
------------------------------------------------------------------------
r3701 | hardaker | 2007-09-14 11:11:54 -0400 (Fri, 14 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsDNSService2.cpp.orig

use real .orig file from firefox
------------------------------------------------------------------------
r3700 | hardaker | 2007-09-14 11:11:35 -0400 (Fri, 14 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/Makefile

use diff -N to allow for new files; escape echo clauses with @
------------------------------------------------------------------------
r3695 | tewok | 2007-09-14 00:03:59 -0400 (Fri, 14 Sep 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Makefile.PL
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Pod fix.

------------------------------------------------------------------------
r3694 | tewok | 2007-09-13 23:58:21 -0400 (Thu, 13 Sep 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval_check_conf.1
   M /trunk/dnssec-tools/validator/doc/libval_check_conf.pod


Typo fix.

------------------------------------------------------------------------
r3693 | tewok | 2007-09-13 21:45:21 -0400 (Thu, 13 Sep 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod


Pod mods.

------------------------------------------------------------------------
r3692 | tewok | 2007-09-13 21:42:42 -0400 (Thu, 13 Sep 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf
   M /trunk/dnssec-tools/tools/scripts/rollchk
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/rollinit
   M /trunk/dnssec-tools/tools/scripts/trustman


Pod mods.

------------------------------------------------------------------------
r3691 | hardaker | 2007-09-13 18:39:12 -0400 (Thu, 13 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/Makefile
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsDocShell.cpp
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/nsDocShell.cpp.orig

upgrade source files from 1.5.0.10 to 1.5.0.12
------------------------------------------------------------------------
r3690 | hardaker | 2007-09-13 18:31:10 -0400 (Thu, 13 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/addpath

fix bug
------------------------------------------------------------------------
r3689 | hardaker | 2007-09-13 18:29:22 -0400 (Thu, 13 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/Makefile
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/addpath

attempt 1 at an automatted forward upgrade
------------------------------------------------------------------------
r3688 | hardaker | 2007-09-13 17:58:28 -0400 (Thu, 13 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/firefox-files

svn ignore the built patch file
------------------------------------------------------------------------
r3687 | tewok | 2007-09-13 17:46:32 -0400 (Thu, 13 Sep 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll
   M /trunk/dnssec-tools/tools/scripts/rolllog
   M /trunk/dnssec-tools/tools/scripts/tachk
   M /trunk/dnssec-tools/tools/scripts/timetrans


Pod Mods.


------------------------------------------------------------------------
r3686 | tewok | 2007-09-13 14:49:56 -0400 (Thu, 13 Sep 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/genkrf
   M /trunk/dnssec-tools/tools/scripts/getdnskeys
   M /trunk/dnssec-tools/tools/scripts/krfcheck


Pod mods.

------------------------------------------------------------------------
r3685 | hardaker | 2007-09-13 13:58:47 -0400 (Thu, 13 Sep 2007) | 1 line
Changed paths:
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/getorig

a perl script to retrieve the original versions of a file from a build tree
------------------------------------------------------------------------
r3684 | hardaker | 2007-09-13 13:58:04 -0400 (Thu, 13 Sep 2007) | 1 line
Changed paths:
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/appstrings.properties.orig
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/netError.dtd.orig
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/netError.xhtml.orig
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsDNSService2.cpp.orig
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsDocShell.cpp.orig
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsHostResolver.cpp.orig
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsHostResolver.h.orig
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsHttpChannel.cpp.orig
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsIDNSRecord.idl.orig
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsIDNSService.idl.orig
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsNetError.h.orig
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsPACMan.cpp.orig
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsProtocolProxyService.cpp.orig
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsSocketTransport2.cpp.orig
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsSocketTransport2.h.orig
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsWebShell.cpp.orig
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/prerr.c.orig
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/prerr.et.orig
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/prerr.h.orig
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/prerr.properties.orig
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/prnetdb.c.orig
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/prnetdb.h.orig

added 1.5.0.10 original files
------------------------------------------------------------------------
r3683 | hardaker | 2007-09-13 13:57:39 -0400 (Thu, 13 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/firefox-files

ignore *.patch
------------------------------------------------------------------------
r3682 | tewok | 2007-09-13 13:57:39 -0400 (Thu, 13 Sep 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights
   M /trunk/dnssec-tools/tools/scripts/cleanarch
   M /trunk/dnssec-tools/tools/scripts/cleankrf
   M /trunk/dnssec-tools/tools/scripts/dtck
   M /trunk/dnssec-tools/tools/scripts/dtconf
   M /trunk/dnssec-tools/tools/scripts/dtconfchk
   M /trunk/dnssec-tools/tools/scripts/dtinitconf
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/fixkrf
   M /trunk/dnssec-tools/tools/scripts/keyarch
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor
   M /trunk/dnssec-tools/tools/scripts/rollset
   M /trunk/dnssec-tools/tools/scripts/signset-editor
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Pod mods.

------------------------------------------------------------------------
r3681 | hardaker | 2007-09-13 13:57:21 -0400 (Thu, 13 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/firefox-files/Makefile

misc build fixes and part separation
------------------------------------------------------------------------
r3680 | hardaker | 2007-09-13 13:21:13 -0400 (Thu, 13 Sep 2007) | 1 line
Changed paths:
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/getpath

missed a perl script
------------------------------------------------------------------------
r3679 | hardaker | 2007-09-13 12:41:34 -0400 (Thu, 13 Sep 2007) | 1 line
Changed paths:
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/appstrings.properties
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/netError.dtd
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/netError.xhtml
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsDNSService2.cpp
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsDocShell.cpp
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsHostResolver.cpp
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsHostResolver.h
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsHttpChannel.cpp
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsIDNSRecord.idl
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsIDNSService.idl
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsNetError.h
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsPACMan.cpp
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsProtocolProxyService.cpp
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsSocketTransport2.cpp
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsSocketTransport2.h
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/nsWebShell.cpp
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/pref-dnssec.dtd
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/prerr.c
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/prerr.et
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/prerr.h
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/prerr.properties
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/prnetdb-real.c
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/prnetdb.c
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/prnetdb.h

the base modified patch files for 1.5.0.10
------------------------------------------------------------------------
r3678 | hardaker | 2007-09-13 12:38:59 -0400 (Thu, 13 Sep 2007) | 1 line
Changed paths:
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/Makefile
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/addpath
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/patch.base
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/paths
   A /trunk/dnssec-tools/apps/mozilla/firefox-files/removeinternal

infrastructure for patch building
------------------------------------------------------------------------
r3677 | hardaker | 2007-09-13 12:38:06 -0400 (Thu, 13 Sep 2007) | 1 line
Changed paths:
   A /trunk/dnssec-tools/apps/mozilla/firefox-files

directory for building firefox patches
------------------------------------------------------------------------
r3676 | hardaker | 2007-09-13 10:23:05 -0400 (Thu, 13 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/Makefile.in

fix mkpath
------------------------------------------------------------------------
r3675 | tewok | 2007-09-12 17:30:14 -0400 (Wed, 12 Sep 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pod
   M /trunk/dnssec-tools/tools/modules/rollrec.pod


Pod mods.

------------------------------------------------------------------------
r3674 | tewok | 2007-09-12 17:28:34 -0400 (Wed, 12 Sep 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/BootStrap.pm
   M /trunk/dnssec-tools/tools/modules/defaults.pm
   M /trunk/dnssec-tools/tools/modules/dnssectools.pm
   M /trunk/dnssec-tools/tools/modules/keyrec.pm
   M /trunk/dnssec-tools/tools/modules/rolllog.pm
   M /trunk/dnssec-tools/tools/modules/rollrec.pm
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm


Pod mods.

------------------------------------------------------------------------
r3673 | hserus | 2007-09-12 10:34:31 -0400 (Wed, 12 Sep 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.c

Fix info message

------------------------------------------------------------------------
r3672 | hserus | 2007-09-11 13:26:28 -0400 (Tue, 11 Sep 2007) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/apps/thunderbird/Makefile
   D /trunk/dnssec-tools/apps/thunderbird/README
   D /trunk/dnssec-tools/apps/thunderbird/content
   D /trunk/dnssec-tools/apps/thunderbird/install.rdf
   D /trunk/dnssec-tools/apps/thunderbird/locale
   D /trunk/dnssec-tools/apps/thunderbird/skin
   A /trunk/dnssec-tools/apps/thunderbird/spfdnssec/Makefile (from /trunk/dnssec-tools/apps/thunderbird/Makefile:3669)
   A /trunk/dnssec-tools/apps/thunderbird/spfdnssec/README (from /trunk/dnssec-tools/apps/thunderbird/README:3669)
   A /trunk/dnssec-tools/apps/thunderbird/spfdnssec/content (from /trunk/dnssec-tools/apps/thunderbird/content:3669)
   R /trunk/dnssec-tools/apps/thunderbird/spfdnssec/content/spfdnssec (from /trunk/dnssec-tools/apps/thunderbird/content/spfdnssec:3671)
   A /trunk/dnssec-tools/apps/thunderbird/spfdnssec/install.rdf (from /trunk/dnssec-tools/apps/thunderbird/install.rdf:3671)
   A /trunk/dnssec-tools/apps/thunderbird/spfdnssec/locale (from /trunk/dnssec-tools/apps/thunderbird/locale:3671)
   A /trunk/dnssec-tools/apps/thunderbird/spfdnssec/skin (from /trunk/dnssec-tools/apps/thunderbird/skin:3671)

Moved spfdnssec-related code into sub-directory within Thunderbird

------------------------------------------------------------------------
r3671 | hserus | 2007-09-11 13:20:33 -0400 (Tue, 11 Sep 2007) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/thunderbird/spfdnssec

Added new directory for Thunderbird spfdnssec patch code

------------------------------------------------------------------------
r3670 | tewok | 2007-09-11 12:53:19 -0400 (Tue, 11 Sep 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval_check_conf.1
   M /trunk/dnssec-tools/validator/doc/libval_check_conf.pod
   M /trunk/dnssec-tools/validator/doc/val_gethostbyname.3
   M /trunk/dnssec-tools/validator/doc/val_gethostbyname.pod


Pod mods.

------------------------------------------------------------------------
r3669 | hserus | 2007-09-11 12:08:36 -0400 (Tue, 11 Sep 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-dnssec-howto.txt

Remove references to version number

------------------------------------------------------------------------
r3668 | tewok | 2007-09-11 11:52:32 -0400 (Tue, 11 Sep 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/dnsval.conf.3
   M /trunk/dnssec-tools/validator/doc/getaddr.1
   M /trunk/dnssec-tools/validator/doc/gethost.1
   M /trunk/dnssec-tools/validator/doc/libsres.3
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod
   M /trunk/dnssec-tools/validator/doc/libval_check_conf.1
   M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.3
   M /trunk/dnssec-tools/validator/doc/val_gethostbyname.3
   M /trunk/dnssec-tools/validator/doc/val_gethostbyname.pod
   M /trunk/dnssec-tools/validator/doc/val_query.3
   M /trunk/dnssec-tools/validator/doc/val_query.pod
   M /trunk/dnssec-tools/validator/doc/validate.1


Pod mods.

------------------------------------------------------------------------
r3667 | hserus | 2007-09-11 11:08:13 -0400 (Tue, 11 Sep 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt

Update to build with latest libval

------------------------------------------------------------------------
r3666 | hserus | 2007-09-11 10:45:08 -0400 (Tue, 11 Sep 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-0.97_dnssec_patch.txt

Changes to work with latest version of libval

------------------------------------------------------------------------
r3665 | hserus | 2007-09-11 10:28:51 -0400 (Tue, 11 Sep 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/README

reflect the recent file renames

------------------------------------------------------------------------
r3664 | hserus | 2007-09-11 10:14:50 -0400 (Tue, 11 Sep 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Initialize global option members to correct values

------------------------------------------------------------------------
r3663 | hserus | 2007-09-11 10:12:03 -0400 (Tue, 11 Sep 2007) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.6_dnssec_patch.txt
   A /trunk/dnssec-tools/apps/sendmail/sendmail-8.14.1_dnssec_patch.txt

Upgrade patch to 8.14.1

------------------------------------------------------------------------
r3662 | hserus | 2007-09-11 10:09:46 -0400 (Tue, 11 Sep 2007) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.x_dnssec_howto.txt
   A /trunk/dnssec-tools/apps/sendmail/sendmail-dnssec-howto.txt
   D /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_howto.txt
   A /trunk/dnssec-tools/apps/sendmail/spfmilter-dnssec-howto.txt

Make howto filenames version agnostic

------------------------------------------------------------------------
r3661 | hserus | 2007-09-11 10:02:12 -0400 (Tue, 11 Sep 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2/libspf2-1.0.4_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/libspf2/libspf2-1.2.5_dnssec_patch.txt

Try to get libspf2 patch to work with current libval code

------------------------------------------------------------------------
r3660 | hserus | 2007-09-11 10:01:30 -0400 (Tue, 11 Sep 2007) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/apps/libspf2/libspf2-1.0.4_dnssec_howto.txt
   D /trunk/dnssec-tools/apps/libspf2/libspf2-1.2.5_dnssec_howto.txt
   A /trunk/dnssec-tools/apps/libspf2/libspf2_dnssec_howto.txt

replaced multiple howtos with a single one

------------------------------------------------------------------------
r3659 | tewok | 2007-09-10 22:03:47 -0400 (Mon, 10 Sep 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libsres.pod
   M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.pod
   M /trunk/dnssec-tools/validator/doc/val_gethostbyname.pod
   M /trunk/dnssec-tools/validator/doc/val_query.pod
   M /trunk/dnssec-tools/validator/doc/validate.pod


Pod mods.

------------------------------------------------------------------------
r3658 | tewok | 2007-09-10 16:25:35 -0400 (Mon, 10 Sep 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libsres.pod
   M /trunk/dnssec-tools/validator/doc/libval.pod
   M /trunk/dnssec-tools/validator/doc/libval_check_conf.pod


Pod mods.

------------------------------------------------------------------------
r3657 | tewok | 2007-09-10 14:59:22 -0400 (Mon, 10 Sep 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod
   M /trunk/dnssec-tools/validator/doc/getaddr.pod
   M /trunk/dnssec-tools/validator/doc/gethost.pod


Pod mods.

------------------------------------------------------------------------
r3656 | tewok | 2007-09-10 13:23:24 -0400 (Mon, 10 Sep 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/mapper


Pod mods.

------------------------------------------------------------------------
r3655 | tewok | 2007-09-10 13:18:11 -0400 (Mon, 10 Sep 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod


Pod mods.

------------------------------------------------------------------------
r3654 | tewok | 2007-09-10 13:11:10 -0400 (Mon, 10 Sep 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec-tools/blinkenlights.conf.pod


Pod mod.

------------------------------------------------------------------------
r3653 | tewok | 2007-09-10 12:46:35 -0400 (Mon, 10 Sep 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts


Pod mod.

------------------------------------------------------------------------
r3652 | tewok | 2007-09-10 12:22:51 -0400 (Mon, 10 Sep 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow


Pod mods.

------------------------------------------------------------------------
r3651 | tewok | 2007-09-10 11:25:42 -0400 (Mon, 10 Sep 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/podtrans


Added a -help option.
Handle bad options better.

------------------------------------------------------------------------
r3650 | tewok | 2007-09-10 11:14:28 -0400 (Mon, 10 Sep 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/podmantex


Added some Latex-specific character conversions.

------------------------------------------------------------------------
r3647 | hardaker | 2007-09-07 19:56:01 -0400 (Fri, 07 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/aclocal.m4
   M /trunk/dnssec-tools/config.sub
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/ltmain.sh
   M /trunk/dnssec-tools/validator/aclocal.m4
   M /trunk/dnssec-tools/validator/config.sub
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/ltmain.sh

update libtool components to matching versions
------------------------------------------------------------------------
r3646 | hardaker | 2007-09-07 19:08:49 -0400 (Fri, 07 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Makefile.PL
   M /trunk/dnssec-tools/tools/donuts/donuts

add dnssec-tools into the install and use path
------------------------------------------------------------------------
r3645 | hardaker | 2007-09-07 19:06:48 -0400 (Fri, 07 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/Makefile.in

make full validator test cases path to include DESTDIR
------------------------------------------------------------------------
r3644 | hardaker | 2007-09-07 19:02:34 -0400 (Fri, 07 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/Makefile.in

PROPERLY escape a dollar sign
------------------------------------------------------------------------
r3643 | hardaker | 2007-09-07 18:58:14 -0400 (Fri, 07 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/Makefile.in

escape a non-make dollar sign
------------------------------------------------------------------------
r3642 | hardaker | 2007-09-07 18:57:30 -0400 (Fri, 07 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Makefile.PL

use PM_FILTER to set script paths
------------------------------------------------------------------------
r3641 | hardaker | 2007-09-07 18:55:27 -0400 (Fri, 07 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/Makefile.in

define MKPATH
------------------------------------------------------------------------
r3640 | hardaker | 2007-09-07 18:20:24 -0400 (Fri, 07 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/Makefile.in

attempt at proper build deps when perl modules are excluded
------------------------------------------------------------------------
r3639 | hardaker | 2007-09-07 17:16:22 -0400 (Fri, 07 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

Added a rule to test for broken keys generated by a broken OpenSSL
------------------------------------------------------------------------
r3638 | hserus | 2007-09-07 11:00:48 -0400 (Fri, 07 Sep 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/configure

Use the configure script generated by autoconf version 2.59 

------------------------------------------------------------------------
r3637 | rstory | 2007-09-06 14:50:33 -0400 (Thu, 06 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_crypto.c

use crypto/sha2.h if available
------------------------------------------------------------------------
r3636 | rstory | 2007-09-06 14:50:08 -0400 (Thu, 06 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in
   M /trunk/dnssec-tools/validator/include/validator-config.h.in

check for crypto/sha2.h header
------------------------------------------------------------------------
r3635 | rstory | 2007-09-06 14:46:24 -0400 (Thu, 06 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/getaddr.c

use ifdefs around defines that might be missing
------------------------------------------------------------------------
r3634 | rstory | 2007-09-06 13:49:49 -0400 (Thu, 06 Sep 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_context.c

move unlock a little earlier to prevent deadlock
------------------------------------------------------------------------
r3633 | tewok | 2007-09-04 11:25:12 -0400 (Tue, 04 Sep 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Fixed a comment.

------------------------------------------------------------------------
r3632 | tewok | 2007-08-31 22:38:35 -0400 (Fri, 31 Aug 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Better handling of newly rolling zones.


------------------------------------------------------------------------
r3631 | tewok | 2007-08-31 16:54:35 -0400 (Fri, 31 Aug 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Handle rollerd's badzone command.
Fix a typo.

------------------------------------------------------------------------
r3630 | tewok | 2007-08-31 16:52:20 -0400 (Fri, 31 Aug 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Added a rollerd->blinkenlights command to notify of a bad zone.

------------------------------------------------------------------------
r3629 | tewok | 2007-08-31 15:21:02 -0400 (Fri, 31 Aug 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Added an error message and background color for times when a zone is in error.

------------------------------------------------------------------------
r3628 | tewok | 2007-08-31 14:05:23 -0400 (Fri, 31 Aug 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Use absolute path for rollctl executions.
Give rollctl error output if "rollctl -rollzone" or "rollctl -skipzone" fails.

------------------------------------------------------------------------
r3627 | tewok | 2007-08-31 13:42:58 -0400 (Fri, 31 Aug 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Validate some rollrec data when starting to roll a skipped zone.
Re-order code for better rollrec file locking.
Give better error when a rollrec file has bad data.

------------------------------------------------------------------------
r3626 | tewok | 2007-08-31 13:38:41 -0400 (Fri, 31 Aug 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Modified to give an error return code when problems occured.

------------------------------------------------------------------------
r3625 | tewok | 2007-08-31 13:36:52 -0400 (Fri, 31 Aug 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Added the ROLLCMD_RC_BADZONEDATA error code.

------------------------------------------------------------------------
r3624 | tewok | 2007-08-30 22:47:33 -0400 (Thu, 30 Aug 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-demo.rollrec


Fixed the location of example.com's keyrec file.

------------------------------------------------------------------------
r3623 | tewok | 2007-08-30 22:44:49 -0400 (Thu, 30 Aug 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


On skip-zone command, set the kskphase to 0 (as well as the zskphase.)
Fix the zonestatus command's messages to allow for KSK rollover.

------------------------------------------------------------------------
r3622 | tewok | 2007-08-29 14:48:35 -0400 (Wed, 29 Aug 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Modified to use a configured absolute path for rollerd instead of casting
our fate to the vagaries of the environment's path variable. 

------------------------------------------------------------------------
r3621 | tewok | 2007-08-29 13:29:58 -0400 (Wed, 29 Aug 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/dnssectools.pm


Added the dt_cmdpath() interface.

------------------------------------------------------------------------
r3620 | tewok | 2007-08-28 13:56:49 -0400 (Tue, 28 Aug 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Exit on bad options.

------------------------------------------------------------------------
r3619 | tewok | 2007-08-28 13:46:58 -0400 (Tue, 28 Aug 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/genkrf


Exit on bad options.

------------------------------------------------------------------------
r3618 | tewok | 2007-08-28 13:41:51 -0400 (Tue, 28 Aug 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm


Improve handling of bad command line options.

------------------------------------------------------------------------
r3617 | tewok | 2007-08-28 10:45:41 -0400 (Tue, 28 Aug 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/rundemo


Exit on bad options.

------------------------------------------------------------------------
r3616 | tewok | 2007-08-28 10:44:45 -0400 (Tue, 28 Aug 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/rundemo


Exit on bad options.

------------------------------------------------------------------------
r3615 | tewok | 2007-08-28 10:16:38 -0400 (Tue, 28 Aug 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/tachk
   M /trunk/dnssec-tools/tools/scripts/timetrans


Exit on bad options.

------------------------------------------------------------------------
r3614 | tewok | 2007-08-27 21:39:00 -0400 (Mon, 27 Aug 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/cleanarch
   M /trunk/dnssec-tools/tools/scripts/cleankrf
   M /trunk/dnssec-tools/tools/scripts/dtck
   M /trunk/dnssec-tools/tools/scripts/dtconf
   M /trunk/dnssec-tools/tools/scripts/dtconfchk
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/fixkrf
   M /trunk/dnssec-tools/tools/scripts/keyarch
   M /trunk/dnssec-tools/tools/scripts/krfcheck
   M /trunk/dnssec-tools/tools/scripts/lsroll
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/rolllog
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor
   M /trunk/dnssec-tools/tools/scripts/rollset


Exit on invalid option.

------------------------------------------------------------------------
r3613 | tewok | 2007-08-27 16:13:10 -0400 (Mon, 27 Aug 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Exit on bad options.

------------------------------------------------------------------------
r3612 | tewok | 2007-08-27 16:05:49 -0400 (Mon, 27 Aug 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollchk


Exit on bad option.

------------------------------------------------------------------------
r3611 | tewok | 2007-08-27 16:01:51 -0400 (Mon, 27 Aug 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollinit


Change how exit-on-bad-opt happens.

------------------------------------------------------------------------
r3610 | tewok | 2007-08-27 15:56:21 -0400 (Mon, 27 Aug 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollinit


Changed to exit on unknown option.

------------------------------------------------------------------------
r3609 | rstory | 2007-08-27 14:52:24 -0400 (Mon, 27 Aug 2007) | 1 line
Changed paths:
   A /trunk/dnssec-tools/apps/openswan
   A /trunk/dnssec-tools/apps/openswan/README.dnssec
   A /trunk/dnssec-tools/apps/openswan/libval-thread.patch
   A /trunk/dnssec-tools/apps/openswan/libval.patch
   A /trunk/dnssec-tools/apps/openswan/makefile.patch

readme/patches for openswan local dns validation
------------------------------------------------------------------------
r3608 | rstory | 2007-08-24 12:34:40 -0400 (Fri, 24 Aug 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/dist/dnssec-tools.spec

remove TrustMan references
remove patches that are now in source

------------------------------------------------------------------------
r3607 | hardaker | 2007-08-24 11:13:15 -0400 (Fri, 24 Aug 2007) | 1 line
Changed paths:
   A /trunk/dnssec-tools/dist/dnssec-tools-donuts-perlmod-changes.patch
   A /trunk/dnssec-tools/dist/dnssec-tools-donuts-rules-paths.patch
   A /trunk/dnssec-tools/dist/dnssec-tools-linux-conf-paths-1.2.patch
   A /trunk/dnssec-tools/dist/dnssec-tools-maketestzone-bb.patch
   A /trunk/dnssec-tools/dist/dnssec-tools-validator-destdir-fixes.patch

needed patches for the spec file
------------------------------------------------------------------------
r3606 | rstory | 2007-08-24 10:32:31 -0400 (Fri, 24 Aug 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

add ifdef for testing multi-threaded default ctx creation
------------------------------------------------------------------------
r3605 | rstory | 2007-08-24 10:28:28 -0400 (Fri, 24 Aug 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_context.c

fix deadlock when freeing default context
------------------------------------------------------------------------
r3604 | rstory | 2007-08-24 10:12:33 -0400 (Fri, 24 Aug 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_context.c

- use PTHREAD_MUTEX_INITIALIZER to eliminate race condition initializing mutex
- when creating default context, hold lock until done creating context

------------------------------------------------------------------------
r3603 | hserus | 2007-08-23 17:18:31 -0400 (Thu, 23 Aug 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/ns_print.c
   M /trunk/dnssec-tools/validator/libsres/res_mkquery.c
   M /trunk/dnssec-tools/validator/libsres/res_mkquery.h

Use RES_GET/PUT in place of NS_GET/PUT. These macros automatically increment the buf pointer as it reads or
stores data.
Also use u_int16_t class, u_int16_t type in the res_val_nmkquery prototype

------------------------------------------------------------------------
r3602 | hserus | 2007-08-23 17:15:18 -0400 (Thu, 23 Aug 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_support.h

Add macros for RES_PUT16 and RES_PUT32

------------------------------------------------------------------------
r3601 | rstory | 2007-08-22 13:26:40 -0400 (Wed, 22 Aug 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_cache.c
   M /trunk/dnssec-tools/validator/libval/val_context.c
   M /trunk/dnssec-tools/validator/libval/val_crypto.c
   M /trunk/dnssec-tools/validator/libval/val_log.c
   M /trunk/dnssec-tools/validator/libval/val_parse.c
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_support.c
   M /trunk/dnssec-tools/validator/libval/val_verify.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

use new internal header
------------------------------------------------------------------------
r3600 | rstory | 2007-08-22 13:25:22 -0400 (Wed, 22 Aug 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_mkquery.h

dont define RES_USE_EDNS0 if it's already defined
------------------------------------------------------------------------
r3599 | rstory | 2007-08-22 13:24:27 -0400 (Wed, 22 Aug 2007) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/validator/include/validator/validator-internal.h
   M /trunk/dnssec-tools/validator/include/validator/validator.h

move some structures to an internal, non-installed header

------------------------------------------------------------------------
r3598 | hardaker | 2007-08-22 10:34:27 -0400 (Wed, 22 Aug 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/dist/dnssec-tools.spec

updated from the spec file checked into the fedora tree
------------------------------------------------------------------------
r3597 | hserus | 2007-08-21 17:01:20 -0400 (Tue, 21 Aug 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/Makefile.in
   D /trunk/dnssec-tools/validator/libsres/ns_netint.c
   M /trunk/dnssec-tools/validator/libsres/ns_print.c
   M /trunk/dnssec-tools/validator/libsres/res_mkquery.c

Removed ns_netint.c. Used NS_PUT/GET in place of ns_put/get 

------------------------------------------------------------------------
r3596 | tewok | 2007-08-20 21:03:56 -0400 (Mon, 20 Aug 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/INFO
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL
   M /trunk/dnssec-tools/tools/scripts/README


Added entries for dtck.

------------------------------------------------------------------------
r3595 | tewok | 2007-08-20 20:55:42 -0400 (Mon, 20 Aug 2007) | 10 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtck


Read from a config file, rather than just from __DATA__.
If a dtck config file wasn't given, then we'll just look at the DNSSEC-Tools
configuration file.
Better reporting of problematic files.
Renamed the master config file to dtck config file.
Deleted a few debugging lines.
Added a usage message.
Improved the pod.

------------------------------------------------------------------------
r3594 | tewok | 2007-08-20 20:44:01 -0400 (Mon, 20 Aug 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtconfchk


Missing endtimes increase the error count.

------------------------------------------------------------------------
r3593 | hserus | 2007-08-20 17:17:01 -0400 (Mon, 20 Aug 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Account for NULL trust anchors when zone security expectation is validate

------------------------------------------------------------------------
r3592 | hserus | 2007-08-20 16:24:59 -0400 (Mon, 20 Aug 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_debug.c

hack for res_sym_const should not be used on NetBSD systems

------------------------------------------------------------------------
r3591 | hserus | 2007-08-20 13:58:56 -0400 (Mon, 20 Aug 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/Makefile.in

Add target for libval_check_conf

------------------------------------------------------------------------
r3590 | hserus | 2007-08-20 13:57:19 -0400 (Mon, 20 Aug 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/Makefile.in

Added -D_GNU_SOURCE compile flag

------------------------------------------------------------------------
r3589 | tewok | 2007-08-17 16:43:02 -0400 (Fri, 17 Aug 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtck


Added -defcon.
Added processing of config files.
Added more pod.

------------------------------------------------------------------------
r3588 | tewok | 2007-08-16 16:25:17 -0400 (Thu, 16 Aug 2007) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtck


Added -list and -pretty options.
Clarified use of -verbose and -quiet.
Fixed -count.


------------------------------------------------------------------------
r3587 | tewok | 2007-08-15 15:06:41 -0400 (Wed, 15 Aug 2007) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtck


Adjusted initial warning, yet again.
Added rollrec checking.
Renamed a few variables in checkfiles() for clarity.
Added a file-type flag to runner().
Added a file-existence check to runner().

------------------------------------------------------------------------
r3586 | hserus | 2007-08-02 12:17:42 -0400 (Thu, 02 Aug 2007) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/validator/doc/libval_check_conf.1
   A /trunk/dnssec-tools/validator/doc/libval_check_conf.pod

Add documentation for the libval_check_conf utility.

------------------------------------------------------------------------
r3585 | hserus | 2007-07-31 14:12:44 -0400 (Tue, 31 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Give detailed log message when duplicate policy labels are detected

------------------------------------------------------------------------
r3584 | hserus | 2007-07-31 14:09:51 -0400 (Tue, 31 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/libval_check_conf.c

Set default debug level to 5

------------------------------------------------------------------------
r3583 | hserus | 2007-07-31 14:04:59 -0400 (Tue, 31 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

remove stray newline character

------------------------------------------------------------------------
r3582 | hserus | 2007-07-31 13:54:54 -0400 (Tue, 31 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/etc/dnsval.conf

Add sample global-options policy and a placeholder for other included files

------------------------------------------------------------------------
r3581 | hserus | 2007-07-31 13:48:12 -0400 (Tue, 31 Jul 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

Moved definition for "global-policy" string to val_policy.h
Define a new structure for specifying a list of dnsval.conf files. Each file has its own last-modified 
timstamp. Add this structure in place of the dnsval_conf member in val_context_t

------------------------------------------------------------------------
r3580 | hserus | 2007-07-31 13:47:39 -0400 (Tue, 31 Jul 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_context.h

val_refresh_resolver_policy, val_refresh_root_hints and val_refresh_validator_policy now return an error
code instead of void.

------------------------------------------------------------------------
r3579 | hserus | 2007-07-31 13:47:24 -0400 (Tue, 31 Jul 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_context.c

val_refresh_resolver_policy, val_refresh_root_hints and val_refresh_validator_policy now return an error
code based on the locking status instead of void.
Initialize dnsval.conf list instead of single element

------------------------------------------------------------------------
r3578 | hserus | 2007-07-31 13:47:03 -0400 (Tue, 31 Jul 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

val_refresh_resolver_policy, val_refresh_root_hints and val_refresh_validator_policy now return an error 
code instead of void.
When checking if conf files have changed, look at all dnsval.conf files in the list maintained within 
val_context_t

------------------------------------------------------------------------
r3577 | hserus | 2007-07-31 13:46:47 -0400 (Tue, 31 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.h

Add definitions for "global-policy" and "include" strings

------------------------------------------------------------------------
r3576 | hserus | 2007-07-31 13:46:27 -0400 (Tue, 31 Jul 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Recognize the "include" policy fragment in the dnsval.conf file
Free up  dnsval list structure in destroy_valpol()
Parse all dnsval.conf files included using the "include" clause

------------------------------------------------------------------------
r3575 | hserus | 2007-07-31 12:48:20 -0400 (Tue, 31 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.c

initialize clock_skew to 0

------------------------------------------------------------------------
r3574 | hserus | 2007-07-31 12:45:56 -0400 (Tue, 31 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/resolver.h

include <sys/time.h> for struct timeval definition 

------------------------------------------------------------------------
r3573 | hserus | 2007-07-31 12:37:54 -0400 (Tue, 31 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/Makefile.in
   A /trunk/dnssec-tools/validator/apps/libval_check_conf.c

Add dnsval.conf check program

------------------------------------------------------------------------
r3570 | tewok | 2007-07-19 13:50:31 -0400 (Thu, 19 Jul 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtck


Added pod stubs for the fields in the master configuration file.
Slightly modified the introductory warning.

------------------------------------------------------------------------
r3569 | tewok | 2007-07-19 08:52:14 -0400 (Thu, 19 Jul 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtck


Small changes to take better advantage of -verbose.

------------------------------------------------------------------------
r3568 | tewok | 2007-07-18 21:08:46 -0400 (Wed, 18 Jul 2007) | 5 lines
Changed paths:
   A /trunk/dnssec-tools/tools/scripts/dtck


Master DNSSEC-Tools data checking program.

*Very* initial version, not ready for prime time.

------------------------------------------------------------------------
r3567 | tewok | 2007-07-17 17:06:16 -0400 (Tue, 17 Jul 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/keyarch


Archived key paths are now saved in the keyrec files.
Closed keyrec files when finished with them.

------------------------------------------------------------------------
r3566 | tewok | 2007-07-17 17:04:43 -0400 (Tue, 17 Jul 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/krfcheck


Clarified an error message.

------------------------------------------------------------------------
r3565 | tewok | 2007-07-17 17:03:49 -0400 (Tue, 17 Jul 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Archived key paths are now saved in the keyrec files.
Tiny bit of code reorganization.

------------------------------------------------------------------------
r3564 | lfoster | 2007-07-17 13:48:27 -0400 (Tue, 17 Jul 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

added a bunch of comments.


------------------------------------------------------------------------
r3563 | tewok | 2007-07-16 20:59:18 -0400 (Mon, 16 Jul 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm


Added pod descriptions for the script defaults.

------------------------------------------------------------------------
r3562 | tewok | 2007-07-16 20:43:04 -0400 (Mon, 16 Jul 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm


Added entries for the DNSSEC-Tools scripts.

------------------------------------------------------------------------
r3561 | tewok | 2007-07-16 10:29:29 -0400 (Mon, 16 Jul 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Fixed option handling such that an invalid option will give an error
and maybe exit.

------------------------------------------------------------------------
r3560 | tewok | 2007-07-16 10:27:39 -0400 (Mon, 16 Jul 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm


Added -zcopts as a standard option.
Added the opts_onerr() interface.

------------------------------------------------------------------------
r3559 | tewok | 2007-07-13 15:58:12 -0400 (Fri, 13 Jul 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Added pod and a usage line for -zcopts.

------------------------------------------------------------------------
r3558 | tewok | 2007-07-13 15:52:46 -0400 (Fri, 13 Jul 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Pick up config value for zonecheck-opts.

------------------------------------------------------------------------
r3557 | tewok | 2007-07-13 15:46:24 -0400 (Fri, 13 Jul 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Added -zcopts support for passing options to the zone-checking program.
Modified how zones are checked in order to cut back on the number of
command executions.

------------------------------------------------------------------------
r3556 | tewok | 2007-07-13 14:27:32 -0400 (Fri, 13 Jul 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Added support for the kegyen-opts, zonecheck-opts, and zonesign-opts
configuration fields.

------------------------------------------------------------------------
r3555 | tewok | 2007-07-13 13:37:30 -0400 (Fri, 13 Jul 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm


Added some pod describing keygen-opts, zonecheck-opts, and zonesign-opts.

------------------------------------------------------------------------
r3554 | lfoster | 2007-07-13 13:35:43 -0400 (Fri, 13 Jul 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

Change all references to domain -> zone.


------------------------------------------------------------------------
r3553 | tewok | 2007-07-13 10:28:48 -0400 (Fri, 13 Jul 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm


Added keygen-opts, zonesign-opts, and zonecheck-opts.

------------------------------------------------------------------------
r3552 | tewok | 2007-07-13 10:02:47 -0400 (Fri, 13 Jul 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec-tools/README
   M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod


Added stuff about the optinality of some fields.

------------------------------------------------------------------------
r3551 | tewok | 2007-07-12 17:30:02 -0400 (Thu, 12 Jul 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod


Sorted a few options.
Added entries for keygen-opts, zonecheck-opts, and zonesign-opts.

------------------------------------------------------------------------
r3550 | hardaker | 2007-07-11 18:57:19 -0400 (Wed, 11 Jul 2007) | 1 line
Changed paths:
   M /branches/dnssec-tools-1-2/tools/donuts/rules/dnssec.rules.txt
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

mend the zone name check to deal with newer and older Net::DNS modules that change whether a trailing dot is returned in ->signame output
------------------------------------------------------------------------
r3549 | hardaker | 2007-07-11 18:55:58 -0400 (Wed, 11 Jul 2007) | 1 line
Changed paths:
   M /branches/dnssec-tools-1-2/tools/maketestzone/maketestzone
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

require Digest::BubbleBabble to work around a problem in Net::DNS::RR::DS
------------------------------------------------------------------------
r3548 | hardaker | 2007-07-11 18:55:12 -0400 (Wed, 11 Jul 2007) | 1 line
Changed paths:
   M /branches/dnssec-tools-1-2/validator/apps/validator_selftest.c
   M /trunk/dnssec-tools/validator/apps/validator_selftest.c

add sys/fcntl.h which is required at least on solaris
------------------------------------------------------------------------
r3547 | hardaker | 2007-07-11 18:54:21 -0400 (Wed, 11 Jul 2007) | 1 line
Changed paths:
   M /branches/dnssec-tools-1-2/configure
   M /branches/dnssec-tools-1-2/configure.in
   M /branches/dnssec-tools-1-2/tools/modules/Makefile.PL
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/configure.in
   M /trunk/dnssec-tools/tools/modules/Makefile.PL

Prevent perl c-binding modules to be built when --without-validator is specified
------------------------------------------------------------------------
r3546 | hserus | 2007-07-11 11:57:30 -0400 (Wed, 11 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

No longer treating VAL_LOCAL_ANSWER as trusted by default.

------------------------------------------------------------------------
r3545 | hserus | 2007-07-11 11:57:12 -0400 (Wed, 11 Jul 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c

Set the validation status for local answers to one of either VAL_TRUSTED_ANSWER or VAL_LOCAL_ANSWER
depending on the "trust-local-answers" global option.

------------------------------------------------------------------------
r3544 | hserus | 2007-07-11 11:56:45 -0400 (Wed, 11 Jul 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_policy.h

Removed policies that we're not implementing.
Add parse routines for dnsval.conf global options
Add function to test if dnsval.conf defines local answers as trusted

------------------------------------------------------------------------
r3543 | hserus | 2007-07-11 11:56:19 -0400 (Wed, 11 Jul 2007) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

Moved EDNS_UDP_SIZE from resolver.h to validator.h
Removed policy definitions that we're not implementing.
Added policy definitions for global options.
Define new structure for global options; add it as a member of val_context_t.
Added definitions for SHA-256 DS algorithm

------------------------------------------------------------------------
r3542 | hserus | 2007-07-11 11:56:06 -0400 (Wed, 11 Jul 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/resolver.h

Moved EDNS_UDP_SIZE from resolver.h to validator.h
Allow edns0 buf size to be specified as an argument to query_send()

------------------------------------------------------------------------
r3541 | hserus | 2007-07-11 11:55:41 -0400 (Wed, 11 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libsres-implementation-notes
   M /trunk/dnssec-tools/validator/doc/libsres.3
   M /trunk/dnssec-tools/validator/doc/libsres.pod
   M /trunk/dnssec-tools/validator/libsres/res_query.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Allow edns0 buf size to be specified as an argument to query_send()

------------------------------------------------------------------------
r3540 | hserus | 2007-07-11 11:54:14 -0400 (Wed, 11 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in
   M /trunk/dnssec-tools/validator/include/validator-config.h.in
   M /trunk/dnssec-tools/validator/libval/val_crypto.c
   M /trunk/dnssec-tools/validator/libval/val_crypto.h
   M /trunk/dnssec-tools/validator/libval/val_parse.c
   M /trunk/dnssec-tools/validator/libval/val_verify.c

Add support for SHA-256 DS algorithm

------------------------------------------------------------------------
r3539 | hserus | 2007-07-11 11:44:08 -0400 (Wed, 11 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/val_log.c
   M /trunk/dnssec-tools/validator/libval/val_parse.c
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Replace atoi() with strtol()

------------------------------------------------------------------------
r3538 | hserus | 2007-07-11 11:28:20 -0400 (Wed, 11 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval.3

Removed the VAL_AC_LOCAL_ANSWER state

------------------------------------------------------------------------
r3537 | hserus | 2007-07-11 10:54:14 -0400 (Wed, 11 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Fixed typo

------------------------------------------------------------------------
r3536 | hserus | 2007-07-10 16:23:24 -0400 (Tue, 10 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap

Represent DNS errors with black arrows

------------------------------------------------------------------------
r3535 | tewok | 2007-07-09 15:32:47 -0400 (Mon, 09 Jul 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/INFO
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL
   M /trunk/dnssec-tools/tools/scripts/README
   A /trunk/dnssec-tools/tools/scripts/dtconf


Added the dtconf command for displaying the contents of the configuration file.

------------------------------------------------------------------------
r3534 | tewok | 2007-07-09 14:50:54 -0400 (Mon, 09 Jul 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtconfchk



Fixed the command name in the usage message.

------------------------------------------------------------------------
r3533 | marz | 2007-07-08 20:47:40 -0400 (Sun, 08 Jul 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Makefile.PL
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t

support new defines
------------------------------------------------------------------------
r3532 | hserus | 2007-07-06 15:18:55 -0400 (Fri, 06 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/selftests.dist

Use VAL_DNS_RESPONSE_ERROR in place of VAL_ERROR

------------------------------------------------------------------------
r3531 | hserus | 2007-07-06 15:17:45 -0400 (Fri, 06 Jul 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Use new status values from validator-api-04
Add new "proof" param to get_ac_trust, which controls the type of assertion (answer or proof) that is
returned; use the proof to identify loops in DS nonexistence answers

------------------------------------------------------------------------
r3530 | hserus | 2007-07-06 15:09:59 -0400 (Fri, 06 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

USE new Q_ERROR status values instead of storing offsets to resolver errors

------------------------------------------------------------------------
r3529 | hserus | 2007-07-06 15:08:44 -0400 (Fri, 06 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

Handled newly defined types from validator-api-04

------------------------------------------------------------------------
r3528 | hserus | 2007-07-06 15:07:15 -0400 (Fri, 06 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

Return servfail as the rcode on error responses created in val_res_query()

------------------------------------------------------------------------
r3527 | hserus | 2007-07-06 15:06:20 -0400 (Fri, 06 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_query.c

Use SR_HEADER_ERROR for all header errors in libsres

------------------------------------------------------------------------
r3526 | hserus | 2007-07-06 15:05:35 -0400 (Fri, 06 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_selftest.c

Use new validator status code definitions

------------------------------------------------------------------------
r3525 | hserus | 2007-07-06 15:04:35 -0400 (Fri, 06 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/resolver.h
   M /trunk/dnssec-tools/validator/include/validator/val_errors.h
   M /trunk/dnssec-tools/validator/include/validator/validator.h

Renaming and re-arranging status codes. Sync'd up with latest validator API draft.

------------------------------------------------------------------------
r3524 | hserus | 2007-07-06 14:29:08 -0400 (Fri, 06 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_cache.c

Don't set qc_state if there was a parse error in cached data; simply pretend that data was not available.

------------------------------------------------------------------------
r3523 | hserus | 2007-07-06 14:13:55 -0400 (Fri, 06 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c

Use VAL_LOCAL_ANSWER status if answer was obtained locally

------------------------------------------------------------------------
r3522 | hserus | 2007-07-06 14:11:08 -0400 (Fri, 06 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.c

Use VAL_AC_ALGORITHM_NOT_SUPPORTED in plac eof VAL_AC_UNKNOWN_ALGORITHM

------------------------------------------------------------------------
r3521 | hserus | 2007-07-06 14:09:06 -0400 (Fri, 06 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libsres.3
   M /trunk/dnssec-tools/validator/doc/libsres.pod
   M /trunk/dnssec-tools/validator/doc/libval-implementation-notes
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod

Bring pod in sync with draft-hayatnagarkar-dnsext-validator-api-04

------------------------------------------------------------------------
r3520 | hserus | 2007-07-06 14:07:58 -0400 (Fri, 06 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Version that was submitted as draft-hayatnagarkar-dnsext-validator-api-04

------------------------------------------------------------------------
r3517 | hserus | 2007-07-05 09:19:47 -0400 (Thu, 05 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

Create the default NULL context in val_context.c

------------------------------------------------------------------------
r3516 | lfoster | 2007-07-04 14:55:29 -0400 (Wed, 04 Jul 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/getdnskeys

pod mods.


------------------------------------------------------------------------
r3515 | hserus | 2007-07-04 12:03:22 -0400 (Wed, 04 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap

Add an option for specifying a match string

------------------------------------------------------------------------
r3514 | hserus | 2007-07-04 12:02:58 -0400 (Wed, 04 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Do a better job of identifying the wildcard proof

------------------------------------------------------------------------
r3513 | hserus | 2007-07-04 12:02:35 -0400 (Wed, 04 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.c

Don't erase key status when we use a cached assertion

------------------------------------------------------------------------
r3512 | hserus | 2007-07-03 15:01:42 -0400 (Tue, 03 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap

Allow user to specify ignore patterns

------------------------------------------------------------------------
r3511 | hserus | 2007-07-03 14:44:11 -0400 (Tue, 03 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap

Make the nodes on the graph domain names instead of name server IP addresses

------------------------------------------------------------------------
r3510 | hserus | 2007-07-03 14:42:26 -0400 (Tue, 03 Jul 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

Add separator between different proof components

------------------------------------------------------------------------
r3509 | tewok | 2007-06-30 13:30:21 -0400 (Sat, 30 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm


Fixed grammar in a pod sentence.

------------------------------------------------------------------------
r3508 | tewok | 2007-06-29 16:59:19 -0400 (Fri, 29 Jun 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/Makefile


Changed a target name.


------------------------------------------------------------------------
r3507 | tewok | 2007-06-29 13:40:57 -0400 (Fri, 29 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/INFO
   M /trunk/dnssec-tools/tools/scripts/README


Added entries for rollrec-editor.

------------------------------------------------------------------------
r3506 | tewok | 2007-06-29 13:39:41 -0400 (Fri, 29 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL


Added an entry for rollrec-editor.

------------------------------------------------------------------------
r3505 | tewok | 2007-06-29 12:34:53 -0400 (Fri, 29 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm


Added a missing word to a comment.

------------------------------------------------------------------------
r3504 | tewok | 2007-06-29 12:27:20 -0400 (Fri, 29 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm


Sorted the exports.

------------------------------------------------------------------------
r3503 | tewok | 2007-06-29 11:33:12 -0400 (Fri, 29 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm


Changed how the configuration directory is gotten.

------------------------------------------------------------------------
r3502 | tewok | 2007-06-29 11:18:56 -0400 (Fri, 29 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Moved ps into $PS.

------------------------------------------------------------------------
r3501 | hserus | 2007-06-28 22:10:36 -0400 (Thu, 28 Jun 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

Change timestamp format

------------------------------------------------------------------------
r3500 | hserus | 2007-06-28 21:31:37 -0400 (Thu, 28 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

Check return values for val_parse_...() functions
Display timestamps on log messages

------------------------------------------------------------------------
r3499 | hserus | 2007-06-28 21:31:25 -0400 (Thu, 28 Jun 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_crypto.c

Removing trailing newline characters in log messages

------------------------------------------------------------------------
r3498 | hserus | 2007-06-28 21:31:06 -0400 (Thu, 28 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Check return values for val_parse_...() functions
Use both ends of the NSEC span while determining the closest enclosure

------------------------------------------------------------------------
r3497 | hserus | 2007-06-28 21:30:53 -0400 (Thu, 28 Jun 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.c

Check return values for val_parse_...() functions

------------------------------------------------------------------------
r3496 | hserus | 2007-06-28 21:30:33 -0400 (Thu, 28 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_query.c

perform proper clean-up of query when we have a valid answer
Perform early timeout when DNS errors occur

------------------------------------------------------------------------
r3495 | hserus | 2007-06-28 21:30:11 -0400 (Thu, 28 Jun 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.h

Add new function for performing early timeouts DNS errors occur

------------------------------------------------------------------------
r3494 | hserus | 2007-06-28 21:29:50 -0400 (Thu, 28 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.c

Adjust code for zero retry value
Add new function for performing early timeouts DNS errors occur

------------------------------------------------------------------------
r3493 | hserus | 2007-06-28 21:29:19 -0400 (Thu, 28 Jun 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/resolver.h

changed default number of retries to 0

------------------------------------------------------------------------
r3492 | tewok | 2007-06-27 15:06:57 -0400 (Wed, 27 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Added pod for keyrec_defkrf().

------------------------------------------------------------------------
r3491 | tewok | 2007-06-27 10:27:10 -0400 (Wed, 27 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Clarified an error message.

------------------------------------------------------------------------
r3490 | tewok | 2007-06-26 19:42:55 -0400 (Tue, 26 Jun 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Minor spacing fixes.
Added a few small comments.
Changed a LOG_ERR to LOG_INFO.

------------------------------------------------------------------------
r3489 | tewok | 2007-06-26 19:11:09 -0400 (Tue, 26 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/signset-editor


Two minor formatting changes.

------------------------------------------------------------------------
r3488 | tewok | 2007-06-26 16:55:11 -0400 (Tue, 26 Jun 2007) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor


Added a missing "use rolllog.pm".
Changed a keyrec_close() call to the needed rollrec_close().
Deleted some obsolete debugging prints.
Changed the remaining debugging prints to use STDERR.

------------------------------------------------------------------------
r3487 | hserus | 2007-06-26 16:34:50 -0400 (Tue, 26 Jun 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.h

Add new check_wildcard param to check_anc_proof() prototype

------------------------------------------------------------------------
r3486 | hserus | 2007-06-26 16:34:01 -0400 (Tue, 26 Jun 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Try verifying more of the proof-of-nonexistence before claiming that it matches via ANC
Correctly differentiate between missing proofs and proofs containing both NSEC and NSEC3 recs
Display appropriate message when ask_resolver() or ask_cache() get a error response
Properly identify timeouts of trust data so that assertion status can change back to VAL_AC_WAIT_FOR_TRUST

------------------------------------------------------------------------
r3485 | hserus | 2007-06-26 16:20:47 -0400 (Tue, 26 Jun 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_cache.c

Don't match a CNAME/DNAME for an RRSIG query

------------------------------------------------------------------------
r3484 | hserus | 2007-06-26 16:19:32 -0400 (Tue, 26 Jun 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_query.c

Continue to ask other name servers if we see some error rcode in the response

------------------------------------------------------------------------
r3483 | tewok | 2007-06-26 15:48:51 -0400 (Tue, 26 Jun 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollchk


Added some file checking.
Added a "use" of rolllog.pm.

------------------------------------------------------------------------
r3482 | tewok | 2007-06-26 14:11:04 -0400 (Tue, 26 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Added a missing period to a comment.

------------------------------------------------------------------------
r3481 | lfoster | 2007-06-26 13:34:03 -0400 (Tue, 26 Jun 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

only add keys to be removed to the %remkeys struct if they are not
   already there.


------------------------------------------------------------------------
r3480 | lfoster | 2007-06-26 11:52:18 -0400 (Tue, 26 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

Options clarification in the pod.


------------------------------------------------------------------------
r3479 | lfoster | 2007-06-26 11:08:52 -0400 (Tue, 26 Jun 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

Fixed a bug where keys slated for removal hang around waiting for removal
  after they have actually been removed from the config files.


------------------------------------------------------------------------
r3478 | lfoster | 2007-06-26 10:41:08 -0400 (Tue, 26 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

Fix copyright dates.


------------------------------------------------------------------------
r3477 | tewok | 2007-06-26 10:31:43 -0400 (Tue, 26 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/krfcheck


Fixed indentation on an error block.

------------------------------------------------------------------------
r3476 | lfoster | 2007-06-25 17:12:25 -0400 (Mon, 25 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

Clarify the options' short names.


------------------------------------------------------------------------
r3475 | tewok | 2007-06-25 11:52:01 -0400 (Mon, 25 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/genkrf


Added a few vars for standard system commands.

------------------------------------------------------------------------
r3474 | tewok | 2007-06-25 11:40:30 -0400 (Mon, 25 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/fixkrf


Fixed a typo.

------------------------------------------------------------------------
r3473 | tewok | 2007-06-22 11:05:02 -0400 (Fri, 22 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL
   M /trunk/dnssec-tools/tools/scripts/blinkenlights
   M /trunk/dnssec-tools/tools/scripts/cleanarch
   M /trunk/dnssec-tools/tools/scripts/rollerd


Added periods to the end of the last sentence in the initial copyright note.

------------------------------------------------------------------------
r3472 | tewok | 2007-06-22 11:04:06 -0400 (Fri, 22 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/cleankrf
   M /trunk/dnssec-tools/tools/scripts/dtconfchk
   M /trunk/dnssec-tools/tools/scripts/dtdefs
   M /trunk/dnssec-tools/tools/scripts/dtinitconf
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/fixkrf
   M /trunk/dnssec-tools/tools/scripts/genkrf
   M /trunk/dnssec-tools/tools/scripts/keyarch
   M /trunk/dnssec-tools/tools/scripts/krfcheck
   M /trunk/dnssec-tools/tools/scripts/lskrf
   M /trunk/dnssec-tools/tools/scripts/lsroll
   M /trunk/dnssec-tools/tools/scripts/rollchk
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollinit
   M /trunk/dnssec-tools/tools/scripts/rolllog
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor
   M /trunk/dnssec-tools/tools/scripts/rollset
   M /trunk/dnssec-tools/tools/scripts/signset-editor
   M /trunk/dnssec-tools/tools/scripts/tachk
   M /trunk/dnssec-tools/tools/scripts/timetrans
   M /trunk/dnssec-tools/tools/scripts/trustman
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Added periods to the end of the last sentence in the initial copyright note.

------------------------------------------------------------------------
r3471 | tewok | 2007-06-22 10:27:37 -0400 (Fri, 22 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/tachk


Added a description to the record-type options section.

------------------------------------------------------------------------
r3470 | lfoster | 2007-06-21 12:41:54 -0400 (Thu, 21 Jun 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

Removed all uses of persistent-data-file; this has been replaced by
  -anchor_data_file.
More pod mods.


------------------------------------------------------------------------
r3469 | tewok | 2007-06-20 20:54:31 -0400 (Wed, 20 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/tachk


Minor pod fixes.

------------------------------------------------------------------------
r3468 | tewok | 2007-06-20 18:04:23 -0400 (Wed, 20 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL
   M /trunk/dnssec-tools/tools/scripts/README


Deleted references to TrustMan.pl.

------------------------------------------------------------------------
r3467 | tewok | 2007-06-20 14:38:39 -0400 (Wed, 20 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman


Pod edits.

------------------------------------------------------------------------
r3466 | lfoster | 2007-06-20 13:26:04 -0400 (Wed, 20 Jun 2007) | 3 lines
Changed paths:
   D /trunk/dnssec-tools/tools/scripts/TrustMan.pl

Delete TrustMan.pl, it is no longer pertinent. See instead
trustman (all lower case).

------------------------------------------------------------------------
r3465 | lfoster | 2007-06-20 12:36:09 -0400 (Wed, 20 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

Implement usage of stored orgttl and sigexp for zones when
a query fails, so retry time can be computed from those values.

------------------------------------------------------------------------
r3464 | hserus | 2007-06-20 12:04:17 -0400 (Wed, 20 Jun 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

Authentication chain information is now being logged in val_resolve_and_check()

------------------------------------------------------------------------
r3463 | hserus | 2007-06-20 12:02:09 -0400 (Wed, 20 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_log.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

Log authentication chain information before we return from val_resolve_and_check() instead of outside this
function. 

------------------------------------------------------------------------
r3462 | hserus | 2007-06-19 14:59:23 -0400 (Tue, 19 Jun 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap

Modified so that it can run over log files

------------------------------------------------------------------------
r3461 | hserus | 2007-06-18 11:28:05 -0400 (Mon, 18 Jun 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Add a log message

------------------------------------------------------------------------
r3460 | tewok | 2007-06-15 16:49:28 -0400 (Fri, 15 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Deleted a bit of dead code.

------------------------------------------------------------------------
r3459 | tewok | 2007-06-15 16:43:52 -0400 (Fri, 15 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Changed a hard path reference to a variable.

------------------------------------------------------------------------
r3458 | hserus | 2007-06-14 18:33:59 -0400 (Thu, 14 Jun 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_context.c

Set correct label value during context creation

------------------------------------------------------------------------
r3455 | tewok | 2007-06-13 17:57:09 -0400 (Wed, 13 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Pod tweak.

------------------------------------------------------------------------
r3454 | lfoster | 2007-06-13 16:44:21 -0400 (Wed, 13 Jun 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

create structure to save initial ottl and sigexp when queries are
done, so this info can be used to compute a retry time in case of
a future query failure to the same zone.

------------------------------------------------------------------------
r3453 | tewok | 2007-06-13 13:02:49 -0400 (Wed, 13 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollchk
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/rollinit
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor
   M /trunk/dnssec-tools/tools/scripts/rollset


Fallout from moving the logging interfaces into rolllog.pm.

------------------------------------------------------------------------
r3452 | tewok | 2007-06-13 12:37:16 -0400 (Wed, 13 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Fallout from moving the logging interfaces into rolllog.pm.

------------------------------------------------------------------------
r3451 | tewok | 2007-06-13 12:21:23 -0400 (Wed, 13 Jun 2007) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/modules/rolllog.pm
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Moved the logging interfaces into their own module.

------------------------------------------------------------------------
r3450 | tewok | 2007-06-12 15:22:29 -0400 (Tue, 12 Jun 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor


Reorganized the data at the beginning of the command.
Deleted an unused function.


------------------------------------------------------------------------
r3449 | tewok | 2007-06-12 11:49:53 -0400 (Tue, 12 Jun 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor


Updated the text in the help window to reflect the current state of the pod.
Explained why some variables need deletion.

------------------------------------------------------------------------
r3448 | lfoster | 2007-06-12 11:29:25 -0400 (Tue, 12 Jun 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

add a test_revoke command line option so testing the revoke
bit can be done without modifying code.


------------------------------------------------------------------------
r3447 | lfoster | 2007-06-12 11:26:04 -0400 (Tue, 12 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

Fixed the "strict" violations and removed "no strict vars".


------------------------------------------------------------------------
r3446 | tewok | 2007-06-11 21:51:42 -0400 (Mon, 11 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor


Added an options section to the pod.

------------------------------------------------------------------------
r3445 | tewok | 2007-06-11 21:16:45 -0400 (Mon, 11 Jun 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor


Added filename filtering to all FileSelect calls.
Added the -no-filter option.

------------------------------------------------------------------------
r3444 | tewok | 2007-06-11 15:18:42 -0400 (Mon, 11 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor


Removed some obsolete comments.

------------------------------------------------------------------------
r3443 | tewok | 2007-06-11 15:07:09 -0400 (Mon, 11 Jun 2007) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor


When opening a new file, we'll actually *use* the rollrecs in the new file,
rather than continuing to look at the old file's rollrecs.

Don't try to build an empty table of rollrecs.

------------------------------------------------------------------------
r3442 | tewok | 2007-06-11 14:26:45 -0400 (Mon, 11 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor


Add some assurances that the file is actually a rollrec.

------------------------------------------------------------------------
r3441 | lfoster | 2007-06-11 13:20:01 -0400 (Mon, 11 Jun 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

put back the use strict dictum, but also use no strict "vars" until
globals can be cleaned up.


------------------------------------------------------------------------
r3440 | tewok | 2007-06-11 11:40:59 -0400 (Mon, 11 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor


Adjusted the Known Issues in the pod.

------------------------------------------------------------------------
r3439 | tewok | 2007-06-11 11:39:19 -0400 (Mon, 11 Jun 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor


Deleted development-phase comments in file header.
Fixed method of deleting an edit window created as a result of the
	New Rollrec command.

------------------------------------------------------------------------
r3438 | tewok | 2007-06-08 20:22:34 -0400 (Fri, 08 Jun 2007) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor


Finished the pod.
Deleted some unneeded debug messages.
Added a known problem.
Fixed the accelerator table.


------------------------------------------------------------------------
r3437 | tewok | 2007-06-08 19:58:46 -0400 (Fri, 08 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor


Added pod for the View menu commmands.

------------------------------------------------------------------------
r3436 | tewok | 2007-06-08 19:40:10 -0400 (Fri, 08 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor


Finished podding up the Commands menu.

------------------------------------------------------------------------
r3435 | tewok | 2007-06-08 18:26:47 -0400 (Fri, 08 Jun 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor


Renamed the Rollrecs menu to the View menu.
Continued adding new pod.

------------------------------------------------------------------------
r3434 | tewok | 2007-06-08 18:08:03 -0400 (Fri, 08 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor


Fixed pod for commands in the File and Edit menus.

------------------------------------------------------------------------
r3433 | tewok | 2007-06-08 12:41:16 -0400 (Fri, 08 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor


Added pod subsection on column layout in the button window.

------------------------------------------------------------------------
r3432 | tewok | 2007-06-08 11:18:32 -0400 (Fri, 08 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor


Added good pod to the introduction section.

------------------------------------------------------------------------
r3431 | lfoster | 2007-06-07 18:59:10 -0400 (Thu, 07 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pod

documentation mods.


------------------------------------------------------------------------
r3430 | lfoster | 2007-06-07 13:01:32 -0400 (Thu, 07 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights

Minor documentation changes.


------------------------------------------------------------------------
r3429 | lfoster | 2007-06-07 12:49:56 -0400 (Thu, 07 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll

Minor documentation change.


------------------------------------------------------------------------
r3428 | lfoster | 2007-06-07 12:44:18 -0400 (Thu, 07 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollchk

Minor documentation change.


------------------------------------------------------------------------
r3427 | lfoster | 2007-06-07 12:37:32 -0400 (Thu, 07 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollinit

Minor example change.


------------------------------------------------------------------------
r3426 | lfoster | 2007-06-07 12:28:50 -0400 (Thu, 07 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl

minor documentation change.


------------------------------------------------------------------------
r3425 | tewok | 2007-06-07 11:13:41 -0400 (Thu, 07 Jun 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor


Added code to ensure the merge command doesn't try to merge a file with
itself.

------------------------------------------------------------------------
r3424 | hserus | 2007-06-07 10:23:50 -0400 (Thu, 07 Jun 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Move thread-specific debug messages into #ifndef VAL_NO_THREADS block

------------------------------------------------------------------------
r3421 | lfoster | 2007-06-06 17:06:28 -0400 (Wed, 06 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd

minor documentation updates.


------------------------------------------------------------------------
r3420 | hserus | 2007-06-06 15:42:33 -0400 (Wed, 06 Jun 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Fix bug in check if type exists in bitmap

------------------------------------------------------------------------
r3419 | lfoster | 2007-06-06 15:12:05 -0400 (Wed, 06 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

documentation updates.


------------------------------------------------------------------------
r3418 | tewok | 2007-06-06 14:29:40 -0400 (Wed, 06 Jun 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor


Added some slight modifications to the pod.

Don't trust the pod yet, though, as it's still massively wrong.

------------------------------------------------------------------------
r3417 | tewok | 2007-06-06 14:15:54 -0400 (Wed, 06 Jun 2007) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollrec-editor


Added the -columns option.

Changed the initial warning message and removed the early exit() call.

G'head and use this if you really want, but do so at your own peril...

------------------------------------------------------------------------
r3416 | tewok | 2007-06-06 13:54:50 -0400 (Wed, 06 Jun 2007) | 9 lines
Changed paths:
   A /trunk/dnssec-tools/tools/scripts/rollrec-editor


New command:  rollrec editor.

This version is being checked in  *only* for the safety of an off-site backup.

DO NOT USE!



------------------------------------------------------------------------
r3415 | hserus | 2007-06-05 15:35:20 -0400 (Tue, 05 Jun 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

Display actual thread identifier in debug messages

------------------------------------------------------------------------
r3414 | hserus | 2007-06-05 15:29:33 -0400 (Tue, 05 Jun 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/resolver.h
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.c
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.h
   M /trunk/dnssec-tools/validator/libsres/res_query.c
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.h

Instead of continuously polling libsres for data, block using the pselect() call

------------------------------------------------------------------------
r3413 | lfoster | 2007-06-01 15:38:55 -0400 (Fri, 01 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

added some verbose notifications


------------------------------------------------------------------------
r3412 | lfoster | 2007-06-01 14:25:03 -0400 (Fri, 01 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

added notification for key removal.


------------------------------------------------------------------------
r3411 | hserus | 2007-06-01 14:22:01 -0400 (Fri, 01 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/resolver.h
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.c
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.h
   M /trunk/dnssec-tools/validator/libsres/res_query.c
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.h

Revert change# 3410. The code is still not MT-safe


------------------------------------------------------------------------
r3410 | hserus | 2007-06-01 10:55:35 -0400 (Fri, 01 Jun 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/resolver.h
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.c
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.h
   M /trunk/dnssec-tools/validator/libsres/res_query.c
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.h

Instead of continuously polling libsres for data, block on a select() call

------------------------------------------------------------------------
r3409 | hserus | 2007-06-01 10:37:55 -0400 (Fri, 01 Jun 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Perfom correct check for VAL_QFLAGS_ANY
Use available assertion status value when copying DLV to DS

------------------------------------------------------------------------
r3408 | hardaker | 2007-05-31 19:47:11 -0400 (Thu, 31 May 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/Makefile.in

use proper destdir prefix when making paths and installing
------------------------------------------------------------------------
r3407 | marz | 2007-05-31 13:16:24 -0400 (Thu, 31 May 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs

pass NULL string to context create by default
------------------------------------------------------------------------
r3406 | hserus | 2007-05-30 17:13:45 -0400 (Wed, 30 May 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap

Keep code current with latest set of validator status codes.
Use a single link to represent all answers with a given status code.

------------------------------------------------------------------------
r3405 | hserus | 2007-05-30 17:10:58 -0400 (Wed, 30 May 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

Display separate ASCII strings for the VAL_DONT_KNOW, VAL_BOGUS_PROVABLE and VAL_BAD_PROVABLY_UNSECURE conditions

------------------------------------------------------------------------
r3404 | hserus | 2007-05-30 17:10:41 -0400 (Wed, 30 May 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

- Extract relevant portions from add_to_qfq_chain() to create a new function check_in_qfq_chain()
- Rename find_next_soa() to find_next_zonecut(); rename old find_next_zonecut() to find_next_zonecut_old()
- In the new find_new_zonecut() function, don't issue SOA queries if we already have answers for the DNSKEY or DS records
- Continue to evaluate status for authentication chain elements even if some parent element is known to be provably insecure

------------------------------------------------------------------------
r3403 | hserus | 2007-05-30 17:09:51 -0400 (Wed, 30 May 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

Define new flag for all bits set

------------------------------------------------------------------------
r3402 | hserus | 2007-05-25 17:31:02 -0400 (Fri, 25 May 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

still more typos

------------------------------------------------------------------------
r3401 | hserus | 2007-05-25 17:15:41 -0400 (Fri, 25 May 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Fix more typos

------------------------------------------------------------------------
r3400 | hserus | 2007-05-25 16:44:20 -0400 (Fri, 25 May 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

More updates to the validator api

------------------------------------------------------------------------
r3399 | lfoster | 2007-05-25 12:18:54 -0400 (Fri, 25 May 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

re-implemented notifications to syslog and via mail when keys are
added or revoked.


------------------------------------------------------------------------
r3398 | hserus | 2007-05-24 11:01:46 -0400 (Thu, 24 May 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

First pass at trying to bring the validator API in sync with the latest set of changes to libval

------------------------------------------------------------------------
r3397 | hserus | 2007-05-24 11:01:10 -0400 (Thu, 24 May 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/dnsval.conf.3
   M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod

Add description for val_add_valpolicy() and val_remove_valpolicy()

------------------------------------------------------------------------
r3396 | hserus | 2007-05-24 10:49:51 -0400 (Thu, 24 May 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_verify.c

Slight tweaking of log messages

------------------------------------------------------------------------
r3395 | hserus | 2007-05-24 10:46:17 -0400 (Thu, 24 May 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.h

Update val_add_valpolicy() so that we return the policy handle
Add new val_remove_valpolicy() function

------------------------------------------------------------------------
r3394 | hserus | 2007-05-24 10:46:06 -0400 (Thu, 24 May 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Update val_add_valpolicy() so that we return the policy handle
Add new val_remove_valpolicy() function

------------------------------------------------------------------------
r3393 | hserus | 2007-05-24 10:44:45 -0400 (Thu, 24 May 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/dnsval.conf.3
   M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod

Properly align the end statement character in the policy definitions.

------------------------------------------------------------------------
r3392 | hserus | 2007-05-24 10:43:45 -0400 (Thu, 24 May 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod

Added description for VAL_BOGUS_PROVABLE

------------------------------------------------------------------------
r3391 | hserus | 2007-05-24 10:42:54 -0400 (Thu, 24 May 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval-implementation-notes

Pretty up some of the ASCII art

------------------------------------------------------------------------
r3390 | hserus | 2007-05-24 10:41:56 -0400 (Thu, 24 May 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

Define new policy for val_policy_entry_t
Update prototype for val_add_valpolicy()
Add prototype for val_remove_valpolicy()

------------------------------------------------------------------------
r3389 | hardaker | 2007-05-23 18:54:12 -0400 (Wed, 23 May 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm

Patch from Matthias Witte to provide extended support for the GENERATE syntax
------------------------------------------------------------------------
r3388 | rstory | 2007-05-22 19:04:46 -0400 (Tue, 22 May 2007) | 4 lines
Changed paths:
   A /trunk/dnssec-tools/dist/fink/dnssec-tools.info
   A /trunk/dnssec-tools/dist/fink/dnssec-tools.patch

- initial packages for fink-ified dnssec-tools
  - currently for the 1.1.1 release
  - currently only packages validate, libsres and libval

------------------------------------------------------------------------
r3386 | rstory | 2007-05-22 19:03:04 -0400 (Tue, 22 May 2007) | 1 line
Changed paths:
   A /trunk/dnssec-tools/dist/fink

dir for fink package files
------------------------------------------------------------------------
r3385 | hardaker | 2007-05-22 19:02:55 -0400 (Tue, 22 May 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/dnssecstatusOverlay.js

sync
------------------------------------------------------------------------
r3383 | hardaker | 2007-05-22 18:59:18 -0400 (Tue, 22 May 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/NEWS

sync
------------------------------------------------------------------------
r3382 | hardaker | 2007-05-22 18:49:13 -0400 (Tue, 22 May 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

comment out the long record test; causes issues
------------------------------------------------------------------------
r3380 | rstory | 2007-05-22 18:40:40 -0400 (Tue, 22 May 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/Makefile.in

change default test verbosity down another notch
------------------------------------------------------------------------
r3378 | rstory | 2007-05-22 18:27:41 -0400 (Tue, 22 May 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/Makefile.in

- add ability to overrise debug verbosity for make test
- change default level from 6 to 5, to account for recent shuffling of verbosity levels

------------------------------------------------------------------------
r3377 | hardaker | 2007-05-22 18:18:07 -0400 (Tue, 22 May 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/dist/dnssec-tools.spec

update for a working fedora compliant 1.2 rpm
------------------------------------------------------------------------
r3375 | hardaker | 2007-05-22 18:16:44 -0400 (Tue, 22 May 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/Makefile.in
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in

various fixes to allow validator-testcases to be installed in a user configurable place
------------------------------------------------------------------------
r3372 | hardaker | 2007-05-22 17:07:55 -0400 (Tue, 22 May 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/INSTALL
   M /trunk/dnssec-tools/README
   M /trunk/dnssec-tools/apps/README
   M /trunk/dnssec-tools/apps/mozilla/README
   M /trunk/dnssec-tools/apps/sendmail/README
   M /trunk/dnssec-tools/apps/thunderbird/README
   M /trunk/dnssec-tools/apps/thunderbird/content/spfdnssec/spfDnssecOverlay.xul
   M /trunk/dnssec-tools/podmantex
   M /trunk/dnssec-tools/podtrans
   M /trunk/dnssec-tools/tools/README
   M /trunk/dnssec-tools/tools/dnspktflow/Makefile.PL
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow
   M /trunk/dnssec-tools/tools/donuts/Makefile.PL
   M /trunk/dnssec-tools/tools/donuts/Rule.pm
   M /trunk/dnssec-tools/tools/donuts/donuts
   M /trunk/dnssec-tools/tools/donuts/donutsd
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt
   M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt
   M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt
   M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap
   M /trunk/dnssec-tools/tools/linux/ifup-dyn-dns/README
   M /trunk/dnssec-tools/tools/logwatch/README
   M /trunk/dnssec-tools/tools/maketestzone/Makefile.PL
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone
   M /trunk/dnssec-tools/tools/mapper/Makefile.PL
   M /trunk/dnssec-tools/tools/mapper/mapper
   M /trunk/dnssec-tools/tools/modules/Makefile.PL
   M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm
   M /trunk/dnssec-tools/tools/modules/README
   M /trunk/dnssec-tools/tools/modules/rollrec.pm
   M /trunk/dnssec-tools/tools/modules/tests/Makefile.PL
   M /trunk/dnssec-tools/tools/modules/tests/test-conf
   M /trunk/dnssec-tools/tools/modules/tests/test-keyrec
   M /trunk/dnssec-tools/tools/modules/tests/test-rollmgr
   M /trunk/dnssec-tools/tools/modules/tests/test-rollrec
   M /trunk/dnssec-tools/tools/modules/tests/test-timetrans
   M /trunk/dnssec-tools/tools/modules/tests/test-toolopts1
   M /trunk/dnssec-tools/tools/modules/tests/test-toolopts2
   M /trunk/dnssec-tools/tools/modules/tests/test-toolopts3
   M /trunk/dnssec-tools/tools/modules/timetrans.pm
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL
   M /trunk/dnssec-tools/tools/scripts/README
   M /trunk/dnssec-tools/tools/scripts/TrustMan.pl
   M /trunk/dnssec-tools/tools/scripts/timetrans
   M /trunk/dnssec-tools/tools/scripts/trustman

copyright year change
------------------------------------------------------------------------
r3371 | hardaker | 2007-05-22 17:02:53 -0400 (Tue, 22 May 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow
   M /trunk/dnssec-tools/tools/donuts/donuts
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone
   M /trunk/dnssec-tools/tools/mapper/mapper
   M /trunk/dnssec-tools/tools/scripts/TrustMan.pl
   M /trunk/dnssec-tools/tools/scripts/getdnskeys
   M /trunk/dnssec-tools/tools/scripts/tachk
   M /trunk/dnssec-tools/tools/scripts/tests/test-kskroll

version 1.2 stamp
------------------------------------------------------------------------
r3368 | hardaker | 2007-05-22 16:58:35 -0400 (Tue, 22 May 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/ChangeLog
   M /trunk/dnssec-tools/NEWS

update for 1.2
------------------------------------------------------------------------
r3367 | hardaker | 2007-05-22 16:33:09 -0400 (Tue, 22 May 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-status/README

wording update
------------------------------------------------------------------------
r3366 | hardaker | 2007-05-22 16:32:07 -0400 (Tue, 22 May 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/dnssecstatusOverlay.js

remove unneeded functions
------------------------------------------------------------------------
r3365 | hardaker | 2007-05-22 16:31:22 -0400 (Tue, 22 May 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

max length text records
------------------------------------------------------------------------
r3363 | tewok | 2007-05-21 15:03:35 -0400 (Mon, 21 May 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights
   M /trunk/dnssec-tools/tools/scripts/cleanarch
   M /trunk/dnssec-tools/tools/scripts/cleankrf
   M /trunk/dnssec-tools/tools/scripts/dtconfchk
   M /trunk/dnssec-tools/tools/scripts/dtdefs
   M /trunk/dnssec-tools/tools/scripts/dtinitconf
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/fixkrf
   M /trunk/dnssec-tools/tools/scripts/genkrf
   M /trunk/dnssec-tools/tools/scripts/keyarch
   M /trunk/dnssec-tools/tools/scripts/krfcheck
   M /trunk/dnssec-tools/tools/scripts/lskrf
   M /trunk/dnssec-tools/tools/scripts/lsroll
   M /trunk/dnssec-tools/tools/scripts/rollchk
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/rollinit
   M /trunk/dnssec-tools/tools/scripts/rollset
   M /trunk/dnssec-tools/tools/scripts/signset-editor
   M /trunk/dnssec-tools/tools/scripts/timetrans
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Updated the DNSSEC-Tools version.

------------------------------------------------------------------------
r3362 | tewok | 2007-05-21 15:01:01 -0400 (Mon, 21 May 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rolllog


Added version information and -Version option.
Reordered option checking for proper behavior.

------------------------------------------------------------------------
r3361 | tewok | 2007-05-20 19:07:58 -0400 (Sun, 20 May 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Added the rollmgr_loglevels() interface.
Fixed some pod formatting.

------------------------------------------------------------------------
r3360 | hserus | 2007-05-18 14:34:38 -0400 (Fri, 18 May 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.h

Updated date on copyright notice.
Moved the fix_glue function from val_assertion.c to val_resquery.c
Removed definitions for some static functions

------------------------------------------------------------------------
r3359 | hserus | 2007-05-18 14:34:20 -0400 (Fri, 18 May 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.h

Updated date on copyright notice.
Moved check_label_count() to val_verfy.c
Moved prepare_empty_nxdomain() to val_resquery.c

------------------------------------------------------------------------
r3358 | hserus | 2007-05-18 14:33:59 -0400 (Fri, 18 May 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Updated date on copyright notice.
Add some more comments and log messages
Moved the fix_glue function from val_assertion.c to val_resquery.c

------------------------------------------------------------------------
r3357 | hserus | 2007-05-18 14:33:35 -0400 (Fri, 18 May 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.c

Updated date on copyright notice.
Moved check_label_count() to val_verfy.c
Moved prepare_empty_nxdomain() to val_resquery.c

------------------------------------------------------------------------
r3356 | hserus | 2007-05-18 14:33:01 -0400 (Fri, 18 May 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Updated date on copyright notice.
Add some more comments and log messages
In functions that use the val_internal_result structure, use the query flags from the result structure
Move the fix_glue function to val_resquery.c

------------------------------------------------------------------------
r3355 | hserus | 2007-05-18 14:32:35 -0400 (Fri, 18 May 2007) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.c

Updated date on copyright notice.
Add some more comments and log messages
Remove unused functions
Moved check_label_count from val_support.c to val_verify.c and made it static
Correctly identify a delegation that does not link upward

------------------------------------------------------------------------
r3354 | hserus | 2007-05-18 14:31:59 -0400 (Fri, 18 May 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.h
   M /trunk/dnssec-tools/validator/libval/val_cache.c
   M /trunk/dnssec-tools/validator/libval/val_cache.h
   M /trunk/dnssec-tools/validator/libval/val_context.h
   M /trunk/dnssec-tools/validator/libval/val_crypto.h
   M /trunk/dnssec-tools/validator/libval/val_log.c
   M /trunk/dnssec-tools/validator/libval/val_parse.h
   M /trunk/dnssec-tools/validator/libval/val_verify.h

Updated date on copyright notice.

------------------------------------------------------------------------
r3353 | hserus | 2007-05-18 14:30:41 -0400 (Fri, 18 May 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_context.c
   M /trunk/dnssec-tools/validator/libval/val_crypto.c
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/validator/libval/val_parse.c
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Updated date on copyright notice.
Add some more comments and log messages

------------------------------------------------------------------------
r3352 | hserus | 2007-05-18 14:29:51 -0400 (Fri, 18 May 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

Updated date on copyright notice.
Add some more comments and log messages
Changed ordering of some functions in the file
Ensure that correct error value is returned from compose_answer()

------------------------------------------------------------------------
r3351 | hserus | 2007-05-18 12:37:45 -0400 (Fri, 18 May 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/NEWS

Added note that DLV implementation is supposed to conform with draft-weiler-dnssec-dlv-02.txt

------------------------------------------------------------------------
r3350 | hserus | 2007-05-18 12:33:26 -0400 (Fri, 18 May 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

Update date on copyright notice
Change logging level for authentication chain to LOG_NOTICE 

------------------------------------------------------------------------
r3349 | hserus | 2007-05-18 12:32:08 -0400 (Fri, 18 May 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/getaddr.c
   M /trunk/dnssec-tools/validator/apps/gethost.c

Update date on copyright notice

------------------------------------------------------------------------
r3348 | hserus | 2007-05-18 12:24:05 -0400 (Fri, 18 May 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod

Added info on p_val_err()

------------------------------------------------------------------------
r3347 | hserus | 2007-05-18 12:22:38 -0400 (Fri, 18 May 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validate.1
   M /trunk/dnssec-tools/validator/doc/validate.pod

added: see also syslog 

------------------------------------------------------------------------
r3346 | hserus | 2007-05-18 12:20:12 -0400 (Fri, 18 May 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_mkquery.h
   M /trunk/dnssec-tools/validator/libsres/res_query.c
   M /trunk/dnssec-tools/validator/libsres/res_support.c
   M /trunk/dnssec-tools/validator/libsres/res_support.h

Update date on copyright notice

------------------------------------------------------------------------
r3344 | lfoster | 2007-05-16 13:51:24 -0400 (Wed, 16 May 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman


alphabetized the command line options (and documentation for them)
so they're easier to keep track of. Added documentation where needed.

------------------------------------------------------------------------
r3343 | lfoster | 2007-05-16 13:23:18 -0400 (Wed, 16 May 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman


improvements to documentation

------------------------------------------------------------------------
r3342 | lfoster | 2007-05-16 13:11:43 -0400 (Wed, 16 May 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

slight change to handling of persistent data file for new keys.

------------------------------------------------------------------------
r3341 | lfoster | 2007-05-16 13:03:11 -0400 (Wed, 16 May 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman


removed all remaining TODO items, put them in a separate file instead.

------------------------------------------------------------------------
r3340 | rstory | 2007-05-16 12:58:02 -0400 (Wed, 16 May 2007) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/libspf2/libspf2-1.0.4_dnssec_guide.txt (from /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_guide.txt:3249)
   A /trunk/dnssec-tools/apps/libspf2/libspf2-1.0.4_dnssec_howto.txt (from /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_howto.txt:3249)
   A /trunk/dnssec-tools/apps/libspf2/libspf2-1.0.4_dnssec_patch.txt (from /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt:3249)
   A /trunk/dnssec-tools/apps/libspf2/libspf2-1.2.5_dnssec_guide.txt (from /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_guide.txt:3249)
   A /trunk/dnssec-tools/apps/libspf2/libspf2-1.2.5_dnssec_howto.txt (from /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_howto.txt:3249)
   A /trunk/dnssec-tools/apps/libspf2/libspf2-1.2.5_dnssec_patch.txt (from /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt:3249)
   D /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_guide.txt
   D /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_howto.txt
   D /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt
   D /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_guide.txt
   D /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_howto.txt
   D /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt

move libspf2 patches to a subdir

------------------------------------------------------------------------
r3339 | rstory | 2007-05-16 12:55:24 -0400 (Wed, 16 May 2007) | 1 line
Changed paths:
   A /trunk/dnssec-tools/apps/libspf2

dir for libspf2 patches
------------------------------------------------------------------------
r3338 | hardaker | 2007-05-15 20:19:03 -0400 (Tue, 15 May 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/Makefile.PL

don't force intsall to a different man page name
------------------------------------------------------------------------
r3337 | hardaker | 2007-05-15 19:52:01 -0400 (Tue, 15 May 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Makefile.PL

don't force intsall to a different man page name
------------------------------------------------------------------------
r3336 | hardaker | 2007-05-15 19:31:11 -0400 (Tue, 15 May 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/etc/Makefile.PL

fix path to source location for dnssec-tools.conf
------------------------------------------------------------------------
r3335 | rstory | 2007-05-15 18:16:22 -0400 (Tue, 15 May 2007) | 1 line
Changed paths:
   A /trunk/dnssec-tools/apps/proftpd/proftpd-1.3.x_dnssec_howto.txt
   A /trunk/dnssec-tools/apps/proftpd/proftpd-1.3.x_dnssec_patch.txt

patch for proftpd dnssec validation
------------------------------------------------------------------------
r3334 | rstory | 2007-05-15 17:57:57 -0400 (Tue, 15 May 2007) | 1 line
Changed paths:
   A /trunk/dnssec-tools/apps/proftpd

new dir
------------------------------------------------------------------------
r3333 | rstory | 2007-05-15 17:57:16 -0400 (Tue, 15 May 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0_dnssec_patch.txt

fix minor typo so dnssec is disabled by default, as documented
------------------------------------------------------------------------
r3332 | tewok | 2007-05-15 17:37:05 -0400 (Tue, 15 May 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm


Added rollrec_exists().
Reordered some of the interface descriptions in the pod.

------------------------------------------------------------------------
r3331 | hardaker | 2007-05-15 15:35:00 -0400 (Tue, 15 May 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/configure

updated output text to match file being talked about
------------------------------------------------------------------------
r3330 | hardaker | 2007-05-15 15:34:40 -0400 (Tue, 15 May 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

make Net::DNS::SEC optional with a nicer warning
------------------------------------------------------------------------
r3329 | hardaker | 2007-05-15 15:34:11 -0400 (Tue, 15 May 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/configure.in

updated output text to match file being talked about
------------------------------------------------------------------------
r3328 | tewok | 2007-05-15 15:18:01 -0400 (Tue, 15 May 2007) | 24 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-demo.rollrec


Changed example.com from a skip to a roll.
Added directory entries to dummy.com and example.com.
===================================================================
--- save-demo.rollrec	(revision 3213)
+++ save-demo.rollrec	(working copy)
@@ -2,13 +2,15 @@
 roll "dummy.com"
 	zonefile	"dummy.com.signed"
 	keyrec		"dummy.com.krf"
+	directory	"dir-dummy"
 	maxttl		"60"
 	display		"1"
 	phasestart	"Mon Sep 11 13:21:55 2006"
 
-skip "example.com"
+roll "example.com"
 	zonefile	"example.com.signed"
 	keyrec		"example.com.krf"
+	directory	"/tmp/dir-example"
 	maxttl		"60"
 	display		"1"
 	phasestart	"Mon Sep 11 13:22:17 2006"

------------------------------------------------------------------------
r3327 | tewok | 2007-05-15 15:16:34 -0400 (Tue, 15 May 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/README


Fixed copyright date.

------------------------------------------------------------------------
r3326 | tewok | 2007-05-15 15:15:53 -0400 (Tue, 15 May 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/Makefile


Fixed copyright date.
Added subdirectories.

------------------------------------------------------------------------
r3325 | hardaker | 2007-05-15 15:12:00 -0400 (Tue, 15 May 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/Makefile.in

use sysconfdir for mkpath instead of prefix
------------------------------------------------------------------------
r3324 | hardaker | 2007-05-15 15:11:33 -0400 (Tue, 15 May 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/configure.in

version number change => 1.2
------------------------------------------------------------------------
r3323 | rstory | 2007-05-15 11:33:50 -0400 (Tue, 15 May 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

- set VAL_LOCAL_ANSWER when NI_NUMERICHOST set for val_getnameinfo
- use unsigned char when printing ipaddr strings

------------------------------------------------------------------------
r3322 | rstory | 2007-05-11 16:29:40 -0400 (Fri, 11 May 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/dev-util/find-dns-calls

- refine regexp to exclude false positives by looking for '(' after func name
- search headers too

------------------------------------------------------------------------
r3321 | rstory | 2007-05-11 16:04:45 -0400 (Fri, 11 May 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/configure

update for new configure.in
------------------------------------------------------------------------
r3320 | rstory | 2007-05-09 15:53:02 -0400 (Wed, 09 May 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/dev-util/find-dns-calls

exclude functions that have a prefix on a dns name (eg my_req_query)
------------------------------------------------------------------------
r3319 | lfoster | 2007-05-09 14:21:23 -0400 (Wed, 09 May 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman


implement query failure retry time.

------------------------------------------------------------------------
r3318 | rstory | 2007-05-09 13:39:43 -0400 (Wed, 09 May 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/dev-util/find-dns-calls

fix typo in var name
------------------------------------------------------------------------
r3317 | rstory | 2007-05-09 11:42:32 -0400 (Wed, 09 May 2007) | 1 line
Changed paths:
   A /trunk/dnssec-tools/tools/dev-util/find-dns-calls

simple script to search for dns calls in C source code
------------------------------------------------------------------------
r3316 | rstory | 2007-05-09 11:40:54 -0400 (Wed, 09 May 2007) | 1 line
Changed paths:
   A /trunk/dnssec-tools/tools/dev-util

new dir for development utilities
------------------------------------------------------------------------
r3315 | rstory | 2007-05-09 11:40:09 -0400 (Wed, 09 May 2007) | 1 line
Changed paths:
   D /trunk/dnssec-tools/tools/patches

remove unused directory
------------------------------------------------------------------------
r3314 | rstory | 2007-05-09 11:38:37 -0400 (Wed, 09 May 2007) | 1 line
Changed paths:
   D /trunk/dnssec-tools/tools/patches/README

remove files prior to removing directory
------------------------------------------------------------------------
r3313 | tewok | 2007-05-08 15:27:41 -0400 (Tue, 08 May 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm


Modified the default location for roll_logfile to be in the local state
directory instead of the DNSSEC-Tools configuration directory.

------------------------------------------------------------------------
r3312 | tewok | 2007-05-08 15:15:13 -0400 (Tue, 08 May 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm.in


Added the getlocalstatedir() interface.

------------------------------------------------------------------------
r3311 | tewok | 2007-05-08 15:05:24 -0400 (Tue, 08 May 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/configure.in


Added expanded_localstatedir.

------------------------------------------------------------------------
r3310 | lfoster | 2007-05-08 14:36:45 -0400 (Tue, 08 May 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

key removal from named.conf implemented.
fixed some spacing issues in writing conf files.

------------------------------------------------------------------------
r3309 | lfoster | 2007-05-08 13:34:56 -0400 (Tue, 08 May 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

Fixed bug in named revocation.
Modified spacing done when adding new keys per Suresh's request.

------------------------------------------------------------------------
r3308 | hserus | 2007-05-08 11:35:33 -0400 (Tue, 08 May 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

Don't sleep for negative seconds

------------------------------------------------------------------------
r3307 | lfoster | 2007-05-07 14:45:03 -0400 (Mon, 07 May 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

Change creation of keys_to_verify so it is its own struct,
not a pointer to keystorage.


------------------------------------------------------------------------
r3306 | hserus | 2007-05-07 12:01:08 -0400 (Mon, 07 May 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

Define new function for printing the return value from functions in an ASCII format

------------------------------------------------------------------------
r3305 | hserus | 2007-05-07 12:00:51 -0400 (Mon, 07 May 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Set query status to Q_ANSWERED when an empty nxdomain/nodata answer is received

------------------------------------------------------------------------
r3304 | hserus | 2007-05-07 12:00:18 -0400 (Mon, 07 May 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.h

Store respondent_server information in empty nxdomain response

------------------------------------------------------------------------
r3303 | hserus | 2007-05-07 12:00:03 -0400 (Mon, 07 May 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.c

Store respondent_server information in empty nxdomain response
Check for NULL respondent_server in copy_rrset_rec()

------------------------------------------------------------------------
r3302 | hserus | 2007-05-07 11:59:45 -0400 (Mon, 07 May 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Using a common SR_ANS_NACK answer "kind" instead of three separate values: SR_ANS_NACK_NSEC, SR_ANS_NACK_NSEC3 and SR_ANS_NACK_SOA
No data condition does not require the SOA record to be present.
Store proper flag status in error result

------------------------------------------------------------------------
r3301 | hserus | 2007-05-07 11:59:13 -0400 (Mon, 07 May 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

Using a common SR_ANS_NACK answer "kind" instead of three separate values: SR_ANS_NACK_NSEC, SR_ANS_NACK_NSEC3 and SR_ANS_NACK_SOA
Define prototype for p_val_err()

------------------------------------------------------------------------
r3300 | tewok | 2007-05-07 11:45:38 -0400 (Mon, 07 May 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollset



Removed the -kskphase and -zskphase options.


------------------------------------------------------------------------
r3299 | tewok | 2007-05-07 11:14:15 -0400 (Mon, 07 May 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollchk


Used proper variable in an error message.

------------------------------------------------------------------------
r3298 | tewok | 2007-05-04 16:30:40 -0400 (Fri, 04 May 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollset


Added the -del-admin, -del-directory, and -del-loglevel options.

------------------------------------------------------------------------
r3297 | tewok | 2007-05-04 15:52:47 -0400 (Fri, 04 May 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm


Added the rollrec_delfield() interface.


------------------------------------------------------------------------
r3296 | lfoster | 2007-05-04 15:39:24 -0400 (Fri, 04 May 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

implemented key removal in dnsval.conf
fixed a bug where keys were inserted into a hash when the hash
  was accessed in a for statement

------------------------------------------------------------------------
r3295 | lfoster | 2007-05-04 14:32:27 -0400 (Fri, 04 May 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

fixed bug in revocation from dnsval.conf


------------------------------------------------------------------------
r3294 | tewok | 2007-05-03 17:44:28 -0400 (Thu, 03 May 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Deleted a bunch of obsolete code from outfld().

------------------------------------------------------------------------
r3293 | tewok | 2007-05-03 17:43:16 -0400 (Thu, 03 May 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Removed the obsolete fifth argument to outfld().

------------------------------------------------------------------------
r3292 | tewok | 2007-05-03 17:41:23 -0400 (Thu, 03 May 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Rewrote the purpose comment in outfld()'s code header.

------------------------------------------------------------------------
r3291 | tewok | 2007-05-03 17:40:08 -0400 (Thu, 03 May 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Renamed outstr() to outfld() as that's more indicative of the
routine's purpose.

------------------------------------------------------------------------
r3290 | tewok | 2007-05-03 17:13:32 -0400 (Thu, 03 May 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Moved a duplicated type-segregation check from two routines into
getrollrecs(), thus giving a blinding increase in speed.

------------------------------------------------------------------------
r3289 | tewok | 2007-05-03 16:36:15 -0400 (Thu, 03 May 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Fixed a bug wherein giving -kskphase and -zskphase caused no output
to be displayed.

------------------------------------------------------------------------
r3288 | tewok | 2007-05-03 13:54:17 -0400 (Thu, 03 May 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Deleted a duplicated code blob.

------------------------------------------------------------------------
r3287 | tewok | 2007-05-03 13:43:35 -0400 (Thu, 03 May 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Fixed to calculate lengths on only the type of records being displayed.
Fixed a line in the usage message.

------------------------------------------------------------------------
r3286 | tewok | 2007-05-02 17:53:36 -0400 (Wed, 02 May 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm


$Credit->{'due'}.

------------------------------------------------------------------------
r3285 | tewok | 2007-05-02 17:41:28 -0400 (Wed, 02 May 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollset


Added a pod note about a known problem with the code.
(Which will be resolved RSN...)

------------------------------------------------------------------------
r3284 | tewok | 2007-05-02 17:37:51 -0400 (Wed, 02 May 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollchk


Added validation of directory fields in rollrecs.
Fixed a comment about checkfile()'s return values.


------------------------------------------------------------------------
r3283 | tewok | 2007-05-02 17:06:36 -0400 (Wed, 02 May 2007) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollset


Incremented the rollset version.
Added the -directory option.
Added -admin to the usage message.
 

------------------------------------------------------------------------
r3282 | tewok | 2007-05-02 17:01:26 -0400 (Wed, 02 May 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Fixed a pair of bugs wherein the admin and directory were always being given
as the default.

------------------------------------------------------------------------
r3281 | tewok | 2007-05-02 16:26:06 -0400 (Wed, 02 May 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollinit


Added the -directory option.


------------------------------------------------------------------------
r3280 | rstory | 2007-05-02 15:30:28 -0400 (Wed, 02 May 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0_dnssec_howto.txt
   M /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0_dnssec_patch.txt

Final patch for 3.2.0.

------------------------------------------------------------------------
r3279 | tewok | 2007-05-02 14:22:23 -0400 (Wed, 02 May 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Added support for the directory rollrec field (including the new -directory
option.)

------------------------------------------------------------------------
r3278 | tewok | 2007-05-02 14:00:49 -0400 (Wed, 02 May 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Removed the -all option.
Made -roll and -skip mutually exclusive.

------------------------------------------------------------------------
r3277 | tewok | 2007-05-01 21:35:57 -0400 (Tue, 01 May 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Added support for display field in rollrecs.


------------------------------------------------------------------------
r3276 | tewok | 2007-05-01 21:33:46 -0400 (Tue, 01 May 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Added support for display field in rollrecs.
 

------------------------------------------------------------------------
r3275 | tewok | 2007-05-01 17:23:13 -0400 (Tue, 01 May 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm
   M /trunk/dnssec-tools/tools/modules/rollrec.pod


Added the "directory" rollrec field.
Clarified an error message in rollrec_read().

------------------------------------------------------------------------
r3274 | tewok | 2007-05-01 11:43:23 -0400 (Tue, 01 May 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Deleted an unneeded blank line.

------------------------------------------------------------------------
r3273 | tewok | 2007-05-01 11:01:14 -0400 (Tue, 01 May 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Clarified an error message.

------------------------------------------------------------------------
r3272 | lfoster | 2007-04-30 18:37:58 -0400 (Mon, 30 Apr 2007) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

- start on remove holddown implementation
- store key data only for domains we are actually going to monitor
- populate reverse domains for later use
- clean up some old code and comments



------------------------------------------------------------------------
r3271 | hserus | 2007-04-30 18:16:28 -0400 (Mon, 30 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

If no answers are returned from the DNS, the validation status is untrusted

------------------------------------------------------------------------
r3270 | tewok | 2007-04-30 12:08:31 -0400 (Mon, 30 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollchk


Fixed another code comment.

------------------------------------------------------------------------
r3269 | tewok | 2007-04-30 12:04:29 -0400 (Mon, 30 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollchk


Fixed a code comment.

------------------------------------------------------------------------
r3268 | tewok | 2007-04-30 11:52:19 -0400 (Mon, 30 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollchk


Fixed some code comments.

------------------------------------------------------------------------
r3267 | tewok | 2007-04-30 11:33:01 -0400 (Mon, 30 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm


Fixed a pod comment.

------------------------------------------------------------------------
r3266 | hardaker | 2007-04-27 17:38:00 -0400 (Fri, 27 Apr 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/dnssecstatusOverlay.js

better implementation of context sensitive windows
------------------------------------------------------------------------
r3265 | hserus | 2007-04-27 13:25:28 -0400 (Fri, 27 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Initialize provably unsecure status

------------------------------------------------------------------------
r3264 | hserus | 2007-04-27 11:56:54 -0400 (Fri, 27 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Add some logging info for bogus proofs

------------------------------------------------------------------------
r3263 | marz | 2007-04-27 11:04:54 -0400 (Fri, 27 Apr 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs

perl resolve_and_check() fixes
------------------------------------------------------------------------
r3262 | hardaker | 2007-04-26 22:26:24 -0400 (Thu, 26 Apr 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/dnssecstatusOverlay.js

usage visibility improvements
------------------------------------------------------------------------
r3261 | hserus | 2007-04-26 17:22:17 -0400 (Thu, 26 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/NEWS

Added new libval-related items

------------------------------------------------------------------------
r3260 | hserus | 2007-04-26 16:42:26 -0400 (Thu, 26 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

Don't export the p_query_status and val_refresh_* functions

------------------------------------------------------------------------
r3259 | hserus | 2007-04-26 16:34:06 -0400 (Thu, 26 Apr 2007) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

While looking for a validated result keep going up looking for trust anchors at a higher level if the trust
anchor at the current level does not match.
Allow unlimited TTL for nsec3 iterations policy
Add VAL_NONEXISTENT_NAME_NOCHAIN to the list of non-existence conditions


------------------------------------------------------------------------
r3258 | hserus | 2007-04-26 16:28:42 -0400 (Thu, 26 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/etc/README

Update copyright date

------------------------------------------------------------------------
r3257 | hserus | 2007-04-26 16:28:13 -0400 (Thu, 26 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

Dont display (incorrect) query status

------------------------------------------------------------------------
r3256 | hserus | 2007-04-26 16:27:08 -0400 (Thu, 26 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/README
   M /trunk/dnssec-tools/validator/libval/README

Update copyright date

------------------------------------------------------------------------
r3255 | hserus | 2007-04-26 16:25:33 -0400 (Thu, 26 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/README

Description of command-line tools is already available in the docs/ directory 

------------------------------------------------------------------------
r3254 | hserus | 2007-04-26 16:23:44 -0400 (Thu, 26 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/README

Say which configure flags are supported.


------------------------------------------------------------------------
r3253 | hserus | 2007-04-26 16:22:52 -0400 (Thu, 26 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/Makefile.in
   M /trunk/dnssec-tools/validator/doc/README
   M /trunk/dnssec-tools/validator/doc/dnsval.conf.3
   M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod
   A /trunk/dnssec-tools/validator/doc/getaddr.1
   A /trunk/dnssec-tools/validator/doc/getaddr.pod
   A /trunk/dnssec-tools/validator/doc/gethost.1
   A /trunk/dnssec-tools/validator/doc/gethost.pod
   M /trunk/dnssec-tools/validator/doc/libsres-implementation-notes
   M /trunk/dnssec-tools/validator/doc/libsres.3
   M /trunk/dnssec-tools/validator/doc/libsres.pod
   M /trunk/dnssec-tools/validator/doc/libval-implementation-notes
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod
   M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.3
   M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.pod
   M /trunk/dnssec-tools/validator/doc/val_gethostbyname.3
   M /trunk/dnssec-tools/validator/doc/val_gethostbyname.pod
   M /trunk/dnssec-tools/validator/doc/val_query.3
   M /trunk/dnssec-tools/validator/doc/val_query.pod
   M /trunk/dnssec-tools/validator/doc/validate.1
   M /trunk/dnssec-tools/validator/doc/validate.pod

Update pod for libval

------------------------------------------------------------------------
r3252 | hserus | 2007-04-26 16:14:38 -0400 (Thu, 26 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/selftests.dist

Comment out NSEC3 tests

------------------------------------------------------------------------
r3251 | hserus | 2007-04-26 16:12:07 -0400 (Thu, 26 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/val_errors.h

Move VAL_AC_DATA_MISSING to the list of "bad state" conditions

------------------------------------------------------------------------
r3250 | rstory | 2007-04-26 12:36:58 -0400 (Thu, 26 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0_dnssec_howto.txt
   M /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0_dnssec_patch.txt

update for proper configure checks for supported libs and enabling dnssec code

------------------------------------------------------------------------
r3249 | marz | 2007-04-26 09:26:01 -0400 (Thu, 26 Apr 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_debug.c

remove debug
------------------------------------------------------------------------
r3248 | marz | 2007-04-26 09:13:33 -0400 (Thu, 26 Apr 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/Makefile.in
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/README
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs
   M /trunk/dnssec-tools/validator/include/validator/resolver.h
   M /trunk/dnssec-tools/validator/libsres/res_debug.c
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

fixes for perl resolve_and_check and docs
------------------------------------------------------------------------
r3246 | hardaker | 2007-04-25 20:10:46 -0400 (Wed, 25 Apr 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/Makefile
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/README
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/about.xul
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/contents.rdf
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/dnssecstatusOverlay.js
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/dnssecstatusOverlay.xul
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/prefs.js
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/content/dnssecstatus/prefs.xul
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/skin
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/skin/classic
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/skin/classic/dnssecstatus
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/skin/classic/dnssecstatus/contents.rdf
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/chrome/skin/classic/dnssecstatus/dnssecstatus_icon_big.png
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/defaults
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/defaults/preferences
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/defaults/preferences/dnssecstatus.js
   A /trunk/dnssec-tools/apps/mozilla/dnssec-status/install.rdf

new patch for firefox to pass DNS events up from the transport layer using the observer mechanisms; a new firefox extension to catch those events, count and display them
------------------------------------------------------------------------
r3245 | hserus | 2007-04-25 11:38:05 -0400 (Wed, 25 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Handle negative proofs in DLV in a better manner. 

