Commit Graph

3064 Commits

Author SHA1 Message Date
wouter
ad524d32ce - ub_ctx_set_stub() function for libunbound to config stub zones.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3632 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-02-23 10:43:10 +00:00
wouter
135242a7b0 - iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3631 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-02-19 14:38:48 +00:00
wouter
811692e34b - load gost algorithm if digest is seen before key algorithm.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3630 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-02-19 12:17:03 +00:00
wouter
65be72159e - load gost algorithm into unbound-host.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3628 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-02-19 12:11:36 +00:00
wouter
71e764c00d - Print understandable debug log when unusable DS record is seen.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3627 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-02-19 10:48:23 +00:00
wouter
271b8da762 - Fix that "make install" fails due to "text file busy" error.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3626 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-02-17 15:51:57 +00:00
wouter
5ad82c4e0b - Set IPPROTO_IP6 for ipv6 sockets otherwise invalid argument error.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3625 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-02-17 08:02:32 +00:00
wouter
033c8fe770 - wait for sendto to drain socket buffers when they are full.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3624 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-02-15 09:54:52 +00:00
wouter
985d70f311 - ip-transparent option for FreeBSD with IP_BINDANY socket option.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3623 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-02-15 08:17:54 +00:00
wouter
1459ca9220 - insecure-lan-zones: yesno config option, patch from Dag-Erling
Smørgrav.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3619 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-02-09 13:25:59 +00:00
wouter
431da7609c - Test for type OPENPGPKEY.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3618 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-02-09 08:45:09 +00:00
wouter
596bdef685 - RR Type OPENPGPKEY support (draft-ietf-dane-openpgpkey-07).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3617 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-02-08 16:13:03 +00:00
wouter
662ac80377 - RR Type CSYNC support RFC 7477, in debug printout and config input.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3615 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-02-08 15:37:17 +00:00
wouter
8bc70ac10b - Fix patch typo in prevuous commit for 734 from Adi Prasaja.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3614 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-02-08 08:17:00 +00:00
wouter
f3ab2837c5 - Neater cmdline_verbose increment patch from Edgar Pettijohn.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3613 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-01-29 08:06:51 +00:00
wouter
ac992dd71a - Fix #741: log message for dnstap socket connection is more clear.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3612 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-01-27 17:12:26 +00:00
wouter
bbb8e0a1ce - Made netbsd sendmsg test nonfatal, in case of false positives.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3610 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-01-27 07:44:47 +00:00
wouter
91faa15b6c - fix netbsd interface_automatic complain about unimplemented.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3609 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-01-26 16:14:28 +00:00
wouter
89de1bdd21 - Fix cmsg alignment for argument to sendmsg on NetBSD.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3608 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-01-26 14:11:39 +00:00
wouter
cea70916c3 - Use arc4random instead of random in tests (because it is
available, possibly as compat, anyway).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3607 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-01-26 09:15:22 +00:00
wouter
88fbc332f2 - Fix #734: chown the pidfile if it resides inside the chroot.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3604 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-01-26 08:05:04 +00:00
wouter
8012eab87c - Fix #738: Swig should not be invoked with CPPFLAGS.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3603 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-01-25 08:07:50 +00:00
wouter
e00935abbe - Squelch 'cannot assign requested address' log messages unless
verbosity is high, it was spammed after network down.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3602 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-01-19 15:37:54 +00:00
wouter
5bb6c20a70 - iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3601 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-01-14 08:33:54 +00:00
wouter
eb39bf4782 - Fix to simplify empty string checking from Michael McConville.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3600 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-01-14 08:28:46 +00:00
wouter
d3aae30ae8 - Fix #734: Do not log an error when the PID file cannot be chown'ed.
