George Thessalonikefs
fed0fb42dd
- Fix testcode, 0 is a valid EDE INFO-CODE.
2021-10-14 14:01:39 +02:00
TCY16
abd948f3d7
change unittests to match just the ede code
2021-10-13 15:28:10 +02:00
George Thessalonikefs
f7bb7f2a94
Merge branch 'features/rfc8914-ede' of github.com:NLnetLabs/unbound into features/rfc8914-ede
2021-10-13 12:02:29 +02:00
George Thessalonikefs
9bff0b94dd
- Introduce 'ede=<info-code>' and 'all_noedns' as options in the MATCH line for
...
replay test packets.
2021-10-13 12:01:36 +02:00
TCY16
d2a719f606
add test setup for DNSSEC EDEs
2021-10-13 11:17:42 +02:00
TCY16
b825bb668d
add more tests
2021-10-08 15:55:40 +02:00
TCY16
8a6b3f088b
add DNSKEY EDE code
2021-10-08 15:54:10 +02:00
TCY16
86e8050352
add EDE responses to unittests
2021-10-01 14:46:29 +02:00
TCY16
c42c2cbbff
add EDE response to autotrust_init_failsig test
2021-09-30 16:56:50 +02:00
TCY16
7df2df0fc9
add EDE response to autotrust_init_fail test
2021-09-30 16:39:40 +02:00
TCY16
320aa64d18
add QDCOUNT=0 to CHAOS query in ACL
2021-09-29 12:54:41 +02:00
TCY16
3ba8ea321a
fix CH class response
2021-09-28 16:35:50 +02:00
TCY16
42ba5ae4a2
process @wcawijngaards' comments v2
2021-09-28 13:48:36 +02:00
TCY16
732ad94729
process @wcawijngaards' comments
2021-09-28 13:28:25 +02:00
TCY16
84da2409b3
change strncpy to memmove at @wcawijngaards' suggestion
2021-09-28 10:05:47 +02:00
Tom Carpay
0b376cc42f
add routine to add EDE to ACL:refused at correct location
2021-09-27 14:17:21 +00:00
Tom Carpay
b606c8273d
Merge branch 'features/rfc8914-ede' of github.com:NLnetLabs/unbound into features/rfc8914-ede
2021-09-20 09:42:47 +00:00
TCY16
4df2965459
add forgotten compile error fixes from previous commit
2021-09-20 11:42:39 +02:00
Tom Carpay
65852bcbc4
Merge branch 'features/rfc8914-ede' of github.com:NLnetLabs/unbound into features/rfc8914-ede
2021-09-20 09:35:30 +00:00
TCY16
4d15603a8c
add routine to do EDE on ACL blocked messages
2021-09-20 11:35:00 +02:00
Tom Carpay
5617de6867
Answer LDNS_EDE_RRSIGS_MISSING for normal answers with missing signatures
2021-09-15 10:15:35 +00:00
TCY16
3576033b62
add possible EDE spots
2021-09-15 11:17:04 +02:00
Tom Carpay
a664e8cec4
First step towards specific EDE DNSSEC errors
2021-09-14 07:45:51 +00:00
TCY16
2360120562
add mesh bogus test, possible locations for more EDE and remove superfluous todo comments
2021-09-13 13:25:17 +02:00
TCY16
9df75a842b
add DNSSEC indeterminate EDE and DNAME expansion test
2021-09-08 16:38:33 +02:00
Tom Carpay
7079f0b5aa
add ede to always_refuse and always_null
2021-09-06 13:13:49 +00:00
tcarpay
33445be8df
add setup of RPZ and full tests of earlier implemented EDEs
2021-08-31 15:22:44 +02:00
tcarpay
fba1c302ac
add localzones test
2021-08-23 14:26:32 +02:00
tcarpay
ec4cf69eb7
set up for tpkg test
2021-08-23 14:00:04 +02:00
tcarpay
d9a947f267
Merge branch 'master' into features/rfc8914-ede
2021-08-20 16:28:27 +02:00
W.C.A. Wijngaards
2315fc9d9b
Changelog entry for #531
...
