Code

feat: DNSSEC Validation#470

Code

Merged

zakird merged 72 commits intomainzmap/zdns:mainfrom feat/basic-dnssec-validationzmap/zdns:feat/basic-dnssec-validationCopy head branch name to clipboardDec 18, 2024

+1,249-158

Commits

Commits on Nov 1, 2024

• refactor: return raw dns response from auxiliary functions

  developStorm

  committed
  5bb6d81

  Copy full SHA for 5bb6d81

• feat: basic, same-level DNSSEC validation

  developStorm

  committed
  5070760

  Copy full SHA for 5070760

• fix: newLayer should not be updated if extractAuthority fails

  developStorm

  committed
  2e432e7

  Copy full SHA for 2e432e7

• refactor: extend trace, fix depth for couple places

  developStorm

  committed
  b1f0b6b

  Copy full SHA for b1f0b6b

• refactor: more comprehensive validation of DNSKEY/RRSIG

  Show description for f45eab2
  developStorm

  committed
  f45eab2

  Copy full SHA for f45eab2

• patch: disregard RRSIG in authorities

  developStorm

  committed
  f276da1

  Copy full SHA for f276da1

• fix: remove depth parameter in lookup function

  Show description for bf9c009
  developStorm

  committed
  bf9c009

  Copy full SHA for bf9c009

• feat: implement DS verification

  developStorm

  committed
  38b23f6

  Copy full SHA for 38b23f6

• feat: cache DS in referrals

  developStorm

  committed
  a922e1c

  Copy full SHA for a922e1c

• feat: validate dnssec for referrals

  developStorm

  committed
  2b69182

  Copy full SHA for 2b69182

• build(ci): bump to go1.21

  developStorm

  committed
  ca5a2b5

  Copy full SHA for ca5a2b5

• fix: answer section is always validated

  developStorm

  committed
  4d62421

  Copy full SHA for 4d62421

Commits on Nov 12, 2024

• fix: resolve linter issues

  developStorm

  committed
  856f34f

  Copy full SHA for 856f34f

• Merge branch 'main' into feat/basic-dnssec-validation

  developStorm

  committed
  97d20e5

  Copy full SHA for 97d20e5

Commits on Nov 13, 2024

• fix: resolve linter issues

  developStorm

  committed
  b73a77e

  Copy full SHA for b73a77e

• refactor: store current retry in resolver struct

  developStorm

  committed
  148eb28

  Copy full SHA for 148eb28

Commits on Nov 16, 2024

• patch: don't modify original res

  developStorm

  committed
  7926796

  Copy full SHA for 7926796

• docs: rrset validation failure

  developStorm

  committed
  a11ef2f

  Copy full SHA for a11ef2f

• build(deps): bump root anchors

  developStorm

  committed
  2af2290

  Copy full SHA for 2af2290

• fix: add validity period check for RRSIG

  developStorm

  committed
  67f28a4

  Copy full SHA for 67f28a4

Commits on Nov 17, 2024

• feat: add dnssec result types

  developStorm

  committed
  cb6dde4

  Copy full SHA for cb6dde4

• docs: clarify comments for retries and retriesRemaining in Resolver

  developStorm

  committed
  3561c36

  Copy full SHA for 3561c36

• feat: dnssec result field

  developStorm

  committed
  12d8bda

  Copy full SHA for 12d8bda

• refactor: simplify param list with validator struct

  developStorm

  committed
  1c8d186

  Copy full SHA for 1c8d186

• refactor: extended DNSSEC result handling

  developStorm

  committed
  cf2a665

  Copy full SHA for cf2a665

• feat: add JSON tags to DNSSEC types for improved serialization

  developStorm

  committed
  d508b85

  Copy full SHA for d508b85

Commits on Nov 18, 2024

• refactor: DNSSEC functions now does not stop resolution

  developStorm

  committed
  ea51f64

  Copy full SHA for ea51f64

• fix: regression in authority caching

  developStorm

  committed
  21ab2f7

  Copy full SHA for 21ab2f7

• feat: add DNSSEC validation as CLI option

  developStorm

  committed
  3126130

  Copy full SHA for 3126130

• feat: implement circular query detection

  developStorm

  committed
  c0fb013

  Copy full SHA for c0fb013

• chore: suppress some lint warnings

  developStorm

  committed
  8c258a4

  Copy full SHA for 8c258a4

• fix: handle DNSSEC insecure and bogus statuses

  developStorm

  committed
  f2a9dad

  Copy full SHA for f2a9dad

• test: add DNSSEC integration tests

  developStorm

  committed
  2b074a2

  Copy full SHA for 2b074a2

• fix: RRset should be identified by all of name, class and type

  Show description for 6b8174b
  developStorm

  committed
  6b8174b

  Copy full SHA for 6b8174b

• fix: dedup ds/dnskey

  developStorm

  committed
  b213bd8

  Copy full SHA for b213bd8

• docs: function comments for dnssec

  developStorm

  committed
  a69785b

  Copy full SHA for a69785b

• fix: shortcut Insecure if entire answer is unsigned

  developStorm

  committed
  211b9f1

  Copy full SHA for 211b9f1

• feat: add dnssec output fields

  developStorm

  committed
  d46c8ce

  Copy full SHA for d46c8ce

• Revert "test: add DNSSEC integration tests"