Patch from Simon Deziel.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3599 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-01-12 08:04:42 +00:00
wouter
c231f7696b - Fix test if -pthreads unused to use better grep for portability.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3598 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-01-11 13:44:02 +00:00
wouter
f76f8d0bad - Update aclocal, autoconf output with new versions (1.15, 2.4.6).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3596 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-01-07 10:34:46 +00:00
wouter
b994ac0b73 - Fix mingw crosscompile for recent mingw.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3594 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-01-07 10:16:22 +00:00
wouter
276cb19fc7 - Support RFC7686: handle ".onion" Special-Use Domain. It is blocked
by default, and can be unblocked with "nodefault" localzone config.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3593 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-01-05 14:02:45 +00:00
wouter
e0bfcab5cc - #731: tcp-mss, outgoing-tcp-mss options for unbound.conf, patch
from Daisuke Higashi.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3591 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-01-05 10:03:59 +00:00
wouter
2d7be779da - Fixup contrib/aaaa-filter-iterator.patch for moved contents in the
source code, so it applies cleanly again.  Removed unused variable
  warnings.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3589 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-01-04 10:47:29 +00:00
wouter
ec29bd9578 - Define DEFAULT_SOURCE together with BSD_SOURCE when that is defined,
for Linux glibc 2.20.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3588 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-01-04 09:52:48 +00:00
ralph
8abfb7f8fc Fix #729: omit use of escape sequences in echo since they are not portable (unbound-control-setup)
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3587 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-12-15 11:00:59 +00:00
wouter
6d8913fae3 - OSX clang new flto check.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3586 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-12-11 13:35:09 +00:00
wouter
923d9c7627 - OSX clang, stop -pthread unused during link stage warnings.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3583 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-12-11 13:15:40 +00:00
wouter
ad02262a06 - OSX portability, detect if sbrk is deprecated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3582 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-12-11 12:44:44 +00:00
wouter
b3cc4d978c - updated ax_pthread.m4 to version 21 with clang support, this
removes a warning from compilation.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3581 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-12-11 12:19:12 +00:00
wouter
f8e0e6c54c - remove NULL-checks before free, patch from Michael McConville.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3580 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-12-11 10:26:15 +00:00
wouter
c6559fcf91 - trunk has 1.5.8 in development.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3579 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-12-10 08:38:20 +00:00
wouter
443a795676 Fixup name.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3577 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-12-08 08:25:42 +00:00
wouter
11d11feed4 - Fixup 724 for unbound-control.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3576 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-12-08 08:15:55 +00:00
ralph
bc65e486f3 Don't minimise forwarded requests.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3575 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-12-07 15:56:47 +00:00
wouter
d41ae726e2 - Removed unneeded whitespace from example.conf.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3574 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-12-04 08:01:37 +00:00
wouter
2f658f9d90 Note changelog after rc1.
3 December 2015: Ralph
  - (after rc1 tag)
  - Committed fix to qname minimisation and unit test case for it.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3572 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-12-03 13:40:16 +00:00
wouter
d62a92e737 1.5.7rc1 tag
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3569 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-12-03 13:35:17 +00:00
wouter
c4e4d751ae iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3567 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-12-03 08:10:33 +00:00
wouter
ccc68bf4ea - For 724: Add Changelog to windows binary dist.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3566 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-12-02 17:55:03 +00:00
wouter
9541f636e4 - Fixup 724: Fix PCA prompt for unbound-service-install.exe.
re-enable stdout printout.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3565 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-12-02 09:40:05 +00:00
wouter
772f2040e0 undo pointless change.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3564 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-12-01 15:18:51 +00:00
wouter
e42114a1eb pointless change for test.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3563 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-12-01 14:55:27 +00:00
wouter
a6e8826899 - .gitignore for git users.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3562 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-12-01 14:36:21 +00:00
ralph
d19a47950a Qname minimisation review fixes
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3561 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-12-01 13:14:00 +00:00
wouter
cbcdb5be09 - Remove stdout printout for unbound-service-install.exe
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3560 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-12-01 13:00:57 +00:00
wouter
b930a3d234 - Fixup 724 fix for fname_after_chroot() calls.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3557 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-12-01 08:54:53 +00:00
ralph
481e89ca4c Implemented qname minimisation
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3554 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-11-30 16:10:26 +00:00
wouter
4b0a905a32 - Fix for #724: conf syntax to read files from run dir (on Windows).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3551 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-11-30 15:05:26 +00:00
wouter
22c51617c0 - Fix for #720, fix unbound-control-setup windows batch file.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3550 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-11-25 07:22:05 +00:00
wouter
d34d1951d6 - iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3549 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-11-24 11:01:26 +00:00
wouter
f6252ed1e9 - Fix #720: add windows scripts to zip bundle.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3548 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-11-24 10:55:18 +00:00
wouter
1d60e4519e - Fix that malformed EDNS query gets a response without malformed EDNS.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3546 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-11-20 09:09:55 +00:00
wouter
2435cecb6f - Added assert on rrset cache correctness.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3545 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-11-20 08:08:11 +00:00
wouter
33c3822724 - spelling fixes from Igor Sobrado Delgado.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3544 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-11-18 14:11:46 +00:00
wouter
aa25b5de3a - newer acx_nlnetlabs.m4.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3543 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-11-18 07:45:41 +00:00
wouter
9fa96d25a0 - Fixup DER encoded DSA signatures for libnettle.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3540 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-11-17 13:31:22 +00:00
wouter
43fa7f193d - iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3538 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-11-17 11:41:05 +00:00
wouter
0a8bb72c5d - refactor nsec3 hash implementation to be more library-portable.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3535 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-11-17 11:30:04 +00:00
wouter
984f91d1b4 - Fix #594. libunbound: optionally use libnettle for crypto.
