W.C.A. Wijngaards
0076736fc4
- Fix for dnstap with dnscrypt and dnstap without dnsoverquic.
2024-10-16 11:52:49 +02:00
Yorgos Thessalonikefs
f8e45ed696
- Fix for dnsoverquic and dnstap to use the correct dnstap
...
environment.
2024-10-16 11:02:31 +02:00
W.C.A. Wijngaards
2a28c7389c
- Fix dnsoverquic to extend the number of streams when one is closed.
2024-10-14 13:53:55 +02:00
W.C.A. Wijngaards
114edf2c38
- Fix to display warning if quic-port is set but dnsoverquic is not
...
enabled when compiled.
2024-10-14 11:34:26 +02:00
W.C.A. Wijngaards
e0c93e300b
- Fix contrib/aaaa-filter-iterator.patch for change in call
...
signature for cache_fill_missing.
2024-10-11 11:42:30 +02:00
W.C.A. Wijngaards
bd1813b126
- Fix harden-unverified-glue for AAAA cache_fill_missing lookups.
2024-10-11 09:03:11 +02:00
W.C.A. Wijngaards
1b7e14dc39
- Fix to disable detection of quic configured ports when quic is
...
not compiled in.
2024-10-11 08:51:14 +02:00
W.C.A. Wijngaards
8b7782e8fc
- Fix add reallocarray to alloc stats unit test, and disable
...
override of strdup in unbound-host, and the result of config
get option is freed properly.
2024-10-10 10:43:23 +02:00
W.C.A. Wijngaards
e0201435a4
- Fix cookie_file test sporadic fails for time change during
...
the test.
2024-10-10 09:45:48 +02:00
W.C.A. Wijngaards
66fb3ff670
- Fix for dnstap compile of doqclient with doq disabled.
2024-10-09 15:52:33 +02:00
W.C.A. Wijngaards
36461ea73d
Changelog entry and unit test for fix of NSEC TTL and prefetch ttl.
...
- Fix to limit NSEC TTL for messages from cachedb. Fix to limit the
prefetch ttl for messages after a CNAME with short TTL.
2024-10-09 15:29:23 +02:00
W.C.A. Wijngaards
5679c8b1df
- Fix to limit NSEC TTL for messages from cachedb. Fix to limit the
...
prefetch ttl for messages after a CNAME with short TTL.
2024-10-09 15:28:55 +02:00
W.C.A. Wijngaards
a4d8c0c43b
Changelog note for #871
...
- Merge #871 : DNS over QUIC. This adds `quic-port: 853` and
`quic-size: 8m` that enable dnsoverquic, and the counters
`num.query.quic` and `mem.quic` in the statistics output.
The feature needs to be enabled by compiling with libngtcp2,
with `--with-libngtcp2=path` and libngtcp2 needs openssl+quic,
pass that with `--with-ssl=path` to compile unbound as well.
2024-10-09 10:35:45 +02:00
3d89c26d32
DNSoverQUIC ( #871 )
...
* - dnsoverquic, configure --with-libngtcp2 option.
* - dnsoverquic, create comm_point for doq and receive cmsg local address.
* - dnsoverquic, less obtrusive debug.
* - dnsoverquic, log and fix local port number. Neater subroutines and ifdefs.
* - dnsoverquic, add testcode/doqclient.
* - dnsoverquic, review fixes on doqclient.
* - dnsoverquic, fix unit test testbound link.
* - dnsoverquic, parse query in doqclient.
* - dnsoverquic, link with libngtcp2_crypto_openssl and code for doqclient.
* - dnsoverquic, random routine for doqclient and fix ngaddr allocation, and
check ub_initstate return.
* - dnsoverquic, fix doqclient free of allocated ngaddr addresses.
* - dnsoverquic, enable debug output with -v for doqclient.
* - dnsoverquic, create and set TLS object and TLS context in doqclient.
* - dnsoverquic, work on quic tls context in doqclient.
* - dnsoverquic, set default dnsoverquic port to the standardized 853 port.
* - dnsoverquic, remove debug comment.
* - dnsoverquic, dns-over-quic quic-port: 853 config option.
* - dnsoverquic, log type of interface created at start of unbound.
* - dnsoverquic, log type of no tls https as https when interface is created.
* - dnsoverquic, setup client quic tls methods.
* - dnsoverquic, event work in doqclient.
* - dnsoverquic, explain in documentation that QUIC uses UDP.
* - dnsoverquic, make doqclient exit.
* - dnsoverquic, doqclient cleanup run routine.
* - dnsoverquic, doqclient code nicer.
* - dnsoverquic, doqclient read and timer.
* - dnsoverquic, doqclient write work.
* - dnsoverquic, review fixes.
* - dnsoverquic, detect openssl quic support at configure time.
* - dnsoverquic, do not allow QUIC on port 53 to stop confusion of DoQ and DNS.
* - dnsoverquic, in doqclient, when idle close is returned, drop the connection
without calling ngtcp2_conn_write_connection_close.
* - dnsoverquic, in doqclient, log callbacks.
* - dnsoverquic, in doqclient add extend_max_local_streams_bidi callback.
* - dnsoverquic, in doqclient add client query lists.
* - dnsoverquic, in doqclient, code cleaner, log text nicer.
* - dnsoverquic, in doqclient, work on write_streams.
* - dnsoverquic, in doqclient, use signed int for stream_id, work on the
ngtcp2_recv_stream_data callback.
* - dnsoverquic, in doqclient, print result and fixes for recv data.
* - dnsoverquic, in doqclient, add the event callbacks to fptr wlist.
* - dnsoverquic, in doqclient, when already expired, use zero timeout timer.
* - dnsoverquic, in doqclient, ignore unused return codes from
ngtcp2_conn_writev_stream.
* - dnsoverquic, add doqclient event functions to the unbound-dnstap-socket
test tool for linking.
* - dnsoverquic, in doqclient, fix multiple operands for the commandline.
neater dns message output.
* - dnsoverquic, in doqclient, store packet when write blocks and try later.
* - dnsoverquic, in doqclient, limit number of packets and number of bytes sent.
* - dnsoverquic, in doqclient, better size estimate for outgoing packet.
* - dnsoverquic, in doqclient, fix that already written next packet is not
counted for data length to send.
* - dnsoverquic, in doqclient, early data transmission and session resumption.
* - dnsoverquic, send version negotiation packet.
* - dnsoverquic, send retry and accept the connection.
* - dnsoverquic, storage structures.
* - dnsoverquic, doq connection setup.
* - dnsoverquic, neater code layout for new conn. Fix verbosity of log print.
* - dnsoverquic, doq conn callback functions.
* - dnsoverquic, doq_fill_rand routine in header file.
* - dnsoverquic, keep track of connection ids.
* - dnsoverquic, get_new_connection_id callback.
* - dnsoverquic, create doq_conid tree.
* - dnsoverquic, settings for server connection.
* - dnsoverquic, tls context.
* - dnsoverquic, sendmsg error handling.
* - dnsoverquic, neat code.
* - dnsoverquic, track doq connection last error.
* - dnsoverquic, neater packet address parameters.
* - dnsoverquic, fix uninitialized bytes in msg control in doq sendmsg, and
fix tree cleanup of conid tree.
* - dnsoverquic, better usage text for doqclient.
* - dnsoverquic, neat code.
* - dnsoverquic, connection receive packet handling.
* - dnsoverquic, debug output.
* - dnsoverquic, debug switched meaning of scid and dcid gives
ERR_TRANSPORT_PARAM.
* - dnsoverquic, remove debug output.
* - dnsoverquic, connection delete routine and error from connection read in
more detail with less clutter.
* - dnsoverquic, write to stream, and receive stream data, log packet.
* - dnsoverquic, alpn set up.
* - dnsoverquic, connection close.
* - dnsoverquic, doq_table and locks.
* - dnsoverquic, fix tests.
* - dnsoverquic, better locking.
* - dnsoverquic, doq_stream.
* - dnsoverquic, remove compile warning.
* - dnsoverquic, doq_stream receive data.
* - dnsoverquic, fixes for locks and keep length bytes allocated.
* - dnsoverquic, lock connection on initial insertion.
* - dnsoverquic, reply information, and reply buffer.
* - dnsoverquic, reply info from cache, local-zone and recursion lookups.
* - dnsoverquic, spelling in comment about buffer storage.
* - dnsoverquic, stream write list and doqclient fixes to exit and printout.
* - dnsoverquic, doqclient -q option for short printout.
* - dnsoverquic, unit test with local data reply.
* - dnsoverquic, write connection and write event is set.
* - dnsoverquic, neater logging for write event connection stream writes.
* - dnsoverquic, log remote connection when the streams are written for it.
* - dnsoverquic, better threaded use, threads can write to doq connections at
the same time.
* - dnsoverquic, unit test for the calculation of connection size with a query.
* - dnsoverquic, use less memory per connection.
* - dnsoverquic, remove unit test output.
* - dnsoverquic, add MSG_DONTWAIT so that there is no mistakenly blocking
socket operations.
* - dnsoverquic, doqclient logs address on connection failures.
* - dnsoverquic, compat code for clock get time routine.
* - dnsoverquic, use skip_test for doq unit test.
* - dnsoverquic, fixes for proxyprotocol, use remote_addr and set proxyprotocol
disabled on the doq connection.
* - dnsoverquic, doqclient sets log identity to its name, instead of "unbound".
* - dnsoverquic, handle blocked udp packet writes.
* - dnsoverquic, fix function documentation for verbose_print_addr from
services/listen_dnsport.c.
* - dnsoverquic, fix doq_conn lock protection. The checklock allows to set
the output file name, and doqclient uses that. Print place of lock_protect.
* - dnsoverquic, neater buffer clear when write of blocked packet fails, make
sure that memory area does not overlap for blocked packet addresses when
write of blocked packet fails, and size blocked packet buffer to the pkt buf.
* - dnsoverquic, move lock check after the test to test script in doq test.
* - dnsoverquic, the doq test uses valgrind when enabled.
* - dnsoverquic, git ignore the doqclient test.
* - dnsoverquic, limit the buffer for packets to max packet size with some more.
* - dnsoverquic, spelling fix.
* - dnsoverquic, timer work, structure and adds and deletes.
* - dnsoverquic, timer_tree uses table.lock.
* - dnsoverquic, fix timer tree remove and spelling in header file comment.
* - dnsoverquic, fix testbound for timer compare function linkage.
* - dnsoverquic, timer set add debug output.
* - dnsoverquic, doq_conn_check_timer function.
* - dnsoverquic, doq_done_setup_timer_and_write function.
* - dnsoverquic, fix that doq conn is not deleted whilst editing write and timer.
* - dnsoverquic, Fix #861 make ERROR netevent.h:1073:32: error: field 'blocked_pkt_pi' has incomplete type
* - dnsoverquic, timer element has timeout setup when socket callback complete.
* - dnsoverquic, fix unit test compile.
* - dnsoverquic, timer callback routine, handle timeout and close and delete the
connection if necessary.
* - dnsoverquic, timer pickup stops at current time.
* - dnsoverquic, timer comparable with the event base time.
* - dnsoverquic, erase marked time when timer disabled.
* - dnsoverquic, fix timer to set correctly and lock popped write connection
early, before it is modified.
* - dnsoverquic, fix to unlock connection lock when it is unlinked and deleted.
* - dnsoverquic, fix to unlock connection lock when it is deleted because it is
a duplicate connection.
* - dnsoverquic, fix that doq timer is not disabled when not set.
* - dnsoverquic, quic-size: 8m maximum number of bytes for QUIC buffers.
* - dnsoverquic, flex and bison.
* - dnsoverquic, quic-size turn away new connections when full.
* - dnsoverquic, doqclient outputs stream reset information.
* - dnsoverquic, detect stream close and reset.
* - dnsoverquic, free stream buffers when data is acked and stream is closed.
* - dnsoverquic, delete stream when closed. Unlink it. Allow stream_id 4 as first.
* - dnsoverquic, stats output for mem.quic and num.query.quic.
* - dnsoverquic, review fix.
* - dnsoverquic, fix when compiled without ngtcp2.
* - dnsoverquic, fix to detect ngtcp2_crypto_quictls for openssl crypto, after
change in libngtcp2.
* - dnsoverquic, fix for newer ngtcp2 versions. detect ngtcp2_ccerr_default,
ngtcp2/ngtcp2_crypto_quictls.h, struct ngtcp2_pkt_hd.tokenlen,
struct ngtcp2_settings.tokenlen and struct ngtcp2_version_cid.
* - dnsoverquic, fix for newer ngtcp2 version, detect number of arguments for
ngtcp2_conn_shutdown_stream.
* - dnsoverquic, fix for newer ngtcp2.
* - dnsoverquic, use the functions from util/timeval_func.h.
* - dnsoverquic, fix in doqclient only write transport parameters once.
* - dnsoverquic, debug log output removed.
* - dnsoverquic, fix in doqclient to work with renamed NGTCP2_CC_ALGO_BBR_V2
from ngtcp2.
* - dnsoverquic, fix to check in doq_server_socket_create that tls-service-key
and tls-service-pem have a value.
* - dnsoverquic, fix to error when doq_server_socket_create fails.
* - dnsoverquic, improve linebreaks in configparser additions.
* - dnsoverquic, fix port from interface pickup after main branch change.
* Fix getting user data from SSL, fix calloc warning.
* Fix fwrite return value check in doqclient
* - timeval_substruct from timeval_func.h
- lock_protect also for HAVE_NGTCP2_CCERR_DEFAULT
- fix doq logging for inet_ntop failures
* - memset for consistency
- no value returned from msghdr_get_ecn when S_SPLINT_S is defined
* - dnsoverquic, rerun autoconf.
---------
Co-authored-by: Yorgos Thessalonikefs <yorgos@nlnetlabs.nl >
2024-10-09 10:32:03 +02:00
W.C.A. Wijngaards
dcf7afd722
- Fix #1128 : Cannot override tcp-upstream and tls-upstream with
...
forward-tcp-upstream and forward-tls-upstream.
2024-10-08 15:29:03 +02:00
W.C.A. Wijngaards
e67171612b
- Fix #1149 : unbound-control-setup hangs sometimes depending on
...
the openssl version.
2024-10-08 11:54:07 +02:00
Yorgos Thessalonikefs
a1b25f0296
- The fix for CVE-2024-8508 was part of 1.21.1, a security point release
...
on 1.21.0. The code repository continues with this fix and the version
number 1.22.0.
2024-10-03 18:19:01 +02:00
Yorgos Thessalonikefs
490585bf29
Merge branch 'release-1.21.1'
2024-10-03 18:14:01 +02:00
Yorgos Thessalonikefs
b7c61d7cc2
- Fix CVE-2024-8508, unbounded name compression could lead to denial of
...
service.
2024-10-03 17:41:20 +02:00
Yorgos Thessalonikefs
01883fb017
- Set version to 1.21.1
2024-10-03 14:11:57 +02:00
W.C.A. Wijngaards
5bb3b9cc83
- Fix unbound dnstap socket test program analyzer warnings about
...
unused variable assignments and variable initialization.
2024-09-30 16:36:01 +02:00
W.C.A. Wijngaards
3a1b79f6a1
- Fix negative cache NSEC3 parameter compares for zero length NSEC3
...
salt.
2024-09-30 09:25:51 +02:00
W.C.A. Wijngaards
84eeb9b97c
- Fix #1144 : [FR] log timestamps in ISO8601 format with timezone.
...
This adds the option `log-time-iso: yes` that logs in ISO8601
format.
2024-09-25 11:16:46 +02:00
Yorgos Thessalonikefs
d88eeb4c32
Changelog entry for #1143 :
...
- Merge #1143 : Fix cache update when serve expired is used. Expired
records are favored over resolution and validation failures when
serve-expired is used.
2024-09-24 16:49:34 +02:00
Yorgos Thessalonikefs and GitHub
2e398d51ba
Fix cache update when serve expired is used ( #1143 )
...
- Fix cache update when serve expired is used in order to not evict
still usable expired records. Modules are forbidden to update the
cache if their answer is DNSSEC unchecked or bogus and a valid
(expired) entry already exists. Bogus replies from the validator are
also discarded in favor of existing (expired) valid replies.
- serve-expired-ttl-reset should try to keep expired records in the
cache in case they are reset.
2024-09-24 16:47:04 +02:00
Yorgos Thessalonikefs
24ebca7df6
- More clear text for prefetch and minimal-responses in the
...
unbound.conf man page.
2024-09-24 15:10:21 +02:00
Yorgos Thessalonikefs
7f4a61e6fc
- Attempt to further fix doh_downstream_buffer_size.tdir flakiness.
2024-09-24 12:21:03 +02:00
Yorgos Thessalonikefs
db719d404f
- Fix doxygen warnings by commenting out CLANG_ASSISTED_PARSING,
...
CLANG_ADD_INC_PATHS, CLANG_OPTIONS and CLANG_DATABASE_PATH; they were
already disabled.
2024-09-23 15:31:32 +02:00
W.C.A. Wijngaards
a35a0c49da
- Fix dns64 with prefetch that the prefetch is stored in cache.
2024-09-23 12:19:43 +02:00
W.C.A. Wijngaards
5e9b6296b7
- Add redis-command-timeout: 20 and redis-connect-timeout: 200,
...
that can set the timeout separately for commands and the
connection set up to the redis server. If they are not
specified, the redis-timeout value is used.
2024-09-17 13:10:34 +02:00
W.C.A. Wijngaards
606e262fdd
Changelog comment for #1140 .
...
- Merge #1140 : Fix spelling mistake in comments.
2024-09-16 12:15:04 +02:00
Tochus and GitHub
819764663b
Fix spelling mistake in comments ( #1140 )
...
I noticed a spelling mistake in the comments. The term “chain of trust” was incorrectly written as “chainoftrust”. This change corrects the spelling to “chain of trust” which is the correct term used in English.
2024-09-16 12:14:28 +02:00
Yorgos Thessalonikefs
6bf2b2ac56
- Fix and add comments in testdata/val_negcache_ttl.rpl.
2024-09-11 12:16:02 +02:00
W.C.A. Wijngaards
5767b0933f
- Add unit test for ttl limit for aggressive nsec.
2024-09-10 10:17:31 +02:00
W.C.A. Wijngaards
24e0f0ab7e
- Fix to limit NSEC and NSEC3 TTL when aggressive nsec is
...
enabled (RFC9077).
2024-09-10 10:13:48 +02:00
Yorgos Thessalonikefs
d3fdbba877
- Fix comment to not trigger doxygen unknown command.
2024-09-06 16:03:20 +02:00
Yorgos Thessalonikefs
c36ce2a390
- Fix alloc-size and calloc-transposed-args compiler warnings.
2024-09-06 16:01:30 +02:00
W.C.A. Wijngaards
7ecff4113c
- Fix config file read for dnstap-sample-rate.
2024-09-05 09:35:54 +02:00
W.C.A. Wijngaards
99824bc0e6
Changelog note for #1135
...
- Merge #1135 : Add new IANA trust anchor.
2024-09-02 09:25:44 +02:00
9f09c36401
Add new IANA trust anchor ( #1135 )
...
Signed-off-by: Keelan Cannoo <keelan.cannoo@cyberstorm.mu >
Co-authored-by: Keelan10 <keelan.cannoo@cyberstorm.mu >
2024-09-02 09:24:55 +02:00
W.C.A. Wijngaards
a887284703
- Fix for #1132 , comment about adjusted copy of reference check.
2024-08-30 08:56:00 +02:00
W.C.A. Wijngaards
fb198b96f1
Changelog note for #1132 and fix for #1132 .
...
- Merge #1132 : b.root renumbering.
- Fix for #1132 , adjusted unit test for change in the test file.
2024-08-30 08:51:56 +02:00
Loganaden Velvindron and GitHub
30bf996f39
b.root renumbering ( #1132 )
...
https://b.root-servers.org/news/2023/05/16/new-addresses.html
Worked together with Jaykishan Muktawoa <jay@cyberstorm.mu >
2024-08-30 08:48:31 +02:00
W.C.A. Wijngaards
52154e658a
- Fix to print port number in logs for auth zone transfer activities.
2024-08-29 13:04:03 +02:00
W.C.A. Wijngaards
c06d3646a9
- Unit test for auth zone transfer TLS, and TLS failure.
2024-08-29 10:40:31 +02:00
W.C.A. Wijngaards
42d421a305
- Fix that stub-zone and forward-zone clauses do not exhaust memory
...
for long content.
2024-08-28 13:16:29 +02:00
W.C.A. Wijngaards
b5951ce1fa
- Fix that when rpz is applied the message does not get picked up by
...
the validator. That stops validation failures for the message.
2024-08-28 10:51:22 +02:00
W.C.A. Wijngaards
6b37309705
- Fix #1130 : Loads of logs: "validation failure: key for validation
...
<domain>. is marked as invalid because of a previous" for
non-DNSSEC signed zone.
2024-08-27 17:00:27 +02:00
W.C.A. Wijngaards
dc274fef9b
- Fix documentation for cache_fill_missing function.
2024-08-23 13:19:15 +02:00
W.C.A. Wijngaards
db1167c8b3
- Fix #1127 : error: "memory exhausted" when defining more than 9994
...
local-zones.
2024-08-23 09:22:07 +02:00
W.C.A. Wijngaards
1e0cf1e86b
- Merge patch to fix for glue that is outside of zone, with
...
`harden-unverified-glue`, from Karthik Umashankar (Microsoft).
Enabling this option protects the Unbound resolver against bad
glue, that is unverified out of zone glue, by resolving them.
It uses the records as last resort if there is no other working
glue.
2024-08-23 08:56:48 +02:00
W.C.A. Wijngaards
348df52e05
Enable ci back after debug.
2024-08-21 14:20:04 +02:00
W.C.A. Wijngaards
6b3266aaf8
- Fix for char signedness warnings on NetBSD.
2024-08-21 14:15:23 +02:00
W.C.A. Wijngaards
4f52461e81
- Add cross platform netbsd to github ci.
2024-08-21 14:03:11 +02:00
W.C.A. Wijngaards
06d5031d22
- Add cross platform openbsd to github ci.
2024-08-21 13:50:55 +02:00
W.C.A. Wijngaards
12119e2d3e
ci for freebsd nicer, with libevent, faster without static compile, and
...
with grouped output, also the pkg install is conditional on the platform.
2024-08-21 13:37:42 +02:00
W.C.A. Wijngaards
19d53d5663
Fix for freebsd ci.
2024-08-21 13:24:54 +02:00
W.C.A. Wijngaards
04e6f9e03b
- Add cross platform freebsd to github ci.
2024-08-21 13:20:00 +02:00
W.C.A. Wijngaards
3d350fa73d
- Add iter-scrub-ns, iter-scrub-cname and max-global-quota
...
configuration options.
2024-08-20 14:08:52 +02:00
W.C.A. Wijngaards
015b2b0daf
- Fix #1126 : unbound-control-setup hangs while testing for openssl
...
presence starting from version 1.21.0.
2024-08-19 15:51:47 +02:00
W.C.A. Wijngaards
5fa84d50bf
- Tag for release 1.21.0, the repository continues with 1.21.1
...
in development.
2024-08-15 11:01:41 +02:00
W.C.A. Wijngaards
79e4c57851
- Fix spelling for the cache-min-negative-ttl entry in the
...
example.conf.
2024-08-09 14:04:25 +02:00
W.C.A. Wijngaards
5abdd09095
- Fix that for windows the module startup is called and sets up
...
the module-config.
2024-08-08 16:14:09 +02:00
W.C.A. Wijngaards
158c1defe3
- Set version number to 1.21.0 for release.
2024-08-08 09:30:53 +02:00
W.C.A. Wijngaards
b4519012dc
- Fix CacheFlush issues with limit on NS RRs. Thanks to Yehuda Afek,
...
Anat Bremler-Barr, Shoham Danino and Yuval Shavitt (Tel-Aviv
University and Reichman University).
2024-08-08 09:28:44 +02:00
W.C.A. Wijngaards
ed883238fd
- Fix CAMP issues with global quota. Thanks to Huayi Duan, Marco
...
Bearzi, Jodok Vieli, and Cagin Tanir from NetSec group, ETH Zurich.
2024-08-08 09:27:45 +02:00
W.C.A. Wijngaards
0f2f6025e7
- Fix that alloc stats for forwards and hints are printed, and when
...
alloc stats is enabled, the unit test for unbound control waits for
reloads to complete.
2024-08-02 15:51:40 +02:00
W.C.A. Wijngaards
3cbf554e3b
Changelog note for #1090
...
- Merge #1090 : Cookie secret file. Adds
`cookie-secret-file: "unbound_cookiesecrets.txt"` option to store
cookie secrets for EDNS COOKIE secret rollover. The remote control
add_cookie_secret, activate_cookie_secret and drop_cookie_secret
commands can be used for rollover, the command print_cookie_secrets
shows the values in use.
2024-08-02 13:36:06 +02:00
ad21dbd1c2
Cookie secret file ( #1090 )
...
* - cookie-secret-file, define struct.
* - cookie-secret-file, add config option, create, read and delete struct.
* - cookie-secret-file, check cookie secrets for cookie validation.
* - cookie-secret-file, unbound-control add_cookie_secret, drop_cookie_secret,
activate_cookie_secret and print_cookie_secrets.
* - cookie-secret-file, test and fix locks, renew writes a fresh cookie,
staging cookies get a fresh cookie and spelling in error message.
* - cookie-secret-file, remove unused variable from cookie file unit test.
* Remove unshare and faketime dependencies for cookie_file test; documentation nits.
---------
Co-authored-by: Yorgos Thessalonikefs <yorgos@nlnetlabs.nl >
2024-08-02 13:32:08 +02:00
W.C.A. Wijngaards
50cf55bdac
Update changelog.
...
- Fix testbound for alloc stats strdup in util/alloc.c.
2024-08-02 08:59:47 +02:00
W.C.A. Wijngaards
6106528a50
- Fix testbound for alloc stats strdup in util/alloc.c.
2024-08-02 08:58:22 +02:00
W.C.A. Wijngaards
befa7d8cd8
- Fix that alloc stats has strdup checks, it stops debuggers from
...
complaining about mismatch at free time.
2024-08-02 08:54:54 +02:00
W.C.A. Wijngaards
92be76fb89
- Fix that the worker mem report with alloc stats does not attempt
...
to print memory use of forwards and hints if they have been
deleted already.
2024-08-01 17:15:07 +02:00
W.C.A. Wijngaards
9a6b6765cc
- Fix dnstap test program, cleans up to have clean memory on exit,
...
for tap_data_free, does not delete NULL items. Also it does not try
to free the tail, specifically in the free of the list since that
picked up the next item in the list for its loop causing invalid
free. Added internal unit test to unbound-dnstap-socket for that.
2024-08-01 16:12:04 +02:00
W.C.A. Wijngaards
03b511b1a2
- Fix for #1114 : Fix that cache fill for forward-host names is
...
performed, so that with nonzero target-fetch-policy it fetches
forwarder addresses and uses them from cache. Also updated that
delegation point cache fill routines use CDflag for AAAA message
lookups, so that its negative lookup stops a recursion since the
cache uses the bit for disambiguation for dns64 but the recursion
uses CDflag for the AAAA target lookups, so the check correctly
stops a useless recursion by its cache lookup.
2024-07-31 11:42:44 +02:00
W.C.A. Wijngaards
6af28bed08
- Fix to document parameters of auth_zone_verify_zonemd_with_key.
2024-07-30 13:47:53 +02:00
W.C.A. Wijngaards
f094f4ea3c
- Add root key 38696 from 2024 for DNSSEC validation. It is added
...
to the default root keys in unbound-anchor. The content can be
inspected with `unbound-anchor -l`.
2024-07-25 11:42:22 +02:00
Yorgos Thessalonikefs
c717debace
- For #935 and #1104 , clarify RPZ order and semantics.
2024-07-24 01:54:02 +02:00
Yorgos Thessalonikefs
7d4d21764a
- Cleanup ede.tdir test.
2024-07-23 20:22:25 +02:00
W.C.A. Wijngaards
83e6977f06
- Fix link of unbound-dnstap-socket without openssl.
2024-07-23 15:06:54 +02:00
W.C.A. Wijngaards
671e11552c
- Fix link of dnstap without openssl.
2024-07-23 14:56:21 +02:00
W.C.A. Wijngaards
c4541e634b
- Fix uninitialized variable warning in create_tcp_accept_sock.
2024-07-23 10:42:36 +02:00
W.C.A. Wijngaards
30da725e67
- Fix to have empty definition when not supported for weak attribute.
2024-07-23 10:02:39 +02:00
W.C.A. Wijngaards
8de5ae3552
- Fix compile when the compiler does not support the noreturn
...
attribute.
2024-07-23 09:55:31 +02:00
W.C.A. Wijngaards
5bea29b01c
- For #1110 : Test for fallthrough attribute in configure and add
...
fallthrough attribute annotations.
2024-07-23 09:47:42 +02:00
Wouter Wijngaards and GitHub
89c9eafa44
Merge pull request #1110 from r-barnes/patch-1
...
Make fallthrough explicit for libworker.c
2024-07-23 09:44:28 +02:00
Yorgos Thessalonikefs
3512eaec48
- Fix #1106 : ratelimit-below-domain logs the wrong FROM address.
2024-07-23 09:07:06 +02:00
Richard Barnes and GitHub
f9bd35dcfa
Make fallthrough explicit for libworker.c
...
The code currently doesn't compile with LLVM's `-Wimplicit-fallthrough` flag, but the attribute works for both GCC (>=7) and LLVM.
2024-07-22 16:37:38 -07:00
W.C.A. Wijngaards
3af4e44646
- Fix dnstap wakeup, a running wakeup timer is left to expire and not
...
increased, a timer is started when the dtio thread is sleeping,
the timer set disabled when the dtio thread goes to sleep, and
after sleep the thread checks to see if there are messages to log
immediately.
2024-07-19 16:16:02 +02:00
W.C.A. Wijngaards
c3dd6a2dbd
- Add dnstap-sample-rate that logs only 1/N messages, for high volume
...
server environments. Thanks Dan Luther.
2024-07-19 10:04:40 +02:00
W.C.A. Wijngaards
8fca3e7c5b
- For #1103 : Fix to drop mesh state reference for the http2 stream
...
associated with the reply, not the currently active stream. And
it does not remove it twice on a mesh_send_reply call. The reply
h2_stream is NULL when not in use, for more initialisation.
2024-07-16 14:23:10 +02:00
W.C.A. Wijngaards
8947c2c764
- For #1103 : fix to also drop mesh state reference when the discard
...
limit is reached, when there is an error making a new recursion
state and when the connection is dropped with is_drop.
2024-07-15 14:51:20 +02:00
W.C.A. Wijngaards
b1e3319a11
Merge branch 'master' of github.com:NLnetLabs/unbound
2024-07-12 16:41:58 +02:00
W.C.A. Wijngaards
d52f501d90
- For #1103 : fix to also drop mesh state reference when a h2 reply is
...
dropped.
2024-07-12 16:41:46 +02:00
Yorgos Thessalonikefs
7083d58c6b
- For #1102 : clearer text for using interface-* options for the
...
loopback interface.
2024-07-12 16:29:44 +02:00
W.C.A. Wijngaards
3adb9c8f92
- Fix #1103 : unbound 1.20.0 segmentation fault with nghttp2.
2024-07-12 16:11:29 +02:00
Yorgos Thessalonikefs
51425b2388
- Add RPZ tag tests in acl_interface.tdir.
2024-07-12 15:38:12 +02:00
W.C.A. Wijngaards
d43760a8cd
- For #773 : In contrib/unbound.service.in set unbound to start after
...
network-online.target. Also for contrib/unbound_portable.service.in.
2024-07-10 14:05:43 +02:00
Yorgos Thessalonikefs
ea3e327006
- Update list of known EDE codes.
2024-07-09 15:58:30 +02:00
W.C.A. Wijngaards
be09350eca
- Fix shadowed error string variable in validator dnskey handling.
2024-07-08 16:50:16 +02:00
W.C.A. Wijngaards
169acfc546
- Fixup algo_needs_reason string buffer length.
2024-07-08 15:38:27 +02:00
W.C.A. Wijngaards
bed7cc2a90
- Fix that validation reason failure that uses string print uses
...
separate buffer that is passed, from the scratch validation buffer.
2024-07-08 15:29:20 +02:00
Yorgos Thessalonikefs
02f4446833
- Don't check for message TTL changes if the RRsets remain the same.
2024-07-05 19:58:19 +02:00
W.C.A. Wijngaards
c8a2289542
- Fix for #1099 : Fix to check for deleted RRset when the contents
...
is updated and fetched after it is stored, and also check for a
changed RRset.
2024-07-05 17:54:46 +02:00
W.C.A. Wijngaards
b53d90053e
- Fix #1099 : Unbound core dump on SIGSEGV.
2024-07-05 17:18:01 +02:00
W.C.A. Wijngaards
978b0696d3
- Fix neater printout.
2024-07-05 14:11:26 +02:00
W.C.A. Wijngaards
ec5f86b4eb
- Fix for neater printout for error for missing DS response.
2024-07-05 08:49:52 +02:00
W.C.A. Wijngaards
ec2f45c6fd
- Fix to print details about the failure to lookup a DNSKEY record
...
when validation fails due to the missing DNSKEY. Also for key prime
and DS lookups.
2024-07-04 14:51:18 +02:00
W.C.A. Wijngaards
6b319c97ee
- Fix compile warnings in fptr_wlist.c.
2024-07-03 16:42:52 +02:00
W.C.A. Wijngaards
6eb3992c9e
- Fix to remove unneeded linebreak in fptr_wlist.c.
2024-07-03 15:51:22 +02:00
W.C.A. Wijngaards
94a94fd8c8
- Fix to use modstack_init in zonemd unit test.
2024-07-03 15:49:13 +02:00
W.C.A. Wijngaards
36f9d1a2a9
- Add unit test skip files and bison and flex output to gitignore.
2024-07-03 14:59:39 +02:00
W.C.A. Wijngaards
d3a2264272
Changelog entry for #144 and #1098
...
- Fix #144 : Port ipset to BSD pf tables.
2024-07-03 14:53:42 +02:00
Wouter Wijngaards and GitHub
92b6c2a7b9
Merge pull request #1098 from NLnetLabs/ipset-pf-support
...
Ipset pf support
2024-07-03 14:49:16 +02:00
W.C.A. Wijngaards
a335e601e4
ipset-pf-support, move startup and destartup to the front of the module
...
func block functions, modstack call deinit function names, and detect
module change when no startup functions are needed.
2024-07-03 13:53:44 +02:00
a19009df1d
Apply suggestions from code review
...
Co-authored-by: Yorgos Thessalonikefs <yorgos@nlnetlabs.nl >
2024-07-03 13:08:51 +02:00
Yorgos Thessalonikefs
96f8a94c19
- Fix for repeated use of a DNAME record: first overallocate and then
...
move the exact size of the init value to avoid false positive heap
overflow reads from address sanitizers.
2024-07-03 10:08:44 +02:00
W.C.A. Wijngaards
2fe4e2ec3e
- Fix compile warning in worker pthread id printout.
2024-07-02 09:44:58 +02:00
W.C.A. Wijngaards
e54928a628
- Fix unused variable warning in do_cache_remove.
2024-07-02 09:33:22 +02:00
W.C.A. Wijngaards
538434186e
- Fix to remove unused include from the readzone test program.
2024-07-02 09:31:34 +02:00
W.C.A. Wijngaards
65e7253d19
ipset-pf-support, simplification of code.
2024-07-02 09:08:27 +02:00
W.C.A. Wijngaards
03ac902296
- ipset-pf-support, fix to skip unit test if no pf dev.
2024-07-01 17:11:20 +02:00
W.C.A. Wijngaards
97ad1df343
ipset-pf-support, fix to log error on failure to open pf.
2024-07-01 17:06:11 +02:00
W.C.A. Wijngaards
2279cde8f7
ipset-pf-support, fix to remove unused include, free at end, adjust
...
qname for comparison.
2024-07-01 17:02:49 +02:00
W.C.A. Wijngaards
ff653a7ef8
Call module init init again, and new function startup and destartup.
...
NULL can be used if the function is not used. Open shared ports during
reload. Deinit is called during reload.
2024-07-01 16:10:07 +02:00
W.C.A. Wijngaards
fd11cd9182
ipset-pf-support, fix compilation, close of pf socket.
2024-07-01 14:54:45 +02:00
W.C.A. Wijngaards
3953f827fb
Merge branch 'master' of https://github.com/madroach/unbound into ipset-pf-support
2024-07-01 14:36:33 +02:00
W.C.A. Wijngaards
7fbc061846
- Fix ip-ratelimit-cookie setting, it was not applied.
2024-06-27 14:51:58 +02:00
Yorgos Thessalonikefs
70f73a33b3
- Explicitly set the RD bit for the mesh query flags when prefetching.
...
These queries have no waiting client but they need to be treated as
recursive.
2024-06-26 15:51:58 +02:00
Yorgos Thessalonikefs
b67fbb69e7
- Fix pkg-config availability check in dnstap/dnstap.m4 and
...
systemd.m4.
- autoconf.
2024-06-21 14:34:12 +02:00
Yorgos Thessalonikefs
902c79608c
- Fix #1092 : Ubuntu 22.04 Jammy fails to compile unbound 1.20.0; by
...
adding helpful text for the Python interpreter version and allowing
the default pkg-config unavailability error message to be shown.
- autoconf.
2024-06-19 15:27:50 +02:00
W.C.A. Wijngaards
08050dc939
- Fix #1091 : Build fails with OpenSSL >= 3.0 built with
...
OPENSSL_NO_DEPRECATED.
2024-06-17 12:28:45 +02:00
W.C.A. Wijngaards
9603924bb4
- Add unit test for validation of repeated use of a DNAME record.
2024-06-07 11:56:19 +02:00
W.C.A. Wijngaards
4c2da2b979
- Fix validation for repeated use of a DNAME record.
2024-06-06 15:28:21 +02:00
W.C.A. Wijngaards
1974732d19
- Fix typos for 'the the' in text.
2024-06-06 09:35:57 +02:00
W.C.A. Wijngaards
3cad5818a1
- Fix memory leak in setup of dsa sig.
2024-06-06 09:30:09 +02:00
Yorgos Thessalonikefs
ad12109191
- Merge #1080 : AddressSanitizer detection in tdir tests and memory leak
...
fixes.
2024-06-04 17:34:58 +02:00
Yorgos Thessalonikefs
f611220eb8
- Skip unbound-dnstap-socket unit test when not compiled with
...
--enable-debug.
2024-06-04 16:59:58 +02:00
W.C.A. Wijngaards
86fe9cbce5
- Fix to squelch connection reset by peer errors from log. And fix
...
that the tcp read errors are labeled as initial for the first calls.
2024-06-03 12:14:51 +02:00
Yorgos Thessalonikefs
ac609fcbfc
- Fix memory leak on exit for unbound-dnstap-socket; creates false negatives
...
during testing.
2024-05-31 12:11:17 +02:00
Yorgos Thessalonikefs
486985fbdf
- Fix memory leak when reload_keep_cache is used and num-threads changes.
2024-05-31 12:09:35 +02:00
Yorgos Thessalonikefs
caab100207
- Enable AddressSanitizer error detection in tdir tests.
2024-05-31 12:08:43 +02:00
W.C.A. Wijngaards
4b30e88eec
- Fix for #1079 : fix RPZ taglist in iterator callback that no client
...
info is like no taglist intersection.
2024-05-30 12:44:26 +02:00
W.C.A. Wijngaards
b6c7ea563f
- Fix #1079 : tags from tagged rpz zones are no longer honored after
...
upgrade from 1.19.3 to 1.20.0.
2024-05-30 12:11:30 +02:00
W.C.A. Wijngaards
910d7cf446
Changelog note for #1078 .
...
- Merge #1078 : Only check old pid if no username.
2024-05-29 14:45:01 +02:00
Wouter Wijngaards and GitHub
cd485f2036
Merge pull request #1078 from vopatek/master
...
Only check old pid if no username
2024-05-29 14:44:31 +02:00
Martin Vopatek
8ff1baf585
Only check old pid if no username
...
Do as the comment says and only check old pid if there is no username
configured.
2024-05-29 14:16:18 +02:00
Yorgos Thessalonikefs
5fc4673901
- Update patch to remove 'command' shell builtin and update error
...
text.
2024-05-27 17:17:48 +02:00
Michael Tokarev and Yorgos Thessalonikefs
faf3d358dc
unbound-control-setup: check openssl
...
Before doing anything, check if openssl binary (which we will use)
is available, and print a useful error message if it is not found.
2024-05-27 16:35:34 +02:00
Yorgos Thessalonikefs
f5a2160ba3
- Fix unused variable warning on compilation with no thread support.
2024-05-27 14:56:52 +02:00
W.C.A. Wijngaards
0c0c36f015
- Fix spelling of tcp-idle-timeout docs, from Michael Tokarev.
2024-05-27 14:36:35 +02:00
W.C.A. Wijngaards
47956de897
- Fix to enable that SERVFAIL is cached, for a short period, for more
...
cases. In the cases where limits are exceeded.
2024-05-27 13:53:16 +02:00
Yorgos Thessalonikefs
b30c869a59
Changelog entry for #1059 :
...
- Fix #1059 : Intermittent DNS blocking failure with local-zone and
always_nxdomain. Addition of local_zones dynamically via
unbound-control was not finding the zone's parent correctly.
2024-05-24 15:24:52 +02:00
Yorgos Thessalonikefs and GitHub
6f030e9672
Proper parent identification for dynamically entered local zones ( #1076 )
...
- Fix #1059 : Intermittent DNS blocking failure with local-zone and
always_nxdomain. Addition of local_zones dynamically via
unbound-control was not finding the zone's parent correctly.
2024-05-24 15:21:40 +02:00
W.C.A. Wijngaards
7107d3c9e7
- Fix #1064 : Unbound 1.20 Cachedb broken?
...
Add unit test for validation status commit.
2024-05-24 09:06:48 +02:00
W.C.A. Wijngaards
fbdc06ebc4
- Fix for #1064 : Fix that cachedb expired messages are considered
...
insecure, and thus can be served to clients when dnssec is enabled.
2024-05-21 17:06:18 +02:00
W.C.A. Wijngaards
d149e755fd
- Fix for parse end of forward-zone, stub-zone and view.
2024-05-21 12:04:57 +02:00
W.C.A. Wijngaards
86ee8ccd12
- Fix to print a parse error when config is read with no name for
...
a forward-zone, stub-zone or view.
2024-05-21 11:54:18 +02:00
W.C.A. Wijngaards
8d6a1ba811
Changelog note for #1073 .
...
- Merge #1073 : fix null pointer dereference issue in function
ub_ctx_set_fwd.
2024-05-21 11:52:47 +02:00
Wouter Wijngaards and GitHub
9ccb8d5f20
Merge pull request #1073 from xiaoxiaoafeifei/master
...
fix null pointer dereference issue in function ub_ctx_set_fwd
2024-05-21 11:51:52 +02:00
zhailiangliang
8e43e2574c
fix null pointer dereference issue in function ub_ctx_set_fwd of file libunbound/libunbound.c
2024-05-21 08:40:35 +00:00
Yorgos Thessalonikefs
2e70506763
Changelog entry for #1069 :
...
- Merge #1069 : Fix unbound-control stdin commands for multi-process
Unbounds.
2024-05-17 10:31:20 +02:00
7f184c8ca8
Fix unbound-control stdin commands for multi-process Unbounds ( #1069 )
...
- Fix unbound-control commands that read stdin in multi-process
operation (local_zones_remove, local_zones, local_datas_remove,
local_datas, view_local_datas_remove, view_local_datas). They will
be properly distributed to all processes. dump_cache and load_cache
are no longer supported in multi-process operation.
- Remove testdata/remote-threaded.tdir. testdata/09-unbound-control.tdir
now checks both single and multi process/thread operation.
---------
Co-authored-by: Wouter Wijngaards <wcawijngaards@users.noreply.github.com >
2024-05-17 10:25:24 +02:00
W.C.A. Wijngaards
da2b307aa3
- Fix #1071 : [FR] Clear both in-memory and cachedb module cache with
...
`unbound-control flush*` commands.
2024-05-16 16:56:58 +02:00
Yorgos Thessalonikefs
739a88ceed
Changelog entry for #1070 :
...
- Merge #1070 : Fix rtt assignement for low values of
infra-cache-max-rtt.
2024-05-16 13:43:24 +02:00
Yorgos Thessalonikefs and GitHub
3ff5c7a74d
Fix rtt assignement for low values of infra-cache-max-rtt ( #1070 )
...
* Fix rtt assignement for still useful servers when a low value for
infra-cache-max-rtt is configured.
2024-05-16 13:42:32 +02:00
Yorgos Thessalonikefs
1048c4a28c
- Add missing common functions to tdir tests.
2024-05-15 11:20:36 +02:00
W.C.A. Wijngaards
7de009f99a
- Fix when the mesh jostle is exceeded that nameserver targets are
...
marked as resolved, so that the lookup is not stuck on the
requestlist.
2024-05-10 09:50:35 +02:00
W.C.A. Wijngaards
95669855fb
- Fix to squelch udp connect errors in the log at low verbosity about
...
invalid argument for IPv6 link local addresses.
2024-05-08 16:40:41 +02:00
W.C.A. Wijngaards
56e7cade28
The code repository continues with version 1.20.1.
2024-05-08 11:10:53 +02:00
W.C.A. Wijngaards
c085a53268
- Fix for #1062 : declaration before statement, avoid print of null,
...
and redundant check for array size.
And changelog note for merge of #1062 .
2024-05-07 14:05:21 +02:00
Wouter Wijngaards and GitHub
49569b81aa
Merge pull request #1062 from xiaoxiaoafeifei/master
...
Fix potential overflow bug while parsing port in function cfg_mark_ports
2024-05-07 14:02:21 +02:00
zhailiangliang
4497e8a154
Fix potential overflow bug while parsing port in function cfg_mark_ports
2024-05-07 11:35:52 +00:00
W.C.A. Wijngaards
b9525c5fd4
- Set version number to 1.20.0 for release.
2024-05-01 10:15:12 +02:00
W.C.A. Wijngaards
c3206f4568
- Fix for the DNSBomb vulnerability CVE-2024-33655. Thanks to Xiang Li
...
from the Network and Information Security Lab of Tsinghua University
for reporting it.
2024-05-01 10:10:58 +02:00
W.C.A. Wijngaards
9abed3fc83
- Fix doxygen comment for errinf_to_str_bogus.
2024-04-29 13:42:26 +02:00
Yorgos Thessalonikefs
63a6b7b255
- Cleanup unnecessary strdup calls for EDE strings.
2024-04-29 10:15:19 +02:00
W.C.A. Wijngaards
15dc8e8a3f
- Man page entry for unbound-checkconf -q.
2024-04-26 14:54:25 +02:00
Yorgos Thessalonikefs
cd4a017e96
- Fix #876 : [FR] can unbound-checkconf be silenced when configuration
...
is valid?
2024-04-26 14:50:39 +02:00
W.C.A. Wijngaards
82c0207fa6
- Add unit tests for cachedb and subnet cache expired data.
2024-04-26 13:33:26 +02:00
W.C.A. Wijngaards
7c5e765b3b
- Fix cachedb with serve-expired-client-timeout disabled. The edns
...
subnet module deletes global cache and cachedb cache when it
stores a result, and serve-expired is enabled, so that the global
reply, that is older than the ecs reply, does not return after
the ecs reply expires.
2024-04-26 13:32:15 +02:00
W.C.A. Wijngaards
f456d97a34
- Fix doc unit test for out of directory build.
2024-04-25 17:06:06 +02:00
W.C.A. Wijngaards
8b490b1540
- Fix to disable fragmentation on systems with IP_DONTFRAG,
...
with a nonzero value for the socket option argument.
2024-04-25 12:53:05 +02:00
W.C.A. Wijngaards
b3951e5885
Changelog note for #1041 and #1038 .
...
- Merge #1041 : Stub and Forward unshare. This has one structure
for them and fixes #1038 : fatal error: Could not initialize
thread / error: reading root hints.
2024-04-25 11:12:27 +02:00
Wouter Wijngaards and GitHub
ced9762b14
Merge pull request #1041 from NLnetLabs/stubfwd-unshare
...
Stub and Forward unshare
2024-04-25 11:11:00 +02:00
9b9bba9f02
Update locking management for iter_fwd and iter_hints methods. ( #1054 )
...
fast reload, move most of the locking management to iter_fwd and
iter_hints methods. The caller still has the ability to handle its
own locking, if desired, for atomic operations on sets of different
structs.
Co-authored-by: Wouter Wijngaards <wcawijngaards@users.noreply.github.com >
2024-04-25 11:05:58 +02:00
W.C.A. Wijngaards
07859a9ef3
- Fix configure flto check error, by finding grep for it.
2024-04-25 10:53:35 +02:00
W.C.A. Wijngaards
cb74467acb
- Fix ci workflow for macos for moved install locations.
2024-04-24 16:31:44 +02:00
Yorgos Thessalonikefs
62dad42152
- Merge #1053 : Remove child delegations from cache when grandchild
...
delegations are returned from parent.
2024-04-23 14:24:07 +02:00
Yorgos Thessalonikefs
3ec74d1e3a
- When a granchild delegation is returned, remove any cached child delegations
...
up to parent to not cause delegation invalidation because of an
expired child delegation that would never be updated. Most likely to
happen without qname-minimisation. Reported by Roland van Rijswijk-Deij.
2024-04-22 15:46:06 +02:00
W.C.A. Wijngaards
52aff65e35
- Fix edns subnet to sort rrset references when storing messages
...
in the cache. This fixes a race condition in the rrset locks.
2024-04-22 13:44:42 +02:00
W.C.A. Wijngaards
5994fb3db5
- Add checklock feature verbose_locking to trace locks and unlocks.
2024-04-22 13:42:35 +02:00
Yorgos Thessalonikefs
0dbcb45d28
Changelog entry for #1049 :
...
- Merge #1049 from Petr Menšík: Py_NoSiteFlag is not needed since
Python 3.8
2024-04-15 14:49:14 +02:00
Yorgos Thessalonikefs and GitHub
d71f257215
Merge pull request #1049 from InfrastructureServices/python3.12-Py_NoSiteFlag-warning
...
Py_NoSiteFlag is not needed since Python 3.8
2024-04-15 14:47:45 +02:00
Petr Mensik
b11d234f77
Py_NoSiteFlag is not needed since Python 3.8
...
Python since 3.12 prints warning about Py_NoSiteFlag is deprecated. It
seems that variable is not needed since Python 3.8, since it sets in
such cases directly config.site_import variable few moments later.
Move using deprecated variable to versions before that flag in config
could be used only.
This should fix warning like:
pythonmod/pythonmod.c: In function 'pythonmod_init':
pythonmod/pythonmod.c:359:7: warning: 'Py_NoSiteFlag' is deprecated [-Wdeprecated-declarations]
359 | Py_NoSiteFlag = 1;
| ^~~~~~~~~~~~~
In file included from /usr/include/python3.12/Python.h:48,
from pythonmod/pythonmod.c:54:
/usr/include/python3.12/cpython/pydebug.h:14:37: note: declared here
14 | Py_DEPRECATED(3.12) PyAPI_DATA(int) Py_NoSiteFlag;
| ^~~~~~~~~~~~~
https://docs.python.org/3/c-api/init.html#c.Py_NoSiteFlag
2024-04-15 13:52:41 +02:00
W.C.A. Wijngaards
0d4c5aa421
- Fix configure, autoconf for #1048 .
2024-04-15 12:17:56 +02:00
W.C.A. Wijngaards
9e60f93b84
Changelog note for #1048 .
...
- Fix #1048 : Update ax_pkg_swig.m4 and ax_pthread.m4.
2024-04-15 12:15:54 +02:00
Wouter Wijngaards and GitHub
9d63e8f093
Merge pull request #1048 from InfrastructureServices/configure-m4-refresh
...
Update ax_pkg_swig.m4 and ax_pthread.m4
2024-04-15 12:15:26 +02:00
Petr Mensik
4c40253df7
Update ax_pkg_swig.m4 and ax_pthread.m4
...
Use vanilla m4 files with known source. Prepared for possible removal at
build time if the system already has autoconf-archive source present.
Switch to AX_PKG_SWIG macro for versioned or unversioned swig detection.
2024-04-15 11:54:46 +02:00
W.C.A. Wijngaards
491b56d051
- Fixup cachedb to not refetch when serve-expired-client-timeout is
...
used.
2024-04-12 14:22:18 +02:00
W.C.A. Wijngaards
4d530920e0
- Fixup unit test for cachedb server expired client timeout with
...
a check if response if from upstream or from cachedb.
2024-04-12 11:51:00 +02:00
W.C.A. Wijngaards
08fb9a9209
- Fix cachedb for serve-expired with serve-expired-client-timeout.
2024-04-12 11:26:53 +02:00
W.C.A. Wijngaards
04ff2672b5
- Fix to not reply serve expired unless enabled for cachedb.
2024-04-10 17:06:01 +02:00
W.C.A. Wijngaards
d47849a26e
- Fix cachedb for serve-expired with serve-expired-reply-ttl.
2024-04-10 17:01:57 +02:00
W.C.A. Wijngaards
63ee97d0fd
- Fix makefile dependencies for fake_event.c.
2024-04-10 14:04:39 +02:00
W.C.A. Wijngaards
bd74a32b79
- Extended test for cachedb serve expired.
2024-04-10 13:08:23 +02:00
W.C.A. Wijngaards
b990be88ef
- Add test for cachedb serve expired.
2024-04-10 12:36:21 +02:00
W.C.A. Wijngaards
cccf5e73c0
- Fixup compile without cachedb.
2024-04-10 11:33:52 +02:00
W.C.A. Wijngaards
f3f85e5a11
- Fixup compile without cachedb.
2024-04-10 11:29:10 +02:00
W.C.A. Wijngaards
d55511f1dd
- Fixup compile without cachedb.
2024-04-10 11:27:08 +02:00
W.C.A. Wijngaards
d98c7b9ae3
- Implement cachedb-check-when-serve-expired: yes option, default
...
is enabled. When serve expired is enabled with cachedb, it first
checks cachedb before serving the expired response.
2024-04-10 11:21:28 +02:00
Yorgos Thessalonikefs
a30221c5bb
- Merge #1043 from xiaoxiaoafeifei: Add loongarch support; updates
...
config.guess(2024-01-01) and config.sub(2024-01-01), verified
with upstream.
2024-04-09 17:00:59 +02:00
zhailiangliang
411e843fc4
Add loongarch support:
...
1. update config.guess(2024-01-01) and config.sub(2024-01-01)
2. add loongarch to little endian support
2024-04-09 11:15:14 +08:00
Yorgos Thessalonikefs
8575d5b35c
- Fix #595 : unbound-anchor cannot deal with full disk; it will now
...
first write out to a temp file before replacing the original one,
like Unbound already does for auto-trust-anchor-file.
2024-04-08 14:15:03 +02:00
W.C.A. Wijngaards
ba16e41160
- Fix comment syntax for view function views_find_view.
2024-04-05 16:11:29 +02:00
Yorgos Thessalonikefs
708d5229ae
- Merge #1027 : Introduce 'cache-min-negative-ttl' option.
2024-04-05 11:44:37 +02:00
Yorgos Thessalonikefs
fb4a7d65d7
- Fix #369 : dnstap showing extra responses; for client responses
...
right from the cache when replying with expired data or
prefetching.
2024-04-03 15:18:13 +02:00
W.C.A. Wijngaards
d7353e6e99
- fast-reload, helpful comments for hints lookup function return value.
2024-04-03 13:55:57 +02:00
W.C.A. Wijngaards
48113cfaba
- fast-reload, unshared stub hints, making the structure locked, with an rwlock.
2024-04-03 13:55:57 +02:00
W.C.A. Wijngaards
c0b5754ef7
- fast-reload, for nonthreaded, the unbound-control commands forward,
...
forward_add and forward_delete should be distributed to other processes,
but when threaded, they should not be distributed to other threads because
the structure is not thread specific any more.
2024-04-03 13:55:57 +02:00
W.C.A. Wijngaards
f2fb498c69
- fast-reload, unshare forwards, making the structure locked, with an rwlock.
2024-04-03 13:55:54 +02:00
Yorgos Thessalonikefs
91e8e0e511
- Fix #1035 : Potential Bug while parsing port from the "stub-host"
...
string; also affected forward-zones and remote-control host
directives.
2024-04-03 13:37:57 +02:00
W.C.A. Wijngaards
dfff8d23cf
- For #1040 : adjust error text and disallow negative ports in other
...
parts of cfg_mark_ports.
2024-04-03 10:16:18 +02:00
W.C.A. Wijngaards
103d9a68fa
Changelog note for #1040
...
- Fix #1040 : fix heap-buffer-overflow issue in function cfg_mark_ports
of file util/config_file.c.
2024-04-03 10:03:04 +02:00
Wouter Wijngaards and GitHub
a814fe8c5f
Merge pull request #1040 from xiaoxiaoafeifei/master
...
fix heap-buffer-overflow issue in function cfg_mark_ports of file util/config_file.c
2024-04-03 10:02:45 +02:00
zhailiangliang
193401e754
fix heap-buffer-overflow issue in function cfg_mark_ports of file util/config_file.c
2024-04-03 15:40:58 +08:00
W.C.A. Wijngaards
e1aeabde44
- Fix for crypto related failures to have a better error string.
2024-03-28 09:58:57 +01:00
W.C.A. Wijngaards
6d1e61173b
- Fix #1034 : DoT forward-zone via unbound-control.
2024-03-28 09:58:03 +01:00
W.C.A. Wijngaards
6f82b5be4a
- Fix that the server does not chown the pidfile.
2024-03-27 14:52:25 +01:00
W.C.A. Wijngaards
192f1b0e2b
- Fix that when the server truncates the pidfile, it does not follow
...
symbolic links.
2024-03-27 14:07:54 +01:00
W.C.A. Wijngaards
238a796e38
- Fix to add unit test for lruhash space that exercises the routines.
2024-03-27 13:33:46 +01:00
W.C.A. Wijngaards
fe393ac355
- Fix comment in lruhash space function.
2024-03-27 12:30:00 +01:00
W.C.A. Wijngaards
3ea078baf6
- Fix for #1032 , add safeguard to make table space positive.
2024-03-27 11:49:20 +01:00
W.C.A. Wijngaards
eb3e1ae24f
- Fix #1032 : The size of subnet_msg_cache calculation mistake cause
...
memory usage increased beyond expectations.
2024-03-27 11:45:34 +01:00
W.C.A. Wijngaards
c2b20c585e
- Fix name of unit test for subnet cache response.
2024-03-27 11:43:55 +01:00
Yorgos Thessalonikefs
07561964fc
- For #831 : Format text, use exclamation icon and explicit label
...
names.
2024-03-25 22:02:08 +01:00
Yorgos Thessalonikefs
ce8c1ce5b0
Changelog entry for #831
...
- Merge #831 from Pierre4012: Improve Windows NSIS installer
script (setup.nsi).
2024-03-25 16:46:25 +01:00
Pierre4012 and GitHub
ef60dcac31
Improve Windows NSIS installer script (setup.nsi) ( #831 )
...
* Improve Windows NSIS installer script (setup.nsi)
Two improvements of installer script :
- avoid error message when Unbound is running,
- add "DisplayVersion" in registry thus Windows package manager (Winget) can handle Unbound.
* Update setup.nsi ask user to stop unbound service + DisplayVersion in Windows registry
2024-03-25 16:43:49 +01:00
W.C.A. Wijngaards
73bd5a19aa
- Fix localdata and rpz localdata to match CNAME only if no direct
...
type match is available.
2024-03-19 10:21:10 +01:00
W.C.A. Wijngaards
fef974ca5c
- Fix rpz so that rpz CNAME can apply after rpz CNAME. And fix that
...
clientip and nsip can give a CNAME.
2024-03-19 09:32:53 +01:00
W.C.A. Wijngaards
8dbf46913b
- Fix rpz for qtype CNAME after nameserver trigger.
2024-03-18 14:36:29 +01:00
W.C.A. Wijngaards
e46b188fe8
- Add rpz unit test for nsip action override.
2024-03-18 14:11:43 +01:00
W.C.A. Wijngaards
e6b1f9a4c3
- Fix rpz that copies the cname override completely to the temp
...
region, so there are no references to the rpz region.
2024-03-18 13:52:59 +01:00
W.C.A. Wijngaards
39cfc8c1c0
- Fix rpz, it follows iterator CNAMEs for nsip and nsdname and sets
...
the reply query_info values, that is better for debug logging.
2024-03-18 12:45:00 +01:00
W.C.A. Wijngaards
79e25e192c
- Fix that rpz CNAME content is limited to the max number of cnames.
2024-03-18 11:25:29 +01:00
Yorgos Thessalonikefs
792089f523
Merge branch 'features/makedist-persist-windir'
2024-03-15 17:22:00 +01:00
Yorgos Thessalonikefs
34636caa2d
- For windows build, persist the openssl and expat directories for
...
repeated builds while debugging.
2024-03-15 16:59:46 +01:00
W.C.A. Wijngaards
2993437eaa
- Fix that addrinfo is not kept around but copied and freed, so that
...
log-destaddr uses a copy of the information, much like NSD does.
2024-03-15 13:39:49 +01:00
W.C.A. Wijngaards
0bcc8c0211
- The code repository continues with version 1.19.4.
2024-03-14 10:33:13 +01:00
W.C.A. Wijngaards
4b54d8e15e
- Fix rpz for cname override action after nsdname and nsip triggers.
2024-03-13 17:14:14 +01:00
W.C.A. Wijngaards
afe52595a9
- Fix to unify codepath for local alias for rpz cname action override.
2024-03-13 16:12:48 +01:00
W.C.A. Wijngaards
4f417262e3
- Fix rpz that the rpz override is taken in case of clientip triggers.
...
Fix that the clientip passthru action is logged. Fix that the
clientip localdata action is logged. Fix rpz override action cname
for the clientip trigger.
2024-03-13 16:04:58 +01:00
W.C.A. Wijngaards
1db3b38104
- Fix #1029 : rpz trigger clientip and action rpz-passthru not working
...
as expected.
2024-03-13 13:45:04 +01:00
Yorgos Thessalonikefs
bc47f50926
Changelog entry for #1028 :
...
- Merge #1028 : Clearer documentation for tcp-idle-timeout and
edns-tcp-keepalive-timeout.
2024-03-12 14:52:57 +01:00
Yorgos Thessalonikefs and GitHub
e36b5a099c
Clearer documentation for tcp-idle-timeout and edns-tcp-keepalive-timeout ( #1028 )
...
* - Clearer documentation for tcp-idle-timeout and
edns-tcp-keepalive-timeout.
* - Address review comment.
2024-03-12 14:52:00 +01:00
Yorgos Thessalonikefs
025881d0e9
- Introduce 'cache-min-negative-ttl' option to bound the minimum TTL for
...
negative answers overriding 'cache-min-ttl'.
2024-03-12 11:24:59 +01:00
W.C.A. Wijngaards
320d0a5f1b
- Fix #1021 Inconsistent Behavior with Changing rpz-cname-override
...
and doing a unbound-control reload.
2024-03-11 16:31:58 +01:00
W.C.A. Wijngaards
d382210fce
Update doc/Changelog to note the fixes included in 1.19.3rc2.
2024-03-11 12:30:24 +01:00
W.C.A. Wijngaards
7b62767e16
- Fix unbound-control-setup.cmd to have CA v3 basicConstraints,
...
like unbound-control-setup.sh has.
2024-03-08 17:18:05 +01:00
W.C.A. Wijngaards
6568841bb0
- Fix doc test so it ignores but outputs unsupported doxygen options.
2024-03-08 16:43:24 +01:00
W.C.A. Wijngaards
e361f6b284
- Fix qname minimisation for reply with a DNAME for qtype CNAME that
...
answers it.
2024-03-08 16:33:17 +01:00
Yorgos Thessalonikefs
53766917ef
- Update doc/unbound.doxygen with 'doxygen -u'. Fixes option
...
deprecation warnings and updates with newer defaults.
2024-03-08 16:13:36 +01:00
W.C.A. Wijngaards
2a255076f5
- Fix validator classification of qtype DNAME for positive and
...
redirection answers, and fix validator signature routine for dealing
with the synthesized CNAME for a DNAME without previously
encountering it and also for when the qtype is DNAME.
2024-03-08 14:10:06 +01:00
W.C.A. Wijngaards
fb080e7853
- Remove unused portion from iter_dname_ttl unit test.
2024-03-08 09:51:37 +01:00
W.C.A. Wijngaards
0818841038
- Fix TTL of synthesized CNAME when a DNAME is used from cache.
2024-03-08 09:47:59 +01:00
W.C.A. Wijngaards
939baebfe7
- Fix unbound-control-setup.cmd to use 3072 bits so that certificates
...
are long enough for newer OpenSSL versions.
2024-03-08 09:07:36 +01:00
W.C.A. Wijngaards
326ba26522
- Version set to 1.19.3 for release. After 1.19.2 point release with
...
security fix for CVE-2024-1931, Denial of service when trimming
EDE text on positive replies. The code repo includes the fix and
is for version 1.19.3.
2024-03-07 11:06:42 +01:00
W.C.A. Wijngaards
ec0b510f1c
- Fix for #1022 : Fix ede prohibited in access control refused answers.
2024-03-05 13:39:29 +01:00
W.C.A. Wijngaards
be626f7c53
- Fix edns subnet replies for scope zero answers to not get stored
...
in the global cache, and in cachedb, when the upstream replies
without an EDNS record.
2024-03-04 13:20:13 +01:00
W.C.A. Wijngaards
3096e4930e
- Move github workflows to use checkoutv4.
2024-02-28 11:44:52 +01:00
Yorgos Thessalonikefs
33bdf44a04
- Document the suspend argument for process_ds_response().
2024-02-23 14:34:33 +01:00
W.C.A. Wijngaards
ccbe31c21f
- Fix trim of EDE text from large udp responses from spinning cpu.
2024-02-22 16:22:31 +01:00
Yorgos Thessalonikefs
c6746499c1
Changelog entry for #1010 :
...
- Merge #1010 : Mention REFUSED has the TC bit set with unmatched
allow_cookie acl in the manpage. It also fixes the code to match the
documentation about clients with a valid cookie that bypass the
ratelimit regardless of the allow_cookie acl.
2024-02-20 15:33:18 +01:00
Willem Toorop and GitHub
e1229e375f
Mention REFUSED has the TC bit set with unmatched allow_cookie acl in the manpage ( #1010 )
...
* Mention REFUSED with TC with unmatched allow_cookie acl in manpage
Also moved the part about bypassing ip-ratelimit to the ip-ratelimit
description as it will be bypassed with a valid DNS-Cookie regardless of the
allow_cookie acl.
* Apply suggestions from code review
* Update doc/unbound.conf.5.in
* DNS-Cookies should bypass ip-ratelimit setting
2024-02-20 15:29:34 +01:00
W.C.A. Wijngaards
be27499d39
- These fixes are part of the 1.19.1 release, that is a security
...
point release on 1.19.0, the code repository continues with these
fixes, with version number 1.19.2.
2024-02-13 14:03:30 +01:00
W.C.A. Wijngaards
56a2b564ef
Merge commit '92f2a1ca690a44880f4c4fa70a4b5a4b029aaf1c'
2024-02-13 13:58:09 +01:00
W.C.A. Wijngaards
9a00877af9
Merge commit '882903f2fa800c4cb6f5e225b728e2887bb7b9ae'
2024-02-13 13:57:56 +01:00
W.C.A. Wijngaards
92f2a1ca69
- Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU.
2024-02-13 13:02:43 +01:00
W.C.A. Wijngaards
882903f2fa
- Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to
...
exhaust CPU resources and stall DNS resolvers.
2024-02-13 13:02:08 +01:00
W.C.A. Wijngaards
54d86dd73b
- Fix documentation for access-control in the unbound.conf man page.
2024-02-08 14:36:18 +01:00
Yorgos Thessalonikefs
b496714caa
- autoconf.
2024-02-07 10:51:16 +01:00
Yorgos Thessalonikefs
3f5175584b
- For #1006 : fix logic error introduced by previous fix.
2024-02-07 10:49:28 +01:00
Yorgos Thessalonikefs
11fff226f3
- autoheader, autoconf.
2024-02-07 10:42:39 +01:00
Yorgos Thessalonikefs
93490a0fc1
- Fix #1006 : Can't find protobuf-c package since #999 .
2024-02-07 10:38:52 +01:00
W.C.A. Wijngaards
0585c3e5fd
Autoconf and changelog note for #999
...
- Merge #999 : Search for protobuf-c with pkg-config.
2024-01-30 16:24:41 +01:00
Wouter Wijngaards and GitHub
0b74f2a007
Merge pull request #999 from NickCao/master
...
Search for protobuf-c with pkg-config
2024-01-30 16:23:43 +01:00
Nick Cao
59d98b9ef6
Search for protobuf-c with pkg-config
2024-01-26 17:52:24 -05:00
Yorgos Thessalonikefs
3522451600
- Update message TTL when using cached RRSETs. It could result in
...
non-expired messages with expired RRSETs (non-usable messages by
Unbound).
2024-01-23 10:10:37 +01:00
Yorgos Thessalonikefs
fe03bacd6c
- Update error printout for duplicate trust anchors to include the
...
trust anchor name (relates to #920 ).
2024-01-22 15:54:36 +01:00
W.C.A. Wijngaards
1f46d5945b
- Fix for #997 : Print details for SSL certificate failure.
2024-01-22 09:40:36 +01:00
W.C.A. Wijngaards
585d73bf7c
For analysis workflow, clean up the script to use OpenSSL Configure
...
without change.
2024-01-17 16:23:18 +01:00
W.C.A. Wijngaards
9e84cebfdb
- workflow for analysis, cleanup of windows compile with msys2 perl.
2024-01-17 16:20:22 +01:00
W.C.A. Wijngaards
d1a2bd67da
- Fix warning for windres on resource files due to redefinition.
2024-01-17 16:19:56 +01:00
W.C.A. Wijngaards
7708429d35
For workflow, set perl interpreter for build.
2024-01-17 15:08:56 +01:00
W.C.A. Wijngaards
6045911d95
- Fix for workflow
2024-01-17 14:58:44 +01:00
W.C.A. Wijngaards
1b212aa073
For workflow, look for pacman.
2024-01-17 14:56:10 +01:00
W.C.A. Wijngaards
4d48166835
For workflow, use msys2 perl.
2024-01-17 14:53:23 +01:00
W.C.A. Wijngaards
437bac370a
In workflow, use strawberry perl to run configure script.
2024-01-17 14:40:57 +01:00
W.C.A. Wijngaards
546062d3a3
For workflow, change path separator.
2024-01-17 14:36:35 +01:00
W.C.A. Wijngaards
576b93c99f
For windows runner, look at perl contents.
2024-01-17 14:30:48 +01:00
W.C.A. Wijngaards
180275c4e0
Fix to install with cpanmin a missing perl module for the windows workflow.
2024-01-17 14:07:57 +01:00
W.C.A. Wijngaards
379e4b68f5
Fix for workflow to install perl module.
2024-01-17 14:03:30 +01:00
W.C.A. Wijngaards
74b4d81992
- Update workflow for ports to use newer openssl on windows compile.
2024-01-17 13:45:59 +01:00
W.C.A. Wijngaards
fea8f0d5fd
Changelog note for #993
...
- Merge #993 : Update b.root-servers.net also in example config file.
2024-01-16 16:44:15 +01:00
Wouter Wijngaards and GitHub
0e5dab5eaf
Merge pull request #993 from InfrastructureServices/b.root-servers.net-conf
...
Update b.root-servers.net also in example config file
2024-01-16 16:44:02 +01:00
W.C.A. Wijngaards
c550bc154f
- Fix to link with libssp for libcrypto and getaddrinfo check for
...
only header. Also update crosscompile to remove ssp for 32bit.
2024-01-16 16:40:14 +01:00
Petr Mensik
40fcb91206
Update b.root-servers.net also in example config file
...
Addition to commit a8739bad76
2024-01-16 16:14:13 +01:00
W.C.A. Wijngaards
c8554ff48c
- Fix to link with -lcrypt32 for OpenSSL 3.2.0 on Windows.
2024-01-15 16:44:27 +01:00
W.C.A. Wijngaards
3d95cef08c
Changelog note for #988 .
...
- Merge #988 : Fix NLnetLabs#981: dump_cache truncates large records.
2024-01-09 08:41:52 +01:00
Wouter Wijngaards and GitHub
9cd724cf5e
Merge pull request #988 from dyunwei/master
...
Fix NLnetLabs#981: dump_cache truncates large records.
2024-01-09 08:41:30 +01:00
dyunwei
eb7eb5ce68
Fix NLnetLabs#981: dump_cache truncates large records.
2024-01-09 14:17:31 +08:00
W.C.A. Wijngaards
418eeb642c
- Fix unit test for #987 change in udp1xxx retry packet send.
2024-01-05 14:11:55 +01:00
W.C.A. Wijngaards
8ac56d004d
Changelog note for #987
...
- Merge #987 : skip edns frag retry if advertised udp payload size is
not smaller.
2024-01-05 13:47:30 +01:00
Wouter Wijngaards and GitHub
52a76583c5
Merge pull request #987 from borisVanhoof/skip_edns_frag_retry
...
skip edns frag retry if advertised udp payload size is not smaller
2024-01-05 13:47:15 +01:00
sahnalys12
b1d02cc94f
skip edns frag retry if advertised udp payload size is not smaller
...
If serviced query is in UDP_EDNS_FRAG mode, and EDNS_ADVERTISED_SIZE
is 1232 (the default) or more, then the retry will have the same edns
udp payload size with the same result.
2024-01-05 12:16:23 +01:00
W.C.A. Wijngaards
b9b488b6d3
- Remove unneeded newlines and improve indentation in remote control
...
code.
2024-01-04 17:06:15 +01:00
W.C.A. Wijngaards
9a2d0238a8
- Fix #983 : Sha1 runtime insecure change was incomplete.
2024-01-03 13:33:43 +01:00
W.C.A. Wijngaards
5cc21690eb
Changelog note for #985 .
...
- Merge #985 : Add DoH and DoT to dnstap message.
2024-01-03 10:37:44 +01:00
Wouter Wijngaards and GitHub
f80f65d58c
Merge pull request #985 from k-akashi/dnstap_dot_doh
...
Add DoH and DoT to dnstap message
2024-01-03 10:36:38 +01:00
W.C.A. Wijngaards
df284fbe65
Changelog note for #979 and #980 .
...
- Merge #980 : DoH: reject non-h2 early. To fix #979 : Improve errors
for non-HTTP/2 DoH clients.
2024-01-03 10:04:06 +01:00
Wouter Wijngaards and GitHub
b632ebf129
Merge pull request #980 from jsha/reject-non-h2
...
DoH: reject non-h2 early
2024-01-03 09:59:15 +01:00
k-akashi
4b9cd8e81d
Add DoH and DoT to dnstap message
2023-12-27 07:26:21 +09:00
Yorgos Thessalonikefs
6c82f4ae9b
- Update example.conf with cookie options.
2023-12-22 11:42:20 +01:00
Jacob Hoffman-Andrews
87644fa46b
DoH: reject non-h2 early
...
Previously, non-h2 connections would be accepted, and then error out
with a verbose message "http2: session_recv from ____ failed,
error: Received bad client magic byte string". Instead, we can detect
absence of h2 support at connection time and reject with a clearer
verbose message.
2023-12-13 16:58:44 -08:00
W.C.A. Wijngaards
22dc376392
Fixup doc/Changelog.
2023-12-08 17:17:23 +01:00
W.C.A. Wijngaards
4ef1fb5a24
- Fix root_zonemd unit test, it checks that the root ZONEMD verifies,
...
now that the root has a valid ZONEMD.
2023-12-08 17:15:35 +01:00
Yorgos Thessalonikefs
be6fd80a1c
- Merge PR #973 : Use the origin (DNAME) TTL for synthesized CNAMEs as per RFC 6672.
2023-12-08 09:23:26 +01:00
W.C.A. Wijngaards
c48a467b8e
Changelog note for #975
...
- Merge #975 : Fixed some syntax errors in rpl files.
2023-12-07 12:11:03 +01:00
Wouter Wijngaards and GitHub
557edbb84a
Merge pull request #975 from NLnetLabs/testdata-syntax
...
Fixed some syntax errors in rpl files.
2023-12-07 12:10:40 +01:00
Philip Homburg
0cfc6e6d95
Fixed some syntax errors in rpl files.
2023-12-07 11:38:01 +01:00
W.C.A. Wijngaards
2978106991
- Fix #974 : doc: default number of outgoing ports without libevent.
2023-12-07 09:41:03 +01:00
Yorgos Thessalonikefs
8517f49745
- Use the origin (DNAME) TTL for syntesized CNAMEs as per RFC 6672.