  Show description for 2baa4a4
  developStorm

  committed
  2baa4a4

  Copy full SHA for 2baa4a4

• test: add DNSSEC integration tests

  developStorm

  committed
  6721055

  Copy full SHA for 6721055

Commits on Nov 19, 2024

• fix: rrsig error handling and DS validation on DNSKEY response

  developStorm

  committed
  0e0b72c

  Copy full SHA for 0e0b72c

• fix: KSK is a lie :(

  developStorm

  committed
  3d7db6f

  Copy full SHA for 3d7db6f

• chore: error logging

  developStorm

  committed
  769ec0b

  Copy full SHA for 769ec0b

• docs: comments

  developStorm

  committed
  6deec0b

  Copy full SHA for 6deec0b

• fix: skip validation for some sections if answer is authoritative

  developStorm

  committed
  f696461

  Copy full SHA for f696461

Commits on Nov 20, 2024

• feat: lazy query A/AAAA of NSes when iterating on authorities

  developStorm

  committed
  a9074ce

  Copy full SHA for a9074ce

• fix: should restore the previous dnssec setting

  developStorm

  committed
  a7962e5

  Copy full SHA for a7962e5

• docs: add RFC references

  developStorm

  committed
  310056a

  Copy full SHA for 310056a

Commits on Nov 24, 2024

• Merge branch 'main' into feat/basic-dnssec-validation

  zakird

  authored
  521263c

  Copy full SHA for 521263c

Commits on Nov 25, 2024

• docs: add one rfc reference

  developStorm

  committed
  4e56d4c

  Copy full SHA for 4e56d4c

• Merge branch 'main' into feat/basic-dnssec-validation

  developStorm

  authored
  947fd5b

  Copy full SHA for 947fd5b

Commits on Dec 9, 2024

• refactor: additionals -> additional

  developStorm

  committed
  c5a7996

  Copy full SHA for c5a7996

• refactor: passing on validation result from front of the chain

  developStorm

  committed
  666544e

  Copy full SHA for 666544e

• Merge branch 'main' into feat/basic-dnssec-validation

  developStorm

  authored
  a8fb551

  Copy full SHA for a8fb551

Commits on Dec 10, 2024

• refactor: miscellaneous bits

  developStorm

  committed
  52af38a

  Copy full SHA for 52af38a

Commits on Dec 14, 2024

• fix: NSEC3 type definition

  developStorm

  committed
  5a7ce49

  Copy full SHA for 5a7ce49

• feat: NSEC3 validation for DS records

  developStorm

  committed
  ea40f42

  Copy full SHA for ea40f42

• style: fix linter issues

  developStorm

  committed
  4b7f63b

  Copy full SHA for 4b7f63b

• test: add integration test for dnssec with cnames

  developStorm

  committed
  2a6b6b1

  Copy full SHA for 2a6b6b1

• fix: bogus case classification

  developStorm

  committed
  84a7719

  Copy full SHA for 84a7719

• patch: comment

  developStorm

  committed
  67f9eeb

  Copy full SHA for 67f9eeb

• feat: support NSEC for DS check

  developStorm

  committed
  b960441

  Copy full SHA for b960441

• fix: always cache under lower-cased authname

  developStorm

  committed
  c77f9d0

  Copy full SHA for c77f9d0

• fix: DS records should always be cached as secure

  developStorm

  committed
  026347f

  Copy full SHA for 026347f

Commits on Dec 15, 2024

• fix: support DS/NSEC in authority section

  developStorm

  committed
  5d2b3f7

  Copy full SHA for 5d2b3f7

• chore: logging for a specific nsec3 case

  Show description for 9f7d891
  developStorm

  committed
  9f7d891

  Copy full SHA for 9f7d891

Commits on Dec 18, 2024

• revert change to go 1.21.1

  phillip-stephens

  committed
  602ff82

  Copy full SHA for 602ff82

• downgrade required go version to 1.20

  phillip-stephens

  committed
  08ae4c5

  Copy full SHA for 08ae4c5

• Merge branch 'main' into feat/basic-dnssec-validation

  phillip-stephens

  committed
  c0a07ad

  Copy full SHA for c0a07ad

• fix lint error

  phillip-stephens

  committed
  488aa8a

  Copy full SHA for 488aa8a

• toolchain directive not available in go 1.20

  phillip-stephens

  committed
  78751aa

  Copy full SHA for 78751aa

• upgrade -> go 1.21

  phillip-stephens

  committed
  2991a13

  Copy full SHA for 2991a13