Contributed by Luca Bruno.  Added --with-nettle for use with
  --with-libunbound-only.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3533 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-11-17 09:43:07 +00:00
wouter
34b59b59f4 - Fix for lenient accept of reverse order DNAME and CNAME.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3530 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-11-16 09:48:51 +00:00
wouter
93a7ac5af3 - Change example.conf: ftp.internic.net to https://www.internic.net
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3529 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-11-06 09:00:01 +00:00
wouter
ebfac40823 - ACX_SSL_CHECKS no longer adds -ldl needlessly.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3528 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-11-04 23:16:36 +00:00
wouter
858b388d38 - Fix #718: Fix unbound-control-setup with support for env
without HEREDOC bash support.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3527 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-11-03 08:13:05 +00:00
wouter
34ac46080c - Fix #716: nodata proof with empty non-terminals and wildcards.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3526 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-10-29 13:08:15 +00:00
wouter
b7b759b22d - patch from Doug Hogan for SSL_OP_NO_SSLvx options.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3525 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-10-29 08:32:58 +00:00
wouter
9b650c901d - Fix checklock testcode for linux threads on exit.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3522 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-10-28 10:28:26 +00:00
wouter
30d1ef6307 - portability, replace snprintf if return value broken.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3518 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-10-27 13:47:50 +00:00
wouter
8f7160cebb changelog entry.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3517 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-10-27 12:06:03 +00:00
wouter
ec2efc9fbf - detect libexpat without xml_StopParser function.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3515 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-10-27 10:22:05 +00:00
wouter
0eccf8950d - isblank() compat implementation.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3514 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-10-27 09:52:16 +00:00
wouter
a3978d1c30 - Fix #714: Document config to block private-address for IPv4
mapped IPv6 addresses.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3513 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-10-23 07:13:45 +00:00
wouter
00b44c3aa0 - Fix #712: unbound-anchor appears to not fsync root.key.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3512 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-10-22 07:06:31 +00:00
wouter
3de5fea61f - trunk tracks development of 1.5.7.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3511 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-10-20 14:01:54 +00:00
wouter
792710cf18 1.5.6rc1 release tag has been created
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3509 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-10-15 11:44:24 +00:00
wouter
f20f10dec4 - Fix ldns_wire2str_rdata_scan for malformed RRs.
his line, and those below, will be ignored--

M    trunk/doc/Changelog
M    trunk/sldns/wire2str.c


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3507 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-10-15 09:51:30 +00:00
wouter
e31f10dda7 - Fix segfault in the dns64 module in the formaterror error path.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3506 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-10-15 09:02:01 +00:00
wouter
c666280ed1 - Fix manpage to suggest using SIGTERM to terminate the server.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3505 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-10-14 12:22:49 +00:00
wouter
1030490f5a - ANY responses include DNAME records if present, as per Evan Hunt's
remark in dnsop.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3504 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-10-14 08:02:14 +00:00
wouter
d60f9800b2 - iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3503 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-10-09 08:08:31 +00:00
wouter
73ace4957c - Default for ssl-port is port 853, the temporary port assignment
for secure domain name system traffic.
