W.C.A. Wijngaards
bb4ddab77a
Merge branch 'master' into xfr-tsig
2025-06-17 16:55:18 +02:00
W.C.A. Wijngaards
69354298fc
- xfr-tsig, tsig_create and tsig_delete.
2025-06-17 16:54:52 +02:00
Yorgos Thessalonikefs
9201c75013
- Fix for consistent use of local zone CNAME alias for configured auth
...
zones. Now it also applies to downstream configured auth zones.
2025-06-17 15:03:29 +02:00
W.C.A. Wijngaards
bbcf5d122a
Merge branch 'master' into xfr-tsig
2025-06-16 17:00:12 +02:00
W.C.A. Wijngaards
497161f72f
- xfr-tsig, tsig_verify return failure comment improved.
2025-06-16 16:59:53 +02:00
W.C.A. Wijngaards
f066d6d453
- Fix #1295 : Windows 32-bit binaries download seems to be missing dll
...
dependency.
2025-06-16 14:26:54 +02:00
W.C.A. Wijngaards
a04bd5da29
- Fix to check control-interface addresses in unbound-checkconf.
2025-06-16 12:43:31 +02:00
W.C.A. Wijngaards
31e8118b76
- xfr-tsig, man page and example config.
2025-06-13 16:32:36 +02:00
W.C.A. Wijngaards
8811bd4844
- xfr-tsig, tsig-key, with name, algorithm and secret options.
2025-06-13 12:12:49 +02:00
W.C.A. Wijngaards
0f02479dea
- xfr-tsig, fix algorithm lookup.
2025-06-13 10:17:47 +02:00
W.C.A. Wijngaards
364edccebc
- xfr-tsig, algorithm table.
2025-06-13 10:15:41 +02:00
W.C.A. Wijngaards
3d9242b3d3
- xfr-tsig, key table.
2025-06-12 16:05:10 +02:00
W.C.A. Wijngaards
3f378c962f
- xfr-tsig, check rdata length in tsig verify.
2025-06-12 14:34:56 +02:00
W.C.A. Wijngaards
4ca37bcadf
Merge branch 'master' into xfr-tsig
2025-06-12 12:17:13 +02:00
W.C.A. Wijngaards
e4cf7aeccf
- Fix header return value description for skip_pkt_rrs and
...
parse_edns_from_query_pkt.
2025-06-12 12:17:01 +02:00
W.C.A. Wijngaards
19492da154
- xfr-tsig, check buffer remaining in tsig verify.
2025-06-12 11:50:11 +02:00
W.C.A. Wijngaards
182e580fe2
- xfr-tsig, fix warning in compile of declaration.
2025-06-12 09:57:23 +02:00
W.C.A. Wijngaards
eefb417c09
- xfr-tsig, const for dname compare and fix warnings in compile.
2025-06-12 09:53:56 +02:00
W.C.A. Wijngaards
4fd0d84e66
- xfr-tsig, update header comment.
2025-06-12 09:49:20 +02:00
W.C.A. Wijngaards
ea0973002f
- xfr-tsig, constant time memcmp is used.
2025-06-12 09:34:07 +02:00
W.C.A. Wijngaards
8fcc4c98b6
Merge branch 'master' into xfr-tsig
2025-06-12 09:29:28 +02:00
W.C.A. Wijngaards
7edc1e0fc4
- xfr-tsig, import the tsig verify code from hackathon/poisonlicious branch.
2025-06-12 09:25:54 +02:00
W.C.A. Wijngaards
a8aa1dbbe1
- Fix conditional expressions with parentheses for bitwise and.
2025-06-11 16:42:43 +02:00
W.C.A. Wijngaards
9f29292839
- Fix bitwise operators in conditional expressions with parentheses.
2025-06-11 15:46:31 +02:00
W.C.A. Wijngaards
1cc1e0b89e
- iana portlist updated.
2025-06-05 11:11:56 +02:00
W.C.A. Wijngaards
565bce670c
- Fix comment for the dname_remove_label_limit_len function.
2025-06-05 11:11:32 +02:00
W.C.A. Wijngaards
c0563f43b0
- Fix unbound-anchor certificate file read for line ends and end of
...
file.
2025-06-05 11:09:53 +02:00
Yorgos Thessalonikefs
81f3de4da2
- Small man page corrections for the 'disable-dnssec-lame-check' option.
2025-06-03 14:12:27 +02:00
W.C.A. Wijngaards
ff7dfd52a2
- Fix #1288 : [FR] Improve fuzzing of unbound by adapting the netbound
...
program.
2025-05-21 12:41:54 +02:00
Yorgos Thessalonikefs
342a0f48e3
- Add more checks about respip in unbound-checkconf.