2023-12-06 23:40:01 +01:00
W.C.A. Wijngaards
6c76b4e2f8
- Fix tests to use new common.sh functions, wait_logfile and
...
kill_from_pidfile.
2023-12-06 16:32:06 +01:00
W.C.A. Wijngaards
c91bd60051
- Update test script file common.sh.
2023-12-06 16:14:24 +01:00
W.C.A. Wijngaards
a8739bad76
- Updated IPv4 and IPv6 address for b.root-servers.net in root hints.
2023-12-06 13:25:58 +01:00
W.C.A. Wijngaards
2b97442f2e
- iana portlist update.
2023-12-06 13:22:35 +01:00
W.C.A. Wijngaards
5997355e22
- Fix to sync the tests script file common.sh.
2023-12-06 11:58:14 +01:00
W.C.A. Wijngaards
d8bd9845cc
- Fix dnstap that assertion failed on logging other than UDP and TCP
...
traffic. It lists it as TCP traffic.
2023-12-05 13:14:08 +01:00
W.C.A. Wijngaards
3d1bc143af
- Fix #969 : [FR] distinguish Do53, DoT and DoH in the logs.
2023-12-05 10:05:51 +01:00
W.C.A. Wijngaards
72a25f825c
Changelog note for #971
...
- Merge #971 : fix 'WARNING: Message has 41 extra bytes at end'.
2023-12-05 09:09:42 +01:00
Wouter Wijngaards and GitHub
c4e0354876
Merge pull request #971 from dukeartem/master
...
fix 'WARNING: Message has 41 extra bytes at end'
2023-12-05 09:09:23 +01:00
Artem and GitHub
389e820878
fix 'WARNING: Message has 41 extra bytes at end'
2023-12-05 09:43:15 +03:00
Yorgos Thessalonikefs
a2f0186427
- Merge #968 : Replace the obsolescent fgrep with grep -F in tests.
2023-11-27 16:47:13 +01:00
W.C.A. Wijngaards
58d670a258
- Fix #964 : config.h.in~ backup file in release tar balls.
2023-11-27 16:04:33 +01:00
Yorgos Thessalonikefs
ca88669435
- Replace the obsolescent fgrep with grep -F in tests.
2023-11-24 15:51:17 +01:00
Yorgos Thessalonikefs
15a9b0f2be
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
...
systems.
2023-11-24 15:34:25 +01:00
W.C.A. Wijngaards
197bf15402
- Fix unit test parse of origin syntax.
2023-11-09 15:26:46 +01:00
W.C.A. Wijngaards
0bae242cbf
- The repository continues with 1.19.1.
2023-11-08 10:59:25 +01:00
W.C.A. Wijngaards
3352b1090e
- Set version number to 1.19.0.
...
- Tag for 1.19.0rc1 release.
2023-11-02 08:40:20 +01:00
W.C.A. Wijngaards
c4d17dd231
- Fix compilation without openssl, remove unused function warning.
2023-11-01 17:09:37 +01:00
W.C.A. Wijngaards
5f78f67e39
- Fix SSL compile failure for other missing definitions in
...
log_crypto_err_io_code_arg.
2023-11-01 14:20:52 +01:00
W.C.A. Wijngaards
b1d99bb6b6
- Fix SSL compile failure for definition in log_crypto_err_io_code_arg.
2023-11-01 14:14:02 +01:00
George Thessalonikefs
8914e9fd03
- Mention flex and bison in README.md when building from repository
...
source.
2023-11-01 13:57:06 +01:00
George Thessalonikefs
8d1d728d88
- Fix #941 : dnscrypt doesn't work after upgrade to 1.18 with
...
suggestion by dukeartem to also fix the udp_ancil with dnscrypt.
2023-10-31 22:41:06 +01:00
George Thessalonikefs
59c14c747a
Changelog entry for #930
...
- Merge #930 from Stuart Henderson: add void to
log_ident_revert_to_default declaration.
2023-10-30 12:18:01 +01:00
Yorgos Thessalonikefs and GitHub
ccdf29a5f8
Merge pull request #930 from sthen/patch-1
...
add void to log_ident_revert_to_default declaration
2023-10-30 11:53:39 +01:00
W.C.A. Wijngaards
a7e079ea16
- autoconf.
2023-10-30 10:44:23 +01:00
George Thessalonikefs
a97bed9d22
- Clearer configure text for missing protobuf-c development libraries.
2023-10-24 16:34:12 +02:00
W.C.A. Wijngaards
0ce68e97a7
Changelog entry for #951 .
...
- Merge #951 : Cachedb no store. The cachedb-no-store: yes option is
used to stop cachedb from writing messages to the backend storage.
It reads messages when data is available from the backend. The
default is no.
2023-10-20 17:01:13 +02:00
Wouter Wijngaards and GitHub
3f66230874
Merge pull request #951 from NLnetLabs/cachedb-no-store
...
Cachedb no store
2023-10-20 17:00:13 +02:00
W.C.A. Wijngaards
35d0a8a843
- Fix to print detailed errors when an SSL IO routine fails via
...
SSL_get_error.
2023-10-19 11:17:32 +02:00
George Thessalonikefs
44c3d4d2dc
- Changelog entry for:
...
Merge #955 from buevsan: fix ipset wrong behavior.
- Update testdata/ipset.tdir test for ipset fix.
2023-10-18 15:11:38 +02:00
Yorgos Thessalonikefs and GitHub
167772fbca
Merge pull request #955 from buevsan/fix-ipset
...
fix ipset wrong behavior
2023-10-18 15:08:08 +02:00
George Thessalonikefs
2f0b11673a
- Update the dns64_lookup.rpl test for the DNS64 fallback patch.
2023-10-18 12:59:54 +02:00
George Thessalonikefs
c5aa6a2286
- Changelog entry for DNS64 patches from Daniel Gröber.
2023-10-18 12:16:35 +02:00
George Thessalonikefs
d5522c3480
Fixes for dns64 fallback to plain AAAA when no A records:
...
- Cleanup if condition.
- Rename variable for readability.
2023-10-18 12:03:40 +02:00
Daniel Gröber via Unbound-users and George Thessalonikefs
c1e5e6781e
dns64: Fall back to plain AAAA query with synthall but no A records
...
Networks which only have tunneled IPv6 access but still want to go
IPv6-only internally can use unbound's DNS64 module together with the
dns64-synthall or dns64-ignore-aaaa options to direct most traffic (any
dualstack domain) to their NAT64.
There is only one problem with this setup, currently domains with only AAAA
records will fail to resolve.
To allow for this use-case arrange for the A sub-query to make the AAAA
super query advance along the module stack when no records are returned.
Signed-off-by: Daniel Gröber <dxld@darkboxed.org >
2023-10-18 12:03:40 +02:00
George Thessalonikefs
dd086e5bfd
Fixes for dns64 readability refactoring:
...
- Move declarations to the top for C90 compliance.
- Save cycles by not calling (yet) unneeded functions.
- Possible use of uninitialised value.
- Consistent formatting.
2023-10-18 12:03:40 +02:00
Daniel Gröber via Unbound-users and George Thessalonikefs
213bb7c6ed
dns64: Fix misleading indentation
...
Signed-off-by: Daniel Gröber <dxld@darkboxed.org >
2023-10-18 12:03:40 +02:00
Daniel Gröber via Unbound-users and George Thessalonikefs
0c88f98a3b
dns64: Refactor handle_event checks for readability
...
No functional change intended.
Signed-off-by: Daniel Gröber <dxld@darkboxed.org >
2023-10-18 12:03:40 +02:00
Alexander V. Buev
23ae0a9838
fix ipset wrong behavior
...
Issue description:
If local zone directive is assigned as following:
"local-zone domain.com ipset"
then any answers for query with names such as
"anytext1domain.com" or "example2domain.com"
will be added to ipset.
This commit fixes this issue.
2023-10-17 18:35:42 +03:00
W.C.A. Wijngaards
0f78bea4a3
- Fix #954 : Inconsistent RPZ handling for A record returned along with
...
CNAME.
2023-10-17 16:47:04 +02:00
George Thessalonikefs
4b627bd29e
- Update pymod tests for the new Python script variable.
2023-10-16 16:32:09 +02:00
George Thessalonikefs
e4510c76e5
- For multi Python module setups, clean previously parsed module
...
functions in __main__'s dictionary, if any, so that only current
module functions are registered.
2023-10-16 16:03:11 +02:00
George Thessalonikefs
122dd6c11e
- Expose the configured listening and outgoing interfaces, if any, as
...
a list of strings in the Python 'config_file' class instead of the
current Swig object proxy; fixes #79 .
2023-10-16 15:53:47 +02:00
George Thessalonikefs
63a5280f8f
- Expose the script filename in the Python module environment 'mod_env'
...
instead of the config_file structure which includes the linked list
of scripts in a multi Python module setup; fixes #79 .
2023-10-16 15:47:18 +02:00
George Thessalonikefs
07149f576a
- Better fix for infinite loop when reading multiple lines of input on
...
a broken remote control socket, by treating a zero byte line the
same as transmission end. Addesses #947 and #948 .
2023-10-13 14:58:16 +02:00
dbd2a43ab1
Apply suggestions from code review
...
Co-authored-by: Yorgos Thessalonikefs <george@nlnetlabs.nl >
2023-10-13 13:46:52 +02:00
W.C.A. Wijngaards
4a211a9117
- cachedb-no-store, example conf and man page documentation.
2023-10-13 11:37:18 +02:00
W.C.A. Wijngaards
18ebe165ba
Merge branch 'master' into cachedb-no-store
2023-10-12 14:51:12 +02:00
W.C.A. Wijngaards
908e1cb11a
Changelog note for #944 .
...
- Merge #944 : Disable EDNS DO.
Disable the EDNS DO flag in upstream requests. This can be helpful
for devices that cannot handle DNSSEC information. But it should not
be enabled otherwise, because that would stop DNSSEC validation. The
DNSSEC validation would not work for Unbound itself, and also not
for downstream users. Default is no. The option
is disable-edns-do: no
2023-10-12 14:05:31 +02:00
Wouter Wijngaards and GitHub
5c6c57ed89
Merge pull request #944 from NLnetLabs/disable-edns-do
...
Disable EDNS DO
2023-10-12 14:04:29 +02:00
W.C.A. Wijngaards
47094fd83f
Merge branch 'master' into cachedb-no-store
2023-10-11 13:51:34 +02:00
W.C.A. Wijngaards
67153f897e
- Fix for #949 : Fix pythonmod/ubmodule-tst.py for Python 3.x.
2023-10-11 13:47:28 +02:00
W.C.A. Wijngaards
f2528dc3ac
- Fix that cachedb does not warn when serve-expired is disabled about
...
use of serve-expired-reply-ttl and serve-expired-client-timeout.
2023-10-11 13:29:56 +02:00
W.C.A. Wijngaards
935bc162e1
- cachedb-no-store, unit test cachedb_no_store.tdir.
2023-10-11 12:01:55 +02:00
W.C.A. Wijngaards
d5954aff08
- Fix #949 : "could not create control compt".
2023-10-11 11:59:26 +02:00
George Thessalonikefs
e98b89651e
- Fix #850 : [FR] Ability to use specific database in Redis, with new
...
redis-logical-db configuration option.
2023-10-11 11:44:55 +02:00
George Thessalonikefs
516f90abdb
- Fix infinite loop when reading multiple lines of input on a broken
...
remote control socket. Addesses #947 and #948 .
2023-10-10 15:17:48 +02:00
W.C.A. Wijngaards
c09320c651
- Fix that printout of EDNS options shows the EDNS cookie option by
...
name.
2023-10-09 12:36:54 +02:00
W.C.A. Wijngaards
6d0812b567
- Fix edns subnet so that queries with a source prefix of zero cause
...
the recursor send no edns subnet option to the upstream.
2023-10-09 12:21:22 +02:00
b05154218c
Update doc/unbound.conf.5.in
...
Co-authored-by: Yorgos Thessalonikefs <george@nlnetlabs.nl >
2023-10-06 16:40:34 +02:00
c8ae3de610
Update validator/validator.c
...
Co-authored-by: Yorgos Thessalonikefs <george@nlnetlabs.nl >
2023-10-06 16:39:33 +02:00
W.C.A. Wijngaards
ae96aa0a6d
- cachedb-no-store, implement cachedb-no-store: yes configuration option.
2023-10-06 13:22:10 +02:00
W.C.A. Wijngaards
1e85749e6e
Merge branch 'master' into disable-edns-do
2023-10-05 15:57:41 +02:00
W.C.A. Wijngaards
b624ed5050
- disable-edns-do, validator init prints warning when disable-edns-do is
...
turned on, but there are trust anchors, and then turns off disable-edns-do.
2023-10-05 14:33:22 +02:00
W.C.A. Wijngaards
b865aca03a
- Fix #946 : Forwarder returns servfail on upstream response noerror no
...
data.
2023-10-04 18:16:22 +02:00
W.C.A. Wijngaards
2e7714e80c
- disable-edns-do, unbound-checkconf warns about disable-edns-do and DNSSEC
...
validation that is enabled, and suggests to turn one off.
2023-10-04 15:28:52 +02:00
W.C.A. Wijngaards
39df4f0923
- disable-edns-do, queriers receive no EDNS in response if the
...
disable-edns-do option is enabled and they set the DO flag. And unit test
for that.
2023-10-04 13:54:05 +02:00
W.C.A. Wijngaards
eff3e01ec3
Merge branch 'master' into disable-edns-do
2023-10-04 13:34:47 +02:00
George Thessalonikefs
13d4504dfc
- Merge #881 : Generalise the proxy protocol code.
2023-10-03 14:51:50 +02:00
George Thessalonikefs
9342bf685e
- Fix misplaced comment.
2023-10-02 16:13:23 +02:00
George Thessalonikefs
f804c087e4
proxy-protocol, review comments:
...
- more generic switch statement for address families;
- comment the protocol values as such in their definitions;
- less hardcoded values for address family and protocol combinations.
2023-09-29 17:31:52 +02:00
W.C.A. Wijngaards
0102360e92
root-zonemd-test, add test for ZONEMD usage from the root zone,
...
currently with the unsupported algorithm.
2023-09-29 16:03:08 +02:00
W.C.A. Wijngaards
ca481322d4
Merge branch 'master' into disable-edns-do
2023-09-28 16:49:01 +02:00
W.C.A. Wijngaards
654a7eab62
- Fix #942 : 1.18.0 libunbound DNS regression when built without
...
OpenSSL.
2023-09-22 13:15:35 +02:00
W.C.A. Wijngaards
4e5b0b7eec
- disable-edns-do, unit test checks lookup without EDNS DO flag.
2023-09-22 11:39:39 +02:00
W.C.A. Wijngaards
9aaafddf04
- disable-edns-do, the option turns of the EDNS DO flag when a message is
...
sent from the iterator.
2023-09-20 13:28:06 +02:00
W.C.A. Wijngaards
9cd282e001
Merge branch 'master' into disable-edns-do
2023-09-20 13:18:26 +02:00
W.C.A. Wijngaards
bd5dc855af
- Fix rpz tcp-only action with rpz triggers nsdname and nsip.
2023-09-18 09:55:39 +02:00
W.C.A. Wijngaards
31218166fc
- Fix to remove two c99 notations.
2023-09-15 13:30:30 +02:00
W.C.A. Wijngaards
6bdecdbc5a
Changelog note and autoconf for #936
...
- Merge #936 : Check for c99 with autoconf versions prior to 2.70.
2023-09-15 13:24:20 +02:00
Wouter Wijngaards and GitHub
45e6e71652
Merge pull request #936 from fobser/c99
...
Check for c99 with autoconf versions prior to 2.70
2023-09-15 13:23:28 +02:00
Florian Obser
3abb32c3ba
Check for c99 with autoconf versions prior to 2.70
2023-09-15 13:00:17 +02:00
W.C.A. Wijngaards
6e65343895
- Fix authority zone answers for obscured DNAMEs and delegations.
2023-09-14 11:37:49 +02:00
W.C.A. Wijngaards
d1977c679b
- disable-edns-do, doc and add option disable-edns-do: no.
2023-09-13 13:11:53 +02:00
W.C.A. Wijngaards
0ee44ef384
- Fix send of udp retries when ENOBUFS is returned. It stops looping
...
and also waits for the condition to go away. Reported by Florian
Obser.
2023-09-08 13:35:42 +02:00
Philip Homburg
1c8f0e0fc5
Avoid calling comm_point_udp_ancil_callback from comm_point_create_udp
2023-09-07 16:35:22 +02:00
Philip Homburg
17a557dfd5
Fix #928 (1.18 doesn't start on macOS/SunOS)
2023-09-07 16:35:22 +02:00
W.C.A. Wijngaards
8c751d48a2
- Fix to print EDE text in readable form in output logs.
2023-09-07 15:28:01 +02:00
W.C.A. Wijngaards
5b8a7340bb
- Fix to set ede match in unit test for rr length removal.
...
Changelog note.
2023-09-07 14:59:13 +02:00
W.C.A. Wijngaards
33784e612a
- Fix to set ede match in unit test for rr length removal.
2023-09-07 14:58:51 +02:00
W.C.A. Wijngaards
fdd5f8ff83
- Fix to add EDE text when RRs have been removed due to length.
2023-09-07 14:44:48 +02:00
W.C.A. Wijngaards
63616a5fce
- Fix to move msgparse_rrset_remove_rr code to util/msgparse.c.
2023-09-07 11:29:53 +02:00
W.C.A. Wijngaards
dfc00271d1
- Fix to scrub resource records of type A and AAAA that have an
...
inappropriate size. They are removed from responses.
2023-09-07 11:08:04 +02:00
W.C.A. Wijngaards
1143050ea6
Changelog note for #931
...
- Merge #931 : Prevent warnings from -Wmissing-prototypes.
2023-09-06 09:49:35 +02:00
Wouter Wijngaards and GitHub
5ab4a9330a
Merge pull request #931 from fobser/missing-prototypes
...
Prevent warnings from -Wmissing-prototypes.
2023-09-06 09:49:23 +02:00
Florian Obser
2cd7c719ef
Prevent warnings from -Wmissing-prototypes.
2023-09-05 17:35:30 +02:00
Stuart Henderson and GitHub
ed00129866
add void to log_ident_revert_to_default declaration
...
Avoid warning from LLVM 16:
util_log.c:190:33: warning: a function declaration without a prototype is deprecated in all versions of C
[-Wstrict-prototypes]
void log_ident_revert_to_default()
^
void
2023-09-05 14:28:06 +00:00
W.C.A. Wijngaards
10843805ac
- Fix #927 : unbound 1.18.0 make test error. Fix make test without SHA1.
2023-08-31 13:54:03 +02:00
W.C.A. Wijngaards
f0e15272b2
- Fix autoconf 2.69 warnings in configure.
2023-08-31 09:19:24 +02:00
W.C.A. Wijngaards
d4c4537b33
- Fix for WKS call to getservbyname that creates allocation on exit
...
in unit test by testing numbers first and testing from the services
list later.
2023-08-30 14:31:24 +02:00
W.C.A. Wijngaards
ba1183bb6e
Tag 1.18.0rc1 became the 1.18.0 release on
...
30 aug 2023, with the fix from 25 aug, fix compile on NetBSD
included. The repository continues with version 1.18.1.
2023-08-30 11:03:42 +02:00
W.C.A. Wijngaards
85ee5284f5
- Fix for version generation race condition that ignored changes.
2023-08-28 13:25:04 +02:00
W.C.A. Wijngaards
3795e37410
- Fix compile error on NetBSD in util/netevent.h.
2023-08-25 08:43:27 +02:00
W.C.A. Wijngaards
d396d8dae3
- Tag for 1.18.0rc1 release.
2023-08-23 10:49:45 +02:00
W.C.A. Wijngaards
8da117b086
- Set version number to 1.18.0.
2023-08-22 14:32:51 +02:00
W.C.A. Wijngaards
6e43145382
- Fix unit test for unbound-control to work when threads are disabled,
...
and fix cache dump check.
2023-08-21 16:58:10 +02:00
W.C.A. Wijngaards
be53e37b15
- Fix #923 : processQueryResponse() THROWAWAY should be mindful of
...
fail_reply.
2023-08-21 14:32:13 +02:00
W.C.A. Wijngaards
3160d6ac08
- Fix for #925 : unbound.service: Main process exited, code=killed,
...
status=11/SEGV. Fixes cachedb configuration handling.
2023-08-21 11:28:49 +02:00
W.C.A. Wijngaards
d1f388ec93
- Fix windows ci workflow to install bison and flex.
2023-08-21 10:43:02 +02:00
W.C.A. Wijngaards
5bd07f8e88
Further debug for windows ci workflow.
2023-08-21 10:20:23 +02:00
W.C.A. Wijngaards
3ea6f730ac
- Debug Windows ci workflow.
2023-08-21 10:16:00 +02:00
W.C.A. Wijngaards
083770cb39
- Fix stat_values test to work with dig that enables DNS cookies.
2023-08-18 13:39:27 +02:00
W.C.A. Wijngaards
8756ad63dd
- Fix uninitialized memory passed in padding bytes of cmsg to sendmsg.
2023-08-18 13:18:46 +02:00
W.C.A. Wijngaards
c4566aa5d3
Changelog for commit.
...
- Fix for iter_dec_attempts that could cause a hang, part of
capsforid and qname minimisation, depending on the settings.
2023-08-18 13:10:51 +02:00
W.C.A. Wijngaards
2791ccbe02
- Fix for iter_dec_attempts that could cause a hang, part of
...
capsforid and qname minimisation, depending on the settings.
2023-08-18 09:11:06 +02:00
W.C.A. Wijngaards
5f423906de
- Fix ip_ratelimit test to work with dig that enables DNS cookies.
2023-08-17 15:43:14 +02:00
W.C.A. Wijngaards
4844fa3481
- Fix regional_alloc_init for potential unaligned source of the copy.
2023-08-17 15:22:54 +02:00
W.C.A. Wijngaards
0f5fecd516
Changelog note for #762 .
...
- Merge PR #762 : Downstream DNS Server Cookies a la RFC7873 and
RFC9018. Create server cookies for clients that send client cookies.
This needs to be explicitly turned on in the config file with:
`answer-cookie: yes`. A `cookie-secret:` can be configured for
anycast setups. Without one, a random cookie secret is generated.
The acl option `allow_cookie` allows queries with either a valid
cookie or over a stateful transport. The statistics output has
`queries_cookie_valid` and `queries_cookie_client` and
`queries_cookie_invalid` information. The `ip\-ratelimit\-cookie:`
value determines a rate limit for queries with cookies, if desired.
2023-08-17 15:18:46 +02:00
Wouter Wijngaards and GitHub
a1c82ac5fd
Merge pull request #762 from NLnetLabs/features/downstream-cookies
...
Downstream DNS Server Cookies a la RFC7873 and RFC9018
2023-08-17 15:14:11 +02:00
W.C.A. Wijngaards
1c85901cc4
- Fix out of bounds read in parse_edns_options_from_query, it would read
...
8 bytes after a client option of length 8, and then ignore them to
recreate a 24 byte response. The fixup does not read out of bounds,
and puts zeroes in the buffer at that point, that then are ignored.
2023-08-16 16:58:49 +02:00
W.C.A. Wijngaards
b1c707e551
- Fix possibly unaligned memory access.
2023-08-16 14:57:38 +02:00
W.C.A. Wijngaards
2b1028bdad
- Fix possibly unaligned memory access.
2023-08-16 10:06:06 +02:00
George Thessalonikefs
bab5ad623c
- For #762 : Introduce stat counters for downstream DNS Cookies per
...
thread and total: num.queries_cookie_valid, num.queries_cookie_client,
num.queries.cookie_invalid.
2023-08-08 15:19:56 +02:00
George Thessalonikefs
49e4258102
- For #762 : Interaction between DNS Cookies and source IP ratelimiting
...
by allowing Cookies to bypass the ratelimit, but still allowing
ratelimit to valid DNS Cookie clients via the new
ip-ratelimit-cookie option.
2023-08-08 10:14:03 +02:00
George Thessalonikefs
81e219827e
- For #762 : Silence maybe-uninitialized compiler warning.
2023-08-07 11:20:48 +02:00
George Thessalonikefs
02ac374640
- For #762 : Remove re-introduced files from merge (configlexer.c, configparser.c, configparser.h).
2023-08-07 11:12:49 +02:00
George Thessalonikefs
025d810b45
- For #762 : annotate case statement fallthrough for gcc.
2023-08-07 11:04:23 +02:00
George Thessalonikefs
4ccb613396
Merge branch 'master' into features/downstream-cookies
2023-08-05 20:37:48 +02:00
George Thessalonikefs
9025be814a
- For #762 : remove uneeded include.
2023-08-05 20:18:56 +02:00
George Thessalonikefs
fbc0256825
- For #762 : Cleaner manpage text and uniform use of the term DNS
...
Cookies.
2023-08-05 20:00:37 +02:00
George Thessalonikefs
8580a74b37
- For #762 : Introduce rpl testing for DNS Cookies.
2023-08-05 19:50:57 +02:00
George Thessalonikefs
b6e2f4dbf8
- For #762 : Formatting.
2023-08-04 19:03:23 +02:00
George Thessalonikefs
702f485587
- For #762 : relocate EDNS cookie code to util/edns and introduce unit
...
tests.
2023-08-04 14:26:08 +02:00
George Thessalonikefs
6e47c1e05b
- For #762 : remove relocated code.
2023-08-02 15:51:05 +02:00
George Thessalonikefs
d4145772b5
- Move a cache reply callback in worker.c closer to the cache reply
...
generation.
2023-08-02 12:33:52 +02:00
George Thessalonikefs
00a08beee9
- For #762 : Ignore util/siphash.c for the 01-doc test.
2023-08-01 17:40:49 +02:00
George Thessalonikefs
5b55a46550
- For #762 : relocate RFC 1982 serial number arithmetic functions to their own
...
file in util/rfc_1982.[ch].
2023-08-01 17:26:14 +02:00
George Thessalonikefs
2cc9563cf8
- Fix to use the now cached EDE, if any, for CD_bit queries.
2023-08-01 15:23:25 +02:00
George Thessalonikefs
8aec671860
- More braces and formatting for Fix for EDNS EDE size calculation to
...
avoid future bugs.
2023-08-01 15:15:33 +02:00
W.C.A. Wijngaards
990b12bc8e
- Fix for EDNS EDE size calculation.
2023-08-01 15:08:50 +02:00
George Thessalonikefs
11f12bc981
- Merge #911 from natalie-reece: Exclude EDE before other EDNS options when
...
there isn't enough space.
- For #911 : Try to trim EXTRA-TEXT (and LDNS_EDE_OTHER options
altogether) before giving up on attaching EDE options.
2023-08-01 10:01:18 +02:00
George Thessalonikefs
08e11284fb
- For #911 : Try to trim EXTRA-TEXT (and LDNS_EDE_OTHER options
...
altogether) before giving up on attaching EDE options.
2023-08-01 09:55:28 +02:00
W.C.A. Wijngaards
f531011e85
- iana portlist update.
2023-07-31 10:24:43 +02:00
George Thessalonikefs
d18813be30
- Merge #790 from Tom Carpay: Add support for EDE caching in cachedb
...
and subnetcache.
2023-07-31 10:18:10 +02:00
5f76e201f0
- For #790 : Update formatting in cachedb/cachedb.c
...
Co-authored-by: Wouter Wijngaards <wcawijngaards@users.noreply.github.com >
2023-07-31 10:13:01 +02:00
George Thessalonikefs
dcd0191d7e
Merge branch 'master' of https://github.com/natalie-reece/unbound into natalie-reece-master
2023-07-31 09:57:21 +02:00
George Thessalonikefs
8936f3496e
- For #790 : clean testcase.
2023-07-31 09:41:57 +02:00
George Thessalonikefs
f97927a47e
Merge branch 'master' into features/ede-caching-cachedb
2023-07-30 14:17:52 +02:00
George Thessalonikefs
6819c1e444
- Merge #759 from Tom Carpay: Add EDE (RFC8914) caching.
2023-07-30 11:48:04 +02:00
George Thessalonikefs
6487d6febe
- For #759 : fix doc string.
2023-07-30 11:43:06 +02:00
George Thessalonikefs
373904f865
- Fix unused variable compile warning for kernel timestamps in
...
netevent.c
2023-07-28 20:17:07 +02:00
George Thessalonikefs
0912015fb9
- Review for #790 : Fix memory leak.
2023-07-28 17:21:15 +02:00
George Thessalonikefs
c15cfb4bd9
- Review for #790 : Address Wouter's comments.
2023-07-28 16:55:51 +02:00
George Thessalonikefs
66c95e8081
- Review for #790 : replace tdir tests with simpler rpl tests.
2023-07-28 16:54:05 +02:00
George Thessalonikefs
843fc69927
Address review comments for #759 :
...
- Clear error text when an expected signature is missing.
2023-07-28 14:05:25 +02:00
George Thessalonikefs
50ea4a1072
Address review comments for #759 :
...
- Decrease allocations for "" EDE strings when loading the cachedump.
- Check for existence of EDE code before attaching.
2023-07-28 12:56:13 +02:00
George Thessalonikefs
1e47eea6e3
- Merge #889 from borisVanhoof: Free memory in error case + remove
...
unused function.
2023-07-21 21:13:43 +02:00
George Thessalonikefs
6289238cd6
- For #889 : Account for num_detached_states before possible
...
mesh_state_delete when erroring out.
2023-07-21 21:05:38 +02:00
George Thessalonikefs
97fdd0e2eb
- For #889 : use netcat-openbsd instead of netcat-traditional.
2023-07-21 21:04:40 +02:00
George Thessalonikefs
201da1f50a
Merge branch 'free_memory_in_error_case' of https://github.com/borisVanhoof/unbound into borisVanhoof-free_memory_in_error_case
2023-07-21 17:04:33 +02:00
George Thessalonikefs
51c189394d
- Cleaner failure code for callback functions in interface.i.
2023-07-21 16:53:36 +02:00
George Thessalonikefs
2e257fff2a
- Merge #390 from Frank Riley: Add missing callbacks to the python
...
module.
2023-07-21 16:50:57 +02:00
George Thessalonikefs
4776f749be
Merge branch 'python_add_missing_callbacks' of https://github.com/fhriley/unbound into fhriley-python_add_missing_callbacks
2023-07-21 15:19:12 +02:00
George Thessalonikefs
04053d39a0
- Merge #118 from mibere: Changed verbosity level for Redis init &
...
deinit.
2023-07-21 15:01:48 +02:00
mibere and George Thessalonikefs
ef9f7f113f
Log established connection to Redis
2023-07-21 14:41:26 +02:00
mibere and George Thessalonikefs
2d33bba3c0
Changed verbosity level for Redis init & deinit
...
Redis init & deinit are basic (operational) information
2023-07-21 14:39:34 +02:00
George Thessalonikefs
36b38cea74
- Merge #857 from eaglegai: fix potential memory leaks when errors
...
happen.
2023-07-21 14:04:38 +02:00
George Thessalonikefs
40f446a499
- For #857 : fix mixed declarations and code.
2023-07-21 14:02:01 +02:00
George Thessalonikefs
e839771ddf
Merge branch 'master' of https://github.com/eaglegai/unbound into eaglegai-master
2023-07-21 12:43:47 +02:00
George Thessalonikefs
ae2c2be1a5
Merge branch 'master' of github.com:NLnetLabs/unbound
2023-07-20 12:56:31 +02:00
George Thessalonikefs
bf37487dca
- Merge #901 from Sergei Trofimovich: config: improve handling of
...
unknown modules.
2023-07-20 12:56:20 +02:00
W.C.A. Wijngaards
8d45c1592b
- For #909 : Fix RR class comparison.
2023-07-20 12:16:24 +02:00
George Thessalonikefs
862fa0d514
Merge branch 'module-error' of https://github.com/trofi/unbound into trofi-module-error
2023-07-20 12:08:27 +02:00
George Thessalonikefs
27c028cf27
- Merge #909 from headshog: Numeric truncation when parsing TYPEXX and
...
CLASSXX representation.
- For #909 : Fix return values.
2023-07-20 11:57:17 +02:00
George Thessalonikefs
5b7faca7db
For #909 : Numeric truncation when parsing TYPEXX and CLASSXX representation
...
- Fix return values.
- Formatting nits.
2023-07-20 11:42:05 +02:00
George Thessalonikefs
d29bc712b1
Merge branch 'fix-numtrunc' of https://github.com/headshog/unbound into headshog-fix-numtrunc
2023-07-20 11:07:19 +02:00
headshog
0b131d5a31
parse sldns_get_rr_class_by_name and sldns_get_rr_type_by_name return value 0
2023-07-19 18:09:03 +03:00
George Thessalonikefs
90b434c260
- For #759 : add support for cached EDEs to cachedump
2023-07-19 17:06:10 +02:00
George Thessalonikefs
846b158304
- Remove redundant checks when attaching EDE to a SERVFAIL answer.
2023-07-19 15:26:08 +02:00
George Thessalonikefs
95604a90e8
Review for #759 :
...
- Keep EDE information for keys close to key creation.
- Fix inconsistencies between reply and cached EDEs.
- Incorporate EDE caching checks in EDE tests.
- Fix some EDE cases where missing DNSKEY was wrongly reported.
2023-07-19 15:20:44 +02:00
George Thessalonikefs
f5a2a58ce3
Review for #759 :
...
- Fix SEGFAULT in load_cache control command.
- Change reason_bogus_str to an explicit NULL-terminated string.
- Fix potential memory leak when discarding a message for referrals and
0 TTL answers.
- Fix reason_bogus initialization in localzone answers.
- reply_info creation in validator is always regional.
2023-07-17 17:26:31 +02:00
headshog
78c284e05d
fix numtrunc in str2wire.c
2023-07-17 12:58:52 +03:00
George Thessalonikefs
299f55b0d1
- More clear description of the different auth-zone behaviors on the
...
man page.
2023-07-14 15:28:42 +02:00
George Thessalonikefs
52f0387cac
- Merge #880 from chipitsine: services/authzone.c: remove redundant
...
check.
2023-07-13 11:52:14 +02:00
George Thessalonikefs
606e5a0a5f
Merge branch 'cleanup_cppcheck' of https://github.com/chipitsine/unbound into chipitsine-cleanup_cppcheck
2023-07-13 11:49:41 +02:00
George Thessalonikefs
15b8d8b96a
Merge branch 'master' into features/ede-caching
2023-07-13 11:25:59 +02:00
Natalie Reece
67e52ea9c5
Exclude EDE before other EDNS options when there isn't enough space
2023-07-11 17:01:26 -06:00
George Thessalonikefs
7240ecbeb0
- Merge #664 from tilan7763: Add prefetch support for subnet cache
...
entries.
- For #664 : Easier code flow for subnetcache prefetching.
- For #664 : Add testcase.
- For #664 : Rename subnet_prefetch tests to subnet_global_prefetch to
differentiate from the new subnet prefetch support.
2023-07-11 14:31:49 +02:00
George Thessalonikefs
a952ac17be
Merge branch 'tilan7663-subnet_cache_prefetch' into subnet_cache_prefetch
2023-07-07 16:50:58 +02:00
George Thessalonikefs
40e47bf767
- For #664 : easier code flow for subnetcache prefetching.
...
- For #664 : add testcase.
2023-07-06 22:22:21 +02:00
George Thessalonikefs
0afe58a06e
- Skip the 00-lint test. splint is not maintained; it either does not
...
work or produces false positives. Static analysis is handled in the
clang test.
2023-07-03 15:38:16 +02:00
George Thessalonikefs
2069271384
- Merge #802 : add validation EDEs to queries where the CD bit is set.
...
- For #802 : Cleanup comments and add RCODE check for CD bit test case.
2023-07-03 14:48:39 +02:00
George Thessalonikefs
014db3fb03
- For #802 : Cleanup comments and add RCODE check for CD bit test case.
2023-07-03 14:40:01 +02:00
W.C.A. Wijngaards
5aa47fb1fa
- Fix dereference of NULL variable warning in mesh_do_callback.
2023-07-03 13:50:39 +02:00
George Thessalonikefs
1962991937
- Merge #739 : Add SVCB dohpath support.
...
- Code cleanup for sldns_str2wire_svcparam_key_lookup.
2023-07-03 11:02:05 +02:00
George Thessalonikefs
5be7f1ef8a
- Code cleanup for sldns_str2wire_svcparam_key_lookup.
2023-07-03 10:51:34 +02:00
W.C.A. Wijngaards
48a6ff14a4
- Fix #906 : warning: ‘Py_SetProgramName’ is deprecated.
2023-07-03 10:23:37 +02:00
George Thessalonikefs
ade710a9fd
- For #739 : minor cleanup for testcases.
2023-07-03 10:10:16 +02:00
George Thessalonikefs
31d38d2cfe
Merge branch 'master' into features/dohpath-for-unbound
2023-06-30 11:50:23 +02:00
George Thessalonikefs
380e3de140
- Merge #827 from rcmcdonald91: Eliminate unnecessary Python reloading
...
which causes memory leaks.
2023-06-29 13:02:27 +02:00
George Thessalonikefs
fc8bf269e9
- More fixes for reference counting for python module and clean up
...
failure code.
2023-06-29 12:26:49 +02:00
W.C.A. Wijngaards
7696074fa9
- Fix python modules with multiple scripts, by incrementing reference
...
counts.
2023-06-29 10:16:37 +02:00
George Thessalonikefs
bea61fc37c
- Remove warning about unknown cast-function-type warning pragma.
2023-06-27 16:44:29 +02:00
George Thessalonikefs
41dac805f5
- Merge #892 : Add cachedb hit stat. Introduces 'num.query.cachedb' as
...
a new statistical counter.
2023-06-27 12:46:26 +02:00
W.C.A. Wijngaards
2207a55107
Add changelog and contrib/README mention for #903
...
- Merge #903 : contrib: add yocto compatible init script.
2023-06-22 15:41:17 +02:00
Wouter Wijngaards and GitHub
196f8a68f6
Merge pull request #903 from beni-sandu/master
...
contrib: add yocto compatible init script
2023-06-22 15:37:07 +02:00
Beniamin Sandu
0d13b4ec4c
contrib: add yocto compatible init script
...
Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com >
2023-06-22 14:18:45 +03:00
George Thessalonikefs
f1537e2041
- For #762 : please doxygen.
2023-06-22 12:21:27 +02:00
George Thessalonikefs
47cf44cc70
- For #762 : relocate edns_opt_list_append_keepalive.
2023-06-22 12:11:28 +02:00
George Thessalonikefs
1cd75cccfc
- For #762 : More generic integration for siphash.c
2023-06-22 11:45:08 +02:00
Sergei Trofimovich
d10a889a68
config: improve handling of unknown modules
...
The change fixes module print when specified module is unknown. On
example config:
server:
module-config: "respip valdator iterator"
Before the change printed error looked like:
error: Unknown value in module-config, module: ''. This module is
not present (not compiled in), See the list of linked modules with
unbound -V
After the change module is printed as expected:
error: Unknown value in module-config, module: 'valdator'. This
module is not present (not compiled in), See the list of linked
modules with unbound -V
Module truncation happens because parse error does not guarantee that
leading whitespace is removed by `module_factory()` call.
The change always removes leading whitespace (if present).
2023-06-19 18:20:22 +01:00
Philip Homburg
64476280ed
Changelog for #887 and #516
2023-06-15 11:09:08 +02:00
Philip Homburg
b1bcde3137
Merge branch 'freebsd-aslr-issue'
2023-06-15 11:06:29 +02:00
George Thessalonikefs
b02f9befcd
- For #762 : fix compiler C90 warning.
2023-06-14 16:41:01 +02:00
George Thessalonikefs
0f1ea7e490
- Properly handle all return values of worker_check_request during
...
early EDE code.
- Do not check the incoming request more than once.
2023-06-14 11:40:59 +02:00
W.C.A. Wijngaards
f9317d65b3
- Fix for uncertain unit test for doh buffer size events.
2023-06-12 12:39:00 +02:00
W.C.A. Wijngaards
2cf0359ffe
Changelog note for #895
...
- Fix #895 : python + sysconfig gives ANOTHER path comparing to
distutils.
2023-06-12 10:39:44 +02:00
W.C.A. Wijngaards
35885e5a70
- Merge #896 : Fix : #895 : pythonmodule: add all site-packages
...
directories to sys.path.
2023-06-12 10:30:50 +02:00
Wouter Wijngaards and GitHub
0585b1d75a
Merge pull request #896 from socketpair/bugfix
...
Fix : #895 : pythonmodule: add all site-packages directories to sys.path
2023-06-12 10:30:05 +02:00
Коренберг Марк
a25fc52818
Fix : #895 : pythonmodule: add all site-packages directories to sys.path
2023-06-11 10:39:13 +03:00
Philip Homburg
52581f8644
Fix for issue #887 (Timeouts to forward servers on BSD based system with ASLR)
...
and proabbly #516 (Stream reuse does not work on Windows)
2023-06-09 13:59:31 +02:00
9412b9c2ca
Review comment for daemon/stats.c
...
Co-authored-by: Wouter Wijngaards <wcawijngaards@users.noreply.github.com >
2023-06-02 12:39:23 +02:00
65230bd117
Review comment for testdata/stat_values.tdir/stat_values.test
...
Co-authored-by: Wouter Wijngaards <wcawijngaards@users.noreply.github.com >
2023-05-31 17:09:16 +02:00
George Thessalonikefs
db5cf5851d
- More efficient mesh accounting per client.
2023-05-30 23:34:31 +02:00
George Thessalonikefs
3c3fd7a795
- More predictable testing for cachedb.
2023-05-30 23:33:48 +02:00
George Thessalonikefs
4f52be4db9
- Introduce num.query.cachedb to track cache hits for the external cache.
2023-05-30 17:49:50 +02:00
W.C.A. Wijngaards
512236d705
- Fix unbound-dnstap-socket time fraction conversion for printout.
2023-05-25 16:27:19 +02:00
W.C.A. Wijngaards
d57986724e
- Fix unbound-dnstap-socket printout when no query is present.
2023-05-25 14:30:25 +02:00
Boris VANHOOF
4e39d3dfe1
could not find package netcat for docker container
2023-05-23 10:11:07 +02:00
Boris VANHOOF
a21bc23139
free memory in error case
2023-05-23 09:23:03 +02:00
Boris VANHOOF
62d54d8091
remove unused function
2023-05-23 09:22:35 +02:00
Boris VANHOOF
17559c737b
typo in comments
2023-05-23 09:21:58 +02:00
W.C.A. Wijngaards
59fd48c226
- Fix to remove unused variables from RPZ clientip data structure.
2023-05-19 16:36:31 +02:00
W.C.A. Wijngaards
da78c42f88
- Fix RPZ removal of client-ip, nsip, nsdname triggers from IXFR.
2023-05-19 14:38:41 +02:00
W.C.A. Wijngaards
a07ccbae9a
- Fix to print debug log for ancillary data with correct IP address.
2023-05-16 09:21:21 +02:00
W.C.A. Wijngaards
2a2598dbf2
- Fix #888 : [FR] Use kernel timestamps for dnstap.
2023-05-16 08:50:38 +02:00
W.C.A. Wijngaards
1fb78afc29
- Fix warning in windows compile, in set_recvtimestamp.
2023-05-11 09:32:59 +02:00
W.C.A. Wijngaards
b2cba7b707
- Fix doxygen in addr_to_nat64 header definition.
2023-05-04 15:53:05 +02:00
W.C.A. Wijngaards
8dd09e31d2
- Fix to remove unused whitespace from acx_nlnetlabs.m4 and config.h.
2023-05-04 11:17:06 +02:00
W.C.A. Wijngaards
806c3d7330
- Fix #885 : Error: util/configlexer.c: No such file or directory,
...
adds error messages explaining to install flex and bison.
2023-05-04 11:12:11 +02:00
W.C.A. Wijngaards
cac1d13fda
- Fix proxy-protocol to read header in multiple reads and check buffer size.
2023-05-02 14:54:51 +02:00
W.C.A. Wijngaards
80153decd1
- Fix proxy-protocol buffer checks when writing and read from buffer.
2023-05-02 14:36:29 +02:00
George Thessalonikefs
2695eb9d1a
Changelog entry for #722 :
...
- Merge #722 from David 'eqvinox' Lamparter: NAT64 support.
- For #722 : minor fixes, formatting, refactoring.
2023-05-01 18:32:40 +02:00
George Thessalonikefs
20184483df
Merge branch 'eqvinox-nat64'
2023-05-01 18:24:05 +02:00
George Thessalonikefs
adb4aeb609
- For #722 : Minor fixes, formatting and refactoring.
2023-05-01 18:23:13 +02:00
W.C.A. Wijngaards
70c2b587fc
- Fix RPZ IP responses with trigger rpz-drop on cache entries, that
...
they are dropped.
2023-05-01 09:26:17 +02:00
Philip Homburg
a50ddd7ab9
Changelog for #860
2023-04-26 17:15:59 +02:00
Philip Homburg
4a04ba813a
Merge branch '0ttl'
2023-04-26 17:14:15 +02:00
Philip Homburg
1aa2c318e7
Remove msg_del_for_0ttl, call msg_cache_remove directly
2023-04-26 17:11:29 +02:00
George Thessalonikefs
e1ec3cf893
Merge branch 'nat64' of https://github.com/eqvinox/unbound into eqvinox-nat64
2023-04-26 15:14:39 +02:00
W.C.A. Wijngaards
8058dc9127
- Fix for #882 : document variable to stop doxygen warning.
2023-04-26 14:07:33 +02:00
W.C.A. Wijngaards
144f29638c
- Fix for #882 : small changes, date updated in Copyright for
...
util/timeval_func.c and util/timeval_func.h. Man page entries and
example entry.
2023-04-26 13:49:33 +02:00
Wouter Wijngaards and GitHub
7081b0340f
Merge pull request #882 from vvfedorenko/features/dropqueuedpackets
...
Features/dropqueuedpackets
2023-04-26 13:25:32 +02:00
Vadim Fedorenko
263096d1f6
stats: add query max wait time metric
...
Add new statistic value to know the size of the queue in microseconds.
Signed-off-by: Vadim Fedorenko <vadfed@meta.com >
2023-04-26 03:27:25 -07:00
Vadim Fedorenko
e577ab105e
stats: add counter for timed out queries
...
Add counter `num_queries_timed_out` meaning queries that were sitting in the
socket queue and waiting to being processed too long. There is no reason
to process such queries, so let's drop it in the very beginning of the
pipeline.
Signed-off-by: Vadim Fedorenko <vadfed@meta.com >
2023-04-26 03:27:25 -07:00
Vadim Fedorenko
04540f82e5
config: add sock_queue_timeout configuration
...
Add sock_queue_timeout config option to have queue timeout configurable.
Signed-off-by: Vadim Fedorenko <vadfed@meta.com >
2023-04-26 03:27:19 -07:00
Vadim Fedorenko
2e6ddd6032
netevent: parse and store rcv timestamp from sock
...
Add special field in comm_point to store the software receive timestamp
for every particular UDP packet. Aux data parser is updated to read
values and the whole callback is switched to use recvmsg form.
Signed-off-by: Vadim Fedorenko <vadfed@meta.com >
2023-04-26 03:26:51 -07:00
Vadim Fedorenko
a197aac2f6
timeval_func: move all timeval manipulation to separate file
...
There are several definitions of the same functions manipulating timeval
structures. Let's move them to separate file and arrange the code
preperly.
Signed-off-by: Vadim Fedorenko <vadfed@meta.com >
2023-04-26 03:23:41 -07:00
W.C.A. Wijngaards
15a2add0f8
streamtcp, implement NOTIFY[=N] that sends a notify packet.
2023-04-26 11:57:10 +02:00
Vadim Fedorenko
648ad4db6f
Linting change.
...
Remove config parser/lexer code as it's rebuilded every time but can
break adding new config options.
Also clean up the code base to avoid mixing actual code changes and lint
issues.
Signed-off-by: Vadim Fedorenko <vadfed@meta.com >
2023-04-25 17:05:00 -07:00
W.C.A. Wijngaards
4bcc0a0a7a
streamtcp, implement IXFR=N queries, add documentation for proxy option.
2023-04-25 16:44:58 +02:00
W.C.A. Wijngaards
542f717bf9
- adjust generic proxy-protocol header for IPv6 support with ifdef.
2023-04-25 08:16:19 +02:00
George Thessalonikefs
b5cc8b6c59
- Generalise the proxy protocol code
2023-04-24 16:15:56 +02:00
Ilya Shipitsin and GitHub
cba1350886
services/authzone.c: remove redundant check
...
found by cppcheck
services\authzone.c:7513:12: style: Condition 'rrlist[i]' is always true [knownConditionTrueFalse]
2023-04-24 11:45:41 +02:00
W.C.A. Wijngaards
fe46bc47d7
- Fix for #878 : Invalid IP address in unbound.conf causes Segmentation
...
Fault on OpenBSD.
2023-04-19 09:56:31 +02:00
W.C.A. Wijngaards
e11d206a82
Changelog entry for #875 and #874 .
...
- Merge #875 : change obsolete txt URL in unbound-anchor.c to point
to RFC 7958, and Fix #874 .
2023-04-14 11:19:25 +02:00
Wouter Wijngaards and GitHub
8de8c8f6f7
Merge pull request #875 from dyunwei/master
...
Changelog entry for #874
2023-04-14 11:17:43 +02:00
yunwei and GitHub
4954df5859
Changelog entry for #874
...
unbound-anchor is compliant with RFC 7958, and the XML format remains unchanged between the old draft and RFC 7958. Update the comments to improve clarity.
2023-04-14 16:45:11 +08:00
W.C.A. Wijngaards
a3ef9dd53b
- Show build status for branch=master.
2023-04-13 11:29:53 +02:00
W.C.A. Wijngaards
d6c33e1757
- Fix build badge, from failing travis link to github ci action link.
2023-04-13 11:22:11 +02:00
W.C.A. Wijngaards
7033234a48
- Fix for #870 : Add test case for the qname minimisation and CNAME.
2023-04-06 10:04:04 +02:00
W.C.A. Wijngaards
c7618a9b80
- Fix #870 : NXDOMAIN instead of NOERROR rcode when asked for existing
...
CNAME record.
2023-04-04 10:06:16 +02:00
Philip Homburg
312035f58a
Changelog for issue #676
2023-03-24 14:54:14 +01:00
Philip Homburg
7e6a7f310d
Fix issue #676 : Unencrypted query is sent when forward-tls-upstream: yes is
...
used without tls-cert-bundle
Model the behavior of unbound in unbound-host: always create a SSL context
2023-03-24 14:51:37 +01:00
Philip Homburg
1ac9b7548b
Small fixes from Wouter's review
2023-03-23 15:15:54 +01:00
Philip Homburg
eb7eff4fc7
Extra consistency check to make sure that when TLS is requested, either we
...
set up a TLS connection or we return an error.
2023-03-23 15:00:10 +01:00
Philip Homburg
072be3300f
Tests for serve-expired in combination with new 0 TTL data.
2023-03-22 15:23:47 +01:00
Philip Homburg
9d7b1d3127
Fix issue #860 : Bad interaction with 0 TTL records and serve-expired
2023-03-22 15:23:47 +01:00
Philip Homburg
e850ca67f1
Changelog for issue #851
2023-03-21 13:54:27 +01:00
Philip Homburg
2a100ee9ee
Fix issue #851 : reserved identifier violation
2023-03-21 13:51:51 +01:00
W.C.A. Wijngaards
8f83c0a2cb
- iana portlist update.
2023-03-20 14:55:55 +01:00
George Thessalonikefs
d7e7761141
- Fix #812 , fix #846 , by using the SSL_OP_IGNORE_UNEXPECTED_EOF option
...
to ignore the unexpected eof while reading in openssl >= 3.
2023-03-17 14:39:37 +01:00
W.C.A. Wijngaards
a97d7175a6
- Fix ssl.h include brackets, instead of quotes.
2023-03-16 15:40:43 +01:00
W.C.A. Wijngaards
4f25d75d4b
- Fix unbound-dnstap-socket test program to reply the finish frame
...
over a TLS connection correctly.
2023-03-14 16:57:37 +01:00
eaglegai
184248eb0e
fix memory leak in unbound-streamtcp when open_svr failed
...
==1927474== Memcheck, a memory error detector
==1927474== Copyright (C) 2002-2017, and GNU GPL'd, by Julian Seward et al.
==1927474== Using Valgrind-3.16.0 and LibVEX; rerun with -h for copyright info
==1927474== Command: unbound-streamtcp -f localhost
==1927474==
fatal: bad server specs 'localhost'
==1927474==
==1927474== HEAP SUMMARY:
==1927474== in use at exit: 131,186 bytes in 4 blocks
==1927474== total heap usage: 5 allocs, 1 frees, 132,210 bytes allocated
==1927474==
==1927474== 40 bytes in 1 blocks are still reachable in loss record 1 of 4
==1927474== at 0x483F751: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
==1927474== by 0x1E0573: sldns_buffer_new (sbuffer.c:21)
==1927474== by 0x11ECED: send_em (streamtcp.c:374)
==1927474== by 0x11E6C1: main (streamtcp.c:585)
==1927474==
==1927474== 40 bytes in 1 blocks are still reachable in loss record 2 of 4
==1927474== at 0x483F751: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
==1927474== by 0x1E0573: sldns_buffer_new (sbuffer.c:21)
==1927474== by 0x11ECFA: send_em (streamtcp.c:375)
==1927474== by 0x11E6C1: main (streamtcp.c:585)
==1927474==
==1927474== 65,553 bytes in 1 blocks are still reachable in loss record 3 of 4
==1927474== at 0x483F751: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
==1927474== by 0x1E0583: sldns_buffer_new (sbuffer.c:27)
==1927474== by 0x11ECED: send_em (streamtcp.c:374)
==1927474== by 0x11E6C1: main (streamtcp.c:585)
==1927474==
==1927474== 65,553 bytes in 1 blocks are still reachable in loss record 4 of 4
==1927474== at 0x483F751: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
==1927474== by 0x1E0583: sldns_buffer_new (sbuffer.c:27)
==1927474== by 0x11ECFA: send_em (streamtcp.c:375)
==1927474== by 0x11E6C1: main (streamtcp.c:585)
==1927474==
==1927474== LEAK SUMMARY:
==1927474== definitely lost: 0 bytes in 0 blocks
==1927474== indirectly lost: 0 bytes in 0 blocks
==1927474== possibly lost: 0 bytes in 0 blocks
==1927474== still reachable: 131,186 bytes in 4 blocks
==1927474== suppressed: 0 bytes in 0 blocks
==1927474==
==1927474== ERROR SUMMARY: 0 errors from 0 contexts (suppressed: 0 from 0)
Signed-off-by: eaglegai <eaglegai@163.com >
2023-03-07 21:49:54 +08:00
eaglegai
319119943f
fix potential memory leak in unbound-host when errors happen
...
==3709953== HEAP SUMMARY:
==3709953== in use at exit: 276,541 bytes in 23 blocks
==3709953== total heap usage: 29 allocs, 6 frees, 280,682 bytes allocated
==3709953==
==3709953== 1 bytes in 1 blocks are still reachable in loss record 1 of 23
==3709953== at 0x4866EC0: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-arm64-linux.so)
==3709953== by 0x48E2BC3: ub_initstate (random.c:85)
==3709953== by 0x489B067: ub_ctx_create_nopipe (libunbound.c:114)
==3709953== by 0x489B31F: ub_ctx_create (libunbound.c:180)
==3709953== by 0x10E203: main (unbound-host.c:433)
==3709953==
......
==3709953== 8,192 bytes in 1 blocks are still reachable in loss record 22 of 23
==3709953== at 0x4866EC0: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-arm64-linux.so)
==3709953== by 0x48E427B: regional_create_custom (regional.c:94)
==3709953== by 0x48DEA03: edns_strings_create (edns.c:57)
==3709953== by 0x489B0F3: ub_ctx_create_nopipe (libunbound.c:157)
==3709953== by 0x489B31F: ub_ctx_create (libunbound.c:180)
==3709953== by 0x10E203: main (unbound-host.c:433)
==3709953==
==3709953== 262,144 bytes in 1 blocks are still reachable in loss record 23 of 23
==3709953== at 0x486933C: calloc (in /usr/lib64/valgrind/vgpreload_memcheck-arm64-linux.so)
==3709953== by 0x48C826F: config_create (config_file.c:179)
==3709953== by 0x48C85AF: config_create_forlib (config_file.c:383)
==3709953== by 0x489B0BB: ub_ctx_create_nopipe (libunbound.c:130)
==3709953== by 0x489B31F: ub_ctx_create (libunbound.c:180)
==3709953== by 0x10E203: main (unbound-host.c:433)
==3709953==
==3709953== LEAK SUMMARY:
==3709953== definitely lost: 0 bytes in 0 blocks
==3709953== indirectly lost: 0 bytes in 0 blocks
==3709953== possibly lost: 0 bytes in 0 blocks
==3709953== still reachable: 276,541 bytes in 23 blocks
==3709953== suppressed: 0 bytes in 0 blocks
==3709953==
==3709953== For lists of detected and suppressed errors, rerun with: -s
==3709953== ERROR SUMMARY: 0 errors from 0 contexts (suppressed: 0 from 0)
Signed-off-by: eaglegai <eaglegai@163.com >
2023-03-06 22:04:06 +08:00
Christian McDonald
60304f972e
#827 review response
2023-02-24 09:31:19 -05:00
W.C.A. Wijngaards
d97c174f50
- Fix for #852 : Completion of error handling.
2023-02-23 13:38:29 +01:00
Philip Homburg
ed07c5424d
Changelog entry for issue #825
2023-02-21 09:29:39 +01:00
Philip Homburg
fb187d1a60
Merge branch 'master' into ecs-serve-expired-bug
2023-02-21 09:28:13 +01:00
Philip Homburg
71e0ddc94a
Improved comment
2023-02-21 09:27:03 +01:00
Philip Homburg
b89d0d1cce
Test cache update from serve-expired and client-subnet-always-forward
2023-02-21 09:21:43 +01:00
Philip Homburg
d1f5ded1d9
ifdef CLIENT_SUBNET
2023-02-21 09:21:24 +01:00
Philip Homburg
fb06364014
Fix issue #825 : interaction between ECS and serve-expired.
2023-02-21 09:20:28 +01:00
George Thessalonikefs
02a77f0567
Changelog entry for
...
- Clean up iterator/iterator.c::error_response_cache() and allow for
better interaction with serve-expired, prefetch and cached error
responses.
2023-02-10 16:54:44 +01:00
George Thessalonikefs
eb81761b13
- Clean up iterator/iterator.c::error_response_cache() and allow for
...
better interaction with serve-expired, prefetch and cached error
responses.
2023-02-10 16:51:07 +01:00
George Thessalonikefs
96c70d91ca
- Add testcase for refreshing expired error responses.
2023-02-09 12:44:01 +01:00
W.C.A. Wijngaards
488811157e
- Fix to git ignore the library symbol file that configure can create.
2023-02-09 12:08:27 +01:00
W.C.A. Wijngaards
e225e4bcab
- Fix consistency of unit test without roundrobin answers for the
...
cnametooptout unit test.
2023-02-09 11:46:33 +01:00
George Thessalonikefs
1c1c5d72d3
Changelog entry for
...
- Allow TTL refresh of expired error responses.
2023-02-09 10:52:56 +01:00
George Thessalonikefs
87a8c80fcb
- Allow TTL refresh of expired error responses.
2023-02-09 10:47:46 +01:00
W.C.A. Wijngaards
a8977df4d9
- Fix unit tests for spurious empty messages.
2023-02-09 10:38:55 +01:00
W.C.A. Wijngaards
4953daa016
- Fix to ignore entirely empty responses, and try at another authority.
...
This turns completely empty responses, a type of noerror/nodata into
a servfail, but they do not conform to RFC2308, and the retry can
fetch improved content.
2023-02-09 09:56:40 +01:00
W.C.A. Wijngaards
5ab5b3b43a
- Fix #841 : Unbound won't build with aaaa-filter-iterator.patch.
2023-02-08 11:36:52 +01:00
Christian McDonald
0bf55e6063
set modinfo to null last
2023-02-01 15:17:59 -05:00
George Thessalonikefs
24e6d1e18e
- Add duration variable for speed_local.test.
2023-01-30 11:33:58 +01:00
R. Christian McDonald and GitHub
45142868ec
Fix copyright date
2023-01-28 14:02:51 -05:00
W.C.A. Wijngaards
8b9382998d
Regenerate configure for the fix acx_nlnetlabs.m4 for -Wstrict-prototypes.
2023-01-26 10:59:16 +01:00
W.C.A. Wijngaards
c482999898
- Fix acx_nlnetlabs.m4 for -Wstrict-prototypes.
2023-01-26 10:54:38 +01:00
George Thessalonikefs
6bf677e7de
Fix #833 : [FR] Ability to set the Redis password.
2023-01-23 11:45:07 +01:00
W.C.A. Wijngaards
d666e9bd13
- Fix #835 : [FR] Ability to use Redis unix sockets.
2023-01-23 10:10:23 +01:00
W.C.A. Wijngaards
77f15428c9
- Add #835 : [FR] Ability to use Redis unix sockets.
2023-01-23 10:09:28 +01:00
W.C.A. Wijngaards
111e66ae64
Changelog note for #819 , generate configparser.c and comment syntax change.
...
- Merge #819 : Added new static zone type block_a to suppress all A
queries for specific zones.
2023-01-20 16:19:20 +01:00
Wouter Wijngaards and GitHub
6a4a9435d1
Merge pull request #819 from pavel-odintsov/pavel/suppress_a
...
Added new static zone type block_a to suppress all A queries for specific zones
2023-01-20 16:18:05 +01:00
R. Christian McDonald and GitHub
55a28d6946
cleanup callbacks that might have been registered by Python script
2023-01-19 16:30:47 -05:00
R. Christian McDonald and GitHub
ddecffd918
Merge branch 'NLnetLabs:master' into rcm-python-reloading
2023-01-19 16:28:12 -05:00
W.C.A. Wijngaards
6afdc336ba
- Fix test for new default.
2023-01-19 16:06:30 +01:00
W.C.A. Wijngaards
c9233f8429
- Set default for harden-unknown-additional to no. So that it does
...
not hamper future protocol developments.
2023-01-19 15:45:10 +01:00
W.C.A. Wijngaards
8df1e58209
- Add harden-unknown-additional option. Default on and it removes
...
unknown records from the authority section and additional section.
Thanks to Xiang Li, from NISL Lab, Tsinghua University.
2023-01-19 14:59:18 +01:00
W.C.A. Wijngaards
d69f875261
- Set max-udp-size default to 1232. This is the same default value as
...
the default value for edns-buffer-size. It restricts client edns
buffer size choices, and makes unbound behave similar to other DNS
resolvers. The new choice, down from 4096 means it is harder to get
large responses from Unbound. Thanks to Xiang Li, from NISL Lab,
Tsinghua University.
2023-01-19 14:16:17 +01:00
W.C.A. Wijngaards
b12ab31ae3
- Fix not following cleared RD flags potentially enables amplification
...
DDoS attacks, reported by Xiang Li and Wei Xu from NISL Lab,
Tsinghua University. The fix stops query loops, by refusing to send
RD=0 queries to a forwarder, they still get answered from cache.
2023-01-18 13:18:47 +01:00
Christian McDonald
cfd3bcb21e
eliminate unnecessary Python reloading which causes memory leaks
2023-01-13 16:39:28 -05:00
W.C.A. Wijngaards
90d42148de
- Improve documentation for #826 , describe the large collisions amount.
2023-01-13 11:22:47 +01:00
W.C.A. Wijngaards
469133e8df
Changelog note and documentation for #826
...
- Merge #826 : Аdd a metric about the maximum number of collisions in
lrushah.
2023-01-13 11:01:46 +01:00
Wouter Wijngaards and GitHub
785c938106
Merge pull request #826 from sakateka/lruhash_max_collisions
...
Аdd a metric about the maximum number of collisions in lrushah
2023-01-13 10:57:44 +01:00
Sergey Kacheev
52a4ccee18
add a metric about the maximum number of collisions in lrushah
2023-01-13 13:33:38 +07:00
W.C.A. Wijngaards
aa621f1c04
Code repository continues with version 1.17.2.
2023-01-12 10:21:28 +01:00
W.C.A. Wijngaards
0fed35a4b7
- Fix python version detection in configure.
2023-01-09 15:10:00 +01:00
W.C.A. Wijngaards
4517dcd439
- Fix python module install path detection.
2023-01-09 15:03:38 +01:00
W.C.A. Wijngaards
c5c4f6d40b
Changelog note for 1.17.1rc2 fix.
...
- Fix wildcard in hyperlocal zone service degradation, reported
by Sergey Kacheev. This fix is included in 1.17.1rc2.
2023-01-06 13:23:02 +01:00
W.C.A. Wijngaards
0419b06ca4
Merge branch 'branch-1.17.1'
2023-01-06 13:22:06 +01:00
W.C.A. Wijngaards
90831af981
- Fix wildcard in hyperlocal zone service degradation, reported
...
by Sergey Kacheev.
2023-01-06 13:21:39 +01:00
W.C.A. Wijngaards
ba6325f24f
- Fix #823 : Response change to NODATA for some ANY queries since
...
1.12, tested on 1.16.1.
2023-01-06 09:16:59 +01:00
W.C.A. Wijngaards
2025946247
Changelog note for tag for 1.17.1rc1.
...
- Tag for 1.17.1 release.
2023-01-05 11:06:07 +01:00
Alex Band and GitHub
e92bd614c0
Add Mastodon link
2023-01-04 16:21:43 +01:00
Alex Band and GitHub
f93fdb5e09
Add Mastodon
2023-01-04 15:57:45 +01:00
Pavel Odintsov
d5b9a790fe
Added new static zone type block_a to suppress all A queries for specific zones
2023-01-03 19:17:51 +00:00
W.C.A. Wijngaards
70260273a4
- Update github workflows to use checkout v3.
2023-01-02 13:30:03 +01:00
W.C.A. Wijngaards
1224cd9d25
- Fix windows compile for libunbound subprocess reap comm point closes.
2023-01-02 13:06:39 +01:00
George Thessalonikefs
0682d4371e
- Merge #569 from JINMEI Tatuya: add keep-cache option to
...
'unbound-control reload' to keep caches.
2022-12-14 16:40:00 +01:00
George Thessalonikefs
7716d26d46
- Use an explicit 'reload_keep_cache' command and introduce test cases
...
for #569 .
2022-12-14 16:33:28 +01:00
George Thessalonikefs
857d6ce3a1
Merge branch 'reuse-caches-on-reload' of https://github.com/jinmeiib/unbound-1 into jinmeiib-reuse-caches-on-reload
2022-12-13 16:42:38 +01:00
George Thessalonikefs
af2ef61c49
- Merge #461 from Christian Allred: Add max-query-restarts option.
2022-12-13 15:54:51 +01:00
George Thessalonikefs
df411b3f28
- Updates for #461 (Add max-query-restarts option).
2022-12-13 15:29:22 +01:00
George Thessalonikefs
71db243b0d
Merge branch 'restart_conf' of https://github.com/cgallred/unbound into cgallred-restart_conf
2022-12-13 14:35:01 +01:00
George Thessalonikefs
67cf625608
Merge branch 'master' of github.com:NLnetLabs/unbound
2022-12-13 13:59:42 +01:00
George Thessalonikefs
c61b2121b5
- Expose 'max-sent-count' as a configuration option; the
...
default value retains Unbound's behavior.
2022-12-13 13:57:07 +01:00
George Thessalonikefs
859d0f2dfe
- Expose 'statistics-inhibit-zero' as a configuration option; the
...
default value retains Unbound's behavior.
2022-12-13 10:47:37 +01:00
W.C.A. Wijngaards
1a2e6aabac
- Fix to wrap Makefile scripts directory in quotes for uninstall.
2022-12-13 09:03:52 +01:00
W.C.A. Wijngaards
726aa5b0f5
Changelog note for #808
...
- Merge #808 : Wrap Makefile script's directory variables in quotes.
2022-12-13 08:53:44 +01:00
Wouter Wijngaards and GitHub
5204c14e6d
Merge pull request #808 from sneurlax/fix/windows
...
Wrap Makefile script's directory variables in quotes
2022-12-13 08:53:07 +01:00
sneurlax
2daaebf3aa
wrap directory variables in quotes
...
see https://github.com/NLnetLabs/unbound/issues/807
2022-12-12 19:27:19 -06:00
TCY16
dd3984eae9
add validation EDEs to CD bit queries
2022-12-05 11:41:17 +01:00
W.C.A. Wijngaards
6b8642b662
Fix date.
2022-12-01 13:05:02 +01:00
W.C.A. Wijngaards
5c041c0ba9
- Fix #773 : When used with systemd-networkd, unbound does not start
...
until systemd-networkd-wait-online.service times out.
2022-12-01 13:04:05 +01:00
George Thessalonikefs
d7a9def160
- Clear documentation for interactivity between the subnet module and
...
the serve-expired and prefetch configuration options.
2022-11-30 14:45:36 +01:00
George Thessalonikefs
ef8111ece7
Merge branch 'master' of github.com:NLnetLabs/unbound
2022-11-30 14:34:00 +01:00
George Thessalonikefs
90f6cb1158
- Add SVCB and HTTPS to the types removed by 'unbound-control flush'.
2022-11-30 14:33:16 +01:00
W.C.A. Wijngaards
effbf99281
- Fix #782 : Segmentation fault in stats.c:404.
2022-11-30 10:18:27 +01:00
Philip Homburg
81861aee05
Changelog entry for #720
2022-11-29 16:20:52 +01:00
W.C.A. Wijngaards
6f7da59b77
- Fix for the ignore of tcp events for closed comm points, preserve
...
the use after free protection features.
2022-11-28 10:04:52 +01:00
TCY16
a96c64d966
add subnetcache test and rename/improve cachedb test
2022-11-24 16:14:37 +01:00
TCY16
79d39e7f4d
Add subnetcache support
2022-11-24 16:14:12 +01:00
Philip-NLnetLabs and GitHub
b86a97019f
Merge pull request #720 from jonathangray/winsock_uaf
...
fix use after free when WSACreateEvent() fails
2022-11-23 14:08:01 +01:00
George Thessalonikefs
896f7a8306
- Ignore expired error responses.
2022-11-22 17:44:55 +01:00
tcarpay and GitHub
a7ac109e4e
Remove erroneous filepath in test
2022-11-22 12:11:55 +01:00
TCY16
79108f4c3d
add ede cachedb test
2022-11-21 15:26:49 +01:00
TCY16
6dcba49ff1
add cachedb support
2022-11-21 13:23:00 +01:00
TCY16
8b4a8493d0
Merge branch 'master' of github.com:NLnetLabs/unbound into features/ede-caching
2022-11-21 11:34:36 +01:00
TCY16
b65ff768bc
remove superfluous variables
2022-11-18 11:30:11 +01:00
W.C.A. Wijngaards
f72116883b
- Fix #779 : [doc] Missing documention in ub_resolve_event() for
...
callback parameter was_ratelimited.
2022-11-11 11:28:15 +01:00
George Thessalonikefs
4e305e644b
- Complementary fix for distutils.sysconfig deprecation in Python 3.10
...
to commit 62c5039ab9
2022-11-09 11:41:28 +01:00
W.C.A. Wijngaards
89d9b25090
- iana portlist update.
2022-11-08 15:24:24 +01:00
W.C.A. Wijngaards
dda1d9544c
- Fix #775 : libunbound: subprocess reap causes parent process reap
...
to hang.
2022-11-08 15:04:05 +01:00
W.C.A. Wijngaards
52a9e6268e
- Fix to make sure to not read again after a tcp comm point is closed.
2022-11-08 13:23:44 +01:00
W.C.A. Wijngaards
8367b24bc5
- Fix to ignore tcp events for closed comm points.
2022-11-08 12:02:48 +01:00
Willem Toorop
8df26b132b
Merge branch 'master' into devel/merge-master-into-downstream-cookies
2022-11-07 17:09:20 +00:00
David Lamparter
64fb06f892
NAT64 support
...
This implements #721 . Includes documentation and some very basic tests.
Please refer to doc for further detail.
2022-11-07 11:37:50 +00:00
TCY16
5bf4c505db
remove value check
2022-10-28 17:40:18 +02:00
TCY16
5158876bfd
Merge branch 'master' of github.com:NLnetLabs/unbound into features/dohpath-for-unbounid
2022-10-28 11:14:59 +02:00
George Thessalonikefs
f531faf163
Changelog entry for #767
...
- Merge #767 from jonathangray: consistently use IPv4/IPv6 in
unbound.conf.5.
2022-10-21 15:49:56 +02:00
Yorgos Thessalonikefs and GitHub
c0c9acccfd
Merge pull request #767 from jonathangray/man
...
consistently use IPv4/IPv6 in unbound.conf.5
2022-10-21 15:46:45 +02:00
W.C.A. Wijngaards
17e5dd6131
- Fix that cachedb does not store failures in the external cache.
2022-10-21 10:11:47 +02:00
George Thessalonikefs
e9107907e5
- Clarify the use of MAX_SENT_COUNT in the iterator code.
2022-10-18 12:29:07 +02:00
W.C.A. Wijngaards
ba8642aeb7
- testcode/dohclient sets log identity to its name.
2022-10-17 16:00:43 +02:00
W.C.A. Wijngaards
5ffa4d7232
- In unit test, print python script name list correctly.
2022-10-14 16:49:57 +02:00
W.C.A. Wijngaards
2571d00535
Changelog note for #768
...
- Merge #768 from fobser: Arithmetic on a pointer to void is a GNU
extension.
2022-10-14 16:22:17 +02:00
Wouter Wijngaards and GitHub
f9a563d495
Merge pull request #768 from fobser/void_math
...
Arithmetic on a pointer to void is a GNU extension.
2022-10-14 16:21:14 +02:00
Florian Obser
08dcae0dab
Arithmetic on a pointer to void is a GNU extension.
2022-10-14 13:56:32 +02:00
W.C.A. Wijngaards
5ac1bc13cb
- Tag for 1.17.0 release. The code repository continues with 1.17.1.
2022-10-13 09:34:44 +02:00
W.C.A. Wijngaards
f5e1ef650d
Merge branch 'branch-1.17.0'
2022-10-13 09:32:22 +02:00
George Thessalonikefs
d25e0cd9b0
- Fix PROXYv2 header read for TCP connections when no proxied addresses
...
are provided.
2022-10-11 17:39:30 +02:00
Jonathan Gray
4f27799456
consistently use IPv4/IPv6
2022-10-10 19:14:58 +11:00
W.C.A. Wijngaards
97d1cff315
Changelog note for tag for 1.17.0rc1 release.
2022-10-07 13:29:33 +02:00
George Thessalonikefs
a4631a3ecf
- Fix unit test to properly test the reuse_write_wait_pop function.
2022-10-07 11:29:46 +02:00
George Thessalonikefs
2569b12b9c
- Fix to stop possible loops in the tcp reuse code (write_wait list
...
and tcp_wait list). Based on analysis and patch from Prad Seniappan
and Karthik Umashankar.
2022-10-07 11:25:36 +02:00
W.C.A. Wijngaards
bf1cce6f9b
- Fix proxy length debug output printout typecasts.
2022-10-06 15:53:21 +02:00
W.C.A. Wijngaards
b043bc5eb4
- Fix to stop responses with TC flag from resulting in partial
...
responses. It retries to fetch the data elsewhere, or fails the
query and in depth fix removes the TC flag from the cached item.
2022-10-06 10:01:09 +02:00
George Thessalonikefs
d122617dd4
- Fix checkconf test for dnscrypt and proxy port.
2022-10-05 22:03:01 +02:00
W.C.A. Wijngaards
6b8181acb7
- Fix dnscrypt compile for proxy protocol code changes.
2022-10-05 14:09:12 +02:00
George Thessalonikefs
f609a45354
- Make ede.tdir test more predictable by using static data.
2022-10-05 02:44:50 +02:00
George Thessalonikefs
60db1111c0
- Use DEBUG_TDIR from environment in mini_tdir.sh for debugging.
...
- Fix string comparison in mini_tdir.sh.
2022-10-05 01:13:29 +02:00
George Thessalonikefs
40b2b3a6f3
Changelog entry for #764
...
- Merge #764 : Leniency for target discovery when under load (for
NRDelegation changes).
2022-10-04 22:24:18 +02:00
Yorgos Thessalonikefs and GitHub
f1d263a318
Leniency for target discovery when under load (for NRDelegation changes) ( #764 )
...
* - Introduce leniency for target discovery when under load.
* - Allow for easier testing (to be reverted).
* - Happy compiler.
* - Precheck access to target_fetch_policy.
* - Do not mark a nameserver as resolved when one of A/AAAA is negative.
* - Update fetch_glue.rpl test for (possible) outstanding queries.
* - Update fetch_glue_cname.rpl test for possible outstanding queries.