  If you used to rely on the older default of port 443, you have
  to put a clause in unbound.conf for that.  The new value is likely
  going to be the standardised port number for this traffic.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3502 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-10-09 07:55:21 +00:00
wouter
ad1097190e - trunk tracks the development of 1.5.6.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3500 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-10-06 09:57:08 +00:00
wouter
21001b4ca8 - makedist.sh: pgp sig echo commands.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3497 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-09-28 14:46:38 +00:00
wouter
adb3b2e503 prepare 1.5.5rc1 release.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3495 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-09-28 13:50:36 +00:00
wouter
18d55bcb86 - MAX_TARGET_COUNT increased to 64, to fix up sporadic resolution
failures.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3494 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-09-28 07:21:48 +00:00
wouter
182c2d6cfb - Fix unbound-control flush that does not succeed in removing data.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3493 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-09-25 12:39:10 +00:00
wouter
2f41c1d568 - Fix unbound.conf(5) access-control description for precedence
and default.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3492 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-09-22 13:04:53 +00:00
wouter
119aae5e4c - Fix minor error in unbound.conf.5.in
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3491 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-09-22 12:59:32 +00:00
wouter
d02e766e00 - testbound selftest also works in non-debug mode.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3490 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-09-22 09:52:17 +00:00
wouter
949509816f - Fix #705: ub_ctx_set_fwd() return value mishandled on windows.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3489 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-09-22 08:59:10 +00:00
wouter
553bf1df1e - Remove confusion comment from canonical_compare() function.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3488 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-09-22 08:43:56 +00:00
wouter
52a96d6510 - Fix #702: New IPs for for h.root-servers.net.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3487 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-09-22 08:35:03 +00:00
wouter
07b5c17bd3 - iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3486 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-09-22 08:04:45 +00:00
wouter
73d2ca61bf - Fix config globbed include chroot treatment, this fixes reload of
globs (patch from Dag-Erling Smørgrav).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3485 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-09-22 08:04:19 +00:00
wouter
f9de753734 - changed windows setup compression to be more transparent.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3484 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-08-31 07:44:36 +00:00
wouter
9f1c38eeb4 - Feature #699: --enable-pie option to that builds PIE binary.
- Feature #700: --enable-relro-now option that enables full read-only
  relocation.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3483 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-08-28 14:27:03 +00:00
wouter
39fee4ebb1 - Fix #697: Get PY_MAJOR_VERSION failure at configure for python
2.4 to 2.6.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3480 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-08-28 06:56:27 +00:00
wouter
8230d6dc08 - Change default of harden-algo-downgrade to off. This is lenient
for algorithm rollover.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3478 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-08-24 15:05:10 +00:00
wouter
095bbe40db - iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3477 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-08-24 12:52:40 +00:00
wouter
1116189f7a - Fix deadlock for local data add and zone add when unbound-control
list_local_data printout is interrupted.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3476 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-08-24 10:49:28 +00:00
wouter
dcb7d29d76 - Reap the child process that libunbound spawns.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3473 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-08-13 14:17:44 +00:00
wouter
7fc17c9a1f - 5011 implementation does not insist on all algorithms, when
harden-algo-downgrade is turned off.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3471 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-08-13 12:03:53 +00:00
wouter
a3a0e0e274 - Fix #694: configure script does not detect LibreSSL 2.2.2
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3470 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-08-11 07:32:35 +00:00
wouter
23cd117f74 - Document that local-zone nodefault matches exactly and transparent
can be used to release a subzone.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3468 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-08-04 07:10:26 +00:00
wouter
f242323707 - Fix mktime in unbound-anchor not using UTC.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3467 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-08-03 15:00:56 +00:00
wouter
7396d00ba0 - Fix 5011 anchor update timer after reload.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3466 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-08-03 11:56:37 +00:00
wouter
f6965de1e8 - Document in the manual more text about configuring locally served
zones.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3465 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-08-03 10:34:29 +00:00
wouter
c58e83c3e1 - Added permit-small-holddown config to debug fast 5011 rollover.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3462 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-07-30 11:52:12 +00:00
wouter
59859f00f0 - please afl-gcc (llvm) for uninitialised variable warning.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3461 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-07-30 08:51:51 +00:00
wouter
7faeaaf3ed - iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3459 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-07-24 11:54:08 +00:00
wouter
fbd9cf712d - Fix #690: Reload fails when so-reuseport is yes after changing
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3456 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-07-24 07:02:14 +00:00
wouter
8ab8309710 - iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3455 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-07-21 14:52:53 +00:00
wouter
7f99e7c795 - Fix configure to detect SSL_CTX_set_ecdh_auto.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3453 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-07-21 14:30:49 +00:00
wouter
e00efba037 - Enable ECDHE for servers. Where available, use
SSL_CTX_set_ecdh_auto() for TLS-wrapped server configurations to
  enable ECDHE.  Otherwise, manually offer curve p256.
  Client connections should automatically use ECDHE when available.
  (thanks Daniel Kahn Gillmor)


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3452 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-07-20 06:56:01 +00:00
willem
221499af71 SSL_CTX_use_certificate_chain_file() should be used instead of the
SSL_CTX_use_certificate_file() function in order to allow the use of
complete certificate chains even when no trusted CA storage is used or
when the CA issuing the certificate shall not be added to the trusted
CA storage.