...
Also fixes #310 : unbound-checkconf not reporting RPZ configuration
error.
2025-05-20 16:21:02 +02:00
Yorgos Thessalonikefs
71ac59e6f4
Changelog entry for #1285 :
...
- Merge #1285 : RST man pages.
2025-05-20 12:23:32 +02:00
Yorgos Thessalonikefs and GitHub
6662f71732
RST man pages ( #1285 )
...
Introduce restructuredText man pages to sync the online and source code man page documentation.
The templated man pages (*.in) are still part of the repo but generated with docutils from their .rst counterpart.
Documentation on how to generate those (mainly for core developers) are in README.man.
2025-05-20 12:20:20 +02:00
W.C.A. Wijngaards
32644937b0
- Fix for cname chain length with qtype ANY and qname minimisation.
...
Thanks to Jim Greenwood from Nominet for the report.
2025-05-19 13:17:21 +02:00
W.C.A. Wijngaards
1634beb4a0
- Fix config of slab values when there is no config file.
2025-05-15 14:34:18 +02:00
W.C.A. Wijngaards
1ef7b4a246
- Adjusted so-sndbuf default to 4m.
2025-05-13 15:31:05 +02:00
W.C.A. Wijngaards
03772d10fb
- Change default for so-sndbuf to 1m, to mitigate a cross-layer
...
issue where the UDP socket send buffers are exhausted waiting
for ARP/NDP resolution. Thanks to Reflyable for the report.
2025-05-13 15:04:32 +02:00
Yorgos Thessalonikefs
9152c914af
- Fix #1282 : log-destaddr fail on long ipv6 addresses.
2025-05-13 11:02:58 +02:00
Yorgos Thessalonikefs
a35ac5d82e
- Fix #1284 : NULL pointer deref in az_find_nsec_cover() (latent bug)
...
by adding a log_assert() to safeguard future development.
2025-05-13 11:00:23 +02:00
W.C.A. Wijngaards
21e3278400
- Fix #1283 : Unsafe usage of atoi() while parsing the configuration
...
file.
2025-05-12 14:57:42 +02:00
Yorgos Thessalonikefs
8e1deede08
Changelog entry for #1280 :
...
- Merge #1280 : Fix auth nsec3 code. Fixes NSEC3 code to not break on
broken auth zones that include unsigned out of zone (above apex)
data. Could lead to hang while trying to prove a wildcard answer.
2025-05-12 14:29:11 +02:00
Yorgos Thessalonikefs and GitHub
4e23523d1a
Fix auth nsec3 code ( #1280 )
...
- Fix NSEC3 code to not break on broken auth zones that include unsigned
out of zone (above apex) data. Could lead to hang while trying to
prove a wildcard answer.
Reported by Dmitrii Kuvaiskii from Amazon Web Services.
- Tests for NSEC3 auth zones with out of zone data.
2025-05-12 14:26:47 +02:00
W.C.A. Wijngaards
8190526250
- Fix #1281 : forward-zone "name: ." conflicts with auth-zone "name: ."
...
in 1.23.0, but worked in 1.22.0.
2025-05-09 16:01:41 +02:00
Yorgos Thessalonikefs
5dd14e2644
- Sync unbound and unbound-checkconf log output for unknown modules.
2025-05-05 14:47:12 +02:00
Yorgos Thessalonikefs
b50faccb1d
Changelog entry for #1276 :
...
- Merge #1276 : Auto-configure '-slabs' values.
2025-04-29 15:23:07 +02:00
fcc21885e4
Auto-configure '-slabs' values ( #1276 )
...
- Auto-configure '-slabs' values to a power of 2 value close to num-threads
by default for multi-threaded environments.
Co-authored-by: Wouter Wijngaards <wcawijngaards@users.noreply.github.com >
2025-04-29 15:21:47 +02:00
W.C.A. Wijngaards
a904a3a2c2
- Fix dnstap to use protoc.
2025-04-29 12:43:56 +02:00
W.C.A. Wijngaards
c253c8367a
- Fix for parallel build of dnstap protoc-c output.
2025-04-29 12:38:41 +02:00
Yorgos Thessalonikefs
0f95fae445
Changelog entry for #1275 :
...
- Merge #1275 : Use macros for the fr_check_changed* functions.
2025-04-28 15:50:03 +02:00
Yorgos Thessalonikefs and GitHub
e5bbc36ae0
Use macros for the fr_check_changed* functions ( #1275 )
2025-04-28 15:48:45 +02:00
W.C.A. Wijngaards
c88fa02c18
- Fix #1272 : assertion failure testcode/unitverify.c:202.
2025-04-25 11:12:28 +02:00