* - Better fix for fetch_glue_cname.rpl.
* - Fix iter_emptydp_for_glue.rpl to match the referral.
* - Disabled the nxns tests for now (to be reverted).
* - Update iter_recurse.rpl for possible outstanding queries.
* Revert "- Disabled the nxns tests for now (to be reverted)."
This reverts commit 34a9c13a90b6dfe35e1d
2022-10-04 22:21:08 +02:00
W.C.A. Wijngaards
f0614a57f8
- Fix to clean up after the acl_interface unit test.
2022-10-04 16:59:10 +02:00
W.C.A. Wijngaards
bf7a2884fb
- Fix static analysis report to remove dead code from the
...
rpz_callback_from_iterator_module function.
2022-10-04 09:08:11 +02:00
W.C.A. Wijngaards
c0eaadfc42
- Fix to close errno block in comm_point_tcp_handle_read outside of
...
ifdef.
2022-10-03 16:21:39 +02:00
George Thessalonikefs
22e43aa631
Changelog entry for #760
...
- Merge #760 : PROXYv2 downstream support. (New proxy-protocol-port
configuration option).
2022-10-03 15:34:22 +02:00
Yorgos Thessalonikefs and GitHub
c4e51a4cfe
PROXYv2 downstream support ( #760 )
2022-10-03 15:29:47 +02:00
W.C.A. Wijngaards
7d96a7e3fe
- Fix windows compile, the identifier interface is defined in headers.
2022-10-03 15:03:50 +02:00
W.C.A. Wijngaards
9842fbf760
- Fix test tdir skip report printout.
2022-10-03 10:26:30 +02:00
W.C.A. Wijngaards
a102fb1df8
- Fix to remove erroneous TC flag from TCP upstream.
2022-10-03 09:53:41 +02:00
Willem Toorop
bd2c202674
The generated lexer and parser sources for configuring cookies
2022-09-28 10:34:06 +02:00
Willem Toorop
75f3fbdd65
Downstream DNS Cookies a la RFC7873 and RFC9018
...
Create server cookies for clients that send client cookies.
Needs to be turned on in the config file with:
answer-cookie: yes
A cookie-secret can be configured for anycast setups.
Also adds an access control list that will allow queries with
either a valid cookie or over a stateful transport.
2022-09-28 10:28:19 +02:00
Willem Toorop
71f23ef354
extended_error_encode() for extended errors
2022-09-28 09:57:56 +02:00
George Thessalonikefs
5b98816751
- Better output for skipped tdir tests.
2022-09-26 15:51:28 +02:00
TCY16
0b176750bd
add @wcawijngaards' review comments
2022-09-26 12:14:17 +02:00
TCY16
f0989fc754
differentiate between malloc and regional_alloc
2022-09-26 11:49:49 +02:00
TCY16
c9f90def0a
swap malloc for regional_alloc and add free
2022-09-26 11:18:58 +02:00
TCY16
57c4f28f20
add happy-flow test
2022-09-21 16:21:48 +02:00
TCY16
d731fa2e21
use correct edns_list attach function
2022-09-21 16:19:38 +02:00
W.C.A. Wijngaards
e93c75a5d4
- Fix doxygen warning in respip.h.
2022-09-21 15:23:04 +02:00
W.C.A. Wijngaards
8e18f11965
- This patch was released in 1.16.3, the code repository continues
...
with the previous features and fixes for 1.17.0.
2022-09-21 12:16:13 +02:00
W.C.A. Wijngaards
e3871ca907
Merge branch 'branch-1.16.3'
2022-09-21 12:11:26 +02:00
TCY16
dcfcde2ec8
add cached EDE strings
2022-09-21 11:21:33 +02:00
W.C.A. Wijngaards
137719522a
- Patch for CVE-2022-3204 Non-Responsive Delegation Attack.
2022-09-21 11:10:38 +02:00
W.C.A. Wijngaards
bd3c5702a7
branch for 1.16.3 release.
2022-09-21 11:09:03 +02:00
Philip-NLnetLabs and GitHub
f68e252345
Merge pull request #757 from NLnetLabs/philip-issue-749
...
Philip issue 749
2022-09-20 15:07:14 +02:00
Philip Homburg
1e5158045f
Merge branch 'ryndia-issue-749' into philip-issue-749
2022-09-20 14:48:57 +02:00
George Thessalonikefs
99e12ae4b5
- Remove unused testcode/mini_tpkg.sh file.
2022-09-20 14:47:24 +02:00
Philip Homburg
5f3b460586
Align with version 1.58 on cvsweb.openbsd.org
2022-09-20 14:47:19 +02:00
George Thessalonikefs
9b1647ebae
- Convert tdir tests to use the new skip_test functionality.
2022-09-20 14:45:20 +02:00
George Thessalonikefs
307805b64f
Changelog entry for #753 :
...
- Merge #753 : ACL per interface. (New interface-* configuration
options).
2022-09-20 11:36:01 +02:00
Yorgos Thessalonikefs and GitHub
f02d6bddd1
Merge pull request #753 from NLnetLabs/acl_interface
...
ACL per interface
2022-09-16 16:45:59 +02:00
eb02170338
Apply suggestions from code review
...
Co-authored-by: Wouter Wijngaards <wcawijngaards@users.noreply.github.com >
2022-09-16 14:43:23 +02:00
George Thessalonikefs
d301bfe4a2
- ACL per interface: refactor, complete testing and a bugfix for
...
interface names.
2022-09-11 20:57:41 +02:00
George Thessalonikefs
fc123303ac
- Add functionality to skip tdir tests from the .pre file;
...
- Initial tests for interface-* options.
2022-09-11 20:21:32 +02:00
George Thessalonikefs
aec33b3d63
Documentation for interface-* options.
2022-09-11 20:21:32 +02:00
George Thessalonikefs
7e9fd2114b
Cleared error messages for interface-* options.
2022-09-11 20:21:32 +02:00
George Thessalonikefs
c30bdff939
Initial commit for interface based ACL.
2022-09-11 20:21:32 +02:00
ryndia and GitHub
cfc656294e
Update arc4random.c
2022-09-07 20:16:20 +04:00
W.C.A. Wijngaards
007db2c327
- Fix to check pthread_t size after pthread has been detected.
2022-09-02 10:21:00 +02:00
W.C.A. Wijngaards
5bbaf78c3f
- Remove include that was there for debug purposes.
2022-09-02 10:11:23 +02:00
W.C.A. Wijngaards
57230d7f22
- Fix to log a verbose message at operational notice level if a
...
thread is not responding, to stats requests. It is logged with
thread identifiers.
2022-09-01 15:14:20 +02:00
TCY16
5f309d0018
Add caching EDEs
2022-09-01 14:10:14 +02:00
W.C.A. Wijngaards
d66e1cccf8
- Fix to set out of file descriptor warning to operational verbosity.
2022-09-01 14:01:56 +02:00
W.C.A. Wijngaards
2450b4653a
- Slow down log frequency of write wait failures.
2022-09-01 14:00:29 +02:00
W.C.A. Wijngaards
eb3378396f
- Fix to update config tests to fix checking if nonblocking sockets
...
work on OpenBSD.
2022-09-01 09:16:05 +02:00
W.C.A. Wijngaards
1f5cc25974
- Fix for wait for udp send to stop when packet is successfully sent.
2022-08-31 16:45:15 +02:00
W.C.A. Wijngaards
ec5812a748
- Fix to wait for blocked write on UDP sockets, with a timeout if it
...
takes too long the packet is dropped.
2022-08-31 11:54:11 +02:00
W.C.A. Wijngaards
10a5a5880a
- Patch from Vadim Fedorenko that adds MSG_DONTWAIT to receive
...
operations, so that instruction reordering does not cause mistakenly
blocking socket operations.
2022-08-31 10:11:25 +02:00
W.C.A. Wijngaards
2fa1c17cd9
- Fix to avoid process wide fcntl calls mixed with nonblocking
...
operations after a blocked write.
2022-08-31 10:09:39 +02:00
TCY16
b642c5fe1f
add better URI template checking
2022-08-25 14:06:13 +02:00
TCY16
f3fa363443
implement @gthess' review comments; fix check on compulsory text and add tests
2022-08-24 12:38:08 +02:00
W.C.A. Wijngaards
e6f878ee71
- Fix #741 : systemd socket activation fails on IPv6.
2022-08-22 09:12:08 +02:00
TCY16
8d939691a3
implement @wcawijngaards' review comment
2022-08-19 14:48:47 +02:00
TCY16
b465e0cfc0
add testcase and fix comment
2022-08-15 16:12:22 +02:00
TCY16
73b3b32062
fix styling nits
2022-08-15 14:41:06 +02:00
TCY16
6e31d1f5be
add dohpath parsing
2022-08-15 14:36:35 +02:00
TCY16
14fe4669e7
fix testcase comment
2022-08-12 14:09:00 +02:00
W.C.A. Wijngaards
dc6c04b243
- Fix to log accept error ENFILE and EMFILE errno, but slowly, once
...
per 10 seconds. Also log accept failures when no slow down is used.
2022-08-12 09:54:29 +02:00
W.C.A. Wijngaards
ef57f8bd51
- Fix #734 [FR] enable unbound-checkconf to detect more (basic)
...
errors.
2022-08-05 14:41:05 +02:00
W.C.A. Wijngaards
fbe8e3b0b2
- Fix ratelimit inconsistency, for ip-ratelimits the value is the
...
amount allowed, like for ratelimits.
2022-08-04 11:33:37 +02:00
W.C.A. Wijngaards
1c164ab442
Changelog note for #730
...
- Merge #730 from luisdallos: Fix startup failure on Windows 8.1 due
to unsupported IPV6_USER_MTU socket option being set.
2022-08-02 16:12:31 +02:00
Wouter Wijngaards and GitHub
e738ec31ca
Merge pull request #730 from luisdallos/win81-unsup-sockopt-fix
...
Fix startup failure on Windows 8.1 due to unsupported IPV6_USER_MTU socket option being set
2022-08-02 16:12:16 +02:00
W.C.A. Wijngaards
07b073ddb3
- Fix unittest for edns subnet change.
2022-08-02 14:43:57 +02:00
W.C.A. Wijngaards
0f08cc6d55
- Fix edns subnet so that scope 0 answers only match sourcemask 0
...
queries for answers from cache if from a query with sourcemask 0.
2022-08-02 14:13:55 +02:00
Luis Dallos
7d3c6f1c43
Fix startup failure on Windows 8.1 due to unsupported IPV6_USER_MTU socket option being set
...
Newer mingw-w64 (starting from 8.0.1) introduces support for `IPV6_USER_MTU` socket
option [1], which is not supported on Windows 8.1 and older [2]. As there is no way
to avoid this socket option from being picked at compile time when targeting older
versions of Windows, check for `setsockopt(..., IPV6_USER_MTU, ...)` failures at
runtime in order to avoid startup failure on those versions of Windows where the
`IPV6_USER_MTU` socket option is unsupported.
[1]: mirror/mingw-w64@e30bff4
[2]: `WSAGetLastError()` returns `WSAENOPROTOOPT` (`Bad protocol option`) error code
2022-08-01 23:03:24 -04:00
W.C.A. Wijngaards
cd22fdc28d
- Fix #728 : alloc_reg_obtain() core dump. Stop double
...
alloc_reg_release when serviced_create fails.
2022-08-01 16:45:41 +02:00
W.C.A. Wijngaards
5ae48f85c0
- The code repo continues with 1.16.3.
2022-08-01 15:17:10 +02:00
W.C.A. Wijngaards
cbed768b8f
- Tests for ghost domain fixes.
2022-08-01 13:26:22 +02:00
W.C.A. Wijngaards
f6753a0f10
- Fix the novel ghost domain issues CVE-2022-30698 and CVE-2022-30699.
2022-08-01 13:24:40 +02:00
George Thessalonikefs
efdd70c7b5
- Cleanup some comments and TODO text.
2022-07-23 19:55:15 +02:00
JINMEI Tatuya
fccb2eb2e8
prevent memory leak in case cache isn't reused
2022-07-22 14:33:21 -07:00
Jonathan Gray
1464b166a4
fix use after free when WSACreateEvent() fails
2022-07-22 18:23:59 +10:00
W.C.A. Wijngaards
f993ffbb07
Changelog note for #718
...
- Merge #718 : Introduce infra-cache-max-rtt option to config max
retransmit timeout.
2022-07-19 15:19:12 +02:00
Wouter Wijngaards and GitHub
ef9bb0213b
Merge pull request #718 from hunts/make_rtt_max_timeout_configurable
...
Introduce infra-cache-max-rtt option to config max retransmit timeout
2022-07-19 15:15:34 +02:00
George Thessalonikefs
309e23515e
- Update documentation for 'outbound-msg-retry:'.
2022-07-19 12:47:01 +02:00
Minghang Chen
249efd4285
Introduce infra-cache-max-rtt option to config max retransmit timeout
...
Added the option and let it default to 120 seconds so that it won't change
current behavior.
Related-to #717
2022-07-16 01:46:18 -07:00
W.C.A. Wijngaards
12cd495d55
- iana portlist update.
2022-07-15 09:20:25 +02:00
W.C.A. Wijngaards
33bd49af81
- Merge PR 714: Avoid treat normal hosts as unresponsive servers.
...
And fixup the lock code.
2022-07-15 08:51:31 +02:00
Wouter Wijngaards and GitHub
6e50c46102
Merge pull request #714 from hunts/rtt-of-expired-host
...
Avoid treat normal hosts as unresponsive servers
2022-07-15 08:49:51 +02:00
Hunts Chen
88bf803297
Avoid treat normal hosts as unresponsive servers
...
This is a fix for issue #713
When infra-keep-probing is on, all hosts with expired entries were treated as
unresponsive servers and thus causing problems (see #713 ).
This commit change that, so that normal hosts with expired entries are treated
as unknown servers.
2022-07-14 10:16:13 -07:00
George Thessalonikefs
9e4a17baaf
- For windows crosscompile, fix setting the IPV6_MTU socket option
...
equivalent (IPV6_USER_MTU); allows cross compiling with latest
cross-compiler versions.
2022-07-12 17:17:59 +02:00
W.C.A. Wijngaards
2abd6f7d58
- Fix dname count in sldns parse type descriptor for SVCB and HTTPS.
2022-07-12 13:29:51 +02:00
W.C.A. Wijngaards
7696398231
- Fix verbose EDE error printout.
2022-07-11 13:13:51 +02:00
Wouter Wijngaards and GitHub
886ffcc155
Merge pull request #711 from NLnetLabs/add-security.md
...
add SECURITY.md, based on krill
2022-07-11 11:37:28 +02:00
W.C.A. Wijngaards
a45ced7739
- This became 1.16.1 on 11 July 2022.
...
The code repo continues with version 1.16.2 under development.
2022-07-11 11:34:54 +02:00
maertsen and GitHub
125983558b
add SECURITY.md, based on krill
2022-07-05 16:39:04 +02:00
W.C.A. Wijngaards
903538c76e
- Tag for 1.16.1rc1 release.
2022-07-04 13:48:56 +02:00
George Thessalonikefs
d447d60fc6
Merge branch 'crrodriguez-IP_BIND_ADDRESS_NO_PORT'
2022-07-04 12:49:00 +02:00
George Thessalonikefs
e5f66b4902
- For #668 : relocate and make code more portable.
2022-07-04 12:46:17 +02:00
George Thessalonikefs
0f4c4c1163
Merge branch 'IP_BIND_ADDRESS_NO_PORT' of https://github.com/crrodriguez/unbound into crrodriguez-IP_BIND_ADDRESS_NO_PORT
2022-07-04 11:15:58 +02:00
George Thessalonikefs
eda0c0c194
- Fix bug introduced in 'improve val_sigcrypt.c::algo_needs_missing for
...
one loop pass'.
2022-07-04 09:34:45 +02:00
George Thessalonikefs
309b1d368b
- Reintroduce documentation and more EDE support for
...
val_sigcrypt.c::dnskeyset_verify_rrset_sig.
2022-07-04 00:06:26 +02:00
George Thessalonikefs
c513119bba
- Improve val_sigcrypt.c::algo_needs_missing for one loop pass.
2022-07-03 23:32:18 +02:00
George Thessalonikefs
a30286502c
- Fix for correct openssl error when adding windows CA certificates to
...
the openssl trust store.
2022-07-03 22:41:39 +02:00
George Thessalonikefs
317bab9f1d
For #660 : formatting, less verbose logging, add EDE information.
2022-07-03 22:32:56 +02:00
George Thessalonikefs
2fba248ebe
Changelog entry for #660
...
- Merge PR #660 from Petr Menšík: Sha1 runtime insecure.
2022-07-03 22:28:17 +02:00
Yorgos Thessalonikefs and GitHub
e102aea751
Merge pull request #660 from InfrastructureServices/sha1-runtime-insecure
...
Sha1 runtime insecure
2022-07-03 22:24:58 +02:00
George Thessalonikefs
24cb764d61
- Add missing changelog entries from PR #706 .
2022-07-03 22:21:56 +02:00
George Thessalonikefs
cb28bdcdb0
Changelog entry for #671 :
...
- Merge PR #671 from Petr Menšík: Disable ED25519 and ED448 in FIPS
mode on openssl3.
2022-07-03 22:08:47 +02:00
George Thessalonikefs
bcf7a8aed2
Merge branch 'InfrastructureServices-fips-mode-algo-ed25519'
2022-07-03 21:59:20 +02:00
George Thessalonikefs
391dd86c3b
Merge branch 'master' into InfrastructureServices-fips-mode-algo-ed25519
2022-07-01 17:34:09 +02:00
Yorgos Thessalonikefs and GitHub
b0ce31b4e4
Merge pull request #706 from NLnetLabs/nxns-fallback
...
NXNS fallback
2022-07-01 16:24:33 +02:00
George Thessalonikefs
2dbaba7d73
- Improved logging for NXNS fallback.
2022-07-01 16:18:33 +02:00
George Thessalonikefs
923eb7d474
- Allow fallback to the parent side when MAX_TARGET_NX is reached.
...
This will also allow MAX_TARGET_NX more NXDOMAINs.
2022-06-29 17:32:29 +02:00
George Thessalonikefs
58b21e4fca
- Fix to not count cached NXDOMAIN for MAX_TARGET_NX.
2022-06-29 17:26:09 +02:00
W.C.A. Wijngaards
ef718f02e4
Remove debug output from windows compile workflow.
2022-06-29 12:01:39 +02:00
W.C.A. Wijngaards
c8add463c4
- Fix compile warning for windows compile.
2022-06-29 12:00:44 +02:00
W.C.A. Wijngaards
203f606c38
- Fix detection of libz on windows compile with static option.
2022-06-29 11:41:20 +02:00
W.C.A. Wijngaards
e7badb9428
Debug output for windows compile workflow.
2022-06-29 11:17:12 +02:00
George Thessalonikefs
b816318106
- Fix #704 : [FR] Statistics counter for number of outgoing UDP queries
...
sent; introduces 'num.query.udpout' to the 'unbound-control stats'
command.
2022-06-29 10:51:54 +02:00
George Thessalonikefs
1ceb031b58
- Add debug option to the mini_tdir.sh test code.
2022-06-29 10:47:18 +02:00
George Thessalonikefs
352e1b28a1
Merge branch 'master' of github.com:NLnetLabs/unbound
2022-06-29 10:44:43 +02:00
W.C.A. Wijngaards
80dbc7dd2c
- iana portlist update.
2022-06-29 09:38:31 +02:00
George Thessalonikefs
c8e7539313
- Formatting.
2022-06-28 18:31:27 +02:00
George Thessalonikefs
12796d0af8
- Fix for cached 0 TTL records to not trigger prefetching when
...
serve-expired-client-timeout is set.
2022-06-28 17:05:28 +02:00
W.C.A. Wijngaards
b057d2127a
- Fix test program dohclient close to use portability routine.
2022-06-28 09:23:43 +02:00
George Thessalonikefs
9177867d07
- Show the output of the exact .rpl run that failed with 'make test'.
2022-06-28 00:22:30 +02:00
tcarpay and GitHub
9e6b838d0b
Update changelog with #705 change
2022-06-23 17:21:17 +02:00
tcarpay and GitHub
12552fddf0
clarify addition of verbosity level mentioned in #705
2022-06-23 15:00:48 +02:00
Philip Homburg
3bade62c8a
Fix use after free issue with edns options ( https://github.com/NLnetLabs/unbound/issues/663 )
2022-06-22 15:00:28 +02:00
Philip Homburg
c806b5a2df
Merge branch 'zone-parsers-blank-line-issue'
2022-06-21 15:32:35 +02:00
Philip Homburg
7f67f7118c
Change log entry for lines with blanks issue
2022-06-21 15:30:04 +02:00
George Thessalonikefs
7c9177095f
- Remove unused LDNS function check for GOST Engine unloading.
2022-06-20 16:27:15 +02:00
George Thessalonikefs
233cb5c218
- Note in the unbound.conf text that NOTIFY is allowed from the url:
...
addresses for auth and rpz zones.
2022-06-14 17:59:56 +02:00
George Thessalonikefs
e6a0afae73
Changelog entry for #688
...
- Merge PR #688 : Rpz url notify issue.
2022-06-14 17:56:23 +02:00
Yorgos Thessalonikefs and GitHub
90767fce98
Merge pull request #688 from NLnetLabs/rpz-url-notify-issue
...
Rpz url notify issue
2022-06-14 17:53:01 +02:00
George Thessalonikefs
187bc72633
- Add testcase for allowing NOTIFY on URL addresses.
2022-06-14 17:44:37 +02:00
Philip Homburg
78b4b12713
Test loading a zone with blank lines over https
2022-06-14 17:05:03 +02:00
Philip Homburg
b8e111e379
Avoid network traffic during test, a bit of cleanup
2022-06-14 17:04:23 +02:00
Philip Homburg
0e1c266f86
Fix issue with lines that only consist of blanks with optional comment
2022-06-13 11:41:14 +02:00
Philip Homburg
c6ef39a22d
Test loading a cached zone that has lines consisting of blanks
2022-06-08 14:45:30 +02:00
George Thessalonikefs
459b73018f
- Fix for edns client subnet to respect not looking in its cache when
...
instructed to do so (e.g., prefetch).
2022-06-03 16:11:35 +02:00
W.C.A. Wijngaards
97b7224885
- makedist.sh picks up 32bit libssp-0.dll when 32bit compile.
2022-06-03 15:18:27 +02:00
W.C.A. Wijngaards
a3ab0921b0
Continue with 1.16.1 under development.
2022-06-02 13:56:52 +02:00
Philip Homburg
16dd802c2e
Add url 'master' to allow notify list
2022-05-31 15:10:38 +02:00
Philip Homburg
6dad2d2fc6
allow-notify doesn't work for url on rpz zones ( https://github.com/NLnetLabs/unbound/issues/679 )
2022-05-31 15:10:38 +02:00
W.C.A. Wijngaards
edc1d07718
- Version is set to 1.16.0 for release. Release tag 1.16.0rc1.
2022-05-27 16:09:28 +02:00
W.C.A. Wijngaards
2d61706171
- Fix #684 : [FTBS] configure script error with libmnl on openSUSE 15.3 (and possibly other distributions)
2022-05-27 09:10:16 +02:00
W.C.A. Wijngaards
11d077c826
- Fix some lint type warnings.
2022-05-20 15:32:27 +02:00
W.C.A. Wijngaards
d19d7b81ec
- Fix ede test to not use default pidfile, and use local interface.
2022-05-20 15:14:11 +02:00
W.C.A. Wijngaards
714200ad0e
- Fix to silence test for ede error output to the console from the
...
test setup script.
2022-05-20 09:08:29 +02:00
George Thessalonikefs
c76420664a
Merge branch 'fips-mode-algo-ed25519' of https://github.com/InfrastructureServices/unbound into InfrastructureServices-fips-mode-algo-ed25519
2022-05-19 12:53:48 +03:00
George Thessalonikefs
7e506bb477
- Fix typos in config_set_option for the 'num-threads' and
...
'ede-serve-expired' options.
2022-05-18 19:56:26 +03:00
George Thessalonikefs
91c298c901
Merge branch 'subnet_cache_prefetch' of https://github.com/tilan7663/unbound into tilan7663-subnet_cache_prefetch
2022-05-17 16:16:09 +03:00
George Thessalonikefs
f73e548934
- Fix #678 : [FR] modify behaviour of unbound-control rpz_enable zone,
...
by updating unbound-control's documentation.
2022-05-15 22:53:17 +03:00
W.C.A. Wijngaards
e62b309959
- For #677 : Added tls-system-cert to config parser and documentation.
...
- Changelog note for #677 .
2022-05-12 16:30:19 +02:00
Wouter Wijngaards and GitHub
2132e67b36
Merge pull request #677 from InfrastructureServices/use-system-cas
...
Allow using system certificates not only on Windows
2022-05-12 16:16:49 +02:00
Petr Mensik
0abfddd279
Allow using system certificates not only on Windows
...
OpenSSL has a way to load default file. That file might contain usable
certificates to verify common connections. Allow similar trust as on
windows and leave it on openssl package to provide sane defaults.
Also provide use-system-cert alias, because it is not windows specific
anymore.
2022-05-12 16:07:41 +02:00
Yorgos Thessalonikefs and GitHub
ba4564b4ef
Merge pull request #674 from NLnetLabs/prefetch_when_ecs_enabled
...
Fix #417 : prefetch and ECS causing cache corruption when used
2022-05-12 01:17:42 +02:00
George Thessalonikefs
daf316ea1b
- Fix #417 : prefetch and ECS causing cache corruption when used
...
together.
2022-05-12 00:56:01 +02:00
W.C.A. Wijngaards
f0d91950ad
- Fix #673 : DNS over TLS: error: SSL_handshake syscall: No route to
...
host.
2022-05-11 17:10:42 +02:00
Petr Mensik
917c30a46a
Disable ED25519 and ED448 in FIPS mode on openssl3
...
Both crypto functions are not allowed by FIPS 140-3. Use openssl 3.0
function to check FIPS mode presence and use it to make those algorithms
unsupported.
2022-05-11 16:19:25 +02:00
George Thessalonikefs
77149fc2aa
- Fix Python build in non-source directory; based on patch by
...
Michael Tokarev.
2022-05-10 15:57:17 +02:00
tcarpay and GitHub
47ce372f13
Changelog entry for #604 : Add the basic EDE (RFC8914) cases
2022-05-06 12:53:49 +02:00
tcarpay and GitHub
0ce36e8289
Add the basic EDE (RFC8914) cases ( #604 )
2022-05-06 12:48:53 +02:00
Tian Lan
8afbc0944f
Add prefetch support for subnet cache entries
...
- Entries in the subnet cache should now be prefetched.
- Rename testdata subnet_*.crpl to subnet_*.rpl so they are visible to
make test
Signed-off-by: Tian Lan <tian.lan@twosigma.com >
2022-04-29 11:46:05 -04:00
W.C.A. Wijngaards
b61b0af5d6
- Fix #670 : SERVFAIL problems with unbound 1.15.0 running on
...
OpenBSD 7.1.
2022-04-28 14:51:47 +02:00
Cristian Rodríguez
6a4ea692d4
Set IP_BIND_ADDRESS_NO_PORT on outbound tcp sockets
...
When bound to a local address the kernel does not know if the socket
will listen() or connect() and must reserve a port inmediately after
bind() effectively limiting the random port range to ~32k.
when IP_BIND_ADDRESS_NO_PORT is set, the kernel delays source port
allocation until the time the complete 4-tuple is known allowing
a much larger number of combinations
2022-04-23 23:08:45 +00:00
Christian Allred
d19e12ab5d
Merge branch 'master' of https://github.com/NLnetLabs/unbound into restart_conf
2022-04-18 12:16:40 -07:00
Petr Mensik
74c6cf5ac6
Log detailed openssl error also for digests failures
...
Make output still only shown in verbose detail. But provide openssl
error details to make a reason more obvious.
2022-04-12 16:13:49 +02:00
Petr Mensik
33c8baaaba
Forward indeterminate status higher
...
Create a path where it can result in insecure.
2022-04-08 16:26:50 +02:00
Petr Mensik
6cfcf21451
Make SHA-1 signed domains insecure if openssl refuses the digest
...
RHEL9/CentOS 9 would fail in default crypto policy. If call to openssl
returns invalid digest then report the name insecure. If all tested
signatures return the same issue, then make the reply insecure.
2022-04-08 16:26:50 +02:00
W.C.A. Wijngaards
1289c53c1a
- Fix zonemd unsupported algo check to set reason to NULL before the
...
check routine, but after malformed checks, to get the correct NULL
output when the digest matches.
2022-04-08 11:19:40 +02:00
W.C.A. Wijngaards
d02e83ae2b
- Fix zonemd unsupported algo check to print unsupported reason before
...
zeroing it.
2022-04-08 11:10:11 +02:00
W.C.A. Wijngaards
8f2847ba69
- Fix zonemd unsupported algo check reason to not copy to next record,
...
and check for success for debug printout.
2022-04-08 10:54:57 +02:00
W.C.A. Wijngaards
730a03e9bd
- Fix zonemd unsupported algo check.
2022-04-08 09:36:01 +02:00
W.C.A. Wijngaards
e4ca71e85b
- Fix zonemd check to allow unsupported algorithms to load.
...
If there are only unsupported algorithms, or unsupported schemes,
and no failed or successful other ZONEMD records, or malformed
or bad ZONEMD records, the unsupported records allow the zone load.
2022-04-08 09:29:37 +02:00
W.C.A. Wijngaards
8f8a8a341a
- Fix spelling error in comment in sldns_str2wire_svcparam_key_lookup.
2022-03-25 16:07:23 +01:00
W.C.A. Wijngaards
722391baf1
- Fix #651 : [FR] Better logging for refused queries.
2022-03-23 13:56:52 +01:00
George Thessalonikefs
ee63ac8f9b
- Minor formatting.
2022-03-18 16:04:16 +02:00
George Thessalonikefs
1e23c4a376
Merge PR #648 from eaglegai: fix -q doesn't work when use with
...
'unbound-control stats_shm'
2022-03-18 16:03:35 +02:00
eaglegai
c60bed8eef
fix -q doesn't work when use with 'unbound-control stats_shm'
...
Signed-off-by: eaglegai <eaglegai@163.com >
2022-03-18 19:08:50 +08:00
W.C.A. Wijngaards
9484ddee2e
- Fix to describe auth-zone and other configuration at the local-zone
...
configuration option, to allow for more broadly view of the options.
2022-03-17 14:24:37 +01:00
W.C.A. Wijngaards
402135b41a
- Fix to ensure uniform handling of spaces and tabs when parsing RRs.
2022-03-16 09:54:53 +01:00
W.C.A. Wijngaards
b0dbfa37f9
Changelog note for #644 , move commands together for library binary.
2022-03-09 09:43:07 +01:00
Wouter Wijngaards and GitHub
79f8fc1472
Merge pull request #644 from FGasper/issue_643_pkgconfig_install_lib
...
Make `install-lib` make target install the pkg-config file.
2022-03-09 09:41:54 +01:00
Felipe Gasper
516f4f9cf4
Make install-lib make target install the pkg-config file.
...
Issue #643
2022-03-08 14:01:09 -05:00
W.C.A. Wijngaards
62c5039ab9
- Fix configure for python to use sysutils, because distutils is
...
deprecated. It uses sysutils when available, distutils otherwise.
2022-03-07 14:02:31 +01:00
W.C.A. Wijngaards
b202b0874c
- Fix for #637 : fix integer overflow checks in sldns_str2period.
2022-03-03 16:24:46 +01:00
W.C.A. Wijngaards
debe5c665f
- Fix #637 : Integer Overflow in sldns_str2period function.
2022-03-03 14:19:59 +01:00
W.C.A. Wijngaards
f81420d77f
- Fix compile warnings for printf ll format on mingw compile.
2022-03-02 14:34:36 +01:00
George Thessalonikefs
b8e7dfa01e
- Various fixes for #632 : variable initialisation, convert the qinfo
...
to str once, accept trailing dot in the local-zone ipset option.
2022-03-02 14:29:56 +01:00
George Thessalonikefs
f7ca447368
Changelog entry for #632
...
- Merge PR #632 from scottrw93: Match cnames in ipset.
2022-03-02 13:22:17 +01:00
gthess and GitHub
a6880644aa
Merge pull request #632 from scottrw93/cnames-ipset
...
Match cnames in ipset
2022-03-02 13:17:35 +01:00
George Thessalonikefs
0b8e6dafe5
- Added tests for ipset.
2022-03-02 13:08:16 +01:00
W.C.A. Wijngaards
99a3f5ee85
- Fix pythonmod for change in iter_dp_is_useless function prototype.
2022-03-01 10:27:24 +01:00
W.C.A. Wijngaards
7749d98a14
- Fix for edns client subnet option add fix in removal code, from review.
2022-02-28 14:51:35 +01:00
W.C.A. Wijngaards
8e8ccfe3c3
- Fix edns client subnet to add the option based on the option list,
...
so that it is not state dependent, after the state fix of #605 for
double EDNS options.
2022-02-28 14:39:48 +01:00
George Thessalonikefs
ad158ed5cc
Changelog entry for #623 :
...
- Merge #623 from rex4539: Fix typos.
2022-02-28 12:37:59 +01:00
gthess and GitHub
6e79237dc8
Merge pull request #623 from rex4539/typos
...
Fix typos
2022-02-28 12:36:11 +01:00
George Thessalonikefs
82adcfb971
- Fix #630 : Unify the RPZ log messages.
2022-02-28 12:07:25 +01:00
W.C.A. Wijngaards
6e64356175
- Fix for #633 : updated fix with new text.
2022-02-28 09:56:30 +01:00
W.C.A. Wijngaards
e11cf2d964
- Fix #633 : Document unix domain socket support for unbound-control.
2022-02-28 09:39:33 +01:00
W.C.A. Wijngaards
c084c27b39
- Fix check interface existence for support detection in remote lookup.
2022-02-25 15:24:40 +01:00
W.C.A. Wijngaards
2c3225e6c7
- update Makefile dependencies.
2022-02-25 10:29:33 +01:00
W.C.A. Wijngaards
4b772ed571
- Fix to detect that no IPv6 support means that IPv6 addresses are
...
useless for delegation point lookups.
2022-02-25 10:27:56 +01:00
scottrw93
4f3df7ee86
Match cnames in ipset
2022-02-20 22:37:49 +00:00
Dimitris Apostolou
c7be51a11b
Fix typos
2022-02-18 15:51:03 +02:00
W.C.A. Wijngaards
c4d8104db3
Changelog note for #631 .
...
- Merge #631 from mollyim: Replace OpenSSL's ERR_PACK with
ERR_GET_REASON.
2022-02-18 09:37:44 +01:00
Wouter Wijngaards and GitHub
fbbb42c9d4
Merge pull request #631 from mollyim/boringssl-compat
...
Replace OpenSSL's ERR_PACK with ERR_GET_REASON
2022-02-18 09:37:34 +01:00
W.C.A. Wijngaards
a746d9693a
- Fix that address not available is squelched from the logs for
...
udp connect failures. It is visible on verbosity 4 and more.
2022-02-18 09:03:56 +01:00
Oscar Mira
78aee89201
Replace OpenSSL's ERR_PACK with ERR_GET_REASON
2022-02-17 20:20:18 +01:00
W.C.A. Wijngaards
6de5310728
- Fix for #628 : fix rpz-passthru for qname trigger by localzone type.
2022-02-16 09:51:25 +01:00
W.C.A. Wijngaards
2b90181d3a
- Fix #628 : A rpz-passthru action is not ending RPZ zone processing.
2022-02-15 16:20:12 +01:00
W.C.A. Wijngaards
91a5cc9a08
- Remove debug info from #618 fix.
2022-02-11 16:34:24 +01:00
W.C.A. Wijngaards
a0feea393a
- Fix #618 : enabling interface-automatic disables DNS-over-TLS.
...
Adds the option to list interface-automatic-ports.
2022-02-11 10:58:53 +01:00
W.C.A. Wijngaards
4c6b59fa47
- Fix #624 : Unable to stop Unbound in Windows console (does not
...
respond to CTRL+C command).
2022-02-11 08:53:24 +01:00
W.C.A. Wijngaards
ed4ce7b398
Release 1.15.0 on 10 feb 2022.
...
The repository continues with version 1.15.1.
And Changelog note.
2022-02-10 09:54:51 +01:00
W.C.A. Wijngaards
58ac43c754
Note 1.15.0rc1 tag creation in Changelog.
...
- Tag for 1.15.0rc1 created.
2022-02-07 11:31:41 +01:00
W.C.A. Wijngaards
5f724da8c5
- Fix that TCP interface does not use TLS when TLS is also configured.
2022-02-07 09:31:10 +01:00
W.C.A. Wijngaards
c44fe07a07
- Fix #412 : cache invalidation issue with CNAME+A.
2022-02-04 14:27:01 +01:00
W.C.A. Wijngaards
c29b0e0a96
- Fix for #611 : Integer overflow in sldns_wire2str_pkt_scan.
2022-02-03 09:03:09 +01:00
W.C.A. Wijngaards
50a312b8da
- Update contrib/aaaa-filter-iterator.patch with diff for current
...
software version.
2022-02-02 15:35:19 +01:00
W.C.A. Wijngaards
893fb4d54b
- Fix docker splint test to use more portable uname.
2022-02-02 14:47:57 +01:00
W.C.A. Wijngaards
6bad577781
Merge branch 'master' of github.com:NLnetLabs/unbound
2022-02-02 14:11:55 +01:00
W.C.A. Wijngaards
2642319ea6
- please clang analyzer for loop in test code.
2022-02-02 14:11:36 +01:00
George Thessalonikefs
d123e1c919
Merge branch 'master' of github.com:NLnetLabs/unbound
2022-02-02 14:05:35 +01:00
George Thessalonikefs
c53171d942
- Changelog entry clarification.
2022-02-02 14:05:31 +01:00
W.C.A. Wijngaards
e656be63f9
- Fix header comment for doxygen for authextstrtoaddr.
2022-02-02 13:20:46 +01:00
W.C.A. Wijngaards
ee3c478239
- Update version number in repo to 1.15.0 for upcoming release,
...
since it changes the aggressive-nsec default and the ratelimit change.
2022-02-02 13:09:51 +01:00
George Thessalonikefs
b1feb9fb1e
- Update stream_ssl.tdir test to also use the new forward-host notation.
2022-02-02 12:55:29 +01:00
George Thessalonikefs
819008cf7e
- Merge PR #617 : Update stub/forward-host notation to accept port and
...
tls-auth-name.
2022-02-02 11:57:36 +01:00
gthess and GitHub
11f2e7e6ae
Merge pull request #617 from NLnetLabs/update-host-notation
...
Update stub/forward-host notation to accept port and tls-auth-name
2022-02-02 11:56:27 +01:00
414a37ed2b
Don't accidentaly introduce a troff macro
...
Co-authored-by: Wouter Wijngaards <wcawijngaards@users.noreply.github.com >
2022-02-02 11:53:38 +01:00
George Thessalonikefs
32c3bbd249
- Change aggressive-nsec default to yes.
2022-02-02 11:25:08 +01:00
George Thessalonikefs
c6b413069d
Changelog entry for #616
...
- Merge PR #616 : Update ratelimit logic. It also introduces
ratelimit-backoff and ip-ratelimit-backoff configuration options.
2022-02-02 11:18:14 +01:00
gthess and GitHub
358e3a5963
Merge pull request #616 from NLnetLabs/bugfix/ratelimit
...
Update ratelimit logic
2022-02-02 11:16:04 +01:00
George Thessalonikefs
25eae982de
Merge branch 'Shchelk-bufferoverflow'
2022-02-02 10:50:54 +01:00
George Thessalonikefs
506d24c7a6
Changelog entry for #532
...
- Merge PR #532 from Shchelk: Fix: buffer overflow bug.
2022-02-02 10:48:56 +01:00
George Thessalonikefs
d81e1c999b
Merge branch 'bufferoverflow' of https://github.com/Shchelk/unbound into Shchelk-bufferoverflow
2022-02-02 10:42:06 +01:00
George Thessalonikefs
a5e9221933
Changelog note for #603 :
...
- Merge PR #603 from fobser: Use OpenSSL 1.1 API to access DSA and RSA
internals.
2022-02-01 18:00:46 +01:00
gthess and GitHub
1199482372
Merge pull request #603 from fobser/dsa_rsa_internals
...
Use OpenSSL 1.1 API to access DSA and RSA internals
2022-02-01 17:58:11 +01:00
gthess and GitHub
b93aa79a05
Prefer the libressl API from when it was available
2022-02-01 17:54:42 +01:00
7ddd456f02
Fix typo from review
...
Co-authored-by: Wouter Wijngaards <wcawijngaards@users.noreply.github.com >
2022-02-01 17:38:16 +01:00
George Thessalonikefs
814a234876
- Update stub/forward-host notation to accept port and tls-auth-name.
...
Fixes #546 .
2022-02-01 14:44:29 +01:00
George Thessalonikefs
10d9804149
Merge branch 'master' of github.com:NLnetLabs/unbound
2022-01-31 11:28:30 +01:00
George Thessalonikefs
a60bbd12ed
-Fix review comment for use-after-free when failing to send UDP out.
2022-01-31 11:27:35 +01:00
W.C.A. Wijngaards
84df46289d
- iana portlist update.
2022-01-31 10:53:22 +01:00
George Thessalonikefs
52283194eb
- Update unbound.conf manpage and example.conf file for ratelimit
...
options.
2022-01-30 01:04:15 +01:00
George Thessalonikefs
c8a6234aac
- Add tests for ratelimit.
2022-01-30 00:51:39 +01:00
George Thessalonikefs
3086335724
- Introduce ratelimit-backoff and ip-ratelimit-backoff options for more
...
aggressive rate limiting.
2022-01-30 00:36:29 +01:00
George Thessalonikefs
f857af873e
- Update ratelimit code for recent serviced_query changes and more
...
accurate ratelimit calculation.
2022-01-29 23:49:38 +01:00
George Thessalonikefs
888eb224a6
- Better cleanup on failed DoT/DoH listening socket creation.
2022-01-29 15:14:56 +01:00
George Thessalonikefs
c49e87e1b7
- Fix tls-* and ssl-* documented alternate syntax to also be available
...
through remote-control and unbound-checkconf.
2022-01-29 15:11:47 +01:00
W.C.A. Wijngaards
d10562c823
Merge branch 'master' of github.com:NLnetLabs/unbound
2022-01-26 16:41:04 +01:00
W.C.A. Wijngaards
54ea2948da
- Test for NSID in SERVFAIL response due to DNSSEC bogus.
2022-01-26 16:40:04 +01:00
George Thessalonikefs
ea47c08e70
- Fix #599 : [FR] RFC 9156 (obsoletes RFC 7816), by noting the new RFC
...
document.
2022-01-26 14:35:22 +01:00
George Thessalonikefs
79e755e1dd
Changelog note for #612 :
...
- Merge PR #612 : TCP race condition.
2022-01-25 17:29:52 +01:00
gthess and GitHub
ddc3c754b0
Merge pull request #612 from NLnetLabs/tcp-race-condition
...
TCP race condition
2022-01-25 17:26:30 +01:00
George Thessalonikefs
5c85615515
- Fix #588 : Unbound 1.13.2 crashes due to p->pc is NULL in
...
serviced_udp_callback.
2022-01-25 17:15:37 +01:00
George Thessalonikefs
f0c6d26155
- Better bookkeeping when reclaiming the TCP buffer.
2022-01-25 10:32:37 +01:00
George Thessalonikefs
4573629fc4
- Mark waiting_tcp and serviced_query as being in the
...
cb_and_decommission stage to signal later code about their state;
prevents premature item deletion.
2022-01-25 09:46:16 +01:00
W.C.A. Wijngaards
70f13e54bf
Changelog note for #610
...
- Fix #610 : Undefine-shift in sldns_str2wire_hip_buf.
2022-01-25 09:02:55 +01:00
W.C.A. Wijngaards
12a1053dfa
- Fix #610 : Undefine-shift in sldns_str2wire_hip_buf.
2022-01-25 08:57:49 +01:00
George Thessalonikefs
c3c0186658
- Add serviced_query timer to send upstream queries outside of the mesh
...
flow to prevent race conditions.
2022-01-25 00:01:43 +01:00
George Thessalonikefs
8e76eb95a0
- For dnstap, do not wakeupnow right there. Instead zero the timer to
...
force the wakeup callback asap.
2022-01-19 15:32:02 +01:00
W.C.A. Wijngaards
c7ae3ef156
- For #602 : Allow the module-config "subnetcache validator cachedb
...
iterator".
2022-01-14 16:30:25 +01:00
W.C.A. Wijngaards
2996040c6c
- Add rpz: for-downstream: yesno option, where the RPZ zone is
...
authoritatively answered for, so the RPZ zone contents can be
checked with DNS queries directed at the RPZ zone.
2022-01-14 16:23:43 +01:00
George Thessalonikefs
3c8a79eed8
Changelog note for #605 :
...
- Merge PR #605 : Fix EDNS to upstream where the same option could be
attached more than once.
2022-01-14 15:38:15 +01:00
gthess and GitHub
f00d96a21b
Merge pull request #605 from NLnetLabs/sq-region
...
Fix EDNS to upstream where the same option could be attached more than once
2022-01-14 15:33:22 +01:00
George Thessalonikefs
773d1f2911
- Make sure callback changes for EDNS are not lost.
2022-01-14 15:18:43 +01:00
George Thessalonikefs
de1e91fc7f
- Fix EDNS to upstream where the same option could be attached more than
...
once.
- Add a region to serviced_query for allocations.
2022-01-14 13:55:34 +01:00
Florian Obser
ff35659d5a
Use OpenSSL 1.1 API to access DSA and RSA internals
...
In LibreSSL 3.5, DSA and RSA internals will become opaque, so they can
no longer be accessed directly and the libunbound build will break. The
required API, DSA_set0_pqg(), DSA_set0_key() as well as RSA_set0_key(),
has been available since LibreSSL 2.7, so this change should not affect
any users.
From Theo Buehler.
2022-01-11 15:34:25 +01:00
George Thessalonikefs
a97604737b
- Fix prematurely terminated TCP queries when a reply has the same ID.
2022-01-11 10:00:45 +01:00
W.C.A. Wijngaards
d52d94c6db
Changelog note for #600
...
- Merge #600 from pemensik: Change file mode before changing file
owner.
2022-01-07 13:23:18 +01:00
Wouter Wijngaards and GitHub
370a855f08
Merge pull request #600 from InfrastructureServices/remote-unix-chmod
...
Change file mode before changing file owner
2022-01-07 13:23:03 +01:00
Petr Mensik
c7f44b99e3
Change file mode before changing file owner
...
Change mode first when configuring remote control unix socket. Some
security systems might strip capability of changing other user's system
even to process with effective uid 0. That is done on Fedora by SELinux
policy and systemd for example. SELinux audit then shows errors, because
unbound tries modifying permissions of not own file. Fix just by mode
change as first step, make it owned by unbound:unbound user as the last
step only.
Related: rhbz#1905441
2022-01-07 12:08:32 +01:00
Alex Band and GitHub
9bbbca5de9
Update documentation links
2022-01-07 10:21:50 +01:00
W.C.A. Wijngaards
33ef79d433
- Fix for #596 : Fix rpz-signal-nxdomain-ra to work for clientip
...
triggered operation.
2022-01-05 16:48:35 +01:00
W.C.A. Wijngaards
eccfe3e1f5
- Fix #598 : Fix unbound-checkconf fatal error: module conf
...
'respip dns64 validator iterator' is not known to work.
2022-01-05 16:14:47 +01:00
W.C.A. Wijngaards
adcbb6ced7
- Fix for #596 : add unit test for nsip trigger and signal unset RA.
2022-01-05 14:31:42 +01:00
W.C.A. Wijngaards
c678c696a1
- Fix for #596 : add unit test for nsdname trigger and signal unset RA.
2022-01-05 14:13:52 +01:00
W.C.A. Wijngaards
313bceb983
- Fix unit tests for rpz now that the AA flag returns successfully from
...
the iterator loop.
2022-01-05 13:39:06 +01:00
W.C.A. Wijngaards
6b2e96430e
- Fix for #596 : fix that rpz return message is returned and not just
...
the rcode from the iterator return path. This fixes signal unset RA
after a CNAME.
2022-01-05 13:35:18 +01:00
W.C.A. Wijngaards
ceef84e022
- Fix that RPZ does not set RD flag on replies, it should be copied
...
from the query.
2022-01-04 13:49:31 +01:00
W.C.A. Wijngaards
95644c9309
- Fix #596 : only unset RA when NXDOMAIN is signalled.
2022-01-04 13:48:29 +01:00
W.C.A. Wijngaards
cbdc138df7
- Fix to add test for rpz-signal-nxdomain-ra.
2022-01-04 13:41:27 +01:00
W.C.A. Wijngaards
392c1f0f54
- Fix #596 : unset the RA bit when a query is blocked by an unbound
...
RPZ nxdomain reply. The option rpz-signal-nxdomain-ra allows to
signal that a domain is externally blocked to clients when it
is blocked with NXDOMAIN by unsetting RA.
2022-01-04 13:40:07 +01:00
George Thessalonikefs
4e492725e1
- contrib/aaaa-filter-iterator.patch file renewed diff content to
...
apply cleanly to the current coderepo for the current code version.
2021-12-22 15:02:44 +01:00
George Thessalonikefs
65113ac775
- Fix #591 : Unbound-anchor manpage links to non-existent license file.
2021-12-20 11:35:31 +01:00
George Thessalonikefs
983c716feb
- Add missing configure flags for optional features in the
...
documentation.
- Fix Unbound capitalization in the documentation.
2021-12-13 12:46:08 +01:00
W.C.A. Wijngaards
83c712ca60
- Fix to pick up other class local zone information before unlock.
2021-12-13 10:00:53 +01:00
George Thessalonikefs
2c1a5203a5
- Allow local-data for classes other than IN to inherit a configured
...
local-zone's type if possible, instead of defaulting to type
transparent as per the implicit rule.
2021-12-10 17:35:36 +01:00
W.C.A. Wijngaards
778b50f113
- Add code similar to fix for ldns for tab between strings, for
...
consistency, the test case was not broken.
2021-12-10 09:12:58 +01:00
W.C.A. Wijngaards
d29ab10a34
Continue with version 1.14.1
2021-12-09 10:22:39 +01:00
W.C.A. Wijngaards
c6c54f9de4
- Fix validator debug output about DS support, print correct algorithm.
2021-12-06 13:12:44 +01:00
W.C.A. Wijngaards
c7afaef10c
Changelog note for #581
2021-12-06 09:04:50 +01:00
Wouter Wijngaards and GitHub
9d1eb66f19
Merge pull request #581 from fobser/warnings
...
Fix -Wmissing-prototypes and -Wshadow warnings in rpz
2021-12-06 09:04:32 +01:00
Florian Obser
ef076c0e15
Fix -Wshadow
2021-12-03 18:30:08 +01:00
Florian Obser
56cf526c68
Fix -Wmissing-prototypes by declaring functions static.
2021-12-03 18:29:04 +01:00
W.C.A. Wijngaards
4efbee08b5
- Fix compile warning for if_nametoindex on windows 64bit.
2021-12-03 10:44:47 +01:00
W.C.A. Wijngaards
919c8c9527
- Fix doc/unbound.doxygen to remove obsolete tag warning.
2021-12-01 17:13:11 +01:00
W.C.A. Wijngaards
5d63ad6474
- configure is set to 1.14.0, and release branch.
2021-12-01 10:08:54 +01:00
George Thessalonikefs
31bac7d5ca
- Fix #574 : Review fixes for size allocation.
2021-12-01 04:31:58 +01:00
George Thessalonikefs
3dbda3aac3
- Fix #454 : listen_dnsport.c:825: error: ‘IPV6_TCLASS’ undeclared.
2021-12-01 04:26:36 +01:00
George Thessalonikefs
7c0cb7198b
Changelog note for #530 :
...
- Merge PR #530 from Shchelk: Fix: dereferencing a null pointer.
2021-12-01 04:03:27 +01:00
gthess and GitHub
7adeba3690
Merge pull request #530 from Shchelk/bugfix
...
Fix: dereferencing a null pointer
2021-12-01 04:02:03 +01:00
George Thessalonikefs
2add585015
Changelog note for #522 :
...
- Merge PR #522 from sibeream: memory management violations fixed.
2021-12-01 04:00:24 +01:00
gthess and GitHub
43615e98b5
Merge pull request #522 from sibeream/net_help_RESOURCE_LEAK
...
- memory management violations fixed
2021-12-01 03:59:32 +01:00
George Thessalonikefs
05c198ebd6
Changelog note for #562 :
...
- Merge PR #562 from Willem: Reset keepalive per new tcp session.
2021-12-01 03:58:01 +01:00
gthess and GitHub
806a75808d
Merge pull request #562 from NLnetLabs/bugfix/reset-keepalive-per-tcp-session
...
Reset keepalive per new tcp session
2021-12-01 03:57:04 +01:00
George Thessalonikefs
173a8bb2b6
Changelog note for #555 :
...
- Merge PR #555 from fobser: Allow interface names as scope-id in
IPv6 link-local addresses.
2021-12-01 03:55:53 +01:00
gthess and GitHub
ba9356af99
Merge pull request #555 from fobser/if_nametoindex
...
Allow interface names as scope-id in IPv6 link-local addresses.
2021-12-01 03:54:45 +01:00
George Thessalonikefs
dc162f7fee
Changelog note for #493 :
...
- Merge PR #493 from Jaap: Fix generation of libunbound.pc.
2021-12-01 03:51:12 +01:00
George Thessalonikefs
fcedb24b8d
Merge branch 'master' of github.com:NLnetLabs/unbound
2021-12-01 03:50:16 +01:00
gthess and GitHub
a22a79572e
Merge pull request #493 from NLnetLabs/patch-configure
...
Fix generation of libunbound.pc
2021-12-01 03:50:01 +01:00
George Thessalonikefs
178be45fb3
Changelog note for #511 :
...
- Merge PR #511 from yan12125: Reduce unnecessary linking.
2021-12-01 03:48:51 +01:00
gthess and GitHub
94ea0e5e8f
Merge pull request #511 from yan12125/python-linking
...
- Reduce unnecessary linking
2021-12-01 03:46:25 +01:00
W.C.A. Wijngaards
88da8ce174
- iana portlist update.
2021-11-30 15:05:27 +01:00
W.C.A. Wijngaards
2cee189e53
- Fix to remove git tracking and ci information from release tarballs.
2021-11-30 13:38:39 +01:00
W.C.A. Wijngaards
8648db9583
- Fix #574 : Review fix for spelling.
2021-11-29 16:11:32 +01:00
W.C.A. Wijngaards
b5dbb0282e
- Fix #576 : [FR] UB_* error codes in unbound.h
2021-11-29 16:10:45 +01:00
W.C.A. Wijngaards
766c3164a3
- Fix #574 : Review fixes for it.
2021-11-29 15:26:07 +01:00
W.C.A. Wijngaards
b48d6760fc
- Fix #574 : Review fixes for it.
2021-11-29 15:13:14 +01:00
W.C.A. Wijngaards
dcad9d5863
- Fix #574 : unbound-checkconf reports fatal error if interface names
...
are used as value for interfaces:
2021-11-29 14:59:39 +01:00
W.C.A. Wijngaards
2921ce9e61
- Fix to make python module opt_list use opt_list_in.
2021-11-29 11:57:45 +01:00
W.C.A. Wijngaards
22881e28cc
- Fix for #570 : regen aclocal.m4, fix configure.ac for spelling.
2021-11-29 11:41:45 +01:00
Wouter Wijngaards and GitHub
9645228f03
Merge pull request #570 from rex4539/typos
...
Fix typos
2021-11-29 11:39:48 +01:00
Tom Carpay
5bde54b530
Document PR #563 to changelog
2021-11-15 14:19:24 +00:00
tcarpay and GitHub
c47e98a659
Merge pull request #563 from NLnetLabs/bugfix/general-edns-options3
...
Better positioning of general EDNS option handling: revisited V2
2021-11-15 15:14:51 +01:00
Tom Carpay
ff030fa332
Clarify KEEPALIVE EDNS0 option operation
2021-11-15 14:00:31 +00:00
Tom Carpay
e899b4cefe
Make explicit whether edns options are parsed from queries or responses
2021-11-15 13:40:51 +00:00
Tom Carpay
b47dc528aa
add missing return code
2021-11-15 12:33:08 +00:00
c5a1e87f75
Remove wrongly added EDE comments
...
Co-authored-by: Wouter Wijngaards <wcawijngaards@users.noreply.github.com >
2021-11-15 13:03:26 +01:00
Dimitris Apostolou
c21d6af617
Fix typos
2021-11-13 16:56:15 +02:00
JINMEI Tatuya
5b2eda28e3
add keep-cache option to unbound-control reload to keep caches
2021-11-11 10:47:08 -08:00
a0df340b1e
Update util/data/msgparse.c
...
Co-authored-by: gthess <george@nlnetlabs.nl >
2021-11-08 12:28:03 +01:00
TCY16
f5b586dbdc
add potential EDE spots
2021-11-08 11:50:57 +01:00
TCY16
8205c87a96
complete renaming of the modules edns list
2021-11-08 11:50:29 +01:00
fa73142b79
Apply suggestions from code review
...
Co-authored-by: Willem Toorop <willem@nlnetlabs.nl >
2021-11-08 11:02:54 +01:00
W.C.A. Wijngaards
3fc987955e
Changelog note for #565
...
- Merge #565 : unbound.service.in: Disable ProtectKernelTunables again.
2021-11-05 13:22:27 +01:00
Wouter Wijngaards and GitHub
7df1a347a5
Merge pull request #565 from Maryse47/patch-1
...
unbound.service.in: Disable ProtectKernelTunables again
2021-11-05 13:21:00 +01:00
W.C.A. Wijngaards
738c7db9ab
- Fix to remove unused code from rpz resolve client and action
...
function.
2021-11-05 12:13:38 +01:00
W.C.A. Wijngaards
0006c08f15
- Fix analyzer review failure in rpz action override code to not
...
crash on unlocking the local zone lock.
2021-11-05 12:02:50 +01:00
George Thessalonikefs
24eded6ef9
- Fix for #558 : clear the UB_EV_TIMEOUT bit before adding an event.
2021-11-05 11:21:30 +01:00
George Thessalonikefs
431b749d7a
- Fix for #558 : fix loop in comm_point->tcp_free when a comm_point is reclaimed
...
more than once during callbacks.
2021-11-05 11:19:08 +01:00
W.C.A. Wijngaards
e7fbd27060
- Fix that forward-zone name is documented as the full name of the
...
zone. It is not relative but a fully qualified domain name.
2021-11-05 10:16:27 +01:00
Maryse47 and GitHub
8eb5010104
Disable ProtectKernelTunables again
...
This option was removed in https://github.com/NLnetLabs/unbound/commit/ff8fd0be5c529e7a1b84e8c74426e9c531c0a8f8 but reintroduced in https://github.com/NLnetLabs/unbound/commit/c32b9e4ba95983146eac805719db720f02a64358
Disable it with commentary in hope to prevent slipping it in again.
2021-11-03 13:05:11 +00:00
W.C.A. Wijngaards
1a94a68fc2
- Fix #552 : Unbound assumes index.html exists on RPZ host.
2021-11-02 16:45:02 +01:00
Willem Toorop
53a1677828
Reset keepalive per new tcp session
2021-11-01 21:06:07 +01:00
Tom Carpay
cb48d9e4a1
Fix keepalive logic
2021-11-01 15:01:07 +00:00
Tom Carpay
5f8447830a
Move option handling to parse-time
2021-11-01 13:48:31 +00:00
Tom Carpay
89d7476539
split edns_data.opt_list in opt_list_in and opt_list_out
...
opt_list_in for parsed (incoming) edns options, and
opt_list_out for outgoing (to be encoded) edns options
2021-11-01 12:48:40 +00:00
Tom Carpay
3925297d07
Remove apply_edns_options from worker and mesh...
...
to be returned in message encoding later...
2021-11-01 10:44:55 +00:00
Tom Carpay
3ebfa9fc97
Outgoing module options go to opt_list_modules_out
...
And opt_list_modules_out is reset in case of failure
BEWARE! No options from modules will be encoded in the responses now!
2021-10-27 14:01:56 +00:00
Tom Carpay
3e6eeb504d
Modules have their own outgoing ends options list
...
But nothing happens with it yet
2021-10-27 13:48:49 +00:00
Florian Obser
8756f1e4c7
Allow interface names as scope-id in IPv6 link-local addresses.
...
For example, this makes
forward-zone:
name: "."
forward-addr: fe80::20d:b9ff:fe46:c7f4%vio0
forward-first: yes
work instead of fe80::20d:b9ff:fe46:c7f4%1.
2021-10-24 16:06:55 +02:00
W.C.A. Wijngaards
ecb0b44ba8
- Fix to protect custom regional create against small values.
2021-10-11 17:23:30 +02:00
W.C.A. Wijngaards
09afdb7669
- Fix chaos replies to have truncation for short message lengths,
...
or long reply strings.
2021-10-11 17:00:20 +02:00
W.C.A. Wijngaards
ce39d5ad17
- Fix to add example.conf note for outbound-msg-retry.
2021-10-04 09:19:27 +02:00
W.C.A. Wijngaards
89510f4a0c
- Implement RFC8375: Special-Use Domain 'home.arpa.'.
2021-09-27 15:09:01 +02:00
W.C.A. Wijngaards
962cb07055
- Fix crosscompile script for the shared build flags.
2021-09-21 14:34:56 +02:00
W.C.A. Wijngaards
9f26f397a9
- Fix crosscompile windows to use libssp when it exists.
...
- For the windows compile script disable gost.
- Fix that on windows, use BIO_set_callback_ex instead of deprecated
2021-09-21 13:51:34 +02:00
W.C.A. Wijngaards
24d0dc1725
- Fix crosscompile shell syntax.
2021-09-21 09:23:38 +02:00
W.C.A. Wijngaards
38f500f1c9
- For crosscompile on windows, detect 64bit stackprotector library.
2021-09-21 09:20:56 +02:00
W.C.A. Wijngaards
808a3cb16d
- Fix crosscompile on windows to work with openssl 3.0.0 the
...
link with ws2_32 needs -l:libssp.a for __strcpy_chk.
Also copy results from lib64 directory if needed.
2021-09-20 17:52:34 +02:00
W.C.A. Wijngaards
63a406a432
- Fix more initialisation errors reported by gcc sanitizer.
2021-09-10 15:27:05 +02:00
W.C.A. Wijngaards
a64cbe958d
- Fix lock debug code for gcc sanitizer reports.
2021-09-10 15:11:30 +02:00
W.C.A. Wijngaards
7d70e3c861
- Fix initialisation errors reported by gcc sanitizer.
2021-09-10 14:30:57 +02:00
W.C.A. Wijngaards
f976fdee28
- Fix root_anchor test to check with new icannbundle date.
2021-09-08 17:26:30 +02:00
W.C.A. Wijngaards
829f3c932e
- Fix for #41 : change outbound retry to int to fix signed comparison
...
warnings.
2021-09-08 15:07:11 +02:00
W.C.A. Wijngaards
750f46d1aa
- Small fixes for #41 : changelog, conflicts resolved,
...
processQueryResponse takes an iterator env argument like other
functions in the iterator, no colon in string for set_option,
and some whitespace style, to make it similar to the rest.
2021-09-08 14:52:56 +02:00
W.C.A. Wijngaards
b2cf56e0ec
Merge branch 'countsudoku-feature/configure-outbound_msg_retry'
2021-09-08 14:38:58 +02:00
W.C.A. Wijngaards
204edd229e
Merge branch 'feature/configure-outbound_msg_retry' of git://github.com/countsudoku/unbound into countsudoku-feature/configure-outbound_msg_retry
2021-09-08 14:38:36 +02:00
W.C.A. Wijngaards
48995dba21
Changelog entry for #538
...
- Fix #538 : Fix subnetcache statistics.
2021-09-03 16:41:21 +02:00
Wouter Wijngaards and GitHub
4c90250043
Merge pull request #538 from tduboys/fix_subnetcache_statistics
...
Fix subnetcache statistics
2021-09-03 16:41:07 +02:00
Thomas du Boÿs
ebb4987146
Fix subnetcache statistics
2021-09-03 10:37:07 +02:00
W.C.A. Wijngaards
520fa84265
- Fix tcp fastopen failure when disabled, try normal connect instead.
2021-09-01 16:21:10 +02:00
W.C.A. Wijngaards
4b2799fdd6
- Fix #533 : Negative responses get cached even when setting
...
cache-max-negative-ttl: 1
2021-08-27 10:33:21 +02:00
W.C.A. Wijngaards
087a7ff95e
- Fix asynclook unit test for setup of lockchecks before log.
2021-08-25 16:19:12 +02:00
W.C.A. Wijngaards
1ea624d0c7
- Fix compile warning in libunbound for listen desetup routine.
2021-08-25 14:51:59 +02:00
W.C.A. Wijngaards
9fa1ae1340
- Fix RPZ locks. Do not unlock zones lock if requested and rpz find
...
zone does not find the zone. Readlock the clientip that is found
for ipbased triggers. Unlock the nsdname zone lock when done.
Unlock zone and ip in rpz nsip and nsdname callback. Unlock
authzone and localzone if clientip found in rpz worker call.
2021-08-25 14:18:29 +02:00
W.C.A. Wijngaards
c93a7fb38a
- Fix the stream wait stream_wait_count_lock and http2 buffer locks
...
setup and desetup from race condition.
2021-08-25 13:37:50 +02:00
W.C.A. Wijngaards
889a2d09c3
- Fix #536 : error: RPZ: name of record (drop.spamhaus.org.rpz.local.)
...
to insert into RPZ.
2021-08-25 13:14:53 +02:00
W.C.A. Wijngaards
924ff7b373
Changelog note for #401
...
- Merge #401 : RPZ triggers. This add additional RPZ triggers,
unbound supports a full set of rpz triggers, and this now
includes nsdname, nsip and clientip triggers. Also actions
are fully supported, and this now includes the tcp-only action.
2021-08-25 10:19:48 +02:00
Wouter Wijngaards and GitHub
74f1f0addd
Merge pull request #401 from NLnetLabs/rpz-triggers
...
RPZ triggers
2021-08-25 10:14:12 +02:00
Shchelkunov Artem
0b362e3a4d
Fix: buffer overflow bug
...
Found by static analyzer svace
Static analyzer message: Array 'token' of size 65536 bytes passed to
function 'rrinternal_parse_rdata' at str2wire.c:679 by passing as 2nd
parameter to function 'rrinternal_parse_rdata' at str2wire.c:775, where
it is accessed by unacceptable index. This may lead to buffer overflow.
on-behalf-of: @ideco-team <github@ideco.ru >
2021-08-20 19:46:01 +05:00
W.C.A. Wijngaards
2315fc9d9b
Changelog entry for #531
...
- Fix #531 : Fix: passed to proc after free.
2021-08-20 15:18:39 +02:00
Wouter Wijngaards and GitHub
1ae42b94b3
Merge pull request #531 from Shchelk/ptpaf
...
Fix: passed to proc after free
2021-08-20 15:15:41 +02:00
Shchelkunov Artem
ba7598f559
Fix: passed to proc after free
...
Found by static analyzer svace
Static analyzer message: Pointer 'dp' is passed to a function at
iter_hints.c:401 after the referenced memory was deallocated at
iter_hints.c:174 by passing as 3rd parameter to function 'hints_insert'
at iter_hints.c:398.
on-behalf-of: @ideco-team <github@ideco.ru >
2021-08-20 18:06:51 +05:00
Shchelkunov Artem
5730e7bb59
Fix: dereferencing a null pointer
...
Found by static analyzer svace
Static analyzer message: Return value of a function 'reply_info_copy'
is dereferenced at dns64.c:923 without checking, but it is usually
checked for this function (4/5).
on-behalf-of: @ideco-team <github@ideco.ru >
2021-08-20 17:52:18 +05:00
W.C.A. Wijngaards
54b7554b5a
Changelog note for #529 and nicer layout.
...
- Fix #529 : Fix: log_assert does nothing if UNBOUND_DEBUG is
undefined.
2021-08-20 14:32:13 +02:00
Wouter Wijngaards and GitHub
a4d1224d92
Merge pull request #529 from Shchelk/next
...
Fix: log_assert does nothing if UNBOUND_DEBUG is undefined
2021-08-20 14:29:18 +02:00
Shchelkunov Artem
4ea9651624
Fix: log_assert does nothing if UNBOUND_DEBUG is undefined
...
Found by static analyzer svace
Static analyzer message: Integer value 'len' obtained from untrusted
source at tube.c:374 by passing as 2nd parameter to function 'read'
at tube.c:340 without checking its higher bound is used as a loop bound
at tube.c:374.
on-behalf-of: @ideco-team <github@ideco.ru >
2021-08-20 17:16:39 +05:00
W.C.A. Wijngaards
a9de6879b8
Merge branch 'master' into rpz-triggers
2021-08-18 09:53:35 +02:00
W.C.A. Wijngaards
51f5b3ab44
- Fix sed script in ssldir split handling.
2021-08-17 13:15:20 +02:00
W.C.A. Wijngaards
d88f554503
- Fix #527 : not sending quad9 cert to syslog (and may be more).
2021-08-17 13:03:33 +02:00
W.C.A. Wijngaards
cc6d428cb7
- Fix that --with-ssl can use "/usr/include/openssl11" to pass the
...
location of a different openssl version.
2021-08-17 10:32:12 +02:00
W.C.A. Wijngaards
d0cc58be3d
- Fix to support harden-algo-downgrade for ZONEMD dnssec checks.
2021-08-16 16:14:32 +02:00
George Thessalonikefs
2a72845576
Changelog note for #528 :
...
- Merge PR #528 from fobser: Make sldns_str2wire_svcparam_buf() static.
2021-08-16 14:15:57 +02:00
gthess and GitHub
45542053fe
Merge pull request #528 from fobser/svcparam_static
...
Make sldns_str2wire_svcparam_buf() static.
2021-08-16 14:12:50 +02:00
Florian Obser
25b7eb3c7c
Make sldns_str2wire_svcparam_buf() static.
...
The function is only used in this translation unit and prevents a "no
previous prototype" warning.
2021-08-16 11:27:40 +02:00
W.C.A. Wijngaards
4034c009bb
- zonemd, fix order of bogus printout string manipulation.
2021-08-13 15:24:53 +02:00
W.C.A. Wijngaards
c8c2dfff22
- Fix zonemd verification of key that is not in DNS but in the zone
...
and needs a chain of trust.
2021-08-13 14:43:11 +02:00
W.C.A. Wijngaards
ad45e9b89e
- Fix for #431 : Squelch permission denied errors for udp connect,
...
and udp send, they are visible at higher verbosity settings.
2021-08-13 09:27:58 +02:00
W.C.A. Wijngaards
de31bcdf2e
- Support using system-wide crypto policies.
2021-08-13 09:21:47 +02:00
George Thessalonikefs
a158f365b9
- For #514 : generate configure.
2021-08-12 21:46:30 +02:00
George Thessalonikefs
3b8b2e0dc7
Changelog note for #514 :
...
- Merge PR #514 , from ziollek: Docker environment for run tests.
2021-08-12 21:43:18 +02:00
gthess and GitHub
3829faf679
Merge pull request #514 from ziollek/docker_for_run_test
...
Docker environment for run tests
2021-08-12 21:30:36 +02:00
W.C.A. Wijngaards
fdae4cdbbb
- Fix to print error from unbound-anchor for writing to the key
...
file, also when not verbose.
2021-08-12 16:06:02 +02:00
W.C.A. Wijngaards
b13bcab089
- For #519 : fix comments for doxygen.
2021-08-12 15:14:22 +02:00
W.C.A. Wijngaards
2f828ec720
- For #519 : yacc and lex. And fix python bindings, and test program
...
unbound-dnstap-socket.
2021-08-12 15:12:55 +02:00
W.C.A. Wijngaards
6bee3e77fc
Changelog note for #519 and example.conf edit
...
- Merge #519 : Support for selective enabling tcp-upstream for
stub/forward zones.
- For #519 : note stub-tcp-upstream and forward-tcp-upstream in
the example configuration file.
2021-08-12 15:05:51 +02:00
Wouter Wijngaards and GitHub
0ace659fe2
Merge pull request #519 from ziollek/tcp_upstream_option
...
Support for selective enabling tcp-upstream for stub/forward zones
2021-08-12 15:03:57 +02:00
W.C.A. Wijngaards
07f70d0745
Changelog note for #523
...
- Merge #523 : fix: free() call more than once with the same pointer.
2021-08-12 13:45:18 +02:00
Wouter Wijngaards and GitHub
79df099f4c
Merge pull request #523 from Shchelk/bugfix
...
fix: free() call more than once with the same pointer
2021-08-12 13:45:00 +02:00
W.C.A. Wijngaards
20febc2179
Changelog note for #521
...
- Merge #521 : Update mini_event.c.
2021-08-12 13:24:15 +02:00
Wouter Wijngaards and GitHub
6780a0844d
Merge pull request #521 from liheng562653799/master
...
Update mini_event.c
2021-08-12 13:24:03 +02:00
W.C.A. Wijngaards
f8ddcc15b8
- Add test tool readzone to .gitignore.
2021-08-12 13:17:29 +02:00
W.C.A. Wijngaards
c5ceee22a9
- And 1.13.2rc1 became the 1.13.2 with the fix for the python module
...
build. The current code repository continues with version 1.13.3.
2021-08-12 10:04:20 +02:00
Shchelkunov Artem
e20b2c1aaf
fix: free() call more than once with the same pointer
2021-08-11 15:14:43 +05:00
Chih-Hsuan Yen
98087a051e
- Reduce unnecessary linking
...
- Link to libpython only when needed, fixes #242
When pyunbound is enabled while pythonmodule is not (i.e., ./configure
--without-pythonmodule --with-pyunbound), only the Python library
_unbound.so uses Python functions, and main programs (unbound,
unbound-anchor, ...) and libunbound.so do not. This patch removes
unneeded linking.
- Link the Python library _unbound.so to Python only. _unbound.so does
not directly use libraries used by libunbound. This patch removes
unneeded linking mentioned in [1]
[1] https://github.com/NLnetLabs/unbound/pull/511#issuecomment-886072003
2021-08-06 22:33:22 +08:00
Artem Egorenkov
0d8dd6ec33
- memory management violations fixed
2021-08-06 14:11:12 +02:00
liheng562653799 and GitHub
edbf9c21ee
Update mini_event.c
...
When in heavy load, unbound opens many outside_network sockets for out going queries to delegation servers, which may result in a big fd(maxfd) value(for thread A 65500, for thread B 65501, for thread C ...).
There are situations when thread A has a max fd num 65500 where maxfd is of course 65500, thread B has max fd num 20 for now but maxfd is still 65501. Though linux kernel checks whether maxfd+1 passed by select syscall is really the process' maxfd+1. Linux kernel can not tell maxfd+1 passed by thread B select syscall is much bigger(65501+1 or 65500+1 after trimed by kerne) than it should be (20+1).
In this situation, when kernel do_select() for thread B, much work is wasted.
2021-08-06 12:00:56 +08:00
W.C.A. Wijngaards
8e538dcaa8
- Fix #520 : Unbound 1.13.2rc1 fails to build python module.
2021-08-05 17:10:56 +02:00
W.C.A. Wijngaards
f232562430
Merge branch 'master' into rpz-triggers
2021-08-05 13:37:22 +02:00
Tomasz Ziolkowski
ae45f46b9e
Add (stub|forward)-tcp-upstream options which enable using tcp transport only for specified stub/forward zones
2021-08-05 08:44:18 +02:00
W.C.A. Wijngaards
4518bb1158
For 1.13.2rc1.
2021-08-05 08:37:20 +02:00
W.C.A. Wijngaards
5d349dbcf3
- Tag for 1.13.2 release.
2021-08-05 08:36:24 +02:00
W.C.A. Wijngaards
77fdd8836d
- Fix unit test zonemd_reload for use in run_vm.
2021-08-04 16:26:21 +02:00
W.C.A. Wijngaards
822a96b29a
- Fix libnettle zonemd unit test.
2021-08-04 14:04:31 +02:00
W.C.A. Wijngaards
067954fe8d
- Fix out of sourcedir run of zonemd unit tests.
2021-08-04 13:54:38 +02:00
Tomasz Ziolkowski
59552a7a76
reformat
2021-08-04 13:05:21 +02:00
Tomasz Ziolkowski
1900ea3bb3
Revert changes in files managed by maintainers, move docker do contrib dir
2021-08-04 13:02:38 +02:00
Tomasz Ziolkowski
a922c6d525
merge master
2021-08-04 13:02:20 +02:00
W.C.A. Wijngaards
592cfe3afc
- Fix readzone compile under debug config.
