Mirrors/coredns
1
0
Fork 0
mirror of https://github.com/coredns/coredns.git synced 2026-08-27 15:17:06 -04:00
Code Issues Packages Projects Releases Wiki Activity
5,049 Commits 14 Branches 85 Tags
789b8d1665be61ae24e9753bc9e22d5272b9a53a
Commit Graph

5 Commits

Author SHA1 Message Date
houyuwushang
789b8d1665 plugin/tsig: expose validated TSIG key identity (#8471) 
Store the normalized key name in the request context only after successful TSIG verification. This lets downstream plugins distinguish unsigned requests from authenticated requests and authorize by key without relying on the stripped TSIG RR or exposing secret material.

Signed-off-by: houyuwushang <liuluoqianqiu@outlook.com>
 2026-08-26 14:13:48 -07:00
Seena Fallah
471d62926d plugin/tsig: add require_opcode directive for opcode-based TSIG (#7828) 
Extend the tsig plugin to require TSIG signatures based on DNS opcodes,
similar to the existing qtype-based requirement.

The new require_opcode directive accepts opcode names (QUERY, IQUERY,
STATUS, NOTIFY, UPDATE) or the special values "all" and "none".

This is useful for requiring TSIG on dynamic update (UPDATE) or zone
transfer notification (NOTIFY) requests while allowing unsigned queries.

Example:
```
  tsig {
    secret key. NoTCJU+DMqFWywaPyxSijrDEA/eC3nK0xi3AMEZuPVk=
    require_opcode UPDATE NOTIFY
  }
```

Signed-off-by: Seena Fallah <seenafallah@gmail.com>
 2026-03-27 21:05:49 +02:00
Chris O'Haver
8737ad49b3 plugin/tsig: Document unimplemented secondary tsig transfers (#5605) 
document unimplemented secondary tsig; clarify plugin description
 2022-09-07 11:39:31 -04:00
coredns[bot]
390e88637e auto remove trailing whitespaces 
Signed-off-by: coredns[bot] <bot@bot.coredns.io>
 2022-06-28 10:30:12 +00:00
Chris O'Haver
68e141eff2 plugin/tsig: new plugin TSIG (#4957) 
* expose tsig secrets via dnsserver.Config
* add tsig plugin

Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
 2022-06-27 15:48:34 -04:00