Thanks Daniel Kahn Gillmore


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3451 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-07-18 12:34:37 +00:00
wouter
85d4c6ee70 - makedist produces sha1 and sha256 files for created binaries too.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3448 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-07-13 07:53:53 +00:00
wouter
4ae9e5a7cd - Fix #681: Setting forwarders with unbound-control forward
implicitly turns on forward-first.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3447 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-07-09 09:45:08 +00:00
wouter
64a7f637f5 trunk has 1.5.5 in development.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3446 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-07-09 09:40:12 +00:00
wouter
27ff1a703c - Fix alloc with log for allocation size checks.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3442 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-06-29 10:19:42 +00:00
wouter
5bb325336a - iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3440 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-06-29 07:09:04 +00:00
wouter
50b357376a - iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3436 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-06-26 07:33:03 +00:00
wouter
8c62cad20d - Fix #677 Fix DNAME responses from cache that failed internal chain
test.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3435 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-06-26 07:27:32 +00:00
wouter
9ee8380800 - Fix #677 Fix CNAME corresponding to a DNAME was checked incorrectly
and was therefore always synthesized (thanks to Valentin Dietrich).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3434 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-06-22 09:23:43 +00:00
wouter
0e8b1e0111 - RFC 7553 RR type URI support, is now enabled by default.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3433 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-06-04 12:30:29 +00:00
wouter
0ad11968be - Fix #674: Do not free pointers given by getenv.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3432 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-06-02 07:31:43 +00:00
wouter
916b3a305d - SOA negative TTL is capped at minimumttl in its rdata section.
- cache-max-negative-ttl config option, default 3600.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3431 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-05-29 14:51:36 +00:00
wouter
1c536612d7 - Fix that unparseable error responses are ratelimited.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3429 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-05-29 09:27:42 +00:00
wouter
5a5fb60def - Document that ratelimit works with unbound-control set_option.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3428 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-05-26 09:18:21 +00:00
wouter
6e918c13bf - documentation proposes ratelimit of 1000 (closer to what upstream
servers expect from us).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3427 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-05-21 12:06:41 +00:00
wouter
9c69d25180 - iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3426 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-05-21 07:29:42 +00:00
wouter
c17574c81a - DLV is going to be decommissioned. Advice to stop using it, and
put text in the example configuration and man page to that effect.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3424 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-05-20 06:24:06 +00:00
wouter
97ffe64ba3 - Change syntax of particular validator error to be easier for
machine parse, swap rrset and ip adres info so it looks like:
  validation failure <www.example.nl. TXT IN>: signature crypto
  failed from 2001:DB8:7:bba4::53 for <*.example.nl. NSEC IN>


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3422 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-05-10 12:04:22 +00:00
wouter
a2f75d6c35 - caps-whitelist in unbound.conf allows whitelist of loadbalancers
that cannot work with caps-for-id or its fallback.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3420 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-05-01 12:36:16 +00:00
wouter
c2ba182678 - Unit test for type ANY synthesis.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3419 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-04-30 10:27:27 +00:00
wouter
c309b27814 - iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3408 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-04-22 08:19:12 +00:00
wouter
258d561704 - Removed contrib/unbound_unixsock.diff, because it has been
integrated, use control-interface: /path in unbound.conf.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3407 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-04-22 08:03:34 +00:00
wouter
9763997a7c - Synthesize ANY responses from cache. Does not search exhaustively,
but MX,A,AAAA,SOA,NS also CNAME.
- Fix leaked dns64prefix configuration string.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3405 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-04-17 14:58:07 +00:00
wouter
a8a47f27dd #664: Fix issue with Python 3 mapping of FILE* using file_py3.i from ldns.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3403 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-04-16 14:41:14 +00:00
wouter
18a2a40a6b #664: libunbound-Python: libldns is not used anymore.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3402 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-04-16 14:38:38 +00:00
wouter
093ff749cc #664: libunbound examples: produce sorted output.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3401 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-04-16 14:37:12 +00:00
wouter
32aa5c4d0b - Fix bug#664: libunbound python3 related fixes (from Tomas Hozza)
Use print_function also for Python2.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3400 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-04-16 14:35:55 +00:00
wouter
f77c2a06f1 - Ratelimit does not apply to prefetched queries, and ratelimit-factor
is default 10.  Repeated normal queries get resolved and with
  prefetch stay in the cache.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3399 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-04-16 14:18:50 +00:00
wouter
31a8018d22 - Add local-zone type inform_deny, that logs query and drops answer.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3398 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-04-16 08:23:06 +00:00
wouter
7f56755943 - Fix#663: ssl handshake fails when using unix socket because dh size
is too small.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3396 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-04-10 13:56:12 +00:00
wouter
15ef4ccca1 - Fix that get_option for cache-sizes does not print double newline.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3395 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-04-10 13:43:44 +00:00
wouter
79c9a936cb - unbound-control ratelimit_list lists high rate domains.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3393 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-04-10 12:13:59 +00:00
wouter
7062b00d0b - ratelimit feature, ratelimit: 100, or some sensible qps, can be
used to turn it on.  It ratelimits recursion effort per zone.
