Ronan Pigott 414a9b8e5e resolved: validate authentic insecure delegation to CNAME ...

If the parent zone uses a non-opt-out method that provides authenticated
negative DS replies, we still can't expect signatures from the child
zone. sd-resolved was using the authenticated status of the DS reply to
require signatures for CNAMEs, even though it had already proved that no
signature exists.

Fixes: 47690634f1 ("resolved: don't request the SOA for every dns label")

2024-05-01 20:34:08 +02:00

..

dns_type-to-name.awk

…

dns-type.c

typo: transer -> transfer

2023-12-19 11:46:47 +09:00

dns-type.h

resolve: add several comments for DNS type table

2023-12-31 04:51:42 +09:00

fuzz-dns-packet.c

fuzz: unify logging setup

2023-10-19 10:05:20 +01:00

fuzz-dns-packet.options

…

fuzz-etc-hosts.c

fuzz: unify logging setup

2023-10-19 10:05:20 +01:00

fuzz-resource-record.c

fuzz: check that resource records are serialized successfully

2024-04-13 05:18:12 +09:00

generate-dns_type-gperf.py

…

generate-dns_type-list.sed

…

meson.build

gcrypt: dlopenify for libsystemd

2024-04-03 11:50:25 +01:00

org.freedesktop.resolve1.conf

…

org.freedesktop.resolve1.policy

…

org.freedesktop.resolve1.service

…

resolv.conf

…

resolvconf-compat.c

tree-wide: port various parsers over to read_stripped_line()

2023-10-17 14:36:54 +02:00

resolvconf-compat.h

…

resolvectl.c

resolvectl: expose new SD_RESOLVED_RELAX_SINGLE_LABEL flag in resolvectl

2024-03-05 15:29:04 +01:00

resolvectl.h

…

resolved-bus.c

resolved: tighten the rules a bit on valid DNS-SD service identifiers

2024-04-22 15:16:54 +02:00

resolved-bus.h

…

resolved-conf.c

resolved: support reloading configuration at runtime

2024-03-26 13:36:42 +00:00

resolved-conf.h

resolved: support reloading configuration at runtime

2024-03-26 13:36:42 +00:00

resolved-def.h

resolved: add new SD_RESOLVED_RELAX_SINGLE_LABEL resolver flag

2024-03-05 15:28:54 +01:00

resolved-dns-answer.c

siphash24: introduce siphash24_compress_typesafe() macro

2023-12-25 15:38:59 +09:00

resolved-dns-answer.h

resolve: tolerate merging a zero-ttl RR and a nonzero-ttl RR if not mDNS

2023-10-02 16:47:36 +02:00

resolved-dns-cache.c

resolved: don't cache NXDOMAIN for SUDN resolver.arpa

2024-03-07 23:01:08 +00:00

resolved-dns-cache.h

resolved: remove entry from cache when goodbye packet received

2024-03-05 19:00:03 +01:00

resolved-dns-dnssec.c

gcrypt: dlopenify for libsystemd

2024-04-03 11:50:25 +01:00

resolved-dns-dnssec.h

resolved: limit the number of signature validations in a transaction

2024-02-26 01:55:57 -07:00

resolved-dns-packet.c

resolved: properly decode NAPTR RRs

2024-03-05 15:46:31 +01:00

resolved-dns-packet.h

Merge pull request #30661 from rpigott/resolved-https-record

2024-01-17 16:20:35 +00:00

resolved-dns-query.c

resolved: wait to gc transactions if they might still give an answer

2024-03-18 11:10:11 +00:00

resolved-dns-query.h

resolve: several follow-ups for 9ca133e97a.

2024-01-11 02:10:11 +09:00

resolved-dns-question.c

…

resolved-dns-question.h

…

resolved-dns-rr.c

resolved: dns_name_equal() can fail, handle that reasonably

2024-04-10 16:58:34 +09:00

resolved-dns-rr.h

dnssd: don't advertise subtype PTRs to the browsing domain

2024-03-19 22:47:00 +00:00

resolved-dns-scope.c

dnssd: don't advertise subtype PTRs to the browsing domain

2024-03-19 22:47:00 +00:00

resolved-dns-scope.h

resolved: decrease mdns/llmnr priority for the reverse mapping domains

2024-03-06 18:57:36 +01:00

resolved-dns-search-domain.c

…

resolved-dns-search-domain.h

…

resolved-dns-server.c

resolved: support reloading configuration at runtime

2024-03-26 13:36:42 +00:00

resolved-dns-server.h

resolved: support reloading configuration at runtime

2024-03-26 13:36:42 +00:00

resolved-dns-stream.c

resolved: explicitly disconnect all left-over TCP connections when coming back from suspend