2021-08-04 11:43:29 +02:00
W.C.A. Wijngaards
6dd270d625
- Fix missing locks in zonemd unit test.
2021-08-04 11:05:51 +02:00
W.C.A. Wijngaards
c9bb0604db
- Fix static analysis warnings about localzone locks that are unused.
2021-08-04 10:58:08 +02:00
George Thessalonikefs
8878680898
- Bump MAX_RESTART_COUNT to 11 from 8; in relation to #438 . This allows
...
longer CNAME chains in Unbound.
2021-08-04 10:53:22 +02:00
George Thessalonikefs
efa15747a2
Changelog note for #415 :
...
- Merge PR #415 from sibeream: Use /proc/sys/net/ipv4/ip_local_port_range
to determine available outgoing ports.
2021-08-04 10:47:38 +02:00
gthess and GitHub
bdaecd942d
Merge pull request #415 from sibeream/master
...
Use /proc/sys/net/ipv4/ip_local_port_range to determine available outgoing ports
2021-08-04 10:42:12 +02:00
W.C.A. Wijngaards
f5d53928a3
- In unit test use openssl set security level to allow keys in test.
2021-08-04 09:58:38 +02:00
W.C.A. Wijngaards
c639dc956a
- Fix sign comparison warning on FreeBSD.
2021-08-03 14:13:37 +02:00
W.C.A. Wijngaards
2a0df9e72e
- Annotate assertion into error printout; we think it may be an
...
error, but the situation looks harmless.
2021-08-03 14:08:30 +02:00
W.C.A. Wijngaards
dd7dc30294
Changelog note for #517
...
- Merge PR #517 from dyunwei: #420 breaks the mesh reply list
function that need to reuse the dns answer.
2021-08-03 13:11:18 +02:00
Wouter Wijngaards and GitHub
5196ee03e6
Merge pull request #517 from dyunwei/master
...
#420 breaks the mesh reply list function that need to reuse the dns answer.
2021-08-03 13:11:01 +02:00
George Thessalonikefs
a519009378
Merge branch 'master' of github.com:NLnetLabs/unbound
2021-08-03 12:20:45 +02:00
George Thessalonikefs
ca67691092
- Listen to read or write events after the SSL handshake.
...
Sticky events on windows would stick on read when write was needed.
2021-08-03 12:18:58 +02:00
daiyunwei
0784ad7a11
#420
...
clear the c->buffer in the comm_point_send_reply does resolve the "can't fit qbuffer in c->buffer" issue, but it breaks the mesh reply list function that need to reuse the answer. because the c->buffer is cleared in the comm_point_send_reply, it cannot be resued again. it means that it is not inappropriate to clear c->buffer in the comm_point_send_reply.
After some investigation, i found it is appropriate to clear c->buffer before use in the http2_query_read_done.
2021-08-03 11:40:30 +08:00
W.C.A. Wijngaards
3ed5b62578
- Fix verbose printout failure in tcp reuse unit test.
2021-08-02 16:06:36 +02:00
W.C.A. Wijngaards
89e2f2f753
- iana portlist update.
2021-08-02 15:26:20 +02:00
W.C.A. Wijngaards
0bdcbc80b9
- Move ECDSA functions to use OpenSSL 3.0.0 API.
2021-08-02 15:06:26 +02:00
W.C.A. Wijngaards
d242bfb73b
- Move RSA and DSA to use OpenSSL 3.0.0 API.
2021-08-02 14:43:51 +02:00
W.C.A. Wijngaards
60663c766a
Review fixup for keyraw pkey function use.
2021-08-02 13:39:48 +02:00
W.C.A. Wijngaards
ca00814e67
- Prepare for OpenSSL 3.0.0 provider API usage, move the sldns
...
keyraw functions to produce EVP_PKEY results.
2021-08-02 13:33:32 +02:00
W.C.A. Wijngaards
b6abcb1508
- For #515 : Fix compilation with openssl 3.0.0 beta2, lib64 dir and
...
SSL_get_peer_certificate.
- Move acx_nlnetlabs.m4 to version 41, with lib64 openssl dir check.
2021-07-30 13:54:43 +02:00
W.C.A. Wijngaards
11caae256b
- Fix #515 : Compilation against openssl 3.0.0 beta2 is failing to
...
build unbound.
2021-07-30 13:35:23 +02:00
Tomasz Ziolkowski
3e310a17be
Docker environment for run tests + enhancement for ssl_handshake
2021-07-27 12:06:08 +02:00
George Thessalonikefs
dd254137f1
- Changelog entry for #513 : Stream reuse, attempt to fix #411 , #439 ,
...
#469 .
2021-07-26 16:55:32 +02:00
gthess and GitHub
dcd75814b9
Merge pull request #513 from NLnetLabs/tcp_reuse_fix
...
Stream reuse, attempt to fix #411 , #439 , #469
2021-07-26 16:54:34 +02:00
W.C.A. Wijngaards
e8d28f0a55
- Fix readzone unknown type print for memory resize.
2021-07-26 16:45:33 +02:00
George Thessalonikefs
8ee5aa312f
- Fix unittcpreuse.c: properly initialise outnet.
2021-07-26 16:29:57 +02:00
George Thessalonikefs
ad2bd61ed4
- Remove redundant log_assert and fix error messages.
2021-07-26 16:12:55 +02:00
George Thessalonikefs
de73af2da2
- stream reuse, do not explicitly wait for a free pending_tcp if a reuse
...
could be used.
2021-07-26 10:47:20 +02:00
W.C.A. Wijngaards
fc462aa15d
Changelog note for #512
...
- Merge #512 : unbound.service.in: upgrade hardening to latest
standards.
2021-07-26 09:47:24 +02:00
Wouter Wijngaards and GitHub
1e17b8f67c
Merge pull request #512 from ArchangeGabriel/patch-1
...
unbound.service.in: upgrade hardening to latest standards
2021-07-26 09:47:12 +02:00
Bruno Pagani
c32b9e4ba9
unbound.service.in: upgrade hardening to latest standards
...
Systemd gradually introduced new protection bits, let’s enable them.
2021-07-25 05:27:22 +02:00
George Thessalonikefs
ab318a8b95
- Add unittest for tcp_reuse functions.
2021-07-24 01:15:00 +02:00
George Thessalonikefs
1b7358e85c
- stream reuse, move log_assert to the correct location.
2021-07-23 20:51:14 +02:00
George Thessalonikefs
e1fdac7205
- stream reuse, clean links on structs that are unlinked from a list.
2021-07-23 18:45:48 +02:00
George Thessalonikefs
0c74d6abba
- Fix for #411 , #439 , #469 : stream reuse, fix loop in the free
...
pending_tcp list.
2021-07-23 18:25:06 +02:00
George Thessalonikefs
5b4555954a
- Fix for #411 , #439 , #469 : stream reuse, fix outnet deletion for all
...
non-free pending_tcp.
2021-07-23 18:05:57 +02:00
George Thessalonikefs
224571256d
- Fix for #411 , #439 , #469 : stream reuse, fix LRU list when reuse is
...
already in the tree.
2021-07-23 18:00:24 +02:00
George Thessalonikefs
f9ad139c08
- Fix for #411 , #439 , #469 : stream reuse, fix linking when touching the
...
tcp_reuse LRU list.
2021-07-23 17:51:42 +02:00
George Thessalonikefs
e2221f3388
- More log_assert for stream reuse operations.
2021-07-23 17:50:28 +02:00
W.C.A. Wijngaards
ca5baef433
- Fix that ldns_zone_new_frm_fp_l counts the line number for an empty
...
line after a comment.
2021-07-21 13:58:07 +02:00
Artem Egorenkov and Artem Egorenkov
d9153cb35b
Option --enable-linux-ip-local-port-range added to use system configured port range for libunbound on Linux
2021-07-20 14:46:43 +02:00
W.C.A. Wijngaards
d300bc8eee
- Fix for older parsers for function call in serve expired get cached.
2021-07-16 17:55:10 +02:00
W.C.A. Wijngaards
163d8b768e
- Another fix from lint for ignored return value.
2021-07-16 17:48:52 +02:00
W.C.A. Wijngaards
a7eaf6364d
- Fix from lint for ignored return value.
2021-07-16 17:46:04 +02:00
W.C.A. Wijngaards
5f57dbf19b
- Insert header into testcode/readzone.c, it was missing.
2021-07-16 17:12:41 +02:00
George Thessalonikefs
ca4d68c64c
- Introduce 'http-user-agent:' and 'hide-http-user-agent:' options.
2021-07-16 14:32:18 +02:00
W.C.A. Wijngaards
f693cbc90b
Revert "- With hide-version unbound also omits the version from http headers."
...
This reverts commit 9d4644b125
2021-07-16 14:02:55 +02:00
W.C.A. Wijngaards
9d4644b125
- With hide-version unbound also omits the version from http headers.
2021-07-16 13:45:41 +02:00
W.C.A. Wijngaards
2a8d1a6d10
- review fix to remove duplicate error printout.
2021-07-16 10:53:53 +02:00
W.C.A. Wijngaards
9e712e8a0b
- Fix unbound-control local_data and local_datas to print detailed
...
syntax errors.
2021-07-16 10:51:27 +02:00
W.C.A. Wijngaards
e388ba2967
- Fix spelling in localzone.h comment.
2021-07-16 10:28:09 +02:00
W.C.A. Wijngaards
3aa53e45c8
- Fix spelling in doc/unbound.doxygen comment.
2021-07-16 10:26:45 +02:00
W.C.A. Wijngaards
8180ca192f
- Fix for #510 : in depth, use ifdefs for windows api event calls.
2021-07-16 09:12:06 +02:00
Wouter Wijngaards and GitHub
410f202a93
Merge pull request #510 from ndptech/master
...
Don't call a function which hasn't been defined
2021-07-16 09:11:21 +02:00
Nick Porter
2c3f764d61
Don't call a function which hasn't been defined
2021-07-15 17:55:33 +01:00
W.C.A. Wijngaards
3f7e164751
- iana portlist update.
2021-07-06 15:15:43 +02:00
George Thessalonikefs
e521b10f32
- Fix clang-analysis warnings for testcode/readzone.c.
2021-07-05 16:51:46 +02:00
George Thessalonikefs
11d3cea823
- Fix compiler warnings for #491 .
2021-07-05 15:36:27 +02:00
George Thessalonikefs
c6fc7adeb1
- Fix Wunused-result compile warnings.
2021-07-04 15:19:24 +02:00
Tom Carpay
a701ef75ed
changelog PR #491
2021-07-02 15:15:13 +02:00
tcarpay and GitHub
379c7d592d
Merge pull request #491 from NLnetLabs/svcb
...
Add SVCB and HTTPS types and handling according to draft-ietf-dnsop-svcb-https
2021-07-02 15:11:12 +02:00
Tom Carpay
711087bb13
rename var to remove shadow variable
2021-07-02 14:15:33 +02:00
Tom Carpay
ab017cde0f
Merge branch 'master' into svcb
2021-07-02 13:37:08 +02:00
877aa8df55
Apply suggestions from code review
...
Co-authored-by: Willem Toorop <willem@nlnetlabs.nl >
2021-07-02 13:14:47 +02:00
Tom Carpay
a6020e4186
change test and error to be in line with new maximum svcb params (nparams >= MAX_NUMBER_OF_SVCPARAMS)
2021-07-02 11:21:19 +02:00
Tom Carpay
543d6d5c13
fix final comment: remove superfluous assert
2021-07-02 10:53:50 +02:00
W.C.A. Wijngaards
f62994f6ea
- Fix #506 : Python Module Seems to Leak Memory if it Experiences an
...
Unhandled Exception.
2021-07-02 09:42:31 +02:00
Tom Carpay
3d50c25f5b
fix comments - 1
2021-07-01 16:59:48 +02:00
e41125495d
Apply suggestions from code review
...
Co-authored-by: Wouter Wijngaards <wcawijngaards@users.noreply.github.com >
2021-07-01 12:45:14 +02:00
W.C.A. Wijngaards
04e9adc610
Analysis workflow, enable the matrix of tests, on demand.
2021-06-25 16:54:23 +02:00
W.C.A. Wijngaards
57022af9a4
Analysis workflow, disable -x for bash the output is reordered with
...
respect to the command output.
2021-06-25 16:50:21 +02:00
W.C.A. Wijngaards
6ac9253c2a
Analysis workflow, remove debug, add desciption echo, remove dll.
2021-06-25 16:34:43 +02:00
W.C.A. Wijngaards
9a90254d2f
Analysis workflow, remove debug output.
2021-06-25 16:06:05 +02:00
W.C.A. Wijngaards
8e5c3f51a2
- Fix auth zone download on windows to unlink before rename.
2021-06-25 15:31:33 +02:00
W.C.A. Wijngaards
5e81763e53
Analysis workflow, fixup ctime tests.
2021-06-25 15:27:51 +02:00
W.C.A. Wijngaards
e4e0eaa63e
Analysis workflow, fix ctime formatting for autotrust and testbound.
2021-06-25 15:11:10 +02:00
W.C.A. Wijngaards
770a54600c
Analysis workflow, check for ctime define.
2021-06-25 14:37:53 +02:00
W.C.A. Wijngaards
e45e73768f
Analysis workflow, see if defines are causing ctime changes.
2021-06-25 14:07:11 +02:00
W.C.A. Wijngaards
66e9317edc
Analysis workflow, test ctime replacement.
2021-06-25 13:37:26 +02:00
W.C.A. Wijngaards
cef1c56e88
Analysis workflow, debug output for ctime.
2021-06-25 13:12:22 +02:00
W.C.A. Wijngaards
7a5e869548
Analysis workflow, remove debug output.
2021-06-25 11:18:12 +02:00
W.C.A. Wijngaards
ba846a925a
- Fix configure does not require pkg-config if not needed.
2021-06-25 11:05:57 +02:00
W.C.A. Wijngaards
62ba441024
Analysis workflow, output debug.
2021-06-25 10:38:09 +02:00
W.C.A. Wijngaards
57e3d5da61
- Fix configure grep for reuseport default for failure.
2021-06-25 10:37:47 +02:00
W.C.A. Wijngaards
6ed49bf45f
Analysis workflow, debug output.
2021-06-25 10:12:40 +02:00
W.C.A. Wijngaards
358bc0d8bd
Analysis workflow, make debug output.
2021-06-25 09:43:02 +02:00
W.C.A. Wijngaards
1b66c5f6e4
Analysis workflow, fix make target.
2021-06-25 09:16:13 +02:00
W.C.A. Wijngaards
7d16b2c268
Analysis workflow, output failure cases.
2021-06-25 08:49:30 +02:00
W.C.A. Wijngaards
658db66c3f
- Fix up permissions on rpl data file in tests.
2021-06-25 08:45:03 +02:00
W.C.A. Wijngaards
e24c78efd6
Analysis workflow, remove debug output, strip more whitespace off
...
ADDRESS lines in testbound range.
2021-06-24 22:57:12 +02:00
W.C.A. Wijngaards
56733f1ba0
Analysis workflow, output testbound results.
2021-06-24 22:28:07 +02:00
W.C.A. Wijngaards
8a25ca9651
Fixup ctime test.
2021-06-24 22:11:42 +02:00
W.C.A. Wijngaards
db5bb6270b
Fixup unit auth test for windows port.
2021-06-24 21:55:46 +02:00
W.C.A. Wijngaards
26cdcc899a
Analysis workflow, enable ssl compile.
2021-06-24 21:37:33 +02:00
W.C.A. Wijngaards
b468f708cf
Analysis workflow, fixup shell.
2021-06-24 21:33:39 +02:00
W.C.A. Wijngaards
a383416f80
Analysis workflow, fixup with type.
2021-06-24 21:29:41 +02:00
W.C.A. Wijngaards
abc82f5d87
Analysis workflow, echo wrong directories.
2021-06-24 21:26:16 +02:00
W.C.A. Wijngaards
b4c0988cb9
Analysis workflow, set MAKESHELL.
2021-06-24 21:23:12 +02:00
W.C.A. Wijngaards
f963fc51d4
Analysis workflow, remove SHELL setting because make mangles it.
2021-06-24 21:16:20 +02:00
W.C.A. Wijngaards
43f5429458
Analysis workflow, remove program files dir.
2021-06-24 21:09:25 +02:00
W.C.A. Wijngaards
4fdb6d85eb
Analysis workflow, fix shell substitution.
2021-06-24 21:00:52 +02:00
W.C.A. Wijngaards
536e0e2125
Analysis workflow, also fix other makefiles.
2021-06-24 20:55:50 +02:00
W.C.A. Wijngaards
57f4047bb5
Analysis workflow, fixup shell.
2021-06-24 20:51:45 +02:00
W.C.A. Wijngaards
e249ca39ed
Analysis workflow, fix env variable.
2021-06-24 20:42:32 +02:00
W.C.A. Wijngaards
80a3f416de
Analysis workflow, provide CONFIG_SHELL variable.
2021-06-24 20:38:12 +02:00
W.C.A. Wijngaards
547083ddbd
Analysis workflow, add shell.
2021-06-24 20:31:02 +02:00
W.C.A. Wijngaards
6b84e303ba
Analysis workflow, fixup shell.
2021-06-24 20:25:12 +02:00
W.C.A. Wijngaards
201011057f
Analysis workflow, provide SHELL.
2021-06-24 20:13:33 +02:00
W.C.A. Wijngaards
d94b3f9b78
Analysis workflow, fix mkdir.
2021-06-24 19:57:29 +02:00
W.C.A. Wijngaards
994c095ed2
Analysis workflow, build libexpat.
2021-06-24 19:50:17 +02:00
W.C.A. Wijngaards
82e7f6f056
Analysis workflow, Fixup spelling
2021-06-24 19:35:12 +02:00
W.C.A. Wijngaards
3bc29af649
Analysis workflow, fixup installtop.
2021-06-24 18:59:14 +02:00
W.C.A. Wijngaards
57055d2d89
Analysis workflow, build libs only.
2021-06-24 18:45:42 +02:00
W.C.A. Wijngaards
a409f82f58
Analysis workflow, show topdir from Makefile.
2021-06-24 18:40:14 +02:00
W.C.A. Wijngaards
086e86b7aa
Analysis workflow, remove usage from Configure.
2021-06-24 18:25:45 +02:00
W.C.A. Wijngaards
341198b5d7
Analysis workflow, set up Configure.
2021-06-24 18:17:51 +02:00
W.C.A. Wijngaards
0b1221ef3c
Analysis workflow, use yum install.
2021-06-24 18:14:35 +02:00
W.C.A. Wijngaards
533e1db30a
Analysis workflow, use installed openssl
2021-06-24 18:02:22 +02:00
W.C.A. Wijngaards
02516845d8
Analysis workflow, use perl for Configure.
2021-06-24 17:53:51 +02:00
W.C.A. Wijngaards
877db8ca36
Analysis workflow, run from other shell.
2021-06-24 17:50:58 +02:00
W.C.A. Wijngaards
98e36cd158
Analysis workflow, install perl module.
2021-06-24 17:42:25 +02:00
W.C.A. Wijngaards
db917945a3
Analysis workflow, fix spelling for Pod.
2021-06-24 17:39:53 +02:00
W.C.A. Wijngaards
320e6ad462
Analysis workflow, use cpan to install perl module.
2021-06-24 17:36:48 +02:00
W.C.A. Wijngaards
5d862e4b3a
Analysis workflow, perl to call cpan for it.
2021-06-24 17:26:10 +02:00
W.C.A. Wijngaards
385d87b543
Analysis workflow, install missing module.
2021-06-24 17:23:51 +02:00
W.C.A. Wijngaards
6822a48308
Analysis workflow, find perl module.
2021-06-24 17:12:34 +02:00
W.C.A. Wijngaards
4a099bb25a
Analysis workflow, use different perl
2021-06-24 17:08:13 +02:00
W.C.A. Wijngaards
0b2dc96d31
Analysis workflow, find perl.
2021-06-24 17:04:07 +02:00
W.C.A. Wijngaards
1c05aa2243
Analysis workflow, fixup perl for openssl Configure.
2021-06-24 16:59:24 +02:00
W.C.A. Wijngaards
bc271a2b14
Analysis workflow, fixup perl for openssl.
2021-06-24 16:55:52 +02:00
W.C.A. Wijngaards
563b047273
Analysis workflow, build openssl.
2021-06-24 16:49:33 +02:00
W.C.A. Wijngaards
d994a246bb
Analysis workflow, build openssl.
2021-06-24 16:41:40 +02:00
W.C.A. Wijngaards
36a9b5da0d
Analysis workflow, find openssl.
2021-06-24 16:31:51 +02:00
W.C.A. Wijngaards
bc51922888
Analysis workflow, find openssl.
2021-06-24 16:27:02 +02:00
W.C.A. Wijngaards
b9b4636797
Analysis workflow, find openssl.
2021-06-24 16:20:55 +02:00
W.C.A. Wijngaards
085ac3c0da
Analysis workflow, find mingw.
2021-06-24 16:13:21 +02:00
W.C.A. Wijngaards
3db0c7717c
Analysis workflow, find mingw.
2021-06-24 16:05:02 +02:00
W.C.A. Wijngaards
0f5847f276
Analysis workflow, find mingw.
2021-06-24 15:28:09 +02:00
W.C.A. Wijngaards
5d70fbc6fa
Analysis workflow, find mingw.
2021-06-24 15:25:37 +02:00
W.C.A. Wijngaards
137ff8b856
Analysis workflow, fix indentation of shell keyword.
2021-06-24 15:21:26 +02:00
Tom Carpay
9cd15f7ebf
remove tests for svcparam semantics
2021-06-24 15:20:32 +02:00
W.C.A. Wijngaards
ad9a287f82
Analysis workflow, add win test.
2021-06-24 15:18:54 +02:00
W.C.A. Wijngaards
c017e00279
Analysis workflow, enable all the tests.
2021-06-24 14:51:11 +02:00
W.C.A. Wijngaards
aba8623c44
Analysis workflow, add Android x86, arm64 and x86_64 tests.
2021-06-24 14:24:39 +02:00
W.C.A. Wijngaards
709ca6ff7e
Analysis workflow, add android armv7a test.
2021-06-24 14:15:56 +02:00
W.C.A. Wijngaards
5198523a92
analysis workflow, fixup SDK and CPU definitions.
2021-06-24 13:47:33 +02:00
W.C.A. Wijngaards
46032bb670
analysis workflow, add iPhoneOS, AppleTVOS and WatchOS tests.
2021-06-24 13:38:45 +02:00
W.C.A. Wijngaards
c744db2935
analysis workflow, add arm64 iOS test.
2021-06-24 13:28:52 +02:00
W.C.A. Wijngaards
bb208d48fb
analysis workflow, use log line groups.
2021-06-24 12:07:22 +02:00
W.C.A. Wijngaards
06af83c2cf
analysis workflow, fixup ios test.
2021-06-24 11:53:44 +02:00
W.C.A. Wijngaards
6e025e303f
analysis workflow, add iphone on armv7 test.
2021-06-24 11:43:02 +02:00
9880077190
Apply suggestions from code review
...
Co-authored-by: Willem Toorop <willem@nlnetlabs.nl >
2021-06-24 11:20:41 +02:00
W.C.A. Wijngaards
8990fcbd6a
analysis workflow, Add address sanitizer test, disable static for build speedup.
2021-06-24 11:17:57 +02:00
W.C.A. Wijngaards
a40bc40d0c
analysis workflow, add undefined behaviour sanitizer test.
2021-06-24 11:11:16 +02:00
W.C.A. Wijngaards
a807135373
analysis workflow, fix.
2021-06-24 10:53:25 +02:00
W.C.A. Wijngaards
8ce44a4006
analysis workflow, install libevent for test.
2021-06-24 10:51:06 +02:00
W.C.A. Wijngaards
bb0a182125
analysis workflow, add libevent test, clang macos test.
2021-06-24 10:44:38 +02:00
W.C.A. Wijngaards
48a22bfb26
analysis workflow, install expat.
2021-06-24 10:32:31 +02:00
W.C.A. Wijngaards
61f8b687ef
analysis workflow, macos openssl install location.
2021-06-24 10:25:17 +02:00
W.C.A. Wijngaards
4650207afd
analysis workflow, add macos.
2021-06-24 10:18:29 +02:00
W.C.A. Wijngaards
173efaf743
Analysis workflow, use matrix parameters.
2021-06-24 10:05:27 +02:00
Tom Carpay
cebdf52c4e
fix erroneous test
2021-06-24 10:00:12 +02:00
W.C.A. Wijngaards
db7a7c0239
workflow yml uses single quoted strings.
2021-06-24 09:58:43 +02:00
W.C.A. Wijngaards
b99b17f3d7
Check env contents.
2021-06-24 09:49:20 +02:00
8f27a67d01
Add code point comment to HTTPS
...
Co-authored-by: Willem Toorop <willem@nlnetlabs.nl >
2021-06-24 09:45:08 +02:00
W.C.A. Wijngaards
521ca6a783
workflow sets runs-on.
2021-06-24 09:42:32 +02:00
W.C.A. Wijngaards
15bf9fe581
Fix syntax of analysis workflow.
2021-06-24 09:29:29 +02:00
W.C.A. Wijngaards
999eddd27f
Add analyzer and port compile github workflow.
2021-06-24 09:27:46 +02:00
W.C.A. Wijngaards
d3b2bc501d
- Fix warnings reported by the gcc analyzer.
2021-06-23 18:02:02 +02:00
Tom Carpay
cf02b31675
comment out sematic errors to default to secondary resolver behaviour
2021-06-23 15:03:35 +02:00
Tom Carpay
ff41de4ec3
resolve comments
2021-06-23 14:44:03 +02:00
W.C.A. Wijngaards
7694998ea9
Merge branch 'master' of github.com:NLnetLabs/unbound
2021-06-23 14:06:13 +02:00
W.C.A. Wijngaards
9d681b627f
- Fix #503 : DNS over HTTPS response truncated.
2021-06-23 14:05:59 +02:00
Tom Carpay
f02d9b5963
fix broken ci-build
2021-06-23 11:04:19 +02:00
eb9891f4ed
Apply suggestions from code review
...
Co-authored-by: Willem Toorop <willem@nlnetlabs.nl >
2021-06-23 10:53:11 +02:00
Wouter Wijngaards and GitHub
4de4a0ffb6
Create ci.yml
2021-06-23 10:23:23 +02:00
George Thessalonikefs
896357a5b3
- Fix #495 : Documentation or implementation of "verbosity" option.
2021-06-21 12:54:23 +02:00
W.C.A. Wijngaards
79209823ac
- Fix a number of warnings reported by the gcc analyzer.
2021-06-18 18:12:26 +02:00
George Thessalonikefs
02b1a6ae0a
- Changelog entry for #440 : Various fixes to contrib/unbound_munin_ file.
2021-06-15 17:50:25 +02:00
gthess and GitHub
722d851386
Merge pull request #440 from kimheino/master
...
Various fixes to contrib/unbound_munin_ file
2021-06-15 17:47:57 +02:00
W.C.A. Wijngaards
a887194d6b
- Fix configure nonblocking test and onmingw test to use host.
2021-06-14 16:15:21 +02:00
Kim B. Heino
70a9bfda84
contrib/unbound_munin_: minor cleanup to remove two leftovers
2021-06-12 22:37:33 +03:00
W.C.A. Wijngaards
960d199b6f
- Fix contrib/unbound.spec, fixed url and comment.
2021-06-10 13:35:27 +02:00
W.C.A. Wijngaards
fd7caaf579
- Fix #500 : SPEC file in version 1.13.1 references version 1.4;
...
unable to build RPM from source.
2021-06-10 09:24:48 +02:00
George Thessalonikefs
fcde5c8d54
- Use host_os instead of target_os in configure for Darwin8 build.
2021-06-09 16:36:19 +02:00
George Thessalonikefs
ad939e54d0
- Fix #413 (based on patch by k-ronny): unbound: does not compile on macOS
...
11.1-x86_64 host.
2021-06-09 15:54:41 +02:00
George Thessalonikefs
d02e956da0
- Changelog entry for #486 : Make VAL_MAX_RESTART_COUNT configurable.
...
- Generetated lexer and parser for #486 ; updated example.conf.
2021-06-09 12:32:58 +02:00
gthess and GitHub
45be341267
Merge pull request #486 from fobser/val-max-restart
...
Make VAL_MAX_RESTART_COUNT configurable.
2021-06-09 12:09:27 +02:00
George Thessalonikefs
64546fcfb4
- Fix unused variable warning when compiling with --enable-dnstap.
2021-06-08 22:15:17 +02:00
George Thessalonikefs
df53badfa2
- Fix #425 : Document auth-zone supports communication with DNS primary
...
on nondefault port.
2021-06-07 16:02:41 +02:00
Tom Carpay
307613ea83
comment changes
2021-06-07 15:29:06 +02:00
George Thessalonikefs
553d1c78ef
- Merge #448 from shoeper: Update unbound-control.8.in, fix
...
rpz_disable typo.
2021-06-07 14:51:21 +02:00
gthess and GitHub
9c3672a790
Merge pull request #448 from shoeper/patch-1
...
Update unbound-control.8.in, fix rpz_disable typo
2021-06-07 14:47:35 +02:00
Tom Carpay
9beea6a00c
fix key parsing and incorporate testcases
2021-06-07 14:05:14 +02:00
Tom Carpay
7562edbb8c
remove superfluous double escaping
2021-06-07 08:39:05 +00:00
Tom Carpay
19c63fdaf6
add key parsing and edge case tests
2021-06-07 09:54:02 +02:00
Tom Carpay
24faac236d
implement todos
2021-06-02 16:26:30 +02:00
Willem Toorop
cf8418c319
Rewrite SVCB rdata in correct order
2021-06-02 12:56:54 +02:00
Willem Toorop
e5acb8f638
Correct sorting of rdata
2021-06-02 12:50:04 +02:00
Tom Carpay
41f642bfb9
add error handling
2021-06-02 12:27:48 +02:00
Tom Carpay
e89743b2b8
add check_svcbparams
2021-06-02 10:10:05 +02:00
George Thessalonikefs
2e87871678
- Fix test for zonemd-check option.
2021-06-01 18:02:10 +02:00
W.C.A. Wijngaards
cf0aad9fb6
Merge branch 'master' into rpz-triggers
2021-05-28 15:00:55 +02:00
Tom Carpay
9dcfc90225
start of sldns_heck_svcbparams
2021-05-27 14:15:15 +00:00
Tom Carpay
eb0e029dda
add escaping
2021-05-27 15:22:32 +02:00
W.C.A. Wijngaards
ea4f1ee8a6
- zonemd-check: yesno option, default no, enables the processing
...
of ZONEMD records for that zone.
2021-05-27 14:20:53 +02:00
W.C.A. Wijngaards
2196ccf5e8
- Merge #496 from banburybill: Use build system endianness if
...
available, otherwise try to work it out.
2021-05-27 13:29:33 +02:00
Wouter Wijngaards and GitHub
d116c9711a
Merge pull request #496 from banburybill/master
...
Use build system endianness if available, otherwise try to work it out.
2021-05-27 13:29:08 +02:00
Jim Hague
6066a24405
Use build system endianness if available, otherwise try to work it out.
...
The getdns build system provides the endianness, enabling building on
Windows native. This change is a convenience for getdns maintainers.
2021-05-27 10:57:35 +01:00
W.C.A. Wijngaards
0f2ae816b5
- For #492 : Fix font highlighting for the man page on emacs.
2021-05-25 17:32:08 +02:00
Tom Carpay
21413aed78
fix merge error in ipv6hints
2021-05-25 16:02:22 +02:00
Willem Toorop
956d7d4e44
Fix mandatory parsing and ech printing
2021-05-25 15:56:19 +02:00
Tom Carpay
71904eb0d4
add svcb tpkg tests
2021-05-25 15:44:49 +02:00
W.C.A. Wijngaards
58eeeeb989
- Fix #492 : module-config respip missing in unbound.conf.5.in man
...
page. Merges #494 from he32.
Remove comment line (?) from man page.
2021-05-25 15:06:57 +02:00
Wouter Wijngaards and GitHub
2749132bf7
Merge pull request #494 from he32/unbound-rpz-doc
...
Transplant parts of the contributed RPZ documentation.
2021-05-25 15:03:51 +02:00
Havard Eidnes
182a78f1dc
Transplant parts of the contributed RPZ documentation.
...
This comes from the doc/IP-BasedActions.pdf file with minor
adaptations.
2021-05-25 14:51:31 +02:00
W.C.A. Wijngaards
11b3ebc386
- Move the NSEC3 max iterations count in line with the 150 value
...
used by BIND, Knot and PowerDNS. This sets the default value
for it in the configuration to 150 for all key sizes.
2021-05-25 14:35:19 +02:00
Tom Carpay
e21e7e7f60
Merge branch 'svcb' of github.com:NLnetLabs/unbound into svcb
2021-05-25 11:43:50 +02:00
Tom Carpay
36093b0b8a
fix multiple ipv6hints entries
2021-05-25 11:43:46 +02:00
Willem Toorop
5f22f3a9cf
Shift data pointer when scanning svcb wire data
...
Also make internal auxilary functions static
2021-05-25 10:41:00 +02:00
Willem Toorop
76cd9390da
Fix str2wire ipv6hint like ipv4hint was fixed
2021-05-25 10:37:44 +02:00
Jaap Akkerhuis
56a112001a
Fix generation of libunbound.pc
2021-05-24 12:41:09 +02:00
W.C.A. Wijngaards
4f7c194a83
- Test code has -q option for quiet output.
2021-05-21 17:08:58 +02:00
21c5aadbcd
Apply suggestions from code review
...
Co-authored-by: Willem Toorop <willem@nlnetlabs.nl >
2021-05-21 16:09:18 +02:00
24e39a09a8
Apply suggestions from code review
...
Co-authored-by: Willem Toorop <willem@nlnetlabs.nl >
2021-05-21 15:42:56 +02:00
W.C.A. Wijngaards
76532f7447
- rpz-triggers, silence qname trigger explanation in rpz-log, this is
...
backwards compatible.
2021-05-21 14:56:38 +02:00
W.C.A. Wijngaards
e5cb48c432
Merge branch 'master' into rpz-triggers
2021-05-21 14:09:30 +02:00
W.C.A. Wijngaards
0a6b22dc55
- rpz-triggers, rpz log and stats for nsip and clientip and nsdname.
2021-05-21 14:05:19 +02:00
Tom Carpay
eca19fe1d1
happyflow for all signle svcparams (now without debug prints)
2021-05-20 13:39:24 +02:00
Tom Carpay
1a28a27637
happyflow for all signle svcparams
2021-05-20 13:28:34 +02:00
George Thessalonikefs
ff6b527184
- Fix for #411 , #439 , #469 : Reset the DNS message ID when moving queries
...
between TCP streams.
- Refactor for uniform way to produce random DNS message IDs.
2021-05-19 15:07:32 +02:00
W.C.A. Wijngaards
ddec5aa559
- rpz-triggers, spelling fix in comment.
2021-05-19 11:40:31 +02:00
W.C.A. Wijngaards
23152e6eb8
Fix date in changelog.
2021-05-17 09:13:29 +02:00
W.C.A. Wijngaards
f5e0207a5e
- Fix #489 : Compile using MSYS2 MinGW 64-bit.
2021-05-17 08:43:46 +02:00
W.C.A. Wijngaards
44f5d27683
- rpz-triggers, check for alloc failure and zone for add rpz soa.
2021-05-14 17:27:15 +02:00
W.C.A. Wijngaards
568aab1b67
- rpz-triggers, in callback from iterator, if rpz is disabled, skip.
2021-05-14 16:41:54 +02:00
W.C.A. Wijngaards
355526da7d
- rpz-triggers, the added soa for client ip modified answers is affected
...
by the minimal-responses config option.
2021-05-14 16:34:38 +02:00
W.C.A. Wijngaards
2094763beb
- rpz-triggers, add rpz SOA when minimal responses is not set.
2021-05-14 16:28:55 +02:00
W.C.A. Wijngaards
50dcadd495
- rpz-triggers, for clientip modified answers the rpz SOA is added to the
...
additional section with the serial number and name of the rpz zone that
was applied.
2021-05-14 15:34:48 +02:00
W.C.A. Wijngaards
ad08971b7a
- rpz-triggers, use zone for local data zone based answer if available.
2021-05-14 14:04:42 +02:00
W.C.A. Wijngaards
e7f476d5c3
- rpz-triggers, fix comments, log no zone answers.
2021-05-14 13:57:04 +02:00
W.C.A. Wijngaards
193e37d6e8
- rpz-triggers, call module local callback for rpz local encode replies.
2021-05-14 13:42:54 +02:00
W.C.A. Wijngaards
a9df16cf9b
- rpz-triggers, fix memory allocation trouble on allocation error path.
2021-05-14 13:35:24 +02:00
W.C.A. Wijngaards
9f40e93fe6
- rpz-triggers, use sec_status_insecure like respip, AA flag on RPZ responses.
2021-05-14 13:28:10 +02:00
W.C.A. Wijngaards
f9f3e9d4d0
- rpz-triggers, fix compile warning
2021-05-14 13:25:21 +02:00
W.C.A. Wijngaards
32d82fac9b
Merge branch 'master' into rpz-triggers
2021-05-14 08:47:56 +02:00
W.C.A. Wijngaards
9aa072d115
- Fix that auth-zone zonefiles use last TTL if no TTL is specified.
2021-05-12 17:24:03 +02:00
Tom Carpay
b61d098950
fix memcpy of buffer for ech
2021-05-10 12:19:50 +00:00
Tom Carpay
5b28b213fa
basic implementation of a selection of svcb params
2021-05-10 11:03:08 +02:00
W.C.A. Wijngaards
1e85196fd9
Changelog note for #487
...
- Merge PR #487 : ifdef RLIMIT_AS in recently added check.
2021-05-10 08:18:15 +02:00
Wouter Wijngaards and GitHub
f8b1745049
Merge pull request #487 from sthen/patch-1
...
ifdef RLIMIT_AS in recently added check
2021-05-10 08:17:37 +02:00
Stuart Henderson and GitHub
cde6284a03
ifdef RLIMIT_AS in recently added check
...
Some OS still don't have RLIMIT_AS
2021-05-08 15:12:39 +00:00
Florian Obser
d4314cad33
Make VAL_MAX_RESTART_COUNT configurable.
...
unbound tries very hard (up to 6 authoritative servers) to find a
validating answer. This is not always desirable, for example on high
latency links.
2021-05-08 16:56:32 +02:00
W.C.A. Wijngaards
e217bb48ad
- Remove case fallthrough from deprecate-rsa-1024 code.
2021-05-07 17:06:09 +02:00
W.C.A. Wijngaards
59ea44322e
- Add ./configure --with-deprecate-rsa-1024 that turns off RSA 1024.
2021-05-07 14:28:20 +02:00
W.C.A. Wijngaards
07fda669e4
- Fix #485 : Unbound occasionally reports broken stats.
2021-05-07 11:13:44 +02:00
W.C.A. Wijngaards
80f06ae9b1
- Rerun flex and bison.
2021-05-04 16:24:16 +02:00
W.C.A. Wijngaards
533e4bbdd6
Merge branch 'master' of github.com:NLnetLabs/unbound
2021-05-04 16:21:51 +02:00
W.C.A. Wijngaards
90d0f8bc19
- Fix to squelch tcp socket bind failures when the interface is gone.
2021-05-04 16:21:42 +02:00
George Thessalonikefs
e9a5f5ab3f
- Add more logging for out-of-memory cases.
2021-05-04 15:39:06 +02:00
George Thessalonikefs
71f311dbe1
- Fix for #367 : only attempt to get the interface for queries
...
that are no longer on the tcp_waiting_list.
2021-05-04 14:45:01 +02:00
George Thessalonikefs
edf35336a3
Clearer template text since not everyone can reopen GitHub issues.
2021-05-04 13:42:00 +02:00
W.C.A. Wijngaards
dea1da8d7f
Changelog note for #478
...
- Merge #478 : Allow configuration of TCP timeout while waiting for
response.
2021-05-04 10:25:32 +02:00
Wouter Wijngaards and GitHub
09b924f35b
Merge pull request #478 from edevil/tcp_auth_query_timeout
...
Allow configuration of TCP timeout while waiting for response
2021-05-04 10:24:42 +02:00
W.C.A. Wijngaards
728a3cd7a6
Changelog note and improved comment.
...
- Fix #481 : Fix comment in configuration file.
2021-05-03 13:07:12 +02:00
Wouter Wijngaards and GitHub
6bab2a2421
Merge pull request #481 from paulmenzel/fix-comment-in-conf-file
...
Fix comment in configuration file
2021-05-03 13:05:27 +02:00
Paul Menzel
3f230f4aaf
doc/example.conf.in: Clarify comment for auto-trust-anchor-file
...
Remove `And enable:` as it refers to the uncommented option.
Fixes: 01dd4a35
2021-05-03 12:57:39 +02:00
W.C.A. Wijngaards
472801f8ea
Merge branch 'master' of github.com:NLnetLabs/unbound
2021-04-29 10:27:02 +02:00
W.C.A. Wijngaards
ecb8aed2f2
- Add that log-servfail prints an IP address and more information
...
about one of the last failures for that query.
2021-04-29 10:24:35 +02:00
André Cruz
e07f973938
Allow configuration of TCP timeout while waiting for response
...
This allows us to configure how long Unbound will wait for a response
on a TCP connection.
2021-04-28 16:20:46 +01:00
gthess and GitHub
aaf2236bed
Merge pull request #479 from NLnetLabs/issue-templates
...
Create issue templates
2021-04-28 16:45:44 +02:00
gthess and GitHub
90198ee071
Create issue templates
...
Create issue templates for bug reports and feature requests.
2021-04-28 16:40:48 +02:00
George Thessalonikefs
45328d37b1
- Fix compiler warning for signed/unsigned comparison for
...
max_reuse_tcp_queries.
2021-04-28 16:15:52 +02:00
W.C.A. Wijngaards
4604f30d70
- Fix #474 : always_null and others inside view.
2021-04-28 14:05:23 +02:00
W.C.A. Wijngaards
77451862f0
Changelog note for PR #470
...
- Merge #470 from edevil: Allow configuration of persistent TCP
connections.
2021-04-26 16:07:28 +02:00
Wouter Wijngaards and GitHub
646d6b9bce
Merge pull request #470 from edevil/configurable_tcp
...
Allow configuration of persistent TCP connections
2021-04-26 16:07:16 +02:00
W.C.A. Wijngaards
7226d2f9f2
- Fix that testcode dohclient has OpenSSL initialisation calls.
2021-04-22 09:41:04 +02:00
W.C.A. Wijngaards
a45a7efe69
- Further fix for #468 : detect SSL_CTX_set_alpn_protos for build with
...
OpenSSL 1.0.1.
2021-04-22 09:05:43 +02:00
W.C.A. Wijngaards
25425d9aa7
- Fix #468 : OpenSSL 1.0.1 can no longer build Unbound.
2021-04-22 09:00:15 +02:00
W.C.A. Wijngaards
c71a7faddd
Changelog note for #466
...
- Merge #466 from FGasper: Support OpenSSLs that lack
SSL_get0_alpn_selected.
2021-04-22 08:57:50 +02:00
Wouter Wijngaards and GitHub
64f18b3003
Merge pull request #466 from FGasper/feature_check_SSL_get0_alpn_selected
...
Support OpenSSLs that lack SSL_get0_alpn_selected.
2021-04-22 08:57:33 +02:00
André Cruz
75875d4d1c
Allow configuration of persistent TCP connections
...
Added 2 new options to configure previously hardcoded
values: max-reuse-tcp-queries and tcp-reuse-timeout. These
allow fine-grained control over how unbound uses persistent
TCP connections to authority servers.
2021-04-21 13:50:45 +01:00
Felipe Gasper
0efccaa1eb
Support OpenSSLs that lack SSL_get0_alpn_selected.
2021-04-19 13:05:50 -04:00
Willem Toorop
2c9b548ebd
Simple zonefile printer
...
(maybe I should have called it printzone?)
2021-04-16 16:07:04 +02:00
W.C.A. Wijngaards
69349c7c24
- rpz-triggers, nicer logging for response IP triggers.
2021-04-14 16:35:39 +02:00
W.C.A. Wijngaards
a23efc70ee
- rpz-triggers, nicer logging for qname and clientip triggers.
2021-04-14 13:54:27 +02:00
W.C.A. Wijngaards
ab94ca9684
- rpz-triggers, nicer logging for nsdname and nsip triggers, one line and
...
only when it applies to the delegation point.
2021-04-14 12:11:11 +02:00
W.C.A. Wijngaards
b366441157
Merge branch 'master' into rpz-triggers
2021-04-14 09:39:41 +02:00
George Thessalonikefs
13e445d50b
- Remove unused functions worker_handle_reply and
...
libworker_handle_reply.
2021-04-13 14:54:26 +02:00
George Thessalonikefs
b88b9c9ffd
Merge branch 'master' of github.com:NLnetLabs/unbound
2021-04-13 14:01:38 +02:00
George Thessalonikefs
b774d97b3c
- Fix documentation comment for files previously residing in checkconf/.
2021-04-13 13:59:08 +02:00
W.C.A. Wijngaards
55ba863440
- Fix that nxdomain synthesis does not happen above the stub or
...
forward definition.
2021-04-13 13:52:57 +02:00
George Thessalonikefs
403d0551b7
- Fix (increase) verbosity level for iterator error log in
...
processQueryTargets().
2021-04-12 16:49:45 +02:00
W.C.A. Wijngaards
addd21f750
- Fix permission denied sendto log, squelch the log messages
...
unless high verbosity is set.
2021-04-12 11:18:23 +02:00
W.C.A. Wijngaards
fb0da1b6b0
- rebuild configure to set EXTRALINK to libunbound.la for #460 .
2021-04-09 17:19:04 +02:00
W.C.A. Wijngaards
0491176315
- rpz-triggers, spelling
2021-04-09 08:38:18 +02:00
W.C.A. Wijngaards
473f0cc44b
- rpz-triggers, precedence fix for nsdname and nsip triggers.
2021-04-08 14:39:48 +02:00
W.C.A. Wijngaards
f2d7620308
Merge branch 'master' into rpz-triggers
2021-04-08 14:28:26 +02:00
W.C.A. Wijngaards
7396eff7af
- Fix for #411 : Depth protect for crash on deleted element timeout.
2021-04-08 13:47:06 +02:00
Christian Allred
766244bd81
Document max-query-restarts option
2021-04-05 18:59:09 -07:00
Christian Allred
07c0d04a14
Use max-query-restarts in iterative resolver
2021-04-05 16:25:43 -07:00
Christian Allred
0e3068559c
Add max-query-restarts to grammar and lexer
2021-04-05 16:24:49 -07:00
Christian Allred
41fa45c99e
Add max-query-restarts config parameter
2021-04-05 15:41:53 -07:00
W.C.A. Wijngaards
f64358b351
Merge branch 'master' into rpz-triggers
2021-04-01 14:34:25 +02:00
W.C.A. Wijngaards
fe324823f8
- Fix to stop IPv6 PMTU discovery.
2021-04-01 13:45:34 +02:00
W.C.A. Wijngaards
a2ea701f31
- rpz-triggers, fix what domain name to match for nsdname.
2021-04-01 13:11:51 +02:00
W.C.A. Wijngaards
14582d2445
- rpz-triggers, remove unused test.
2021-04-01 12:56:47 +02:00
W.C.A. Wijngaards
1c75e62804
- rpz-triggers, separate cache storage of RPZ records from network records.
2021-04-01 12:06:14 +02:00
W.C.A. Wijngaards
1f2296a8a2
Merge branch 'master' into rpz-triggers
2021-04-01 10:56:54 +02:00
W.C.A. Wijngaards
fb315509ab
Changelog note for #460 .
...
- Merge #460 from orbea: build: Link with the libtool archive.
2021-04-01 09:12:50 +02:00
Wouter Wijngaards and GitHub
bf868a121d
Merge pull request #460 from orbea/libtool
...
build: Link with the libtool archive.
2021-04-01 09:12:35 +02:00
orbea
b0298224cb
build: Link with the libtool archive.
2021-03-31 16:27:00 -07:00
George Thessalonikefs
9d238060e1
- Clean makedist.sh.
2021-03-31 13:37:08 +02:00
W.C.A. Wijngaards
d23e1f1100
- Fix stack-protector change to not override other CFLAGS options.
2021-03-31 10:01:42 +02:00
George Thessalonikefs
1d54b2cdef
- Disable the use of stack-protector for cross compiled 32-bit windows builds;
...
relates to #444 .
2021-03-30 22:15:12 +02:00
W.C.A. Wijngaards
49d9e91492
Merge branch 'master' into rpz-triggers
2021-03-25 17:28:53 +01:00
W.C.A. Wijngaards
ff0c5f863d
- Fix #429 : Also fix end of transfer for http download of auth zones.
2021-03-25 12:18:49 +01:00
W.C.A. Wijngaards
f3dcb297d9
- Fix that cachedb does not produce empty object files when disabled.
2021-03-24 16:28:18 +01:00
W.C.A. Wijngaards
90e3b8d1a9
- Travis, fix warning in ubsan compile.
...
- Fix configure Targetconfiditionals.h header check, to use compile.
2021-03-24 15:34:26 +01:00
W.C.A. Wijngaards
3fddde30cb
Travis, enable jobs, changelog note.
...
- Travis, fix script to fail when tasks fail.
2021-03-24 11:18:35 +01:00
W.C.A. Wijngaards
4041342cf2
Travis, fix quotes on config opts for iOS and Android configure.
2021-03-24 11:06:10 +01:00
W.C.A. Wijngaards
569fb4d2f4
Travis, debug print config opts.
2021-03-24 10:57:59 +01:00
W.C.A. Wijngaards
c682d423c9
Travis, fix script with steps and export variables and config opts.
2021-03-24 10:49:56 +01:00
W.C.A. Wijngaards
808bb64e50
travis, script at outer scope so failed lines fail build.
2021-03-24 10:42:03 +01:00
W.C.A. Wijngaards
1d199d4a7b
remove debug output.
2021-03-24 10:31:46 +01:00
W.C.A. Wijngaards
9f03bccf96
Add unistd include, and changelog note.
2021-03-24 10:22:37 +01:00
W.C.A. Wijngaards
5644036ffd
Travis, deprecation test also checks if item unavailable.
2021-03-24 10:15:24 +01:00
W.C.A. Wijngaards
e18c4f53aa
Travis, fix deprecation test to use CFLAGS and CPPFLAGS.
2021-03-24 10:07:18 +01:00
W.C.A. Wijngaards
d56a1c38bc
Travis, test deprecation configure output. Debug output from configure
...
and remove a lot of timeconsuming tests temporarily.
2021-03-24 09:57:53 +01:00
W.C.A. Wijngaards
0e1d64de94
Travis, use config opts when testing on OSX.
2021-03-23 16:51:50 +01:00
W.C.A. Wijngaards
0894f059a1
Travis, undo the && code and enable other iOS jobs.
2021-03-23 16:34:56 +01:00
W.C.A. Wijngaards
1af851e791
Travis, fix location of libexpat, stop on error.
2021-03-23 16:27:49 +01:00
W.C.A. Wijngaards
f11d99b6dc
Travis, turn off homebrew update, and move to 12.2 for OSX compile.
2021-03-23 16:03:58 +01:00
W.C.A. Wijngaards
26bf371e95
Travis, try to enable brew update for the 12.2 osx image.
2021-03-23 14:45:14 +01:00
W.C.A. Wijngaards
61e6a3910f
Travis, note changelog, disable homebrew update in script and cfg.
2021-03-23 14:22:00 +01:00
W.C.A. Wijngaards
b5ee27f810
travis, analyzer disabled on test without debug, that does not
...
run anway. Turn off failing tests except one. Update iOS test
to xcode image 12.2.
2021-03-23 13:38:46 +01:00
W.C.A. Wijngaards
85f8d72a89
Travis, attempt to omit ios brew update.
2021-03-23 09:29:11 +01:00
W.C.A. Wijngaards
0b7efaf620
Travis changelog noted.
2021-03-23 09:17:22 +01:00
W.C.A. Wijngaards
6e8fdd8650
Travis enable all tests again. Clang analyzer only a couple times, when
...
there is a difference. homebrew updates disabled, so it does not hang.
removed trailing slashes from configure paths. Moved iOS tests to
allow-failure.
2021-03-23 08:56:42 +01:00
George Thessalonikefs
a13d935153
- Reformat pythonmod/pythonmod_utils.{c,h}.
2021-03-22 18:45:31 +01:00
W.C.A. Wijngaards
7d5050c729
Asan tests shown to work, run OSX test.
2021-03-22 17:02:06 +01:00
George Thessalonikefs
50d773436d
- Fix for #367 : fix memory leak when cannot bind to listening port.
2021-03-22 16:46:17 +01:00
W.C.A. Wijngaards
0d2160ebd1
Travis test for OSX, ASAN results.
2021-03-22 16:36:46 +01:00
W.C.A. Wijngaards
6289806f41
- Fix memory leak reported by asan in rpz SOA record query name.
2021-03-22 15:29:34 +01:00
W.C.A. Wijngaards
574c1fa50a
- Fix compile error in listen_dnsport on Android.
2021-03-22 15:02:19 +01:00
W.C.A. Wijngaards
ddb8b25800
Merge branch 'master' of github.com:NLnetLabs/unbound
2021-03-22 14:53:16 +01:00
W.C.A. Wijngaards
e92270bae4
- Comment out nonworking OSX and IOS travis tests, vm fails to start.
2021-03-22 14:53:05 +01:00
Alex Band and GitHub
864ac4a6c6
Add docs badge
2021-03-22 14:35:30 +01:00
George Thessalonikefs
f9e3475776
- Fix unused-function warning when compiling with --enable-dnscrypt.
2021-03-22 14:31:58 +01:00
W.C.A. Wijngaards
a8e0de95b8
- rpz-triggers, remove unused variable warning.
2021-03-22 09:52:00 +01:00
W.C.A. Wijngaards
3dd804755b
- rpz-triggers, function documentation comments for iterator callback
...
functions.
2021-03-22 09:49:22 +01:00
W.C.A. Wijngaards
8e7ced72e5
- rpz-triggers, fix that after cname an nsdname or nsip trigger has cname
...
rrsets prepended by the iterator.
2021-03-22 09:42:04 +01:00
W.C.A. Wijngaards
81cd0d76c8
- rpz-triggers, call rpz callback only if there are auth zones configured.
2021-03-22 09:39:12 +01:00
W.C.A. Wijngaards
5b782d0a22
- iana portlist update.
2021-03-22 09:12:41 +01:00
W.C.A. Wijngaards
52953c86a2
Changelog note for #449 .
2021-03-22 08:57:01 +01:00
Wouter Wijngaards and GitHub
5afda55644
Merge pull request #449 from orbea/build
...
build: Add missing linker flags.
2021-03-22 08:56:43 +01:00
orbea
839cce1a7b
build: Add missing linker flags.
2021-03-21 16:28:58 -07:00
Sven and GitHub
0f804f1b56
Update unbound-control.8.in, fix rpz_disable typo
2021-03-20 14:28:10 +01:00
W.C.A. Wijngaards
57d4c3a8a4
- Fix for #447 : squelch connection refused tcp connection failures
...
from the log, unless verbosity is high.
2021-03-19 17:43:36 +01:00
W.C.A. Wijngaards
5a23c84951
- rpz triggers, fix query name on trigger after cname.
2021-03-19 17:36:09 +01:00
W.C.A. Wijngaards
7f39003c04
- rpz triggers, implement qname trigger after cname.
2021-03-19 17:31:44 +01:00
W.C.A. Wijngaards
0c07861404
- Fix #441 : Minimal NSEC range not accepted for top level domains.
2021-03-17 14:04:02 +01:00
W.C.A. Wijngaards
1a528238e2
- rpz triggers, use tld name for tld pointer in suffix removal.
2021-03-12 16:07:37 +01:00
W.C.A. Wijngaards
e7afe0b153
- rpz triggers, rpz_insert_rr nicer.
2021-03-12 14:35:34 +01:00
W.C.A. Wijngaards
2d4523d946
- rpz triggers, fix that nsdname suffix removal returns allocated memory
...
of the correct length and the correct dnamelen.
2021-03-12 14:32:10 +01:00
W.C.A. Wijngaards
5ea042c863
- rpz triggers, document statistics and fix comment about statistics.
2021-03-12 13:24:17 +01:00
W.C.A. Wijngaards
62674aaff8
- rpz triggers, fix to put braces around operator.
2021-03-12 13:13:17 +01:00
W.C.A. Wijngaards
263f974120
rpz triggers, man page fix end label
2021-03-12 10:23:20 +01:00
W.C.A. Wijngaards
da0bbcec48
- rpz triggers, man page explanation of rpz zone contents.
2021-03-12 10:21:48 +01:00
W.C.A. Wijngaards
4f892a37bd
- rpz triggers, spelling fix.
2021-03-12 10:21:29 +01:00
W.C.A. Wijngaards
c7bb118a88
- rpz trigger, fix tcp only action after merge
2021-03-12 09:18:38 +01:00
W.C.A. Wijngaards
7a5d82dd48
- rpz trigger, fix merge for unsupported ipaddr based trigger action.
2021-03-12 09:10:11 +01:00
W.C.A. Wijngaards
6f507eb036
Merge branch 'master' into rpz-triggers
2021-03-12 09:04:54 +01:00
W.C.A. Wijngaards
eb82c368e0
- man page contents, list new triggers and actions.
2021-03-12 08:54:00 +01:00
W.C.A. Wijngaards
0927fe6fc4
- Fix parse of LOC RR type for decimetres.
2021-03-11 13:22:05 +01:00
Willem Toorop
6c5e67a5a2
put tls-use-sni: on a line of its own
...
Sorry about this, this must have happened when I added the entries for padding queries and responses.
2021-03-10 15:14:45 +01:00
Kim B. Heino
534a1a42c9
unbound_munin: Munin categories are lower case
2021-03-09 12:20:55 +02:00
Kim B. Heino
69e215b630
unbound_munin: fix statistics after unbound restart / server reboot
...
"unbound-control stats" lists only query types that has been seen
after unbound restart. Munin requires list of all types ever seen,
or the generated graphs are mostly empty after restart.
Fix this by adding a state file with list of seen query types etc.
2021-03-09 12:03:51 +02:00
Kim B. Heino
e1caa764b8
unbound_munin_: use Munin's helper script to detect state file location
2021-03-09 11:09:45 +02:00
Kim B. Heino
a190fc436f
unbound_munin_: remove trailing white space
2021-03-09 11:03:54 +02:00
W.C.A. Wijngaards
269c168f7e
- Debug output for #411 and #439 : printout internal error and details.
2021-03-05 13:54:26 +01:00
W.C.A. Wijngaards
1bdae426ee
- Workaround for #439 : prevent loops in the reuse rbtree.
2021-03-05 13:46:36 +01:00
W.C.A. Wijngaards
6e4ecf7bc1
- Fix spurious errors about "Could not generate request: out of
...
memory". The mesh detect cycle routine no longer wrongly stops
the check when the calling mesh state is unique.
2021-03-04 14:13:44 +01:00
W.C.A. Wijngaards
9753f36463
- iana portlist update.
2021-03-04 10:14:32 +01:00
W.C.A. Wijngaards
6cd77933a3
- Fix: Resolve interface names on control-interface too.
2021-02-26 13:54:10 +01:00
George Thessalonikefs
826828673a
- Fix for #367 : rc_ports don't have ub_sock; skip cleaning up.
2021-02-26 13:13:55 +01:00
W.C.A. Wijngaards
a06d761f74
- Fix to allow rpz with wildcard that applies to all TLDs at once.
2021-02-25 16:54:32 +01:00
W.C.A. Wijngaards
6c464386c6
Changelog note for #365 , #367 and #368 .
...
- Merge PR #367 : DNSTAP log local address. With code from PR #365
and fixes #368 : dnstap does not log the DNS message ID for
FORWARDER_QUERY.
2021-02-25 12:00:28 +01:00
Wouter Wijngaards and GitHub
209dc32624
Merge pull request #367 from NLnetLabs/dnstap-log-local-addr
...
DNSTAP log local address
2021-02-25 11:58:36 +01:00
W.C.A. Wijngaards
04b4f515a7
Fix comment item.
2021-02-25 08:50:02 +01:00
W.C.A. Wijngaards
6cda81b7e4
Fix to use a simple pointer in the call of make_sock and make_sock_port.
2021-02-24 17:36:22 +01:00
W.C.A. Wijngaards
6612974d12
- spelling fix in header.
2021-02-24 16:56:57 +01:00
W.C.A. Wijngaards
a9e15f36d8
- Fix unit test for added ulimit checks.
2021-02-24 15:30:12 +01:00
W.C.A. Wijngaards
e6ffacc16a
- Fix function documentation.
2021-02-24 15:25:12 +01:00
W.C.A. Wijngaards
d3497f6bd1
- On startup of unbound it checks if rlimits on memory size look
...
sufficient for the configured cache size, and logs warning if not.
2021-02-24 14:14:33 +01:00
George Thessalonikefs
7f25bb4730
- ipsecmod: Better logging for detecting a cycle when attaching the
...
A/AAAA subquery.
2021-02-24 13:59:31 +01:00
George Thessalonikefs
d69132b921
- Fix #384 : (1) A minor request to improve the log (2) A minor bug in
...
one log message.
2021-02-24 12:00:11 +01:00
W.C.A. Wijngaards
39a557833d
- Fix for zonemd, do not reject insecure result from trust anchor
...
validation step in dnssec chain of trust.
2021-02-23 17:09:40 +01:00
W.C.A. Wijngaards
c802298fca
- Fix for zonemd, that domain-insecure zones work without dnssec.
2021-02-23 17:03:23 +01:00
W.C.A. Wijngaards
7ec290255d
Spelling fix.
2021-02-22 17:34:02 +01:00
W.C.A. Wijngaards
131d38f8f2
- Fix for zonemd, that nxdomain for the chain of trust is allowed
...
for island zones, it is treates as an insecure zone for verification.
2021-02-22 17:32:40 +01:00
W.C.A. Wijngaards
40fbc3fa8a
- Fix #431 : Squelch permission denied errors for tcp connect
2021-02-22 08:24:04 +01:00
W.C.A. Wijngaards
aa53b933cc
- rpz skip nsec3param records, and nicer log for unsupported actions.
2021-02-19 15:00:39 +01:00
W.C.A. Wijngaards
bc4bdbabea
- Fix #429 : rpz: url: with https: broken (regression in 1.13.1).
2021-02-19 14:42:02 +01:00
W.C.A. Wijngaards
f5339ec7e5
Merge branch 'master' into dnstap-log-local-addr
2021-02-18 13:12:09 +01:00
W.C.A. Wijngaards
3b24d845ff
- Fix doxygen and pydoc warnings.
2021-02-18 11:39:06 +01:00
Wouter Wijngaards and GitHub
bf0a91aa41
Merge pull request #317 from NLnetLabs/zonemd
...
ZONEMD Zone Verification
2021-02-18 11:17:04 +01:00
W.C.A. Wijngaards
d6e55a586c
Changelog note for #317
...
- Merge PR #317 : ZONEMD Zone Verification, with RFC 8976 support.
ZONEMD records are checked for zones loaded as auth-zone,
with DNSSEC if available. There is an added option
zonemd-permissive-mode that makes it log but not fail wrong zones.
With zonemd-reject-absence for an auth-zone the presence of a
zonemd can be mandated for specific zones.
2021-02-18 11:16:19 +01:00
W.C.A. Wijngaards
2d27203718
Merge branch 'master' into zonemd
2021-02-18 11:11:50 +01:00
Wouter Wijngaards and GitHub
490d4c26cf
Merge pull request #427 from vstinner/fopen
...
Fix #426 : Replace _Py_fopen() with fopen() in pythonmod.c
2021-02-16 11:58:56 +01:00
Victor Stinner
92d01d8265
Fix #426 : Replace _Py_fopen() with fopen() in pythonmod.c
...
The private _Py_fopen() function has been removed in Python 3.10.
Fix build on Python 3.10.
2021-02-16 11:27:52 +01:00
W.C.A. Wijngaards
5943c6f2e3
- Fix to make tests work with support indicators set for iterator.
2021-02-15 14:57:29 +01:00
W.C.A. Wijngaards
74e06cc4b3
- Fix #422 : IPv6 fallback issues when IPv6 is not properly
...
enabled/configured.
2021-02-15 14:40:48 +01:00
W.C.A. Wijngaards
c906401597
Merge branch 'master' into zonemd
2021-02-12 17:21:51 +01:00
W.C.A. Wijngaards
48e0d3356a
zonemd, review comments, spelling fix.
2021-02-12 10:48:38 +01:00
W.C.A. Wijngaards
b7ffa6618c
zonemd, review comments, fix no anchor lookup if none.
2021-02-12 09:16:22 +01:00
W.C.A. Wijngaards
8490508559
zonemd, review comments, stop null dnskey, skip dnssec for insecure islands.
2021-02-12 08:33:03 +01:00
W.C.A. Wijngaards
6965cef5e8
zonemd, review comments, check qname for zonemd dnskey lookup.
2021-02-11 17:33:10 +01:00
W.C.A. Wijngaards
e0f17c2443
zonemd, review comments, stop callback for a deleted zone.
2021-02-11 17:27:59 +01:00
W.C.A. Wijngaards
d3b6e1679c
zonemd, review comments, indentation.
2021-02-11 16:05:28 +01:00
W.C.A. Wijngaards
9a972aa5b2
zonemd, review comments, compare list size for rrsigtype add.
2021-02-10 16:38:39 +01:00
W.C.A. Wijngaards
12171e3124
zonemd, review comments, compare list size correctly.
2021-02-10 16:34:24 +01:00
W.C.A. Wijngaards
3d2692d6bc
zonemd, review comments, add comments to unit test, scope verbose output.
2021-02-10 15:30:23 +01:00
W.C.A. Wijngaards
ee0a65250a
Changelog note for PR #420
...
- Merge PR #420 from dyunwei: DOH not responsing with
"http2_query_read_done failure" logged.
2021-02-10 11:26:21 +01:00
Wouter Wijngaards and GitHub
d0c4ce2dc5
Merge pull request #420 from dyunwei/master
...
DOH not responsing with "http2_query_read_done failure" logged
2021-02-10 11:25:56 +01:00
yunwei and GitHub
5d5e4579de
Merge pull request #1 from NLnetLabs/master
...
synchronize the code.
2021-02-10 09:03:38 +08:00
W.C.A. Wijngaards
e0d426ebb1
- Fix for Python 3.9, no longer use deprecated functions of
...
PyEval_CallObject (now PyObject_Call), PyEval_InitThreads (now
none), PyParser_SimpleParseFile (now Py_CompileString).
2021-02-09 10:38:55 +01:00
W.C.A. Wijngaards
450155bfa0
Changelog note for 1.13.1 release and main branch is 1.13.2 in development.
2021-02-09 09:16:23 +01:00
W.C.A. Wijngaards
d3b5f287b1
zonemd, fix unit test to allow nonvalidating zone without zonemd with
...
permissive mode for zonemd.
2021-02-04 16:18:02 +01:00
W.C.A. Wijngaards
b7a633fdc0
Merge branch 'master' into zonemd
2021-02-04 16:08:11 +01:00
W.C.A. Wijngaards
c365e3ab9a
- release 1.13.1rc2 tag on branch-1.13.1 with added changes of 2 feb.
2021-02-04 09:18:40 +01:00
Christopher Zimmermann
1d23e0c920
Merge remote-tracking branch 'upstream/master'
2021-02-03 13:19:19 +01:00
W.C.A. Wijngaards
4693929471
- Fix indentation of root anchor for use by windows install script.
2021-02-02 17:04:29 +01:00
W.C.A. Wijngaards
aa8dfe94d3
Fixup to add to LIBS.
2021-02-02 14:52:05 +01:00
W.C.A. Wijngaards
18840665bc
And autoconf.
2021-02-02 14:31:05 +01:00
W.C.A. Wijngaards
f9a1ac3f0b
- Fix windows dependency on libssp.dll because of default stack
...
protector in mingw.
2021-02-02 14:30:53 +01:00
W.C.A. Wijngaards
bc013b66ed
- Fix dynlibmod link on rhel8 for -ldl inclusion.
2021-02-02 13:18:18 +01:00
W.C.A. Wijngaards
a5a9672dc4
- branch-1.13.1 is created, with release-1.13.1rc1 tag.
2021-02-02 08:48:44 +01:00
George Thessalonikefs
21def26405
- Hide our time traveling abilities.
2021-02-01 17:02:19 +01:00
George Thessalonikefs
bb09b649f7
Merge branch 'master' of github.com:NLnetLabs/unbound
2021-02-01 16:59:19 +01:00
George Thessalonikefs
a8485d58ca
- Attempt to fix NULL keys in the reuse_tcp tree; relates to #411 .
2021-02-01 16:57:56 +01:00
W.C.A. Wijngaards
7262a249f1
- Fix for doxygen 1.8.20 compatibility.
2021-01-29 16:34:46 +01:00
W.C.A. Wijngaards
0ea86f6ccb
- Fix fwd ancil test post script when not supported.
2021-01-28 11:19:34 +01:00
W.C.A. Wijngaards
ad8104bb7c
- Fix empty clause warning in edns pass for padding.
2021-01-28 09:15:45 +01:00
W.C.A. Wijngaards
3a19ceaae6
- Fix to use correct type for label count in ipdnametoaddr rpz routine.
2021-01-28 09:14:19 +01:00
W.C.A. Wijngaards
cb55b5906a
- Fix empty clause warning in config_file nsid parse.
2021-01-28 09:11:46 +01:00
W.C.A. Wijngaards
9e6f8567de
- Fix to use correct type for label count in rpz routine.
2021-01-28 09:07:16 +01:00
W.C.A. Wijngaards
9d700e1f85
- Annotate that we ignore the return value of if_indextoname.
2021-01-28 09:04:00 +01:00
W.C.A. Wijngaards
8ad4c9f92a
- Fix compile of unbound-dnstap-socket without dnstap installed.
2021-01-26 17:29:22 +01:00
George Thessalonikefs
3124eb052d
- Ignore cache blacklisting when trying to reply with expired data from
...
cache. (#394 )
2021-01-26 15:32:50 +01:00
George Thessalonikefs
3b9c7e2826
Changelog entry for:
...
- Merge PR #355 from noloader: Make ICANN Update CA and DS Trust Anchor
static data.
2021-01-26 13:19:05 +01:00
George Thessalonikefs
08ca72fffe
Merge branch 'noloader-icann-ca-trust-ds'
2021-01-26 13:18:00 +01:00
George Thessalonikefs
5e92836760
Merge branch 'master' of git://github.com/noloader/unbound into noloader-icann-ca-trust-ds
2021-01-26 13:04:55 +01:00
George Thessalonikefs
2925fa46b0
Changelog entry for:
...
- Merge PR #275 by Roland van Rijswijk-Deij, Add feature to return the
original instead of a decrementing TTL ('serve-original-ttl').
2021-01-26 13:01:33 +01:00
George Thessalonikefs
515df834a5
Merge branch 'rijswijk-orig_ttl'
2021-01-26 12:58:38 +01:00
George Thessalonikefs
83d9f9d268
Changelog entry for:
...
- Merge PR #408 from fobser: Prevent a few more yacc clashes.
2021-01-26 12:55:55 +01:00
George Thessalonikefs
c18f61a3c4
Merge branch 'fobser-yacc-clashes'
2021-01-26 12:53:55 +01:00
George Thessalonikefs
707eb6108d
Merge branch 'yacc-clashes' of https://github.com/fobser/unbound into fobser-yacc-clashes
2021-01-25 20:56:36 +01:00
George Thessalonikefs
b7acaaa9b8
- Update example.con.in and add a testcase for PR #275 .
2021-01-25 19:26:19 +01:00
George Thessalonikefs
f5b7169729
Merge branch 'orig_ttl' of https://github.com/rijswijk/unbound into rijswijk-orig_ttl
2021-01-25 17:39:24 +01:00
Willem Toorop and GitHub
a565add710
Merge pull request #211 from NLnetLabs/features/padding
...
Down- and upstream padding a la RFC7830 & RFC8467
2021-01-25 15:14:33 +01:00
Willem Toorop
ca2139bf3d
Some review nits from George
2021-01-25 15:13:54 +01:00
Willem Toorop
4694323b1c
Test some different padding sizes
2021-01-24 20:17:44 +01:00
Willem Toorop
efc8022ca4
padding.tdir text in single TXT RR
...
So the sentences are not re-ordered and the text makes sense!
2021-01-24 18:29:00 +01:00
Willem Toorop
54b84381f4
tdir test for padding option
2021-01-24 18:12:08 +01:00
Roland van Rijswijk-Deij
d253db04fd
Addressed review comment from @wcawijngaards
2021-01-22 18:56:09 +00:00
Roland van Rijswijk-Deij
c4c849d878
Rebase on master
2021-01-22 16:44:56 +00:00
Willem Toorop
fc49d145b5
Changelog entry for padding option
2021-01-22 15:14:10 +01:00
Willem Toorop
b7864b0c48
Merge branch 'master' into features/padding
2021-01-22 15:13:01 +01:00
Willem Toorop
2a3548e1ef
Move NSID Changelog entry to day of merge
2021-01-22 15:10:57 +01:00
W.C.A. Wijngaards
dedc1e2340
zonemd, unit test for capitalisation of owner and ns names.
2021-01-22 14:40:21 +01:00
W.C.A. Wijngaards
20ff80c5bb
zonemd, fix to detect duplicate zonemd scheme and algo RRs.
2021-01-22 14:36:53 +01:00
W.C.A. Wijngaards
3a6f1ecafa
Fixup if brackets.
2021-01-22 13:11:41 +01:00
George Thessalonikefs
63a02f3a87
Merge branch 'negative_soa_ttl'
2021-01-22 12:39:16 +01:00
George Thessalonikefs
dc23502abb
- Updated Changelog for PR #407 .
2021-01-22 12:33:56 +01:00
Willem Toorop
48ecf95108
Merge branch 'master' into features/padding
2021-01-22 10:29:50 +01:00
yunwei and GitHub
0215500261
Update netevent.c
...
#386
I found the root cause of this issue. r_buffer is r->query_reply.c->buffer, used to fill the reply in the mesh_send_reply function, then call comm_point_send_reply, and then call http2_submit_dns_response to send the DOH response. However, the buffer is not cleared after use. If the query length is greater than the last response length, the next dns query in the same H2 session will encounter an error.
This is bug!!!
Clear the buffer after use.
2021-01-20 14:12:51 +08:00
George Thessalonikefs
38e12229b8
- Feedback for PR #407 .
2021-01-19 20:09:34 +01:00
Willem Toorop and GitHub
9de4c398e1
Merge pull request #363 from NLnetLabs/features/nsid
...
Support for RFC5001: DNS Name Server Identifier (NSID) Option
2021-01-19 17:19:48 +01:00
Willem Toorop
68d51317fe
rpl tests for nsid
2021-01-19 17:18:26 +01:00
Florian Obser
68d92b7bbb
Prevent a few more yacc clashes.
2021-01-19 17:13:00 +01:00
Willem Toorop
7ba51fce24
example.conf.in entry for nsid
2021-01-19 16:18:36 +01:00
George Thessalonikefs
9056613a79
- Fix TTL of SOA record for negative answers (localzone data and
...
authzone) to be the minimum of the SOA TTL and the SOA.MINIMUM.
2021-01-19 15:55:55 +01:00
Willem Toorop
a152c7f907
Merge branch 'master' into features/nsid
2021-01-19 14:21:18 +01:00
W.C.A. Wijngaards
f273716b80
- Fix declaration before statement and signed comparison warning in
...
dns64.
2021-01-18 10:23:01 +01:00
W.C.A. Wijngaards
c125fe67bc
- Fix #404 : DNS query with small edns bufsize fail.
2021-01-18 08:29:52 +01:00
W.C.A. Wijngaards
e55f38fa83
Changelog entry for #402 .
...
- Merge #402 from fobser: Implement IPv4-Embedded addresses according
to RFC6052.
2021-01-15 08:15:54 +01:00
Wouter Wijngaards and GitHub
9a055c2df4
Merge pull request #402 from fobser/dns64
...
Implement IPv4-Embedded addresses according to RFC6052.
2021-01-15 08:14:58 +01:00
Florian Obser
285a7fdd21
Implement IPv4-Embedded addresses according to RFC6052.
...
The original algorithm assumed that any prefix length would be valid
and did not skip over bits 64 to 71 and set them to zero.
This means that only dns64 prefixes with length 32 and 96 generated
embedded addresses according to RFC6052, cf. Figure 1 in 2.2.
2021-01-14 19:15:30 +01:00
W.C.A. Wijngaards
4613d2bf04
- Fix for #93 : dynlibmodule import library is named libunbound.dll.a.
2021-01-14 16:50:17 +01:00
W.C.A. Wijngaards
5c760a13a4
- rpz trigger, unlock and remove node when rpz is disabled with action override.