- Fix #531 : Fix: passed to proc after free.
2021-08-20 15:18:39 +02:00
Wouter Wijngaards and GitHub
1ae42b94b3
Merge pull request #531 from Shchelk/ptpaf
...
Fix: passed to proc after free
2021-08-20 15:15:41 +02:00
Shchelkunov Artem
ba7598f559
Fix: passed to proc after free
...
Found by static analyzer svace
Static analyzer message: Pointer 'dp' is passed to a function at
iter_hints.c:401 after the referenced memory was deallocated at
iter_hints.c:174 by passing as 3rd parameter to function 'hints_insert'
at iter_hints.c:398.
on-behalf-of: @ideco-team <github@ideco.ru >
2021-08-20 18:06:51 +05:00
W.C.A. Wijngaards
54b7554b5a
Changelog note for #529 and nicer layout.
...
- Fix #529 : Fix: log_assert does nothing if UNBOUND_DEBUG is
undefined.
2021-08-20 14:32:13 +02:00
Wouter Wijngaards and GitHub
a4d1224d92
Merge pull request #529 from Shchelk/next
...
Fix: log_assert does nothing if UNBOUND_DEBUG is undefined
2021-08-20 14:29:18 +02:00
Shchelkunov Artem
4ea9651624
Fix: log_assert does nothing if UNBOUND_DEBUG is undefined
...
Found by static analyzer svace
Static analyzer message: Integer value 'len' obtained from untrusted
source at tube.c:374 by passing as 2nd parameter to function 'read'
at tube.c:340 without checking its higher bound is used as a loop bound
at tube.c:374.
on-behalf-of: @ideco-team <github@ideco.ru >
2021-08-20 17:16:39 +05:00
Tom Carpay
a98659791e
EDE Blocked with local-zone refused answers
2021-08-19 14:31:03 +00:00
Tom Carpay
5fff0f7e30
Fix dont echo edns0 option list ...
...
when refusing to answer authoritatively.
Also remove TODO comments that were already done
2021-08-19 14:28:26 +00:00
Tom Carpay
935634dcae
Revert "add local anwser blocked"
...
This reverts commit b3f60db184
2021-08-19 14:21:10 +00:00
tcarpay
b3f60db184
add local anwser blocked
2021-08-19 14:01:14 +02:00
Tom Carpay
a9e6f6bc23
add variable bogus reason
2021-08-17 14:10:48 +00:00
W.C.A. Wijngaards
51f5b3ab44
- Fix sed script in ssldir split handling.
2021-08-17 13:15:20 +02:00
W.C.A. Wijngaards
d88f554503
- Fix #527 : not sending quad9 cert to syslog (and may be more).
2021-08-17 13:03:33 +02:00
W.C.A. Wijngaards
cc6d428cb7
- Fix that --with-ssl can use "/usr/include/openssl11" to pass the
...
location of a different openssl version.
2021-08-17 10:32:12 +02:00
W.C.A. Wijngaards
d0cc58be3d
- Fix to support harden-algo-downgrade for ZONEMD dnssec checks.
2021-08-16 16:14:32 +02:00
Tom Carpay
6b5f314a3a
Show reason when returning EDE_DNSSEC_BOGUS
2021-08-16 13:36:45 +00:00
Tom Carpay
eac4eb3a9e
Return EDE_DNSSEC_BOGUS when returning bogus answers
2021-08-16 12:46:24 +00:00
George Thessalonikefs
2a72845576
Changelog note for #528 :
...
- Merge PR #528 from fobser: Make sldns_str2wire_svcparam_buf() static.
2021-08-16 14:15:57 +02:00
gthess and GitHub
45542053fe
Merge pull request #528 from fobser/svcparam_static
...
Make sldns_str2wire_svcparam_buf() static.
2021-08-16 14:12:50 +02:00
Tom Carpay
0703a38243
Fix: use EDE codes with EDNS_OPT_APPEND_EDE
...
+ complete EDE codes
2021-08-16 09:59:13 +00:00
George Thessalonikefs