{"push_id":777091884,"size":14,"distinct_size":5,"ref":"refs/heads/develop","head":"de7e7685f8057bef0441c8661212d9baa57d38bd","before":"d4eb06143e55bd729224de8d8e0801798bae4be8","commits":[{"sha":"7b450e1904e49a7abb2653d0cbaf1a949ab6cad7","author":{"email":"e3683ff1c668a792eb012eee1ce32a08b6eb6861@nlnetlabs.nl","name":"Hoda Rohani"},"message":"adding leap_to command and correcting ttl for ds records","distinct":true,"url":"https://api.github.com/repos/halderen/opendnssec/commits/7b450e1904e49a7abb2653d0cbaf1a949ab6cad7"},{"sha":"472307dd298760510238faa78761ef8a3bceff35","author":{"email":"106ab4e1e856ec599c168e017eaa76685e8012e3@nlnetlabs.nl","name":"halderen"},"message":"- Bulk merge of signer 1.4 branch with current development.\n  The development branch had falled into disrepair because updates\n  to 1.4 were not performed on the 2.0 branch, however there were also\n  fixes and developments on the 2.0 branch.\n  Applied to following changes (amongst others):\n  - Signer hits assertion when receiving a short reply.\n  - ARM chars are unsigned by default, therefore c==EOF will always yield false.\n  - Fix for [Opendnssec-user] Zone stuck, not updating.\n  - Processed static code analysis results\n  - code review Jerry: tbd not used in string\n  - make sure time on disk increases\n  - changes due to retransfer with xfr\n  - try again, fix build, and other commits with less clear commit messages.\n  Not merged:\n  - Merge branch 'rfc5011', and other changes due to 5011\n  - differences in src/signer/denial.c:denial_nsecify() the origin of these\n    changes are not clear.\n  Kept changes where 1.4 branch conflicted with 2.0 branch:\n  - MaxTTL implementation","distinct":false,"url":"https://api.github.com/repos/halderen/opendnssec/commits/472307dd298760510238faa78761ef8a3bceff35"},{"sha":"bcf7e1c82a414c6ea7cd5e7d0d92561a26620539","author":{"email":"106ab4e1e856ec599c168e017eaa76685e8012e3@nlnetlabs.nl","name":"halderen"},"message":"- modify for changes in output format later on the 1.4 branch","distinct":false,"url":"https://api.github.com/repos/halderen/opendnssec/commits/bcf7e1c82a414c6ea7cd5e7d0d92561a26620539"},{"sha":"8da0ac62ba24c8d80d6c21bb466cef39418b323e","author":{"email":"106ab4e1e856ec599c168e017eaa76685e8012e3@nlnetlabs.nl","name":"halderen"},"message":"- Remove the test part as was done in the 1.4 branch, however this\n  may actually not be correct that is was removed.","distinct":false,"url":"https://api.github.com/repos/halderen/opendnssec/commits/8da0ac62ba24c8d80d6c21bb466cef39418b323e"},{"sha":"27d4932d84664f0f85fc08ae246a1b309e55899b","author":{"email":"106ab4e1e856ec599c168e017eaa76685e8012e3@nlnetlabs.nl","name":"halderen"},"message":"- OPENDNSSEC-642: remove test part as per previous commit","distinct":false,"url":"https://api.github.com/repos/halderen/opendnssec/commits/27d4932d84664f0f85fc08ae246a1b309e55899b"},{"sha":"62c0b995348bc889365f41cdd8f990ce244df84b","author":{"email":"106ab4e1e856ec599c168e017eaa76685e8012e3@nlnetlabs.nl","name":"halderen"},"message":"It is correct that the test part was removed, the test was in error.\nThe point is that for Opt-Out policies, the insecure delegations\nshould also get NSEC3 records.\nThe test is still incorrect by checking the non-presence of the NSEC3\nrecords before adding the DS records, this because in fact the names\nused in the first zone file are completely different, so their hashes\nwould be also.  This makes the initial test useless.","distinct":false,"url":"https://api.github.com/repos/halderen/opendnssec/commits/62c0b995348bc889365f41cdd8f990ce244df84b"},{"sha":"137a0093d99c93b8a200af7b19e8d9d3e3fe0a75","author":{"email":"106ab4e1e856ec599c168e017eaa76685e8012e3@nlnetlabs.nl","name":"halderen"},"message":"OPENDNSSEC-642, OPENDNSSEC-689:\n- certain test could fail when /not/ taking the number of zones\n  into account for computing the number of keys.  This is caused\n  by having (unused) policies with a lifetime that would indicate\n  to generate a lot of keys.\n  It used to be the case that that when during startup you had no\n  zones using it, because of the multiplication by the number of\n  zones, it would not actually generate keys.  