2021-01-14 15:31:33 +01:00
W.C.A. Wijngaards
5e00d516fe
- fix that testdata/rpz_qname.rpl trigger tests succeed.
2021-01-14 15:31:17 +01:00
W.C.A. Wijngaards
15b46257e1
- fix that testdata/rpz_clientip.rpl trigger tests succeed.
2021-01-14 13:49:42 +01:00
W.C.A. Wijngaards
db7413acb6
Merge branch 'magenbluten-rpz' into rpz-triggers
2021-01-14 12:13:24 +01:00
W.C.A. Wijngaards
cdb60adcdc
Merge branch 'rpz' of https://github.com/magenbluten/unbound into magenbluten-rpz
...
Conflict fixed for rpz.disabled check added.
2021-01-14 12:11:29 +01:00
W.C.A. Wijngaards
3b82e690ef
- Fix for #93 : dynlibmodule link fix for Windows.
2021-01-13 14:56:25 +01:00
W.C.A. Wijngaards
5314f63343
Nicer changelog note for #399
...
- Merge #399 from xiangbao227: The lock of lruhash table should
unlocked after markdel entry.
2021-01-13 10:10:12 +01:00
W.C.A. Wijngaards
24fd871245
Changelog note for #399
...
- Merge #399 from xiangbao227: The function rrset_cache_touch can
touch an entry to the lru while markdelling the entry in
lruhash_remove.
2021-01-13 10:07:15 +01:00
Wouter Wijngaards and GitHub
7e46204bf7
Merge pull request #399 from xiangbao227/master
...
I found that in function "lruhash_remove", table was locked at first ,then lru_remove the entry , then unlock the table, and then markdel entry , but in function "rrset_cache_touch" , the entry will be touched to lru again before markdelling entry in function "lruhash_remove". This may lead to core!
2021-01-13 10:05:50 +01:00
xiangbao227
93e5705259
I found that in function lruhash_remove, table was locked at first ,then lru_remove the entry , then unlock the table, and then markdel entry , but in function rrset_cache_touch , the entry will be touched to lru again before markdelling entry in function lruhash_remove. This is a bug!
2021-01-13 10:33:41 +08:00
W.C.A. Wijngaards
4d1d8b4cdd
And man page documentation for them.
2021-01-12 13:40:45 +01:00
W.C.A. Wijngaards
d1b92a6ce2
- Fix so local zone types always_nodata and always_deny can be used
...
from the config file.
2021-01-12 13:39:07 +01:00
W.C.A. Wijngaards
3322f631e5
- Fix #397 : [Feature request] add new type always_null to local-zone
...
similar to always_nxdomain.
2021-01-12 13:35:05 +01:00
W.C.A. Wijngaards
64f508fa00
- Fix clang analysis warning.
2021-01-08 11:10:05 +01:00
W.C.A. Wijngaards
d9dd7bc36f
- Add comment documentation.
2021-01-08 11:01:06 +01:00
W.C.A. Wijngaards
1aa7168c6a
- For #391 : more double casts in python start time calculation.
2021-01-08 09:55:55 +01:00
W.C.A. Wijngaards
ee2545d939
- For #391 : fix indentation.
2021-01-08 09:53:52 +01:00
W.C.A. Wijngaards
3e03e2c26d
- For #391 : use struct timeval* start_time for callback information.
2021-01-08 09:47:46 +01:00
W.C.A. Wijngaards
260837e050
Changelog note for #391
...
- Merge PR #391 from fhriley: Add start_time to reply callbacks so
modules can compute the response time.
2021-01-08 09:36:37 +01:00
Wouter Wijngaards and GitHub
48724de155
Merge pull request #391 from fhriley/reply_cb_start_time
...
Add start_time to reply callbacks so modules can compute the response…
2021-01-08 09:35:07 +01:00
W.C.A. Wijngaards
2e4d64684e
- Fix #387 : client-subnet-always-forward seems to effectively bypass
...
any caching?
2021-01-06 13:42:00 +01:00
W.C.A. Wijngaards
752aea8407
Changelog note for #395
...
- Merge PR #395 from mptre: add missing null check.
2021-01-06 13:19:46 +01:00
Wouter Wijngaards and GitHub
d188096a01
Merge pull request #395 from mptre/log-addr-null
...
add missing null check
2021-01-06 13:19:30 +01:00
Anton Lindqvist
422213c171
add missing null check
...
I have a unbound forward zone configured on my router for my $DAYJOB.
The address associated with the zone is only accessible when the router
is connected to a VPN. If the VPN connection is absent, trying to
resolve any domain that must be handled by the zone crashes unbound.
Turns out there's a missing NULL check in `comm_point_send_udp_msg()`.
The same routine already has `if (addr) {} else {}` branches so I guess
protecting the call to `log_addr()` using the same conditional is
reasonable
I have also committed the same fix to unbound shipped with OpenBSD[1].
[1] https://marc.info/?l=openbsd-cvs&m=160993335615698&w=2
2021-01-06 12:44:26 +01:00
W.C.A. Wijngaards
44075a06a5
- Fix #379 : zone loading over HTTP appears to have buffer issues.
2021-01-06 10:36:23 +01:00
W.C.A. Wijngaards
c357e0fea4
Changelog note for #375 and -h output.
...
- Merge PR #375 by fhriley: Add rpz_enable and rpz_disable commands
to unbound-control.
2021-01-05 13:43:53 +01:00
Wouter Wijngaards and GitHub
2c1ecb2231
Merge pull request #375 from fhriley/disable-rpz
...
Add rpz_enable and rpz_disable commands to unbound-control
2021-01-05 13:40:32 +01:00
W.C.A. Wijngaards
b788e29265
Fix acx_nlnetlabs.m4 for aclocal
2021-01-05 12:48:27 +01:00
W.C.A. Wijngaards
4c4ca2433c
- Fix #385 : autoconf 2.70 impacts unbound build
2021-01-05 10:27:13 +01:00
W.C.A. Wijngaards
64cccdb8d5
- iana portlist updated.
2021-01-04 14:18:24 +01:00
W.C.A. Wijngaards
4d51c6b86e
- For #376 : Fix that comm point event is not double removed or double
...
added to event map.
2021-01-04 14:05:50 +01:00
Frank Riley
e3abd772f7
Add start_time to reply callbacks so modules can compute the response time.
2021-01-01 15:44:21 -07:00
Frank Riley
28b45e1d87
Add missing callbacks to the python module
2021-01-01 10:19:32 -07:00
George Thessalonikefs
08968baec1
- Fix error cases when udp-connect is set and send() returns an error
...
(modified patch from Xin Li @delphij).
2020-12-16 17:11:41 +01:00
Frank Riley
42d764eeda
Add rpz_enable and rpz_disable commands to unbound-control.
2020-12-13 12:35:11 -07:00
W.C.A. Wijngaards
811cf6db0c
- Fix missing prototypes in the code.
2020-12-11 14:34:39 +01:00
W.C.A. Wijngaards
e1c678864d
Changelog note for #373
...
- Merge PR #373 from fobser: Warning: arithmetic on a pointer to void
is a GNU extension.
2020-12-11 14:07:42 +01:00
Wouter Wijngaards and GitHub
48c038391a
Merge pull request #373 from fobser/void-arithmetic
...
Warning: arithmetic on a pointer to void is a GNU extension.
2020-12-11 14:07:30 +01:00
W.C.A. Wijngaards
f09b058776
Changelog note for #335
...
- Merge PR #335 from fobser: Sprinkle in some static to prevent
missing prototype warnings.
2020-12-11 14:04:01 +01:00
Wouter Wijngaards and GitHub
29b5b25852
Merge pull request #335 from fobser/static
...
Sprinkle in some static to prevent missing prototype warnings.
2020-12-11 14:03:46 +01:00
Florian Obser
15e1b16da0
Warning: arithmetic on a pointer to void is a GNU extension.
2020-12-11 14:00:20 +01:00
W.C.A. Wijngaards
7077660932
- Fix to squelch permission denied and other errors from remote host,
...
they are logged at higher verbosity but not on low verbosity.
2020-12-11 10:30:54 +01:00
W.C.A. Wijngaards
a4fc32809c
- Fix #371 : unbound-control timeout when Unbound is not running.
2020-12-11 09:33:56 +01:00
W.C.A. Wijngaards
1f7d1a00ff
Fix for #368 : dnstap does not log the DNS message ID for FORWARDER_QUERY
2020-12-10 08:19:07 +01:00
W.C.A. Wijngaards
51e431ada1
doxygen comments fixup
2020-12-09 14:17:02 +01:00
W.C.A. Wijngaards
e25f80799a
Fix use after free.
2020-12-09 14:13:46 +01:00
W.C.A. Wijngaards
9ea58b5bc0
Fix for tcp outgoing to have local address logged
2020-12-09 14:02:00 +01:00
W.C.A. Wijngaards
af96ff157e
Fix leak of socket mem on failure and fix if tcp has to wait we
...
do not know the interface at the time. Later when it knows the
interface we do not have 'sq' with the zone name.
2020-12-09 13:52:49 +01:00
W.C.A. Wijngaards
2baa748bc7
Use port_if pointer instead of wrong UDP local addr
2020-12-09 12:13:50 +01:00
W.C.A. Wijngaards
6ce577c4d9
Use stored TCP address for callback.
2020-12-09 12:07:16 +01:00
W.C.A. Wijngaards
6bf1293bcd
No need for mk_local_addr, can pass the sockaddr structure.
2020-12-09 11:56:35 +01:00
W.C.A. Wijngaards
9272725cdd
Use calloc and freeaddrinfo
2020-12-09 11:43:16 +01:00
W.C.A. Wijngaards
7167153db5
configure test for struct sockaddr_in6 sin6_len member
2020-12-09 11:41:07 +01:00
W.C.A. Wijngaards
275f18cc8e
Remove useless tcp_read_fd member from struct
2020-12-09 11:37:04 +01:00
W.C.A. Wijngaards
91bec32cdc
For TCP store picked outgoing interface and pass it.
2020-12-09 11:34:39 +01:00
W.C.A. Wijngaards
72d3b588ca
For the DoH create_http_handler, also pass the socket.
2020-12-09 11:29:57 +01:00
W.C.A. Wijngaards
159bf52384
Fix that it passes the actual UDP address instead of first
...
and pass NULL to make tcp log compile.
2020-12-09 11:27:33 +01:00
W.C.A. Wijngaards
1f1b93cce6
Fix test code function declaration.
2020-12-09 11:27:14 +01:00
W.C.A. Wijngaards
31cedb47cb
Remove unused whitespace, add missing header change, make it compile
2020-12-09 11:13:58 +01:00
W.C.A. Wijngaards
bdfa65c6ab
Import the patches from the files in the tarball in
...
issue #365 https://github.com/NLnetLabs/unbound/files/5659923/patches.tar.gz
from iruzanov. The merge conflicts are fixed, but no changes are made
to the patched code.
2020-12-09 11:00:51 +01:00
W.C.A. Wijngaards
b49cc2e667
- iana portlist updated.
2020-12-03 10:27:19 +01:00
W.C.A. Wijngaards
e21d38dcb9
- make depend.
2020-12-03 10:26:37 +01:00
W.C.A. Wijngaards
37d751e135
Code repo continues for 1.13.1 in development.
2020-12-03 10:14:14 +01:00
W.C.A. Wijngaards
9eeb95a960
- Fix update, with write event check with streamreuse and fastopen.
2020-12-02 16:17:26 +01:00
W.C.A. Wijngaards
0502ab3026
- Fix for #283 : fix stream reuse and tcp fast open.
2020-12-02 15:42:24 +01:00
W.C.A. Wijngaards
e049fb303c
- Fix on windows to ignore connection failure on UDP, unless verbose.
2020-12-02 11:58:24 +01:00
W.C.A. Wijngaards
eb052e1543
- Fix unbound-dnstap-socket to not use log routine from interrupt
...
handler and not print so frequently when invoked in sequence.
2020-12-02 11:51:54 +01:00
Willem Toorop
fb150f9655
Merge branch 'master' into features/nsid
2020-12-02 11:19:32 +01:00
Willem Toorop
cbb4575a18
Document existence of option
2020-12-02 10:58:05 +01:00
W.C.A. Wijngaards
16c496bff6
- Fix #356 : deadlock when listening tcp.
2020-12-02 10:10:27 +01:00
W.C.A. Wijngaards
1ebf851bf0
- Fix #360 : for the additionally reported TCP Fast Open makes TCP
...
connections fail, in that case we print a hint that this is
happening with the error in the logs.
2020-12-02 09:51:26 +01:00
Willem Toorop
ddb751751c
NSID for Unbound
2020-12-01 15:19:17 +01:00
W.C.A. Wijngaards
5906811ff1
- Fix #358 : Squelch udp connect 'no route to host' errors on low
...
verbosity.
2020-12-01 09:09:13 +01:00
W.C.A. Wijngaards
174bb48ae8
Changelog entry for rc tags 1.13.0rc3 and rc4.
2020-11-30 12:52:04 +01:00
W.C.A. Wijngaards
e4bdc527ba
- Fix assertion failure on double callback when iterator loses
...
interest in query at head of line that then has the tcp stream
not kept for reuse.
2020-11-30 09:41:33 +01:00
W.C.A. Wijngaards
56a80fbbf4
- Fix contrib/metrics.awk for FreeBSD awk compatibility.
2020-11-27 15:08:31 +01:00
mb
78bcfdee64
rpz: fix local data lookup for nsdname
2020-11-27 12:22:56 +01:00
mb
842c9bfc41
rpz: cleanups
2020-11-27 10:52:01 +01:00
mb
8fce4ff27a
rpz: continue nsdname and minor cleanups
2020-11-27 10:46:54 +01:00
W.C.A. Wijngaards
b2894e23a9
- Fix compile warnings in rpz initialization.
2020-11-27 10:11:14 +01:00
mb
eba7e1a7c7
rpz: nsdname actions
2020-11-27 10:09:54 +01:00
W.C.A. Wijngaards
67d541d690
- Fix compile warnings for windows.
2020-11-27 10:01:55 +01:00
W.C.A. Wijngaards
8ffdbc2714
- Fix when use free buffer to initialize rbtree for stream reuse.
2020-11-27 09:57:08 +01:00
W.C.A. Wijngaards
11139c1b4e
- Fix compile warning for type cast in http2_submit_dns_response.
2020-11-27 09:08:48 +01:00
mb
714d546d1d
rpz: add testbound nsdname script (stub)
2020-11-26 12:26:23 +01:00
W.C.A. Wijngaards
3fb0493d3f
- Clear readagain upon decommission of pending tcp structure.
2020-11-26 12:23:18 +01:00
mb
caaa38f7c5
rpz: strip .rpz-nsdname suffix when inserting trigger
2020-11-26 12:16:33 +01:00
W.C.A. Wijngaards
67a0614db7
- Fix that after failed read, the readagain cannot activate.
2020-11-26 12:12:52 +01:00
mb
f78aa90ff1
rpz: nsdname stubs
2020-11-26 11:33:49 +01:00
W.C.A. Wijngaards
e9810e1154
- For #352 : contrib/metrics.awk for Prometheus style metrics output.
2020-11-26 11:00:48 +01:00
W.C.A. Wijngaards
4a8669612a
- Fix to omit UDP receive errors from log, if verbosity low.
...
These happen because of udp-connect.
2020-11-26 09:39:54 +01:00
W.C.A. Wijngaards
f6bf015f90
- tag for the 1.13.0rc2 release.
2020-11-25 14:03:32 +01:00
W.C.A. Wijngaards
e50152aa1f
- Fix readagain and writeagain callback functions for comm point
...
cleanup.
2020-11-25 13:46:28 +01:00
W.C.A. Wijngaards
d05c259458
- Attempt fix for libevent state in tcp reuse cases after a packet
...
is written.
2020-11-25 12:12:35 +01:00
W.C.A. Wijngaards
a5167e495f
- Fix memory leak for edns client tag opcode config element.
2020-11-25 12:04:38 +01:00
W.C.A. Wijngaards
3c2b1fa801
- Remove debug commands from reuse tests.
2020-11-25 12:02:51 +01:00
mb
d6a69d77e2
rpz: minor cleanups
2020-11-25 11:45:33 +01:00
W.C.A. Wijngaards
4b644b7965
- Better fix for reuse tree comparison for is-tls sockets. Where
...
the tree key identity is preserved after cleanup of the TLS state.
2020-11-25 10:22:11 +01:00
W.C.A. Wijngaards
15e8f5c6d4
- Fix udp-connect on FreeBSD, do send calls on connected UDP socket.
2020-11-25 09:55:01 +01:00
W.C.A. Wijngaards
5924a591be
- with udp-connect ignore connection refused with UDP timeouts.
2020-11-25 09:41:06 +01:00
Jeffrey Walton
328e8d2294
Use size_t in place of int for length
2020-11-24 19:33:12 -05:00
Jeffrey Walton
f44118408b
Make ICANN Update CA and DS Trust Key static data
2020-11-24 19:33:12 -05:00
W.C.A. Wijngaards
4e8a1ede3b
- Fix padding of struct regional for 32bit systems.
2020-11-24 17:06:54 +01:00
W.C.A. Wijngaards
978d3840dc
- Fix crash when TLS connection is closed prematurely, when
...
reuse tree comparison is not properly identical to insertion.
2020-11-24 16:58:51 +01:00
mb
7acf1a5088
rpz: fix forged response
2020-11-24 16:29:15 +01:00
W.C.A. Wijngaards
6a324a37ca
- tag for the 1.13.0rc1 release.
2020-11-24 15:01:44 +01:00
W.C.A. Wijngaards
e78957706c
- Fix one port unit test for udp-connect.
2020-11-24 14:16:06 +01:00
W.C.A. Wijngaards
a69304011a
- iana portlist updated.
2020-11-24 13:17:15 +01:00
mb
afc73e28d8
rpz: fix forged messages
2020-11-24 12:02:59 +01:00
mb
b178cf34b6
rpz: update ext_state in the iterator
2020-11-24 11:33:16 +01:00
mb
126e114d6f
rpz: forge responses
2020-11-24 11:25:01 +01:00
mb
354c19f6ac
rpz: apply trigger at query time not response time
2020-11-24 09:33:08 +01:00
Wouter Wijngaards
090a4e417d
- set version of main branch to 1.13.0 for upcoming release.
2020-11-24 08:28:08 +01:00
Wouter Wijngaards
de4e6ad99d
Changelog note for #283 .
...
- Merge PR #283 : Stream reuse. This implements upstream stream
reuse for performing several queries over the same TCP or TLS
channel.
2020-11-24 08:23:24 +01:00
Wouter Wijngaards and GitHub
a2411361b6
Merge pull request #283 from NLnetLabs/stream-reuse
...
Stream reuse
2020-11-24 08:21:07 +01:00
Wouter Wijngaards
ead06af086
Merge branch 'master' into stream-reuse
2020-11-24 08:20:07 +01:00
George Thessalonikefs
f04f7fdf17
Changelog note for #313 :
...
- Merge PR #313 from Ralph Dolmans: Replace edns-client-tag with
edns-client-string option.
2020-11-23 17:37:46 +01:00
gthess and GitHub
db945f018b
Merge pull request #313 from NLnetLabs/edns-string
...
Replace edns-client-tag with edns-client-string option
2020-11-23 17:34:42 +01:00
George Thessalonikefs
b0247b6e93
Merge branch 'master' into edns-string
2020-11-23 16:58:30 +01:00
George Thessalonikefs
201b949689
Merge branch 'master' into edns-string
2020-11-23 16:35:58 +01:00
George Thessalonikefs
2d184f7505
- Update manpage.
2020-11-23 16:32:00 +01:00
W.C.A. Wijngaards
62152e0493
Fix writepid for retvalue 0.
2020-11-23 14:17:58 +01:00
W.C.A. Wijngaards
19f8f4d9f9
Further fix for CVE-2020-28935, so the chown is omitted when the pidfile
...
fails due to a symlink.
2020-11-23 13:48:04 +01:00
W.C.A. Wijngaards
ad38783297
- Fix for #303 CVE-2020-28935 : Fix that symlink does not interfere
...
with chown of pidfile.
2020-11-23 13:42:11 +01:00
W.C.A. Wijngaards
9cc8aa1ddf
- Option to toggle udp-connect, default is enabled.
2020-11-23 11:06:53 +01:00
W.C.A. Wijngaards
6b97cb1dd1
stream reuse, up connection reuse time to 60 seconds.
2020-11-23 10:36:22 +01:00
W.C.A. Wijngaards
cca128b871
+ - Fix #347 : IP_DONTFRAG broken on Apple xcode 12.2.
2020-11-23 09:56:01 +01:00
W.C.A. Wijngaards
9423b5b8b2
Merge branch 'master' into stream-reuse
2020-11-23 09:49:26 +01:00
W.C.A. Wijngaards
dde9fade26
stream reuse, fix review comments.
2020-11-23 09:46:26 +01:00
W.C.A. Wijngaards
4445d9c5aa
stream reuse, fix review comments.
2020-11-23 09:44:56 +01:00
W.C.A. Wijngaards
8143ce6967
stream reuse, review comments.
2020-11-23 09:40:15 +01:00
W.C.A. Wijngaards
6f4c79ab95
stream reuse, fix review comments.
2020-11-23 09:37:26 +01:00
W.C.A. Wijngaards
fd94b0bc9b
stream reuse, rename ssl_reuse test to tls_reuse test.
2020-11-23 09:35:58 +01:00
W.C.A. Wijngaards
6ded710013
stream reuse, renamed ssl_reuse.tdir to tls_reuse.tdir.
2020-11-23 09:33:28 +01:00
W.C.A. Wijngaards
d83b1979c4
stream reuse, debug output with verbose level instead of number.
2020-11-23 09:29:26 +01:00
W.C.A. Wijngaards
097e530c49
Changelog notes for #350 and #351
...
- Merge #351 from dvzrv: Add AF_NETLINK to set of allowed socket
address families.
- Fix #350 : with the AF_NETLINK permission, to fix 1.12.0 error:
failed to list interfaces: getifaddrs: Address family not
supported by protocol.
2020-11-23 08:58:41 +01:00
Wouter Wijngaards and GitHub
dbd5ea4f37
Merge pull request #351 from dvzrv/issues/350
...
Add AF_NETLINK to set of allowed socket address families
2020-11-23 08:57:23 +01:00
David Runge
c48f01445e
Add AF_NETLINK to set of allowed socket address families
...
contrib/unbound{,_portable}.service.in:
With the changes introduced in f6a527c25aFixes #350
2020-11-21 14:10:39 +01:00
mb
f7fb338c95
rpz: continue work on the nsip trigger
2020-11-16 12:42:23 +01:00
mb
07d937f508
rpz: more nsip
2020-11-16 09:49:06 +01:00
mb
e27b160acd
rpz: stubs for nsip triggers
2020-11-13 14:36:00 +01:00
W.C.A. Wijngaards
b891fe113c
- Retry for interfaces with unused ports if possible.
2020-11-12 13:36:37 +01:00
W.C.A. Wijngaards
48b40b305a
Changelog note.
2020-11-12 12:28:10 +01:00
W.C.A. Wijngaards
26aa550bd2
- Fix to connect() to UDP destinations, default turned on,
...
this lowers vulnerability to ICMP side channels.
2020-11-12 12:27:41 +01:00
Ralph Dolmans
a4342ceb3a
Merge branch 'master' into edns-string
2020-11-11 11:38:06 +01:00
Ralph Dolmans
946ed23f73
Merge branch 'master' into edns-string
2020-11-11 11:37:32 +01:00
mb
9149a6d1e4
RPZ: stub nsip testbound scenario
2020-11-11 11:21:54 +01:00
W.C.A. Wijngaards
5385e2e094
- Fix #343 : Fail to build --with-libnghttp2 with error: 'SSIZE_MAX'
...
undeclared.
2020-11-10 15:31:20 +01:00
W.C.A. Wijngaards
7977e1c4cb
- Fix memory leak after fix for possible memory leak failure.
2020-11-10 13:51:56 +01:00
W.C.A. Wijngaards
72d7587138
Merge branch 'master' into zonemd
2020-11-10 08:10:27 +01:00
W.C.A. Wijngaards
3926035f30
Changelog note for #341 and layout change.
...
- Fix #341 : fixing a possible memory leak.
2020-11-10 08:07:28 +01:00
Wouter Wijngaards and GitHub
140ab1f701
Merge pull request #341 from ihsinme/patch-1
...
fixing a possible memory leak.
2020-11-10 08:06:46 +01:00
ihsinme and GitHub
18226f1c17
fixing a possible memory leak.
2020-11-09 18:41:22 +03:00
mb
667863770f
RPZ: refactor clientip to handle multiple rrsets
2020-11-09 15:59:00 +01:00
mb
9b4bbb49b4
RPZ: one more testcase
2020-11-09 12:08:06 +01:00
mb
731afdc924
RPZ: refactor clientip trigger
2020-11-06 13:42:48 +01:00
mb
80205ba133
RPZ: towards client ip trigger and local data action
2020-11-06 12:54:32 +01:00
mb
bd0c910830
RPZ: provide rpz-client-ip trigger and actions
2020-11-04 17:00:28 +01:00
mb
fc4de71fe0
RPZ: fix for c89
2020-11-03 15:45:26 +01:00
mb
1ab84a1d27
RPZ: testbound: add qname and respip tcp-only examples
2020-11-03 11:03:29 +01:00
mb
fb8c5a764d
RPZ: provide tcp-only triggers for respip actions
2020-11-03 11:02:36 +01:00
mb
dd70c2ef9a
RPZ: implement stubs for rpz-tcp-only actions.
2020-11-02 14:21:57 +01:00
W.C.A. Wijngaards
e573f55dcd
zonemd, unit tests for insecure delegation zones.
2020-10-29 14:59:11 +01:00
W.C.A. Wijngaards
cd3d54b504
zonemd, unit test for failed zonemd hash after axfr with chain of trust,
...
zone is written after axfr, but before check. But zone is then rejected
after check completes..
2020-10-29 10:13:01 +01:00
W.C.A. Wijngaards
2757e0ff51
zonemd, unit test for failed zonemd hash after axfr, zone is rejected and not
...
written to file.
2020-10-29 10:00:59 +01:00
W.C.A. Wijngaards
43e32eae33
zonemd, unit test for zonemd from axfr with trust anchor.
2020-10-29 09:55:03 +01:00
W.C.A. Wijngaards
3ab188ea21
zonemd, please doxygen
...
zonemd, fix clang analyzer warning about null nsec3 salt pointer access.
2020-10-29 08:40:22 +01:00
W.C.A. Wijngaards
7ebb890a4a
zonemd, unit test for zonemd from file and trust anchor directly for DNSSEC.
2020-10-28 15:10:14 +01:00
Florian Obser
9fb65e2b9e
Sprinkle in some static to prevent missing prototype warnings.
2020-10-28 14:15:23 +01:00
W.C.A. Wijngaards
639a773c39
zonemd, unit test for chain of trust from recursion to check ZONEMD.
2020-10-27 13:44:44 +01:00
W.C.A. Wijngaards
d104727c91
- In man page note that tls-cert-bundle is read before permission
...
drop and chroot.
2020-10-27 09:00:26 +01:00
W.C.A. Wijngaards
94ac072f9b
zonemd, zonemd-reject-absence config for an auth-zone rejects the zone if
...
no ZONEMD is present.
2020-10-26 15:37:43 +01:00
W.C.A. Wijngaards
8e53f0b14f
zonemd, unit test with correct title.
2020-10-23 14:40:00 +02:00
W.C.A. Wijngaards
2b9569c7fe
zonemd, fix config_get_option for zonemd-permissive-mode and unit test
...
for zonemd-permissive-mode.
2020-10-23 14:38:57 +02:00
W.C.A. Wijngaards
165b048e07
zonemd, zonemd-permissive-mode: yes logs the failure but does not block
...
the zone after a ZONEMD verification failure.
2020-10-23 14:33:04 +02:00
W.C.A. Wijngaards
caee84d92e
zonemd, unit test for unbound-control auth_zone_reload with zonemd.
2020-10-23 12:10:30 +02:00
W.C.A. Wijngaards
89087ae294
zonemd, unbound-control auth_zone_reload errors when ZONEMD fails.
2020-10-23 11:47:00 +02:00
W.C.A. Wijngaards
c72ca35f08
unbound-control auth_zone_reload sets zone to nonexpired and
...
also updates the xfr soa values from the new zonefile contents.
2020-10-23 11:44:28 +02:00
W.C.A. Wijngaards
fb5f3f076d
zonemd, zonemds are checked when a zone is auth_zone_reload from file,
...
or reload with unbound-control.
2020-10-23 11:20:08 +02:00
W.C.A. Wijngaards
40e713e121
zonemd, unlock xfr lock for auth zone verify of zonemd for mesh new callback.
2020-10-23 10:14:21 +02:00
W.C.A. Wijngaards
1cb7d5a194
zonemd, unit test for auth zone zonemd axfr
...
zonemd, zonemds are checked after zone transfer.
2020-10-23 09:12:51 +02:00
W.C.A. Wijngaards
f854f4e867
zonemd, test for server start with zonemd from file.
2020-10-22 16:02:37 +02:00
W.C.A. Wijngaards
54d8473ec6
zonemd, pass module stack as function argument.
2020-10-22 13:31:37 +02:00
W.C.A. Wijngaards
6ea1ae17f7
zonemd, fix to harden against failure in pickup zonemd lookups.
2020-10-22 13:20:00 +02:00
W.C.A. Wijngaards
e09873e0c8
zonemd, zonemds are checked at start
2020-10-22 12:10:46 +02:00
W.C.A. Wijngaards
5d7e001c63
Merge branch 'master' into zonemd
2020-10-22 09:49:27 +02:00
W.C.A. Wijngaards
4990dae87d
- Fix that minimal-responses does not remove addresses from a priming
...
query response.
2020-10-22 09:26:27 +02:00
W.C.A. Wijngaards
ca39cfd6ae
- Fix #333 : Unbound Segmentation Fault w/ log_info Functions From
...
Python Mod.
2020-10-22 08:47:40 +02:00
George Thessalonikefs
0272889c44
- Fix #320 : potential memory corruption due to size miscomputation upton
...
custom region alloc init.
2020-10-21 17:44:04 +02:00
George Thessalonikefs
7c39cbc0a9
- Fix #327 : net/if.h check fails on some darwin versions; contribution by
...
Joshua Root.
2020-10-21 16:45:18 +02:00
W.C.A. Wijngaards
4ba45c34ed
zonemd, result of dnssec failures includes rrset and dnssec bogus reason.
2020-10-21 16:18:28 +02:00
W.C.A. Wijngaards
92eb12d26b
zonemd, unit test remove debug.
2020-10-21 15:59:29 +02:00
W.C.A. Wijngaards
7ac4eb229d
zonemd, unit tests for verifying DNSKEY with trust anchor failures.
2020-10-21 15:58:47 +02:00
W.C.A. Wijngaards
3c86bf51de
zonemd, unit tests for wrong NSEC RRSIGs.
2020-10-21 15:04:06 +02:00
W.C.A. Wijngaards
58d91646f1
zonemd, unit tests for DNSSEC type bitmaps.
2020-10-21 14:23:44 +02:00
W.C.A. Wijngaards
e1d119af7e
zonemd, unit tests for wrong DNSSEC signatures.
2020-10-21 13:17:42 +02:00
W.C.A. Wijngaards
c32c9a0ae2
zonemd, zonemd unit test in own file.
2020-10-21 12:04:53 +02:00
W.C.A. Wijngaards
1245457967
zonemd, fix that zonemd absence in unsigned zone does not invalidate zone.
2020-10-21 11:56:41 +02:00
W.C.A. Wijngaards
e8d29f973d
zonemd, fix that dnssec denial does not invalidate zone.
...
zonemd, unit test of nsec and nsec3 denial.
2020-10-21 11:51:30 +02:00
W.C.A. Wijngaards
2ebc4eae2f
Merge branch 'master' into zonemd
2020-10-21 10:59:32 +02:00
W.C.A. Wijngaards
ee3f26bb3d
Add verbosity to debug occasional missing q1-10.example.net, from timer.
2020-10-21 10:56:51 +02:00
W.C.A. Wijngaards
1e9381f76c
Merge branch 'master' into stream-reuse
2020-10-21 10:36:27 +02:00
W.C.A. Wijngaards
725d4822e7
Changelog note for #228
...
- Merge PR #228 : infra-keep-probing option to probe hosts that are
down. Add infra-keep-probing: yes option. Hosts that are down are
probed more frequently.
With the option turned on, it probes about every 120 seconds,
eventually after exponential backoff, and that keeps that way. If
traffic keeps up for the domain. It probes with one at a time, eg.
one query is allowed to probe, other queries within that 120 second
interval are turned away.
2020-10-21 10:35:47 +02:00
Wouter Wijngaards and GitHub
5ec15bc333
Merge pull request #228 from NLnetLabs/infra-keep-probing
...
infra-keep-probing option to probe hosts that are down
2020-10-21 10:34:40 +02:00
W.C.A. Wijngaards
37354c8927
Merge branch 'master' into infra-keep-probing
2020-10-21 10:13:10 +02:00
W.C.A. Wijngaards
78e9b8949c
Merge branch 'master' into stream-reuse
...
Resolved comm_point_start_listening conflict for socket close.
2020-10-21 09:54:03 +02:00
W.C.A. Wijngaards
2eb39abbaf
- Fix that reuse_tcp_close_oldest sets item_on_lru_list to 0.
...
- Fix to add assertions to reuse_tcp_select_id and unit test.
- Fix that if no tcp buffers then pending tcp query stops.
2020-10-21 09:49:55 +02:00
W.C.A. Wijngaards
f675077502
zonemd, unit test improved debug output and unit test dnssec verify zonemd
2020-10-20 16:49:49 +02:00
W.C.A. Wijngaards
89618ff9ba
zonemd, unit test more zones.
2020-10-19 16:26:22 +02:00
George Thessalonikefs
6fdc822aa0
- Changelog entry for PR #324 : Add modern X.509v3 extensions to
...
unbound-control TLS certificates, by James Renken.
2020-10-19 15:10:17 +02:00
George Thessalonikefs
736a298eac
Merge branch 'master' of github.com:NLnetLabs/unbound
2020-10-19 15:04:15 +02:00
George Thessalonikefs
2527ad1d46
Merge branch 'jprenken-master'; fixes #316 .
2020-10-19 15:01:15 +02:00
George Thessalonikefs
50178d764a
- Fix for attaching the X509v3 extensions to the client certificate.
2020-10-19 15:00:30 +02:00
W.C.A. Wijngaards
61922ce9da
- Clean the fix for out of order TCP processing limits on number
...
of queries. It was tested to work.
2020-10-19 13:39:02 +02:00
W.C.A. Wijngaards
531ce9e85c
Fixup for clear of tcp handler structure.
2020-10-19 13:36:53 +02:00
W.C.A. Wijngaards
68c57314c4
- Fix to set the tcp handler event toggle flag back to default when
...
the handler structure is reused.
2020-10-19 12:55:43 +02:00
George Thessalonikefs
59d15ac9cf
Merge branch 'master' of https://github.com/jprenken/unbound into jprenken-master
2020-10-19 12:18:55 +02:00
W.C.A. Wijngaards
4a14ef8c3a
Merge branch 'master' into zonemd
2020-10-19 11:33:32 +02:00
Ralph Dolmans
8861fb17fa
Changelog entry for local-zone out of chunk regional allocation
2020-10-19 11:22:38 +02:00
Ralph Dolmans and GitHub
a433a25ba3
Merge pull request #329 from NLnetLabs/nochunk-region
...
local-zone regional allocations outside of chunk
2020-10-19 11:21:30 +02:00
W.C.A. Wijngaards
ab9d732796
- Log ip address when http session recv fails, eg. due to tls fail.
2020-10-19 11:06:55 +02:00
W.C.A. Wijngaards
ca6e8ec6c2
Unit test for doh downstream notls.
2020-10-19 10:59:41 +02:00
W.C.A. Wijngaards
5cd2d10fe5
- Fix dnstap test to wait for log timer to see if queries are logged.
2020-10-19 10:43:35 +02:00
W.C.A. Wijngaards
c8390e390d
- Fix python documentation warning on functions.rst inplace_cb_reply.
2020-10-19 10:41:03 +02:00
W.C.A. Wijngaards
a3e2bfbb0c
- Fix #330 : [Feature request] Add unencrypted DNS over HTTPS support.
...
This adds the option http-notls-downstream: yesno to change that,
and the dohclient test code has the -n option.
2020-10-19 10:24:03 +02:00
W.C.A. Wijngaards
ba074c8bef
- Fix memory leak of https port string when reading config.
2020-10-19 10:14:40 +02:00
W.C.A. Wijngaards
46607e7c0c
- Fix that http settings have colon in set_option, for
...
http-endpoint, http-max-streams, http-query-buffer-size,
http-response-buffer-size, and http-nodelay.
2020-10-19 09:06:33 +02:00
W.C.A. Wijngaards
f81d0ac047
- Fix that the out of order TCP processing does not limit the
...
number of outstanding queries over a connection.
2020-10-16 17:26:58 +02:00
Ralph Dolmans
1d11f470df
- local-zone regional allocations outside of chunk to prevent large
...
chunk per small local-zone allocations.
2020-10-16 17:12:08 +02:00
W.C.A. Wijngaards
a525284421
zonemd, remove debug.
2020-10-16 16:15:35 +02:00
W.C.A. Wijngaards
ceb0214b7d
zonemd, unit tests for dnssec verify
2020-10-16 16:09:13 +02:00
George Thessalonikefs
d55084ea9e
- Fix that if there are reply callbacks for the given rcode, those
...
are called per reply and a new message created if that was modified
by the call.
- Pass the comm_reply information to the inplace_cb_reply* functions
during the mesh state and update the documentation on that.
2020-10-15 17:17:59 +02:00
W.C.A. Wijngaards
0a238280b9
zonemd, unit test for dnssec verify, implement test.
2020-10-15 12:27:22 +02:00
W.C.A. Wijngaards
e6aab488c8
zonemd, fix anchor unlock.
...
zonemd, unit test for dnssec verify function test harness.
2020-10-15 09:17:57 +02:00
W.C.A. Wijngaards
cf6e1b6ea9
Merge branch 'master' into zonemd
2020-10-15 08:34:32 +02:00
W.C.A. Wijngaards
edc8f363a7
Changelog note for #326 and changes:
...
- DoH content length, simplify code, remove declaration after
statement and fix cast warning.
2020-10-15 08:22:42 +02:00
Wouter Wijngaards and GitHub
7a7d7caf6a
Merge pull request #326 from netblue30/master
...
DoH: implement content-length header field
2020-10-15 08:19:37 +02:00
netblue30
b1a50720e5
DoH: implement content-lenght header field
2020-10-14 11:32:14 -04:00
W.C.A. Wijngaards
e35b1dfbd5
zonemd, nsec3 rr iterator is type int, like other nsec3 code.
2020-10-14 14:52:32 +02:00
W.C.A. Wijngaards
42d7cdb7d5
zonemd, region freed, and qstate not used when not in a query, and nsec
...
and nsec3 bitmap checks.
2020-10-14 14:46:59 +02:00
W.C.A. Wijngaards
890c8deb0f
- Free up auth zone parse region after use for lookup of host
2020-10-14 14:20:16 +02:00
W.C.A. Wijngaards
f0c19be06f
- Fix that if there are on reply callbacks, those are called per
...
reply and a new message created if that was modified by the call.
2020-10-14 14:03:04 +02:00
W.C.A. Wijngaards
a9e13f3590
- Fix that if there are on reply callbacks, those are called per
...
reply and a new message created if that was modified by the call.
2020-10-14 14:01:47 +02:00
W.C.A. Wijngaards
22e82765f9
zonemd, dnssec verification routines.
2020-10-14 13:34:50 +02:00
W.C.A. Wijngaards
72032a95bb
- Fix for python reply callback to see mesh state reply_list member,
...
it only removes it briefly for the commpoint call so that it does
not drop it and attempt to modify the reply list during reply.
2020-10-14 10:06:28 +02:00
W.C.A. Wijngaards
79a8db1ee1
- Fix #323 : unbound testsuite fails on mock build in systemd-nspawn
...
if systemd support is build.
2020-10-13 08:28:59 +02:00
James Renken
e6c560e5c9
Add modern X.509v3 extensions to unbound-control TLS certificates
2020-10-12 22:06:20 -07:00
W.C.A. Wijngaards
efc01c928c
Formatting.
2020-10-09 16:47:49 +02:00
W.C.A. Wijngaards
754e6f1349
zonemd, routine to check zonemd hash if present
2020-10-09 16:46:20 +02:00
W.C.A. Wijngaards
0af62aba53
zonemd, defines for scheme and algorithm.
2020-10-09 15:14:27 +02:00
W.C.A. Wijngaards
c49a4e60fe
zonemd, doxygen comment fix.
2020-10-09 15:05:46 +02:00
W.C.A. Wijngaards
1dc4d7a9f6
zonemd, harden result length for unsupported algo in nettle digest final.
2020-10-09 14:40:26 +02:00
W.C.A. Wijngaards
5e477e8a31
Merge branch 'master' into zonemd
2020-10-09 14:32:24 +02:00
W.C.A. Wijngaards
fca884a7e6
- Fix warning in libnss compile, nss_buf2dsa is not used without DSA.
2020-10-09 14:31:55 +02:00
W.C.A. Wijngaards
6cb0c4c61d
zonemd, libnss implementation and libnettle implementation. Both succeed
...
on unit tests.
2020-10-09 14:30:56 +02:00
W.C.A. Wijngaards
b20fefb858
zonemd, unit test, reorder test order
2020-10-09 14:03:13 +02:00
W.C.A. Wijngaards
6a8ed4bb15
zonemd, unit test, tests the check routine and reason for failure.
2020-10-09 13:59:44 +02:00
W.C.A. Wijngaards
2f7908b669
zonemd, unit test, note example origins.
2020-10-09 12:20:50 +02:00
W.C.A. Wijngaards
cdf6544b46
zonemd, unit test, succeeds at verifying examples of zonemd draft-12.
2020-10-09 12:18:25 +02:00
W.C.A. Wijngaards
eb4932a463
zonemd, digest code calls, secalgo openssl sha384 and sha512.
2020-10-09 11:19:31 +02:00
W.C.A. Wijngaards
d7e4525829
Merge branch 'master' into zonemd
2020-10-09 09:01:52 +02:00
W.C.A. Wijngaards
795a33c6e5
- Fix dnstap socket and the chroot not applied properly to the dnstap
...
socket path.
2020-10-09 08:57:23 +02:00
W.C.A. Wijngaards
a87f05be7b
- Fix #319 : potential memory leak on config failure, in rpz config.
2020-10-08 09:11:54 +02:00
W.C.A. Wijngaards
ca497815b8
- Tag for 1.12.0 release.
...
- Current repo is version 1.12.1 in development.
2020-10-08 09:09:55 +02:00
W.C.A. Wijngaards
3163a93121
zonemd, loop over zone and canonicalize data, test call in unit test.
2020-10-06 17:07:24 +02:00
W.C.A. Wijngaards
ca31ea7dc8
test rr type parse inputs and print outputs.
2020-10-06 13:38:21 +02:00
W.C.A. Wijngaards
db6030dd39
Create branch zonemd
...
Add RR Type ZONEMD to RR definitions.
2020-10-06 10:48:24 +02:00
W.C.A. Wijngaards
52b04806f4
- Current repo is version 1.12.0 for release. Tag for 1.12.0rc1.
2020-10-01 09:11:22 +02:00
Ralph Dolmans
eb799026ff
Replace edns-client-tag with edns-client-string option
2020-09-30 23:17:53 +02:00
W.C.A. Wijngaards
ea7c5ac392
- Fix double loopexit for unbound-dnstap-socket after sigterm.
2020-09-30 14:55:35 +02:00
W.C.A. Wijngaards
46b3440aea
- Fix memory leak of edns tags at libunbound context delete.
2020-09-30 11:43:46 +02:00
W.C.A. Wijngaards
a453ab629c
- Easier kill of unbound-dnstap-socket tool in test.
2020-09-30 11:38:11 +02:00
W.C.A. Wijngaards
bbba236a36
- Fix stream_ssl, ssl_req_order and ssl_req_timeout tests for
...
alloc check debug output.
2020-09-30 11:29:57 +02:00
W.C.A. Wijngaards
ddb82af523
- Add dohclient test executable to gitignore.
2020-09-30 11:21:24 +02:00
W.C.A. Wijngaards
a7ae0ade66
- Fix doh tests when not compiled in.
2020-09-30 11:20:33 +02:00
Ralph Dolmans
b6d04f500b
- DNS Flag Day 2020: change edns-buffer-size default to 1232.
2020-09-29 14:07:38 +02:00
W.C.A. Wijngaards
83200a3431
- Fix unit test for dnstap changes, so that it waits for the timer.
2020-09-29 13:29:24 +02:00
Ralph Dolmans
eb8ec9c18b
- Use inclusive language in configuration
2020-09-23 14:35:51 +02:00
W.C.A. Wijngaards
3527171397
- Fix to ifdef fptr wlist item for dnstap.
2020-09-23 14:30:31 +02:00
W.C.A. Wijngaards
ed6e3c0c66
- Fix #305 : only wake up thread when threshold reached.
2020-09-23 13:20:25 +02:00
Ralph Dolmans
7da369e85a
- Add edns-client-tag-opcode option
2020-09-23 12:09:48 +02:00
W.C.A. Wijngaards
e41daa954e
Merge branch 'master' of github.com:NLnetLabs/unbound
2020-09-23 11:14:50 +02:00
W.C.A. Wijngaards
48a56751e9
- Fix #305 : dnstap logging significantly affects unbound performance
...
(regression in 1.11).
2020-09-23 11:13:52 +02:00
Ralph Dolmans
9e9810ab8b
- Fix edns-client-tags get_option typo
2020-09-23 10:05:39 +02:00
Ralph Dolmans and GitHub
249d5a706b
Merge pull request #295 from niftylettuce/patch-1
...
docs: fixed typo lean > learn
2020-09-21 17:21:04 +02:00
Ralph Dolmans
00fe4b0306
- Fix #304 : dnstap logging not recovering after dnstap process restarts
2020-09-21 17:17:30 +02:00
W.C.A. Wijngaards
c5f0ec36bb
- iana portlist updated.
2020-09-21 11:38:20 +02:00
W.C.A. Wijngaards
1175269bbd
- Error message is logged for dynlibmod malloc failures.
2020-09-21 10:20:10 +02:00
W.C.A. Wijngaards
9d78ad6898
- Merge PR #311 by luismerino: Dynlibmod leak.
2020-09-21 10:13:19 +02:00
Wouter Wijngaards and GitHub
8deb912fa9
Merge pull request #311 from luismerino/dynlibmod-leak
...
Dynlibmod leak
2020-09-21 10:12:19 +02:00
L. Merino
41ab788cab
fix: avoid leaking cb_pair in inplace_cb_register_wrapped()
2020-09-19 09:58:38 +02:00
L. Merino
56e0e5b9af
fix: return error when malloc fails in inplace_cb_register_wrapped()
2020-09-19 09:58:32 +02:00
W.C.A. Wijngaards
6ea24c5c86
- iana portlist updated.
2020-09-18 13:43:16 +02:00
Ralph Dolmans and GitHub
867886800a
Merge pull request #255 from NLnetLabs/doh
...
Add downstream DNS-over-HTTPS support to Unbound
2020-09-18 12:09:24 +02:00
Ralph Dolmans
ea90f50ca8
Merge branch 'master' into doh
2020-09-18 12:05:53 +02:00
W.C.A. Wijngaards
2541ccbb1b
- Fix that prefer-ip4 and prefer-ip6 can be get and set with
...
unbound-control, with libunbound and the unbound-checkconf option
output function.
2020-09-18 09:56:38 +02:00
Ralph Dolmans
4ae823fbc2
Merge branch 'master' into doh
2020-09-16 18:38:51 +02:00
Ralph Dolmans
42a35ac26e
- Final round of DoH review feedback processing.
2020-09-16 18:25:02 +02:00
W.C.A. Wijngaards
4cc559d7eb
- Spelling fix.
2020-09-15 13:32:30 +02:00
George Thessalonikefs
1a568a1b8c
- Reduce unbound verbosity on test; higher during development.
2020-09-15 12:48:01 +02:00
George Thessalonikefs
0ce7769719
- Introduce test for statistics.
2020-09-15 12:45:22 +02:00
W.C.A. Wijngaards
291ac59888
- Remove x file mode on ipset/ipset.c and h files.
2020-09-11 14:08:10 +02:00
Ralph Dolmans
a3be2b73b6
Properly handle http_endpoint malloc failure.
2020-09-10 13:05:55 +02:00
Ralph Dolmans
39f6071854
Ignore base64 padding for strings that are supposed to be unpadded.
2020-09-10 12:27:37 +02:00
W.C.A. Wijngaards
82f2ee63c5
- Fix num.expired statistics output.
2020-09-09 11:44:44 +02:00
W.C.A. Wijngaards
afbc7bb4fe
- Fix #296 : systemd nss-lookup.target is reached before unbound can
...
successfully answer queries. Changed contrib/unbound.service.in.
2020-08-31 11:50:11 +02:00
W.C.A. Wijngaards
47a5dc8cae
- Refactor to use sock_strerr shorthand function.
2020-08-31 09:12:01 +02:00
W.C.A. Wijngaards
a6dc0743b4
- Merge PR #293 : Add missing prototype. Also refactor to use the new
...
shorthand function to clean up the code.
2020-08-31 08:41:34 +02:00
Wouter Wijngaards and GitHub
01bfd3f207
Merge pull request #293 from fobser/missing-prototype
...
Add missing prototype.
2020-08-31 08:21:09 +02:00
niftylettuce and GitHub
f22ac44f89
docs: fixed typo lean > learn
2020-08-29 20:56:19 -05:00
Florian Obser
2460737490
Add missing prototype.
2020-08-28 17:31:14 +02:00
W.C.A. Wijngaards
12c0cf7cee
- Review fix, doxygen and assign null in case of error free.
2020-08-27 15:27:05 +02:00
W.C.A. Wijngaards
b5a237424b
Please doxygen, quote the characters to stop it from parsing a doxygen command.
2020-08-27 15:12:46 +02:00
W.C.A. Wijngaards
f6a527c25a
- Similar to NSD PR#113, implement that interface names can be used,
...
eg. something like interface: eth0 is resolved at server start and
uses the IP addresses for that named interface.
2020-08-27 14:53:33 +02:00
Ralph Dolmans
852a2e1105
- Add 'DYNLIBMOD_EXTRALIBS' to dohclient in makefile
2020-08-27 12:28:57 +02:00
Ralph Dolmans
f5d8861bbf
- process review feedback
2020-08-27 12:28:17 +02:00
George Thessalonikefs
a912786ca9
- Update documentation in python example code.
2020-08-26 11:59:09 +02:00
W.C.A. Wijngaards
49019ba3a9
Review fix: defense check of qdcount in debug output.
2020-08-25 16:07:25 +02:00
W.C.A. Wijngaards
a83fc176cc
Review fix: remove unused variables.
2020-08-25 13:16:46 +02:00
W.C.A. Wijngaards
aa602fdd0c
- Change configure to use EVP_sha256 instead of HMAC_Update for
...
openssl-3.0.0.
2020-08-24 16:13:42 +02:00
W.C.A. Wijngaards
45d4cbaa42
- Fix to apply chroot to dnstap-socket-path, if chroot is enabled.
2020-08-24 14:55:16 +02:00
W.C.A. Wijngaards
45712de9a2
- Fix that dnstap reconnects do not spam the log with the repeated
...
attempts. Attempts on the timer are only logged on high verbosity,
if they produce a connection failure error.
2020-08-24 09:23:36 +02:00
Ralph Dolmans
e6ebabc0cc
- Fix stats double count issue ( #289 ).
2020-08-20 17:54:28 +02:00
Ralph Dolmans
8b05dcdf8c
- Create and init edns tags data for libunbound.
2020-08-13 14:57:21 +02:00
W.C.A. Wijngaards
b75ff25cfd
Changelog note.
...
- Rerun autoconf
2020-08-10 17:43:19 +02:00
W.C.A. Wijngaards
3e86d30a50
Rerun autoconf and autoheader on configure.ac, with libtool
2020-08-10 17:42:41 +02:00
Ralph Dolmans
59a66601f0
Add changlog entry for PR #277 .
2020-08-10 17:35:18 +02:00
Ralph Dolmans
a6603c94d8
Merge branch 'master' of github.com:NLnetLabs/unbound
2020-08-10 17:32:00 +02:00
Ralph Dolmans
5551bf20e6
Merge branch 'ciz-openssl-3.0'
2020-08-10 17:31:42 +02:00
Ralph Dolmans
31f81adadb
- Check for existence 'EVP_MAC_CTX_set_params' function (openssl >=
...
3.0.0-alpha5)
2020-08-10 17:29:06 +02:00
W.C.A. Wijngaards
a3f95d3358
- Fix #287 : doc typo: "Additionaly".
2020-08-10 08:15:06 +02:00
Ralph Dolmans
afd49e897f
Merge branch 'openssl-3.0' of https://github.com/ciz/unbound into ciz-openssl-3.0
2020-08-06 17:27:27 +02:00
W.C.A. Wijngaards
f35293caba
Changelog note for #246 and #284
...
- Merge PR #284 and Fix #246 : Remove DLV entirely from Unbound.
The DLV has been decommisioned and in unbound 1.5.4, in 2015, there
was advise to stop using it. The current code base does not contain
DLV code any more. The use of dlv options displays a warning.
2020-08-06 14:23:33 +02:00
Wouter Wijngaards and GitHub
8fd489ea69
Merge pull request #284 from NLnetLabs/dlv-removal
...
DLV removal
2020-08-06 14:21:19 +02:00
W.C.A. Wijngaards
2fade6f970
Merge branch 'master' into dlv-removal
2020-08-06 14:20:42 +02:00
W.C.A. Wijngaards
022a716e5b
dlv removal, remove DLV reference from unused use in test case.
2020-08-06 14:18:16 +02:00
W.C.A. Wijngaards
4ec55910c4
dlv removal, free unused variable.
2020-08-06 08:14:14 +02:00
W.C.A. Wijngaards
50091d49ea
- contrib/aaaa-filter-iterator.patch file renewed diff content to
...
apply cleanly to the current coderepo for the current code version.
2020-08-05 16:33:48 +02:00
Ralph Dolmans
ce0b39007d
- Changelog entry for EDNS client tag functionality
2020-08-05 16:10:10 +02:00
Ralph Dolmans and GitHub
74ec8a758b
Merge pull request #272 from NLnetLabs/edns-client-tag
...
Add EDNS client tag functionality
2020-08-05 16:07:49 +02:00
Ralph Dolmans
70c8d09edd
- Process EDNS client tag review feedback
2020-08-05 15:56:45 +02:00
W.C.A. Wijngaards
8f2b9b461b
dlv removal, remove DLV references from man page and pythonmod interface.
2020-08-05 10:25:56 +02:00
W.C.A. Wijngaards
dd59521e52
dlv removal, remove from comments and unused code in iterator and validator
2020-08-04 17:17:48 +02:00
George Thessalonikefs
ded7fdafb3
- Merge PR #280 , Make tvOS & watchOS checks verify
...
truthiness as well as definedness, by Felipe Gasper (fixes #279 ).
2020-08-04 16:38:40 +02:00
George Thessalonikefs
74c1d5b3f5
Merge branch 'issue_279_have_fork_macos' of https://github.com/FGasper/unbound into FGasper-issue_279_have_fork_macos
2020-08-04 16:33:33 +02:00
George Thessalonikefs
764a0dc765
- Improve error log message when inserting rpz RR.
2020-08-04 12:49:43 +02:00
W.C.A. Wijngaards
f78f6a3b29
dlv removal, remove from tests and validator state machine
2020-08-04 09:15:45 +02:00
W.C.A. Wijngaards
c0c722cd97
DLV removal
2020-08-04 09:05:09 +02:00
W.C.A. Wijngaards
4770359384
Merge branch 'master' into stream-reuse
2020-08-04 08:45:15 +02:00
W.C.A. Wijngaards
6983189528
Merge branch 'master' into infra-keep-probing
2020-08-04 08:45:04 +02:00
W.C.A. Wijngaards
fc55345dcb
- Fix mini_event.h on OpenBSD cannot find fd_set.
2020-08-04 08:14:25 +02:00
Felipe Gasper
9bc30967d2
Make tvOS & watchOS checks verify truthiness as well as definedness.
2020-08-03 14:38:47 -04:00
Vitezslav Cizek
61100b6463
net_help: Rename EVP_MAC_set_ctx_params to EVP_MAC_CTX_set_params
...
This fixes build with OpenSSL 3.0.0 Alpha 5.
EVP_MAC_set_ctx_params got renamed back to EVP_MAC_CTX_set_params
in https://github.com/openssl/openssl/pull/12186
2020-07-31 14:48:44 +02:00
W.C.A. Wijngaards
d684bee4b0
stream reuse, move drop in tcp_reuse test to timeout section of test.
2020-07-31 09:32:19 +02:00
W.C.A. Wijngaards
2f9050dde8
Merge branch 'master' into stream-reuse
2020-07-31 09:11:35 +02:00
W.C.A. Wijngaards
1cfa21f23d
Merge branch 'master' into infra-keep-probing
2020-07-31 09:11:20 +02:00
W.C.A. Wijngaards
e855d5779a
- Fix doxygen comment for no ssl for tls session ticket key callback
...
routine.
2020-07-31 09:10:40 +02:00
W.C.A. Wijngaards
d973b756a0
stream reuse, disable debug in test
2020-07-30 17:52:57 +02:00
W.C.A. Wijngaards
1116bf6400
stream reuse, add tls test for stream reuse.
2020-07-30 17:51:49 +02:00
W.C.A. Wijngaards
7a211e5a07
stream reuse, fix tls close by upstream after timeout write event handling.
2020-07-30 17:51:13 +02:00
W.C.A. Wijngaards
12d880ad47
stream reuse, add a test for close by upstream server after timeout.
2020-07-30 16:41:28 +02:00
Ubuntu
f95dce8e34
Rebase on master
2020-07-29 16:02:16 +00:00
Ubuntu
027884aad2
Disable enforcing of min/max TTL when serving original TTL
2020-07-29 15:52:58 +00:00
Ubuntu
21f175b1ac
Adjust semantics of TTL adjustment after feedback from @wcawijngaards
2020-07-29 15:27:15 +00:00
Ubuntu
506dad946b
Ensure packet_rrset_data is always initialised to zero upon allocation
2020-07-29 15:26:42 +00:00
W.C.A. Wijngaards
444681af9d
stream reuse, defensible wait add and debug log with details for requeue.
2020-07-27 17:12:23 +02:00
W.C.A. Wijngaards
2932d530c1
stream reuse, send queries one by one when upstream refuses multiple queries,
...
by closing the connection.
2020-07-27 16:59:46 +02:00
Ralph Dolmans
200e22ceea
Merge branch 'master' into edns-client-tag
2020-07-27 15:54:58 +02:00
Ralph Dolmans
fa892b2456
- Add EDNS client tag test
2020-07-27 15:54:43 +02:00
W.C.A. Wijngaards
3b7b7adffc
Merge branch 'master' into stream-reuse
2020-07-27 13:16:55 +02:00
W.C.A. Wijngaards
75be0d3e14
Merge branch 'master' into infra-keep-probing
2020-07-27 13:16:39 +02:00
George Thessalonikefs
69f0adf83b
- Merge PR #268 , draft-ietf-dnsop-serve-stale-10 has become RFC 8767 on
...
March 2020, by and0x000.
2020-07-27 13:11:46 +02:00
George Thessalonikefs
4231883480
Merge branch 'master' of https://github.com/and0x000/unbound into and0x000-master
2020-07-27 13:07:19 +02:00
W.C.A. Wijngaards
e4b702ef4f
Changelog note for PR #270
...
- Merge PR #270 from cgzones: munin plugin: always exit 0 in autoconf
2020-07-27 13:02:47 +02:00
Wouter Wijngaards and GitHub
5db73977d8
Merge pull request #270 from cgzones/munin
...
munin plugin: always exit 0 in autoconf
2020-07-27 13:02:30 +02:00
Ralph Dolmans
04ab1c9c87
Merge branch 'master' of github.com:NLnetLabs/unbound
2020-07-27 12:14:41 +02:00
Ralph Dolmans
4bd97633a1
- Merge PR #269 , Fix python module len() implementations, by Torbjörn Lönnemark
2020-07-27 12:14:08 +02:00
Ralph Dolmans and GitHub
5184c91e9c
Merge pull request #269 from tobbez/python-fix-len
...
Fix python module len() implementations
2020-07-27 12:12:31 +02:00
W.C.A. Wijngaards
d201a11a67
- branch now named 1.11.1. 1.11.0rc1 became the 1.11.0 release.
2020-07-27 12:10:28 +02:00
Ralph Dolmans
2fe398f4bf
EDNS client tags - insert configured tags into tree
2020-07-24 16:00:13 +02:00
Ralph Dolmans
64806a0d14
Add edns-client-tag configuration option
2020-07-24 14:52:04 +02:00
Ralph Dolmans
16029281a8
Start of EDNS client tags implementation.
2020-07-23 17:17:44 +02:00
Christian Göttsche
c6ff5558de
munin plugin: always exit 0 in autoconf
...
The autoconf operation should always exit 0, also in case the answer in "no",
see https://guide.munin-monitoring.org/en/latest/develop/plugins/plugin-concise.html#autoconf
2020-07-23 16:04:26 +02:00
W.C.A. Wijngaards
0d77f9af6c
stream reuse, test with connection drops.
2020-07-23 10:29:36 +02:00
W.C.A. Wijngaards
fc55a4b8ce
stream reuse, test with a list of outstanding queries to the upstream server.
2020-07-23 10:18:17 +02:00
W.C.A. Wijngaards
72f8871e61
stream reuse, test timeout and simultaneous queries.
2020-07-22 15:40:17 +02:00
W.C.A. Wijngaards
f1c4a4d515
stream reuse, fix cleanup with streams in the connection table.
2020-07-22 15:20:58 +02:00
W.C.A. Wijngaards
2d20edb39f
stream reuse, free up elements that are connected in outside network delete.
2020-07-22 10:30:50 +02:00
W.C.A. Wijngaards
8b43b94b22
Merge branch 'master' into stream-reuse
2020-07-22 09:53:57 +02:00
W.C.A. Wijngaards
63b92ea1e8
Merge branch 'master' into infra-keep-probing
2020-07-22 09:53:30 +02:00
Torbjörn Lönnemark
9af8080f2b
Fix python module len() implementations
...
They were all missing the 'self.' prefix when accessing the 'obj'
instance variable, causing the following exception when attempting to
call len() on (for example) a ReplyInfo_RRSet:
File "/usr/lib/python3.7/site-packages/unboundmodule.py", line 377, in __len__
def __len__(self): return obj.rrset_count
NameError: name 'obj' is not defined
2020-07-22 03:13:00 +02:00
and0x000
dd0b55250b
draft-ietf-dnsop-serve-stale-10 has become RFC 8767 on March 2020
2020-07-20 18:10:21 +02:00
W.C.A. Wijngaards
753487ff7f
- branch now named 1.11.0 and 1.11.0rc1 tag.
2020-07-20 13:02:09 +02:00
W.C.A. Wijngaards
c8ff4f55e7
- Fix contrib/fastrpz.patch to apply cleanly. It fixes for changes
...
due to added libdynmod, but it does not compile, it conflicts with
new rpz code.
2020-07-20 11:05:28 +02:00
W.C.A. Wijngaards
6a13b51bed
- Fix contrib/fastrpz.patch to apply cleanly.
2020-07-20 10:55:13 +02:00
W.C.A. Wijngaards
477bb1a6ff
- Fix contrib/fastrpz.patch to apply cleanly.
2020-07-20 10:53:30 +02:00
W.C.A. Wijngaards
53ecdfc0b5
- Fix streamtcp to print packet data to stdout. This makes the
...
stdout and stderr not mix together lines, when parsing its output.
2020-07-20 10:34:40 +02:00
W.C.A. Wijngaards
b7b5952c3a
- Fix lock dependency cycle in rpz zone config setup.
2020-07-17 17:15:55 +02:00
W.C.A. Wijngaards
7d4445c03d
- Fix libnettle compile for session ticket key callback function
...
changes.
2020-07-17 16:53:52 +02:00
Ralph Dolmans
3a21617c62
Merge branch 'jcourreges-align-cmsg-buffers'
2020-07-17 13:07:49 +02:00
Ralph Dolmans
14a0433470
- Merge PR #234 - Ensure proper alignment of cmsg buffers by Jérémie
...
Courrèges-Anglas.
- Fix PR #234 log_assert sizeof to use union buffer.
2020-07-17 13:07:03 +02:00
Ralph Dolmans
7d364f1111
Merge branch 'align-cmsg-buffers' of https://github.com/jcourreges/unbound into jcourreges-align-cmsg-buffers
2020-07-17 13:01:44 +02:00
W.C.A. Wijngaards
3d1383bed3
Merge branch 'master' into infra-keep-probing
2020-07-16 16:00:06 +02:00
W.C.A. Wijngaards
a9c8da5cfb
Merge branch 'master' into stream-reuse
2020-07-16 15:58:20 +02:00
W.C.A. Wijngaards
2902ee133b
- Fix unused variable warning for clang analyzer.
2020-07-16 15:41:25 +02:00
W.C.A. Wijngaards
84adade86c
- Fix check conf test for referencing installation paths.
2020-07-16 14:47:15 +02:00
W.C.A. Wijngaards
ff5d0ce327
Merge branch 'master' into stream-reuse
2020-07-16 14:13:24 +02:00
George Thessalonikefs
8876751ed1
- Changelog entry for PR #265 ; include-toplevel.
2020-07-16 13:01:28 +02:00
gthess and GitHub
7b0c2c5e5d
Merge pull request #265 from NLnetLabs/include-toplevel
...
Introduce include-toplevel configuration option; closes #161 .
2020-07-16 12:57:42 +02:00
George Thessalonikefs
833ab1aab3
Merge branch 'master' into include-toplevel
2020-07-16 12:53:29 +02:00
Ralph Dolmans
b953cd9aa0
Change unbound-dnstap-socket void cast for unused parameter
2020-07-16 12:31:30 +02:00
Ralph Dolmans
d75f58d659
- Add changelog entry for bidirectional frame streams support.
2020-07-16 11:45:10 +02:00
Ralph Dolmans and GitHub
fc86347578
Merge pull request #264 from NLnetLabs/fstrm-bidi
...
Bidirectional frame streams support
2020-07-16 11:42:29 +02:00
Ralph Dolmans
6ca79ff727
correct byte count in comment
2020-07-16 10:54:18 +02:00
Ralph Dolmans
889b979a0e
remove unused define
2020-07-15 23:01:13 +02:00
Ubuntu
ec6fde611c
Cleaned up adjustment in message encoding, fixes spurious negative TTLs
2020-07-15 15:36:06 +00:00
Ralph Dolmans
7189ba715d
dnstap log message typo fix
2020-07-15 17:33:48 +02:00
Ralph Dolmans
b280527e3e
Log dnstap connection close due to unknown content type.
2020-07-15 17:31:18 +02:00
Ralph Dolmans
e7cc57ceae
- Ignore unknown frame streams control fields.
2020-07-15 17:16:14 +02:00
Ubuntu
b5b79e3a36
Add feature to serve original TTLs rather than decrementing ones
2020-07-15 15:15:45 +00:00
Ralph Dolmans
db3ac2335c
- Handle SSL_ERROR_WANT_WRITE on SSL_read for negotiation
...
- Close connection when receiving overly large frame
2020-07-15 15:49:42 +02:00
George Thessalonikefs
7f802b07ef
Merge branch 'master' into include-toplevel
2020-07-15 15:17:48 +02:00
Ralph Dolmans
c00a5d0723
Add maximum to received frame streams frames.
2020-07-14 14:29:09 +02:00
Ralph Dolmans
d4bcfbe996
Merge branch 'master' into fstrm-bidi
2020-07-13 17:30:36 +02:00
Ralph Dolmans
9cebc13150
- Add option to send DNSTAP messages over bidirectional frame streams
2020-07-13 17:28:50 +02:00
W.C.A. Wijngaards
a7776a15e5
stream reuse, make reuse possible straight away after first query to address.
2020-07-13 16:11:52 +02:00
W.C.A. Wijngaards
b71695e8bb
stream reuse, update lru when reuse elements are used with lru touch routine.
2020-07-13 15:59:23 +02:00
W.C.A. Wijngaards
766005a356
stream reuse, in callbacks, removed whitespace.
2020-07-13 15:45:16 +02:00
W.C.A. Wijngaards
19a35fb839
stream reuse, write and read again if more data can go over the channel,
...
this amortizes the event loop mechanism for busy channels, for performance.
2020-07-13 15:16:59 +02:00
W.C.A. Wijngaards
9914b7216b
stream reuse, remove debug output
2020-07-10 16:06:17 +02:00
W.C.A. Wijngaards
7a69ff4182
fix that ssl_handle_it() uses tcp_is_reading in tcp_write_and_read mode.
...
fix that netevent tcp_write_and_read mode does not close due to error from
assert that not both write and read happen at the same time.
2020-07-10 15:37:30 +02:00
W.C.A. Wijngaards
e431676457
stream reuse, fix bad id in reply errors.
2020-07-10 15:13:16 +02:00
W.C.A. Wijngaards
46a364be8e
stream reuse, neater code for tree by id and use callback routine for timer.
2020-07-09 16:50:57 +02:00
W.C.A. Wijngaards
ad6fa1eb45
stream reuse, comment improved
2020-07-09 16:37:40 +02:00
W.C.A. Wijngaards
d87774c3c6
stream reuse, fix decommission to first remove from tree and then do the
...
callbacks and then delete the element.
2020-07-09 16:34:48 +02:00
W.C.A. Wijngaards
79f315f480
stream reuse, fix double callback and double delete, items are in the tree.
2020-07-09 15:47:24 +02:00
W.C.A. Wijngaards
8201d1422b
stream reuse, fix to put id number in waiting tcp packet.
2020-07-09 15:35:32 +02:00
W.C.A. Wijngaards
b1ea8273f0
stream reuse, fix to not keep stream when it is in error and closed.
...
stream reuse, fix to stop listening on the fd before rw mode change.
stream reuse, fix waiting tcp id value stored before tree insert.
stream reuse, fix to not double delete pend.query.
2020-07-09 14:29:56 +02:00
W.C.A. Wijngaards
4e44e8663d
stream reuse, fix to return key pointer from reuse_tcp_by_id_find.
2020-07-09 14:06:21 +02:00
W.C.A. Wijngaards
9b583d2331
stream reuse, the id for pending stored in waiting_tcp structure, because
...
there can be multiple messages waiting for reply.
2020-07-09 13:58:44 +02:00
W.C.A. Wijngaards
734a248284
stream reuse, check incoming messages from rbtree in outnet_tcp_cb when
...
read a reply, and call that callback and remove that entry.
2020-07-09 13:49:36 +02:00
W.C.A. Wijngaards
e95edd3d36
debug prints in verbose output.
2020-07-09 13:41:50 +02:00
W.C.A. Wijngaards
ccc9e0749c
stream reuse toggle write and read to only read mode when write is done.
...
tcp callback from stream read without entry linked.
2020-07-09 13:41:03 +02:00
W.C.A. Wijngaards
d89a45d1e1
in outnet_tcptimer: pick up callbacks and clean the struct pending for
...
use again in tcp_free list; then perform the callbacks in a cleaner state
for reentry into the outside network code. Delete callbacks afterwards.
2020-07-09 10:28:47 +02:00
W.C.A. Wijngaards
80f21f48c5
Merge branch 'master' into stream-reuse
2020-07-09 08:55:19 +02:00
W.C.A. Wijngaards
abe7a01bf5
Merge branch 'master' into infra-keep-probing
2020-07-09 08:55:01 +02:00
W.C.A. Wijngaards
e99b5046eb
- Fix to use SSL_CTX_set_tlsext_ticket_key_evp_cb in OpenSSL
...
3.0.0-alpha4.
- Longer keys for the test set, this avoids weak crypto errors.
2020-07-08 16:22:39 +02:00
W.C.A. Wijngaards
ff50993f36
- Fix add missing DSA header, for compilation without deprecated
...
OpenSSL APIs.
2020-07-08 11:43:50 +02:00
W.C.A. Wijngaards
d84529cc0e
- Review fixes for checkconf #259 change.
2020-07-07 10:18:56 +02:00
W.C.A. Wijngaards
4d009e19fc
- Fix #259 : Fix unbound-checkconf does not check view existence.
...
unbound-checkconf checks access-control-view, access-control-tags,
access-control-tag-actions and access-control-tag-datas.
- Fix offset of error printout for access-control-tag-datas.
2020-07-07 09:00:04 +02:00
W.C.A. Wijngaards
233c14a476
- run_vm cleanup better and removes trailing slash on single argument.
2020-07-06 11:33:07 +02:00
W.C.A. Wijngaards
06d33f61c1
- Fix tcp req info drop due to size call into mesh accounting
...
removal of mesh state during mesh send reply.
2020-06-30 17:22:43 +02:00
W.C.A. Wijngaards
52774b6b20
- Review fix for number of detached states due to use of variable
...
after end of loop.
2020-06-30 16:35:48 +02:00
W.C.A. Wijngaards
84b0207956
- Fix for mesh accounting when rpz decides to drop a reply with a
...
tcp stream waiting for it.
2020-06-30 16:20:09 +02:00
W.C.A. Wijngaards
6f0c2956ac
- Also move reply list clean for mesh callbacks to the scrip callback
...
can see the reply_info.
- Fix for mesh accounting if the reply list already empty to begin
with.
2020-06-30 15:48:11 +02:00
W.C.A. Wijngaards
8ac054733b
- Move reply list clean for serve expired mesh callback to after
...
the reply is sent, so that script callbacks have reply_info.
2020-06-30 13:41:26 +02:00
W.C.A. Wijngaards
cfe009a31c
tcp read and write handling of write events in netevent for tcp and ssl.
2020-06-26 16:05:15 +02:00
W.C.A. Wijngaards
64c8d18814
in tcp write callback routine dont reset read byte count if write and read.
...
in tcp write callback and write and read and write is done perform callback.
tcp connection is selected to not toggle readwrite and give closed callback.
2020-06-26 10:54:13 +02:00
W.C.A. Wijngaards
d033ce6c23
tcp callback function refactor, split read and timeout event setup, leave
...
unused queries that are already sent to track their reply on the query
pipeline, when serviced query is deleted deal with the write wait list,
2020-06-25 17:23:46 +02:00
W.C.A. Wijngaards
dfb6d32189
outnet_tcp_cb: add assertion and return when write packets done is handled.
2020-06-25 16:29:37 +02:00
W.C.A. Wijngaards
cbcbd5fa07
pending_tcp_query: cleaner comments.
2020-06-25 16:22:43 +02:00
W.C.A. Wijngaards
c32c43f9f2
for tcp use_free_buffer write straight away on reuse connection, if possible
2020-06-25 16:11:46 +02:00
W.C.A. Wijngaards
34c063701e
in outside_network.c: also log messages that end up on the waiting list.
...
with dnstap.
for tcp use_free_buffer reuse existing entry if second wait entry on the
same addr as the other waiting.
2020-06-25 16:05:25 +02:00
W.C.A. Wijngaards
39a50f30a3
tcp callback handle timeout event for read and reuse keepalive.
2020-06-25 14:26:29 +02:00
W.C.A. Wijngaards
5f5cdd3be1
comm point write and read structure members.
2020-06-25 13:06:21 +02:00
Ralph Dolmans
70b270925d
- Add http-response-buffer-size test
2020-06-24 16:31:51 +02:00
W.C.A. Wijngaards
4aaccef8f2
fix testcode for added function whitelist item.
2020-06-24 16:31:10 +02:00
W.C.A. Wijngaards
75da272afe
reuse tcp id_cmp function. clear list and tree after delete. clear when
...
decommisioned. callbacks when closed for lru space, and when closed because
not kept open.
2020-06-24 16:28:42 +02:00
Ralph Dolmans
d9cdb924ad
Add DoH endpoint configuration test
2020-06-24 15:34:50 +02:00
Ralph Dolmans
941559c2b7
dohclient memory leak fix
2020-06-24 15:09:05 +02:00
Ralph Dolmans
2e66809c65
- Add dohclient, for use in tests
2020-06-24 14:59:56 +02:00
Ralph Dolmans
740da89578
Merge branch 'master' into doh
2020-06-24 14:18:47 +02:00
Ralph Dolmans
0fbfce4c99
- Add DoH tests
2020-06-24 14:04:34 +02:00
W.C.A. Wijngaards
dd096ccd22
Merge branch 'master' into stream-reuse
2020-06-24 13:39:13 +02:00
W.C.A. Wijngaards
445a066cbe
Merge branch 'master' into infra-keep-probing
2020-06-24 13:38:56 +02:00
W.C.A. Wijngaards
2a90e8fa1e
- doxygen file comments for dynlibmodule.
