WEBDIENSTE/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2026-09-11 12:27:43 +02:00
Code Issues Packages Projects Releases Wiki Activity
6,627 Commits 29 Branches 215 Tags
65852bcbc49d95f54b0c8a7c6790bc11f97b2e16
Commit Graph
6627 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Tom Carpay 65852bcbc4 Merge branch 'features/rfc8914-ede' of github.com:NLnetLabs/unbound into features/rfc8914-ede 2021-09-20 09:35:30 +00:00
TCY16 4d15603a8c add routine to do EDE on ACL blocked messages 2021-09-20 11:35:00 +02:00
Tom Carpay 5617de6867 Answer LDNS_EDE_RRSIGS_MISSING for normal answers with missing signatures 2021-09-15 10:15:35 +00:00
TCY16 3576033b62 add possible EDE spots 2021-09-15 11:17:04 +02:00
Tom Carpay a664e8cec4 First step towards specific EDE DNSSEC errors 2021-09-14 07:45:51 +00:00
TCY16 2360120562 add mesh bogus test, possible locations for more EDE and remove superfluous todo comments 2021-09-13 13:25:17 +02:00
TCY16 9df75a842b add DNSSEC indeterminate EDE and DNAME expansion test 2021-09-08 16:38:33 +02:00
Tom Carpay 7079f0b5aa add ede to always_refuse and always_null 2021-09-06 13:13:49 +00:00
tcarpay 33445be8df add setup of RPZ and full tests of earlier implemented EDEs 2021-08-31 15:22:44 +02:00
tcarpay fba1c302ac add localzones test 2021-08-23 14:26:32 +02:00
tcarpay ec4cf69eb7 set up for tpkg test 2021-08-23 14:00:04 +02:00
tcarpay d9a947f267 Merge branch 'master' into features/rfc8914-ede 2021-08-20 16:28:27 +02:00
W.C.A. Wijngaards 2315fc9d9b Changelog entry for #531 
- Fix #531: Fix: passed to proc after free.
 2021-08-20 15:18:39 +02:00
Wouter WijngaardsandGitHub 1ae42b94b3 Merge pull request #531 from Shchelk/ptpaf 
Fix: passed to proc after free
 2021-08-20 15:15:41 +02:00
Shchelkunov Artem ba7598f559 Fix: passed to proc after free 
Found by static analyzer svace
Static analyzer message: Pointer 'dp' is passed to a function at
iter_hints.c:401 after the referenced memory was deallocated at
iter_hints.c:174 by passing as 3rd parameter to function 'hints_insert'
at iter_hints.c:398.

on-behalf-of: @ideco-team <github@ideco.ru>
 2021-08-20 18:06:51 +05:00
W.C.A. Wijngaards 54b7554b5a Changelog note for #529 and nicer layout. 
- Fix #529: Fix: log_assert does nothing if UNBOUND_DEBUG is
  undefined.
 2021-08-20 14:32:13 +02:00
Wouter WijngaardsandGitHub a4d1224d92 Merge pull request #529 from Shchelk/next 
Fix: log_assert does nothing if UNBOUND_DEBUG is undefined
 2021-08-20 14:29:18 +02:00
Shchelkunov Artem 4ea9651624 Fix: log_assert does nothing if UNBOUND_DEBUG is undefined 
Found by static analyzer svace
Static analyzer message: Integer value 'len' obtained from untrusted
source at tube.c:374 by passing as 2nd parameter to function 'read'
at tube.c:340 without checking its higher bound is used as a loop bound
at tube.c:374.


on-behalf-of: @ideco-team <github@ideco.ru>
 2021-08-20 17:16:39 +05:00
Tom Carpay a98659791e EDE Blocked with local-zone refused answers 2021-08-19 14:31:03 +00:00
Tom Carpay 5fff0f7e30 Fix dont echo edns0 option list ... 
when refusing to answer authoritatively.
Also remove TODO comments that were already done
 2021-08-19 14:28:26 +00:00
Tom Carpay 935634dcae Revert "add local anwser blocked" 
This reverts commit b3f60db184.
 2021-08-19 14:21:10 +00:00
tcarpay b3f60db184 add local anwser blocked 2021-08-19 14:01:14 +02:00
Tom Carpay a9e6f6bc23 add variable bogus reason 2021-08-17 14:10:48 +00:00
W.C.A. Wijngaards 51f5b3ab44 - Fix sed script in ssldir split handling. 2021-08-17 13:15:20 +02:00
W.C.A. Wijngaards d88f554503 - Fix #527: not sending quad9 cert to syslog (and may be more). 2021-08-17 13:03:33 +02:00
W.C.A. Wijngaards cc6d428cb7 - Fix that --with-ssl can use "/usr/include/openssl11" to pass the 
location of a different openssl version.