When using the policy\n  (when used) it would need an additional sleep which was incorprorated\n  in the tests.\n  Even through the multiplication by the number of zones is\n  useless, it has as side effect that the very slow start was not\n  happening.","distinct":false,"url":"https://api.github.com/repos/halderen/opendnssec/commits/137a0093d99c93b8a200af7b19e8d9d3e3fe0a75"},{"sha":"cc62da55ed97e3f801266b2850729c883a72ade4","author":{"email":"106ab4e1e856ec599c168e017eaa76685e8012e3@nlnetlabs.nl","name":"halderen"},"message":"- salt length of 0 not accepted\n- flattend directory structure, removed extra files to simplify test\n- introduced same pattern for opt-out NSEC3 policy.\n- renamed ods-ksmutil to enforcer and other misc changes\n- added tests that insecure deligations indeed have no NSEC3 record\n  generated for them.\n- taken the modification from OPENDNSSEC-549 into account (source and\n  test change):\n  - This is a workaround for servers that do not implement errata 3441.\n    The errata clarifies that empty non-terminals indeed need no\n    covering NSEC3 records.  However some servers still do not implement\n    this.  These servers would not serve the right next-closer NSEC3\n    proof to validating resolvers, which would lead to errors.  To\n    solve this, it was decided that in the meantime the signer that would\n    deliver the signed zone file to the server that is in actual\n    error, would be able to overcome this.  If it would generate NSEC3\n    records for these empty non-terminals with only insecure delegations\n    below them.  This is not needed, it is only needed when\n    there are secure delegations below a empty non-terminal, which was\n    the test originally about.  It is however allowed.\n    This makes the test less valuable, as now the NSEC3 records for\n    empty non terminals are not added when a DS record is added, because\n    they will always be there.","distinct":false,"url":"https://api.github.com/repos/halderen/opendnssec/commits/cc62da55ed97e3f801266b2850729c883a72ade4"},{"sha":"5d2560bf8748f443afe99409fa4b597b80323746","author":{"email":"106ab4e1e856ec599c168e017eaa76685e8012e3@nlnetlabs.nl","name":"halderen"},"message":"OPENDNSSEC-642:\n- not zones are ready after 90 seconds.","distinct":false,"url":"https://api.github.com/repos/halderen/opendnssec/commits/5d2560bf8748f443afe99409fa4b597b80323746"},{"sha":"d6c186c647b03c9df585f05fa40b15933d1b5948","author":{"email":"aaf6fd97230863eae371b8b6c4c40693d5d84b30@nlnetlabs.nl","name":"Yuri Schaeffer"},"message":"Merge pull request #171 from hodarh/submit2\n\nadding leap_to command and correcting ttl for ds records","distinct":true,"url":"https://api.github.com/repos/halderen/opendnssec/commits/d6c186c647b03c9df585f05fa40b15933d1b5948"},{"sha":"69fac52d1d0fdef4a1e3d32e5824f508c283bf3a","author":{"email":"106ab4e1e856ec599c168e017eaa76685e8012e3@nlnetlabs.nl","name":"halderen"},"message":"OPENDNSSEC-642:\n- sometimes it takes even longer to generate all keys;\n- even so long that some policies have progressed to the\n  next state, so allow for those key states as well;\n- a proper shutdown of the enforcer was missing.","distinct":false,"url":"https://api.github.com/repos/halderen/opendnssec/commits/69fac52d1d0fdef4a1e3d32e5824f508c283bf3a"},{"sha":"6d1ffcbb30418dda363218447852e3fbc8772cbf","author":{"email":"106ab4e1e856ec599c168e017eaa76685e8012e3@nlnetlabs.nl","name":"halderen"},"message":"Merge remote-tracking branch 'upstream/develop' into develop","distinct":true,"url":"https://api.github.com/repos/halderen/opendnssec/commits/6d1ffcbb30418dda363218447852e3fbc8772cbf"},{"sha":"13ce2f912d7da10fe0109a0a18b59568a7593182","author":{"email":"106ab4e1e856ec599c168e017eaa76685e8012e3@nlnetlabs.nl","name":"halderen"},"message":"Merge branch 'OPENDNSSEC-642' into develop","distinct":true,"url":"https://api.github.com/repos/halderen/opendnssec/commits/13ce2f912d7da10fe0109a0a18b59568a7593182"},{"sha":"de7e7685f8057bef0441c8661212d9baa57d38bd","author":{"email":"106ab4e1e856ec599c168e017eaa76685e8012e3@nlnetlabs.nl","name":"halderen"},"message":"Merge branch 'syncsigner14' into develop","distinct":true,"url":"https://api.github.com/repos/halderen/opendnssec/commits/de7e7685f8057bef0441c8661212d9baa57d38bd"}]}