2020-06-24 13:37:43 +02:00
W.C.A. Wijngaards
be1182c3db
- iana portlist updated.
2020-06-24 13:33:47 +02:00
W.C.A. Wijngaards
4fe2122890
Merge branch 'master' into infra-keep-probing
...
Remade yacc and lex files.
2020-06-24 13:21:14 +02:00
W.C.A. Wijngaards
658e5f1553
Merge branch 'master' into stream-reuse
2020-06-24 12:57:50 +02:00
W.C.A. Wijngaards
04d805b0eb
reuse tcp lookup with correct address as key.
2020-06-24 12:57:15 +02:00
W.C.A. Wijngaards
8ca34be36a
fix reuse tcp crash, use addr in reuse struct, free leaked tcp entries.
2020-06-24 10:09:49 +02:00
W.C.A. Wijngaards
6f9310173d
Fix grammar.
2020-06-23 17:32:33 +02:00
W.C.A. Wijngaards
c809bb9ece
tcp reuse timeout event cleanup and callbacks.
2020-06-23 15:29:40 +02:00
W.C.A. Wijngaards
d96e718f80
fix crash on cleanup.
2020-06-19 18:04:12 +02:00
W.C.A. Wijngaards
0e0c57734a
fix uninit after malloc for on_tcp_waiting_list.
2020-06-19 17:40:45 +02:00
W.C.A. Wijngaards
4b6e41e3de
fix documentation for waiting_tcp pkt NULL setting.
2020-06-19 17:37:23 +02:00
W.C.A. Wijngaards
a1babfff1e
add bool if on tcp waiting list, so that pkt can be stored.
...
remove pkt args from outnet_tcp_take_into_use, use w.pkt.
2020-06-19 17:31:36 +02:00
W.C.A. Wijngaards
5203954068
- Fix display of event loop method with libev.
2020-06-17 14:32:57 +02:00
W.C.A. Wijngaards
6e0756e819
- Fix default explanation in man page for qname-minimisation-strict.
2020-06-17 08:20:52 +02:00
W.C.A. Wijngaards
a695ba447c
set timeout to wait for reuse
...
add comm_point indicator for write events for reuse stream writes.
2020-06-09 16:15:03 +02:00
W.C.A. Wijngaards
d8b7b5ee27
fix to set pending pointer in reuse tcp structure
...
fix debug output of reuse tcp and test leak of process
2020-06-09 09:14:01 +02:00
W.C.A. Wijngaards
c053513cbd
- Mention tls name possible when tls is enabled for stub-addr in the
...
man page.
2020-06-08 08:35:10 +02:00
W.C.A. Wijngaards
fd723aed27
tcp connection is stored and picked up for reuse
...
fix that comm_point_start_listening does not close the same fd that is started.
2020-06-03 17:24:26 +02:00
W.C.A. Wijngaards
7cc6a89e21
fix spare id random selection.
2020-06-03 14:23:06 +02:00
W.C.A. Wijngaards
150e1b0491
spare id random selection better.
2020-06-03 14:03:34 +02:00
W.C.A. Wijngaards
0f3c638193
find reuse find tcp loop code for multiple connections to the same destination
...
find spare id value in reused connection.
2020-06-03 12:10:31 +02:00
W.C.A. Wijngaards
7b46067029
add test for tcp reuse
2020-06-03 10:01:51 +02:00
W.C.A. Wijngaards
d9afcae346
add debug printout
2020-06-03 09:38:02 +02:00
George Thessalonikefs
062f7b7ba2
- Changelog entry for PR #241 .
2020-05-27 18:25:29 +02:00
gthess and GitHub
90d556d650
Merge pull request #241 from edmonds/edmonds/libunbound.pc/do-not-use-requires
...
contrib/libunbound.pc.in: Do not use "Requires:"
2020-05-27 18:21:05 +02:00
W.C.A. Wijngaards
d1904bd509
tree key addr
2020-05-26 16:27:45 +02:00
W.C.A. Wijngaards
aad363ddd1
rename next,prev to lru_next,lru_prev for clarity.
2020-05-26 13:41:07 +02:00
W.C.A. Wijngaards
1a6cc6e5dc
fixup lru list presence boolean.
2020-05-26 08:46:36 +02:00
Robert Edmonds
c93b4b3158
contrib/libunbound.pc.in: Do not use "Requires:"
...
This commit updates contrib/libunbound.pc.in to remove the "Requires:"
directive and move its contents to "Requires.private:".
The pkg-config manpage documents the Requires/Libs fields as follows:
Requires:
This is a comma-separated list of packages that are required by
your package. Flags from dependent packages will be merged in to
the flags reported for your package. Optionally, you can specify
the version of the required package (using the operators =, <,
>, >=, <=); specifying a version allows pkg-config to perform
extra sanity checks. You may only mention the same package one
time on the Requires: line. If the version of a package is un‐
specified, any version will be used with no checking.
Requires.private:
A list of packages required by this package. The difference from
Requires is that the packages listed under Requires.private are
not taken into account when a flag list is computed for dynami‐
cally linked executable (i.e., when --static was not specified).
In the situation where each .pc file corresponds to a library,
Requires.private shall be used exclusively to specify the depen‐
dencies between the libraries.
Libs: This line should give the link flags specific to your package.
Don't add any flags for required packages; pkg-config will add
those automatically.
Libs.private:
This line should list any private libraries in use. Private li‐
braries are libraries which are not exposed through your li‐
brary, but are needed in the case of static linking. This dif‐
fers from Requires.private in that it references libraries that
do not have package files installed.
In other words:
1) "Requires:" should specify the name of .pc packages that are required
to be installed to compile and dynamically link against libunbound. This
corresponds to needing the -dev (or -devel) package containing the .pc
file to be installed on the system. Since libunbound's header files
actually do not have any includes on any other library's headers, the
"Requires:" directive should be empty.
2) "Requires.private:" specifies the name of .pc packages that
correspond to libraries that are required to be installed to statically
link against libunbound. E.g., if libunbound.a has undefined symbols
event_* that are in libevent.a, statically linking against libunbound.a
requires statically linking libevent.a, and because libevent has a .pc
file, this means "libevent" should appear in libunbound.pc's
"Requires.private:" directive.
3) "Libs:" specifies the link flags needed to link against libunbound,
only, not including any dependencies.
4) "Libs.private:" specifies the link flags needed to statically link
against libraries that libunbound depends on that do not have .pc files.
I think it's possible for unbound's build system to actually declare
link flags under "Libs.private:" for some libraries that do have .pc
files (e.g. libcrypto/-lcrypto, libssl/-lssl, for OpenSSL) but in
practice this appears to be harmless.
Given #1 above that libunbound does not have any header dependencies
against any other packages it does not appear that "Requires:" is needed
at all. See https://bugs.debian.org/958331 for an example of a bug
report that this causes. We should not need to install the nettle-dev
package only for building binaries that compile against the libunbound
headers and link against the libunbound library.
2020-05-25 17:58:37 -04:00
George Thessalonikefs
21cd836e82
- Update contrib/aaaa-filter-iterator.patch for the recent
...
generate_sub_request() change and to apply cleanly.
2020-05-25 11:49:48 +02:00
George Thessalonikefs
8af3d73b9b
- Fix for integer overflow when printing RDF_TYPE_TIME.
2020-05-21 22:48:57 +02:00
W.C.A. Wijngaards
a83f5d7260
Merge branch 'master' into stream-reuse
2020-05-20 15:39:50 +02:00
W.C.A. Wijngaards
f37242566b
- For PR #93 : unit test for dynlib module.
2020-05-19 15:49:08 +02:00
W.C.A. Wijngaards
711c0548f0
- For PR #93 : windows compile warnings removal
...
- windows compile warnings removal for ip dscp option code.
2020-05-19 14:36:57 +02:00
W.C.A. Wijngaards
a1d4e151ee
- Release 1.10.1 is 1.10.0 with fixes, code repository continues,
...
including those fixes, towards the next release. Configure has
version 1.10.2 version number in it.
2020-05-19 10:29:37 +02:00
W.C.A. Wijngaards
ba0f382eee
- CVE-2020-12662 Unbound can be tricked into amplifying an incoming
...
query into a large number of queries directed to a target.
- CVE-2020-12663 Malformed answers from upstream name servers can be
used to make Unbound unresponsive.
2020-05-19 10:27:27 +02:00
W.C.A. Wijngaards
4ccac696ca
- For PR #93 : fix link of other executables for dynlibmod dependency.
2020-05-18 17:26:01 +02:00
W.C.A. Wijngaards
a238f35d7d
- For PR #93 : man page spelling reference fix.
2020-05-18 10:22:00 +02:00
W.C.A. Wijngaards
a77ebed550
- For PR #93 : checkconf allows python dynlib in module-config, for
...
a couple cases.
2020-05-18 10:18:28 +02:00
W.C.A. Wijngaards
84e95d6c68
- For PR #93 : checkconf allow multiple dynlib in module-config, for
...
a couple cases.
2020-05-18 10:16:40 +02:00
W.C.A. Wijngaards
01db6c365c
- For PR #93 : dynlibmod can handle reloads and deinit and inits again,
...
with dlclose and dlopen of the library again. Also for multiple
modules. Fix memory leak by not closing dlopened content. Fix
to allow one dynlibmod instance by unbound-checkconf.
2020-05-18 10:11:16 +02:00
W.C.A. Wijngaards
510e79a053
- For PR #93 : Fix warnings for dynlibmodule.
2020-05-15 16:42:45 +02:00
W.C.A. Wijngaards
2c8ebe6206
- Fixed conflicts for PR #93 and make configure, yacc, lex.
2020-05-15 14:55:36 +02:00
W.C.A. Wijngaards
80308880d2
Merge branch 'PMunch-master'
2020-05-15 14:53:39 +02:00
W.C.A. Wijngaards
edcef18274
Merge branch 'master' of git://github.com/PMunch/unbound into PMunch-master
...
Fixed conflicts in Makefile.in and configparser.y
2020-05-15 14:52:53 +02:00
Ralph Dolmans
99fd6cf711
- Cache ECS answers with longest scope of CNAME chain.
2020-05-15 13:13:49 +02:00
Ralph Dolmans
605e6c9bda
add dohclient to makefile
2020-05-15 09:52:15 +02:00
Ralph Dolmans
4fc7b434d7
- Document new DoH configuration options.
2020-05-13 13:05:40 +02:00
Ralph Dolmans
8fc2320b5c
- Add mem.http.query_buffer and mem.http.response_buffer stats
...
- Add configurable limits for http-query-buffer-size and
http-response-buffer-size
- Make http endpoint, max_streams, and TCP_NODELAY for HTTP sockets
configurable.
2020-05-12 18:12:19 +02:00
Christopher Zimmermann
ad51795314
Don't try to run daemon_privileged on reload.
2020-05-10 22:30:25 +02:00
Christopher Zimmermann
7d76e84953
Port ipset to BSD pf tables
2020-05-10 22:30:25 +02:00
Christopher Zimmermann
c96e4ca121
allow privileged initialisation of modules
2020-05-10 22:30:25 +02:00
Jeremie Courreges-Anglas
8175161059
Ensure proper alignment of cmsg buffers
...
The cmsg macros expect a control message buffer to be aligned like
a struct cmsghdr. The current layout around those stack-allocated
buffers probably provides the required alignment (usually 4 bytes).
Use a union to enforce proper alignment, in case future changes modify
the stack layout.
Spotted when chasing an unrelated bug with Otto Moerbeek (@omoerbeek).
2020-05-10 17:23:33 +02:00
Ralph Dolmans
6cc761f6b2
- Add base64 decode unit test
2020-05-08 14:19:44 +02:00
Ralph Dolmans
723980fe77
- Add query.num.https counter
2020-05-08 12:14:17 +02:00
Ralph Dolmans
e7601870cc
Merge branch 'master' into doh
2020-05-07 17:12:26 +02:00
Ralph Dolmans
8dae5d9f81
- Add DNS-over-HTTPS support
2020-05-07 16:36:26 +02:00
George Thessalonikefs
1bd4dbf302
- New include directive 'include-toplevel:'. It closes the previous
...
clause (if any) and requires that all included files explicitly
start a clause.
2020-04-29 11:23:12 +02:00
George Thessalonikefs
a269db3828
- Explicitly use 'rrset-roundrobin: no' for test cases.
2020-04-22 19:27:20 +02:00
W.C.A. Wijngaards
055f5e68a3
Add infra-keep-probing: yes option. Hosts that are down are probed more
...
frequently.
2020-04-22 16:29:06 +02:00
George Thessalonikefs
584c2cf804
- Fix tests for new rrset-roundrobin default.
2020-04-21 22:02:56 +02:00
W.C.A. Wijngaards
6320776b25
Changelog note for PR #225
...
- Merge #225 from akhait: KSK-2010 has been revoked. It removes the
KSK-2010 from the default list in unbound-anchor, now that the
revocation period is over. KSK-2017 is the only trust anchor in
the shipped default now.
2020-04-21 15:11:02 +02:00
Wouter Wijngaards and GitHub
d8bd6e2281
Merge pull request #225 from akhait/master
...
KSK-2010 has been revoked
2020-04-21 15:09:29 +02:00
Anna Khaitovich
201c158377
KSK-2010 has been revoked
2020-04-21 13:40:24 +02:00
George Thessalonikefs
226d66ca92
- Change default value for 'rrset-roundrobin' to yes.
2020-04-21 12:58:48 +02:00
W.C.A. Wijngaards
cee3098e87
- Remove unneeded was_mesh_reply check.
2020-04-20 15:35:45 +02:00
W.C.A. Wijngaards
00323b71d7
- Fix for count of reply states in the mesh.
2020-04-20 14:24:05 +02:00
W.C.A. Wijngaards
5151190dbc
Fix that it is --enable-rpath, for #222 .
2020-04-20 10:08:08 +02:00
W.C.A. Wijngaards
52ebdd85da
- Fix #222 : --with-rpath, fails to rpath python lib.
2020-04-20 10:04:34 +02:00
George Thessalonikefs
0c10453546
- Document SNI support in unbound-anchor.8.in.
2020-04-17 11:47:36 +02:00
George Thessalonikefs
a4dcd5eb91
- Update Changelog for PR #221 .
2020-04-17 11:41:47 +02:00
gthess and GitHub
334498d9b9
Merge pull request #221 from NLnetLabs/more-SNI
...
More SNI support on TLS
2020-04-17 11:37:47 +02:00
George Thessalonikefs
d2055b83d8
- Enable SNI by default in unbound-anchor.
2020-04-17 11:33:12 +02:00
George Thessalonikefs
1db2ab678d
Revert "- Remove SNI support from unbound-anchor; TLS is used only for"
...
This reverts commit 9d197eb110
2020-04-17 11:27:39 +02:00
George Thessalonikefs
9d197eb110
- Remove SNI support from unbound-anchor; TLS is used only for
...
encryption and not validation.
2020-04-17 10:42:58 +02:00
George Thessalonikefs
e430e95d30
- Add SNI support on more TLS connections ( fixes #193 ).
...
- Add SNI support to unbound-anchor.
2020-04-16 14:39:05 +02:00
George Thessalonikefs
e18ab07c62
- Add doxygen documentation for DSCP.
2020-04-16 13:58:35 +02:00
W.C.A. Wijngaards
963cfb58be
- Fix for posix shell syntax for trap in run_msg.sh test script.
2020-04-16 13:17:33 +02:00
W.C.A. Wijngaards
3cd288a9f2
- Fix for posix shell syntax for trap in nsd-control-setup.
2020-04-16 13:14:50 +02:00
W.C.A. Wijngaards
2193d06af6
Merge branch 'master' of github.com:NLnetLabs/unbound
2020-04-16 11:48:53 +02:00
W.C.A. Wijngaards
eed157d36e
- Fix help return code in unbound-control-setup script.
2020-04-16 11:47:27 +02:00
George Thessalonikefs
8a87fc6ae7
- Fix #220 : auth-zone section in config may lead to segfault.
2020-04-15 17:57:02 +02:00
Willem Toorop
2c8a91c2f9
pad-queries default yes
2020-04-14 08:52:51 +02:00
Willem Toorop
60e53d36b7
Merge branch 'master' into features/padding
2020-04-14 08:28:41 +02:00
W.C.A. Wijngaards
c7f1d2d889
- Merge PR #214 from gearnode: unbound-control-setup recreate
...
certificates. With the -r option the certificates are created
again, without it, only the files that do not exist are created.
2020-04-07 13:49:25 +02:00
Wouter Wijngaards and GitHub
c9bae13502
Merge pull request #214 from gearnode/idempotent-nsd-unbound-setup
...
unbound-control-setup recreate certificates
2020-04-07 13:48:54 +02:00
Gearnode
22ab255231
fix unbound-control-setup is not idempotent
2020-04-07 13:19:36 +02:00
Ralph Dolmans
03a37d1ff6
- Keep track of number of timeouts. Use this counter to determine if capsforid
...
fallback should be started.
2020-04-06 18:00:06 +02:00
George Thessalonikefs
33a2613a49
- More documentation for redis-expire-records option.
2020-04-06 13:46:45 +02:00
Willem Toorop
551e476a17
Merge branch 'master' into features/padding
2020-04-02 18:54:18 +02:00
Willem Toorop
4f78b37c61
Down- and upstream padding a la RFC7830 & RFC8467
2020-04-02 18:34:03 +02:00
George Thessalonikefs
a601fd6d3c
Merge branch 'Talkabout-redis-expire-records'
2020-04-01 17:24:07 +02:00
George Thessalonikefs
557a309f9d
- Changes for PR #206 (formatting and remade lex and yacc output).
2020-04-01 17:14:58 +02:00
George Thessalonikefs
20aa782ce5
Merge branch 'master' of https://github.com/Talkabout/unbound into Talkabout-redis-expire-records
2020-04-01 16:04:48 +02:00
Talkabout
e7b45298c1
changed init logic of redis backend as per review request
2020-04-01 13:32:13 +02:00
Talkabout
c25eb2c4c8
implemented review feedback
...
renamed option from 'redis-set-ttl' to 'redis-expire-records'
2020-03-31 23:10:45 +02:00
Talkabout
b130a8b459
added option 'redis-set-ttl' to define whether ttl should be added to redis records
...
added check for redis command 'setex' when initializing redis connection
updated documentation
minor improvements to previous changes
2020-03-31 12:47:13 +02:00
W.C.A. Wijngaards
94e92b197a
- Merge PR #208 : Fix uncached CLIENT_RESPONSE'es on stateful
...
transports.
2020-03-30 14:55:00 +02:00
Wouter Wijngaards and GitHub
5cb93eb7e1
Merge pull request #208 from NLnetLabs/bugfix/dnstap-client-response-on-stateful-transports
...
Fix uncached CLIENT_RESPONSE'es on stateful transports
2020-03-30 14:54:31 +02:00
Willem Toorop
af0bd5b0b4
Send tcp_req_info->spool_buffer as dnstap CLIENT_RESPONSE
...
When tcp_req_info exists. This fixes that dnstap CLIENT_RESPONSE messages did not contain the response message when answering on statful transport for uncached responses.
2020-03-30 12:19:17 +02:00
Willem Toorop
9d9eee8402
Fix uncached CLIENT_RESPONSE'es on stateful transports
...
Because repinfo->c->buffer does not contain the response when the it did not came from cache.
Only after tcp_req_info_send_reply is called, is the response on the buffer which is used to fill the dnstap protobuf's.
2020-03-30 11:39:07 +02:00
W.C.A. Wijngaards
65e7be5190
nroff fix for dash.
2020-03-30 10:29:15 +02:00
W.C.A. Wijngaards
e9e2871f18
- Merge PR #207 : Clarify if-automatic listens on 0.0.0.0 and ::
2020-03-30 10:27:44 +02:00
Wouter Wijngaards and GitHub
4e5c23d969
Merge pull request #207 from NLnetLabs/maintenance/if-transparent-doc
...
Clarify if-automatic listens on 0.0.0.0 and ::
2020-03-30 10:27:14 +02:00
Willem Toorop
d8dcee4c71
Clarify if-automatic listens on 0.0.0.0 and ::
2020-03-30 10:07:25 +02:00
Talkabout
fa0623a9b5
honor 'server_expired_ttl' in redis
2020-03-29 23:53:01 +02:00
Talkabout
f66a519dff
Merge branch 'master' of https://github.com/Talkabout/unbound
2020-03-29 15:23:13 +02:00
Talkabout
1ec02f7229
added logic for redis to honor ttl when serve_expired is not enabled
2020-03-29 15:22:10 +02:00
W.C.A. Wijngaards
8dc35cfce3
Changelog note for PR #203 .
...
- Merge PR #203 from noloader: Update README-Travis.md with current
procedures.
2020-03-27 16:07:03 +01:00
Wouter Wijngaards and GitHub
2ace7f0c58
Merge pull request #203 from noloader/master
...
Update README-Travis.md with current procedures
2020-03-27 16:06:31 +01:00
Ralph Dolmans
51593d47ac
Make unbound-control error returned on missing domain name more user friendly.
2020-03-27 11:27:12 +01:00
Jeffrey Walton
2902e4ab5f
Update README-Travis.md with current procedures
2020-03-26 19:57:58 -04:00
Ralph Dolmans
e4eb76a5f3
- Fix RPZ concurrency issue when using auth_zone_reload.
2020-03-26 19:11:57 +01:00
George Thessalonikefs
40ed82f522
Changelog entry for #201
...
- Merge PR #201 from noloader: Fix OpenSSL cross-compaile warnings.
2020-03-25 14:10:27 +01:00
George Thessalonikefs
ce87858c78
Merge branch 'noloader-android'
2020-03-25 13:59:51 +01:00
George Thessalonikefs
042ba77c63
- Keep 'arm64-v8a' support for Travis android builds.
2020-03-25 13:58:57 +01:00
Jeffrey Walton
c228e0ac16
Fix OpenSSL corss-compaile warning
...
warning: '__ANDROID_API__' macro redefined
2020-03-25 05:00:35 -04:00
W.C.A. Wijngaards
2889be5e90
- Travis fix for ios by omitting tools from install.
2020-03-24 10:23:00 +01:00
W.C.A. Wijngaards
7459b1dceb
- Fixes for #200 : example.conf note and set_value for ip-dscp.
2020-03-24 09:36:27 +01:00
W.C.A. Wijngaards
bcdc13514a
- Fixes on #200 . and rerun autoconf.
2020-03-24 09:32:04 +01:00
W.C.A. Wijngaards
311f163aed
Changelog for #200 and bison, flex regenerate.
...
- Merge PR #200 from yarikk: add ip-dscp option to specify the DSCP
tag for outgoing packets.
2020-03-24 09:25:05 +01:00
Wouter Wijngaards and GitHub
a96a7a6a20
Merge pull request #200 from yarikk/ipdiffserv
...
add ip-dscp option to specify the DSCP tag for outgoing packets
2020-03-24 09:24:16 +01:00
Yaroslav K and Yaroslav Kolomiiets
cfddbcb5be
add setting IP DiffServ Codepoint (DSCP, previously TOS) on sockets
2020-03-23 19:37:43 +00:00
Yaroslav K and Yaroslav Kolomiiets
c0118410a2
add ip-dscp configuration option for setting IP DiffServ codepoint (DSCP, previously TOS) on sockets
2020-03-23 19:37:43 +00:00
W.C.A. Wijngaards
cca5cfc88f
- Fix compile on Solaris for unbound-checkconf.
2020-03-23 17:26:06 +01:00
George Thessalonikefs
ce7fd591c6
- Changelog note for PR #198 : Declare lz_enter_rr_into_zone() static,
...
it's only used in this file, by fobser.
2020-03-20 13:06:43 +01:00
gthess and GitHub
1d9108fdbc
Merge pull request #198 from fobser/missing_prototype
...
Declare lz_enter_rr_into_zone() static, it's only used in this file.
2020-03-20 13:04:09 +01:00
W.C.A. Wijngaards
e8aab3f3f4
Changelog note for #197 .
...
- Merge PR #197 from fobser: Make log_ident_revert_to_default() a
proper prototype.
2020-03-20 11:54:57 +01:00
Wouter Wijngaards and GitHub
c262e1f892
Merge pull request #197 from fobser/proper_prototype
...
Make log_ident_revert_to_default() a proper prototype.
2020-03-20 11:54:39 +01:00
Florian Obser
1a81965748
Declare lz_enter_rr_into_zone() static, it's only used in this file.
...
Pointed out by clang with -Wmissing-prototypes
2020-03-20 11:53:13 +01:00
Florian Obser
bdd245ff7d
Make log_ident_revert_to_default() a proper prototype.
...
Pointed out by clang with -Wstrict-prototypes.
2020-03-20 11:44:38 +01:00
Ralph Dolmans
7fa2b19389
- Fix .travis.yml error, missing 'env' option.
2020-03-19 18:11:22 +01:00
Ralph Dolmans
5f7d73ae88
- Merge PR#194: Add libevent testing to Travis, by Jeffrey Walton.
2020-03-19 17:59:08 +01:00
Ralph Dolmans
f9b814c06a
Merge branch 'noloader-libevent'
2020-03-19 17:58:01 +01:00
Ralph Dolmans
1cf77d4255
Merge branch 'libevent' of https://github.com/noloader/unbound into noloader-libevent
2020-03-19 17:57:35 +01:00
Ralph Dolmans
3cf6c3f7ca
Merge branch 'fobser-kernel-random-port'
2020-03-19 17:38:09 +01:00
Ralph Dolmans
d0ee8c1cbd
Add changelog entries for PR#134.
2020-03-19 17:37:27 +01:00
Ralph Dolmans
4504dd3737
- Log warning when using outgoing-port-permit and outgoing-port-avoid
...
while explicit port randomisation is disabled.
2020-03-19 17:34:46 +01:00
Ralph Dolmans
87474563ff
Merge branch 'kernel-random-port' of https://github.com/fobser/unbound into fobser-kernel-random-port
2020-03-19 15:48:12 +01:00
Ralph Dolmans
2c03028fa3
- Fix #158 : open tls-session-ticket-keys as binary, for Windows. By Daisuke
...
HIGASHI.
2020-03-19 14:00:33 +01:00
Ralph Dolmans
68eab24db7
Merge branch 'noloader-ios'
2020-03-19 10:55:55 +01:00
Ralph Dolmans
acfa55713c
- Merge PR#191: Update iOS testing on Travis, by Jeffrey Walton.
2020-03-19 10:55:39 +01:00
Jeffrey Walton
dafe849c5b
Add libevent testing to Travis
2020-03-17 12:33:08 -04:00
Jeffrey Walton
20dbd6339e
Sync with upstream
2020-03-17 06:32:13 -04:00
W.C.A. Wijngaards
e4268663e6
- Fix #192 : In the unbound-checkconf tool, the module config of
...
dns64 subnetcache respip validator iterator is whitelisted, it was
reported it seems to work.
2020-03-16 09:44:38 +01:00
Wouter Wijngaards
59fe188954
- Fix compile of test tools without protobuf.
2020-03-12 10:49:24 +01:00
Ralph Dolmans
28e6c86e61
- Add check to make sure RPZ records are subdomain of configured zone origin.
2020-03-11 17:37:50 +01:00
George Thessalonikefs
67b4ab2c90
- Changelog entry for ( Fix #189 , Merge PR #190 ).
2020-03-11 11:50:38 +01:00
gthess and GitHub
68044510e5
Merge pull request #190 from noloader/netbsd
...
Fix NetBSD compile (GH #189 )
2020-03-11 11:45:16 +01:00
W.C.A. Wijngaards
50bc604586
Changelog for #188 and configure script created. Removed unneeded whitespace.
2020-03-11 08:41:56 +01:00
W.C.A. Wijngaards
39c18add57
Fix #188 : unbound-control.c:882:6: error: 'execlp' is unavailable: not available on tvOS
2020-03-11 08:39:48 +01:00
Jeffrey Walton
6ab0db6e25
Fix NetBSD compile (GH #189 )
2020-03-11 03:35:28 -04:00
George Thessalonikefs
10e5ab2c5f
Merge branch 'noloader-makefile'
2020-03-06 12:01:05 +01:00
George Thessalonikefs
730aa097f8
- Changelog note for PR #186 : Fix unrecognized 'echo -n' option on OS X,
...
by noloader.
2020-03-06 11:59:13 +01:00
Jeffrey Walton
171740222c
Fix unrecognized 'echo -n' option on OS X
...
Also see https://github.com/NLnetLabs/unbound/issues/183 .
This PR also updates a few typos in README-Travis.md, and expands the discussion of PKG_CONFIG_PATH for those who are not familiar with it.
2020-03-05 14:53:08 -05:00
W.C.A. Wijngaards
93c92eeabb
Fix changelog note, it is #182 , not #184 .
2020-03-05 17:03:28 +01:00
W.C.A. Wijngaards
b8540e1e70
Changelog note for #184 .
...
- Fix PR #184 from noloader: Add iOS testing to Travis.
2020-03-05 17:02:20 +01:00
Wouter Wijngaards and GitHub
a29a61529c
Merge pull request #182 from noloader/ios
...
Add iOS testing to Travis
2020-03-05 17:01:59 +01:00
Jeffrey Walton
135fdd5839
Add iOS testing to Travis
2020-03-05 06:44:13 -05:00
Ralph Dolmans
cd6bb00f2c
- Update README-Travis.md (from PR #179 ), by Jeffrey Walton.
2020-03-04 12:02:10 +01:00
George Thessalonikefs
a1b2261b7b
- Merge PR #180 from noloader: Avoid calling exit in Travis script.
2020-03-04 10:25:04 +01:00
gthess and GitHub
1e48e73222
Merge pull request #181 from noloader/openssl-pie
...
Fix OpenSSL -pie warning on Android
2020-03-04 10:22:23 +01:00
W.C.A. Wijngaards
779d65208e
Changelog note for PR#180 .
...
- Merge PR#180 from noloader: Avoid calling exit in Travis script.
2020-03-04 08:18:00 +01:00
Wouter Wijngaards and GitHub
ee9fd34d1f
Merge pull request #180 from noloader/travis
...
Avoid calling exit in Travis script
2020-03-04 08:17:39 +01:00
Jeffrey Walton
a53c452f25
Test OpenSSL -pie changes
...
See https://github.com/openssl/openssl/issues/11237
2020-03-03 16:25:25 -05:00
Jeffrey Walton
fc2d2459af
Avoid calling exit in Travis script
...
The Travis docs state it should not be done. Blame Jeffrey Walton. Sorry about that.
2020-03-03 14:01:06 -05:00
George Thessalonikefs
114d650d32
- Upgrade config.guess(2020-01-01) and config.sub(2020-01-01).
2020-03-03 18:29:11 +01:00
George Thessalonikefs
0c51af0fb4
- Make contrib/android/install_openssl.sh Code of Conduct compliant.
2020-03-02 16:12:51 +01:00
George Thessalonikefs
e756724f86
Merge branch 'noloader-android'
2020-03-02 15:22:19 +01:00
George Thessalonikefs
f4eaf6c0ff
- Merge PR #174 : Add Android to Travis testing, by noloader.
...
- Move android build scripts to contrib/ and allow android tests to fail.
2020-03-02 15:17:59 +01:00
George Thessalonikefs
e67d4c99d6
Merge branch 'master' of https://github.com/noloader/unbound into noloader-android
2020-03-02 14:46:04 +01:00
Ralph Dolmans
26f057d668
Merge branch 'noloader-openssl'
2020-03-02 14:14:25 +01:00
Ralph Dolmans
868ce6372d
- Add github reference in changelog ( Fix #175 , Merge PR #176 )
2020-03-02 14:13:20 +01:00
Ralph Dolmans
90040b24ce
- Fix link error when OpenSSL is configured with no-engine, thanks noloader.
2020-03-02 14:06:10 +01:00
W.C.A. Wijngaards
4207b58700
- Fix #177 : dnstap does not build on macOS.
2020-03-02 13:33:34 +01:00
Willem Toorop
d4dcdba07e
Cleanup nettle_ecc_point when verifying for ...
...
... ECDSA256 with libnettle
2020-03-02 12:27:45 +01:00
Ralph Dolmans
75a2a05c7c
Merge branch 'openssl' of https://github.com/noloader/unbound into noloader-openssl
2020-03-02 12:23:38 +01:00
George Thessalonikefs
c5897dc058
- Fix compiler warning in dns64/dns64.c.
2020-03-02 11:52:33 +01:00
Jeffrey Walton
05041f9cff
Add Android to Travis testing.
2020-03-01 09:28:26 -05:00
Jeffrey Walton
f5f83bc025
Fix link error when OpenSSL is configured with no-engine (GH #175 )
2020-02-29 19:27:44 -05:00
W.C.A. Wijngaards
93189d3083
Changelog note for PR #164 and text for release explanation.
...
- Merge PR #164 : Framestreams, this branch implements dnstap
unidirectional connectivity in unbound. This has a number of
new features.
The dependency on libfstrm is removed. The fstrm protocol code
resides in dnstap/dnstap_fstrm.h and dnstap/dnstap_fstrm.c. This
contains a brief definition of what unbound needs.
The make unbound-dnstap-socket builds a debug tool,
unbound-dnstap-socket. It can listen, accept multiple DNSTAP
streams and print information. Commandline options control it.
Unbound can reconnect if the unix domain socket file socket is
closed. This uses exponential backoff after which it uses a
one second timer to throttle cpu down. There is also support
to use TCP and TLS for connecting to the log server. There
are new config options to turn them on, in the dnstap section
in the man page and example config file. dnstap-ip with IP
address of server for TCP or TLS use. dnstap-tls to turn
on TLS. And dnstap-tls-server-name, dnstap-tls-cert-bundle,
dnstap-tls-client-key-file and dnstap-tls-client-cert-file
to configure the certificates for server authentication and
client authentication, or leave at "" to not use that.
2020-02-28 15:23:54 +01:00
Wouter Wijngaards and GitHub
1c3f0293fd
Merge pull request #164 from NLnetLabs/framestreams
...
Framestreams
2020-02-28 15:19:09 +01:00
W.C.A. Wijngaards
614ed2717b
Merge branch 'master' into framestreams
...
Fixed bison and flex conflicts by regenerating the files.
2020-02-28 14:31:24 +01:00
Ralph Dolmans
8f1cb41725
Merge PR #172 : Add IBM s390x arch for testing, by noloader.
2020-02-28 11:42:17 +01:00
Ralph Dolmans
81de07e208
Merge branch 'noloader-master'
2020-02-28 11:40:48 +01:00
Ralph Dolmans
b42a21d419
Merge branch 'master' of https://github.com/noloader/unbound into noloader-master
2020-02-28 11:39:35 +01:00
W.C.A. Wijngaards
e13dfc743d
For incoming ssl context with verifypem != NULL, we can set
...
SSL_VERIFY_FAIL_IF_NO_PEER_CERT that can reject client
connections without peer cert during the handshake, which is nicer
than just a connection drop to the client (when we then check
for no peer certificate afterwards).
2020-02-28 11:10:12 +01:00
W.C.A. Wijngaards
d5544a0f13
dnstap io, cast void unused return value.
2020-02-28 11:09:45 +01:00
W.C.A. Wijngaards
d68c1e29b6
Changelog note for PR #173 .
...
- Merge PR #173 : updated makedist.sh for config.guess and
config.sub and sha256 digest for gpg, by noloader.
2020-02-28 10:15:57 +01:00
Wouter Wijngaards and GitHub
6e54225bd7
Merge pull request #173 from noloader/makedist
...
Update makedist.sh
2020-02-28 10:14:33 +01:00
W.C.A. Wijngaards
ed5a9ed1b1
dnstap io, fix for review comment.
2020-02-28 09:22:15 +01:00
W.C.A. Wijngaards
49622dd51a
dnstap io, fix uniform error message for no dnstap-socket-path.
2020-02-28 09:19:53 +01:00
W.C.A. Wijngaards
e856908696
dnstap io, free alloced resource on fail path.
2020-02-28 09:17:02 +01:00
W.C.A. Wijngaards
065506d1a8
dnstap io, use sldns_str_print to print to string.
2020-02-28 09:11:10 +01:00
W.C.A. Wijngaards
b63032b4dd
dnstap io, fixup fptr_wlist for unbound_dnstap_socket tool.
2020-02-28 08:55:10 +01:00
W.C.A. Wijngaards
85c4e58831
dnstap debug tool, document string change more clearly.
2020-02-28 08:36:44 +01:00
W.C.A. Wijngaards
5b61afd38c
Return 0 when ssl authentication is not available
2020-02-28 08:11:11 +01:00
Jeffrey Walton
8fbb03de5e
Update makedist.sh
...
Use the latest config.guess and config.sub
Use SHA-256 for release signing
2020-02-27 19:10:05 -05:00
Jeffrey Walton
1cb1e90f53
Add IBM s390x arch for testing
...
I believe this is a big-endian platform, so it is nice to have for insurance
2020-02-27 12:56:20 -05:00
George Thessalonikefs
c50f9dd412
Merge branch 'noloader-travis'
2020-02-27 18:14:14 +01:00
George Thessalonikefs
9efe85fb4c
- Merge PR #171 : Add additional compilers and platforms to Travis
...
testing, by noloader.
2020-02-27 18:13:22 +01:00
George Thessalonikefs
6476a11189
- Provide openssl location for osx travis build.
2020-02-27 18:11:25 +01:00
W.C.A. Wijngaards
398e260145
Fixup ssl authentication not available with check for it.
2020-02-27 16:57:24 +01:00
Jeffrey Walton
e382b884d3
Use Brew to install OpenSSL on OS X
2020-02-27 10:52:58 -05:00
W.C.A. Wijngaards
f03245c362
Document log check functions.
2020-02-27 16:28:36 +01:00
Jeffrey Walton
2d6e0d8eea
Add additional compilers and platforms to Travis testing
2020-02-27 10:08:49 -05:00
W.C.A. Wijngaards
6f4818ebcb
- Fix more undefined sanitizer issues, in respip copy_rrset null
...
dname, and in the client_info_compare routine for null memcmp.
2020-02-27 15:43:27 +01:00
W.C.A. Wijngaards
57bbbfc0e6
- Fix #170 : Fix gcc undefined sanitizer signed integer overflow
...
warning in signature expiry RFC1982 serial number arithmetic.
2020-02-27 15:22:35 +01:00
W.C.A. Wijngaards
348e246b66
- Fix #169 : Fix warning for daemon/remote.c output may be truncated
...
from snprintf.
2020-02-27 15:08:10 +01:00
W.C.A. Wijngaards
f469049198
- iana portlist updated.
2020-02-26 14:32:14 +01:00
W.C.A. Wijngaards
5aa8ae510e
Fix spelling of dtstream.c
2020-02-26 13:11:27 +01:00
W.C.A. Wijngaards
e24d7c64a8
Dnstap io, note that it creates a thread when possible.
2020-02-26 12:21:42 +01:00
W.C.A. Wijngaards
6a51e9e037
Add dnstap io callbacks to fptr whitelist event.
2020-02-26 12:14:52 +01:00
W.C.A. Wijngaards
58b7e732b8
Fixup dtstream.h file description comment. And for dtstream.c too.
2020-02-26 12:05:38 +01:00
W.C.A. Wijngaards
de35486fb7
Documentation for prefer-ip4, Issue #165 .
2020-02-25 09:58:32 +01:00
W.C.A. Wijngaards
318d4e91cc
- Fix #165 : Add prefer-ip4: yesno config option to prefer ipv4 for
...
using ipv4 filters, because the hosts ip6 netblock /64 is not owned
by one operator, and thus reputation is shared.
2020-02-25 09:55:59 +01:00
George Thessalonikefs
f99dd8f6dc
Changelog note for PR #166 .
...
- Merge PR #166 : Fix typo in unbound.service.in, by glitsj16.
2020-02-24 12:01:20 +01:00
gthess and GitHub
137d1d896a
Merge pull request #166 from glitsj16/systemd-units
...
Fix typo in unbound.service.in
2020-02-24 11:57:50 +01:00
glitsj16 and GitHub
42ee37847f
Fix typo
2020-02-22 01:16:11 +00:00
Florian Obser
5aaa5e253d
Allow the kernel to provide random source ports.
...
On some operating systems, for example OpenBSD since some decades, the
kernel binds to a random source port if asked for any port (port
number 0). There is no need to replicate this functionality in
userland.
2020-02-20 14:54:06 +01:00
W.C.A. Wijngaards
d2a843b422
- master branch has 1.10.1 version.
2020-02-20 14:42:58 +01:00
W.C.A. Wijngaards
6d7e0d68cf
Note tag position in Changelog.
2020-02-20 14:41:39 +01:00
W.C.A. Wijngaards
66836f591e
Merge branch 'master' of github.com:NLnetLabs/unbound
2020-02-20 09:17:40 +01:00
W.C.A. Wijngaards
ec0d6f196e
- Updated contrib/unbound_smf23.tar.gz with Solaris SMF service for
...
Unbound from Yuri Voinov.
2020-02-20 09:17:24 +01:00
Alex Band and GitHub
e55b89096f
Add GitHub Sponsors for Organisations
2020-02-20 09:13:54 +01:00
W.C.A. Wijngaards
57baa78dd1
Fix memory leak in error case. From review.
2020-02-19 17:33:36 +01:00
W.C.A. Wijngaards
9473b0b2c5
Fix issue reported by clang analyzer.
2020-02-18 17:20:45 +01:00
W.C.A. Wijngaards
8f14388cb4
dnstap io, move control frame ready, accept and log to dnstap_fstrm code.
2020-02-18 17:04:08 +01:00
W.C.A. Wijngaards
3753d01253
dnstap io, test for client authentication, unbound can send client
...
authentication credentials, when configured, and unbound-dnstap-socket can
verify the client credentials, and refuses the connection if missing.
2020-02-18 16:30:13 +01:00
W.C.A. Wijngaards
9556d59536
dnstap io, test that failed name or auth certificate fails to connect tls.
2020-02-18 14:18:03 +01:00
W.C.A. Wijngaards
184f26355a
Fix ifdef of X509_CHECK_FLAG_NO_PARTIAL_WILDCARDS, and
...
Merge branch 'master' into framestreams
2020-02-18 08:33:58 +01:00
W.C.A. Wijngaards
6accd3d681
- protect X509_CHECK_FLAG_NO_PARTIAL_WILDCARDS with ifdef for
...
different openssl versions.
2020-02-18 08:31:38 +01:00
W.C.A. Wijngaards
b4f055effc
Merge branch 'master' into framestreams
2020-02-17 15:25:47 +01:00
W.C.A. Wijngaards
85fd23769f
- changelog point where the tag for 1.10.0rc2 release is.
2020-02-17 15:24:29 +01:00
Ralph Dolmans
b770699319
typo fix
2020-02-17 13:38:01 +01:00
Ralph Dolmans
fe5370a98a
- Add respip to supported module-config options in unbound-checkconf.
2020-02-17 13:36:30 +01:00
George Thessalonikefs
4b354d38c1
- Remove unused variable.
2020-02-17 12:56:20 +01:00
W.C.A. Wijngaards
a9b7638f4b
Neater changelog
2020-02-17 10:10:44 +01:00
W.C.A. Wijngaards
42fdfd8121
- contrib/drop2rpz: perl script that converts the Spamhaus DROP-List
...
in RPZ-Format, contributed by Andreas Schulze.
2020-02-17 10:09:46 +01:00
W.C.A. Wijngaards
2106692a89
dnstap io, test TLS with peername and TLS authentication.
2020-02-14 15:44:55 +01:00
W.C.A. Wijngaards
7b19ba3d57
dnstap io, fix spinning reconnect when handshake fails for TLS.
2020-02-14 15:41:17 +01:00
W.C.A. Wijngaards
4d3524f496
dnstap io, test for TLS and reconnect for that. And fix unused parameters
...
for dt_create and fix check of socket path when using IP address.
2020-02-14 14:44:02 +01:00
W.C.A. Wijngaards
7da19e96ce
dnstap io, test for TCP and reconnect for that.
2020-02-14 14:16:56 +01:00
W.C.A. Wijngaards
583e8b71e4
Nicer comment text.
2020-02-14 13:54:07 +01:00
W.C.A. Wijngaards
465af58457
dnstap io, fix to compile without ssl.
2020-02-14 13:23:58 +01:00
W.C.A. Wijngaards
748b70ae8b
dnstap io, fix clang analysis warning
2020-02-14 10:33:33 +01:00
W.C.A. Wijngaards
6d1b4e050d
dnstap io, dnstap tls default is yes, and man page documentation.
2020-02-14 10:01:37 +01:00
W.C.A. Wijngaards
00700bbe13
dnstap io, config entries parse and lex.
2020-02-14 09:40:37 +01:00
W.C.A. Wijngaards
78e6060858
dnstap io, example.conf example, config_file entries for tcp and tls.
2020-02-14 09:03:09 +01:00
W.C.A. Wijngaards
2665ae0414
- Stop unbound-checkconf from insisting that auth-zone and rpz
...
zonefiles have to exist. They can not exist, and download later.
2020-02-14 07:57:57 +01:00
W.C.A. Wijngaards
77bdbc6e98
- Fix spelling in unbound.conf.5.in.
2020-02-14 07:54:49 +01:00
W.C.A. Wijngaards
76772fe786
dnstap io, check peer verification in unbound-dnstap-socket tap_handshake.
2020-02-12 16:49:18 +01:00
W.C.A. Wijngaards
5714260953
dnstap io, move peer check into routine.
2020-02-12 15:34:56 +01:00
W.C.A. Wijngaards
25a88d6d54
dnstap io, check peer verification in dtstream dtio_ssl_handshake.
2020-02-12 15:23:58 +01:00
W.C.A. Wijngaards
808995e041
Merge branch 'master' into stream-reuse
2020-02-12 12:53:24 +01:00
W.C.A. Wijngaards
0f0bb21a89
Merge branch 'master' into framestreams
2020-02-12 12:53:12 +01:00
W.C.A. Wijngaards
00d622bed7
- updated version number to 1.10.0.
2020-02-12 12:51:35 +01:00
W.C.A. Wijngaards
014833d0e6
Merge branch 'stream-reuse' of github.com:NLnetLabs/unbound into stream-reuse
2020-02-12 11:58:39 +01:00
W.C.A. Wijngaards
6c14c7520b
Merge branch 'master' into stream-reuse
2020-02-12 11:58:17 +01:00
W.C.A. Wijngaards
e5e72eb398
Merge branch 'master' into framestreams
2020-02-12 11:58:01 +01:00
W.C.A. Wijngaards
9e193be648
- Fix compile warning when threads disabled.
2020-02-12 11:55:02 +01:00
W.C.A. Wijngaards
7dcfe531e4
- Fix to clean memory leak of respip_addr.lock when ip_tree deleted.
2020-02-12 11:49:26 +01:00
W.C.A. Wijngaards
e965775064
- Fix contrib/fastrpz.patch to apply cleanly. Fix for serve-stale
...
fixes, but it does not compile, conflicts with new rpz code.
2020-02-12 11:29:55 +01:00
W.C.A. Wijngaards
6e13c6f401
- Fix contrib/fastrpz.patch to apply cleanly.
2020-02-12 11:24:59 +01:00
W.C.A. Wijngaards
2916cfb3b0
- Fix with libnettle make test with dsa disabled.
2020-02-12 11:15:24 +01:00
George Thessalonikefs
da2bda6f4d
- Clean debug comments.
2020-02-10 15:54:41 +01:00
George Thessalonikefs
adda4f6ace
- Fix use after free on log-identity after a reload; Fixes #163 .
2020-02-10 13:56:22 +01:00
George Thessalonikefs
c316b1d7d5
- Document 'ub_result.was_ratelimited' in libunbound.
2020-02-10 10:31:47 +01:00
W.C.A. Wijngaards
af84a27dff
Merge branch 'master' into stream-reuse
2020-02-06 17:27:55 +01:00
W.C.A. Wijngaards
aee3706f66
- Fix to put braces around empty if body when threading is disabled.
2020-02-06 15:33:02 +01:00
George Thessalonikefs
8e135d5f59
- Document in unbound.conf manpage that configuration clauses can be repeated in the configuration file.
2020-02-06 14:39:58 +01:00
George Thessalonikefs
5d6358b66d
- Cleaner code for mesh_serve_expired_lookup.
2020-02-06 14:38:01 +01:00
W.C.A. Wijngaards
4089147351
- Fix to lock and release once in mesh_serve_expired_lookup.
2020-02-06 14:01:45 +01:00
W.C.A. Wijngaards
18ea62e369
- Fix to lock zone before adding rpz qname trigger.
2020-02-06 12:22:15 +01:00
W.C.A. Wijngaards
d000523b00
- Fix to create and destroy rpz_lock in auth_zones structure.
2020-02-06 11:51:17 +01:00
George Thessalonikefs
0758d29324
- Fix num_reply_states and num_detached_states counting with
...
serve_expired_callback.
2020-02-06 11:44:48 +01:00
W.C.A. Wijngaards
af7abd4dfd
- Fix num_reply_addr counting in mesh and tcp drop due to size
...
after serve_stale commit.
2020-02-06 11:09:30 +01:00
W.C.A. Wijngaards
7e061e4d5f
Fix test to check if server up afterwards
2020-02-06 10:25:47 +01:00
W.C.A. Wijngaards
ad180402ea
dnstap io, set tls auth name in outgoing ssl
2020-02-05 16:17:21 +01:00
W.C.A. Wijngaards
812d8f71e8
dnstap io, ssl write.
2020-02-05 15:04:04 +01:00
W.C.A. Wijngaards
58fdcf06e8
Merge branch 'master' into framestreams
2020-02-05 14:25:47 +01:00
gthess and GitHub
f7fe95ad7b
Serve stale ( #159 )
...
- Added serve-stale functionality as described in
draft-ietf-dnsop-serve-stale-10. `serve-expired-*` options can be used
to configure the behavior.
- Updated cachedb to honor `serve-expired-ttl`; Fixes #107 .
- Renamed statistic `num.zero_ttl` to `num.expired` as expired replies
come with a configurable TTL value (`serve-expired-reply-ttl`).
- Fixed stats when replying with cached, cname-aliased records.
- Added missing default values for redis cachedb backend.
2020-02-05 14:20:27 +01:00
W.C.A. Wijngaards
5b117c851a
dnstap io, ssl handshake.
2020-02-05 13:59:56 +01:00
W.C.A. Wijngaards
e5d43a6f4e
dnstap io, close fd routine.
2020-02-05 13:03:58 +01:00
W.C.A. Wijngaards
9f7a16c7ab
dnstap io, ssl and ssl ctx creation.
2020-02-04 17:23:19 +01:00
W.C.A. Wijngaards
f24d0e4054
dnstap create debug tool with other debug tools in list.
2020-02-04 09:45:44 +01:00
W.C.A. Wijngaards
9115eb88ed
Merge branch 'master' into framestreams
2020-02-04 09:40:00 +01:00
Ralph Dolmans
5980d9c389
Merge branch 'master' of github.com:NLnetLabs/unbound
2020-02-03 16:53:50 +01:00
Ralph Dolmans
4fc622031d
- Reformat rpz disabled stats counter
2020-02-03 16:52:25 +01:00
Alex Band and GitHub
dde8631600
Link to NLnet Labs funding page
2020-02-03 16:51:03 +01:00
Ralph Dolmans
8c88ab4747
- Add assertion to please static analyzer
2020-02-03 16:44:21 +01:00
Ralph Dolmans
a4a9fbdb8f
- remove unused code block in respip
2020-02-03 14:19:44 +01:00
W.C.A. Wijngaards
1420d59949
dnstap io, connect and write over TCP.
2020-01-31 17:07:40 +01:00
W.C.A. Wijngaards
27a5239ccf
dnstap unbound-dnstap-sock, comments and log output on tls error close.
2020-01-31 14:13:41 +01:00
W.C.A. Wijngaards
dc31cf3652
dnstap unbound-dnstap-sock, read from TLS.
2020-01-31 14:03:28 +01:00
W.C.A. Wijngaards
03db238a51
dnstap unbound-dnstap-sock, verbose accepted stream IP addresses
2020-01-31 13:05:06 +01:00
W.C.A. Wijngaards
8d2ff8a6bf
dnstap unbound-dnstap-sock, add -t option.
2020-01-31 11:18:14 +01:00
W.C.A. Wijngaards
b912169f15
dnstap unbound-dnstap-sock, fixup check for ssl context create error.
2020-01-31 11:11:43 +01:00
W.C.A. Wijngaards
473783e432
dnstap unbound-dnstap-sock, tls options and context created.
2020-01-31 11:10:04 +01:00
W.C.A. Wijngaards
59136055b9
dnstap unbound-dnstap-sock, fixup constant defines.
2020-01-31 10:05:00 +01:00
W.C.A. Wijngaards
70b2c24a4e
dnstap unbound-dnstap-sock, fixup signal handler exit.
2020-01-31 10:02:51 +01:00
W.C.A. Wijngaards
11e80ce3ab
dnstap unbound-dnstap-sock, can listen to multiple sockets, can listen
...
to TCP sockets, cleans up on exit after signal.
2020-01-31 09:53:49 +01:00
W.C.A. Wijngaards
12c51866d0
Merge branch 'master' into framestreams
2020-01-31 07:49:38 +01:00
W.C.A. Wijngaards
7495b25f94
- Fix fclose on error in TLS session ticket code.
2020-01-31 07:49:14 +01:00
Ralph Dolmans
810862dc65
- Stop working on socket when socket() call returns an error.
...
- Check malloc return values in TLS session ticket code
2020-01-30 19:15:58 +01:00
W.C.A. Wijngaards
a8264065f6
- put fstrm protocol contents in separate files, dnstap_fstrm.c
...
and dnstap_fstrm.h
2020-01-30 17:11:07 +01:00
W.C.A. Wijngaards
8dd683768b
Merge branch 'master' into framestreams
2020-01-30 16:22:12 +01:00
W.C.A. Wijngaards
c9ac6a5eab
Merge branch 'master' into stream-reuse
2020-01-30 16:21:50 +01:00
W.C.A. Wijngaards
a4244e79ca
- Add getentropy_freebsd.o to Makefile dependencies.
2020-01-30 16:15:51 +01:00
W.C.A. Wijngaards
833021d84d
- Add build rule for ipset to Makefile
2020-01-30 16:12:39 +01:00
Ralph Dolmans
2c459443da
- Add changelog entry for RPZ merge
2020-01-30 16:04:27 +01:00
Ralph Dolmans
1646b26369
Merge branch 'rpz'
2020-01-30 15:59:01 +01:00
Ralph Dolmans
056176ec9a
Merge branch 'master' into rpz
2020-01-30 15:57:34 +01:00
W.C.A. Wijngaards
3102fa5775
Merge branch 'master' into stream-reuse
2020-01-30 15:49:57 +01:00
W.C.A. Wijngaards
b1d8b549e0
Merge branch 'master' into framestreams
2020-01-30 15:49:24 +01:00
Ralph Dolmans
d69ba6f39f
- Add changelog entry for memory leak fix
2020-01-30 15:47:49 +01:00
Ralph Dolmans
882741bf55
- Fix memory leak in do_auth_zone_transfer on success
2020-01-30 15:45:54 +01:00
W.C.A. Wijngaards
dd1b35412f
dnstap io, add reconnect test.
2020-01-30 15:13:25 +01:00
Ralph Dolmans
5dc6798e75
Merge branch 'master' of github.com:NLnetLabs/unbound
2020-01-30 14:58:25 +01:00
W.C.A. Wijngaards
8aa338ba2d
dnstap io, test threads in unit test.
2020-01-30 14:57:03 +01:00
Ralph Dolmans
4f5b934688
- Fix small memory leak in error condition remote.c
...
- Fix double free in error condition view.c
2020-01-30 14:56:48 +01:00
Ralph Dolmans
b9c9fc066f
- Fix RPZ locking issues on error conditions
2020-01-30 14:46:39 +01:00
Ralph Dolmans
833c4b1300
- Revert addition of cscope.out to project .gitignore, should be in
...
global ignore list
2020-01-30 14:25:45 +01:00
W.C.A. Wijngaards
c79de51da8
Merge branch 'master' into stream-reuse
2020-01-30 14:25:00 +01:00
W.C.A. Wijngaards
9c71e5733d
Merge branch 'master' into framestreams
2020-01-30 14:20:31 +01:00
W.C.A. Wijngaards
a5f133ef2f
- updated .gitignore for added contrib file.
2020-01-30 14:20:08 +01:00
W.C.A. Wijngaards
1645ea8b8b
Merge branch 'master' into framestreams
2020-01-30 14:14:29 +01:00
W.C.A. Wijngaards
de5c0d4228
Changelog note for PR#151.
...
- Merge PR#151: Fixes for systemd units, by Maryse47, Edmonds
and Frzk. Updates the unbound.service systemd file and adds
a portable systemd service file.
2020-01-30 14:11:41 +01:00
Wouter Wijngaards and GitHub
e4e00db42e
Merge pull request #151 from Maryse47/systemd_fix
...
Fixes for systemd units
2020-01-30 14:09:29 +01:00
Ralph Dolmans
3609287344
- Fix RPZ stats RPZ_NO_OVERRIDE_ACTION check
2020-01-30 14:05:56 +01:00
W.C.A. Wijngaards
fa49fc77e3
fix dnstap io for lock checks, log identity (numworkers+1), and add locks
...
around protected area modification in the message queue.
2020-01-30 13:39:31 +01:00
W.C.A. Wijngaards
9dbb5662b7
fix ascync test compile with lock checks.
2020-01-30 13:39:13 +01:00
W.C.A. Wijngaards
ba49524708
dnstap socket tool better help text.
2020-01-30 13:10:29 +01:00
W.C.A. Wijngaards
36dd4a2124
Merge branch 'master' into framestreams
2020-01-30 13:06:52 +01:00
W.C.A. Wijngaards
20a2574da1
- Update contrib/fastrpz.patch for clean diff with current code.
2020-01-30 13:05:35 +01:00
W.C.A. Wijngaards
bf13191b87
- Fix subnet tests for disabled DSA algorithm by default.
2020-01-30 09:08:19 +01:00
W.C.A. Wijngaards
93a609d6db
Merge branch 'master' into framestreams
2020-01-29 16:36:46 +01:00
Ralph Dolmans
5fcae2f0e0
- Fix misplaced parentheses from PR#156
2020-01-29 16:32:03 +01:00
W.C.A. Wijngaards
0248872938
dnstap io, move setup with nothreads into its own routine.
2020-01-29 16:31:33 +01:00
W.C.A. Wijngaards
565b3ef8cb
dnstap io, fix compile warning when compiled with threading enabled.
2020-01-29 16:22:32 +01:00
W.C.A. Wijngaards
af252929e8
Merge branch 'master' into framestreams
2020-01-29 16:10:16 +01:00
Ralph Dolmans
4326b10169
- Add PR#156 merge to changelog (Added unbound-control view_local_datas_remove
...
command)
2020-01-29 15:46:05 +01:00
Ralph Dolmans and GitHub
d82de651c6
Merge pull request #156 from n3bul4/master
...
Added unbound-control view_local_datas_remove command
2020-01-29 15:44:39 +01:00
Alexander Berkes
61c2333174
Added view_local_datas_remove description to documentation
2020-01-29 15:32:55 +01:00
Ralph Dolmans
88a706acf8
- Add extra dnamelen checks to ipdnametoaddr and netblockdnametoaddr
2020-01-29 15:16:44 +01:00
Ralph Dolmans
7da16febc4
- Use consistent dname buffer sizes for RPZ
2020-01-29 12:07:13 +01:00
W.C.A. Wijngaards
079de39b46
- Fix #157 : undefined reference to `htobe64'.
2020-01-29 11:56:29 +01:00
Ralph Dolmans
1d9185229e
- Make dname_has_label's dnamelen check work with 0 length
2020-01-29 11:30:22 +01:00
Ralph Dolmans
ef120738c0
- Fix RPZ's get_tld_label maxdnamelen check
2020-01-29 10:57:29 +01:00
Alexander Berkes
396d4223d9
Added unbound-control view_local_datas_remove command
2020-01-29 02:28:00 +01:00
Maryse47
9aa4b5a7a6
unbound.service.in: don't write pidfile at start
...
Pidfiles aren't needed while running unbound through systemd.
The PID of the unbound daemon can still be obtained with:
'systemctl show --property MainPID --value unbound'.
While disabling pidfiles we can also drop CAP_CHOWN and writable
/run directory.
2020-01-28 19:03:18 +01:00
Maryse47
939cf38576
unbound.service.in: drop CAP_IPC_LOCK
...
CAP_IPC_LOCK controls whether a process can lock pages into physical
memory (for instance to prevent passwords or private keys from
being swapped to disk), e.g. mmap() with the MAP_LOCKED flag or
shmctl() with the SHM_LOCK command, neither of which seem to be
used by unbound.
2020-01-28 18:42:41 +01:00
Ralph Dolmans
9df07b4036
- Address review feedback
2020-01-28 18:35:04 +01:00
W.C.A. Wijngaards
1e4165d25b
dnstap io, without threads, logs from the main event loop.
2020-01-28 15:51:39 +01:00
W.C.A. Wijngaards
989922631a
dnstap io, fix exit when compiled without threads.
2020-01-28 15:09:21 +01:00
W.C.A. Wijngaards
53e8f992d9
Merge branch 'master' into framestreams
2020-01-28 14:39:26 +01:00
W.C.A. Wijngaards
6c0a863584
- Fix to silence the tls handshake errors for broken pipe and reset
...
by peer, unless verbosity is set to 2 or higher.
2020-01-28 14:32:06 +01:00
W.C.A. Wijngaards
f1407d8814
Merge branch 'master' into framestreams
2020-01-28 14:25:43 +01:00
W.C.A. Wijngaards
e13675d6cb
dnstap io, windows portability improvements.
2020-01-28 14:24:14 +01:00
Ralph Dolmans
a930b94658
- Add PR#147 merge to changelog
2020-01-28 13:41:26 +01:00
Ralph Dolmans and GitHub
13a7783d7b
Merge pull request #147 from mnach/minor-rfc-comment
...
minor #1344 change rfc reference for reserved top level dns names
2020-01-28 13:39:18 +01:00
PMunch and GitHub
b7e8dc1182
Merge branch 'master' into master
2020-01-28 13:18:01 +01:00
W.C.A. Wijngaards
bb81684206
dnstap io, fix memory leak if dnstap queue full.
2020-01-28 12:48:36 +01:00
W.C.A. Wijngaards
82ac0071b7
Merge branch 'master' into framestreams
2020-01-28 12:46:33 +01:00
W.C.A. Wijngaards
b3bf416888
dnstap io, fix for msg queue cleanup and make test.
2020-01-28 12:46:08 +01:00
W.C.A. Wijngaards
f6287fc718
- iana portlist updated.
2020-01-28 12:25:37 +01:00
W.C.A. Wijngaards
c3712a288f
merge master into framestreams, autoconf again.
2020-01-28 12:21:05 +01:00
W.C.A. Wijngaards
1a69e4c9ee
Merge branch 'master' into framestreams
2020-01-28 12:20:09 +01:00
Maryse47
c0789a8785
unbound.service.in: allow CAP_CHOWN
...
CAP_CHOWN is needed for changing onwership of pidfile before
dropping privileges and truncate pidfile on exit.
2020-01-27 18:31:10 +01:00
Mikhail Nacharov
c3fac2550f
minor #1344 change rfc reference for reserved top level dns names
2020-01-27 22:04:09 +05:00
Ralph Dolmans
0feee99055
- Add changelog entry for PR#148.
2020-01-27 16:06:06 +01:00
Ralph Dolmans and GitHub
1d0fc2d179
Merge pull request #148 from pettai/morestats
...
Add some TLS stats to unbound_munin_
2020-01-27 16:04:00 +01:00
Ralph Dolmans
41621fb1df
- Add changelog entry for RP#154
...
- autoconf after PR#154
2020-01-27 15:50:12 +01:00
Ralph Dolmans and GitHub
6b3df091fe
Merge pull request #154 from edmonds/edmonds/libbsd-support
...
Allow use of libbsd functions with configure option --with-libbsd
2020-01-27 15:44:32 +01:00
Ralph Dolmans and GitHub
7e200ce90e
Merge branch 'master' into edmonds/libbsd-support
2020-01-27 15:37:33 +01:00
Maryse47
cfce0a5e60
unbound.service.in: add StateDirectory
...
State directory will be created under /var/lib/unbound and will be
useful for writing various files managed at runtime like trust
anchors updates there instead of in ConfigureDirectory which could
be made read-only next. For this chroot needs to be disabled.
2020-01-27 13:46:31 +01:00
Maryse47
72bfa5a48c
Move unbound_nochroot.service to unbound_portable.service
...
The real purpose of this service is to make it work with
https://systemd.io/PORTABLE_SERVICES/ which are incompatible with
chroot workarounds from original unbound.service.
The service content is identical to unbound.service with exception
for chroot related rules which were modified as needed.
2020-01-27 13:44:47 +01:00
Maryse47
1464bedce2
unbound.service.in: add RuntimeDirectory and ConfigurationDirectory
...
Adding 'RuntimeDirectory' is needed when pidfile path is set to
subdirectory under /run.
Adding ConfigurationDirectory may help in some non-standard setups.
Also add more descriptions about used rules to avoid user confusion
about they meaning and purpose.
2020-01-27 13:44:46 +01:00
W.C.A. Wijngaards
68ff1730ac
- Fix #153 : Disable validation for DSA algorithms. RFC 8624
...
compliance.
2020-01-27 09:40:18 +01:00
W.C.A. Wijngaards
82a6a2f8cc
Changelog note for PR#155.
...
- Merge PR#155 from Rober Edmonds: contrib/libunbound.pc.in: Fixes
to Libs/Requires for crypto library dependencies.
2020-01-27 09:31:07 +01:00
W.C.A. Wijngaards
0ae684830a
Merge branch 'master' of github.com:NLnetLabs/unbound
2020-01-27 09:29:18 +01:00
Wouter Wijngaards and GitHub
ec9e4eb406
Merge pull request #155 from edmonds/edmonds/pkg-config/libs-fixes
...
contrib/libunbound.pc.in: Fixes to Libs/Requires for crypto library dependencies
2020-01-27 09:28:53 +01:00
Robert Edmonds
394f9403df
contrib/libunbound.pc.in: Embed the correct crypto dependencies
...
This commit removes the hardcoded dependency in the libunbound
pkg-config .pc file on the libcrypto and libssl modules and instead
populates the .pc file based on which crypto library was selected at
configure time.
Note that the .pc file specifies pkg-config module names for the
"Requires" line and this can vary from the library filename (e.g. "nss"
is the pkg-config module name vs. "nss3" being the library name).
2020-01-26 22:30:31 -05:00
Robert Edmonds
36b5d74fc4
contrib/libunbound.pc.in: Only specify -lunbound for Libs
...
According to the pkg-config manpage, the "Libs" line in a .pc file
should give the link flags "specific to your package", and specifically
says not to include link flags for dependencies:
Libs: This line should give the link flags specific to your
package. Don't add any flags for required packages;
pkg-config will add those automatically.
2020-01-26 22:06:58 -05:00
Steven Chamberlain and Robert Edmonds
f6b4f2a149
Allow use of libbsd functions with configure option --with-libbsd
...
Add a new configure option `--with-libbsd', which allows to use libbsd's
portable implementations of:
strlcpy strlcat arc4random arc4random_uniform reallocarray
instead of the embedded code copies in contrib/, which will be
difficult to maintain in the long term.
Also patch util/random.c so that, when building with libbsd and without
OpenSSL, arc4random can still be used as the PRNG. Otherwise, building
with libnettle would need a kernel-specific getentropy implementation,
and libbsd does not export one.
[edmonds@debian.org: Imported patch description from BTS, refreshed
patch against Unbound 1.9.6.]
2020-01-26 19:09:43 -05:00
W.C.A. Wijngaards
cf5aa85f29
dnstap io, nicer layout for wouldblock calls.
2020-01-23 16:51:57 +01:00
W.C.A. Wijngaards
8f2f004778
dnstap io, fix event reference in winevent wouldblock call.
2020-01-23 16:49:44 +01:00
W.C.A. Wijngaards
522fcccea2
Merge branch 'master' into framestreams
2020-01-23 16:24:54 +01:00
W.C.A. Wijngaards
61456ff81d
Changelog and contrib/README note for PR#150.
...
- Merge PR#150 from Frzk: Systemd unit without chroot. It add
contrib/unbound_nochroot.service.in, a systemd file for use with
chroot: "", see comments in the file, it uses systemd protections
instead.
2020-01-23 16:16:52 +01:00
Wouter Wijngaards and GitHub
ff92edcd41
Merge pull request #150 from Frzk/systemd_unit_without_chroot
...
Systemd unit without chroot
2020-01-23 16:14:17 +01:00
W.C.A. Wijngaards
874c349b44
dnstap io, remove --with-libfstrm, it is not required to build dnstap
...
support. protobuf-c is still used for handling the dnstap encoding.
2020-01-23 15:56:12 +01:00
François KUBLER
c3f6f0a332
Patch configure.ac file to take the new contrib/unbound_nochroot.service unit file in consideration.
...
All props to Wouter Wijngaards for this work.
2020-01-23 15:51:07 +01:00
W.C.A. Wijngaards
4c64c4b78e
dnstap io, remove libfstrm calls from dnstap.c.
2020-01-23 15:49:36 +01:00
François KUBLER
016f742f16
Added a new unit file to run unbound with systemd and without chroot.
...
See https://github.com/NLnetLabs/unbound/pull/149
2020-01-23 15:46:53 +01:00
W.C.A. Wijngaards
1042134eec
dnstap io, failure to add event closes and attempts to reopen the output.
2020-01-23 15:39:27 +01:00
W.C.A. Wijngaards
b33df3cc63
in stop flush use timer_del to remove timer.
2020-01-23 15:17:43 +01:00
W.C.A. Wijngaards
299086d447
dnstap io, reconnect attempts with exponential backoff to once per second.
2020-01-23 15:11:08 +01:00
W.C.A. Wijngaards
86e1948afe
dnstap io, fixup error exit of event add routines.
2020-01-23 13:38:10 +01:00
W.C.A. Wijngaards
8c47d16e29
dnstap io, sleeps thread when there is no traffic.
2020-01-23 13:27:21 +01:00
W.C.A. Wijngaards
c0f410f721
dnstap io, make sure to free current message when stream closes.
2020-01-23 11:51:10 +01:00
W.C.A. Wijngaards
29fdcf0c71
loop in output callback for performance.
2020-01-23 11:44:32 +01:00
W.C.A. Wijngaards
e7d5a89ae2
check close neater also with a write at the same time.
2020-01-23 11:16:41 +01:00
W.C.A. Wijngaards
24536473d8
dnstap io: check for close of channel by the other side.
2020-01-23 11:07:30 +01:00
W.C.A. Wijngaards
14d7658897
dtio_find_msg loop roundrobin instead of first queue only, with
...
state in the dtio struct for loop iterator.
2020-01-23 10:34:38 +01:00
W.C.A. Wijngaards
e9772b609e
dnstap io fixup socket creation, stop flush dtio pointer, connect reports.
2020-01-23 09:55:15 +01:00
frpet
05cb07093d
Update unbound_munin_
...
Add TLS (DoT) counters
2020-01-23 08:23:16 +01:00
W.C.A. Wijngaards
569cccea24
dnstap io output performs nonblocking connect.
2020-01-22 17:41:34 +01:00
W.C.A. Wijngaards
814a886354
output event del before free.
2020-01-22 15:26:04 +01:00
W.C.A. Wijngaards
a21ac9838d
write data and stop flush for dnstap io.
2020-01-22 15:20:48 +01:00
W.C.A. Wijngaards
3cc1f4a74e
remove fatal_exit from runtime reopen routines.
2020-01-22 12:05:52 +01:00
W.C.A. Wijngaards
6fb602d57b
improve fstrm routine documentation.
2020-01-22 11:57:15 +01:00
W.C.A. Wijngaards
9f2ac374f4
fstrm routines for start and stop, fstrm_create_control_frame_start and
...
fstrm_create_control_frame_stop, suitable for reuse, together with fstrm
protocol defines.
2020-01-22 11:44:11 +01:00
W.C.A. Wijngaards
3e7758ee58
Remove editor file that was added by mistake.
2020-01-21 17:15:37 +01:00
W.C.A. Wijngaards
351e0e6986
iothread find msg.
2020-01-21 17:14:47 +01:00
W.C.A. Wijngaards
efc79beb2d
iothread work.
2020-01-21 17:01:25 +01:00
W.C.A. Wijngaards
57ad169605
the framestream queue.
2020-01-21 14:50:37 +01:00
W.C.A. Wijngaards
bb55cc1685
dnstap unit test.
2020-01-21 14:02:45 +01:00
W.C.A. Wijngaards
ade0ba63ff
dnstap test program prints messages and timestamps in long format.
2020-01-21 10:14:30 +01:00
W.C.A. Wijngaards
7bddf97450
dnstap test program prints identity and version.
2020-01-21 09:56:28 +01:00
W.C.A. Wijngaards
ac362625c3
dnstap test progam can log on one line type,ip,qname,qtype,qclass
2020-01-20 17:23:01 +01:00
W.C.A. Wijngaards
90a9de9d52
unbound-dnstap-socket debug test program.
2020-01-20 15:45:31 +01:00
W.C.A. Wijngaards
9285e10fef
iolist item added.
2020-01-20 12:12:27 +01:00
W.C.A. Wijngaards
c6534ac6b3
Writeup of FrameStreams protocol.
2020-01-20 11:44:45 +01:00
W.C.A. Wijngaards
b7e08045b1
git branch to track feature for framestreams. The aim is to make
...
reconnecting work, TLS support and not depend on the libfstrm library,
but keep compatibility with the Frame Streams protocol spec for
existing DNSTAP tools.
2020-01-20 11:04:06 +01:00
Ralph Dolmans
e00ce7e02e
- extend rpz_respip.rpl with ipv6 without zz label case
2020-01-16 17:52:09 +01:00
Ralph Dolmans
bda4c4a375
- improve dname_has_label(), add unit test
2020-01-16 17:50:44 +01:00
W.C.A. Wijngaards
57aefd102e
Stream reuse branch, for TCP and TLS stream reuse.
...
This is for upstream pipes and using them again for the next query.
Signposted code for reuse_tcp structure in outside_network.h
2020-01-16 17:12:32 +01:00
Ralph Dolmans
b78373216d
- Add cname target wc synth. to testbound test
2020-01-16 12:39:23 +01:00
Ralph Dolmans
24131ca29e
Revert travis verbosity
2020-01-16 01:41:25 +01:00
Ralph Dolmans
72c4c6b30c
- Fix the dname_has_label fix
2020-01-16 01:36:07 +01:00
Ralph Dolmans
fd6456dd56
attemp to get more info out of travis
2020-01-16 00:51:42 +01:00
Ralph Dolmans
53d85f903c
try to understand travis
2020-01-16 00:18:00 +01:00
Ralph Dolmans
9877e52161
Merge branch 'master' of github.com:NLnetLabs/unbound into rpz
2020-01-15 23:44:10 +01:00
Ralph Dolmans
627285af23
- Fix faulty assert
2020-01-15 23:19:24 +01:00
Ralph Dolmans
16543731f5
- Fix doxygen issue
2020-01-15 23:14:24 +01:00
Ralph Dolmans
344f12dd99
- fix compiler warnings
2020-01-15 23:03:44 +01:00
Ralph Dolmans
14913d75c0
- processed RPZ review feedback
...
- fix potential locking issue
- add extra out of bound checks
2020-01-15 22:45:29 +01:00
Ralph Dolmans
e098285892
- Implement RPZ CNAME target wildcard synthesis
2020-01-15 22:42:18 +01:00
W.C.A. Wijngaards
1e0c957dcd
- Fix auth zone support for NSEC3 records without salt.
2020-01-14 16:03:29 +01:00
W.C.A. Wijngaards
ea26e5038e
- Fix for memory leak when edns subnet config options are read when
...
compiled without edns subnet support.
2020-01-14 15:48:27 +01:00
W.C.A. Wijngaards
2c4be0c201
- Fix crash after reload where a stats lookup could reference old key
...
cache and neg cache structures.
2020-01-14 15:18:52 +01:00
W.C.A. Wijngaards
9b3f3101e3
- Removed the dnscrypt_queries and dnscrypt_queries_chacha tests,
...
because dnscrypt-proxy (2.0.36) does not support the test setup
any more, and also the config file format does not seem to have
the appropriate keys to recreate that setup.
2020-01-14 14:40:44 +01:00
W.C.A. Wijngaards
e149bc7046
- Fix unreachable code in ssl set options code.