------------------------------------------------------------------------
r3244 | hserus | 2007-04-24 17:09:42 -0400 (Tue, 24 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/etc/dnsval.conf

Ignore signature expiration times for zones under fruits.netsec.tislabs.com instead of netsec.tislabs.com

------------------------------------------------------------------------
r3243 | hserus | 2007-04-24 17:06:32 -0400 (Tue, 24 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/etc/dnsval.conf

Add sample dlv policy

------------------------------------------------------------------------
r3242 | hserus | 2007-04-24 17:03:26 -0400 (Tue, 24 Apr 2007) | 30 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

- Always use query_for_query chain in order to access assertions, so that qfq_flags can be appropriately
  honored
- Reset alias information in reset_query_chain_node()
- add_to_query_chain() directly adds element to list within context
- Added new function val_does_not_exist() that returns true if one of the nonexistence types is returned
- Handle root zone in find_trust_point()
- Handle root zone in is_trusted_key()
- Renamed check_conflicting_answers() as try_build_chain() because the function also calls
  build_pending_query()
- Ifdef out find_next_zonecut()
- Invoke loop detection logic when trying to merge glue into referral
- bug fix in fetching cached rrset for cname owner
- Modify verify_provably_unsecure so that it proves non-existence for a name instead of the entire
authentication chain element
- DLV implementation:
    - added new function find_dlv_trust_point() to identify trustpoint and target for a given query name
    - added new function replace_name_in_name() to create name in DLV tree
    - added new function check_anc_proof() to check aggressive negative cache
    - added new function find_dlv_record() to do exactly that
    - added new function set_dlv_branchoff() to create the link between the normal tree and the DLV tree
    - defined new 'flags' member for val_internal_result. Flags may be different for each result chain (one
      may use DLV while the other may not need to)
    - modified get_zse() (and is_trusted_key also) to return correct zone security expectation while
      building authentication chain
    - move general sanity checking of results into a separate function, fix_validation_result, invoked from
verify_and_validate() to better assist in determining when to invoke the DLV logic
    - re-wrote much of the negative proof checking logic in order to support ANC
    - logic to kickstart DLV when val_isvalidated() returns false
    - logic to check provably insecure condition chaining down from the DLV tree

------------------------------------------------------------------------
r3241 | hserus | 2007-04-24 17:02:42 -0400 (Tue, 24 Apr 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.h

- Always use query_for_query chain in order to access assertions, so that  qfq_flags can be appropriately
honored
- Added prototypes for val_does_not_exist() and check_anc_proof()

------------------------------------------------------------------------
r3240 | hserus | 2007-04-24 17:02:30 -0400 (Tue, 24 Apr 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.h

- Add new structure for allowing detection of glue fetch loops
- Always use query_for_query chain in order to access assertions, so that  qfq_flags can be appropriately
honored

------------------------------------------------------------------------
r3239 | hserus | 2007-04-24 17:01:44 -0400 (Tue, 24 Apr 2007) | 12 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

- Always use query_for_query chain in order to access assertions, so that  qfq_flags can be appropriately
honored
- Detect loops in the glue fetch operation
- Move logic of using root hints for a root referral from follow_referral_or_alias_link to
bootstrap_referral, since the second function is the common denominator
- When fetching glue for nameservers where other zone ns's are known, jumpstart the lookup process from the
known name server list
- register the query with the referral monitor only if the referral was actually sent, not if we are still
waiting for glue
- Now keeping track of learned zone information in the struct delegation_info. Save name server information
in the cache only when we have all information about it (including glue)

------------------------------------------------------------------------
r3238 | hserus | 2007-04-24 17:01:26 -0400 (Tue, 24 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.h

- Initialize the learned_zones member in ALLOCATE_REFERRAL_BLOCK

------------------------------------------------------------------------
r3237 | hserus | 2007-04-24 17:00:55 -0400 (Tue, 24 Apr 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.h

- Moved const string definitions from val_policy.h to validator.h
- Removed dlv-max-links policy definition
- Add data structure for DLV trust point maintenance
- In val_get_token() qualify the comment arg with "const"

------------------------------------------------------------------------
r3236 | hserus | 2007-04-24 17:00:40 -0400 (Tue, 24 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.c

- Intialize ttl only when the variable is created.

------------------------------------------------------------------------
r3235 | hserus | 2007-04-24 17:00:28 -0400 (Tue, 24 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_cache.c
   M /trunk/dnssec-tools/validator/libval/val_cache.h

- change get_nslist_from_cache() prototype so that we can pass the query_for_query structure to
bootstrap_referral()

------------------------------------------------------------------------
r3234 | hserus | 2007-04-24 17:00:12 -0400 (Tue, 24 Apr 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

- Removed dlv-max-links policy handling
- Added parse function for DLV policy
- In val_get_token() qualify the comment arg with "const"

------------------------------------------------------------------------
r3233 | hserus | 2007-04-24 16:59:37 -0400 (Tue, 24 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_query.c

- Minor ifdef twiddle

------------------------------------------------------------------------
r3232 | hserus | 2007-04-24 16:59:23 -0400 (Tue, 24 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_debug.c

- Recognize the DLV typecode

------------------------------------------------------------------------
r3231 | hserus | 2007-04-24 16:59:05 -0400 (Tue, 24 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_selftest.c

- In val_get_token(), qualify the comment arg with "const" 

------------------------------------------------------------------------
r3230 | hserus | 2007-04-24 16:58:28 -0400 (Tue, 24 Apr 2007) | 10 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

- Re-structured flags to val_resolve_and_check (query flags in the lower nibble, internal flags in the upper nibble)
- Defined new query flags for DLV
- Added new definition for glue dependency chain max length
- Removed definition for dlv-max-links policy
- Moved const string definitions from val_policy.h to validator.h
- Now keeping track of learned zone information in the struct delegation_info. Save name server information
in the cache only when we have all information about it (including glue)
- Define new flags member for val_internal_result. Flags may be different for each result chain (one may use DLV while the other may not need to)
- Added proto for val_does_not_exist()

------------------------------------------------------------------------
r3229 | hserus | 2007-04-24 16:57:48 -0400 (Tue, 24 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/resolver.h

- Defined typecode for DLV

------------------------------------------------------------------------
r3228 | lfoster | 2007-04-23 16:25:37 -0400 (Mon, 23 Apr 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman


implements revocation of trust anchors in named.conf.


------------------------------------------------------------------------
r3227 | tewok | 2007-04-20 11:24:01 -0400 (Fri, 20 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Extended the white background of the infostripe across all columns.

------------------------------------------------------------------------
r3226 | tewok | 2007-04-20 11:09:36 -0400 (Fri, 20 Apr 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Hushed key archiving.
Made the key-archive log message a bit more useful.

------------------------------------------------------------------------
r3225 | tewok | 2007-04-19 21:43:51 -0400 (Thu, 19 Apr 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/keyarch


Added a timestamp to the beginning of the archived key's name.
Added some pod discussing the programs exit values.
 

------------------------------------------------------------------------
r3224 | marz | 2007-04-19 16:55:50 -0400 (Thu, 19 Apr 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs

perl resolve_and_check() fixes
------------------------------------------------------------------------
r3223 | marz | 2007-04-19 13:55:43 -0400 (Thu, 19 Apr 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs

perl resolve_and_check()
------------------------------------------------------------------------
r3222 | tewok | 2007-04-19 13:39:32 -0400 (Thu, 19 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Deleted two unused variables.

------------------------------------------------------------------------
r3221 | tewok | 2007-04-19 13:37:15 -0400 (Thu, 19 Apr 2007) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Deleted several unused zone keyrec fields: kskroll, rollphase, rollstart,
signing_set, zskcurpath, zsknewpath, zskpubpath, and zskroll.

Deleted an unused key keyrec fields:  signing_set.

------------------------------------------------------------------------
r3220 | tewok | 2007-04-19 05:19:11 -0400 (Thu, 19 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-demo-smallset.rollrec
   M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-demo.rollrec


Deleted the obsolete curphase records.

------------------------------------------------------------------------
r3219 | tewok | 2007-04-19 05:10:01 -0400 (Thu, 19 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/rundemo


Upgraded to the same version used by rollerd-basic demo.

------------------------------------------------------------------------
r3218 | tewok | 2007-04-19 05:06:45 -0400 (Thu, 19 Apr 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/rundemo


Reorganized the code and gave it real option handling.
Added the -autods option so the DS-publishing part of KSK rollover can be
faked.  (This is useful for just letting the demo run and run and run...)

------------------------------------------------------------------------
r3217 | tewok | 2007-04-19 03:19:39 -0400 (Thu, 19 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Fixed two typos in the usage message.

------------------------------------------------------------------------
r3216 | tewok | 2007-04-19 03:02:53 -0400 (Thu, 19 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Removed some log-cluttering log messages.

------------------------------------------------------------------------
r3215 | tewok | 2007-04-17 21:54:05 -0400 (Tue, 17 Apr 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pod


Brought the fields up-to-date.


------------------------------------------------------------------------
r3214 | tewok | 2007-04-17 20:32:15 -0400 (Tue, 17 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm


Removed obsolete rollrec_signdate and rollrec_signsecs entries.

------------------------------------------------------------------------
r3213 | tewok | 2007-04-17 20:23:40 -0400 (Tue, 17 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-demo.rollrec


Deleted obsolete curphase records.

------------------------------------------------------------------------
r3212 | tewok | 2007-04-17 16:30:43 -0400 (Tue, 17 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pod


Added descriptions of what is valid for rollrec names and field values.

------------------------------------------------------------------------
r3211 | tewok | 2007-04-17 16:13:04 -0400 (Tue, 17 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pod


Added descriptions of what is valid for keyrec names and field values.

------------------------------------------------------------------------
r3210 | hserus | 2007-04-17 15:26:43 -0400 (Tue, 17 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Perform proper transformation of the wildcard proof into the result structure.

------------------------------------------------------------------------
r3209 | tewok | 2007-04-17 13:00:05 -0400 (Tue, 17 Apr 2007) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Turned off -ref and -unref if both were given on the command line.  (This
relates to internal logic.)
Ensure that a record-selection option was given.
Reworked a couple assignments for cleaner logic.


------------------------------------------------------------------------
r3208 | tewok | 2007-04-17 12:39:42 -0400 (Tue, 17 Apr 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Fixed bugs in -ref and -unref processing so they work properly now.
Renamed refdkey() to refdkeyrec() to better match its new functionality.

------------------------------------------------------------------------
r3207 | hserus | 2007-04-17 09:58:07 -0400 (Tue, 17 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_selftest.c
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_policy.h

Support multiple comment characters for the same config file
resolv.conf can use either ; or # as the comment character

------------------------------------------------------------------------
r3206 | hardaker | 2007-04-16 15:28:51 -0400 (Mon, 16 Apr 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/README

doc update
------------------------------------------------------------------------
r3205 | lfoster | 2007-04-16 14:58:11 -0400 (Mon, 16 Apr 2007) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

Added revocation of keys from dnsval.conf.
This depends on the revoke bit being received
  in a query of type DNSKEY and this bit is called REVOKE.
Left in some commented out test code since there is no operational
  revocation that I know of.


------------------------------------------------------------------------
r3204 | tewok | 2007-04-16 14:15:58 -0400 (Mon, 16 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Fixed a bit of pod.

------------------------------------------------------------------------
r3203 | rstory | 2007-04-13 18:21:54 -0400 (Fri, 13 Apr 2007) | 1 line
Changed paths:
   A /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0_dnssec_howto.txt

initial incomplete patch for ncftp
------------------------------------------------------------------------
r3202 | rstory | 2007-04-13 18:21:34 -0400 (Fri, 13 Apr 2007) | 1 line
Changed paths:
   A /trunk/dnssec-tools/apps/ncftp
   A /trunk/dnssec-tools/apps/ncftp/ncftp-3.2.0_dnssec_patch.txt

initial incomplete patch for ncftp
------------------------------------------------------------------------
r3201 | hserus | 2007-04-13 17:38:19 -0400 (Fri, 13 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Some more fine-tuning of the wildcard proof checking logic

------------------------------------------------------------------------
r3200 | tewok | 2007-04-13 16:52:03 -0400 (Fri, 13 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added kskobs keys to the set of unreferenced keys.

------------------------------------------------------------------------
r3199 | hserus | 2007-04-13 16:25:41 -0400 (Fri, 13 Apr 2007) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

- set initial value of ttl only during variable creation
- set ttl type as u_int32_t instead of long
- split the provably unsecure check into two functions - one for span check and the other for wildcard 
check. Make the test for wildcard optional through a param.
- ifdef out the prove_existence function
- When checking for wildcard sanity check for the non-existence of the name instead of the existence of the
wildcard

------------------------------------------------------------------------
r3198 | hserus | 2007-04-13 16:25:16 -0400 (Fri, 13 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.h
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

set ttl type as u_int32_t instead of long

------------------------------------------------------------------------
r3197 | hserus | 2007-04-13 16:24:43 -0400 (Fri, 13 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

In val_log_assertion_chain show NULL results 

------------------------------------------------------------------------
r3196 | tewok | 2007-04-13 15:51:12 -0400 (Fri, 13 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/INFO
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL
   M /trunk/dnssec-tools/tools/scripts/README


Added cleanarch.

------------------------------------------------------------------------
r3195 | tewok | 2007-04-13 14:56:25 -0400 (Fri, 13 Apr 2007) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/scripts/cleanarch


New command for cleaning key archives.

------------------------------------------------------------------------
r3194 | tewok | 2007-04-13 12:53:35 -0400 (Fri, 13 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/fixkrf
   M /trunk/dnssec-tools/tools/scripts/timetrans


Fixed the copyright dates.

------------------------------------------------------------------------
r3193 | hardaker | 2007-04-13 12:04:44 -0400 (Fri, 13 Apr 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch

remove a debugging statement
------------------------------------------------------------------------
r3192 | hardaker | 2007-04-13 11:31:05 -0400 (Fri, 13 Apr 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch

new patch to show a different error screen on validated DNE errors
------------------------------------------------------------------------
r3191 | hardaker | 2007-04-11 19:01:11 -0400 (Wed, 11 Apr 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

set the keyarchive directory
------------------------------------------------------------------------
r3190 | rstory | 2007-04-11 16:48:11 -0400 (Wed, 11 Apr 2007) | 1 line
Changed paths:
   A /trunk/dnssec-tools/apps/lftp
   A /trunk/dnssec-tools/apps/lftp/lftp-3-4-7_dnssec_howto.txt
   A /trunk/dnssec-tools/apps/lftp/lftp-3-4-7_dnssec_patch.txt

initial incomplete patch for lftp
------------------------------------------------------------------------
r3189 | hserus | 2007-04-10 17:00:35 -0400 (Tue, 10 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

Add new qfq_flags member to the queries_for_query structure

------------------------------------------------------------------------
r3188 | hardaker | 2007-04-10 16:47:59 -0400 (Tue, 10 Apr 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/dist/dnssec-tools.spec

update to 1.1.1; change my email address to the FExtras registered address
------------------------------------------------------------------------
r3187 | hserus | 2007-04-10 14:24:37 -0400 (Tue, 10 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/getaddr.c

Display return code and validation status code

------------------------------------------------------------------------
r3186 | hserus | 2007-04-10 14:16:19 -0400 (Tue, 10 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

Ensure that val_status gets set even when names do not exist 

------------------------------------------------------------------------
r3185 | hardaker | 2007-04-10 11:04:10 -0400 (Tue, 10 Apr 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch

make the getaddrinfo PR replacement function use the val_ version in the proper fashion rather than the work-around fashion
------------------------------------------------------------------------
r3184 | rstory | 2007-04-10 08:56:03 -0400 (Tue, 10 Apr 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h
   M /trunk/dnssec-tools/validator/libval/val_context.c
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

- support for val_res_search
  - look for and parse 'search' in resolv.conf
  - use search path for single label queries

------------------------------------------------------------------------
r3183 | tewok | 2007-04-09 15:34:31 -0400 (Mon, 09 Apr 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/rundemo


Converted to Perl.
Added an option that allows user-specification of logging level.

------------------------------------------------------------------------
r3182 | tewok | 2007-04-09 15:27:48 -0400 (Mon, 09 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pod


Fixed the descriptions of keyrec_setdate and keyrec_setsecs.

------------------------------------------------------------------------
r3181 | tewok | 2007-04-09 15:24:00 -0400 (Mon, 09 Apr 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Fixed the pod describing -long.


------------------------------------------------------------------------
r3180 | tewok | 2007-04-09 15:16:49 -0400 (Mon, 09 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Fixed a bug that was preventing set labels from being printed.

------------------------------------------------------------------------
r3179 | tewok | 2007-04-09 14:59:52 -0400 (Mon, 09 Apr 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Renamed -obs to -zobs.
Made -obs be shorthand for -kobs and -zobs.

------------------------------------------------------------------------
r3178 | tewok | 2007-04-09 14:45:03 -0400 (Mon, 09 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Restored printing of obsolete-key data.

------------------------------------------------------------------------
r3177 | tewok | 2007-04-09 13:43:02 -0400 (Mon, 09 Apr 2007) | 14 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Modified key output so instead of being alphabetically sorted by name,
it is sorted in key-type order.  This order is:

	Current KSK
	Published KSK
	Current ZSK
	Published ZSK
	New ZSK
	Obsolete KSK
	Obsolete ZSK

More clarifying pod was added to describe option use.

------------------------------------------------------------------------
r3176 | tewok | 2007-04-09 12:34:50 -0400 (Mon, 09 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added a little more pod describing the output format.

------------------------------------------------------------------------
r3175 | tewok | 2007-04-09 12:30:22 -0400 (Mon, 09 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added a bunch of pod describing the output.

------------------------------------------------------------------------
r3174 | tewok | 2007-04-09 12:22:21 -0400 (Mon, 09 Apr 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added the -z-sets option aggregator.
Fixed the pod for -z-ksk and -z-zsk.

------------------------------------------------------------------------
r3173 | tewok | 2007-04-09 11:02:24 -0400 (Mon, 09 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added the -z-dates aggregator.

------------------------------------------------------------------------
r3172 | tewok | 2007-04-07 15:18:29 -0400 (Sat, 07 Apr 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added the -z-ksk and -z-zsk aggregator options.


------------------------------------------------------------------------
r3171 | tewok | 2007-04-07 14:04:10 -0400 (Sat, 07 Apr 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added the -z-dirs option aggregator.


------------------------------------------------------------------------
r3170 | tewok | 2007-04-07 13:30:03 -0400 (Sat, 07 Apr 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added the -z-kskdir and -z-zskdir options.


------------------------------------------------------------------------
r3169 | tewok | 2007-04-07 12:31:09 -0400 (Sat, 07 Apr 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added the -z-kskcount and -z-zskcount options.


------------------------------------------------------------------------
r3168 | tewok | 2007-04-07 11:37:43 -0400 (Sat, 07 Apr 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added the -z-signfile option.


------------------------------------------------------------------------
r3167 | tewok | 2007-04-06 23:35:07 -0400 (Fri, 06 Apr 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Switch display order of published and new ZSKs.
Add a no-key-data note to the pod.

------------------------------------------------------------------------
r3166 | tewok | 2007-04-06 23:20:45 -0400 (Fri, 06 Apr 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added the -z-kskcur, -z-kskpub, -z-zskcur, -z-zsknew, and -z-zskpub options.
 

------------------------------------------------------------------------
r3165 | tewok | 2007-04-06 22:00:55 -0400 (Fri, 06 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added the -s-keys, -s-lastmod, and -s-zone options.

------------------------------------------------------------------------
r3164 | hardaker | 2007-04-06 18:37:29 -0400 (Fri, 06 Apr 2007) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch
   M /trunk/dnssec-tools/apps/mozilla/firefox.spec

A new version of the patch:
  - debugging statements have been stripped
  - the APIs have been rewritten so the optional extended-error
    status codes that are produced by DNSSEC aren't passed back unless
    requested.

------------------------------------------------------------------------
r3163 | tewok | 2007-04-04 23:17:05 -0400 (Wed, 04 Apr 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added keylife back into the -long output.
Modified the unset keylife message.

------------------------------------------------------------------------
r3162 | tewok | 2007-04-04 22:54:16 -0400 (Wed, 04 Apr 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Fixed the help messages for the new -h-* options.


------------------------------------------------------------------------
r3161 | lfoster | 2007-04-04 17:52:39 -0400 (Wed, 04 Apr 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

remove query_authserver function; this is now done by resolve_and_check_dnskey

change sleep method, so only those zones which have reached their
  active refresh time are re-queried

------------------------------------------------------------------------
r3160 | tewok | 2007-04-04 17:17:06 -0400 (Wed, 04 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added the -h-zones, -h-sets, and -h-keys options.

------------------------------------------------------------------------
r3159 | tewok | 2007-04-04 13:27:40 -0400 (Wed, 04 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added the -k-path option to display a key's path.

------------------------------------------------------------------------
r3158 | tewok | 2007-04-04 13:19:39 -0400 (Wed, 04 Apr 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added -k-random to display keys' random number generators.
Rearranged some options in the help message.


------------------------------------------------------------------------
r3157 | baerm | 2007-04-04 12:48:37 -0400 (Wed, 04 Apr 2007) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/wget/wget-1.10.2_dnssec_howto.txt
   A /trunk/dnssec-tools/apps/wget/wget-1.10.2_dnssec_patch.txt

adding wget patch and how to

------------------------------------------------------------------------
r3156 | baerm | 2007-04-04 12:07:40 -0400 (Wed, 04 Apr 2007) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/apps/wget

adding directory for wget


------------------------------------------------------------------------
r3155 | tewok | 2007-04-03 22:25:50 -0400 (Tue, 03 Apr 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Fixed the -terse for set data to only print the set names.

------------------------------------------------------------------------
r3154 | tewok | 2007-04-03 18:04:08 -0400 (Tue, 03 Apr 2007) | 21 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Pretty-printing fixes:
	Added pretty-printing for keys.
		(In addition to the basic additions required for support, this
		modified how keys are output.  Rather than printing the key
		data as the key is selected (as is done for zones and sets),
		the keys selected for output are added to a new hash.  After
		all keys are selected, the selected-keys hash is output.)
	Changed -label handling so that -headers doesn't turn off key labeling.
	Changed some "Fooname" output strings to "Foo Name".

Fixed some outstr() logic that was requiring unnecessary special-case code.
Fixed some refdkey() logic that wasn't checking signing sets for KSKCUR keys.

Code clean-up:
	Changed some hard constants to perl-consts.
	Assign aligns.
	Adjusted some variable comments.
	Moved outstr() to a more appropriate place.


------------------------------------------------------------------------
r3153 | hserus | 2007-04-03 16:04:53 -0400 (Tue, 03 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

Add rrsigs to the query response

------------------------------------------------------------------------
r3152 | hserus | 2007-04-03 14:54:10 -0400 (Tue, 03 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator-config.h.in

run autoheader

------------------------------------------------------------------------
r3151 | hserus | 2007-04-03 14:27:54 -0400 (Tue, 03 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c
   M /trunk/dnssec-tools/validator/apps/validator_driver.h
   M /trunk/dnssec-tools/validator/apps/validator_selftest.c

Make sure that user-supplied flags are not lost

------------------------------------------------------------------------
r3150 | hserus | 2007-04-03 14:23:35 -0400 (Tue, 03 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in

Made nsec3 and dlv configure logic similar to that of ipv6

------------------------------------------------------------------------
r3149 | rstory | 2007-04-03 12:19:50 -0400 (Tue, 03 Apr 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.c

initialize uninitialized variables
------------------------------------------------------------------------
r3148 | rstory | 2007-04-03 12:19:09 -0400 (Tue, 03 Apr 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/Makefile.in

for test target, use local selftest config, and only run default suite
------------------------------------------------------------------------
r3147 | rstory | 2007-04-03 12:10:49 -0400 (Tue, 03 Apr 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.c

- fix socket size param in connect() call to keep OS X happy
- add more debugging outpu
- don't loop beyond FD_SETSIZE
- fix param to inet_ntop()

------------------------------------------------------------------------
r3146 | lfoster | 2007-04-02 17:48:03 -0400 (Mon, 02 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

removed code no longer used.

------------------------------------------------------------------------
r3145 | lfoster | 2007-04-02 16:55:21 -0400 (Mon, 02 Apr 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

Removed some no-longer-relevant comments

------------------------------------------------------------------------
r3144 | tewok | 2007-03-31 11:08:16 -0400 (Sat, 31 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Localized a few keyrec hashes to get "-zones -sets -headers" working properly.

------------------------------------------------------------------------
r3143 | rstory | 2007-03-30 15:01:36 -0400 (Fri, 30 Mar 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in

- fix prefix in val_sysconfdir
- use AH_TEMPATE instead of AC_DEFINE, since we don't have the real value yet
- fix with-ipv6 logic

------------------------------------------------------------------------
r3142 | hserus | 2007-03-30 10:37:11 -0400 (Fri, 30 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_policy.h

Rename DLV to LIBVAL_DLV

------------------------------------------------------------------------
r3141 | tewok | 2007-03-30 10:21:58 -0400 (Fri, 30 Mar 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added pretty-printing for zone output.
Generalized some of the pretty-printing code.
Made -headers and -label mutually exclusive.

------------------------------------------------------------------------
r3140 | hserus | 2007-03-30 10:20:46 -0400 (Fri, 30 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_assertion.h
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Rename is_trusted_zone to get_zse

------------------------------------------------------------------------
r3139 | hserus | 2007-03-30 10:13:45 -0400 (Fri, 30 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_cache.c

Use correct lock init var for the name server map

------------------------------------------------------------------------
r3138 | lfoster | 2007-03-29 17:17:21 -0400 (Thu, 29 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman


fixed hardcoded filename for persistent data.

------------------------------------------------------------------------
r3137 | rstory | 2007-03-29 16:43:00 -0400 (Thu, 29 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in
   M /trunk/dnssec-tools/validator/include/validator-config.h.in

add --with-ipv6

------------------------------------------------------------------------
r3136 | rstory | 2007-03-29 16:36:43 -0400 (Thu, 29 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.c
   M /trunk/dnssec-tools/validator/libval/val_log.c
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

IPv6 support

------------------------------------------------------------------------
r3135 | tewok | 2007-03-29 14:05:40 -0400 (Thu, 29 Mar 2007) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Prettied-up the output for signing sets.
Added the -headers option.
Added support for Current and Published KSKs.


------------------------------------------------------------------------
r3134 | baerm | 2007-03-29 13:32:54 -0400 (Thu, 29 Mar 2007) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/apps/postfix/postfix-2.3.3_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/postfix/postfix-2.3.x_dnssec_howto.txt
   A /trunk/dnssec-tools/apps/postfix/postfix.spec

updated patch and how-to to support RPM for fc6 postfix version
created spec for RPM.

------------------------------------------------------------------------
r3133 | rstory | 2007-03-27 17:30:20 -0400 (Tue, 27 Mar 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/Makefile.top

bump libcurrent
------------------------------------------------------------------------
r3132 | tewok | 2007-03-27 16:36:08 -0400 (Tue, 27 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Deleted an unused variable.

------------------------------------------------------------------------
r3131 | tewok | 2007-03-27 11:17:15 -0400 (Tue, 27 Mar 2007) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Modified set output so that the zone is always printed.
Modified set caching so that one zone's sets won't stomp on another zone's sets.
Fixed some showsets() comments to refer to sets instead of zones.
Reordered some of the pod subsections.

------------------------------------------------------------------------
r3130 | tewok | 2007-03-27 10:41:56 -0400 (Tue, 27 Mar 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added the -z-archdir and -label options.
Rearranged the options array.


------------------------------------------------------------------------
r3129 | hserus | 2007-03-27 09:43:32 -0400 (Tue, 27 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Maintain a merged_glue_ns list that keeps track of all glue that was already available or fetched in the
past. Query state moves from Q_WAIT_FOR_GLUE to Q_INIT only if all outstanding glue was fetched.

------------------------------------------------------------------------
r3128 | hserus | 2007-03-27 09:43:07 -0400 (Tue, 27 Mar 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

- While finding zonecut for DS record, leading qname label must be removed
- VAL_QUERY_GLUE_REQUEST implies VAL_FLAGS_DONT_VALIDATE
- Q_WAIT_FOR_GLUE can only move to the Q_INIT state. Perform correct check in fix_glue

------------------------------------------------------------------------
r3127 | hserus | 2007-03-27 09:42:48 -0400 (Tue, 27 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.h

- Initialize merged glue list

------------------------------------------------------------------------
r3126 | hserus | 2007-03-27 09:42:15 -0400 (Tue, 27 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

- In the delegation_info structure, replace pointer to glue with a list of merged glue records
- VAL_QUERY_GLUE_REQUEST implies VAL_FLAGS_DONT_VALIDATE

------------------------------------------------------------------------
r3125 | tewok | 2007-03-26 21:26:15 -0400 (Mon, 26 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Used the *real* real default key.

------------------------------------------------------------------------
r3124 | tewok | 2007-03-26 21:18:54 -0400 (Mon, 26 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Used the correct key-archive default.

------------------------------------------------------------------------
r3123 | baerm | 2007-03-26 19:04:16 -0400 (Mon, 26 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/apps/postfix/postfix-2.2.11_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/postfix/postfix-2.2.x_dnssec_howto.txt
   A /trunk/dnssec-tools/apps/postfix/postfix-2.3.8_dnssec_patch.txt
   A /trunk/dnssec-tools/apps/postfix/postfix-2.3.x_dnssec_howto.txt

some updates to the 2.2 patch (mostly textual)
added a 2.3 patch and howto

------------------------------------------------------------------------
r3122 | tewok | 2007-03-26 17:41:02 -0400 (Mon, 26 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Added the archivedir zone keyrec field.

------------------------------------------------------------------------
r3121 | tewok | 2007-03-26 17:38:59 -0400 (Mon, 26 Mar 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pod


Added the archivedir zone keyrec field.
Sorted the field descriptions.

------------------------------------------------------------------------
r3120 | tewok | 2007-03-26 15:28:30 -0400 (Mon, 26 Mar 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Added KSK archiving.
Deleted some dead variables.

------------------------------------------------------------------------
r3119 | tewok | 2007-03-26 15:09:23 -0400 (Mon, 26 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf
   M /trunk/dnssec-tools/tools/etc/dnssec-tools/dnssec-tools.conf.pod


Added the keyarch default.

------------------------------------------------------------------------
r3118 | tewok | 2007-03-26 15:04:51 -0400 (Mon, 26 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm


Added keyarch default.

------------------------------------------------------------------------
r3117 | tewok | 2007-03-24 12:49:34 -0400 (Sat, 24 Mar 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Added 'hide all keysets' menu command.
Added 'show all keysets' menu command.

------------------------------------------------------------------------
r3116 | tewok | 2007-03-24 12:48:03 -0400 (Sat, 24 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/INFO
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL
   M /trunk/dnssec-tools/tools/scripts/README


New command to archive obsolete KSK and ZSK keys.

------------------------------------------------------------------------
r3115 | tewok | 2007-03-24 12:47:23 -0400 (Sat, 24 Mar 2007) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/scripts/keyarch


New command to archive obsolete KSK and ZSK keys.

------------------------------------------------------------------------
r3114 | tewok | 2007-03-24 11:12:17 -0400 (Sat, 24 Mar 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/dnssectools.pm


Fixed the pod description section to actually talk about *this* module.
Added the dt_filetype() interface.

------------------------------------------------------------------------
r3113 | lfoster | 2007-03-23 20:42:23 -0400 (Fri, 23 Mar 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

If a new pending key (trust anchor) fails to appear in
subsequent queries (RRSETs) before the holddown time has
been reached, drop that key.


------------------------------------------------------------------------
r3107 | hserus | 2007-03-23 15:03:27 -0400 (Fri, 23 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_context.h

Add prototype for free_validator_state()

------------------------------------------------------------------------
r3106 | hserus | 2007-03-23 15:03:17 -0400 (Fri, 23 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_context.c

Keep track of the context created for a NULL label. Return this object instead of creating fresh ones for 
subsequent calls.

------------------------------------------------------------------------
r3105 | hserus | 2007-03-23 15:02:57 -0400 (Fri, 23 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Create a temporary context if the one supplied by the user was NULL

------------------------------------------------------------------------
r3104 | hserus | 2007-03-23 15:02:07 -0400 (Fri, 23 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

Don't free the context internally created for a NULL label

------------------------------------------------------------------------
r3103 | hserus | 2007-03-23 15:01:17 -0400 (Fri, 23 Mar 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

free the null context in addition to the validator caches
removed the ONE_CTX logic. This will not work if NULL contexts internally refer to a common object


------------------------------------------------------------------------
r3102 | hserus | 2007-03-23 15:00:40 -0400 (Fri, 23 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

Export free_validator_state() instead of free_validator_cache()

------------------------------------------------------------------------
r3101 | tewok | 2007-03-23 13:57:56 -0400 (Fri, 23 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Open the keyrec read-only if the read-write open fails.

------------------------------------------------------------------------
r3100 | tewok | 2007-03-23 11:05:02 -0400 (Fri, 23 Mar 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm


Modified rollrec_read() to try opening rollrec files read-only if the initial
read-write open fails.

------------------------------------------------------------------------
r3099 | hserus | 2007-03-23 10:26:05 -0400 (Fri, 23 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_policy.h

Remove separate policy for expired sigs. The clock skew policy subsumes this functionality.

------------------------------------------------------------------------
r3098 | hserus | 2007-03-23 09:32:16 -0400 (Fri, 23 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h
   M /trunk/dnssec-tools/validator/libval/val_policy.h

Moved string definitions for policies from val_policy.h to validator.h in order to allow functions such as
val_add_valpolicy() to be able to make use of it.

------------------------------------------------------------------------
r3097 | tewok | 2007-03-22 18:37:24 -0400 (Thu, 22 Mar 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Added the ability to turn on/off display of ZSK signing sets.
Added pod for all the new menu commands.

------------------------------------------------------------------------
r3096 | tewok | 2007-03-22 17:51:54 -0400 (Thu, 22 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Added the ability to turn on/off display of ZSK signing sets.

------------------------------------------------------------------------
r3095 | tewok | 2007-03-22 17:11:36 -0400 (Thu, 22 Mar 2007) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Added the ability to turn on/off display of KSK signing sets.
Updated command version.
Added some new column-related "constants".
Deleted some dead code.
Fixed some comments.

------------------------------------------------------------------------
r3094 | hserus | 2007-03-22 16:05:36 -0400 (Thu, 22 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

Add ability to test multi-threading situation

------------------------------------------------------------------------
r3093 | hserus | 2007-03-22 16:00:14 -0400 (Thu, 22 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_context.c

Since policy_entry_t is now a defined type, allocate memory for it

------------------------------------------------------------------------
r3092 | hserus | 2007-03-22 15:59:52 -0400 (Thu, 22 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.h

Add macro for setting ttl to the minimum reasonable value

------------------------------------------------------------------------
r3091 | hserus | 2007-03-22 15:59:37 -0400 (Thu, 22 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.h

Moved query locking macros from val_assertion.c
Added/modified prototypes

------------------------------------------------------------------------
r3090 | hserus | 2007-03-22 15:59:16 -0400 (Thu, 22 Mar 2007) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Moved query locking macros to val_assertion.h
Define new function for resetting a query to its initial state
Make sure we honor the ttl on the policy fragments when setting ttl on query and authentication chain
structres
Remove the older verify_provably_unsecure function
Fix bug in data_missing/data_received logic

------------------------------------------------------------------------
r3089 | hserus | 2007-03-22 15:59:00 -0400 (Thu, 22 Mar 2007) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.h

In RETRIEVE_POLICY, remove expired policies from the list of returned policy_entry_t structures
Change prototypes for parse routines: they now accept buf pointers instead of FILE pointers and don't
expect the "end statement" character to be present.
Since policy_entry_t contains zone and next pointer information, remove these members from the
policy-specific data structures.
Add prototypes for functions.

------------------------------------------------------------------------
r3088 | hserus | 2007-03-22 15:58:48 -0400 (Thu, 22 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_verify.c

Make sure we honor the ttl on the policy fragments

------------------------------------------------------------------------
r3087 | hserus | 2007-03-22 15:58:25 -0400 (Thu, 22 Mar 2007) | 11 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Add new function to add a validator policy to the context for a specific time duration
Modified val_get_token so that it read from a character buffer instead of a FILE *
Add logic to merge/free policies into the context's policy_entry_t* array
Modified the parse routines: they now accept buf pointers instead of FILE pointers and don't
expect the "end statement" character to be present. This is to allow a user supplied policy blob to also be
parsed.
The free routines for the policy structures are similarly modified so that they only look at what is inside
the policy, and not the policy_entry_t list itself.
Since zone information is common to all policies read it in a common place outside the parse routine; same 
with adding the new policy in the policy_entry_t list

------------------------------------------------------------------------
r3086 | hserus | 2007-03-22 15:58:06 -0400 (Thu, 22 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_selftest.c

Modified read_val_testcase_file so that it made use of the new val_get_token function.

------------------------------------------------------------------------
r3085 | hserus | 2007-03-22 15:57:33 -0400 (Thu, 22 Mar 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

Re-defined policy_entry_t as a regular container structure
No longer maintain list of overrides; instead work off the policy_entry_t* array
Add prototype for val_add_valpolicy

------------------------------------------------------------------------
r3082 | tewok | 2007-03-22 12:54:10 -0400 (Thu, 22 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Updated command version to 1.0.

------------------------------------------------------------------------
r3081 | hardaker | 2007-03-22 09:22:38 -0400 (Thu, 22 Mar 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/Makefile.in
   M /trunk/dnssec-tools/validator/Makefile.in
   M /trunk/dnssec-tools/validator/apps/Makefile.in
   M /trunk/dnssec-tools/validator/doc/Makefile.in
   M /trunk/dnssec-tools/validator/libsres/Makefile.in
   M /trunk/dnssec-tools/validator/libval/Makefile.in

properly honor DESTDIR in more locations
------------------------------------------------------------------------
r3080 | hardaker | 2007-03-22 09:19:19 -0400 (Thu, 22 Mar 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/dist/dnssec-tools.spec

updating dnssec-tools spec to match recent patch branch work
------------------------------------------------------------------------
r3077 | tewok | 2007-03-20 21:16:01 -0400 (Tue, 20 Mar 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Renamed the "ZSK Control" menu to "General Control".
Added a -dspuball command.

------------------------------------------------------------------------
r3076 | tewok | 2007-03-20 21:12:17 -0400 (Tue, 20 Mar 2007) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Added -dspub and -dspuball commands.
Added -nodisplay description to pod.
Fixed copyright dates.


------------------------------------------------------------------------
r3075 | tewok | 2007-03-20 21:08:46 -0400 (Tue, 20 Mar 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Added support for new rollctl -dspuball command.
Added and modified comms sent to blinkenlights to account for KSK rolls.

------------------------------------------------------------------------
r3074 | tewok | 2007-03-20 19:39:57 -0400 (Tue, 20 Mar 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Added the ROLLCMD_DSPUBALL command.
Reformatted a few pod tables.

------------------------------------------------------------------------
r3073 | baerm | 2007-03-20 17:09:32 -0400 (Tue, 20 Mar 2007) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/postfix/postfix-2.2.11_dnssec_patch.txt
   A /trunk/dnssec-tools/apps/postfix/postfix-2.2.x_dnssec_howto.txt
   M /trunk/dnssec-tools/apps/postfix/postfix-howto.txt

added postfix patchh and howto

------------------------------------------------------------------------
r3072 | lfoster | 2007-03-20 15:44:12 -0400 (Tue, 20 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

changed storage of keys from config files so multiple keys from a
single zone can be accommodated.

------------------------------------------------------------------------
r3071 | tewok | 2007-03-20 12:13:13 -0400 (Tue, 20 Mar 2007) | 10 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Added columns for KSK keys.
Added "constants" for use in referencing table columns.
Added descriptions of KSK rollover phases.
Moved Table creation into its own routine.

(Note:  This is another step in adding KSK support, but it is still not
	complete.  It works (displaying KSK and ZSK rollovers properly)
	but there is still more to do.)

------------------------------------------------------------------------
r3069 | hardaker | 2007-03-19 21:14:47 -0400 (Mon, 19 Mar 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/dist/dnssec-tools.spec

a bunch of spec updates to bring it in line with fedora extras packaging (hopefully)
------------------------------------------------------------------------
r3067 | hardaker | 2007-03-19 19:23:19 -0400 (Mon, 19 Mar 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/Makefile.in
   M /trunk/dnssec-tools/validator/libval/Makefile.in

set modes properly on installed headers
------------------------------------------------------------------------
r3065 | tewok | 2007-03-19 18:09:55 -0400 (Mon, 19 Mar 2007) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Added some KSK-specific commands.
Added a few new commands from rollerd.
Added a new option to zonestripe for specifying the rollover type being handled.
Added phase colors for the new KSK phases.
Deleted some dead variables.

------------------------------------------------------------------------
r3063 | hserus | 2007-03-16 10:12:34 -0400 (Fri, 16 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c

Fix null pointer exception

------------------------------------------------------------------------
r3060 | tewok | 2007-03-15 13:22:49 -0400 (Thu, 15 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Include the current keys when use -usezskpub.

------------------------------------------------------------------------
r3059 | tewok | 2007-03-15 11:05:52 -0400 (Thu, 15 Mar 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Fixed pretty-printing so it all works now.
Shortened unset kskphase and zskphase.


------------------------------------------------------------------------
r3058 | hserus | 2007-03-15 11:01:35 -0400 (Thu, 15 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/etc/dnsval.conf

Indentation

------------------------------------------------------------------------
r3057 | hserus | 2007-03-15 10:47:54 -0400 (Thu, 15 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/etc/dnsval.conf

Add new policies

------------------------------------------------------------------------
r3056 | hserus | 2007-03-15 10:38:43 -0400 (Thu, 15 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Apply the default policy by default. i.e. don't expect the user to specify a trailing : in the policy scope

------------------------------------------------------------------------
r3055 | tewok | 2007-03-14 22:46:03 -0400 (Wed, 14 Mar 2007) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Reworked how output is formatted so it's *bags* less messy.  This isn't
finished yet, but it's a good start.
Updated the version.
Deleted some dead variables.


------------------------------------------------------------------------
r3054 | baerm | 2007-03-14 17:46:11 -0400 (Wed, 14 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

stdio.h  needed  to be included for the use of file io 
(i.e. 'FILE' type)

------------------------------------------------------------------------
r3053 | hardaker | 2007-03-14 13:02:31 -0400 (Wed, 14 Mar 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

added a rule to warn about missing keys (2 ZSKs and 1 KSK)
------------------------------------------------------------------------
r3052 | lfoster | 2007-03-13 17:03:18 -0400 (Tue, 13 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

accept only one config file containing trust anchors

------------------------------------------------------------------------
r3051 | tewok | 2007-03-13 16:31:21 -0400 (Tue, 13 Mar 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Added the -headers option.


------------------------------------------------------------------------
r3050 | hserus | 2007-03-13 15:30:42 -0400 (Tue, 13 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.c

Ignore name compression and lowercasing for NSEC. Also handle other types defined by
RFC4033

------------------------------------------------------------------------
r3049 | hserus | 2007-03-13 14:16:53 -0400 (Tue, 13 Mar 2007) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Identify glue status through a query flag instead of maintaining a separate member within the query
structure
Be careful about not overwriting previous query states with new ones
While doing the parallel fetch for DS records, dont look at the value of RES_USE_DNSSEC, since glue
fetching logic can mess this up. Instead, explicitly look for the trust point and see if we are below it.

------------------------------------------------------------------------
r3048 | hserus | 2007-03-13 14:16:36 -0400 (Tue, 13 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.h

Exposing the find_trust_point() to other files in the library

------------------------------------------------------------------------
r3047 | hserus | 2007-03-13 14:16:23 -0400 (Tue, 13 Mar 2007) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Identify glue status through a query flag instead of maintaining a separate member within the query
structure
Be careful about not overwriting previous query states with new ones
Merge pending glue in a separate function. That way we can ensure that we haven't missed any query.
Now exposing the find_trust_point() to other files in the library

------------------------------------------------------------------------
r3046 | hserus | 2007-03-13 14:16:01 -0400 (Tue, 13 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

Identify glue status through a query flag instead of maintaining a separate member within the query
structure

------------------------------------------------------------------------
r3045 | tewok | 2007-03-13 13:51:01 -0400 (Tue, 13 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Got rid of unnecessary rollrec_fullrec() calls.

------------------------------------------------------------------------
r3044 | tewok | 2007-03-13 12:35:04 -0400 (Tue, 13 Mar 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Added the -lastksk and -lastzsk options.
Fixed a pod typo.
 

------------------------------------------------------------------------
r3043 | marz | 2007-03-13 10:41:01 -0400 (Tue, 13 Mar 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc

support new error codes
------------------------------------------------------------------------
r3042 | hserus | 2007-03-12 15:02:48 -0400 (Mon, 12 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Fetch DNSSEC meta-data in parallel while following referrals.

------------------------------------------------------------------------
r3041 | hserus | 2007-03-12 12:20:43 -0400 (Mon, 12 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

Handle _SKEW error codes. Also handle missing WCARD_VERIFIED code.

------------------------------------------------------------------------
r3040 | hserus | 2007-03-12 12:20:27 -0400 (Mon, 12 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Recognize the _SKEW rrsig codes as success values.

------------------------------------------------------------------------
r3039 | hserus | 2007-03-12 12:20:16 -0400 (Mon, 12 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.c

use clock-skew policy while determining security status of zone

------------------------------------------------------------------------
r3038 | hserus | 2007-03-12 12:20:03 -0400 (Mon, 12 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.h

Define policy structure for clock-skew

------------------------------------------------------------------------
r3037 | hserus | 2007-03-12 12:19:52 -0400 (Mon, 12 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Implement policy for per-zone clock-skew defintion
Perform proper free of the prov_unsecure_policy structure in free_prov_unsecure_status

------------------------------------------------------------------------
r3036 | hserus | 2007-03-12 12:19:20 -0400 (Mon, 12 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

Deleted definition for SIG_ACCEPT_WINDOW. We now use the clock-skew policy to define this.

------------------------------------------------------------------------
r3035 | hserus | 2007-03-12 12:19:09 -0400 (Mon, 12 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/val_errors.h

Added definitions for the "rrsig verified with skew" condition

------------------------------------------------------------------------
r3034 | hserus | 2007-03-09 17:56:14 -0500 (Fri, 09 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

- Display validator status code for VAL_BAD_PROVABLY_UNSECURE

------------------------------------------------------------------------
r3033 | hserus | 2007-03-09 17:56:01 -0500 (Fri, 09 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

- Fix the logic where zonecut information was incorrectly getting overwritten
- Fix return type for is_trusted_zone() so that error codes can be propagated upward

------------------------------------------------------------------------
r3032 | hserus | 2007-03-09 17:55:43 -0500 (Fri, 09 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.h

- Fix return type for is_trusted_zone() so that error codes can be propagated upward

------------------------------------------------------------------------
r3031 | hserus | 2007-03-09 17:55:26 -0500 (Fri, 09 Mar 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

- Fix return type for is_trusted_zone() so that error codes can be propagated upward
- Implement function to check if provably insecure condition is trusted or no.
- If this state is not trusted set the result code to VAL_BAD_PROVABLY_UNSECURE

------------------------------------------------------------------------
r3030 | hserus | 2007-03-09 17:55:07 -0500 (Fri, 09 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.h

- Add definitions for provably insecure related policy

------------------------------------------------------------------------
r3029 | hserus | 2007-03-09 17:54:53 -0500 (Fri, 09 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

- Reorganize policy parse functions around the READ_ZONE_AND_VALUE and  STORE_POLICY_FOR_ZONE macros
- Define new policy that allows us to specify if the provably insecure condition is trusted or no

------------------------------------------------------------------------
r3028 | hserus | 2007-03-09 17:54:35 -0500 (Fri, 09 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/val_errors.h

- Add new validator status for the "bad" provably insecure condition

------------------------------------------------------------------------
r3027 | hardaker | 2007-03-09 16:19:50 -0500 (Fri, 09 Mar 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm

version number update
------------------------------------------------------------------------
r3026 | hardaker | 2007-03-09 16:17:41 -0500 (Fri, 09 Mar 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm

copyright year update
------------------------------------------------------------------------
r3025 | hardaker | 2007-03-09 16:17:09 -0500 (Fri, 09 Mar 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm

more uc/lc conversions for proper dnssec checking
------------------------------------------------------------------------
r3024 | hardaker | 2007-03-09 13:58:48 -0500 (Fri, 09 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

lowercase all NS records during set and check to ensure case
discrepencies don't affect results.

------------------------------------------------------------------------
r3023 | hardaker | 2007-03-09 13:51:22 -0500 (Fri, 09 Mar 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm

don't lowercase the nxtdname
------------------------------------------------------------------------
r3022 | hserus | 2007-03-08 15:53:31 -0500 (Thu, 08 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/selftests.dist

Use VAL_BOGUS_UNPROVABLE state instead of VAL_INDETERMINATE

------------------------------------------------------------------------
r3021 | hserus | 2007-03-08 15:52:24 -0500 (Thu, 08 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.h

Moved find_next_zonecut function to val_assertion.c

------------------------------------------------------------------------
r3020 | hserus | 2007-03-08 15:51:37 -0500 (Thu, 08 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Perform top-down validation while verifying if a name is provably unsecure

------------------------------------------------------------------------
r3019 | lfoster | 2007-03-07 15:26:53 -0500 (Wed, 07 Mar 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

Take out early code for writing TA info to a file.
This is replaced now by using DataDumper.


------------------------------------------------------------------------
r3018 | lfoster | 2007-03-07 14:49:12 -0500 (Wed, 07 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

minor code changes, removed some obsolete comments

------------------------------------------------------------------------
r3017 | tewok | 2007-03-06 20:59:32 -0500 (Tue, 06 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Zap the phasestart rollrec field when a rollover cycle ends.

------------------------------------------------------------------------
r3016 | tewok | 2007-03-06 20:58:34 -0500 (Tue, 06 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm


Added a means for rollrec_settime() to set a phasestart to null.

------------------------------------------------------------------------
r3015 | tewok | 2007-03-06 16:07:21 -0500 (Tue, 06 Mar 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Added an extensive pod explanation for output formats and what is displayed
for each type of format.
Reworked the set-up of dummy values for skip records.

------------------------------------------------------------------------
r3014 | tewok | 2007-03-06 15:20:21 -0500 (Tue, 06 Mar 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Added the -loglevel option.
Reformatted @opts so it's a bit clearer what's going on with it.
Changed the default administrator from "(unlisted)" to "(defadmin)".

------------------------------------------------------------------------
r3013 | tewok | 2007-03-06 14:51:19 -0500 (Tue, 06 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Added a comment to the file header.

------------------------------------------------------------------------
r3012 | tewok | 2007-03-06 13:45:33 -0500 (Tue, 06 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Added the -admin option.

------------------------------------------------------------------------
r3011 | tewok | 2007-03-06 13:14:45 -0500 (Tue, 06 Mar 2007) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Fixed copyright date.
Deleted -phase option.
Added -kskphase, -zskphase, and -phases options.


------------------------------------------------------------------------
r3010 | tewok | 2007-03-06 12:39:00 -0500 (Tue, 06 Mar 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollset


Added the -admin option.


------------------------------------------------------------------------
r3009 | tewok | 2007-03-05 15:22:05 -0500 (Mon, 05 Mar 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollset


Added the -kskphase option.
Improved error checking for the -kskphase and -zskphase option values.
 

------------------------------------------------------------------------
r3008 | tewok | 2007-03-05 14:10:19 -0500 (Mon, 05 Mar 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollset


Adjusted copyright date.
Changed the -phase option to -zskphase.

------------------------------------------------------------------------
r3007 | lfoster | 2007-03-05 13:09:25 -0500 (Mon, 05 Mar 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

Save new key data to a file, and load this file at the beginning of
each run. This lets trustman survive restarts.


------------------------------------------------------------------------
r3006 | tewok | 2007-03-05 13:05:18 -0500 (Mon, 05 Mar 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollinit


Fixed copyright dates.
Added the -admin and -loglevel options.
Add ksk_rolldate, ksk_rollsecs, zsk_rolldate, and zsk_rollsecs to the output.

------------------------------------------------------------------------
r3005 | tewok | 2007-03-05 13:01:51 -0500 (Mon, 05 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Fixed regexps for validating logging levels.

------------------------------------------------------------------------
r3004 | tewok | 2007-03-05 11:15:16 -0500 (Mon, 05 Mar 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtconfchk
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Change the "curphase" logging level to "phase".
Fixed the value of the "phase" logging level.

------------------------------------------------------------------------
r3003 | tewok | 2007-03-05 11:12:19 -0500 (Mon, 05 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Renamed the "curphase" logging level to "phase".

------------------------------------------------------------------------
r3002 | hserus | 2007-03-02 16:00:35 -0500 (Fri, 02 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/selftests.dist

Fixed some older test cases

------------------------------------------------------------------------
r3001 | hserus | 2007-03-02 15:58:31 -0500 (Fri, 02 Mar 2007) | 10 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

- Implement timeout logic for validator cache
- Implement bad-cache logic
- No longer accessing the trust assertion using the 
  val_ac_trust pointer. Instead, look for the trust point
  through the queries_for_query cache
- Modifiy prototype of various functions to allow access
  to the queries_for_query cache
- Dont use the VAL_INDETERMINATE_PROOF status code, instead
  use VAL_BOGUS_PROOF

------------------------------------------------------------------------
r3000 | hserus | 2007-03-02 15:58:14 -0500 (Fri, 02 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

- Correctly set the zonecut information for DS records 
  obtained while following referrals

------------------------------------------------------------------------
r2999 | hserus | 2007-03-02 15:58:02 -0500 (Fri, 02 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.c
   M /trunk/dnssec-tools/validator/libval/val_verify.h

- No longer accessing the trust assertion using the
  val_ac_trust pointer

------------------------------------------------------------------------
r2998 | hserus | 2007-03-02 15:57:36 -0500 (Fri, 02 Mar 2007) | 10 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

- Add definitions for bad cache TTL and threshold
- Removed pending query logic; we need to go and look 
  for our pending query from the queries_for_query cache
  depending on the state of the assertion.
- No longer maintain a pointer to val_ac_trust. 
  If data in our cache times out the value will not 
  be trustworthy.
- Store TTL expiry and bad cache status in the 
  val_query_chain structure

------------------------------------------------------------------------
r2997 | hserus | 2007-03-02 15:24:19 -0500 (Fri, 02 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_selftest.c

Recognize the VAL_ERROR status code

------------------------------------------------------------------------
r2996 | tewok | 2007-03-02 11:59:52 -0500 (Fri, 02 Mar 2007) | 10 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollchk

Updated copyright.
Added rollrec checks for:
	- invalid KSK phase
	- mismatched KSK rollover timestamps
	- mismatched ZSK rollover timestamps
	- contemporaneous KSK rollover and ZSK rollover
	- empty administrator field
	- invalid logging level
 

------------------------------------------------------------------------
r2995 | tewok | 2007-03-02 11:03:21 -0500 (Fri, 02 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pod

Added a description for loglevel.


------------------------------------------------------------------------
r2994 | hserus | 2007-03-02 10:38:54 -0500 (Fri, 02 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Don't complain if the class is missing

------------------------------------------------------------------------
r2993 | marz | 2007-03-02 09:56:28 -0500 (Fri, 02 Mar 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Makefile.PL
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t

fixes to build and test from treeprior to install, handle new conf locations, initial resolve_and_check()
------------------------------------------------------------------------
r2992 | tewok | 2007-03-01 21:41:01 -0500 (Thu, 01 Mar 2007) | 10 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm


Alphabetically sorted the defaults hash.
Added missing defaults for lifespan-max, lifespan-min, rndc, roll_logfile,
roll_loglevel, and zonesigner.
Changed the "admin" default to the proper name "admin-email".
Deleted the hardcoded @defnames array and replaced it with a dynamically
built array.
Made sure all the defaults have pod descriptions.
 

------------------------------------------------------------------------
r2991 | hserus | 2007-03-01 17:23:42 -0500 (Thu, 01 Mar 2007) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/apps/mozilla/drill-firefox
   A /trunk/dnssec-tools/apps/mozilla/drill-firefox/Makefile
   A /trunk/dnssec-tools/apps/mozilla/drill-firefox/README
   A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome
   A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/content
   A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/content/drill
   A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/content/drill/about.xul
   A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/content/drill/contents.rdf
   A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/content/drill/drillOverlay.js
   A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/content/drill/drillOverlay.xul
   A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/content/drill/prefs.js
   A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/content/drill/prefs.xul
   A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/skin
   A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/skin/classic
   A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/skin/classic/drill
   A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/skin/classic/drill/contents.rdf
   A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/skin/classic/drill/drill_icon_big.png
   A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/skin/classic/drill/drill_icon_status.png
   A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/skin/classic/drill/drill_notverified.png
   A /trunk/dnssec-tools/apps/mozilla/drill-firefox/chrome/skin/classic/drill/drill_verified.png
   A /trunk/dnssec-tools/apps/mozilla/drill-firefox/defaults
   A /trunk/dnssec-tools/apps/mozilla/drill-firefox/defaults/preferences
   A /trunk/dnssec-tools/apps/mozilla/drill-firefox/defaults/preferences/drill.js
   A /trunk/dnssec-tools/apps/mozilla/drill-firefox/install.rdf

Added the drill extension to firefox, which contains modifications that allow hostnames to be validated
using libval/getaddr. 

------------------------------------------------------------------------
r2990 | hserus | 2007-03-01 16:30:58 -0500 (Thu, 01 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Added some level of logging when conf files cannot be read

------------------------------------------------------------------------
r2989 | lfoster | 2007-03-01 13:55:46 -0500 (Thu, 01 Mar 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

modify resolve_and_check_dnskey to take a file argument, so I can
also use it to pass in a temp file with a dnsval-ified named.conf
so validate can check that as well.

------------------------------------------------------------------------
r2988 | rstory | 2007-03-01 10:42:40 -0500 (Thu, 01 Mar 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/apps/jabberd-2/jabberd-dnssec.pat

- fix configure detection of libval-threads
- add two config file options for resolver.xml
  - drop_untrusted and dnssec_log_level
- use new libval log callback to log libval msgs

------------------------------------------------------------------------
r2987 | tewok | 2007-03-01 10:37:59 -0500 (Thu, 01 Mar 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtconfchk


Reverted to using curphase instead of zskphase.

------------------------------------------------------------------------
r2986 | rstory | 2007-03-01 10:36:30 -0500 (Thu, 01 Mar 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

bump 2 log messages from DEBUG to INFO
------------------------------------------------------------------------
r2985 | rstory | 2007-03-01 10:35:19 -0500 (Thu, 01 Mar 2007) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h
   M /trunk/dnssec-tools/validator/libval/val_log.c

- remove unused 'const char *' ptr in val_log struct
- add 'void *' ptr in val_log struct
- new logging method: callback
  - add new cb (callback) member to union in val_log struct
  - prototype for val_log_add_cb
- add missing setup initialization in val_log_add_udp

------------------------------------------------------------------------
r2984 | tewok | 2007-03-01 10:31:18 -0500 (Thu, 01 Mar 2007) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtconfchk


Change from using a hardcoded default config path to calling getconffile().
Change "curphase" references to "zskphase".
Added checks for the admin-email field.
Expanded the pod description to be more helpful.
 

------------------------------------------------------------------------
r2983 | hserus | 2007-03-01 09:45:47 -0500 (Thu, 01 Mar 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_selftest.c

Fix typo

------------------------------------------------------------------------
r2982 | tewok | 2007-02-28 16:58:51 -0500 (Wed, 28 Feb 2007) | 9 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Added prototype manual KSK rollover.
Added enforcement of "one rollover at a time" rule.  Initiation of KSK rolls
takes precedence over initiation of ZSK rolls.
Reworked expiration calculations to calculate from end of previous
rollover cycle.
Reorganized the initial pod description section.
Added pod describing KSK rollover.

------------------------------------------------------------------------
r2981 | lfoster | 2007-02-28 15:30:30 -0500 (Wed, 28 Feb 2007) | 13 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

- added some TODOs so I won't forget
- took out a bunch of variables no longer used
- modified the data structure holding new keys so there is a single
  structure which contains all of the key info, including the add holddown time
- made the newkey structure a hash of array refs so there can be more than
  one new key at a time for any given zone (thanks Suresh for the suggestion)
- changed the way new key data is written to the config files so it looks
  better
- modified again how dnsval.conf is handled so new keys are only added for
  the types of trust-anchors needed (not all)
- new keys added to config files are now stored in the "known keys" structure
- new keys added ... are now deleted from "new keys" structure

------------------------------------------------------------------------
r2980 | hserus | 2007-02-28 14:23:22 -0500 (Wed, 28 Feb 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Fix bad copy paste

------------------------------------------------------------------------
r2979 | hserus | 2007-02-28 14:16:07 -0500 (Wed, 28 Feb 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Construct the chain of trust even if some other thread had fetched data for you.

------------------------------------------------------------------------
r2978 | tewok | 2007-02-28 12:35:33 -0500 (Wed, 28 Feb 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Added predictive processing for path prognostication if -noprompt is passed.
Added handling for the administrator's email address.

------------------------------------------------------------------------
r2977 | tewok | 2007-02-28 12:05:02 -0500 (Wed, 28 Feb 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm


Added a default for rollerd's sleep time.

------------------------------------------------------------------------
r2976 | hserus | 2007-02-28 11:47:21 -0500 (Wed, 28 Feb 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_selftest.c

Start from the correct testcase in the range specified by {tcs, tce}

------------------------------------------------------------------------
r2975 | tewok | 2007-02-28 10:47:52 -0500 (Wed, 28 Feb 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm


Added a pod description of the admin default.

------------------------------------------------------------------------
r2974 | tewok | 2007-02-28 10:38:23 -0500 (Wed, 28 Feb 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm


Added a default DNSSEC-Tools administrator email address.

------------------------------------------------------------------------
r2973 | tewok | 2007-02-28 10:03:38 -0500 (Wed, 28 Feb 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/dnssectools.pm


Add a check to ensure a valid recipient was given.
Fix the pod's error return list.

------------------------------------------------------------------------
r2972 | tewok | 2007-02-27 21:15:33 -0500 (Tue, 27 Feb 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm


Adjusted some spacing.

------------------------------------------------------------------------
r2971 | tewok | 2007-02-27 21:14:14 -0500 (Tue, 27 Feb 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pod


Updated to describe new fields.

------------------------------------------------------------------------
r2970 | tewok | 2007-02-27 20:29:57 -0500 (Tue, 27 Feb 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm.in


Added some pod documentation for getprefixdir().

------------------------------------------------------------------------
r2969 | tewok | 2007-02-27 20:19:54 -0500 (Tue, 27 Feb 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/dnssectools.pm


Added an optional "sendto" parameter to dt_adminmail() to specify a
non-default recipient. 

------------------------------------------------------------------------
r2968 | tewok | 2007-02-27 20:12:06 -0500 (Tue, 27 Feb 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Renamed LOG_CURPHASE to LOG_PHASE.
Added the ROLLCMD_DSPUB and ROLLCMD_ROLLKSK commands.
Added a slash to the pidfile definition.

------------------------------------------------------------------------
r2967 | tewok | 2007-02-27 17:43:07 -0500 (Tue, 27 Feb 2007) | 10 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm


Deleted curphase from the list of valid rollrec fields.
 
Add the following to the list of valid rollrec fields: administrator,
ksk_rolldate, ksk_rollsecs, kskphase, zsk_rolldate, zsk_rollsecs, and zskphase.

Fixed a number of regular expressions so field data can be blank.
 
Fixed a bug wherein skip rollrecs weren't being recognized by rollrec_setval().

------------------------------------------------------------------------
r2966 | rstory | 2007-02-27 17:37:41 -0500 (Tue, 27 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/configure.in

fix expanded_sysconfdir for default prefix
------------------------------------------------------------------------
r2965 | rstory | 2007-02-27 15:57:30 -0500 (Tue, 27 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_selftest.c

clean up memory on exit
------------------------------------------------------------------------
r2964 | rstory | 2007-02-27 15:57:06 -0500 (Tue, 27 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

fix for running specific test range
------------------------------------------------------------------------
r2963 | hserus | 2007-02-27 12:55:30 -0500 (Tue, 27 Feb 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

- We no longer log query information, since the query chain
  could easily have been modified by a different thread,
  and hence the results may be un-predictable.

------------------------------------------------------------------------
r2962 | hserus | 2007-02-27 12:55:11 -0500 (Tue, 27 Feb 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.h
   M /trunk/dnssec-tools/validator/libval/val_cache.h
   M /trunk/dnssec-tools/validator/libval/val_resquery.h

- Modified function prototypes: use the queries_for_query linked 
  list instead of the val_query_chain linked list while tracking 
  queries issued for val_resolve_and_check()

------------------------------------------------------------------------
r2961 | hserus | 2007-02-27 12:54:20 -0500 (Tue, 27 Feb 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_context.h

- Define macros for acquiring and releasing context-related 
  validator policy locks.

------------------------------------------------------------------------
r2960 | hserus | 2007-02-27 12:54:02 -0500 (Tue, 27 Feb 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_context.c

- Initialize context-related locks during context creation
- Perform proper cleanup of context upon error or when 
  it is released.

------------------------------------------------------------------------
r2959 | hserus | 2007-02-27 12:53:27 -0500 (Tue, 27 Feb 2007) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

- Add any new queries to the queries_for_query linked list 
  being maintained for the current val_resolve_and_check() 
  function.
- Don't modify the name server cache in 
  res_zi_unverified_ns_list(). This is to allow us to use 
  a read-lock (as opposed to a write lock) while reading 
  from this cache.

------------------------------------------------------------------------
r2958 | hserus | 2007-02-27 12:52:20 -0500 (Tue, 27 Feb 2007) | 38 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

- add_to_query_chain() now returns the added element 
  in the last parameter. This element is no longer brought 
  to the front of the list. Propagate this value to all
  functions that were operating under this older assumption.
- Also match query flags when looking for a matching query 
  in the val_query_chain linked list
- Maintain a new linked list that tracks all queries issued 
  for a given query. Each element in the linked list points 
  to a separate element in the val_query_chain linked list
  For each element added to the queries_for_query linked 
  list, we also acquire a read lock, so that the query does 
  not disappear underneath us. val_resolve_and_check() only 
  tries to answer these queries (instead of all outstanding 
  queries in val_query_chain)
- A proof of non-existence with a different owner name can 
  be returned when we ask for one of NSEC, SOA or NSEC3 types. 
  Don't treat this as a conflicting answer.
- For each newly created authentication chain element add a 
  "back pointer" to the query that was responsible for its 
  creation.
- Use flags from the val_query_chain structure where ever 
  this is available instead of passing the flags as a 
  separate argument.
- Since the authentication chain is always available from 
  within the context, don't pass it as a separate argument 
  to functions such as assimilate_answers
- Combine find_next_zonecut() and verify_provably_unsecure() 
  functions into the main query send/receive cycle. Also add 
  a "done" parameter for each of these functions to indicate 
  if the operation completed or was waiting for more data.
- Return result of verify_provably_unsecure() check as a 
  separate param and return the normal error codes from the 
  function.
- ask_cache() and ask_resolver() now try and fill in data 
  for all pending queries instead of just returning when the 
  first answer is found.
- Acquire proper locks before refreshing validator policy

------------------------------------------------------------------------
r2957 | hserus | 2007-02-27 12:49:11 -0500 (Tue, 27 Feb 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_cache.c

- Use separate locks for each cache type
- Always grab an write lock when modifying the cache 
  instead of doing upgrade/downgrade operations

------------------------------------------------------------------------
r2956 | hserus | 2007-02-27 12:48:48 -0500 (Tue, 27 Feb 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

- Modify validator policy only after acquiring appropriate locks

------------------------------------------------------------------------
r2955 | hserus | 2007-02-27 12:48:25 -0500 (Tue, 27 Feb 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

- We no longer log query information, since the query chain
  could easily have been modified by a different thread; 
  the results are un-predictable.

------------------------------------------------------------------------
r2954 | hserus | 2007-02-27 12:46:48 -0500 (Tue, 27 Feb 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.c

- Never block when reading data from the sockets

------------------------------------------------------------------------
r2953 | hserus | 2007-02-27 12:46:23 -0500 (Tue, 27 Feb 2007) | 16 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

- Added VAL_MASK_AFFECTS_CACHING flag 
- Define read-write and mutex locks for val_context_t 
- Added a back pointer from the "internal" authentication
  chain element to the query that was reponsible for its
  creation
- Added a read-write lock for val_query_chain
- Made qc_flags type consistent with type being passed to
  val_resolve_and_check()
- Added new structure queries_for_query that acts as a
  container for all queries issued while verifying and
  validating a given query.
- Changed the prototype for val_log_authentication_chain.
  We no longer log query information, since the query chain
  could easily have been modified by a different thread,
  and hence the results may be un-predictable.

------------------------------------------------------------------------
r2952 | hserus | 2007-02-26 16:27:16 -0500 (Mon, 26 Feb 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

Make return code consistent with other command line apps for the validator: return 0 in success and -1 on
failure.

------------------------------------------------------------------------
r2951 | hserus | 2007-02-26 15:56:10 -0500 (Mon, 26 Feb 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_parse.c

Update NSEC3 code to most recent spec

------------------------------------------------------------------------
r2950 | rstory | 2007-02-26 13:36:33 -0500 (Mon, 26 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/Makefile.in
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Makefile.PL

pass/accept sysconfdir when making perl makefiles
------------------------------------------------------------------------
r2949 | rstory | 2007-02-26 13:35:12 -0500 (Mon, 26 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/etc/Makefile.PL

get sysconfdir from args to stuff into makefile
------------------------------------------------------------------------
r2948 | rstory | 2007-02-23 14:27:35 -0500 (Fri, 23 Feb 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm

- use getconfdir to get config dir
- tweak pod/comments to use /usr/local/etc instead of /usr/etc

------------------------------------------------------------------------
r2947 | rstory | 2007-02-23 14:23:23 -0500 (Fri, 23 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm

use getconfdir to get config dir
------------------------------------------------------------------------
r2946 | rstory | 2007-02-23 14:17:09 -0500 (Fri, 23 Feb 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm

- use conf module
- use prefix for in default path to binaries
- use sysconfdir in default conf file path

------------------------------------------------------------------------
r2945 | rstory | 2007-02-23 14:15:23 -0500 (Fri, 23 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm.in

new getprefixdir function
------------------------------------------------------------------------
r2944 | rstory | 2007-02-23 11:45:01 -0500 (Fri, 23 Feb 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/Makefile.in
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/configure.in
   D /trunk/dnssec-tools/tools/modules/conf.pm
   A /trunk/dnssec-tools/tools/modules/conf.pm.in (from /trunk/dnssec-tools/tools/modules/conf.pm:2940)

- generate conf.pm from conf.pm.in
- use sysconfdir instead of prefix/etc

------------------------------------------------------------------------
r2943 | rstory | 2007-02-23 10:24:54 -0500 (Fri, 23 Feb 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/Makefile.in
   M /trunk/dnssec-tools/validator/Makefile.top
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in

use $sysconfdir instead of $prefix/etc

------------------------------------------------------------------------
r2942 | lfoster | 2007-02-21 15:06:03 -0500 (Wed, 21 Feb 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

added back some code to write new keys only to the
correct type of trust anchors in dnsval.conf.

------------------------------------------------------------------------
r2941 | rstory | 2007-02-21 10:10:21 -0500 (Wed, 21 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/NEWS

mention new default path, configure behaviour and selftest suites
------------------------------------------------------------------------
r2940 | tewok | 2007-02-20 15:13:48 -0500 (Tue, 20 Feb 2007) | 3 lines
Changed paths:
   D /trunk/dnssec-tools/tools/etc/dnssec
   A /trunk/dnssec-tools/tools/etc/dnssec-tools (from /trunk/dnssec-tools/tools/etc/dnssec:2939)


Moving .../etc/dnssec to .../etc/dnssec-tools.

------------------------------------------------------------------------
r2939 | tewok | 2007-02-20 14:42:10 -0500 (Tue, 20 Feb 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm
   M /trunk/dnssec-tools/tools/modules/defaults.pm


Moved .../etc/dnssec to .../etc/dnssec-tools.

------------------------------------------------------------------------
r2938 | tewok | 2007-02-20 14:01:57 -0500 (Tue, 20 Feb 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/README
   M /trunk/dnssec-tools/tools/etc/dnssec/README
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pod


Moving .../etc/dnssec to .../etc/dnssec-tools.

------------------------------------------------------------------------
r2937 | rstory | 2007-02-20 13:23:50 -0500 (Tue, 20 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/Makefile.in

update to use etc/dnssec-tools
------------------------------------------------------------------------
r2936 | rstory | 2007-02-20 13:22:09 -0500 (Tue, 20 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/etc/Makefile.PL

update CONFDIR to use etc/dnssec-tools
------------------------------------------------------------------------
r2935 | rstory | 2007-02-20 13:19:30 -0500 (Tue, 20 Feb 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/Makefile.in

- fix much breakage in makedirectories target
- update path in dtinitconf message

------------------------------------------------------------------------
r2934 | rstory | 2007-02-20 13:16:12 -0500 (Tue, 20 Feb 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/Makefile.in

- fix much breakage in makedirectories target
- add PREFIX/etc/dnssec-tools to INSTALLDIRS
- update nextstepinstructions to use paths from configure

------------------------------------------------------------------------
r2933 | rstory | 2007-02-20 13:14:36 -0500 (Tue, 20 Feb 2007) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/validator/Makefile.top
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in

- display summary of options when configure finishes
- update default config prefixes to PREFIX/etc/dnssec-tools
- prompt for resolv.conf and root.hints locations if not specified
- search for existing root.hints file, and use it as the default
  in prompt to user

------------------------------------------------------------------------
r2932 | rstory | 2007-02-20 13:10:52 -0500 (Tue, 20 Feb 2007) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/validator/acinclude.m4
   M /trunk/dnssec-tools/validator/aclocal.m4

- add acinclude.m4 (from net-snmp)
- run aclocal to upate aclocal.m4, and include acinclude.m4

------------------------------------------------------------------------
r2931 | rstory | 2007-02-20 13:00:34 -0500 (Tue, 20 Feb 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c
   M /trunk/dnssec-tools/validator/apps/validator_driver.h
   M /trunk/dnssec-tools/validator/apps/validator_selftest.c

- add -F | --testcase-conf to all testcase file to be specified on command line
- warn if -s and -S are combined, or -S used multiple times

------------------------------------------------------------------------
r2930 | rstory | 2007-02-19 14:26:07 -0500 (Mon, 19 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/patches/README

fix typo
------------------------------------------------------------------------
r2929 | rstory | 2007-02-16 18:27:01 -0500 (Fri, 16 Feb 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c
   M /trunk/dnssec-tools/validator/apps/validator_driver.h
   M /trunk/dnssec-tools/validator/apps/validator_selftest.c

- add '-S suite |--test-suite=suite'
- '-s | --selftest' now runs all suites
- prefix selftest runs with suite name
- prefix each test with index in test suite

------------------------------------------------------------------------
r2928 | hserus | 2007-02-16 18:20:37 -0500 (Fri, 16 Feb 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/Makefile.in

Install getaddr and gethost applications

------------------------------------------------------------------------
r2927 | hserus | 2007-02-16 18:19:43 -0500 (Fri, 16 Feb 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/getaddr.c
   M /trunk/dnssec-tools/validator/apps/gethost.c

Return the validation status as the program status code

------------------------------------------------------------------------
r2926 | hserus | 2007-02-16 18:04:45 -0500 (Fri, 16 Feb 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Don't complaint if root.hints is missing

------------------------------------------------------------------------
r2925 | rstory | 2007-02-16 16:46:57 -0500 (Fri, 16 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval-config.in

add sres to libs
------------------------------------------------------------------------
r2924 | rstory | 2007-02-16 13:40:39 -0500 (Fri, 16 Feb 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/selftests.dist

- add the rest of the tests from validator, as suites
  - Please feel free to re-organize and groupe the suites as needed!

------------------------------------------------------------------------
r2923 | rstory | 2007-02-16 13:38:35 -0500 (Fri, 16 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_selftest.c

add support for suites of tests
------------------------------------------------------------------------
r2922 | rstory | 2007-02-16 11:45:40 -0500 (Fri, 16 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/Makefile.in

remove extra QUIET
------------------------------------------------------------------------
r2921 | rstory | 2007-02-13 14:59:13 -0500 (Tue, 13 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_selftest.c

copy ptr after it is initialized
------------------------------------------------------------------------
r2920 | rstory | 2007-02-13 14:45:28 -0500 (Tue, 13 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in

deal with default prefix for testcase path
------------------------------------------------------------------------
r2919 | rstory | 2007-02-13 14:28:12 -0500 (Tue, 13 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_selftest.c

add includes for os x
------------------------------------------------------------------------
r2918 | rstory | 2007-02-13 13:47:55 -0500 (Tue, 13 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/Makefile.top
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in

add path to cp
------------------------------------------------------------------------
r2917 | rstory | 2007-02-13 13:47:03 -0500 (Tue, 13 Feb 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/Makefile.in

- rename selftest dist file
- create $prefix/etc/dnssec during install

------------------------------------------------------------------------
r2916 | rstory | 2007-02-13 13:45:08 -0500 (Tue, 13 Feb 2007) | 1 line
Changed paths:
   A /trunk/dnssec-tools/validator/apps/selftests.dist (from /trunk/dnssec-tools/validator/apps/validator_tests.dist:2913)
   D /trunk/dnssec-tools/validator/apps/validator_tests.dist

rename file
------------------------------------------------------------------------
r2915 | rstory | 2007-02-13 13:12:14 -0500 (Tue, 13 Feb 2007) | 1 line
Changed paths:
   A /trunk/dnssec-tools/validator/apps/validator_driver.h

new header
------------------------------------------------------------------------
r2914 | rstory | 2007-02-13 13:11:12 -0500 (Tue, 13 Feb 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

update for getting testcases from config file

------------------------------------------------------------------------
r2913 | rstory | 2007-02-13 13:08:30 -0500 (Tue, 13 Feb 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/Makefile.in
   A /trunk/dnssec-tools/validator/apps/validator_selftest.c
   A /trunk/dnssec-tools/validator/apps/validator_tests.dist

new files for getting testcases from a config file

------------------------------------------------------------------------
r2912 | rstory | 2007-02-13 13:06:49 -0500 (Tue, 13 Feb 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in
   M /trunk/dnssec-tools/validator/include/validator-config.h.in

add VALIDATOR_TESTCASES macro

------------------------------------------------------------------------
r2911 | marz | 2007-02-13 10:00:54 -0500 (Tue, 13 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/Makefile.in
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Makefile.PL

add paths to perl mod make for libval-config
------------------------------------------------------------------------
r2910 | rstory | 2007-02-13 09:52:24 -0500 (Tue, 13 Feb 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/configure.in
   M /trunk/dnssec-tools/validator/include/validator-config.h.in

- add define for MAX_TEST_RESULTS

------------------------------------------------------------------------
r2909 | rstory | 2007-02-13 09:33:23 -0500 (Tue, 13 Feb 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

- rename get_token to val_get_token and remove static qualifier
- new static destroy_valpolovr to reduce duplicated code

------------------------------------------------------------------------
r2908 | hserus | 2007-02-12 16:36:05 -0500 (Mon, 12 Feb 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_support.c
   M /trunk/dnssec-tools/validator/libval/val_support.h

Save header information when constructing an empty nxdomain response

------------------------------------------------------------------------
r2907 | tewok | 2007-02-09 14:13:52 -0500 (Fri, 09 Feb 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/dnssectools.pm



Fixed a few errors in the pod.

------------------------------------------------------------------------
r2906 | hserus | 2007-02-09 09:25:27 -0500 (Fri, 09 Feb 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/val_errors.h
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/validator/libval/val_log.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

Make VAL_NONEXISTENT_TYPE_NOCHAIN a transient error code: it will settle to one of
VAL_NONEXISTENT_NAME_NOCHAIN or VAL_NONEXISTENT_TYPE_NOCHAIN

------------------------------------------------------------------------
r2905 | hserus | 2007-02-08 15:27:05 -0500 (Thu, 08 Feb 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.h

Correct improper #undef usage

------------------------------------------------------------------------
r2904 | marz | 2007-02-07 14:49:02 -0500 (Wed, 07 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Makefile.PL
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/t/basic.t
   M /trunk/dnssec-tools/validator/Makefile.in

install libval-config and use it from perlmod, fix test for mac compatibility
------------------------------------------------------------------------
r2903 | hserus | 2007-02-07 14:14:26 -0500 (Wed, 07 Feb 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

Don't add the same key multiple times

------------------------------------------------------------------------
r2902 | marz | 2007-02-06 12:28:30 -0500 (Tue, 06 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Makefile.PL

add subdirs to top level make
------------------------------------------------------------------------
r2901 | rstory | 2007-02-06 10:45:33 -0500 (Tue, 06 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval-config.in

add missing lvc_LIBDIR
------------------------------------------------------------------------
r2900 | marz | 2007-02-06 10:44:48 -0500 (Tue, 06 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm

more support to handle context with config
------------------------------------------------------------------------
r2899 | rstory | 2007-02-06 10:41:26 -0500 (Tue, 06 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in

make libval-config executable
------------------------------------------------------------------------
r2898 | rstory | 2007-02-05 18:05:20 -0500 (Mon, 05 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in

help spacing tweaks
------------------------------------------------------------------------
r2897 | rstory | 2007-02-05 18:00:35 -0500 (Mon, 05 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/NEWS

add note on config file configure options and new libval-config
------------------------------------------------------------------------
r2896 | rstory | 2007-02-05 17:57:13 -0500 (Mon, 05 Feb 2007) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in
   M /trunk/dnssec-tools/validator/include/validator/validator.h
   M /trunk/dnssec-tools/validator/include/validator-config.h.in
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval-config.in

- add configurable config file paths
  - remove VAL_CONFIGURATION_FILE, ROOT_HINTS and RESOLV_CONF from validator.h
  - add configure options to specify paths for dnsval.conf, resolv.conf and root.hints
  - update code for new defines for those paths
  - update libval-config with options to report those paths

------------------------------------------------------------------------
r2895 | tewok | 2007-02-05 16:55:28 -0500 (Mon, 05 Feb 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Fixed a case where the current KSK wasn't being loaded.

------------------------------------------------------------------------
r2894 | marz | 2007-02-05 16:30:34 -0500 (Mon, 05 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs

use new api to create context with configs supplied
------------------------------------------------------------------------
r2893 | hserus | 2007-02-05 15:34:14 -0500 (Mon, 05 Feb 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

- Changes to support validation
- Maintain original file whitespacing as much as possible

------------------------------------------------------------------------
r2892 | tewok | 2007-02-05 14:31:14 -0500 (Mon, 05 Feb 2007) | 11 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Reorganized code to group ZSK-specific routines in one blob, and to group
KSK-specific routines in another.

Renamed some routines for clarity

Collapsed two routines into one so that rolling is done based on zone (check
all of a zone's keys) rather than being based on keys (rolling ZSKs then
rolling KSKs.)


------------------------------------------------------------------------
r2891 | tewok | 2007-02-03 11:57:43 -0500 (Sat, 03 Feb 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Deleted an unused variable.

------------------------------------------------------------------------
r2890 | lfoster | 2007-02-02 15:23:41 -0500 (Fri, 02 Feb 2007) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman


Fixed writing new keys to dnsval.conf so that new
  trust anchors are only written to the types for which
  this zone already had a TA.
Made the output look a lot neater.

------------------------------------------------------------------------
r2887 | hardaker | 2007-02-02 12:07:09 -0500 (Fri, 02 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/Makefile.in

use DESTDIR when installing perl
------------------------------------------------------------------------
r2886 | hardaker | 2007-02-02 11:50:10 -0500 (Fri, 02 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Makefile.PL

honor DESTDIR for rules
------------------------------------------------------------------------
r2885 | hardaker | 2007-02-02 11:45:58 -0500 (Fri, 02 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Makefile.PL

quoting typo
------------------------------------------------------------------------
r2884 | hardaker | 2007-02-02 11:34:45 -0500 (Fri, 02 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Makefile.PL

document why the RULESDIR is hard-coded
------------------------------------------------------------------------
r2883 | hserus | 2007-02-02 11:26:33 -0500 (Fri, 02 Feb 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_context.c
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Use standard method of accessing stat timestamps

------------------------------------------------------------------------
r2882 | hserus | 2007-02-02 11:11:02 -0500 (Fri, 02 Feb 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_context.c

Remove reference to the_default_context

------------------------------------------------------------------------
r2881 | hserus | 2007-02-02 10:54:48 -0500 (Fri, 02 Feb 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_context.h

Define prototypes of new functions that allow refresh of configuration files to be possible

------------------------------------------------------------------------
r2880 | hserus | 2007-02-02 10:54:15 -0500 (Fri, 02 Feb 2007) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_context.c

Define a new context-creation function that allows you to specify the resolver/validator/root-hints
configuration files
Perform initialization and destruction of new context members that implement config refresh functionality
Define new functions to refresh configuration files


------------------------------------------------------------------------
r2879 | hserus | 2007-02-02 10:53:58 -0500 (Fri, 02 Feb 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Use the root hints information within context to bootstrap queries 

------------------------------------------------------------------------
r2878 | hserus | 2007-02-02 10:53:39 -0500 (Fri, 02 Feb 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Use the config files within the context to generate validator and resolver policy
On each execution of val_resolve_and_check() check the last modified time on the configuration files and 
re-initialize configuration files if required


------------------------------------------------------------------------
r2877 | hserus | 2007-02-02 10:53:19 -0500 (Fri, 02 Feb 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_cache.c
   M /trunk/dnssec-tools/validator/libval/val_cache.h

Store root_ns information inside context since this can be different for different contexts (theoretically)


------------------------------------------------------------------------
r2876 | hserus | 2007-02-02 10:53:00 -0500 (Fri, 02 Feb 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Save last accessed timestamp each time the configuration files are read
Make modifications to the context only when the configuration files have been parsed properly. That way we 
can ensure that the context is not corrupted when we want to refresh it with a new configuration file.


------------------------------------------------------------------------
r2875 | hserus | 2007-02-02 10:52:37 -0500 (Fri, 02 Feb 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/Makefile.in
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod

rename resolver_config_set/get to resolv_conf_set/get

------------------------------------------------------------------------
r2874 | hserus | 2007-02-02 10:51:46 -0500 (Fri, 02 Feb 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

Add a new option -w that allows test cases to be re-run in a loop


------------------------------------------------------------------------
r2873 | hserus | 2007-02-02 10:51:16 -0500 (Fri, 02 Feb 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

- Allow different validator/resolver/root configuration files for each context
- Keep track of last modifed times for each configuration file
- Add prototypes for new functions that allow above features to be accessed


------------------------------------------------------------------------
r2872 | rstory | 2007-02-02 10:49:40 -0500 (Fri, 02 Feb 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/.cvsignore
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in
   M /trunk/dnssec-tools/validator/include/validator-config.h.in
   A /trunk/dnssec-tools/validator/libval-config.in

add support for libval-config script

------------------------------------------------------------------------
r2871 | marz | 2007-02-02 09:28:22 -0500 (Fri, 02 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t

really export noew error codes, fix final test case
------------------------------------------------------------------------
r2870 | hserus | 2007-02-02 09:15:27 -0500 (Fri, 02 Feb 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

When checking for cached query, only compare against the "original" name and not the transformed name (for
        example through a cname chain)

------------------------------------------------------------------------
r2869 | marz | 2007-02-01 16:08:44 -0500 (Thu, 01 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Makefile.PL
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t

conf set/get funcs, isvalidated, new error codes, getaddrinfo proto change - some tests fail
------------------------------------------------------------------------
r2868 | marz | 2007-02-01 16:06:42 -0500 (Thu, 01 Feb 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c
   M /trunk/dnssec-tools/validator/include/validator/validator.h
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_policy.h

return alloc'd mem, rename conf funcs
------------------------------------------------------------------------
r2867 | hserus | 2007-02-01 14:33:50 -0500 (Thu, 01 Feb 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

Perform correct NULL check

------------------------------------------------------------------------
r2865 | hardaker | 2007-01-31 19:56:11 -0500 (Wed, 31 Jan 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/NEWS

NEWS update from Wayne
------------------------------------------------------------------------
r2863 | hardaker | 2007-01-31 16:13:13 -0500 (Wed, 31 Jan 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/NEWS

consistent formatting
------------------------------------------------------------------------
r2862 | lfoster | 2007-01-31 14:35:06 -0500 (Wed, 31 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/NEWS

added trustman updates.

------------------------------------------------------------------------
r2861 | hardaker | 2007-01-31 11:13:29 -0500 (Wed, 31 Jan 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/NEWS

added a bug fix statement about libval
------------------------------------------------------------------------
r2860 | hardaker | 2007-01-31 11:01:46 -0500 (Wed, 31 Jan 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/Makefile.top

update libtool library version
------------------------------------------------------------------------
r2859 | rstory | 2007-01-31 10:35:13 -0500 (Wed, 31 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

add discussion of val_resquery returning a value > anslen

------------------------------------------------------------------------
r2858 | hardaker | 2007-01-31 10:06:21 -0500 (Wed, 31 Jan 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/NEWS

NEWS update
------------------------------------------------------------------------
r2857 | hardaker | 2007-01-30 22:50:13 -0500 (Tue, 30 Jan 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

revert accidental commit
------------------------------------------------------------------------
r2856 | hardaker | 2007-01-30 22:49:34 -0500 (Tue, 30 Jan 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow
   M /trunk/dnssec-tools/tools/donuts/donuts
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone
   M /trunk/dnssec-tools/tools/mapper/mapper
   M /trunk/dnssec-tools/tools/scripts/TrustMan.pl
   M /trunk/dnssec-tools/tools/scripts/blinkenlights
   M /trunk/dnssec-tools/tools/scripts/cleankrf
   M /trunk/dnssec-tools/tools/scripts/dtconfchk
   M /trunk/dnssec-tools/tools/scripts/dtdefs
   M /trunk/dnssec-tools/tools/scripts/dtinitconf
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/fixkrf
   M /trunk/dnssec-tools/tools/scripts/genkrf
   M /trunk/dnssec-tools/tools/scripts/getdnskeys
   M /trunk/dnssec-tools/tools/scripts/krfcheck
   M /trunk/dnssec-tools/tools/scripts/lskrf
   M /trunk/dnssec-tools/tools/scripts/lsroll
   M /trunk/dnssec-tools/tools/scripts/rollchk
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/rollinit
   M /trunk/dnssec-tools/tools/scripts/rollset
   M /trunk/dnssec-tools/tools/scripts/signset-editor
   M /trunk/dnssec-tools/tools/scripts/tachk
   M /trunk/dnssec-tools/tools/scripts/timetrans
   M /trunk/dnssec-tools/tools/scripts/trustman
   M /trunk/dnssec-tools/tools/scripts/zonesigner

DNSSEC-Tools version update
------------------------------------------------------------------------
r2855 | hardaker | 2007-01-30 22:47:48 -0500 (Tue, 30 Jan 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/TrustMan.pl
   M /trunk/dnssec-tools/tools/scripts/blinkenlights
   M /trunk/dnssec-tools/tools/scripts/cleankrf
   M /trunk/dnssec-tools/tools/scripts/dtconfchk
   M /trunk/dnssec-tools/tools/scripts/dtdefs
   M /trunk/dnssec-tools/tools/scripts/dtinitconf
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/fixkrf
   M /trunk/dnssec-tools/tools/scripts/genkrf
   M /trunk/dnssec-tools/tools/scripts/getdnskeys
   M /trunk/dnssec-tools/tools/scripts/krfcheck
   M /trunk/dnssec-tools/tools/scripts/lskrf
   M /trunk/dnssec-tools/tools/scripts/lsroll
   M /trunk/dnssec-tools/tools/scripts/rollchk
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/rollinit
   M /trunk/dnssec-tools/tools/scripts/rollset
   M /trunk/dnssec-tools/tools/scripts/signset-editor
   M /trunk/dnssec-tools/tools/scripts/tachk
   M /trunk/dnssec-tools/tools/scripts/timetrans
   M /trunk/dnssec-tools/tools/scripts/trustman
   M /trunk/dnssec-tools/tools/scripts/zonesigner

DNSSEC-Tools version update
------------------------------------------------------------------------
r2854 | hardaker | 2007-01-30 22:43:47 -0500 (Tue, 30 Jan 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

version tag 1.1
------------------------------------------------------------------------
r2853 | lfoster | 2007-01-30 15:19:30 -0500 (Tue, 30 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

writes new keys to dnsval.conf after holddown time has passed.

------------------------------------------------------------------------
r2852 | tewok | 2007-01-29 20:44:49 -0500 (Mon, 29 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Changed -usepub to -usezskpub.

------------------------------------------------------------------------
r2851 | tewok | 2007-01-29 20:02:01 -0500 (Mon, 29 Jan 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Relocated some argument checking because the prior place was interfering
with -rollksk.

------------------------------------------------------------------------
r2850 | tewok | 2007-01-29 19:59:56 -0500 (Mon, 29 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Deleted some defunct comments.

------------------------------------------------------------------------
r2849 | rstory | 2007-01-29 15:58:00 -0500 (Mon, 29 Jan 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/apps/ssh/ssh-dnssec.pat

- update for api changes in 1.1
- reduce patch size
- fix configure reporting when using libval-threads

------------------------------------------------------------------------
r2848 | tewok | 2007-01-29 15:31:50 -0500 (Mon, 29 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/tests/test-kskroll


Added a zone indicator to the success and failure messages.

------------------------------------------------------------------------
r2847 | tewok | 2007-01-29 15:29:14 -0500 (Mon, 29 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/tests/test-kskroll


Added some closure to the cleaner code.

------------------------------------------------------------------------
r2846 | rstory | 2007-01-29 15:05:30 -0500 (Mon, 29 Jan 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/ssh/ssh-dnssec.pat

update for new include dnssec-tools include paths
------------------------------------------------------------------------
r2845 | rstory | 2007-01-29 15:02:42 -0500 (Mon, 29 Jan 2007) | 1 line
Changed paths:
   A /trunk/dnssec-tools/apps/ssh/README.dnssec

readme
------------------------------------------------------------------------
r2844 | rstory | 2007-01-29 15:01:25 -0500 (Mon, 29 Jan 2007) | 1 line
Changed paths:
   A /trunk/dnssec-tools/apps/ssh
   A /trunk/dnssec-tools/apps/ssh/ssh-dnssec.pat

dnssec local validation patch for openssh 4.5p1
------------------------------------------------------------------------
r2843 | rstory | 2007-01-29 14:59:47 -0500 (Mon, 29 Jan 2007) | 1 line
Changed paths:
   A /trunk/dnssec-tools/apps/jabberd-2/jabberd-dnssec.pat

dnssec local validation patch for jabberd 2
------------------------------------------------------------------------
r2842 | rstory | 2007-01-29 14:59:14 -0500 (Mon, 29 Jan 2007) | 1 line
Changed paths:
   A /trunk/dnssec-tools/apps/jabberd-2

dnssec local validation patch for jabberd 2
------------------------------------------------------------------------
r2841 | tewok | 2007-01-29 13:21:57 -0500 (Mon, 29 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/tests/test-kskroll


Changed -pubksk to -newpubksk.

------------------------------------------------------------------------
r2840 | tewok | 2007-01-29 13:20:44 -0500 (Mon, 29 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Changed -pubksk to -newpubksk.

------------------------------------------------------------------------
r2839 | tewok | 2007-01-29 13:15:43 -0500 (Mon, 29 Jan 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Do proper handling of -nosave and the savekeys config field.
Prevent the root directory from being the key archive directory.

------------------------------------------------------------------------
r2838 | hserus | 2007-01-29 11:02:29 -0500 (Mon, 29 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch
   M /trunk/dnssec-tools/apps/postfix/postfix-howto.txt
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.6_dnssec_patch.txt

Use validator/validator.h instead of validator.h

------------------------------------------------------------------------
r2837 | tewok | 2007-01-27 15:14:54 -0500 (Sat, 27 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Used the correct variable in the KSK info output.

------------------------------------------------------------------------
r2836 | tewok | 2007-01-27 14:41:35 -0500 (Sat, 27 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Changed New KSKs to Published KSKs.

------------------------------------------------------------------------
r2835 | tewok | 2007-01-27 14:39:33 -0500 (Sat, 27 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf
   M /trunk/dnssec-tools/tools/scripts/tests/test-kskroll
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Changed New KSKs to Published KSKs.

------------------------------------------------------------------------
r2834 | tewok | 2007-01-27 14:11:16 -0500 (Sat, 27 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Fixed the grammar in a pod sentence.

------------------------------------------------------------------------
r2833 | tewok | 2007-01-27 13:47:33 -0500 (Sat, 27 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Used the correct variable in an error message.

------------------------------------------------------------------------
r2832 | rstory | 2007-01-26 17:08:58 -0500 (Fri, 26 Jan 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

- val_res_query()
  - free internal response after data copied
  - return full size of response on success

------------------------------------------------------------------------
r2831 | lfoster | 2007-01-25 17:44:58 -0500 (Thu, 25 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

fixed an options problem and changed version number.

------------------------------------------------------------------------
r2830 | tewok | 2007-01-25 13:44:40 -0500 (Thu, 25 Jan 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Added a check to keyrec_fmtchk() to prevent an empty key keyrec from causing
a new signing set to be generated.

------------------------------------------------------------------------
r2829 | lfoster | 2007-01-25 13:25:36 -0500 (Thu, 25 Jan 2007) | 9 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

now updates named.conf with new trust anchors when they
have passed their holddown time.

bunch of other minor stuff:
 added new flag for naming a trust anchor data file on the cmd line
 took out some old comments
 moved some stuff into read_*_file subs that belonged there
 

------------------------------------------------------------------------
r2828 | tewok | 2007-01-25 09:55:57 -0500 (Thu, 25 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Build the new KSK set with the correct key list.

------------------------------------------------------------------------
r2827 | tewok | 2007-01-25 09:53:11 -0500 (Thu, 25 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/tests/test-kskroll


Added an option to the usage message.

------------------------------------------------------------------------
r2826 | tewok | 2007-01-24 08:43:52 -0500 (Wed, 24 Jan 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Some minor code optimization.
Made greater use of setkeytype().
Fixed a bug in ZSK signing set creation.

------------------------------------------------------------------------
r2825 | tewok | 2007-01-22 21:54:23 -0500 (Mon, 22 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights
   M /trunk/dnssec-tools/tools/scripts/cleankrf
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/fixkrf
   M /trunk/dnssec-tools/tools/scripts/genkrf
   M /trunk/dnssec-tools/tools/scripts/krfcheck
   M /trunk/dnssec-tools/tools/scripts/lskrf
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/signset-editor
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Added error actions stuff.

------------------------------------------------------------------------
r2824 | tewok | 2007-01-22 21:42:23 -0500 (Mon, 22 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm
   M /trunk/dnssec-tools/tools/modules/rollrec.pm


Added error action support.

------------------------------------------------------------------------
r2823 | tewok | 2007-01-22 21:41:14 -0500 (Mon, 22 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm


Add error action interfaces for use in the DNSSEC-Tools modules.

------------------------------------------------------------------------
r2822 | tewok | 2007-01-22 16:51:09 -0500 (Mon, 22 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Replace a hash reference with a previously set variable.

------------------------------------------------------------------------
r2821 | tewok | 2007-01-22 13:16:28 -0500 (Mon, 22 Jan 2007) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


 
Add some error checking for KSK rollover.
Added a missing (and technically not necessary) semicolon.
 

------------------------------------------------------------------------
r2820 | tewok | 2007-01-22 11:36:02 -0500 (Mon, 22 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm


Added a missing check for an undefined hash ref.

------------------------------------------------------------------------
r2819 | tewok | 2007-01-22 10:33:53 -0500 (Mon, 22 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Add signing set names to key-name output.

------------------------------------------------------------------------
r2818 | tewok | 2007-01-19 17:31:58 -0500 (Fri, 19 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Fixed some pod formatting.

------------------------------------------------------------------------
r2817 | tewok | 2007-01-19 16:58:40 -0500 (Fri, 19 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/tests/test-kskroll


Fixed some pod.

------------------------------------------------------------------------
r2816 | tewok | 2007-01-19 16:57:37 -0500 (Fri, 19 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/tests/test-kskroll


Fixed how filename formation is done.

------------------------------------------------------------------------
r2815 | tewok | 2007-01-19 16:34:18 -0500 (Fri, 19 Jan 2007) | 4 lines
Changed paths:
   A /trunk/dnssec-tools/tools/scripts/tests/test-kskroll


This program runs tests to ensure that zonesigner's KSK rollover options are
working properly.

------------------------------------------------------------------------
r2814 | tewok | 2007-01-19 16:33:06 -0500 (Fri, 19 Jan 2007) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/scripts/tests/README


Add a README to describe the contents of this directory.

------------------------------------------------------------------------
r2813 | tewok | 2007-01-19 13:06:06 -0500 (Fri, 19 Jan 2007) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/scripts/tests


Added a directory for tests.

------------------------------------------------------------------------
r2812 | tewok | 2007-01-19 12:37:12 -0500 (Fri, 19 Jan 2007) | 9 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Added -newksk to generate a set of New KSKs.

Reworked genksks() to explicitly do exactly what is needed, rather than
relying on some unclear drop-throughs.

Added -showsigncmd and -showkeycmd.


------------------------------------------------------------------------
r2811 | hserus | 2007-01-19 07:25:16 -0500 (Fri, 19 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

Separate out check for trusted condition from check for validated condition

------------------------------------------------------------------------
r2810 | hserus | 2007-01-18 21:51:52 -0500 (Thu, 18 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

Add log statements for VAL_TRUSTED_ANSWER, VAL_UNTRUSTED_ANSWER and VAL_VALIDATED_ANSWER

------------------------------------------------------------------------
r2809 | hserus | 2007-01-18 21:51:10 -0500 (Thu, 18 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c

Fix logic for determining trusted status

------------------------------------------------------------------------
r2808 | hserus | 2007-01-18 21:50:29 -0500 (Thu, 18 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_cache.c

Move variable outside #define construct

------------------------------------------------------------------------
r2807 | tewok | 2007-01-18 21:09:25 -0500 (Thu, 18 Jan 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Change "kskpub" references to "ksknew".
Add "ksknew" to the zone fields.

------------------------------------------------------------------------
r2806 | tewok | 2007-01-18 20:09:22 -0500 (Thu, 18 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm


Fixed a comment.

------------------------------------------------------------------------
r2805 | tewok | 2007-01-18 18:25:18 -0500 (Thu, 18 Jan 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added support for New KSK keys.
Fixed the help lines for KSK-related keys.

------------------------------------------------------------------------
r2804 | hserus | 2007-01-18 11:57:57 -0500 (Thu, 18 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Attempt to fix memory leak

------------------------------------------------------------------------
r2803 | hserus | 2007-01-17 15:38:08 -0500 (Wed, 17 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.6_dnssec_patch.txt

Use val_istrusted() and val_isvalidated() instead of checking for exact return values.

------------------------------------------------------------------------
r2802 | hserus | 2007-01-17 12:17:14 -0500 (Wed, 17 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

Return VAL_TRUSTED_ANSWER, VAL_UNTRUSTED_ANSWER or VAL_VALIDATED_ANSWER for merged validator status values.

------------------------------------------------------------------------
r2801 | hserus | 2007-01-17 12:16:37 -0500 (Wed, 17 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Recognize VAL_VALIDATED_ANSWER as a trusted and validated answer
Recognize VAL_TRUSTED_ANSWER as a trusted answer

------------------------------------------------------------------------
r2800 | hserus | 2007-01-17 12:16:15 -0500 (Wed, 17 Jan 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Remove part that says that merged status value can be a non-existence type. We actually infer non-existence
using the normal mechanisms used by the legacy functions. Additionally, val_status tells us if this is 
trusted or no.

------------------------------------------------------------------------
r2799 | hserus | 2007-01-17 12:14:11 -0500 (Wed, 17 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/getaddr.c

Supply new val_status param to val_getaddrinfo()

------------------------------------------------------------------------
r2798 | hserus | 2007-01-17 12:13:42 -0500 (Wed, 17 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/validator.h

Add val_status parameter to val_getaddrinfo()

------------------------------------------------------------------------
r2797 | hserus | 2007-01-17 12:13:26 -0500 (Wed, 17 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/val_errors.h

Add validator status codes for VAL_TRUSTED_ANSWER, VAL_UNTRUSTED_ANSWER and VAL_VALIDATED_ANSWER.

------------------------------------------------------------------------
r2796 | tewok | 2007-01-16 18:01:59 -0500 (Tue, 16 Jan 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added full support for current and obsolete KSK keys.
Fixed a typo in a comment.


------------------------------------------------------------------------
r2795 | tewok | 2007-01-16 16:45:14 -0500 (Tue, 16 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


If -genksk is given, any existing KSKs are marked as obsolete.

------------------------------------------------------------------------
r2794 | tewok | 2007-01-16 09:58:52 -0500 (Tue, 16 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Added -rollksk.

------------------------------------------------------------------------
r2793 | tewok | 2007-01-15 19:18:32 -0500 (Mon, 15 Jan 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/genkrf


Changed 'ksk' keyrec refs to 'kskcur'.
Updated the copyrights.


------------------------------------------------------------------------
r2792 | tewok | 2007-01-15 19:17:22 -0500 (Mon, 15 Jan 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/cleankrf


Changed 'ksk' keyrec refs to 'kskcur'.
Updated the copyrights.


------------------------------------------------------------------------
r2791 | tewok | 2007-01-15 19:16:43 -0500 (Mon, 15 Jan 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Changed 'ksk' keyrec refs to 'kskcur'.
Updated the copyrights.

------------------------------------------------------------------------
r2790 | tewok | 2007-01-15 19:15:00 -0500 (Mon, 15 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtconfchk


Updated copyrights.

------------------------------------------------------------------------
r2789 | tewok | 2007-01-15 19:13:48 -0500 (Mon, 15 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Updated the copyright.

------------------------------------------------------------------------
r2788 | tewok | 2007-01-15 19:10:06 -0500 (Mon, 15 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/krfcheck


Updated to handle KSK signing sets and multiple types of KSKs.

