Peter Müller 438da7e0a0 test if nameservers with DNSSEC support return "ad"-flagged data ...

DNSSEC-validating nameservers return an "ad" (Authenticated Data)
flag in the DNS response header. This can be used as a negative
indicator for DNSSEC validation: In case a nameserver does not
return the flag, but failes to look up a domain with an invalid
signature, it does not support DNSSEC validation.

This makes it easier to detect nameservers which do not fully
comply to the RFCs or try to tamper DNS queries.

See bug #11595 (https://bugzilla.ipfire.org/show_bug.cgi?id=11595) for further details.

The second version of this patch avoids unnecessary usage of
grep. Thanks to Michael Tremer for the hint.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

2018-03-05 15:19:55 +00:00

config

vpnmain.cgi: Fix reading common names from certificates

2018-03-01 19:59:14 +00:00

doc

Update translations

2018-01-09 14:14:37 +00:00

html

vpnmain.cgi: Fix reading common names from certificates

2018-03-01 19:59:14 +00:00

langs

Fix capitalisation of "Root Certificate"

2018-02-06 15:45:32 +00:00

lfs

Tor: update to 0.3.2.10

2018-03-05 15:12:28 +00:00

src

test if nameservers with DNSSEC support return "ad"-flagged data

2018-03-05 15:19:55 +00:00

tools

English is the reference language

2017-11-29 12:15:41 +00:00

.gitignore

Buildsystem: generate image md5sums.

2011-01-01 11:40:19 +01:00

.mailmap

Add .mailmap.

2010-01-22 11:37:55 +01:00

make.sh

Merge branch 'openssl-11' into next

2018-02-21 12:21:10 +00:00

Description

No description provided

101 MiB

Languages

Perl 70.4%

Shell 23%

C 4%

Python 0.6%

Makefile 0.5%

Other 1.4%