townforge/unbound
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
4,530 Commits 1 Branch 0 Tags 79 MiB
cc
Commit Graph

25 Commits

Author SHA1 Message Date
wouter
19c3997e15 Fixup tests for checklocks. Add auth axfr test for socket code. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4511 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-02-05 15:33:32 +00:00
wouter
a022c9bd0e - Fix #2141 - for libsodium detect lack of entropy in chroot, print 
a message and exit.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4398 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-11-03 15:08:14 +00:00
wouter
1a627478c3 Turn duplicates into warnings for dnscrypt, and 
fix declaration and code mix warning.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4374 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-10-17 07:36:51 +00:00
wouter
cbb64b3ab6 - [dnscrypt] prevent dnscrypt-secret-key, dnscrypt-provider-cert 
duplicates
- [dnscrypt] introduce dnscrypt-provider-cert-rotated option,
  from Manu Bretelle.
	This option allows handling multiple cert/key pairs while only
	distributing some of them.
	In order to reliably match a client magic with a given key without
	strong assumption as to how those were generated, we need both key and
	cert. Likewise, in order to know which ES version should be used.
	On the other hand, when rotating a cert, it can be desirable to only
	serve the new cert but still be able to handle clients that are still
	using the old certs's public key.
	The `dnscrypt-provider-cert-rotated` allow to instruct unbound to not
	publish the cert as part of the DNS's provider_name's TXT answer.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4373 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-10-17 07:34:49 +00:00
wouter
87a108b346 - Fix #1440: [dnscrypt] client nonce cache. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4351 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-09-18 08:55:08 +00:00
wouter
39ba948040 - Spelling fixes, from Phil Porada. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4344 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-09-15 14:29:28 +00:00
wouter
dfb7048b28 dnscrypt cache size configuration option. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4328 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-08-31 11:58:29 +00:00
wouter
ce208bb8fe - Fix #1417: [dnscrypt] shared secret cache counters, and works when 
dnscrypt is not enabled.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4326 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-08-31 08:06:17 +00:00
wouter
1f650790ae - new keys and certs for dnscrypt tests. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4318 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-08-29 08:48:19 +00:00
wouter
398021b8fd - Small fixes for the shared secret cache patch. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4313 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-08-28 11:05:51 +00:00
wouter
8e49ed87c3 - Fix #1415: [dnscrypt] shared secret cache, patch from 
Manu Bretelle.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4312 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-08-28 10:55:41 +00:00
wouter
8b3bfc6ca7 - Fix #1415: patch to free dnscrypt environment on reload. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4310 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-08-28 07:49:42 +00:00
wouter
787f93a0f7 - Fix dnscrypt chacha cert support ifdefs. 
- Fix dnscrypt chacha cert unit test escapes in grep.
- Remove asynclook tests that cause test and purifier problems.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4233 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-06-16 08:20:44 +00:00
wouter
fcf637ada3 - Detect chacha for dnscrypt at configure time. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4215 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-06-08 08:17:38 +00:00
wouter
6f850db329 - Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4208 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-06-06 12:52:26 +00:00
ralph
006f36fa5b - Fix #1274: automatically trim chroot path from dnscrypt key/cert paths (from 
Manu Bretelle).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4204 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-06-01 09:51:05 +00:00
wouter
3ad4ef86b2 - Fix #1217: Add metrics to unbound-control interface showing 
crypted, cert request, plaintext and malformed queries (from
  Manu Bretelle).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4084 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-04-03 09:03:32 +00:00
wouter
509e1b4115 include for gettimeofday 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4083 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-03-27 06:50:29 +00:00
wouter
7d2b8dcf4c - Remove (now unused) event2 include from dnscrypt code. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4082 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-03-27 06:27:22 +00:00
wouter
072eb0621c - Fix doxygen for dnscrypt files. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4073 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-03-21 08:50:17 +00:00
wouter
221cc9ce92 nicer gettimeofday error handling. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4071 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-03-20 15:35:00 +00:00
wouter
1609d1cea5 Fixup compile without libsodium. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4070 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-03-20 15:30:53 +00:00
wouter
6f6b204768 more fixups. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4067 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-03-20 15:16:19 +00:00
wouter
25d0a7279d - make depend, autoconf, remove warnings about statement before var. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4066 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-03-20 15:09:06 +00:00
wouter
a48c8c5ba0 - #1217. DNSCrypt support, with --enable-dnscrypt, libsodium and then 
enabled in the config file from Manu Bretelle.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4065 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-03-20 14:55:31 +00:00