------------------------------------------------------------------------
r2787 | lfoster | 2007-01-15 17:03:09 -0500 (Mon, 15 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

parsing of dnsval.conf should be correct now.

------------------------------------------------------------------------
r2786 | tewok | 2007-01-15 14:05:30 -0500 (Mon, 15 Jan 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Initial code for KSK rollover.  This does no rolling itself, but it adds in
Current KSKs.

------------------------------------------------------------------------
r2785 | tewok | 2007-01-15 13:48:23 -0500 (Mon, 15 Jan 2007) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm
   M /trunk/dnssec-tools/tools/modules/keyrec.pod


Started adding code for supporting KSK rollover.

Added keyrec_fmtchk(), which ensures a keyrec file in in the current format.
This is always called by keyrec_read().

------------------------------------------------------------------------
r2784 | tewok | 2007-01-15 13:46:25 -0500 (Mon, 15 Jan 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Adjusted the copyright.
Changed a log message from ALWAYS to TMI.

------------------------------------------------------------------------
r2783 | tewok | 2007-01-15 10:50:04 -0500 (Mon, 15 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Updated copyright.

------------------------------------------------------------------------
r2782 | tewok | 2007-01-15 10:36:25 -0500 (Mon, 15 Jan 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Add 2007 to the copyright.
Fix the pod's example keyrec file to account for KSKs being in signing sets.

------------------------------------------------------------------------
r2780 | hardaker | 2007-01-12 18:29:18 -0500 (Fri, 12 Jan 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

tag as a pre-release of 1.1
------------------------------------------------------------------------
r2779 | hardaker | 2007-01-12 18:23:46 -0500 (Fri, 12 Jan 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

Added a bogus function that does nothing so rule authors can insert it into rules to enable to have the perl debugger break within a rule definition
------------------------------------------------------------------------
r2778 | hardaker | 2007-01-12 18:04:06 -0500 (Fri, 12 Jan 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/Makefile.in

force installation of scripts into bindir (exec_prefix turned out to be bad bad)
------------------------------------------------------------------------
r2777 | hardaker | 2007-01-12 17:59:51 -0500 (Fri, 12 Jan 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/Makefile.in

force installation of scripts into exec_prefix
------------------------------------------------------------------------
r2776 | rstory | 2007-01-12 17:42:34 -0500 (Fri, 12 Jan 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/Makefile.top

add subdir to include dir path
------------------------------------------------------------------------
r2775 | tewok | 2007-01-12 10:21:36 -0500 (Fri, 12 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone


Changed zonesigner's -forceroll to -rollzsk.

------------------------------------------------------------------------
r2774 | tewok | 2007-01-12 10:18:24 -0500 (Fri, 12 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Changed zonesigner's -forceroll option to be -rollzsk.

------------------------------------------------------------------------
r2773 | hserus | 2007-01-11 23:03:59 -0500 (Thu, 11 Jan 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

For glue fetch operations set the DONT_VALIDATE flag
Ensure that names are not registered twice for alias chains


------------------------------------------------------------------------
r2772 | hserus | 2007-01-11 23:01:53 -0500 (Thu, 11 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Make sure we break out of the resolve_and_check loop only if some result is available

------------------------------------------------------------------------
r2771 | hserus | 2007-01-11 19:14:02 -0500 (Thu, 11 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Look for glue in cname/dname chain

------------------------------------------------------------------------
r2770 | hserus | 2007-01-11 17:33:28 -0500 (Thu, 11 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Fix memory leak and null pointer exception

------------------------------------------------------------------------
r2769 | hserus | 2007-01-11 17:32:39 -0500 (Thu, 11 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Fix memory leak

------------------------------------------------------------------------
r2768 | hserus | 2007-01-11 17:32:02 -0500 (Thu, 11 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

Use VAL_INDETERMINATE in place of VAL_ERROR 

------------------------------------------------------------------------
r2767 | tewok | 2007-01-11 17:01:59 -0500 (Thu, 11 Jan 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/cleankrf
   M /trunk/dnssec-tools/tools/scripts/genkrf
   M /trunk/dnssec-tools/tools/scripts/krfcheck
   M /trunk/dnssec-tools/tools/scripts/lskrf
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Changed "kskkey" to "kskcur".


------------------------------------------------------------------------
r2766 | tewok | 2007-01-11 17:01:14 -0500 (Thu, 11 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pod


Changed "kskkey" to "kskcur".

------------------------------------------------------------------------
r2765 | tewok | 2007-01-11 16:53:13 -0500 (Thu, 11 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm
   M /trunk/dnssec-tools/tools/modules/keyrec.pod
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm


Changed the "kskkey" keyrec field name to "kskcur".

------------------------------------------------------------------------
r2764 | tewok | 2007-01-11 16:40:57 -0500 (Thu, 11 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Ensure that user-specified signing sets actually exist.

------------------------------------------------------------------------
r2763 | rstory | 2007-01-11 16:31:00 -0500 (Thu, 11 Jan 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/Makefile.in
   M /trunk/dnssec-tools/validator/libval/Makefile.in

use new validator path to resolver.h and validator.h
------------------------------------------------------------------------
r2762 | rstory | 2007-01-11 16:28:17 -0500 (Thu, 11 Jan 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/getaddr.c
   M /trunk/dnssec-tools/validator/apps/gethost.c
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

use new validator path to resolver.h and validator.h
------------------------------------------------------------------------
r2761 | rstory | 2007-01-11 16:25:06 -0500 (Thu, 11 Jan 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_cache.c
   M /trunk/dnssec-tools/validator/libval/val_context.c
   M /trunk/dnssec-tools/validator/libval/val_crypto.c
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/validator/libval/val_log.c
   M /trunk/dnssec-tools/validator/libval/val_parse.c
   M /trunk/dnssec-tools/validator/libval/val_parse.h
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_support.c
   M /trunk/dnssec-tools/validator/libval/val_verify.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

use new validator path to resolver.h and validator.h
------------------------------------------------------------------------
r2760 | tewok | 2007-01-11 16:24:27 -0500 (Thu, 11 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Added keyrec_exists().

------------------------------------------------------------------------
r2759 | rstory | 2007-01-11 16:18:31 -0500 (Thu, 11 Jan 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_tsig.h

use new validator path to resolver.h
------------------------------------------------------------------------
r2758 | rstory | 2007-01-11 16:15:34 -0500 (Thu, 11 Jan 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/base64.c
   M /trunk/dnssec-tools/validator/libsres/ns_name.c
   M /trunk/dnssec-tools/validator/libsres/ns_netint.c
   M /trunk/dnssec-tools/validator/libsres/ns_parse.c
   M /trunk/dnssec-tools/validator/libsres/ns_print.c
   M /trunk/dnssec-tools/validator/libsres/ns_samedomain.c
   M /trunk/dnssec-tools/validator/libsres/ns_ttl.c
   M /trunk/dnssec-tools/validator/libsres/res_comp.c
   M /trunk/dnssec-tools/validator/libsres/res_debug.c
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.c
   M /trunk/dnssec-tools/validator/libsres/res_mkquery.c
   M /trunk/dnssec-tools/validator/libsres/res_query.c
   M /trunk/dnssec-tools/validator/libsres/res_support.c
   M /trunk/dnssec-tools/validator/libsres/res_tsig.c

use new validator path to resolver.h
------------------------------------------------------------------------
r2757 | rstory | 2007-01-11 15:57:58 -0500 (Thu, 11 Jan 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/include/validator/val_errors.h
   M /trunk/dnssec-tools/validator/include/validator/validator.h

update includes for new subdirectory
------------------------------------------------------------------------
r2756 | rstory | 2007-01-11 15:56:05 -0500 (Thu, 11 Jan 2007) | 1 line
Changed paths:
   A /trunk/dnssec-tools/validator/include/validator/val_errors.h (from /trunk/dnssec-tools/validator/libval/val_errors.h:2754)
   D /trunk/dnssec-tools/validator/libval/val_errors.h

move val_errors.h to new include directory
------------------------------------------------------------------------
r2755 | rstory | 2007-01-11 15:55:24 -0500 (Thu, 11 Jan 2007) | 1 line
Changed paths:
   D /trunk/dnssec-tools/validator/include/validator/val_errors.h

remove wrong version
------------------------------------------------------------------------
r2754 | rstory | 2007-01-11 15:52:38 -0500 (Thu, 11 Jan 2007) | 1 line
Changed paths:
   A /trunk/dnssec-tools/validator/include/validator/val_errors.h (from /trunk/dnssec-tools/validator/libval/val_errors.h:2736)
   A /trunk/dnssec-tools/validator/include/validator/validator.h (from /trunk/dnssec-tools/validator/libval/validator.h:2738)
   D /trunk/dnssec-tools/validator/libval/validator.h

move validator.h and val_errors.h to new include directory
------------------------------------------------------------------------
r2753 | rstory | 2007-01-11 15:47:18 -0500 (Thu, 11 Jan 2007) | 1 line
Changed paths:
   A /trunk/dnssec-tools/validator/include/validator/resolver.h (from /trunk/dnssec-tools/validator/libsres/resolver.h:2736)
   D /trunk/dnssec-tools/validator/libsres/resolver.h

move resolver.h to new include directory
------------------------------------------------------------------------
r2752 | rstory | 2007-01-11 15:38:34 -0500 (Thu, 11 Jan 2007) | 1 line
Changed paths:
   A /trunk/dnssec-tools/validator/include/validator

new validator include dir
------------------------------------------------------------------------
r2751 | hardaker | 2007-01-11 11:40:01 -0500 (Thu, 11 Jan 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Makefile.PL
   M /trunk/dnssec-tools/tools/donuts/donuts

make paths less perl8 dependent and, unfortunately, less system flexible
------------------------------------------------------------------------
r2750 | hserus | 2007-01-10 18:35:15 -0500 (Wed, 10 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

Use u_int8_t in place of char to represent on-the-wire names

------------------------------------------------------------------------
r2749 | hserus | 2007-01-10 18:35:02 -0500 (Wed, 10 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_errors.h

Add aliases for error codes that have errno equivalents

------------------------------------------------------------------------
r2748 | hserus | 2007-01-10 18:34:47 -0500 (Wed, 10 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

Additional check before logging information about original query

------------------------------------------------------------------------
r2747 | hserus | 2007-01-10 18:34:31 -0500 (Wed, 10 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.h

Add prototype for process_cname_dname_responses()

------------------------------------------------------------------------
r2746 | hserus | 2007-01-10 18:34:18 -0500 (Wed, 10 Jan 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Moved ALLOCATE_REFERRAL_BLOCK from this file to val_support.h
In find_nslist_for_query() look for a configured forwarder for the given zone first
Move cname/dname processing logic into separate function, process_cname_dname_responses()
Major clean-up of digest_response() logic

------------------------------------------------------------------------
r2745 | hserus | 2007-01-10 18:33:59 -0500 (Wed, 10 Jan 2007) | 10 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Change name_in_qnames() function so that we only pass the name as a parameter instead of the entire rrset
Check for systhesized cname case in fails_to_answer_query()
While building pending query, try harder to find the DNSKEY that created an RRSIG and check that the
signer is within the zone.
In check for conflicting answers allow chains of cnames and dnames to be possible
Allow ask_cache to read cached cnames and dnames
Stowing of answers only happens during digest_response() so that in-bailiwick condition cnan be checked
Use namename() while comparing two on-the-wire names
Implement other miscellaneous todos (portions marked XXX)

------------------------------------------------------------------------
r2744 | hserus | 2007-01-10 18:33:36 -0500 (Wed, 10 Jan 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.h

Add namename() function along the lines of strstr() to compare two on-the-wire domain names
Also add a new copy_rrset_rec_list() function
Moved ALLOCATE_REFERRAL_BLOCK from val_resquery.c to here so that other files may use it

------------------------------------------------------------------------
r2743 | hserus | 2007-01-10 18:33:15 -0500 (Wed, 10 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.c

Add namename() function along the lines of strstr() to compare two on-the-wire domain names
Also add a new copy_rrset_rec_list() function

------------------------------------------------------------------------
r2742 | hserus | 2007-01-10 18:33:02 -0500 (Wed, 10 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.c

Set couple of missing error states


------------------------------------------------------------------------
r2741 | hserus | 2007-01-10 18:32:46 -0500 (Wed, 10 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_cache.h

Change prototypes for all the stow_ functions since we now do in-bailiwick checking
Change prototypes for get_cached_rrset and get_nslist_from_cache as well.

------------------------------------------------------------------------
r2740 | hserus | 2007-01-10 18:32:31 -0500 (Wed, 10 Jan 2007) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_cache.c

Check if answers being cached are in-bailiwick for the given query
Return a domain_info structure for get_cached_rrset. This is to allow cached
cname/dname records to be returned
Add preliminary support for negative answer cache
Add support for storing/returning entries to/from the forwarder cache
Use namename() while comparing two on-the-wire names

------------------------------------------------------------------------
r2739 | hserus | 2007-01-10 18:32:16 -0500 (Wed, 10 Jan 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Separated name server parsing logic into a separate function
Add support for forwarding queries to specific name servers for specific zones.


------------------------------------------------------------------------
r2738 | rstory | 2007-01-09 17:14:22 -0500 (Tue, 09 Jan 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c
   M /trunk/dnssec-tools/validator/libval/validator.h

make args param to val_log_add_optarg const
------------------------------------------------------------------------
r2737 | rstory | 2007-01-09 15:23:31 -0500 (Tue, 09 Jan 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/configure

update for previous configure.in change
------------------------------------------------------------------------
r2736 | tewok | 2007-01-09 14:18:49 -0500 (Tue, 09 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm


Fixed how the zone name is found in opts_zonekr().

------------------------------------------------------------------------
r2735 | tewok | 2007-01-09 14:16:46 -0500 (Tue, 09 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Fixed a couple verbose output messages.

------------------------------------------------------------------------
r2734 | tewok | 2007-01-09 13:49:53 -0500 (Tue, 09 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Added a signing-set name save when -signset given and -genzsk not given.

------------------------------------------------------------------------
r2733 | tewok | 2007-01-09 13:47:22 -0500 (Tue, 09 Jan 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Backing out an invalid modification for unfound keys when -gen<foo> wasn't
specified.

------------------------------------------------------------------------
r2732 | tewok | 2007-01-09 12:59:04 -0500 (Tue, 09 Jan 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Generate new signing set names when keyrec file doesn't contain any.
This change was made for all keys.

------------------------------------------------------------------------
r2731 | tewok | 2007-01-08 18:51:12 -0500 (Mon, 08 Jan 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Fixed to use -signset argument for the current ZSK.
Fixed a bug wherein sometimes the INCLUDE lines in the intermediate zone file
didn't have ".key" appended.

------------------------------------------------------------------------
r2730 | hserus | 2007-01-08 18:12:15 -0500 (Mon, 08 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

This version was submitted as draft-hayatnagarkar-dnsext-validator-api-03

------------------------------------------------------------------------
r2729 | tewok | 2007-01-08 12:53:29 -0500 (Mon, 08 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/genkrf


Fixed verbose output.

------------------------------------------------------------------------
r2728 | tewok | 2007-01-08 12:04:26 -0500 (Mon, 08 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/genkrf


Added -kskcount.

------------------------------------------------------------------------
r2727 | tewok | 2007-01-06 12:41:45 -0500 (Sat, 06 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/genkrf


Properly account for the number of ZSKs given on the command line.

------------------------------------------------------------------------
r2726 | tewok | 2007-01-06 12:25:12 -0500 (Sat, 06 Jan 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Added -useboth to sign the zone with both Current and Published keys.

We'll also sort the keys one the signing command line now.

------------------------------------------------------------------------
r2725 | rstory | 2007-01-06 12:07:35 -0500 (Sat, 06 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.c
   M /trunk/dnssec-tools/validator/libval/val_cache.c

- do not use pthreads if it is not available, or user configured without it

------------------------------------------------------------------------
r2724 | rstory | 2007-01-06 12:05:45 -0500 (Sat, 06 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/Makefile.top
   M /trunk/dnssec-tools/validator/apps/Makefile.in
   M /trunk/dnssec-tools/validator/configure.in
   M /trunk/dnssec-tools/validator/include/validator-config.h.in
   M /trunk/dnssec-tools/validator/libval/Makefile.in

- add '-threads' suffix to libval iff using threads
- no explicit linking w/pthreads

------------------------------------------------------------------------
r2723 | rstory | 2007-01-06 11:18:59 -0500 (Sat, 06 Jan 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/configure.in
   M /trunk/dnssec-tools/validator/include/validator-config.h.in

- tweak indentation on some help
- test for libpthreads
- add --without-threads

------------------------------------------------------------------------
r2722 | tewok | 2007-01-06 00:47:20 -0500 (Sat, 06 Jan 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pod


Some work towards moving away from tight binding to BIND.


------------------------------------------------------------------------
r2721 | tewok | 2007-01-06 00:43:58 -0500 (Sat, 06 Jan 2007) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtconfchk
   M /trunk/dnssec-tools/tools/scripts/dtinitconf
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Unified the BIND option keys to drop the "bind_" prefix.  Some work towards  
moving away from tight binding to BIND.


------------------------------------------------------------------------
r2720 | tewok | 2007-01-06 00:43:14 -0500 (Sat, 06 Jan 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm
   M /trunk/dnssec-tools/tools/modules/defaults.pm
   M /trunk/dnssec-tools/tools/modules/keyrec.pm
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm


Unified the BIND option keys to drop the "bind_" prefix.  Some work towards
moving away from tight binding to BIND.

------------------------------------------------------------------------
r2718 | lfoster | 2007-01-05 16:10:29 -0500 (Fri, 05 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm

Added defaults for tacontact and tasmtpserver (undefined).

------------------------------------------------------------------------
r2717 | hardaker | 2007-01-05 13:40:37 -0500 (Fri, 05 Jan 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

document how the timing of -forceroll should work
------------------------------------------------------------------------
r2716 | tewok | 2007-01-05 13:13:45 -0500 (Fri, 05 Jan 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added a -sets line to the usage info.
Changed "-set" to "-sets" in the pod.

------------------------------------------------------------------------
r2715 | hardaker | 2007-01-05 12:26:05 -0500 (Fri, 05 Jan 2007) | 1 line
Changed paths:
   M /trunk/dnssec-tools/Makefile.in
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/configure.in

attempt to fix broken shell issues for empty for loops when the validator isn't configured to be compiled in
------------------------------------------------------------------------
r2714 | tewok | 2007-01-05 11:50:27 -0500 (Fri, 05 Jan 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Modified to make "-outfile -" point the output to /dev/tty.
Change the overwrite check to only be for regular files.

------------------------------------------------------------------------
r2713 | tewok | 2007-01-05 10:17:14 -0500 (Fri, 05 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Fixed an option name in the help message.

------------------------------------------------------------------------
r2712 | tewok | 2007-01-04 22:17:54 -0500 (Thu, 04 Jan 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Reworked how the tooloptions.pm calls are dealt with.
Write and re-load a newly created keyrec file.

------------------------------------------------------------------------
r2711 | tewok | 2007-01-04 22:15:58 -0500 (Thu, 04 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/fixkrf


Insist that GetOptions() respects option-case.

------------------------------------------------------------------------
r2710 | tewok | 2007-01-04 22:15:04 -0500 (Thu, 04 Jan 2007) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Changed the tooloptions() call to a opts_cmdopts() call.


------------------------------------------------------------------------
r2709 | tewok | 2007-01-04 22:14:15 -0500 (Thu, 04 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/genkrf


Changed the tooloptions() call to a opts_cmdopts() call.

------------------------------------------------------------------------
r2708 | tewok | 2007-01-04 22:12:46 -0500 (Thu, 04 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm


Renamed the names in @BIND_COMMANDS.

------------------------------------------------------------------------
r2707 | tewok | 2007-01-04 22:11:26 -0500 (Thu, 04 Jan 2007) | 9 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm


Reworked how this module works for greater clarity and ease of understanding:

	- Added a few internal routines that can be called by the interfaces.
	- Rewrote opts_zonekr().
	- Added opts_cmdopts().
	- Deleted tooloptions(), opts_keykr(), and opts_krfile().


------------------------------------------------------------------------
r2706 | lfoster | 2007-01-04 16:45:14 -0500 (Thu, 04 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm

Added documentation for trustman defaults.

------------------------------------------------------------------------
r2705 | hserus | 2007-01-03 12:05:53 -0500 (Wed, 03 Jan 2007) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Add missing tag

------------------------------------------------------------------------
r2704 | tewok | 2007-01-02 12:18:51 -0500 (Tue, 02 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm


*Really* fix the error message.

------------------------------------------------------------------------
r2703 | tewok | 2007-01-02 12:01:31 -0500 (Tue, 02 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm


Fixed an error message.

------------------------------------------------------------------------
r2702 | tewok | 2007-01-02 11:46:29 -0500 (Tue, 02 Jan 2007) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Provided better documentation (pod and code comments) for the -forceroll option.

------------------------------------------------------------------------
r2701 | tewok | 2006-12-21 23:45:42 -0500 (Thu, 21 Dec 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Renamed dnssec_tools_defaults() to dnssec_tools_default().

------------------------------------------------------------------------
r2700 | tewok | 2006-12-21 18:06:23 -0500 (Thu, 21 Dec 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm


Added dnssec_tools_alldefaults().

------------------------------------------------------------------------
r2699 | tewok | 2006-12-21 17:31:15 -0500 (Thu, 21 Dec 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtconfchk
   M /trunk/dnssec-tools/tools/scripts/dtdefs
   M /trunk/dnssec-tools/tools/scripts/dtinitconf
   M /trunk/dnssec-tools/tools/scripts/genkrf
   M /trunk/dnssec-tools/tools/scripts/rollerd


Renamed dnssec_tools_defaults() to dnssec_tools_default().

------------------------------------------------------------------------
r2698 | tewok | 2006-12-21 17:24:39 -0500 (Thu, 21 Dec 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Renamed dnssec_tools_defaults() to dnssec_tools_defaults(). 

------------------------------------------------------------------------
r2697 | tewok | 2006-12-21 17:22:35 -0500 (Thu, 21 Dec 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm


Renamed dnssec_tools_defaults() to dnssec_tools_default().

------------------------------------------------------------------------
r2696 | tewok | 2006-12-21 17:13:52 -0500 (Thu, 21 Dec 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm


Fixed the header description of dnssec_tools_defaults().

------------------------------------------------------------------------
r2695 | lfoster | 2006-12-19 15:00:20 -0500 (Tue, 19 Dec 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

Check for and remove trailing dots on zonenames read in from config files.

------------------------------------------------------------------------
r2694 | lfoster | 2006-12-19 14:57:39 -0500 (Tue, 19 Dec 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/TrustMan.pl

Check for and remove dots on domainnames read in from config files.


------------------------------------------------------------------------
r2693 | lfoster | 2006-12-19 14:52:18 -0500 (Tue, 19 Dec 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/TrustMan.pl

Check for and remove trailing dots on zonenames provided on the command line to
option -d.
Removed two functions no longer in use.

------------------------------------------------------------------------
r2691 | hserus | 2006-12-18 15:03:54 -0500 (Mon, 18 Dec 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

Select only NS records from the NS query (ignore RRSIGs)

------------------------------------------------------------------------
r2690 | tewok | 2006-12-18 14:27:18 -0500 (Mon, 18 Dec 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights
   M /trunk/dnssec-tools/tools/scripts/cleankrf
   M /trunk/dnssec-tools/tools/scripts/dtconfchk
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/genkrf
   M /trunk/dnssec-tools/tools/scripts/krfcheck
   M /trunk/dnssec-tools/tools/scripts/lskrf
   M /trunk/dnssec-tools/tools/scripts/lsroll
   M /trunk/dnssec-tools/tools/scripts/rollchk
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/rollinit
   M /trunk/dnssec-tools/tools/scripts/rolllog
   M /trunk/dnssec-tools/tools/scripts/rollset
   M /trunk/dnssec-tools/tools/scripts/timetrans


Make GetOptions() respect option case.

------------------------------------------------------------------------
r2689 | tewok | 2006-12-16 14:37:07 -0500 (Sat, 16 Dec 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Sort the keys as written to the intermediate zone file.
(This isn't necessary, but can be useful if a human ever looks at the file.)

------------------------------------------------------------------------
r2688 | tewok | 2006-12-16 14:19:00 -0500 (Sat, 16 Dec 2006) | 13 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Allow for multiple KSKs:
	- Added -kskcount.
	- Added -ksignset.
	- Modified internal KSK handling.
	- Deleted the kskpath keyrec value.

Reworked how $INCLUDE lines are added to intermediate zone files.  The new
way is more rational and needs less special-case code.

Revalued the UPD_ variables to be bit fields.
Pluralized the names of $UPD_KSK and $UPD_ZSK.


------------------------------------------------------------------------
r2687 | tewok | 2006-12-14 23:47:49 -0500 (Thu, 14 Dec 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pod


Added -kskcount.

------------------------------------------------------------------------
r2686 | tewok | 2006-12-14 23:46:43 -0500 (Thu, 14 Dec 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm


Added -kskcount.

------------------------------------------------------------------------
r2685 | tewok | 2006-12-14 23:45:59 -0500 (Thu, 14 Dec 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm
   M /trunk/dnssec-tools/tools/modules/keyrec.pod


Added -kskcount.
Deleted -kskpath.

------------------------------------------------------------------------
r2684 | tewok | 2006-12-14 23:44:41 -0500 (Thu, 14 Dec 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm


Added -kskcount.
Deleted -kskpath.

------------------------------------------------------------------------
r2683 | tewok | 2006-12-14 16:12:26 -0500 (Thu, 14 Dec 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Fixed a comment.

------------------------------------------------------------------------
r2682 | tewok | 2006-12-14 11:12:03 -0500 (Thu, 14 Dec 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollchk


Comment formatting.

------------------------------------------------------------------------
r2681 | tewok | 2006-12-13 23:44:01 -0500 (Wed, 13 Dec 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/README


Added info about dnssectools.pm.

------------------------------------------------------------------------
r2680 | tewok | 2006-12-13 23:42:44 -0500 (Wed, 13 Dec 2006) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/modules/dnssectools.pm


Added a new catch-all module for DNSSEC-Tools library routines.

------------------------------------------------------------------------
r2679 | tewok | 2006-12-13 18:17:13 -0500 (Wed, 13 Dec 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pod


Added an entry for admin-email.

------------------------------------------------------------------------
r2678 | tewok | 2006-12-13 11:08:23 -0500 (Wed, 13 Dec 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollset


Added the -loglevel option to support zone-specific logging-levels.


------------------------------------------------------------------------
r2677 | tewok | 2006-12-12 23:36:53 -0500 (Tue, 12 Dec 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights
   M /trunk/dnssec-tools/tools/scripts/signset-editor


Reformatted some data lines.

------------------------------------------------------------------------
r2676 | tewok | 2006-12-12 23:28:06 -0500 (Tue, 12 Dec 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Added support for the zonelog command.
Fixed some pod formatting.


------------------------------------------------------------------------
r2675 | tewok | 2006-12-12 23:26:47 -0500 (Tue, 12 Dec 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Added support for the zonelog command.

------------------------------------------------------------------------
r2674 | tewok | 2006-12-12 23:24:27 -0500 (Tue, 12 Dec 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Added the ROLLCMD_ZONELOG command.

------------------------------------------------------------------------
r2673 | tewok | 2006-12-12 13:39:53 -0500 (Tue, 12 Dec 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Added support for rollrec record-specific logging levels.


------------------------------------------------------------------------
r2672 | tewok | 2006-12-12 13:38:47 -0500 (Tue, 12 Dec 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm


Reworked a header comment.

------------------------------------------------------------------------
r2671 | tewok | 2006-12-12 13:38:00 -0500 (Tue, 12 Dec 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Set up proper flushing for keyrec_write().

------------------------------------------------------------------------
r2670 | tewok | 2006-12-12 13:37:18 -0500 (Tue, 12 Dec 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm


Added a loglevel field to rollrecs.

------------------------------------------------------------------------
r2669 | tewok | 2006-12-12 13:34:16 -0500 (Tue, 12 Dec 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Added rollmgr_lognum().


------------------------------------------------------------------------
r2668 | tewok | 2006-12-12 11:20:39 -0500 (Tue, 12 Dec 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pod


Added descriptions for roll_logfile, roll_loglevel, and roll_sleeptime.


------------------------------------------------------------------------
r2667 | hserus | 2006-12-11 14:02:35 -0500 (Mon, 11 Dec 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Use the first policy in the conf file as the default if none is specified.

------------------------------------------------------------------------
r2666 | marz | 2006-12-11 12:12:01 -0500 (Mon, 11 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/MANIFEST
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm

fix MANIFEST
------------------------------------------------------------------------
r2665 | marz | 2006-12-08 16:24:17 -0500 (Fri, 08 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/README
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm

doc fixes
------------------------------------------------------------------------
r2664 | rstory | 2006-12-08 09:48:32 -0500 (Fri, 08 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

fix byteorder for ascii ports
------------------------------------------------------------------------
r2663 | tewok | 2006-12-07 21:17:39 -0500 (Thu, 07 Dec 2006) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Made key archiving the default action.
Added the -nosave option to prevent archiving of keys.
Only do some -archivedir and savekey checks if -forceroll was given.

Change archived key name format from "file.timestamp" to "timestamp.file."

------------------------------------------------------------------------
r2662 | hserus | 2006-12-07 13:07:54 -0500 (Thu, 07 Dec 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

Set the MERGE flag when composing an answer

------------------------------------------------------------------------
r2661 | hserus | 2006-12-07 11:24:13 -0500 (Thu, 07 Dec 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.c

Initialize rrs.val_rrset_server to NULL

------------------------------------------------------------------------
r2660 | hserus | 2006-12-07 11:23:45 -0500 (Thu, 07 Dec 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Display message when zone cut cannot be identified
Avoid possible null pointer exception when query for SOA returns no data
Ensure that proper status is maintained in the authentication chain when proofs of non-existence are
returned from the wrong side of the zone cut

------------------------------------------------------------------------
r2659 | marz | 2006-12-06 13:57:41 -0500 (Wed, 06 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm

version update
------------------------------------------------------------------------
r2658 | marz | 2006-12-06 13:57:13 -0500 (Wed, 06 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm

version update
------------------------------------------------------------------------
r2657 | marz | 2006-12-06 13:50:31 -0500 (Wed, 06 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm

minor fix handling scalar context result of getaddrinfo()
------------------------------------------------------------------------
r2656 | marz | 2006-12-06 12:10:33 -0500 (Wed, 06 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/t/basic.t

add test
------------------------------------------------------------------------
r2655 | tewok | 2006-12-05 17:36:45 -0500 (Tue, 05 Dec 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/INFO
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL
   M /trunk/dnssec-tools/tools/scripts/README
   A /trunk/dnssec-tools/tools/scripts/rollset


Added the rollset command.

------------------------------------------------------------------------
r2654 | tewok | 2006-12-05 17:34:04 -0500 (Tue, 05 Dec 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm


*Really* fix the pattern in rollrec_setval().

------------------------------------------------------------------------
r2653 | tewok | 2006-12-05 16:36:26 -0500 (Tue, 05 Dec 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm


Fixed a bug in a pattern in rollrec_setval() which caused skip rollrecs to be
missed.

------------------------------------------------------------------------
r2652 | rstory | 2006-12-05 15:56:13 -0500 (Tue, 05 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/Makefile.in

add targets for help, test and leakchecks (requires valgrind)
------------------------------------------------------------------------
r2651 | hserus | 2006-12-05 15:22:09 -0500 (Tue, 05 Dec 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_cache.c
   M /trunk/dnssec-tools/validator/libval/val_crypto.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_support.c
   M /trunk/dnssec-tools/validator/libval/val_verify.c

Fix memory leaks

------------------------------------------------------------------------
r2650 | tewok | 2006-12-05 04:47:22 -0500 (Tue, 05 Dec 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Document -archivedir.
Modify -forceroll so that saved obsolete ZSKs have a timestamp appended to
the filename.

------------------------------------------------------------------------
r2647 | tewok | 2006-12-05 03:58:32 -0500 (Tue, 05 Dec 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Document the -savekeys option.

------------------------------------------------------------------------
r2646 | hardaker | 2006-12-05 01:03:59 -0500 (Tue, 05 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/ChangeLog

final 1.0 changelog update
------------------------------------------------------------------------
r2645 | hardaker | 2006-12-05 01:01:04 -0500 (Tue, 05 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/dist/dnssec-tools.spec

update for 1.0
------------------------------------------------------------------------
r2644 | hardaker | 2006-12-05 00:53:52 -0500 (Tue, 05 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/signset-editor

use bootstrap to load package-optional tk modules; fix use strict issue
------------------------------------------------------------------------
r2643 | hardaker | 2006-12-05 00:48:10 -0500 (Tue, 05 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights

use bootstrap to load package-optional tk modules; fix use strict issue
------------------------------------------------------------------------
r2642 | hardaker | 2006-12-05 00:32:12 -0500 (Tue, 05 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL

added trustman
------------------------------------------------------------------------
r2641 | hardaker | 2006-12-04 23:52:53 -0500 (Mon, 04 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/dist/dnssec-tools.spec

updated for 1.0
------------------------------------------------------------------------
r2640 | hardaker | 2006-12-04 23:51:44 -0500 (Mon, 04 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm

accidentially committed a hard-coded-path patch that was meant for linux only
------------------------------------------------------------------------
r2636 | tewok | 2006-12-04 21:37:04 -0500 (Mon, 04 Dec 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Added some code to save state when rollctl commands initiate a state change.

------------------------------------------------------------------------
r2635 | tewok | 2006-12-04 21:10:41 -0500 (Mon, 04 Dec 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Fixed a couple messages.

------------------------------------------------------------------------
r2634 | hardaker | 2006-12-04 20:03:11 -0500 (Mon, 04 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/ChangeLog
   M /trunk/dnssec-tools/INSTALL
   M /trunk/dnssec-tools/NEWS
   M /trunk/dnssec-tools/README
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/configure.in

A number of changes to fix text for upcoming 1.0 release
------------------------------------------------------------------------
r2633 | hardaker | 2006-12-04 20:02:27 -0500 (Mon, 04 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

use the bootstrap module to load Text::Wrap
------------------------------------------------------------------------
r2632 | hserus | 2006-12-04 17:34:35 -0500 (Mon, 04 Dec 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Fix bug in duplicate policy detection logic

------------------------------------------------------------------------
r2631 | hserus | 2006-12-04 16:17:03 -0500 (Mon, 04 Dec 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t

Use futuredate-ds in place of futuredate-ns
Use pastdate-ds in place of pastdate-ns


------------------------------------------------------------------------
r2630 | hserus | 2006-12-04 15:31:32 -0500 (Mon, 04 Dec 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

Update expected result values for test cases

------------------------------------------------------------------------
r2629 | hardaker | 2006-12-04 14:55:01 -0500 (Mon, 04 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

change future/pastdate name records
------------------------------------------------------------------------
r2628 | hardaker | 2006-12-04 14:47:05 -0500 (Mon, 04 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

fixed a few bugs relating to future/past date issues
------------------------------------------------------------------------
r2627 | hardaker | 2006-12-04 13:09:58 -0500 (Mon, 04 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL

TrustMan -> TrustMan.pl
------------------------------------------------------------------------
r2626 | hserus | 2006-12-04 10:13:22 -0500 (Mon, 04 Dec 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs

Use validator.h in place of validator-config.h

------------------------------------------------------------------------
r2625 | marz | 2006-12-04 10:11:11 -0500 (Mon, 04 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/t/basic.t

remove unpredicatabke test
------------------------------------------------------------------------
r2624 | marz | 2006-12-04 10:01:35 -0500 (Mon, 04 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Makefile.PL

remove non-portable test for dnssec-tool install
------------------------------------------------------------------------
r2623 | tewok | 2006-12-02 17:31:05 -0500 (Sat, 02 Dec 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Reworked existence check for zone file.

------------------------------------------------------------------------
r2622 | tewok | 2006-12-02 16:53:34 -0500 (Sat, 02 Dec 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Fixed a bug wherein the published keys were being used to sign the zone
instead of the current keys.

------------------------------------------------------------------------
r2621 | marz | 2006-12-02 10:15:22 -0500 (Sat, 02 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t

test changesrelated to res_query() fix
------------------------------------------------------------------------
r2620 | marz | 2006-12-02 10:11:59 -0500 (Sat, 02 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

fix crash with VAL_QUERY_MERGE_RRSETS
------------------------------------------------------------------------
r2619 | hardaker | 2006-12-01 19:30:33 -0500 (Fri, 01 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/BootStrap.pm
   M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm
   M /trunk/dnssec-tools/tools/modules/conf.pm
   M /trunk/dnssec-tools/tools/modules/defaults.pm
   M /trunk/dnssec-tools/tools/modules/keyrec.pm
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm
   M /trunk/dnssec-tools/tools/modules/rollrec.pm
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

version updates
------------------------------------------------------------------------
r2618 | hserus | 2006-12-01 18:23:28 -0500 (Fri, 01 Dec 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/NEWS

Mention some of the new features that were added during this release

------------------------------------------------------------------------
r2617 | lfoster | 2006-12-01 17:52:14 -0500 (Fri, 01 Dec 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman


Added version.

------------------------------------------------------------------------
r2616 | lfoster | 2006-12-01 17:49:20 -0500 (Fri, 01 Dec 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/TrustMan.pl


Added version.

------------------------------------------------------------------------
r2614 | hardaker | 2006-12-01 17:17:17 -0500 (Fri, 01 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm

version update
------------------------------------------------------------------------
r2613 | hardaker | 2006-12-01 17:16:50 -0500 (Fri, 01 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

version update
------------------------------------------------------------------------
r2612 | hardaker | 2006-12-01 17:16:06 -0500 (Fri, 01 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

version update
------------------------------------------------------------------------
r2611 | hardaker | 2006-12-01 17:13:45 -0500 (Fri, 01 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow

vresion update
------------------------------------------------------------------------
r2610 | hserus | 2006-12-01 17:13:22 -0500 (Fri, 01 Dec 2006) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/tools/scripts/TrustMan
   A /trunk/dnssec-tools/tools/scripts/TrustMan.pl

renamed TrustMan to TrustMan.pl

------------------------------------------------------------------------
r2609 | hardaker | 2006-12-01 17:12:31 -0500 (Fri, 01 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/mapper

version update
------------------------------------------------------------------------
r2608 | hardaker | 2006-12-01 17:11:24 -0500 (Fri, 01 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/getdnskeys
   M /trunk/dnssec-tools/tools/scripts/tachk

move to DT versions 1.0
------------------------------------------------------------------------
r2602 | rstory | 2006-12-01 16:22:34 -0500 (Fri, 01 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_cache.c
   M /trunk/dnssec-tools/validator/libval/val_cache.h
   M /trunk/dnssec-tools/validator/libval/val_context.c
   M /trunk/dnssec-tools/validator/libval/val_crypto.c
   M /trunk/dnssec-tools/validator/libval/val_crypto.h
   M /trunk/dnssec-tools/validator/libval/val_errors.h
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/validator/libval/val_log.c
   M /trunk/dnssec-tools/validator/libval/val_parse.c
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_policy.h
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.h
   M /trunk/dnssec-tools/validator/libval/val_support.c
   M /trunk/dnssec-tools/validator/libval/val_support.h
   M /trunk/dnssec-tools/validator/libval/val_verify.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c
   M /trunk/dnssec-tools/validator/libval/validator.h

pre-release indent
------------------------------------------------------------------------
r2601 | rstory | 2006-12-01 16:15:59 -0500 (Fri, 01 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/ns_samedomain.c
   M /trunk/dnssec-tools/validator/libsres/nsap_addr.h
   M /trunk/dnssec-tools/validator/libsres/res_debug.c
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.c
   M /trunk/dnssec-tools/validator/libsres/res_query.c
   M /trunk/dnssec-tools/validator/libsres/res_support.c
   M /trunk/dnssec-tools/validator/libsres/resolver.h

pre-release indent
------------------------------------------------------------------------
r2598 | marz | 2006-12-01 15:58:12 -0500 (Fri, 01 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t

take out debugging
------------------------------------------------------------------------
r2597 | marz | 2006-12-01 15:57:17 -0500 (Fri, 01 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t

doc fixes
------------------------------------------------------------------------
r2595 | marz | 2006-12-01 15:18:10 -0500 (Fri, 01 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/README
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t

doc fixes
------------------------------------------------------------------------
r2594 | marz | 2006-12-01 15:13:28 -0500 (Fri, 01 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm

doc fix
------------------------------------------------------------------------
r2586 | lfoster | 2006-12-01 13:39:23 -0500 (Fri, 01 Dec 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

added -h or --help to provoke usage message.


------------------------------------------------------------------------
r2585 | hserus | 2006-12-01 12:44:52 -0500 (Fri, 01 Dec 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Ensure that correct zonecut information information is stored for the nameserver that we obtained in
get_nslist_from_cache()
Dont assume that referrals seen with a CNAME response relate to the alias. They may be returned when the
parent does recursion for example.

------------------------------------------------------------------------
r2584 | marz | 2006-12-01 12:30:37 -0500 (Fri, 01 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/README
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.xs
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/const-xs.inc
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/t/basic.t

Net::addrinfo docs and some small fixes
------------------------------------------------------------------------
r2582 | marz | 2006-12-01 10:12:17 -0500 (Fri, 01 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm

bug fix to stringify()
------------------------------------------------------------------------
r2581 | marz | 2006-12-01 10:11:50 -0500 (Fri, 01 Dec 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t

bug fixes and added tests
------------------------------------------------------------------------
r2577 | hserus | 2006-11-30 16:14:49 -0500 (Thu, 30 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/Makefile.in
   M /trunk/dnssec-tools/validator/doc/README
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod

Remove references to no longer defined functions

------------------------------------------------------------------------
r2571 | marz | 2006-11-30 13:52:11 -0500 (Thu, 30 Nov 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t

handle INET6 gethost
------------------------------------------------------------------------
r2570 | marz | 2006-11-30 13:51:53 -0500 (Thu, 30 Nov 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t

handle INET6 gethost
------------------------------------------------------------------------
r2569 | marz | 2006-11-30 13:33:41 -0500 (Thu, 30 Nov 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs
   M /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t

bug fixes for return types and error codes
------------------------------------------------------------------------
r2568 | marz | 2006-11-30 12:58:07 -0500 (Thu, 30 Nov 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c

 some error code fixes...pending discussion
------------------------------------------------------------------------
r2567 | hserus | 2006-11-30 02:16:04 -0500 (Thu, 30 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Try and settle on wording for policy scopes and labels

------------------------------------------------------------------------
r2566 | hserus | 2006-11-30 02:04:40 -0500 (Thu, 30 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

More tweaking to the policy hierarchy construction logic

------------------------------------------------------------------------
r2565 | hserus | 2006-11-30 00:49:28 -0500 (Thu, 30 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/etc/dnsval.conf

: characters are only allowed for the default policy label.

------------------------------------------------------------------------
r2564 | hserus | 2006-11-30 00:44:23 -0500 (Thu, 30 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_context.c
   M /trunk/dnssec-tools/validator/libval/val_context.h
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_policy.h
   M /trunk/dnssec-tools/validator/libval/validator.h

Change policy related APIs to make them look similar to -03. We no longer have val_switch_policy_scope(),etc 

------------------------------------------------------------------------
r2563 | hserus | 2006-11-30 00:41:14 -0500 (Thu, 30 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Change some of the semantics for the default policy. Its no longer always used implicitly.

------------------------------------------------------------------------
r2562 | lfoster | 2006-11-29 18:30:35 -0500 (Wed, 29 Nov 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

Recognizes new keys, sets the add holddown time, and alerts
the user when a new key has surpassed it's add holddown time
and can be manually added.


------------------------------------------------------------------------
r2561 | hserus | 2006-11-29 17:06:29 -0500 (Wed, 29 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Check for the case where an incorrect NS was returned as part of a positive response for a DS. This affects the zonecut detection
logic. 

------------------------------------------------------------------------
r2560 | hserus | 2006-11-29 17:05:20 -0500 (Wed, 29 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Changed a log message

------------------------------------------------------------------------
r2559 | hserus | 2006-11-29 16:19:49 -0500 (Wed, 29 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

Make sure response is properly initialized to NULL.

------------------------------------------------------------------------
r2558 | hserus | 2006-11-29 16:11:47 -0500 (Wed, 29 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_support.c

Check for data before printing response data

------------------------------------------------------------------------
r2557 | hserus | 2006-11-29 15:47:47 -0500 (Wed, 29 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

Remove unnecessary comment

------------------------------------------------------------------------
r2556 | hserus | 2006-11-29 15:47:34 -0500 (Wed, 29 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_crypto.c
   M /trunk/dnssec-tools/validator/libval/val_crypto.h

Passing params by reference to address xxx-audit comments in a different file

------------------------------------------------------------------------
r2555 | hserus | 2006-11-29 15:47:14 -0500 (Wed, 29 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Address xxx-audit comments
make sure that correct zonecut information is saved when parent zone recursively obtains answers for the 
child zone (or the same ns is authoritative for the parent and the child)

------------------------------------------------------------------------
r2554 | hserus | 2006-11-29 15:46:53 -0500 (Wed, 29 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.c

remove xxx-audit comment since the issue of initializing rr_status was already addressed

------------------------------------------------------------------------
r2553 | hserus | 2006-11-29 15:46:36 -0500 (Wed, 29 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_parse.c

Address xxx-audit comments

------------------------------------------------------------------------
r2552 | hserus | 2006-11-29 15:46:18 -0500 (Wed, 29 Nov 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Address xxx-audit comments
In the check for provably insecure condition test for VAL_NONEXISTENT_TYPE_NOCHAIN
Save some information from the test for provably unsecure in the authentication chain
VAL_PROVABLY_UNSECURE is not an is_validated() status

------------------------------------------------------------------------
r2551 | hserus | 2006-11-29 15:45:46 -0500 (Wed, 29 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.c

Address xxx-audit comments

------------------------------------------------------------------------
r2550 | hserus | 2006-11-29 15:45:21 -0500 (Wed, 29 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

VAL_PROVABLY_UNSECURE is not an is_validated() status

------------------------------------------------------------------------
r2549 | hserus | 2006-11-29 15:44:53 -0500 (Wed, 29 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/Makefile.in

Display a message that we are not installing the resolv.conf and dnsval.conf in standard locations.

------------------------------------------------------------------------
r2548 | tewok | 2006-11-29 12:28:53 -0500 (Wed, 29 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Added another known problem.

------------------------------------------------------------------------
r2543 | marz | 2006-11-29 11:21:08 -0500 (Wed, 29 Nov 2006) | 1 line
Changed paths:
   A /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator
   A /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/MANIFEST
   A /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/MANIFEST.SKIP
   A /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Makefile.PL
   A /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/README
   A /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.pm
   A /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/Validator.xs
   A /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-c.inc
   A /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/const-xs.inc
   A /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t
   A /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/t/basic.t
   A /trunk/dnssec-tools/tools/modules/Net-DNS-SEC-Validator/typemap
   A /trunk/dnssec-tools/tools/modules/Net-addrinfo
   A /trunk/dnssec-tools/tools/modules/Net-addrinfo/MANIFEST
   A /trunk/dnssec-tools/tools/modules/Net-addrinfo/MANIFEST.SKIP
   A /trunk/dnssec-tools/tools/modules/Net-addrinfo/Makefile.PL
   A /trunk/dnssec-tools/tools/modules/Net-addrinfo/README
   A /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.pm
   A /trunk/dnssec-tools/tools/modules/Net-addrinfo/addrinfo.xs
   A /trunk/dnssec-tools/tools/modules/Net-addrinfo/const-c.inc
   A /trunk/dnssec-tools/tools/modules/Net-addrinfo/const-xs.inc
   A /trunk/dnssec-tools/tools/modules/Net-addrinfo/t
   A /trunk/dnssec-tools/tools/modules/Net-addrinfo/t/basic.t
   A /trunk/dnssec-tools/tools/modules/Net-addrinfo/typemap

alpha quality perl libval support - more coming
------------------------------------------------------------------------
r2542 | tewok | 2006-11-29 11:11:30 -0500 (Wed, 29 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Fixes, from WesH's comments.

------------------------------------------------------------------------
r2540 | tewok | 2006-11-29 10:40:54 -0500 (Wed, 29 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm


Stop rollrec_add() and rollrec_del() from always writing the rollrec file.

------------------------------------------------------------------------
r2538 | tewok | 2006-11-29 09:55:25 -0500 (Wed, 29 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Updated version numbers.

------------------------------------------------------------------------
r2537 | tewok | 2006-11-29 09:43:23 -0500 (Wed, 29 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights
   M /trunk/dnssec-tools/tools/scripts/cleankrf
   M /trunk/dnssec-tools/tools/scripts/dtconfchk
   M /trunk/dnssec-tools/tools/scripts/dtdefs
   M /trunk/dnssec-tools/tools/scripts/dtinitconf
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/fixkrf
   M /trunk/dnssec-tools/tools/scripts/genkrf
   M /trunk/dnssec-tools/tools/scripts/krfcheck
   M /trunk/dnssec-tools/tools/scripts/lskrf
   M /trunk/dnssec-tools/tools/scripts/lsroll
   M /trunk/dnssec-tools/tools/scripts/rollchk
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollinit
   M /trunk/dnssec-tools/tools/scripts/signset-editor
   M /trunk/dnssec-tools/tools/scripts/timetrans
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Updated version numbers.

------------------------------------------------------------------------
r2534 | rstory | 2006-11-28 17:59:53 -0500 (Tue, 28 Nov 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/ns_parse.c

use EINVAL ifndef ENODATA
------------------------------------------------------------------------
r2533 | lfoster | 2006-11-28 17:13:52 -0500 (Tue, 28 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman


Turn off debugging in Net::DNS::Resolver calls.


------------------------------------------------------------------------
r2531 | rstory | 2006-11-28 15:15:22 -0500 (Tue, 28 Nov 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in

add target test, so we can define _REENTRANT on solaris
------------------------------------------------------------------------
r2530 | rstory | 2006-11-28 15:13:53 -0500 (Tue, 28 Nov 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

fix compiler const whining
------------------------------------------------------------------------
r2529 | lfoster | 2006-11-28 14:37:05 -0500 (Tue, 28 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

Fixed bug which caused zones containing multiple keys to be
queried multiple times.
Removed some code no longer used.

------------------------------------------------------------------------
r2528 | tewok | 2006-11-28 13:57:15 -0500 (Tue, 28 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Added the gends field as a persistent zone keyrec field.

------------------------------------------------------------------------
r2511 | tewok | 2006-11-27 15:07:25 -0500 (Mon, 27 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod


A few formatting changes and added a missing squiggly.

------------------------------------------------------------------------
r2507 | hserus | 2006-11-27 13:08:10 -0500 (Mon, 27 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

Use a default "hints" value if one is not supplied.

------------------------------------------------------------------------
r2505 | tewok | 2006-11-27 12:41:00 -0500 (Mon, 27 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/dnsval.conf.3
   M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod


Added a terminal serial comma.
Formatting fix I missed before.

------------------------------------------------------------------------
r2504 | tewok | 2006-11-27 12:26:21 -0500 (Mon, 27 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added a flag set so that the -cur, -new, and -pub options would work.

------------------------------------------------------------------------
r2503 | marz | 2006-11-27 08:18:06 -0500 (Mon, 27 Nov 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.h

declare global after struct
------------------------------------------------------------------------
r2502 | hserus | 2006-11-26 15:08:47 -0500 (Sun, 26 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Add description for val_isvalidated(), VAL_NONEXISTENT_NAME_NOCHAIN and VAL_NONEXISTENT_TYPE_NOCHAIN

------------------------------------------------------------------------
r2501 | hserus | 2006-11-26 14:46:10 -0500 (Sun, 26 Nov 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Modify transform_outstanding_results() so that error value for the proof can be passed as a parameter
While checking non-existence span, make sure that the bound is not closed.
Use the combination of val_istrusted and val_isvalidated to identify if the answer is locally trusted.
Set non-existence type of VAL_NONEXISTENT_NAME_NOCHAIN and VAL_NONEXISTENT_TYPE_NOCHAIN if the proof is 
locally trusted.

------------------------------------------------------------------------
r2500 | hserus | 2006-11-26 14:45:55 -0500 (Sun, 26 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_errors.h

Define types for VAL_NONEXISTENT_NAME_NOCHAIN and VAL_NONEXISTENT_TYPE_NOCHAIN

------------------------------------------------------------------------
r2499 | hserus | 2006-11-26 14:45:36 -0500 (Sun, 26 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

Handle case for VAL_NONEXISTENT_NAME_NOCHAIN and VAL_NONEXISTENT_TYPE_NOCHAIN

------------------------------------------------------------------------
r2498 | hserus | 2006-11-26 11:21:49 -0500 (Sun, 26 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.h

Fix indentation

------------------------------------------------------------------------
r2497 | hserus | 2006-11-25 21:00:44 -0500 (Sat, 25 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.h

Print a log message when we detect a duplicate policy definition

------------------------------------------------------------------------
r2496 | hserus | 2006-11-25 20:59:23 -0500 (Sat, 25 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Fix in detection of policy match logic

------------------------------------------------------------------------
r2495 | hserus | 2006-11-25 16:50:53 -0500 (Sat, 25 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.c

Make it possible to verify the chain of trust even if there is a keytag collision

------------------------------------------------------------------------
r2494 | hserus | 2006-11-25 16:50:00 -0500 (Sat, 25 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Add header for validator.h

------------------------------------------------------------------------
r2491 | tewok | 2006-11-25 15:36:45 -0500 (Sat, 25 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Fixed KSK usage when it isn't explicitly generated.

------------------------------------------------------------------------
r2488 | rstory | 2006-11-25 14:15:16 -0500 (Sat, 25 Nov 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_assertion.h
   M /trunk/dnssec-tools/validator/libval/validator.h

add val_isvalidated(val_status)
------------------------------------------------------------------------
r2474 | tewok | 2006-11-24 16:22:15 -0500 (Fri, 24 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pod


Set to use a better log filename for rollerd.

------------------------------------------------------------------------
r2473 | tewok | 2006-11-24 16:20:35 -0500 (Fri, 24 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Fixed the usage message.
Reordered a bit of code so that -parameters would work.

------------------------------------------------------------------------
r2472 | lfoster | 2006-11-24 15:07:36 -0500 (Fri, 24 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

now working: notifies by email when a new key has been
detected, and has passed it's add holddown time. 


------------------------------------------------------------------------
r2471 | lfoster | 2006-11-24 12:50:27 -0500 (Fri, 24 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/trustman

started new key storage until holddown time reached.


------------------------------------------------------------------------
r2470 | hserus | 2006-11-23 22:16:34 -0500 (Thu, 23 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Formatting changes

------------------------------------------------------------------------
r2469 | hserus | 2006-11-23 21:19:29 -0500 (Thu, 23 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Add some text on zone-security-expectation

------------------------------------------------------------------------
r2468 | hserus | 2006-11-23 20:10:58 -0500 (Thu, 23 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/validator.h

Rename VAL_R_TRUST_FLAG and VAL_R_MASKED_TRUST_FLAG to VAL_FLAG_CHAIN_COMPLETE and
VAL_MASKED_FLAG_CHAIN_COMPLETE.
Rename SET_RESULT_TRUSTED macro to SET_CHAIN_COMPLETE

------------------------------------------------------------------------
r2467 | hserus | 2006-11-23 20:10:32 -0500 (Thu, 23 Nov 2006) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_errors.h

Do away with VAL_R_ status codes
Rename VAL_R_TRUST_FLAG and VAL_R_MASKED_TRUST_FLAG to VAL_FLAG_CHAIN_COMPLETE and
VAL_MASKED_FLAG_CHAIN_COMPLETE.
Rename SET_RESULT_TRUSTED macro to SET_CHAIN_COMPLETE
Define VAL_AC_DONT_GO_FURTHER status to represent status codes where we need not go
further up the chain of
trust

------------------------------------------------------------------------
r2466 | hserus | 2006-11-23 20:10:20 -0500 (Thu, 23 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

Do away with VAL_R_ status codes
Add case for VAL_UNTRUSTED_ZONE in p_val_status()

------------------------------------------------------------------------
r2465 | hserus | 2006-11-23 20:10:00 -0500 (Thu, 23 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Register only aliases in the qname chain

------------------------------------------------------------------------
r2464 | hserus | 2006-11-23 20:09:39 -0500 (Thu, 23 Nov 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Do away with VAL_R_ status codes
build a pending query and validate authentication chain only If initial status is less
than VAL_AC_DONT_GO_FURTHER
Reorganize code for indentifying validation status values
Fix DNAME alias construction logic

------------------------------------------------------------------------
r2463 | hserus | 2006-11-23 20:09:05 -0500 (Thu, 23 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

Use val_istrusted() instead of individual success error codes

------------------------------------------------------------------------
r2462 | hserus | 2006-11-23 20:08:29 -0500 (Thu, 23 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/dnsval.conf.3
   M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod

Add description for the trusted zone-security-expection condition

------------------------------------------------------------------------
r2461 | hserus | 2006-11-23 20:07:46 -0500 (Thu, 23 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Add description for VAL_UNTRUSTED_ZONE status

------------------------------------------------------------------------
r2460 | hserus | 2006-11-23 20:07:05 -0500 (Thu, 23 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

Do away with the VAL_R_ status codes

------------------------------------------------------------------------
r2459 | hserus | 2006-11-22 19:12:37 -0500 (Wed, 22 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Set the NONEXISTENT status only if we know that the answer is complete

------------------------------------------------------------------------
r2458 | hserus | 2006-11-22 18:52:46 -0500 (Wed, 22 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_errors.h
   M /trunk/dnssec-tools/validator/libval/val_log.c
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_policy.h
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

Add logic for VAL_AC_TRUSTED_ZONE and VAL_TRUSTED_ZONE along the lines of VAL_AC_IGNORE_VALIDATION and VAL_IGNORE_VALIDATION

------------------------------------------------------------------------
r2457 | hserus | 2006-11-22 18:50:44 -0500 (Wed, 22 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Add descriptions for VAL_TRUSTED_ZONE and VAL_AC_TRUSTED_ZONE

------------------------------------------------------------------------
r2453 | hserus | 2006-11-22 18:05:47 -0500 (Wed, 22 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Recognize VAL_NONEXISTENT_NAME_OPTOUT as a variant of VAL_NONEXISTENT_NAME
Instead of looking for specific status codes that indicate that the proof was locally trusted, use the
val_istrusted() function.

------------------------------------------------------------------------
r2452 | hserus | 2006-11-22 18:02:39 -0500 (Wed, 22 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

Recognize VAL_NONEXISTENT_NAME_OPTOUT as a variant of VAL_NONEXISTENT_NAME

------------------------------------------------------------------------
r2451 | hserus | 2006-11-22 17:53:55 -0500 (Wed, 22 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod

State that the NONEXISTENT error codes are returned when the proofs are trustworthy, and even if they have not been validated specifically.

------------------------------------------------------------------------
r2450 | hserus | 2006-11-22 17:38:34 -0500 (Wed, 22 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Remove statements that can be interpreted as an implicit policy directive.

------------------------------------------------------------------------
r2449 | hserus | 2006-11-22 16:15:30 -0500 (Wed, 22 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Properly detect span checks in proofs of non-existence even when wildcard proof appears before it.

------------------------------------------------------------------------
r2448 | rstory | 2006-11-22 15:44:15 -0500 (Wed, 22 Nov 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval.pod

whitespace changes to make columns line up properly
------------------------------------------------------------------------
r2447 | hardaker | 2006-11-22 15:34:08 -0500 (Wed, 22 Nov 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

include extra cname prefixes in docs
------------------------------------------------------------------------
r2446 | hardaker | 2006-11-22 15:20:23 -0500 (Wed, 22 Nov 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

added a new test case where the cname points to a truly spoofed record covered by an nsec; renamed the existing bogus (but signed) entry to 'other'
------------------------------------------------------------------------
r2445 | hserus | 2006-11-22 15:13:51 -0500 (Wed, 22 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

Change expected status value for cname/AAAA test cases. The alias pointed to by the cname must validate successfully.

------------------------------------------------------------------------
r2441 | hardaker | 2006-11-22 13:38:19 -0500 (Wed, 22 Nov 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

remove a debugging statement
------------------------------------------------------------------------
r2440 | hardaker | 2006-11-22 13:35:21 -0500 (Wed, 22 Nov 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

fix the cname records to AAAA records; add more documentation and include the options as well as a getting started section
------------------------------------------------------------------------
r2438 | hserus | 2006-11-22 12:58:32 -0500 (Wed, 22 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Correct some inconsistencies.

------------------------------------------------------------------------
r2437 | hserus | 2006-11-22 12:41:26 -0500 (Wed, 22 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_errors.h
   M /trunk/dnssec-tools/validator/libval/val_log.c

Don't use the VAL_AC_DONT_VALIDATE state. We had already defined the VAL_AC_IGNORE_VALIDATION state;
continue to use this.

------------------------------------------------------------------------
r2434 | hserus | 2006-11-22 10:18:29 -0500 (Wed, 22 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/Makefile.in

Remove full path in the .so statements for manfiles

------------------------------------------------------------------------
r2431 | tewok | 2006-11-21 18:33:29 -0500 (Tue, 21 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtconfchk


Clarified -expert option, from rstory's review.

------------------------------------------------------------------------
r2429 | tewok | 2006-11-21 18:22:32 -0500 (Tue, 21 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Clarification from rstory's review.

------------------------------------------------------------------------
r2428 | baerm | 2006-11-21 18:18:47 -0500 (Tue, 21 Nov 2006) | 11 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/validator.h


Added val_getnameinfo, val_gethostbyaddr_r, val_gethostbyaddr procedures
to val_getaddrinfo.c.

Working in local tests and should be good to use.

Still to do: only doing validation, should add /etc/hosts check;
should be in separate .c files.



------------------------------------------------------------------------
r2423 | hserus | 2006-11-21 15:27:16 -0500 (Tue, 21 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_support.c
   M /trunk/dnssec-tools/validator/libval/validator.h

Add basic support for DNAME

------------------------------------------------------------------------
r2422 | hserus | 2006-11-21 15:26:38 -0500 (Tue, 21 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Add basic support for DNAME
Keep ordering of results same as the ordering of rrsets in the response

------------------------------------------------------------------------
r2420 | tewok | 2006-11-21 13:44:00 -0500 (Tue, 21 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/TrustMan


Reworded a few sentences.
Minor formatting changes.

------------------------------------------------------------------------
r2419 | tewok | 2006-11-21 13:34:31 -0500 (Tue, 21 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/TrustMan


Added standard formatting.

------------------------------------------------------------------------
r2418 | tewok | 2006-11-21 13:26:44 -0500 (Tue, 21 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/TrustMan


Added the critical "=pod" directive.

------------------------------------------------------------------------
r2417 | tewok | 2006-11-21 12:35:14 -0500 (Tue, 21 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights
   M /trunk/dnssec-tools/tools/scripts/genkrf
   M /trunk/dnssec-tools/tools/scripts/rollerd


Minor formatting modifications.

------------------------------------------------------------------------
r2416 | tewok | 2006-11-21 12:22:51 -0500 (Tue, 21 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts


Added a few refs.

------------------------------------------------------------------------
r2415 | tewok | 2006-11-21 12:20:21 -0500 (Tue, 21 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow


Added a few refs.

------------------------------------------------------------------------
r2414 | tewok | 2006-11-21 12:16:52 -0500 (Tue, 21 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/timetrans.pm


Formatting changes for examples.

------------------------------------------------------------------------
r2413 | tewok | 2006-11-21 11:55:56 -0500 (Tue, 21 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtconfchk
   M /trunk/dnssec-tools/tools/scripts/rollerd


Minor wording changes for SUM.

------------------------------------------------------------------------
r2412 | tewok | 2006-11-21 11:37:44 -0500 (Tue, 21 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.3
   M /trunk/dnssec-tools/validator/doc/val_gethostbyname.3


Changes for pod updates.

------------------------------------------------------------------------
r2411 | tewok | 2006-11-21 11:34:44 -0500 (Tue, 21 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval.pod
   M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.pod


Minor wording or formatting changes.

------------------------------------------------------------------------
r2410 | tewok | 2006-11-21 11:24:44 -0500 (Tue, 21 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/val_gethostbyname.pod


Slight rewording change.

------------------------------------------------------------------------
r2409 | tewok | 2006-11-21 11:18:57 -0500 (Tue, 21 Nov 2006) | 3 lines
Changed paths:
   D /trunk/dnssec-tools/tools/modules/file-keyrec.pm
   D /trunk/dnssec-tools/tools/modules/file-rollrec.pm
   M /trunk/dnssec-tools/tools/modules/keyrec.pm
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm
   M /trunk/dnssec-tools/tools/modules/rollrec.pm


Pod changes to accommodate the SUM.

------------------------------------------------------------------------
r2408 | tewok | 2006-11-21 11:02:10 -0500 (Tue, 21 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec/README
   D /trunk/dnssec-tools/tools/etc/dnssec/blinkenlights.conf.pm
   A /trunk/dnssec-tools/tools/etc/dnssec/blinkenlights.conf.pod (from /trunk/dnssec-tools/tools/etc/dnssec/blinkenlights.conf.pm:2341)
   D /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm
   A /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pod (from /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm:2399)


Renamed .pm files to .pod.

------------------------------------------------------------------------
r2407 | tewok | 2006-11-21 11:00:00 -0500 (Tue, 21 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Name change in "see also" reference.

------------------------------------------------------------------------
r2406 | tewok | 2006-11-21 10:59:21 -0500 (Tue, 21 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pod


Section change for file reference.

------------------------------------------------------------------------
r2405 | tewok | 2006-11-21 10:54:10 -0500 (Tue, 21 Nov 2006) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/modules/keyrec.pod (from /trunk/dnssec-tools/tools/modules/file-keyrec.pm:2403)
   A /trunk/dnssec-tools/tools/modules/rollrec.pod (from /trunk/dnssec-tools/tools/modules/file-rollrec.pm:2404)


Renamed from file-foo.pm.

------------------------------------------------------------------------
r2404 | tewok | 2006-11-21 10:52:23 -0500 (Tue, 21 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/file-rollrec.pm


Moved a file into the new FILE section.

------------------------------------------------------------------------
r2403 | tewok | 2006-11-21 10:51:30 -0500 (Tue, 21 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/file-keyrec.pm


Fixed a man section.

------------------------------------------------------------------------
r2402 | tewok | 2006-11-21 10:48:41 -0500 (Tue, 21 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/dnsval.conf.3
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.3
   M /trunk/dnssec-tools/validator/doc/val_gethostbyname.3
   M /trunk/dnssec-tools/validator/doc/val_query.3
   M /trunk/dnssec-tools/validator/doc/validate.1


Adding update versions.  


------------------------------------------------------------------------
r2401 | tewok | 2006-11-21 10:42:48 -0500 (Tue, 21 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval.pod


A few minor fixes (mostly punctuation and formatting) that escaped
an earlier checkin.

------------------------------------------------------------------------
r2400 | hserus | 2006-11-21 10:08:09 -0500 (Tue, 21 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/dnsval.conf.3
   M /trunk/dnssec-tools/validator/doc/libsres.3
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.3
   M /trunk/dnssec-tools/validator/doc/val_gethostbyname.3
   M /trunk/dnssec-tools/validator/doc/val_query.3
   M /trunk/dnssec-tools/validator/doc/validate.1

update man for most recent pod

------------------------------------------------------------------------
r2399 | tewok | 2006-11-21 00:02:29 -0500 (Tue, 21 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm


Fixed a typo.

------------------------------------------------------------------------
r2398 | tewok | 2006-11-20 23:52:51 -0500 (Mon, 20 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/val_gethostbyname.pod
   M /trunk/dnssec-tools/validator/doc/val_query.pod


Formatting fixes.

------------------------------------------------------------------------
r2397 | tewok | 2006-11-20 22:23:17 -0500 (Mon, 20 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validate.pod


Formatting fix.

------------------------------------------------------------------------
r2396 | tewok | 2006-11-20 22:17:27 -0500 (Mon, 20 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.pod


Formatting changes.
Reworded a few sentences.

------------------------------------------------------------------------
r2395 | tewok | 2006-11-20 21:33:10 -0500 (Mon, 20 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval.pod


Clarify an error description.

------------------------------------------------------------------------
r2394 | tewok | 2006-11-20 21:13:24 -0500 (Mon, 20 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validate.pod


Formatting fixes.
Wording changes.

------------------------------------------------------------------------
r2393 | tewok | 2006-11-20 20:39:02 -0500 (Mon, 20 Nov 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval.pod


Reworded some sentences.
Fixed formatting.
Fixed a couple of misspelled constants.

------------------------------------------------------------------------
r2392 | rstory | 2006-11-20 16:52:36 -0500 (Mon, 20 Nov 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/Makefile.in
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/configure.in

- add --with-validator; default = yes
- skip validator configure/make if disabled
- bail on --[dis|en]able-validator
- configure help spacing tweaks

------------------------------------------------------------------------
r2391 | lfoster | 2006-11-20 16:42:52 -0500 (Mon, 20 Nov 2006) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/scripts/trustman

New version of trustman, now doing timers-style trust anchor
rollover. Also changing name to all lower case.

------------------------------------------------------------------------
r2390 | hserus | 2006-11-20 15:28:17 -0500 (Mon, 20 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Perform proper detection of cname loops

------------------------------------------------------------------------
r2389 | hserus | 2006-11-20 14:35:01 -0500 (Mon, 20 Nov 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/validator.h

disable SIG_ACCEPT_WINDOW by default
Add a new member to the delegation_info structure to keep track of partial answers (cnames) received
Add a new member qc_original_name to val_query_chain to keep track of the original query. The qc_name_n
member changes when cnames are followed

------------------------------------------------------------------------
r2388 | hserus | 2006-11-20 14:34:44 -0500 (Mon, 20 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.h

Add definition for find_nslist_for_query()

------------------------------------------------------------------------
r2387 | hserus | 2006-11-20 14:34:28 -0500 (Mon, 20 Nov 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Move register_query() and deregister_query() functions from val_resquery.c to val_support.c
Move logic of identifying target nameservers for a query into a new function find_nslist_for_query()
Add a new member to the delegation_info structure to keep track of partial answers (cnames) received
Rename do_referral() to follow_referral_or_alias_link()
Add logic for fetching cname alias records

------------------------------------------------------------------------
r2386 | hserus | 2006-11-20 14:34:00 -0500 (Mon, 20 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.c
   M /trunk/dnssec-tools/validator/libval/val_support.h

Move register_query() and deregister_query() functions from val_resquery.c to val_support.c
Add function for merging rrsets from one list to another. This is essentially the same as stow_info() but
without the locking portion

------------------------------------------------------------------------
r2385 | hserus | 2006-11-20 14:33:38 -0500 (Mon, 20 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

Identify the "top" query from the original query name; not the name that we came up with after following
alias chains

------------------------------------------------------------------------
r2384 | hserus | 2006-11-20 14:33:19 -0500 (Mon, 20 Nov 2006) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Rename qc_name_n to qname_n in places where it does not specifically relate to the query_chain structure
Rename qc_type_h to qtype_h in places where it does not specifically relate to the query_chain structure
Identify the "top" query from the original query name; not the name that we came up with after following
alias chains
Move logic of identifying target nameservers for a query into a new function find_nslist_for_query()
    Add logic for loop-detection of cname chains

------------------------------------------------------------------------
r2383 | hserus | 2006-11-20 14:32:49 -0500 (Mon, 20 Nov 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_cache.c
   M /trunk/dnssec-tools/validator/libval/val_cache.h

Maintain a separate cache for (zonename, server) mapping to account for the case where our default name
server is authoritative for a non-public zone (such as example.com). Look up this cache before we look for
other NS records.
Rename get_matching_nslist to get_nslist_from_cache

------------------------------------------------------------------------
r2382 | tewok | 2006-11-20 11:41:50 -0500 (Mon, 20 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval.pod


Formatting changes.

------------------------------------------------------------------------
r2381 | tewok | 2006-11-20 08:50:56 -0500 (Mon, 20 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libsres.pod


Added a missing word.

------------------------------------------------------------------------
r2380 | tewok | 2006-11-20 08:45:26 -0500 (Mon, 20 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libsres.pod


Formatting changes.
Rewording a couple sentences.

------------------------------------------------------------------------
r2379 | tewok | 2006-11-19 09:01:23 -0500 (Sun, 19 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Formatting changes for interface lists.

------------------------------------------------------------------------
r2378 | tewok | 2006-11-19 08:58:54 -0500 (Sun, 19 Nov 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm


Reworded some sentences.
Formatting changes.
Hyphenless rollover assimilation.
Updated the refs.

------------------------------------------------------------------------
r2377 | tewok | 2006-11-19 00:13:34 -0500 (Sun, 19 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Formatting changes.
Hyphenless assimilation.

------------------------------------------------------------------------
r2376 | tewok | 2006-11-18 23:48:26 -0500 (Sat, 18 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm


Coupla minor fixes.

------------------------------------------------------------------------
r2375 | tewok | 2006-11-18 23:25:27 -0500 (Sat, 18 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Formatting fixes.

------------------------------------------------------------------------
r2374 | tewok | 2006-11-18 23:18:57 -0500 (Sat, 18 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Minor wording changes.

------------------------------------------------------------------------
r2373 | tewok | 2006-11-18 21:27:36 -0500 (Sat, 18 Nov 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/BootStrap.pm
   M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm
   M /trunk/dnssec-tools/tools/modules/conf.pm
   M /trunk/dnssec-tools/tools/modules/defaults.pm


Reworded sentences.
Adjusted formats.
Updated references.

------------------------------------------------------------------------
r2372 | tewok | 2006-11-18 20:45:30 -0500 (Sat, 18 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights
   M /trunk/dnssec-tools/tools/scripts/lsroll


Fixed some names.

------------------------------------------------------------------------
r2371 | tewok | 2006-11-18 17:28:46 -0500 (Sat, 18 Nov 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Moved the quick-start lines from the SYNOPSIS into its own section.
Formatting changes.
Assimilation to the hyphenless rollover.

------------------------------------------------------------------------
r2370 | tewok | 2006-11-18 16:26:18 -0500 (Sat, 18 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/signset-editor


Delete duplicated data.

------------------------------------------------------------------------
r2369 | tewok | 2006-11-18 16:14:08 -0500 (Sat, 18 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/cleankrf
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/fixkrf


Formatting changes.
Updated pod refs.

------------------------------------------------------------------------
r2368 | tewok | 2006-11-18 16:07:53 -0500 (Sat, 18 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/signset-editor


Updated pod refs.

------------------------------------------------------------------------
r2367 | tewok | 2006-11-18 15:24:23 -0500 (Sat, 18 Nov 2006) | 3 lines
Changed paths:
   D /trunk/dnssec-tools/tools/scripts/clean-keyrec
   D /trunk/dnssec-tools/tools/scripts/keyrec-check


Finish deleting a few files.

------------------------------------------------------------------------
r2366 | tewok | 2006-11-18 15:23:16 -0500 (Sat, 18 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Coupla minor fixes.

------------------------------------------------------------------------
r2365 | tewok | 2006-11-18 15:22:53 -0500 (Sat, 18 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL


Added rolllog.

------------------------------------------------------------------------
r2364 | tewok | 2006-11-18 15:19:23 -0500 (Sat, 18 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/krfcheck


Added a few additional references.

------------------------------------------------------------------------
r2363 | tewok | 2006-11-18 15:12:18 -0500 (Sat, 18 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/genkrf
   M /trunk/dnssec-tools/tools/scripts/krfcheck
   M /trunk/dnssec-tools/tools/scripts/lskrf


Formatting changes.

------------------------------------------------------------------------
r2362 | tewok | 2006-11-18 14:42:35 -0500 (Sat, 18 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/krfcheck


Formatting changes.

------------------------------------------------------------------------
r2361 | tewok | 2006-11-18 13:10:34 -0500 (Sat, 18 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollinit


Fixed capitalization.

------------------------------------------------------------------------
r2360 | tewok | 2006-11-18 13:05:44 -0500 (Sat, 18 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Formatting changes.

------------------------------------------------------------------------
r2359 | tewok | 2006-11-18 12:56:52 -0500 (Sat, 18 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/rolllog


Formatting changes.
Assimilation to the hyphenless rollover.

------------------------------------------------------------------------
r2358 | tewok | 2006-11-18 12:30:58 -0500 (Sat, 18 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Assimilation to the hyphenless rollover.

------------------------------------------------------------------------
r2357 | tewok | 2006-11-18 12:00:42 -0500 (Sat, 18 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollchk
   M /trunk/dnssec-tools/tools/scripts/rollinit


Formatting changes.
Assimilation to the hyphenless rollover.

------------------------------------------------------------------------
r2356 | tewok | 2006-11-18 11:37:58 -0500 (Sat, 18 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Formatting changes.
Assimilation to the hyphenless rollover.

------------------------------------------------------------------------
r2355 | tewok | 2006-11-18 11:16:33 -0500 (Sat, 18 Nov 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtconfchk


Formatting fixes.
Fixed the command name, which was renamed in the depths of time.
Fixed rollerd's name.

------------------------------------------------------------------------
r2354 | tewok | 2006-11-18 11:02:03 -0500 (Sat, 18 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtdefs


Formatting change.

------------------------------------------------------------------------
r2353 | tewok | 2006-11-18 11:01:36 -0500 (Sat, 18 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Minor formatting and wording changes.
Deleted a weird option.

------------------------------------------------------------------------
r2352 | tewok | 2006-11-17 22:18:50 -0500 (Fri, 17 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Fixed capitalization in title.

------------------------------------------------------------------------
r2351 | tewok | 2006-11-17 21:50:55 -0500 (Fri, 17 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/timetrans


Reworded a sentence.

------------------------------------------------------------------------
r2350 | tewok | 2006-11-17 21:38:52 -0500 (Fri, 17 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/tachk


Treworded a few things in the pod.

------------------------------------------------------------------------
r2349 | tewok | 2006-11-17 20:08:13 -0500 (Fri, 17 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/getdnskeys


Expanded and reorganized pod.

------------------------------------------------------------------------
r2347 | tewok | 2006-11-17 18:01:49 -0500 (Fri, 17 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/mapper


Reworded a few sentences.
Fixed some typos.

------------------------------------------------------------------------
r2346 | tewok | 2006-11-17 16:24:59 -0500 (Fri, 17 Nov 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts
   M /trunk/dnssec-tools/tools/donuts/donutsd


Fixed some typos.
Reworded a few phrases.
Fixed some formatting.

------------------------------------------------------------------------
r2345 | tewok | 2006-11-17 15:43:24 -0500 (Fri, 17 Nov 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts


Fixed some typos.
Reworded a few phrases.
Fixed some formatting.

------------------------------------------------------------------------
r2344 | hardaker | 2006-11-17 15:20:03 -0500 (Fri, 17 Nov 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow

fix mispellng pointed out by Wayne
------------------------------------------------------------------------
r2343 | tewok | 2006-11-17 14:24:39 -0500 (Fri, 17 Nov 2006) | 9 lines
Changed paths:
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow


Fixed some typos.
Adjusted pod to match other commands' pod.
Added a few =overs and =backs for cleaner organization.
Reworded a few sentences.
Deleted some extraneous blank lines.
Added a few sentences describing option subgroups.
Added some missing periods.

------------------------------------------------------------------------
r2342 | tewok | 2006-11-17 12:33:12 -0500 (Fri, 17 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod


Changed a duplicated "resolv.conf" into the intended "root.hints".

------------------------------------------------------------------------
r2341 | tewok | 2006-11-17 12:00:55 -0500 (Fri, 17 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec/blinkenlights.conf.pm


Deleted some extraneous lines.

------------------------------------------------------------------------
r2340 | tewok | 2006-11-17 11:34:23 -0500 (Fri, 17 Nov 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/file-keyrec.pm


Deleted some extraneous data.
Added some text about comment lines.
Several grammatical fixes.

------------------------------------------------------------------------
r2339 | tewok | 2006-11-17 11:32:48 -0500 (Fri, 17 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/file-rollrec.pm


Added a couple sentences to the pod about comment lines.

------------------------------------------------------------------------
r2338 | tewok | 2006-11-17 10:44:26 -0500 (Fri, 17 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/file-keyrec.pm
   M /trunk/dnssec-tools/tools/modules/file-rollrec.pm


Reordered pod sections in both files.
Added field descriptions to file-keyrec.pm.

------------------------------------------------------------------------
r2337 | hserus | 2006-11-17 10:34:30 -0500 (Fri, 17 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml
   M /trunk/dnssec-tools/validator/libval/val_errors.h
   M /trunk/dnssec-tools/validator/libval/val_log.c

Rename VAL_AC_TRUST_ZONE to VAL_AC_IGNORE_VALIDATION
Add a new final result status for VAL_IGNORE_VALIDATION

------------------------------------------------------------------------
r2336 | hserus | 2006-11-17 10:33:55 -0500 (Fri, 17 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/validator.h

Fix bug in CHECK_MASKED_STATUS macro

------------------------------------------------------------------------
r2335 | hserus | 2006-11-17 10:33:39 -0500 (Fri, 17 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

Modified to recognize VAL_IGNORE_VALIDATION as another trust state.

------------------------------------------------------------------------
r2334 | hserus | 2006-11-17 10:33:23 -0500 (Fri, 17 Nov 2006) | 10 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Rename VAL_AC_TRUST_ZONE to VAL_AC_IGNORE_VALIDATION
Add a new final result status for VAL_IGNORE_VALIDATION
Don't perform validation and some proof-related sanity checks if the VAL_IGNORE_VALIDATION status is set
Recognize VAL_IGNORE_VALIDATION as a trusted state
In transform_single_result allow an empty result to also be created
Replace top_q argument in prove_nonexistence() with selected members from within it.
Add basic logic for cname sanity checking. We still need to implement logic for fetching aliases when these are not automatically returned and for detecting
loops.


------------------------------------------------------------------------
r2333 | hserus | 2006-11-17 10:17:53 -0500 (Fri, 17 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

Multiple bogus elements in the chain-of-trust reduces the final status to BOGUS_UNPROVABLE.

------------------------------------------------------------------------
r2332 | tewok | 2006-11-17 09:54:42 -0500 (Fri, 17 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/file-rollrec.pm


Deleted some extraneous fields.

------------------------------------------------------------------------
r2331 | tewok | 2006-11-17 09:36:59 -0500 (Fri, 17 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm


A few wording and punctuational changes.

------------------------------------------------------------------------
r2330 | tewok | 2006-11-17 07:30:52 -0500 (Fri, 17 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm


Minor formatting change and a grammatical fix.

------------------------------------------------------------------------
r2329 | tewok | 2006-11-17 07:28:50 -0500 (Fri, 17 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod


Fixed a typo.

------------------------------------------------------------------------
r2328 | hserus | 2006-11-16 19:01:15 -0500 (Thu, 16 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

Set h_errno to appropriate value for val_res_query()

------------------------------------------------------------------------
r2327 | tewok | 2006-11-16 15:26:38 -0500 (Thu, 16 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod


Updated to match the other docs.
Added a missing =back.

------------------------------------------------------------------------
r2326 | tewok | 2006-11-16 14:40:37 -0500 (Thu, 16 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm


Fixed the pod to match everything else.

------------------------------------------------------------------------
r2325 | tewok | 2006-11-15 17:42:46 -0500 (Wed, 15 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Fixed rolling with signing sets to actually work beyond the first rollover..

------------------------------------------------------------------------
r2324 | hserus | 2006-11-15 17:11:26 -0500 (Wed, 15 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.h
   M /trunk/dnssec-tools/validator/libval/validator.h

Turns out that VAL_GET* need to be exported. Partially revert earlier change.

------------------------------------------------------------------------
r2323 | hserus | 2006-11-15 17:07:13 -0500 (Wed, 15 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.h
   M /trunk/dnssec-tools/validator/libval/validator.h

Move some of the libval-specific macros to val_support.h

------------------------------------------------------------------------
r2322 | hserus | 2006-11-15 17:02:46 -0500 (Wed, 15 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/ns_netint.c
   M /trunk/dnssec-tools/validator/libsres/ns_parse.c
   D /trunk/dnssec-tools/validator/libsres/ns_parse.h
   M /trunk/dnssec-tools/validator/libsres/res_debug.c
   M /trunk/dnssec-tools/validator/libsres/res_support.h

Revert an earlier change. Move macros from ns_parse.h to res_support.h

------------------------------------------------------------------------
r2321 | hserus | 2006-11-15 16:46:07 -0500 (Wed, 15 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/validator.h

Add prototypes for free_validator_cache() and wire_name_length()

------------------------------------------------------------------------
r2320 | hserus | 2006-11-15 16:45:19 -0500 (Wed, 15 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_context.c
   M /trunk/dnssec-tools/validator/libval/val_policy.h
   M /trunk/dnssec-tools/validator/libval/validator.h

Moved policy-specific definitions to val_policy.h. In order to do this we also need to remove dependency on 
MAX_POLICY_TOKEN

------------------------------------------------------------------------
r2319 | hserus | 2006-11-15 15:53:22 -0500 (Wed, 15 Nov 2006) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/validator/libval/val_getaddrinfo.h
   D /trunk/dnssec-tools/validator/libval/val_gethostbyname.h
   D /trunk/dnssec-tools/validator/libval/val_x_query.h

Remove un-used files

------------------------------------------------------------------------
r2318 | hserus | 2006-11-15 15:52:21 -0500 (Wed, 15 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

Move relevant documentation of val_getaddrinfo from val_getaddrinfo.h to val_getaddrinfo.c

------------------------------------------------------------------------
r2317 | hserus | 2006-11-15 15:38:51 -0500 (Wed, 15 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

Prototypes in val_x_query.c are declared in validator.h 

------------------------------------------------------------------------
r2316 | hserus | 2006-11-15 15:37:23 -0500 (Wed, 15 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/validator.h

Add the compose_answer() prototype since this function is exported as well.

------------------------------------------------------------------------
r2315 | hserus | 2006-11-15 15:13:34 -0500 (Wed, 15 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/getaddr.c
   M /trunk/dnssec-tools/validator/apps/validator_driver.c
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_cache.c
   M /trunk/dnssec-tools/validator/libval/val_crypto.c
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/validator/libval/val_log.c
   D /trunk/dnssec-tools/validator/libval/val_log.h
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_verify.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c
   M /trunk/dnssec-tools/validator/libval/validator.h

validator.h subsumes the role of val_debug.h

------------------------------------------------------------------------
r2314 | hserus | 2006-11-15 13:07:24 -0500 (Wed, 15 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

Remove include for res_debug.h; resolver.h subsumes the role of res_debug.h 

------------------------------------------------------------------------
r2313 | hserus | 2006-11-15 12:58:08 -0500 (Wed, 15 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

Get rid of compilation warnings.

------------------------------------------------------------------------
r2312 | hserus | 2006-11-15 12:44:56 -0500 (Wed, 15 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/ns_netint.c
   M /trunk/dnssec-tools/validator/libsres/ns_parse.c
   A /trunk/dnssec-tools/validator/libsres/ns_parse.h
   M /trunk/dnssec-tools/validator/libsres/res_debug.c
   M /trunk/dnssec-tools/validator/libsres/resolver.h

Move definitions for RES_GET16 and RES_GET32 from resolver.h to ns_parse.h since these are local to libsres
Add protottypes for p_class() and p_type() to resolver.h to indicate that these functions are exported. 

------------------------------------------------------------------------
r2311 | hserus | 2006-11-15 12:27:14 -0500 (Wed, 15 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c
   D /trunk/dnssec-tools/validator/libsres/res_debug.h
   M /trunk/dnssec-tools/validator/libsres/resolver.h
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Moved definitions from res_debug.h to resolver.h. This is to remove unnecessary dependencies on libsres.

------------------------------------------------------------------------
r2310 | hserus | 2006-11-15 12:04:26 -0500 (Wed, 15 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_query.c
   M /trunk/dnssec-tools/validator/libsres/resolver.h
   M /trunk/dnssec-tools/validator/libval/validator.h

Remove dependency on libsres for the CREATE_NSADDR_ARRAY macro

------------------------------------------------------------------------
r2308 | hserus | 2006-11-15 09:34:28 -0500 (Wed, 15 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validate.1
   M /trunk/dnssec-tools/validator/doc/validate.pod

Insert missing white space

------------------------------------------------------------------------
r2307 | tewok | 2006-11-14 22:21:56 -0500 (Tue, 14 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-manyzones/rundemo


Tail the demo log after starting things off.

------------------------------------------------------------------------
r2306 | tewok | 2006-11-14 21:39:15 -0500 (Tue, 14 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/save-demo.rollrec


Add display entries for each rollrec record.

------------------------------------------------------------------------
r2305 | tewok | 2006-11-14 21:22:05 -0500 (Tue, 14 Nov 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Fixed rolling with signing sets to actually work.
Moved some initial zonefile-verification code into its own routine and out of
the main().

------------------------------------------------------------------------
r2304 | hardaker | 2006-11-14 18:03:33 -0500 (Tue, 14 Nov 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow

update various doc parts
------------------------------------------------------------------------
r2303 | hardaker | 2006-11-14 13:23:58 -0500 (Tue, 14 Nov 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow

update to reflect wireshark vs ethereal; update a few command line option descriptons
------------------------------------------------------------------------
r2302 | hserus | 2006-11-14 12:05:34 -0500 (Tue, 14 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/dnsval.conf.3
   M /trunk/dnssec-tools/validator/doc/dnsval.conf.pod
   M /trunk/dnssec-tools/validator/doc/libsres.3
   M /trunk/dnssec-tools/validator/doc/libsres.pod
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod
   M /trunk/dnssec-tools/validator/doc/validate.1
   M /trunk/dnssec-tools/validator/doc/validate.pod
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Keep validator documentation up-to-date

------------------------------------------------------------------------
r2301 | tewok | 2006-11-13 17:36:23 -0500 (Mon, 13 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Added the -display option.

------------------------------------------------------------------------
r2300 | tewok | 2006-11-13 17:21:29 -0500 (Mon, 13 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Fixed a code comment.
Fixed a regular expression in the user-log routine.

------------------------------------------------------------------------
r2299 | tewok | 2006-11-13 17:20:36 -0500 (Mon, 13 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rolllog


Added a copyright to the pod.

------------------------------------------------------------------------
r2298 | tewok | 2006-11-13 16:32:19 -0500 (Mon, 13 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Very minor routine header tidying.

------------------------------------------------------------------------
r2297 | tewok | 2006-11-13 16:07:14 -0500 (Mon, 13 Nov 2006) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollinit


Added some comments.
Added a display entry to the output.
Fixed the NAME description in the pod.
Fixed some examples in the pod that had gone wildly wrong.
Added a few references to the pod.

------------------------------------------------------------------------
r2296 | tewok | 2006-11-13 15:22:41 -0500 (Mon, 13 Nov 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollchk


Added checks for invalid display flags.
Added purpose descriptions in some routine headers.
Added some extra references.

------------------------------------------------------------------------
r2295 | tewok | 2006-11-13 15:05:11 -0500 (Mon, 13 Nov 2006) | 3 lines
Changed paths:
   D /trunk/dnssec-tools/tools/modules/file-keyrec
   M /trunk/dnssec-tools/tools/modules/file-rollrec.pm


Fixed a bad command reference.

------------------------------------------------------------------------
r2294 | tewok | 2006-11-13 14:59:47 -0500 (Mon, 13 Nov 2006) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/modules/file-rollrec.pm


New pod-only file describing the contents of a rollrec file.

------------------------------------------------------------------------
r2293 | tewok | 2006-11-13 14:39:53 -0500 (Mon, 13 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/file-keyrec.pm


Fixed the copyright date.

------------------------------------------------------------------------
r2292 | tewok | 2006-11-13 14:38:57 -0500 (Mon, 13 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/file-keyrec.pm


Added a few refs.

------------------------------------------------------------------------
r2291 | tewok | 2006-11-13 14:37:50 -0500 (Mon, 13 Nov 2006) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/modules/file-keyrec.pm (from /trunk/dnssec-tools/tools/modules/file-keyrec:2233)


Renamed so the file would be installed.

------------------------------------------------------------------------
r2290 | tewok | 2006-11-13 14:34:21 -0500 (Mon, 13 Nov 2006) | 9 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Zone Display fixes:
	- Fixed the title of the dialog.
	- Left-justify the zone name list in the dialog.
	- Modified the checkbuttons to directly manipulate the display hash.
	- Added pod describing the Zone Display feature.
	- Added help-window text describing the Zone Display feature.


------------------------------------------------------------------------
r2289 | tewok | 2006-11-13 10:24:20 -0500 (Mon, 13 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/signset-editor


Make dialog scrollbars optional.

------------------------------------------------------------------------
r2288 | tewok | 2006-11-12 22:22:15 -0500 (Sun, 12 Nov 2006) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Added zone display option wherein zones can be rolling (or skipped) yet not
displayed.
Added a zone-display menu with several commands to allow users to select
which zones will be displayed and which won't.
Properly initialize the last row index. 

------------------------------------------------------------------------
r2287 | tewok | 2006-11-12 17:53:20 -0500 (Sun, 12 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Change a rollrec_write() to rollrec_close() to force ourselves to reload
next time 'round.

------------------------------------------------------------------------
r2286 | tewok | 2006-11-11 22:13:40 -0500 (Sat, 11 Nov 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Renamed expired() to zsk_expired() for a time when we add in KSK rollover.
Reorganized zsk_expired() variable declarations.
Handle key signing sets.

------------------------------------------------------------------------
r2285 | tewok | 2006-11-11 21:45:59 -0500 (Sat, 11 Nov 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Get the ZSK set contents at the beginning of a forceroll.
Set the current ZSK sets.
Set the lifetime field for newly created published ZSK sets.


------------------------------------------------------------------------
r2284 | tewok | 2006-11-11 18:58:27 -0500 (Sat, 11 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm


Added a display entry for use by blinkenlights.

------------------------------------------------------------------------
r2283 | hserus | 2006-11-09 12:37:37 -0500 (Thu, 09 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Add description for ns_name_ntop and ns_name_pton, since val_resolve_and_check uses DNS wire format for the
domain name.

------------------------------------------------------------------------
r2282 | tewok | 2006-11-08 18:27:31 -0500 (Wed, 08 Nov 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added -sets option to display signing sets in keyrecs.
Changed -ref and -unref to implicitly list sets as well as keys.
Changed -unref to implicitly check obsolete keys.
 

------------------------------------------------------------------------
r2281 | hserus | 2006-11-08 15:37:52 -0500 (Wed, 08 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Don't set EDNS0 when query is sent with VAL_FLAGS_DONT_VALIDATE
Continue to fetch glue for each of the NS records returned if answers are not returned for the ones earlier

------------------------------------------------------------------------
r2280 | hserus | 2006-11-08 15:36:03 -0500 (Wed, 08 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/validator.h

Add a new flags field to the query structure; only value recognized is VAL_FLAGS_DONT_VALIDATE, which causes EDNS0 to be turned off 
in queries.

------------------------------------------------------------------------
r2279 | hserus | 2006-11-08 15:33:58 -0500 (Wed, 08 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_crypto.c
   M /trunk/dnssec-tools/validator/libval/val_crypto.h

Fix parameter mismatch in _sigverify() routines

------------------------------------------------------------------------
r2278 | hserus | 2006-11-08 14:57:14 -0500 (Wed, 08 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Check for proper condition in provable insecure detection logic

------------------------------------------------------------------------
r2277 | hserus | 2006-11-08 13:20:30 -0500 (Wed, 08 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch

Use p_val_status in place of p_val_error

------------------------------------------------------------------------
r2276 | hserus | 2006-11-08 13:18:52 -0500 (Wed, 08 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap

Use the latest error codes

------------------------------------------------------------------------
r2275 | tewok | 2006-11-08 12:45:17 -0500 (Wed, 08 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/INFO
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL
   M /trunk/dnssec-tools/tools/scripts/README
   A /trunk/dnssec-tools/tools/scripts/krfcheck (from /trunk/dnssec-tools/tools/scripts/keyrec-check:2274)
   M /trunk/dnssec-tools/tools/scripts/signset-editor


Changed the name of keyrec-check to krfcheck.

------------------------------------------------------------------------
r2274 | tewok | 2006-11-08 12:39:54 -0500 (Wed, 08 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/keyrec-check


Changing the command name to krfcheck.

------------------------------------------------------------------------
r2273 | hserus | 2006-11-08 12:04:06 -0500 (Wed, 08 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_policy.h

Expand ALGO to ALGORITHM

------------------------------------------------------------------------
r2272 | hserus | 2006-11-08 12:03:01 -0500 (Wed, 08 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/resolver.h

Removed SR_SUSPICIOUS_BIT since this is never used

------------------------------------------------------------------------
r2271 | hserus | 2006-11-08 12:02:42 -0500 (Wed, 08 Nov 2006) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_errors.h

Removed VAL_A_TOO_MANY_LINKS
Removed VAL_A_FLOOD_ATTACK_DETECTED
Removed VAL_A_NO_PREFERRED_SEP
Renamed VAL_A_SECURITY_LAME to VAL_AC_BAD_DELEGATION
Renamed VAL_A_* to VAL_AC_*
Expand ALGO to ALGORITHM
Expand PROTO to PROTOCOL

------------------------------------------------------------------------
r2270 | hserus | 2006-11-08 12:02:31 -0500 (Wed, 08 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_support.c

Renamed VAL_A_* to VAL_AC_*

------------------------------------------------------------------------
r2269 | hserus | 2006-11-08 12:02:13 -0500 (Wed, 08 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/README

Some word-smithing

------------------------------------------------------------------------
r2268 | hserus | 2006-11-08 12:02:00 -0500 (Wed, 08 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Renamed VAL_A_* to VAL_AC_*
Expand ALGO to ALGORITHM

------------------------------------------------------------------------
r2267 | hserus | 2006-11-08 12:00:44 -0500 (Wed, 08 Nov 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/validator.h

Expand ALGO to ALGORITHM
Rename p_val_error to p_val_status
Rename p_val_error to p_val_status
Rename p_query_error to p_query_status
Also maintain older definitions for backwards compatibility

------------------------------------------------------------------------
r2266 | hserus | 2006-11-08 12:00:29 -0500 (Wed, 08 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

Rename p_val_error to p_val_status

------------------------------------------------------------------------
r2265 | hserus | 2006-11-08 12:00:16 -0500 (Wed, 08 Nov 2006) | 11 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

Rename p_val_error to p_val_status
Rename p_val_error to p_val_status
Rename p_query_error to p_query_status
Removed SR_SUSPICIOUS_BIT since this is never used
Removed VAL_A_TOO_MANY_LINKS
Removed VAL_A_FLOOD_ATTACK_DETECTED
Removed VAL_A_NO_PREFERRED_SEP
Renamed VAL_A_SECURITY_LAME to VAL_AC_BAD_DELEGATION
Renamed VAL_A_* to VAL_AC_*
Expand ALGO to ALGORITHM

------------------------------------------------------------------------
r2264 | hserus | 2006-11-08 11:59:48 -0500 (Wed, 08 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.h

Rename p_val_error to p_val_status
Rename p_val_error to p_val_status
Rename p_query_error to p_query_status

------------------------------------------------------------------------
r2263 | hserus | 2006-11-08 11:59:35 -0500 (Wed, 08 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_crypto.c

Renamed VAL_A_* to VAL_AC_*

------------------------------------------------------------------------
r2262 | hserus | 2006-11-08 11:59:21 -0500 (Wed, 08 Nov 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.c

Expand ALGO to ALGORITHM
Expand PROTO to PROTOCOL
Renamed VAL_A_SECURITY_LAME to VAL_AC_BAD_DELEGATION
Renamed VAL_A_* to VAL_AC_*

------------------------------------------------------------------------
r2261 | hserus | 2006-11-08 11:58:54 -0500 (Wed, 08 Nov 2006) | 14 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Wording changes, updated error codes to reflect only those used by the library
Rename p_val_error to p_val_status
Rename p_val_error to p_val_status
Renamed VAL_A_SECURITY_LAME to VAL_AC_BAD_DELEGATION
Removed VAL_A_CLOCK_SKEW
Removed VAL_A_DUPLICATE_KEYTAG
Removed VAL_A_NO_PREFERRED_SEP
Removed VAL_A_WRONG_RRSIG_OWNER
Removed VAL_A_KEYTAG_MISMATCH
Removed VAL_A_TOO_MANY_LINKS
Expand ALGO to ALGORITHM
Expand PROTO to PROTOCOL
Renamed VAL_A_* to VAL_AC_*

------------------------------------------------------------------------
r2260 | hserus | 2006-11-08 11:58:28 -0500 (Wed, 08 Nov 2006) | 14 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod

Rename p_val_error to p_val_status
Rename p_val_error to p_val_status
Renamed VAL_A_SECURITY_LAME to VAL_AC_BAD_DELEGATION
Removed VAL_A_CLOCK_SKEW
Removed VAL_A_DUPLICATE_KEYTAG
Removed VAL_A_NO_PREFERRED_SEP
Removed VAL_A_WRONG_RRSIG_OWNER
Removed VAL_A_KEYTAG_MISMATCH
Removed VAL_A_TOO_MANY_LINKS
Removed VAL_AC_DNSSEC_VERSION_ERROR
Expand ALGO to ALGORITHM
Expand PROTO to PROTOCOL
Renamed VAL_A_* to VAL_AC_*

------------------------------------------------------------------------
r2259 | hserus | 2006-11-08 11:57:47 -0500 (Wed, 08 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/README
   M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.3
   M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.pod
   M /trunk/dnssec-tools/validator/doc/val_gethostbyname.3
   M /trunk/dnssec-tools/validator/doc/val_gethostbyname.pod
   M /trunk/dnssec-tools/validator/doc/val_query.3
   M /trunk/dnssec-tools/validator/doc/val_query.pod

Rename p_val_error to p_val_status

------------------------------------------------------------------------
r2258 | hserus | 2006-11-08 11:56:31 -0500 (Wed, 08 Nov 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval-implementation-notes

Removed VAL_A_CLOCK_SKEW
Renamed VAL_A_SECURITY_LAME to VAL_AC_BAD_DELEGATION
Renamed VAL_A_* to VAL_AC_*
Removed VAL_A_KEYTAG_MISMATCH
Expanded ALGO to ALGORITHM

------------------------------------------------------------------------
r2257 | hserus | 2006-11-08 11:56:12 -0500 (Wed, 08 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/Makefile.in

Rename p_as_error to p_ac_status
Rename p_val_error to p_val_status

------------------------------------------------------------------------
r2256 | tewok | 2006-11-07 22:01:16 -0500 (Tue, 07 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/fixkrf


Fixed spacing in the usage message.

------------------------------------------------------------------------
r2255 | tewok | 2006-11-07 21:59:46 -0500 (Tue, 07 Nov 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/fixkrf


Remove some obsolete data.
Add a nop condition for set keyrecs.
Adjust for new keyrec file format.
 

------------------------------------------------------------------------
r2254 | tewok | 2006-11-07 20:37:18 -0500 (Tue, 07 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/cleankrf


Added support for new keyrec format.
Delete orphaned signing sets.

------------------------------------------------------------------------
r2253 | tewok | 2006-11-07 12:59:20 -0500 (Tue, 07 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/cleankrf
   M /trunk/dnssec-tools/tools/scripts/signset-editor


Renamed clean-keyrec to cleankrf.


------------------------------------------------------------------------
r2252 | tewok | 2006-11-07 12:54:21 -0500 (Tue, 07 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/INFO
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL
   M /trunk/dnssec-tools/tools/scripts/README


Renamed clean-keyrec to cleankrf.

------------------------------------------------------------------------
r2251 | tewok | 2006-11-07 12:53:08 -0500 (Tue, 07 Nov 2006) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/scripts/cleankrf (from /trunk/dnssec-tools/tools/scripts/clean-keyrec:2245)


Renamed clean-keyrec to cleankrf.

------------------------------------------------------------------------
r2250 | tewok | 2006-11-07 12:11:37 -0500 (Tue, 07 Nov 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/keyrec-check


Added error checking for missing timestamp info.
Made some error messages more useful.
Added some code comments and routine header comments.

------------------------------------------------------------------------
r2249 | tewok | 2006-11-07 11:42:32 -0500 (Tue, 07 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/keyrec-check


If no record-specific options weren't given, we'll do everything.

------------------------------------------------------------------------
r2248 | tewok | 2006-11-07 11:31:56 -0500 (Tue, 07 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/keyrec-check


Added support for set keyrecs.

------------------------------------------------------------------------
r2246 | tewok | 2006-11-06 10:31:29 -0500 (Mon, 06 Nov 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/genkrf


Modified to use the new keyrec format.

Modified to allow multiple ZSKs to be generated.

------------------------------------------------------------------------
r2245 | tewok | 2006-11-06 10:22:51 -0500 (Mon, 06 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/clean-keyrec


Due to changes in keyrec_add() and keyrec_del() we needed to explicitly call
keyrec_write().

------------------------------------------------------------------------
r2244 | tewok | 2006-11-06 10:15:21 -0500 (Mon, 06 Nov 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/signset-editor


Made the dialog boxes for the modification commands to be scrollable windows.

Deleted a few unnecessary raise() calls.

------------------------------------------------------------------------
r2243 | tewok | 2006-11-06 10:11:41 -0500 (Mon, 06 Nov 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Moved newsignset() into keyrec.pm as keyrec_signset_newname().
 
Saved the most recent signing set's name as lastset in the zone keyrec.