2020-01-10 11:28:01 +01:00
W.C.A. Wijngaards
a8db52120b
- Fix the relationship between serve-expired and prefetch options,
...
patch from Saksham Manchanda from Secure64.
2020-01-10 10:04:50 +01:00
Ralph Dolmans
92a525225b
- Add changelog entry for fix #138 (stop binding pidfile inside chroot dir in
...
systemd service file).
2020-01-08 16:36:18 +01:00
Ralph Dolmans and GitHub
1e8d20de0d
Merge pull request #142 from Maryse47/patch-1
...
unbound.service.in: stop binding pidfile inside chroot dir
2020-01-08 16:23:23 +01:00
Maryse47 and GitHub
89d98564c3
unbound.service.in: stop binding pidfile inside chroot dir
...
Apparently pidfile isn't used inside chroot and binding it may cause some weird failures with older systemd.
Fixes https://github.com/NLnetLabs/unbound/issues/138
2020-01-08 15:21:22 +00:00
W.C.A. Wijngaards
c4e199ecca
- And update for more spare space.
2020-01-08 12:58:07 +01:00
W.C.A. Wijngaards
5ae1544583
- Updated sldns_bget_token_par fix for also space for the zero
...
delimiter after the character.
2020-01-08 11:55:42 +01:00
W.C.A. Wijngaards
05a5dc2d0d
- Fix out-of-bounds null-byte write in sldns_bget_token_par while
...
parsing type WKS, reported by Luis Merino from X41 D-Sec.
2020-01-08 11:08:16 +01:00
W.C.A. Wijngaards
19473d95eb
- Fix 'make test' to work for --disable-sha1 configure option.
2020-01-08 09:23:46 +01:00
George Thessalonikefs
8686b0abbf
- Changes to compat/getentropy_solaris.c for,
...
ifdef stdint.h inclusion for older systems.
ifdef sha2.h inclusion for older systems.
2020-01-07 15:19:15 +02:00
George Thessalonikefs
d68ece28c4
- Downgrade compat/getentropy_solaris.c to version 1.4 from OpenBSD.
...
The dl_iterate_phdr() function introduced in newer versions raises
compilation errors on solaris 10.
2020-01-07 15:06:14 +02:00
W.C.A. Wijngaards
453c84b237
- Fix #140 : Document slave not downloading new zonefile upon update.
2020-01-06 16:36:44 +01:00
W.C.A. Wijngaards
20a3d3be5f
(Changelog note for #135 ).
...
- Merge #135 from Florian Obser: Use passed in neg and key cache
if non-NULL.
2020-01-06 16:18:46 +01:00
Wouter Wijngaards and GitHub
d982dff464
Merge pull request #135 from fobser/pass-in-neg-key-cache
...
Use passed in neg and key cache if non-NULL.
2020-01-06 16:17:16 +01:00
Ralph Dolmans
2abaca7a49
- Fix dname_has_label() code review changes
2019-12-23 17:35:11 +01:00
Ralph Dolmans
ae4f6a259b
Proccess more review feedback
2019-12-23 16:02:43 +01:00
Florian Obser
da6ac0c4ff
Use passed in neg and key cache if non-NULL.
...
With this the neg and key caches can be shared between multiple
libunbound contexts.
The msg and rrset caches already allowed this since context_finalize()
did not touch those if they are already available and have the correct
size.
Care must be taken to properly unhook the caches from the validator
environment before calling ub_ctx_delete() otherwise one risks double
free or use after free bugs.
2019-12-19 13:20:34 +01:00
George Thessalonikefs
1d45b4a1e0
- Update mailing list URL.
2019-12-16 16:03:31 +01:00
W.C.A. Wijngaards
40787a06d8
Fixup 1.9.7 version commit in configure.ac.
2019-12-12 15:52:21 +01:00
Ralph Dolmans
90b42b56b6
- Fix typo to let serve-expired-ttl work with ub_ctx_set_option(), by
...
Florian Obser
2019-12-12 13:05:09 +01:00
Ralph Dolmans and GitHub
13a76ba0a6
Merge pull request #129 from fobser/serve-expired-ttl-typo
...
Fix typo to let serve-expired-ttl work with ub_ctx_set_option().
2019-12-12 12:59:28 +01:00
Ralph Dolmans
f1d5d5d682
Make master 1.9.7 in development.
2019-12-12 12:48:29 +01:00
Florian Obser
0a499ec2ee
Fix typo to let serve-expired-ttl work with ub_ctx_set_option().
2019-12-10 18:03:24 +01:00
W.C.A. Wijngaards
41d3e2027c
- Fix to make auth zone IXFR to fallback to AXFR if a single
...
response RR is received over TCP with the SOA in it.
2019-12-10 13:09:50 +01:00
W.C.A. Wijngaards
e828d678ba
- Fix Makefile.in for ipset module compile, from Adi Prasaja.
2019-12-06 11:31:34 +01:00
W.C.A. Wijngaards
f3c2d05728
- Fix ipsecmod compile.
2019-12-06 07:59:55 +01:00
W.C.A. Wijngaards
4b73b5f299
- tag for 1.9.6rc1.
2019-12-05 11:21:46 +01:00
W.C.A. Wijngaards
ff7d68ca53
- unbound-fuzzers.tar.bz2: three programs for fuzzing, that are 1:1
...
replacements for unbound-fuzzme.c that gets created after applying
the contrib/unbound-fuzzme.patch. They are contributed by
Eric Sesterhenn from X41 D-Sec.
2019-12-05 09:10:49 +01:00
W.C.A. Wijngaards
3fb98a72d2
- Fix Make Test Fails when Configured With --enable-alloc-nonregional,
...
reported by X41 D-Sec.
2019-12-04 16:23:52 +01:00
W.C.A. Wijngaards
6e8b4a7796
- update contrib/fastrpz.patch to apply more cleanly.
2019-12-04 11:41:13 +01:00
W.C.A. Wijngaards
6f7eb3ea9f
- Fix testbound for alloccheck runs, memory purify and lock checks.
2019-12-04 11:37:24 +01:00
W.C.A. Wijngaards
216747bb17
- Fix lock type for memory purify log lock deletion.
2019-12-04 09:44:31 +01:00
W.C.A. Wijngaards
8f79119826
- make depend
2019-12-03 17:28:51 +01:00
W.C.A. Wijngaards
4106308bd5
- Fix Hardcoded Constant, reported by X41 D-Sec.
2019-12-03 17:23:38 +01:00
W.C.A. Wijngaards
c4c1f9e5ef
- Fix _vfixed not Used, removed from sbuffer code,
...
reported by X41 D-Sec.
2019-12-03 17:07:35 +01:00
W.C.A. Wijngaards
b6f0b1af86
- Fix compile error in dnscrypt.
2019-12-03 16:44:24 +01:00
W.C.A. Wijngaards
68027ab145
- Fix Client NONCE Generation used for Server NONCE,
...
reported by X41 D-Sec.
2019-12-03 16:42:14 +01:00
W.C.A. Wijngaards
4a7ebfabcf
- Fix Bad Indentation, in dnscrypt.c,
...
reported by X41 D-Sec.
2019-12-03 16:34:53 +01:00
W.C.A. Wijngaards
9ce6119513
- Fix snprintf() supports the n-specifier,
...
reported by X41 D-Sec.
2019-12-03 16:29:18 +01:00
W.C.A. Wijngaards
534eac6ae5
Note what it did, lower to 256 max count.
2019-12-03 16:21:04 +01:00
W.C.A. Wijngaards
d3ff930b06
- Fix Hang in sldns_wire2str_pkt_scan(),
...
reported by X41 D-Sec.
2019-12-03 16:20:24 +01:00
W.C.A. Wijngaards
6c3a0b54ed
- Fix Out of Bound Write Compressed Names in rdata_copy(),
...
reported by X41 D-Sec.
2019-12-03 16:18:47 +01:00
W.C.A. Wijngaards
2d444a5037
- Fix Insufficient Handling of Compressed Names in dname_pkt_copy(),
...
reported by X41 D-Sec.
2019-12-03 16:17:03 +01:00
W.C.A. Wijngaards
c99438c6a1
- Fix Out of Bounds Write in sldns_b64_pton(),
...
fixed by check in sldns_str2wire_int16_data_buf(),
reported by X41 D-Sec.
2019-12-03 16:10:34 +01:00
W.C.A. Wijngaards
3f3cadd416
- Fix Out of Bounds Write in sldns_str2wire_str_buf(),
...
reported by X41 D-Sec.
2019-12-03 16:01:31 +01:00
W.C.A. Wijngaards
e183a66d60
- Fix OOB Read in sldns_wire2str_dname_scan(),
...
reported by X41 D-Sec.
2019-12-03 15:42:34 +01:00
W.C.A. Wijngaards
d2eb78e871
- Fix Assert Causing DoS in dname_pkt_copy(),
...
reported by X41 D-Sec.
2019-12-03 15:20:48 +01:00
W.C.A. Wijngaards
5a66aecef9
- Fix similar code in auth_zone synth cname to add the extra checks.
2019-12-03 15:11:22 +01:00
W.C.A. Wijngaards
f5e06689d1
- Fix Assert Causing DoS in synth_cname(),
...
reported by X41 D-Sec.
2019-12-03 15:10:36 +01:00
W.C.A. Wijngaards
5a00b31f86
- Fix text around serial arithmatic used for RRSIG times to refer
...
to correct RFC number.
2019-12-03 12:58:09 +01:00
W.C.A. Wijngaards
cdbf091c0d
Changelog entry for merge of #124 .
...
- Merge pull request #124 from rmetrich: Changed log lock
from 'quick' to 'basic' because this is an I/O lock.
2019-12-03 10:03:44 +01:00
Wouter Wijngaards and GitHub
4edb16296b
Merge pull request #124 from rmetrich/basic_loglock
...
Changed log lock from 'quick' to 'basic' because this is an I/O lock.
2019-12-03 10:03:24 +01:00
W.C.A. Wijngaards
aa64c58368
Changelog entry for #122 .
...
- Merge pull request #122 from he32: In tcp_callback_writer(),
don't disable time-out when changing to read.
2019-12-02 13:59:43 +01:00
Wouter Wijngaards and GitHub
b4a01d6096
Merge pull request #122 from he32/timeout-fix
...
In tcp_callback_writer(), don't disable time-out when changing to read.
2019-12-02 13:59:13 +01:00
Renaud Métrich
d63cb99649
Changed log lock from 'quick' to 'basic' because this is an I/O lock.
...
We cannot use a 'quick' lock (i.e. lock spinning on the CPU) for the log
lock because it can wait a lot on I/Os. Using a 'quick' lock leads to
eating the CPU for no good reason.
Example of 'pidstat' output when using various locks for log_lock:
- 'quick' lock and slow log file system (tail -f on the log file on XFS on RHEL 8)
04:15:11 PM UID TGID TID %usr %system %CPU CPU Command
04:15:21 PM 998 16431 - 100.00 4.20 100.00 2 unbound
04:15:21 PM 998 - 16431 31.00 1.00 32.00 2 |__unbound
04:15:21 PM 998 - 16432 31.30 0.80 32.10 0 |__unbound
04:15:21 PM 998 - 16433 30.20 1.40 31.60 1 |__unbound
04:15:21 PM 998 - 16434 30.70 1.00 31.70 3 |__unbound
- 'quick' lock and log file system being fast
04:15:40 PM UID TGID TID %usr %system %CPU CPU Command
04:15:50 PM 998 16431 - 10.00 1.60 11.60 1 unbound
04:15:50 PM 998 - 16431 2.50 0.50 3.00 1 |__unbound
04:15:50 PM 998 - 16432 2.30 0.40 2.70 3 |__unbound
04:15:50 PM 998 - 16433 2.70 0.30 3.00 0 |__unbound
04:15:50 PM 998 - 16434 2.60 0.40 3.00 2 |__unbound
- 'basic' lock (this commit) and slow log file system (tail -f on the log file on XFS on RHEL 8)
04:29:48 PM UID TGID TID %usr %system %CPU CPU Command
04:29:58 PM 998 11632 - 7.10 14.10 21.20 3 unbound
04:29:58 PM 998 - 11632 1.70 3.20 4.90 3 |__unbound
04:29:58 PM 998 - 11633 1.60 3.30 4.90 1 |__unbound
04:29:58 PM 998 - 11634 2.00 4.10 6.10 1 |__unbound
04:29:58 PM 998 - 11635 1.90 3.50 5.40 1 |__unbound
We can see in the above example, when 'basic' lock is used, that CPU
isn't consumed when log file system is slow.
Another reproducer scenario: put the log file on a NFS share with 'sync'
option.
2019-11-26 16:32:07 +01:00
Havard Eidnes
dc0b1699e5
In tcp_callback_writer(), don't disable time-out when changing to read.
2019-11-26 00:02:34 +01:00
W.C.A. Wijngaards
f82f971997
- Add make distclean that removes everything configure produced,
...
and make maintainer-clean that removes bison and flex output.
2019-11-22 15:10:02 +01:00
George Thessalonikefs
30b0fa1e8e
Fix compiler warnings.
2019-11-22 14:30:56 +01:00
W.C.A. Wijngaards
1718a8e6b5
- Fix dname loop maximum, reported by Eric Sesterhenn from X41 D-Sec.
2019-11-22 14:23:00 +01:00
Ralph Dolmans
bbb737ca5a
processing RPZ review feedback
2019-11-22 12:56:24 +08:00
W.C.A. Wijngaards
ebad5416d7
- Fix comments for doxygen in dns64.
2019-11-20 15:22:20 +01:00
PMunch
8802509a61
Fix return code of init to mirror native modules
...
The return code of the init procedure was just set to be 1 in the
dynamic library loading module. This ha been rectified and it will now
return whatever is returned from the loaded module.
2019-11-20 15:13:57 +01:00
W.C.A. Wijngaards
8833d44d01
- Fix python examples/calc.py for eval, reported by X41 D-Sec.
2019-11-20 15:07:09 +01:00
W.C.A. Wijngaards
da4d6ffee3
- Fix Bad Randomness in Seed, reported by X41 D-Sec.
2019-11-20 14:40:50 +01:00
W.C.A. Wijngaards
981fedea0e
- Fix NULL Pointer Dereference via Control Port,
...
reported by X41 D-Sec.
2019-11-20 14:37:13 +01:00
W.C.A. Wijngaards
493921ef1f
Review fix of space.
2019-11-20 14:24:31 +01:00
W.C.A. Wijngaards
3a49e683ed
- Fix Enum Name not Used, reported by X41 D-Sec.
2019-11-20 14:22:06 +01:00
W.C.A. Wijngaards
3907876eac
- Fix Unrequired Checks, reported by X41 D-Sec.
2019-11-20 14:05:54 +01:00
W.C.A. Wijngaards
fcd9b34bb5
- Fix Useless memset() in validator, reported by X41 D-Sec.
2019-11-20 14:02:58 +01:00
W.C.A. Wijngaards
d63ec2dfcb
- Fix Terminating Quotes not Written, reported by X41 D-Sec.
2019-11-20 14:01:01 +01:00
W.C.A. Wijngaards
6139943428
- Fix compile with --enable-alloc-checks, reported by X41 D-Sec.
2019-11-20 13:51:10 +01:00
W.C.A. Wijngaards
a76e43341f
- Fixed Compat Code Diverging from Upstream, reported by X41 D-Sec.
2019-11-20 13:30:27 +01:00
W.C.A. Wijngaards
d63536289c
- Changes to compat/getentropy files for,
...
no link to openssl if using nettle, and hence config.h for
HAVE_NETTLE variable.
compat definition of MAP_ANON, for older systems.
ifdef stdint.h inclusion for older systems.
ifdef sha2.h inclusion for older systems.
2019-11-20 13:28:49 +01:00
W.C.A. Wijngaards
d085a0039b
- Upgrade compat/getentropy_osx.c to version 1.12 from OpenBSD.
2019-11-20 13:12:36 +01:00
W.C.A. Wijngaards
3ebc480690
- Upgrade compat/getentropy_solaris.c to version 1.13 from OpenBSD.
2019-11-20 13:11:05 +01:00
W.C.A. Wijngaards
20dd979d00
- Synchronize compat/getentropy_win.c with version 1.5 from
...
OpenBSD, no changes but makes the file, comments, identical.
2019-11-20 13:08:43 +01:00
W.C.A. Wijngaards
623dba975a
- Upgrade compat/getentropy_linux.c to version 1.46 from OpenBSD.
2019-11-20 13:05:10 +01:00
W.C.A. Wijngaards
09707fc403
- Fix Integer Underflow in Regional Allocator,
...
reported by X41 D-Sec.
2019-11-20 13:00:56 +01:00
W.C.A. Wijngaards
2dcc7016ac
- Fix Local Memory Leak in cachedb_init(),
...
reported by X41 D-Sec.
2019-11-20 12:56:39 +01:00
W.C.A. Wijngaards
f887552763
- Fix Config Injection in create_unbound_ad_servers.sh,
...
reported by X41 D-Sec.
2019-11-20 12:02:19 +01:00
W.C.A. Wijngaards
72d348de6a
- Fix Out-of-Bounds Read in dname_valid(),
...
reported by X41 D-Sec.
2019-11-20 11:38:11 +01:00
W.C.A. Wijngaards
7646c96259
- Fix Randomness Error not Handled Properly,
...
reported by X41 D-Sec.
2019-11-20 11:35:07 +01:00
W.C.A. Wijngaards
d8809c672a
- Fix Weak Entropy Used For Nettle,
...
reported by X41 D-Sec.
2019-11-20 11:28:53 +01:00
W.C.A. Wijngaards
7e3da817c3
- Adjust unbound-control to make stats_shm a read only operation.
2019-11-20 11:18:03 +01:00
W.C.A. Wijngaards
c54fe82886
- Fix Shared Memory World Writeable,
...
reported by X41 D-Sec.
2019-11-20 11:13:45 +01:00
W.C.A. Wijngaards
1fa40654d2
- Fix Race Condition in autr_tp_create(),
...
reported by X41 D-Sec.
2019-11-20 11:01:56 +01:00
W.C.A. Wijngaards
d79d75538b
- Fix Out of Bounds Read in rrinternal_get_owner(),
...
reported by X41 D-Sec.
2019-11-20 08:28:12 +01:00
W.C.A. Wijngaards
fa23ee8f31
- Fix Out of Bounds Write in sldns_bget_token_par(),
...
reported by X41 D-Sec.
2019-11-19 16:54:44 +01:00
W.C.A. Wijngaards
51c23b0209
- Fix Out of Bounds Read in sldns_str2wire_dname(),
...
reported by X41 D-Sec.
2019-11-19 16:46:33 +01:00
W.C.A. Wijngaards
a3545867fc
- Fix Integer Overflow to Buffer Overflow in
...
sldns_str2wire_dname_buf_origin(), reported by X41 D-Sec.
2019-11-19 16:42:17 +01:00
W.C.A. Wijngaards
02080f6b18
- Fix Integer Overflows in Size Calculations,
...
reported by X41 D-Sec.
2019-11-19 16:32:40 +01:00
W.C.A. Wijngaards
07156bd5ea
- Fix Out-of-bounds Read in rr_comment_dnskey(),
...
reported by X41 D-Sec.
2019-11-19 16:17:06 +01:00
W.C.A. Wijngaards
2a4e840be4
- Fix Unchecked NULL Pointer in dns64_inform_super()
...
and ipsecmod_new(), reported by X41 D-Sec.
2019-11-19 15:48:18 +01:00
W.C.A. Wijngaards
226298bbd3
- Fix Integer Overflow in Regional Allocator,
...
reported by X41 D-Sec.
2019-11-19 15:38:05 +01:00
W.C.A. Wijngaards
5d46bb3879
Cast to unsigned before comparison for assertion.
2019-11-19 15:26:57 +01:00
W.C.A. Wijngaards
a839a8ae01
And check the buffer size precisely.
2019-11-19 12:11:28 +01:00
W.C.A. Wijngaards
79a6e9fbe2
- Fixes to please lint checks.
2019-11-19 12:10:03 +01:00
W.C.A. Wijngaards
16bbfc3461
- Fix authzone printout buffer length check.
2019-11-19 10:09:44 +01:00
W.C.A. Wijngaards
d8090b8cae
- 1.9.5 is 1.9.4 with bugfix, trunk is 1.9.6 in development.
2019-11-19 10:06:12 +01:00
W.C.A. Wijngaards
09845779d5
- Fix CVE-2019-18934, shell execution in ipsecmod.
2019-11-19 10:05:18 +01:00
W.C.A. Wijngaards
cb8374cce5
- gitignore .source tempfile used for compatible make.
2019-11-18 15:58:19 +01:00
W.C.A. Wijngaards
442e95620e
- Portable grep usage for reuseport configure test.
...
- Check return type of HMAC_Init_ex for openssl 0.9.8.
2019-11-18 15:53:47 +01:00
W.C.A. Wijngaards
af6f5a3f54
- Provide a prototype for compat malloc to remove compile warning.
2019-11-18 13:52:17 +01:00
W.C.A. Wijngaards
253d95a8ef
- update to bison output of 3.4.1 in code repository.
2019-11-18 10:50:54 +01:00
W.C.A. Wijngaards
57f2582790
- In unbound-host use separate variable for get_option to please
...
code checkers.
2019-11-18 10:45:47 +01:00
W.C.A. Wijngaards
d05d6b959a
- fixes for splint cleanliness, long vs int in SSL set_mode.
2019-11-13 15:16:27 +01:00
W.C.A. Wijngaards
d4c904d091
- contrib/fastrpz.patch updated to apply for current code.
2019-11-13 11:40:56 +01:00
W.C.A. Wijngaards
5ac9bf3f9b
- iana portlist updated.
2019-11-13 11:37:06 +01:00
W.C.A. Wijngaards
f759fc5839
Changelog note and configure autoconf generated.
...
- Merge #102 from jrtc27: Add getentropy emulation for FreeBSD.
2019-11-11 14:46:24 +01:00
Wouter Wijngaards and GitHub
8903dc779f
Merge pull request #102 from jrtc27/freebsd-getentropy
...
Add getentropy emulation for FreeBSD
2019-11-11 14:45:18 +01:00
W.C.A. Wijngaards
29b90c6e58
- Fix #109 : check number of arguments for stdin-pipes in
...
unbound-control and fail if too many arguments.
2019-11-11 12:02:51 +01:00
PMunch
5eabc429bc
Add "dynlib" prefix to example output, log queries
...
This adds the "dynlib: " prefix to all messages created by the
`helloworld.c` dynamic library example.
It also adds logging of queries that pass through `operate`.
2019-11-04 16:03:04 +01:00
James Clarke
9b310f4084
Add getentropy emulation for FreeBSD
2019-11-02 18:08:23 +00:00
PMunch
d104d3be22
Add inplace callback to dynlibmod, improve example
...
This adds the possibility to properly register inplace callbacks in the
dynamic library module. It works by creating a wrapper procedure that
is available to the dynamic library and will call the given callback
through a whitelisted callback function.
The dynamic library example has already been improved to include
comments and some simple examples on allocating and deallocating memory
and registering callbacks.
2019-11-01 10:44:26 +01:00
W.C.A. Wijngaards
7dfbcdf276
- Fix #99 : Memory leak in ub_ctx (event_base will never be freed).
2019-10-24 09:58:45 +02:00
George Thessalonikefs
941b324187
Add new configure option --enable-fully-static to enable full static build if
...
requested; in relation to #91 .
2019-10-23 16:10:07 +02:00
W.C.A. Wijngaards
21472c2393
Changelog note for #97 .
...
- Merge #97 : manpage: Add missing word on unbound.conf,
from Erethon.
2019-10-23 07:56:17 +02:00
Wouter Wijngaards and GitHub
488e4c66cd
Merge pull request #97 from Erethon/master
...
manpage: Add missing word on unbound.conf
2019-10-23 07:54:57 +02:00
Dionysis Grigoropoulos
e8b8d42f8b
manpage: Add missing word on unbound.conf
2019-10-23 00:35:49 +03:00
W.C.A. Wijngaards
e6a179e27a
- drop-tld.diff: adds option drop-tld: yesno that drops 2 label
...
queries, to stop random floods. Apply with
patch -p1 < contrib/drop-tld.diff and compile.
From Saksham Manchanda (Secure64). Please note that we think this
will drop DNSKEY and DS lookups for tlds and hence break DNSSEC
lookups for downstream clients.
2019-10-22 10:32:37 +02:00
PMunch
f79811435b
Cleanup some minor things in dynlibmod
2019-10-22 08:42:00 +02:00
PMunch
f177dc974c
Add support for multiple dynamic modules
...
Allows the use of multiple dynamic modules. Simply add more "dynlib"
entries to the "modules-config" and the same amount of "dynlib-file"
entries in the dynlib configuration block.
2019-10-21 15:59:53 +02:00
PMunch
8eeb910e3d
Improve dynlib module and add documentation
...
Dynamic library module is now only a thin wrapper that loads dynamic
libraries and forwards all function calls directly to the loaded module.
This meant adding get_mem and clear, and get_mem calls have been added
in the expected places.
Documentation has also been added to the example.conf and the
unbound.conf manpage.
2019-10-21 14:20:33 +02:00
PMunch
1762437121
Add dynamic library support
2019-10-21 09:34:51 +02:00
W.C.A. Wijngaards
eb2283332b
- Add doxygen comments to unbound-anchor source address code, in #86 .
2019-10-07 09:50:04 +02:00
W.C.A. Wijngaards
b2c3b4758b
For #86 , note credit for Lukas Wunner.
2019-10-03 16:29:45 +02:00
W.C.A. Wijngaards
8bfbd81fec
Changelog entry for #86 and whitespace fix.
...
- Merge #86 from psquarejho: Added -b source address option to
smallapp/unbound-anchor.c.
2019-10-03 16:22:42 +02:00
Wouter Wijngaards and GitHub
3d91a9fd56
Merge pull request #86 from psquarejho/master
...
Added -b / source address option to smallapp/unbound-anchor.c
2019-10-03 16:19:58 +02:00
W.C.A. Wijngaards
facc6c6541
- Merge 1.9.4 release with fix for vulnerability CVE-2019-16866.
...
- Continue with development of 1.9.5.
2019-10-03 11:40:13 +02:00
W.C.A. Wijngaards
380b87e21a
Merge remote-tracking branch 'origin/branch-1.9.4'
2019-10-03 11:37:22 +02:00
W.C.A. Wijngaards
b60c4a472c
Branch 1.9.4 prepares for 1.9.4 release from 1.9.3
2019-10-03 10:34:40 +02:00
W.C.A. Wijngaards
82dffb1023
Changelog entry for Merge #90 .
...
- Merge #90 from vcunat: fix build with nettle-3.5.
2019-10-03 08:59:16 +02:00
Wouter Wijngaards and GitHub
dc30e66ddc
Merge pull request #90 from vcunat/p/nettle-3.5
...
fix build with nettle-3.5
2019-10-03 08:58:47 +02:00
Vladimír Čunát
ec021e0d4b
fix build with nettle-3.5
...
https://git.lysator.liu.se/nettle/nettle/commit/8bf4747d9
2019-10-02 20:05:03 +02:00
W.C.A. Wijngaards
7963c9f463
Changelog note for #87 .
...
- Merge #87 from hardfalcon: Fix contrib/unbound.service.in,
Drop CAP_KILL, use + prefix for ExecReload= instead.
2019-09-26 13:17:46 +02:00
Wouter Wijngaards and GitHub
710851e69a
Merge pull request #87 from hardfalcon/patch-1
...
Drop CAP_KILL, use + prefix for ExecReload= instead
2019-09-26 13:17:24 +02:00
Pascal Ernster and GitHub
11f22074a9
Drop CAP_KILL, use + prefix for ExecReload= instead
...
CAP_KILL seems a bit too much privileges for the sole purpose of being able to make ExecReload= work.
Use the + prefix on ExecReload= instead to run "/bin/kill -HUP $MAINPID" with full privileges, ignoring the restrictions from CapabilityBoundingSet=.
See https://www.freedesktop.org/software/systemd/man/systemd.service.html#ExecStart= for further details about the + prefix in ExecReload=.
2019-09-26 08:41:37 +00:00
W.C.A. Wijngaards
55bb4c1275
- The unbound.conf includes are sorted ascending, for include
...
statements with a '*' from glob.
2019-09-25 16:50:30 +02:00
Jens Hoffrichter
b966dd8e06
Added -b / source address option to smallapp/unbound-anchor.c
2019-09-24 14:42:36 +00:00
W.C.A. Wijngaards
06a91b0eaa
Changelog entry for fix #84 and #85 .
...
- Merge #85 for #84 from sam-lunt: Add kill capability to systemd
service file to fix that systemctl reload fails.
2019-09-23 09:20:12 +02:00
Wouter Wijngaards and GitHub
3df64cc677
Merge pull request #85 from sam-lunt/add-cap-kill
...
Add kill capability to systemd service file
2019-09-23 09:18:36 +02:00
sam-lunt and GitHub
6943cab670
Add kill capability to systemd service file
...
The ExecReload command calls kills on a process owned by the unbound user (or whatever user is configured). To do so, it needs the CAP_KILL capability.
2019-09-21 14:36:12 -05:00
W.C.A. Wijngaards
f635b47ade
Changelog entry for #83
...
- Merge #83 from Maryse47: contrib/unbound.service.in: do not fork
into the background.
2019-09-20 12:59:41 +02:00
Wouter Wijngaards and GitHub
eb7f9a50f2
Merge pull request #83 from Maryse47/nofork
...
unbound.service.in: do not fork into the background
2019-09-20 12:59:21 +02:00
Maryse47 and GitHub
acdd4058d2
unbound.service.in: do not fork into the background
...
This is needed when unbound config doesn't set "do-daemonize: no" by itself otherwise starting service fails with:
systemd[1]: unbound.service: Got notification message from PID <PID>, but reception only permitted for main PID which is currently not known
https://github.com/NLnetLabs/unbound/blob/release-1.9.3/doc/example.conf.in#L236
2019-09-20 10:07:37 +00:00
W.C.A. Wijngaards
1b62399a6e
Changelog entry for #81 .
...
- Merge #81 from Maryse47: Consistently use /dev/urandom instead
of /dev/random in scripts and docs.
2019-09-20 07:44:43 +02:00
Wouter Wijngaards and GitHub
e1e71eac3e
Merge pull request #81 from Maryse47/urandom
...
Consistently use /dev/urandom instead of /dev/random in scripts and docs
2019-09-20 07:44:22 +02:00
W.C.A. Wijngaards
aefd2df51f
(Changelog entry for #82 ).
...
- Merge #82 from hardfalcon: Downgrade CAP_NET_ADMIN to CAP_NET_RAW
in unbound.service.
2019-09-20 07:38:34 +02:00
Wouter Wijngaards and GitHub
15020f7666
Merge pull request #82 from hardfalcon/patch-1
...
Downgrade CAP_NET_ADMIN to CAP_NET_RAW in unbound.service
2019-09-20 07:37:32 +02:00
Pascal Ernster and GitHub
ae2d5276d2
Downgrade CAP_NET_ADMIN to CAP_NET_RAW in unbound.service
...
Since kernel 3.2, CAP_NET_RAW instead of CAP_NET_ADMIN is sufficient to allow for the usage of the IP_TRANSPARENT socket option. CAP_NET_ADMIN allows far more mayhem then CAP_NET_RAW, so prefer the safer, more restrictive solution.
2019-09-20 04:47:56 +00:00
Maryse47
ce0e9bef45
Consistently use /dev/urandom instead of /dev/random in scripts and docs
...
Unbound code call /dev/urandom (see below) but various docs and scripts
mention /dev/random which may be confusing.
https://github.com/NLnetLabs/unbound/blob/release-1.9.3/compat/arc4random.c#L107
https://github.com/NLnetLabs/unbound/blob/release-1.9.3/compat/getentropy_linux.c#L251
https://github.com/NLnetLabs/unbound/blob/release-1.9.3/compat/getentropy_osx.c
https://github.com/NLnetLabs/unbound/blob/release-1.9.3/compat/getentropy_solaris.c#L116
2019-09-19 17:40:49 +02:00
W.C.A. Wijngaards
1dcc88b6e8
- Merge #80 from stasic: Improve wording in man page.
...
(Changelog entry for merge)
2019-09-19 16:56:14 +02:00
Wouter Wijngaards and GitHub
faa9dd7bf6
Merge pull request #80 from stasic/patch-1
...
Improve wording in man page
2019-09-19 16:54:42 +02:00
Arsen Stasic and GitHub
9303292b7f
Improve wording in man page
...
Make it more consistent throughout the man page.
If a config option can either be *yes* or *no* use exact these terms and not something like *on* which could be easily read as *no*.
2019-09-19 14:51:54 +00:00
W.C.A. Wijngaards
9f0b260c49
- Fix wrong response ttl for prepended short CNAME ttls, this would
...
create a wrong zero_ttl response count with serve-expired enabled.
2019-09-19 16:29:51 +02:00
W.C.A. Wijngaards
ab53baa6f5
- Fix for oss-fuzz build warning.
2019-09-19 10:09:49 +02:00
W.C.A. Wijngaards
554e4a939c
- Fix fix for #78 to also free service callback struct.
2019-09-19 10:03:47 +02:00
W.C.A. Wijngaards
45b3215594
- oss-fuzz badge on README.md.
2019-09-19 09:55:23 +02:00
W.C.A. Wijngaards
3cb1cdeebd
- Merge pull request #76 from Maryse47: Improvements and fixes for
...
systemd unbound.service.
(Changelog note for merge of #76 ).
2019-09-19 09:53:21 +02:00
Wouter Wijngaards and GitHub
9a9d59ecaf
Merge pull request #76 from Maryse47/patch-1
...
Improvements and fixes for systemd unbound.service
2019-09-19 09:52:30 +02:00
W.C.A. Wijngaards
1a4eaaabc5
- Fix #78 : Memory leak in outside_network.c.
2019-09-19 09:11:23 +02:00
Maryse47
ff8fd0be5c
Improvements and fixes for systemd unbound.service
...
1. Remove `ProtectKernelTunables=true`: This prevents various with socket options from working as shown below.
`unbound[] warning: so-rcvbuf 1048576 was not granted. Got 425984. To fix: start with root permissions(linux) or sysctl bigger net.core.rmem_max(linux) or kern.ipc.maxsockbuf(bsd) values.`
2. Add `CAP_NET_ADMIN` to available caps which is needed for `ip-transparent: yes` config option to work as shown below.
`unbound[] warning: setsockopt(.. IP_TRANSPARENT ..) failed: Operation not permitted`
3. Make `ReadWritePaths` less permissive: `UNBOUND_SYSCONF_DIR` equals to `sysconfdir` which usually equals to `/etc` and `UNBOUND_LOCALSTATE_DIR` equals to `localstatedir` which usually equals to `/var`. Allowing write access for those dirs shouldn't be needed. The only dirs unbound should be allow to write to are `/run` ( for pidfile), `@UNBOUND_RUN_DIR@` (for chroot) and `@UNBOUND_CHROOT_DIR@` in case it differs from the previous one.
4. Bind-mount `/run/systemd/notify`, `UNBOUND_PIDFILE`, `/dev/log`, `/dev/urandom` in order to use them inside chroot.
5. Add few extra hardening options: `RestrictNamespaces`, `LockPersonality` and `RestrictSUIDSGID` should be safe to use.
2019-09-18 21:48:12 +02:00
W.C.A. Wijngaards
13d96540de
- Use explicit bzero for wiping clear buffer of hash in cachedb,
...
reported by Eric Sesterhenn from X41 D-Sec.
2019-09-11 15:31:03 +02:00
Ralph Dolmans
f3dfb4d537
Typo fix, reported by jpmens
2019-09-09 18:54:23 +02:00
Ralph Dolmans
9843b836ee
Merge branch 'master' into rpz
2019-09-09 17:17:43 +02:00
Ralph Dolmans
4ac33aa104
- Merge clean up
...
- revert dname2str off by one fix
- fix str2dname off by one at right location
2019-09-09 17:13:08 +02:00
Ralph Dolmans
2b5cd8e9b4
Merge remote-tracking branch 'ralph/feature/rpz' into rpz
2019-09-09 17:11:26 +02:00
W.C.A. Wijngaards
e45e9f1ce0
- Fix #72 : configure --with-syslog-facility=LOCAL0-7 with default
...
LOG_DAEMON (as before) can set the syslog facility that the server
uses to log messages.
2019-09-09 14:27:55 +02:00
W.C.A. Wijngaards
05b9f4fd28
- Fix #71 : fix openssl error squelch commit compilation error.
2019-09-04 08:44:19 +02:00
W.C.A. Wijngaards
1089fd6dc1
- squelch DNS over TLS errors 'ssl handshake failed crypto error'
...
on low verbosity, they show on verbosity 3 (query details), because
there is a high volume and the operator cannot do anything for the
remote failure. Specifically filters the high volume errors.
2019-09-03 09:47:27 +02:00
W.C.A. Wijngaards
366296ec14
- updated Makefile dependencies.
2019-09-02 15:56:24 +02:00
W.C.A. Wijngaards
7f9aa6734a
- ipset: refactor long routine into three smaller ones.
2019-09-02 15:17:25 +02:00
W.C.A. Wijngaards
9902a5f81d
- ipset module #28 : log that an address is added, when verbosity high.
2019-09-02 13:50:42 +02:00
W.C.A. Wijngaards
cd0a2b1af1
- Master is 1.9.4 in development.
2019-08-27 09:56:20 +02:00
Ralph Dolmans
bc39217070
Don't pass along unused parameter
2019-08-23 12:45:34 +02:00
Ralph Dolmans
ccb576f95e
- add always_deny action, use this one for RPZ
...
- use localzone's memory layout when removing rr from rrset
2019-08-23 12:15:37 +02:00
W.C.A. Wijngaards
a374dfb669
- Fix contrib/fastrpz.patch asprintf return value checks.
2019-08-23 08:41:46 +02:00
W.C.A. Wijngaards
79fa94834e
- 1.9.3rc2 release candidate tag.
2019-08-22 14:50:49 +02:00
W.C.A. Wijngaards
e35d5f5a2d
delete duplicate file.
2019-08-22 13:32:34 +02:00
W.C.A. Wijngaards
334e2b1e35
updated fastrpz.patch to apply cleanly.
2019-08-22 13:31:09 +02:00
W.C.A. Wijngaards
06847ff3be
- Fix that pkg-config is setup before --enable-systemd needs it.
2019-08-22 12:22:25 +02:00
W.C.A. Wijngaards
80c2c69fa7
- Fix log_dns_msg to log irrespective of minimal responses config.
2019-08-21 17:41:29 +02:00
Ralph Dolmans
8b752e359e
- Document limitation of pidfile removal outside of chroot directory.
2019-08-19 13:27:19 +02:00
W.C.A. Wijngaards
d3b3d64ef3
- Remove warning about unknown cast-function-type warning pragma.
2019-08-16 12:52:58 +02:00
W.C.A. Wijngaards
c602ba7319
- Fixup contrib/fastrpz.patch
2019-08-16 12:37:13 +02:00
W.C.A. Wijngaards
bdb6c153e4
- Please doxygen's parser for "@" occurrence in doxygen comment.
2019-08-16 12:21:40 +02:00
W.C.A. Wijngaards
d8a8730cac
- Fix unittest valgrind false positive uninitialised value report,
...
where if gcc 9.1.1 uses -O2 (but not -O1) then valgrind 3.15.0
issues an uninitialised value for the token buffer at the str2wire.c
rrinternal_get_owner() strcmp with the '@' value. Rewritten to use
straight character comparisons removes the false positive. Also
valgrinds --expensive-definedness-checks=yes can stop this false
positive.
2019-08-16 12:18:23 +02:00
Ralph Dolmans
a16111d471
Prevent potential double free
2019-08-16 12:13:30 +02:00
W.C.A. Wijngaards
0532cdd357
- (for later release): -V prints if TCP fastopen is available.
2019-08-15 17:04:38 +02:00
W.C.A. Wijngaards
e84b913585
- 1.9.3rc1 release candidate tag.
2019-08-15 15:49:15 +02:00
W.C.A. Wijngaards
a5027f5f56
- Fix character buffer size in ub_ctx_hosts.
2019-08-15 15:11:04 +02:00
W.C.A. Wijngaards
06a58ca248
- escape commandline contents for -V.
2019-08-15 15:05:02 +02:00
W.C.A. Wijngaards
4700d79024
- avoid warning about upcast on 32bit systems for autotrust.
2019-08-15 14:25:46 +02:00
W.C.A. Wijngaards
9d9884c442
- Fix autotrust temp file uniqueness windows compile.
2019-08-15 14:02:14 +02:00
W.C.A. Wijngaards
c1c75929fa
- iana portlist updated.
2019-08-15 13:07:26 +02:00
W.C.A. Wijngaards
8cb3656b3e
- Fix warning for unused variable for compilation without systemd.
2019-08-14 16:08:19 +02:00
George Thessalonikefs
a90f173875
- Fix #59 , when compiled with systemd support check that we can properly
...
communicate with systemd through the `NOTIFY_SOCKET`.
2019-08-14 15:51:28 +02:00
Wouter Wijngaards and GitHub
b266db3920
Merge pull request #57 from NLnetLabs/show-build-options
...
Introduce `-V` option to print the version number and build options.
2019-08-14 12:47:42 +02:00
gthess and GitHub
fd415d8833
Merge branch 'master' into show-build-options
2019-08-14 11:45:41 +02:00
W.C.A. Wijngaards
b5a52f8c86
- Generate configlexer with newer flex.
2019-08-14 11:40:35 +02:00
W.C.A. Wijngaards
67271242bf
autoconf for the '-V' option changes.
2019-08-14 11:34:27 +02:00
Ralph Dolmans
965f16cc89
- Add RPZ AXFR test
...
- Fix memory leak
2019-08-13 17:06:43 +02:00
Ralph Dolmans
4cbf4f4996
- Add RPZ response IP override test
2019-08-12 18:44:30 +02:00
George Thessalonikefs
008813f0a2
- Introduce -V option to print the version number and build options.
...
Previously reported build options like linked libs and linked modules
are now moved from `-h` to `-V` as well for consistency.
- PACKAGE_BUGREPORT now also includes link to GitHub issues.
2019-08-12 17:52:43 +02:00
Ralph Dolmans
88fce791df
- Add RPZ respip test
...
- Fix rpz memory leak
2019-08-12 16:06:15 +02:00
Ralph Dolmans
7180284d82
- Add RPZ/QNAME override test
2019-08-08 16:43:28 +02:00
Ralph Dolmans
401fc15443
- Extend RPZ/QNAME trigger test
...
- Fix potential memory leak
2019-08-08 16:07:16 +02:00
Ralph Dolmans
4eb7771f97
- Added RPZ/QNAME trigger test
2019-08-08 13:50:02 +02:00
Ralph Dolmans
abbb5c0f6d
Update RPZ man page and example.conf
2019-08-07 14:53:23 +02:00
Ralph Dolmans
0987a82877
Add statistics support for disabled (action override) response IP RPZ
...
triggers.
2019-08-07 14:09:48 +02:00
W.C.A. Wijngaards
fa506e3cda
- Check repinfo in worker_handle_request, if null, drop it.
2019-08-01 16:57:36 +02:00
W.C.A. Wijngaards
df0c844eed
- Fix to timeval_add for remaining second in microseconds.
2019-08-01 16:48:41 +02:00
W.C.A. Wijngaards
199e6c586b
- Fix to return after failed auth zone http chunk write.
...
- Fix to remove unused test for task_probe existance.
2019-08-01 16:40:52 +02:00
Ralph Dolmans
1c5d081853
- Add RPZ response IP override option, logging, and statistics
2019-08-01 14:31:37 +02:00
W.C.A. Wijngaards
21f740d313
- Fix #52 #53 , fix for example fail program.
2019-08-01 09:34:44 +02:00
W.C.A. Wijngaards
e860d39f54
- For #52 #53 , second context does not close logfile override.
2019-08-01 09:15:33 +02:00
W.C.A. Wijngaards
fe0b1da859
Fix comment.
2019-07-29 16:58:23 +02:00
W.C.A. Wijngaards
27811ffaa9
- Add hex print of trust anchor pointer to trust anchor file temp
...
name to make it unique, for libunbound created multiple contexts.
2019-07-29 16:51:40 +02:00
W.C.A. Wijngaards
7d5ab2f4de
- Add verbose log message when auth zone file is written, at level 4.
2019-07-29 09:25:49 +02:00
W.C.A. Wijngaards
5f5c00203e
- Fix question section mismatch in local zone redirect.
2019-07-23 14:01:59 +02:00
W.C.A. Wijngaards
b4b0065554
Fixup space in error message.
2019-07-19 12:51:37 +02:00
W.C.A. Wijngaards
c94e13220b
- Fix #49 : Set no renegotiation on the SSL context to stop client
...
session renegotiation.
2019-07-19 08:18:06 +02:00
Ralph Dolmans
9ce7045413
- Fix doxygen issue
...
- Fix memory leak
- IANA ports update
- merge littlehash ASAN changes
2019-07-16 19:45:49 +02:00
Ralph Dolmans
a8d6147ae4
- Added RPZ response IP support
2019-07-16 18:43:16 +02:00
W.C.A. Wijngaards
368386c011
- Fix #48 : Unbound returns additional records on NODATA response,
...
if minimal-responses is enabled, also the additional for negative
responses is removed.
2019-07-12 14:34:35 +02:00
Ralph Dolmans
d5ebc63add
- Fix in respip addrtree selection. Absence of addr_tree_init_parents() call
...
made it impossible to go up the tree when the matching netmask is too
specific.
2019-07-09 14:58:36 +02:00
Ralph Dolmans
d323e1bda8
- Fix for possible assertion failure when answering respip CNAME from cache.
2019-07-05 16:52:03 +02:00
W.C.A. Wijngaards
36819adcc2
Nicer spelling and layout.
2019-06-25 15:14:07 +02:00
W.C.A. Wijngaards
da46ea24d5
- For #45 , check that 127.0.0.1 and ::1 are not used in unbound.conf
...
when do-not-query-localhost is turned on, or at default on,
unbound-checkconf prints a warning if it is found in forward-addr or
stub-addr statements.
2019-06-25 14:50:49 +02:00
Ralph Dolmans
395d83cfc8
Procedures to parse RPZ ip address notation.
2019-06-24 16:01:01 +02:00
W.C.A. Wijngaards
1aa1facabc
- Fix memleak in unit test, reported from the clang 8.0 static analyzer.
2019-06-24 10:53:27 +02:00
W.C.A. Wijngaards
78b2f1cc20
- Fix python dict reference and double free in config.
2019-06-18 17:25:08 +02:00
W.C.A. Wijngaards
164f302011
- Merge PR #6 : Python module: support multiple instances
...
- Merge PR #5 : Python module: define constant MODULE_RESTART_NEXT
- Merge PR #4 : Python module: assign something useful to the
per-query data store 'qdata'
Noted in Changelog.
2019-06-18 17:11:31 +02:00
W.C.A. Wijngaards
cc39725cf3
Merge branch 'episource-dev/all-merged/master'.
...
Merge PR #6 : Python module: support multiple instances
Merge PR #5 : Python module: define constant MODULE_RESTART_NEXT
Merge PR #4 : Python module: assign something useful to the per-query data store 'qdata'
2019-06-18 17:08:59 +02:00
W.C.A. Wijngaards
63b2628a18
Merge branch 'dev/all-merged/master' of git://github.com/episource/unbound into episource-dev/all-merged/master
2019-06-18 17:07:57 +02:00
W.C.A. Wijngaards
0f3eac4a0e
- Added documentation to the ipset files (for doxygen output).
2019-06-18 16:25:11 +02:00
W.C.A. Wijngaards
72738471f1
- make depend
2019-06-18 15:59:10 +02:00
W.C.A. Wijngaards
c1e75c0369
- Fix to make unbound-control with ipset, remove unused variable,
...
use unsigned type because of comparison, and assign null instead
of compare with it. Remade lex and yacc output.
2019-06-18 15:57:28 +02:00
W.C.A. Wijngaards
b16c872a60
- PR #28 : IPSet module, by Kevin Chou. Created a module to support
...
the ipset that could add the domain's ip to a list easily.
Needs libmnl, and --enable-ipset and config it, doc/README.ipset.md.
- Fix to omit RRSIGs from addition to the ipset.
2019-06-18 15:38:37 +02:00
W.C.A. Wijngaards
364441e0f5
Merge branch 'k9982874-master',PR #28 IPset module.
2019-06-18 13:54:04 +02:00
W.C.A. Wijngaards
ed95b07764
Merge branch 'master' of git://github.com/k9982874/unbound into k9982874-master
2019-06-18 13:52:52 +02:00
W.C.A. Wijngaards
bf2307ca97
- Fix for #24 : Fix abort due to scan of auth zone masters using old
...
address from previous scan.
2019-06-17 14:15:36 +02:00
W.C.A. Wijngaards
1ec96d8f07
- Fix #39 : In libunbound, leftover logfile is close()d unpredictably.
2019-06-17 12:13:12 +02:00
W.C.A. Wijngaards
3499d3c647
- Master contains version 1.9.3 in development.
2019-06-17 11:42:19 +02:00
W.C.A. Wijngaards
ee06aaaad9
- 1.9.2rc3 release candidate tag.
2019-06-14 08:38:37 +02:00
Moritz Schneider
f72885e5d7
Update Changelog
2019-06-12 19:11:20 +02:00
Moritz Schneider
8d9b94d3ef
Update documentation for outbound-msg-retry
2019-06-12 19:09:15 +02:00
Moritz Schneider
7c18b36521
Adapt some comments
2019-06-12 19:01:30 +02:00
Moritz Schneider
eb5683d6e6
Update configparser with outbound-msg-retry config parameter
2019-06-12 19:01:29 +02:00
Moritz Schneider
79cc049096
Make outbound msg retry configurable
2019-06-12 19:01:28 +02:00
Moritz Schneider
78fa3fcb07
Add unit test for check the configuration of outbound max retries
2019-06-12 19:01:27 +02:00
Moritz Schneider
2a4c7c81e7
Styling: Fix mixture of tabs and spaces
2019-06-12 19:01:27 +02:00
Moritz Schneider
1f9e3e9ba6
Styling: remove trailing whitespaces
2019-06-12 19:01:26 +02:00
W.C.A. Wijngaards
af6c5dea43
- Fix another spoolbuf storage code point, in prefetch.
2019-06-12 08:32:45 +02:00
W.C.A. Wijngaards
b57771d42b
- 1.9.2rc1 release candidate tag.
2019-06-11 12:46:44 +02:00
W.C.A. Wijngaards
6067ce6d2b
- Fix that fixes the Fix that spoolbuf is not used to store tcp
...
pipelined response between mesh send and callback end, this fixes
error cases that did not use the correct spoolbuf.
2019-06-11 12:15:43 +02:00
W.C.A. Wijngaards
081fd4fdae
- 1.9.2rc1 release candidate tag.
2019-06-06 09:32:53 +02:00
Ralph Dolmans
3021e320dd
Only strdup rpz_log_name when configured
2019-06-05 14:26:57 +02:00
Ralph Dolmans
a77c35ef50
Add RPZ config options to unbound.conf man page.
2019-06-04 15:39:08 +02:00
Ralph Dolmans
bc83e0b016
fix double free issue
2019-06-04 12:38:44 +02:00
W.C.A. Wijngaards
09a0e6ee30
- iana portlist updated.
2019-06-04 12:21:21 +02:00
Ralph Dolmans
268580f348
Added RPZ log name and stats
2019-06-03 15:46:39 +02:00
W.C.A. Wijngaards
a4f4d7b6ba
- Fix to guard _OPENBSD_SOURCE from redefinition.
2019-05-29 13:28:03 +02:00
W.C.A. Wijngaards
e2a2dcdfd5
- gitignore config.h.in~.
2019-05-28 11:12:41 +02:00
W.C.A. Wijngaards
14b11384a4
- Fix to define _OPENBSD_SOURCE to get reallocarray on NetBSD.
2019-05-28 11:12:05 +02:00
W.C.A. Wijngaards
a03f0a388e
- Fix double file close in tcp pipelined response code.
2019-05-27 11:23:41 +02:00
Wouter Wijngaards
0b77c9d676
- Fix that spoolbuf is not used to store tcp pipelined response
...
between mesh send and callback end.
2019-05-24 09:35:38 +02:00
W.C.A. Wijngaards
1c3ba0cef7
- Note that so-reuseport at extreme load is better turned off,
...
otherwise queries are not distributed evenly, on Linux 4.4.x.
2019-05-20 11:57:09 +02:00
Kevin Chou
19c2ece763
fix segmentation fault
2019-05-18 13:48:49 +08:00
Ralph Dolmans
b0b69321f9
- Added RPZ action overrides
...
- Added RPZ policy apply logging
2019-05-16 22:30:42 +02:00
W.C.A. Wijngaards
310396190b
- Fix #31 : swig 4.0 and python module.
2019-05-16 11:06:01 +02:00
W.C.A. Wijngaards
a08fe8ca60
- Attempt to fix malformed tcp response.
2019-05-13 15:39:59 +02:00
W.C.A. Wijngaards
a95f5fd5cb
- Squelch log messages from tcp send about connection reset by peer.
...
They can be enabled with verbosity at higher values for diagnosing
network connectivity issues.
2019-05-13 10:39:39 +02:00
W.C.A. Wijngaards
a922a19d70
- Revert fix for oss-fuzz, error is in that build script that
...
unconditionally includes .o files detected by configure, also
when the machine architecture uses different LIBOBJS files.
2019-05-09 17:07:01 +02:00
W.C.A. Wijngaards
a8d0177b36
- Attempt to fix build failure in oss-fuzz
...
because of reallocarray.
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14648 .
Does not omit compile flags from commandline.
2019-05-08 14:43:56 +02:00
W.C.A. Wijngaards
779b86fb22
- Fix doxygen output error on readme markdown vignettes.
2019-05-07 16:11:15 +02:00
W.C.A. Wijngaards
e3453711e5
- Fix edns-subnet locks, in error cases the lock was not unlocked.
2019-05-07 16:10:22 +02:00
W.C.A. Wijngaards
73484d3b36
Fix spelling in code annotation of changes
...
in the public domain lookup3.c file.
2019-05-06 10:10:58 +02:00
W.C.A. Wijngaards
f1c23891ab
- Fix #30 : AddressSanitizer finding in lookup3.c.
...
This sets the hash function to use a slower but better auditable code
that does not read beyond array boundaries. This makes code better
security checkable, and is better for security. It is fixed to be
slower, but not read outside of the array.
2019-05-06 09:44:01 +02:00
W.C.A. Wijngaards
9b7843f879
- Fix #29 : Solaris 11.3 and missing symbols be64toh, htobe64.
2019-05-06 09:26:23 +02:00
Kevin Chou
5f4c9b0dfe
rollback the code
2019-05-05 10:47:00 +08:00
Kevin Chou
3280e76527
bugfix
2019-05-04 17:39:27 +08:00
Kevin Chou
46099259be
performance improvement
2019-05-04 12:52:18 +08:00
Kevin Chu
56af87e2f3
edit config parser to support ipset
2019-05-03 17:45:34 +08:00
W.C.A. Wijngaards
bd5eeff364
- And gitignore unit test generated files, and generated doc files.
2019-05-02 16:14:03 +02:00
W.C.A. Wijngaards
2fea5663bd
- Fix .gitignore, add pythonmod and dnstap generated files.
2019-05-02 16:01:56 +02:00
Kevin Chu
1a48bdebb5
Add support for ipset
2019-05-02 19:43:30 +08:00
W.C.A. Wijngaards
f46c238552
- contrib/fastrpz.patch updated for code changes, and with git diff.
2019-05-02 11:17:41 +02:00
Ralph Dolmans
7e300939c0
Add repology batch to README.md
2019-05-01 18:03:16 +02:00
W.C.A. Wijngaards
409bc229ef
Merge branch 'features/XoT'
2019-05-01 16:41:47 +02:00
W.C.A. Wijngaards
ee0087d5c7
- PR #16 : XoT support, AXFR over TLS
...
Turn it on with master: <ip>#<authname> in unbound.conf. This uses TLS to
download the AXFR (or IXFR).
2019-05-01 16:41:09 +02:00
Willem Toorop
d4f697f160
Merge branch 'master' into features/XoT
2019-05-01 16:24:52 +02:00
W.C.A. Wijngaards
6e4bab2629
fixup shell
2019-05-01 13:39:32 +02:00
W.C.A. Wijngaards
5c5ddbe859
- Nicer travis output for clang analysis.
2019-05-01 13:34:45 +02:00
gthess and GitHub
ea506d0f68
Merge pull request #26 from NLnetLabs/github_readme
...
Added README.md file for Github use
2019-05-01 13:18:49 +02:00
W.C.A. Wijngaards
27e334e813
fixup to remove .git from makedist tarballs.
2019-05-01 12:47:53 +02:00
W.C.A. Wijngaards
8e48a5cf5f
Merge branch 'makedist_from_git'
2019-05-01 12:28:29 +02:00
Ralph Dolmans
9bc81f31d8
Added README.md file for Github use
2019-05-01 12:28:24 +02:00
W.C.A. Wijngaards
c6db87d81d
- Update makedist for git.
2019-05-01 12:27:19 +02:00
W.C.A. Wijngaards
f90e80d3bc
update makedist for git
2019-05-01 12:14:41 +02:00
e60f92ea29
Update services/authzone.c
...
Co-Authored-By: wtoorop <willem@nlnetlabs.nl >
2019-04-29 11:41:56 +02:00
46b5e96c54
Update services/authzone.c
...
Co-Authored-By: wtoorop <willem@nlnetlabs.nl >
2019-04-29 11:41:45 +02:00
f5a197f96e
Update services/outside_network.c
...
Co-Authored-By: wtoorop <willem@nlnetlabs.nl >
2019-04-29 11:25:45 +02:00
196654efec
Update services/authzone.c
...
Co-Authored-By: wtoorop <willem@nlnetlabs.nl >
2019-04-29 11:25:09 +02:00
a9c8d00d63
Update services/outside_network.c
...
Co-Authored-By: wtoorop <willem@nlnetlabs.nl >
2019-04-29 11:25:04 +02:00
5e4cfcc665
Update services/authzone.c
...
Co-Authored-By: wtoorop <willem@nlnetlabs.nl >
2019-04-29 11:24:45 +02:00
193cb2fcc4
Update services/authzone.c
...
Co-Authored-By: wtoorop <willem@nlnetlabs.nl >
2019-04-29 11:23:23 +02:00
b57a2f15db
Update services/authzone.c
...
Co-Authored-By: wtoorop <willem@nlnetlabs.nl >
2019-04-29 11:23:11 +02:00
wtoorop and GitHub
8d2c08befd
Merge pull request #4 from wcawijngaards/features/XoT
...
Fix test code for call change for XoT.
2019-04-29 10:58:49 +02:00
W.C.A. Wijngaards
d9a9f73e82
Fix test code for call change for XoT.
2019-04-29 10:52:25 +02:00
wtoorop and GitHub
e19da1b619
Merge pull request #3 from wcawijngaards/features/XoT
...
Fixup fd pass.
2019-04-29 10:44:06 +02:00
W.C.A. Wijngaards
6ce60bcb61
Fixup fd pass.
2019-04-29 10:40:12 +02:00
Wouter Wijngaards and GitHub
ff026a1f3c
Merge branch 'master' into features/XoT
2019-04-29 10:32:27 +02:00
wtoorop and GitHub
a37730cee8
Merge pull request #2 from wcawijngaards/features/XoT
...
Review changes for the XoT branch
2019-04-29 10:27:15 +02:00
W.C.A. Wijngaards
af11b54071
Review changes for the XoT branch
...
With doc, SSL setup function, and function parameter doc.
2019-04-29 10:25:19 +02:00
Ralph Dolmans
a7f68865e4
- Make IXFR deletion more robust
2019-04-25 20:00:56 +02:00
Ralph Dolmans
8dac8c00ce
- Don't attempt an RPZ delete for unsupported actions
2019-04-25 19:02:17 +02:00
Ralph Dolmans
83bf2fd253
- locking issues
2019-04-25 16:14:39 +02:00
Wouter Wijngaards
2a78803049
- Fix wrong query name in local zone redirect answers with a CNAME,
...
the copy of the local alias is in unpacked form.
git-svn-id: file:///svn/unbound/trunk@5175 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-25 14:07:42 +00:00
Ralph Dolmans
46acf0f99d
Merge branch 'feature/rpz' of github.com:ralphdolmans/unbound into feature/rpz
2019-04-25 14:47:09 +02:00
Ralph Dolmans
ba67920f9a
- IXFR/AXFR support for RPZ
2019-04-25 14:46:45 +02:00
Ralph Dolmans and GitHub
186c9e8e82
Merge pull request #5 from NLnetLabs/master
...
bring fork up to date
2019-04-25 14:43:02 +02:00
Ralph Dolmans
edf1ad369a
- Scrub RRs from answer section when reusing NXDOMAIN message for subdomain
...
answers.
- For harden-below-nxdomain: do not consider a name to be non-exitent when
message contains a CNAME record.
git-svn-id: file:///svn/unbound/trunk@5174 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-18 15:09:15 +00:00
Wouter Wijngaards
52ea271a65
Remove lint, gives parse errors on system headers.
...
git-svn-id: file:///svn/unbound/trunk@5173 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-18 11:34:12 +00:00
Wouter Wijngaards
ae54e9013b
Add splint to run make lint.
...
git-svn-id: file:///svn/unbound/trunk@5172 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-18 11:29:31 +00:00
Wouter Wijngaards
8a3ae4d08a
See if make lint works.
...
git-svn-id: file:///svn/unbound/trunk@5171 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-18 11:26:07 +00:00
Wouter Wijngaards
1cc54b080a
Brackets to stop exiting from the build script.
...
git-svn-id: file:///svn/unbound/trunk@5170 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-18 10:41:24 +00:00
Wouter Wijngaards
63171a2522
Disable flto for correct warning report.
...
git-svn-id: file:///svn/unbound/trunk@5169 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-18 10:30:33 +00:00
Wouter Wijngaards
2e023a5699
Printout with exit code.
...
git-svn-id: file:///svn/unbound/trunk@5168 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-18 10:18:32 +00:00
Wouter Wijngaards
1c1fc36d76
Prinout analysis output (if any).
...
git-svn-id: file:///svn/unbound/trunk@5167 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-18 10:05:17 +00:00
Wouter Wijngaards
42d7db578a
Fix run directory for clang analysis.
...
git-svn-id: file:///svn/unbound/trunk@5166 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-18 09:49:11 +00:00
Wouter Wijngaards
d4a6380562
Run clang analysis from travis.
...
git-svn-id: file:///svn/unbound/trunk@5165 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-18 09:40:54 +00:00
Wouter Wijngaards
8133251662
Fix to libssl-dev
...
git-svn-id: file:///svn/unbound/trunk@5164 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-18 09:35:07 +00:00
Wouter Wijngaards
5a8d314ce3
fixup to libopenssl-dev.
...
git-svn-id: file:///svn/unbound/trunk@5163 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-18 09:32:58 +00:00
Wouter Wijngaards
99f36a4e1e
- travis build file.
...
git-svn-id: file:///svn/unbound/trunk@5162 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-18 09:30:35 +00:00
Wouter Wijngaards
61a28c2ee5
- iana portlist updated.
...
git-svn-id: file:///svn/unbound/trunk@5161 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-16 13:21:22 +00:00
Wouter Wijngaards
2552a81b40
- Better braces in if statement in TCP fastopen code.
...
git-svn-id: file:///svn/unbound/trunk@5160 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-16 12:53:50 +00:00
Wouter Wijngaards
ab6f1d0fc7
- Fix tls write event for read state change to re-call SSL_write and
...
not resume the TLS handshake.
git-svn-id: file:///svn/unbound/trunk@5159 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-15 11:52:21 +00:00
Wouter Wijngaards
c8a56bfa8f
- Squelch SSL read and write connection reset by peer and broken pipe
...
messages. Verbosity 2 and higher enables them.
git-svn-id: file:///svn/unbound/trunk@5158 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-11 15:04:32 +00:00
George Thessalonikefs
d1150541bb
- Update python documentation for init_standard().
...
- Typos.
git-svn-id: file:///svn/unbound/trunk@5157 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-11 15:03:04 +00:00
Wouter Wijngaards
ead84a5a64
Nicer.
...
git-svn-id: file:///svn/unbound/trunk@5156 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-11 13:51:08 +00:00
Wouter Wijngaards
c6369e9ffa
- Fix that auth zone fails over to next master for timeout in tcp.
...
git-svn-id: file:///svn/unbound/trunk@5155 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-11 13:41:53 +00:00
Ralph Dolmans
74f11b852c
- apply chroot to auth-zone zonefile in unbound-checkconf
2019-04-11 15:07:49 +02:00
Wouter Wijngaards
474afc9016
- Fix that auth zone uses correct network type for sockets for
...
SOA serial probes. This fixes that probes fail because earlier
probe addresses are unreachable.
git-svn-id: file:///svn/unbound/trunk@5154 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-11 08:00:33 +00:00
Ralph Dolmans
edcf2ddd12
- Fix locking issue
...
- Fixes for compiler warnings
2019-04-10 11:53:08 +02:00
Wouter Wijngaards
bd3c02bd59
- Fix to wipe ssl ticket keys from memory with explicit_bzero,
...
if available.
git-svn-id: file:///svn/unbound/trunk@5153 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-08 14:42:08 +00:00
Wouter Wijngaards
32b1d900ff
Add explanation to changelog.
...
git-svn-id: file:///svn/unbound/trunk@5152 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-08 14:36:00 +00:00
Wouter Wijngaards
4eac399dfd
- Fix #17 : Add python module example from Jan Janak, that is a
...
plugin for the Unbound DNS resolver to resolve DNS records in
multicast DNS [RFC 6762] via Avahi.
git-svn-id: file:///svn/unbound/trunk@5151 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-08 14:34:58 +00:00
Wouter Wijngaards
c26fc84945
- verbose information about auth zone lookup process, also lookup
...
start, timeout and fail.
git-svn-id: file:///svn/unbound/trunk@5150 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-08 12:42:09 +00:00
Wouter Wijngaards
2b47ca080e
- Fix to use event_assign with libevent for thread-safety.
...
git-svn-id: file:///svn/unbound/trunk@5149 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-08 11:02:34 +00:00
Ralph Dolmans
c66e47c372
Initial RPZ commit - now with all files
2019-04-05 17:39:10 +02:00
Ralph Dolmans
9274d2630e
Initial RPZ commit
2019-04-05 17:38:43 +02:00
Wouter Wijngaards
348cbab016
- Fix to reinit event structure for accepted TCP (and TLS) sockets.
...
git-svn-id: file:///svn/unbound/trunk@5148 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-05 14:11:28 +00:00
Ralph Dolmans and GitHub
b43b8d47f8
Merge pull request #3 from NLnetLabs/master
...
bring fork up-to-date with upstream
2019-04-05 15:55:49 +02:00
Wouter Wijngaards
a777329b7f
- Fix spelling error in log output for event method.
...
git-svn-id: file:///svn/unbound/trunk@5147 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-04 14:28:39 +00:00
Willem Toorop
92121f7878
Report XoT failure as XoT failure, not https
2019-04-03 12:41:14 +02:00
Wouter Wijngaards
ce8167a3bb
- Fix auth-zone NSEC3 response for wildcard nodata answers,
...
include the closest encloser in the answer.
git-svn-id: file:///svn/unbound/trunk@5146 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-03 06:36:40 +00:00
Wouter Wijngaards
937523285a
- Move goto label in answer_from_cache to the end of the function
...
where it is more visible.
git-svn-id: file:///svn/unbound/trunk@5145 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-03 05:32:28 +00:00
Wouter Wijngaards
8a0de6b519
- Fix for auth zone nsec3 ent fix for wildcard nodata.
...
git-svn-id: file:///svn/unbound/trunk@5144 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-02 14:28:36 +00:00
Wouter Wijngaards
e338143639
- Fix for out of bounds integers, thanks to OSTIF audit. It is in
...
allocation debug code.
git-svn-id: file:///svn/unbound/trunk@5143 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-02 12:28:20 +00:00
Wouter Wijngaards
59570b0413
- Fix auth-zone NSEC3 response for empty nonterminals with exact
...
match nsec3 records.
git-svn-id: file:///svn/unbound/trunk@5142 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-02 12:21:41 +00:00
Wouter Wijngaards
78adebf8ec
- Fix crash if tls-servic-pem not filled in when necessary.
...
git-svn-id: file:///svn/unbound/trunk@5141 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-03-25 08:51:17 +00:00
Wouter Wijngaards
b75c37252c
- Fix that tls-session-ticket-keys: "" on its own in unbound.conf
...
disables the tls session ticker key calls into the OpenSSL API.
git-svn-id: file:///svn/unbound/trunk@5140 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-03-25 08:47:14 +00:00
Willem Toorop
48ad6477eb
AXFR over TLS
...
Enable by specifying an auth name, like this:
```
auth-zone:
name: nlnetlabs.nl
master: 185.49.140.60#ns.nlnetlabs.nl
```
2019-03-24 10:43:57 +01:00
Wouter Wijngaards
296f28e8d0
- Fix #4240 : Fix whitespace cleanup in example.conf.
...
git-svn-id: file:///svn/unbound/trunk@5139 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-03-21 12:14:20 +00:00
Wouter Wijngaards
83e2cade5b
- add type CAA to libpyunbound (accessing libunbound from python).
...
git-svn-id: file:///svn/unbound/trunk@5138 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-03-19 12:14:52 +00:00
Wouter Wijngaards
ce0628ee55
- Fix #4239 : set NOTIMPL when deny-any is enabled, for RFC8482.
...
git-svn-id: file:///svn/unbound/trunk@5137 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-03-18 09:26:06 +00:00
Wouter Wijngaards
bb5251da66
- Add log message, at verbosity 4, that says the query is encrypted
...
with TLS, if that is enabled for the query.
git-svn-id: file:///svn/unbound/trunk@5136 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-03-18 08:41:39 +00:00
Wouter Wijngaards
bfd0c5ec85
1.9.1 on 12 March 2019. Trunk has 1.9.2 in development.
...
git-svn-id: file:///svn/unbound/trunk@5135 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-03-12 09:33:18 +00:00
Wouter Wijngaards
8092cd6331
- Fix for #4233 : guard use of NDEBUG, so that it can be passed in
...
CFLAGS into configure.
git-svn-id: file:///svn/unbound/trunk@5133 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-03-07 08:34:00 +00:00
Wouter Wijngaards
7105ea9293
- Tag release 1.9.1rc1.
...
git-svn-id: file:///svn/unbound/trunk@5132 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-03-05 08:48:15 +00:00
Philipp Serr
efb3697332
Merge branch 'dev/pythonmod-multi-instance/v1.9.0' into dev/all-merged/master
2019-03-02 14:35:19 +01:00
Philipp Serr
56a174bb0f
Merge branch 'dev/pythonmod-data/v1.9.0' into dev/all-merged/master
2019-03-02 14:34:58 +01:00
Philipp Serr
9d2980de1a
Merge branch 'dev/module_ext_state/v1.9.0' into dev/all-merged/master
2019-03-02 14:34:41 +01:00
Philipp Serr
bfae29866b
Document how to configure multiple python modules
2019-03-02 14:32:49 +01:00
Philipp Serr
b248654aab
Support multiple python module instances
...
This commit adds proper support for multiple instances of the python
module: When more than one instance is added to the module list, the
first instance loads the first script specified in the `python:`
configuration section. The second instance loads the second script,
and so on.
When there are more module instances in the module list than there are
scripts in the `python:` section, an error is raised during
initialization and unbound won't start. When more scripts than module
instances are provided, the surplus scripts are ignored.
2019-03-02 14:32:48 +01:00
Philipp Serr
7cc4ff05ad
Initialize per-query qdata and per-module mod_env
...
The python module used to assign None to the per-query (qdata argument)
and per-module (mod_env variable) data stores. Hence, there was no
obvious way for python code to use these data stores.
This commit initializes both data stores with a dict instance.
2019-03-02 09:26:57 +01:00
Philipp Serr
b4a9031cdb
Add module_restart_next definition to swig file
2019-03-02 09:25:14 +01:00
Wouter Wijngaards
16cc196bf2
- output forwarder log in ssl_req_order test.
...
git-svn-id: file:///svn/unbound/trunk@5130 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-03-01 12:38:53 +00:00
Wouter Wijngaards
c79a99a577
Fix to account for tabs as well.
...
git-svn-id: file:///svn/unbound/trunk@5129 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-28 12:06:04 +00:00
Wouter Wijngaards
a82c0eeece
- Print correct module that failed when module-config is wrong.
...
git-svn-id: file:///svn/unbound/trunk@5128 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-28 09:56:45 +00:00
Wouter Wijngaards
a62c1135fe
- Remove memory leak on pythonmod python2 script file init.
...
- Remove swig gcc8 python function cast warnings, they are ignored.
git-svn-id: file:///svn/unbound/trunk@5127 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-28 09:12:54 +00:00
Wouter Wijngaards
ba0cad0bc3
Fixup for python 2
...
git-svn-id: file:///svn/unbound/trunk@5126 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-27 14:22:55 +00:00
Wouter Wijngaards
7c1f9699d8
- Fix for python module on Windows, fix fopen.
...
git-svn-id: file:///svn/unbound/trunk@5125 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-27 14:14:08 +00:00
Wouter Wijngaards
33a814683b
- Fix #14 : contrib/unbound.init: Fix wrong comparison judgment
...
before copying.
git-svn-id: file:///svn/unbound/trunk@5124 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-27 06:58:10 +00:00
Wouter Wijngaards
beebe5ba0c
- Fix #4229 : Unbound man pages lack information, about access-control
...
order and local zone tags, and elements in views.
git-svn-id: file:///svn/unbound/trunk@5123 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-27 06:56:21 +00:00
Wouter Wijngaards
225534e5ab
- Fix #4227 : pair event del and add for libevent for tcp_req_info.
...
git-svn-id: file:///svn/unbound/trunk@5122 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-25 15:48:27 +00:00
Wouter Wijngaards
3599fd9c60
- In man page and example config explain that most modules have to
...
be listed at the start of module-config.
git-svn-id: file:///svn/unbound/trunk@5121 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-21 10:03:11 +00:00
Wouter Wijngaards
5b162ead92
- In example.conf explain where to put cachedb module in module-config.
...
git-svn-id: file:///svn/unbound/trunk@5120 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-21 09:48:38 +00:00
Wouter Wijngaards
62428e17f6
- Fix the error for unknown module in module-config is understandable,
...
and explains it was not compiled in and where to see the list.
git-svn-id: file:///svn/unbound/trunk@5119 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-21 09:40:25 +00:00
Wouter Wijngaards
079253670e
- Fix pythonmod include and sockaddr_un ifdefs for compile on
...
Windows, and for libunbound.
git-svn-id: file:///svn/unbound/trunk@5118 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-20 15:19:58 +00:00
Wouter Wijngaards
91e863138b
- Print query name and IP address when domain rate limit exceeded.
...
git-svn-id: file:///svn/unbound/trunk@5117 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-18 15:53:02 +00:00
Wouter Wijngaards
d1e92a0ebd
- Spaces instead of tabs in that log message.
...
git-svn-id: file:///svn/unbound/trunk@5116 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-18 12:32:42 +00:00
Wouter Wijngaards
3949bf2c82
- Print query name with ip_ratelimit exceeded log lines.
...
git-svn-id: file:///svn/unbound/trunk@5115 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-18 10:40:41 +00:00
Wouter Wijngaards
a41375411e
- Fix capsforid canonical sort qsort callback.
...
git-svn-id: file:///svn/unbound/trunk@5114 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-14 08:16:15 +00:00
Wouter Wijngaards
030832cf12
- make depend, with newer gcc, nicer layout.
...
git-svn-id: file:///svn/unbound/trunk@5113 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-11 10:02:45 +00:00
Wouter Wijngaards
49a36d98bb
- Fix #13 : Remove left-over requirements on OpenSSL >= 1.1.0 for
...
cert name matching, from man page.
git-svn-id: file:///svn/unbound/trunk@5112 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-11 09:59:47 +00:00
Wouter Wijngaards
ddae2885bd
Also fix this unit test for qname minimisation
...
asked queries that have to be added to the provided answer list.
git-svn-id: file:///svn/unbound/trunk@5111 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-11 09:56:57 +00:00
Wouter Wijngaards
19193fd534
- Fix recursion lame test for qname minimisation asked queries,
...
that were not present in the set of prepared answers.
git-svn-id: file:///svn/unbound/trunk@5110 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-11 09:49:13 +00:00
Wouter Wijngaards
4e249c96e8
- Note default for module-config in man page.
...
git-svn-id: file:///svn/unbound/trunk@5109 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-11 08:53:59 +00:00
Wouter Wijngaards
cae8361dcd
- Fix #4225 : clients seem to erroneously receive no answer with
...