  For particular names you can configure exceptions in unbound.conf.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3391 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-04-10 09:59:57 +00:00
wouter
5b8cd39902 - Fix crash in dnstap: Do not try to log TCP responses after timeout.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3390 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-04-08 19:58:06 +00:00
wouter
0557760286 - unbound-control list_insecure command shows the negative trust
anchors currently configured, patch from Jelte Jansen.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3389 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-04-07 13:50:09 +00:00
wouter
f420142028 typo fix.
(svn:NO TEST)


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3388 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-04-07 12:10:37 +00:00
wouter
ba41e16d3c - Unbound exits with a fatal error when the auto-trust-anchor-file
fails to be writable.  This is seconds after startup.  You can
  load a readonly auto-trust-anchor-file with trust-anchor-file.
  The file has to be writable to notice the trust anchor change,
  without it, a trust anchor change will be unnoticed and the system
  will then become unoperable.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3387 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-04-07 12:03:05 +00:00
wouter
73c16202a0 - Libunbound skips dos-line-endings from etc/hosts.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3384 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-04-07 07:51:43 +00:00
wouter
edc6c2102e - Fix #660: Fix interface-automatic broken in the presence of
asymmetric routing.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3383 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-04-02 10:02:01 +00:00
wouter
410ac6cd67 - rename ldns subdirectory to sldns to avoid name collision.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3380 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-26 10:21:38 +00:00
wouter
2672fe9ea9 - remote.c probedelay line is easier to read.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3379 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-26 09:46:06 +00:00
wouter
6d0f96673d - If unknown trust anchor algorithm, and libressl is used, error
message encourages upgrade of the libressl package.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3378 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-25 16:04:05 +00:00
wouter
ca0b049109 - Fix #657: libunbound(3) recommends deprecated
CRYPTO_set_id_callback.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3377 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-25 08:06:35 +00:00
wouter
d8e38074d4 - Fix segfault on user not found at startup (from Maciej Soltysiak).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3375 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-23 20:20:15 +00:00
wouter
d1bf57dfd1 - Fixes to add integer overflow checks on allocation (defense in depth).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3372 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-20 15:36:25 +00:00
wouter
6478a1cbfd - Add ip-transparent config option for bind to non-local addresses.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3369 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-19 09:50:35 +00:00
wouter
9f56dc9102 - Use reallocarray for integer overflow protection, patch submitted
by Loganaden Velvindron.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3365 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-17 08:24:24 +00:00
wouter
653053c1f9 - Fixup compile on cygwin, more portable openssl thread id.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3362 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-16 10:51:32 +00:00
wouter
2fae92734c - Updated default keylength in unbound-control-setup to 3k.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3361 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-12 15:34:03 +00:00
wouter
9f96c2b6be - Fix warning on sign compare in getentropy_linux.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3360 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-10 10:29:55 +00:00
wouter
2e18cfb209 - iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3359 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-10 10:17:45 +00:00
wouter
8df8b4f32e print svnroot for windows makedist. 1.5.4 in configure.ac
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3358 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-10 10:03:45 +00:00
wouter
8fbbf04b40 - Fix lintian warning in unbound-checkconf man page (from Andreas
Schulze).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3356 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-10 08:00:40 +00:00
wouter
d6893f2e8c - iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3355 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-09 13:39:27 +00:00
wouter
5a4a7863b6 - Fix #644: harden-algo-downgrade option, if turned off, fixes the
reported excessive validation failure when multiple algorithms
  are present.  It allows the weakest algorithm to validate the zone.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3354 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-09 13:30:37 +00:00
wouter
4d50899043 - stats reports tcp usage, of incoming-num-tcp buffers.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3353 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-05 15:23:14 +00:00
wouter
78eba96a8b - Document that incoming-num-tcp increase is good for large servers.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3352 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-05 11:41:29 +00:00
wouter
d8b346e409 - contrib/unbound_smf22.tar.gz: Solaris SMF installation/removal
scripts.  Contributed by Yuri Voinov.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3351 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-05 08:18:59 +00:00
wouter
1024b260d8 - Document windows 8 tests.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3350 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-04 13:24:27 +00:00
wouter