------------------------------------------------------------------------
r2242 | tewok | 2006-11-06 10:07:12 -0500 (Mon, 06 Nov 2006) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Moved keyrec_signset_newname() from zonesigner into keyrec.pm.  It changed a
bit in migration.

Removed keyrec_write() calls in keyrec_add() and keyrec_del().  Those
routines should modify the internal version, with keyrec_write() calls
explicitly made to save the modified keyrec.

------------------------------------------------------------------------
r2240 | tewok | 2006-11-03 12:34:58 -0500 (Fri, 03 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/signset-editor


Reworked the undoing of modify commands for the signing set view.

------------------------------------------------------------------------
r2239 | tewok | 2006-11-03 11:25:32 -0500 (Fri, 03 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/signset-editor


Got the undo command working for deletes and modifies from the keyrec view.

------------------------------------------------------------------------
r2238 | tewok | 2006-11-02 12:40:12 -0500 (Thu, 02 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Changed keyrec_signset_addkey() and keyrec_signset_delkey() to update the
keyrec's timestamp.

------------------------------------------------------------------------
r2237 | tewok | 2006-11-02 11:23:54 -0500 (Thu, 02 Nov 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/signset-editor


Stop disabling of the modify menu command when in keyrec display mode.
Set the label of the modify menu command appropriately when in the different
display modes.

------------------------------------------------------------------------
r2236 | tewok | 2006-11-02 11:03:38 -0500 (Thu, 02 Nov 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/signset-editor


Reworked pod for better descriptions and to include new functionality.
 

------------------------------------------------------------------------
r2235 | tewok | 2006-11-02 10:28:04 -0500 (Thu, 02 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/signset-editor


Improved the unselected-thingy error message.

------------------------------------------------------------------------
r2233 | tewok | 2006-11-02 00:06:17 -0500 (Thu, 02 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/file-keyrec


Updated to describe the new format.

------------------------------------------------------------------------
r2232 | tewok | 2006-11-01 23:26:20 -0500 (Wed, 01 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Get rid of a zone field from a key field chunk of code.

------------------------------------------------------------------------
r2231 | hserus | 2006-11-01 22:54:15 -0500 (Wed, 01 Nov 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

Don't print contents for free'd response structures

------------------------------------------------------------------------
r2230 | tewok | 2006-11-01 18:33:25 -0500 (Wed, 01 Nov 2006) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Pod mods:
	- improved the initial discussion of keyrec files
	- moved the "keyrec file" section after the "using zonesigner" section
	- added info about -zskcount
	- added info about -signset
	- fixed example 4's keyrec file to conform to the new version

------------------------------------------------------------------------
r2226 | tewok | 2006-11-01 09:42:18 -0500 (Wed, 01 Nov 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Added lines for -zskcount and -signset to the usage message.

------------------------------------------------------------------------
r2225 | tewok | 2006-10-31 22:45:24 -0500 (Tue, 31 Oct 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/signset-editor


Added the Modify command to the keyrec view.


------------------------------------------------------------------------
r2224 | tewok | 2006-10-31 20:58:23 -0500 (Tue, 31 Oct 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Made keyrec_signset_clear() externally available.
Sort keys added to keyrec_signset_new().
Added keyrec_signset_haskey().

------------------------------------------------------------------------
r2223 | tewok | 2006-10-31 13:48:37 -0500 (Tue, 31 Oct 2006) | 9 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/signset-editor


Modified to use new keyrec format.  Basic functionality works:  adding,
deleting, and modifying signing sets.  

TBD:
	- pod updates
	- ensure that undo functionality still works


------------------------------------------------------------------------
r2222 | tewok | 2006-10-30 15:16:48 -0500 (Mon, 30 Oct 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Added support for multi-key signing sets.
(The pod has not been modified yet.  This will happen very soon!)

------------------------------------------------------------------------
r2221 | tewok | 2006-10-30 11:07:13 -0500 (Mon, 30 Oct 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Added lastset as a zone keyrec record.
Moved zskcount from key keyrecs to zone keyrecs.
Changed keyrec_read() to recognize set keyrecs.

------------------------------------------------------------------------
r2220 | rstory | 2006-10-27 16:37:18 -0400 (Fri, 27 Oct 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/ns_parse.c

do not try to parse 0 length msg or NULL ptr
------------------------------------------------------------------------
r2219 | tewok | 2006-10-26 18:22:08 -0400 (Thu, 26 Oct 2006) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Added the zonename entry to set keyrecs.
Deleted the sets entry from set keyrecs.
Fixed a keyrec-type bug introduced with the addition of set records.
Expanded some ill-advisedly combined if-conditions.
Corrected the signing set interface names in the pod.

------------------------------------------------------------------------
r2218 | hserus | 2006-10-26 17:42:13 -0400 (Thu, 26 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Initialize ref_ns_list to NULL so that random value is not picked up when we see some referral error
Don't follow referrals when CNAMEs are present. This case will be dealt with later

------------------------------------------------------------------------
r2217 | hserus | 2006-10-26 17:40:46 -0400 (Thu, 26 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.c

Don't fix the returned name server list if ns_number_of_addresses is 0

------------------------------------------------------------------------
r2216 | tewok | 2006-10-26 17:37:22 -0400 (Thu, 26 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Added a couple comments.

------------------------------------------------------------------------
r2215 | tewok | 2006-10-26 11:12:57 -0400 (Thu, 26 Oct 2006) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Added recognition of set records.
Deleted the old signing-set interfaces.
Added new signing-set interfaces.
Fixed a persnickety bug that had been adding too many blank lines between
keyrecs.

------------------------------------------------------------------------
r2214 | tewok | 2006-10-24 21:52:23 -0400 (Tue, 24 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Adjusted the version number.

------------------------------------------------------------------------
r2213 | hserus | 2006-10-24 19:12:12 -0400 (Tue, 24 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Try to determine if a DNSKEY or RRSIG is missing instead of blindly storing query status value into the
assertion.

------------------------------------------------------------------------
r2212 | rstory | 2006-10-24 17:31:12 -0400 (Tue, 24 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

print responses for test cases if -p specified

------------------------------------------------------------------------
r2211 | rstory | 2006-10-24 17:29:58 -0400 (Tue, 24 Oct 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

- remove special case prototypes for solaris. use -D_REENTRANT and system
  headers instead
- add additional paramter to ctime_r on solaris
- indent output from val_log_assertion to help show nesting

------------------------------------------------------------------------
r2210 | rstory | 2006-10-24 17:27:33 -0400 (Tue, 24 Oct 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_verify.c

- remove special case prototypes for *_r functions on solaris.
  compile with -D_REENTRANT to get these prototypes from system headers.
- fix calls to ctime_r for solaris, which has an extra parameter

------------------------------------------------------------------------
r2209 | rstory | 2006-10-24 17:25:50 -0400 (Tue, 24 Oct 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_x_query.h

expose compose_answer prototype
------------------------------------------------------------------------
r2208 | rstory | 2006-10-24 17:24:59 -0400 (Tue, 24 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_debug.c

- exclude more cases where the res_sym hack doesn't work

------------------------------------------------------------------------
r2207 | rstory | 2006-10-23 17:43:57 -0400 (Mon, 23 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.h

- make ctx param const for val_log_rrset(), val_log_rrsig_rdata()

------------------------------------------------------------------------
r2206 | rstory | 2006-10-23 17:43:37 -0400 (Mon, 23 Oct 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

- new val_log_val_rrset()
- new val_log_assertion_pfx()
- make ctx param const for val_log_rrset(), val_log_rrsig_rdata()

------------------------------------------------------------------------
r2205 | rstory | 2006-10-23 17:40:40 -0400 (Mon, 23 Oct 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

fix final result tallies
------------------------------------------------------------------------
r2204 | hardaker | 2006-10-23 16:49:15 -0400 (Mon, 23 Oct 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/README

documentation update
------------------------------------------------------------------------
r2203 | hardaker | 2006-10-23 16:48:51 -0400 (Mon, 23 Oct 2006) | 1 line
Changed paths:
   D /trunk/dnssec-tools/apps/mozilla/dnssec-enable.patch

removed older patch
------------------------------------------------------------------------
r2202 | hardaker | 2006-10-23 16:47:57 -0400 (Mon, 23 Oct 2006) | 1 line
Changed paths:
   D /trunk/dnssec-tools/apps/mozilla/firefox-dnssec-rpm.patch

removed older patch
------------------------------------------------------------------------
r2201 | hardaker | 2006-10-23 16:47:30 -0400 (Mon, 23 Oct 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/firefox-dnssec-rpm.patch

older patch file changes; checking in only for historical archiving purposes; will remove next
------------------------------------------------------------------------
r2200 | hardaker | 2006-10-23 16:31:07 -0400 (Mon, 23 Oct 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch
   M /trunk/dnssec-tools/apps/mozilla/dnssec-firefox.patch

new copies of the firefox patches; minor changes many just timestamps
------------------------------------------------------------------------
r2199 | hserus | 2006-10-23 15:49:52 -0400 (Mon, 23 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.c
   M /trunk/dnssec-tools/validator/libsres/res_query.c
   M /trunk/dnssec-tools/validator/libsres/res_support.c
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Bug fix: Make sure that ns_address in struct name_server is initialized to NULL

------------------------------------------------------------------------
r2198 | hserus | 2006-10-23 11:23:19 -0400 (Mon, 23 Oct 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Add a new function find_trust_point() to find out which trust anchor applies to a given name
Maintain separation between key status and return value in is_trusted_key()
Break out early from the is check_provably_unsecure() logic if we see something amiss
Dont use val_isauthentic()
val_istrusted() encompasses val_isauthentication() behavior

------------------------------------------------------------------------
r2197 | hserus | 2006-10-23 11:22:57 -0400 (Mon, 23 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_errors.h

Add VAL_A_INVALID_RRSIG error code

------------------------------------------------------------------------
r2196 | hserus | 2006-10-23 11:22:43 -0400 (Mon, 23 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_support.c

Use ns_address in struct name_server as sockaddr_storage**

------------------------------------------------------------------------
r2195 | hserus | 2006-10-23 11:22:22 -0400 (Mon, 23 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c

Use VAL_ERROR instead of VAL_INDETERMINATE to indicate that some answer was not received.

------------------------------------------------------------------------
r2194 | hserus | 2006-10-23 11:22:10 -0400 (Mon, 23 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_crypto.c
   M /trunk/dnssec-tools/validator/libval/val_crypto.h

return void for rsasha1_sigverify() and friends but make sure that the sig_status and dnksey_status
values indicate the correct error.

------------------------------------------------------------------------
r2193 | hserus | 2006-10-23 11:21:49 -0400 (Mon, 23 Oct 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.c

return void for val_sigverify() but make sure that the sig_status and dnksey_status values indicate the
correct error.
modify SET_STATUS so that it really matches what the API requires

------------------------------------------------------------------------
r2192 | hserus | 2006-10-23 11:21:28 -0400 (Mon, 23 Oct 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.h
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

Dont use val_isauthentic()
val_istrusted() encompasses val_isauthentication() behavior


------------------------------------------------------------------------
r2191 | hserus | 2006-10-23 11:20:59 -0400 (Mon, 23 Oct 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Updates for the next revision of the API draft
- add val_istrusted()
- clarify that some "validated" error codes can be returned even if we didn't complete validation but we figured that the answer was trusted


------------------------------------------------------------------------
r2190 | hserus | 2006-10-23 11:20:19 -0400 (Mon, 23 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.c
   M /trunk/dnssec-tools/validator/libsres/res_query.c
   M /trunk/dnssec-tools/validator/libsres/res_support.c
   M /trunk/dnssec-tools/validator/libsres/resolver.h

Define ns_address as a sockaddr_storage** and use accordingly

------------------------------------------------------------------------
r2189 | tewok | 2006-10-21 22:03:36 -0400 (Sat, 21 Oct 2006) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Use the blinkenlights configuration file instead of the DNSSEC-Tools
configuration file.
Adjusted the pod discussing configuration files.
Deleted some pod that had unintentionally been duplicated.


------------------------------------------------------------------------
r2188 | hserus | 2006-10-21 21:49:36 -0400 (Sat, 21 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Version submitted as -02

------------------------------------------------------------------------
r2187 | tewok | 2006-10-21 20:54:27 -0400 (Sat, 21 Oct 2006) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/etc/dnssec/blinkenlights.conf
   A /trunk/dnssec-tools/tools/etc/dnssec/blinkenlights.conf.pm


Adding configuration file for blinkenlights.

------------------------------------------------------------------------
r2186 | tewok | 2006-10-21 17:48:12 -0400 (Sat, 21 Oct 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Reworked how the help dialog is displayed.  Now the dialog is modal, scrolled,
and full o' scrummy, nutritious help-text goodness.
Deleted error() and helpbegone(), as they're no longer used.


------------------------------------------------------------------------
r2185 | tewok | 2006-10-21 17:46:55 -0400 (Sat, 21 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


On exit, send a properly formed halt command to blinkenlights.

------------------------------------------------------------------------
r2184 | tewok | 2006-10-21 13:26:18 -0400 (Sat, 21 Oct 2006) | 9 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Added the -display option to exec "rollctl -display".  Execution with no
arguments does the same thing.
Deleted an "exit on empty rollerd command" line from rollerdcmd.  I can't
imagine why I *ever* thought that was a good idea.
Added a "nop" command from rollerd.  This is used by rollerd to see if
blinkenlights is still running.
The help menu is still broken.

------------------------------------------------------------------------
r2183 | tewok | 2006-10-21 13:21:04 -0400 (Sat, 21 Oct 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Modified display() to turn off the display flag if the display program
has died.
Added routine header "Purpose:"s to those routines which needed them.
Left-shifted some code that had inexplicably gotten right-shifted.

------------------------------------------------------------------------
r2182 | tewok | 2006-10-21 00:38:11 -0400 (Sat, 21 Oct 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Finished writing the pod.
Copied the pod text to the help window text.
Broke the help window.


------------------------------------------------------------------------
r2181 | tewok | 2006-10-20 18:27:57 -0400 (Fri, 20 Oct 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Added pod discussing status-column shading.
Removed a few key bindings.

------------------------------------------------------------------------
r2180 | hserus | 2006-10-20 12:43:32 -0400 (Fri, 20 Oct 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_errors.h

Rename VAL_A_DONT_KNOW to VAL_A_UNSET
Rename VAL_A_NOT_A_ZONE_KEY to VAL_A_INVALID_KEY
Define VAL_A_SIGNING_KEY to indicate that the key was used to verify a signature
Define VAL_A_UNKNOWN_ALGO_LINK to indicate that the key matched a DS but the algo was unknown

------------------------------------------------------------------------
r2179 | hserus | 2006-10-20 12:41:32 -0400 (Fri, 20 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.c

Using VAL_A_UNSET in place of VAL_A_DONT_KNOW

------------------------------------------------------------------------
r2178 | hserus | 2006-10-20 12:41:06 -0400 (Fri, 20 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Since the assertion status on failure (even when all rrsigs fail for the same reason) is
VAL_A_NOT_VERIFIED, use correct logic for identifying provably unsecure. 

------------------------------------------------------------------------
r2177 | hserus | 2006-10-20 12:37:08 -0400 (Fri, 20 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_crypto.h

Make clear separation between return values and assertion status values

------------------------------------------------------------------------
r2176 | hserus | 2006-10-20 12:36:39 -0400 (Fri, 20 Oct 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

val_log_assertion() takes a struct val_authentication_chain instead of the individual members of this
structure.
Using VAL_A_INVALID_KEY in place of VAL_A_NOT_A_ZONE_KEY
Using VAL_A_UNSET in place of VAL_A_DONT_KNOW
Display new status values VAL_A_UNKNOWN_ALGO_LINK and VAL_A_SIGNING_KEY

------------------------------------------------------------------------
r2175 | hserus | 2006-10-20 12:34:21 -0400 (Fri, 20 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_crypto.c

Make clear separation between return values and assertion status values

------------------------------------------------------------------------
r2174 | hserus | 2006-10-20 12:32:38 -0400 (Fri, 20 Oct 2006) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.c

Ensure that error conditions in the DNSKEY are properly reflected in the assertion status
using VAL_A_UNSET in place of VAL_A_DONT_KNOW
using VAL_A_INVALID_KEY in place of VAL_A_NOT_A_ZONE_KEY
Make clear separation between return values and assertion status values
Set the assertion status to VAL_A_NOT_VERIFIED even when all rrsigs fail for the same reason; we must look
at the rrsig status for the actual reason of failure
Use the VAL_A_UNKNOWN_ALGO_LINK status to indicate a potential provably unsecure condition.

------------------------------------------------------------------------
r2173 | hserus | 2006-10-20 12:26:20 -0400 (Fri, 20 Oct 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

More edits: 
    - separated status values for DNSKEY and RRSIGS
    - new error code for VAL_A_UNKOWN_ALGO_LINK
    - renamed VAL_A_NOT_A_ZONE_KEY to VAL_A_INVALID_KEY

------------------------------------------------------------------------
r2172 | hserus | 2006-10-20 01:14:14 -0400 (Fri, 20 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Use sockaddr_storage where appropriate

------------------------------------------------------------------------
r2171 | hserus | 2006-10-20 01:14:00 -0400 (Fri, 20 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.h

Added respondent server information to init_rr_set prototype


------------------------------------------------------------------------
r2170 | hserus | 2006-10-20 01:13:46 -0400 (Fri, 20 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.c

Save respondent server information in rrset and copy this value in cloned rrsets


------------------------------------------------------------------------
r2169 | hserus | 2006-10-20 01:13:27 -0400 (Fri, 20 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Make changes to allow respondent server information to be reflected in the final authentication chain


------------------------------------------------------------------------
r2168 | hserus | 2006-10-20 01:13:11 -0400 (Fri, 20 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

set correct value for number of addresses read for a name server

------------------------------------------------------------------------
r2167 | hserus | 2006-10-20 01:12:53 -0400 (Fri, 20 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/validator.h

Added field for respondent server in val_rrset
Changed MAX_PROOF value to 4

------------------------------------------------------------------------
r2166 | hserus | 2006-10-20 01:12:39 -0400 (Fri, 20 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

Use sockaddr_storage where appropriate
Allow proper logging of respondent server information

------------------------------------------------------------------------
r2165 | hserus | 2006-10-20 01:12:17 -0400 (Fri, 20 Oct 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_query.c

perform a proper clone of the name server addresses when we have multiple A records associated with a name
Perform clone of respondent nameserver inside res_io_accept instead of within response_recv


------------------------------------------------------------------------
r2164 | hserus | 2006-10-20 01:11:55 -0400 (Fri, 20 Oct 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.c

Perform clone of respondent nameserver inside res_io_accept instead of within response_recv
Ensure that the correct name server is returned as the respondent nameserver when we have multiple A 
records associated with a name
Typecast sockaddr_storage* to sockaddr* where appropriate

------------------------------------------------------------------------
r2163 | hserus | 2006-10-20 01:11:32 -0400 (Fri, 20 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/resolver.h

Use sockaddr_storage in place of sockaddr

------------------------------------------------------------------------
r2162 | hserus | 2006-10-20 01:11:07 -0400 (Fri, 20 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Added definition for default policy and MAX_PROOFS
Also added details on respondent server

------------------------------------------------------------------------
r2161 | tewok | 2006-10-19 15:13:19 -0400 (Thu, 19 Oct 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Added menu option to turn on/off coloring of zone stripes.
Added a few separators in the options menu.
Reordered a few pod subsections.

------------------------------------------------------------------------
r2160 | tewok | 2006-10-19 13:17:52 -0400 (Thu, 19 Oct 2006) | 10 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Pod mods:
	- screen layout discussion 
	- "rollctl -display" to start the GUI
	- new section header for screen colors
	- explanation of menu commands
	- described max-paints and screen rebuilds
	- expanded the configuration file section
 

------------------------------------------------------------------------
r2159 | hserus | 2006-10-18 17:54:32 -0400 (Wed, 18 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Edits for -02 version

------------------------------------------------------------------------
r2158 | hserus | 2006-10-18 11:41:43 -0400 (Wed, 18 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_errors.h

Make list of error codes compliant with validator API

------------------------------------------------------------------------
r2157 | hserus | 2006-10-18 11:40:42 -0400 (Wed, 18 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.c

No longer using the VAL_GENERIC_ERROR error code.

------------------------------------------------------------------------
r2156 | hserus | 2006-10-18 11:40:08 -0400 (Wed, 18 Oct 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Some minor twiddles in check_wildcard_sanity() so that existing loop is made use of.
val_ac_status will never be VAL_A_VERIFIED_LINK (this value is only present in rr_status), so dont check for this condition
Use VAL_R_IRRELEVANT_PROOF in place VAL_R_BOGUS to represent extraneous proofs
No longer using the VAL_GENERIC_ERROR error code

------------------------------------------------------------------------
r2155 | hserus | 2006-10-18 11:36:25 -0400 (Wed, 18 Oct 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/validator.h

Changed SIG_ACCEPT_WINDOW to 1 day
Renamed free_val_addrinfo to val_freeaddrinfo
Also for backwards compatibility create a define for free_val_addrinfo linking it to the new definition 

------------------------------------------------------------------------
r2154 | hserus | 2006-10-18 11:34:24 -0400 (Wed, 18 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

Remove unnecessary and duplicate cases. 

------------------------------------------------------------------------
r2153 | hserus | 2006-10-18 11:32:13 -0400 (Wed, 18 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.c

Removed unnecessary TODO markers

------------------------------------------------------------------------
r2152 | hserus | 2006-10-18 11:31:18 -0400 (Wed, 18 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/getaddr.c
   M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.3
   M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.pod
   M /trunk/dnssec-tools/validator/doc/val_gethostbyname.3
   M /trunk/dnssec-tools/validator/doc/val_gethostbyname.pod
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.h

Use val_freeaddrinfo() in place of free_val_addrinfo()

------------------------------------------------------------------------
r2151 | hserus | 2006-10-18 11:25:34 -0400 (Wed, 18 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_query.c

Account for SERVFAILS with NSEC3 records in the authoritative section.

------------------------------------------------------------------------
r2150 | hserus | 2006-10-18 11:24:34 -0400 (Wed, 18 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/resolver.h

Define return codes for only those definitions present in the validator API draft.

------------------------------------------------------------------------
r2149 | tewok | 2006-10-17 13:01:12 -0400 (Tue, 17 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Added a font size selection menu.

------------------------------------------------------------------------
r2148 | hserus | 2006-10-17 09:18:41 -0400 (Tue, 17 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.c

Display a message when signature inception times are in the future or signatures have expired, if they are within the SIG_ACCEPT_WINDOW range.

------------------------------------------------------------------------
r2146 | tewok | 2006-10-16 16:13:20 -0400 (Mon, 16 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Add a "use" line for the DNSSEC-Tools defaults module.

------------------------------------------------------------------------
r2145 | tewok | 2006-10-16 16:11:30 -0400 (Mon, 16 Oct 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Allow options to be set in the DNSSEC-Tools config file.
Centralize config option processing.

------------------------------------------------------------------------
r2144 | hserus | 2006-10-16 14:53:58 -0400 (Mon, 16 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.c
   M /trunk/dnssec-tools/validator/libval/validator.h

Temporary hack to allow RRSIGs to be validated within a window before inception and after expiration to account for clock skew and sig expirations. 
This window is currently defined to be 7 days. Since this has obvious security ramifications, the choice of this value and the approach to handle the general topic of handling expired sigs are topics worthy of further discussion.

------------------------------------------------------------------------
r2143 | hserus | 2006-10-16 14:21:13 -0400 (Mon, 16 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

in val_log_authentication_chain make a clear demarcation between results, answers and proofs

------------------------------------------------------------------------
r2142 | hserus | 2006-10-16 14:19:03 -0400 (Mon, 16 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

Check for single result status for proof of non-existence


------------------------------------------------------------------------
r2141 | hserus | 2006-10-16 13:31:20 -0400 (Mon, 16 Oct 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Moved the definition of check_conflicting_answers() before assimilate_answers()
In prove_nsec_span_chk() set the result status tentatively to VAL_NONEXISTENT_NAME when a span is identified. This may change
if wildcard checks prove us wrong. 

------------------------------------------------------------------------
r2140 | hserus | 2006-10-16 12:39:30 -0400 (Mon, 16 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

Perform proper cleanup of dnskey rdata structure

------------------------------------------------------------------------
r2139 | rstory | 2006-10-16 11:24:38 -0400 (Mon, 16 Oct 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

add header for ctime_r
------------------------------------------------------------------------
r2138 | hserus | 2006-10-16 09:57:00 -0400 (Mon, 16 Oct 2006) | 25 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Move openssl-related code to val_crypto.c

Use new val_rc_answer and val_ac_trust members in val_free_result_chain in place of the older val_ac_rrset
Use new qc_ans and qc_proof members in val_query_chain in place of older qc_as
Use struct _val_authentication_chain in place of older struct val_digested_auth_chain
Use struct _val_result_chain in place of older struct val_internal_result

- In fails_to_answer_query(), look at rrsig in addition to answer information while checking if data_present
- Dont check the availability of an rrsig for a DNSKEY that is trusted.
- In assimilate_answers(), create authentication chain structures for the answers as well as proofs
- Separate out the portions in assimilate_answers() that deal with checking if answers are mutually consistent into a new function called check_conflicting_answers(). Since proofs are stored separately from other answers, we don't need to specifically check if SOA,NXT etc conflict with answers.
- If we received an answer for a glue fetch operation, don't claim that validation is possible.
- Link the chain of trust to either the qc_proof or qc_ans member for a pending query depending on if this answer was a proof of non-existence or no.
- Separate nsec and nsec3 processing into two different functions, nsec_proof_chk() and nsec3_proof_chk(), for readability reasons.
- Rename the older nsec_proof_check() function to prove_nsec_span_chk()

Revamp the process for creation of the val_result_chain structure. 
    - transform_single_result() changes a single val_internal_result_chain structure to val_result_chain. You can specifically give a "proof_result" structure to function as the container for proofs if the val_internal_result_chain structure is of the proof variety. 
    - val_internal_result_chain has the val_rc_is_proof member that says if it is a proof or no. 
    - As we process proofs of non-existence keep transforming them into the result structure. That way, we keep answers and any associated proofs in the same val_result_chain structure.
    - Perform sanity checks for wildcards before returning from val_resolve_and_check(). sanity checks for cnames and dnames will also be made in the future.
    - Add a new function prove_existence() that checks if the given type exists in the NSEC[3] for a given name
    - In sanity checks for non-existence proofs, check if the CNAME or DNAME bit is set for NSEC[3] record that proves a non-existent type.
    - Use transform_outstanding_results() to process all results that have not been stored in some val_result_chain structure after sanity checks have been performed.

------------------------------------------------------------------------
r2137 | hserus | 2006-10-16 09:54:16 -0400 (Mon, 16 Oct 2006) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Renamed qc_as in struct val_query_chain to qc_ans
Perform proper cleanup of learned_zones, learned_keys, learned_ds and the rrset in digest_response()
Add logic for identifying if the answer section contains a valid cname
Recognize the case where a proof of non-existence is returned with a positive answer
Modify digest_response() such that if we got a response for a zone where DNSSEC is enabled, but we had sent out our query without EDNS0, we perform a re-query.
In val_resquery_rcv() store answers and proofs in separate members of struct domain_info
In find_next_zonecut() look at the proofs in addition to the answers to see if we found the SOA record; also look at the rrsig (if we have one) to identify the zonecut information.

------------------------------------------------------------------------
r2136 | hserus | 2006-10-16 09:53:42 -0400 (Mon, 16 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_errors.h

Move VAL_A_RRSIG_VERIFIED close to all the "success" conditions
Add a new VAL_A_WCARD_VERIFIED state for assertions that were wildcard expanded.

------------------------------------------------------------------------
r2135 | hserus | 2006-10-16 09:53:23 -0400 (Mon, 16 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.c

Free the new di_answers and di_proofs members within the domain_info structure
Ensure correct initial state of rr_rec structures created by copy_rr_rec(), add_to_set() and add_to_sig()

------------------------------------------------------------------------
r2134 | hserus | 2006-10-16 09:53:01 -0400 (Mon, 16 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.h

Use the new name for struct _val_authentication_chain (struct val_digested_auth_chain)
Add prototype for is_trusted_zone()

------------------------------------------------------------------------
r2133 | hserus | 2006-10-16 09:52:30 -0400 (Mon, 16 Oct 2006) | 10 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/validator.h

Use VAL_FLAGS_DONT_VALIDATE in place of F_DONT_VALIDATE
Re-define the value of VAL_QUERY_MERGE_RRSETS since this was clashing with VAL_FLAGS_DONT_VALIDATE
Renamed struct _val_authentication_chain to struct val_digested_auth_chain
Renamed struct _val_result_chain to struct val_internal_result
The DNS response domain_info structure now has separate members for the answers and the proofs (di_answers, di_proofs) instead of a single di_rrset member

*** Note API change ****
Change the val_result_chain structure - Instead of the val_rc_trust member we now have separate members for the answers and the proofs (val_rc_answer,val_rc_proofs). Also keep track of the number of proofs using the val_rc_proof_count member. 


------------------------------------------------------------------------
r2132 | hserus | 2006-10-16 09:51:19 -0400 (Mon, 16 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

Use new name val_rc_answer instead of older val_rc_trust member in val_result_chain structure

------------------------------------------------------------------------
r2131 | hserus | 2006-10-16 09:51:04 -0400 (Mon, 16 Oct 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

Move openssl-related operations to val_crypto.c
Use new name val_rc_answer instead of older val_rc_trust member in val_result_chain structure 
Proofs are stored in (struct val_result_chain)->val_rc_proofs, use this in order to display proof information for the
authentication chain.

------------------------------------------------------------------------
r2130 | hserus | 2006-10-16 09:50:28 -0400 (Mon, 16 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_parse.c

Move openssl-related operations to val_crypto.c

------------------------------------------------------------------------
r2129 | hserus | 2006-10-16 09:50:08 -0400 (Mon, 16 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.h

Use the new name struct val_digested_auth_chain for older struct _val_authentication_chain 

------------------------------------------------------------------------
r2128 | hserus | 2006-10-16 09:49:12 -0400 (Mon, 16 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c

Use new name val_rc_trust instead of older val_rc_answer member in val_result_chain structure 
Check for NULL result returned from get_hostent_from_response

------------------------------------------------------------------------
r2127 | hserus | 2006-10-16 09:48:54 -0400 (Mon, 16 Oct 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.c

Move openssl-related operations to val_crypto.c
Handle the case where the DNSKEY and DS records have been wildcard-expanded (these are prohibited)
Use the new name for _val_authentication_chain (val_digested_auth_chain)
Set the status for assertions that have been wildcard expanded as VAL_A_WCARD_VERIFIED. The proof of existence of the expanded type is verified later on.

------------------------------------------------------------------------
r2126 | hserus | 2006-10-16 09:47:39 -0400 (Mon, 16 Oct 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_cache.c

Add a note on cache processing w.r.t CNAMEs

------------------------------------------------------------------------
r2125 | hserus | 2006-10-16 09:47:11 -0400 (Mon, 16 Oct 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/Makefile.in
   D /trunk/dnssec-tools/validator/libval/crypto
   A /trunk/dnssec-tools/validator/libval/val_crypto.c
   A /trunk/dnssec-tools/validator/libval/val_crypto.h

Remove the crypto directory
Add a new file called val_crypto.[ch] that contains all openssl-related operations.


------------------------------------------------------------------------
r2124 | hserus | 2006-10-16 09:44:53 -0400 (Mon, 16 Oct 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

- Remove unused parameter in find_rrset_len
- Combine compose_merged_answer() and compose_answer() into a single function.


------------------------------------------------------------------------
r2123 | hserus | 2006-10-16 09:44:05 -0400 (Mon, 16 Oct 2006) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

- Use the VAL_QUERY_MERGE_RRSETS flag in val_resolve_and_check so that multiple responses are returned in a manner
similar to res_query
- When operatating in daemon mode use a validator context so that cache and policy are properly made use of
- Since a common status value is stored for multiple proofs of non-existence, we only check test case result against this
single value.


------------------------------------------------------------------------
r2119 | rstory | 2006-10-13 11:57:01 -0400 (Fri, 13 Oct 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_debug.c

don't use (internal) const aware version of res_sym if p_*_sym are macros
------------------------------------------------------------------------
r2118 | tewok | 2006-10-12 21:57:48 -0400 (Thu, 12 Oct 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Added several local config file options:
	modify
	shading
	showskip

------------------------------------------------------------------------
r2117 | tewok | 2006-10-12 21:05:29 -0400 (Thu, 12 Oct 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Renamed paintcnt() to painter().
Reorganized some of the routines into functional groups.

------------------------------------------------------------------------
r2116 | tewok | 2006-10-12 20:07:17 -0400 (Thu, 12 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/Makefile
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/README


Updated the demo name.

------------------------------------------------------------------------
r2115 | tewok | 2006-10-12 20:03:22 -0400 (Thu, 12 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/README


Added description of rollerd-mayzones.

------------------------------------------------------------------------
r2114 | tewok | 2006-10-12 19:56:59 -0400 (Thu, 12 Oct 2006) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/Makefile
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/README
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/phaser
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/rc.blinkenlights
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/rundemo
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-db.cache
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-demo-smallset.rollrec
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-demo.rollrec
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-dummy.com
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-example.com
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-test.com
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-woof.com
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-xorn.com
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-yowzah.com
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones/save-zero.com


Demo with lots of domains.

------------------------------------------------------------------------
r2113 | tewok | 2006-10-12 19:46:34 -0400 (Thu, 12 Oct 2006) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/demos/rollerd-manyzones


New demo directory.

------------------------------------------------------------------------
r2112 | tewok | 2006-10-12 17:15:17 -0400 (Thu, 12 Oct 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Fetch rollerd's sleep-time when the infostripe is updated.
Handle changes in rollerd's rollrec file or sleep-time.

------------------------------------------------------------------------
r2111 | tewok | 2006-10-12 17:13:05 -0400 (Thu, 12 Oct 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Add a couple display() calls to tell blinkenlights when the rollrec file or
sleep-time have changed.

------------------------------------------------------------------------
r2110 | tewok | 2006-10-12 11:47:36 -0400 (Thu, 12 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Get rid of some command line options.  These are controlled by menu commands.

------------------------------------------------------------------------
r2109 | tewok | 2006-10-11 21:52:42 -0400 (Wed, 11 Oct 2006) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Reconstruct the zone table every N screen repaints.  This is required
because the screen update responsiveness degrades the longer the program
runs.  Periodic table reconstructions overcome this.

Track the count of rolled and skipped zones.

------------------------------------------------------------------------
r2108 | tewok | 2006-10-11 20:11:41 -0400 (Wed, 11 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Added the -quiet option to stop printed output.

------------------------------------------------------------------------
r2107 | tewok | 2006-10-06 15:43:57 -0400 (Fri, 06 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Deleted an unnecessary grid() management call.

------------------------------------------------------------------------
r2106 | rstory | 2006-10-06 13:07:52 -0400 (Fri, 06 Oct 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

- daemon mode: it works!
  - add signal handler for clean shutdown on sigterm/sigint
  - clear cache before exit
  - send responses

------------------------------------------------------------------------
r2105 | rstory | 2006-10-06 13:03:15 -0400 (Fri, 06 Oct 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

- transform_results()
  - use new copy_rr_rec_list so responses with multiple answers works
  - remove audit comment

------------------------------------------------------------------------
r2104 | rstory | 2006-10-06 13:01:28 -0400 (Fri, 06 Oct 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.c
   M /trunk/dnssec-tools/validator/libval/val_support.h

new copy_rr_rec_list() function
------------------------------------------------------------------------
r2103 | rstory | 2006-10-05 18:29:39 -0400 (Thu, 05 Oct 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

export compose_answer
------------------------------------------------------------------------
r2102 | tewok | 2006-10-05 13:49:03 -0400 (Thu, 05 Oct 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Added an option to stop shading in the status column.
Added a few descriptive notes in the pod.  (To be expanded later.)

------------------------------------------------------------------------
r2101 | rstory | 2006-10-05 10:53:07 -0400 (Thu, 05 Oct 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

- clean up main
  - move selftest code into function
  - move selftest and error checks earlier
    - allows 2 levels of indention to be removed
- run indent

------------------------------------------------------------------------
r2100 | rstory | 2006-10-05 10:24:14 -0400 (Thu, 05 Oct 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

start support for daemon mode: listen, query & validate; no responses yet
------------------------------------------------------------------------
r2099 | rstory | 2006-10-05 09:33:20 -0400 (Thu, 05 Oct 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.c

get rid of newline in time string
------------------------------------------------------------------------
r2098 | rstory | 2006-10-05 09:28:55 -0400 (Thu, 05 Oct 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

convert wire name to ascii before logging
------------------------------------------------------------------------
r2097 | rstory | 2006-10-05 09:26:35 -0400 (Thu, 05 Oct 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

remove unused variable
------------------------------------------------------------------------
r2096 | rstory | 2006-10-05 09:24:26 -0400 (Thu, 05 Oct 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.c

get rid of newline in time string
------------------------------------------------------------------------
r2095 | rstory | 2006-10-05 07:51:55 -0400 (Thu, 05 Oct 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/crypto/val_dsasha1.c
   M /trunk/dnssec-tools/validator/libval/crypto/val_rsamd5.c
   M /trunk/dnssec-tools/validator/libval/crypto/val_rsasha1.c
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_verify.c

remove linefeeds from val_log messages
------------------------------------------------------------------------
r2094 | tewok | 2006-10-04 23:44:45 -0400 (Wed, 04 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Added some use warnings.

------------------------------------------------------------------------
r2093 | tewok | 2006-10-04 18:22:11 -0400 (Wed, 04 Oct 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Fuzz-up the time data for display.  This keeps the display from growing
overly huge when multiple time units would otherwise be displayed.

------------------------------------------------------------------------
r2092 | tewok | 2006-10-04 18:03:51 -0400 (Wed, 04 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Send raw wait-time to display program, instead of cooked version.

------------------------------------------------------------------------
r2091 | rstory | 2006-10-04 17:53:53 -0400 (Wed, 04 Oct 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.c

fix typo
------------------------------------------------------------------------
r2090 | tewok | 2006-10-04 17:17:14 -0400 (Wed, 04 Oct 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/timetrans.pm


Added fuzzytimetrans(), which gives a single unit of time conversion.
Reorganized pod.

------------------------------------------------------------------------
r2089 | tewok | 2006-10-04 16:31:42 -0400 (Wed, 04 Oct 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Moved some globals to the globals section.
A little more code reorg.

------------------------------------------------------------------------
r2088 | tewok | 2006-10-04 16:24:14 -0400 (Wed, 04 Oct 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Allow the Zone Control menu to be a tear-off menu.
Added an information row at the top of the display.
Fixed a small bug with click selection.
Reordered a few routines.

------------------------------------------------------------------------
r2087 | rstory | 2006-10-04 15:12:04 -0400 (Wed, 04 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_cache.c
   M /trunk/dnssec-tools/validator/libval/val_support.c
   M /trunk/dnssec-tools/validator/libval/validator.h

- add ttl expiration time field to rrset struct
- add simplistic ttl expiration checks when querying cache

------------------------------------------------------------------------
r2086 | tewok | 2006-10-04 13:27:22 -0400 (Wed, 04 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Added a menu toggle to display/hide skipped zones.

------------------------------------------------------------------------
r2085 | tewok | 2006-10-03 23:14:46 -0400 (Tue, 03 Oct 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Added a menu command to allow/disallow execution of commands for modifying
rollerd's processing.  (Really only useful for demos, so one doesn't
accidentally do something they didn't intend.)

------------------------------------------------------------------------
r2084 | tewok | 2006-10-03 22:17:25 -0400 (Tue, 03 Oct 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Fix an egregious bug that made the display look ookie if rolling zones were
switched to skipping zones.

------------------------------------------------------------------------
r2083 | tewok | 2006-10-03 21:09:37 -0400 (Tue, 03 Oct 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Add the ability to select a zone by clicking in a zone stripe.
Add keyboard accelerators for the "Roll Selected Zone" and "Skip Selected
Zone" commands.
Modified the text in the status column.

------------------------------------------------------------------------
r2082 | baerm | 2006-10-03 17:22:20 -0400 (Tue, 03 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

update service handling by getaddrinfo (ports should
be set correctly now)

------------------------------------------------------------------------
r2081 | rstory | 2006-10-03 15:12:40 -0400 (Tue, 03 Oct 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_debug.c

remove bogus/test struct member
------------------------------------------------------------------------
r2080 | rstory | 2006-10-03 14:28:26 -0400 (Tue, 03 Oct 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/validator.h

remove tabs from macros
------------------------------------------------------------------------
r2079 | tewok | 2006-10-02 14:39:58 -0400 (Mon, 02 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Fixed getzone()'s header comments.

------------------------------------------------------------------------
r2078 | tewok | 2006-10-02 14:36:58 -0400 (Mon, 02 Oct 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Added support for rolling/skipping a single user-specified zone.

------------------------------------------------------------------------
r2077 | tewok | 2006-09-30 17:15:35 -0400 (Sat, 30 Sep 2006) | 9 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Modified to shrink a skipped zone's set of rows down to a single row.
Got rid of some unused variables and arguments.
Restructured zonestripe() to have the skipped-zone drawing distinct from 
the rest of the code.
Repaint the whole window if rollerd says a zone's roll/skip status has
changed.
Simplified and fixed color assignment.

------------------------------------------------------------------------
r2076 | tewok | 2006-09-30 14:40:42 -0400 (Sat, 30 Sep 2006) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Reworked the color-choosing algorithm.  In addition to it actually being
understandable now, it also allows more than three zones to be displayed
at a time.
Added some comments.
Renamed a few (future) option flags.
Added some packing options to keep the menu bar from moving on window resizes.

------------------------------------------------------------------------
r2075 | tewok | 2006-09-29 21:51:52 -0400 (Fri, 29 Sep 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Added better option processing.
Added some menu options to run rollctl commands.

------------------------------------------------------------------------
r2074 | rstory | 2006-09-29 16:56:15 -0400 (Fri, 29 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_debug.c

define local res_sym lookalike w/const char*, to get rid of a slew of compiler complaints
------------------------------------------------------------------------
r2073 | rstory | 2006-09-29 16:54:56 -0400 (Fri, 29 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/resolver.h

add prototype for ns_samename iff missing
------------------------------------------------------------------------
r2072 | rstory | 2006-09-29 16:54:18 -0400 (Fri, 29 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in
   M /trunk/dnssec-tools/validator/include/validator-config.h.in

add decl check for ns_samename
------------------------------------------------------------------------
r2071 | rstory | 2006-09-29 16:19:05 -0400 (Fri, 29 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/configure

run autoconf
------------------------------------------------------------------------
r2070 | rstory | 2006-09-29 16:18:38 -0400 (Fri, 29 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/configure.in

remove double-print of result
------------------------------------------------------------------------
r2069 | tewok | 2006-09-29 15:19:13 -0400 (Fri, 29 Sep 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Added -display and -nodisplay to start and stop rollerd's
graphical display program.

------------------------------------------------------------------------
r2068 | tewok | 2006-09-29 15:18:06 -0400 (Fri, 29 Sep 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Added a user command to allow starting and stopping of rollerd's graphical
display from rollctl.

------------------------------------------------------------------------
r2067 | tewok | 2006-09-29 15:15:24 -0400 (Fri, 29 Sep 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Added support for rollctl commands to start and stop rollerd's
graphical display.

------------------------------------------------------------------------
r2066 | tewok | 2006-09-29 13:47:42 -0400 (Fri, 29 Sep 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/blinkenlights


Modified comments to refer to rollerd's new -display option instead of the
old -demo.

------------------------------------------------------------------------
r2065 | tewok | 2006-09-29 13:31:18 -0400 (Fri, 29 Sep 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/INFO
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL
   M /trunk/dnssec-tools/tools/scripts/README


Updated for moving blinkenlights into this directory.

------------------------------------------------------------------------
r2064 | tewok | 2006-09-29 13:27:15 -0400 (Fri, 29 Sep 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/rundemo


Changed "rollerd -demo" to "rollerd -display".

------------------------------------------------------------------------
r2063 | tewok | 2006-09-29 13:26:36 -0400 (Fri, 29 Sep 2006) | 3 lines
Changed paths:
   D /trunk/dnssec-tools/tools/demos/rollerd-basic/blinkenlights
   A /trunk/dnssec-tools/tools/scripts/blinkenlights (from /trunk/dnssec-tools/tools/demos/rollerd-basic/blinkenlights:2062)


Moved blinkenlights to general scripts directory.

------------------------------------------------------------------------
r2062 | tewok | 2006-09-29 13:17:25 -0400 (Fri, 29 Sep 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Renamed the -demo option to -display.
Modified pod to describe -display.

------------------------------------------------------------------------
r2061 | rstory | 2006-09-28 17:13:40 -0400 (Thu, 28 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

add headers for solaris
------------------------------------------------------------------------
r2060 | rstory | 2006-09-28 17:13:06 -0400 (Thu, 28 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

add prototype/parameter cast for solaris
------------------------------------------------------------------------
r2059 | rstory | 2006-09-28 17:11:19 -0400 (Thu, 28 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.c

add header/prototype for solairs
------------------------------------------------------------------------
r2058 | lfoster | 2006-09-28 17:02:05 -0400 (Thu, 28 Sep 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/TrustMan

removed some old debugging code/comments.

------------------------------------------------------------------------
r2057 | rstory | 2006-09-28 17:01:37 -0400 (Thu, 28 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/getaddr.c
   M /trunk/dnssec-tools/validator/libsres/nsap_addr.c
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

add headers for solaris
------------------------------------------------------------------------
r2056 | rstory | 2006-09-27 16:33:36 -0400 (Wed, 27 Sep 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

- don't dereference NULL ptr
- add ability to run a range of tests

------------------------------------------------------------------------
r2055 | rstory | 2006-09-27 15:25:51 -0400 (Wed, 27 Sep 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/gethost.c

fix bad commit; this is r2040 + indent

------------------------------------------------------------------------
r2054 | rstory | 2006-09-27 15:06:21 -0400 (Wed, 27 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/getaddr.c
   M /trunk/dnssec-tools/validator/apps/gethost.c
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

run indent
------------------------------------------------------------------------
r2053 | rstory | 2006-09-27 14:22:45 -0400 (Wed, 27 Sep 2006) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

- is_trusted_key(): clear dnskey between iterations
- prove_nsec_wildcard_check()
  - check for null parameter
  - don't memcpy from null ptr
  - update find_next_zonecut calls to pass context
- ask_cache(): make sure to do 'deep' release of resources

------------------------------------------------------------------------
r2052 | rstory | 2006-09-27 14:11:16 -0400 (Wed, 27 Sep 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

- get_addrinfo_from_result()
  - use sizeof() instead of hardcoded size
  - release unused memory before return
  - strdup canonname

------------------------------------------------------------------------
r2051 | rstory | 2006-09-27 14:08:32 -0400 (Wed, 27 Sep 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_parse.c

- minor optimizations to TOK_IN_STR macro
- val_parse_dnskey_string()
  - cleanup memory for error cases
  - clear passed ptr if we released the memory

------------------------------------------------------------------------
r2050 | rstory | 2006-09-27 14:06:13 -0400 (Wed, 27 Sep 2006) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.c

- make_sigfield(): check for overflow before memcpy
- find_key_for_tag()
  - check for null param
  - check function rc and continue on error
  - free allocated public_key if not used
- verify_next_assertion(): free allocated public_key if not used

------------------------------------------------------------------------
r2049 | rstory | 2006-09-27 14:04:00 -0400 (Wed, 27 Sep 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.c

- res_sq_free_rrset_recs(): free all name servers
- find_rr_set(): don't try to clone null ptr
- decompress(): use sizeof(var) instead of hardcoded size

------------------------------------------------------------------------
r2048 | rstory | 2006-09-27 14:00:17 -0400 (Wed, 27 Sep 2006) | 13 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.h

- SAVE_RR_TO_LIST 
  - move from header to above function where used
  - add appropriate cleanup on return cases
- digest_response()
  - free learned_* rrsets before returning
  - add 'else' to save unnecessary comparison
- val_resquery_send(): rename var to *_p to indicate ascii domain
- val_resquery_rcv()
  - rename var to *_p to indicate ascii domain
  - free response_data if not used
  - free response domain info when done w/it
- find_next_zonecut(): add context param so no temporary needed

------------------------------------------------------------------------
r2047 | rstory | 2006-09-27 13:47:34 -0400 (Wed, 27 Sep 2006) | 11 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

- add policy_cleanup() to release allocated memory
- use atexit to register policy_cleanup() when memory allocated
- use sizeof() instead of macro for size parameter
- destroy_valpol(): traverse plist to release all memory
- rename some vars to *_p to indicate they are ascii names, not wire format
- read_root_hints_file()
  - use local static to return w/out action if already called
  - don't use SAVE_RR_TO_LIST macro; instead copy code it and add appropriate
    resource cleanup in error cases
  - cleanup memory before return

------------------------------------------------------------------------
r2046 | rstory | 2006-09-27 13:27:32 -0400 (Wed, 27 Sep 2006) | 9 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_cache.c

- add/use new LOCK_DOWNGRADE macro
- stow_info(): fix memory leak
- get_cached_rrset(): get lock sooner
- stow_root_info()
  - get lock sooner
  - return w/no action if we already read root info
  - make sure to release lock for all exit paths
- free_validator_cache(): free root_info

------------------------------------------------------------------------
r2045 | rstory | 2006-09-27 13:21:02 -0400 (Wed, 27 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

free cache on exit
------------------------------------------------------------------------
r2044 | hserus | 2006-09-27 10:23:46 -0400 (Wed, 27 Sep 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/include/validator-config.h.in

Add configure and header files generated after adding checks for gethostbyname2 and hstrerror

------------------------------------------------------------------------
r2043 | hserus | 2006-09-27 09:30:15 -0400 (Wed, 27 Sep 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_assertion.h
   M /trunk/dnssec-tools/validator/libval/val_verify.c
   M /trunk/dnssec-tools/validator/libval/val_verify.h
   M /trunk/dnssec-tools/validator/libval/validator.h

Don't expose the union within val_authentication_chain in the API. Instead, create internal versions
_val_authentication_chain and _val_result_chain to handle this data structure. This keeps the structures 
in conformance with draft-hayatnagarkar-dnsext-validator-api 

------------------------------------------------------------------------
r2042 | hserus | 2006-09-26 14:59:57 -0400 (Tue, 26 Sep 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

Return EAI_SERVICE from process_service_and_hints() instead of NULL

------------------------------------------------------------------------
r2041 | hserus | 2006-09-26 14:53:34 -0400 (Tue, 26 Sep 2006) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/validator/libsres/nsap_addr.h

Add prototypes for inet_nsap_addr and inet_nsap_ntoa

------------------------------------------------------------------------
r2040 | hserus | 2006-09-26 14:51:58 -0400 (Tue, 26 Sep 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/getaddr.c
   M /trunk/dnssec-tools/validator/apps/gethost.c
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in
   M /trunk/dnssec-tools/validator/include/validator-config.h.in
   M /trunk/dnssec-tools/validator/libsres/ns_print.c
   M /trunk/dnssec-tools/validator/libsres/nsap_addr.c
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_log.h

Allow compilation on Solaris

------------------------------------------------------------------------
r2039 | hardaker | 2006-09-25 19:41:40 -0400 (Mon, 25 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

turn of GUI:Long verbose
------------------------------------------------------------------------
r2038 | hardaker | 2006-09-25 19:41:13 -0400 (Mon, 25 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm

remove some debugging statements
------------------------------------------------------------------------
r2037 | hardaker | 2006-09-25 19:40:07 -0400 (Mon, 25 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

remove some debugging statements
------------------------------------------------------------------------
r2036 | hardaker | 2006-09-25 19:28:43 -0400 (Mon, 25 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

- document that the -algorithm flag is passed to dnssec-keygen
------------------------------------------------------------------------
r2035 | hardaker | 2006-09-25 19:27:55 -0400 (Mon, 25 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm

- Changed a number of things to make it more web-friendly and web-safer
------------------------------------------------------------------------
r2034 | hardaker | 2006-09-25 19:27:26 -0400 (Mon, 25 Sep 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

- Add a zone with a different algorithm
- Add a unsigned sub-zone

------------------------------------------------------------------------
r2033 | hardaker | 2006-09-25 19:26:27 -0400 (Mon, 25 Sep 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

Make CGI-usable

------------------------------------------------------------------------
r2032 | hardaker | 2006-09-25 19:24:51 -0400 (Mon, 25 Sep 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Makefile.PL

Add DESTDIR to the mix

------------------------------------------------------------------------
r2031 | baerm | 2006-09-25 19:20:06 -0400 (Mon, 25 Sep 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

changed val_getaddrinfo processing and process_service_and_hints 
to handle service names and numbers

------------------------------------------------------------------------
r2030 | hserus | 2006-09-25 16:20:20 -0400 (Mon, 25 Sep 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.h
   M /trunk/dnssec-tools/validator/libval/val_support.c
   M /trunk/dnssec-tools/validator/libval/val_support.h

Save the response header bytes in rrset_rec; copy and free these fields where ever appropriate.

------------------------------------------------------------------------
r2029 | hserus | 2006-09-25 16:16:57 -0400 (Mon, 25 Sep 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Remove redundant check

------------------------------------------------------------------------
r2028 | rstory | 2006-09-25 15:25:12 -0400 (Mon, 25 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

restore null ptr check lost somehow during indent checkins
------------------------------------------------------------------------
r2027 | rstory | 2006-09-25 14:57:03 -0400 (Mon, 25 Sep 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/val_log.h
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.h
   M /trunk/dnssec-tools/validator/libval/val_verify.c
   M /trunk/dnssec-tools/validator/libval/validator.h

- second pass of indent

------------------------------------------------------------------------
r2026 | rstory | 2006-09-25 14:06:07 -0400 (Mon, 25 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_assertion.h
   M /trunk/dnssec-tools/validator/libval/val_cache.c
   M /trunk/dnssec-tools/validator/libval/val_cache.h
   M /trunk/dnssec-tools/validator/libval/val_context.c
   M /trunk/dnssec-tools/validator/libval/val_context.h
   M /trunk/dnssec-tools/validator/libval/val_errors.h
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.h
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.h
   M /trunk/dnssec-tools/validator/libval/val_log.c
   M /trunk/dnssec-tools/validator/libval/val_log.h
   M /trunk/dnssec-tools/validator/libval/val_parse.c
   M /trunk/dnssec-tools/validator/libval/val_parse.h
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_policy.h
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.h
   M /trunk/dnssec-tools/validator/libval/val_support.c
   M /trunk/dnssec-tools/validator/libval/val_support.h
   M /trunk/dnssec-tools/validator/libval/val_verify.c
   M /trunk/dnssec-tools/validator/libval/val_verify.h
   M /trunk/dnssec-tools/validator/libval/val_x_query.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.h
   M /trunk/dnssec-tools/validator/libval/validator.h

run indent
------------------------------------------------------------------------
r2025 | hserus | 2006-09-25 11:15:24 -0400 (Mon, 25 Sep 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

Use the public "struct val_rrset" member in "struct val_authentication_chain" instead of the private "struct val_rrset_digested"
member while processing results from val_resolve_and_check()  

------------------------------------------------------------------------
r2024 | rstory | 2006-09-25 10:59:38 -0400 (Mon, 25 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

don't malloc 0 bytes
------------------------------------------------------------------------
r2023 | hserus | 2006-09-25 10:14:58 -0400 (Mon, 25 Sep 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in
   M /trunk/dnssec-tools/validator/include/validator-config.h.in

Add ability to enable NSEC3 using the "--with-nsec3" flag

------------------------------------------------------------------------
r2022 | hardaker | 2006-09-22 18:52:47 -0400 (Fri, 22 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt
   M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt

quote RFCs instead of older internet-drafts
------------------------------------------------------------------------
r2021 | hserus | 2006-09-22 17:34:42 -0400 (Fri, 22 Sep 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Stop the compiler from complaining about uninitialized usage of a variable.

------------------------------------------------------------------------
r2020 | hserus | 2006-09-22 16:53:17 -0400 (Fri, 22 Sep 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/etc/dnsval.conf

Add TA and zone-security-expection for ws.nsec3.org

------------------------------------------------------------------------
r2019 | hserus | 2006-09-22 16:52:55 -0400 (Fri, 22 Sep 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.h

Change SAVE_RR_TO_LIST macro so that it can be used for all different types of rrset types in digest_response()


------------------------------------------------------------------------
r2018 | hserus | 2006-09-22 16:52:36 -0400 (Fri, 22 Sep 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.h

Add prototypes for new nsec3-related functions.

------------------------------------------------------------------------
r2017 | hserus | 2006-09-22 16:52:21 -0400 (Fri, 22 Sep 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_errors.h

Create two new categories of error codes for the "cannot do anything further" states: one where we should check proof of non existence, and the other where we should not.
Add definitions for VAL_R_PROVABLY_UNSECURE, VAL_PROVABLY_UNSECURE and VAL_NONEXISTENT_NAME_OPTOUT


------------------------------------------------------------------------
r2016 | hserus | 2006-09-22 16:52:01 -0400 (Fri, 22 Sep 2006) | 9 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

Use correct bounds while constructing a presentation format domain name
Changes to reflect removal of non-useful members from struct delegation_info
Since (struct name_server *)->ns_name_n is now an array, don't allocate memory for it.
Make it possible for digest_response() to identify the header bytes in the reponse
Stow zone information only when we actually follow referrals
Removed the entire cname logic because it didn't seem to make any sense. This has to be reworked.
Fix the referral and glue-fetching logic.


------------------------------------------------------------------------
r2015 | hserus | 2006-09-22 16:51:42 -0400 (Fri, 22 Sep 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.c

Use correct array size for specifying on the wire domain name
Implement base32 encoding for NSEC3 hash names
Implement logic for comparison of hash values
In nsec_sig_match make it possible to add multiple RRSIGs to a record set.


------------------------------------------------------------------------
r2014 | hserus | 2006-09-22 16:51:22 -0400 (Fri, 22 Sep 2006) | 29 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Add support for nsec3:
    - Properly detect when a given type is set for an NSEC or NSEC3 record.
    - check hash span
    - recognizing this record type to be a proof of non-existence
    - checking if there are conflicting answers in general
    - computing nsec3 hash with given params
    - span check and wildcard check
    - identification of VAL_NONEXISTENT_NAME_OPTOUT
Rearrange code for proving non-existence
    - There is no initial check made to see if NSEC_is_wrong_answer
    - add separate functions for span check and wildcard check
    - branch to the correct check depending on nsec3 or nsec
    - if we are not able to prove non-existence but the zone is
      provable insecure then we extract the code from the response header
      and return that to the user
Changed the logic for identifying next name server where the query should be directed to
    - look into our cache first (we only cache name server info if we actually follwed referrals)
    - if nothing matches, use the default name server
    - else recurse from root
Fix glue fetching logic
Identify condition of DS signed by unknown algorithms as that of provably insecure
Set the authentication chain status to VAL_R_PROVABLY_UNSECURE when we detect this condition.
add_to_authentication_chain() now takes a rrset param instead of domain_info since that is really what is needed
verify_provably_unsecure() takes a new param for the query. We need to know this in order to break out of a potential infinite loop. verify_and_validate() also changes to accomodate this.
Identify two new categories of error codes for the "cannot do anything further" states: one where we should check proof of non existence, and the other where we should not. 
Use correct bounds while constructing a presentation format domain name
Use correct array size for specifying on the wire domain name


------------------------------------------------------------------------
r2013 | hserus | 2006-09-22 16:49:56 -0400 (Fri, 22 Sep 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.h

Add policy definition for NSEC3 maximum allowable iterations
Add prototypes for NSEC3 functions.


------------------------------------------------------------------------
r2012 | hserus | 2006-09-22 16:49:39 -0400 (Fri, 22 Sep 2006) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Define a policy for specifying maximum allowable NSEC3 iterations
Use correct bounds while constructing on the wire domain name
Correctly break out of loop when checking for policy relevance
Since (struct name_server *)->ns_name_n is now an array, don't allocate memory for it.
Plug a memory leak for the name server list.
Since we're not stowing the root name server information in the cache, free-up this memory.


------------------------------------------------------------------------
r2011 | hserus | 2006-09-22 16:49:14 -0400 (Fri, 22 Sep 2006) | 10 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/validator.h

Moved definitions for NS_MAXDNAME and NS_MAXCDNAME to resolver
Define separate answer types for NSEC and NSEC3 instead of a single NXT type
Add definitions for different hash algorithm types including the ones used for signaling NSEC3
Remove the query section from val_rrset. This is not useful. (Note API change.)
Use correct array size for specifying on the wire domain name
Remove a bunch of non-useful members from struct delegation_info
Dont assume that DS hash will always be SHA1
Define the NSEC3 rdata structure


------------------------------------------------------------------------
r2010 | hserus | 2006-09-22 16:48:44 -0400 (Fri, 22 Sep 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_context.c

In val_switch_policy_scope() look at all policies in the file to see if they are relevant.

------------------------------------------------------------------------
r2009 | hserus | 2006-09-22 16:48:20 -0400 (Fri, 22 Sep 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

Use correct bounds while constructing a presentation format domain name
Add text string for displaying the VAL_PROVABLY_UNSECURE code.


------------------------------------------------------------------------
r2008 | hserus | 2006-09-22 16:47:58 -0400 (Fri, 22 Sep 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_parse.h

Add prototypes for new NSEC3-related functions.


------------------------------------------------------------------------
r2007 | hserus | 2006-09-22 16:47:38 -0400 (Fri, 22 Sep 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_parse.c

Use definitions for hash algorithms intead of their values.
Add logic for parsing an NSEC3 resource record


------------------------------------------------------------------------
r2006 | hserus | 2006-09-22 16:47:22 -0400 (Fri, 22 Sep 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c

Use correct bounds while constructing a presentation format domain name


------------------------------------------------------------------------
r2005 | hserus | 2006-09-22 16:46:44 -0400 (Fri, 22 Sep 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.c

Use definitions for hash algorithms intead of their values.
Add support for NSEC3 signaling
Use correct bounds while constructing on the wire domain name
Implement hash comparison operation


------------------------------------------------------------------------
r2004 | hserus | 2006-09-22 16:46:16 -0400 (Fri, 22 Sep 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_cache.c

Use correct bounds while constructing on the wire domain name
Don't store the root hints information in the name server cache. This is to prevent queries from always being sent to the root even when a default
name server is present.


------------------------------------------------------------------------
r2003 | hserus | 2006-09-22 16:45:42 -0400 (Fri, 22 Sep 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

Use correct bounds while constructing on the wire domain name


------------------------------------------------------------------------
r2002 | hserus | 2006-09-22 16:43:37 -0400 (Fri, 22 Sep 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

Added test cases for NSEC3
Print test case name and result of test case on the same line.
Modified expected value for test cases 67-72. Still need to think about how we're going to handle 
proofs when answers are also returned.


------------------------------------------------------------------------
r2001 | hserus | 2006-09-22 16:43:06 -0400 (Fri, 22 Sep 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_query.c
   M /trunk/dnssec-tools/validator/libsres/res_support.c

Don't allocate memory for (struct name_server *)->ns_name_n since this is now an array

------------------------------------------------------------------------
r2000 | hserus | 2006-09-22 16:42:27 -0400 (Fri, 22 Sep 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/resolver.h

Added NSEC3 definitions
Moved definition of NS_MAXDNAME and NS_MAXCDNAME from validator.h to this file
Changed type of ns_name_n in struct name_server from pointer to array of fixed length.


------------------------------------------------------------------------
r1999 | hserus | 2006-09-22 16:41:50 -0400 (Fri, 22 Sep 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_debug.c

Added NSEC3 definitions

------------------------------------------------------------------------
r1998 | rstory | 2006-09-22 13:51:08 -0400 (Fri, 22 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/apps/getaddr.c

add support for new logging stuff
------------------------------------------------------------------------
r1997 | rstory | 2006-09-22 13:38:31 -0400 (Fri, 22 Sep 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/validator.h

- removed unused VAL_LOG_MASK
- don't use LOG_PERROR w/syslog; users can use stderr log handler
- remove condition for network logging definitions

------------------------------------------------------------------------
r1996 | rstory | 2006-09-22 13:35:03 -0400 (Fri, 22 Sep 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

-use new logging mechanism

------------------------------------------------------------------------
r1995 | rstory | 2006-09-22 13:32:34 -0400 (Fri, 22 Sep 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c
   M /trunk/dnssec-tools/validator/libval/val_log.h

- rename name -> name_p (for consistency) in val_log_assertion
- include res_debug.h if needed
- completely rework logging to allow for multiple independent log destinations
  with their own debug level. supports file, syslog, stderr, stdout, udp 

------------------------------------------------------------------------
r1994 | hardaker | 2006-09-22 13:31:11 -0400 (Fri, 22 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/timetrans.pm

turned into a proper perl module so that things like RPM packages it correctly; techincally it didn't need it's own name space but it is 'cleaner' and less prone to conflict
------------------------------------------------------------------------
r1993 | hardaker | 2006-09-21 19:43:05 -0400 (Thu, 21 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/firefox.spec

udpate to firefox 1.5.0.7
------------------------------------------------------------------------
r1992 | hardaker | 2006-09-21 19:42:25 -0400 (Thu, 21 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/dist/dnssec-tools.spec

Remove broken BuildArch: specifier; it's not a per-package option unfortunately
------------------------------------------------------------------------
r1991 | hardaker | 2006-09-21 18:24:34 -0400 (Thu, 21 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/dist/dnssec-tools.spec

another update of the spec file for a fedora compliant build
------------------------------------------------------------------------
r1986 | hardaker | 2006-09-20 22:50:58 -0400 (Wed, 20 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow

minor option usuability updates and more commenting of the code
------------------------------------------------------------------------
r1985 | rstory | 2006-09-19 18:21:54 -0400 (Tue, 19 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

add include for solaris
------------------------------------------------------------------------
r1984 | rstory | 2006-09-19 15:44:11 -0400 (Tue, 19 Sep 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_query.c

- response_recv()
  - minor readability tweak
  - free recvd answer if caller won't expect answer (plug leak)
  - return error if we don't have the return value we expect

------------------------------------------------------------------------
r1983 | rstory | 2006-09-19 15:40:54 -0400 (Tue, 19 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.c

null pointer checks
------------------------------------------------------------------------
r1982 | rstory | 2006-09-19 15:39:42 -0400 (Tue, 19 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/ns_name.c

maintainability: rename l0 to l_tmp
------------------------------------------------------------------------
r1981 | rstory | 2006-09-16 11:12:41 -0400 (Sat, 16 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_query.c

wire length must be < NS_MAXCDNAME, not NS_MAXDNAME
------------------------------------------------------------------------
r1980 | rstory | 2006-09-16 11:08:52 -0400 (Sat, 16 Sep 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/ns_name.c
   M /trunk/dnssec-tools/validator/libsres/ns_parse.c
   M /trunk/dnssec-tools/validator/libsres/ns_print.c
   M /trunk/dnssec-tools/validator/libsres/ns_samedomain.c
   M /trunk/dnssec-tools/validator/libsres/res_debug.c
   M /trunk/dnssec-tools/validator/libsres/res_mkquery.c

sizeof x -> sizeof(x)

------------------------------------------------------------------------
r1979 | rstory | 2006-09-15 14:02:35 -0400 (Fri, 15 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/base64.c
   M /trunk/dnssec-tools/validator/libsres/ns_name.c
   M /trunk/dnssec-tools/validator/libsres/ns_netint.c
   M /trunk/dnssec-tools/validator/libsres/ns_parse.c
   M /trunk/dnssec-tools/validator/libsres/ns_print.c
   M /trunk/dnssec-tools/validator/libsres/ns_samedomain.c
   M /trunk/dnssec-tools/validator/libsres/ns_ttl.c
   M /trunk/dnssec-tools/validator/libsres/nsap_addr.c
   M /trunk/dnssec-tools/validator/libsres/res_comp.c
   M /trunk/dnssec-tools/validator/libsres/res_debug.c
   M /trunk/dnssec-tools/validator/libsres/res_debug.h
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.c
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.h
   M /trunk/dnssec-tools/validator/libsres/res_mkquery.c
   M /trunk/dnssec-tools/validator/libsres/res_mkquery.h
   M /trunk/dnssec-tools/validator/libsres/res_query.c
   M /trunk/dnssec-tools/validator/libsres/res_support.c
   M /trunk/dnssec-tools/validator/libsres/res_support.h
   M /trunk/dnssec-tools/validator/libsres/res_tsig.c
   M /trunk/dnssec-tools/validator/libsres/res_tsig.h
   M /trunk/dnssec-tools/validator/libsres/resolver.h

run indent
------------------------------------------------------------------------
r1978 | rstory | 2006-09-15 10:16:31 -0400 (Fri, 15 Sep 2006) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/validator/apps/.indent.pro
   A /trunk/dnssec-tools/validator/libsres/.indent.pro
   A /trunk/dnssec-tools/validator/libval/.indent.pro

options file for indent

------------------------------------------------------------------------
r1977 | rstory | 2006-09-14 18:41:01 -0400 (Thu, 14 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_parse.c

add headers for (incomplete) OpenBSD port
------------------------------------------------------------------------
r1976 | rstory | 2006-09-14 18:40:28 -0400 (Thu, 14 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

don't include nameser_compat.h or header.h if nameser defines dns header struct
------------------------------------------------------------------------
r1975 | rstory | 2006-09-14 18:38:18 -0400 (Thu, 14 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

check for macros before using them
------------------------------------------------------------------------
r1974 | rstory | 2006-09-14 18:37:31 -0400 (Thu, 14 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_debug.h
   M /trunk/dnssec-tools/validator/libsres/resolver.h
   M /trunk/dnssec-tools/validator/libval/validator.h

defines and conditional prototypes for (incomplete) OpenBSD port
------------------------------------------------------------------------
r1973 | rstory | 2006-09-14 18:35:38 -0400 (Thu, 14 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/configure.in

add some checks for (incomplete) OpenBSD port
------------------------------------------------------------------------
r1972 | tewok | 2006-09-11 15:55:58 -0400 (Mon, 11 Sep 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/blinkenlights


Added a configuration file to easily change several pieces of the demo
display.  The color of skipped zones and the fontsize of the whole display
may be modified.
Fixed a couple typos.

------------------------------------------------------------------------
r1971 | tewok | 2006-09-11 15:20:52 -0400 (Mon, 11 Sep 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/rundemo


Simplified log file reference.

------------------------------------------------------------------------
r1970 | tewok | 2006-09-11 15:19:06 -0400 (Mon, 11 Sep 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/rundemo


Zap the *correct* file.

------------------------------------------------------------------------
r1969 | tewok | 2006-09-11 15:16:32 -0400 (Mon, 11 Sep 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/blinkenlights


Fixed an array-wrapping bug.

------------------------------------------------------------------------
r1968 | tewok | 2006-09-11 14:57:43 -0400 (Mon, 11 Sep 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/blinkenlights


Code cosmetology.

------------------------------------------------------------------------
r1967 | tewok | 2006-09-11 14:13:49 -0400 (Mon, 11 Sep 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/README


Added a few notes about times in the display.

------------------------------------------------------------------------
r1966 | tewok | 2006-09-11 14:09:03 -0400 (Mon, 11 Sep 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/rundemo


Fixed how the log file was zapped.

------------------------------------------------------------------------
r1965 | tewok | 2006-09-11 14:00:41 -0400 (Mon, 11 Sep 2006) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/demos/rollerd-basic/Makefile


Makefile for building data for the basic rollerd demo.

------------------------------------------------------------------------
r1964 | tewok | 2006-09-11 13:58:23 -0400 (Mon, 11 Sep 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/demos/rollerd-basic/README


Fixed a typo.

------------------------------------------------------------------------
r1963 | tewok | 2006-09-11 13:57:37 -0400 (Mon, 11 Sep 2006) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/demos/rollerd-basic/README


Instructions for running the basic rollerd demo.

------------------------------------------------------------------------
r1962 | tewok | 2006-09-11 13:56:34 -0400 (Mon, 11 Sep 2006) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/demos/rollerd-basic/rundemo


Demo execution script for the basic rollerd demo.

------------------------------------------------------------------------
r1961 | tewok | 2006-09-11 13:44:14 -0400 (Mon, 11 Sep 2006) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/demos/rollerd-basic/phaser


Program to modify phasestart rollrec entries just before demo starts.

------------------------------------------------------------------------
r1960 | tewok | 2006-09-11 13:43:11 -0400 (Mon, 11 Sep 2006) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/demos/rollerd-basic/save-db.cache
   A /trunk/dnssec-tools/tools/demos/rollerd-basic/save-demo.rollrec
   A /trunk/dnssec-tools/tools/demos/rollerd-basic/save-dummy.com
   A /trunk/dnssec-tools/tools/demos/rollerd-basic/save-example.com
   A /trunk/dnssec-tools/tools/demos/rollerd-basic/save-test.com


Data files for rollerd demo:  zone files, rollrec file, and named cache file.

------------------------------------------------------------------------
r1959 | tewok | 2006-09-11 13:41:16 -0400 (Mon, 11 Sep 2006) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/demos/rollerd-basic/blinkenlights


GUI for displaying demo results from rollerd.

------------------------------------------------------------------------
r1958 | tewok | 2006-09-11 13:40:18 -0400 (Mon, 11 Sep 2006) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/demos/rollerd-basic


Directory for the basic rollerd demo.

------------------------------------------------------------------------
r1957 | tewok | 2006-09-11 13:04:24 -0400 (Mon, 11 Sep 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Added demo support.

------------------------------------------------------------------------
r1956 | tewok | 2006-09-11 11:00:54 -0400 (Mon, 11 Sep 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm


Added zskcount default.

------------------------------------------------------------------------
r1955 | tewok | 2006-09-11 11:00:11 -0400 (Mon, 11 Sep 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm


Added -signset to standard options.

------------------------------------------------------------------------
r1954 | tewok | 2006-09-11 09:33:37 -0400 (Mon, 11 Sep 2006) | 5 lines
Changed paths:
   A /trunk/dnssec-tools/tools/demos/README


Adding a README for the demos directory.

Has a brief description of the basic rollerd demo.

------------------------------------------------------------------------
r1953 | tewok | 2006-09-11 09:18:10 -0400 (Mon, 11 Sep 2006) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/demos


Directory to hold demo programs and files.

------------------------------------------------------------------------
r1952 | tewok | 2006-09-10 21:39:00 -0400 (Sun, 10 Sep 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Made an error message more useful.

------------------------------------------------------------------------
r1950 | hardaker | 2006-09-07 12:24:22 -0400 (Thu, 07 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf

pod fixes
------------------------------------------------------------------------
r1949 | hardaker | 2006-09-07 12:08:04 -0400 (Thu, 07 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/TrustMan

whoops; require the right module
------------------------------------------------------------------------
r1948 | hardaker | 2006-09-07 12:05:56 -0400 (Thu, 07 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/TrustMan

help output changes for TrustMan
------------------------------------------------------------------------
r1940 | tewok | 2006-09-06 17:55:37 -0400 (Wed, 06 Sep 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Added signing_set to be a valid zone keyrec field.

------------------------------------------------------------------------
r1939 | tewok | 2006-09-05 16:54:49 -0400 (Tue, 05 Sep 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/INFO
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL
   M /trunk/dnssec-tools/tools/scripts/README
   A /trunk/dnssec-tools/tools/scripts/signset-editor


Adding signset-editor, a GUI manager for signing sets in keyrec files.

------------------------------------------------------------------------
r1938 | tewok | 2006-09-05 15:25:43 -0400 (Tue, 05 Sep 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm

Fixed some regexps to allow keyrec values to be empty.  Tests have shown this
to work, but the old regexps are in place and commented out in case there's a
problem.

Juggled some pod subsections so they're in alphabetical order.

------------------------------------------------------------------------
r1937 | rstory | 2006-09-04 16:16:21 -0400 (Mon, 04 Sep 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

- add pass-fail return code to sendquery
- add summary after running all self tests

------------------------------------------------------------------------
r1936 | tewok | 2006-09-03 23:52:39 -0400 (Sun, 03 Sep 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Added the keyrec_saveas() interface.

------------------------------------------------------------------------
r1935 | tewok | 2006-09-03 08:07:13 -0400 (Sun, 03 Sep 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Minor fix to the pod.

------------------------------------------------------------------------
r1934 | rstory | 2006-09-03 07:40:41 -0400 (Sun, 03 Sep 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_parse.c

restore use of tmp ptr for VAL_GET16
------------------------------------------------------------------------
r1933 | tewok | 2006-09-02 15:51:27 -0400 (Sat, 02 Sep 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Added a bunch of signing-set-specific interfaces.
And pod describing them all.

------------------------------------------------------------------------
r1932 | rstory | 2006-08-30 19:50:19 -0400 (Wed, 30 Aug 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/configure

run autoconf
------------------------------------------------------------------------
r1931 | rstory | 2006-08-30 19:49:13 -0400 (Wed, 30 Aug 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

add const where needed

------------------------------------------------------------------------
r1930 | rstory | 2006-08-30 19:47:17 -0400 (Wed, 30 Aug 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/ns_netint.c
   M /trunk/dnssec-tools/validator/libsres/ns_parse.c
   M /trunk/dnssec-tools/validator/libsres/res_debug.c
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.c
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.h
   M /trunk/dnssec-tools/validator/libsres/res_query.c
   M /trunk/dnssec-tools/validator/libsres/resolver.h

more compiler warning cleanup
- proper prototypes
- new const friendly RES_GETnn macros to replace NS_GETnn
- add const where needed

------------------------------------------------------------------------
r1929 | rstory | 2006-08-30 19:28:06 -0400 (Wed, 30 Aug 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/crypto/val_rsamd5.c
   M /trunk/dnssec-tools/validator/libval/crypto/val_rsasha1.c
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/validator/libval/val_log.c
   M /trunk/dnssec-tools/validator/libval/val_log.h
   M /trunk/dnssec-tools/validator/libval/val_parse.c
   M /trunk/dnssec-tools/validator/libval/val_policy.h
   M /trunk/dnssec-tools/validator/libval/val_x_query.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.h
   M /trunk/dnssec-tools/validator/libval/validator.h

more compiler warning cleanup
- adding/removing const as needed (mostly removing)
- ifdef extern errno, h_errno decls, as these may be macros
- new VAL_GETnn (const friendly replacements for NS_GETnn macros)
- don't use errno as param name (might be a macro)

------------------------------------------------------------------------
r1928 | rstory | 2006-08-30 18:11:08 -0400 (Wed, 30 Aug 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_cache.c
   M /trunk/dnssec-tools/validator/libval/val_cache.h

more complier warning cleanup

------------------------------------------------------------------------
r1927 | rstory | 2006-08-30 17:39:01 -0400 (Wed, 30 Aug 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/Makefile.top
   M /trunk/dnssec-tools/validator/configure.in

add extra warning CFLAGS for developers (i.e. '-d .svn')

------------------------------------------------------------------------
r1926 | rstory | 2006-08-30 17:12:16 -0400 (Wed, 30 Aug 2006) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_cache.c

- remove unnecessary ';' from macro definitions
- add new LOCK_UPGRADE macro

stow_info()
- don't use C++ reserverd word for var name (new)
- don't lock/unlock: caller must have lock


------------------------------------------------------------------------
r1925 | rstory | 2006-08-28 17:46:28 -0400 (Mon, 28 Aug 2006) | 15 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

general cleanup
- check for null parameters
- cleanup allocated memory on errors
- defer var init til after null checks
- move var decls to tops of code blocks
- rename vars using C++ reserver words (class)

compose_merged_answer()
- sanity checks for bugger overflows
- reduce indention 
- free temporary allocations when done

compose_answer()
- sanity checks for bugger overflows

------------------------------------------------------------------------
r1924 | rstory | 2006-08-28 15:10:11 -0400 (Mon, 28 Aug 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

p_as_error()
- remove invalid (negative) cases
- add missing VAL_A_DONT_KNOW case

------------------------------------------------------------------------
r1923 | rstory | 2006-08-28 15:04:54 -0400 (Mon, 28 Aug 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/validator.h

revert val_astatus_t back to u_int16_t
------------------------------------------------------------------------
r1922 | hardaker | 2006-08-28 14:27:47 -0400 (Mon, 28 Aug 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/validator.h

2 C++ portability things:
  - don't use C++ reserved word "class" (changed to q_class)
  - wrap contents in extern "C" for standard cpp protection
------------------------------------------------------------------------
r1921 | hardaker | 2006-08-25 20:11:18 -0400 (Fri, 25 Aug 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

Added new 3 subzones for testing key changing.
------------------------------------------------------------------------
r1920 | rstory | 2006-08-25 18:32:40 -0400 (Fri, 25 Aug 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/validator.h

- change val_astatus_t from u_int16_t to int16_t,
  (since some status macro values are negative)
- update obvious (compiler complained) prototype parameter types
  - there are probably a lot more of these the compiler isn't complaining
    about. An analysis of a grep for 'u_int16_t' is probably needed.

------------------------------------------------------------------------
r1919 | rstory | 2006-08-25 18:29:17 -0400 (Fri, 25 Aug 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_parse.h

- remove unnecesary ';' in macro def
- remove redundant code in macro def

------------------------------------------------------------------------
r1918 | rstory | 2006-08-25 18:27:57 -0400 (Fri, 25 Aug 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.h

remove unnecessary ';' in macro def
------------------------------------------------------------------------
r1917 | rstory | 2006-08-25 18:22:06 -0400 (Fri, 25 Aug 2006) | 12 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/getaddr.c
   M /trunk/dnssec-tools/validator/apps/gethost.c
   M /trunk/dnssec-tools/validator/apps/validator_driver.c
   M /trunk/dnssec-tools/validator/libval/val_log.c
   M /trunk/dnssec-tools/validator/libval/val_parse.c
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_support.c

keep compiler happy
- add headers for missing prototypes
- remove unused vars
- match printf specifiers with types
- return a value from non-void functions
- explicity () and {} where suggested
- proper casts to match function prototypes
- remove redundant ';' in macro decl

find_rr_set()
- match returned value to prototype 

------------------------------------------------------------------------
r1916 | hardaker | 2006-08-25 17:32:29 -0400 (Fri, 25 Aug 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch
   M /trunk/dnssec-tools/apps/mozilla/dnssec-firefox.patch

A patch to make use of val_getaddrinfo as well; this was the last api I think
------------------------------------------------------------------------
r1915 | hardaker | 2006-08-25 17:30:25 -0400 (Fri, 25 Aug 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch
   M /trunk/dnssec-tools/apps/mozilla/dnssec-firefox.patch

yet another patch to improve policy setting dialogs and behaviour
------------------------------------------------------------------------
r1914 | rstory | 2006-08-24 13:31:25 -0400 (Thu, 24 Aug 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

read_res_config_file(): cleanup allocated memory on error

------------------------------------------------------------------------
r1913 | rstory | 2006-08-24 13:29:34 -0400 (Thu, 24 Aug 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

fix saving of original quer name in verify_provably_unsecure
------------------------------------------------------------------------
r1912 | rstory | 2006-08-24 12:44:08 -0400 (Thu, 24 Aug 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

reduce indention a level in parse_etc_hosts
------------------------------------------------------------------------
r1911 | hardaker | 2006-08-24 11:21:32 -0400 (Thu, 24 Aug 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

fix completely broken etc host parsing loops with incorrect paren matching
------------------------------------------------------------------------
r1910 | hardaker | 2006-08-24 11:11:58 -0400 (Thu, 24 Aug 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

variable typo
------------------------------------------------------------------------
r1909 | hardaker | 2006-08-24 11:07:18 -0400 (Thu, 24 Aug 2006) | 1 line
Changed paths:
   A /trunk/dnssec-tools/apps/mozilla/dnssec-both.patch
   A /trunk/dnssec-tools/apps/mozilla/dnssec-firefox.patch
   A /trunk/dnssec-tools/apps/mozilla/dnssec-mozconfig.patch
   M /trunk/dnssec-tools/apps/mozilla/firefox.spec

new versions of the firefox patches
------------------------------------------------------------------------
r1908 | hardaker | 2006-08-22 19:13:51 -0400 (Tue, 22 Aug 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow

fixed help output
------------------------------------------------------------------------
r1907 | rstory | 2006-08-22 18:04:41 -0400 (Tue, 22 Aug 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

fix minor compile errors from previous checkin
------------------------------------------------------------------------
r1906 | rstory | 2006-08-22 17:09:25 -0400 (Tue, 22 Aug 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c

move var decl up one devel
------------------------------------------------------------------------
r1905 | rstory | 2006-08-22 17:07:52 -0400 (Tue, 22 Aug 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

fix cut-n-paste var name
------------------------------------------------------------------------
r1904 | rstory | 2006-08-22 17:03:07 -0400 (Tue, 22 Aug 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

move var decls to top of correct code block
------------------------------------------------------------------------
r1903 | rstory | 2006-08-22 16:56:57 -0400 (Tue, 22 Aug 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_parse.c

fix check for minimum length
------------------------------------------------------------------------
r1902 | rstory | 2006-08-22 16:55:19 -0400 (Tue, 22 Aug 2006) | 12 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_verify.c

general cleanup
 - check for null parameters
 - check fo rnull ptr before dereference
 - move var decls to tops of code blocks

make_sigfield()
 - check for overflow of allocated memory
 - cleanup memory on error
 
hash_is_equal()
 - add (another) note that this function isn't implemented

------------------------------------------------------------------------
r1901 | rstory | 2006-08-21 18:16:05 -0400 (Mon, 21 Aug 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

fix typos/compiler warnings introduced by fixes in my previous checkin

------------------------------------------------------------------------
r1900 | tewok | 2006-08-21 17:39:32 -0400 (Mon, 21 Aug 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Added support for -zskcount.

------------------------------------------------------------------------
r1899 | tewok | 2006-08-21 16:34:49 -0400 (Mon, 21 Aug 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/clean-keyrec
   M /trunk/dnssec-tools/tools/scripts/dtconfchk
   M /trunk/dnssec-tools/tools/scripts/dtdefs
   M /trunk/dnssec-tools/tools/scripts/dtinitconf
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/fixkrf
   M /trunk/dnssec-tools/tools/scripts/genkrf
   M /trunk/dnssec-tools/tools/scripts/keyrec-check
   M /trunk/dnssec-tools/tools/scripts/lskrf
   M /trunk/dnssec-tools/tools/scripts/lsroll
   M /trunk/dnssec-tools/tools/scripts/rollchk
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/rollinit
   M /trunk/dnssec-tools/tools/scripts/timetrans


Changed -version to -Version to remove the collision with -verbose.

------------------------------------------------------------------------
r1898 | tewok | 2006-08-21 15:15:56 -0400 (Mon, 21 Aug 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Started implementing -zskcount.
Removed some redundant option handling.

------------------------------------------------------------------------
r1897 | tewok | 2006-08-21 14:25:16 -0400 (Mon, 21 Aug 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm


Added -zskcount as a standard option.

------------------------------------------------------------------------
r1896 | tewok | 2006-08-21 12:55:32 -0400 (Mon, 21 Aug 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtconfchk


Added a validity check for zskcount.
Fixed a few invalid hash keys (ksklen->ksklength, zsklen->zsklength).
This invalid keys were causing problems with validating key lengths.
Set defaults for lifespan-min and lifespan-max.

------------------------------------------------------------------------
r1895 | tewok | 2006-08-20 21:04:36 -0400 (Sun, 20 Aug 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec/README
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm


Added configuration defaults for zskcount.

------------------------------------------------------------------------
r1894 | rstory | 2006-08-18 16:16:40 -0400 (Fri, 18 Aug 2006) | 17 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.c

general cleanup
 - check for null params
 - check for null ptr before dereference
 - defer some var inits til after ptr checks
 - cleanup allocated memory for error cases
 - misc audit notes

init_rr_set()
 - fix double-free of memory in error handling

find_rr_set()
 - rename 'try' (C++ keyword) -> tryit
                                                                                                                           
copy_rrset_rec()
 - note unintended consequences shallow copy of struct w/ptrs.
   fix left as exercise for author

------------------------------------------------------------------------
r1893 | hardaker | 2006-08-18 14:03:57 -0400 (Fri, 18 Aug 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

fixed typo in call to BootStrap functions.
------------------------------------------------------------------------
r1892 | hardaker | 2006-08-17 23:03:32 -0400 (Thu, 17 Aug 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/BootStrap.pm

document the work arounds to using this module in other name spaces
------------------------------------------------------------------------
r1891 | tewok | 2006-08-17 21:27:19 -0400 (Thu, 17 Aug 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Reworked logic for determining that output file is okay.  Added checks for
file and directory writability.
 
Added -edit support.

------------------------------------------------------------------------
r1890 | rstory | 2006-08-17 19:09:09 -0400 (Thu, 17 Aug 2006) | 21 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

general cleanup
 - check for null parameters
 - check for null ptr before dereference
 - move var decls to tops of code blocks
 - defer var initilization til after null param checks

register_query()
 - change from TRUE/FALSE return to 1/0/-1 for error cases
 - don't use callers ptr to walk list (i.e. dropping the head into the bit
   bucket each iteration in the process)
 - plug minor memory leaks

weird_al_realloc()
 - don't memcpy from beyond end of old ptr
 - don't realloc for new size < old size (but do clear end of buffer)
 - rename 'new' var (C++ reserved word)

extract_glue_from_rdata()
 - use temp ptr to expand ns list, so we have original in case of error
 - add parens for explicit operator precedence

------------------------------------------------------------------------
r1889 | rstory | 2006-08-16 20:47:36 -0400 (Wed, 16 Aug 2006) | 22 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

general cleanup
 - check for null parameters
 - check for null before ptr deref
 - declare static struct w/fixed size so compiler will notice under/over-flow
 - move var decls to tops of code blocks

parse_trust_anchor(), parse_zone_security_expectation()
 - clean up memory on errors
 
free_zone_security_expectation()
 - clear ptr that's just been freed
 
get_next_policy_fragment()
 - plug small memory leak

read_root_hints_file()
 - close file before returning
 
parse_etc_hosts()
 - use strncpy instead of memcpy+strlen
 - cleanup on memory errors, but return data gathered so far

------------------------------------------------------------------------
r1888 | rstory | 2006-08-16 18:50:49 -0400 (Wed, 16 Aug 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_parse.c

general cleanup
 - check for null parameters
 - check for buffer overflows
 - move var decls to top of code blocks

------------------------------------------------------------------------
r1887 | rstory | 2006-08-16 18:06:31 -0400 (Wed, 16 Aug 2006) | 15 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

get_hex_string()
 - null ptr checks
 
val_log_rrset(), val_log_rrsig_rdata()
 - don't reuse buffer in single function call

val_log_assertion()
 - move var decl to top of code block

send_log_message()
 - close socket before returning
 
val_log()
 - only print into buffer if necessary

------------------------------------------------------------------------
r1886 | rstory | 2006-08-16 17:34:44 -0400 (Wed, 16 Aug 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c

general cleanup
 - move var dcls to top of code blocks

get_hostent_from_etc_hosts()
 - clean up host list memory before returning

------------------------------------------------------------------------
r1885 | rstory | 2006-08-16 10:18:04 -0400 (Wed, 16 Aug 2006) | 24 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

general cleanup
 - check for null parameters
 - check ptrs for null before dereferences
 - move var decls to tops of code blocks
 - misc audit notes

val_free_result_chain()
 - free data from correct ptr

free_query_chain()
 - remove unnecessary assigments

is_trusted_zone()
 - pass printable zone, not wire format, to val_log

verify_provably_unsecure(val_
 - save original zone name for final log msg
 
clone_result_assertions()
 - note potential memory leaks

val_resolve_and_check()
 - rename parameter using C++ reserved word (class)

------------------------------------------------------------------------
r1884 | tewok | 2006-08-15 11:51:29 -0400 (Tue, 15 Aug 2006) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Removed some options: -checkzone, -keygen, and -signzone.
Added another option:  -binddir.
Added path verification for BIND and image viewer paths.
Added code to allow paths to be re-entered if there was a problem with any.
Changed user-prompter routine to accept "y", "ye", and "n" as short-hand for
"yes", "yes", and "no". 

------------------------------------------------------------------------
r1883 | rstory | 2006-08-14 17:25:36 -0400 (Mon, 14 Aug 2006) | 11 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

append_val_addr_info()
 - optimization for null parameter

process_service_and_hints()
 - 2 notes for review by code owner

general cleanup
 - check/handle null parameter
 - check for null returns when allocating memory
 - check for null ptr before dereference

------------------------------------------------------------------------
r1882 | rstory | 2006-08-14 15:37:43 -0400 (Mon, 14 Aug 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_context.c

val_create_context()
 - bail on null ptr addr
 - clear ptr @ returned addr if freed

------------------------------------------------------------------------
r1881 | tewok | 2006-08-14 13:29:48 -0400 (Mon, 14 Aug 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/BootStrap.pm


Fixed some grammos and spellos.

------------------------------------------------------------------------
r1880 | tewok | 2006-08-14 11:04:21 -0400 (Mon, 14 Aug 2006) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/BootStrap.pm


Added a few package lines so that str2time() (and others?) would work
properly.

(This fix provided by Wes Hardaker and the number 8; I am merely the vehicle
by which it is being checked in.)

------------------------------------------------------------------------
r1879 | hardaker | 2006-08-11 18:28:09 -0400 (Fri, 11 Aug 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/dist/dnssec-tools.spec

updated to version 0.9.2 with various fedora patches
------------------------------------------------------------------------
r1878 | hardaker | 2006-08-11 18:25:58 -0400 (Fri, 11 Aug 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm

catch runtime rule evalations in an error message so donuts doesn't bail when code issues exist for rules
------------------------------------------------------------------------
r1877 | hardaker | 2006-08-11 18:25:09 -0400 (Fri, 11 Aug 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap

use the bootstrap module
------------------------------------------------------------------------
r1876 | hardaker | 2006-08-11 18:24:25 -0400 (Fri, 11 Aug 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/etc/Makefile.PL

better configuration of final dnssec-tools.conf location (ie, allow distributions to put it in /etc.  Note: requires a patch to conf.pm itself to make it look for it there though.  The fedora RPM contais a patch to conf.pm to get around this
------------------------------------------------------------------------
r1875 | hardaker | 2006-08-11 18:23:16 -0400 (Fri, 11 Aug 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

use the bootstrap module
------------------------------------------------------------------------
r1874 | hardaker | 2006-08-11 18:22:26 -0400 (Fri, 11 Aug 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

use bootstrap and reoprt some additional error messages when zonefile fails
------------------------------------------------------------------------
r1873 | hardaker | 2006-08-11 18:17:24 -0400 (Fri, 11 Aug 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/TrustMan
   M /trunk/dnssec-tools/tools/scripts/getdnskeys
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/tachk

use the bootstrap module to pick up perl modules that may or may not be around
------------------------------------------------------------------------
r1872 | hardaker | 2006-08-11 18:06:19 -0400 (Fri, 11 Aug 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/dnspktflow

ignore .old
------------------------------------------------------------------------
r1871 | hardaker | 2006-08-11 18:05:42 -0400 (Fri, 11 Aug 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow

use the bootstrap module to load graphviz
------------------------------------------------------------------------
r1870 | hardaker | 2006-08-11 18:01:33 -0400 (Fri, 11 Aug 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/mapper

use the bootstrap module to load graphviz
------------------------------------------------------------------------
r1869 | hardaker | 2006-08-11 18:00:20 -0400 (Fri, 11 Aug 2006) | 1 line
Changed paths:
   A /trunk/dnssec-tools/tools/modules/BootStrap.pm

a bootstrap function module that looks for perl modules and complains when missing or loads when possible
------------------------------------------------------------------------
r1868 | tewok | 2006-08-10 17:36:17 -0400 (Thu, 10 Aug 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollerd


Implemented the -skipall user command.

------------------------------------------------------------------------
r1867 | tewok | 2006-08-10 17:17:09 -0400 (Thu, 10 Aug 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Reorganized the constants related to user commands and added comments to the
constant groups.
Added support for the -skipall command.

------------------------------------------------------------------------
r1866 | tewok | 2006-08-10 12:29:54 -0400 (Thu, 10 Aug 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollerd


Implemented the -rollall user command.

------------------------------------------------------------------------
r1865 | tewok | 2006-08-10 10:12:04 -0400 (Thu, 10 Aug 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollerd


Added support for -skipnow user command.

------------------------------------------------------------------------
r1864 | tewok | 2006-08-10 10:05:18 -0400 (Thu, 10 Aug 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Added constants for the skipzone user command.

------------------------------------------------------------------------
r1863 | rstory | 2006-08-09 19:52:51 -0400 (Wed, 09 Aug 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/Makefile.top

bump LIBCURRENT for next release (0.9.3?) due to name_server struct reorder

------------------------------------------------------------------------
r1862 | rstory | 2006-08-09 19:49:36 -0400 (Wed, 09 Aug 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/resolver.h

- move ns_address array to last item in name_server structure
- add big warning that ns_address MUST be the last item
- reorder other items, since binary compatiblity already broken

------------------------------------------------------------------------
r1861 | rstory | 2006-08-09 19:35:15 -0400 (Wed, 09 Aug 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/validator.h

handle NULL context in RETRIEVE_POLICY macro

------------------------------------------------------------------------
r1860 | tewok | 2006-08-09 17:14:51 -0400 (Wed, 09 Aug 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollerd


Modified the look of status and zone-status messages returned to rollctl.

------------------------------------------------------------------------
r1859 | tewok | 2006-08-09 16:13:28 -0400 (Wed, 09 Aug 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Made debugging log messages in commander() a bit more useful.
Implemented -zonestatus user command.
Implemented -rollzone user command.


------------------------------------------------------------------------
r1858 | tewok | 2006-08-09 16:10:29 -0400 (Wed, 09 Aug 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Added the -zonestatus command.
Got the -rollzone command to work.

------------------------------------------------------------------------
r1857 | tewok | 2006-08-09 16:02:22 -0400 (Wed, 09 Aug 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Added the ROLLCMD_RC_BADZONE error code.

------------------------------------------------------------------------
r1856 | tewok | 2006-08-09 15:54:31 -0400 (Wed, 09 Aug 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Added zonestatus user-level command
Added ROLLCMD_RC_RRFOPEN and ROLLCMD_RC_NOZONES error returns .
Fixed error value for ROLLCMD_RC_BADROLLREC.

------------------------------------------------------------------------
r1855 | tewok | 2006-08-08 20:55:47 -0400 (Tue, 08 Aug 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Have rollerd send a response to rollctl when given -runqueue.

------------------------------------------------------------------------
r1854 | tewok | 2006-08-07 22:41:16 -0400 (Mon, 07 Aug 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Create the DNSSEC-Tools directory if it doesn't exist.

------------------------------------------------------------------------
r1853 | tewok | 2006-08-07 13:00:53 -0400 (Mon, 07 Aug 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Modified to print the valid logging levels.

------------------------------------------------------------------------
r1852 | tewok | 2006-08-07 12:46:16 -0400 (Mon, 07 Aug 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/INSTALL


Added info about dtinitconf and other tools documentation.

------------------------------------------------------------------------
r1851 | tewok | 2006-08-07 12:28:05 -0400 (Mon, 07 Aug 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


- Added processing for -runqueue.
- Added -halt as a synonym for -shutdown.
- Updated the pod.

------------------------------------------------------------------------
r1850 | hserus | 2006-08-06 22:17:16 -0400 (Sun, 06 Aug 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c

In bootstrap_referral() do not assume in that the referral element in val_query_chain will always exist. 
While bootstrapping the referral from the name server cache we may end up having to fetch glue.  

------------------------------------------------------------------------
r1849 | tewok | 2006-08-04 22:32:50 -0400 (Fri, 04 Aug 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollerd


Implemented a user command to change rollrec files mid-stream.

------------------------------------------------------------------------
r1848 | tewok | 2006-08-04 22:29:41 -0400 (Fri, 04 Aug 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Added a definition for ROLLCMD_RC_BADROLLREC.

------------------------------------------------------------------------
r1847 | tewok | 2006-08-04 19:01:07 -0400 (Fri, 04 Aug 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Reorganized main loop to always check validity of rollrec file and the
rollrec records.

Added sleep time to the status command output.

------------------------------------------------------------------------
r1846 | hardaker | 2006-08-04 00:16:47 -0400 (Fri, 04 Aug 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

skip nsec minimum ttl tests if the current record is out of the zone
being checked (can happen with glue)

------------------------------------------------------------------------
r1845 | hardaker | 2006-08-03 23:42:34 -0400 (Thu, 03 Aug 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/check_nameservers.txt
   M /trunk/dnssec-tools/tools/donuts/rules/dns.errors.txt
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

* set all the memorize priority levels to 1
  - these really need to be moved into the core code
------------------------------------------------------------------------
r1844 | hserus | 2006-08-03 22:39:56 -0400 (Thu, 03 Aug 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Use the zone cut information when ever possible for determining whether EDNS0 option must be used.

------------------------------------------------------------------------
r1843 | rstory | 2006-08-03 17:58:36 -0400 (Thu, 03 Aug 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libsres-implementation-notes
   M /trunk/dnssec-tools/validator/doc/libval-implementation-notes

reformat to find on 80 char/line pages

------------------------------------------------------------------------
r1842 | tewok | 2006-08-03 17:46:00 -0400 (Thu, 03 Aug 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Added the rollmgr_logstr() interface.

------------------------------------------------------------------------
r1841 | hserus | 2006-08-03 16:59:41 -0400 (Thu, 03 Aug 2006) | 15 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

- Return a copied authentication_chain in the val_result_chain structure instead of returning this from the
  context. In that way, we can destroy the context independently of the result structure. We only copy the
public elements from this list, so the respondent server information is not copied over. We will eventually
have to figure out a way to export the respondent server information in the API.
- val_ac_rrset_next is now within the "digested" portion of the assertion.
- Store the zonecut information in the query when ever we are following a referral. Also store the zoncut
  information for any resource records that are returned from this zone.
- Implement the F_DONT_VALIDATE flag for val_resolve_and_check(). This is used when we are trying to locate
  the zone cut for a given name.
- Implement the VAL_A_PROVABLY_UNSECURE condition. This state is equivalent to the TRUST_FLAG being set.
- Implement logic for testing the "provably unsecure" condition.
- Send queries to name servers more intelligently. Try and find the closest matching delegation that is
  available in the cache and direct queries at that instead of always trying to recurse from root.


------------------------------------------------------------------------
r1840 | hserus | 2006-08-03 16:59:18 -0400 (Thu, 03 Aug 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/validator.h

- Added zonecut fields to rrset_rec, delegation_info and val_query_chain
- Defined the F_DONT_VALIDATE flag for val_resolve_and_check()
- Moved val_ac_rrset_next from the val_result_chain structure to the val_rrset_digested structure.


------------------------------------------------------------------------
r1839 | hserus | 2006-08-03 16:58:55 -0400 (Thu, 03 Aug 2006) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.h

- Manage zonecut information in the query structure
- Create a common function bootstrap_referral to handle the creation of a referral-related query from name server resource records.
- Always use the name servers within the val_query_chain structure as the ones to direct the query to. This
  value should already be constructed from context etc. in ask_resolver();
- Implement routine for finding the zonecut given a resource record.


------------------------------------------------------------------------
r1838 | hserus | 2006-08-03 16:58:26 -0400 (Thu, 03 Aug 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_errors.h

- Recognize the VAL_A_PROVABLY_UNSECURE and VAL_A_DONT_VALIDATE status values.

------------------------------------------------------------------------
r1837 | hserus | 2006-08-03 16:58:13 -0400 (Thu, 03 Aug 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

- Use only public members from val_authentication_chain for logging data. Name server information will
  always be NULL till such time that we figure out a way to export the respondent server information.
- Recognize the VAL_A_PROVABLY_UNSECURE and VAL_A_DONT_VALIDATE status values.


------------------------------------------------------------------------
r1836 | hserus | 2006-08-03 16:57:48 -0400 (Thu, 03 Aug 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.c
   M /trunk/dnssec-tools/validator/libval/val_support.h

- Manage the zonecut information for a resource record

------------------------------------------------------------------------
r1835 | hserus | 2006-08-03 16:56:03 -0400 (Thu, 03 Aug 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_cache.c
   M /trunk/dnssec-tools/validator/libval/val_cache.h

- Maintain separate cache for referral information
- Add routine get_matching_nslist() to retrieve matching nslist for a given query.


------------------------------------------------------------------------
r1834 | hserus | 2006-08-03 16:55:09 -0400 (Thu, 03 Aug 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

- Check for NULL name server list in destroy_respol
- Don't set the default name server for a context to root in read_res_config_file(). Look for the closest
  matching name server from the cache instead while sending out a query.


------------------------------------------------------------------------
r1833 | hserus | 2006-08-03 15:09:32 -0400 (Thu, 03 Aug 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

The previous version was what was submitted to the IETF as draft-hayatnagarkar-dnsext-validator-api-01.

val_ac_rrset_next is no longer a member of the public val_authentication_chain structure.
Added note about the VAL_A_PROVABLY_UNSECURE authentication chain status value.


------------------------------------------------------------------------
r1832 | hserus | 2006-08-03 15:07:09 -0400 (Thu, 03 Aug 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod

val_ac_rrset_next and val_ac_next and no longer members of the public val_authentication_chain structure.
They now appear in the "digested" portion.
Added note about the VAL_A_PROVABLY_UNSECURE authentication chain status value.

------------------------------------------------------------------------
r1831 | hardaker | 2006-08-03 13:43:32 -0400 (Thu, 03 Aug 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/Makefile.in

added an install warning about needing to run dtinitconf next
------------------------------------------------------------------------
r1830 | tewok | 2006-08-03 11:18:28 -0400 (Thu, 03 Aug 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Added a halt flag to initfilechk().
Added a logfile separator that's used when the rollrec file is changed.