2024-03-02 18:05:01 +00:00

resolved-dns-stream.h

resolved: explicitly disconnect all left-over TCP connections when coming back from suspend

2024-03-02 18:05:01 +00:00

resolved-dns-stub.c

resolved: also reply NOTIMP when refusing a query based on RR type

2024-03-08 14:48:03 -07:00

resolved-dns-stub.h

…

resolved-dns-synthesize.c

resolved: don't cache NXDOMAIN for SUDN resolver.arpa

2024-03-07 23:01:08 +00:00

resolved-dns-synthesize.h

resolved: make resolved authoritative in resolveing our local host name

2024-03-05 15:31:32 +01:00

resolved-dns-transaction.c

resolved: validate authentic insecure delegation to CNAME

2024-05-01 20:34:08 +02:00

resolved-dns-transaction.h

resolved: wait to gc transactions if they might still give an answer

2024-03-18 11:10:11 +00:00

resolved-dns-trust-anchor.c

resolved: don't cache NXDOMAIN for SUDN resolver.arpa

2024-03-07 23:01:08 +00:00

resolved-dns-trust-anchor.h

…

resolved-dns-zone.c

tree-wide: use hashmap_isempty() and friends

2023-12-22 01:27:09 +09:00

resolved-dns-zone.h

…

resolved-dnssd-bus.c

resolved: rename DnssdService "name" field to "id"

2024-04-22 15:16:54 +02:00

resolved-dnssd-bus.h

…

resolved-dnssd-gperf.gperf

dnssd: support service subtypes

2024-03-18 13:16:48 +00:00

resolved-dnssd.c

resolved: rename DnssdService "name" field to "id"

2024-04-22 15:16:54 +02:00

resolved-dnssd.h

resolved: rename DnssdService "name" field to "id"

2024-04-22 15:16:54 +02:00

resolved-dnstls-gnutls.c

resolved: fix build failure with gnutls

2023-10-27 13:54:10 +01:00

resolved-dnstls-gnutls.h

…

resolved-dnstls-openssl.c

resolved-dnstls: remove deprecated openssl functions

2024-04-18 09:23:15 +02:00

resolved-dnstls-openssl.h

…

resolved-dnstls.h

…

resolved-etc-hosts.c

stat-util: add explicit helpers for checking if stat/statx is initialized

2024-03-12 10:25:48 +01:00

resolved-etc-hosts.h

…

resolved-gperf.gperf

…

resolved-link-bus.c

resolved: support reloading configuration at runtime

2024-03-26 13:36:42 +00:00

resolved-link-bus.h

…

resolved-link.c

resolved: support reloading configuration at runtime

2024-03-26 13:36:42 +00:00

resolved-link.h

…

resolved-llmnr.c

resolve: do not listen to IPv6 when disabled by sysctl

2024-01-03 04:03:30 +09:00

resolved-llmnr.h

…

resolved-manager.c

resolved: rename DnssdService "name" field to "id"

2024-04-22 15:16:54 +02:00

resolved-manager.h

resolve: export sendmsg_loop()

2024-01-11 02:10:32 +09:00

resolved-mdns.c

resolve: fix typo

2024-03-09 01:43:48 +09:00

resolved-mdns.h

…

resolved-resolv-conf.c

tree-wide: port various parsers over to read_stripped_line()

2023-10-17 14:36:54 +02:00

resolved-resolv-conf.h

…

resolved-socket-graveyard.c

…

resolved-socket-graveyard.h

…

resolved-util.c

resolved-util: NUL-terminate host label

2023-12-17 16:56:43 +09:00

resolved-util.h

…

resolved-varlink.c

resolved: return ExpectedMore error if we require "more" varlink flag on method call

2024-04-04 02:43:20 +09:00

resolved-varlink.h

…

resolved.c

signal-util: imply sentinel -1 in sigprocmask_many() + sigset_add_many() args list

2024-02-23 09:35:12 -08:00

resolved.conf.in

…

RFCs

…

test-dns-packet.c

test: always call test_setup_logging()

2023-11-18 03:04:27 +09:00

test-dnssec-complex.c

test: always call test_setup_logging()

2023-11-18 03:04:27 +09:00

test-dnssec.c

…

test-resolve-tables.c

test: always call test_setup_logging()

2023-11-18 03:04:27 +09:00

test-resolved-dummy-server.c

test-resolved-dummy-server: several modernization

2024-01-11 02:13:32 +09:00

test-resolved-etc-hosts.c

…

test-resolved-packet.c

resolved: properly decode NAPTR RRs

2024-03-05 15:46:31 +01:00

test-resolved-stream.c

test: fix test-resolved-stream unit test failure

2024-03-04 16:28:10 +00:00