798e778410 - store caps_response with best response in case downgrade response
happens to be the last one.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3348 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-04 09:31:26 +00:00
wouter
a0c81b8339 - many nameservers does not try to compare more than max-sent-count,
parse failures start 0x20 fallback procedure.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3347 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-04 09:06:05 +00:00
wouter
2c4190b319 - 0x20 fallback improved, better handling of servfail responses,
they do not count as missing comparisons (except if all are failed),
  and better handling of inability to find nameservers, no more
  nameservers can be found results in fallback acceptance.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3346 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-04 08:30:17 +00:00
wouter
279f75db29 - Patch from Brad Smith that syncs compat/getentropy_linux with
OpenBSD's version (2015-03-04).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3345 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-04 07:18:09 +00:00
wouter
00e9db6ccf - tag 1.5.3rc1
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3344 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-03 13:37:53 +00:00
wouter
aa16f669d5 iana portlist update
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3342 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-02 11:03:14 +00:00
wouter
3233c052fe - Fix #647 crash in 1.5.2 because pwd.db no longer accessible after
reload.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3341 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-02-20 14:48:04 +00:00
wouter
d42f4ad137 - Fix #646 Portability to Solaris, -lrt for getentropy_solaris.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3340 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-02-20 14:03:41 +00:00
wouter
a4674309ba - Portability to Solaris 10, use AF_LOCAL.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3339 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-02-20 13:55:09 +00:00
wouter
98d9836bb9 - Use the getrandom syscall introduced in Linux 3.17 (from Heiner Kallweit).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3338 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-02-20 09:19:32 +00:00
wouter
fe7698cc6a - 1.5.2 release tag.
- svn trunk contains 1.5.3 under development.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3337 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-02-19 15:16:40 +00:00
wouter
f37eaf65ad - Fix #643: doc/example.conf.in: unnecessary whitespace.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3335 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-02-13 11:02:46 +00:00
wouter
f6f1839628 - tag 1.5.2rc1
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3334 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-02-12 15:33:20 +00:00
wouter
14726c8248 - iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3331 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-02-11 07:24:57 +00:00
wouter
62bd0e84f6 - Fix scrubber with harden-glue turned off to reject NS (and other
not-address) records.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3330 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-02-10 14:01:45 +00:00
wouter
16b3909f91 - Fix validation failure in case upstream forwarder (ISC BIND) does
not have the same trust anchors and decides to insert unsigned NS
  record in authority section.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3329 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-02-09 11:44:46 +00:00
wouter
6856b6a202 - infra-cache-min-rtt patch from Florian Riehm, for expected long
uplink roundtrip times.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3328 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-02-02 08:46:22 +00:00
wouter
10e38ef90d - Portability fix for Solaris ('sun' is not usable for a variable).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3326 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-30 15:32:59 +00:00
wouter
674e12318a - Fix 0x20 capsforid fallback to omit gratuitous NS and additional
section changes.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3323 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-30 09:35:38 +00:00
wouter
ff2cccec3d - Fix pyunbound byte string representation for python3.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3322 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-29 16:10:51 +00:00
wouter
f8c9f95aa9 - Fix unintended use of gcc extension for incomplete enum types,
compile with pedantic c99 compliance (from Daniel Dickman).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3321 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-26 08:46:40 +00:00
wouter
5154b3406d - windows port fixes, no AF_LOCAL, no chown, no chmod(grp).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3319 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-23 15:23:58 +00:00
wouter
14416f4ca0 - unbound-checkconf -f prints chroot with pidfile path.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3316 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-16 14:31:02 +00:00
wouter
de842e85fe - unit test for local unix connection. Documentation and log_addr
does not inspect port for AF_LOCAL.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3315 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-16 13:11:07 +00:00
wouter
b5373c8c4b iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3314 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-13 13:46:48 +00:00
wouter
84bdd4e765 - Fix pyunbound ord call, portable for python 2 and 3.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3313 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-12 15:20:20 +00:00
wouter
a5bed77fec - Cast sun_len sizeof to socklen_t.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3312 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-12 08:20:43 +00:00
wouter
cca6635a06 - Fix warnings in pythonmod changes.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3311 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-07 09:29:59 +00:00