------------------------------------------------------------------------
r1829 | tewok | 2006-08-02 19:00:29 -0400 (Wed, 02 Aug 2006) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollerd


Added a response message (from rollerd to rollctl) for the shutdown command.
rollerd sends it, rollctl prints it.

Unimplemented commands in rollctl were also moved into an unimplemented
condition so they couldn't be used.

------------------------------------------------------------------------
r1828 | tewok | 2006-08-02 14:40:40 -0400 (Wed, 02 Aug 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Added code to send response to clients who are wanting to change the log file
or log level.

------------------------------------------------------------------------
r1827 | tewok | 2006-08-02 14:39:09 -0400 (Wed, 02 Aug 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Modified the -sleep, -logfile, and -loglevel option processing so that they
wait for a response and tell the use what's happening.

------------------------------------------------------------------------
r1826 | tewok | 2006-08-02 14:33:54 -0400 (Wed, 02 Aug 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Added an error code for invalid log files.

------------------------------------------------------------------------
r1825 | tewok | 2006-08-01 23:36:20 -0400 (Tue, 01 Aug 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Added response code for several commands.

------------------------------------------------------------------------
r1824 | tewok | 2006-08-01 23:34:44 -0400 (Tue, 01 Aug 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Added response messages for the set-sleep command.

------------------------------------------------------------------------
r1823 | tewok | 2006-08-01 23:33:34 -0400 (Tue, 01 Aug 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Added a new command error code.

------------------------------------------------------------------------
r1822 | tewok | 2006-08-01 17:10:18 -0400 (Tue, 01 Aug 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Added a rollmgr_cmdint() call to rollmgr_sendcmd() so that rollerd would be
kicked whenever a new command was sent.

------------------------------------------------------------------------
r1821 | hserus | 2006-07-31 10:27:16 -0400 (Mon, 31 Jul 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Move include for resolv.conf after include for validator.h to fix Darwin build error

------------------------------------------------------------------------
r1820 | hserus | 2006-07-31 10:25:35 -0400 (Mon, 31 Jul 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

Fix indentation

------------------------------------------------------------------------
r1819 | hserus | 2006-07-31 09:39:45 -0400 (Mon, 31 Jul 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_errors.h
   M /trunk/dnssec-tools/validator/libval/val_log.c
   M /trunk/dnssec-tools/validator/libval/val_verify.c

Keep track of which DNSKEY in the key set is part of the chain of trust

------------------------------------------------------------------------
r1818 | rstory | 2006-07-30 18:26:06 -0400 (Sun, 30 Jul 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

- convert rfc 1035 domain names to ascii before logging
- add ascii class/type to send query debug log msg

------------------------------------------------------------------------
r1817 | rstory | 2006-07-30 17:44:35 -0400 (Sun, 30 Jul 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

change log id from decimal ctx-id to libval(ctd-id)

------------------------------------------------------------------------
r1815 | hardaker | 2006-07-28 19:25:52 -0400 (Fri, 28 Jul 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/etc/Makefile.PL

don't install over existing dnssec-tools.conf file
------------------------------------------------------------------------
r1814 | hardaker | 2006-07-28 19:05:50 -0400 (Fri, 28 Jul 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs.t

added SSHFP parsing
------------------------------------------------------------------------
r1813 | hserus | 2006-07-25 13:32:53 -0400 (Tue, 25 Jul 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_support.c

Use VAL_GENERIC_ERROR in place of VAL_ERROR for generic internal errors

------------------------------------------------------------------------
r1812 | hserus | 2006-07-25 13:30:19 -0400 (Tue, 25 Jul 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_errors.h

Use VAL_GENERIC_ERROR in place of VAL_ERROR for internal errors

------------------------------------------------------------------------
r1811 | tewok | 2006-07-19 21:04:26 -0400 (Wed, 19 Jul 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Added ROLLCMD_RC_BADLEVEL.
 
Changed the name of CHANNEL_RETAIN to CHANNEL_WAIT.


------------------------------------------------------------------------
r1810 | tewok | 2006-07-19 21:03:25 -0400 (Wed, 19 Jul 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Changed the name of a channel constant.

------------------------------------------------------------------------
r1809 | tewok | 2006-07-19 21:01:24 -0400 (Wed, 19 Jul 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/rolllog


Fixed up the user logging.

------------------------------------------------------------------------
r1808 | tewok | 2006-07-19 14:37:19 -0400 (Wed, 19 Jul 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Adjusted how output is given for the status command.

------------------------------------------------------------------------
r1807 | tewok | 2006-07-19 14:34:52 -0400 (Wed, 19 Jul 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Added the current directory to the status message.
Used the defined success retcode.

------------------------------------------------------------------------
r1806 | tewok | 2006-07-19 14:06:07 -0400 (Wed, 19 Jul 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Added a defined success return code for commands.

------------------------------------------------------------------------
r1805 | tewok | 2006-07-19 10:55:11 -0400 (Wed, 19 Jul 2006) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/scripts/rolllog


Adding rolllog, a command to write log messages to rollerd's logfile.

------------------------------------------------------------------------
r1804 | tewok | 2006-07-19 10:47:17 -0400 (Wed, 19 Jul 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollerd


Updated t use the latest rollmgr interfaces.

------------------------------------------------------------------------
r1803 | tewok | 2006-07-19 10:37:49 -0400 (Wed, 19 Jul 2006) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Converted from INET-domain sockets to Unix-domain sockets.
Added a get-status command.
Added the rollmgr_closechan() interface.
Fixed the following interfaces: rollmgr_sendcmd(), rollmgr_getcmd(),
rollmgr_sendresp(), and rollmgr_getresp().
Added a close-channel flag to rollmgr_sendcmd()'s parameters.

------------------------------------------------------------------------
r1802 | lfoster | 2006-07-18 14:16:20 -0400 (Tue, 18 Jul 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/TrustMan

Replaced subs read_named_conf_file and read_dnsval_conf_file
with one sub, read_conf_file, which takes a pattern arg
for finding the keys/trust anchors in each file, which was
the only difference between the two original functions.

------------------------------------------------------------------------
r1801 | baerm | 2006-07-18 12:33:13 -0400 (Tue, 18 Jul 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/val_policy.c

fixed reverse lookup problem.

------------------------------------------------------------------------
r1800 | baerm | 2006-07-14 16:40:20 -0400 (Fri, 14 Jul 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

changed /etc/resolv.conf parsing to skip IPv6 nameserver
addresses and continue parsing the file.

------------------------------------------------------------------------
r1799 | lfoster | 2006-07-12 14:36:23 -0400 (Wed, 12 Jul 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/TrustMan

fixed a bug where writing the config file would fail to add new ta config
lines (as opposed to replacing existing lines).

------------------------------------------------------------------------
r1798 | lfoster | 2006-07-12 13:56:23 -0400 (Wed, 12 Jul 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/TrustMan

removed a function no longer used.

------------------------------------------------------------------------
r1797 | tewok | 2006-07-11 18:44:14 -0400 (Tue, 11 Jul 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Renamed rollmgr_cmdresp() to rollmgr_getresp().

------------------------------------------------------------------------
r1796 | tewok | 2006-07-11 15:42:58 -0400 (Tue, 11 Jul 2006) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Added get-status command for the roll-over daemon.
Reworked rollmgr_channel().
Added rollmgr_closechan().
Started working on having rollmgr_sendcmd() get a response from the roll-over
daemon.
Fixed a bug in rollmgr_cmdresp() that had us sleeping forever.

------------------------------------------------------------------------
r1795 | lfoster | 2006-07-11 11:32:59 -0400 (Tue, 11 Jul 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/TrustMan

added documentation for new command line options.

------------------------------------------------------------------------
r1793 | lfoster | 2006-07-06 18:30:56 -0400 (Thu, 06 Jul 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/TrustMan

various bug fixes and minor improvements.

------------------------------------------------------------------------
r1792 | lfoster | 2006-07-05 17:39:59 -0400 (Wed, 05 Jul 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/TrustMan

added flag to report when NO out of date keys are found.

------------------------------------------------------------------------
r1791 | lfoster | 2006-06-30 15:45:59 -0400 (Fri, 30 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/TrustMan

added flag to send warnings to STDOUT. 

------------------------------------------------------------------------
r1790 | lfoster | 2006-06-29 12:19:22 -0400 (Thu, 29 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/TrustMan

added option to log key mismatches to via syslog.

------------------------------------------------------------------------
r1789 | lfoster | 2006-06-28 16:07:27 -0400 (Wed, 28 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/TrustMan

removed some pseudocode.

------------------------------------------------------------------------
r1786 | hserus | 2006-06-23 14:06:08 -0400 (Fri, 23 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

More edits

------------------------------------------------------------------------
r1785 | hserus | 2006-06-23 12:38:48 -0400 (Fri, 23 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Nits etc.

------------------------------------------------------------------------
r1784 | hserus | 2006-06-22 17:27:54 -0400 (Thu, 22 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c
   M /trunk/dnssec-tools/validator/doc/libval-implementation-notes
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod
   M /trunk/dnssec-tools/validator/doc/validator_api.xml
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_assertion.h
   M /trunk/dnssec-tools/validator/libval/val_context.c
   M /trunk/dnssec-tools/validator/libval/val_log.c
   M /trunk/dnssec-tools/validator/libval/val_log.h
   M /trunk/dnssec-tools/validator/libval/val_verify.c
   M /trunk/dnssec-tools/validator/libval/val_verify.h
   M /trunk/dnssec-tools/validator/libval/val_x_query.c
   M /trunk/dnssec-tools/validator/libval/validator.h

Global search and replace assertion_chain to authentication_chain

------------------------------------------------------------------------
r1783 | hserus | 2006-06-22 16:59:18 -0400 (Thu, 22 Jun 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_cache.c
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/validator/libval/val_log.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_support.c
   M /trunk/dnssec-tools/validator/libval/val_verify.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c
   M /trunk/dnssec-tools/validator/libval/validator.h

Removed pointer types for rrset_rec.rrs and val_assertion_chain._as
Also move val_ac_next from val_assertion_chain to val_rrset_digested

------------------------------------------------------------------------
r1782 | hserus | 2006-06-22 16:52:39 -0400 (Thu, 22 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/val_query.3
   M /trunk/dnssec-tools/validator/doc/val_query.pod

Add documentation for val_res_query()

------------------------------------------------------------------------
r1781 | hserus | 2006-06-21 16:23:07 -0400 (Wed, 21 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Modify text for VAL_PROVABLY_UNSECURE. Also add new description for val_res_query().

------------------------------------------------------------------------
r1780 | hserus | 2006-06-21 15:02:07 -0400 (Wed, 21 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_errors.h
   M /trunk/dnssec-tools/validator/libval/val_log.c

#define VAL_OUT_OF_MEMORY to VAL_RESOURCE_UNAVAILABLE

------------------------------------------------------------------------
r1779 | hserus | 2006-06-21 14:59:55 -0400 (Wed, 21 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Address some of Robert's comments from his mail dated 06/21

------------------------------------------------------------------------
r1778 | hserus | 2006-06-21 12:59:11 -0400 (Wed, 21 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_x_query.c
   M /trunk/dnssec-tools/validator/libval/validator.h

Add new interface for val_res_query()

------------------------------------------------------------------------
r1777 | hserus | 2006-06-21 12:54:21 -0400 (Wed, 21 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

Use EAI_FAIL instead of the validator error code when val_create_context() fails

------------------------------------------------------------------------
r1776 | hserus | 2006-06-21 11:39:56 -0400 (Wed, 21 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/README

Changed supported sendmail version from 8.13.3 to 8.13.6

------------------------------------------------------------------------
r1775 | hserus | 2006-06-21 11:38:42 -0400 (Wed, 21 Jun 2006) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_howto.txt
   D /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt
   D /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.4_dnssec_patch.txt
   A /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.6_dnssec_patch.txt
   A /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.x_dnssec_howto.txt (from /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_howto.txt:1774)

Add patch for sendmail 8.13.6. We don't support older versions.

------------------------------------------------------------------------
r1774 | hserus | 2006-06-21 11:37:24 -0400 (Wed, 21 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_howto.txt

Added note that this has only been tested on 8.13.6

------------------------------------------------------------------------
r1773 | hserus | 2006-06-21 10:48:03 -0400 (Wed, 21 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_howto.txt
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_howto.txt
   M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt

Create patches that use the new val_query() interface

------------------------------------------------------------------------
r1772 | hserus | 2006-06-21 09:02:14 -0400 (Wed, 21 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/validator.h

New members for val_addrinfo and val_response. Also add definition for val_query() and val_free_response()

------------------------------------------------------------------------
r1771 | hserus | 2006-06-21 08:57:02 -0400 (Wed, 21 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

Use new struct addrinfo member ai_val_status in place of val_status

------------------------------------------------------------------------
r1770 | hserus | 2006-06-21 08:55:27 -0400 (Wed, 21 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_errors.h
   M /trunk/dnssec-tools/validator/libval/val_log.c

Remove unused error codes

------------------------------------------------------------------------
r1769 | hserus | 2006-06-21 08:54:30 -0400 (Wed, 21 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_x_query.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.h

Change definition for val_query()

------------------------------------------------------------------------
r1768 | hserus | 2006-06-21 08:52:10 -0400 (Wed, 21 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod
   M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.3
   M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.pod
   M /trunk/dnssec-tools/validator/doc/val_query.3
   M /trunk/dnssec-tools/validator/doc/val_query.pod
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Update description for val_query() following the API change

------------------------------------------------------------------------
r1767 | hserus | 2006-06-21 08:50:37 -0400 (Wed, 21 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/getaddr.c
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

Use new val_query() interface and/or struct member names

------------------------------------------------------------------------
r1766 | hserus | 2006-06-20 08:44:37 -0400 (Tue, 20 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Remove C-style comments from spec.

------------------------------------------------------------------------
r1764 | hardaker | 2006-06-19 20:24:30 -0400 (Mon, 19 Jun 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/NEWS

NEWS update
------------------------------------------------------------------------
r1763 | hardaker | 2006-06-19 20:24:16 -0400 (Mon, 19 Jun 2006) | 1 line
Changed paths:
   A /trunk/dnssec-tools/ChangeLog

svn generated ChangeLog
------------------------------------------------------------------------
r1762 | hardaker | 2006-06-19 20:16:04 -0400 (Mon, 19 Jun 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/NEWS

minor updates
------------------------------------------------------------------------
r1761 | hardaker | 2006-06-19 20:11:08 -0400 (Mon, 19 Jun 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/README
   M /trunk/dnssec-tools/tools/scripts/README

updated README documentation based on recent tools list
------------------------------------------------------------------------
r1760 | hardaker | 2006-06-19 20:06:35 -0400 (Mon, 19 Jun 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/getdnskeys

added executable bit
------------------------------------------------------------------------
r1759 | hardaker | 2006-06-19 19:59:47 -0400 (Mon, 19 Jun 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/COPYING

copyright update
------------------------------------------------------------------------
r1758 | hardaker | 2006-06-19 19:59:33 -0400 (Mon, 19 Jun 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/INSTALL

copyright update
------------------------------------------------------------------------
r1757 | hardaker | 2006-06-19 19:58:00 -0400 (Mon, 19 Jun 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in

version number update (0.2)
------------------------------------------------------------------------
r1756 | hardaker | 2006-06-19 19:57:15 -0400 (Mon, 19 Jun 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/dnspktflow/Makefile.PL
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow
   M /trunk/dnssec-tools/tools/donuts/Makefile.PL
   M /trunk/dnssec-tools/tools/donuts/donutsd
   M /trunk/dnssec-tools/tools/maketestzone/Makefile.PL
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone
   M /trunk/dnssec-tools/tools/mapper/Makefile.PL
   M /trunk/dnssec-tools/tools/mapper/mapper

copyright update
------------------------------------------------------------------------
r1755 | hardaker | 2006-06-19 19:44:59 -0400 (Mon, 19 Jun 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Makefile.PL
   M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm
   M /trunk/dnssec-tools/tools/modules/README
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm
   M /trunk/dnssec-tools/tools/modules/file-keyrec
   M /trunk/dnssec-tools/tools/modules/tests/Makefile.PL
   M /trunk/dnssec-tools/tools/modules/tests/test-conf
   M /trunk/dnssec-tools/tools/modules/tests/test-keyrec
   M /trunk/dnssec-tools/tools/modules/tests/test-rollmgr
   M /trunk/dnssec-tools/tools/modules/tests/test-rollrec
   M /trunk/dnssec-tools/tools/modules/tests/test-timetrans
   M /trunk/dnssec-tools/tools/modules/tests/test-toolopts1
   M /trunk/dnssec-tools/tools/modules/tests/test-toolopts2
   M /trunk/dnssec-tools/tools/modules/tests/test-toolopts3
   M /trunk/dnssec-tools/tools/modules/timetrans.pm
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

copyright updates
------------------------------------------------------------------------
r1754 | hardaker | 2006-06-19 19:42:34 -0400 (Mon, 19 Jun 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL
   M /trunk/dnssec-tools/tools/scripts/README
   M /trunk/dnssec-tools/tools/scripts/clean-keyrec
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/fixkrf
   M /trunk/dnssec-tools/tools/scripts/keyrec-check
   M /trunk/dnssec-tools/tools/scripts/timetrans

copyright date update
------------------------------------------------------------------------
r1753 | hardaker | 2006-06-19 19:39:40 -0400 (Mon, 19 Jun 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/tachk

--version flag
------------------------------------------------------------------------
r1752 | hardaker | 2006-06-19 19:18:36 -0400 (Mon, 19 Jun 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/TrustMan

added the executable flag to SVN
------------------------------------------------------------------------
r1751 | hardaker | 2006-06-19 19:14:45 -0400 (Mon, 19 Jun 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/README

updated to reflect current status
------------------------------------------------------------------------
r1750 | hardaker | 2006-06-19 19:12:59 -0400 (Mon, 19 Jun 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/genkrf

help formatting fixes
------------------------------------------------------------------------
r1749 | hardaker | 2006-06-19 19:12:31 -0400 (Mon, 19 Jun 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/configure.in

updated version number
------------------------------------------------------------------------
r1748 | lfoster | 2006-06-19 18:56:30 -0400 (Mon, 19 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/TrustMan

Fixed a typo in documentation section.

------------------------------------------------------------------------
r1747 | lfoster | 2006-06-19 17:59:27 -0400 (Mon, 19 Jun 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/TrustMan

Added -c flag to allow configuration. Takes the other command line
options given (such as smtp server, mail contact, sleep time) and
creates a new dnssec-tools.conf with those added.

------------------------------------------------------------------------
r1746 | hserus | 2006-06-19 15:09:33 -0400 (Mon, 19 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Set results parameter initially to NULL in val_resolve_and_check() 

------------------------------------------------------------------------
r1745 | hserus | 2006-06-19 13:34:48 -0400 (Mon, 19 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Remove perror() statements.

------------------------------------------------------------------------
r1744 | hserus | 2006-06-16 17:34:03 -0400 (Fri, 16 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c

Add check to ensure that context creation was successful. 

------------------------------------------------------------------------
r1743 | hserus | 2006-06-16 17:32:25 -0400 (Fri, 16 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Allow NULL values to be specified for ctx parameter in val_resolve_and_check()

------------------------------------------------------------------------
r1742 | hserus | 2006-06-16 16:41:59 -0400 (Fri, 16 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

More changes based on comments received earlier.

------------------------------------------------------------------------
r1741 | hserus | 2006-06-16 12:57:18 -0400 (Fri, 16 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/etc/dnsval.conf

Add more sample policy statements

------------------------------------------------------------------------
r1740 | hserus | 2006-06-16 12:56:00 -0400 (Fri, 16 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_context.c

Set policy to the requested scope when creating a new context 

------------------------------------------------------------------------
r1739 | hserus | 2006-06-16 12:55:06 -0400 (Fri, 16 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Make sure that default policies are read; also fix bug in memory deallocation

------------------------------------------------------------------------
r1738 | hserus | 2006-06-16 12:52:24 -0400 (Fri, 16 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

Add new option to perform validation using a specific policy label

------------------------------------------------------------------------
r1737 | hserus | 2006-06-15 17:27:08 -0400 (Thu, 15 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in
   M /trunk/dnssec-tools/validator/include/validator-config.h.in

Make sure that custom defines are generated in the header file

------------------------------------------------------------------------
r1736 | hserus | 2006-06-15 15:19:07 -0400 (Thu, 15 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

Make changes to the High-level API section + other miscellaneous edits

------------------------------------------------------------------------
r1735 | hardaker | 2006-06-14 20:57:04 -0400 (Wed, 14 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/clean-keyrec
   M /trunk/dnssec-tools/tools/scripts/dtconfchk
   M /trunk/dnssec-tools/tools/scripts/dtdefs
   M /trunk/dnssec-tools/tools/scripts/dtinitconf
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/fixkrf
   M /trunk/dnssec-tools/tools/scripts/genkrf
   M /trunk/dnssec-tools/tools/scripts/getdnskeys
   M /trunk/dnssec-tools/tools/scripts/keyrec-check
   M /trunk/dnssec-tools/tools/scripts/lskrf
   M /trunk/dnssec-tools/tools/scripts/lsroll
   M /trunk/dnssec-tools/tools/scripts/rollchk
   M /trunk/dnssec-tools/tools/scripts/rollctl
   M /trunk/dnssec-tools/tools/scripts/rollerd
   M /trunk/dnssec-tools/tools/scripts/rollinit
   M /trunk/dnssec-tools/tools/scripts/timetrans
   M /trunk/dnssec-tools/tools/scripts/zonesigner

- Version numbers for all scripts

------------------------------------------------------------------------
r1734 | hardaker | 2006-06-14 19:06:03 -0400 (Wed, 14 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm
   M /trunk/dnssec-tools/tools/scripts/zonesigner

- Add a version number

------------------------------------------------------------------------
r1733 | hardaker | 2006-06-14 19:05:48 -0400 (Wed, 14 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/mapper

- Add a version number

------------------------------------------------------------------------
r1732 | hardaker | 2006-06-14 19:05:38 -0400 (Wed, 14 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

- Add a version number
- Add a method for looping over rule files (future GUI use)
------------------------------------------------------------------------
r1731 | hardaker | 2006-06-14 19:05:30 -0400 (Wed, 14 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

- Add a version number
- Add a method for looping over rule files (future GUI use)
------------------------------------------------------------------------
r1730 | hserus | 2006-06-14 17:56:58 -0400 (Wed, 14 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Check for bad arguments

------------------------------------------------------------------------
r1729 | hserus | 2006-06-14 15:41:28 -0400 (Wed, 14 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_errors.h
   M /trunk/dnssec-tools/validator/libval/val_log.c

Add support for VAL_NOTRUST

------------------------------------------------------------------------
r1728 | hserus | 2006-06-14 15:39:23 -0400 (Wed, 14 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval-implementation-notes
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod

Add description for VAL_NOTRUST

------------------------------------------------------------------------
r1727 | lfoster | 2006-06-14 14:09:21 -0400 (Wed, 14 Jun 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/NEWS

added entries for dtinitconf, dtconfchk, dtdefs, defaults.pm, rollchk, 
  rollctl, rollerd, rollinit, lsroll, and TrustMan

------------------------------------------------------------------------
r1726 | hserus | 2006-06-14 13:44:43 -0400 (Wed, 14 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/NEWS

Added note on recent changes for the validator

------------------------------------------------------------------------
r1725 | baerm | 2006-06-14 12:23:19 -0400 (Wed, 14 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

set a couple more AF family values I missed before

------------------------------------------------------------------------
r1724 | hserus | 2006-06-14 09:49:25 -0400 (Wed, 14 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/README
   M /trunk/dnssec-tools/validator/doc/libval-implementation-notes

Remove reference to validator_api.xml

------------------------------------------------------------------------
r1723 | wgriffin | 2006-06-13 22:41:43 -0400 (Tue, 13 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL

Update Makefile.PL to install lsroll and TrustMan

------------------------------------------------------------------------
r1722 | lfoster | 2006-06-13 14:10:57 -0400 (Tue, 13 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/TrustMan

Added copyright, few comments.

------------------------------------------------------------------------
r1721 | lfoster | 2006-06-12 17:51:51 -0400 (Mon, 12 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtconfchk

Fixed a minor bug in checking existence of archivedir.

------------------------------------------------------------------------
r1720 | baerm | 2006-06-12 17:50:20 -0400 (Mon, 12 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

set sockaddr_in family values

------------------------------------------------------------------------
r1719 | baerm | 2006-06-12 17:45:24 -0400 (Mon, 12 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c

fixed malloc problem

------------------------------------------------------------------------
r1718 | tewok | 2006-06-09 19:43:47 -0400 (Fri, 09 Jun 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Changed the user-command channel to use Unix-domain sockets instead of
internet sockets.

------------------------------------------------------------------------
r1716 | hserus | 2006-06-09 16:11:33 -0400 (Fri, 09 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/Makefile.in

Create man pages for different functions within libval(3)

------------------------------------------------------------------------
r1715 | lfoster | 2006-06-09 15:27:48 -0400 (Fri, 09 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm

add TrustMan config.

------------------------------------------------------------------------
r1714 | lfoster | 2006-06-09 15:26:35 -0400 (Fri, 09 Jun 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/TrustMan

First working version. This requires that dnssec-tools.conf be manually
edited to include necessary info (see perldoc TrustMan). Runs as a daemon
by default.

------------------------------------------------------------------------
r1713 | hserus | 2006-06-09 14:58:28 -0400 (Fri, 09 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/Makefile.in
   A /trunk/dnssec-tools/validator/doc/dnsval.conf.3
   A /trunk/dnssec-tools/validator/doc/dnsval.conf.pod
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod

Added a new man page for dnsval.conf; man page for libval now references this other man page. 

------------------------------------------------------------------------
r1712 | hserus | 2006-06-09 13:23:43 -0400 (Fri, 09 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval-implementation-notes
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod

Added note about VAL_NOTRUST

------------------------------------------------------------------------
r1711 | hserus | 2006-06-09 10:56:43 -0400 (Fri, 09 Jun 2006) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/validator/libsres/nsap_addr.c

Use ISC's implementation for inet_nsap_ntoa

------------------------------------------------------------------------
r1710 | hserus | 2006-06-09 10:53:58 -0400 (Fri, 09 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c

Use inet_pton in place of inet_aton

------------------------------------------------------------------------
r1709 | hserus | 2006-06-09 10:53:03 -0400 (Fri, 09 Jun 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_policy.c

Don't use strsep and inet_aton since these are not portable; implement code code differently for the former
and use inet_pton for the latter. 

------------------------------------------------------------------------
r1708 | hserus | 2006-06-09 10:49:01 -0400 (Fri, 09 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/Makefile.in

Add nsap_add.c to the list of files to be compiled.

------------------------------------------------------------------------
r1707 | hserus | 2006-06-09 10:39:51 -0400 (Fri, 09 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/res_debug.c

Don't use non-portable functions when they are not defined

------------------------------------------------------------------------
r1706 | hserus | 2006-06-09 10:38:34 -0400 (Fri, 09 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/configure
   M /trunk/dnssec-tools/validator/configure.in

Check for availability of non-portable functions and specific symbols

------------------------------------------------------------------------
r1705 | hardaker | 2006-06-08 19:26:05 -0400 (Thu, 08 Jun 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/mapper

change the GUI-only option for displaying in a window to a real command line flag
------------------------------------------------------------------------
r1704 | hardaker | 2006-06-08 17:36:20 -0400 (Thu, 08 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

- many more code comments for cleanliness
- Added a reverse-dates function
------------------------------------------------------------------------
r1703 | hardaker | 2006-06-08 17:35:42 -0400 (Thu, 08 Jun 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm

- document how to actually use the module
------------------------------------------------------------------------
r1702 | hardaker | 2006-06-08 17:35:15 -0400 (Thu, 08 Jun 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/dist/dnssec-tools.spec

- getting ready for a future release.
------------------------------------------------------------------------
r1701 | hardaker | 2006-06-08 17:34:10 -0400 (Thu, 08 Jun 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/mapper

- add other-args help text
------------------------------------------------------------------------
r1700 | hardaker | 2006-06-08 17:33:40 -0400 (Thu, 08 Jun 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

- use the common get zone-file/zone-name dialog boxes
------------------------------------------------------------------------
r1699 | hardaker | 2006-06-08 17:31:25 -0400 (Thu, 08 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/mapper

- minor gui usability additions
- add scaling buttons to the resulting image
------------------------------------------------------------------------
r1698 | hardaker | 2006-06-08 14:53:19 -0400 (Thu, 08 Jun 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

minor GUI wording changes
------------------------------------------------------------------------
r1697 | hardaker | 2006-06-08 14:37:54 -0400 (Thu, 08 Jun 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

global rule summary in GUI output; remove debugging code
------------------------------------------------------------------------
r1695 | hardaker | 2006-06-08 14:24:55 -0400 (Thu, 08 Jun 2006) | 1 line
Changed paths:
   A /trunk/dnssec-tools/NEWS

NEWS file
------------------------------------------------------------------------
r1694 | hserus | 2006-06-08 13:44:50 -0400 (Thu, 08 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Suppor the root zone in the zone-security-expectation policy construct

------------------------------------------------------------------------
r1693 | tewok | 2006-06-06 20:53:16 -0400 (Tue, 06 Jun 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Added a little pod.

------------------------------------------------------------------------
r1692 | hserus | 2006-06-06 15:08:41 -0400 (Tue, 06 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval.3
   M /trunk/dnssec-tools/validator/doc/libval.pod

Update the documentation for libval to match with current implementation.

------------------------------------------------------------------------
r1691 | tewok | 2006-06-06 14:43:12 -0400 (Tue, 06 Jun 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollctl


Fixed some pod.

------------------------------------------------------------------------
r1690 | tewok | 2006-06-06 14:41:48 -0400 (Tue, 06 Jun 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Add a log message user command.

------------------------------------------------------------------------
r1689 | tewok | 2006-06-06 14:18:11 -0400 (Tue, 06 Jun 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Fixed the way unix_dropid() checks for a currently running rollerd.

------------------------------------------------------------------------
r1688 | tewok | 2006-06-06 13:54:41 -0400 (Tue, 06 Jun 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Added a logmsg command.

------------------------------------------------------------------------
r1687 | hserus | 2006-06-06 13:39:50 -0400 (Tue, 06 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_log.c
   M /trunk/dnssec-tools/validator/libval/val_log.h
   M /trunk/dnssec-tools/validator/libval/validator.h

Use val_status_t and val_astatus_t types as parameters to p_val_error() and p_as_error() respectively.

------------------------------------------------------------------------
r1686 | hserus | 2006-06-06 12:54:13 -0400 (Tue, 06 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libsres.3
   M /trunk/dnssec-tools/validator/doc/libsres.pod

Update documentation for libsres to keep current with implementation

------------------------------------------------------------------------
r1685 | hserus | 2006-06-06 12:48:19 -0400 (Tue, 06 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/resolver.h

Re-order struct member so that length and value are located next to each other

------------------------------------------------------------------------
r1684 | hserus | 2006-06-06 12:36:22 -0400 (Tue, 06 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/validator.h

Only include prototypes that have to be exported from the library

------------------------------------------------------------------------
r1683 | hserus | 2006-06-06 12:33:02 -0400 (Tue, 06 Jun 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/crypto/val_dsasha1.c
   M /trunk/dnssec-tools/validator/libval/crypto/val_rsamd5.c
   M /trunk/dnssec-tools/validator/libval/crypto/val_rsasha1.c
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_assertion.h
   A /trunk/dnssec-tools/validator/libval/val_context.h
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   A /trunk/dnssec-tools/validator/libval/val_getaddrinfo.h
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c
   A /trunk/dnssec-tools/validator/libval/val_gethostbyname.h
   M /trunk/dnssec-tools/validator/libval/val_log.c
   A /trunk/dnssec-tools/validator/libval/val_log.h
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_verify.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c
   A /trunk/dnssec-tools/validator/libval/val_x_query.h

Create new header files to store prototypes that were previously stored in validator.h and reference those in various C
files 

------------------------------------------------------------------------
r1682 | hserus | 2006-06-06 10:47:58 -0400 (Tue, 06 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap

Update with new error codes

------------------------------------------------------------------------
r1681 | hserus | 2006-06-06 10:35:13 -0400 (Tue, 06 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/val_assertion.c

Minor edit in comments

------------------------------------------------------------------------
r1680 | hserus | 2006-06-06 10:31:59 -0400 (Tue, 06 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libval-implementation-notes

Update the implementation notes for libval

------------------------------------------------------------------------
r1679 | hserus | 2006-06-05 17:39:51 -0400 (Mon, 05 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/libsres-implementation-notes

Update to make description more current with the implementation.

------------------------------------------------------------------------
r1678 | hserus | 2006-06-05 17:29:42 -0400 (Mon, 05 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.3
   M /trunk/dnssec-tools/validator/doc/val_getaddrinfo.pod
   M /trunk/dnssec-tools/validator/doc/val_gethostbyname.3
   M /trunk/dnssec-tools/validator/doc/val_gethostbyname.pod
   M /trunk/dnssec-tools/validator/doc/val_query.3
   M /trunk/dnssec-tools/validator/doc/val_query.pod

Update to use new error code definitions

------------------------------------------------------------------------
r1677 | hserus | 2006-06-05 16:39:28 -0400 (Mon, 05 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/README

Updated with current list of files in this directory

------------------------------------------------------------------------
r1676 | hserus | 2006-06-05 15:57:56 -0400 (Mon, 05 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/README

Add one-line descriptions for command-line utilities

------------------------------------------------------------------------
r1675 | hserus | 2006-06-05 15:46:42 -0400 (Mon, 05 Jun 2006) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/validator/etc/README

Add one-line description for each configuration file needed by the validator

------------------------------------------------------------------------
r1674 | hserus | 2006-06-05 15:45:18 -0400 (Mon, 05 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/README

Updated new location for docs and apps

------------------------------------------------------------------------
r1673 | hserus | 2006-06-05 15:44:47 -0400 (Mon, 05 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/README

Updated new location for docs

------------------------------------------------------------------------
r1672 | hserus | 2006-06-05 15:42:56 -0400 (Mon, 05 Jun 2006) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/validator/README

Added a top-level README file that describes the structure of the validator portion of the tree.

------------------------------------------------------------------------
r1671 | hserus | 2006-06-05 15:38:16 -0400 (Mon, 05 Jun 2006) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/validator/etc/resolv.conf

Add a sample resolv.conf file

------------------------------------------------------------------------
r1670 | hserus | 2006-06-05 14:23:21 -0400 (Mon, 05 Jun 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c

Use error codes prefixed with VAL_

------------------------------------------------------------------------
r1669 | hserus | 2006-06-05 14:19:49 -0400 (Mon, 05 Jun 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libval/crypto/val_dsasha1.c
   M /trunk/dnssec-tools/validator/libval/crypto/val_rsamd5.c
   M /trunk/dnssec-tools/validator/libval/crypto/val_rsasha1.c
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_cache.c
   M /trunk/dnssec-tools/validator/libval/val_context.c
   M /trunk/dnssec-tools/validator/libval/val_errors.h
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/validator/libval/val_log.c
   M /trunk/dnssec-tools/validator/libval/val_parse.c
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.h
   M /trunk/dnssec-tools/validator/libval/val_support.c
   M /trunk/dnssec-tools/validator/libval/val_verify.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c
   M /trunk/dnssec-tools/validator/libval/validator.h

First step towards bring code in sync with draft-hayatnagarkar-dnsext-validator-api-02
Prefix error codes with VAL_ 
reference rrset details from within struct val_rrset.

------------------------------------------------------------------------
r1668 | hserus | 2006-06-05 13:35:27 -0400 (Mon, 05 Jun 2006) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/validator/etc
   A /trunk/dnssec-tools/validator/etc/dnsval.conf (from /trunk/dnssec-tools/validator/libval/dnsval.conf:1667)
   A /trunk/dnssec-tools/validator/etc/root.hints (from /trunk/dnssec-tools/validator/libval/root.hints:1667)
   D /trunk/dnssec-tools/validator/libval/dnsval.conf
   D /trunk/dnssec-tools/validator/libval/root.hints

Moved validator configuration files to a separate etc/ directory

------------------------------------------------------------------------
r1667 | hserus | 2006-06-05 13:21:42 -0400 (Mon, 05 Jun 2006) | 9 lines
Changed paths:
   M /trunk/dnssec-tools/validator/doc/validator_api.xml

The previous version was draft-hayatnagarkar-dnsext-validator-api-00.
This version contains the first set of changes for -01 
    - made some changes to the terminology section
    - used val_create_context() instead of val_get_context()
    - changed some of the low-level interfaces
    - Added definitions for assertion status values since this does not seem to be something that is going to come out as a
      separate draft. Have to still change the acknowledgements section to include the work done in the dnssec-app forum.


------------------------------------------------------------------------
r1666 | rstory | 2006-06-01 11:28:21 -0400 (Thu, 01 Jun 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/.cvsignore

do not ignore aclocal.m4
------------------------------------------------------------------------
r1665 | rstory | 2006-06-01 11:27:19 -0400 (Thu, 01 Jun 2006) | 1 line
Changed paths:
   A /trunk/dnssec-tools/validator/Makefile.bot (from /trunk/dnssec-tools/Makefile.bot:1645)

copy autoconf files from top dir (some slightly modified)
------------------------------------------------------------------------
r1664 | rstory | 2006-06-01 11:26:03 -0400 (Thu, 01 Jun 2006) | 1 line
Changed paths:
   A /trunk/dnssec-tools/validator/Makefile.in
   A /trunk/dnssec-tools/validator/Makefile.top (from /trunk/dnssec-tools/Makefile.top:1645)
   A /trunk/dnssec-tools/validator/aclocal.m4 (from /trunk/dnssec-tools/aclocal.m4:1645)
   A /trunk/dnssec-tools/validator/config.guess (from /trunk/dnssec-tools/config.guess:1645)
   A /trunk/dnssec-tools/validator/config.sub (from /trunk/dnssec-tools/config.sub:1645)
   A /trunk/dnssec-tools/validator/install-sh (from /trunk/dnssec-tools/install-sh:1645)
   A /trunk/dnssec-tools/validator/ltmain.sh (from /trunk/dnssec-tools/ltmain.sh:1645)
   A /trunk/dnssec-tools/validator/mkinstalldirs (from /trunk/dnssec-tools/mkinstalldirs:1645)

copy autoconf files from top dir (some slightly modified)
------------------------------------------------------------------------
r1663 | rstory | 2006-05-31 19:23:57 -0400 (Wed, 31 May 2006) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/lib/libsres/.cvsignore
   D /trunk/dnssec-tools/lib/libsres/Makefile.in
   D /trunk/dnssec-tools/lib/libsres/README
   D /trunk/dnssec-tools/lib/libsres/base64.c
   D /trunk/dnssec-tools/lib/libsres/ns_name.c
   D /trunk/dnssec-tools/lib/libsres/ns_netint.c
   D /trunk/dnssec-tools/lib/libsres/ns_parse.c
   D /trunk/dnssec-tools/lib/libsres/ns_print.c
   D /trunk/dnssec-tools/lib/libsres/ns_samedomain.c
   D /trunk/dnssec-tools/lib/libsres/ns_ttl.c
   D /trunk/dnssec-tools/lib/libsres/res_comp.c
   D /trunk/dnssec-tools/lib/libsres/res_debug.c
   D /trunk/dnssec-tools/lib/libsres/res_debug.h
   D /trunk/dnssec-tools/lib/libsres/res_io_manager.c
   D /trunk/dnssec-tools/lib/libsres/res_io_manager.h
   D /trunk/dnssec-tools/lib/libsres/res_mkquery.c
   D /trunk/dnssec-tools/lib/libsres/res_mkquery.h
   D /trunk/dnssec-tools/lib/libsres/res_query.c
   D /trunk/dnssec-tools/lib/libsres/res_support.c
   D /trunk/dnssec-tools/lib/libsres/res_support.h
   D /trunk/dnssec-tools/lib/libsres/res_tsig.c
   D /trunk/dnssec-tools/lib/libsres/res_tsig.h
   D /trunk/dnssec-tools/lib/libsres/resolver.h

delete moved files

------------------------------------------------------------------------
r1662 | rstory | 2006-05-31 19:20:34 -0400 (Wed, 31 May 2006) | 1 line
Changed paths:
   D /trunk/dnssec-tools/lib/libval/Makefile.in
   D /trunk/dnssec-tools/lib/libval/README
   D /trunk/dnssec-tools/lib/libval/dnsval.conf
   D /trunk/dnssec-tools/lib/libval/root.hints
   D /trunk/dnssec-tools/lib/libval/val_assertion.c
   D /trunk/dnssec-tools/lib/libval/val_assertion.h
   D /trunk/dnssec-tools/lib/libval/val_cache.c
   D /trunk/dnssec-tools/lib/libval/val_cache.h
   D /trunk/dnssec-tools/lib/libval/val_context.c
   D /trunk/dnssec-tools/lib/libval/val_errors.h
   D /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c
   D /trunk/dnssec-tools/lib/libval/val_gethostbyname.c
   D /trunk/dnssec-tools/lib/libval/val_log.c
   D /trunk/dnssec-tools/lib/libval/val_parse.c
   D /trunk/dnssec-tools/lib/libval/val_parse.h
   D /trunk/dnssec-tools/lib/libval/val_policy.c
   D /trunk/dnssec-tools/lib/libval/val_policy.h
   D /trunk/dnssec-tools/lib/libval/val_resquery.c
   D /trunk/dnssec-tools/lib/libval/val_resquery.h
   D /trunk/dnssec-tools/lib/libval/val_support.c
   D /trunk/dnssec-tools/lib/libval/val_support.h
   D /trunk/dnssec-tools/lib/libval/val_verify.c
   D /trunk/dnssec-tools/lib/libval/val_verify.h
   D /trunk/dnssec-tools/lib/libval/val_x_query.c
   D /trunk/dnssec-tools/lib/libval/validator.h

remove moved file
------------------------------------------------------------------------
r1661 | rstory | 2006-05-31 19:19:09 -0400 (Wed, 31 May 2006) | 1 line
Changed paths:
   D /trunk/dnssec-tools/lib/libval/.cvsignore

remove moved file
------------------------------------------------------------------------
r1660 | rstory | 2006-05-31 19:18:36 -0400 (Wed, 31 May 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/.cvsignore

remove deleted file
------------------------------------------------------------------------
r1659 | rstory | 2006-05-31 19:17:22 -0400 (Wed, 31 May 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/configure

run autoheader and autoconf
------------------------------------------------------------------------
r1658 | rstory | 2006-05-31 19:16:38 -0400 (Wed, 31 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/configure.in

- explict subst for LIBS
- fix paths for Makefile.(top|bot)

------------------------------------------------------------------------
r1657 | rstory | 2006-05-31 19:15:16 -0400 (Wed, 31 May 2006) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/Makefile.bot
   D /trunk/dnssec-tools/Makefile.top

remove unused files (moved into validator)

------------------------------------------------------------------------
r1656 | rstory | 2006-05-31 19:09:51 -0400 (Wed, 31 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/Makefile.in

- update subdirs for reorg
- bail on subdir loops if make returns error

------------------------------------------------------------------------
r1655 | rstory | 2006-05-31 19:07:00 -0400 (Wed, 31 May 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/configure

run autoconf
------------------------------------------------------------------------
r1654 | rstory | 2006-05-31 19:06:37 -0400 (Wed, 31 May 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/configure.in

rip out validator specific tests
------------------------------------------------------------------------
r1653 | rstory | 2006-05-31 16:45:09 -0400 (Wed, 31 May 2006) | 1 line
Changed paths:
   A /trunk/dnssec-tools/validator/configure (from /trunk/dnssec-tools/configure:1645)
   M /trunk/dnssec-tools/validator/include/validator-config.h.in

run autoheader & autoconf
------------------------------------------------------------------------
r1652 | rstory | 2006-05-31 16:43:14 -0400 (Wed, 31 May 2006) | 1 line
Changed paths:
   A /trunk/dnssec-tools/validator/configure.in (from /trunk/dnssec-tools/configure.in:1637)

update for validatory reorg
------------------------------------------------------------------------
r1651 | rstory | 2006-05-31 16:41:13 -0400 (Wed, 31 May 2006) | 1 line
Changed paths:
   D /trunk/dnssec-tools/validator/include/validator-config.h

remove reorg rename flub
------------------------------------------------------------------------
r1650 | rstory | 2006-05-31 16:39:11 -0400 (Wed, 31 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/Makefile.in
   M /trunk/dnssec-tools/validator/libsres/Makefile.in
   M /trunk/dnssec-tools/validator/libval/Makefile.in

- tweak include for reorg paths
- remove unused subdir logic

------------------------------------------------------------------------
r1649 | rstory | 2006-05-31 16:34:54 -0400 (Wed, 31 May 2006) | 1 line
Changed paths:
   A /trunk/dnssec-tools/validator/include/.cvsignore

ignore generated file
------------------------------------------------------------------------
r1648 | rstory | 2006-05-31 16:33:57 -0400 (Wed, 31 May 2006) | 1 line
Changed paths:
   A /trunk/dnssec-tools/validator/include/validator-config.h.in (from /trunk/dnssec-tools/validator/include/validator-config.h:1645)

fix reorg rename flub
------------------------------------------------------------------------
r1647 | rstory | 2006-05-31 16:32:20 -0400 (Wed, 31 May 2006) | 1 line
Changed paths:
   A /trunk/dnssec-tools/validator/.cvsignore (from /trunk/dnssec-tools/.cvsignore:1637)

remove deleted file
------------------------------------------------------------------------
r1646 | rstory | 2006-05-31 16:24:16 -0400 (Wed, 31 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/libsres/base64.c
   M /trunk/dnssec-tools/validator/libsres/ns_name.c
   M /trunk/dnssec-tools/validator/libsres/ns_netint.c
   M /trunk/dnssec-tools/validator/libsres/ns_parse.c
   M /trunk/dnssec-tools/validator/libsres/ns_print.c
   M /trunk/dnssec-tools/validator/libsres/ns_samedomain.c
   M /trunk/dnssec-tools/validator/libsres/ns_ttl.c
   M /trunk/dnssec-tools/validator/libsres/res_comp.c
   M /trunk/dnssec-tools/validator/libsres/res_debug.c
   M /trunk/dnssec-tools/validator/libsres/res_io_manager.c
   M /trunk/dnssec-tools/validator/libsres/res_mkquery.c
   M /trunk/dnssec-tools/validator/libsres/res_query.c
   M /trunk/dnssec-tools/validator/libsres/res_support.c
   M /trunk/dnssec-tools/validator/libsres/res_tsig.c

dnssec-tools-config.h -> validator-config.h

------------------------------------------------------------------------
r1645 | rstory | 2006-05-31 15:45:40 -0400 (Wed, 31 May 2006) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/lib/libval/crypto

delete moved dir

------------------------------------------------------------------------
r1644 | rstory | 2006-05-31 15:42:57 -0400 (Wed, 31 May 2006) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/lib/libsres/doc

delete doc dir

------------------------------------------------------------------------
r1643 | rstory | 2006-05-31 15:39:05 -0400 (Wed, 31 May 2006) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/validator/libsres (from /trunk/dnssec-tools/lib/libsres:1642)
   D /trunk/dnssec-tools/validator/libsres/doc

move libsres

------------------------------------------------------------------------
r1642 | rstory | 2006-05-31 13:41:21 -0400 (Wed, 31 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/validator/apps/validator_driver.c
   M /trunk/dnssec-tools/validator/libval/crypto/val_dsasha1.c
   M /trunk/dnssec-tools/validator/libval/crypto/val_rsamd5.c
   M /trunk/dnssec-tools/validator/libval/crypto/val_rsasha1.c
   M /trunk/dnssec-tools/validator/libval/val_assertion.c
   M /trunk/dnssec-tools/validator/libval/val_cache.c
   M /trunk/dnssec-tools/validator/libval/val_context.c
   M /trunk/dnssec-tools/validator/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/validator/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/validator/libval/val_log.c
   M /trunk/dnssec-tools/validator/libval/val_parse.c
   M /trunk/dnssec-tools/validator/libval/val_policy.c
   M /trunk/dnssec-tools/validator/libval/val_resquery.c
   M /trunk/dnssec-tools/validator/libval/val_support.c
   M /trunk/dnssec-tools/validator/libval/val_verify.c
   M /trunk/dnssec-tools/validator/libval/val_x_query.c

dnssec-tools-config.h -> validator-config.h

------------------------------------------------------------------------
r1641 | rstory | 2006-05-31 13:29:18 -0400 (Wed, 31 May 2006) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/validator/libval (from /trunk/dnssec-tools/lib/libval:1637)
   D /trunk/dnssec-tools/validator/libval/bin
   D /trunk/dnssec-tools/validator/libval/doc

move lival to validator dir

------------------------------------------------------------------------
r1640 | rstory | 2006-05-31 13:02:00 -0400 (Wed, 31 May 2006) | 1 line
Changed paths:
   D /trunk/dnssec-tools/lib/libsres/doc/.cvsignore
   D /trunk/dnssec-tools/lib/libsres/doc/Makefile.in

remove unused files
------------------------------------------------------------------------
r1639 | rstory | 2006-05-31 12:59:38 -0400 (Wed, 31 May 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/validator/doc/Makefile.in

merge in libsres makefile
------------------------------------------------------------------------
r1638 | rstory | 2006-05-31 12:56:41 -0400 (Wed, 31 May 2006) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/dnssec-tools-config.h.in
   D /trunk/dnssec-tools/lib/libsres/doc/implementation-notes
   D /trunk/dnssec-tools/lib/libsres/doc/libsres.3
   D /trunk/dnssec-tools/lib/libsres/doc/libsres.pod
   D /trunk/dnssec-tools/lib/libsres/include
   D /trunk/dnssec-tools/lib/libval/bin
   D /trunk/dnssec-tools/lib/libval/doc
   A /trunk/dnssec-tools/validator
   A /trunk/dnssec-tools/validator/apps (from /trunk/dnssec-tools/lib/libval/bin:1637)
   A /trunk/dnssec-tools/validator/doc (from /trunk/dnssec-tools/lib/libval/doc:1637)
   D /trunk/dnssec-tools/validator/doc/implementation_notes
   A /trunk/dnssec-tools/validator/doc/libsres-implementation-notes (from /trunk/dnssec-tools/lib/libsres/doc/implementation-notes:1637)
   A /trunk/dnssec-tools/validator/doc/libsres.3 (from /trunk/dnssec-tools/lib/libsres/doc/libsres.3:1637)
   A /trunk/dnssec-tools/validator/doc/libsres.pod (from /trunk/dnssec-tools/lib/libsres/doc/libsres.pod:1637)
   A /trunk/dnssec-tools/validator/doc/libval-implementation-notes (from /trunk/dnssec-tools/lib/libval/doc/implementation_notes:1637)
   A /trunk/dnssec-tools/validator/include (from /trunk/dnssec-tools/lib/libsres/include:1637)
   A /trunk/dnssec-tools/validator/include/validator-config.h (from /trunk/dnssec-tools/dnssec-tools-config.h.in:1637)

- directory reorg for validation libs/apps/docs/etc

------------------------------------------------------------------------
r1637 | rstory | 2006-05-31 12:24:15 -0400 (Wed, 31 May 2006) | 1 line
Changed paths:
   A /trunk/dnssec-tools/lib/libsres/doc/.cvsignore

ignore Makefile
------------------------------------------------------------------------
r1636 | rstory | 2006-05-31 11:25:15 -0400 (Wed, 31 May 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/validate.1
   M /trunk/dnssec-tools/lib/libval/doc/validate.pod

document new command line options
------------------------------------------------------------------------
r1634 | rstory | 2006-05-30 17:19:29 -0400 (Tue, 30 May 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/README

add warning that man pages are generated from pod pages
------------------------------------------------------------------------
r1633 | tewok | 2006-05-26 22:29:30 -0400 (Fri, 26 May 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Add a needed seek().  The old location ended up adding nulls to the beginning
of the pid file with each new execution.
Move a truncate() to a better location.

------------------------------------------------------------------------
r1632 | rstory | 2006-05-24 12:12:55 -0400 (Wed, 24 May 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c

add --dnsval-conf=file option
------------------------------------------------------------------------
r1631 | rstory | 2006-05-24 12:10:51 -0400 (Wed, 24 May 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_policy.c
   M /trunk/dnssec-tools/lib/libval/val_policy.h

make dnsval.conf location run-time configurable too
------------------------------------------------------------------------
r1630 | rstory | 2006-05-24 12:04:38 -0400 (Wed, 24 May 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c

- add command line options
  - --resolv-conf=file
  - --root-hings=file
  - --selftest
- move common getopt args to local var

------------------------------------------------------------------------
r1629 | rstory | 2006-05-24 12:01:07 -0400 (Wed, 24 May 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_policy.c
   M /trunk/dnssec-tools/lib/libval/val_policy.h

make resovler config and root.hints locations run-time configurable
------------------------------------------------------------------------
r1628 | rstory | 2006-05-24 10:57:21 -0400 (Wed, 24 May 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/Makefile.in

add libs target
------------------------------------------------------------------------
r1627 | hserus | 2006-05-19 17:12:10 -0400 (Fri, 19 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.c

Make sure we have a set of nameservers available before we set the USE_DNSSEC policy for the queries

------------------------------------------------------------------------
r1626 | hserus | 2006-05-19 16:19:08 -0400 (Fri, 19 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_resquery.c

Responses obtained for queries for RRSIG types should not be interpreted as a "nothing_other_than_cname" type


------------------------------------------------------------------------
r1625 | hserus | 2006-05-19 16:14:26 -0400 (Fri, 19 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.c
   M /trunk/dnssec-tools/lib/libval/val_errors.h
   M /trunk/dnssec-tools/lib/libval/val_log.c

Use new MISSING_DNSKEY and MISSING_DS error codes when these data types are missing instead of displaying DNS error code

------------------------------------------------------------------------
r1624 | hserus | 2006-05-18 09:47:44 -0400 (Thu, 18 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_parse.c

Minor bug fix. Also make sure that the dname returned from val_parse_dname is null terminated.

------------------------------------------------------------------------
r1623 | rstory | 2006-05-17 19:02:18 -0400 (Wed, 17 May 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.c

add static casts to keep compiler happy
------------------------------------------------------------------------
r1622 | rstory | 2006-05-17 19:02:08 -0400 (Wed, 17 May 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_policy.c

include res_debug header
------------------------------------------------------------------------
r1621 | rstory | 2006-05-17 18:58:38 -0400 (Wed, 17 May 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_errors.h

keep compiler happy: put parens around arithmetic defines
------------------------------------------------------------------------
r1620 | rstory | 2006-05-17 18:51:32 -0400 (Wed, 17 May 2006) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libsres/res_debug.h

prototypes for debug functions

------------------------------------------------------------------------
r1619 | rstory | 2006-05-17 18:45:48 -0400 (Wed, 17 May 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_verify.c

ifdef out unused static functions
------------------------------------------------------------------------
r1618 | rstory | 2006-05-17 18:41:34 -0400 (Wed, 17 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_io_manager.c
   M /trunk/dnssec-tools/lib/libsres/res_io_manager.h
   M /trunk/dnssec-tools/lib/libsres/res_query.c
   M /trunk/dnssec-tools/lib/libsres/resolver.h

change length params from int/u_int32_t mix to consistent u_int

------------------------------------------------------------------------
r1617 | rstory | 2006-05-17 18:35:33 -0400 (Wed, 17 May 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_io_manager.h

add res_timeout prototype
------------------------------------------------------------------------
r1616 | rstory | 2006-05-17 18:16:10 -0400 (Wed, 17 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_log.c

- change get_hex_string incoming param from char* to const u_char*
- static cast to keep compiler quiet

------------------------------------------------------------------------
r1615 | rstory | 2006-05-17 18:15:21 -0400 (Wed, 17 May 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/lib/libval/validator.h

change get_hex_string incoming param from char* to const u_char*
------------------------------------------------------------------------
r1614 | rstory | 2006-05-17 17:06:33 -0400 (Wed, 17 May 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_verify.c

- fix compiler warnings
  - change val_sigverify data param to unsigned char
  - cast strlen params to char*

------------------------------------------------------------------------
r1613 | hserus | 2006-05-17 12:01:56 -0400 (Wed, 17 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_policy.c

Close file pointers after we're done using them

------------------------------------------------------------------------
r1612 | hserus | 2006-05-17 12:00:29 -0400 (Wed, 17 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c

Use the same validator context for all the test cases

------------------------------------------------------------------------
r1611 | hserus | 2006-05-17 11:58:00 -0400 (Wed, 17 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.c

If query was previously answered and then cached, you don't need to send out the query again.

------------------------------------------------------------------------
r1610 | tewok | 2006-05-16 23:01:17 -0400 (Tue, 16 May 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Made a bunch of "roll-over manager" to "rollerd" mods in comments and pod.
And another in unix_dropid(), which allows the check for running rollerds to
actually work.

------------------------------------------------------------------------
r1609 | tewok | 2006-05-16 20:30:33 -0400 (Tue, 16 May 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll


Added some =over's in the pod.
Added a couple of section introductions in the pod.

------------------------------------------------------------------------
r1608 | tewok | 2006-05-16 20:06:31 -0400 (Tue, 16 May 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Added rollrec locking.
Save start-up timestamp and include it in the status command info.

------------------------------------------------------------------------
r1607 | tewok | 2006-05-16 19:35:52 -0400 (Tue, 16 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lsroll
   M /trunk/dnssec-tools/tools/scripts/rollchk


Added locking for the rollrec file.

------------------------------------------------------------------------
r1606 | rstory | 2006-05-16 19:05:55 -0400 (Tue, 16 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/dnssec-tools-config.h.in

run autoheader & autoconf

------------------------------------------------------------------------
r1605 | rstory | 2006-05-16 19:01:12 -0400 (Tue, 16 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/configure.in

- tweaks to headers in AC_CHECK_* macros
- check for netinet/in.h

------------------------------------------------------------------------
r1604 | tewok | 2006-05-16 18:34:50 -0400 (Tue, 16 May 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL


rrinit -> rollinit
rrchk -> rollchk

------------------------------------------------------------------------
r1603 | rstory | 2006-05-16 18:14:15 -0400 (Tue, 16 May 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/ns_print.c

define MIN if missing
------------------------------------------------------------------------
r1602 | rstory | 2006-05-16 17:18:21 -0400 (Tue, 16 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/Makefile.in

- use LIBS from configure
- remove crypto from EXTRALIBS (should be in LIBS)

------------------------------------------------------------------------
r1601 | rstory | 2006-05-16 16:51:38 -0400 (Tue, 16 May 2006) | 1 line
Changed paths:
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/dnssec-tools-config.h.in

run autoheader & autoconf
------------------------------------------------------------------------
r1600 | rstory | 2006-05-16 16:50:47 -0400 (Tue, 16 May 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/configure.in

- remove redundant header check
- add getopt tests
- fix includes for ns_*_* tests

------------------------------------------------------------------------
r1599 | rstory | 2006-05-16 16:47:15 -0400 (Tue, 16 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/Makefile.in

add LIBS to binary link line

------------------------------------------------------------------------
r1598 | tewok | 2006-05-15 21:37:08 -0400 (Mon, 15 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm


Get rid of a debugging line.

------------------------------------------------------------------------
r1597 | rstory | 2006-05-15 19:02:48 -0400 (Mon, 15 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/getaddr.c
   M /trunk/dnssec-tools/lib/libval/bin/gethost.c
   M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c

- only include getopt.h if we have it
- user simpler versions of getopt if other not available

------------------------------------------------------------------------
r1596 | rstory | 2006-05-15 18:18:22 -0400 (Mon, 15 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/ns_parse.c

- ns_msg_getflag is defined on solaris and darwin, but not as code

------------------------------------------------------------------------
r1595 | tewok | 2006-05-15 17:36:57 -0400 (Mon, 15 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/timetrans.pm


Added a special case for 0 seconds.

------------------------------------------------------------------------
r1594 | hserus | 2006-05-15 16:26:05 -0400 (Mon, 15 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/dnsval.conf

Add more trust anchors. 
Also update the zone-security-expectation policy to ignore DNSSEC for some domains

------------------------------------------------------------------------
r1593 | hserus | 2006-05-15 16:23:20 -0400 (Mon, 15 May 2006) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libval/root.hints

Add a sample root.hints file

------------------------------------------------------------------------
r1592 | rstory | 2006-05-15 15:53:59 -0400 (Mon, 15 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/dnssec-tools-config.h.in

run autoheader & autoconf

------------------------------------------------------------------------
r1591 | rstory | 2006-05-15 15:53:23 -0400 (Mon, 15 May 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/configure.in

- add --with-cflags
- check for ns_cert_types
- add defines for missing ns_t_* and ns_r_* values
- check for p_rcode prototype

------------------------------------------------------------------------
r1590 | hserus | 2006-05-15 15:31:42 -0400 (Mon, 15 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_io_manager.h
   M /trunk/dnssec-tools/lib/libsres/res_query.c

Allow queries to be sent out to multiple name servers in a phased manner, instead of all at once.
Set the EDNS0(and consequently the DO) option only for those name servers that are expected to do DNSSEC.

------------------------------------------------------------------------
r1589 | hserus | 2006-05-15 15:28:04 -0400 (Mon, 15 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_io_manager.c

Allow queries to be sent out to multiple name servers in a phased manner, instead of all at once

------------------------------------------------------------------------
r1588 | hserus | 2006-05-15 15:26:26 -0400 (Mon, 15 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_mkquery.c

Checking if the DO bit needs to be set happens in libval according to the zone security expectiation policy

------------------------------------------------------------------------
r1587 | hserus | 2006-05-15 15:17:33 -0400 (Mon, 15 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_x_query.c

Fixed commenting niceties

------------------------------------------------------------------------
r1586 | hserus | 2006-05-15 15:13:11 -0400 (Mon, 15 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_resquery.c

Allows queries to be sent out in a phased manner instead of all together.

------------------------------------------------------------------------
r1585 | hserus | 2006-05-15 15:06:28 -0400 (Mon, 15 May 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.c

Allow DNSSEC validation for certain zones (as determined by the zone security expectation policy) to be
turned off.
Set the RES_USE_DNSSEC option for only those name servers that are expected to process DNSSEC   
Made bug fixes to the referral logic

------------------------------------------------------------------------
r1584 | hserus | 2006-05-15 15:00:06 -0400 (Mon, 15 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c

Since assertions can be created even when no data is returned from the DNS, check for NULL

------------------------------------------------------------------------
r1583 | hserus | 2006-05-15 14:58:13 -0400 (Mon, 15 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_policy.c
   M /trunk/dnssec-tools/lib/libval/val_policy.h

Expand the zone security expectation definition to include ignoring DNSSEC for a zone

------------------------------------------------------------------------
r1582 | hserus | 2006-05-15 14:53:08 -0400 (Mon, 15 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c

Change expected error conditions for some test cases. 
Allow individual test cases to be executed

------------------------------------------------------------------------
r1581 | hserus | 2006-05-15 13:53:58 -0400 (Mon, 15 May 2006) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/lib/libsres/EXPORT.sym

No longer maintain this file

------------------------------------------------------------------------
r1580 | rstory | 2006-05-15 13:47:24 -0400 (Mon, 15 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/configure

run autoconf

------------------------------------------------------------------------
r1579 | hserus | 2006-05-15 13:44:48 -0400 (Mon, 15 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/thunderbird/install.rdf

Support more recent versions of thunderbird

------------------------------------------------------------------------
r1578 | rstory | 2006-05-15 13:42:08 -0400 (Mon, 15 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/configure.in
   M /trunk/dnssec-tools/dnssec-tools-config.h.in

- add test to set SPRINTF_CHAR for solaris4

------------------------------------------------------------------------
r1577 | hserus | 2006-05-15 13:37:02 -0400 (Mon, 15 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap

Use new error codes

------------------------------------------------------------------------
r1576 | rstory | 2006-05-15 12:41:11 -0400 (Mon, 15 May 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_x_query.c

- add dnssec-tools-config.h
- add nameser_compat or local header for HEADER struct
- fix complier warning: change buf ptrs to unsigned chars

------------------------------------------------------------------------
r1575 | rstory | 2006-05-15 12:40:04 -0400 (Mon, 15 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_verify.c

- add dnssec-tools-config.h
- fix compiler warning: change length param to size_t

------------------------------------------------------------------------
r1574 | rstory | 2006-05-15 12:39:07 -0400 (Mon, 15 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_support.h

fix compiler warning: change lower_name param to size_t

------------------------------------------------------------------------
r1573 | rstory | 2006-05-15 12:38:17 -0400 (Mon, 15 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_support.c

- add dnssec-tools-config.h
- fix compiler warnings: change lower_name index param to size_t

------------------------------------------------------------------------
r1572 | rstory | 2006-05-15 12:36:47 -0400 (Mon, 15 May 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_resquery.c

- add dnssec-tools-config.h
- add nameser_compat or local header for HEADER struct
- change ns_tsig_key to ns_tsig

------------------------------------------------------------------------
r1571 | rstory | 2006-05-15 12:35:21 -0400 (Mon, 15 May 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_policy.c

- add dnssec-tools-config.h
- add strtok_r prototype for sun
- use fcntl instead of flock
- rename ns_tsig_key to ns_tsig

------------------------------------------------------------------------
r1570 | rstory | 2006-05-15 12:33:22 -0400 (Mon, 15 May 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_cache.c

- add dnssec-tools-config.h
- tweak pthread lock for systems w/out PTHREAD_RWLOCK_INITIALIZER macro (OS X)
  - static init var
  - new LOCK_INIT macro called at top of functions using other locking macros

------------------------------------------------------------------------
r1569 | rstory | 2006-05-15 12:31:03 -0400 (Mon, 15 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/validator.h

- add LOG_PID to VAL_LOG_OPTIONS
- add LOG_PERROR to VAL_LOG_OPTIONS if available

------------------------------------------------------------------------
r1568 | rstory | 2006-05-15 12:29:58 -0400 (Mon, 15 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c
   M /trunk/dnssec-tools/lib/libval/crypto/val_dsasha1.c
   M /trunk/dnssec-tools/lib/libval/crypto/val_rsamd5.c
   M /trunk/dnssec-tools/lib/libval/crypto/val_rsasha1.c
   M /trunk/dnssec-tools/lib/libval/val_assertion.c
   M /trunk/dnssec-tools/lib/libval/val_context.c
   M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/lib/libval/val_log.c
   M /trunk/dnssec-tools/lib/libval/val_parse.c

add dnssec-tools-config.h

------------------------------------------------------------------------
r1567 | rstory | 2006-05-15 12:27:10 -0400 (Mon, 15 May 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_debug.c

- remove unused macro
- add NS_ALG_* defines if missing from system headers
- add cert_t_* defines if missing from system headers
- add p_rcode prototype if missing from system headers
- change most sprintf to safer snprintf

------------------------------------------------------------------------
r1566 | rstory | 2006-05-15 12:22:20 -0400 (Mon, 15 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_query.c
   M /trunk/dnssec-tools/lib/libsres/res_support.c
   M /trunk/dnssec-tools/lib/libsres/resolver.h

- revert previous checkins, which reverted intended changes. i.e. re-do
  ns_tsig_key -> ns_tsig and HEADER struct includes

------------------------------------------------------------------------
r1565 | rstory | 2006-05-15 12:19:39 -0400 (Mon, 15 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_io_manager.c

- fix complier warning: change local var type to match fucntion prototype
  where used (signed-ness difference)

------------------------------------------------------------------------
r1564 | rstory | 2006-05-15 12:16:51 -0400 (Mon, 15 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/Makefile.top

- save autoconf CPPFLAGS
- add CPPFLAGS to LIBTOLCC compile mode

------------------------------------------------------------------------
r1563 | rstory | 2006-05-15 12:04:31 -0400 (Mon, 15 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_query.c

- rename ns_tsig_key to ns_tsig to avoid header/macro conflict on OS X
- include nameser_compat or local header for HEADER struct

------------------------------------------------------------------------
r1562 | rstory | 2006-05-15 12:02:21 -0400 (Mon, 15 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_support.c
   M /trunk/dnssec-tools/lib/libsres/resolver.h

rename ns_tsig_key to ns_tsig to avoid header amcro conflict on OS X

------------------------------------------------------------------------
r1561 | tewok | 2006-05-15 10:24:21 -0400 (Mon, 15 May 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/INFO
   M /trunk/dnssec-tools/tools/scripts/README
   A /trunk/dnssec-tools/tools/scripts/lsroll
   A /trunk/dnssec-tools/tools/scripts/rollchk
   M /trunk/dnssec-tools/tools/scripts/rollerd
   A /trunk/dnssec-tools/tools/scripts/rollinit
   D /trunk/dnssec-tools/tools/scripts/rrchk
   D /trunk/dnssec-tools/tools/scripts/rrinit


Renamed rrchk  to rollchk.
Renamed rrinit to rollinit.

------------------------------------------------------------------------
r1560 | rstory | 2006-05-09 12:02:58 -0400 (Tue, 09 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_io_manager.c

tweak nameser_compat.h vs header.h ifdefs

------------------------------------------------------------------------
r1559 | rstory | 2006-05-09 12:02:05 -0400 (Tue, 09 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_mkquery.c

add nameser_compat.h or header.h

------------------------------------------------------------------------
r1558 | rstory | 2006-05-09 12:01:23 -0400 (Tue, 09 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_query.c

- rename ns_tsig_key to ns_tsig to avoid OS X conflict
- include nameser_compat.h or header.h

------------------------------------------------------------------------
r1557 | rstory | 2006-05-09 12:00:24 -0400 (Tue, 09 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_support.c
   M /trunk/dnssec-tools/lib/libsres/resolver.h

rename ns_tsig_key to ns_tsig to avoid OS X conflict

------------------------------------------------------------------------
r1556 | rstory | 2006-05-09 11:53:54 -0400 (Tue, 09 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/dnssec-tools-config.h.in

run autoheader/autoconf

------------------------------------------------------------------------
r1555 | rstory | 2006-05-09 11:53:03 -0400 (Tue, 09 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/configure.in

add int tests for 8 bit sizes

------------------------------------------------------------------------
r1554 | rstory | 2006-05-05 18:23:02 -0400 (Fri, 05 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/Makefile.bot

remove duplicate CFLAGS

------------------------------------------------------------------------
r1553 | rstory | 2006-05-05 18:22:32 -0400 (Fri, 05 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/dnssec-tools-config.h.in

update for autoheader and autoconf

------------------------------------------------------------------------
r1552 | rstory | 2006-05-05 18:21:34 -0400 (Fri, 05 May 2006) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/lib/libsres/include/arpa/nameser.h
   D /trunk/dnssec-tools/lib/libsres/include/resolv.h

remove copies of system headers

------------------------------------------------------------------------
r1551 | rstory | 2006-05-05 18:20:52 -0400 (Fri, 05 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_tsig.c

add dnssec-tools-config.h & sys/types.h

------------------------------------------------------------------------
r1550 | rstory | 2006-05-05 18:19:21 -0400 (Fri, 05 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/base64.c
   M /trunk/dnssec-tools/lib/libsres/ns_name.c
   M /trunk/dnssec-tools/lib/libsres/ns_netint.c
   M /trunk/dnssec-tools/lib/libsres/ns_samedomain.c
   M /trunk/dnssec-tools/lib/libsres/res_comp.c
   M /trunk/dnssec-tools/lib/libsres/res_query.c
   M /trunk/dnssec-tools/lib/libsres/res_support.c

add dnssec-tools-config.h

------------------------------------------------------------------------
r1549 | rstory | 2006-05-05 18:17:20 -0400 (Fri, 05 May 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/configure.in

- add sys/types.h for arpa struct tests
- fix u_int_16 defines
- add u_int_8 defines

------------------------------------------------------------------------
r1548 | rstory | 2006-05-05 17:46:24 -0400 (Fri, 05 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_mkquery.c

add dnssec-tools-config.h

------------------------------------------------------------------------
r1547 | rstory | 2006-05-05 17:43:51 -0400 (Fri, 05 May 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_io_manager.c

- add dnssec-tools-config.h
- include sys/filio.h if we have it
- only include "arpa/header" if we don't have arpa/nameser_compat.h

------------------------------------------------------------------------
r1546 | rstory | 2006-05-05 17:09:36 -0400 (Fri, 05 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_debug.c

- add dnssec-tools-config.h
- start ugliness of ifdefs for matching function prototypes to sys header

------------------------------------------------------------------------
r1545 | tewok | 2006-05-05 16:42:41 -0400 (Fri, 05 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/rollerd


Deleted some obsolete "todo" comments left in the file header.

------------------------------------------------------------------------
r1544 | tewok | 2006-05-05 16:40:20 -0400 (Fri, 05 May 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Reordered output of published and new ZSKs.
Minor code-formatting changes.

------------------------------------------------------------------------
r1543 | tewok | 2006-05-05 16:27:44 -0400 (Fri, 05 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/INFO
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL
   M /trunk/dnssec-tools/tools/scripts/README


Added entries for rollerd.

------------------------------------------------------------------------
r1542 | tewok | 2006-05-05 16:26:31 -0400 (Fri, 05 May 2006) | 5 lines
Changed paths:
   A /trunk/dnssec-tools/tools/scripts/rollerd
   D /trunk/dnssec-tools/tools/scripts/rollover-manager


This is the roll-over manager.

rollerd replaces the obsolete rollover-manager.

------------------------------------------------------------------------
r1541 | tewok | 2006-05-05 16:12:55 -0400 (Fri, 05 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm


Added getconfdir().

------------------------------------------------------------------------
r1540 | rstory | 2006-05-05 14:53:26 -0400 (Fri, 05 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/ns_ttl.c

- add dnssec-tools-config.h, sys/types.h

------------------------------------------------------------------------
r1539 | rstory | 2006-05-05 14:46:56 -0400 (Fri, 05 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/ns_print.c

add dnssec-tools-config.h

------------------------------------------------------------------------
r1538 | rstory | 2006-05-05 14:45:25 -0400 (Fri, 05 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/ns_netint.c

add sys/types.h

------------------------------------------------------------------------
r1537 | rstory | 2006-05-05 13:35:37 -0400 (Fri, 05 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/dnssec-tools-config.h.in

update for autoheader/autoconf

------------------------------------------------------------------------
r1536 | rstory | 2006-05-05 13:34:28 -0400 (Fri, 05 May 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/configure.in

- check for sys/filio.h
- add check for int types/sizes/headers
- autoheader macros to define u_* if not defined

------------------------------------------------------------------------
r1535 | tewok | 2006-05-05 10:19:00 -0400 (Fri, 05 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm


Added rollrec_rectype().

------------------------------------------------------------------------
r1533 | tewok | 2006-05-04 10:57:06 -0400 (Thu, 04 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL


Added an entry for rollctl.

------------------------------------------------------------------------
r1532 | rstory | 2006-05-04 09:18:32 -0400 (Thu, 04 May 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/ns_parse.c

- include dnssec-tools-config.h
- define _msg_ptr iff struct name is different
- don't define ns_msg_getflag function if it is already defined as a macro

------------------------------------------------------------------------
r1531 | rstory | 2006-05-04 09:09:28 -0400 (Thu, 04 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/dnssec-tools-config.h.in

- update for configure.in
  - side effect of removing accidentally checked in int type shennanigans

------------------------------------------------------------------------
r1530 | rstory | 2006-05-04 09:06:49 -0400 (Thu, 04 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/configure.in

- fix struct name (don't use typedef name)
- add autoheader templates for struct checks

------------------------------------------------------------------------
r1529 | rstory | 2006-05-04 08:31:55 -0400 (Thu, 04 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/configure

update for configure.in

------------------------------------------------------------------------
r1528 | rstory | 2006-05-04 08:31:15 -0400 (Thu, 04 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/configure.in

check ns_msg struct for msg ptr name

------------------------------------------------------------------------
r1527 | rstory | 2006-05-04 08:30:46 -0400 (Thu, 04 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/aclocal.m4

add AC_CHECK_STRUCT_FOR from net-snmp

------------------------------------------------------------------------
r1526 | rstory | 2006-05-04 08:15:24 -0400 (Thu, 04 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools
   M /trunk/dnssec-tools/.cvsignore

add dnssec-tools-config.h

------------------------------------------------------------------------
r1525 | rstory | 2006-05-04 08:11:49 -0400 (Thu, 04 May 2006) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/aclocal.m4

- copy libtool.m4 for AC_PROG_LIBTOOL
- add AC_ADD_SEARCH_PATH from net-snmp

------------------------------------------------------------------------
r1524 | rstory | 2006-05-04 08:00:50 -0400 (Thu, 04 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/ltmain.sh

update for libtool 1.5.16

------------------------------------------------------------------------
r1523 | rstory | 2006-05-04 07:59:43 -0400 (Thu, 04 May 2006) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/dnssec-tools-config.h.in

new file

------------------------------------------------------------------------
r1522 | rstory | 2006-05-04 07:59:07 -0400 (Thu, 04 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/configure

update for new configure.in

------------------------------------------------------------------------
r1521 | rstory | 2006-05-04 07:58:12 -0400 (Thu, 04 May 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/configure.in

- new dnssec-tools-config.h generated
- check for arpa headers
- check for mistyped ssl args

------------------------------------------------------------------------
r1520 | hardaker | 2006-05-03 19:12:32 -0400 (Wed, 03 May 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/INSTALL

remove Tk requirement since we now need features not available currently in the Tk interface to QWizard

------------------------------------------------------------------------
r1519 | tewok | 2006-05-03 17:25:02 -0400 (Wed, 03 May 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/INFO
   M /trunk/dnssec-tools/tools/scripts/README


Added entries for rollctl.

------------------------------------------------------------------------
r1518 | tewok | 2006-05-03 17:20:44 -0400 (Wed, 03 May 2006) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/scripts/rollctl


Control program for the roll-over daemon.

------------------------------------------------------------------------
r1517 | tewok | 2006-05-02 23:10:52 -0400 (Tue, 02 May 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Renamed *_qproc() to *_cmdint().
Modified pid sanitisation method.
Added some error checking to find unix_getpid() error returns.
Close an open log file when opening up a new log.

------------------------------------------------------------------------
r1516 | tewok | 2006-05-01 22:00:09 -0400 (Mon, 01 May 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Sorted exported symbols.
Deleted an obsolete message.

------------------------------------------------------------------------
r1515 | wgriffin | 2006-04-27 12:24:21 -0400 (Thu, 27 Apr 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval
   M /trunk/dnssec-tools/lib/libval/.cvsignore
   M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c
   M /trunk/dnssec-tools/lib/libval/val_assertion.c
   M /trunk/dnssec-tools/lib/libval/val_cache.c
   M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/lib/libval/val_log.c
   M /trunk/dnssec-tools/lib/libval/val_parse.c
   M /trunk/dnssec-tools/lib/libval/val_policy.c
   M /trunk/dnssec-tools/lib/libval/val_policy.h
   M /trunk/dnssec-tools/lib/libval/val_resquery.c
   M /trunk/dnssec-tools/lib/libval/val_support.c
   M /trunk/dnssec-tools/lib/libval/val_verify.c
   M /trunk/dnssec-tools/lib/libval/val_x_query.c
   M /trunk/dnssec-tools/lib/libval/validator.h

Removed all requirements on arpa/nameser_compat.h. Also added a compiler
directive to enable compilation on cygwin.

------------------------------------------------------------------------
r1514 | wgriffin | 2006-04-27 12:22:39 -0400 (Thu, 27 Apr 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres
   M /trunk/dnssec-tools/lib/libsres/.cvsignore
   M /trunk/dnssec-tools/lib/libsres/include/arpa/nameser.h
   M /trunk/dnssec-tools/lib/libsres/include/resolv.h
   M /trunk/dnssec-tools/lib/libsres/ns_name.c
   M /trunk/dnssec-tools/lib/libsres/ns_netint.c
   M /trunk/dnssec-tools/lib/libsres/ns_parse.c
   M /trunk/dnssec-tools/lib/libsres/ns_print.c
   M /trunk/dnssec-tools/lib/libsres/ns_samedomain.c
   M /trunk/dnssec-tools/lib/libsres/ns_ttl.c
   M /trunk/dnssec-tools/lib/libsres/res_comp.c
   M /trunk/dnssec-tools/lib/libsres/res_debug.c
   M /trunk/dnssec-tools/lib/libsres/res_io_manager.c
   M /trunk/dnssec-tools/lib/libsres/res_mkquery.c
   M /trunk/dnssec-tools/lib/libsres/res_query.c
   M /trunk/dnssec-tools/lib/libsres/res_support.c
   M /trunk/dnssec-tools/lib/libsres/res_tsig.c
   M /trunk/dnssec-tools/lib/libsres/resolver.h

Removed all requirements on arpa/nameser_compat.h, except for the HEADER
struct which is now in a local arpa/header.h include. Also added a compiler
definition to enable compilation on cygwin.

------------------------------------------------------------------------
r1513 | wgriffin | 2006-04-27 12:21:04 -0400 (Thu, 27 Apr 2006) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libsres/include/arpa/header.h

the HEADER struct from nameser_compat.h. This is all that is needed from that
file now.

------------------------------------------------------------------------
r1512 | tewok | 2006-04-27 11:55:15 -0400 (Thu, 27 Apr 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Added four interfaces for sending commands to the roll-over daemon.

------------------------------------------------------------------------
r1511 | hserus | 2006-04-26 17:02:08 -0400 (Wed, 26 Apr 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.c

Create an assertion even if there is some DNS error and store this value
as the assertion status.
Generate correct val_status_t values for the result status

------------------------------------------------------------------------
r1510 | hserus | 2006-04-26 16:59:14 -0400 (Wed, 26 Apr 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_x_query.c

Since assertions are now created even when no data is returned, check for NULL

------------------------------------------------------------------------
r1509 | hserus | 2006-04-26 16:57:52 -0400 (Wed, 26 Apr 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_log.c

Always extract status from the assertion chain; never from the query chain

------------------------------------------------------------------------
r1508 | hserus | 2006-04-26 16:55:27 -0400 (Wed, 26 Apr 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/validator.h

Begin to align data structure definitions with description given in
draft-hayatnagarkar-dnssec-validator-api-00

------------------------------------------------------------------------
r1507 | hserus | 2006-04-26 16:50:29 -0400 (Wed, 26 Apr 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/gethost.c

Validation status is now returned in a variable of type val_status_t

------------------------------------------------------------------------
r1506 | hserus | 2006-04-26 16:46:39 -0400 (Wed, 26 Apr 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c

Use new error value definitions from val_errors.h

------------------------------------------------------------------------
r1505 | hserus | 2006-04-26 16:45:17 -0400 (Wed, 26 Apr 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_errors.h

Added placeholder for DNS errors

------------------------------------------------------------------------
r1504 | hardaker | 2006-04-26 16:39:06 -0400 (Wed, 26 Apr 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

display results side by side

------------------------------------------------------------------------
r1503 | hardaker | 2006-04-25 17:43:08 -0400 (Tue, 25 Apr 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

don't display double -h flag

------------------------------------------------------------------------
r1502 | hardaker | 2006-04-25 12:50:50 -0400 (Tue, 25 Apr 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm
   M /trunk/dnssec-tools/tools/donuts/donuts

more gui support

------------------------------------------------------------------------
r1501 | tewok | 2006-04-24 23:08:11 -0400 (Mon, 24 Apr 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


When -forceroll is given, the zskpub's gensec field is updated to the
current time.

------------------------------------------------------------------------
r1500 | tewok | 2006-04-24 21:59:27 -0400 (Mon, 24 Apr 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Added several logging interfaces: rollmgr_log(), rollmgr_logfile(),
and rollmgr_loglevel().

------------------------------------------------------------------------
r1499 | hardaker | 2006-04-24 16:27:25 -0400 (Mon, 24 Apr 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/MANIFEST

added dnssec tests

------------------------------------------------------------------------
r1498 | hardaker | 2006-04-22 00:12:54 -0400 (Sat, 22 Apr 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Makefile.PL
   M /trunk/dnssec-tools/tools/donuts/Rule.pm
   M /trunk/dnssec-tools/tools/donuts/donuts

- preliminary setup and functioning for a --show-gui option with a
  browsable error database.  not where I want it yet, but a good
  checkin spot.
- remove requirement for Text::Wrap

------------------------------------------------------------------------
r1497 | tewok | 2006-04-21 22:57:25 -0400 (Fri, 21 Apr 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Fix how keyrec_settime() handles key keyrecs.

------------------------------------------------------------------------
r1496 | tewok | 2006-04-21 22:53:36 -0400 (Fri, 21 Apr 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Added some logging constants and functions.

------------------------------------------------------------------------
r1495 | tewok | 2006-04-20 11:03:41 -0400 (Thu, 20 Apr 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/README


Removed some pod constructs from a plain text file.

------------------------------------------------------------------------
r1494 | tewok | 2006-04-20 11:02:00 -0400 (Thu, 20 Apr 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm


Added some roll-over options.

------------------------------------------------------------------------
r1493 | hardaker | 2006-04-20 00:31:33 -0400 (Thu, 20 Apr 2006) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/test.pl

shouldn't have been checked in

------------------------------------------------------------------------
r1492 | hardaker | 2006-04-19 20:32:33 -0400 (Wed, 19 Apr 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm

fix a few typos and bootstrap some of the module functions doing a require within an eval

------------------------------------------------------------------------
r1491 | hardaker | 2006-04-19 20:29:41 -0400 (Wed, 19 Apr 2006) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rr-dnssec.t

Added basic dnssec tests

------------------------------------------------------------------------
r1490 | tewok | 2006-04-19 14:29:56 -0400 (Wed, 19 Apr 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Removed some debugging lines.

------------------------------------------------------------------------
r1489 | tewok | 2006-04-19 11:39:45 -0400 (Wed, 19 Apr 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm


Added rollrec_lock() and rollrec_unlock().

------------------------------------------------------------------------
r1488 | tewok | 2006-04-19 10:14:26 -0400 (Wed, 19 Apr 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm


Added rollrec_settime().
Added skip records.

------------------------------------------------------------------------
r1487 | tewok | 2006-04-18 22:48:03 -0400 (Tue, 18 Apr 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Added an interface to get the name server to reload a zone.

------------------------------------------------------------------------
r1486 | tewok | 2006-04-17 16:41:45 -0400 (Mon, 17 Apr 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL


Added rrchk and rrinit.

------------------------------------------------------------------------
r1485 | tewok | 2006-04-17 16:40:55 -0400 (Mon, 17 Apr 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/INFO
   M /trunk/dnssec-tools/tools/scripts/README
   A /trunk/dnssec-tools/tools/scripts/rrchk


Added rrchk, which checks the validity of a rollrec file.

------------------------------------------------------------------------
r1484 | tewok | 2006-04-17 16:28:38 -0400 (Mon, 17 Apr 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/INFO
   M /trunk/dnssec-tools/tools/scripts/README
   A /trunk/dnssec-tools/tools/scripts/rrinit


Added the rrinit command to create rollrec files and records for use by
the roll-over manager.

------------------------------------------------------------------------
r1483 | tewok | 2006-04-14 23:39:18 -0400 (Fri, 14 Apr 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtinitconf


Added rollerd config fields.

------------------------------------------------------------------------
r1482 | tewok | 2006-04-14 23:10:59 -0400 (Fri, 14 Apr 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtconfchk


Added checks for rollerd values.

------------------------------------------------------------------------
r1481 | tewok | 2006-04-14 22:32:27 -0400 (Fri, 14 Apr 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm


Added a few new defaults.

------------------------------------------------------------------------
r1480 | tewok | 2006-04-14 18:46:43 -0400 (Fri, 14 Apr 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Deleted an errant addition of a zsklife.

------------------------------------------------------------------------
r1479 | ahayatnagarkar | 2006-04-14 11:11:15 -0400 (Fri, 14 Apr 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-0.97_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt

Added -L/usr/local/lib to enable the configure script to find libsres on FreeBSD systems

------------------------------------------------------------------------
r1478 | tewok | 2006-04-13 22:38:10 -0400 (Thu, 13 Apr 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


On -forceroll, copy the published ZSK's zsklife keyrec field to the
new ZSK's keyrec.
Fixed a few typos.

------------------------------------------------------------------------
r1477 | ahayatnagarkar | 2006-04-13 17:07:19 -0400 (Thu, 13 Apr 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/gethost.c

Commented out gethostbyname_r() and gethostbyname2_r() for now since they are not supported by FreeBSD

------------------------------------------------------------------------
r1476 | ahayatnagarkar | 2006-04-13 15:59:12 -0400 (Thu, 13 Apr 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/validator.h

Added function prototypes for val_gethostbyaddr(), val_gethostbyaddr_r() and val_getnameinfo().  These functions are present in the validator draft, but are not implemented yet.

------------------------------------------------------------------------
r1475 | ahayatnagarkar | 2006-04-13 15:34:26 -0400 (Thu, 13 Apr 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/thunderbird/install.rdf

Updated the maximum version number of Thunderbird that we support

------------------------------------------------------------------------
r1474 | ahayatnagarkar | 2006-04-13 13:53:40 -0400 (Thu, 13 Apr 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.4_dnssec_patch.txt

Changed VALIDATE_SUCCESS to VAL_SUCCESS

------------------------------------------------------------------------
r1473 | tewok | 2006-04-13 00:37:52 -0400 (Thu, 13 Apr 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm


Use a better rollerd logfile.

------------------------------------------------------------------------
r1472 | tewok | 2006-04-13 00:21:51 -0400 (Thu, 13 Apr 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm


Added some entries for the rollover manager.

------------------------------------------------------------------------
r1471 | tewok | 2006-04-13 00:04:40 -0400 (Thu, 13 Apr 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm


Added some new entries used by the rollover manager.

------------------------------------------------------------------------
r1470 | tewok | 2006-04-13 00:03:29 -0400 (Thu, 13 Apr 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/README


Added a few missing entries.

------------------------------------------------------------------------
r1468 | hserus | 2006-04-11 15:26:14 -0400 (Tue, 11 Apr 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_support.c

Renamed definition names to align with descriptions given in draft-hayatnagarkar-dnsext-validator-api-00

------------------------------------------------------------------------
r1467 | hserus | 2006-04-11 15:25:41 -0400 (Tue, 11 Apr 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c
   M /trunk/dnssec-tools/lib/libval/val_resquery.c
   M /trunk/dnssec-tools/lib/libval/val_x_query.c
   M /trunk/dnssec-tools/lib/libval/validator.h

Renamed function and definition names to align with descriptions given in
draft-hayatnagarkar-dnsext-validator-api-00

------------------------------------------------------------------------
r1466 | hserus | 2006-04-11 15:24:57 -0400 (Tue, 11 Apr 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_policy.c

Add logic to recurse from root if no default name servers are available

------------------------------------------------------------------------
r1465 | hserus | 2006-04-11 15:24:33 -0400 (Tue, 11 Apr 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_log.c

Renamed functions to align with descriptions given in draft-hayatnagarkar-dnsext-validator-api-00
Added new function to display validator result values

------------------------------------------------------------------------
r1464 | hserus | 2006-04-11 15:24:08 -0400 (Tue, 11 Apr 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_errors.h

Renamed error code names to align with descriptions given in draft-hayatnagarkar-dnsext-validator-api-00

------------------------------------------------------------------------
r1463 | hserus | 2006-04-11 15:23:39 -0400 (Tue, 11 Apr 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_cache.c

Allow recursion from root

------------------------------------------------------------------------
r1462 | hserus | 2006-04-11 15:23:07 -0400 (Tue, 11 Apr 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.h
   M /trunk/dnssec-tools/lib/libval/val_context.c
   M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/lib/libval/val_resquery.h
   M /trunk/dnssec-tools/lib/libval/val_verify.h

Renamed functions to align with descriptions given in draft-hayatnagarkar-dnsext-validator-api-00

------------------------------------------------------------------------
r1461 | hserus | 2006-04-11 15:22:00 -0400 (Tue, 11 Apr 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_verify.c

Since there no longer is any separate field in the val_result_chain structure to track "trust" status,
add the ability to store this information in the status field itself.

------------------------------------------------------------------------
r1460 | hserus | 2006-04-11 15:21:27 -0400 (Tue, 11 Apr 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.c

Renamed definition and function names to align somewhat with the description given in
draft-hayatnagarkar-dnsext-validator-api-00
Since there no longer is any separate field in the val_result_chain structure to track "trust" status,
add the ability to store this information in the status field itself.

------------------------------------------------------------------------
r1459 | hardaker | 2006-04-10 09:44:34 -0400 (Mon, 10 Apr 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/META.yml

version number change; CPAN didn't take the 3 digit number properly

------------------------------------------------------------------------
r1458 | hardaker | 2006-04-09 00:29:10 -0400 (Sun, 09 Apr 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Changes
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/META.yml

fixed a bug with the latest Net::DNS::SEC API and published to 0.6.1

------------------------------------------------------------------------
r1457 | hardaker | 2006-04-07 09:48:54 -0400 (Fri, 07 Apr 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/Makefile.in
   M /trunk/dnssec-tools/lib/libval/doc/Makefile.in

Various misc fixes for dependency issues

------------------------------------------------------------------------
r1456 | hardaker | 2006-04-07 09:47:58 -0400 (Fri, 07 Apr 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/firefox-dnssec-rpm.patch

updated firefox patch

------------------------------------------------------------------------
r1455 | hardaker | 2006-04-07 09:45:50 -0400 (Fri, 07 Apr 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/Makefile.top

doc install mode

------------------------------------------------------------------------
r1454 | lfoster | 2006-04-05 16:03:42 -0400 (Wed, 05 Apr 2006) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/scripts/TrustMan

Initial cut at trust anchor management tools.
basically just the framework.

------------------------------------------------------------------------
r1453 | tewok | 2006-04-04 18:51:03 -0400 (Tue, 04 Apr 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Added the -usepub to use the published key to sign the zone.
Clarified one or two messages.

------------------------------------------------------------------------
r1452 | hardaker | 2006-03-29 15:51:25 -0500 (Wed, 29 Mar 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/dist/dnssec-tools.spec

add perl module provides list

------------------------------------------------------------------------
r1449 | tewok | 2006-03-20 14:01:31 -0500 (Mon, 20 Mar 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Deleted unuswed -life option.
Added -k-enddate option to display calculated key end-date.
Removed key lifespan from long output.
Added key end-date to long output.

------------------------------------------------------------------------
r1446 | tewok | 2006-03-17 22:33:36 -0500 (Fri, 17 Mar 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Adjusted usage message to include the new options.

------------------------------------------------------------------------
r1445 | tewok | 2006-03-17 22:17:30 -0500 (Fri, 17 Mar 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added zone-specific fields so that more specific output can be given.

------------------------------------------------------------------------
r1444 | tewok | 2006-03-17 10:21:07 -0500 (Fri, 17 Mar 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Rename the key-specific options.

------------------------------------------------------------------------
r1443 | tewok | 2006-03-16 21:59:57 -0500 (Thu, 16 Mar 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added key-specific fields so that more specific output can be given.

------------------------------------------------------------------------
r1441 | tewok | 2006-03-14 17:19:16 -0500 (Tue, 14 Mar 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


New method for building output for keys.  This should make it easier to
add new output formats and change existing formats, if needed.

------------------------------------------------------------------------
r1439 | tewok | 2006-03-13 19:20:19 -0500 (Mon, 13 Mar 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


New method for building output for zones.  This should make it easier to
add new output formats and change existing formats, if needed.

------------------------------------------------------------------------
r1438 | tewok | 2006-03-13 18:19:14 -0500 (Mon, 13 Mar 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


*Really* disallow simultaneous -long and -terse.

------------------------------------------------------------------------
r1437 | tewok | 2006-03-13 18:16:13 -0500 (Mon, 13 Mar 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Fixed the copyright dates.
Rearranged a little of the option processing code.
Disallowed simultaneous specification of -long and -terse.

------------------------------------------------------------------------
r1432 | tewok | 2006-03-06 14:24:47 -0500 (Mon, 06 Mar 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL


Added several more scripts for installation.

------------------------------------------------------------------------
r1431 | tewok | 2006-03-06 13:44:35 -0500 (Mon, 06 Mar 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtconfchk


Reworked the message calls.
	- More consistency in when messages are given for different options.
	- '+'/'-' prefix is given on valid/invalid for -verbose.

------------------------------------------------------------------------
r1430 | tewok | 2006-03-03 12:52:38 -0500 (Fri, 03 Mar 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtconfchk


Deleted a debug message.

------------------------------------------------------------------------
r1429 | tewok | 2006-03-03 12:50:54 -0500 (Fri, 03 Mar 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtconfchk


Added -expert.
Added checks for KSK lifespan and ZSK lifespan.
Fixed a couple fields for key lengths.

------------------------------------------------------------------------
r1428 | tewok | 2006-03-02 17:37:23 -0500 (Thu, 02 Mar 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec/README


Fixed a command name.

------------------------------------------------------------------------
r1427 | tewok | 2006-03-02 17:22:06 -0500 (Thu, 02 Mar 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm


Added entries for lifespan-max and lifespan-min.

------------------------------------------------------------------------
r1426 | tewok | 2006-03-01 17:54:48 -0500 (Wed, 01 Mar 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtconfchk


Added the -summary option.

------------------------------------------------------------------------
r1425 | tewok | 2006-03-01 17:40:08 -0500 (Wed, 01 Mar 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtconfchk


Be using goodly and properish grammer in that their final erruh massage.

------------------------------------------------------------------------
r1424 | tewok | 2006-03-01 17:37:32 -0500 (Wed, 01 Mar 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/INFO
   M /trunk/dnssec-tools/tools/scripts/README


Added entries for dtinitconf.
Renamed dt_defaults to dtdefs.

------------------------------------------------------------------------
r1423 | tewok | 2006-03-01 17:35:32 -0500 (Wed, 01 Mar 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/INFO
   M /trunk/dnssec-tools/tools/scripts/README


Renamed confchk to dtconfchk.

------------------------------------------------------------------------
r1422 | tewok | 2006-03-01 17:34:34 -0500 (Wed, 01 Mar 2006) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/dtconfchk


Added checks for config fields:

	archivedir
	entropy_msg
	savekeys
	usegui

------------------------------------------------------------------------
r1421 | tewok | 2006-03-01 17:32:51 -0500 (Wed, 01 Mar 2006) | 3 lines
Changed paths:
   D /trunk/dnssec-tools/tools/scripts/confchk
   A /trunk/dnssec-tools/tools/scripts/dtconfchk


Renaming confchk to dtconfchk.

------------------------------------------------------------------------
r1420 | tewok | 2006-03-01 15:14:52 -0500 (Wed, 01 Mar 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm
   M /trunk/dnssec-tools/tools/scripts/dtinitconf
   M /trunk/dnssec-tools/tools/scripts/genkrf
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Use "lifespan" instead of "lifetime".

------------------------------------------------------------------------
r1419 | tewok | 2006-03-01 13:53:36 -0500 (Wed, 01 Mar 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/confchk


Moved file checks into their own little routine.

------------------------------------------------------------------------
r1418 | tewok | 2006-03-01 13:49:54 -0500 (Wed, 01 Mar 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/confchk


Added a check for the viewimage field.

------------------------------------------------------------------------
r1417 | tewok | 2006-03-01 13:30:01 -0500 (Wed, 01 Mar 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/confchk


Added some subheaders to the pod.
Updated the copyright dates.

------------------------------------------------------------------------
r1416 | tewok | 2006-03-01 11:29:56 -0500 (Wed, 01 Mar 2006) | 4 lines
Changed paths:
   A /trunk/dnssec-tools/tools/etc/dnssec/README


This file describes the steps to take in adding a new field to the
DNSSEC-Tools configuration file.

------------------------------------------------------------------------
r1415 | tewok | 2006-02-28 13:39:11 -0500 (Tue, 28 Feb 2006) | 5 lines
Changed paths:
   A /trunk/dnssec-tools/tools/scripts/dtinitconf


Script to create a new DNSSEC-Tools configuration file.
This allows for completely automated, default-driven files,
completely user-specified files, and all points in between.

------------------------------------------------------------------------
r1414 | tewok | 2006-02-27 23:37:46 -0500 (Mon, 27 Feb 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm


Deleted spaces from a couple of pod headers.

------------------------------------------------------------------------
r1413 | tewok | 2006-02-27 23:36:10 -0500 (Mon, 27 Feb 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm


Added getconffile().

------------------------------------------------------------------------
r1412 | tewok | 2006-02-27 23:32:54 -0500 (Mon, 27 Feb 2006) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/defaults.pm


Added dnssec_tools_defnames() to return the default names.
Sorted the options hash.
Added several additional options:
	- entropy_msg
	- savekeys
	- usegui

------------------------------------------------------------------------
r1411 | tewok | 2006-02-27 11:03:40 -0500 (Mon, 27 Feb 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added -life to give a key's lifespan.

------------------------------------------------------------------------
r1410 | tewok | 2006-02-27 10:13:37 -0500 (Mon, 27 Feb 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/genkrf


Fixed arguments to a couple dnssec_tools_defaults() calls.

------------------------------------------------------------------------
r1409 | hserus | 2006-02-26 21:13:27 -0500 (Sun, 26 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml

Last change for -00

------------------------------------------------------------------------
r1408 | hserus | 2006-02-26 20:37:39 -0500 (Sun, 26 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml

Typo fixes and some reorganization

------------------------------------------------------------------------
r1407 | ahayatnagarkar | 2006-02-26 20:26:46 -0500 (Sun, 26 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml

Some wording changes.

------------------------------------------------------------------------
r1406 | ahayatnagarkar | 2006-02-26 19:32:06 -0500 (Sun, 26 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml

Changed val_free_addrinfo to val_freeaddrinfo.  Some other minor changes.

------------------------------------------------------------------------
r1405 | hserus | 2006-02-26 03:03:03 -0500 (Sun, 26 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml

More review, more changes.

------------------------------------------------------------------------
r1404 | hserus | 2006-02-26 01:43:39 -0500 (Sun, 26 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml

Grammar, content fixes

------------------------------------------------------------------------
r1403 | ahayatnagarkar | 2006-02-25 13:24:44 -0500 (Sat, 25 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml

Use the word "function" instead of "interface" or "method"

------------------------------------------------------------------------
r1402 | ahayatnagarkar | 2006-02-25 13:20:02 -0500 (Sat, 25 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml

Some grammatical edits.  Added a few references.

------------------------------------------------------------------------
r1401 | ahayatnagarkar | 2006-02-25 10:11:36 -0500 (Sat, 25 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml

Updated sentences based on Wayne's feedback

------------------------------------------------------------------------
r1400 | tewok | 2006-02-24 18:04:11 -0500 (Fri, 24 Feb 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm


Stress that key life-time is *only* a matter of time between roll-overs and
that keys don't have any other sort of lifespan.

------------------------------------------------------------------------
r1399 | hserus | 2006-02-24 18:03:43 -0500 (Fri, 24 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml

Added the error codes and return values section

------------------------------------------------------------------------
r1398 | tewok | 2006-02-24 17:57:31 -0500 (Fri, 24 Feb 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/genkrf


Modified pod to fit current option set and reorganized it a bit.

------------------------------------------------------------------------
r1397 | ahayatnagarkar | 2006-02-24 17:45:17 -0500 (Fri, 24 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml

Changed SPARTA Inc. to SPARTA, Inc.

------------------------------------------------------------------------
r1396 | ahayatnagarkar | 2006-02-24 17:36:32 -0500 (Fri, 24 Feb 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml

Changed Security Considerations to mention LOCAL_ANSWER instead of
val_istrusted(), since val_istrusted() was removed.

Misc. changes to words, capitalizations, indentation etc.

------------------------------------------------------------------------
r1395 | hserus | 2006-02-24 17:17:54 -0500 (Fri, 24 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml

More updates as discussed

------------------------------------------------------------------------
r1394 | tewok | 2006-02-24 17:11:16 -0500 (Fri, 24 Feb 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/genkrf


Changed from using GetOptions() to using DNSSEC-Tools' tooloptions().
Added the -ksklife, -zsklife, and -verbose options.

------------------------------------------------------------------------
r1393 | ahayatnagarkar | 2006-02-24 14:37:51 -0500 (Fri, 24 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml

Typo

------------------------------------------------------------------------
r1392 | ahayatnagarkar | 2006-02-24 14:37:14 -0500 (Fri, 24 Feb 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml

Changed names of Context Management API functions to val_*.  Added text to
the Security Considerations and Acknowledgments sections.

------------------------------------------------------------------------
r1391 | tewok | 2006-02-24 13:48:48 -0500 (Fri, 24 Feb 2006) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/scripts/dtdefs


New script to display all the DNSSEC-Tools defaults.

------------------------------------------------------------------------
r1390 | tewok | 2006-02-24 13:04:21 -0500 (Fri, 24 Feb 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/genkrf


Moved usage() to the end of the routines.

------------------------------------------------------------------------
r1389 | tewok | 2006-02-24 12:50:55 -0500 (Fri, 24 Feb 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/genkrf

Obviated version 1.6 and 1.7, which were built on an old version.

To force this change, a few new references were added to the pod
reference section.

------------------------------------------------------------------------
r1388 | ahayatnagarkar | 2006-02-24 12:28:54 -0500 (Fri, 24 Feb 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml

Expanded the abstract.  Removed val_gethostbyname2* functions.  Added
descriptions for val_gethostbyaddr* and val_getnameinfo functions.