 2021-08-17 10:32:12 +02:00
W.C.A. Wijngaards d0cc58be3d - Fix to support harden-algo-downgrade for ZONEMD dnssec checks. 2021-08-16 16:14:32 +02:00
Tom Carpay 6b5f314a3a Show reason when returning EDE_DNSSEC_BOGUS 2021-08-16 13:36:45 +00:00
Tom Carpay eac4eb3a9e Return EDE_DNSSEC_BOGUS when returning bogus answers 2021-08-16 12:46:24 +00:00
George Thessalonikefs 2a72845576 Changelog note for #528: 
- Merge PR #528 from fobser: Make sldns_str2wire_svcparam_buf() static.
 2021-08-16 14:15:57 +02:00
gthessandGitHub 45542053fe Merge pull request #528 from fobser/svcparam_static 
Make sldns_str2wire_svcparam_buf() static.
 2021-08-16 14:12:50 +02:00
Tom Carpay 0703a38243 Fix: use EDE codes with EDNS_OPT_APPEND_EDE 
+ complete EDE codes
 2021-08-16 09:59:13 +00:00
Florian Obser 25b7eb3c7c Make sldns_str2wire_svcparam_buf() static. 
The function is only used in this translation unit and prevents a "no
previous prototype" warning.
 2021-08-16 11:27:40 +02:00
W.C.A. Wijngaards 4034c009bb - zonemd, fix order of bogus printout string manipulation. 2021-08-13 15:24:53 +02:00
W.C.A. Wijngaards c8c2dfff22 - Fix zonemd verification of key that is not in DNS but in the zone 
and needs a chain of trust.
 2021-08-13 14:43:11 +02:00
tcarpay 4049885da2 add locations for EDE errors 2021-08-13 12:01:28 +02:00
W.C.A. Wijngaards ad45e9b89e - Fix for #431: Squelch permission denied errors for udp connect, 
and udp send, they are visible at higher verbosity settings.
 2021-08-13 09:27:58 +02:00
W.C.A. Wijngaards de31bcdf2e - Support using system-wide crypto policies. 2021-08-13 09:21:47 +02:00
George Thessalonikefs a158f365b9 - For #514: generate configure. 2021-08-12 21:46:30 +02:00
George Thessalonikefs 3b8b2e0dc7 Changelog note for #514: 
- Merge PR #514, from ziollek: Docker environment for run tests.
 2021-08-12 21:43:18 +02:00
gthessandGitHub 3829faf679 Merge pull request #514 from ziollek/docker_for_run_test 
Docker environment for run tests
 2021-08-12 21:30:36 +02:00
W.C.A. Wijngaards fdae4cdbbb - Fix to print error from unbound-anchor for writing to the key 
file, also when not verbose.
 2021-08-12 16:06:02 +02:00
W.C.A. Wijngaards b13bcab089 - For #519: fix comments for doxygen. 2021-08-12 15:14:22 +02:00
W.C.A. Wijngaards 2f828ec720 - For #519: yacc and lex. And fix python bindings, and test program 
unbound-dnstap-socket.
 2021-08-12 15:12:55 +02:00
W.C.A. Wijngaards 6bee3e77fc Changelog note for #519 and example.conf edit 
- Merge #519: Support for selective enabling tcp-upstream for
  stub/forward zones.
- For #519: note stub-tcp-upstream and forward-tcp-upstream in
  the example configuration file.
 2021-08-12 15:05:51 +02:00
Wouter WijngaardsandGitHub 0ace659fe2 Merge pull request #519 from ziollek/tcp_upstream_option 
Support for selective enabling tcp-upstream for stub/forward zones
 2021-08-12 15:03:57 +02:00
W.C.A. Wijngaards 07f70d0745 Changelog note for #523 
- Merge #523: fix: free() call more than once with the same pointer.
 2021-08-12 13:45:18 +02:00
Wouter WijngaardsandGitHub 79df099f4c Merge pull request #523 from Shchelk/bugfix 
fix: free() call more than once with the same pointer
 2021-08-12 13:45:00 +02:00
W.C.A. Wijngaards 20febc2179 Changelog note for #521 
- Merge #521: Update mini_event.c.
 2021-08-12 13:24:15 +02:00
Wouter WijngaardsandGitHub 6780a0844d Merge pull request #521 from liheng562653799/master 
Update mini_event.c
 2021-08-12 13:24:03 +02:00