DNS-over-TLS and qname-minimisation.
git-svn-id: file:///svn/unbound/trunk@5108 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-08 15:05:24 +00:00
Wouter Wijngaards
429e130768
- Fix that qname minimisation does not skip a label when missing
...
nameserver targets need to be fetched.
git-svn-id: file:///svn/unbound/trunk@5107 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-08 13:30:51 +00:00
Wouter Wijngaards
20d57ec58b
- Fix #4206 : OpenSSL 1.0.2 hostname verification for FreeBSD 11.2.
...
git-svn-id: file:///svn/unbound/trunk@5106 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-07 08:34:28 +00:00
Wouter Wijngaards
e43c3daec2
Trunk has 1.9.1 in development.
...
git-svn-id: file:///svn/unbound/trunk@5105 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-05 09:26:39 +00:00
Wouter Wijngaards
64c4e69b07
Release version numbers.
...
git-svn-id: file:///svn/unbound/trunk@5102 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-05 08:17:36 +00:00
Wouter Wijngaards
a9e028564d
Keep scratch region free on exit.
...
git-svn-id: file:///svn/unbound/trunk@5101 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-04 15:48:21 +00:00
Wouter Wijngaards
99994a26b0
- Perform canonical sort for 0x20 capsforid compare of replies,
...
this sorts rrsets in the authority and additional section before
comparison, so that out of order rrsets do not cause failure.
git-svn-id: file:///svn/unbound/trunk@5100 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-04 15:22:08 +00:00
Wouter Wijngaards
fe97f25b75
- Fix that log-replies prints the correct name for local-alias
...
names, for names that have a CNAME in local-data configuration.
It logs the original query name, not the target of the CNAME.
- Add local-zone type inform_redirect, which logs like type inform,
and redirects like type redirect.
git-svn-id: file:///svn/unbound/trunk@5099 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-04 09:51:27 +00:00
Wouter Wijngaards
281030d576
- Wipe TLS session key data from memory on exit.
...
git-svn-id: file:///svn/unbound/trunk@5098 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-31 15:25:27 +00:00
Wouter Wijngaards
8992e8c91f
note ticker number.
...
git-svn-id: file:///svn/unbound/trunk@5097 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-31 12:35:33 +00:00
Wouter Wijngaards
b34a6defc1
- Fix OpenSSL without ENGINE support compilation.
...
git-svn-id: file:///svn/unbound/trunk@5096 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-31 12:33:28 +00:00
Wouter Wijngaards
8cf5eae166
- Fix OpenSSL without ENGINE support compilation.
...
git-svn-id: file:///svn/unbound/trunk@5095 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-31 11:34:11 +00:00
Wouter Wijngaards
df8f236b62
- For openssl 1.0.2 use the CRYPTO_THREADID locking callbacks,
...
still supports the set_id_callback previous API. And for 1.1.0
no locking callbacks are needed.
git-svn-id: file:///svn/unbound/trunk@5094 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-31 11:31:55 +00:00
Wouter Wijngaards
273ff1201b
- fixed pkg-config operations, PKG_PROG_PKG_CONFIG moved out of
...
conditional section, fixes systemd builds, from Enrico Scholz.
git-svn-id: file:///svn/unbound/trunk@5093 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-31 10:21:54 +00:00
Wouter Wijngaards
91f585ed38
- improve documentation for forward-first.
...
git-svn-id: file:///svn/unbound/trunk@5092 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-31 09:37:06 +00:00
Wouter Wijngaards
b9b226bdea
- improve documentation for tls-service-key.
...
git-svn-id: file:///svn/unbound/trunk@5091 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-31 09:22:48 +00:00
Wouter Wijngaards
8fffdca2a6
- Set ub_ctx_set_tls call signature in ltrace config file for
...
libunbound in contrib/libunbound.so.conf.
git-svn-id: file:///svn/unbound/trunk@5090 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-31 09:16:15 +00:00
Ralph Dolmans
723845b350
- Fix case in which query timeout can result in marking delegation as
...
edns_lame_known.
git-svn-id: file:///svn/unbound/trunk@5089 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-30 13:44:19 +00:00
Wouter Wijngaards
31b677b35f
- Fix locking for libunbound context setup with broken port config.
...
git-svn-id: file:///svn/unbound/trunk@5088 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-29 16:07:07 +00:00
Wouter Wijngaards
c2e3baa81a
- Fix #4224 : auth_xfr_notify.rpl test broken due to typo
...
git-svn-id: file:///svn/unbound/trunk@5087 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-29 14:37:35 +00:00
Wouter Wijngaards
7273b35243
- Fix spelling of tls-ciphers in example.conf.in.
...
git-svn-id: file:///svn/unbound/trunk@5086 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-29 12:43:56 +00:00
Wouter Wijngaards
dfe8e0dfa2
- set version to 1.9.0 for release.
...
git-svn-id: file:///svn/unbound/trunk@5084 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-29 08:07:50 +00:00
Wouter Wijngaards
7ad8ffccf5
- List example config for root zone copy locally hosted with auth-zone
...
as suggested from draft-ietf-dnsop-7706-bis-02. But with updated
B root address.
git-svn-id: file:///svn/unbound/trunk@5083 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-28 08:49:12 +00:00
Wouter Wijngaards
065c7c5dd8
- List d.root-servers.net as a host that allows AXFR in example.conf
...
config file, as suggested from draft-ietf-dnsop-7706-bis-02.
git-svn-id: file:///svn/unbound/trunk@5082 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-28 08:39:50 +00:00
Wouter Wijngaards
71744b8bb2
- Set build system for added call in the libunbound API.
...
git-svn-id: file:///svn/unbound/trunk@5081 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-28 08:26:10 +00:00
Wouter Wijngaards
3d2dfc4769
- ub_ctx_set_tls call for libunbound that enables DoT for the machines
...
set with ub_ctx_set_fwd. Patch from Florian Obser.
git-svn-id: file:///svn/unbound/trunk@5080 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-28 08:22:08 +00:00
Wouter Wijngaards
5e4f0d65ce
Fix year on recent commit messages.
...
git-svn-id: file:///svn/unbound/trunk@5079 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-25 16:19:37 +00:00
Wouter Wijngaards
aae44940c7
- output of newer lex 2.6.1 and bison 3.0.5.
...
git-svn-id: file:///svn/unbound/trunk@5078 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-25 13:00:09 +00:00
Wouter Wijngaards
062c2cacfc
- remove compile warnings from libnettle compile.
...
git-svn-id: file:///svn/unbound/trunk@5077 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-25 12:58:06 +00:00
Wouter Wijngaards
ce65cdde71
- no lock when threads disabled in tcp request buffer count.
...
git-svn-id: file:///svn/unbound/trunk@5076 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-25 12:54:40 +00:00
Wouter Wijngaards
b005fcd87b
- updated contrib/fastrpz.patch to cleanly diff.
...
git-svn-id: file:///svn/unbound/trunk@5075 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-25 12:50:45 +00:00
Wouter Wijngaards
f11d6653d6
- Fix that tcp for auth zone and outgoing does not remove and
...
then gets the ssl read again applied to the deleted commpoint.
git-svn-id: file:///svn/unbound/trunk@5074 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-25 12:46:15 +00:00
Wouter Wijngaards
20d5e35576
- Moved includes and make depend.
...
git-svn-id: file:///svn/unbound/trunk@5073 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-24 16:10:05 +00:00
Wouter Wijngaards
3028fa50a8
- Patch from Florian Obser fixes some compiler warnings:
...
include mini_event.h to have a prototype for mini_ev_cmp
include edns.h to have a prototype for apply_edns_options
sldns_wire2str_edns_keepalive_print is only called in the wire2str,
module declare it static to get rid of compiler warning:
no previous prototype for function
infra_find_ip_ratedata() is only called in the infra module,
declare it static to get rid of compiler warning:
no previous prototype for function
do not shadow local variable buf in authzone
auth_chunks_delete and az_nsec3_findnode are only called in the
authzone module, declare them static to get rid of compiler warning:
no previous prototype for function...
copy_rrset() is only called in the respip module, declare it
static to get rid of compiler warning:
no previous prototype for function 'copy_rrset'
no need for another variable "r"; gets rid of compiler warning:
declaration shadows a local variable in libunbound.c
no need for another variable "ns"; gets rid of compiler warning:
declaration shadows a local variable in iterator.c
git-svn-id: file:///svn/unbound/trunk@5072 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-24 16:05:00 +00:00
Wouter Wijngaards
e584933b2b
make fix nicer in perf testcode.
...
git-svn-id: file:///svn/unbound/trunk@5071 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-24 12:52:26 +00:00
Wouter Wijngaards
d48abb9a84
clang analysis fixes, assert arc4random buffer in init,
...
no check for already checked delegation pointer in iterator,
in testcode check for NULL packet matches, in perf do not copy
from NULL start list when growing capacity. Adjust host and file
only when present in test header read to please checker. In
testcode for unknown macro operand give zero result. Initialise the
passed argv array in test code. In test code add EDNS data
segment copy only when nonempty.
git-svn-id: file:///svn/unbound/trunk@5070 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-24 11:55:10 +00:00
Wouter Wijngaards
37361a1d10
- Fix unit test for python 3.7 new keyword 'async'.
...
git-svn-id: file:///svn/unbound/trunk@5069 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-24 09:37:57 +00:00
Wouter Wijngaards
299cc0c689
- Newer aclocal and libtoolize used for generating configure scripts,
...
aclocal 1.16.1 and libtoolize 2.4.6.
git-svn-id: file:///svn/unbound/trunk@5068 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-24 08:57:47 +00:00
Wouter Wijngaards
707e5a915b
Neater spaces
...
git-svn-id: file:///svn/unbound/trunk@5067 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-23 14:18:24 +00:00
Wouter Wijngaards
649e265d6f
- Fix for IXFR fallback to reset counter when IXFR does not timeout.
...
git-svn-id: file:///svn/unbound/trunk@5066 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-23 11:52:17 +00:00
Wouter Wijngaards
9d4ca81959
Fixup ssl unit test with example ticket files.
...
git-svn-id: file:///svn/unbound/trunk@5065 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-23 10:50:26 +00:00
Wouter Wijngaards
68a57554a6
For TLS session keys, keep config options in order read from file to keep the first one as the first one.
...
git-svn-id: file:///svn/unbound/trunk@5064 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-23 10:41:03 +00:00
Wouter Wijngaards
cc9fb69911
fix lint and clang analysis errors
...
git-svn-id: file:///svn/unbound/trunk@5063 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-23 10:23:02 +00:00
Wouter Wijngaards
d3f397c686
More fixes, statistic counter at end of struct for backwards compatibility, man page, free at exit, indent.
...
git-svn-id: file:///svn/unbound/trunk@5062 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-23 10:19:04 +00:00
Wouter Wijngaards
ed8b859e31
make depend
...
git-svn-id: file:///svn/unbound/trunk@5061 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-23 09:44:08 +00:00
Wouter Wijngaards
011a7d8830
- Fixes for patch (includes, declarations, warnings).
...
git-svn-id: file:///svn/unbound/trunk@5060 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-23 09:43:47 +00:00
Wouter Wijngaards
510606dd1c
- Patch for TLS session resumption from Manabu Sonoda,
...
enable with tls-session-ticket-keys in unbound.conf.
git-svn-id: file:///svn/unbound/trunk@5059 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-23 09:35:52 +00:00
Wouter Wijngaards
4e59c8344f
- Fix configure to detect SSL_CTX_set_ciphersuites, for better
...
library compatibility when compiling.
git-svn-id: file:///svn/unbound/trunk@5058 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-23 08:57:49 +00:00
Wouter Wijngaards
4c8f334c15
another spelling fix.
...
git-svn-id: file:///svn/unbound/trunk@5057 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-23 08:48:52 +00:00
Wouter Wijngaards
2f52ecdd9c
lex and yacc.
...
git-svn-id: file:///svn/unbound/trunk@5056 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-23 08:46:33 +00:00
Wouter Wijngaards
5d82b7c421
- Fixes for the patch, and man page entry.
...
git-svn-id: file:///svn/unbound/trunk@5055 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-23 08:45:16 +00:00
Wouter Wijngaards
8ae9f26bce
- Patch from Manabu Sonoda with tls-ciphers and tls-ciphersuites
...
options for unbound.conf.
git-svn-id: file:///svn/unbound/trunk@5054 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-23 08:37:00 +00:00
Wouter Wijngaards
55f560a3ca
- Fix that auth zone after IXFR fallback tries the same master.
...
git-svn-id: file:///svn/unbound/trunk@5053 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-22 15:44:09 +00:00
Wouter Wijngaards
51caffb454
- Fix for #4219 : secondaries not updated after serial change, unbound
...
falls back to AXFR after IXFR gives several timeout failures.
git-svn-id: file:///svn/unbound/trunk@5052 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-22 15:36:58 +00:00
Wouter Wijngaards
ef1baf94f7
Fix lint and unit test.
...
git-svn-id: file:///svn/unbound/trunk@5051 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-22 13:35:33 +00:00
Wouter Wijngaards
8b18d1a0a4
- unbound-control stats has mem.streamwait that counts TCP and TLS
...
waiting result buffers.
git-svn-id: file:///svn/unbound/trunk@5050 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-22 13:20:06 +00:00
Wouter Wijngaards
4481b9584c
Fix test failure.
...
git-svn-id: file:///svn/unbound/trunk@5049 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-22 10:29:01 +00:00
Wouter Wijngaards
dec68aa9a9
- Doc for stream-wait-size and unit test.
...
git-svn-id: file:///svn/unbound/trunk@5048 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-22 08:52:23 +00:00
Wouter Wijngaards
c10712a82b
- Fix space calculation for tcp req buffer size.
...
git-svn-id: file:///svn/unbound/trunk@5047 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-22 08:27:49 +00:00
Wouter Wijngaards
d81e2c654f
- Add stream-wait-size: 4m config option to limit the maximum
...
memory used by waiting tcp and tls stream replies. This avoids
a denial of service where these replies use up all of the memory.
git-svn-id: file:///svn/unbound/trunk@5046 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-21 16:20:14 +00:00
Wouter Wijngaards
f5dcd84d27
Fix reread of buffer data, better, also for TCP.
...
git-svn-id: file:///svn/unbound/trunk@5045 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-21 14:14:12 +00:00
Wouter Wijngaards
7c4911c577
No leaks found.
...
git-svn-id: file:///svn/unbound/trunk@5044 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-21 13:45:13 +00:00
Wouter Wijngaards
be4583ac84
- Fix that multiple dns fragments can be carried in one TLS frame.
...
git-svn-id: file:///svn/unbound/trunk@5043 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-21 13:41:13 +00:00
Wouter Wijngaards
068374740c
- Unit tests for ssl out of order processing.
...
git-svn-id: file:///svn/unbound/trunk@5042 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-21 13:26:21 +00:00
Wouter Wijngaards
f7d63b0927
- Unit test for tcp request reorder and timeouts.
...
git-svn-id: file:///svn/unbound/trunk@5041 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-21 13:04:08 +00:00
Wouter Wijngaards
9087b18234
- Fix tcp idle timeout test, for difference in the tcp reply code.
...
git-svn-id: file:///svn/unbound/trunk@5040 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-21 09:36:01 +00:00
Wouter Wijngaards
19a3907657
- increase mesh max activation count for capsforid long fetches.
...
git-svn-id: file:///svn/unbound/trunk@5039 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-17 08:58:09 +00:00
Wouter Wijngaards
762920232a
- For caps-for-id fallback, use the whitelist to avoid timeout
...
starting a fallback sequence for it.
git-svn-id: file:///svn/unbound/trunk@5038 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-17 08:50:25 +00:00
Ralph Dolmans
f30fe71395
- Get ready for the DNS flag day: remove EDNS lame procedure, do not re-query
...
without EDNS after timeout.
git-svn-id: file:///svn/unbound/trunk@5037 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-16 10:23:13 +00:00
Wouter Wijngaards
ec6f4bab46
comment fixes after review.
...
git-svn-id: file:///svn/unbound/trunk@5036 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-15 13:42:22 +00:00
Wouter Wijngaards
0d2efc3f3f
- Review fixes in out of order processing.
...
git-svn-id: file:///svn/unbound/trunk@5035 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-15 10:27:00 +00:00
Wouter Wijngaards
bb480068fa
- In the out of order processing, reset byte count for (potential)
...
partial read.
git-svn-id: file:///svn/unbound/trunk@5034 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-15 09:24:00 +00:00
Wouter Wijngaards
ae9fe1a10e
- streamtcp option -a send queries consecutively and prints answers
...
as they arrive.
- Fix for out of order processing administration quit cleanup.
- unit test for tcp out of order processing.
git-svn-id: file:///svn/unbound/trunk@5033 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-14 15:52:50 +00:00
Wouter Wijngaards
dd19026e91
- Initial commit for out-of-order processing for TCP and TLS.
...
git-svn-id: file:///svn/unbound/trunk@5032 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-11 14:12:27 +00:00
Wouter Wijngaards
42d2c04ae1
- Log query name for looping module errors.
...
git-svn-id: file:///svn/unbound/trunk@5031 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-09 13:57:14 +00:00
Wouter Wijngaards
db2557826a
- Fix NSEC3 record that is returned in wildcard replies from
...
auth-zone zones with NSEC3 and wildcards.
git-svn-id: file:///svn/unbound/trunk@5030 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-08 14:39:31 +00:00
Wouter Wijngaards
11d98df304
- Fix syntax in comment of local alias processing.
...
git-svn-id: file:///svn/unbound/trunk@5029 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-08 13:29:38 +00:00
Wouter Wijngaards
ec84fd2ca6
- Add contrib/unbound-fuzzme.patch from Jacob Hoffman-Andrews,
...
the patch adds a program used for fuzzing.
git-svn-id: file:///svn/unbound/trunk@5028 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-07 15:01:24 +00:00
Wouter Wijngaards
fe6eb5f665
- Document interaction between the tls-upstream option in the server
...
section and forward-tls-upstream option in the forward-zone sections.
git-svn-id: file:///svn/unbound/trunk@5027 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-07 10:52:08 +00:00
Wouter Wijngaards
90b00dfe57
- On FreeBSD warn if systcl settings do not allow server TCP FASTOPEN,
...
and server tcp fastopen is enabled at compile time.
git-svn-id: file:///svn/unbound/trunk@5026 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-07 09:06:41 +00:00
Wouter Wijngaards
023411f975
- Fix for crash in dns64 module if response is null.
...
git-svn-id: file:///svn/unbound/trunk@5025 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-12-12 16:03:05 +00:00
Wouter Wijngaards
a97bfa08ec
trunk had 1.8.2, Which became 1.8.3 on 11 december with only the dns64 fix of 6 dec.
...
Trunk then became 1.8.4 in development.
git-svn-id: file:///svn/unbound/trunk@5024 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-12-11 11:08:57 +00:00
Wouter Wijngaards
9c2a45c59e
svn trunk 1.8.2, Which became 1.8.3 on 11 december with only the dns64 fix of 6 dec.
...
Trunk then became 1.8.4 in development.
git-svn-id: file:///svn/unbound/trunk@5020 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-12-11 09:44:16 +00:00
Wouter Wijngaards
1b72e814e7
- Fixup openssl 1.0.2 compile
...
git-svn-id: file:///svn/unbound/trunk@5019 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-12-10 14:36:43 +00:00
Wouter Wijngaards
71b078611f
- Fix #4206 : support openssl 1.0.2 for TLS hostname verification,
...
alongside the 1.1.0 and later support that is already there.
git-svn-id: file:///svn/unbound/trunk@5018 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-12-10 14:27:24 +00:00
Wouter Wijngaards
1ef8cfcac5
- Fix for FreeBSD port make with dnscrypt and dnstap enabled.
...
git-svn-id: file:///svn/unbound/trunk@5017 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-12-10 13:14:57 +00:00
Wouter Wijngaards
6b8e316663
- Fix for FreeBSD port make with dnscrypt and dnstap enabled.
...
git-svn-id: file:///svn/unbound/trunk@5016 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-12-10 10:41:33 +00:00
Wouter Wijngaards
21d03697ca
- ip-ratelimit-factor of 1 allows all traffic through, instead of the
...
previous blocking everything.
git-svn-id: file:///svn/unbound/trunk@5015 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-12-10 09:38:50 +00:00
Wouter Wijngaards
4c7f824e0a
- Fix config parser memory leaks.
...
git-svn-id: file:///svn/unbound/trunk@5014 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-12-10 09:27:49 +00:00
Wouter Wijngaards
42244e1b4d
- Fix dns64 allocation in wrong region for returned internal queries.
...
git-svn-id: file:///svn/unbound/trunk@5013 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-12-06 08:04:37 +00:00
Wouter Wijngaards
2981adac66
trunk has 1.8.3 in development.
...
git-svn-id: file:///svn/unbound/trunk@5012 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-12-04 09:30:03 +00:00
Wouter Wijngaards
91971db3d0
And document.
...
git-svn-id: file:///svn/unbound/trunk@5009 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-12-03 14:56:12 +00:00
Wouter Wijngaards
b4e8ab4254
Fix test.
...
git-svn-id: file:///svn/unbound/trunk@5008 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-12-03 14:54:29 +00:00
Wouter Wijngaards
198a7ce74d
- cache-max-ttl also defines upperbound of initial TTL in response.
...
git-svn-id: file:///svn/unbound/trunk@5007 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-12-03 14:50:47 +00:00
Wouter Wijngaards
e103490376
Cleaner image.
...
git-svn-id: file:///svn/unbound/trunk@5006 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-12-03 11:24:51 +00:00
Wouter Wijngaards
f3658c210c
Fixup icon lines.
...
git-svn-id: file:///svn/unbound/trunk@5005 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-12-03 11:16:17 +00:00
Wouter Wijngaards
1ba3682d9b
remove unnecessary files, they are in combined.ico.
...
git-svn-id: file:///svn/unbound/trunk@5004 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-12-03 10:39:35 +00:00
Wouter Wijngaards
39b7468bab
Fixup icon more, for small icon display on Windows 10.
...
git-svn-id: file:///svn/unbound/trunk@5003 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-12-03 10:09:54 +00:00
Wouter Wijngaards
a42e9aaaba
more fixes, higher colormap.
...
git-svn-id: file:///svn/unbound/trunk@5002 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-12-03 09:06:05 +00:00
Wouter Wijngaards
a9b7194485
- Fix icon, no ragged edges and nicer resolutions available, for eg.
...
Win 7 and Windows 10 display.
git-svn-id: file:///svn/unbound/trunk@5001 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-12-03 08:30:55 +00:00
Wouter Wijngaards
2ad55ba791
- log-tag-queryreply: yes in unbound.conf tags the log-queries and
...
log-replies in the log file for easier log filter maintenance.
git-svn-id: file:///svn/unbound/trunk@5000 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-30 09:45:37 +00:00
Wouter Wijngaards
ac8dc59341
- Patch for typo in unbound.conf man page.
...
git-svn-id: file:///svn/unbound/trunk@4999 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-30 08:33:50 +00:00
Wouter Wijngaards
c1c1cd97e7
- Remove clang analysis warnings.
...
git-svn-id: file:///svn/unbound/trunk@4998 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-29 14:39:26 +00:00
Wouter Wijngaards
b23c373f4d
- Refuse to start with no ports.
...
git-svn-id: file:///svn/unbound/trunk@4997 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-29 14:26:16 +00:00
Wouter Wijngaards
e6da6c251c
Fixup test.
...
git-svn-id: file:///svn/unbound/trunk@4996 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-29 13:09:46 +00:00
Wouter Wijngaards
81ded6124d
- Fix that unbound-checkconf does not complains if the config file
...
is not placed inside the chroot.
git-svn-id: file:///svn/unbound/trunk@4995 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-29 12:55:13 +00:00
Wouter Wijngaards
c417f733af
- tag for 1.8.2rc1.
...
git-svn-id: file:///svn/unbound/trunk@4994 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-29 09:27:19 +00:00
Wouter Wijngaards
63dcbe3d75
- Fix chroot auth-zone fix to remove chroot prefix.
...
git-svn-id: file:///svn/unbound/trunk@4992 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-29 08:27:47 +00:00
Wouter Wijngaards
fb342b73d3
- iana portlist updated.
...
git-svn-id: file:///svn/unbound/trunk@4991 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-29 08:27:22 +00:00
Wouter Wijngaards
cccb5094a4
- Fix clang analysis for outside directory build test.
...
git-svn-id: file:///svn/unbound/trunk@4990 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-28 13:34:31 +00:00
Wouter Wijngaards
3330d5296c
- Fix leak in chroot fix for auth-zone.
...
git-svn-id: file:///svn/unbound/trunk@4989 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-28 12:37:52 +00:00
Wouter Wijngaards
f95f98b12a
- Update contrib fastrpz patch for latest release.
...
git-svn-id: file:///svn/unbound/trunk@4988 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-27 15:47:52 +00:00
Wouter Wijngaards
7bb6358540
Better fix.
...
git-svn-id: file:///svn/unbound/trunk@4987 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-27 13:46:44 +00:00
Wouter Wijngaards
ca33c52086
- Fix windows compile for new rrset roundrobin fix.
...
git-svn-id: file:///svn/unbound/trunk@4986 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-27 13:35:29 +00:00
Wouter Wijngaards
aba3ba738f
- Put new logos into windows installer.
...
git-svn-id: file:///svn/unbound/trunk@4985 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-27 13:24:40 +00:00
Wouter Wijngaards
60da4369a4
- stat count SERVFAIL downstream auth-zone queries for expired zones.
...
git-svn-id: file:///svn/unbound/trunk@4984 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-27 12:42:59 +00:00
Wouter Wijngaards
b04e84ab9e
- auth-zone give SERVFAIL when expired, fallback activates when
...
expired, and this is documented in the man page.
git-svn-id: file:///svn/unbound/trunk@4983 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-27 12:31:37 +00:00
Wouter Wijngaards
d96de4c222
- New and better fix for Fix #4193 : Fix that prefetch failure does
...
not overwrite valid cache entry with SERVFAIL.
git-svn-id: file:///svn/unbound/trunk@4982 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-27 10:56:45 +00:00
Wouter Wijngaards
0ff5c52657
- Fix #4208 : 'stub-no-cache' and 'forward-no-cache' not work.
...
git-svn-id: file:///svn/unbound/trunk@4981 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-27 10:29:14 +00:00
Wouter Wijngaards
f532367412
Review fix.
...
git-svn-id: file:///svn/unbound/trunk@4980 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-27 09:05:00 +00:00
Wouter Wijngaards
94996b8a29
- Fix DNS64 to not store intermediate results in cache, this avoids
...
other threads from picking up the wrong data. The module restores
the previous no_cache_store setting when the the module is finished.
git-svn-id: file:///svn/unbound/trunk@4979 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-27 08:43:38 +00:00
Wouter Wijngaards
59e6f149a7
- Fix that unbound-control can send file for view_local_datas.
...
git-svn-id: file:///svn/unbound/trunk@4978 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-26 13:55:36 +00:00
Wouter Wijngaards
470806b097
- Add unbound-control view_local_datas command, like local_datas.
...
git-svn-id: file:///svn/unbound/trunk@4977 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-26 13:37:23 +00:00
Wouter Wijngaards
8fcc82171a
- Fix #4193 : Fix that prefetch failure does not overwrite valid cache
...
entry with SERVFAIL.
git-svn-id: file:///svn/unbound/trunk@4976 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-26 10:25:50 +00:00
Wouter Wijngaards
4d5b32ee59
- Fix to not set GLOB_NOSORT so the unbound.conf include: files are
...
sorted and in a predictable order.
git-svn-id: file:///svn/unbound/trunk@4975 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-26 09:54:34 +00:00
Wouter Wijngaards
816aa50dfc
- make depend.
...
git-svn-id: file:///svn/unbound/trunk@4974 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-22 15:57:15 +00:00
Wouter Wijngaards
068c52d8f5
- Fix that empty zonefile means the zonefile is not set and not used.
...
git-svn-id: file:///svn/unbound/trunk@4973 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-22 15:55:18 +00:00
Wouter Wijngaards
692caffe2c
- auth zone zonefiles can be in a chroot, the chroot directory
...
components are removed before use.
git-svn-id: file:///svn/unbound/trunk@4972 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-22 15:51:09 +00:00
Wouter Wijngaards
c97bb52d77
- Fix #4209 : Crash in libunbound when called from getdns.
...
git-svn-id: file:///svn/unbound/trunk@4971 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-22 15:07:30 +00:00
Wouter Wijngaards
438634b718
nicer python error log errors.
...
git-svn-id: file:///svn/unbound/trunk@4970 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-22 13:47:37 +00:00
Wouter Wijngaards
d21cb609a8
- review fixes for python module.
...
git-svn-id: file:///svn/unbound/trunk@4969 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-22 13:31:21 +00:00
Wouter Wijngaards
668c0627c0
Fix compare signed with unsigned in python interface for pythonmod
...
git-svn-id: file:///svn/unbound/trunk@4968 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-22 13:07:37 +00:00
Wouter Wijngaards
de0b6da9f4
- ignore debug python module for test in doxygen output.
...
git-svn-id: file:///svn/unbound/trunk@4967 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-22 13:05:26 +00:00
Wouter Wijngaards
5853f90076
- With ./configure --with-pyunbound --with-pythonmodule
...
PYTHON_VERSION=3.6 or with 2.7 unbound can compile and unit tests
succeed for the python module.
- pythonmod logs the python error and traceback on failure.
git-svn-id: file:///svn/unbound/trunk@4966 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-22 13:01:29 +00:00
Wouter Wijngaards
022d5131b3
Fixup.
...
git-svn-id: file:///svn/unbound/trunk@4965 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-21 06:44:24 +00:00
Wouter Wijngaards
7458729d28
- Scrub NS records from NODATA responses as well.
...
git-svn-id: file:///svn/unbound/trunk@4964 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-21 06:37:00 +00:00
Wouter Wijngaards
7acf6a4a66
- Removed compile warnings in pythonmod sockaddr routines.
...
git-svn-id: file:///svn/unbound/trunk@4963 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-20 12:28:09 +00:00
Wouter Wijngaards
04d73b9192
- Add patch from Jan Vcelak for pythonmod,
...
add sockaddr_storage getters, add support for query callbacks,
allow raw address access via comm_reply and update API documentation.
git-svn-id: file:///svn/unbound/trunk@4962 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-20 12:24:40 +00:00
Wouter Wijngaards
f7e99131b9
- Scrub NS records from NXDOMAIN responses to stop fragmentation
...
poisoning of the cache.
git-svn-id: file:///svn/unbound/trunk@4961 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-20 09:44:40 +00:00
Wouter Wijngaards
069b0b8c90
- Support SO_REUSEPORT_LB in FreeBSD 12 with the so-reuseport: yes
...
option in unbound.conf.
git-svn-id: file:///svn/unbound/trunk@4960 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-19 09:36:27 +00:00
Ralph Dolmans
1ff7a89433
- added contrib config files to gitignore
...
git-svn-id: file:///svn/unbound/trunk@4959 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-14 09:51:31 +00:00
Ralph Dolmans
640d1cf929
- Bugfix min-client-subnet-ipv6
...
git-svn-id: file:///svn/unbound/trunk@4958 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-06 09:44:10 +00:00
Wouter Wijngaards
c9955f9fdf
- Fix #4152 : Logs shows wrong time when using log-time-ascii: yes.
...
git-svn-id: file:///svn/unbound/trunk@4957 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-25 13:52:13 +00:00
Wouter Wijngaards
9a877e0e9a
- remade makefile dependencies.
...
(note the make depend just done).
git-svn-id: file:///svn/unbound/trunk@4956 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-25 09:31:25 +00:00
Wouter Wijngaards
6b49224c85
make depend
...
git-svn-id: file:///svn/unbound/trunk@4955 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-25 09:30:57 +00:00
Wouter Wijngaards
fd5e4e6019
- Fix #4126 : RTT_band too low on VSAT links with 600+ms latency,
...
adds the option unknown-server-time-limit to unbound.conf that
can be increased to avoid the problem.
git-svn-id: file:///svn/unbound/trunk@4954 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-25 09:21:41 +00:00
Wouter Wijngaards
8e2a100460
- Fix #4132 : Openness/closeness of RANGE intervals in rpl files.
...
git-svn-id: file:///svn/unbound/trunk@4953 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-25 09:01:53 +00:00
Ralph Dolmans
359dcc3c5c
Document min-client-subnet-ipv4/6 default value
...
git-svn-id: file:///svn/unbound/trunk@4952 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-25 08:55:55 +00:00
Ralph Dolmans
6021341118
- Add min-client-subnet-ipv6 and min-client-subnet-ipv4 options.
...
git-svn-id: file:///svn/unbound/trunk@4951 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-25 08:53:50 +00:00
Wouter Wijngaards
d5922830d0
- Fix #4141 : More randomness to rrset-roundrobin.
...
git-svn-id: file:///svn/unbound/trunk@4950 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-25 08:26:40 +00:00
Wouter Wijngaards
23505d30a5
- Fix #4190 : Please create a "ANY" deny option, adds the option
...
deny-any: yes in unbound.conf. This responds with an empty message
to queries of type ANY.
git-svn-id: file:///svn/unbound/trunk@4949 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-25 08:07:37 +00:00
Wouter Wijngaards
0f83653e76
Move rcode code back.
...
git-svn-id: file:///svn/unbound/trunk@4948 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-25 07:49:49 +00:00
Wouter Wijngaards
20f0e8ad55
- Fix #4191 : NXDOMAIN vs SERVFAIL during dns64 PTR query.
...
git-svn-id: file:///svn/unbound/trunk@4947 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-25 07:45:00 +00:00
Ralph Dolmans
140a165ab2
- Add markdel function to ECS slabhash.
...
- Limit ECS scope returned to client to the scope used for caching.
- Make lint like previous #4154 fix.
git-svn-id: file:///svn/unbound/trunk@4946 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-24 13:50:18 +00:00
Wouter Wijngaards
5fec1c8b1f
- Fix #4154 : make ECS_MAX_TREESIZE configurable, with
...
the max-ecs-tree-size-ipv4 and max-ecs-tree-size-ipv6 options.
git-svn-id: file:///svn/unbound/trunk@4945 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-22 14:54:28 +00:00
Wouter Wijngaards
6bd4060ae0
portability.
...
git-svn-id: file:///svn/unbound/trunk@4944 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-22 10:19:30 +00:00
Wouter Wijngaards
84a8415357
- check that the dnstap socket file can be opened and exists, print
...
error if not.
git-svn-id: file:///svn/unbound/trunk@4943 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-22 10:17:38 +00:00
Wouter Wijngaards
6429b5c298
- Fix #4192 : unbound-control-setup generates keys not readable by
...
group.
git-svn-id: file:///svn/unbound/trunk@4942 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-22 10:07:13 +00:00
Ralph Dolmans
6b5e7d78e3
- Change fast-server-num default to 3.
...
git-svn-id: file:///svn/unbound/trunk@4941 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-22 09:36:36 +00:00
Ralph Dolmans
a8b2c64cbf
More lint pleasing
...
git-svn-id: file:///svn/unbound/trunk@4940 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-08 16:38:25 +00:00
Ralph Dolmans
9268f0db50
Please lint by using proper types
...
git-svn-id: file:///svn/unbound/trunk@4939 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-08 16:33:04 +00:00
Ralph Dolmans
02bd3e2ff1
- Add fast-server-permil and fast-server-num options.
...
- Deprecate low-rtt and low-rtt-permil options.
git-svn-id: file:///svn/unbound/trunk@4938 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-08 16:03:46 +00:00
Wouter Wijngaards
2d28fba3bf
- Squelch log of failed to tcp initiate after TCP Fastopen failure.
...
git-svn-id: file:///svn/unbound/trunk@4937 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-08 13:27:53 +00:00
Wouter Wijngaards
19aed2dcb1
Trunk has 1.8.2 in development.
...
git-svn-id: file:///svn/unbound/trunk@4936 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-08 12:09:44 +00:00
Wouter Wijngaards
eed1e0789a
- fastrpz.patch fix included.
...
git-svn-id: file:///svn/unbound/trunk@4935 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-08 10:33:09 +00:00
Wouter Wijngaards
837565c505
- iana port update.
...
git-svn-id: file:///svn/unbound/trunk@4933 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-05 15:18:08 +00:00
Wouter Wijngaards
fece182cf5
- Set default for so-reuseport to no for FreeBSD. It is enabled
...
by default for Linux and DragonFlyBSD. The setting can
be configured in unbound.conf to override the default.
git-svn-id: file:///svn/unbound/trunk@4932 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-05 15:07:19 +00:00
Wouter Wijngaards
945452bff4
- Squelch EADDRNOTAVAIL errors when the interface goes away,
...
this omits 'can't assign requested address' errors unless
verbosity is set to a high value.
git-svn-id: file:///svn/unbound/trunk@4931 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-05 06:29:05 +00:00
Wouter Wijngaards
1c08a2ba55
- clang analyze test is used only when assertions are enabled.
...
git-svn-id: file:///svn/unbound/trunk@4930 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-02 12:42:50 +00:00
Wouter Wijngaards
d967ceb98b
Remove that fix, analyzer is for debug with assertions.
...
- Fix clang analyzer for optimize compile analysis.
git-svn-id: file:///svn/unbound/trunk@4929 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-02 12:32:33 +00:00
Wouter Wijngaards
a3c3e13b2f
remove unused diagnostic pragmas that themselves generate warnings
...
git-svn-id: file:///svn/unbound/trunk@4928 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-02 12:17:40 +00:00
Wouter Wijngaards
83a186f6cc
Remove unused diagnostic pragmas that themselves generate warnings
...
git-svn-id: file:///svn/unbound/trunk@4927 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-02 12:17:11 +00:00
Wouter Wijngaards
2598f9bb18
line fixup
...
git-svn-id: file:///svn/unbound/trunk@4926 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-02 12:13:19 +00:00
Wouter Wijngaards
ba28c48efc
Remove unused variable from contrib fastrpz/rpz.c
...
git-svn-id: file:///svn/unbound/trunk@4925 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-02 12:12:29 +00:00
Wouter Wijngaards
98234d1017
- updated contrib/fastrpz.patch to apply for this version
...
git-svn-id: file:///svn/unbound/trunk@4924 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-02 12:00:06 +00:00
Wouter Wijngaards
99a92b3483
- Fix testlock code to set noreturn on error routine.
...
git-svn-id: file:///svn/unbound/trunk@4923 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-02 10:53:40 +00:00
Wouter Wijngaards
c85ff492d0
- Fix clang analyzer for optimize compile analysis.
...
git-svn-id: file:///svn/unbound/trunk@4922 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-02 10:51:05 +00:00
Wouter Wijngaards
b09cfb8fb1
- dnscrypt.c removed sizeof to get array bounds.
...
git-svn-id: file:///svn/unbound/trunk@4921 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-02 10:47:12 +00:00
Wouter Wijngaards
966a958ca5
Fixup fastrpz.patch
...
git-svn-id: file:///svn/unbound/trunk@4920 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-02 10:34:00 +00:00
Wouter Wijngaards
885069e1f6
- tag for release 1.8.1rc1.
...
git-svn-id: file:///svn/unbound/trunk@4918 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-01 11:28:05 +00:00
Wouter Wijngaards
077b38e2c5
note down that memory leak #4149 is fixed.
...
git-svn-id: file:///svn/unbound/trunk@4917 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-01 09:36:15 +00:00
Wouter Wijngaards
9be04e6fac
- Fix #4188 : IPv6 forwarders without ipv6 result in SERVFAIL, fixes
...
qname minimisation with a forwarder when connectivity has issues
from rejecting responses.
git-svn-id: file:///svn/unbound/trunk@4916 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-27 08:19:29 +00:00
Wouter Wijngaards
377d5b426a
- Add SSL cleanup for tcp timeout.
...
git-svn-id: file:///svn/unbound/trunk@4915 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-25 09:01:13 +00:00
Wouter Wijngaards
f82a128909
- Perform TLS SNI indication of the host that is being contacted
...
for DNS over TLS service. It sets the configured tls auth name.
This is useful for hosts that apart from the DNS over TLS services
also provide other (web) services.
git-svn-id: file:///svn/unbound/trunk@4914 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-25 08:31:42 +00:00
Wouter Wijngaards
216759e955
- Fix #4156 : Fix systemd service manager state change notification.
...
git-svn-id: file:///svn/unbound/trunk@4913 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-17 12:30:22 +00:00
Wouter Wijngaards
9b6caf5a5b
- Fix that with harden-below-nxdomain and qname minisation enabled
...
some iterator states for nonresponsive domains can get into a
state where they waited for an empty list.
- Stop UDP to TCP failover after timeouts that causes the ping count
to be reset by the TCP time measurement (that exists for TLS),
because that causes the UDP part to not be measured as timeout.
git-svn-id: file:///svn/unbound/trunk@4912 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-17 11:25:52 +00:00
Wouter Wijngaards
5c25bbd93f
fix error print
...
git-svn-id: file:///svn/unbound/trunk@4911 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-17 07:44:11 +00:00
Wouter Wijngaards
d8937492cb
fixup 3
...
git-svn-id: file:///svn/unbound/trunk@4910 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-17 07:35:09 +00:00
Wouter Wijngaards
e91d85edb5
Fixup
...
git-svn-id: file:///svn/unbound/trunk@4909 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-17 07:32:40 +00:00
Wouter Wijngaards
5089db7331
- Fix unbound for openssl in FIPS mode, it uses the digests with
...
the EVP call contexts.
git-svn-id: file:///svn/unbound/trunk@4908 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-17 07:28:55 +00:00
Wouter Wijngaards
8e20d628e8
- Fix compile on Mac for unbound, provide explicit_bzero when libc
...
does not have it.
git-svn-id: file:///svn/unbound/trunk@4907 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-17 07:06:57 +00:00
Wouter Wijngaards
d275505df6
- annotate exit functions with noreturn in unbound-control.
...
git-svn-id: file:///svn/unbound/trunk@4906 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-13 14:43:43 +00:00
Wouter Wijngaards
f7516e6b2b
- nicer bio free code in unbound-anchor.
...
git-svn-id: file:///svn/unbound/trunk@4905 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-13 12:49:37 +00:00
Wouter Wijngaards
898d4c8dd9
- Fix memory leak when message parse fails partway through copy.
...
- remove unused udpsize assignment in message encode.
git-svn-id: file:///svn/unbound/trunk@4904 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-13 12:30:44 +00:00
Wouter Wijngaards
2e9d09b961
- initialize statistics totals for printout.
...
- in authzone check that node exists before adding rrset.
- in unbound-anchor, use readwrite memory BIO.
- assertion in autotrust that packed rrset is formed correctly.
git-svn-id: file:///svn/unbound/trunk@4903 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-13 12:20:41 +00:00
Wouter Wijngaards
8dd6efe5ed
- remove unused variable assignment from iterator scrub routine.
...
- check for null in delegation point during iterator refetch
in forward zone.
- neater pointer cast in libunbound context quit routine.
git-svn-id: file:///svn/unbound/trunk@4902 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-13 10:36:22 +00:00
Wouter Wijngaards
635df9c806
- unit test has clang analysis.
...
git-svn-id: file:///svn/unbound/trunk@4901 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-13 10:24:08 +00:00
Wouter Wijngaards
75b8b8c875
- Free memory leak in config strlist append.
...
- make sure nsec3 comparison salt is initialized.
git-svn-id: file:///svn/unbound/trunk@4900 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-13 10:23:30 +00:00
Wouter Wijngaards
90f0530234
Fix lint found flaw.
...
git-svn-id: file:///svn/unbound/trunk@4899 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-13 10:23:01 +00:00
Wouter Wijngaards
d744827f93
Better sbuffer assertion.
...
git-svn-id: file:///svn/unbound/trunk@4898 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-13 10:00:57 +00:00
Wouter Wijngaards
fe8b22caa1
- in testcode, free async ids, initialise array, and check for null
...
pointer during test of the test. And use exit for return to note
irregular program stop.
git-svn-id: file:///svn/unbound/trunk@4897 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-13 09:45:07 +00:00
Wouter Wijngaards
9a82526b91
- exit log routine is annotated as noreturn function.
...
- free memory leaks in config strlist and str2list insert functions.
- do not move unused argv variable after getopt.
- Remove unused if clause in testcode.
git-svn-id: file:///svn/unbound/trunk@4896 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-13 08:58:21 +00:00
Wouter Wijngaards
225a6d9c6e
- Fix seed for random backup code to use explicit zero when wiped.
...
git-svn-id: file:///svn/unbound/trunk@4895 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-13 07:49:51 +00:00
Wouter Wijngaards
87c8dd5434
- Fix initialisation in remote.c
...
git-svn-id: file:///svn/unbound/trunk@4894 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-11 14:11:50 +00:00
Wouter Wijngaards
a09c4bbdc2
- Fix spelling errors.
...
git-svn-id: file:///svn/unbound/trunk@4893 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-11 13:28:21 +00:00
Wouter Wijngaards
d01651c305
- Fix to squelch respip warning in unit test, it is printed at
...
higher verbosity settings.
git-svn-id: file:///svn/unbound/trunk@4892 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-11 13:24:31 +00:00
Wouter Wijngaards
00982fc3db
- Fixed unused return value warnings in contrib/fastrpz.patch for
...
asprintf.
git-svn-id: file:///svn/unbound/trunk@4891 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-11 13:19:55 +00:00
Wouter Wijngaards
d8f890a43a
- iana port update.
...
git-svn-id: file:///svn/unbound/trunk@4890 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-10 12:35:01 +00:00
Wouter Wijngaards
a58681a718
1.8.1 in svn trunk.
...
git-svn-id: file:///svn/unbound/trunk@4889 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-10 12:32:28 +00:00
Wouter Wijngaards
c9d33fb9f7
1.8.0 release.
...
git-svn-id: file:///svn/unbound/trunk@4888 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-10 12:30:29 +00:00
Wouter Wijngaards
254df71810
- Fix spelling error in header, from getdns commit by Andreas Gelmini.
...
git-svn-id: file:///svn/unbound/trunk@4886 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-05 05:33:38 +00:00
Wouter Wijngaards
194dc32059
explain ip-ratelimit-factor causes the log line and it is a per-query log line.
...
git-svn-id: file:///svn/unbound/trunk@4885 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-04 09:26:51 +00:00
Ralph Dolmans
987c1c97e5
- More explicitly mention the type of ratelimit when applying ip-ratelimit.
...
git-svn-id: file:///svn/unbound/trunk@4884 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-04 09:16:07 +00:00
Wouter Wijngaards
25c8497ba6
- Tag for 1.8.0rc1 release.
...
git-svn-id: file:///svn/unbound/trunk@4882 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-04 07:15:06 +00:00
Wouter Wijngaards
5577e55400
- Disable minimal-responses in subnet unit tests.
...
git-svn-id: file:///svn/unbound/trunk@4881 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-31 14:59:10 +00:00
Wouter Wijngaards
27472f1270
better locking.
...
git-svn-id: file:///svn/unbound/trunk@4880 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-30 09:21:05 +00:00
Wouter Wijngaards
30a14c2716
- Fix that a local-zone with a local-zone-type that is transparent
...
in a view with view-first, makes queries check for answers from the
local-zones defined outside of views.
git-svn-id: file:///svn/unbound/trunk@4879 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-30 09:06:07 +00:00
Wouter Wijngaards
d4a69e4d2a
flex.
...
git-svn-id: file:///svn/unbound/trunk@4878 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-30 09:02:29 +00:00
Wouter Wijngaards
000e75581b
Fixup that it does not set prefetch_ttl twice, but sets the new serve_expired_ttl member of the reply ttls.
...
git-svn-id: file:///svn/unbound/trunk@4877 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-30 08:03:29 +00:00
Ralph Dolmans
2e5e31e8ac
- Added serve-expired-ttl and serve-expired-ttl-reset options.
...
git-svn-id: file:///svn/unbound/trunk@4876 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-28 14:21:56 +00:00
Ralph Dolmans
ae2653fcc5
- Disable minimal-responses in ipsecmod unit tests.
...
git-svn-id: file:///svn/unbound/trunk@4875 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-28 14:11:21 +00:00
Wouter Wijngaards
f7118f29b9
- Fix lintflags for lint on FreeBSD.
...
git-svn-id: file:///svn/unbound/trunk@4874 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-27 13:42:27 +00:00
Wouter Wijngaards
57a5e75840
Fixup test and lint hook.
...
git-svn-id: file:///svn/unbound/trunk@4873 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-27 13:29:48 +00:00
Wouter Wijngaards
8d14e7c0a4
- next release is called 1.8.0.
...
git-svn-id: file:///svn/unbound/trunk@4872 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-27 13:20:12 +00:00
Wouter Wijngaards
e0745813f4
- Set defaults to yes for a number of options to increase speed and
...
resilience of the server. The so-reuseport, harden-below-nxdomain,
and minimal-responses options are enabled by default. They used
to be disabled by default, waiting to make sure they worked. They
are enabled by default now, and can be disabled explicitly by
setting them to "no" in the unbound.conf config file. The reuseport
and minimal options increases speed of the server, and should be
otherwise harmless. The harden-below-nxdomain option works well
together with the recently default enabled qname minimisation, this
causes more fetches to use information from the cache.
git-svn-id: file:///svn/unbound/trunk@4871 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-27 13:18:19 +00:00
George Thessalonikefs
0171d06aa2
- #4140 : Expose repinfo (comm_reply) to the inplace_callbacks. This
...
gives access to reply information for the client's communication
point when the callback is called before the mesh state (modules).
Changes to C and Python's inplace_callback signatures were also
necessary.
git-svn-id: file:///svn/unbound/trunk@4870 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-22 10:51:13 +00:00
Wouter Wijngaards
4daf8f5bdb
- Fix only misc failure from log-servfail when val-log-level is not
...
enabled.
git-svn-id: file:///svn/unbound/trunk@4869 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-21 14:31:37 +00:00
Wouter Wijngaards
8893735a2d
edns-subnet retain rcode when no return_msg, for log-servfail.
...
git-svn-id: file:///svn/unbound/trunk@4868 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-21 14:25:07 +00:00
Wouter Wijngaards
00ba747be7
- #4146 : num.query.subnet and num.query.subnet_cache counters.
...
git-svn-id: file:///svn/unbound/trunk@4867 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-21 14:14:28 +00:00
Wouter Wijngaards
504ef71975
and documentation.
...
git-svn-id: file:///svn/unbound/trunk@4866 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-21 07:14:48 +00:00
Wouter Wijngaards
9926fcac4b
flex and bison re-run.
...
git-svn-id: file:///svn/unbound/trunk@4865 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-21 07:10:49 +00:00
Wouter Wijngaards
01d8dc2240
- log-local-actions: yes option for unbound.conf that logs all the
...
local zone actions, a patch from Saksham Manchanda (Secure64).
git-svn-id: file:///svn/unbound/trunk@4864 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-21 07:10:09 +00:00
Wouter Wijngaards
4fe427ded2
- log-servfail: yes prints log lines that say why queries are
...
returning SERVFAIL to clients.
git-svn-id: file:///svn/unbound/trunk@4863 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-17 15:22:05 +00:00
Wouter Wijngaards
b0ca964984
and printout for these cases too.
...
git-svn-id: file:///svn/unbound/trunk@4862 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-17 15:09:23 +00:00
Wouter Wijngaards
e8c4f20f66
- added more servfail printout statements, to the iterator.
...
git-svn-id: file:///svn/unbound/trunk@4861 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-17 15:01:35 +00:00
Wouter Wijngaards
b0daf867c2
and the error looks good.
...
git-svn-id: file:///svn/unbound/trunk@4860 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-17 14:17:48 +00:00
Wouter Wijngaards
8385c462ed
- print servfail info to log as error.
...
git-svn-id: file:///svn/unbound/trunk@4859 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-17 13:29:27 +00:00
Ralph Dolmans
afd4063f20
- Fix classification for QTYPE=CNAME queries when QNAME minimisation is enabled.
...
git-svn-id: file:///svn/unbound/trunk@4858 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-17 12:48:47 +00:00
Wouter Wijngaards
ed24498f2e
- Set libunbound to increase current, because the libunbound change
...
to the event callback function signature. That needs programs,
that use it, to recompile against the new header definition.
git-svn-id: file:///svn/unbound/trunk@4857 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-17 09:07:06 +00:00
Wouter Wijngaards
f2b12c0761
- Fix contrib/fastrpz.patch.
...
git-svn-id: file:///svn/unbound/trunk@4856 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-16 10:29:00 +00:00
Wouter Wijngaards
df85836b15
- Fix warning on compile without threads.
...
git-svn-id: file:///svn/unbound/trunk@4855 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-16 10:28:11 +00:00
Wouter Wijngaards
3f2b6828e5
Test unit test for reordering.
...
git-svn-id: file:///svn/unbound/trunk@4854 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-15 09:40:30 +00:00
Wouter Wijngaards
1958d9fbd5
- Fix segfault in auth-zone read and reorder of RRSIGs.
...
git-svn-id: file:///svn/unbound/trunk@4853 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-15 09:26:13 +00:00
Wouter Wijngaards
0c04b5eaf5
- Upgraded crosscompile script to include libunbound DLL in the
...
zipfile.
git-svn-id: file:///svn/unbound/trunk@4852 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-14 14:52:09 +00:00
Wouter Wijngaards
8e5a32f4dc
- Fix that printout of error for cycle targets is a verbosity 4
...
printout and does not wrongly print it is a memory error.
git-svn-id: file:///svn/unbound/trunk@4851 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-14 07:27:57 +00:00
Wouter Wijngaards
efe5c8e6be
- Fix #4144 : dns64 module caches wrong (negative) information.
...
git-svn-id: file:///svn/unbound/trunk@4850 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-10 08:03:17 +00:00
Wouter Wijngaards
1e61604aab
use closer of stub and forward if both configured.
...
git-svn-id: file:///svn/unbound/trunk@4849 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-09 13:00:06 +00:00
Wouter Wijngaards
488eaf09ce
Fixup log printout.
...
git-svn-id: file:///svn/unbound/trunk@4848 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-09 12:56:49 +00:00
Wouter Wijngaards
8b1012613e
documentation.
...
git-svn-id: file:///svn/unbound/trunk@4847 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-09 12:48:33 +00:00
Wouter Wijngaards
256ab3d935
- Patch for stub-no-cache and forward-no-cache options that disable
...
caching for the contents of that stub or forward, for when you
want immediate changes visible, from Bjoern A. Zeeb.
git-svn-id: file:///svn/unbound/trunk@4846 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-09 12:44:40 +00:00
Wouter Wijngaards
a07337fd6d
Breakout at end.
...
git-svn-id: file:///svn/unbound/trunk@4845 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-09 09:07:31 +00:00
Wouter Wijngaards
be79ffa371
- document --enable-subnet in doc/README.
...
git-svn-id: file:///svn/unbound/trunk@4844 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-09 08:48:04 +00:00
Wouter Wijngaards
c580e0e33c
Fixup
...
git-svn-id: file:///svn/unbound/trunk@4843 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-09 08:46:13 +00:00
Wouter Wijngaards
d2f7999b4e
- unbound-checkconf checks if modules exist and prints if they are
...
not compiled in the name of the wrong module.
git-svn-id: file:///svn/unbound/trunk@4842 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-09 08:33:56 +00:00
Wouter Wijngaards
611e37aa2d
(On the patch)
...
- make depend, yacc, lex, doc, headers. And log the limit exceeded
message only on high verbosity, so as to not spam the logs when
it is busy.
git-svn-id: file:///svn/unbound/trunk@4841 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-07 12:48:49 +00:00
Ralph Dolmans
3f2d186694
- Make capsforid fallback QNAME minimisation aware.
...
git-svn-id: file:///svn/unbound/trunk@4840 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-07 12:43:49 +00:00
Wouter Wijngaards
73f01304f0
tcp-connection-limit in example config.
...
git-svn-id: file:///svn/unbound/trunk@4839 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-07 12:28:57 +00:00
Wouter Wijngaards
77bd7d228b
Fix comment reference to variable name in header file.
...
git-svn-id: file:///svn/unbound/trunk@4838 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-07 12:03:46 +00:00
Wouter Wijngaards
b97b04a9db
yacc and lex.
...
git-svn-id: file:///svn/unbound/trunk@4837 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-07 12:02:10 +00:00
Wouter Wijngaards
6e4583a528
redid the make depend.
...
git-svn-id: file:///svn/unbound/trunk@4836 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-07 11:58:06 +00:00
Wouter Wijngaards
586b811b87
- Patch to implement tcp-connection-limit from Jim Hague (Sinodun).
...
This limits the number of simultaneous TCP client connections
from a nominated netblock.
And a simple test for TCP connection limit.
git-svn-id: file:///svn/unbound/trunk@4835 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-07 11:57:42 +00:00
Wouter Wijngaards
070019c9be
- Fix #4142 : unbound.service.in: improvements and fixes.
...
Add unit dependency ordering (based on systemd-resolved).
Add 'CAP_SYS_RESOURCE' to 'CapabilityBoundingSet' (fixes warnings
about missing privileges during startup). Add 'AF_INET6' to
'RestrictAddressFamilies' (without it IPV6 can't work). From
Guido Shanahan.
git-svn-id: file:///svn/unbound/trunk@4834 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-07 08:30:22 +00:00
George Thessalonikefs
ce04bcb463
please lint.
...
git-svn-id: file:///svn/unbound/trunk@4833 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-06 09:00:49 +00:00
Wouter Wijngaards
cf1bfbba5d
test post hook.
...
git-svn-id: file:///svn/unbound/trunk@4832 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-06 07:41:41 +00:00
Wouter Wijngaards
a4fd088875
change for post hook
...
git-svn-id: file:///svn/unbound/trunk@4831 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-06 07:30:11 +00:00
Wouter Wijngaards
27023b3f21
- Fix for #4136 : Fix to unconditionally call destroy in daemon.c.
...
git-svn-id: file:///svn/unbound/trunk@4830 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-06 07:18:05 +00:00
George Thessalonikefs
b2a7933045
Make sure that we don't randomly fail the pylib ratelimiting tests.
...
git-svn-id: file:///svn/unbound/trunk@4829 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-03 15:57:48 +00:00
George Thessalonikefs
749d1b9ebc
- Expose if a query (or a subquery) was ratelimited (not src IP
...
ratelimiting) to libunbound under 'ub_result.was_ratelimited'.
This also introduces a change to 'ub_event_callback_type' in
libunbound/unbound-event.h.
- Tidy pylib tests.
git-svn-id: file:///svn/unbound/trunk@4828 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-03 14:00:46 +00:00
Wouter Wijngaards
87bdb489f9
- New fix for #4136 : This one ignores lex without without
...
yylex_destroy.
git-svn-id: file:///svn/unbound/trunk@4827 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-03 11:10:55 +00:00
Wouter Wijngaards
37e9f5591a
- Revert previous change for #4136 : because it introduces build
...
problems.
git-svn-id: file:///svn/unbound/trunk@4826 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-03 09:47:53 +00:00
Wouter Wijngaards
d546e7766d
- iana port list update.
...
git-svn-id: file:///svn/unbound/trunk@4825 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-01 14:07:54 +00:00
Wouter Wijngaards
62f69f9b40
- Fix to remove systemd sockaddr function check, that is not
...
always present. Make socket activation more lenient. But not
different when socket activation is not used.
git-svn-id: file:///svn/unbound/trunk@4824 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-01 13:49:27 +00:00
Wouter Wijngaards
168bc963d3
edns keepalive in example.conf
...
git-svn-id: file:///svn/unbound/trunk@4823 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-31 13:59:34 +00:00
Wouter Wijngaards
1f148e632f
remove unused variable
...
git-svn-id: file:///svn/unbound/trunk@4822 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-31 13:36:45 +00:00
Wouter Wijngaards
c887ae1022
- Fix #4139 : Fix unbound-host leaks memory on ANY.
...
git-svn-id: file:///svn/unbound/trunk@4821 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-31 11:58:19 +00:00
Wouter Wijngaards
375d3e7520
document -d on streamtcp man page.
...
git-svn-id: file:///svn/unbound/trunk@4820 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-31 10:36:01 +00:00
Wouter Wijngaards
3b171545b6
error message changed.
...
git-svn-id: file:///svn/unbound/trunk@4819 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-31 10:33:17 +00:00
Wouter Wijngaards
aa5efa172d
idle timeout is in milliseconds, fix test config.
...
git-svn-id: file:///svn/unbound/trunk@4818 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-31 10:30:42 +00:00
Wouter Wijngaards
a2961e50fb
For windows portability, example.conf documentation.
...
git-svn-id: file:///svn/unbound/trunk@4817 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-31 10:24:09 +00:00
Wouter Wijngaards
adc498d29d
test 3 works outside srcdir longtest
...
git-svn-id: file:///svn/unbound/trunk@4816 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-31 08:52:40 +00:00
Wouter Wijngaards
1ff3e51ee1
Make test 6 work in outside srcdir longtest.
...
git-svn-id: file:///svn/unbound/trunk@4815 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-31 08:41:55 +00:00
Wouter Wijngaards
f9c0f359a7
please lint.
...
git-svn-id: file:///svn/unbound/trunk@4814 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-31 08:14:52 +00:00
Wouter Wijngaards
cc538f4f9f
- Please doxygen so it passes.
...
git-svn-id: file:///svn/unbound/trunk@4813 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-31 08:10:20 +00:00
Wouter Wijngaards
900cd200a2
more comments (from commit messages).
...
git-svn-id: file:///svn/unbound/trunk@4812 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-31 08:00:57 +00:00
Wouter Wijngaards
45e73bcc8e
Insert comments for documentation purposes.
...
git-svn-id: file:///svn/unbound/trunk@4811 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-31 07:55:47 +00:00
Wouter Wijngaards
26eaf2d1ee
And these source files.
...
git-svn-id: file:///svn/unbound/trunk@4810 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-31 07:48:58 +00:00
Wouter Wijngaards
2f32ef7646
Another patch from Jim Hague:
...
- Fix 'make depend' to work when build dir is not project root.
git-svn-id: file:///svn/unbound/trunk@4809 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-31 07:27:16 +00:00
Wouter Wijngaards
b7abbd1d72
- Fix mesh.c incompatible pointer pass.
...
- yacc and lex.
git-svn-id: file:///svn/unbound/trunk@4808 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-31 07:23:58 +00:00
Wouter Wijngaards
f364edafd3
- From Wouter: make depend, the dependencies in the patches did not
...
apply cleanly.
git-svn-id: file:///svn/unbound/trunk@4807 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-31 07:21:39 +00:00
Wouter Wijngaards
e3f08cb2a2
- Implement progressive backoff of TCP idle/keepalive timeout.
...
git-svn-id: file:///svn/unbound/trunk@4806 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-31 07:20:15 +00:00
Wouter Wijngaards
a92b00ef3c
- Correct and expand manual page entries for keepalive and idle timeout.
...
git-svn-id: file:///svn/unbound/trunk@4805 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-31 07:19:26 +00:00
Wouter Wijngaards
3dbdde7fed
- Add edns-tcp-keepalive and edns-tcp-keepalive timeout options
...
and implement option in client responses.
git-svn-id: file:///svn/unbound/trunk@4804 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-31 07:18:34 +00:00
Wouter Wijngaards
6da37e5ecd
- Error if EDNS Keepalive received over UDP.
...
implement and add test.
git-svn-id: file:///svn/unbound/trunk@4803 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-31 07:16:25 +00:00
Wouter Wijngaards
007123ee2c
- Sort out test runs when the build directory isn't the project
...
root directory.
- Add config tcp-idle-timeout (default 30s). This applies to
client connections only; the timeout on TCP connections upstream
is unaffected.
git-svn-id: file:///svn/unbound/trunk@4802 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-31 07:15:12 +00:00
Wouter Wijngaards
10c085f81d
- Fix #4136 : insufficiency from mismatch of FLEX capability between
...
released tarball and build host.
git-svn-id: file:///svn/unbound/trunk@4801 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-30 09:58:05 +00:00
Wouter Wijngaards
1d315e11cf
- Fix man page, say that chroot is enabled by default.
...
git-svn-id: file:///svn/unbound/trunk@4800 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-27 09:19:57 +00:00
Wouter Wijngaards
c91b657a40
Attribute and put fix in section.
...
git-svn-id: file:///svn/unbound/trunk@4799 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-26 07:10:24 +00:00
Wouter Wijngaards
60f59271d6
- Fix #4135 : 64-bit Windows Installer Creates Entries Under The
...
Wrong Registry Key.
git-svn-id: file:///svn/unbound/trunk@4798 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-26 06:59:57 +00:00
Wouter Wijngaards
40abe08ac8
- Fix use-systemd readiness signalling, only when use-systemd is yes
...
and not in signal handler.
git-svn-id: file:///svn/unbound/trunk@4797 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-23 13:05:39 +00:00
Wouter Wijngaards
ae1790b8e8
fixup for :
...
git-svn-id: file:///svn/unbound/trunk@4796 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-20 12:52:37 +00:00
Wouter Wijngaards
aa5fb8b10b
- Fix #4131 : for solaris, error YY_CURRENT_BUFFER undeclared.
...
git-svn-id: file:///svn/unbound/trunk@4795 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-20 11:53:57 +00:00
Wouter Wijngaards
6de329359c
better line about fix suggestion
...
git-svn-id: file:///svn/unbound/trunk@4794 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-20 08:58:30 +00:00
Wouter Wijngaards
2e34a8f643
double spaces.
...
git-svn-id: file:///svn/unbound/trunk@4793 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-20 08:56:47 +00:00
Wouter Wijngaards
bded93f69b
- Fix #4130 : print text describing -dd and unbound-checkconf on
...
config file read error at startup, the errors may have been moved
away by the startup process.
git-svn-id: file:///svn/unbound/trunk@4792 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-20 05:42:38 +00:00
Wouter Wijngaards
38e77d50f2
- Fix #4129 unbound-control error message with wrong cert permissions
...
is too cryptic.
git-svn-id: file:///svn/unbound/trunk@4791 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-19 06:22:11 +00:00
Wouter Wijngaards
f8e585f308
nicer code, in function.
...
git-svn-id: file:///svn/unbound/trunk@4790 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-17 15:07:09 +00:00
Wouter Wijngaards
5bda4f9822
Fixup cache size test for msg cache.
...
git-svn-id: file:///svn/unbound/trunk@4789 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-17 14:56:02 +00:00
Wouter Wijngaards
d2d7b987fa
brackets added.
...
git-svn-id: file:///svn/unbound/trunk@4788 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-17 14:44:20 +00:00
Wouter Wijngaards
7579216922
- Resize ratelimit and ip-ratelimit caches if changed on reload.
...
git-svn-id: file:///svn/unbound/trunk@4787 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-17 14:42:38 +00:00
Wouter Wijngaards
330c6e1cb0
- Fix that ratelimit and ip-ratelimit are applied after reload of
...
git-svn-id: file:///svn/unbound/trunk@4786 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-17 14:27:44 +00:00
Wouter Wijngaards
41e5a66b73
Fixup
...
git-svn-id: file:///svn/unbound/trunk@4785 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-17 12:30:53 +00:00
Wouter Wijngaards
cc5ab744c5
- Print error if SSL name verification configured but not available
...
in the ssl library.
git-svn-id: file:///svn/unbound/trunk@4784 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-17 12:26:32 +00:00
Wouter Wijngaards
0ae750e552
- Fix #4127 unbound -h does not list -p help.
...
git-svn-id: file:///svn/unbound/trunk@4783 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-17 07:03:37 +00:00
Wouter Wijngaards
cabc120f22
for outgoing UDP sockets.
...
git-svn-id: file:///svn/unbound/trunk@4782 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-16 10:30:44 +00:00
Wouter Wijngaards
c96c2d8a45
- Squelch can't bind socket errors with Permission denied unless
...
verbosity is 4 or higher, for UDP sockets.
git-svn-id: file:///svn/unbound/trunk@4781 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-16 10:27:12 +00:00
Wouter Wijngaards
8aa53f027d
- Fix qname minimisation NXDOMAIN validation lookup failures causing
...
error_supers assertion fails.
git-svn-id: file:///svn/unbound/trunk@4780 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-16 10:21:34 +00:00
Wouter Wijngaards
4bf9d12419
- Fix for 4126 that the #define for UNKNOWN_SERVER_NICENESS can be more
...
easily changed to adjust default rtt assumptions.
git-svn-id: file:///svn/unbound/trunk@4779 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-12 14:15:03 +00:00
Wouter Wijngaards
f93746b1af
- Fix to improve systemd socket activation code file descriptor
...
assignment.
git-svn-id: file:///svn/unbound/trunk@4778 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-12 10:35:33 +00:00
Wouter Wijngaards
23dc22b78d
- Note in documentation that the cert name match code needs
...
git-svn-id: file:///svn/unbound/trunk@4777 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-10 08:02:32 +00:00
Wouter Wijngaards
5e3c30beac
- Fix round robin for failed addresses with prefer-ip6: yes
...
git-svn-id: file:///svn/unbound/trunk@4776 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-06 14:40:35 +00:00
Wouter Wijngaards
86f16bef93
Fix round robin for failed addresses with prefer-ip6: yes
...
git-svn-id: file:///svn/unbound/trunk@4775 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-06 14:14:19 +00:00
Wouter Wijngaards
f2e90b0872
- Note RFC8162 support. SMIMEA record type can be read in by the
...
zone record parser.
git-svn-id: file:///svn/unbound/trunk@4774 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-06 12:06:05 +00:00
Wouter Wijngaards
1249e0db3f
- Note RFC8162 support.
...
git-svn-id: file:///svn/unbound/trunk@4773 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-06 11:56:38 +00:00
Wouter Wijngaards
15c4dd79f4
- iana port update.
...
git-svn-id: file:///svn/unbound/trunk@4772 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-06 06:48:44 +00:00
Wouter Wijngaards
e324a7819a
- Fix documentation ambiguity for tls-win-cert in tls-upstream and
...
forward-tls-upstream docs.
git-svn-id: file:///svn/unbound/trunk@4771 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-06 05:39:08 +00:00
Wouter Wijngaards
81e9f82a8d
- Fix #4112 : Fix that unbound-anchor -f /etc/resolv.conf will not pass
...
if DNSSEC is not enabled. New option -R allows fallback from
resolv.conf to direct queries.
git-svn-id: file:///svn/unbound/trunk@4770 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-04 10:02:16 +00:00
Wouter Wijngaards
5d298ed474
- Fix permission denied printed for auth zone probe random port nrs.
...
git-svn-id: file:///svn/unbound/trunk@4769 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-03 13:58:49 +00:00
Wouter Wijngaards
82e1e3959f
- Better documentation for unblock-lan-zones and insecure-lan-zones
...
config statements.
git-svn-id: file:///svn/unbound/trunk@4768 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-03 08:54:01 +00:00
Wouter Wijngaards
7181c0fa6a
- Update libunbound/python/examples/dnssec_test.py example code to
...
also set the 20326 trust anchor for the root in the example code.
git-svn-id: file:///svn/unbound/trunk@4767 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-02 14:46:31 +00:00
Wouter Wijngaards
49f27c06af
Note that fix works to decrease problem, and is included for next release.
...
git-svn-id: file:///svn/unbound/trunk@4766 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-02 08:55:04 +00:00
Wouter Wijngaards
7247718e12
- Fix typo on man page in ip-address description.
...
git-svn-id: file:///svn/unbound/trunk@4765 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-02 07:19:12 +00:00
Wouter Wijngaards
61acc76244
- Fix checking for libhiredis printout in configure output.
...
git-svn-id: file:///svn/unbound/trunk@4764 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-02 07:09:30 +00:00
Wouter Wijngaards
2faa4f9ee2
And documentation.
...
git-svn-id: file:///svn/unbound/trunk@4763 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-29 13:03:57 +00:00
Wouter Wijngaards
2beae211ee
- dns64-ignore-aaaa: config option to list domain names for which the
...
existing AAAA is ignored and dns64 processing is used on the A
record.
git-svn-id: file:///svn/unbound/trunk@4762 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-29 12:58:52 +00:00
Wouter Wijngaards
d3ff7a9333
- log port number with err_addr logs.
...
git-svn-id: file:///svn/unbound/trunk@4761 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-29 08:34:41 +00:00
Wouter Wijngaards
23df700f15
explain num.tcp and num.tls
...
git-svn-id: file:///svn/unbound/trunk@4760 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-28 09:14:31 +00:00
Wouter Wijngaards
755233c720
- num.queries.tls counter for queries over TLS.
...
git-svn-id: file:///svn/unbound/trunk@4759 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-28 08:15:47 +00:00
Wouter Wijngaards
bca54a8b25
- Patch, do not export python from pkg-config, from Petr Menšík.
...
git-svn-id: file:///svn/unbound/trunk@4758 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-27 06:07:31 +00:00
Wouter Wijngaards
b5aab36d41
- #4109 : Fix that package config depends on python unconditionally.
...
git-svn-id: file:///svn/unbound/trunk@4757 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-27 05:46:36 +00:00
Wouter Wijngaards
d7cfe91cb3
- Fix that auth-zone does not start the wait timer without checking
...
if the wait timer has already been started.
(the code is part of the previous commit).
git-svn-id: file:///svn/unbound/trunk@4756 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-26 13:56:23 +00:00
Wouter Wijngaards
a31d45b13e
- Fix that auth-zone master reply with current SOA serial does not
...
stop scan of masters for an updated zone.
git-svn-id: file:///svn/unbound/trunk@4755 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-26 13:48:36 +00:00
Wouter Wijngaards
23f475bccc
- Tentative fix for permission denied on IPv6 address on FreeBSD.
...
git-svn-id: file:///svn/unbound/trunk@4754 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-26 08:01:44 +00:00
Wouter Wijngaards
025fdd0049
Document behaviour.
...
git-svn-id: file:///svn/unbound/trunk@4753 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-21 12:51:14 +00:00
Wouter Wijngaards
5bb6dbe21c
And moved -C to front.
...
git-svn-id: file:///svn/unbound/trunk@4752 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-21 12:39:49 +00:00
Wouter Wijngaards
c225ced1a9
- Fix usage printout for unbound-host, hostname has to be last
...
argument on BSDs and Windows.
git-svn-id: file:///svn/unbound/trunk@4751 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-21 12:31:42 +00:00
Wouter Wijngaards
3a58ad15e8
Note contents of release 1.7.3
...
git-svn-id: file:///svn/unbound/trunk@4750 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-21 10:00:17 +00:00
Wouter Wijngaards
5106ad7a2c
- #4108 : systemd reload hang fix.
...
git-svn-id: file:///svn/unbound/trunk@4747 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-21 07:11:12 +00:00
Wouter Wijngaards
8c044a616b
- Fix windows unbound-control no cert bad file descriptor error.
...
git-svn-id: file:///svn/unbound/trunk@4746 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-19 13:13:35 +00:00
Wouter Wijngaards
9ccf611954
add trailing newline.
...
git-svn-id: file:///svn/unbound/trunk@4745 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-19 09:59:48 +00:00
Wouter Wijngaards
5dfcf122d1
- Windows example service.conf edited with more windows specific
...
configuration.
git-svn-id: file:///svn/unbound/trunk@4744 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-19 09:57:39 +00:00
Wouter Wijngaards
7b092127cb
- Fix for unbound-control on Windows and set TCP socket parameters
...
more closely.
git-svn-id: file:///svn/unbound/trunk@4743 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-19 09:40:59 +00:00
Wouter Wijngaards
b26257248d
- Fix unbound-checkconf for control-use-cert.
...
git-svn-id: file:///svn/unbound/trunk@4742 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-18 12:15:21 +00:00
Wouter Wijngaards
3c7d270958
Changelog note, fix is part of 1.7.3rc2.
...
git-svn-id: file:///svn/unbound/trunk@4741 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-18 09:46:40 +00:00
Wouter Wijngaards
c15eae814f
- Fix that control-use-cert: no works for 127.0.0.1 to disable certs.
...
git-svn-id: file:///svn/unbound/trunk@4738 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-18 09:04:35 +00:00
Wouter Wijngaards
0e72e06886
- Print warning when control-use-cert is used with an IP-address
...
in unbound-control, and that TLS is enabled.
git-svn-id: file:///svn/unbound/trunk@4737 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-18 08:40:30 +00:00
Wouter Wijngaards
abff4d1237
- unbound-control auth_zone_transfer _zone_ option starts the probe
...
sequence for a master to transfer the zone from and transfers when
a new zone version is available.
git-svn-id: file:///svn/unbound/trunk@4736 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-15 15:01:31 +00:00
Wouter Wijngaards
386f23334b
- unbound-control auth_zone_reload _zone_ option rereads the zonefile.
...
git-svn-id: file:///svn/unbound/trunk@4735 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-15 13:42:41 +00:00
Wouter Wijngaards
a523683d4c
- trunk has 1.7.4.
...
git-svn-id: file:///svn/unbound/trunk@4734 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-15 11:55:23 +00:00
W.C.A. Wijngaards