------------------------------------------------------------------------
r1387 | hserus | 2006-02-24 11:30:12 -0500 (Fri, 24 Feb 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml

s/validation api/validator api
Removed ' ' for parameters to functions
Added some text to describe the policy labels
added author addresses

------------------------------------------------------------------------
r1386 | hserus | 2006-02-24 03:23:13 -0500 (Fri, 24 Feb 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml

major re-write of the low-level api -- exposed data structures to allow more readability
removed ietf from draft name since this is not a WG document
Added a terminology section
Still need to clarify the policy labels portion
Haven't reviewed any of the above changes

------------------------------------------------------------------------
r1385 | tewok | 2006-02-24 00:13:36 -0500 (Fri, 24 Feb 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Added -ksklife and -zsklife.
Added use of defaults.pm.
Fixed copyright dates.

------------------------------------------------------------------------
r1384 | tewok | 2006-02-23 23:47:42 -0500 (Thu, 23 Feb 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/tachk


Some pod fixes to match up =overs to =backs.

------------------------------------------------------------------------
r1383 | tewok | 2006-02-23 23:25:08 -0500 (Thu, 23 Feb 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/genkrf


Deleted some left-over debug prints.
Added -krfile for output keyrec file.
Added -random for random device.

------------------------------------------------------------------------
r1382 | tewok | 2006-02-23 22:59:39 -0500 (Thu, 23 Feb 2006) | 11 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/genkrf


Modified option parsing to use tooloptions() to incorporate standard
DNSSEC-Tools options.
Fixed copyright dates.
Implemented several new options:
	-ksklife,   -zsklife
	-ksklength, -zsklength
	-verbose
Moved options parsing into its own routine.
Updated the pod to account for these changes.

------------------------------------------------------------------------
r1381 | hardaker | 2006-02-23 15:42:52 -0500 (Thu, 23 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/firefox.spec

change the release number

------------------------------------------------------------------------
r1380 | tewok | 2006-02-23 13:40:56 -0500 (Thu, 23 Feb 2006) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/modules/defaults.pm


New module to hold default values for DNSSEC-Tools.

------------------------------------------------------------------------
r1379 | tewok | 2006-02-23 10:37:44 -0500 (Thu, 23 Feb 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Added support for -ksklife and -zsklife.
Split out a complicated if conditional so it is a bit clearer.

------------------------------------------------------------------------
r1378 | tewok | 2006-02-23 10:32:15 -0500 (Thu, 23 Feb 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm


Added -ksklife and -zsklife.
Made a few capitalization fixes.

------------------------------------------------------------------------
r1377 | ahayatnagarkar | 2006-02-23 07:56:16 -0500 (Thu, 23 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/validator_api.xml

Added author-addresses, moved each api sub-section up one level.

------------------------------------------------------------------------
r1376 | tewok | 2006-02-22 23:47:29 -0500 (Wed, 22 Feb 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm


Added entries for ksklife and zsklife, which indicate the time between
key roll-overs.

------------------------------------------------------------------------
r1375 | hardaker | 2006-02-22 10:43:22 -0500 (Wed, 22 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/dist/dnssec-tools.spec

require autoconf213 for building

------------------------------------------------------------------------
r1374 | hardaker | 2006-02-22 10:41:37 -0500 (Wed, 22 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/Makefile.in

fixed typo creating man1dir twice instead of man3dir

------------------------------------------------------------------------
r1373 | hardaker | 2006-02-22 10:39:37 -0500 (Wed, 22 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/Makefile.in

don't do a decend into libval/docs since libval already does

------------------------------------------------------------------------
r1372 | hardaker | 2006-02-22 10:35:47 -0500 (Wed, 22 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/dist/dnssec-tools.spec

fixed perl version specific paths

------------------------------------------------------------------------
r1371 | ahayatnagarkar | 2006-02-21 11:25:17 -0500 (Tue, 21 Feb 2006) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libval/doc/validator_api.xml

The current version of the Validator API draft in XML format.

------------------------------------------------------------------------
r1370 | tewok | 2006-02-18 11:01:14 -0500 (Sat, 18 Feb 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Moved the entropy warning to the beginning of the program.  (After the option
processing, though.)
Forced output flushing on writes so that messages will appear straight away.

------------------------------------------------------------------------
r1369 | tewok | 2006-02-17 22:50:36 -0500 (Fri, 17 Feb 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Moved the definition of bindcheck() into the conf.pm module.

------------------------------------------------------------------------
r1368 | tewok | 2006-02-17 22:47:57 -0500 (Fri, 17 Feb 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm


Added an interface to check for the existence and executability of
BIND programs.

------------------------------------------------------------------------
r1367 | tewok | 2006-02-17 22:14:50 -0500 (Fri, 17 Feb 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Check for existence of required BIND commands.

------------------------------------------------------------------------
r1366 | hardaker | 2006-02-17 13:26:40 -0500 (Fri, 17 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/INSTALL

mention that bind is needed

------------------------------------------------------------------------
r1354 | hardaker | 2006-02-10 18:50:11 -0500 (Fri, 10 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/firefox.spec

require dnssec-tools 0.9

------------------------------------------------------------------------
r1353 | hardaker | 2006-02-10 18:44:03 -0500 (Fri, 10 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm

documentation update

------------------------------------------------------------------------
r1352 | hardaker | 2006-02-10 18:30:23 -0500 (Fri, 10 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

reference the Rule documentation in a more understandable way

------------------------------------------------------------------------
r1351 | ahayatnagarkar | 2006-02-09 23:14:27 -0500 (Thu, 09 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.4_dnssec_patch.txt

Use val_istrusted() instead of comparing the returned validation status from val_gethostbyname() with VALIDATE_SUCCESS

------------------------------------------------------------------------
r1350 | ahayatnagarkar | 2006-02-09 23:05:41 -0500 (Thu, 09 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c

Display a Result of OK if validation was successful

------------------------------------------------------------------------
r1349 | ahayatnagarkar | 2006-02-09 22:42:53 -0500 (Thu, 09 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-0.97_dnssec_patch.txt

Fixed a switch statement

------------------------------------------------------------------------
r1348 | hardaker | 2006-02-09 17:58:11 -0500 (Thu, 09 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/Makefile.top

use libtool versioning and update the shared library version numbers.

------------------------------------------------------------------------
r1347 | hardaker | 2006-02-09 17:44:16 -0500 (Thu, 09 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/getdnskeys

A new function to output a key and also include keys we couldn't verify but know about

------------------------------------------------------------------------
r1346 | hardaker | 2006-02-09 17:43:18 -0500 (Thu, 09 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/mapper

argument clean-up

------------------------------------------------------------------------
r1345 | hardaker | 2006-02-09 17:38:10 -0500 (Thu, 09 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow

argument cleanup

------------------------------------------------------------------------
r1344 | hardaker | 2006-02-09 17:37:33 -0500 (Thu, 09 Feb 2006) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/dist
   A /trunk/dnssec-tools/dist/dnssec-tools.spec

initial pass at an rpm .spec file

------------------------------------------------------------------------
r1343 | hardaker | 2006-02-09 16:49:32 -0500 (Thu, 09 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/Makefile.in
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/configure.in

perl build arguments

------------------------------------------------------------------------
r1342 | hardaker | 2006-02-09 16:26:29 -0500 (Thu, 09 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/Makefile.in
   M /trunk/dnssec-tools/lib/libsres/doc/Makefile.in
   M /trunk/dnssec-tools/lib/libval/Makefile.in
   M /trunk/dnssec-tools/lib/libval/bin/Makefile.in
   M /trunk/dnssec-tools/lib/libval/doc/Makefile.in

make various paths

------------------------------------------------------------------------
r1341 | ahayatnagarkar | 2006-02-09 11:53:21 -0500 (Thu, 09 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.4_dnssec_patch.txt

Remove unneeded compilation flags

------------------------------------------------------------------------
r1340 | ahayatnagarkar | 2006-02-09 11:52:52 -0500 (Thu, 09 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt

Updated the patch to use the latest validator API

------------------------------------------------------------------------
r1339 | ahayatnagarkar | 2006-02-09 11:51:04 -0500 (Thu, 09 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.4_dnssec_patch.txt

Write val_query results into proper buffer

------------------------------------------------------------------------
r1338 | ahayatnagarkar | 2006-02-09 10:38:41 -0500 (Thu, 09 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt

Updated the patch to use the latest validator API

------------------------------------------------------------------------
r1337 | ahayatnagarkar | 2006-02-08 21:55:37 -0500 (Wed, 08 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.4_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt

Updated the patch to use the latest validator API

------------------------------------------------------------------------
r1336 | ahayatnagarkar | 2006-02-08 14:17:16 -0500 (Wed, 08 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/Makefile.in

libtoolize the installation rule for 'validate'

------------------------------------------------------------------------
r1335 | ahayatnagarkar | 2006-02-08 14:00:31 -0500 (Wed, 08 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/Makefile.bot

Added a rule to create section 1 man pages from pod files

------------------------------------------------------------------------
r1334 | ahayatnagarkar | 2006-02-08 13:59:32 -0500 (Wed, 08 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/Makefile.in

Added rule to create and install man page for the 'validate' tool

------------------------------------------------------------------------
r1333 | ahayatnagarkar | 2006-02-08 13:58:49 -0500 (Wed, 08 Feb 2006) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libval/doc/validate.1
   A /trunk/dnssec-tools/lib/libval/doc/validate.pod

Man page for the 'validate' tool

------------------------------------------------------------------------
r1332 | ahayatnagarkar | 2006-02-08 13:05:40 -0500 (Wed, 08 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.3
   M /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.pod
   M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.3
   M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.pod

Chanaged the year on the copyright notice from 2005 to 2006

------------------------------------------------------------------------
r1331 | ahayatnagarkar | 2006-02-08 13:02:20 -0500 (Wed, 08 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/val_query.3
   M /trunk/dnssec-tools/lib/libval/doc/val_query.pod

Added description of the VAL_QUERY_MERGE_RRSETS flag

------------------------------------------------------------------------
r1330 | ahayatnagarkar | 2006-02-08 12:42:32 -0500 (Wed, 08 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/Makefile.in

Modified the rule to install the 'validate' tool

------------------------------------------------------------------------
r1329 | ahayatnagarkar | 2006-02-08 12:28:15 -0500 (Wed, 08 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/Makefile.in

Added a rule to install the 'validate' tool

------------------------------------------------------------------------
r1328 | ahayatnagarkar | 2006-02-08 12:27:16 -0500 (Wed, 08 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/Makefile.in

Added drawvalmap to the list of tools

------------------------------------------------------------------------
r1327 | ahayatnagarkar | 2006-02-08 12:26:39 -0500 (Wed, 08 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/drawvalmap/Makefile.PL

Add install rule for drawvalmap

------------------------------------------------------------------------
r1326 | ahayatnagarkar | 2006-02-08 12:25:01 -0500 (Wed, 08 Feb 2006) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/drawvalmap/drawvalmap
   D /trunk/dnssec-tools/tools/drawvalmap/drawvalmap.pl

Moved the drawvalmap.pl script to drawvalmap

------------------------------------------------------------------------
r1325 | ahayatnagarkar | 2006-02-08 11:54:03 -0500 (Wed, 08 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/README

Added descriptions of the 'validate' and 'drawvalmap' tools

------------------------------------------------------------------------
r1324 | ahayatnagarkar | 2006-02-08 11:44:30 -0500 (Wed, 08 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c

Added a --merge option to allow the user to get a single merged response (This essentially sets the VAL_QUERY_MERGE_RRSETS flag while calling val_query()).

------------------------------------------------------------------------
r1323 | ahayatnagarkar | 2006-02-08 11:42:46 -0500 (Wed, 08 Feb 2006) | 9 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_x_query.c

The val_query() function now handles the VAL_QUERY_MERGE_RRSETS flag.  When
this flag is set, the RRSETS are merged into a single response.  The
validation status of the response will be VALIDATE_SUCCESS only if each of
the individual RRSETS have a validation status of VALIDATE_SUCCESS.
Otherwise, the validation status will be one of the other error codes.

Added a static function compose_merged_answer() to compose the merged
response when the VAL_QUERY_MERGE_RRSETS flag is set.

------------------------------------------------------------------------
r1322 | ahayatnagarkar | 2006-02-08 11:40:00 -0500 (Wed, 08 Feb 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/validator.h

Added the VAL_QUERY_MERGE_RRSETS flag

------------------------------------------------------------------------
r1321 | hardaker | 2006-02-06 18:26:21 -0500 (Mon, 06 Feb 2006) | 13 lines
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/README
   A /trunk/dnssec-tools/apps/mozilla/firefox-dnssec-rpm.patch
   A /trunk/dnssec-tools/apps/mozilla/firefox.spec

A new patch for firefox 1.5 and an RPM spec file for building a
firefox RPM.
  - This is almost a complete rewrite from the mozilla patch since
    major parts of the current code base is fundamentally different
    from the last mozilla patch, as well as the libval code changed a
    lot as well.
  - thing still to do:
    - a better error page (it's not bad now, but...)
    - remove the dns locking since the dnssec apis are thread-safe & reentrant
    - make a better separation from older PR calls and new DNSSEC ones
      so we don't break other applications not being wise about error
      handling (evolution, ...)

------------------------------------------------------------------------
r1320 | ahayatnagarkar | 2006-01-26 15:56:46 -0500 (Thu, 26 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt

Minor change to config.ac

------------------------------------------------------------------------
r1319 | ahayatnagarkar | 2006-01-17 13:44:31 -0500 (Tue, 17 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c

Reverse the order of aliases in the hostent result to conform with the answer returned by gethostbyname()

------------------------------------------------------------------------
r1318 | ahayatnagarkar | 2006-01-17 12:06:47 -0500 (Tue, 17 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/lib/libval/val_log.c
   M /trunk/dnssec-tools/lib/libval/val_x_query.c
   M /trunk/dnssec-tools/lib/libval/validator.h

Set the 'const' modifier for the struct val_context_t* parameter for certain functions

------------------------------------------------------------------------
r1317 | ahayatnagarkar | 2006-01-17 12:03:56 -0500 (Tue, 17 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.c

Changed the type of parameters for val_isauthentic() and val_istrusted() to val_status_t

------------------------------------------------------------------------
r1316 | ahayatnagarkar | 2006-01-17 11:12:27 -0500 (Tue, 17 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/README

Updated usage syntax of utilities

------------------------------------------------------------------------
r1315 | ahayatnagarkar | 2006-01-17 11:10:08 -0500 (Tue, 17 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc
   A /trunk/dnssec-tools/lib/libval/doc/.cvsignore

Ignore Makefile

------------------------------------------------------------------------
r1314 | ahayatnagarkar | 2006-01-17 11:08:56 -0500 (Tue, 17 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c
   M /trunk/dnssec-tools/lib/libval/val_x_query.c
   M /trunk/dnssec-tools/lib/libval/validator.h

Changed the type of the response field in val_response to 'unsigned char *'

------------------------------------------------------------------------
r1313 | ahayatnagarkar | 2006-01-17 10:57:50 -0500 (Tue, 17 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.3
   M /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.pod

Updated to describe the latest version of the val_getaddrinfo() function

------------------------------------------------------------------------
r1312 | ahayatnagarkar | 2006-01-17 10:57:19 -0500 (Tue, 17 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.3
   M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.pod

Minor wording change

------------------------------------------------------------------------
r1311 | tewok | 2006-01-16 21:43:12 -0500 (Mon, 16 Jan 2006) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Modified examples 1 - 3 to reflect current reality, as it relates to the
new -intermediate option and the new command line arguments.

------------------------------------------------------------------------
r1310 | ahayatnagarkar | 2006-01-16 18:02:02 -0500 (Mon, 16 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/val_query.3
   M /trunk/dnssec-tools/lib/libval/doc/val_query.pod

Minor formatting change

------------------------------------------------------------------------
r1309 | ahayatnagarkar | 2006-01-16 18:01:37 -0500 (Mon, 16 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.3
   M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.pod

Updated to describe the latest versions of the val_gethostbyname*() functions

------------------------------------------------------------------------
r1308 | ahayatnagarkar | 2006-01-16 17:25:29 -0500 (Mon, 16 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/val_query.3
   M /trunk/dnssec-tools/lib/libval/doc/val_query.pod

Updated to describe the latest version of the val_query() function

------------------------------------------------------------------------
r1307 | ahayatnagarkar | 2006-01-16 16:26:57 -0500 (Mon, 16 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c
   M /trunk/dnssec-tools/lib/libval/val_x_query.c
   M /trunk/dnssec-tools/lib/libval/validator.h

Changed the name of the validation_result field in the val_response structure to val_status

------------------------------------------------------------------------
r1306 | ahayatnagarkar | 2006-01-16 16:24:02 -0500 (Mon, 16 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/getaddr.c
   M /trunk/dnssec-tools/lib/libval/bin/gethost.c
   M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c

Changed to use the new high-level validator API

------------------------------------------------------------------------
r1305 | ahayatnagarkar | 2006-01-16 15:49:16 -0500 (Mon, 16 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c

Deleted the old val_x_gethostbyname function.  Added functions val_gethostbyname2, val_gethostbyname_r and val_gethostbyname2_r.  Changed the implementation to conform to the latest high-level validator API.  Added comments.

------------------------------------------------------------------------
r1304 | ahayatnagarkar | 2006-01-16 15:47:15 -0500 (Mon, 16 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c

Deleted the old val_getaddrinfo function.  Changed the name of the val_x_getaddrinfo to val_getaddrinfo.  Updated implementation to conform to the latest high-level validator API.  The val_getaddrinfo function now returns a value of type struct val_addrinfo instead of struct addrinfo. Added Comments.

------------------------------------------------------------------------
r1303 | ahayatnagarkar | 2006-01-16 15:44:32 -0500 (Mon, 16 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_x_query.c

Deleted the old val_query function. Changed name of the val_x_query function to val_query. Added comments.

------------------------------------------------------------------------
r1302 | ahayatnagarkar | 2006-01-16 15:42:59 -0500 (Mon, 16 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/validator.h

Changed functions to conform to the current validator high-level API

------------------------------------------------------------------------
r1301 | ahayatnagarkar | 2006-01-16 12:14:54 -0500 (Mon, 16 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.c

Added the val_istrusted function

------------------------------------------------------------------------
r1300 | hardaker | 2006-01-14 23:48:24 -0500 (Sat, 14 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm
   M /trunk/dnssec-tools/tools/donuts/donuts

change copyright

------------------------------------------------------------------------
r1299 | hardaker | 2006-01-14 23:47:47 -0500 (Sat, 14 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt

change test: -> <test>, change copyright

------------------------------------------------------------------------
r1298 | hardaker | 2006-01-14 23:47:26 -0500 (Sat, 14 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt

change test: -> <test>, change copyright, change live: -> feature: live

------------------------------------------------------------------------
r1297 | hardaker | 2006-01-14 23:46:50 -0500 (Sat, 14 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

change test: -> <test> and change copyright

------------------------------------------------------------------------
r1296 | hardaker | 2006-01-14 23:46:17 -0500 (Sat, 14 Jan 2006) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/donuts/rules/dns.errors.txt

move DNS errors to a common file (most were in "recommendations" which
wasn't correctly named)

------------------------------------------------------------------------
r1295 | hardaker | 2006-01-14 23:45:34 -0500 (Sat, 14 Jan 2006) | 7 lines
Changed paths:
   A /trunk/dnssec-tools/tools/donuts/rules/check_nameservers.txt

rules to check for nameserver compliance:
  - NS records pointing to CNAMEs are flagged.
  - a check_data feature set was added to check each NS record's live
    server to verify it's serving the data properly.  Run with
    "--features check_data" to test (minor bugs still exist for
    certain record types).

------------------------------------------------------------------------
r1294 | hardaker | 2006-01-14 23:44:02 -0500 (Sat, 14 Jan 2006) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

- support for --features to replace --live
  - added feature: definition to rule definition
- support for <test> xml-ish code sections which works more cleanly
  than the test: version.  "init" too
- support for no-wrapping and no-indent of error outputs from rules
- support compare_arrays function better
- allow live queries to supply their own resolver object

------------------------------------------------------------------------
r1293 | hardaker | 2006-01-14 23:42:55 -0500 (Sat, 14 Jan 2006) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm

- support for --features to replace --live
  - added feature: definition to rule definition
- support for <test> xml-ish code sections which works more cleanly
  than the test: version.  "init" too
- support for no-wrapping and no-indent of error outputs from rules

------------------------------------------------------------------------
r1286 | hardaker | 2006-01-09 18:58:23 -0500 (Mon, 09 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

document the --live switch

------------------------------------------------------------------------
r1284 | tewok | 2006-01-06 12:39:29 -0500 (Fri, 06 Jan 2006) | 8 lines
Changed paths:
   A /trunk/dnssec-tools/tools/scripts/rollover-manager

First pass at a daemon to manage key roll-over.

NOTE:	This is known to be incomplete.  I'm checking it in now because I'm
	going on vacation for a week and I want an off-site record of it
	Just In Case.  It should not be considered complete and *definitely*
	should not be put into production.  Feel free to play with it, but
	don't expect great things.

------------------------------------------------------------------------
r1283 | tewok | 2006-01-06 09:58:51 -0500 (Fri, 06 Jan 2006) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Added a check to ensure that the zone file name, signed zone file name,
and intermediate zone file name are all distinct.
Fixed a condition for setting a keyrec field.
Changed use of the "signedfile" keyrec field to "signedzone'.

------------------------------------------------------------------------
r1282 | tewok | 2006-01-05 21:22:47 -0500 (Thu, 05 Jan 2006) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm

Renamed the "signedfile" zone keyrec to "signedzone".
Added "serial" as a zone keyrec field.

------------------------------------------------------------------------
r1281 | tewok | 2006-01-05 21:19:51 -0500 (Thu, 05 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm

Added an entry giving the path to zonesigner.

------------------------------------------------------------------------
r1280 | hardaker | 2006-01-05 00:55:39 -0500 (Thu, 05 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

update (untested) to reflect changes in zonesigner arguments.

------------------------------------------------------------------------
r1279 | tewok | 2006-01-04 23:13:56 -0500 (Wed, 04 Jan 2006) | 11 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Modified command line arguments to be:

	zonesigner [options] <zonefile> [signed-zonefile]

Added -intermediate option.
Delete intermediate file if it wasn't specified by -intermediate.

For the serial number, use (maximum(keyrec serial,zone serial) + 1) as the
new serial number.

------------------------------------------------------------------------
r1278 | tewok | 2006-01-04 10:53:58 -0500 (Wed, 04 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Changed instances of "..krf" to ".krf" in keyrec filename creation.

------------------------------------------------------------------------
r1277 | ahayatnagarkar | 2006-01-03 17:54:46 -0500 (Tue, 03 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.3
   M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.pod

Added an explanatory note about the return value.

------------------------------------------------------------------------
r1276 | ahayatnagarkar | 2006-01-03 17:51:09 -0500 (Tue, 03 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c

Return an answer even if validation status != VALIDATE_SUCCESS

------------------------------------------------------------------------
r1274 | ahayatnagarkar | 2006-01-03 12:07:53 -0500 (Tue, 03 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/Makefile.in

corrected a typo

------------------------------------------------------------------------
r1273 | ahayatnagarkar | 2006-01-03 11:46:15 -0500 (Tue, 03 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_x_query.c

Set the AD bit in the result if the validation status is authentic

------------------------------------------------------------------------
r1272 | ahayatnagarkar | 2006-01-03 11:45:40 -0500 (Tue, 03 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.c
   M /trunk/dnssec-tools/lib/libval/validator.h

Added a new function val_isauthentic() that tells whether a given validation status represents an authenticated result from the validator

------------------------------------------------------------------------
r1271 | hardaker | 2006-01-03 00:59:45 -0500 (Tue, 03 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/getdnskeys

print a security synopsis

------------------------------------------------------------------------
r1270 | hardaker | 2006-01-03 00:54:29 -0500 (Tue, 03 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL
   A /trunk/dnssec-tools/tools/scripts/getdnskeys

added a new getdnskeys script to help manage trust keys for named.conf files

------------------------------------------------------------------------
r1269 | hardaker | 2006-01-02 15:25:26 -0500 (Mon, 02 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs.t

allow @ signs for primary DNS record names in SOA fields

------------------------------------------------------------------------
r1268 | hserus | 2006-01-02 14:53:08 -0500 (Mon, 02 Jan 2006) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.c

Bug fix. Allow proper recognition of trust anchor when there are multiple configured.

------------------------------------------------------------------------
r1267 | tewok | 2005-12-30 18:39:45 -0500 (Fri, 30 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm

Added keyrec_settime() to timestamp a keyrec with the current time.

------------------------------------------------------------------------
r1266 | tewok | 2005-12-30 14:30:34 -0500 (Fri, 30 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Make an error message slightly more informative.

------------------------------------------------------------------------
r1265 | tewok | 2005-12-30 14:14:15 -0500 (Fri, 30 Dec 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

Added support for the usegui config field.
Added opts_gui() to explicitly allow use of the GUI in option selection.
Added opts_nogui() to explicitly disallow use of the GUI in option selection.

------------------------------------------------------------------------
r1264 | tewok | 2005-12-30 14:10:08 -0500 (Fri, 30 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm

Renamed some interfaces to be slightly less Unix-centric.

------------------------------------------------------------------------
r1263 | tewok | 2005-12-30 14:05:02 -0500 (Fri, 30 Dec 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm

Added a debugging print for each interface.
Unbuffered the write in rollrec_write().

------------------------------------------------------------------------
r1262 | tewok | 2005-12-30 11:48:01 -0500 (Fri, 30 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm

Add usegui flag.

------------------------------------------------------------------------
r1261 | hardaker | 2005-12-28 18:06:42 -0500 (Wed, 28 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/Makefile.in
   M /trunk/dnssec-tools/Makefile.top
   A /trunk/dnssec-tools/mkinstalldirs

make directories

------------------------------------------------------------------------
r1260 | hardaker | 2005-12-28 17:46:07 -0500 (Wed, 28 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/configure.in

check for and require openssl

------------------------------------------------------------------------
r1259 | hardaker | 2005-12-28 16:20:14 -0500 (Wed, 28 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Makefile.PL

require Date::Parse

------------------------------------------------------------------------
r1258 | ahayatnagarkar | 2005-12-28 16:00:17 -0500 (Wed, 28 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c

Added the --help command-line option

------------------------------------------------------------------------
r1257 | hardaker | 2005-12-28 13:08:25 -0500 (Wed, 28 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

update GetOpt arguments

------------------------------------------------------------------------
r1256 | ahayatnagarkar | 2005-12-28 11:27:37 -0500 (Wed, 28 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm

Added an entry for the 'viewimage' configuration setting

------------------------------------------------------------------------
r1255 | ahayatnagarkar | 2005-12-28 11:05:49 -0500 (Wed, 28 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap.pl

Added a -d option to display the generated image using an image-viewer program

------------------------------------------------------------------------
r1251 | ahayatnagarkar | 2005-12-27 17:01:42 -0500 (Tue, 27 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap.pl

The driver program has been renamed to 'validate'

------------------------------------------------------------------------
r1250 | ahayatnagarkar | 2005-12-27 16:58:47 -0500 (Tue, 27 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin
   M /trunk/dnssec-tools/lib/libval/bin/.cvsignore

The driver program has been renamed to validate

------------------------------------------------------------------------
r1249 | ahayatnagarkar | 2005-12-27 16:57:23 -0500 (Tue, 27 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c

Changed the output description for command-line query

------------------------------------------------------------------------
r1248 | ahayatnagarkar | 2005-12-27 16:56:41 -0500 (Tue, 27 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/README

Updated descriptions

------------------------------------------------------------------------
r1247 | ahayatnagarkar | 2005-12-27 16:52:49 -0500 (Tue, 27 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/Makefile.in

The 'validate' program is now generated from validator_driver.c instead of validate.c

------------------------------------------------------------------------
r1246 | ahayatnagarkar | 2005-12-27 16:51:23 -0500 (Tue, 27 Dec 2005) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/lib/libval/bin/validate.c

Functionality now provided by validator_driver.c

------------------------------------------------------------------------
r1245 | ahayatnagarkar | 2005-12-27 16:44:26 -0500 (Tue, 27 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c

Updated comments

------------------------------------------------------------------------
r1244 | ahayatnagarkar | 2005-12-27 16:37:39 -0500 (Tue, 27 Dec 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c

Added command-line options so that one can specify a <class,type,name>
query during runtime.

------------------------------------------------------------------------
r1243 | ahayatnagarkar | 2005-12-27 13:36:46 -0500 (Tue, 27 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap.pl

Added a ':' to a regular expression

------------------------------------------------------------------------
r1242 | ahayatnagarkar | 2005-12-27 10:20:49 -0500 (Tue, 27 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/INFO
   M /trunk/dnssec-tools/tools/scripts/README

Added a note about the genkrf script

------------------------------------------------------------------------
r1239 | marz | 2005-12-26 14:41:20 -0500 (Mon, 26 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/Makefile.in
   A /trunk/dnssec-tools/tools/etc/Makefile.PL

makefile fix to install dnssec-tools.conf

------------------------------------------------------------------------
r1235 | hardaker | 2005-12-26 13:17:59 -0500 (Mon, 26 Dec 2005) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

new options:
  --html-out-add-links
  --html-out-add-db-links
  --html-out-add-donuts-links

Text describing the legend a bit.

------------------------------------------------------------------------
r1234 | ahayatnagarkar | 2005-12-21 17:03:50 -0500 (Wed, 21 Dec 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/genkrf

Added a -krfile option to allow the user to specify a keyrec file on the
command line.  Added a note to the documentation saying that this command
will overwrite the keyrec file.

------------------------------------------------------------------------
r1233 | ahayatnagarkar | 2005-12-21 16:50:43 -0500 (Wed, 21 Dec 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm

Changed the behavior of the keyrec_creat() function to truncate an
existing file.  Added the keyrec_open() function to open an existing file.

------------------------------------------------------------------------
r1232 | ahayatnagarkar | 2005-12-21 14:20:36 -0500 (Wed, 21 Dec 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/genkrf

Added methods genksk() and genzsk() to generate the keys if not specified
on the command line.

------------------------------------------------------------------------
r1231 | ahayatnagarkar | 2005-12-21 13:18:14 -0500 (Wed, 21 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm

Added a 'zonename' field to the @KEYFIELDS array

------------------------------------------------------------------------
r1230 | ahayatnagarkar | 2005-12-21 13:17:15 -0500 (Wed, 21 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/INFO

Changed endtime in example from 3 days to 30 days

------------------------------------------------------------------------
r1229 | ahayatnagarkar | 2005-12-21 13:16:02 -0500 (Wed, 21 Dec 2005) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/genkrf

Added options --kskdir, --zskdir, --endtime and --random to allow the user
to specify these from the command line.  If not specified, kskdir and
zskdir default to ".", while the values of endtime and random are read
from /usr/local/etc/dnssec/dnssec-tools.conf.  If their values are not
present in the dnssec-tools.conf file endtime defaults to 30 days and
random defaults to /dev/urandom.

------------------------------------------------------------------------
r1228 | ahayatnagarkar | 2005-12-21 12:22:50 -0500 (Wed, 21 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Changed the default value in examples and comments to 30 days

------------------------------------------------------------------------
r1227 | ahayatnagarkar | 2005-12-21 12:21:56 -0500 (Wed, 21 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf

Changed comment for endtime to say 'thirty days'

------------------------------------------------------------------------
r1226 | ahayatnagarkar | 2005-12-21 11:07:26 -0500 (Wed, 21 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/genkrf

Added a function getkeysize() to extract the size of the key from its .private file

------------------------------------------------------------------------
r1225 | ahayatnagarkar | 2005-12-21 11:06:42 -0500 (Wed, 21 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL

Added genkrf to the list of EXEs

------------------------------------------------------------------------
r1224 | ahayatnagarkar | 2005-12-20 18:10:48 -0500 (Tue, 20 Dec 2005) | 6 lines
Changed paths:
   A /trunk/dnssec-tools/tools/scripts/genkrf

A new script to generate a keyrec file (.krf) from existing keys.
This is the initial version.  It assumes that all key and zone files are in
the current directory.  At present it does not set values for the endtime,
ksklength and zsklength fields, nor does it generate new keys or add records
to the zone file.

------------------------------------------------------------------------
r1223 | ahayatnagarkar | 2005-12-20 18:07:03 -0500 (Tue, 20 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm

Added the keyrec_creat() subroutine and its documentation

------------------------------------------------------------------------
r1222 | hserus | 2005-12-19 15:39:35 -0500 (Mon, 19 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/EXPORT.sym

Update list of symbols that are exported from the resolver library

------------------------------------------------------------------------
r1221 | hserus | 2005-12-19 15:36:34 -0500 (Mon, 19 Dec 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/validator.h

Add new query state Q_WAIT_FOR_GLUE corresponding to the state when glue is being fetched.
Add handles to glue information in the query structure.
Add definition for location of the root.hints file

------------------------------------------------------------------------
r1220 | hserus | 2005-12-19 15:31:01 -0500 (Mon, 19 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_resquery.h

Add prototypes for functions used externally within other files. Also move the macro definition of SAVE_RR_TO_LIST from val_resquery.c to here so that other files can also access this functionality.

------------------------------------------------------------------------
r1219 | hserus | 2005-12-19 15:29:03 -0500 (Mon, 19 Dec 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libval/val_assertion.h

Allow other files to access the add_to_query_chain() function.

------------------------------------------------------------------------
r1218 | hserus | 2005-12-19 15:24:22 -0500 (Mon, 19 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.c
   M /trunk/dnssec-tools/lib/libval/val_resquery.c

Add functionality for following referrals from root

------------------------------------------------------------------------
r1217 | hserus | 2005-12-19 15:17:42 -0500 (Mon, 19 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_cache.h

Add prototype definitions for stow_root_info() and get_root_ns()

------------------------------------------------------------------------
r1216 | hserus | 2005-12-19 15:13:02 -0500 (Mon, 19 Dec 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_cache.c

Don't store name server information separately from other answers in the cache. This allows glue to be located easily.
Add interfaces for storing root nameserver hints in the validator cache and for retrieving the name server list later on.

------------------------------------------------------------------------
r1215 | hserus | 2005-12-19 15:03:04 -0500 (Mon, 19 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_context.c

Modified to read the contents of the root.hints file when a context is created.

------------------------------------------------------------------------
r1214 | hserus | 2005-12-19 15:01:27 -0500 (Mon, 19 Dec 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_policy.h

Add definitions for comment and end statement characters for different types of configuration files.
Add prototype for read_root_hints_file()

------------------------------------------------------------------------
r1213 | hserus | 2005-12-19 14:59:39 -0500 (Mon, 19 Dec 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_policy.c

Add functionality to parse the contents of the root.hints file.
Modify get_token() so that it now takes in the values of the end statement character and commment characters as arguments.

------------------------------------------------------------------------
r1212 | hserus | 2005-12-19 14:47:25 -0500 (Mon, 19 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/resolver.h

Export the clone_ns_list API from the resolver library

------------------------------------------------------------------------
r1211 | hserus | 2005-12-19 14:46:30 -0500 (Mon, 19 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/ns_name.c
   M /trunk/dnssec-tools/lib/libsres/ns_print.c
   M /trunk/dnssec-tools/lib/libsres/res_io_manager.c
   M /trunk/dnssec-tools/lib/libsres/res_mkquery.c

Include header files that some compilers complain as being missing.

------------------------------------------------------------------------
r1206 | ahayatnagarkar | 2005-12-15 15:42:15 -0500 (Thu, 15 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Changed the --zone option to -zone in POD documentation

------------------------------------------------------------------------
r1201 | hardaker | 2005-12-12 19:29:50 -0500 (Mon, 12 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

improve html output

------------------------------------------------------------------------
r1200 | hardaker | 2005-12-12 17:57:36 -0500 (Mon, 12 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

minimal docs on adding new altercation filters

------------------------------------------------------------------------
r1199 | tewok | 2005-12-12 15:56:56 -0500 (Mon, 12 Dec 2005) | 9 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm


Added external interfaces for rollmgr_droppid().
Added Darwin as a supported O/S.

Modified existing unix_droppid() to do a "ps -ax" and then munge about in the
output.  We *should* have been able to do open(FOO,"ps -p $rdpid |") and skip
the search loop.  However, the $rdpid seems to be dropped by the open() and
thus this hard search was required.

------------------------------------------------------------------------
r1198 | hardaker | 2005-12-09 01:08:35 -0500 (Fri, 09 Dec 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

Added a option to explicit create links to test zones rather than
always creating them.

------------------------------------------------------------------------
r1197 | hardaker | 2005-12-08 18:58:52 -0500 (Thu, 08 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/MANIFEST
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/META.yml

Added META.yml

------------------------------------------------------------------------
r1196 | tewok | 2005-12-06 15:41:14 -0500 (Tue, 06 Dec 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm

Changed KSK length to 2048.
Changed ZSK length to 1024.
Changed expiration time to 30 days.

------------------------------------------------------------------------
r1195 | tewok | 2005-12-06 15:37:54 -0500 (Tue, 06 Dec 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Changed default KSK length to 2048.
Changed default expiration time to 30 days.

------------------------------------------------------------------------
r1194 | hserus | 2005-12-01 17:42:23 -0500 (Thu, 01 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_query.c
   M /trunk/dnssec-tools/lib/libval/bin/getaddr.c
   M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c

Add missing includes

------------------------------------------------------------------------
r1193 | hserus | 2005-12-01 17:40:55 -0500 (Thu, 01 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_debug.c
   M /trunk/dnssec-tools/lib/libsres/res_mkquery.c

Rename _res_opcodes to _libsres_opcodes to avoid symbol collision on some systems

------------------------------------------------------------------------
r1192 | hserus | 2005-12-01 17:39:29 -0500 (Thu, 01 Dec 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_comp.c

The new version of resolv.h does not include netinet/in.h by default; do that here.
Also remove portions bracketed by #ifdef BIND_4_COMPAT

------------------------------------------------------------------------
r1191 | hserus | 2005-12-01 17:38:20 -0500 (Thu, 01 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/base64.c
   M /trunk/dnssec-tools/lib/libsres/ns_parse.c
   M /trunk/dnssec-tools/lib/libsres/ns_print.c

The new version of resolv.h does not include <netinet/in.h> by default; do that here.

------------------------------------------------------------------------
r1190 | hserus | 2005-12-01 17:36:42 -0500 (Thu, 01 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/include/arpa/nameser.h

Don't define BIND_4_COMPAT by default

------------------------------------------------------------------------
r1189 | hserus | 2005-12-01 17:35:17 -0500 (Thu, 01 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/include/resolv.h

Keep a local copy of a more recent version of resolv.h

------------------------------------------------------------------------
r1188 | hserus | 2005-12-01 15:23:57 -0500 (Thu, 01 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/Makefile.in
   M /trunk/dnssec-tools/lib/libval/bin/Makefile.in

Look for include files in the resolver directory first

------------------------------------------------------------------------
r1187 | hserus | 2005-12-01 15:10:29 -0500 (Thu, 01 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_log.c
   M /trunk/dnssec-tools/lib/libval/val_policy.c
   M /trunk/dnssec-tools/lib/libval/val_resquery.c
   M /trunk/dnssec-tools/lib/libval/val_x_query.c
   M /trunk/dnssec-tools/lib/libval/validator.h

Add include statements for files that used to be defined via resolver.h

------------------------------------------------------------------------
r1186 | hserus | 2005-12-01 14:59:34 -0500 (Thu, 01 Dec 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/base64.c
   M /trunk/dnssec-tools/lib/libsres/ns_name.c
   M /trunk/dnssec-tools/lib/libsres/ns_netint.c
   M /trunk/dnssec-tools/lib/libsres/ns_parse.c
   M /trunk/dnssec-tools/lib/libsres/ns_print.c
   M /trunk/dnssec-tools/lib/libsres/ns_samedomain.c
   M /trunk/dnssec-tools/lib/libsres/ns_ttl.c
   M /trunk/dnssec-tools/lib/libsres/res_comp.c
   M /trunk/dnssec-tools/lib/libsres/res_debug.c
   M /trunk/dnssec-tools/lib/libsres/res_io_manager.c
   M /trunk/dnssec-tools/lib/libsres/res_mkquery.c
   M /trunk/dnssec-tools/lib/libsres/res_support.c
   M /trunk/dnssec-tools/lib/libsres/res_tsig.c
   M /trunk/dnssec-tools/lib/libsres/resolver.h

Revert to original method of including arpa/nameser.h, arpa/nameser_compat.h and resolv.h on individual files instead of
commonly defining this in resolver.h

------------------------------------------------------------------------
r1185 | hserus | 2005-12-01 13:56:15 -0500 (Thu, 01 Dec 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libsres/include
   A /trunk/dnssec-tools/lib/libsres/include/arpa
   A /trunk/dnssec-tools/lib/libsres/include/arpa/nameser.h
   A /trunk/dnssec-tools/lib/libsres/include/resolv.h

Add local definitions of resolv.h and arpa/nameser.h

------------------------------------------------------------------------
r1184 | hserus | 2005-12-01 09:47:24 -0500 (Thu, 01 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.c
   M /trunk/dnssec-tools/lib/libval/val_parse.c
   M /trunk/dnssec-tools/lib/libval/val_resquery.c
   M /trunk/dnssec-tools/lib/libval/val_support.c
   M /trunk/dnssec-tools/lib/libval/val_verify.c

Made formatting consistent in #include sections

------------------------------------------------------------------------
r1183 | hserus | 2005-12-01 09:44:46 -0500 (Thu, 01 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_context.c
   M /trunk/dnssec-tools/lib/libval/val_log.c

Removed unnecssary include statement

------------------------------------------------------------------------
r1182 | hserus | 2005-12-01 09:33:20 -0500 (Thu, 01 Dec 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/base64.c
   M /trunk/dnssec-tools/lib/libsres/ns_parse.c
   M /trunk/dnssec-tools/lib/libsres/ns_print.c
   M /trunk/dnssec-tools/lib/libsres/res_comp.c
   M /trunk/dnssec-tools/lib/libsres/res_debug.c
   M /trunk/dnssec-tools/lib/libsres/res_io_manager.c
   M /trunk/dnssec-tools/lib/libsres/res_support.c
   M /trunk/dnssec-tools/lib/libsres/res_tsig.c
   M /trunk/dnssec-tools/lib/libsres/resolver.h

Commonly include files that are dependencies for resolv.h on some systems in resolver.h

------------------------------------------------------------------------
r1181 | hserus | 2005-11-30 13:30:13 -0500 (Wed, 30 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_debug.c
   M /trunk/dnssec-tools/lib/libsres/res_support.c

Rename res_pquery to libsres_pquery in order to avoid symbol collision

------------------------------------------------------------------------
r1180 | hserus | 2005-11-30 13:18:31 -0500 (Wed, 30 Nov 2005) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/lib/libsres/include

No longer maintain a local copy of this file.

------------------------------------------------------------------------
r1179 | hserus | 2005-11-30 13:12:14 -0500 (Wed, 30 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c

Define expected values for testcases in the netsec.tislabs.com domain

------------------------------------------------------------------------
r1178 | hserus | 2005-11-30 13:11:56 -0500 (Wed, 30 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/validate.c
   M /trunk/dnssec-tools/lib/libval/val_cache.c
   M /trunk/dnssec-tools/lib/libval/val_support.c
   M /trunk/dnssec-tools/lib/libval/val_x_query.c

Include <arpa/nameser.h> through resolver.h

------------------------------------------------------------------------
r1177 | hserus | 2005-11-30 13:11:37 -0500 (Wed, 30 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/Makefile.in

Typo s/validat/validate

------------------------------------------------------------------------
r1176 | hserus | 2005-11-30 13:11:12 -0500 (Wed, 30 Nov 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/validator.h

APIs exported from the validator are only defined in validator.h
Include <arpa/nameser.h> through resolver.h
Move data structures in val_parse.h that are part of the validator API to validator.h

------------------------------------------------------------------------
r1175 | hserus | 2005-11-30 13:10:42 -0500 (Wed, 30 Nov 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_log.c

APIs exported from the validator are only defined in validator.h
Display query status value for the assertion in addition to the
assertion status in val_log_assertion_chain()
Add new routine p_query_error() for displaying DNS error values

------------------------------------------------------------------------
r1174 | hserus | 2005-11-30 13:09:41 -0500 (Wed, 30 Nov 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_resquery.c

APIs exported from the validator are only defined in validator.h
Include <arpa/nameser.h> through resolver.h
No longer have the query id as part of the name server structure.

------------------------------------------------------------------------
r1173 | hserus | 2005-11-30 13:09:04 -0500 (Wed, 30 Nov 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_policy.h

Move parse_etc_hosts() to val_policy.c
Define a maximum size value of a line in the configuration file

------------------------------------------------------------------------
r1172 | hserus | 2005-11-30 13:08:47 -0500 (Wed, 30 Nov 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_policy.c

Move parse_etc_hosts() from val_parse.c
Use fgets() in place of getline()

------------------------------------------------------------------------
r1171 | hserus | 2005-11-30 13:08:27 -0500 (Wed, 30 Nov 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_parse.h

Move data structures that are part of the validator API to validator.h
Move parse_etc_hosts() to val_policy.c

------------------------------------------------------------------------
r1170 | hserus | 2005-11-30 13:08:11 -0500 (Wed, 30 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_parse.c

Move parse_etc_hosts() to val_policy.c

------------------------------------------------------------------------
r1169 | hserus | 2005-11-30 13:07:50 -0500 (Wed, 30 Nov 2005) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/lib/libval/val_assertion.h
   M /trunk/dnssec-tools/lib/libval/val_context.c
   D /trunk/dnssec-tools/lib/libval/val_context.h
   D /trunk/dnssec-tools/lib/libval/val_getaddrinfo.h
   D /trunk/dnssec-tools/lib/libval/val_gethostbyname.h
   D /trunk/dnssec-tools/lib/libval/val_log.h
   D /trunk/dnssec-tools/lib/libval/val_x_query.h

APIs exported from libval are only defined in validator.h

------------------------------------------------------------------------
r1168 | hserus | 2005-11-30 13:07:24 -0500 (Wed, 30 Nov 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.c
   M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/lib/libval/val_verify.c

APIs exported from libval are only defined in validator.h
Include <arpa/nameser.h> through resolver.h

------------------------------------------------------------------------
r1167 | hserus | 2005-11-30 13:04:40 -0500 (Wed, 30 Nov 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_query.c

Have common includes for arpa/nameser.h and resolv.h in resolver.h
Make sure that nameserver preferences are treated properly for each query.

------------------------------------------------------------------------
r1166 | hserus | 2005-11-30 13:04:21 -0500 (Wed, 30 Nov 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_mkquery.c

Have common includes for arpa/nameser.h and resolv.h in resolver.h
Make a local definition of res_radomid() (call it libsres_randomid()) so that
this functionality is avaiable in platforms where the former does not
exist in libc. Use this random value in new queries.

------------------------------------------------------------------------
r1165 | hserus | 2005-11-30 13:03:59 -0500 (Wed, 30 Nov 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_debug.c

Have common includes for arpa/nameser.h and resolv.h in resolver.h
Remove unnecessary res_init() function

------------------------------------------------------------------------
r1164 | hserus | 2005-11-30 13:03:40 -0500 (Wed, 30 Nov 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/resolver.h

Include arpa/nameser.h and resolv.h from resolver.h
No longer have the query id as part of the name server structure. This
value is computed just before the query is sent out and saved in the
message directly.

------------------------------------------------------------------------
r1163 | hserus | 2005-11-30 13:03:06 -0500 (Wed, 30 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/base64.c
   M /trunk/dnssec-tools/lib/libsres/ns_name.c
   M /trunk/dnssec-tools/lib/libsres/ns_netint.c
   M /trunk/dnssec-tools/lib/libsres/ns_parse.c
   M /trunk/dnssec-tools/lib/libsres/ns_print.c
   M /trunk/dnssec-tools/lib/libsres/ns_samedomain.c
   M /trunk/dnssec-tools/lib/libsres/ns_ttl.c
   M /trunk/dnssec-tools/lib/libsres/res_comp.c
   M /trunk/dnssec-tools/lib/libsres/res_io_manager.c
   M /trunk/dnssec-tools/lib/libsres/res_support.c

Include arpa/nameser.h and resolv.h indirectly from resolver.h

------------------------------------------------------------------------
r1162 | hserus | 2005-11-30 13:01:45 -0500 (Wed, 30 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/Makefile.in

No longer export specific symbols; keep the EXPORT.sym file around for reference though.

------------------------------------------------------------------------
r1160 | hserus | 2005-11-17 14:45:37 -0500 (Thu, 17 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap.pl

Save gif into a temp file before moving it to the actual file name. This minimizes the critical section.

------------------------------------------------------------------------
r1159 | hserus | 2005-11-17 12:33:34 -0500 (Thu, 17 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/dnsval.conf

Update the trust anchor for test.dnssec-tools.org

------------------------------------------------------------------------
r1158 | hserus | 2005-11-17 12:19:52 -0500 (Thu, 17 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c

Allow checking against multiple status values corresponding to different answers returned

------------------------------------------------------------------------
r1157 | hserus | 2005-11-17 12:18:29 -0500 (Thu, 17 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.c

Make sure we preserve failure values.

------------------------------------------------------------------------
r1156 | hserus | 2005-11-16 21:11:52 -0500 (Wed, 16 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/drawvalmap/drawvalmap.pl

Define line properties for new error values

------------------------------------------------------------------------
r1155 | hardaker | 2005-11-16 20:07:30 -0500 (Wed, 16 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/INSTALL

remove need for Fast.pm patch

------------------------------------------------------------------------
r1154 | hardaker | 2005-11-16 19:27:27 -0500 (Wed, 16 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

better default options for zonesigner

------------------------------------------------------------------------
r1153 | hardaker | 2005-11-16 19:24:18 -0500 (Wed, 16 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

increase default key times

------------------------------------------------------------------------
r1152 | hardaker | 2005-11-16 19:22:50 -0500 (Wed, 16 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

fix default option for a records

------------------------------------------------------------------------
r1151 | hardaker | 2005-11-16 18:56:10 -0500 (Wed, 16 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Makefile.PL

add ZoneFile-Fast to list of dirs to decend into

------------------------------------------------------------------------
r1150 | hardaker | 2005-11-16 18:54:52 -0500 (Wed, 16 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/Makefile.in

add maketestzone to the list of make sections

------------------------------------------------------------------------
r1149 | hardaker | 2005-11-16 18:53:37 -0500 (Wed, 16 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

use local addresses

------------------------------------------------------------------------
r1148 | hserus | 2005-11-16 14:20:44 -0500 (Wed, 16 Nov 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/drawvalmap
   A /trunk/dnssec-tools/tools/drawvalmap/Makefile.PL
   A /trunk/dnssec-tools/tools/drawvalmap/drawvalmap.pl

Add simple tool for visualizing validator log data

------------------------------------------------------------------------
r1147 | baerm | 2005-11-16 12:57:14 -0500 (Wed, 16 Nov 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/postfix
   A /trunk/dnssec-tools/apps/postfix/postfix-howto.txt

adding posttfix/ and postfix/postfix-howto.txt

------------------------------------------------------------------------
r1146 | hserus | 2005-11-16 11:37:30 -0500 (Wed, 16 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/validator.h

Add definitions for the server and port to which log messages are to be sent

------------------------------------------------------------------------
r1145 | hserus | 2005-11-16 11:35:05 -0500 (Wed, 16 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_log.c

Add support for simple logging to network

------------------------------------------------------------------------
r1144 | hardaker | 2005-11-16 11:28:06 -0500 (Wed, 16 Nov 2005) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast.patch
   M /trunk/dnssec-tools/tools/patches/README

remove the ZoneFile::Fast ptach as it's rolled into the main distro now

------------------------------------------------------------------------
r1143 | hserus | 2005-11-15 15:43:24 -0500 (Tue, 15 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_log.c
   M /trunk/dnssec-tools/lib/libval/val_log.h

Add helper function for obtaining printable hex strings.

------------------------------------------------------------------------
r1142 | hserus | 2005-11-15 15:39:50 -0500 (Tue, 15 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/crypto/val_dsasha1.c
   M /trunk/dnssec-tools/lib/libval/crypto/val_rsamd5.c
   M /trunk/dnssec-tools/lib/libval/crypto/val_rsasha1.c

Display the hash on one line

------------------------------------------------------------------------
r1141 | hserus | 2005-11-15 15:37:48 -0500 (Tue, 15 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.c

Add log message that says that we are entering the main resolver routine.

------------------------------------------------------------------------
r1140 | hserus | 2005-11-15 14:22:54 -0500 (Tue, 15 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c

Use val_log_assertion_chain() instead of val_print_assertion_chain()

------------------------------------------------------------------------
r1139 | hserus | 2005-11-15 14:17:25 -0500 (Tue, 15 Nov 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/crypto/val_dsasha1.h
   M /trunk/dnssec-tools/lib/libval/crypto/val_rsamd5.h
   M /trunk/dnssec-tools/lib/libval/crypto/val_rsasha1.h
   M /trunk/dnssec-tools/lib/libval/val_verify.h

Changed prototypes of functions that need to perfom logging, since they all
need access to the validator context.

------------------------------------------------------------------------
r1138 | hserus | 2005-11-15 14:17:09 -0500 (Tue, 15 Nov 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/crypto/val_dsasha1.c
   M /trunk/dnssec-tools/lib/libval/crypto/val_rsamd5.c
   M /trunk/dnssec-tools/lib/libval/crypto/val_rsasha1.c
   M /trunk/dnssec-tools/lib/libval/val_assertion.c
   M /trunk/dnssec-tools/lib/libval/val_verify.c

Added LOG_DEBUG-level messages
Changed prototypes of functions that need to perfom logging, since they all
need access to the validator context.

------------------------------------------------------------------------
r1137 | hserus | 2005-11-15 14:16:41 -0500 (Tue, 15 Nov 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/validator.h

Added an identifier field to the validator context
Export prototypes from val_log.h instead of val_print.h
Add definition for default syslog mask

------------------------------------------------------------------------
r1136 | hserus | 2005-11-15 14:16:26 -0500 (Tue, 15 Nov 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_x_query.h

Correct the earlier assumption that the validator context was a constant.
Include prototype for val_query

------------------------------------------------------------------------
r1135 | hserus | 2005-11-15 14:16:12 -0500 (Tue, 15 Nov 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_x_query.c

Merge functionality in val_query.c into this file
Added LOG_DEBUG-level messages
Changed prototypes of functions that need to perfom logging, since they all
need access to the validator context.

------------------------------------------------------------------------
r1134 | hserus | 2005-11-15 14:15:34 -0500 (Tue, 15 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_resquery.c

Added LOG_DEBUG-level messages

------------------------------------------------------------------------
r1133 | hserus | 2005-11-15 14:15:21 -0500 (Tue, 15 Nov 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_policy.c

Added LOG_DEBUG-level messages
Make the validator context to all portions of the file that need access to the
logging interface

------------------------------------------------------------------------
r1132 | hserus | 2005-11-15 14:14:58 -0500 (Tue, 15 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_log.h

Include prototypes of all log related functions.

------------------------------------------------------------------------
r1131 | hserus | 2005-11-15 14:14:44 -0500 (Tue, 15 Nov 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_log.c

Enable logging to syslog
Merge functionality that was in val_print.c to this file.

------------------------------------------------------------------------
r1130 | hserus | 2005-11-15 14:14:26 -0500 (Tue, 15 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.h
   M /trunk/dnssec-tools/lib/libval/val_gethostbyname.h

Correct the earlier assumption that the validator context was a constant.

------------------------------------------------------------------------
r1129 | hserus | 2005-11-15 14:13:59 -0500 (Tue, 15 Nov 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c

Added LOG_DEBUG-level messages
Changed prototypes of functions that need to perfom logging, since they all
need access to the validator context.
Perform proper initialization of context before invoking validator routines

------------------------------------------------------------------------
r1128 | hserus | 2005-11-15 14:13:33 -0500 (Tue, 15 Nov 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_context.c

Don't include val_log.h where it is not required
Initialize the value of the context identifier(the address of the context)

------------------------------------------------------------------------
r1127 | hserus | 2005-11-15 14:13:12 -0500 (Tue, 15 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_cache.c
   M /trunk/dnssec-tools/lib/libval/val_parse.c
   M /trunk/dnssec-tools/lib/libval/val_support.c

Don't include val_log.h where it is not necessary

------------------------------------------------------------------------
r1126 | hserus | 2005-11-15 14:11:18 -0500 (Tue, 15 Nov 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/Makefile.in

val_print.c is now merged into val_log.c
val_query.c is now merged into val_x_query.c

------------------------------------------------------------------------
r1125 | hserus | 2005-11-15 14:11:03 -0500 (Tue, 15 Nov 2005) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/lib/libval/val_query.c
   D /trunk/dnssec-tools/lib/libval/val_query.h

val_query.c is now merged into val_x_query.c

------------------------------------------------------------------------
r1124 | hserus | 2005-11-15 14:10:41 -0500 (Tue, 15 Nov 2005) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/lib/libval/val_print.c
   D /trunk/dnssec-tools/lib/libval/val_print.h

val_print.c is now merged into val_log.c

------------------------------------------------------------------------
r1123 | hardaker | 2005-11-14 19:55:42 -0500 (Mon, 14 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm

reindent for consistency

------------------------------------------------------------------------
r1122 | hardaker | 2005-11-14 19:53:49 -0500 (Mon, 14 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/MANIFEST
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/README

created a README file

------------------------------------------------------------------------
r1121 | hardaker | 2005-11-14 19:38:16 -0500 (Mon, 14 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Changes
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm
   M /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Makefile.PL

Update to our version of Fast

------------------------------------------------------------------------
r1119 | hardaker | 2005-11-14 19:31:57 -0500 (Mon, 14 Nov 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/.cvsignore
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Changes
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/MANIFEST
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/Makefile.PL
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/00-load.t
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/comment.t
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/generate.t
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/lines.t
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/newlines.t
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/null-rr.t
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/origin.t
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/read.t
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rr-multi-a.t
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs-ws.t
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/rrs.t
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/soattl.t
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/ttl.t
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/t/zone.t
   A /trunk/dnssec-tools/tools/modules/ZoneFile-Fast/test.pl

initial copy of the CPAN Fast.pm release into our tree

------------------------------------------------------------------------
r1118 | hardaker | 2005-11-12 01:12:29 -0500 (Sat, 12 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

reorganized command line option listings for better help output

------------------------------------------------------------------------
r1117 | hardaker | 2005-11-12 01:11:50 -0500 (Sat, 12 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm

improved output for individual records

------------------------------------------------------------------------
r1116 | hserus | 2005-11-10 11:22:49 -0500 (Thu, 10 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/dnsval.conf

Specify a slightly more useful default.

------------------------------------------------------------------------
r1115 | hserus | 2005-11-10 11:04:25 -0500 (Thu, 10 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/validator.h

Don't include prototypes from val_policy.h in list of APIs exported.

------------------------------------------------------------------------
r1114 | hserus | 2005-11-10 10:56:36 -0500 (Thu, 10 Nov 2005) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c

Add a fifth field to the test case structure for expected result status
Check this expected status against what was received.
No longer use val_x_query(); instead use resolve_n_check() so that
we have more visibility into the assertion structure.
Add 169 new test cases from test.dnssec-tools.org

------------------------------------------------------------------------
r1113 | hserus | 2005-11-10 10:51:51 -0500 (Thu, 10 Nov 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/validator.h

Include header files instead of the listing the APIs of exported functions
again.

------------------------------------------------------------------------
r1112 | hserus | 2005-11-10 10:51:38 -0500 (Thu, 10 Nov 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_x_query.c

Move val_x_query() after compose_answer() so that the latter can be made
static.

------------------------------------------------------------------------
r1111 | hserus | 2005-11-10 10:51:25 -0500 (Thu, 10 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_support.c
   M /trunk/dnssec-tools/lib/libval/val_support.h

Move p_val_error() from val_support.c to val_print.c

------------------------------------------------------------------------
r1110 | hserus | 2005-11-10 10:51:09 -0500 (Thu, 10 Nov 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_print.c
   M /trunk/dnssec-tools/lib/libval/val_print.h

Move p_val_error() from val_support.c to val_print.c
Rename print_ns_string() to ns_string(). Make the function static for now.

------------------------------------------------------------------------
r1109 | hserus | 2005-11-10 10:50:54 -0500 (Thu, 10 Nov 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_policy.c
   M /trunk/dnssec-tools/lib/libval/val_policy.h

Move the switch_effective_policy() function from val_policy.c to val_context.c
Allow check_relevance to be called from val_context.c

------------------------------------------------------------------------
r1108 | hserus | 2005-11-10 10:50:39 -0500 (Thu, 10 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_context.c
   M /trunk/dnssec-tools/lib/libval/val_context.h

Move the switch_effective_policy() function from val_policy.c to val_context.c

------------------------------------------------------------------------
r1107 | hserus | 2005-11-10 10:50:27 -0500 (Thu, 10 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_cache.h

Change RES_CACHE_H to VAL_CACHE_H

------------------------------------------------------------------------
r1106 | hserus | 2005-11-10 10:50:16 -0500 (Thu, 10 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.h

Do not list prototypes of functions that are static

------------------------------------------------------------------------
r1105 | hserus | 2005-11-10 10:49:46 -0500 (Thu, 10 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.c
   M /trunk/dnssec-tools/lib/libval/val_resquery.c
   M /trunk/dnssec-tools/lib/libval/val_verify.c

Make functions that are local to this file static

------------------------------------------------------------------------
r1104 | hserus | 2005-11-10 09:17:18 -0500 (Thu, 10 Nov 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_print.c
   M /trunk/dnssec-tools/lib/libval/val_print.h

No longer require that the "top" query be directly passed to the function.
Instead search for this element using the {name, type, class} tuple

------------------------------------------------------------------------
r1103 | hserus | 2005-11-10 09:07:46 -0500 (Thu, 10 Nov 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.c

Keep going up the chain of trust when we see a failure and when its possible to
go up the chain.

------------------------------------------------------------------------
r1102 | wgriffin | 2005-11-09 12:06:38 -0500 (Wed, 09 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/INFO
   M /trunk/dnssec-tools/tools/scripts/README

Updated INFO and add note that tachk requires Net::DNS::SEC

------------------------------------------------------------------------
r1101 | wgriffin | 2005-11-09 11:53:50 -0500 (Wed, 09 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/README
   A /trunk/dnssec-tools/tools/scripts/tachk

Added tachk: simplistic trust anchor checking

------------------------------------------------------------------------
r1100 | hserus | 2005-11-09 11:39:44 -0500 (Wed, 09 Nov 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_support.c

Display assertion status of "UNEVALUATED" when the chain of trust has not
been traversed beyond this point.

------------------------------------------------------------------------
r1099 | hserus | 2005-11-09 11:38:32 -0500 (Wed, 09 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_policy.c

Do a slightly better job of parsing the validator policy file

------------------------------------------------------------------------
r1098 | hserus | 2005-11-09 11:37:33 -0500 (Wed, 09 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_parse.h

prototype for val_parse_dnskey_string() has changed

------------------------------------------------------------------------
r1097 | hserus | 2005-11-09 11:35:59 -0500 (Wed, 09 Nov 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_parse.c

Allocate the dnskey rdata structure within val_parse_dnskey_string; pass the
address of the pointer as the last parameter to this function.

------------------------------------------------------------------------
r1096 | hserus | 2005-11-09 11:33:58 -0500 (Wed, 09 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.c

Bug fix: determination of trusted zones was being done incorrectly

------------------------------------------------------------------------
r1094 | hardaker | 2005-11-08 19:45:04 -0500 (Tue, 08 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

allow donuts to be run on each generated zone file

------------------------------------------------------------------------
r1093 | hardaker | 2005-11-08 18:56:50 -0500 (Tue, 08 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

fix one bug and remove duplicate errors under certain sanity checks

------------------------------------------------------------------------
r1092 | hardaker | 2005-11-08 16:55:59 -0500 (Tue, 08 Nov 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

- add bogus inserted-later records
- make baddata cnames point to bogus.$domain and insert that record (signed)
- create a sh test script to run dig against every produced name
- sort and separate records that are put into the HTML list output

------------------------------------------------------------------------
r1091 | hardaker | 2005-11-06 19:50:03 -0500 (Sun, 06 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

fix base64 mucking to make it legal.

------------------------------------------------------------------------
r1090 | hardaker | 2005-11-06 19:40:48 -0500 (Sun, 06 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

Added capability to produce html output and apache configuration directives.

------------------------------------------------------------------------
r1089 | hardaker | 2005-11-06 18:44:15 -0500 (Sun, 06 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

Added support to generate a bind configuration file to load the created files.

------------------------------------------------------------------------
r1088 | hardaker | 2005-11-04 19:39:25 -0500 (Fri, 04 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

generate sub-zones with particular types of bad data and bad NS/DS records

------------------------------------------------------------------------
r1087 | hardaker | 2005-11-04 18:02:10 -0500 (Fri, 04 Nov 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

allow cnames to not be generated.
create and allow for not-creation of sub-ns records
a few comments describing what we're doing

------------------------------------------------------------------------
r1086 | hardaker | 2005-11-04 17:26:04 -0500 (Fri, 04 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

add nodes that have past end dates and future start dates

------------------------------------------------------------------------
r1085 | hardaker | 2005-11-04 17:25:23 -0500 (Fri, 04 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

print the record name in the sig-expired warning

------------------------------------------------------------------------
r1084 | hardaker | 2005-11-03 20:14:46 -0500 (Thu, 03 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone
   M /trunk/dnssec-tools/tools/maketestzone/.cvsignore

ignore zonesigner files

------------------------------------------------------------------------
r1083 | hardaker | 2005-11-03 20:14:07 -0500 (Thu, 03 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

Use IO::File instead of standard perl IO for future multiple-file support.

------------------------------------------------------------------------
r1082 | hardaker | 2005-11-03 19:17:13 -0500 (Thu, 03 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/maketestzone/maketestzone

new bad data: modify the A/AAAA records after signing

------------------------------------------------------------------------
r1081 | hardaker | 2005-11-03 18:58:09 -0500 (Thu, 03 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/mapper

remove display_image parameter from getops config tokens

------------------------------------------------------------------------
r1080 | hardaker | 2005-11-03 18:34:23 -0500 (Thu, 03 Nov 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/maketestzone
   A /trunk/dnssec-tools/tools/maketestzone/.cvsignore
   A /trunk/dnssec-tools/tools/maketestzone/Makefile.PL
   A /trunk/dnssec-tools/tools/maketestzone/maketestzone

script to generate test zones with broken data

------------------------------------------------------------------------
r1079 | hserus | 2005-11-02 14:16:50 -0500 (Wed, 02 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_debug.c

Use strerror_r instead of strerror

------------------------------------------------------------------------
r1078 | hserus | 2005-11-02 13:54:07 -0500 (Wed, 02 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c

Use better names for test case description

------------------------------------------------------------------------
r1077 | hserus | 2005-11-02 13:50:52 -0500 (Wed, 02 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/Makefile.in

Define _GNU_SOURCE while compiling code

------------------------------------------------------------------------
r1076 | hserus | 2005-11-02 13:41:10 -0500 (Wed, 02 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/Makefile.in

link against libpthread

------------------------------------------------------------------------
r1075 | hserus | 2005-11-02 12:31:52 -0500 (Wed, 02 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/validator.h

Add prototype definitions that should have been present.

------------------------------------------------------------------------
r1074 | hserus | 2005-11-02 12:31:36 -0500 (Wed, 02 Nov 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_x_query.c

Don't free the validator cache once the answer is returned. We have still to
implement the logic for cache timeouts, so the cache size can become
quite large.

------------------------------------------------------------------------
r1073 | hserus | 2005-11-02 12:30:49 -0500 (Wed, 02 Nov 2005) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_resquery.c

Compare the correct values while determining if the query has already been
sent.
Store default resolver parameters in the name_server structure while
generating a referral for a query.
Check return values following data stowage in the cache.

------------------------------------------------------------------------
r1072 | hserus | 2005-11-02 12:30:13 -0500 (Wed, 02 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_print.c
   M /trunk/dnssec-tools/lib/libval/val_print.h

Remove the unused dump_val_context function.

------------------------------------------------------------------------
r1071 | hserus | 2005-11-02 12:29:49 -0500 (Wed, 02 Nov 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_policy.c

Make code re-entrant. Acquire shared lock before reading the
configuration file(s).
Set default values for the resolver options when creating the name server structure

------------------------------------------------------------------------
r1070 | hserus | 2005-11-02 12:29:22 -0500 (Wed, 02 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_cache.h

Added prototype definitions for modified and new functions.

------------------------------------------------------------------------
r1069 | hserus | 2005-11-02 12:29:08 -0500 (Wed, 02 Nov 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_cache.c

Make code re-entrant. Acquire shared lock when trying to read the cache
and acquire an excluse lock when trying to write. Prototypes of various
functions also change.

------------------------------------------------------------------------
r1068 | hserus | 2005-11-02 12:28:46 -0500 (Wed, 02 Nov 2005) | 10 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.c

Expose only a single get_cached_rrset() function instead of the separate
get_cached_ds() get_cached_keys() and get_cached_answers(). This makes it
easier to make this portion of the code re-entrant.
Also check return value from stow_answer().
Add a flag to the ask_cache() routine to indicate that data was received
from the cache. This is necessary to allow the outer routine to break out of
the loop when data is only received from the cache.

CVS :----------------------------------------------------------------------

------------------------------------------------------------------------
r1067 | hserus | 2005-11-02 12:28:05 -0500 (Wed, 02 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/resolver.h

Added new resolver parameters to the name_server structure.

------------------------------------------------------------------------
r1066 | hserus | 2005-11-02 12:27:49 -0500 (Wed, 02 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_support.c

No longer passing _res to the print routines.

------------------------------------------------------------------------
r1065 | hserus | 2005-11-02 12:27:32 -0500 (Wed, 02 Nov 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_query.c

Copy resolver parameters while cloning name_server structures.
Pass resolver options through the name_server structure.

------------------------------------------------------------------------
r1064 | hserus | 2005-11-02 12:27:03 -0500 (Wed, 02 Nov 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_mkquery.h

Changed prototypes for res_nmkquery and res_opt, Also changed their names to
res_val_* to avoid confusing with BIND functions.

------------------------------------------------------------------------
r1063 | hserus | 2005-11-02 12:26:47 -0500 (Wed, 02 Nov 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_mkquery.c

Removed dependency on _res; instead use new parameters from the name server
structure

------------------------------------------------------------------------
r1062 | hserus | 2005-11-02 12:26:29 -0500 (Wed, 02 Nov 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_io_manager.c

Removed dependency on _res; _res parameters are now inside the name_server
structure. Made portions of the code that use static variables re-entrant.

------------------------------------------------------------------------
r1061 | hserus | 2005-11-02 12:25:55 -0500 (Wed, 02 Nov 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_debug.c

Removed dependency on _res.  Dont provision for a growing buflen to hold
messages. Keep this constant to avoid needless critical sections.

------------------------------------------------------------------------
r1060 | hserus | 2005-11-02 12:25:08 -0500 (Wed, 02 Nov 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/EXPORT.sym

Export symbols needed by other applications such as mozilla

------------------------------------------------------------------------
r1059 | hardaker | 2005-10-27 12:26:44 -0400 (Thu, 27 Oct 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/mapper

fix getopt configure call

------------------------------------------------------------------------
r1058 | hardaker | 2005-10-27 11:26:32 -0400 (Thu, 27 Oct 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/INSTALL

Getopt::Long::GUI -> Getopt::GUI::Long

------------------------------------------------------------------------
r1057 | lfoster | 2005-10-24 13:34:56 -0400 (Mon, 24 Oct 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/logwatch/scripts/shared/applybinddate

modified to work with logwatch7 release; tested; now in the logwatch cvs repository.

------------------------------------------------------------------------
r1055 | hserus | 2005-10-14 13:32:05 -0400 (Fri, 14 Oct 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/validator.h

Structures for rrset_rec and query_chain have a new respondent_server element.

------------------------------------------------------------------------
r1054 | hserus | 2005-10-14 13:31:43 -0400 (Fri, 14 Oct 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_verify.c

Use host byte order for comparisons.
Look at all DS records before deciding that a delegation is lame.

------------------------------------------------------------------------
r1053 | hserus | 2005-10-14 13:31:22 -0400 (Fri, 14 Oct 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_support.h

find_rr_set takes the respondent server as a parameter

------------------------------------------------------------------------
r1052 | hserus | 2005-10-14 13:31:03 -0400 (Fri, 14 Oct 2005) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_support.c

Support cleanup of the respondent server information from the rrset record
find_rr_set takes the respondent server as a parameter and stores this information with the rrset
Empty nxdomain responses have no respondent server information
copy_rrset_rec also copies respondent server information
Add support for displaying more error values in p_val_error

------------------------------------------------------------------------
r1051 | hserus | 2005-10-14 13:30:44 -0400 (Fri, 14 Oct 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_resquery.c

Store respondent server information with the data received and with the query that initiated the reponse.
Free the respondent server information once we are done using it.

------------------------------------------------------------------------
r1050 | hserus | 2005-10-14 13:30:25 -0400 (Fri, 14 Oct 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_print.h

Added prototypes for functions that print the details of a given name server and assertion status information.

------------------------------------------------------------------------
r1049 | hserus | 2005-10-14 13:30:07 -0400 (Fri, 14 Oct 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_print.c

Use re-entrant function ctime_r instead of ctime
Aded two new functions -- one for displaying name server information and another for displaying details of the assertion
status.

------------------------------------------------------------------------
r1048 | hserus | 2005-10-14 13:29:45 -0400 (Fri, 14 Oct 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_io_manager.c
   M /trunk/dnssec-tools/lib/libval/val_log.h
   M /trunk/dnssec-tools/lib/libval/val_policy.c

Added 'const' declaration for static variables that are never modified

------------------------------------------------------------------------
r1047 | hserus | 2005-10-14 13:29:28 -0400 (Fri, 14 Oct 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_parse.c

Don't try and use network byte order when host order is perfectly reasonable.

------------------------------------------------------------------------
r1046 | hserus | 2005-10-14 13:28:50 -0400 (Fri, 14 Oct 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_log.c

Added 'const' declaration for static variables that are never modified
Log to stdout instead of stderr -- logging framework will change in any case.

------------------------------------------------------------------------
r1045 | hserus | 2005-10-14 13:28:32 -0400 (Fri, 14 Oct 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.c

Manage the new qc_respondent_server component of struct query_chain.
Log information about the assertion chain before returning from resolve_n_check

------------------------------------------------------------------------
r1044 | hserus | 2005-10-14 13:28:12 -0400 (Fri, 14 Oct 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/resolver.h

Added prototype for clone_ns

------------------------------------------------------------------------
r1043 | hserus | 2005-10-14 13:27:53 -0400 (Fri, 14 Oct 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_query.c

Handle cases where NULL is passed as the input to clone_ns

------------------------------------------------------------------------
r1042 | hserus | 2005-10-14 13:27:11 -0400 (Fri, 14 Oct 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_debug.c

Use the reentrant version of gmtime at all times
Added 'const' declaration for static variables that are never modified

------------------------------------------------------------------------
r1041 | hserus | 2005-10-14 13:26:54 -0400 (Fri, 14 Oct 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/EXPORT.sym

Add symbol for clone_ns

------------------------------------------------------------------------
r1036 | hardaker | 2005-09-25 23:58:41 -0400 (Sun, 25 Sep 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

reopen stdout/err to /dev/null after closing; sleep a touch longer

------------------------------------------------------------------------
r1035 | hardaker | 2005-09-22 19:51:49 -0400 (Thu, 22 Sep 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

- close stderr/out before invoking tcpdump
- Call Getopt::GUI::Long::Config properly when needed

------------------------------------------------------------------------
r1007 | hserus | 2005-09-02 16:32:11 -0400 (Fri, 02 Sep 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_resquery.c

Make sure that resolver error values are always returned in the query state.

------------------------------------------------------------------------
r1006 | hserus | 2005-09-02 16:29:26 -0400 (Fri, 02 Sep 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_errors.h

Correct numbering typo

------------------------------------------------------------------------
r1005 | hserus | 2005-09-02 16:29:01 -0400 (Fri, 02 Sep 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.c

Handle case of CNAME and SOA co-existing in the answer

------------------------------------------------------------------------
r1004 | hserus | 2005-09-02 16:27:52 -0400 (Fri, 02 Sep 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_query.c

Check for SR_IO_NO_ANSWER_YET as the return value from res_io_accept() instead
of SR_NO_ANSWER_YET

------------------------------------------------------------------------
r1003 | hserus | 2005-09-02 16:22:35 -0400 (Fri, 02 Sep 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_io_manager.h

Now assigning a unique definition for SR_IO_NO_ANSWER_YET

------------------------------------------------------------------------
r998 | hardaker | 2005-08-31 16:58:22 -0400 (Wed, 31 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/doc/libsres.3
   M /trunk/dnssec-tools/lib/libval/doc/libval.3
   M /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.3
   M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.3
   M /trunk/dnssec-tools/lib/libval/doc/val_query.3

update

------------------------------------------------------------------------
r997 | hardaker | 2005-08-31 16:52:46 -0400 (Wed, 31 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/README

untabify

------------------------------------------------------------------------
r996 | hardaker | 2005-08-31 16:52:21 -0400 (Wed, 31 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/README

update to current list of software

------------------------------------------------------------------------
r995 | hardaker | 2005-08-31 16:41:53 -0400 (Wed, 31 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/configure

autogenerate from the most recent configure

------------------------------------------------------------------------
r994 | hardaker | 2005-08-31 16:41:20 -0400 (Wed, 31 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-enable.patch

update to the latest API set with a more recent mozilla

------------------------------------------------------------------------
r993 | ahayatnagarkar | 2005-08-31 16:40:54 -0400 (Wed, 31 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/val_query.3
   M /trunk/dnssec-tools/lib/libval/doc/val_query.pod

Added a note that val_query() does not handle different types of records in the answer section.

------------------------------------------------------------------------
r992 | hardaker | 2005-08-31 16:31:56 -0400 (Wed, 31 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/README

Updated to reference that only 1.7.10 has been tested recently.

------------------------------------------------------------------------
r989 | ahayatnagarkar | 2005-08-31 16:02:14 -0400 (Wed, 31 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_policy.c

Do not reverse the order of nameservers in resolv.conf file.

------------------------------------------------------------------------
r987 | ahayatnagarkar | 2005-08-31 13:27:53 -0400 (Wed, 31 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_policy.c

Set variables to NULL after freeing memory.

------------------------------------------------------------------------
r986 | hardaker | 2005-08-31 12:36:31 -0400 (Wed, 31 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/README

rework note about system patches based on compiling based on a known
working source set, like a source RPM, instead of explicitly mentioning
certain patch work arounds.

------------------------------------------------------------------------
r985 | tewok | 2005-08-31 12:30:51 -0400 (Wed, 31 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/doc/libsres.3
   M /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.3
   M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.3
   M /trunk/dnssec-tools/lib/libval/doc/val_query.3


Latest version.

------------------------------------------------------------------------
r984 | tewok | 2005-08-31 12:20:05 -0400 (Wed, 31 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts


Fixed some typos.

------------------------------------------------------------------------
r983 | tewok | 2005-08-31 12:13:51 -0400 (Wed, 31 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts


Deleted an unnecessary hyphen.

------------------------------------------------------------------------
r982 | tewok | 2005-08-31 12:09:36 -0400 (Wed, 31 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts


Formatting fixes.
Typo fixes.

------------------------------------------------------------------------
r981 | tewok | 2005-08-31 11:21:07 -0400 (Wed, 31 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/doc/libsres.pod


Fixed constant name.

------------------------------------------------------------------------
r980 | hserus | 2005-08-31 11:11:30 -0400 (Wed, 31 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/resolver.h

Fixed typo in SR_UNSUPP_EDNS0_LABEL definition

------------------------------------------------------------------------
r979 | tewok | 2005-08-31 11:02:13 -0400 (Wed, 31 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/doc/libsres.pod


Fixed my own capitalization error.

------------------------------------------------------------------------
r978 | tewok | 2005-08-31 10:58:37 -0400 (Wed, 31 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/doc/libsres.pod


Formatting fix for synopsis.

------------------------------------------------------------------------
r977 | tewok | 2005-08-31 10:53:43 -0400 (Wed, 31 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/doc/libsres.pod


Formatting fixes.

------------------------------------------------------------------------
r976 | tewok | 2005-08-31 10:38:14 -0400 (Wed, 31 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.pod
   M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.pod
   M /trunk/dnssec-tools/lib/libval/doc/val_query.pod


Formatting fixes.

------------------------------------------------------------------------
r975 | tewok | 2005-08-31 10:25:34 -0400 (Wed, 31 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/podmantex
   M /trunk/dnssec-tools/podtrans


Formatting fixes.

------------------------------------------------------------------------
r974 | tewok | 2005-08-31 10:23:12 -0400 (Wed, 31 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Formatting fix.

------------------------------------------------------------------------
r973 | hserus | 2005-08-31 09:29:31 -0400 (Wed, 31 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/doc/libsres.3
   M /trunk/dnssec-tools/lib/libsres/doc/libsres.pod
   M /trunk/dnssec-tools/lib/libval/doc/libval.3
   M /trunk/dnssec-tools/lib/libval/doc/libval.pod

Minor fixes to the documentation.

------------------------------------------------------------------------
r972 | tewok | 2005-08-31 09:27:46 -0400 (Wed, 31 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm
   M /trunk/dnssec-tools/tools/modules/keyrec.pm
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm
   M /trunk/dnssec-tools/tools/modules/rollrec.pm
   M /trunk/dnssec-tools/tools/modules/timetrans.pm
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm


Formatting fixes.

------------------------------------------------------------------------
r971 | tewok | 2005-08-31 09:12:43 -0400 (Wed, 31 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm


Formatting fixes.

------------------------------------------------------------------------
r970 | tewok | 2005-08-31 09:08:45 -0400 (Wed, 31 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow
   M /trunk/dnssec-tools/tools/donuts/donuts


Fixed a typo.
Formatting fixes.

------------------------------------------------------------------------
r969 | ahayatnagarkar | 2005-08-30 11:13:46 -0400 (Tue, 30 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c

*h_errnop should be set to NETDB_SUCCESS.

------------------------------------------------------------------------
r968 | ahayatnagarkar | 2005-08-30 11:03:11 -0400 (Tue, 30 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_policy.c

Replaced strstr() with strncmp() in init_respol.

------------------------------------------------------------------------
r967 | hardaker | 2005-08-29 19:07:31 -0400 (Mon, 29 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

document the tcpdump options

------------------------------------------------------------------------
r966 | hardaker | 2005-08-29 18:58:50 -0400 (Mon, 29 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

add the ability to start tcpdump just before a donuts run begins

------------------------------------------------------------------------
r965 | hardaker | 2005-08-29 18:58:26 -0400 (Mon, 29 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donutsd

use proper Getopt::GUI::Long Configure call

------------------------------------------------------------------------
r964 | ahayatnagarkar | 2005-08-29 10:24:38 -0400 (Mon, 29 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/configure

Updated configure file.

------------------------------------------------------------------------
r963 | hserus | 2005-08-29 10:24:05 -0400 (Mon, 29 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_query.c

Return SR_NO_ANSWER if the name server turns out to be NULL

------------------------------------------------------------------------
r962 | hserus | 2005-08-29 10:04:01 -0400 (Mon, 29 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/configure.in

Added libs/libsres/doc to the list of directories to build

------------------------------------------------------------------------
r961 | hserus | 2005-08-29 10:01:15 -0400 (Mon, 29 Aug 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libsres/doc/Makefile.in

Create man pages for pod documentation

------------------------------------------------------------------------
r960 | hserus | 2005-08-29 10:00:14 -0400 (Mon, 29 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/Makefile.in

Modified to build the doc subdirectory also.

------------------------------------------------------------------------
r959 | hserus | 2005-08-29 09:58:53 -0400 (Mon, 29 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/Makefile.in

Add target for creating the libval.3 man page

------------------------------------------------------------------------
r958 | hserus | 2005-08-29 09:56:51 -0400 (Mon, 29 Aug 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libsres/doc/libsres.3

Added man page for the core libsres interfaces.

------------------------------------------------------------------------
r957 | hserus | 2005-08-29 09:55:05 -0400 (Mon, 29 Aug 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libval/doc/libval.3

Added man page for the core libval interfaces

------------------------------------------------------------------------
r956 | hserus | 2005-08-29 09:54:10 -0400 (Mon, 29 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/val_query.3

Updated with info about val_x_query()

------------------------------------------------------------------------
r955 | hserus | 2005-08-29 09:20:22 -0400 (Mon, 29 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/crypto/val_rsamd5.c

Commented out definition of unused variable.

------------------------------------------------------------------------
r954 | hserus | 2005-08-29 09:18:36 -0400 (Mon, 29 Aug 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libsres/doc
   A /trunk/dnssec-tools/lib/libsres/doc/implementation-notes
   A /trunk/dnssec-tools/lib/libsres/doc/libsres.pod
   A /trunk/dnssec-tools/lib/libval/doc/implementation_notes
   A /trunk/dnssec-tools/lib/libval/doc/libval.pod

Added more documentation for the library.

------------------------------------------------------------------------
r953 | hserus | 2005-08-29 09:16:07 -0400 (Mon, 29 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_policy.c

No longer using the "const" qualifier for label.
Modified to ensure that the correct label and scope were compared in check_relevance()

------------------------------------------------------------------------
r952 | hserus | 2005-08-29 09:14:14 -0400 (Mon, 29 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_verify.c

Modified to only store validation results within the assertion status field

------------------------------------------------------------------------
r951 | hserus | 2005-08-29 09:11:51 -0400 (Mon, 29 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_errors.h

Moved some DNS-specific error codes to the resolver library.
Added new definition for SR_MISSING_GLUE and renamed CONFLICTING_ANSWERS to
SR_CONFLICTING_ANSWERS and placed it within the set of DNS errors

------------------------------------------------------------------------
r950 | hserus | 2005-08-29 09:07:50 -0400 (Mon, 29 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_context.c
   M /trunk/dnssec-tools/lib/libval/val_context.h
   M /trunk/dnssec-tools/lib/libval/val_policy.h
   M /trunk/dnssec-tools/lib/libval/validator.h

No longer using the "const" qualifier on the label.

------------------------------------------------------------------------
r949 | hserus | 2005-08-29 09:04:55 -0400 (Mon, 29 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/README
   M /trunk/dnssec-tools/lib/libval/doc/val_query.pod

Updated with details about the val_x_query() interface.

------------------------------------------------------------------------
r948 | hserus | 2005-08-29 09:03:36 -0400 (Mon, 29 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_support.c

Remove error printing functionality for error codes that are no longer part of the validator.

------------------------------------------------------------------------
r947 | hserus | 2005-08-29 09:02:10 -0400 (Mon, 29 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.c

Using updated definition of CONFLICTING_ANSWERS (renamed as SR_CONFLICTING_ANSWERS)

------------------------------------------------------------------------
r946 | hserus | 2005-08-29 09:00:10 -0400 (Mon, 29 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/README

Modified to say that more documentation can be found in the doc directory

------------------------------------------------------------------------
r945 | hserus | 2005-08-29 08:58:14 -0400 (Mon, 29 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/Makefile.in
   M /trunk/dnssec-tools/lib/libval/val_resquery.c
   D /trunk/dnssec-tools/lib/libval/val_zone.c
   D /trunk/dnssec-tools/lib/libval/val_zone.h

Moved functionality provided by val_zone.c to val_resquery.c

------------------------------------------------------------------------
r944 | hserus | 2005-08-29 08:54:57 -0400 (Mon, 29 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/resolver.h

Moved DNS-related error codes from validator.h to here.

------------------------------------------------------------------------
r943 | hserus | 2005-08-29 08:53:37 -0400 (Mon, 29 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_query.c

Check for NULL during name server clone operation

------------------------------------------------------------------------
r942 | hserus | 2005-08-29 08:52:47 -0400 (Mon, 29 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/README

Updated to say that more documentation is in the doc directory

------------------------------------------------------------------------
r941 | hserus | 2005-08-26 18:44:12 -0400 (Fri, 26 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c

Add test-case for testing DNS resolution error

------------------------------------------------------------------------
r940 | hserus | 2005-08-26 18:43:39 -0400 (Fri, 26 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_context.c
   M /trunk/dnssec-tools/lib/libval/val_policy.c
   M /trunk/dnssec-tools/lib/libval/val_verify.c
   M /trunk/dnssec-tools/lib/libval/val_zone.c

No longer include validator.h from current path
val_errors is already included from validator.h

------------------------------------------------------------------------
r939 | hserus | 2005-08-26 18:43:10 -0400 (Fri, 26 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_x_query.c

No longer include validator.h from current path
Include val_support.h

------------------------------------------------------------------------
r938 | hserus | 2005-08-26 18:42:09 -0400 (Fri, 26 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_support.c

No longer include validator.h from current path
val_errors is already included from validator.h
Use the DNS_ERROR_LAST definition instead of the SR_LAST_ERROR offset.

------------------------------------------------------------------------
r937 | hserus | 2005-08-26 18:41:26 -0400 (Fri, 26 Aug 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_resquery.c

No longer include validator.h from current path
val_errors is already included from validator.h
Bugfix: The error state must change to SR_REFERRAL_ERROR when do_referral()
        fails.

------------------------------------------------------------------------
r936 | hserus | 2005-08-26 18:40:48 -0400 (Fri, 26 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_print.h
   M /trunk/dnssec-tools/lib/libval/val_resquery.h
   M /trunk/dnssec-tools/lib/libval/val_verify.h
   M /trunk/dnssec-tools/lib/libval/val_zone.h

Don't include files that the .c file already includes

------------------------------------------------------------------------
r935 | hserus | 2005-08-26 18:39:33 -0400 (Fri, 26 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_print.c

Include validator.h, val_parse.h
val_errors is already included from validator.h

------------------------------------------------------------------------
r934 | hserus | 2005-08-26 18:38:42 -0400 (Fri, 26 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_parse.c

No longer include validator.h from current path
Include stdio.h for getline()

------------------------------------------------------------------------
r933 | hserus | 2005-08-26 18:38:17 -0400 (Fri, 26 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/lib/libval/val_query.c

No longer include validator.h from current path
No need to include val_log.h

------------------------------------------------------------------------
r932 | hserus | 2005-08-26 18:37:37 -0400 (Fri, 26 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_cache.c

No longer include validator.h from current path

------------------------------------------------------------------------
r931 | hserus | 2005-08-26 18:37:13 -0400 (Fri, 26 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_errors.h

Rename REFERRAL_ERROR to SR_REFERRAL_ERROR. Move its value to the DNS error
range.

------------------------------------------------------------------------
r930 | hserus | 2005-08-26 18:36:45 -0400 (Fri, 26 Aug 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.c

No longer include validator.h from current path
val_errors is already included from validator.h
Bugfix: handle error cases returned by do_referral()
Bugfix: store error cases in the proper results list

------------------------------------------------------------------------
r929 | hardaker | 2005-08-26 17:18:21 -0400 (Fri, 26 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/README

updated build notes for compiling sources on recent systems where
builds fail because of an updated freetype.  Mention a mozilla patch
for it.

------------------------------------------------------------------------
r928 | ahayatnagarkar | 2005-08-26 08:19:58 -0400 (Fri, 26 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/Makefile.bot

Add section number and center title options to the pod2man command.

------------------------------------------------------------------------
r927 | ahayatnagarkar | 2005-08-26 08:19:15 -0400 (Fri, 26 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.3
   M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.3
   M /trunk/dnssec-tools/lib/libval/doc/val_query.3

Changed the man-page section to 3.  Changed the center-title to "Programmer's
Manual".

------------------------------------------------------------------------
r926 | hardaker | 2005-08-25 15:58:18 -0400 (Thu, 25 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/Makefile.bot
   M /trunk/dnssec-tools/Makefile.in
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/configure.in
   M /trunk/dnssec-tools/lib/libval/Makefile.in
   A /trunk/dnssec-tools/lib/libval/doc/Makefile.in
   A /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.3
   A /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.3
   A /trunk/dnssec-tools/lib/libval/doc/val_query.3

Generate and install man pages created from .pod docs.

------------------------------------------------------------------------
r925 | hardaker | 2005-08-25 12:43:44 -0400 (Thu, 25 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/README

Change status from alpha-ish to beta-ish

------------------------------------------------------------------------
r924 | hserus | 2005-08-23 19:05:34 -0400 (Tue, 23 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_verify.c

Propagate do_verify errors to the application instead of encapsulating this
within VERIFY_PROC_ERROR

------------------------------------------------------------------------
r923 | hserus | 2005-08-23 19:04:52 -0400 (Tue, 23 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_policy.h

Place paranthesis around macro parameters that may be pointers

------------------------------------------------------------------------
r922 | hserus | 2005-08-23 19:03:03 -0400 (Tue, 23 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_context.c
   M /trunk/dnssec-tools/lib/libval/val_context.h
   M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/lib/libval/val_x_query.c
   M /trunk/dnssec-tools/lib/libval/validator.h

Changed the prototype of get_context() so that errors can be propagated to the
application.

------------------------------------------------------------------------
r921 | hardaker | 2005-08-23 18:53:06 -0400 (Tue, 23 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

added some very early get-started-immediately examples to the synopsis

------------------------------------------------------------------------
r920 | hserus | 2005-08-23 18:50:51 -0400 (Tue, 23 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_support.c

Add display strings for missing error codes. Remove those that are no longer
needed. Also display a generic DNS_ERROR string for all DNS errors.

------------------------------------------------------------------------
r919 | hserus | 2005-08-23 18:49:15 -0400 (Tue, 23 Aug 2005) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_errors.h

Added descriptions for error codes.
Added definition for BOGUS_PROVABLE.
Removed the CONTEXT_ERROR code since the actual policy configuration errors are
now propagated to the application. Also removed MALFORMED_LOCALE and
VERIFY_PROC_ERROR definitions.

------------------------------------------------------------------------
r918 | hserus | 2005-08-23 18:44:44 -0400 (Tue, 23 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.c

Encapsulate all the failure cases that can be proved under the BOGUS_PROVABLE
error code.

------------------------------------------------------------------------
r917 | tewok | 2005-08-23 16:53:47 -0400 (Tue, 23 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.pod
   M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.pod
   M /trunk/dnssec-tools/lib/libval/doc/val_query.pod


Formatting fixes, minor rewording, sorted the referenced man pages, added
man section numbers to the ref'd pages.

------------------------------------------------------------------------
r916 | ahayatnagarkar | 2005-08-23 15:55:56 -0400 (Tue, 23 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/validator.h

Changed the val_context_t parameter to const val_context_t for
val_x_gethostbyname(), val_x_getaddrinfo() and val_x_query().

------------------------------------------------------------------------
r915 | ahayatnagarkar | 2005-08-23 15:28:39 -0400 (Tue, 23 Aug 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.pod
   M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.pod
   M /trunk/dnssec-tools/lib/libval/doc/val_query.pod

Changed the val_context_t parameter type to const val_context_t.
Added a couple of sentences saying that this parameter can also gives more
control to the caller to specify resolver and validator policies. (and to
look at the man page for get_context() for more information.)

------------------------------------------------------------------------
r914 | ahayatnagarkar | 2005-08-23 15:27:25 -0400 (Tue, 23 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.h
   M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/lib/libval/val_gethostbyname.h
   M /trunk/dnssec-tools/lib/libval/val_x_query.c
   M /trunk/dnssec-tools/lib/libval/val_x_query.h

Changed the val_context_t parameter type to const val_context_t.

------------------------------------------------------------------------
r913 | hserus | 2005-08-23 14:49:14 -0400 (Tue, 23 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_x_query.c
   M /trunk/dnssec-tools/lib/libval/validator.h

Don't show free_validator_cache() in the exported API list as yet.

------------------------------------------------------------------------
r912 | hserus | 2005-08-23 13:34:28 -0400 (Tue, 23 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/EXPORT.sym

Include the my_malloc, my_free and my_strdup to the list of exported symbols
just in case MEMORY_DEBUGGING is defined

------------------------------------------------------------------------
r911 | ahayatnagarkar | 2005-08-23 13:26:00 -0400 (Tue, 23 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-0.97_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt

No need to check for validator header files during configuration.

------------------------------------------------------------------------
r910 | hserus | 2005-08-23 13:25:52 -0400 (Tue, 23 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/validator.h

Add the p_val_error() interface to the list of exported interfaces

------------------------------------------------------------------------
r909 | ahayatnagarkar | 2005-08-23 13:25:25 -0400 (Tue, 23 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.4_dnssec_patch.txt

Change val_api.h to validator.h.

------------------------------------------------------------------------
r908 | hserus | 2005-08-23 13:25:06 -0400 (Tue, 23 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_errors.h
   M /trunk/dnssec-tools/lib/libval/val_support.h

Moved prototype for p_val_error() from val_errors.h to val_support.h

------------------------------------------------------------------------
r907 | hserus | 2005-08-23 12:58:57 -0400 (Tue, 23 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.pod
   M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.pod
   M /trunk/dnssec-tools/lib/libval/doc/val_query.pod

Include validator.h instead of val_api.h

------------------------------------------------------------------------
r906 | hserus | 2005-08-23 12:58:07 -0400 (Tue, 23 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_support.h

Moved add_to_query_chain(), free_query_chain() from val_support.c to
val_assertion.c since the latter is the only file where these methods are used.

------------------------------------------------------------------------
r905 | hserus | 2005-08-23 12:57:11 -0400 (Tue, 23 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/getaddr.c
   M /trunk/dnssec-tools/lib/libval/bin/gethost.c
   M /trunk/dnssec-tools/lib/libval/bin/validate.c
   M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c
   M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/lib/libval/val_query.c
   M /trunk/dnssec-tools/lib/libval/val_x_query.c

It is sufficient to include validator.h for all programs using
functions exported by libval.

------------------------------------------------------------------------
r904 | hserus | 2005-08-23 12:50:17 -0400 (Tue, 23 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_support.c

Moved add_to_query_chain(), free_query_chain() from val_support.c to
val_assertion.c since the latter is the only file where these methods are used.

------------------------------------------------------------------------
r903 | hserus | 2005-08-23 12:49:14 -0400 (Tue, 23 Aug 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/validator.h

Moved the val_result structure from val_assertion.h to here since this is part
of the libval API.
Include val_errors.h so that other programs need not include this.
ADd prototypes for all exported functions.

------------------------------------------------------------------------
r902 | hserus | 2005-08-23 12:47:35 -0400 (Tue, 23 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_errors.h

Use <> instead of "" for includes

------------------------------------------------------------------------
r901 | hserus | 2005-08-23 12:46:45 -0400 (Tue, 23 Aug 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.h

Moved add_to_query_chain(), free_query_chain() from val_support.c to
val_assertion.c since the latter is the only file where these methods are used.
Moved the val_result structure to validator.h since this is part of the libval
API

------------------------------------------------------------------------
r900 | hserus | 2005-08-23 12:46:04 -0400 (Tue, 23 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.c

Don't include val_api.h
Moved add_to_query_chain(), free_query_chain() from val_support.c to
val_assertion.c since the latter is the only file where these methods are used.

------------------------------------------------------------------------
r899 | hserus | 2005-08-23 12:43:44 -0400 (Tue, 23 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/Makefile.in

It is sufficient to install validator.h instead of five different header files

------------------------------------------------------------------------
r898 | hserus | 2005-08-23 12:41:57 -0400 (Tue, 23 Aug 2005) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/lib/libval/val_api.h

No longer using val_api.h. It should be sufficient to include <validator.h>

------------------------------------------------------------------------
r897 | hserus | 2005-08-23 11:51:45 -0400 (Tue, 23 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c

resolve_n_check() now calls add_to_query_chain() first.

------------------------------------------------------------------------
r896 | hserus | 2005-08-23 11:47:29 -0400 (Tue, 23 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.h

First parameter to resolve_n_check() is now of type u_char *.

------------------------------------------------------------------------
r895 | hserus | 2005-08-23 11:46:09 -0400 (Tue, 23 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.c
   M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/lib/libval/val_x_query.c

resolve_n_check() invokes add_to_query_chain() first.
First parameter to resolve_n_check() is now of type u_char *.

------------------------------------------------------------------------
r894 | ahayatnagarkar | 2005-08-23 08:54:59 -0400 (Tue, 23 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/getaddr.c
   M /trunk/dnssec-tools/lib/libval/bin/gethost.c
   M /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.pod
   M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.pod
   M /trunk/dnssec-tools/lib/libval/doc/val_query.pod

Include val_api.h instead of individual header files.

------------------------------------------------------------------------
r893 | tewok | 2005-08-22 21:20:04 -0400 (Mon, 22 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm
   M /trunk/dnssec-tools/tools/modules/README
   M /trunk/dnssec-tools/tools/modules/conf.pm
   M /trunk/dnssec-tools/tools/modules/file-keyrec
   M /trunk/dnssec-tools/tools/modules/keyrec.pm
   M /trunk/dnssec-tools/tools/modules/tests/Makefile.PL
   M /trunk/dnssec-tools/tools/modules/tests/test-conf
   M /trunk/dnssec-tools/tools/modules/tests/test-keyrec
   M /trunk/dnssec-tools/tools/modules/tests/test-rollmgr
   M /trunk/dnssec-tools/tools/modules/tests/test-rollrec
   M /trunk/dnssec-tools/tools/modules/tests/test-toolopts1
   M /trunk/dnssec-tools/tools/modules/tests/test-toolopts2
   M /trunk/dnssec-tools/tools/modules/tests/test-toolopts3
   M /trunk/dnssec-tools/tools/modules/timetrans.pm


dnssec-tools -> DNSSEC-Tools change.

------------------------------------------------------------------------
r892 | tewok | 2005-08-22 21:09:52 -0400 (Mon, 22 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/logwatch/README
   M /trunk/dnssec-tools/tools/logwatch/conf/logfiles/dnssec.conf
   M /trunk/dnssec-tools/tools/logwatch/conf/logfiles/resolver.conf
   M /trunk/dnssec-tools/tools/logwatch/conf/services/dnssec.conf
   M /trunk/dnssec-tools/tools/logwatch/conf/services/resolver.conf
   M /trunk/dnssec-tools/tools/logwatch/scripts/services/dnssec
   M /trunk/dnssec-tools/tools/logwatch/scripts/services/resolver
   M /trunk/dnssec-tools/tools/logwatch/scripts/shared/applybinddate
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm
   M /trunk/dnssec-tools/tools/patches/README


dnssec-tools -> DNSSEC-Tools change.

------------------------------------------------------------------------
r891 | tewok | 2005-08-22 20:58:05 -0400 (Mon, 22 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/README
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm
   M /trunk/dnssec-tools/tools/linux/ifup-dyn-dns/README
   M /trunk/dnssec-tools/tools/mapper/mapper


dnssec-tools -> DNSSEC-Tools change.

------------------------------------------------------------------------
r890 | tewok | 2005-08-22 20:46:33 -0400 (Mon, 22 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/INSTALL
   M /trunk/dnssec-tools/README
   M /trunk/dnssec-tools/lib/libval/README
   M /trunk/dnssec-tools/lib/libval/doc/README
   M /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.pod
   M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.pod
   M /trunk/dnssec-tools/lib/libval/doc/val_query.pod
   M /trunk/dnssec-tools/podmantex
   M /trunk/dnssec-tools/podtrans
   M /trunk/dnssec-tools/tools/README
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow
   M /trunk/dnssec-tools/tools/donuts/Rule.pm
   M /trunk/dnssec-tools/tools/donuts/donuts
   M /trunk/dnssec-tools/tools/donuts/donutsd
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt
   M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt
   M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt


dnssec-tools -> DNSSEC-Tools change.

------------------------------------------------------------------------
r889 | tewok | 2005-08-22 20:30:12 -0400 (Mon, 22 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/README
   M /trunk/dnssec-tools/tools/scripts/clean-keyrec
   M /trunk/dnssec-tools/tools/scripts/confchk
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/fixkrf
   M /trunk/dnssec-tools/tools/scripts/keyrec-check
   M /trunk/dnssec-tools/tools/scripts/lskrf
   M /trunk/dnssec-tools/tools/scripts/timetrans
   M /trunk/dnssec-tools/tools/scripts/zonesigner


dnssec-tools -> DNSSEC-Tools change.

------------------------------------------------------------------------
r888 | tewok | 2005-08-22 20:22:05 -0400 (Mon, 22 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow


Let's use proper grammar in that complete sentence...

------------------------------------------------------------------------
r887 | tewok | 2005-08-22 20:21:04 -0400 (Mon, 22 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow


Fragment -> complete sentence.

------------------------------------------------------------------------
r886 | tewok | 2005-08-22 20:19:58 -0400 (Mon, 22 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow


Fixed a typo and added a few formatting spaces.

------------------------------------------------------------------------
r885 | tewok | 2005-08-22 19:25:08 -0400 (Mon, 22 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.pod
   M /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.pod
   M /trunk/dnssec-tools/lib/libval/doc/val_query.pod


Formatting modifications to match the rest of the pod manpages.
Reworded a few things along the way.

------------------------------------------------------------------------
r884 | ahayatnagarkar | 2005-08-22 18:18:10 -0400 (Mon, 22 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.h

Added the val_x_getaddrinfo() function.

------------------------------------------------------------------------
r883 | ahayatnagarkar | 2005-08-22 16:47:46 -0400 (Mon, 22 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/thunderbird
   A /trunk/dnssec-tools/apps/thunderbird/.cvsignore

Ignore spfdnssec.xpi

------------------------------------------------------------------------
r882 | ahayatnagarkar | 2005-08-22 16:44:01 -0400 (Mon, 22 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin
   M /trunk/dnssec-tools/lib/libval/bin/.cvsignore

Added *.o, *.lo, .libs, Makefile.

------------------------------------------------------------------------
r881 | ahayatnagarkar | 2005-08-22 16:40:45 -0400 (Mon, 22 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c
   M /trunk/dnssec-tools/lib/libval/val_getaddrinfo.h

Add val_freeaddrinfo() function.

------------------------------------------------------------------------
r880 | ahayatnagarkar | 2005-08-22 16:40:08 -0400 (Mon, 22 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_x_query.h

Adjust indentation

------------------------------------------------------------------------
r879 | ahayatnagarkar | 2005-08-22 16:39:24 -0400 (Mon, 22 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_gethostbyname.h

Include validator.h

------------------------------------------------------------------------
r878 | ahayatnagarkar | 2005-08-22 16:38:49 -0400 (Mon, 22 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/getaddr.c

Use val_freeaddrinfo() instead of freeaddrinfo()

------------------------------------------------------------------------
r877 | ahayatnagarkar | 2005-08-22 16:38:20 -0400 (Mon, 22 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/gethost.c

Include val_gethostbyname.h instead of val_api.h

------------------------------------------------------------------------
r876 | hardaker | 2005-08-22 13:10:14 -0400 (Mon, 22 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

remove really really old debugging print accidentally left in.

------------------------------------------------------------------------
r875 | hardaker | 2005-08-22 13:08:01 -0400 (Mon, 22 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

remove debugging print accidentally left in.

------------------------------------------------------------------------
r874 | hardaker | 2005-08-22 13:06:17 -0400 (Mon, 22 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow

- Allow saving the output as .fig format.
- Document the magicpoint requirements

------------------------------------------------------------------------
r873 | hardaker | 2005-08-22 13:05:11 -0400 (Mon, 22 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm
   M /trunk/dnssec-tools/tools/scripts/zonesigner

reinstate the availability of the GUI-wrapper and shift to Getopt::GUI::Long.

------------------------------------------------------------------------
r872 | hserus | 2005-08-22 10:07:42 -0400 (Mon, 22 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_resquery.c

Use the REFERRAL_ERROR definition from val_errors.h instead of the
SR_REFERRAL_ERROR resolver error code.

------------------------------------------------------------------------
r871 | hserus | 2005-08-22 10:07:11 -0400 (Mon, 22 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.c

Use the CONFLICTING_ANSWERS definition from val_errors.h instead of the
SR_CONFLICTING_ANSWERS resolver error code.

------------------------------------------------------------------------
r870 | hserus | 2005-08-22 10:05:19 -0400 (Mon, 22 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_query.c

Return SR_CALL_ERROR instead of SR_NO_NAMESERVER when no name servers are specified as arguments to the query_send() function

------------------------------------------------------------------------
r869 | hserus | 2005-08-22 10:03:39 -0400 (Mon, 22 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/resolver.h
   M /trunk/dnssec-tools/lib/libval/val_errors.h
   M /trunk/dnssec-tools/lib/libval/validator.h

Moved validator specific definitions from libsres to libval.

------------------------------------------------------------------------
r868 | ahayatnagarkar | 2005-08-22 09:36:28 -0400 (Mon, 22 Aug 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libval/doc/README

README file for the libval/doc directory.

------------------------------------------------------------------------
r867 | ahayatnagarkar | 2005-08-22 09:31:26 -0400 (Mon, 22 Aug 2005) | 5 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libval/doc/val_query.pod

        Man page in POD format for the val_query(), val_x_query()
        and p_val_error() functions of the validator API.

	Initial Version.

------------------------------------------------------------------------
r866 | ahayatnagarkar | 2005-08-22 09:29:02 -0400 (Mon, 22 Aug 2005) | 5 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libval/doc/val_getaddrinfo.pod

        Man page in POD format for the val_getaddrinfo(),
        val_x_getaddrinfo(), val_get_addrinfo_dnssec_status(),
        val_dupaddrinfo() and val_freeaddrinfo() functions of the
        validator API.

------------------------------------------------------------------------
r865 | ahayatnagarkar | 2005-08-22 09:28:40 -0400 (Mon, 22 Aug 2005) | 5 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libval/doc
   A /trunk/dnssec-tools/lib/libval/doc/val_gethostbyname.pod

        Man page in POD format for the val_gethostbyname(),
        val_x_gethostbyname(), val_get_hostent_dnssec_status(),
        val_duphostent() and val_freehostent() functions of the
        validator API.

------------------------------------------------------------------------
r864 | tewok | 2005-08-21 14:20:32 -0400 (Sun, 21 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm


Fixed two ambiguous comments in the pod.

------------------------------------------------------------------------
r863 | tewok | 2005-08-21 13:51:11 -0400 (Sun, 21 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/COPYING
   M /trunk/dnssec-tools/INSTALL
   M /trunk/dnssec-tools/README
   M /trunk/dnssec-tools/apps/README
   M /trunk/dnssec-tools/apps/mozilla/README
   M /trunk/dnssec-tools/apps/thunderbird/README
   M /trunk/dnssec-tools/apps/thunderbird/content/spfdnssec/spfDnssecOverlay.js
   M /trunk/dnssec-tools/apps/thunderbird/content/spfdnssec/spfDnssecOverlay.xul
   M /trunk/dnssec-tools/lib/libsres/README
   M /trunk/dnssec-tools/lib/libval/README
   M /trunk/dnssec-tools/lib/libval/bin/README
   M /trunk/dnssec-tools/lib/libval/bin/validate.c
   M /trunk/dnssec-tools/lib/libval/crypto/val_dsasha1.c
   M /trunk/dnssec-tools/lib/libval/crypto/val_dsasha1.h
   M /trunk/dnssec-tools/lib/libval/crypto/val_rsamd5.c
   M /trunk/dnssec-tools/lib/libval/crypto/val_rsasha1.c
   M /trunk/dnssec-tools/lib/libval/crypto/val_rsasha1.h
   M /trunk/dnssec-tools/lib/libval/val_parse.h
   M /trunk/dnssec-tools/lib/libval/val_query.h
   M /trunk/dnssec-tools/lib/libval/val_verify.h
   M /trunk/dnssec-tools/podmantex
   M /trunk/dnssec-tools/podtrans
   M /trunk/dnssec-tools/tools/dnspktflow/Makefile.PL


"Sparta, .nc" -> "SPARTA, Inc"

------------------------------------------------------------------------
r862 | tewok | 2005-08-21 13:18:16 -0400 (Sun, 21 Aug 2005) | 4 lines
Changed paths:
   A /trunk/dnssec-tools/podmantex


Command to convert pod man pages into man pages useful for including in
larger documents that collect numerous man pages.

------------------------------------------------------------------------
r861 | tewok | 2005-08-21 13:02:12 -0400 (Sun, 21 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts


Reworded a parenthetical comment.

------------------------------------------------------------------------
r860 | tewok | 2005-08-21 12:38:25 -0400 (Sun, 21 Aug 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm


Changed the description in the pod Name section.
Collapsed the Synopsis and Description sections into a single Description.
Formatting changes.

------------------------------------------------------------------------
r859 | tewok | 2005-08-21 12:18:46 -0400 (Sun, 21 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donutsd


Pod-mod to use the standard example domain.

------------------------------------------------------------------------
r858 | tewok | 2005-08-21 12:16:50 -0400 (Sun, 21 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/INFO
   M /trunk/dnssec-tools/tools/scripts/README
   M /trunk/dnssec-tools/tools/scripts/clean-keyrec
   M /trunk/dnssec-tools/tools/scripts/confchk
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/fixkrf
   M /trunk/dnssec-tools/tools/scripts/keyrec-check
   M /trunk/dnssec-tools/tools/scripts/lskrf
   M /trunk/dnssec-tools/tools/scripts/timetrans
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Formatting fixes.

------------------------------------------------------------------------
r857 | tewok | 2005-08-21 11:59:48 -0400 (Sun, 21 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm


Fixed casing of several instances of DNSSEC-Tools.

------------------------------------------------------------------------
r856 | tewok | 2005-08-21 11:52:24 -0400 (Sun, 21 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/file-keyrec


Fixed the pod module name of a reference.

------------------------------------------------------------------------
r855 | tewok | 2005-08-21 11:44:03 -0400 (Sun, 21 Aug 2005) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/modules/file-keyrec


Pod description of a keyrec file.

------------------------------------------------------------------------
r854 | tewok | 2005-08-21 10:57:44 -0400 (Sun, 21 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm


Promotion of zonesigner manpage.

------------------------------------------------------------------------
r853 | tewok | 2005-08-21 10:57:18 -0400 (Sun, 21 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm


Formatting changes in the pod.

------------------------------------------------------------------------
r852 | tewok | 2005-08-20 13:54:38 -0400 (Sat, 20 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/timetrans.pm


Formatting changes.

------------------------------------------------------------------------
r851 | tewok | 2005-08-20 13:22:04 -0400 (Sat, 20 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Gave a *much* better initial description of the module.
Fixed some formatting.

------------------------------------------------------------------------
r850 | tewok | 2005-08-20 13:02:33 -0400 (Sat, 20 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm


Fixed some formatting and added a reference.

------------------------------------------------------------------------
r849 | tewok | 2005-08-20 12:07:49 -0400 (Sat, 20 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm


Emboldened a word.

------------------------------------------------------------------------
r848 | ahayatnagarkar | 2005-08-20 12:04:18 -0400 (Sat, 20 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.4_dnssec_patch.txt

Set h_errno to the errno value returned by val_gethostbyname().

------------------------------------------------------------------------
r847 | tewok | 2005-08-20 12:01:50 -0400 (Sat, 20 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm


Added a very brief description.

------------------------------------------------------------------------
r846 | ahayatnagarkar | 2005-08-20 11:51:28 -0400 (Sat, 20 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.4_dnssec_patch.txt

Use the new thread-safe version of val_gethostbyname().

------------------------------------------------------------------------
r845 | ahayatnagarkar | 2005-08-20 10:05:52 -0400 (Sat, 20 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/gethost.c
   M /trunk/dnssec-tools/lib/libval/val_gethostbyname.c
   M /trunk/dnssec-tools/lib/libval/val_gethostbyname.h

Added a parameter (int *h_errnop) to val_gethostbyname and
val_x_gethostbyname so as to make them thread-safe.  The h_errno is now
returned in these parameters.

------------------------------------------------------------------------
r844 | tewok | 2005-08-19 23:30:09 -0400 (Fri, 19 Aug 2005) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/dnspktflow/dnspktflow


Added a copyright section at the top of the script.
Fixed a few typos.
Added a description section to the pod.
Sparta->SPARTA.

------------------------------------------------------------------------
r843 | tewok | 2005-08-19 23:16:54 -0400 (Fri, 19 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/keyrec-check


Fixed the pod summary.

------------------------------------------------------------------------
r842 | tewok | 2005-08-19 23:15:50 -0400 (Fri, 19 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Pod fixes.

------------------------------------------------------------------------
r841 | tewok | 2005-08-19 22:45:14 -0400 (Fri, 19 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/mapper


Embolden a Perl module name in the pod.

------------------------------------------------------------------------
r840 | tewok | 2005-08-19 22:40:35 -0400 (Fri, 19 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/mapper


Changed a filename to bold, rather than italicize.

------------------------------------------------------------------------
r839 | tewok | 2005-08-19 22:29:37 -0400 (Fri, 19 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/mapper


Add a real synopsis.
Fixed typos, reworded some things.

------------------------------------------------------------------------
r838 | tewok | 2005-08-19 22:02:24 -0400 (Fri, 19 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donutsd


Fixed some typos and did some rewording.

------------------------------------------------------------------------
r837 | tewok | 2005-08-19 21:58:44 -0400 (Fri, 19 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts


Fixed a couple typos.

------------------------------------------------------------------------
r836 | tewok | 2005-08-19 21:51:42 -0400 (Fri, 19 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts


Deleted a "./" from the pod.

------------------------------------------------------------------------
r835 | hardaker | 2005-08-19 20:01:12 -0400 (Fri, 19 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt
   M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt
   M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt

Added many missing rule descriptions

------------------------------------------------------------------------
r834 | tewok | 2005-08-19 19:53:11 -0400 (Fri, 19 Aug 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm


Added a copyright.
Fixed some pod formatting.
Reworded some pod.

------------------------------------------------------------------------
r833 | hardaker | 2005-08-19 15:55:38 -0400 (Fri, 19 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm
   M /trunk/dnssec-tools/tools/donuts/donuts

longer, but easier to read, formatting of the rules from the -R switch.

------------------------------------------------------------------------
r832 | hserus | 2005-08-19 12:55:42 -0400 (Fri, 19 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/validator_driver.c

Allow test cases to run automatically

------------------------------------------------------------------------
r831 | hserus | 2005-08-19 12:35:10 -0400 (Fri, 19 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_debug.c

Include res_support.h

------------------------------------------------------------------------
r830 | hserus | 2005-08-19 12:30:48 -0400 (Fri, 19 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_policy.c

Correct memory free-up logic

------------------------------------------------------------------------
r829 | hserus | 2005-08-19 12:27:34 -0400 (Fri, 19 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_parse.c

Use MALLOC instead of malloc

------------------------------------------------------------------------
r828 | ahayatnagarkar | 2005-08-19 12:21:35 -0400 (Fri, 19 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.4_dnssec_patch.txt

Updated to use the new form of val_gethostbyname() and val_freehostent().

------------------------------------------------------------------------
r827 | hserus | 2005-08-19 12:16:24 -0400 (Fri, 19 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/crypto/val_rsamd5.c

Use MALLOC in place of malloc.
Perform proper clean-up of allocated memory.

------------------------------------------------------------------------
r826 | hserus | 2005-08-19 12:14:43 -0400 (Fri, 19 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_verify.c

Use MALLOC/FREE instead of malloc/free
Perform proper clean-up of rrsig_rdata.signature and dnskey.public_key

------------------------------------------------------------------------
r825 | hserus | 2005-08-19 12:12:45 -0400 (Fri, 19 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_assertion.c

Perform proper clean-up of dnskey.public_key

------------------------------------------------------------------------
r824 | hserus | 2005-08-19 12:11:46 -0400 (Fri, 19 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_debug.c

Use MALLOC/FREE instead of malloc/free

------------------------------------------------------------------------
r823 | hardaker | 2005-08-19 11:04:05 -0400 (Fri, 19 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

change -C wording to remove odd typo

------------------------------------------------------------------------
r822 | tewok | 2005-08-19 10:46:57 -0400 (Fri, 19 Aug 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts


Fixed a typo.
Made some font-face changes to bring this page in harmony with many of the
other tools man pages.

------------------------------------------------------------------------
r821 | ahayatnagarkar | 2005-08-19 10:03:28 -0400 (Fri, 19 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-0.97_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt

Check for query_send() in libsres instead of __ns_initparse.

------------------------------------------------------------------------
r820 | ahayatnagarkar | 2005-08-19 09:57:17 -0400 (Fri, 19 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt

Added flags parameter to the val_query() call.
In configure.ac, check for the query_send function in libsres.

------------------------------------------------------------------------
r819 | ahayatnagarkar | 2005-08-18 18:04:06 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt

Changed printf to SPF_print. Updated to use new val_query interface.

------------------------------------------------------------------------
r818 | ahayatnagarkar | 2005-08-18 18:01:59 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/val_errors.h

Added #include for resolver.h.  Needed for SR_LAST_ERROR.

------------------------------------------------------------------------
r817 | ahayatnagarkar | 2005-08-18 17:24:40 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/README

Removed reference to the 'obsolete' directory.

------------------------------------------------------------------------
r816 | ahayatnagarkar | 2005-08-18 17:21:53 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/apps/sendmail/obsolete

Removed obsolete code.

------------------------------------------------------------------------
r815 | ahayatnagarkar | 2005-08-18 16:39:28 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/EXPORT.sym

Added export symbols __ns_name_ntop and __ns_name_unpack.

------------------------------------------------------------------------
r814 | ahayatnagarkar | 2005-08-18 16:16:29 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libval/bin/Makefile.in

A Makefile input file for the validator utilities.

------------------------------------------------------------------------
r813 | ahayatnagarkar | 2005-08-18 16:11:35 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/Makefile.in
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/configure.in

Remove reference to libvalidat, rename val_stub to libval.

------------------------------------------------------------------------
r812 | ahayatnagarkar | 2005-08-18 16:09:16 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/bin/README

Added header and copyright notice.

------------------------------------------------------------------------
r811 | ahayatnagarkar | 2005-08-18 16:08:18 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libval/README

Mention the ./bin directory.

------------------------------------------------------------------------
r810 | ahayatnagarkar | 2005-08-18 16:07:16 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libval/bin/README

Initial version of the README file.

------------------------------------------------------------------------
r809 | ahayatnagarkar | 2005-08-18 15:56:15 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libval
   A /trunk/dnssec-tools/lib/libval/.cvsignore
   A /trunk/dnssec-tools/lib/libval/Makefile.in
   A /trunk/dnssec-tools/lib/libval/README
   A /trunk/dnssec-tools/lib/libval/bin
   A /trunk/dnssec-tools/lib/libval/bin/.cvsignore
   A /trunk/dnssec-tools/lib/libval/bin/getaddr.c
   A /trunk/dnssec-tools/lib/libval/bin/gethost.c
   A /trunk/dnssec-tools/lib/libval/bin/validate.c
   A /trunk/dnssec-tools/lib/libval/bin/validator_driver.c
   A /trunk/dnssec-tools/lib/libval/crypto
   A /trunk/dnssec-tools/lib/libval/crypto/.cvsignore
   A /trunk/dnssec-tools/lib/libval/crypto/val_dsasha1.c
   A /trunk/dnssec-tools/lib/libval/crypto/val_dsasha1.h
   A /trunk/dnssec-tools/lib/libval/crypto/val_rsamd5.c
   A /trunk/dnssec-tools/lib/libval/crypto/val_rsamd5.h
   A /trunk/dnssec-tools/lib/libval/crypto/val_rsasha1.c
   A /trunk/dnssec-tools/lib/libval/crypto/val_rsasha1.h
   A /trunk/dnssec-tools/lib/libval/dnsval.conf
   A /trunk/dnssec-tools/lib/libval/val_api.h
   A /trunk/dnssec-tools/lib/libval/val_assertion.c
   A /trunk/dnssec-tools/lib/libval/val_assertion.h
   A /trunk/dnssec-tools/lib/libval/val_cache.c
   A /trunk/dnssec-tools/lib/libval/val_cache.h
   A /trunk/dnssec-tools/lib/libval/val_context.c
   A /trunk/dnssec-tools/lib/libval/val_context.h
   A /trunk/dnssec-tools/lib/libval/val_errors.h
   A /trunk/dnssec-tools/lib/libval/val_getaddrinfo.c
   A /trunk/dnssec-tools/lib/libval/val_getaddrinfo.h
   A /trunk/dnssec-tools/lib/libval/val_gethostbyname.c
   A /trunk/dnssec-tools/lib/libval/val_gethostbyname.h
   A /trunk/dnssec-tools/lib/libval/val_log.c
   A /trunk/dnssec-tools/lib/libval/val_log.h
   A /trunk/dnssec-tools/lib/libval/val_parse.c
   A /trunk/dnssec-tools/lib/libval/val_parse.h
   A /trunk/dnssec-tools/lib/libval/val_policy.c
   A /trunk/dnssec-tools/lib/libval/val_policy.h
   A /trunk/dnssec-tools/lib/libval/val_print.c
   A /trunk/dnssec-tools/lib/libval/val_print.h
   A /trunk/dnssec-tools/lib/libval/val_query.c
   A /trunk/dnssec-tools/lib/libval/val_query.h
   A /trunk/dnssec-tools/lib/libval/val_resquery.c
   A /trunk/dnssec-tools/lib/libval/val_resquery.h
   A /trunk/dnssec-tools/lib/libval/val_support.c
   A /trunk/dnssec-tools/lib/libval/val_support.h
   A /trunk/dnssec-tools/lib/libval/val_verify.c
   A /trunk/dnssec-tools/lib/libval/val_verify.h
   A /trunk/dnssec-tools/lib/libval/val_x_query.c
   A /trunk/dnssec-tools/lib/libval/val_x_query.h
   A /trunk/dnssec-tools/lib/libval/val_zone.c
   A /trunk/dnssec-tools/lib/libval/val_zone.h
   A /trunk/dnssec-tools/lib/libval/validator.h
   D /trunk/dnssec-tools/lib/val_stub

Renamed the val_stub directory to libval.

------------------------------------------------------------------------
r808 | ahayatnagarkar | 2005-08-18 14:51:00 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/lib/libvalidat

Removing obsolete code from libvalidat.

------------------------------------------------------------------------
r807 | hserus | 2005-08-18 14:27:45 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/getaddr.c

Commented out usage of a constant that was not defined.

------------------------------------------------------------------------
r806 | hserus | 2005-08-18 13:50:47 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_support.h

Add prototypes for memory management debug routines.

------------------------------------------------------------------------
r805 | hserus | 2005-08-18 13:45:36 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_errors.h

Re-order some error conditions.

------------------------------------------------------------------------
r804 | hserus | 2005-08-18 13:44:07 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_support.c
   M /trunk/dnssec-tools/lib/libsres/res_support.h

Bring memory management debug routines to the head of the file.

------------------------------------------------------------------------
r803 | hserus | 2005-08-18 13:42:41 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_assertion.c
   M /trunk/dnssec-tools/lib/val_stub/val_parse.c
   M /trunk/dnssec-tools/lib/val_stub/val_policy.c

Perform/allow for proper free-up of memory.

------------------------------------------------------------------------
r802 | hserus | 2005-08-18 13:41:05 -0400 (Thu, 18 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_x_query.c

Free up validator cache once we have the response. This will change once we have the ability to timeout entries in the
cache.

------------------------------------------------------------------------
r801 | hserus | 2005-08-18 13:39:49 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_cache.c
   M /trunk/dnssec-tools/lib/val_stub/val_cache.h

Add function to free up validator cache

------------------------------------------------------------------------
r799 | ahayatnagarkar | 2005-08-18 13:10:13 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_io_manager.c

Moved some of the printf statements within an if (res_io_debug) statement.

------------------------------------------------------------------------
r798 | ahayatnagarkar | 2005-08-18 13:08:53 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_verify.c

Removed the obsolete val_verify() function.

------------------------------------------------------------------------
r797 | ahayatnagarkar | 2005-08-18 13:08:17 -0400 (Thu, 18 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_query.c

Removed code-duplication.  val_query() now just calls val_x_query() with
a NULL context, and packages the return value to conform to the res_query
interface.

------------------------------------------------------------------------
r796 | ahayatnagarkar | 2005-08-18 13:06:22 -0400 (Thu, 18 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.c

Removed code-duplication in val_gethostbyname().  val_gethostbyname() now
just calls val_x_gethostbyname() with a NULL val_context parameter.

------------------------------------------------------------------------
r795 | ahayatnagarkar | 2005-08-18 13:04:43 -0400 (Thu, 18 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_query.h

Removed declaration of _val_query().  Added declaration of val_query().
val_query() now takes an additional 'flags' parameter of type int.  It
is reserved for future use.

------------------------------------------------------------------------
r794 | ahayatnagarkar | 2005-08-18 13:03:25 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/main.c

Called val_query with an additional 'flags' parameter.

------------------------------------------------------------------------
r793 | ahayatnagarkar | 2005-08-18 13:02:31 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/Makefile.in

Added val_query.h and val_x_query.h as targets of install.

------------------------------------------------------------------------
r792 | ahayatnagarkar | 2005-08-18 13:01:19 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_api.h

Moved the declaration of val_query to val_query.h.

------------------------------------------------------------------------
r791 | ahayatnagarkar | 2005-08-18 12:58:01 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/Makefile.in

Changed the name of the command line tool from 'verify' to 'validate'.

------------------------------------------------------------------------
r790 | ahayatnagarkar | 2005-08-18 12:55:36 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_verify.h

Removed the val_verify method.

------------------------------------------------------------------------
r789 | ahayatnagarkar | 2005-08-18 12:55:01 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/validator_driver.c

Added another test case.

------------------------------------------------------------------------
r788 | tewok | 2005-08-18 12:34:02 -0400 (Thu, 18 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/fixkrf


Fixed the opening pod description.
Added a copyright notice to the pod.

------------------------------------------------------------------------
r787 | tewok | 2005-08-18 12:33:21 -0400 (Thu, 18 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm
   M /trunk/dnssec-tools/tools/modules/keyrec.pm
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm
   M /trunk/dnssec-tools/tools/modules/rollrec.pm
   M /trunk/dnssec-tools/tools/modules/timetrans.pm
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm
   M /trunk/dnssec-tools/tools/scripts/clean-keyrec
   M /trunk/dnssec-tools/tools/scripts/confchk
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/keyrec-check
   M /trunk/dnssec-tools/tools/scripts/lskrf
   M /trunk/dnssec-tools/tools/scripts/timetrans
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Added copyright notices to the pod.

------------------------------------------------------------------------
r786 | hardaker | 2005-08-18 12:27:14 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/Makefile.in

install the dnspktflow tool

------------------------------------------------------------------------
r785 | tewok | 2005-08-18 12:26:58 -0400 (Thu, 18 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Fixed part of the pod.
Sparta->SPARTA change.

------------------------------------------------------------------------
r784 | tewok | 2005-08-18 12:25:58 -0400 (Thu, 18 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/README
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm
   M /trunk/dnssec-tools/tools/linux/ifup-dyn-dns/README
   M /trunk/dnssec-tools/tools/logwatch/README
   M /trunk/dnssec-tools/tools/logwatch/conf/logfiles/dnssec.conf
   M /trunk/dnssec-tools/tools/logwatch/conf/logfiles/resolver.conf
   M /trunk/dnssec-tools/tools/logwatch/conf/services/dnssec.conf
   M /trunk/dnssec-tools/tools/logwatch/conf/services/resolver.conf
   M /trunk/dnssec-tools/tools/logwatch/scripts/services/dnssec
   M /trunk/dnssec-tools/tools/logwatch/scripts/services/resolver
   M /trunk/dnssec-tools/tools/logwatch/scripts/shared/applybinddate
   M /trunk/dnssec-tools/tools/mapper/Makefile.PL
   M /trunk/dnssec-tools/tools/mapper/mapper
   M /trunk/dnssec-tools/tools/modules/Makefile.PL
   M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm
   M /trunk/dnssec-tools/tools/modules/README
   M /trunk/dnssec-tools/tools/modules/conf.pm
   M /trunk/dnssec-tools/tools/modules/keyrec.pm
   M /trunk/dnssec-tools/tools/modules/tests/Makefile.PL
   M /trunk/dnssec-tools/tools/modules/tests/test-conf
   M /trunk/dnssec-tools/tools/modules/tests/test-keyrec
   M /trunk/dnssec-tools/tools/modules/tests/test-rollmgr
   M /trunk/dnssec-tools/tools/modules/tests/test-rollrec
   M /trunk/dnssec-tools/tools/modules/tests/test-timetrans
   M /trunk/dnssec-tools/tools/modules/tests/test-toolopts1
   M /trunk/dnssec-tools/tools/modules/tests/test-toolopts2
   M /trunk/dnssec-tools/tools/modules/tests/test-toolopts3
   M /trunk/dnssec-tools/tools/modules/timetrans.pm
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm
   M /trunk/dnssec-tools/tools/patches/README
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL
   M /trunk/dnssec-tools/tools/scripts/README
   M /trunk/dnssec-tools/tools/scripts/clean-keyrec
   M /trunk/dnssec-tools/tools/scripts/confchk
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/fixkrf
   M /trunk/dnssec-tools/tools/scripts/keyrec-check
   M /trunk/dnssec-tools/tools/scripts/lskrf
   M /trunk/dnssec-tools/tools/scripts/timetrans


Sparta->SPARTA change.

------------------------------------------------------------------------
r783 | tewok | 2005-08-18 12:16:06 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Makefile.PL
   M /trunk/dnssec-tools/tools/donuts/Rule.pm
   M /trunk/dnssec-tools/tools/donuts/donuts
   M /trunk/dnssec-tools/tools/donuts/donutsd
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt
   M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt
   M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt

Sparta->SPARTA change.

------------------------------------------------------------------------
r782 | hardaker | 2005-08-18 11:01:51 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/dnspktflow
   A /trunk/dnssec-tools/tools/dnspktflow/.cvsignore
   A /trunk/dnssec-tools/tools/dnspktflow/Makefile.PL
   A /trunk/dnssec-tools/tools/dnspktflow/dnspktflow

new tool: dnspktflow, which traces the results of a tcpdump file to visually display DNS requests as they're passed from host to host

------------------------------------------------------------------------
r781 | hserus | 2005-08-18 10:49:05 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/dnsval.conf

Add an example policy statement for zone security expectation status

------------------------------------------------------------------------
r780 | hserus | 2005-08-18 10:46:03 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/validator_driver.c

Add additional test cases

------------------------------------------------------------------------
r779 | hserus | 2005-08-18 10:45:30 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_assertion.c

Add a note about need for namecmp() where strstr() is used.

------------------------------------------------------------------------
r778 | hserus | 2005-08-18 10:44:18 -0400 (Thu, 18 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_verify.c

Add logic for checking RRSIGs on wildcards.

------------------------------------------------------------------------
r777 | hserus | 2005-08-18 10:43:40 -0400 (Thu, 18 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_support.c

In check_label_count() return the difference between labels in the name and labels in the RRSIG instead of simply returning
the boolean status that a wildcard exists.

------------------------------------------------------------------------
r776 | hserus | 2005-08-17 19:53:29 -0400 (Wed, 17 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_assertion.c

When querying the cache, make sure that only record sets with data present in them are returned, i.e this is not a cached
BARE_RRSIG

------------------------------------------------------------------------
r775 | hserus | 2005-08-17 19:03:34 -0400 (Wed, 17 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_errors.h

Made BARE_RRSIG a non-error condition.
Added VALIDATION_ERROR to catch all errors that cannot be proved by some chain of trust

------------------------------------------------------------------------
r774 | hserus | 2005-08-17 19:01:47 -0400 (Wed, 17 Aug 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_assertion.c

The check for a trusted zone now does a substring comparision between the query name and the configured zone. There is no
longer an implicit requirement that a RRSIG be queried before this can return an answer.
Use the VALIDATION_ERROR status for all errors that cannot be proved by a chain of trust.
Modified NONSENSE_RESULT_SEQUENCE to not return TRUE if the previous error condition was NO_ERROR

------------------------------------------------------------------------
r773 | hserus | 2005-08-17 17:51:56 -0400 (Wed, 17 Aug 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_assertion.c

Check for SR_ANS_BARE_RRIG instead of determining this status each time.
Bare RRSIGs are present in individual RRsets, rather than different RRs within
an RRset. Correct the logic that uses earlier assumption.
Use the build_pending_query() method (where trusted keys are checked for) instead of crafting the queries for DS and DNSKEY by hand.

------------------------------------------------------------------------
r772 | hserus | 2005-08-17 17:36:29 -0400 (Wed, 17 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_x_query.c
   M /trunk/dnssec-tools/lib/val_stub/val_x_query.h
   M /trunk/dnssec-tools/lib/val_stub/validator_driver.c

Swapped the ordering of the type and class parameters in val_x_query() to make it consistent with res_query()

------------------------------------------------------------------------
r771 | hserus | 2005-08-17 17:33:32 -0400 (Wed, 17 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/resolver.h

Add an answer type for bare RRSIGs

------------------------------------------------------------------------
r770 | hserus | 2005-08-17 11:20:42 -0400 (Wed, 17 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_assertion.c

Make the check for a trusted zone in a different function. Call this function
while checking for *any* data, not just the DNSKEY.
Error fix: assertions were not retaining failure conditions in verify_n_validate

------------------------------------------------------------------------
r769 | hserus | 2005-08-17 11:16:27 -0400 (Wed, 17 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/validator_driver.c

Display the error number in addition to the error string

------------------------------------------------------------------------
r768 | hserus | 2005-08-17 09:59:29 -0400 (Wed, 17 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_assertion.c

list of TODO items will appear in a separate file

------------------------------------------------------------------------
r767 | hserus | 2005-08-17 09:46:34 -0400 (Wed, 17 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_policy.c

Modified to allow policies to be properly overridden inside switch_effective_policy().

------------------------------------------------------------------------
r766 | tewok | 2005-08-16 23:30:30 -0400 (Tue, 16 Aug 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/podtrans


Added -translator option for specifying a non-standard translator.
Moved option processing into its own routine, and changed to use GetOptions().
Added some examples to the pod.

------------------------------------------------------------------------
r765 | hserus | 2005-08-16 14:38:50 -0400 (Tue, 16 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_x_query.c
   M /trunk/dnssec-tools/lib/val_stub/val_x_query.h

Interchanged the order of class and type in the argument list.

------------------------------------------------------------------------
r764 | hserus | 2005-08-16 14:36:17 -0400 (Tue, 16 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_assertion.c

Check the zone security expectation when deciding if the key is trusted.
Fixed/cleaned up the trusted key checking routine. This routine directly
returns the assertion state instead of an intermediate value.

------------------------------------------------------------------------
r763 | hserus | 2005-08-16 14:36:00 -0400 (Tue, 16 Aug 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_errors.h

Rename error conditions that had a leading A_ to them. A_* is reserved for
assertion states.
Added a new error condition for describing zones that we never trust.
Created a new error type for describing nonexistence of a name

------------------------------------------------------------------------
r762 | hserus | 2005-08-16 14:35:39 -0400 (Tue, 16 Aug 2005) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_policy.c

Using definitions for all the keywords used in the validator configuration file instead of using hardcoded values.
Corrected free-up logic for the trust-anchor policy chain
No longer defining policy for not_preferred_* cases.
Added logic for storing the zone security status as a policy element.
Clear the policy pointer array before switching to a different label.

------------------------------------------------------------------------
r761 | hserus | 2005-08-16 14:35:26 -0400 (Tue, 16 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_policy.h

Create definitions for all the keywords used in the validator configuration file instead of using hardcoded values.
No longer defining policy for not_preferred_* cases.
Defined a new policy type for storing the zone security status.

------------------------------------------------------------------------
r760 | hserus | 2005-08-16 14:34:58 -0400 (Tue, 16 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_support.c

Display the error conditions for NONEXISTENT_NAME and NONEXISTENT_TYPE

------------------------------------------------------------------------
r759 | hserus | 2005-08-16 14:34:09 -0400 (Tue, 16 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/validator.h

Moved A_TRUSTED to val_errors and split this into TRUSTED_KEY and TRUSTED_ZONE
Removed all policy for not_preferred_* constructs. This will be special cased in the corresponding preferred_* policy
constructs.

------------------------------------------------------------------------
r758 | hserus | 2005-08-15 17:21:43 -0400 (Mon, 15 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_x_query.c

Use validator error codes where ever possible instead of resolver error codes.

------------------------------------------------------------------------
r757 | hserus | 2005-08-15 17:18:58 -0400 (Mon, 15 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/validator_driver.c

Added include for val_resquery.h

------------------------------------------------------------------------
r756 | hserus | 2005-08-15 17:18:39 -0400 (Mon, 15 Aug 2005) | 9 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/validator.h

Added definition for the DNS port
Added definition for Q_ERROR_BASE. Resolver errors start from this number.
Added definitions for delegation_info. Moved the query_list structure from
val_resquery.c to here.
Added three new elements to the query_chain structure: the name server list to
where the query needs to be sent, the information pertaining to referrals and
the transaction id for this query in the resolver.
Modified the domain_info struct so that it now has a field for the error code instead of the error message.

------------------------------------------------------------------------
r755 | hserus | 2005-08-15 17:18:19 -0400 (Mon, 15 Aug 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_zone.c

Use validator error codes where ever possible instead of resolver error codes.
ifdef away the code that fetches missing glue. This logic makes it difficult to
achieve asynchronous query generation. This will be re-written to follow the
query chain approach.

------------------------------------------------------------------------
r754 | hserus | 2005-08-15 17:18:03 -0400 (Mon, 15 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_verify.c

No longer using rrs_status in struct rrset_rec
Use validator error codes where ever possible instead of resolver error codes.

------------------------------------------------------------------------
r753 | hserus | 2005-08-15 17:17:42 -0400 (Mon, 15 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_support.h

Add prototypes for suport calls moved from val_assertion.c to val_support.c
Removed prototypes for functions moved to libsres
init_rr_set() and find_rr_set no longer take the tsig status as a parameter.

------------------------------------------------------------------------
r752 | hserus | 2005-08-15 17:17:30 -0400 (Mon, 15 Aug 2005) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_support.c

Moved a bunch of (suport) calls from val_assertion.c to val_support.c
Moved the name structure destruction routines to libsres
Use validator error codes where ever possible instead of resolver error codes.
Removed free() for no longer existent error message in domain_info
No longer using rrs_status in struct rrset_rec
init_rr_set() and find_rr_set no longer take the tsig status as a parameter.
Don't display the generic DNS_FAILURE error message.

------------------------------------------------------------------------
r751 | hserus | 2005-08-15 17:17:14 -0400 (Mon, 15 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_resquery.h

Removed the val_resquery() method; instead define the val_resquery_send() and
val_requery_rcv() functions.

------------------------------------------------------------------------
r750 | hserus | 2005-08-15 17:16:59 -0400 (Mon, 15 Aug 2005) | 13 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_resquery.c

Moved the query_list structure to validator.h. The static registry of queries
sent out is now a part of the query_chain structure. Pass this value to the
register_query and degregister_query functions. The deregister_query(ies) method now destroys all registered queries in this
query_chain structure.
Add convenience macro for merging RRsets
Directly pass the matched query_chain structure to digest_response for the query name, type and class
do_referral is no longer recursive. Directly pass the matched query_chain structure to do_referral for the query type and
class. No longer returning the error string as a parameter, instead using the  status field in query_chain structure.
Referral specific information is saved off of the qc_referral field.
Use validator error codes where ever possible instead of resolver error codes.
Removed the val_resquery() method; instead define the val_resquery_send() and
val_requery_rcv() functions.

------------------------------------------------------------------------
r749 | hserus | 2005-08-15 17:16:34 -0400 (Mon, 15 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_print.c

No longer using rrs_status in struct rrset_rec
Display error code in domain_info instead of the error message.

------------------------------------------------------------------------
r748 | hserus | 2005-08-15 17:16:13 -0400 (Mon, 15 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_policy.h

Move definition of (D)NS_PORT to validator.h

------------------------------------------------------------------------
r747 | hserus | 2005-08-15 17:15:52 -0400 (Mon, 15 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_policy.c

Use validator error codes where ever possible instead of resolver error codes.
Error fix: line in getline(&line) should be set to NULL before next invocation.

------------------------------------------------------------------------
r746 | hserus | 2005-08-15 17:15:34 -0400 (Mon, 15 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_errors.h

Clean and Re-organize error codes yet again. Major change here is that DNS
(resolver) error codes are also made available.

------------------------------------------------------------------------
r745 | hserus | 2005-08-15 17:15:17 -0400 (Mon, 15 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_context.c

Use validator error codes where ever possible instead of resolver error codes.

------------------------------------------------------------------------
r744 | hserus | 2005-08-15 17:14:53 -0400 (Mon, 15 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_cache.c

No longer using rrs_status in struct rrset_rec

------------------------------------------------------------------------
r743 | hserus | 2005-08-15 17:14:32 -0400 (Mon, 15 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_assertion.h

Remove prototypes for support calls moved from val_assertion.c to val_support.c

------------------------------------------------------------------------
r742 | hserus | 2005-08-15 17:14:14 -0400 (Mon, 15 Aug 2005) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_assertion.c

Moved a bunch of (support) calls from val_assertion.c to val_support.c
Use validator error codes where ever possible instead of resolver error codes.
Modified to allow multiple outstanding queries at the same time
Re-structured the try_verify_assertion method to use if-then-else instead of a
switch-case construct.

------------------------------------------------------------------------
r741 | hserus | 2005-08-15 17:13:14 -0400 (Mon, 15 Aug 2005) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/resolver.h

Re-organized error codes: removed un-used error codes and TSIG status codes.
rrs_status is no longer a part of struct rrset_rec
Added prototypes for name_server destruction routes; also modified the
prototype for function calls in res_query that no longer have the error message
passed as the last parameter.

------------------------------------------------------------------------
r740 | hserus | 2005-08-15 17:12:58 -0400 (Mon, 15 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_support.c

Added routines for destroying the name_server structure

------------------------------------------------------------------------
r739 | hserus | 2005-08-15 17:12:41 -0400 (Mon, 15 Aug 2005) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_query.c

Removed the res_sq_set_* function calls. Replaced these by error value codes.
Also removed the error string variable from
theres_something_wrong_with_header(), query_send(), response_recv(), get()
Added code to clone the name_server structure when a query request is made.
This data is free-d when the response/error is returned.

------------------------------------------------------------------------
r738 | hserus | 2005-08-15 17:12:14 -0400 (Mon, 15 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_io_manager.c

Added declaration for res_quecmp
Destroy nameserver attached with the expected arrival structure in
res_sq_free_expected_arrival()

------------------------------------------------------------------------
r737 | hserus | 2005-08-15 17:11:53 -0400 (Mon, 15 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/EXPORT.sym

Added symbols for name server destruction routines

------------------------------------------------------------------------
r736 | tewok | 2005-08-15 14:25:50 -0400 (Mon, 15 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm


Un-overed a few lines for a better verbatim example.

------------------------------------------------------------------------
r735 | tewok | 2005-08-15 14:24:03 -0400 (Mon, 15 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm


Deleted an unnecessary TODO section from the pod.

------------------------------------------------------------------------
r734 | ahayatnagarkar | 2005-08-12 17:41:56 -0400 (Fri, 12 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/getaddr.c
   M /trunk/dnssec-tools/lib/val_stub/gethost.c

Use the updated API.

------------------------------------------------------------------------
r733 | ahayatnagarkar | 2005-08-12 17:41:28 -0400 (Fri, 12 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_getaddrinfo.c
   M /trunk/dnssec-tools/lib/val_stub/val_getaddrinfo.h

Replaced the ADDRINFO_DNSSEC_STATUS macro with the
val_get_addrinfo_dnssec_status() function.

------------------------------------------------------------------------
r732 | ahayatnagarkar | 2005-08-12 17:40:17 -0400 (Fri, 12 Aug 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.c
   M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.h

Removed the additional dnssec_status parameter to val_gethostbyname and
val_x_gethostbyname functions, to make the API consistent with the
val_getaddrinfo function.  The dnssec-status can now be retrieved using
val_get_hostent_dnssec_status() function.

------------------------------------------------------------------------
r731 | tewok | 2005-08-11 12:21:09 -0400 (Thu, 11 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Improved pod discussion of verbose levels.

------------------------------------------------------------------------
r730 | tewok | 2005-08-11 10:56:52 -0400 (Thu, 11 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Reworked the verbose output so the various levels of verbosity made more sense.

------------------------------------------------------------------------
r729 | hserus | 2005-08-10 12:38:07 -0400 (Wed, 10 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_verify.c
   M /trunk/dnssec-tools/lib/val_stub/val_x_query.c
   M /trunk/dnssec-tools/lib/val_stub/validator_driver.c

Re-ordered the #include for validator.h so that new definitions
within it are seen.

------------------------------------------------------------------------
r728 | hserus | 2005-08-10 12:37:51 -0400 (Wed, 10 Aug 2005) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/validator.h

Added definition for RESOLV_CONF and modified VAL_CONFIGURATION_FILE;
both of these are should be in /etc
Moved definitions that were only used by the validator from resolver.h
struct val_context contains the name_server struct as an element
instead of the resolver_policy. Resolver policy should be a part of
the name_server structure (LATER)

------------------------------------------------------------------------
r727 | hserus | 2005-08-10 12:37:29 -0400 (Wed, 10 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_zone.h

res_zi_unverified_ns_list does not take res_policy as an argument
any longer. The value should be picked up from the context.
Added definitions for the zone status previously present in resolver.h

------------------------------------------------------------------------
r726 | hserus | 2005-08-10 12:37:15 -0400 (Wed, 10 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_zone.c

res_zi_unverified_ns_list does not take res_policy as an argument
any longer. The value should be picked up from the context.

------------------------------------------------------------------------
r725 | hserus | 2005-08-10 12:36:35 -0400 (Wed, 10 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_support.c

Re-ordered the #include for validator.h so that new definitions
within it are seen.
changed the name of qname_chain->qc_... to qname_chain->qnc_...

------------------------------------------------------------------------
r724 | hserus | 2005-08-10 12:36:17 -0400 (Wed, 10 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_policy.c

Made function names internally consistent.
Added functions moved over from val_context.c
Copied the resolv.conf parsing routine from val_query.c

------------------------------------------------------------------------
r723 | hserus | 2005-08-10 12:36:02 -0400 (Wed, 10 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_policy.h

Added definitions for macros and functions moved over from
val_context.c. Also added missing definitions.

------------------------------------------------------------------------
r722 | hserus | 2005-08-10 12:35:45 -0400 (Wed, 10 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_query.c

No longer using res_policy val_resquery, instead we use the name
server directly.
Use the definition of RESOLV_CONF from validator.h

------------------------------------------------------------------------
r721 | hserus | 2005-08-10 12:35:23 -0400 (Wed, 10 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_resquery.h

No longer using res_policy val_resquery, instead we use the name
server directly

------------------------------------------------------------------------
r720 | hserus | 2005-08-10 12:34:56 -0400 (Wed, 10 Aug 2005) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_resquery.c

changed the name of qname_chain->qc_... to qname_chain->qnc_...
Renamed ns_list to ref_ns_list to indicate that this is actually
the list generated for referrals
No longer using res_policy, instead we use the name server directly.
Add (incomplete) support for merging contents from cache and context
to generate the name server list when there is no preference of
where to direct the query to.

------------------------------------------------------------------------
r719 | hserus | 2005-08-10 12:34:30 -0400 (Wed, 10 Aug 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_context.c

Moved all policy-related bits to val_policy.c
Changed name of destroy_policy to destroy_valpol
Changed argument in destroy_respol to be consistent with
destroy_valpol

------------------------------------------------------------------------
r718 | hserus | 2005-08-10 12:34:12 -0400 (Wed, 10 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_cache.c

Now including validator.h

------------------------------------------------------------------------
r717 | hserus | 2005-08-10 12:33:54 -0400 (Wed, 10 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_print.c

changed the name of qname_chain->qc_... to qname_chain->qnc_...

------------------------------------------------------------------------
r716 | hserus | 2005-08-10 12:33:38 -0400 (Wed, 10 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_assertion.c

Changed the name of qname_chain->qc_... to qname_chain->qnc_...
Now using nslist in context instead of the resolver_policy structure

------------------------------------------------------------------------
r715 | hserus | 2005-08-10 12:33:04 -0400 (Wed, 10 Aug 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/resolver.h

Added prototype definitions for new interfaces.
Moved un-used definitions to validator.h
Added definitions for useful values that were present in
res_transaction.h

------------------------------------------------------------------------
r714 | hserus | 2005-08-10 12:32:39 -0400 (Wed, 10 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_tsig.c
   M /trunk/dnssec-tools/lib/libsres/res_tsig.h

Removed the signed query and its length as parameters for
res_tsig_verifies. The function still doesn't do anything
useful.

------------------------------------------------------------------------
r713 | hserus | 2005-08-10 12:31:57 -0400 (Wed, 10 Aug 2005) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_query.c

No longer include res_transaction.h directly.
Added implementation for query_send and response_recv
Modified get() to use above methods
Changed fourth argument in get() from the resolver policy
to the name server list

------------------------------------------------------------------------
r712 | hserus | 2005-08-10 12:31:22 -0400 (Wed, 10 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/Makefile.in
   D /trunk/dnssec-tools/lib/libsres/res_transaction.c
   D /trunk/dnssec-tools/lib/libsres/res_transaction.h

Merged functionality provided by res_transaction.c into
query_send and response_recv, now present in res_query

------------------------------------------------------------------------
r711 | hserus | 2005-08-10 12:30:05 -0400 (Wed, 10 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/EXPORT.sym

Added symbols for query_send and response_recv

------------------------------------------------------------------------
r710 | tewok | 2005-08-10 11:01:55 -0400 (Wed, 10 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/podtrans


Fixed podtrans' pod for new file exclusions.

------------------------------------------------------------------------
r709 | tewok | 2005-08-10 10:58:19 -0400 (Wed, 10 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/podtrans


Added a few more file types to exclude.
Fixed the regexp for object file exclusion.

------------------------------------------------------------------------
r708 | tewok | 2005-08-10 10:43:24 -0400 (Wed, 10 Aug 2005) | 4 lines
Changed paths:
   A /trunk/dnssec-tools/podtrans


Tool to search a hierarchy for pod files and translate them into
a readable form.

------------------------------------------------------------------------
r707 | tewok | 2005-08-10 10:24:31 -0400 (Wed, 10 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/confchk


Added two missing =back lines to the pod.

------------------------------------------------------------------------
r706 | tewok | 2005-08-10 08:58:05 -0400 (Wed, 10 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Added guts to make -archdir and -savekeys functional.

------------------------------------------------------------------------
r705 | tewok | 2005-08-10 08:49:15 -0400 (Wed, 10 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added -nodate to the usage message.

------------------------------------------------------------------------
r704 | tewok | 2005-08-08 22:32:33 -0400 (Mon, 08 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Renamed -rollforce to -forceroll.
Documented -forceroll.

------------------------------------------------------------------------
r703 | tewok | 2005-08-08 21:52:28 -0400 (Mon, 08 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Tidied up the long output.

------------------------------------------------------------------------
r702 | tewok | 2005-08-08 21:42:17 -0400 (Mon, 08 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added the -nodate flag, which prevents the display of a key's date.
Fixed to display the length of ZSK keys.

------------------------------------------------------------------------
r701 | tewok | 2005-08-07 18:37:29 -0400 (Sun, 07 Aug 2005) | 15 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Moved argument checking prior to argument usage in call to named-checkzone.

Added better handling for the -zone option, the zone-file argument, and
the zone-out argument:

	- Renamed $zone to $zonefile.

	- Added a new $zone to hold the name of the zone being signed.

	- Made zone input and output files required arguments.

	- If -zone isn't given, then the zone input filename is used for
	  the -zone option.

------------------------------------------------------------------------
r700 | tewok | 2005-08-07 18:01:36 -0400 (Sun, 07 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm


Add entries for -archivedir and -savekeys.

------------------------------------------------------------------------
r699 | tewok | 2005-08-07 15:33:23 -0400 (Sun, 07 Aug 2005) | 10 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Moved option printing into its own routine, as well as moving the location of
when the printing will be performed.  This gets rid of multiple sets of
option displays when optsandargs() recurses.

Commented default definitions.

Added -archivedir and -savekey options.
(These options are not completely implemented.  Do not use yet!)

------------------------------------------------------------------------
r698 | tewok | 2005-08-07 12:34:09 -0400 (Sun, 07 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm


Added entries for archivedir and savekeys.
Added a note that true/false flags must be specified with a 1/0 value.

------------------------------------------------------------------------
r697 | tewok | 2005-08-07 12:32:43 -0400 (Sun, 07 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf


Added entries for archivedir and savekeys.

------------------------------------------------------------------------
r696 | tewok | 2005-08-07 11:35:13 -0400 (Sun, 07 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Replaced the options description in comments at the beginning of the file
with a reference to the option description in the pod.

------------------------------------------------------------------------
r695 | tewok | 2005-08-05 23:52:20 -0400 (Fri, 05 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm


Added entropy_msg.

------------------------------------------------------------------------
r694 | lfoster | 2005-08-05 17:11:53 -0400 (Fri, 05 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm
   M /trunk/dnssec-tools/tools/donuts/donuts
   M /trunk/dnssec-tools/tools/donuts/donutsd
   M /trunk/dnssec-tools/tools/mapper/mapper

fixed some mispellings and typos in documentation portions of these files.

------------------------------------------------------------------------
r693 | hserus | 2005-08-05 16:36:33 -0400 (Fri, 05 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_zone.c

Don't include headers that no longer exist
Use renamed headers
Use val_resquery instead of res_squery

------------------------------------------------------------------------
r692 | hserus | 2005-08-05 16:36:02 -0400 (Fri, 05 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_context.c
   M /trunk/dnssec-tools/lib/val_stub/val_verify.c
   M /trunk/dnssec-tools/lib/val_stub/val_x_query.c

Don't include headers that no longer exist
Use renamed headers

------------------------------------------------------------------------
r691 | hserus | 2005-08-05 16:35:29 -0400 (Fri, 05 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_support.h

Add prototypes for functions moved over from res_support.c

------------------------------------------------------------------------
r690 | hserus | 2005-08-05 16:35:13 -0400 (Fri, 05 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_support.c

Don't include headers that no longer exist
Move over functions used only in this file from ../libsres/res_support.c to
here. wire_name_length is duplicated, but we've already made it static in libsres

------------------------------------------------------------------------
r689 | hserus | 2005-08-05 16:34:30 -0400 (Fri, 05 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_policy.c

Use renamed headers

------------------------------------------------------------------------
r688 | hserus | 2005-08-05 16:34:07 -0400 (Fri, 05 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_errors.h

Define INDETERMINATE to be the same as INDETERMINATE_TRUST

------------------------------------------------------------------------
r687 | hserus | 2005-08-05 16:33:12 -0400 (Fri, 05 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_cache.c

Don't include headers that no longer exist

------------------------------------------------------------------------
r686 | hserus | 2005-08-05 16:32:36 -0400 (Fri, 05 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_assertion.c
   M /trunk/dnssec-tools/lib/val_stub/val_query.c

Dont include headers that no longer exist
Use val_resquery instead of res_squery
Get rid of some warnings

------------------------------------------------------------------------
r685 | hserus | 2005-08-05 16:32:02 -0400 (Fri, 05 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/Makefile.in

Use val_resquery instead of res_squery
Also build validator_driver.c instead of resolver_driver.c

------------------------------------------------------------------------
r684 | hserus | 2005-08-05 16:31:37 -0400 (Fri, 05 Aug 2005) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/lib/val_stub/res_squery.c
   D /trunk/dnssec-tools/lib/val_stub/res_squery.h
   D /trunk/dnssec-tools/lib/val_stub/resolver_driver.c
   A /trunk/dnssec-tools/lib/val_stub/val_resquery.c
   A /trunk/dnssec-tools/lib/val_stub/val_resquery.h
   A /trunk/dnssec-tools/lib/val_stub/validator_driver.c

Re-named res* files to val* files

------------------------------------------------------------------------
r683 | hserus | 2005-08-05 16:29:22 -0400 (Fri, 05 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/Makefile.in

Now building res_support.c instead of support.c
Export only those symbols that are needed by the validator

------------------------------------------------------------------------
r682 | hserus | 2005-08-05 16:28:57 -0400 (Fri, 05 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_tsig.c

Include res_support.h instead of support.h

------------------------------------------------------------------------
r681 | hserus | 2005-08-05 16:28:41 -0400 (Fri, 05 Aug 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_query.c

Include res_support.h instead of support.h
No longer including res_errors.h since this has been merged into resolver.h
Moved functions used only in this file from res_support.c

------------------------------------------------------------------------
r680 | hserus | 2005-08-05 16:28:03 -0400 (Fri, 05 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_io_manager.c

Include res_support.h instead of support.h
Moved res_quecmp() from here to res_query.c where it is actually used

------------------------------------------------------------------------
r679 | hserus | 2005-08-05 16:26:45 -0400 (Fri, 05 Aug 2005) | 3 lines
Changed paths:
   D /trunk/dnssec-tools/lib/libsres/res_errors.h
   D /trunk/dnssec-tools/lib/libsres/res_query.h
   M /trunk/dnssec-tools/lib/libsres/resolver.h

Merged error definitions from res_errors and prototypes from res_query into
resolver.h

------------------------------------------------------------------------
r678 | hserus | 2005-08-05 16:24:53 -0400 (Fri, 05 Aug 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libsres/res_support.c
   A /trunk/dnssec-tools/lib/libsres/res_support.h
   D /trunk/dnssec-tools/lib/libsres/support.c
   D /trunk/dnssec-tools/lib/libsres/support.h

Renamed support files so that they now have a res_ prefix

------------------------------------------------------------------------
r677 | hserus | 2005-08-05 16:22:09 -0400 (Fri, 05 Aug 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libsres/EXPORT.sym

Make it clear which symbols in libsres are being used by the validator

------------------------------------------------------------------------
r676 | tewok | 2005-08-05 12:01:47 -0400 (Fri, 05 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Ensure that the zone's end-date is always written to the keyrec file.

------------------------------------------------------------------------
r675 | tewok | 2005-08-05 09:15:56 -0400 (Fri, 05 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm


Split a pod paragraph in half.

------------------------------------------------------------------------
r674 | tewok | 2005-08-05 09:12:25 -0400 (Fri, 05 Aug 2005) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm


Added an entry for -genkeys.
Renamed -reuseksk to -genksk.
Renamed -reusezsk to -genzsk.
Adjusted spacing for @stdopts entries for greater legibility.

------------------------------------------------------------------------
r673 | tewok | 2005-08-04 14:04:36 -0400 (Thu, 04 Aug 2005) | 22 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Fixed some defaults in the header comments.

Renamed and relogic'd -reuseksk and -reusezsk to -genksk and -genzsk.  This
makes key re-use the default.
Added -genkeys.

Made the display of the random-number-generator-related entropy message depend
on a config option.  The default is to display.
Made the entropy message shorter so that it's more likely to be read and
to be useful.

Modified to write the keyrec file after each set of keys (KSK and ZSKs) are
generated.

Deleted a few unused subroutine arguments.

Added a message saying when the zone expires and insisting that the keys not
be deleted until then.  These messages are likely to be honed further.

Adjusted usage message and pod as needed for the above changes.

------------------------------------------------------------------------
r672 | lfoster | 2005-08-04 13:44:54 -0400 (Thu, 04 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/logwatch/conf/logfiles/dnssec.conf
   M /trunk/dnssec-tools/tools/logwatch/conf/logfiles/resolver.conf
   M /trunk/dnssec-tools/tools/logwatch/conf/services/dnssec.conf
   M /trunk/dnssec-tools/tools/logwatch/conf/services/resolver.conf

added copyright and pointer to sourceforge.

------------------------------------------------------------------------
r671 | lfoster | 2005-08-04 13:40:23 -0400 (Thu, 04 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/logwatch/scripts/shared/applybinddate

improvement in range management, plus copyright and sourceforge references.

------------------------------------------------------------------------
r670 | lfoster | 2005-08-04 13:37:00 -0400 (Thu, 04 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/logwatch/scripts/services/dnssec
   M /trunk/dnssec-tools/tools/logwatch/scripts/services/resolver

minor readability improvements, plus copyright and sourceforge references.

------------------------------------------------------------------------
r669 | tewok | 2005-08-01 21:22:00 -0400 (Mon, 01 Aug 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Added defaults for random number device and end-date.
Moved default key lengths to 1024.
Ensure a bunch of fields are included in the final keyrec.

------------------------------------------------------------------------
r668 | tewok | 2005-08-01 13:42:37 -0400 (Mon, 01 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/clean-keyrec


Added the -rm option to the usage message.

------------------------------------------------------------------------
r667 | tewok | 2005-08-01 13:40:48 -0400 (Mon, 01 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/INFO


Added notes about timetrans and timetrans.pm.

------------------------------------------------------------------------
r666 | tewok | 2005-08-01 13:34:07 -0400 (Mon, 01 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Added a message indicating when the zone's signing would expire.

------------------------------------------------------------------------
r665 | tewok | 2005-08-01 13:29:14 -0400 (Mon, 01 Aug 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/README


Added a note about timetrans.

------------------------------------------------------------------------
r664 | tewok | 2005-08-01 10:02:11 -0400 (Mon, 01 Aug 2005) | 7 lines
Changed paths:
   A /trunk/dnssec-tools/tools/scripts/timetrans


Convert from time units (seconds, minutes, hours, days, weeks) into the total
number of seconds.  Also does the reverse conversion.

This is intended for calculating the NNNN for the "-e+NNNN" option to
dnssec-signzone.

------------------------------------------------------------------------
r663 | hardaker | 2005-08-01 08:32:16 -0400 (Mon, 01 Aug 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donutsd
   M /trunk/dnssec-tools/tools/mapper/mapper

use Getopt::GUI::Long instead, and related features

------------------------------------------------------------------------
r662 | tewok | 2005-07-29 21:09:00 -0400 (Fri, 29 Jul 2005) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/modules/tests/test-timetrans


Test/demo program for timetrans.

------------------------------------------------------------------------
r661 | tewok | 2005-07-29 18:52:34 -0400 (Fri, 29 Jul 2005) | 5 lines
Changed paths:
   A /trunk/dnssec-tools/tools/modules/timetrans.pm


Added module to convert a seconds count into a text string of the days,
hours, etc.   Using this module, you do such things as converting
800000 seconds into "1 week, 2 days, 6 hours, 13 minutes, 20 seconds".

------------------------------------------------------------------------
r660 | tewok | 2005-07-29 10:48:46 -0400 (Fri, 29 Jul 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Fixed a typo in the usage message.
Added pod describing how values are determined.

------------------------------------------------------------------------
r659 | tewok | 2005-07-28 20:22:07 -0400 (Thu, 28 Jul 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Get a usage message if no options or arguments were given.

------------------------------------------------------------------------
r658 | hserus | 2005-07-21 16:16:37 -0400 (Thu, 21 Jul 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_getaddrinfo.h

Simply return the validator status in ADDRINFO_DNSSEC_STATUS instead of
first checking for NULL. (ainfo == NULL) does not necessarily convey
the validation error status. On the other hand, we now have to check
for the above condition before calling the ADDRINFO_DNSSEC_STATUS macro.

------------------------------------------------------------------------
r657 | hserus | 2005-07-20 11:49:20 -0400 (Wed, 20 Jul 2005) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_assertion.c

Added logic for proving non-existence of a name given a trusted proof.
Simplify our logic of proving proof of non-existence at some point in the
chain-of-trust other than the leaf. Short summary is that we don't check this,
cause its not important; either way the answer is not trustworthy.
Moved logic of identifying pending queries for an assertion into a function.
Now use INDETERMINATE_ERROR to say that a chain of errors was seen and
INDETERMINATE_TRUST to say that we could not reach the trust anchor.

------------------------------------------------------------------------
r656 | hserus | 2005-07-20 11:48:50 -0400 (Wed, 20 Jul 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_print.h

Added the prototype for dump_rrset()

------------------------------------------------------------------------
r655 | hserus | 2005-07-20 11:48:29 -0400 (Wed, 20 Jul 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_verify.c

Use INDETERMINATE_ZONE when we want to say that we cannot distinguish
between an unsigned zone and answers from which signatures have been
stripped.  Move the check_label_count() function from val_verify.c to
val_support.c.

------------------------------------------------------------------------
r654 | hserus | 2005-07-20 11:48:00 -0400 (Wed, 20 Jul 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_support.h

Added prototype for check_label_count()

------------------------------------------------------------------------
r653 | hserus | 2005-07-20 11:47:40 -0400 (Wed, 20 Jul 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_support.c

Add string representations for new error codes. Remove string
representations for error codes that are no longer used.
Move the check_label_count() function from val_verify.c to val_support.c.

------------------------------------------------------------------------
r652 | hserus | 2005-07-20 11:47:07 -0400 (Wed, 20 Jul 2005) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_x_query.c

Don't declare that we don't have space if what we are returning is only
the proof of non-existence. If we really don't have space, return the
total number of answers that were actually available, so that next time
we can make the call with sufficient space. Also show correct answer or
authority count in the header.

------------------------------------------------------------------------
r651 | hserus | 2005-07-20 11:46:26 -0400 (Wed, 20 Jul 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/validator.h

Added a definition for the index of the label count within the RRSIG.

------------------------------------------------------------------------
r650 | hserus | 2005-07-20 11:46:10 -0400 (Wed, 20 Jul 2005) | 10 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_errors.h

Removed NSEC_POINTING_UPWARDS as an error state. Determining that the NSEC
is pointing upward is of no use to the validator; the proof is simply incomplete.
Promoted INCOMPLETE_PROOF to one of the final validator error states
instead of just being one of the assertion-level error states.
Removed PROVABLY_UNSECURE from the list of final error states. This state
again is of no direct consequence to the validator. The answer is either
valid, has errors, or is non-existent.
Also included new error states that differentiate between the various
INDETERMINATE conditions.

------------------------------------------------------------------------
r649 | hserus | 2005-07-20 11:45:13 -0400 (Wed, 20 Jul 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/resolver_driver.c

Increased the number of answers expected to three. This allows all components
of the proof of non-existence to appear in the result set. Also display the
total count of answers received.

------------------------------------------------------------------------
r648 | ahayatnagarkar | 2005-07-14 17:53:03 -0400 (Thu, 14 Jul 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.c

Use the common parsing routine for /etc/hosts from val_parse.c instead of
duplicating code.

------------------------------------------------------------------------
r647 | ahayatnagarkar | 2005-07-14 17:52:17 -0400 (Thu, 14 Jul 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_getaddrinfo.c
   M /trunk/dnssec-tools/lib/val_stub/val_parse.c
   M /trunk/dnssec-tools/lib/val_stub/val_parse.h

Moved the routine for parsing /etc/hosts to val_parse.c.

------------------------------------------------------------------------
r646 | ahayatnagarkar | 2005-07-14 14:40:59 -0400 (Thu, 14 Jul 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_getaddrinfo.c

Read information from /etc/hosts before querying DNS.
Return an EAI_SERVICE error if the specified service is not found.
Handle the AI_CANONNAME flag properly.

------------------------------------------------------------------------
r645 | ahayatnagarkar | 2005-07-14 14:37:52 -0400 (Thu, 14 Jul 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/getaddr.c

Added a command-line option to test the AI_CANONNAME flag.

------------------------------------------------------------------------
r644 | lfoster | 2005-07-14 13:48:46 -0400 (Thu, 14 Jul 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/logwatch/scripts/shared/applybinddate

add copyright notice.

------------------------------------------------------------------------
r643 | lfoster | 2005-07-14 13:46:47 -0400 (Thu, 14 Jul 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/logwatch/scripts/services/dnssec
   M /trunk/dnssec-tools/tools/logwatch/scripts/services/resolver

add copyright notices.

------------------------------------------------------------------------
r642 | hserus | 2005-07-13 15:42:49 -0400 (Wed, 13 Jul 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/gethost.c

First parameter to val_x_gethostbyname() is NULL.
Added miscellaneous printf statements

------------------------------------------------------------------------
r641 | hserus | 2005-07-13 15:34:57 -0400 (Wed, 13 Jul 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.c
   M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.h

val_x_gethostbyname() now takes the context as the first parameter.

------------------------------------------------------------------------
r640 | hserus | 2005-07-13 15:25:39 -0400 (Wed, 13 Jul 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/resolver_driver.c

Modified to read multiple answers if available.

------------------------------------------------------------------------
r639 | hserus | 2005-07-13 15:22:09 -0400 (Wed, 13 Jul 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_getaddrinfo.c

Modified to use get_context() instead of get_default_context()

------------------------------------------------------------------------
r638 | hserus | 2005-07-13 15:19:25 -0400 (Wed, 13 Jul 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_x_query.c

Use get_context() instead of get_default_context()
Correct bug in calculating response length

------------------------------------------------------------------------
r637 | hserus | 2005-07-13 15:02:30 -0400 (Wed, 13 Jul 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/val_stub/dnsval.conf

Add sample validator configuration file

------------------------------------------------------------------------
r636 | hserus | 2005-07-13 15:00:50 -0400 (Wed, 13 Jul 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/validator.h

Added definitions for MALLOC and FREE
Added definitions for various validator policy identifiers
Added structures used by the validator for maintaining policy
Added macro for retrieving a policy structure given a policy identifier

------------------------------------------------------------------------
r635 | hserus | 2005-07-13 14:59:22 -0400 (Wed, 13 Jul 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_parse.c
   M /trunk/dnssec-tools/lib/val_stub/val_parse.h

Added a function for extracting a val_dnskey_rdata_t from a DNSKEY string
Added a function to compare if two val_dnskey_rdata_t keys are the same.

------------------------------------------------------------------------
r634 | hserus | 2005-07-13 14:58:27 -0400 (Wed, 13 Jul 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_errors.h

Corrected values of LAST_ERROR and LAST_FAILURE
Re-organized the error number definitions to keep success conditions together

------------------------------------------------------------------------
r633 | hserus | 2005-07-13 14:57:53 -0400 (Wed, 13 Jul 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_context.h

Renamed get_default_context() to get_context().

------------------------------------------------------------------------
r632 | hserus | 2005-07-13 14:57:29 -0400 (Wed, 13 Jul 2005) | 8 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_context.c

- Modified to read the configuration file when a new context
  is created
- Added logic for switching the current policy between the ones
  defined in the configuration file.
- Renamed get_default_context() to get_context(const char *label) where
  label is the policy identifier in the validator configuration
  file. Use label = NULL to obtain the default context.

------------------------------------------------------------------------
r631 | hserus | 2005-07-13 14:54:42 -0400 (Wed, 13 Jul 2005) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_assertion.c

Added logic for checking if a particular key is present in the list of trust
anchors configured for the validator
Use "MALLOC" and "FREE" instead of "malloc" and "free"
Use the NONSENSE_RESULT_SEQUENCE macro for checking nonsense results in the
validation chain.

------------------------------------------------------------------------
r630 | hserus | 2005-07-13 12:33:51 -0400 (Wed, 13 Jul 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/Makefile.in

Add val_policy.c to the list of sources to be compiled

------------------------------------------------------------------------
r629 | hserus | 2005-07-13 12:32:48 -0400 (Wed, 13 Jul 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/val_stub/val_policy.c
   A /trunk/dnssec-tools/lib/val_stub/val_policy.h

Routines for parsing the contents of the validator configuration file

------------------------------------------------------------------------
r628 | ahayatnagarkar | 2005-07-12 17:55:26 -0400 (Tue, 12 Jul 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_getaddrinfo.c

Process the service-name parameter.

------------------------------------------------------------------------
r627 | ahayatnagarkar | 2005-07-12 16:13:10 -0400 (Tue, 12 Jul 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub
   M /trunk/dnssec-tools/lib/val_stub/.cvsignore

Added getaddr.

------------------------------------------------------------------------
r626 | ahayatnagarkar | 2005-07-12 16:10:54 -0400 (Tue, 12 Jul 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/Makefile.in

Added rules for compiling getaddr and val_getaddrinfo.

------------------------------------------------------------------------
r625 | ahayatnagarkar | 2005-07-12 16:10:01 -0400 (Tue, 12 Jul 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_api.h
   M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.h

Moved some declarations from val_api to val_gethostbyname.

------------------------------------------------------------------------
r624 | ahayatnagarkar | 2005-07-12 16:06:45 -0400 (Tue, 12 Jul 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/gethost.c

Can now test the val_x_gethostbyname() function as well.

------------------------------------------------------------------------
r623 | ahayatnagarkar | 2005-07-12 15:59:46 -0400 (Tue, 12 Jul 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/gethost.c
   M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.c

Corrected a typo.

------------------------------------------------------------------------
r622 | ahayatnagarkar | 2005-07-12 15:58:48 -0400 (Tue, 12 Jul 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/val_stub/getaddr.c

A command-line tool for testing the val_getaddrinfo() function.

------------------------------------------------------------------------
r621 | ahayatnagarkar | 2005-07-12 15:57:56 -0400 (Tue, 12 Jul 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_getaddrinfo.c

Queries the validator, gets answers and packages them into addrinfo-wrapper
structures.

------------------------------------------------------------------------
r620 | ahayatnagarkar | 2005-07-12 15:56:23 -0400 (Tue, 12 Jul 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_getaddrinfo.h

Added a wrapper struct. Added a macro to extract DNSSEC-validation status.

------------------------------------------------------------------------
r619 | ahayatnagarkar | 2005-07-08 16:55:40 -0400 (Fri, 08 Jul 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/val_stub/val_getaddrinfo.c
   A /trunk/dnssec-tools/lib/val_stub/val_getaddrinfo.h

Initial commit for the val_getaddrinfo() function implementation.

------------------------------------------------------------------------
r615 | hardaker | 2005-06-24 19:00:02 -0400 (Fri, 24 Jun 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/INSTALL

mention Date::Parse

------------------------------------------------------------------------
r614 | ahayatnagarkar | 2005-06-24 15:55:56 -0400 (Fri, 24 Jun 2005) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/apps/sendmail/spfmilter-0.97_dnssec_patch.txt

A dnssec-patch for spfmilter-0.97.  spfmilter-0.97 supports version 1.0.4
of the libspf2 library. It does not support version 1.2.5.

------------------------------------------------------------------------
r613 | ahayatnagarkar | 2005-06-24 15:15:49 -0400 (Fri, 24 Jun 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.4_dnssec_patch.txt

The 'undefine' line is not needed while overriding a compilation option.

------------------------------------------------------------------------
r612 | ahayatnagarkar | 2005-06-24 14:58:23 -0400 (Fri, 24 Jun 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.4_dnssec_patch.txt

Removed unnecessary compilation options.

------------------------------------------------------------------------
r611 | ahayatnagarkar | 2005-06-24 14:46:49 -0400 (Fri, 24 Jun 2005) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.4_dnssec_patch.txt

A patch for the latest (8.13.4) version of sendmail.  The code has been
formatted to fit sendmail's coding conventions.

------------------------------------------------------------------------
r610 | hardaker | 2005-06-24 12:02:02 -0400 (Fri, 24 Jun 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

misc fixes for auto_help

------------------------------------------------------------------------
r609 | hardaker | 2005-06-24 12:01:30 -0400 (Fri, 24 Jun 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/mapper

update for auto_help and case sensitivity

------------------------------------------------------------------------
r608 | hardaker | 2005-06-24 11:47:15 -0400 (Fri, 24 Jun 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

don't ignore case for options

------------------------------------------------------------------------
r607 | hardaker | 2005-06-23 17:47:54 -0400 (Thu, 23 Jun 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

Check for glue records in the same zone, in which case RRSIG and NSEC
records actually should exist because they're not actually glue records.

------------------------------------------------------------------------
r606 | hardaker | 2005-06-23 02:26:47 -0400 (Thu, 23 Jun 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast.patch

afsdb record update

------------------------------------------------------------------------
r600 | hardaker | 2005-06-09 18:56:12 -0400 (Thu, 09 Jun 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-enable.patch

The mozilla support now has a preference dialog box that lets users select between different levels of DNSSecurity.  It is not implemented in quite an ideal way (eg, it uses global policy and on-the-side-API for policy setting), but it does work.

------------------------------------------------------------------------
r594 | ahayatnagarkar | 2005-06-05 14:19:25 -0400 (Sun, 05 Jun 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt

Some indentation changes.

------------------------------------------------------------------------
r593 | ahayatnagarkar | 2005-06-05 14:13:48 -0400 (Sun, 05 Jun 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt

Added spacing to conform to the original code's style.

------------------------------------------------------------------------
r592 | ahayatnagarkar | 2005-06-05 13:05:07 -0400 (Sun, 05 Jun 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt

Adjusted spacing and indentation to match the original code's conventions.

------------------------------------------------------------------------
r591 | ahayatnagarkar | 2005-06-05 11:35:53 -0400 (Sun, 05 Jun 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt

Adjusted spacing and indentation to match the original code's conventions.

------------------------------------------------------------------------
r590 | ahayatnagarkar | 2005-06-03 15:35:03 -0400 (Fri, 03 Jun 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_howto.txt
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt

Changed '#ifdef HAVE_LIBVAL' to '#ifdef SUPPORT_DNSSEC' for clarity.

------------------------------------------------------------------------
r589 | ahayatnagarkar | 2005-06-03 14:42:38 -0400 (Fri, 03 Jun 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_howto.txt
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt

Added the --enable-dnssec-support option to the configure script.  All
DNSSEC-related code is now enclosed within #ifdef SUPPORT_DNSSEC ... #endif
constructs.  SUPPORT_DNSSEC is defined when the --enable-dnssec-support
option is specified while configuring spfmilter-1.0.8.

------------------------------------------------------------------------
r588 | ahayatnagarkar | 2005-06-03 13:11:30 -0400 (Fri, 03 Jun 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_guide.txt
   M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_howto.txt
   M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt

Added a --enable-dnssec-support option to the configure script.  All
DNSSEC-related code is now enclosed within #ifdef SUPPORT_DNSSEC ... #endif
constructs.  SUPPORT_DNSSEC is defined when the --enable-dnssec-support
option is specified while configuring libspf2-1.2.5.

------------------------------------------------------------------------
r587 | ahayatnagarkar | 2005-06-03 11:58:34 -0400 (Fri, 03 Jun 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_howto.txt
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt

Added a --enable-dnssec-support option to the configure script.  All
DNSSEC-related code is now enclosed within #ifdef SUPPORT_DNSSEC ... #endif
constructs.  SUPPORT_DNSSEC is defined when the --enable-dnssec-support
option is specified while configuring libspf2-1.0.4.

------------------------------------------------------------------------
r586 | hserus | 2005-06-02 17:30:39 -0400 (Thu, 02 Jun 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_support.c

Re-ordered error values

------------------------------------------------------------------------
r585 | hserus | 2005-06-02 17:26:13 -0400 (Thu, 02 Jun 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_verify.c

Made a distiction between DNSKEY_NOMATCH and DNSKEY_MISSING. Final status left behind in the assertion now more
closely dependent on the signature status.

------------------------------------------------------------------------
r584 | lfoster | 2005-06-02 17:24:19 -0400 (Thu, 02 Jun 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/logwatch/scripts/services/dnssec
   M /trunk/dnssec-tools/tools/logwatch/scripts/services/resolver

sort messages to display in descending order (most first),
plus a few appearance tweaks.

------------------------------------------------------------------------
r583 | hserus | 2005-06-02 17:22:19 -0400 (Thu, 02 Jun 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_x_query.h

Added few more prototypes

------------------------------------------------------------------------
r582 | hserus | 2005-06-02 17:18:39 -0400 (Thu, 02 Jun 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.c
   M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.h

Cloned val_gethostbyname() and named it val_x_gethostbyname(); only difference is that the latter makes use of
resolve_n_check() instead of val_query().
Changed get_hostent_from_response() so that it could be re-used between the two functions.

------------------------------------------------------------------------
r581 | hserus | 2005-06-02 17:14:33 -0400 (Thu, 02 Jun 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/resolver_driver.c

Now using different arguments for val_x_query()

------------------------------------------------------------------------
r580 | hserus | 2005-06-02 17:11:58 -0400 (Thu, 02 Jun 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/validator.h

Some clean-up. Moved error states to val_errors.h.

------------------------------------------------------------------------
r579 | hserus | 2005-06-02 17:07:56 -0400 (Thu, 02 Jun 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_x_query.c

Moved assertion-chain logic to a separate file

------------------------------------------------------------------------
r578 | hserus | 2005-06-02 17:06:38 -0400 (Thu, 02 Jun 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_errors.h

Error code restructuring

------------------------------------------------------------------------
r577 | hserus | 2005-06-02 17:05:16 -0400 (Thu, 02 Jun 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/Makefile.in
   A /trunk/dnssec-tools/lib/val_stub/val_assertion.c
   A /trunk/dnssec-tools/lib/val_stub/val_assertion.h

New file containing logic for the assertion chains

------------------------------------------------------------------------
r576 | ahayatnagarkar | 2005-06-01 09:47:28 -0400 (Wed, 01 Jun 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_howto.txt
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt

Updated to use the new functions from the DNSSEC patch for libspf2-1.0.4
that uses libval instead of libvalidat.

------------------------------------------------------------------------
r575 | ahayatnagarkar | 2005-06-01 09:44:31 -0400 (Wed, 01 Jun 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/README
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_guide.txt
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_howto.txt
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt

libspf2-1.0.4 updated to use the libval library instead of libvalidat.

------------------------------------------------------------------------
r574 | hardaker | 2005-05-25 15:03:56 -0400 (Wed, 25 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast.patch

Add support for AFS records.

------------------------------------------------------------------------
r573 | hardaker | 2005-05-25 15:00:20 -0400 (Wed, 25 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/mapper

Added -x and -y arguments, and documented more layout types.

------------------------------------------------------------------------
r572 | hardaker | 2005-05-25 10:45:51 -0400 (Wed, 25 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/mapper

added options for node-overlap and label fontsize

------------------------------------------------------------------------
r571 | ahayatnagarkar | 2005-05-17 11:17:19 -0400 (Tue, 17 May 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.c

Commented out IPv6-related code.  This code can later be used for the
val_getaddrinfo() and val_getnameinfo() wrappers.

------------------------------------------------------------------------
r570 | hardaker | 2005-05-16 17:41:25 -0400 (Mon, 16 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donutsd

allow the use of config flags to specified in the xml file

------------------------------------------------------------------------
r568 | hardaker | 2005-05-10 17:42:25 -0400 (Tue, 10 May 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donutsd

- Send a summary email to a specified -e flag.
- Added a -o flag to just run once.

------------------------------------------------------------------------
r567 | hardaker | 2005-05-10 17:07:55 -0400 (Tue, 10 May 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donutsd

Parse an optional XML config file (-i) useful for specifying special
donuts args per zone.

------------------------------------------------------------------------
r566 | hardaker | 2005-05-10 16:34:16 -0400 (Tue, 10 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donutsd

Documentation.

------------------------------------------------------------------------
r565 | hardaker | 2005-05-10 15:48:34 -0400 (Tue, 10 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donutsd

Add a -x option to include diff output in the generated mail messages.

------------------------------------------------------------------------
r564 | hardaker | 2005-05-10 13:33:58 -0400 (Tue, 10 May 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donutsd

Take an input file as the list of zones to run on rather than forcing
command-line usage every time.

------------------------------------------------------------------------
r563 | hardaker | 2005-05-10 12:56:35 -0400 (Tue, 10 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donutsd

mail contacts with results when appropriate.

------------------------------------------------------------------------
r562 | hardaker | 2005-05-10 12:21:16 -0400 (Tue, 10 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Makefile.PL
   A /trunk/dnssec-tools/tools/donuts/donutsd

Long-term running server to occasionally run donuts and watch for differences

------------------------------------------------------------------------
r561 | ahayatnagarkar | 2005-05-09 17:54:14 -0400 (Mon, 09 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.c

Added support for parsing IPv6 addresses from /etc/hosts.

------------------------------------------------------------------------
r560 | hardaker | 2005-05-06 15:05:18 -0400 (Fri, 06 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/INSTALL

remove references to net-snmp that snuck in from the  infocp

------------------------------------------------------------------------
r557 | ahayatnagarkar | 2005-05-06 14:21:55 -0400 (Fri, 06 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/README

Added notes about libspf2, sendmail, spfmilter and thunderbird.

------------------------------------------------------------------------
r556 | tewok | 2005-05-06 13:51:28 -0400 (Fri, 06 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/logwatch/README

Minor editorial changes for appearance and proper periodic spacing.

------------------------------------------------------------------------
r555 | tewok | 2005-05-06 13:30:05 -0400 (Fri, 06 May 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/logwatch/README


Added the copyright and snazzy slogan.

------------------------------------------------------------------------
r554 | tewok | 2005-05-06 13:27:49 -0400 (Fri, 06 May 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/apps/README
   M /trunk/dnssec-tools/apps/mozilla/README
   M /trunk/dnssec-tools/apps/sendmail/README
   M /trunk/dnssec-tools/apps/thunderbird/README
   M /trunk/dnssec-tools/lib/libsres/README
   M /trunk/dnssec-tools/lib/val_stub/README
   M /trunk/dnssec-tools/tools/linux/ifup-dyn-dns/README


Added the copyright and snazzy slogan to any READMEs that were missing it.
Made some minor formatting changes to one or two READMEs as well.

------------------------------------------------------------------------
r553 | tewok | 2005-05-06 13:15:25 -0400 (Fri, 06 May 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/INSTALL

Added the project title and spiffy slogan to the top of the file.
Don't want anyone forgetting just what it is they're installing, do we?

------------------------------------------------------------------------
r552 | tewok | 2005-05-06 13:10:22 -0400 (Fri, 06 May 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/README

New README file for the tools directory.

------------------------------------------------------------------------
r551 | tewok | 2005-05-06 13:07:07 -0400 (Fri, 06 May 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/etc/README

Added a readme for the data directory.

------------------------------------------------------------------------
r550 | tewok | 2005-05-06 13:02:25 -0400 (Fri, 06 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/README

Added a description for QWPrimitives.pm.

------------------------------------------------------------------------
r549 | tewok | 2005-05-06 13:01:27 -0400 (Fri, 06 May 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/modules/README

Readme for the dnssec-tools modules directory.

------------------------------------------------------------------------
r548 | tewok | 2005-05-06 12:48:36 -0400 (Fri, 06 May 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/README


Added WesH's snazzy project header (and a copyright) to the beginning
of the file.

------------------------------------------------------------------------
r547 | tewok | 2005-05-06 12:46:59 -0400 (Fri, 06 May 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/patches/README

Brief explanation of what this directory is about.

------------------------------------------------------------------------
r546 | hardaker | 2005-05-06 12:38:15 -0400 (Fri, 06 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools
   M /trunk/dnssec-tools/.cvsignore
   A /trunk/dnssec-tools/config.guess

add config.guess

------------------------------------------------------------------------
r545 | hardaker | 2005-05-06 12:37:36 -0400 (Fri, 06 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/INSTALL

remove line that should have been removed referencing compilers

------------------------------------------------------------------------
r544 | tewok | 2005-05-06 12:37:28 -0400 (Fri, 06 May 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/README

Added brief descriptions of components of the dnssec-tools project, and left
placeholders for components handled by others.

------------------------------------------------------------------------
r543 | lfoster | 2005-05-06 12:19:26 -0400 (Fri, 06 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/logwatch/README

mention ApplyBindDate installion dir.

------------------------------------------------------------------------
r542 | tewok | 2005-05-06 12:19:22 -0400 (Fri, 06 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/INFO

Fixed a typo.

------------------------------------------------------------------------
r541 | tewok | 2005-05-06 12:17:24 -0400 (Fri, 06 May 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm


Changed the tokenizing to skip empty tokens and collapsed the comment check.

------------------------------------------------------------------------
r540 | lfoster | 2005-05-06 12:16:00 -0400 (Fri, 06 May 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/logwatch/conf/logfiles/dnssec.conf
   M /trunk/dnssec-tools/tools/logwatch/conf/logfiles/resolver.conf

use ApplyBindDate to enable BIND-specific date format parsing for
logwatch --range date ranges.

------------------------------------------------------------------------
r539 | lfoster | 2005-05-06 12:13:08 -0400 (Fri, 06 May 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/logwatch/scripts/services/dnssec
   M /trunk/dnssec-tools/tools/logwatch/scripts/services/resolver

enable logwatch standard debugging output
rearrange order of some of the logging output

------------------------------------------------------------------------
r538 | lfoster | 2005-05-06 12:08:49 -0400 (Fri, 06 May 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/logwatch/scripts/shared
   A /trunk/dnssec-tools/tools/logwatch/scripts/shared/applybinddate

provide BIND-specific date parsing for logwatch

------------------------------------------------------------------------
r537 | tewok | 2005-05-06 11:40:25 -0400 (Fri, 06 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/INSTALL

Adjusted some formatting for internal consistency.

------------------------------------------------------------------------
r536 | tewok | 2005-05-06 11:31:02 -0400 (Fri, 06 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/README
   M /trunk/dnssec-tools/apps/mozilla/README
   M /trunk/dnssec-tools/apps/sendmail/README
   M /trunk/dnssec-tools/apps/thunderbird/README

Fixed a few typos.

------------------------------------------------------------------------
r535 | ahayatnagarkar | 2005-05-06 11:28:37 -0400 (Fri, 06 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_io_manager.c
   M /trunk/dnssec-tools/lib/libsres/res_mkquery.c
   M /trunk/dnssec-tools/lib/libsres/res_query.c

Turn off debugging by default.

------------------------------------------------------------------------
r534 | tewok | 2005-05-06 11:25:20 -0400 (Fri, 06 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/README

Fixed a few typos.

------------------------------------------------------------------------
r533 | ahayatnagarkar | 2005-05-06 11:21:07 -0400 (Fri, 06 May 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/apps/README

Added a note saying the libspf2-1.0.4 dnssec-patch still uses the
libvalidat library for DNSSEC validation.

------------------------------------------------------------------------
r532 | ahayatnagarkar | 2005-05-06 11:14:20 -0400 (Fri, 06 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/README

Added a note about sendmail* files.

------------------------------------------------------------------------
r531 | hserus | 2005-05-06 11:13:59 -0400 (Fri, 06 May 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libsres/README
   M /trunk/dnssec-tools/lib/val_stub/README

Included note about the current state of the library.

------------------------------------------------------------------------
r530 | ahayatnagarkar | 2005-05-06 11:05:37 -0400 (Fri, 06 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/README

Added a note about the sendmail patch.

------------------------------------------------------------------------
r529 | tewok | 2005-05-06 11:02:34 -0400 (Fri, 06 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/QWPrimitives.pm
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

Fixed a couple typos.

------------------------------------------------------------------------
r528 | ahayatnagarkar | 2005-05-06 11:01:25 -0400 (Fri, 06 May 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.c

Added a comment for IPv6 addresses.  At present, the val_gethostbyname()
function does not handle IPv6 addresses completely.

------------------------------------------------------------------------
r527 | ahayatnagarkar | 2005-05-06 10:57:26 -0400 (Fri, 06 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_query.c

Removed unnecessary comments.

------------------------------------------------------------------------
r526 | ahayatnagarkar | 2005-05-06 10:55:28 -0400 (Fri, 06 May 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_api.h
   M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.c

Updated a comment to reflect that the val_gethostbyname() function returns
an answer even if dnssec-validation fails.

------------------------------------------------------------------------
r525 | tewok | 2005-05-06 09:22:36 -0400 (Fri, 06 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/INFO

Added info about confchk and documentation for the config file.

------------------------------------------------------------------------
r524 | tewok | 2005-05-06 09:17:51 -0400 (Fri, 06 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/README

Added an entry for confchk

------------------------------------------------------------------------
r519 | hardaker | 2005-05-06 00:39:33 -0400 (Fri, 06 May 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/mozilla/README

readme file describing how to build the mozilla (and that it's pre-alpha)

------------------------------------------------------------------------
r518 | hardaker | 2005-05-06 00:35:48 -0400 (Fri, 06 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/README

mention the mozilla patch

------------------------------------------------------------------------
r517 | hardaker | 2005-05-06 00:34:59 -0400 (Fri, 06 May 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/INSTALL

INSTALL file to describe the installation process.

------------------------------------------------------------------------
r516 | hardaker | 2005-05-06 00:34:36 -0400 (Fri, 06 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/README

Update to say something more intelligent.

------------------------------------------------------------------------
r515 | tewok | 2005-05-06 00:13:14 -0400 (Fri, 06 May 2005) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/scripts/confchk

First cut at a script to check the validity of the dnssec-tools
configuration file.

------------------------------------------------------------------------
r514 | hardaker | 2005-05-05 23:47:23 -0400 (Thu, 05 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/thunderbird/content/spfdnssec/spfDnssecOverlay.xul
   M /trunk/dnssec-tools/tools/donuts/Rule.pm
   M /trunk/dnssec-tools/tools/donuts/donuts
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt
   M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt
   M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt
   M /trunk/dnssec-tools/tools/mapper/mapper
   M /trunk/dnssec-tools/tools/modules/Makefile.PL
   M /trunk/dnssec-tools/tools/modules/conf.pm
   M /trunk/dnssec-tools/tools/scripts/keyrec-check

2005 copyright update

------------------------------------------------------------------------
r513 | hardaker | 2005-05-05 23:29:03 -0400 (Thu, 05 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/COPYING

2005 copyright update

------------------------------------------------------------------------
r512 | tewok | 2005-05-05 21:24:38 -0400 (Thu, 05 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Changed to use rsasha1 as the default encryption algorithm.

------------------------------------------------------------------------
r511 | tewok | 2005-05-05 17:47:45 -0400 (Thu, 05 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf

Added a few things to make it closer match the man page.

------------------------------------------------------------------------
r510 | hardaker | 2005-05-05 17:47:40 -0400 (Thu, 05 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

make RRSIG verification a level 1 rule

------------------------------------------------------------------------
r509 | tewok | 2005-05-05 17:44:43 -0400 (Thu, 05 May 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm

Added record entry for default_keyrec.
Added record entry for random.
Mentioned that conf.pm parses this for programs.

------------------------------------------------------------------------
r508 | tewok | 2005-05-05 17:33:29 -0400 (Thu, 05 May 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf.pm

Man page for the dnssec-tools configuration file.

------------------------------------------------------------------------
r507 | hardaker | 2005-05-05 17:10:29 -0400 (Thu, 05 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast.patch

modify keytags after creation.  this hack is getting really bad.  must talk to the author

------------------------------------------------------------------------
r506 | tewok | 2005-05-05 17:03:49 -0400 (Thu, 05 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Added defaults for encryption algorithm, KSK length, and ZSK length.

------------------------------------------------------------------------
r505 | tewok | 2005-05-05 16:41:31 -0400 (Thu, 05 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Set up default command names for several DNSSEC-related zonesigner executes.

------------------------------------------------------------------------
r504 | ahayatnagarkar | 2005-05-05 15:08:16 -0400 (Thu, 05 May 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.c

Return an answer even if the validation status is not RRSIG_VERIFIED.  The
dnssec_status return value will contain the validation status.

------------------------------------------------------------------------
r503 | tewok | 2005-05-05 11:35:29 -0400 (Thu, 05 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf

Added entries for several required program paths.

------------------------------------------------------------------------
r502 | ahayatnagarkar | 2005-05-04 22:45:35 -0400 (Wed, 04 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt

Don't use the bind library libresolv when using this patch and libsres.

------------------------------------------------------------------------
r501 | ahayatnagarkar | 2005-05-04 22:38:53 -0400 (Wed, 04 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt

Don't use the libresolv and libbind libraries when using libsres.

------------------------------------------------------------------------
r500 | hardaker | 2005-05-04 19:07:18 -0400 (Wed, 04 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/mozilla/dnssec-enable.patch

Update to use val_gethostbyname where possible and to force the turn on of locking;  Also fixes a wierd bug where getaddrinfo returns a temp failure: sleep for a sec and try again.

------------------------------------------------------------------------
r499 | hardaker | 2005-05-04 17:58:47 -0400 (Wed, 04 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

modified to strip trailing white space in rule definition lines.

------------------------------------------------------------------------
r498 | hardaker | 2005-05-04 17:46:32 -0400 (Wed, 04 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

verifying RRSIGs now handle multiple RRSIG/DNSKEY sets properly.

------------------------------------------------------------------------
r497 | hardaker | 2005-05-04 17:45:58 -0400 (Wed, 04 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast.patch

set the keytag for dnskey records

------------------------------------------------------------------------
r496 | ahayatnagarkar | 2005-05-04 17:12:20 -0400 (Wed, 04 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.c

Read the /etc/hosts file before querying DNS.

------------------------------------------------------------------------
r495 | tewok | 2005-05-04 16:52:03 -0400 (Wed, 04 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Fixed a typo.

------------------------------------------------------------------------
r494 | tewok | 2005-05-04 16:43:15 -0400 (Wed, 04 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf

Fixed the pod so pod2html stops whining.

------------------------------------------------------------------------
r493 | tewok | 2005-05-04 16:20:59 -0400 (Wed, 04 May 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Modified and reorganized the pod to be clearer about the command line
arguments.  Also added a section on keyrec files.

------------------------------------------------------------------------
r492 | lfoster | 2005-05-04 16:18:15 -0400 (Wed, 04 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/logwatch/conf/logfiles/dnssec.conf
   M /trunk/dnssec-tools/tools/logwatch/conf/logfiles/resolver.conf

change an incorrect comment.

------------------------------------------------------------------------
r491 | hardaker | 2005-05-04 14:02:15 -0400 (Wed, 04 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

don't display a list of rules marked 'internal'

------------------------------------------------------------------------
r490 | hardaker | 2005-05-04 14:01:58 -0400 (Wed, 04 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

check rrsigs for proper validation.  pass 1: one sig only

------------------------------------------------------------------------
r489 | hardaker | 2005-05-04 13:59:31 -0400 (Wed, 04 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/mapper

Change the output file qwizard type to fileupload

------------------------------------------------------------------------
r488 | hardaker | 2005-05-04 13:29:30 -0400 (Wed, 04 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast.patch

update to do proper binary conversion for tags in NSEC/RRSIG

------------------------------------------------------------------------
r487 | tewok | 2005-05-04 11:24:06 -0400 (Wed, 04 May 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Removed the specification of a default keyrec file name.  This allows
zonesigner, for example, to use <zone>.krf as the default name.

------------------------------------------------------------------------
r486 | tewok | 2005-05-04 11:22:37 -0400 (Wed, 04 May 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Changed example domains to use the standard.

------------------------------------------------------------------------
r485 | hardaker | 2005-05-04 11:21:18 -0400 (Wed, 04 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast.patch

correct patch which was accidentially created from a wrong original version

------------------------------------------------------------------------
r484 | tewok | 2005-05-04 11:17:58 -0400 (Wed, 04 May 2005) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Silenced the initial zone check and added a noisy zone check if the initial
check fails.
Changed the keyrec file suffix to .krf in the pod.
Added another example to the pod that shows the default keyrec file creation.

------------------------------------------------------------------------
r483 | tewok | 2005-05-03 22:10:58 -0400 (Tue, 03 May 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Run checkzone on the zone file before doing anything.
Fixed a couple comments.
Added some missing close-quotes.

------------------------------------------------------------------------
r482 | tewok | 2005-05-03 21:48:25 -0400 (Tue, 03 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Reworked when and how the help option is checked.

------------------------------------------------------------------------
r481 | tewok | 2005-05-03 20:44:42 -0400 (Tue, 03 May 2005) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Modifications to the pod:

	- Added a few initial references to DNS to clarify just what sort
	  of zones are being modified.

	- Added an example showing the contents of a keyrec file.

------------------------------------------------------------------------
r480 | tewok | 2005-05-03 15:20:01 -0400 (Tue, 03 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Added a note about future SOA serial number mods.

------------------------------------------------------------------------
r479 | hardaker | 2005-05-03 10:58:22 -0400 (Tue, 03 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

remove potential trailing dot in zone names

------------------------------------------------------------------------
r478 | tewok | 2005-05-03 10:28:35 -0400 (Tue, 03 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

Changed to use the standard domain name in examples.

------------------------------------------------------------------------
r477 | tewok | 2005-05-03 09:05:55 -0400 (Tue, 03 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Missed a couple example domains.

------------------------------------------------------------------------
r476 | tewok | 2005-05-03 09:00:51 -0400 (Tue, 03 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Changed the pod to use the standard domain name in examples.

------------------------------------------------------------------------
r475 | tewok | 2005-05-03 08:51:43 -0400 (Tue, 03 May 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/scripts/INFO

Provide more detailed info about zonesigner and its various files.

------------------------------------------------------------------------
r474 | tewok | 2005-05-03 00:37:15 -0400 (Tue, 03 May 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/scripts/fixkrf

Add a command to fix keyrec files whose encryption key files have been moved.

------------------------------------------------------------------------
r473 | tewok | 2005-05-03 00:26:55 -0400 (Tue, 03 May 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/README

Added an entry for fixkrf.

------------------------------------------------------------------------
r472 | hardaker | 2005-05-02 17:52:47 -0400 (Mon, 02 May 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_errors.h

change the prototype for p_val_error to use valerrno instead of errno
  (errno on linux is actually a #defined value)

------------------------------------------------------------------------
r467 | hardaker | 2005-04-29 17:24:59 -0400 (Fri, 29 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

specify the input/output files as fileupload types for the GUI

------------------------------------------------------------------------
r466 | tewok | 2005-04-29 17:02:55 -0400 (Fri, 29 Apr 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Added some code to put a keypath record in each key keyrec.  These will allow
clean-keyrec to hunt down and exterminate orphaned keys.

------------------------------------------------------------------------
r465 | tewok | 2005-04-29 17:01:00 -0400 (Fri, 29 Apr 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/clean-keyrec

Added pod about -rm.
Deleted some extraneous characters from the options pod.

------------------------------------------------------------------------
r464 | tewok | 2005-04-29 16:57:07 -0400 (Fri, 29 Apr 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/clean-keyrec

Added -rm option so that orphaned and obsolete key files can be removed, not
just their associated keyrecs.

------------------------------------------------------------------------
r463 | tewok | 2005-04-29 16:52:38 -0400 (Fri, 29 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm

Fixed copyright, added #!/usr/bin/perl.

------------------------------------------------------------------------
r462 | tewok | 2005-04-29 16:46:02 -0400 (Fri, 29 Apr 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

Deleted some extraneous comments.
Adjusted some new code to match existing style.

------------------------------------------------------------------------
r461 | tewok | 2005-04-29 16:43:20 -0400 (Fri, 29 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm

Added the keypath keyrec field.

------------------------------------------------------------------------
r460 | tewok | 2005-04-28 19:49:30 -0400 (Thu, 28 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/keyrec-check

Fixed an improper word in a pod.

------------------------------------------------------------------------
r459 | tewok | 2005-04-28 19:41:57 -0400 (Thu, 28 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/clean-keyrec

Get rid of obsolete keyrecs.

------------------------------------------------------------------------
r458 | lfoster | 2005-04-28 17:45:57 -0400 (Thu, 28 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/logwatch/README

yet more detail.

------------------------------------------------------------------------
r457 | lfoster | 2005-04-28 17:43:13 -0400 (Thu, 28 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/logwatch/conf/logfiles/dnssec.conf

changed a bad path.

------------------------------------------------------------------------
r456 | lfoster | 2005-04-28 17:30:59 -0400 (Thu, 28 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/logwatch/README

added a little more logging info.

------------------------------------------------------------------------
r455 | lfoster | 2005-04-28 13:54:32 -0400 (Thu, 28 Apr 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/logwatch/README

Installation instructions.

------------------------------------------------------------------------
r454 | lfoster | 2005-04-28 13:37:53 -0400 (Thu, 28 Apr 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/logwatch
   A /trunk/dnssec-tools/tools/logwatch/conf
   A /trunk/dnssec-tools/tools/logwatch/conf/logfiles
   A /trunk/dnssec-tools/tools/logwatch/conf/logfiles/dnssec.conf
   A /trunk/dnssec-tools/tools/logwatch/conf/logfiles/resolver.conf
   A /trunk/dnssec-tools/tools/logwatch/conf/services
   A /trunk/dnssec-tools/tools/logwatch/conf/services/dnssec.conf
   A /trunk/dnssec-tools/tools/logwatch/conf/services/resolver.conf
   A /trunk/dnssec-tools/tools/logwatch/scripts
   A /trunk/dnssec-tools/tools/logwatch/scripts/services
   A /trunk/dnssec-tools/tools/logwatch/scripts/services/dnssec
   A /trunk/dnssec-tools/tools/logwatch/scripts/services/resolver

configuration files and scripts for dnssec and resolver logs

------------------------------------------------------------------------
r453 | ahayatnagarkar | 2005-04-28 13:34:36 -0400 (Thu, 28 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt

Use val_gethostbyname() in libmilter code.

------------------------------------------------------------------------
r452 | hserus | 2005-04-28 10:53:39 -0400 (Thu, 28 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_errors.h
   M /trunk/dnssec-tools/lib/libsres/res_io_manager.c
   M /trunk/dnssec-tools/lib/libsres/res_io_manager.h
   M /trunk/dnssec-tools/lib/libsres/res_mkquery.h
   M /trunk/dnssec-tools/lib/libsres/res_query.c
   M /trunk/dnssec-tools/lib/libsres/res_query.h
   M /trunk/dnssec-tools/lib/libsres/res_transaction.c
   M /trunk/dnssec-tools/lib/libsres/res_transaction.h
   M /trunk/dnssec-tools/lib/libsres/res_tsig.c
   M /trunk/dnssec-tools/lib/libsres/res_tsig.h
   M /trunk/dnssec-tools/lib/libsres/resolver.h
   M /trunk/dnssec-tools/lib/libsres/support.c
   M /trunk/dnssec-tools/lib/libsres/support.h
   M /trunk/dnssec-tools/lib/val_stub/res_squery.c
   M /trunk/dnssec-tools/lib/val_stub/res_squery.h
   M /trunk/dnssec-tools/lib/val_stub/resolver_driver.c
   M /trunk/dnssec-tools/lib/val_stub/val_cache.c
   M /trunk/dnssec-tools/lib/val_stub/val_cache.h
   M /trunk/dnssec-tools/lib/val_stub/val_context.c
   M /trunk/dnssec-tools/lib/val_stub/val_context.h
   M /trunk/dnssec-tools/lib/val_stub/val_errors.h
   M /trunk/dnssec-tools/lib/val_stub/val_parse.c
   M /trunk/dnssec-tools/lib/val_stub/val_print.c
   M /trunk/dnssec-tools/lib/val_stub/val_print.h
   M /trunk/dnssec-tools/lib/val_stub/val_support.c
   M /trunk/dnssec-tools/lib/val_stub/val_support.h
   M /trunk/dnssec-tools/lib/val_stub/val_x_query.c
   M /trunk/dnssec-tools/lib/val_stub/val_x_query.h
   M /trunk/dnssec-tools/lib/val_stub/val_zone.c
   M /trunk/dnssec-tools/lib/val_stub/val_zone.h
   M /trunk/dnssec-tools/lib/val_stub/validator.h

Update copyright notice

------------------------------------------------------------------------
r451 | ahayatnagarkar | 2005-04-27 13:24:11 -0400 (Wed, 27 Apr 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_query.c

Set h_errno to NO_DATA instead of HOST_NOT_FOUND when no record of a given
type was found at that domain name and if the domain name exists.

------------------------------------------------------------------------
r450 | tewok | 2005-04-26 22:08:39 -0400 (Tue, 26 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf

Added code to display obsolete ZSKs.

------------------------------------------------------------------------
r449 | hardaker | 2005-04-26 19:45:30 -0400 (Tue, 26 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

GUI-token-ize the tool specific options

------------------------------------------------------------------------
r448 | hardaker | 2005-04-26 19:44:54 -0400 (Tue, 26 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

Add option separators

------------------------------------------------------------------------
r447 | hardaker | 2005-04-26 18:44:42 -0400 (Tue, 26 Apr 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Update to support the use of a GUI screen for requesting options.
Only appears if you run zonesigner without any options and have
Getopt::Long::GUI installed.

------------------------------------------------------------------------
r446 | hardaker | 2005-04-26 18:41:49 -0400 (Tue, 26 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/mapper

Use the shared primitives.

------------------------------------------------------------------------
r445 | hardaker | 2005-04-26 18:41:32 -0400 (Tue, 26 Apr 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/modules/QWPrimitives.pm

shared QWizard primatives.

------------------------------------------------------------------------
r444 | ahayatnagarkar | 2005-04-26 17:24:17 -0400 (Tue, 26 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt

Removed some #ifdef HAVE_LIBVAL statements.

------------------------------------------------------------------------
r443 | tewok | 2005-04-26 13:54:27 -0400 (Tue, 26 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Added message about hitting keys to build entropy.

------------------------------------------------------------------------
r442 | ahayatnagarkar | 2005-04-26 13:35:03 -0400 (Tue, 26 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/crypto/val_dsasha1.c

Fixed a return value.

------------------------------------------------------------------------
r441 | tewok | 2005-04-26 13:29:24 -0400 (Tue, 26 Apr 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

Added the opts_setcsopts() as an alternate method of specifying command-
specific options.

------------------------------------------------------------------------
r440 | tewok | 2005-04-26 09:17:09 -0400 (Tue, 26 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm

Changed a keyrec type in a pod example.

------------------------------------------------------------------------
r439 | tewok | 2005-04-26 09:14:49 -0400 (Tue, 26 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Renamed the obsolete ZSK suffix.

------------------------------------------------------------------------
r438 | tewok | 2005-04-26 08:54:33 -0400 (Tue, 26 Apr 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Added an option to force a roll-over.
Clarified results message.

------------------------------------------------------------------------
r437 | ahayatnagarkar | 2005-04-25 15:58:58 -0400 (Mon, 25 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_log.h
   M /trunk/dnssec-tools/lib/val_stub/val_print.c

Make the variable log_level accessible to functions in val_print.c.

------------------------------------------------------------------------
r436 | ahayatnagarkar | 2005-04-25 14:55:27 -0400 (Mon, 25 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt

Added a few '#ifdef HAVE_LIBVAL' conditions.

------------------------------------------------------------------------
r435 | ahayatnagarkar | 2005-04-25 14:43:46 -0400 (Mon, 25 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt

Added a check for the openssl crypto library.

------------------------------------------------------------------------
r434 | ahayatnagarkar | 2005-04-25 14:31:09 -0400 (Mon, 25 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt

Added a check for the openssl crypto library.

------------------------------------------------------------------------
r433 | ahayatnagarkar | 2005-04-25 13:37:35 -0400 (Mon, 25 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_howto.txt

Changed the name of the 'dnssec' option to 'RequireDNSSEC'.

------------------------------------------------------------------------
r432 | ahayatnagarkar | 2005-04-25 13:30:20 -0400 (Mon, 25 Apr 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt

Changed the location of #include to avoid cvs-handling of SM_RCSID line
in the original source code.

------------------------------------------------------------------------
r431 | ahayatnagarkar | 2005-04-25 12:59:32 -0400 (Mon, 25 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/crypto
   A /trunk/dnssec-tools/lib/val_stub/crypto/.cvsignore

.cvsignore file for the crypto/ sub-directory.

------------------------------------------------------------------------
r430 | ahayatnagarkar | 2005-04-25 12:57:43 -0400 (Mon, 25 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/Makefile.in

Added val_log.[c,o,lo]

------------------------------------------------------------------------
r429 | ahayatnagarkar | 2005-04-25 12:56:10 -0400 (Mon, 25 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/crypto/val_dsasha1.c
   M /trunk/dnssec-tools/lib/val_stub/crypto/val_rsamd5.c
   M /trunk/dnssec-tools/lib/val_stub/crypto/val_rsasha1.c
   M /trunk/dnssec-tools/lib/val_stub/gethost.c
   M /trunk/dnssec-tools/lib/val_stub/main.c
   M /trunk/dnssec-tools/lib/val_stub/res_squery.c
   M /trunk/dnssec-tools/lib/val_stub/resolver_driver.c
   M /trunk/dnssec-tools/lib/val_stub/val_cache.c
   M /trunk/dnssec-tools/lib/val_stub/val_context.c
   M /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.c
   M /trunk/dnssec-tools/lib/val_stub/val_parse.c
   M /trunk/dnssec-tools/lib/val_stub/val_print.c
   M /trunk/dnssec-tools/lib/val_stub/val_query.c
   M /trunk/dnssec-tools/lib/val_stub/val_support.c
   M /trunk/dnssec-tools/lib/val_stub/val_verify.c
   M /trunk/dnssec-tools/lib/val_stub/val_x_query.c
   M /trunk/dnssec-tools/lib/val_stub/val_zone.c

Change printf() statements to val_log().

------------------------------------------------------------------------
r428 | ahayatnagarkar | 2005-04-25 12:54:55 -0400 (Mon, 25 Apr 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/val_stub/val_log.c
   A /trunk/dnssec-tools/lib/val_stub/val_log.h

A rudimentary logger for the validator.

------------------------------------------------------------------------
r427 | ahayatnagarkar | 2005-04-25 11:48:08 -0400 (Mon, 25 Apr 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt

Use val_gethostbyname() if the validator library is present.
Added some more debugging statements.

------------------------------------------------------------------------
r426 | tewok | 2005-04-22 21:46:37 -0400 (Fri, 22 Apr 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm

Added ksdir to be a zone-field.
Moved kskdirectory from being a key-field to being a zone-field.
Moved zskdirectory from being a key-field to being a zone-field.

------------------------------------------------------------------------
r425 | tewok | 2005-04-22 21:32:33 -0400 (Fri, 22 Apr 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Reorganized the -help messages.
Reorganized the pod.

------------------------------------------------------------------------
r424 | tewok | 2005-04-22 21:12:42 -0400 (Fri, 22 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Fixed file moving for -reuseksk and -reusezsk.

------------------------------------------------------------------------
r423 | hserus | 2005-04-22 11:12:20 -0400 (Fri, 22 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/support.c
   M /trunk/dnssec-tools/lib/libsres/support.h

Added wire_name_labels()

------------------------------------------------------------------------
r422 | hserus | 2005-04-22 11:07:34 -0400 (Fri, 22 Apr 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/resolver.h

Added a status field to rr_rec for storing result of a signature verification.
This probably needs to be again changed later on.

------------------------------------------------------------------------
r421 | hserus | 2005-04-22 11:05:54 -0400 (Fri, 22 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_errors.h

Added definition for SR_PROCESS_ERROR

------------------------------------------------------------------------
r420 | hserus | 2005-04-22 11:05:04 -0400 (Fri, 22 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/res_query.c

Handle NULL respol value

------------------------------------------------------------------------
r419 | hserus | 2005-04-22 11:03:33 -0400 (Fri, 22 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/ns_print.c

Add support for printing DS records

------------------------------------------------------------------------
r418 | hserus | 2005-04-22 09:41:22 -0400 (Fri, 22 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_verify.c

Store cached keys in correct variable

------------------------------------------------------------------------
r417 | hserus | 2005-04-22 09:40:10 -0400 (Fri, 22 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_query.c

Removed reliance on val_context_t for cache information

------------------------------------------------------------------------
r416 | hserus | 2005-04-22 09:04:42 -0400 (Fri, 22 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/Makefile.in

Add val_context.c and val_x_query.c to the list of source files

------------------------------------------------------------------------
r415 | hserus | 2005-04-22 09:03:30 -0400 (Fri, 22 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/resolver_driver.c
   M /trunk/dnssec-tools/lib/val_stub/val_x_query.c

Moved context relevant portions to val_context.c

------------------------------------------------------------------------
r414 | hserus | 2005-04-22 09:02:08 -0400 (Fri, 22 Apr 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/val_stub/val_context.c
   A /trunk/dnssec-tools/lib/val_stub/val_context.h

New file for handling context related cruft

------------------------------------------------------------------------
r413 | tewok | 2005-04-21 20:33:25 -0400 (Thu, 21 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

Added the -ksdir option.

------------------------------------------------------------------------
r412 | tewok | 2005-04-21 20:30:43 -0400 (Thu, 21 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Added -ksdir for passing -d to dnssec-signzone.

------------------------------------------------------------------------
r411 | tewok | 2005-04-21 20:01:17 -0400 (Thu, 21 Apr 2005) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Fix how we handle include lines.  We don't want to zero-out the zone file if
there are pre-existing inclusions.

Move the pod examples into their own section.

------------------------------------------------------------------------
r410 | hserus | 2005-04-21 18:06:02 -0400 (Thu, 21 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/resolver_driver.c

Call val_x_query() instead of res_squery()

------------------------------------------------------------------------
r409 | hserus | 2005-04-21 18:03:34 -0400 (Thu, 21 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/validator.h

Added definitions for assertion and query states.

------------------------------------------------------------------------
r408 | hserus | 2005-04-21 18:01:43 -0400 (Thu, 21 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_errors.h

Moved error-unrelated portions to validator.h

------------------------------------------------------------------------
r407 | hserus | 2005-04-21 17:57:41 -0400 (Thu, 21 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_verify.c
   M /trunk/dnssec-tools/lib/val_stub/val_verify.h

Added functionality to verify assertions

------------------------------------------------------------------------
r406 | hserus | 2005-04-21 17:50:55 -0400 (Thu, 21 Apr 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/val_stub/val_x_query.c
   A /trunk/dnssec-tools/lib/val_stub/val_x_query.h

Added the beginnings of a more comprehensive val_query() funcationality

------------------------------------------------------------------------
r405 | ahayatnagarkar | 2005-04-21 17:22:55 -0400 (Thu, 21 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_verify.c

Added a few more diagnostic messages.

------------------------------------------------------------------------
r404 | hardaker | 2005-04-20 12:38:08 -0400 (Wed, 20 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools
   M /trunk/dnssec-tools/.cvsignore
   A /trunk/dnssec-tools/Makefile.bot
   M /trunk/dnssec-tools/Makefile.top
   A /trunk/dnssec-tools/config.sub
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/configure.in
   M /trunk/dnssec-tools/lib/libsres
   M /trunk/dnssec-tools/lib/libsres/.cvsignore
   M /trunk/dnssec-tools/lib/libsres/Makefile.in
   M /trunk/dnssec-tools/lib/libvalidat
   M /trunk/dnssec-tools/lib/libvalidat/.cvsignore
   M /trunk/dnssec-tools/lib/libvalidat/Makefile.in
   M /trunk/dnssec-tools/lib/val_stub
   M /trunk/dnssec-tools/lib/val_stub/.cvsignore
   M /trunk/dnssec-tools/lib/val_stub/Makefile.in
   A /trunk/dnssec-tools/ltmain.sh

Use libtool to build libraries, executables, do installation, etc.

------------------------------------------------------------------------
r403 | hserus | 2005-04-20 12:15:11 -0400 (Wed, 20 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/Makefile.in

Add val_cache.c to the list of source files

------------------------------------------------------------------------
r402 | hserus | 2005-04-20 12:11:30 -0400 (Wed, 20 Apr 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_support.c
   M /trunk/dnssec-tools/lib/val_stub/val_support.h

- Caching functionality is available through a different file (val_cache.c)
- Add support for DS records

------------------------------------------------------------------------
r401 | hserus | 2005-04-20 12:09:19 -0400 (Wed, 20 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_print.c

validator ache is no longer directly available from context

------------------------------------------------------------------------
r400 | hserus | 2005-04-20 12:07:22 -0400 (Wed, 20 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_parse.c
   M /trunk/dnssec-tools/lib/val_stub/val_parse.h

Add parsing logic for DS records

------------------------------------------------------------------------
r399 | hserus | 2005-04-20 12:05:32 -0400 (Wed, 20 Apr 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/res_squery.c

- Free up memory for ns_list after we're done using it
- Don't return DS records in the answer portion
- Use the functionality provided by val_cache

------------------------------------------------------------------------
r398 | hserus | 2005-04-20 12:00:17 -0400 (Wed, 20 Apr 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/val_stub/val_cache.c
   A /trunk/dnssec-tools/lib/val_stub/val_cache.h

Caching functionality for the validator

------------------------------------------------------------------------
r397 | hserus | 2005-04-20 11:29:24 -0400 (Wed, 20 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/Makefile.in
   D /trunk/dnssec-tools/lib/val_stub/res_zone.c
   D /trunk/dnssec-tools/lib/val_stub/res_zone.h
   A /trunk/dnssec-tools/lib/val_stub/val_zone.c
   A /trunk/dnssec-tools/lib/val_stub/val_zone.h

Changed res_zone.* filenames to have val_ prefix

------------------------------------------------------------------------
r396 | hserus | 2005-04-20 11:22:56 -0400 (Wed, 20 Apr 2005) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/lib/val_stub/res_verification.c

This file is no longer needed

------------------------------------------------------------------------
r395 | hardaker | 2005-04-20 00:12:28 -0400 (Wed, 20 Apr 2005) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/tools/patches/mozilla-dnssec.patch

remove obsolete patch from wrong directory

------------------------------------------------------------------------
r394 | hardaker | 2005-04-20 00:11:49 -0400 (Wed, 20 Apr 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/mozilla
   A /trunk/dnssec-tools/apps/mozilla/dnssec-enable.patch

Patch to enable minimal DNSSEC functionality based on libval

------------------------------------------------------------------------
r393 | hardaker | 2005-04-19 23:58:00 -0400 (Tue, 19 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

Misc minor fixes mostly in error output.

------------------------------------------------------------------------
r392 | hardaker | 2005-04-19 23:57:39 -0400 (Tue, 19 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

whoops.  Reversed file accidentially committed (file typo) before it was ready

------------------------------------------------------------------------
r391 | hardaker | 2005-04-19 23:55:50 -0400 (Tue, 19 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

Misc minor fixes mostly in error output.

------------------------------------------------------------------------
r390 | hardaker | 2005-04-19 23:54:02 -0400 (Tue, 19 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast.patch

Updated patch to fix a few bugs

------------------------------------------------------------------------
r389 | ahayatnagarkar | 2005-04-19 18:06:19 -0400 (Tue, 19 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/Makefile.in

Add LDFLAGS to libval.so compilation.

------------------------------------------------------------------------
r388 | ahayatnagarkar | 2005-04-19 17:19:01 -0400 (Tue, 19 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_howto.txt
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt

Updated to use libval instead of libvalidat.

------------------------------------------------------------------------
r387 | ahayatnagarkar | 2005-04-19 16:42:22 -0400 (Tue, 19 Apr 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_guide.txt
   M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_howto.txt

Updated to reflect the changes for using libval library instead of the
libvalidat library.

------------------------------------------------------------------------
r386 | ahayatnagarkar | 2005-04-19 16:32:06 -0400 (Tue, 19 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/resolver.h

Set the default EDNSO_UDP_SIZE to 4096 instead of 512.

------------------------------------------------------------------------
r385 | ahayatnagarkar | 2005-04-19 16:31:35 -0400 (Tue, 19 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libsres/Makefile.in

Added an install directive.

------------------------------------------------------------------------
r384 | ahayatnagarkar | 2005-04-19 16:27:13 -0400 (Tue, 19 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/main.c

Print the value of h_errno.

------------------------------------------------------------------------
r383 | ahayatnagarkar | 2005-04-19 16:26:55 -0400 (Tue, 19 Apr 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_query.c

Set h_errno depending on whether the resolver was able to retrieve RRs or
not.

------------------------------------------------------------------------
r382 | ahayatnagarkar | 2005-04-19 16:26:05 -0400 (Tue, 19 Apr 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_verify.c

Return validator error code INDETERMINATE if neither RRSIGs nor DNSKEYs are
present.

------------------------------------------------------------------------
r381 | ahayatnagarkar | 2005-04-19 16:23:40 -0400 (Tue, 19 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt

Updated to use libval instead of libvalidat.

------------------------------------------------------------------------
r380 | ahayatnagarkar | 2005-04-19 16:22:44 -0400 (Tue, 19 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt

An updated patch to use the new libval validator library.

------------------------------------------------------------------------
r379 | ahayatnagarkar | 2005-04-17 17:14:01 -0400 (Sun, 17 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/Makefile.in

Added a 'install' directive.

------------------------------------------------------------------------
r378 | ahayatnagarkar | 2005-04-17 17:12:56 -0400 (Sun, 17 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/README

Added a note about 'gethost'.

------------------------------------------------------------------------
r377 | ahayatnagarkar | 2005-04-17 17:12:35 -0400 (Sun, 17 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_errors.h
   M /trunk/dnssec-tools/lib/val_stub/val_support.h

Moved the declaration of p_val_error() from val_support.h to val_errors.h.

------------------------------------------------------------------------
r376 | ahayatnagarkar | 2005-04-17 16:35:27 -0400 (Sun, 17 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_verify.c

Sort multiple RRs in the RRSET before verifying signature.

------------------------------------------------------------------------
r375 | ahayatnagarkar | 2005-04-17 15:24:31 -0400 (Sun, 17 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub
   M /trunk/dnssec-tools/lib/val_stub/.cvsignore

Added 'gethost' to the list of files to ignore.

------------------------------------------------------------------------
r374 | ahayatnagarkar | 2005-04-17 15:23:24 -0400 (Sun, 17 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/Makefile.in

Added $(GETHOST) to the 'clean' directive.

------------------------------------------------------------------------
r373 | ahayatnagarkar | 2005-04-17 15:22:03 -0400 (Sun, 17 Apr 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/val_stub/gethost.c

A command-line tool to test the val_gethostbyname() function.

------------------------------------------------------------------------
r372 | ahayatnagarkar | 2005-04-17 15:18:05 -0400 (Sun, 17 Apr 2005) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.c
   A /trunk/dnssec-tools/lib/val_stub/val_gethostbyname.h

A validating gethostbyname() function.  This handles only ipv4 addresses
for now.

------------------------------------------------------------------------
r371 | ahayatnagarkar | 2005-04-17 15:10:47 -0400 (Sun, 17 Apr 2005) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/lib/val_stub/val_api.h

Header file for the validator API.  At present it contains only two
functions: val_query() and val_gethostbyname().

------------------------------------------------------------------------
r370 | ahayatnagarkar | 2005-04-17 15:06:43 -0400 (Sun, 17 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/main.c

Now includes "val_api.h" instead of "val_query.h" and "val_errors.h".

------------------------------------------------------------------------
r369 | ahayatnagarkar | 2005-04-17 15:06:16 -0400 (Sun, 17 Apr 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/Makefile.in

Added val_gethostbyname[c,o] to the list of SRC/OBJ.  Added a test program
'gethost' to test the val_gethostbyname() function.

------------------------------------------------------------------------
r368 | ahayatnagarkar | 2005-04-17 15:04:37 -0400 (Sun, 17 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_query.h

Now declares _val_query()

------------------------------------------------------------------------
r367 | ahayatnagarkar | 2005-04-17 15:03:57 -0400 (Sun, 17 Apr 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_query.c

Divided the val_query function into two val_query and _val_query.  The
_val_query function can be reused by other API calls such as
val_gethostbyname.

------------------------------------------------------------------------
r366 | ahayatnagarkar | 2005-04-17 14:45:53 -0400 (Sun, 17 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_verify.c

Fix a memory leak.

------------------------------------------------------------------------
r365 | ahayatnagarkar | 2005-04-15 14:38:21 -0400 (Fri, 15 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/crypto/val_rsamd5.c
   M /trunk/dnssec-tools/lib/val_stub/crypto/val_rsasha1.c

Removed a few debug output statements.

------------------------------------------------------------------------
r364 | ahayatnagarkar | 2005-04-15 14:25:27 -0400 (Fri, 15 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/Makefile.in

Use -lval in the compilation of the driver.

------------------------------------------------------------------------
r363 | ahayatnagarkar | 2005-04-15 14:21:59 -0400 (Fri, 15 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/Makefile.in

Added val_query.[c,o] to the list of SRC/OBJ.

------------------------------------------------------------------------
r362 | ahayatnagarkar | 2005-04-15 14:18:58 -0400 (Fri, 15 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/main.c

Make use of the val_query() wrapper.

------------------------------------------------------------------------
r361 | ahayatnagarkar | 2005-04-15 14:16:47 -0400 (Fri, 15 Apr 2005) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/lib/val_stub/val_query.c
   A /trunk/dnssec-tools/lib/val_stub/val_query.h

A wrapper function val_query() around res_squery() and val_verify().  This
function returns the response along with the dnssec-status.

------------------------------------------------------------------------
r360 | tewok | 2005-04-14 21:36:55 -0400 (Thu, 14 Apr 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Modified how key keyrecs are created, such that only KSK keyrecs have the
kskdirectory field and only ZSK keyrecs have the zskdirectory field.

------------------------------------------------------------------------
r359 | tewok | 2005-04-14 20:57:12 -0400 (Thu, 14 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Added some verbose messages for key directory usage.

------------------------------------------------------------------------
r358 | tewok | 2005-04-14 20:53:14 -0400 (Thu, 14 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

Added options for key directories.

------------------------------------------------------------------------
r357 | tewok | 2005-04-14 20:12:38 -0400 (Thu, 14 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm

Added entries for the -kgopts and -szopts options.

------------------------------------------------------------------------
r356 | tewok | 2005-04-14 20:08:15 -0400 (Thu, 14 Apr 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Finished implementing the -kgopts and -szopts options.
Added a '$' to some "if(verbose)" lines.

------------------------------------------------------------------------
r355 | ahayatnagarkar | 2005-04-14 17:47:00 -0400 (Thu, 14 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/resolver_driver.c

Added #defines for QUERY_TYPE and QUERY_CLASS.

------------------------------------------------------------------------
r354 | ahayatnagarkar | 2005-04-14 17:44:13 -0400 (Thu, 14 Apr 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/main.c

Added a naive is_tld() function to avoid querying top-level domains for
DNSKEY records.

------------------------------------------------------------------------
r353 | ahayatnagarkar | 2005-04-14 17:41:56 -0400 (Thu, 14 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_print.c

Also print the rrs_status field of an rrset.

------------------------------------------------------------------------
r352 | ahayatnagarkar | 2005-04-14 17:40:43 -0400 (Thu, 14 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_verify.c
   M /trunk/dnssec-tools/lib/val_stub/val_verify.h

Return more meaningful error codes than just INDETERMINATE.

------------------------------------------------------------------------
r351 | ahayatnagarkar | 2005-04-14 13:59:09 -0400 (Thu, 14 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/main.c

Make use of the p_val_error() function for displaying dnssec_status.

------------------------------------------------------------------------
r350 | ahayatnagarkar | 2005-04-14 13:57:32 -0400 (Thu, 14 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_verify.c

The crypto routines now return RRSIG_VERIFIED instead of VALIDATE_SUCCESS.

------------------------------------------------------------------------
r349 | ahayatnagarkar | 2005-04-14 13:56:21 -0400 (Thu, 14 Apr 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_support.c
   M /trunk/dnssec-tools/lib/val_stub/val_support.h

Added a function p_val_error that returns a string for a given validator
error.

------------------------------------------------------------------------
r348 | ahayatnagarkar | 2005-04-14 13:50:04 -0400 (Thu, 14 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/crypto/val_dsasha1.c
   M /trunk/dnssec-tools/lib/val_stub/crypto/val_rsamd5.c
   M /trunk/dnssec-tools/lib/val_stub/crypto/val_rsasha1.c

Return more specific error codes instead of just INDETERMINATE.

------------------------------------------------------------------------
r347 | hardaker | 2005-04-12 19:07:00 -0400 (Tue, 12 Apr 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/patches/mozilla-dnssec.patch

patch to make mozilla work with libvalidat

------------------------------------------------------------------------
r346 | hardaker | 2005-04-12 13:36:24 -0400 (Tue, 12 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libvalidat
   M /trunk/dnssec-tools/lib/libvalidat/.cvsignore

update to inlude a binary

------------------------------------------------------------------------
r345 | hardaker | 2005-04-12 13:31:40 -0400 (Tue, 12 Apr 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/Makefile.in
   M /trunk/dnssec-tools/Makefile.top
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/configure.in
   M /trunk/dnssec-tools/lib/libsres
   A /trunk/dnssec-tools/lib/libsres/.cvsignore
   M /trunk/dnssec-tools/lib/val_stub
   A /trunk/dnssec-tools/lib/val_stub/.cvsignore
   A /trunk/dnssec-tools/lib/val_stub/Makefile.in

- configure-ized the lib/val_stub/Makefile
- make top level make descend into new trees.

------------------------------------------------------------------------
r344 | hardaker | 2005-04-12 13:28:59 -0400 (Tue, 12 Apr 2005) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/lib/val_stub/Makefile

removed for autoconfing

------------------------------------------------------------------------
r343 | hardaker | 2005-04-12 13:17:36 -0400 (Tue, 12 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/Makefile.top
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/configure.in
   A /trunk/dnssec-tools/lib/libsres/Makefile.in

configure-ized the lib/libsres/Makefile

------------------------------------------------------------------------
r342 | hardaker | 2005-04-12 13:15:53 -0400 (Tue, 12 Apr 2005) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/lib/libsres/Makefile

removed Makefile to use configure's Makefile generation

------------------------------------------------------------------------
r341 | tewok | 2005-04-11 16:24:06 -0400 (Mon, 11 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Fixed -gends to put a "-g" in the command line, rather than "1".

------------------------------------------------------------------------
r340 | tewok | 2005-04-09 18:56:01 -0400 (Sat, 09 Apr 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Added some additional verbose output.
Formalized different levels of verbosity.

------------------------------------------------------------------------
r339 | tewok | 2005-04-08 22:08:25 -0400 (Fri, 08 Apr 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm


Added an interface to reset the option processing, allowing the command line
to be re-examined.
Added -nokrfile.

------------------------------------------------------------------------
r338 | tewok | 2005-04-08 22:04:27 -0400 (Fri, 08 Apr 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Added several new keyrec fields.
Added an interface to return the default keyrec file.
Fixed some pod formatting.

------------------------------------------------------------------------
r337 | tewok | 2005-04-08 22:00:32 -0400 (Fri, 08 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm

Quietly return if the config file doesn't exist.

------------------------------------------------------------------------
r336 | tewok | 2005-04-08 21:52:54 -0400 (Fri, 08 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/keyrec-check

Fixed some pod formatting.

------------------------------------------------------------------------
r335 | tewok | 2005-04-08 21:46:50 -0400 (Fri, 08 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/expchk
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Fixed some pod formatting.

------------------------------------------------------------------------
r334 | tewok | 2005-04-08 21:19:26 -0400 (Fri, 08 Apr 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Added a default keyrec file.
Added -nokrfile option.

------------------------------------------------------------------------
r333 | tewok | 2005-04-08 18:44:01 -0400 (Fri, 08 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/clean-keyrec

Tweaked the usage message.

------------------------------------------------------------------------
r332 | ahayatnagarkar | 2005-04-08 13:11:24 -0400 (Fri, 08 Apr 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_verify.c

If no DNSKEYs were found, or if none of the DNSKEYs have matching key-tags,
return DNSKEY_MISSING instead of INDETERMINATE.

------------------------------------------------------------------------
r331 | ahayatnagarkar | 2005-04-08 10:52:00 -0400 (Fri, 08 Apr 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/val_parse.c
   M /trunk/dnssec-tools/lib/val_stub/val_parse.h
   M /trunk/dnssec-tools/lib/val_stub/val_verify.c

Moved function val_canon_rrset from val_parse.c to val_verify.c and
renamed it to val_concat_rrset, since it just does concatenation of
the rrset.

------------------------------------------------------------------------
r330 | ahayatnagarkar | 2005-04-07 18:02:20 -0400 (Thu, 07 Apr 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/Makefile

Generate a libval.a file.  Use it to generate the command line verifier.

------------------------------------------------------------------------
r329 | ahayatnagarkar | 2005-04-07 17:37:26 -0400 (Thu, 07 Apr 2005) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/lib/val_stub/val_verify.c
   A /trunk/dnssec-tools/lib/val_stub/val_verify.h

Functions to verify the RRSIG signatures, given the original rrset and
the DNSKEY.

------------------------------------------------------------------------
r328 | ahayatnagarkar | 2005-04-07 17:35:37 -0400 (Thu, 07 Apr 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/val_stub/val_parse.c
   A /trunk/dnssec-tools/lib/val_stub/val_parse.h

Parsing routines for DNSKEY and RRSIG resource records.

------------------------------------------------------------------------
r327 | ahayatnagarkar | 2005-04-07 17:34:34 -0400 (Thu, 07 Apr 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/val_stub/val_print.c
   A /trunk/dnssec-tools/lib/val_stub/val_print.h

Print routines to output various validator structures.

------------------------------------------------------------------------
r326 | ahayatnagarkar | 2005-04-07 17:33:52 -0400 (Thu, 07 Apr 2005) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/lib/val_stub/main.c

A command-line verifier.  This can later evolve into a command-line
validator.

------------------------------------------------------------------------
r325 | ahayatnagarkar | 2005-04-07 17:33:21 -0400 (Thu, 07 Apr 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/val_stub/README

A rudimentary README file.

------------------------------------------------------------------------
r324 | ahayatnagarkar | 2005-04-07 17:32:21 -0400 (Thu, 07 Apr 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/val_stub/Makefile


Compilation directives for new files.

------------------------------------------------------------------------
r323 | ahayatnagarkar | 2005-04-07 17:21:49 -0400 (Thu, 07 Apr 2005) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/lib/val_stub/crypto/val_dsasha1.c
   A /trunk/dnssec-tools/lib/val_stub/crypto/val_dsasha1.h

Support for Algorithm 3 [DSA/SHA1].  This is a wrapper for the validator
that uses the openssl crypto library.

------------------------------------------------------------------------
r322 | ahayatnagarkar | 2005-04-07 17:21:08 -0400 (Thu, 07 Apr 2005) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/lib/val_stub/crypto/val_rsamd5.c
   A /trunk/dnssec-tools/lib/val_stub/crypto/val_rsamd5.h

Support for Algorithm 1 [RSAMD5].  This is a wrapper for the validator
that uses the openssl crypto library.

------------------------------------------------------------------------
r321 | ahayatnagarkar | 2005-04-07 17:20:20 -0400 (Thu, 07 Apr 2005) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/lib/val_stub/crypto
   A /trunk/dnssec-tools/lib/val_stub/crypto/val_rsasha1.c
   A /trunk/dnssec-tools/lib/val_stub/crypto/val_rsasha1.h

Support for Algorithm 5 [RSASHA1].  This is a wrapper for the validator
that uses the openssl crypto library.

------------------------------------------------------------------------
r320 | hserus | 2005-04-06 17:09:25 -0400 (Wed, 06 Apr 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/val_stub/res_verification.c

verification algorithm from Ed's code

------------------------------------------------------------------------
r319 | hserus | 2005-04-06 16:53:02 -0400 (Wed, 06 Apr 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/val_stub/res_zone.h

Beginnings of validation functionality

------------------------------------------------------------------------
r318 | hserus | 2005-04-06 16:49:38 -0400 (Wed, 06 Apr 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/val_stub
   A /trunk/dnssec-tools/lib/val_stub/Makefile
   A /trunk/dnssec-tools/lib/val_stub/res_squery.c
   A /trunk/dnssec-tools/lib/val_stub/res_squery.h
   A /trunk/dnssec-tools/lib/val_stub/res_zone.c
   A /trunk/dnssec-tools/lib/val_stub/resolver_driver.c
   A /trunk/dnssec-tools/lib/val_stub/val_errors.h
   A /trunk/dnssec-tools/lib/val_stub/val_support.c
   A /trunk/dnssec-tools/lib/val_stub/val_support.h
   A /trunk/dnssec-tools/lib/val_stub/validator.h

Beginnings of validation-relevant code

------------------------------------------------------------------------
r317 | hserus | 2005-04-01 14:44:12 -0500 (Fri, 01 Apr 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libsres
   A /trunk/dnssec-tools/lib/libsres/Makefile
   A /trunk/dnssec-tools/lib/libsres/base64.c
   A /trunk/dnssec-tools/lib/libsres/include
   A /trunk/dnssec-tools/lib/libsres/include/arpa
   A /trunk/dnssec-tools/lib/libsres/include/arpa/nameser.h
   A /trunk/dnssec-tools/lib/libsres/ns_name.c
   A /trunk/dnssec-tools/lib/libsres/ns_netint.c
   A /trunk/dnssec-tools/lib/libsres/ns_parse.c
   A /trunk/dnssec-tools/lib/libsres/ns_print.c
   A /trunk/dnssec-tools/lib/libsres/ns_samedomain.c
   A /trunk/dnssec-tools/lib/libsres/ns_ttl.c
   A /trunk/dnssec-tools/lib/libsres/res_comp.c
   A /trunk/dnssec-tools/lib/libsres/res_debug.c
   A /trunk/dnssec-tools/lib/libsres/res_errors.h
   A /trunk/dnssec-tools/lib/libsres/res_io_manager.c
   A /trunk/dnssec-tools/lib/libsres/res_io_manager.h
   A /trunk/dnssec-tools/lib/libsres/res_mkquery.c
   A /trunk/dnssec-tools/lib/libsres/res_mkquery.h
   A /trunk/dnssec-tools/lib/libsres/res_query.c
   A /trunk/dnssec-tools/lib/libsres/res_query.h
   A /trunk/dnssec-tools/lib/libsres/res_transaction.c
   A /trunk/dnssec-tools/lib/libsres/res_transaction.h
   A /trunk/dnssec-tools/lib/libsres/res_tsig.c
   A /trunk/dnssec-tools/lib/libsres/res_tsig.h
   A /trunk/dnssec-tools/lib/libsres/resolver.h
   A /trunk/dnssec-tools/lib/libsres/support.c
   A /trunk/dnssec-tools/lib/libsres/support.h

Import preliminary working version of the DNSSEC-aware resolver.

------------------------------------------------------------------------
r316 | tewok | 2005-03-29 19:04:55 -0500 (Tue, 29 Mar 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Changed to have several external program paths specified in the config file,
rather than hardwired here.

------------------------------------------------------------------------
r315 | tewok | 2005-03-29 17:05:11 -0500 (Tue, 29 Mar 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL

Adding Wes Griffin's prereq fixes.
Noodged the copyright date.

------------------------------------------------------------------------
r314 | tewok | 2005-03-29 15:30:29 -0500 (Tue, 29 Mar 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm

Adjusted some filenames for portability sake.
Condensed two hashy lines.

------------------------------------------------------------------------
r313 | tewok | 2005-03-28 22:36:28 -0500 (Mon, 28 Mar 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm

Added great bags of platform independence.

------------------------------------------------------------------------
r312 | hardaker | 2005-03-28 12:00:34 -0500 (Mon, 28 Mar 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/mapper

remove common default suffix/prefix from prompted default values

------------------------------------------------------------------------
r311 | hardaker | 2005-03-28 11:59:23 -0500 (Mon, 28 Mar 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

output cleanup

------------------------------------------------------------------------
r310 | hardaker | 2005-03-28 11:58:19 -0500 (Mon, 28 Mar 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/Makefile.in

make in subdirs (like libvalid)

------------------------------------------------------------------------
r309 | tewok | 2005-03-23 16:54:00 -0500 (Wed, 23 Mar 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm

Added return values, parameters, and warnings to the pod.

------------------------------------------------------------------------
r308 | tewok | 2005-03-22 22:39:50 -0500 (Tue, 22 Mar 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm

Deleted some unnecessary prints.
Added code for rollmgr_halt().
Adjusted some pod.

------------------------------------------------------------------------
r307 | tewok | 2005-03-22 22:33:50 -0500 (Tue, 22 Mar 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tests/test-rollmgr

Added a test for rollmgr_halt().

------------------------------------------------------------------------
r306 | tewok | 2005-03-22 21:10:47 -0500 (Tue, 22 Mar 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tests/test-rollmgr

Added a test for rollmgr_qproc().

------------------------------------------------------------------------
r305 | tewok | 2005-03-22 21:04:40 -0500 (Tue, 22 Mar 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollmgr.pm

Added code for rollmgr_qproc().

------------------------------------------------------------------------
r304 | tewok | 2005-03-21 17:29:26 -0500 (Mon, 21 Mar 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/modules/tests/test-rollmgr

Tests for the roll-over manager communication interfaces.

------------------------------------------------------------------------
r303 | tewok | 2005-03-21 17:02:28 -0500 (Mon, 21 Mar 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/modules/rollmgr.pm

Interfaces for communicating with the roll-over manager.

------------------------------------------------------------------------
r302 | tewok | 2005-03-17 20:53:22 -0500 (Thu, 17 Mar 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm

Added an interface to return the name of the default rollrec file.

------------------------------------------------------------------------
r301 | tewok | 2005-03-17 18:18:29 -0500 (Thu, 17 Mar 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/rollrec.pm


Renamed a rollrec field and added a few new ones.

------------------------------------------------------------------------
r300 | tewok | 2005-03-17 18:09:14 -0500 (Thu, 17 Mar 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tests/Makefile.PL

Added another test file to delete.

------------------------------------------------------------------------
r299 | tewok | 2005-03-17 18:06:53 -0500 (Thu, 17 Mar 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/modules/tests/test-rollrec

Tests for the rollrec module interfaces.

------------------------------------------------------------------------
r298 | ahayatnagarkar | 2005-03-17 12:58:17 -0500 (Thu, 17 Mar 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/thunderbird/install.rdf

Changed minVersion of thunderbird from 1.0 to 0.9.

------------------------------------------------------------------------
r297 | tewok | 2005-03-16 23:52:45 -0500 (Wed, 16 Mar 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/modules/rollrec.pm

Module to manage a roll-over status file.

------------------------------------------------------------------------
r296 | ahayatnagarkar | 2005-03-16 17:21:00 -0500 (Wed, 16 Mar 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libvalidat/main.c

Read validat.h from the current directory.

------------------------------------------------------------------------
r295 | tewok | 2005-03-14 21:57:17 -0500 (Mon, 14 Mar 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Added "signedfile" as a new zone keyrec field.

------------------------------------------------------------------------
r294 | tewok | 2005-03-14 21:54:29 -0500 (Mon, 14 Mar 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm

Added "signedfile" as a zone keyrec field.

------------------------------------------------------------------------
r293 | ahayatnagarkar | 2005-03-14 18:01:56 -0500 (Mon, 14 Mar 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/thunderbird/skin/classic/spfdnssec/spfdnssec.png

The DNSSEC icon.

------------------------------------------------------------------------
r292 | ahayatnagarkar | 2005-03-14 18:01:20 -0500 (Mon, 14 Mar 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/thunderbird/skin
   A /trunk/dnssec-tools/apps/thunderbird/skin/classic
   A /trunk/dnssec-tools/apps/thunderbird/skin/classic/spfdnssec
   A /trunk/dnssec-tools/apps/thunderbird/skin/classic/spfdnssec/contents.rdf

contents.rdf file for the skin sub-directory.

------------------------------------------------------------------------
r291 | ahayatnagarkar | 2005-03-14 18:00:27 -0500 (Mon, 14 Mar 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/thunderbird/locale/en-US/spfdnssec/spfDnssecOverlay.dtd

Header and Field labels for the 'en-US' locale.

------------------------------------------------------------------------
r290 | ahayatnagarkar | 2005-03-14 17:59:40 -0500 (Mon, 14 Mar 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/thunderbird/locale
   A /trunk/dnssec-tools/apps/thunderbird/locale/en-US
   A /trunk/dnssec-tools/apps/thunderbird/locale/en-US/spfdnssec
   A /trunk/dnssec-tools/apps/thunderbird/locale/en-US/spfdnssec/contents.rdf

contents.rdf file for the locale sub-directory.

------------------------------------------------------------------------
r289 | ahayatnagarkar | 2005-03-14 17:58:55 -0500 (Mon, 14 Mar 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/thunderbird/content/spfdnssec/spfDnssecOverlay.xul

XUL code to put elements related to SPF and DNSSEC in the XML tree.

------------------------------------------------------------------------
r288 | ahayatnagarkar | 2005-03-14 17:57:18 -0500 (Mon, 14 Mar 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/thunderbird/content/spfdnssec/spfDnssecOverlay.js

Scripts for processing the Received-SPF header and its various fields.

------------------------------------------------------------------------
r287 | ahayatnagarkar | 2005-03-14 17:56:37 -0500 (Mon, 14 Mar 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/thunderbird/content
   A /trunk/dnssec-tools/apps/thunderbird/content/spfdnssec
   A /trunk/dnssec-tools/apps/thunderbird/content/spfdnssec/contents.rdf

contents.rdf file for the content sub-directory.

------------------------------------------------------------------------
r286 | ahayatnagarkar | 2005-03-14 17:55:46 -0500 (Mon, 14 Mar 2005) | 5 lines
Changed paths:
   A /trunk/dnssec-tools/apps/thunderbird
   A /trunk/dnssec-tools/apps/thunderbird/Makefile
   A /trunk/dnssec-tools/apps/thunderbird/README
   A /trunk/dnssec-tools/apps/thunderbird/install.rdf

install.rdf: Install script for the spfdnssec extension.
Makefile: Generates the 'spfdnssec.xpi' installer for the spfdnssec
          extension.
README: A few words about the spfdnssec extension.

------------------------------------------------------------------------
r285 | ahayatnagarkar | 2005-03-14 17:30:09 -0500 (Mon, 14 Mar 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/README

Added a note about the thunderbird sub-directory.

------------------------------------------------------------------------
r284 | tewok | 2005-03-12 10:28:37 -0500 (Sat, 12 Mar 2005) | 9 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Combined functionality so an argument could be removed.
Added a check to ensure that the named zone file had not already been signed.
Allowed the input zone file to optionally act also as the output zone file.
Added auto-incrementation of the zone file's serial number.
Added the ability to update existing INCLUDE lines, rather than always adding
new ones.
Updated the pod to talk about this.

------------------------------------------------------------------------
r283 | tewok | 2005-03-11 22:17:44 -0500 (Fri, 11 Mar 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/scripts/README

Description of the commands in this directory.

------------------------------------------------------------------------
r282 | tewok | 2005-03-11 22:11:51 -0500 (Fri, 11 Mar 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/scripts/clean-keyrec

New script to clean old and unused key keyrecs from a keyrec.

------------------------------------------------------------------------
r281 | tewok | 2005-03-11 18:52:59 -0500 (Fri, 11 Mar 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Added keyrec_del(), which deletes a keyrec from a keyrec file.

------------------------------------------------------------------------
r280 | ahayatnagarkar | 2005-03-10 13:58:51 -0500 (Thu, 10 Mar 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt

Set x-dnssec to "none" if there was no spf record.

------------------------------------------------------------------------
r273 | ahayatnagarkar | 2005-03-04 11:59:59 -0500 (Fri, 04 Mar 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_guide.txt
   M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_guide.txt

Added description of the 'x-dnssec' field in the Received-SPF mail header.

------------------------------------------------------------------------
r272 | ahayatnagarkar | 2005-03-04 11:52:59 -0500 (Fri, 04 Mar 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_howto.txt

Added description of the 'x-dnssec' field in the Received-SPF mail header.

------------------------------------------------------------------------
r271 | ahayatnagarkar | 2005-03-04 11:51:58 -0500 (Fri, 04 Mar 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt

Removed a debugging message.

------------------------------------------------------------------------
r270 | ahayatnagarkar | 2005-03-04 11:25:02 -0500 (Fri, 04 Mar 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt

Added double quotes around the RHS of the x-dnssec key-value-pair, in
conformance with the Received-SPF header syntax.

------------------------------------------------------------------------
r269 | ahayatnagarkar | 2005-03-03 17:54:00 -0500 (Thu, 03 Mar 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt

Included the modification to the spf_internal.h file.

------------------------------------------------------------------------
r268 | ahayatnagarkar | 2005-03-03 17:50:28 -0500 (Thu, 03 Mar 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt

If using libspf2-1.0.4, set appropriate dnssec flag.

------------------------------------------------------------------------
r267 | ahayatnagarkar | 2005-03-03 17:49:24 -0500 (Thu, 03 Mar 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt

Added support for the x-dnssec field for the Received-SPF mail header.

------------------------------------------------------------------------
r266 | ahayatnagarkar | 2005-03-03 15:27:15 -0500 (Thu, 03 Mar 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt

The 'x-dnssec' field of the Received-SPF mail header can now have three
values: pass, fail and none.  The 'none' value indicates that spfmilter
was not configured for performing DNSSEC validation.

------------------------------------------------------------------------
r265 | ahayatnagarkar | 2005-03-03 15:25:28 -0500 (Thu, 03 Mar 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt

The 'x-dnssec' field of the Received-SPF mail header can now have three
values: pass, fail, none.  The value of 'none' indicates that the
spf_server was not initialized for DNSSEC processing.

------------------------------------------------------------------------
r264 | ahayatnagarkar | 2005-03-03 13:52:45 -0500 (Thu, 03 Mar 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt

Addd "x-dnssec' field to the Received-SPF mail header.
This field indicates whether DNSSEC validation succeeded or not.

------------------------------------------------------------------------
r263 | ahayatnagarkar | 2005-03-03 13:49:52 -0500 (Thu, 03 Mar 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt

Added a 'x-dnssec' field to the Received-SPF mail header.  It indicates
whether DNSSEC validation succeeded or not.

------------------------------------------------------------------------
r262 | ahayatnagarkar | 2005-03-03 12:31:32 -0500 (Thu, 03 Mar 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt

Changed the 'dnssec' option to 'RequireDNSSEC', for now.  This may be
changed to a more descriptive word in future.  Added a brief description
of this option to the op.me document.

------------------------------------------------------------------------
r261 | tewok | 2005-03-02 23:04:39 -0500 (Wed, 02 Mar 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Modified to increment the SOA's serial number.

------------------------------------------------------------------------
r260 | ahayatnagarkar | 2005-03-02 14:41:10 -0500 (Wed, 02 Mar 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_howto.txt
   M /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_howto.txt

Added an instruction to install libvalidat.

------------------------------------------------------------------------
r259 | ahayatnagarkar | 2005-03-02 14:37:30 -0500 (Wed, 02 Mar 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_guide.txt

Minor update about validator functions.

------------------------------------------------------------------------
r258 | ahayatnagarkar | 2005-03-02 14:36:42 -0500 (Wed, 02 Mar 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/README
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_howto.txt

Updates w.r.t. libspf2-1.2.5.

------------------------------------------------------------------------
r257 | ahayatnagarkar | 2005-03-02 14:35:38 -0500 (Wed, 02 Mar 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt

Updates to interface with libspf2-1.2.5 and its dnssec patch.

------------------------------------------------------------------------
r256 | ahayatnagarkar | 2005-03-02 14:34:09 -0500 (Wed, 02 Mar 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_guide.txt

A developer guide for the dnssec patch to libspf2-1.2.5.

------------------------------------------------------------------------
r255 | ahayatnagarkar | 2005-03-02 14:33:19 -0500 (Wed, 02 Mar 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_howto.txt

Instructions for installing libspf2-1.2.5 with the dnssec patch.

------------------------------------------------------------------------
r254 | ahayatnagarkar | 2005-03-02 14:32:10 -0500 (Wed, 02 Mar 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/libspf2-1.2.5_dnssec_patch.txt

A patch to libspf2-1.2.5 for providing DNSSEC validation.

------------------------------------------------------------------------
r252 | tewok | 2005-02-26 16:53:35 -0500 (Sat, 26 Feb 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Added function header comments.
Changed to create keyrec files if they don't exist.
Fixed option processing so certain options (missing from config file, keyrec
file, and command line) would be properly handled.

------------------------------------------------------------------------
r251 | ahayatnagarkar | 2005-02-25 11:15:14 -0500 (Fri, 25 Feb 2005) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_howto.txt

A HOWTO document that explains how to add DNSSEC validation of MX records
to sendmail-8.13.3.

------------------------------------------------------------------------
r250 | ahayatnagarkar | 2005-02-25 11:13:38 -0500 (Fri, 25 Feb 2005) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.3_dnssec_patch.txt

A patch to sendmail version 8.13.3 for performing DNSSEC validation of
MX records while sending an email.

------------------------------------------------------------------------
r249 | ahayatnagarkar | 2005-02-25 11:10:18 -0500 (Fri, 25 Feb 2005) | 3 lines
Changed paths:
   D /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.1_dnssec_howto.txt

A newer version 8.13.3 of sendmail is available.  A HOWTO document for the
patch will be provided for that version.

------------------------------------------------------------------------
r248 | ahayatnagarkar | 2005-02-25 11:09:17 -0500 (Fri, 25 Feb 2005) | 3 lines
Changed paths:
   D /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.1_dnssec_patch.txt

A newer version 8.13.3 of sendmail is available.  A patch will be provided
for that version.

------------------------------------------------------------------------
r247 | ahayatnagarkar | 2005-02-24 16:20:55 -0500 (Thu, 24 Feb 2005) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.1_dnssec_howto.txt

A HOWTO file that explains how to add DNSSEC validation of MX records in
sendmail-8.13.1.

------------------------------------------------------------------------
r246 | ahayatnagarkar | 2005-02-24 15:50:14 -0500 (Thu, 24 Feb 2005) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/apps/sendmail/sendmail-8.13.1_dnssec_patch.txt

A patch to the sendmail MTA for performing DNSSEC validation of MX records
while sending an email.

------------------------------------------------------------------------
r245 | tewok | 2005-02-24 00:02:25 -0500 (Thu, 24 Feb 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

Added pod for opts_createkrf().

------------------------------------------------------------------------
r244 | tewok | 2005-02-23 12:24:23 -0500 (Wed, 23 Feb 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

Added a means of creating a specified keyrec file if it doesn't already exist.
Added opts_createkrf() to turn on the creation of non-existent keyrec files.

------------------------------------------------------------------------
r241 | tewok | 2005-02-21 14:38:32 -0500 (Mon, 21 Feb 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm

Added support for current, new, and published ZSK keys.

------------------------------------------------------------------------
r240 | tewok | 2005-02-21 00:08:44 -0500 (Mon, 21 Feb 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/keyrec-check

Updated to recognize the current, new, and published ZSK keys in
a zone keyrec.

------------------------------------------------------------------------
r239 | tewok | 2005-02-18 22:18:19 -0500 (Fri, 18 Feb 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/Makefile.PL
   M /trunk/dnssec-tools/tools/scripts/keyrec-check
   M /trunk/dnssec-tools/tools/scripts/lskrf
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Tweaked the copyright.

------------------------------------------------------------------------
r238 | tewok | 2005-02-18 22:16:05 -0500 (Fri, 18 Feb 2005) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/scripts/expchk

This command lists the expired or valid zones given in a specified
set of keyrec files.

------------------------------------------------------------------------
r237 | tewok | 2005-02-18 15:02:48 -0500 (Fri, 18 Feb 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf

Fixed the copyright year.

------------------------------------------------------------------------
r236 | tewok | 2005-02-18 10:53:29 -0500 (Fri, 18 Feb 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf

Added the ability to specify multiple keyrec files on a the command line.
The files are all loaded first, then the output processing takes place.

------------------------------------------------------------------------
r235 | tewok | 2005-02-17 22:49:52 -0500 (Thu, 17 Feb 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf

Added a podpage.
Changed -cnt to -count.

------------------------------------------------------------------------
r234 | ahayatnagarkar | 2005-02-17 11:27:42 -0500 (Thu, 17 Feb 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_howto.txt

Added results of tests of various scenarios.

------------------------------------------------------------------------
r233 | ahayatnagarkar | 2005-02-17 11:04:20 -0500 (Thu, 17 Feb 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libvalidat/val_print.c

Functions for printing debugging information from the validator.

------------------------------------------------------------------------
r232 | ahayatnagarkar | 2005-02-17 11:03:52 -0500 (Thu, 17 Feb 2005) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libvalidat/val_parse.c

A quick implementation for parsing resource-records and the rdata portion
of an RRSIG record.

------------------------------------------------------------------------
r231 | ahayatnagarkar | 2005-02-17 11:02:49 -0500 (Thu, 17 Feb 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libvalidat/val_print.h

A header file for printing debugging information from the validator.

------------------------------------------------------------------------
r230 | ahayatnagarkar | 2005-02-17 11:02:16 -0500 (Thu, 17 Feb 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libvalidat/val_parse.h

A header file for parsing routines of the validator.

------------------------------------------------------------------------
r229 | ahayatnagarkar | 2005-02-17 11:01:48 -0500 (Thu, 17 Feb 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libvalidat/val_internal.h

Internal data structures and functions used by validator.

------------------------------------------------------------------------
r228 | ahayatnagarkar | 2005-02-17 11:01:05 -0500 (Thu, 17 Feb 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libvalidat/main.c

A test program.  Can serve as a rudimentary command-line validator.

------------------------------------------------------------------------
r227 | ahayatnagarkar | 2005-02-17 10:59:37 -0500 (Thu, 17 Feb 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libvalidat/Makefile.in

Added new rules for val_parse.o and val_print.o.

------------------------------------------------------------------------
r226 | ahayatnagarkar | 2005-02-17 10:58:48 -0500 (Thu, 17 Feb 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libvalidat/validat.c

Added calls to val_parse*() functions to look inside the RRSIG RDATA to find
the type covered.

------------------------------------------------------------------------
r225 | ahayatnagarkar | 2005-02-17 10:57:22 -0500 (Thu, 17 Feb 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libvalidat/validat.h

Changed year in copyright statement.

------------------------------------------------------------------------
r224 | tewok | 2005-02-16 13:53:18 -0500 (Wed, 16 Feb 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf

Added support for -valid and -expired options.
Changed long zone output to include zone expiration date.
Added function headers.
Deleted unused constants.

------------------------------------------------------------------------
r223 | tewok | 2005-02-16 12:28:51 -0500 (Wed, 16 Feb 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

Moved the config file from
	/etc/dnssec/dnssec-tools.conf
to
	/usr/local/etc/dnssec/dnssec-tools.conf

------------------------------------------------------------------------
r222 | tewok | 2005-02-16 11:35:55 -0500 (Wed, 16 Feb 2005) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf


Added the -all option, to select every keyrec in the file.

Made several options conditionally imply other options.  F'rinstance, if the
referenced-key or unreferenced-key options were given without a key-type
option, then all the keys will be selected.

------------------------------------------------------------------------
r221 | tewok | 2005-02-16 11:12:01 -0500 (Wed, 16 Feb 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf

Fixed the usage message.

------------------------------------------------------------------------
r220 | tewok | 2005-02-16 11:04:34 -0500 (Wed, 16 Feb 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf

- Completed support of -cnt flag, which only displays a count of
  matching records.

------------------------------------------------------------------------
r219 | tewok | 2005-02-15 22:44:23 -0500 (Tue, 15 Feb 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf

Added support for listing keys based on whether or not they're referenced
by a zone.
Reworked the way key output is done.

------------------------------------------------------------------------
r218 | ahayatnagarkar | 2005-02-15 10:34:17 -0500 (Tue, 15 Feb 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt

Updates to properly propagage error messages for INCLUDE and REDIRECT
mechanisms.

------------------------------------------------------------------------
r217 | tewok | 2005-02-14 22:03:44 -0500 (Mon, 14 Feb 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf

Reorganized the code and deleted an unused routine.

------------------------------------------------------------------------
r216 | tewok | 2005-02-14 21:43:39 -0500 (Mon, 14 Feb 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/lskrf

Added code for displaying key information.
Deleted some unnecessary comments.
Added some necessary comments.

------------------------------------------------------------------------
r215 | tewok | 2005-02-14 14:05:37 -0500 (Mon, 14 Feb 2005) | 4 lines
Changed paths:
   A /trunk/dnssec-tools/tools/scripts/lskrf

lskrf - lists fields in a keyrec file.

This is the rudimentary beginnings of this script.

------------------------------------------------------------------------
r214 | ahayatnagarkar | 2005-02-11 18:04:15 -0500 (Fri, 11 Feb 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_howto.txt

Added a table showing various DNSSEC validation scenarios and their
expected results using SPF-mechanisms.

------------------------------------------------------------------------
r213 | tewok | 2005-02-11 17:16:37 -0500 (Fri, 11 Feb 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner


Generates two ZSKs for a zone, one current and one published.  These are
recorded in the zone's keyrec file.

------------------------------------------------------------------------
r212 | ahayatnagarkar | 2005-02-11 17:16:05 -0500 (Fri, 11 Feb 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libvalidat/validat.c

Updated a comment.

------------------------------------------------------------------------
r211 | ahayatnagarkar | 2005-02-11 14:25:11 -0500 (Fri, 11 Feb 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt

Call val_init() before val_check() in spf_dns_dnssec.c.

------------------------------------------------------------------------
r210 | ahayatnagarkar | 2005-02-11 13:39:18 -0500 (Fri, 11 Feb 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libvalidat/validat.h

Updated comments.

------------------------------------------------------------------------
r209 | ahayatnagarkar | 2005-02-11 13:30:09 -0500 (Fri, 11 Feb 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_howto.txt

Instructions to run aclocal, autheader etc. so as to properly generate the
shared library with a '.so' extension.

------------------------------------------------------------------------
r208 | ahayatnagarkar | 2005-02-11 11:30:29 -0500 (Fri, 11 Feb 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_howto.txt
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_howto.txt

Added the 'autoconf' step to the instructions.

------------------------------------------------------------------------
r207 | ahayatnagarkar | 2005-02-11 11:25:52 -0500 (Fri, 11 Feb 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt

This patch now links to the -lvalidat library for DNSSEC validation.

------------------------------------------------------------------------
r206 | ahayatnagarkar | 2005-02-11 11:24:58 -0500 (Fri, 11 Feb 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt

This patch now uses the libvalidat library for DNSSEC validation, instead
of the custom dnssec_validate.[h,c] files.

------------------------------------------------------------------------
r205 | ahayatnagarkar | 2005-02-11 10:38:34 -0500 (Fri, 11 Feb 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libvalidat/Makefile.in

Install the validat.h file in $(installdir)

------------------------------------------------------------------------
r204 | ahayatnagarkar | 2005-02-11 10:35:01 -0500 (Fri, 11 Feb 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/Makefile.top

Minor typo correction.

------------------------------------------------------------------------
r203 | ahayatnagarkar | 2005-02-10 20:23:31 -0500 (Thu, 10 Feb 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libvalidat
   A /trunk/dnssec-tools/lib/libvalidat/.cvsignore

Ignore files validat-config.h and Makefile.

------------------------------------------------------------------------
r202 | ahayatnagarkar | 2005-02-10 20:21:21 -0500 (Thu, 10 Feb 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/configure.in

Added rules for AR and RANLIB.

------------------------------------------------------------------------
r201 | ahayatnagarkar | 2005-02-10 20:19:49 -0500 (Thu, 10 Feb 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libvalidat/Makefile.in

Added a rule for the generation of libvalidat.a

------------------------------------------------------------------------
r200 | ahayatnagarkar | 2005-02-10 19:43:23 -0500 (Thu, 10 Feb 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/lib/libvalidat/validat-config.h.in

Modified a comment.

------------------------------------------------------------------------
r199 | ahayatnagarkar | 2005-02-10 19:36:15 -0500 (Thu, 10 Feb 2005) | 11 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libvalidat/validat.c
   A /trunk/dnssec-tools/lib/libvalidat/validat.h

An initial implementation of the validator API.  At present, it contains
three functions: val_init(), val_check() and val_query.

val_init() : initializes the validator library
val_check(): performs DNSSEC validation.  At present, it just checks for
             the existence of the RRSIG record in DNS.
val_query(): performs the resolver query and calls val_check() for DNSSEC
	     validation.

Note: These functions will undergo changes in future as the library evolves.

------------------------------------------------------------------------
r198 | ahayatnagarkar | 2005-02-10 19:29:54 -0500 (Thu, 10 Feb 2005) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/lib/libvalidat/validat-config.h.in

Input file for generating the configuration header file from the configure
script.

------------------------------------------------------------------------
r197 | ahayatnagarkar | 2005-02-10 19:29:01 -0500 (Thu, 10 Feb 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/lib
   A /trunk/dnssec-tools/lib/libvalidat
   A /trunk/dnssec-tools/lib/libvalidat/Makefile.in

Input file for generating the Makefile.

------------------------------------------------------------------------
r196 | ahayatnagarkar | 2005-02-10 19:21:04 -0500 (Thu, 10 Feb 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/configure.in

Properly generate the validat-config.h file from validat-config.h.in

------------------------------------------------------------------------
r195 | ahayatnagarkar | 2005-02-10 18:11:37 -0500 (Thu, 10 Feb 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/configure.in

Additional rules for libvalidat.

------------------------------------------------------------------------
r194 | hardaker | 2005-02-10 17:58:16 -0500 (Thu, 10 Feb 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/Makefile.in
   A /trunk/dnssec-tools/Makefile.top
   M /trunk/dnssec-tools/configure
   M /trunk/dnssec-tools/configure.in

Local Makefile.top for common rules

------------------------------------------------------------------------
r193 | hardaker | 2005-02-10 17:45:38 -0500 (Thu, 10 Feb 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/mapper
   A /trunk/dnssec-tools/tools/mapper/.cvsignore

cvs ignore file

------------------------------------------------------------------------
r192 | hardaker | 2005-02-10 17:29:46 -0500 (Thu, 10 Feb 2005) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/tools/mapper/Net-DNS-ZoneFile-Fast.patch

removed the older patch file

------------------------------------------------------------------------
r191 | hardaker | 2005-02-10 17:18:59 -0500 (Thu, 10 Feb 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/mapper

New GUI screens for easy-to-use support

------------------------------------------------------------------------
r190 | hardaker | 2005-02-09 19:50:52 -0500 (Wed, 09 Feb 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/mapper

Getopt::Long::GUI support

------------------------------------------------------------------------
r189 | tewok | 2005-02-09 16:29:58 -0500 (Wed, 09 Feb 2005) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Moved the contents of genkeys() into two separate routines: genksk() and
genzsk().  (This is in preparation for additional mods to come later.)

Slightly modified output.

------------------------------------------------------------------------
r188 | tewok | 2005-02-08 16:41:32 -0500 (Tue, 08 Feb 2005) | 16 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

- Added options:
	- specification of -g for dnssec-signzone
	- help option
	- key re-use
	- catch-all options for additions options for dnssec-keygen and
	  dnssec-signzone

- Added code to ensure required arguments were given.

- Added some additional output for the -v option.

- Pulled options passed to dnssec-signzone into their own variable.
  This was done purely for cosmetic reasons.

- Added pod for new options.

------------------------------------------------------------------------
r187 | tewok | 2005-02-08 16:24:25 -0500 (Tue, 08 Feb 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

Added several new options for use by zonesigner.

------------------------------------------------------------------------
r186 | ahayatnagarkar | 2005-02-04 17:48:49 -0500 (Fri, 04 Feb 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt

Compare error-code instead of error-string from the return value of
SPF_result.

------------------------------------------------------------------------
r185 | ahayatnagarkar | 2005-02-04 17:45:33 -0500 (Fri, 04 Feb 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_howto.txt

Minor update about messages written to log files and mail headers.

------------------------------------------------------------------------
r184 | ahayatnagarkar | 2005-02-04 17:42:32 -0500 (Fri, 04 Feb 2005) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_guide.txt

Added description about how to handle return value from the SPF_result
function.

------------------------------------------------------------------------
r183 | ahayatnagarkar | 2005-02-04 17:06:06 -0500 (Fri, 04 Feb 2005) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt

Read all the error text messages in SPF_output_t.
Handle a return value of SPF_RESULT_UNKNOWN from libspf2 for DNSSEC
Validation Failure.

------------------------------------------------------------------------
r182 | ahayatnagarkar | 2005-02-04 17:03:45 -0500 (Fri, 04 Feb 2005) | 11 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt

This patch now handles dnssec-validation of dns records fetched for various
SPF mechanisms (A, MX, PTR, INCLUDE, EXISTS, REDIRECT).  The error text (in
case of a dnssec-validation failure) is now added to the list of errors in
the SPF_output_t structure.  The SPF_result function now returns an error
value of SPF_RESULT_UNKNOWN (stands for the result "PermError", as given in
draft-schlitt-spf-classic-00.txt) instead of SPF_RESULT_FAIL.
[According to draft-schlitt-spf-classic-00.txt, a result of "Fail" is an
explicit statement that the client is not authorized to use the domain in
the given identity, whereas a result of "PermError" means that the domain's
published records couldn't be correctly interpreted].

------------------------------------------------------------------------
r181 | hardaker | 2005-01-31 12:54:04 -0500 (Mon, 31 Jan 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

force exporting of function names

------------------------------------------------------------------------
r180 | hardaker | 2005-01-20 18:12:05 -0500 (Thu, 20 Jan 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

better GUI usage

------------------------------------------------------------------------
r179 | hardaker | 2005-01-12 00:05:37 -0500 (Wed, 12 Jan 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

converted options to getopt long options (short supported too)

------------------------------------------------------------------------
r178 | hardaker | 2005-01-11 17:23:28 -0500 (Tue, 11 Jan 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt
   M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt
   M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt

added mmm emacs header for text/perl mode switching

------------------------------------------------------------------------
r177 | hardaker | 2005-01-11 13:40:25 -0500 (Tue, 11 Jan 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools
   A /trunk/dnssec-tools/.cvsignore
   A /trunk/dnssec-tools/Makefile.in
   A /trunk/dnssec-tools/configure
   A /trunk/dnssec-tools/configure.in
   A /trunk/dnssec-tools/install-sh

Top level configure and make system

------------------------------------------------------------------------
r176 | hardaker | 2005-01-11 13:39:03 -0500 (Tue, 11 Jan 2005) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/mapper/Makefile.PL

Makefile.PL

------------------------------------------------------------------------
r175 | hardaker | 2005-01-11 13:03:50 -0500 (Tue, 11 Jan 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast.patch

handle quotes around include files

------------------------------------------------------------------------
r174 | hardaker | 2005-01-11 12:19:32 -0500 (Tue, 11 Jan 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast.patch

more flexible file names for include directives

------------------------------------------------------------------------
r173 | hardaker | 2005-01-11 12:11:10 -0500 (Tue, 11 Jan 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast.patch

document other types supported in the man page

------------------------------------------------------------------------
r172 | hardaker | 2005-01-11 12:08:00 -0500 (Tue, 11 Jan 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast.patch

support $include directives

------------------------------------------------------------------------
r171 | hardaker | 2005-01-04 18:06:53 -0500 (Tue, 04 Jan 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

check that RRSIGs aren't signing an RRSIG

------------------------------------------------------------------------
r167 | hardaker | 2005-01-04 13:05:19 -0500 (Tue, 04 Jan 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts
   M /trunk/dnssec-tools/tools/mapper/mapper

Added =pod directives

------------------------------------------------------------------------
r164 | hardaker | 2005-01-04 12:42:20 -0500 (Tue, 04 Jan 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

add 1 to error output for humans which expect counting to start at 1

------------------------------------------------------------------------
r163 | hardaker | 2005-01-04 12:41:41 -0500 (Tue, 04 Jan 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

throw errors when the parser fails

------------------------------------------------------------------------
r162 | hardaker | 2005-01-04 00:03:58 -0500 (Tue, 04 Jan 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

check that RRSIG and NSEC entries are the only ones for a given name.  Misc other todo comments

------------------------------------------------------------------------
r161 | hardaker | 2005-01-04 00:01:44 -0500 (Tue, 04 Jan 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

more feedback when -v is turned on, and even some when it is not so that people can be sure things were tested

------------------------------------------------------------------------
r160 | hardaker | 2005-01-04 00:01:10 -0500 (Tue, 04 Jan 2005) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm

return a count if the rule was processed, and the number of errors found

------------------------------------------------------------------------
r158 | hardaker | 2004-12-27 23:57:41 -0500 (Mon, 27 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

ensure that glue records MUST NOT be signed (unless they're in the parent zone)

------------------------------------------------------------------------
r157 | hardaker | 2004-12-27 23:50:40 -0500 (Mon, 27 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

ensure that child NS records MUST NOT be signed

------------------------------------------------------------------------
r156 | hardaker | 2004-12-27 23:48:04 -0500 (Mon, 27 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

make sure that RRSIG's themselves are not signed

------------------------------------------------------------------------
r155 | hardaker | 2004-12-27 23:44:29 -0500 (Mon, 27 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

check that records have an RRSIG with the zone's key as the signer

------------------------------------------------------------------------
r153 | hardaker | 2004-12-27 19:34:27 -0500 (Mon, 27 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

better reference in description clause

------------------------------------------------------------------------
r152 | hardaker | 2004-12-27 19:33:58 -0500 (Mon, 27 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

better intro text in the man page

------------------------------------------------------------------------
r151 | hardaker | 2004-12-27 18:53:35 -0500 (Mon, 27 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt

misc other checks for DS/DNSKEY pairs in live zone tests

------------------------------------------------------------------------
r150 | hardaker | 2004-12-27 18:52:51 -0500 (Mon, 27 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

misc other XXX potential tests

------------------------------------------------------------------------
r149 | hardaker | 2004-12-27 17:55:49 -0500 (Mon, 27 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

check that the RRSIG signer name matches the zone name

------------------------------------------------------------------------
r148 | hardaker | 2004-12-27 17:53:21 -0500 (Mon, 27 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast.patch

grab the full name from RRSIG records as should be done

------------------------------------------------------------------------
r147 | hardaker | 2004-12-27 17:14:57 -0500 (Mon, 27 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

check every rrsig record (eg, multiple keys) for matching TTLs bbinstead of just one

------------------------------------------------------------------------
r146 | hardaker | 2004-12-27 17:11:25 -0500 (Mon, 27 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm

update documentation to discuss multiple error return

------------------------------------------------------------------------
r145 | hardaker | 2004-12-27 17:09:40 -0500 (Mon, 27 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

deal with multiple errors being returned from tests; make some of the tests make use of this feature

------------------------------------------------------------------------
r144 | hardaker | 2004-12-27 16:59:09 -0500 (Mon, 27 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

RRSIG TTLs must match original record TTLs

------------------------------------------------------------------------
r143 | hardaker | 2004-12-27 16:41:58 -0500 (Mon, 27 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm
   M /trunk/dnssec-tools/tools/donuts/donuts

print -R help description describing each rule

------------------------------------------------------------------------
r142 | hardaker | 2004-12-27 16:08:20 -0500 (Mon, 27 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt

remove comments that say stuff isn't implemented yet; it is

------------------------------------------------------------------------
r141 | hardaker | 2004-12-27 16:07:44 -0500 (Mon, 27 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

new rules for checking various dnssec records (key name must be the same as the zone name; protocol must be 3; rrsigs must be present for valid records; nsec must be present

------------------------------------------------------------------------
r140 | ahayatnagarkar | 2004-12-24 20:58:37 -0500 (Fri, 24 Dec 2004) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_howto.txt

A User's guide to add DNSSEC validation capabilities to sendmail's SPF
processing.

------------------------------------------------------------------------
r139 | ahayatnagarkar | 2004-12-24 20:55:04 -0500 (Fri, 24 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt

Handle the 'ignore' value to dnssec_policy option.

------------------------------------------------------------------------
r138 | ahayatnagarkar | 2004-12-24 20:54:32 -0500 (Fri, 24 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt

Changed a return value.

------------------------------------------------------------------------
r137 | ahayatnagarkar | 2004-12-24 14:10:48 -0500 (Fri, 24 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/README

Added entry about the libspf2-dnssec developer guide.

------------------------------------------------------------------------
r136 | ahayatnagarkar | 2004-12-24 14:10:05 -0500 (Fri, 24 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_howto.txt

Instructions for installing libspf2 with the dnssec patch.

------------------------------------------------------------------------
r135 | ahayatnagarkar | 2004-12-24 14:09:34 -0500 (Fri, 24 Dec 2004) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_guide.txt

A developer guide for the dnssec patch to libspf2.

------------------------------------------------------------------------
r134 | hardaker | 2004-12-24 12:47:51 -0500 (Fri, 24 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt

Don't check keys for DS records that don't have the zone flag set

------------------------------------------------------------------------
r133 | hardaker | 2004-12-24 12:47:22 -0500 (Fri, 24 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt

fix error msg to include correct config parameter

------------------------------------------------------------------------
r132 | hardaker | 2004-12-24 12:25:30 -0500 (Fri, 24 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt

Check child for valid dnskey's that match DS records; better error messages for missing DS records in parent.

------------------------------------------------------------------------
r131 | hardaker | 2004-12-24 12:22:48 -0500 (Fri, 24 Dec 2004) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast-1.patch
   D /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast-2.patch
   A /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast.patch

Fixed a number of issues with the patch and DS and DNSKEY parsing

------------------------------------------------------------------------
r130 | ahayatnagarkar | 2004-12-24 11:11:53 -0500 (Fri, 24 Dec 2004) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_howto.txt
   D /trunk/dnssec-tools/apps/libspf2_dnssec_doc.txt
   M /trunk/dnssec-tools/apps/sendmail/README

Moved libspf2_dnssec_doc.txt to libspf2-1.0.4_dnssec_howto.txt.

------------------------------------------------------------------------
r129 | ahayatnagarkar | 2004-12-24 10:57:56 -0500 (Fri, 24 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/README

Added reference to the 'obsolete' sub-directory.

------------------------------------------------------------------------
r128 | ahayatnagarkar | 2004-12-24 10:57:23 -0500 (Fri, 24 Dec 2004) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/apps/sendmail/Makefile.in
   D /trunk/dnssec-tools/apps/sendmail/configure
   D /trunk/dnssec-tools/apps/sendmail/configure.in
   D /trunk/dnssec-tools/apps/sendmail/dnssec-milter.c
   A /trunk/dnssec-tools/apps/sendmail/obsolete
   A /trunk/dnssec-tools/apps/sendmail/obsolete/Makefile.in
   A /trunk/dnssec-tools/apps/sendmail/obsolete/configure
   A /trunk/dnssec-tools/apps/sendmail/obsolete/configure.in
   A /trunk/dnssec-tools/apps/sendmail/obsolete/dnssec-milter.c
   A /trunk/dnssec-tools/apps/sendmail/obsolete/test.c
   A /trunk/dnssec-tools/apps/sendmail/obsolete/validator.c
   A /trunk/dnssec-tools/apps/sendmail/obsolete/validator.h
   D /trunk/dnssec-tools/apps/sendmail/test.c
   D /trunk/dnssec-tools/apps/sendmail/validator.c
   D /trunk/dnssec-tools/apps/sendmail/validator.h

Moved old files to the obsolete directory.

------------------------------------------------------------------------
r127 | hardaker | 2004-12-24 01:36:09 -0500 (Fri, 24 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt

A (live query) rule to verify that the parent has a matching DS for every DNSKEY.

------------------------------------------------------------------------
r126 | hardaker | 2004-12-24 01:32:13 -0500 (Fri, 24 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

return an empty array for live_query if no answers found

------------------------------------------------------------------------
r125 | hardaker | 2004-12-23 18:50:13 -0500 (Thu, 23 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

exit after usage()

------------------------------------------------------------------------
r124 | ahayatnagarkar | 2004-12-21 13:06:08 -0500 (Tue, 21 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2_dnssec_doc.txt

Added description of the use of SPF_result() by spfmilter-1.0.8.

------------------------------------------------------------------------
r123 | ahayatnagarkar | 2004-12-21 12:40:12 -0500 (Tue, 21 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/README

Updated to include the libspf2_dnssec_doc.txt file.

------------------------------------------------------------------------
r122 | ahayatnagarkar | 2004-12-21 12:38:21 -0500 (Tue, 21 Dec 2004) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/libspf2_dnssec_doc.txt

Documentation of DNSSEC validation in libspf2.

------------------------------------------------------------------------
r121 | ahayatnagarkar | 2004-12-21 12:17:32 -0500 (Tue, 21 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt

Changed the name of dnssec policy from REJECT to ABORT.

------------------------------------------------------------------------
r120 | ahayatnagarkar | 2004-12-21 12:11:06 -0500 (Tue, 21 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt

Changed name of policy from REJECT to ABORT.

------------------------------------------------------------------------
r119 | hardaker | 2004-12-21 01:21:37 -0500 (Tue, 21 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

print line numbers for broken rules

------------------------------------------------------------------------
r118 | hardaker | 2004-12-21 01:20:56 -0500 (Tue, 21 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt

make minimum NS records configurable with help text; improvements to sub-must-be-secure check

------------------------------------------------------------------------
r117 | hardaker | 2004-12-21 01:19:28 -0500 (Tue, 21 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt

help text for minttl and maxttl rules

------------------------------------------------------------------------
r116 | hardaker | 2004-12-21 01:18:53 -0500 (Tue, 21 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

check for missing or present-but-shouldn't be NSEC and RRSIG records (needs improvement still)

------------------------------------------------------------------------
r115 | hardaker | 2004-12-20 15:41:54 -0500 (Mon, 20 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

added a -H flag which prints legal configuration file rule/token pairs

------------------------------------------------------------------------
r114 | hardaker | 2004-12-20 15:41:16 -0500 (Mon, 20 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm

added a print_help() operator

------------------------------------------------------------------------
r113 | hardaker | 2004-12-17 20:24:46 -0500 (Fri, 17 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt

better error messages

------------------------------------------------------------------------
r112 | hardaker | 2004-12-17 20:24:18 -0500 (Fri, 17 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

Added the ability to load user configuration files to tweak how rules operate

------------------------------------------------------------------------
r111 | hardaker | 2004-12-17 20:23:50 -0500 (Fri, 17 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm

added a config() method

------------------------------------------------------------------------
r110 | hardaker | 2004-12-17 19:36:27 -0500 (Fri, 17 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm

better error output

------------------------------------------------------------------------
r109 | tewok | 2004-12-17 13:59:48 -0500 (Fri, 17 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tests/test-conf
   M /trunk/dnssec-tools/tools/modules/tests/test-keyrec
   M /trunk/dnssec-tools/tools/modules/tests/test-toolopts1
   M /trunk/dnssec-tools/tools/modules/tests/test-toolopts2
   M /trunk/dnssec-tools/tools/modules/tests/test-toolopts3

Fixed to use new module hierarchy.

------------------------------------------------------------------------
r108 | tewok | 2004-12-17 13:57:34 -0500 (Fri, 17 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

Added several new standard options.

------------------------------------------------------------------------
r107 | tewok | 2004-12-17 13:56:24 -0500 (Fri, 17 Dec 2004) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm

Added a new key field and several new zone fields.
Fixed a typo.

------------------------------------------------------------------------
r106 | hardaker | 2004-12-13 13:57:01 -0500 (Mon, 13 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Rule.pm
   M /trunk/dnssec-tools/tools/donuts/donuts

moved more functionality to the Rule class

------------------------------------------------------------------------
r105 | hardaker | 2004-12-13 13:37:32 -0500 (Mon, 13 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/Makefile.PL
   A /trunk/dnssec-tools/tools/donuts/Rule.pm
   M /trunk/dnssec-tools/tools/donuts/donuts

Created a Rule class that holds/implements rules and documentation to define rule syntax

------------------------------------------------------------------------
r104 | hardaker | 2004-12-13 00:42:02 -0500 (Mon, 13 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

Added some array-compare routines.  Better warnings for broken code in rule files

------------------------------------------------------------------------
r103 | hardaker | 2004-12-10 02:15:54 -0500 (Fri, 10 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

added beginning support for live_queries; Changed default rule load path to be based on installation Config support to match the Makefile install process

------------------------------------------------------------------------
r102 | hardaker | 2004-12-10 02:13:24 -0500 (Fri, 10 Dec 2004) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/donuts/Makefile.PL

A perl Makefile to install the package and rules

------------------------------------------------------------------------
r101 | hardaker | 2004-12-10 02:12:33 -0500 (Fri, 10 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts
   A /trunk/dnssec-tools/tools/donuts/.cvsignore

ignore file

------------------------------------------------------------------------
r100 | hardaker | 2004-12-08 20:02:26 -0500 (Wed, 08 Dec 2004) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/donuts/rules/recommendations.rules.txt

general DNS recommendations (minttls, etc)

------------------------------------------------------------------------
r99 | hardaker | 2004-12-08 20:01:57 -0500 (Wed, 08 Dec 2004) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/donuts/rules/parent_child.rules.txt

rules diagnosing parent/child relationships

------------------------------------------------------------------------
r98 | hardaker | 2004-12-08 20:01:30 -0500 (Wed, 08 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

fix one rule, and add a todo list

------------------------------------------------------------------------
r97 | hardaker | 2004-12-08 20:00:53 -0500 (Wed, 08 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

allow for -i to ignore certain rule names

------------------------------------------------------------------------
r96 | hardaker | 2004-12-08 17:05:44 -0500 (Wed, 08 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Makefile.PL
   M /trunk/dnssec-tools/tools/modules/conf.pm
   M /trunk/dnssec-tools/tools/modules/keyrec.pm
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm
   M /trunk/dnssec-tools/tools/scripts/keyrec-check
   M /trunk/dnssec-tools/tools/scripts/zonesigner

final module name change

------------------------------------------------------------------------
r95 | hardaker | 2004-12-08 16:59:47 -0500 (Wed, 08 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/donuts/donuts

add copyright

------------------------------------------------------------------------
r94 | hardaker | 2004-12-08 16:59:36 -0500 (Wed, 08 Dec 2004) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/tools/donuts/rules/dnslint.rules.txt
   M /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

whoops.  shouldn't have been checked it

------------------------------------------------------------------------
r93 | hardaker | 2004-12-08 16:55:39 -0500 (Wed, 08 Dec 2004) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/donuts
   A /trunk/dnssec-tools/tools/donuts/donuts
   A /trunk/dnssec-tools/tools/donuts/rules
   A /trunk/dnssec-tools/tools/donuts/rules/dnslint.rules.txt
   A /trunk/dnssec-tools/tools/donuts/rules/dnssec.rules.txt

initial pass at a zone file checking script based on loadable rule files

------------------------------------------------------------------------
r92 | ahayatnagarkar | 2004-12-07 11:26:31 -0500 (Tue, 07 Dec 2004) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/sendmail/README

A README file for the apps/sendmail directory.

------------------------------------------------------------------------
r91 | ahayatnagarkar | 2004-12-07 11:17:40 -0500 (Tue, 07 Dec 2004) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/README

A README file for the apps directory.

------------------------------------------------------------------------
r90 | hardaker | 2004-12-07 00:56:03 -0500 (Tue, 07 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Makefile.PL
   M /trunk/dnssec-tools/tools/modules/conf.pm
   M /trunk/dnssec-tools/tools/modules/keyrec.pm
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm
   M /trunk/dnssec-tools/tools/scripts/keyrec-check
   M /trunk/dnssec-tools/tools/scripts/zonesigner

consistent capitilization will make things work.

------------------------------------------------------------------------
r89 | hardaker | 2004-12-06 19:28:35 -0500 (Mon, 06 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts
   A /trunk/dnssec-tools/tools/scripts/.cvsignore

ignore perl specific build dirs and files

------------------------------------------------------------------------
r88 | hardaker | 2004-12-06 19:28:04 -0500 (Mon, 06 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules
   M /trunk/dnssec-tools/tools/modules/.cvsignore

ignore perl specific build dirs

------------------------------------------------------------------------
r87 | hardaker | 2004-12-06 19:27:24 -0500 (Mon, 06 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Makefile.PL
   M /trunk/dnssec-tools/tools/modules/conf.pm
   M /trunk/dnssec-tools/tools/modules/keyrec.pm
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm
   A /trunk/dnssec-tools/tools/scripts/Makefile.PL
   M /trunk/dnssec-tools/tools/scripts/keyrec-check
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Added required support to match perl CPAN and general perl requirements

------------------------------------------------------------------------
r86 | ahayatnagarkar | 2004-12-06 17:50:04 -0500 (Mon, 06 Dec 2004) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/apps/libspf2-1.0.4_dnssec_patch.txt

A patch to libspf2-1.0.4 for providing DNSSEC validation.  This is a
preliminary version.

------------------------------------------------------------------------
r85 | ahayatnagarkar | 2004-12-06 17:49:34 -0500 (Mon, 06 Dec 2004) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/apps/sendmail/spfmilter-1.0.8_dnssec_patch.txt

A patch to spfmilter-1.0.8 for providing DNSSEC validation.  This is a
preliminary version.  It requires libspf2 with DNSSEC patch applied.

------------------------------------------------------------------------
r84 | tewok | 2004-12-03 14:38:27 -0500 (Fri, 03 Dec 2004) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast-2.patch

This patch adds a -keep_alive option that allows parse() to continue working,
even after it's found errors.

------------------------------------------------------------------------
r83 | tewok | 2004-12-03 14:31:49 -0500 (Fri, 03 Dec 2004) | 15 lines
Changed paths:
   A /trunk/dnssec-tools/tools/patches
   A /trunk/dnssec-tools/tools/patches/Net-DNS-ZoneFile-Fast-1.patch

This is Wes Hardaker's original patch file for Net-DNS-ZoneFile-Fast.
It has been moved into this patch-specific directory.

The log messages from the original file's two versions are:

    revision 1.2
    date: 2004/11/05 00:43:44;  author: hardaker;  state: Exp;  lines: +82 -41
    update to handle axfr transfered files with all data on a single line

    ----------------------------

    revision 1.1
    date: 2004/10/22 23:57:38;  author: hardaker;  state: Exp;
    Patch to Net::DNS::ZoneFile::Fast to make it parse dnssec RRs

------------------------------------------------------------------------
r82 | tewok | 2004-12-01 22:25:39 -0500 (Wed, 01 Dec 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Added some comments to the newly created db.<zone> file.

------------------------------------------------------------------------
r81 | hardaker | 2004-12-01 19:22:42 -0500 (Wed, 01 Dec 2004) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/linux
   A /trunk/dnssec-tools/tools/linux/ifup-dyn-dns
   A /trunk/dnssec-tools/tools/linux/ifup-dyn-dns/README
   A /trunk/dnssec-tools/tools/linux/ifup-dyn-dns/ifup-dyndns

moved from a top level directory

------------------------------------------------------------------------
r80 | hardaker | 2004-12-01 19:19:26 -0500 (Wed, 01 Dec 2004) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/tools/linux-ifup-dyn-dns

Moving to linux specific dir

------------------------------------------------------------------------
r79 | tewok | 2004-12-01 14:33:50 -0500 (Wed, 01 Dec 2004) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/keyrec-check

Added checks for crossed zone/key keyrec hashkeys.
Fixed a typo.

------------------------------------------------------------------------
r78 | tewok | 2004-11-30 22:51:09 -0500 (Tue, 30 Nov 2004) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/keyrec-check


Added checks for the kskdirectory and zskdirectory.
Added defined() checks for some keyrec fields.

------------------------------------------------------------------------
r77 | tewok | 2004-11-30 20:47:09 -0500 (Tue, 30 Nov 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm

Minor format adjustment in pod.

------------------------------------------------------------------------
r76 | tewok | 2004-11-30 20:44:56 -0500 (Tue, 30 Nov 2004) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm

Moved data initialization code to keyrec_init().
Added keyrec_discard().
Added pod for keyrec_init() and keyrec_discard().

------------------------------------------------------------------------
r75 | tewok | 2004-11-30 17:12:03 -0500 (Tue, 30 Nov 2004) | 10 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tests/test-keyrec

Added tests for the following interfaces:
	keyrec_add()
	keyrec_discard()
	keyrec_init()
	keyrec_keyfields()
	keyrec_newkeyrec()
	keyrec_read()
	keyrec_write()
	keyrec_zonefields()

------------------------------------------------------------------------
r74 | tewok | 2004-11-30 12:16:07 -0500 (Tue, 30 Nov 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

Added a couple error checks.

------------------------------------------------------------------------
r73 | tewok | 2004-11-30 12:14:09 -0500 (Tue, 30 Nov 2004) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tests/test-toolopts2


Check for required arguments.
Updated the test keyrec file to current fields.

------------------------------------------------------------------------
r72 | tewok | 2004-11-30 11:25:10 -0500 (Tue, 30 Nov 2004) | 7 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tests/test-keyrec


Updated the test keyrec file to current fields.
Deleted unused test_parseconfig() routine.
Added better test identification output.
Moved the test_keyrec_recval() routine.
Fixed keyrec_setval() args to be current set.

------------------------------------------------------------------------
r71 | tewok | 2004-11-30 11:20:13 -0500 (Tue, 30 Nov 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

Modified a check in opts_keykr() to account for specific key types.

------------------------------------------------------------------------
r70 | tewok | 2004-11-30 11:17:45 -0500 (Tue, 30 Nov 2004) | 10 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tests/test-toolopts1

Updated the test keyrec file to current fields.
Fixed names of:
	optsuspend();
	optrestore();
	optdrop();
by changing to:
	opts_suspend();
	opts_restore();
	opts_drop();

------------------------------------------------------------------------
r69 | tewok | 2004-11-30 11:12:40 -0500 (Tue, 30 Nov 2004) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tests/test-toolopts3

Updated the test keyrec file to current fields.
Modified error messages to show more clearly what has happened.

------------------------------------------------------------------------
r68 | tewok | 2004-11-29 22:45:44 -0500 (Mon, 29 Nov 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm

Added a description to the podman.

------------------------------------------------------------------------
r67 | tewok | 2004-11-29 14:50:40 -0500 (Mon, 29 Nov 2004) | 9 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm

Renamed keyrec_save() to keyrec_close().
Added some error returns.
Added some success returns.
Checked the return value for keyrec_newkeyrec().
Fixed keyrec_read() to really return the number of keyrecs it read.
Made some comments match reality.
Made keyrec_newkeyrec() ensure it was given a valid keyrec type.
Added masses of pod describing the interfaces.

------------------------------------------------------------------------
r66 | tewok | 2004-11-29 00:15:53 -0500 (Mon, 29 Nov 2004) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Modify keyrec_setval() to properly add new entries to an existing keyrec.

------------------------------------------------------------------------
r65 | tewok | 2004-11-23 16:18:33 -0500 (Tue, 23 Nov 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/keyrec-check

Added a data validation check for key keyrec data.

------------------------------------------------------------------------
r64 | tewok | 2004-11-23 00:10:49 -0500 (Tue, 23 Nov 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/zonesigner

Fixed the command name in the usage message.

------------------------------------------------------------------------
r63 | tewok | 2004-11-23 00:09:55 -0500 (Tue, 23 Nov 2004) | 10 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/keyrec-check

Added options to specify zone checks or key checks only.

Added checks to test the validity of data in a zone keyrec.
These checks ensure:
	- existence of zone file
	- existence of KSK file
	- existence of ZSK file
	- endtime > 1 day
	- seconds-count and date string match

------------------------------------------------------------------------
r62 | tewok | 2004-11-22 22:29:37 -0500 (Mon, 22 Nov 2004) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/keyrec-check

Added recognition of:
	- mislabeled keys
	- orphaned keys

------------------------------------------------------------------------
r61 | tewok | 2004-11-22 15:50:20 -0500 (Mon, 22 Nov 2004) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/scripts/zonesigner

Combines calls to dnssec-keygen and dnssec-signzone to provide a single,
easy-to-use tool for creating keys and signing zones.

------------------------------------------------------------------------
r60 | tewok | 2004-11-22 14:28:23 -0500 (Mon, 22 Nov 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/scripts/keyrec-check

Re-enabled a check that had been disabled for testing.

------------------------------------------------------------------------
r59 | tewok | 2004-11-22 14:24:48 -0500 (Mon, 22 Nov 2004) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/tools/scripts
   A /trunk/dnssec-tools/tools/scripts/keyrec-check

This script does sanity checking on a keyrec file.  It has comments and pod
explaining what it's checking.

------------------------------------------------------------------------
r58 | tewok | 2004-11-19 15:14:58 -0500 (Fri, 19 Nov 2004) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm


Modified opts_zonekr() to get the keyrec values for its KSK and ZSK.

------------------------------------------------------------------------
r57 | tewok | 2004-11-19 15:03:05 -0500 (Fri, 19 Nov 2004) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm

Renamed the key keyrec field "type" to "keyrec_type".
Allowed colons and tabs to be used in keyrec values.
Added some rudimentary formatting to keyrec lines.
Modified keyrec_add() to only allow adding the length field for a key's type.

------------------------------------------------------------------------
r56 | tewok | 2004-11-19 00:04:12 -0500 (Fri, 19 Nov 2004) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm

Added 'type' to key fields.
Added some special-case code for keys when adding key keyrecs.  Only the
appropriate key length will be added for the key type.
Slightly modify the output format for keyrec fields.
Added interfaces to return the list of key fields and zone fields.

------------------------------------------------------------------------
r55 | tewok | 2004-11-18 20:21:53 -0500 (Thu, 18 Nov 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm

Added keyrec_add().

------------------------------------------------------------------------
r54 | tewok | 2004-11-18 20:20:56 -0500 (Thu, 18 Nov 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

Renamed an argument from "-v" to "-verbose".

------------------------------------------------------------------------
r53 | tewok | 2004-11-15 21:17:27 -0500 (Mon, 15 Nov 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm

Removed use of internal tislabs.com domain names.

------------------------------------------------------------------------
r52 | tewok | 2004-11-15 19:06:35 -0500 (Mon, 15 Nov 2004) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/modules/tests/test-toolopts3

Test script to check opts_keykr() and opts_zonekr().

------------------------------------------------------------------------
r51 | tewok | 2004-11-15 19:01:26 -0500 (Mon, 15 Nov 2004) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

Added the opts_keykr() and opts_zonekr() interfaces.
Added pod for opts_keykr() and opts_zonekr().
Changed the config file name to dnssec-tools.conf.

------------------------------------------------------------------------
r50 | tewok | 2004-11-15 17:32:33 -0500 (Mon, 15 Nov 2004) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/etc
   A /trunk/dnssec-tools/tools/etc/dnssec
   A /trunk/dnssec-tools/tools/etc/dnssec/dnssec-tools.conf

Configuration file for dnssec-tools.

------------------------------------------------------------------------
r49 | tewok | 2004-11-15 17:17:02 -0500 (Mon, 15 Nov 2004) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm
   M /trunk/dnssec-tools/tools/modules/tests
   M /trunk/dnssec-tools/tools/modules/tests/.cvsignore
   M /trunk/dnssec-tools/tools/modules/tests/Makefile.PL
   M /trunk/dnssec-tools/tools/modules/tests/test-conf

Renamed the dnssec-tools configuraiton file from tools.conf to
dnssec-tools.conf.

------------------------------------------------------------------------
r48 | ahayatnagarkar | 2004-11-15 16:40:17 -0500 (Mon, 15 Nov 2004) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/sendmail/test.c

A file to test the validator API.

------------------------------------------------------------------------
r47 | ahayatnagarkar | 2004-11-15 16:39:53 -0500 (Mon, 15 Nov 2004) | 4 lines
Changed paths:
   A /trunk/dnssec-tools/apps/sendmail/dnssec-milter.c

The dnssec-milter, a milter-plugin to sendmail for dnssec validation.  At
present, it just checks whether the sending MTAs hostname is dnssec
validated or not.

------------------------------------------------------------------------
r46 | ahayatnagarkar | 2004-11-15 16:38:22 -0500 (Mon, 15 Nov 2004) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/apps/sendmail/validator.c
   A /trunk/dnssec-tools/apps/sendmail/validator.h

A very primitive validator, with just one method dnssec_validate() that is
used by dnssec-milter.

------------------------------------------------------------------------
r45 | ahayatnagarkar | 2004-11-15 16:37:25 -0500 (Mon, 15 Nov 2004) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/apps/sendmail/Makefile.in

An input file for generating a makefile.

------------------------------------------------------------------------
r44 | ahayatnagarkar | 2004-11-15 16:36:28 -0500 (Mon, 15 Nov 2004) | 3 lines
Changed paths:
   A /trunk/dnssec-tools/apps
   A /trunk/dnssec-tools/apps/sendmail
   A /trunk/dnssec-tools/apps/sendmail/configure
   A /trunk/dnssec-tools/apps/sendmail/configure.in

Configure scripts.  Check for the existence of pthread, milter, spf2 and
sendmail libraries.

------------------------------------------------------------------------
r43 | tewok | 2004-11-12 21:01:33 -0500 (Fri, 12 Nov 2004) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

Added two interfaces:  opts_krfile() and opts_getkeys().
Added pod for the new interfaces.

------------------------------------------------------------------------
r42 | tewok | 2004-11-12 18:10:12 -0500 (Fri, 12 Nov 2004) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tests/Makefile.PL
   M /trunk/dnssec-tools/tools/modules/tests/test-keyrec

Modified test file names, domain names, and key names so they wouldn't be
giving out details of our network's innards.

------------------------------------------------------------------------
r41 | tewok | 2004-11-12 16:59:28 -0500 (Fri, 12 Nov 2004) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/modules/tests/test-toolopts2

Added more tests for tooloptions.pm.

------------------------------------------------------------------------
r40 | tewok | 2004-11-12 16:57:26 -0500 (Fri, 12 Nov 2004) | 2 lines
Changed paths:
   D /trunk/dnssec-tools/tools/modules/tests/test-toolopts
   A /trunk/dnssec-tools/tools/modules/tests/test-toolopts1

Renamed test-toolopts to test-toolops1.

------------------------------------------------------------------------
r39 | tewok | 2004-11-11 16:38:57 -0500 (Thu, 11 Nov 2004) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

Added a few standard options.
Added explanatory comments for all the standard options.

------------------------------------------------------------------------
r38 | tewok | 2004-11-11 13:10:51 -0500 (Thu, 11 Nov 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tests/test-keyrec

Fixed test filename.

------------------------------------------------------------------------
r37 | tewok | 2004-11-11 13:10:21 -0500 (Thu, 11 Nov 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tests
   M /trunk/dnssec-tools/tools/modules/tests/.cvsignore
   M /trunk/dnssec-tools/tools/modules/tests/Makefile.PL

Added test filenames.

------------------------------------------------------------------------
r36 | tewok | 2004-11-11 13:06:32 -0500 (Thu, 11 Nov 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tests/test-keyrec

Added a copyright.

------------------------------------------------------------------------
r35 | tewok | 2004-11-11 13:05:44 -0500 (Thu, 11 Nov 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tests/test-conf

Added a copyright and a test caveat.

------------------------------------------------------------------------
r34 | tewok | 2004-11-11 13:04:55 -0500 (Thu, 11 Nov 2004) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tests/Makefile.PL

Added a copyright.
Added a line to the "clean" target to delete test-generated files.

------------------------------------------------------------------------
r33 | tewok | 2004-11-11 13:03:55 -0500 (Thu, 11 Nov 2004) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/modules/tests/test-toolopts

Test script for the DNSSEC::tooloptions perl module.

------------------------------------------------------------------------
r32 | tewok | 2004-11-11 11:55:31 -0500 (Thu, 11 Nov 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tests/test-conf

Dropped the underscore from two option names.

------------------------------------------------------------------------
r31 | tewok | 2004-11-11 11:54:06 -0500 (Thu, 11 Nov 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Makefile.PL
   M /trunk/dnssec-tools/tools/modules/conf.pm

Added copyright.

------------------------------------------------------------------------
r30 | tewok | 2004-11-11 11:53:23 -0500 (Thu, 11 Nov 2004) | 5 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm

Added copyright.
Added underscores to keywords
Forced keywords to lowercase.
Zapped %keyrecs after each read().

------------------------------------------------------------------------
r29 | tewok | 2004-11-11 11:50:54 -0500 (Thu, 11 Nov 2004) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/tooloptions.pm

Added copyright.
Added optsuspend(), optdrop(), and optresume() calls.
Modified processing of command-line options so that tooloption() may be
called multiple times.
Modified pod to reflect these changes.

------------------------------------------------------------------------
r28 | tewok | 2004-11-10 17:20:40 -0500 (Wed, 10 Nov 2004) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/Makefile.PL
   A /trunk/dnssec-tools/tools/modules/tooloptions.pm

Added tooloptions.pm to handle options and defaults from several sources,
smoodging them all into a single hash table of options to be dealt with by
the calling script.

Modified Makefile.PL to install tooloptions.pm.

------------------------------------------------------------------------
r27 | tewok | 2004-11-08 16:59:32 -0500 (Mon, 08 Nov 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm

Put in some pod.

------------------------------------------------------------------------
r26 | tewok | 2004-11-08 14:30:34 -0500 (Mon, 08 Nov 2004) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/modules/tests
   A /trunk/dnssec-tools/tools/modules/tests/.cvsignore
   A /trunk/dnssec-tools/tools/modules/tests/Makefile.PL
   A /trunk/dnssec-tools/tools/modules/tests/test-conf
   A /trunk/dnssec-tools/tools/modules/tests/test-keyrec

Added some test scripts for manual testing of the DNSSEC tools modules.

------------------------------------------------------------------------
r25 | tewok | 2004-11-08 14:29:51 -0500 (Mon, 08 Nov 2004) | 3 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm

Fixed a few problems with keyrec_setval().
Renamed the data dumping routines.

------------------------------------------------------------------------
r24 | tewok | 2004-11-08 14:28:55 -0500 (Mon, 08 Nov 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/conf.pm

Added an optional argument for specifying the config file to read.

------------------------------------------------------------------------
r23 | tewok | 2004-11-07 22:55:16 -0500 (Sun, 07 Nov 2004) | 6 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules/keyrec.pm


Added *beginning* of pod.
Added keyrec_setval().

(Needs bags more testing, checked-in to get it backed up.)

------------------------------------------------------------------------
r22 | tewok | 2004-11-07 18:38:45 -0500 (Sun, 07 Nov 2004) | 4 lines
Changed paths:
   M /trunk/dnssec-tools/tools/modules
   A /trunk/dnssec-tools/tools/modules/.cvsignore
   D /trunk/dnssec-tools/tools/modules/Makefile
   A /trunk/dnssec-tools/tools/modules/Makefile.PL

Added Makefile.PL in order to create Makefile.
Deleted Makefile since it's now created by Makefile.PL.
Added .cvsignore to ignore Makefile.

------------------------------------------------------------------------
r21 | tewok | 2004-11-05 14:41:00 -0500 (Fri, 05 Nov 2004) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/modules/conf.pm

First cut at DNSSEC tools configuration file routines for perl scripts.

------------------------------------------------------------------------
r20 | tewok | 2004-11-05 14:40:59 -0500 (Fri, 05 Nov 2004) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/modules/keyrec.pm

First cut at DNSSEC tools keyrec file routines for perl scripts.

------------------------------------------------------------------------
r19 | tewok | 2004-11-05 14:38:13 -0500 (Fri, 05 Nov 2004) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/modules
   A /trunk/dnssec-tools/tools/modules/Makefile

Makefile for DNSSEC tools modules directory.

------------------------------------------------------------------------
r18 | hardaker | 2004-11-04 19:45:29 -0500 (Thu, 04 Nov 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/mapper

Add warnings of zone sigs are almost or are expired.  Added a legend if -L

------------------------------------------------------------------------
r17 | hardaker | 2004-11-04 19:43:44 -0500 (Thu, 04 Nov 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/Net-DNS-ZoneFile-Fast.patch

update to handle axfr transfered files with all data on a single line

------------------------------------------------------------------------
r16 | hardaker | 2004-10-28 00:24:59 -0400 (Thu, 28 Oct 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/mapper

more pretty colors

------------------------------------------------------------------------
r15 | hardaker | 2004-10-27 16:50:11 -0400 (Wed, 27 Oct 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/mapper/mapper

colors for security

------------------------------------------------------------------------
r14 | hardaker | 2004-10-22 19:57:38 -0400 (Fri, 22 Oct 2004) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/mapper/Net-DNS-ZoneFile-Fast.patch

Patch to Net::DNS::ZoneFile::Fast to make it parse dnssec RRs

------------------------------------------------------------------------
r13 | hardaker | 2004-10-22 19:51:59 -0400 (Fri, 22 Oct 2004) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/mapper
   A /trunk/dnssec-tools/tools/mapper/mapper

Added a script (GraphViz based) that will map a set of zone files into a graphical representation of a DNS hierarchy

------------------------------------------------------------------------
r12 | hardaker | 2004-10-21 18:55:52 -0400 (Thu, 21 Oct 2004) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools/linux-ifup-dyn-dns/README

initial description file

------------------------------------------------------------------------
r11 | hardaker | 2004-10-21 18:41:05 -0400 (Thu, 21 Oct 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/linux-ifup-dyn-dns/ifup-dyndns

handle updating AAAA records too

------------------------------------------------------------------------
r10 | hardaker | 2004-10-21 18:32:18 -0400 (Thu, 21 Oct 2004) | 2 lines
Changed paths:
   M /trunk/dnssec-tools/tools/linux-ifup-dyn-dns/ifup-dyndns

Updated to support updating multiple host names

------------------------------------------------------------------------
r9 | hardaker | 2004-10-21 17:41:23 -0400 (Thu, 21 Oct 2004) | 2 lines
Changed paths:
   A /trunk/dnssec-tools/tools
   A /trunk/dnssec-tools/tools/linux-ifup-dyn-dns
   A /trunk/dnssec-tools/tools/linux-ifup-dyn-dns/ifup-dyndns

A linux init script to register dynamic dns hosts

------------------------------------------------------------------------
r8 | hardaker | 2004-10-21 17:33:16 -0400 (Thu, 21 Oct 2004) | 2 lines
Changed paths:
   A /trunk/dnssec-tools
   A /trunk/dnssec-tools/COPYING
   A /trunk/dnssec-tools/README

initial pass

------------------------------------------------------------------------