wouter
d0b507bcdf fix attribution.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3310 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-07 07:49:46 +00:00
wouter
dd182a058c - coded the default of control-use-cert, to yes.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3309 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-06 14:54:38 +00:00
wouter
b4fd8fe3d7 - Fixup that patch and uid lookup (only for daemon).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3306 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-06 14:37:45 +00:00
wouter
9537cdfccf - patch for remote control over local sockets, from Dag-Erling
Smorgrav, Ilya Bakulin.  Use control-interface: /path/sock and
  control-use-cert: no.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3304 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-06 14:12:59 +00:00
wouter
c2b7d31586 iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3303 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-06 08:02:41 +00:00
wouter
9d84c30040 - Patch from Philip Paeps to contrib/unbound_munin_ that uses
type ABSOLUTE.  Allows munin.conf: [idleserver.example.net]
  unbound_munin_hits.graph_period minute


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3301 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-05 14:47:52 +00:00
wouter
ace7f8322b - Updated contrib warmup.cmd/sh to support two modes - load
from pre-defined list of domains or (with filename as argument)
  load from user-specified list of domains, and updated contrib
  unbound_cache.sh/cmd to support loading/save/reload cache to/from
  default path or (with secondary argument) arbitrary path/filename,
  from Yuri Voinov.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3300 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-05 13:58:51 +00:00
wouter
632dac1f66 attribution.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3299 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-05 13:53:52 +00:00
wouter
a1a735dcde - Fix #634: fix fail to start on Linux LTS 3.14.X, ignores missing
IP_MTU_DISCOVER OMIT option.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3298 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-05 13:51:22 +00:00
wouter
74d2262084 - patch from Brad Smith that fixes DESTDIR in unbound-control-setup
for installs where config is not in the prefix location.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3297 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-05 13:20:04 +00:00
wouter
ad9a0833fe - print query name when max target count is exceeded.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3296 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-05 13:12:42 +00:00
wouter
5d02af5460 - patch from Stephane Lapie that adds to the python API, that
exposes struct delegpt, and adds the find_delegation function.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3295 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-05 10:16:36 +00:00
wouter
502bdd5a3e - make strip works for unbound-host and unbound-anchor.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3294 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-05 09:33:31 +00:00
wouter
a3582f1bf5 - getauxval test for ppc64 linux compatibility.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3293 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-05 09:13:32 +00:00
wouter
b1061c10c8 - local-zone: example.com inform makes unbound log a message with
client IP for queries in that zone.  Eg. for finding infected hosts.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3292 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-12-09 11:29:17 +00:00
wouter
e3a81d824f - svn trunk has 1.5.2 in development.
- config.guess and config.sub update from libtoolize.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3291 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-12-09 08:24:27 +00:00
wouter
c89cf11661 - Fix CVE-2014-8602: denial of service by making resolver chase
endless series of delegations.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3289 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-12-08 15:09:18 +00:00
wouter
0137e92031 - Fix bug#632: unbound fails to build on AArch64, protects
getentropy compat code from calling sysctl if it is has been removed.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3287 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-12-02 00:19:42 +00:00
wouter
10095fe0dd - Add include to getentropy_linux.c, hopefully fixing debian build.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3286 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-30 02:00:29 +00:00
wouter
52f9c2bd44 - Fix makefile for build from noexec source tree.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3285 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-28 20:28:38 +00:00
wouter
f41c40ff4b Fix attribution and mention company (no restriction on use).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3282 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-27 10:54:05 +00:00
wouter
4b9ef41aee - Fix libunbound undefined symbol errors for main.
Referencing main does not seem to be possible for libunbound.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3280 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-26 16:18:53 +00:00
wouter
d8e8de4760 - iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3279 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-24 08:46:24 +00:00
wouter
1af7cc2ff3 - Fix log at high verbosity and memory allocation failure.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3278 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-24 08:17:45 +00:00
wouter
02f99bb274 - Fix crash on multiple thread random usage on systems without
arc4random.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3277 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-21 08:22:18 +00:00
wouter
95de7e9b8f - fix compat/getentropy_win.c check if CryptGenRandom works and no
immediate exit on windows.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3276 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-20 12:44:00 +00:00
wouter
f9213eaf93 - Fix cdflag dns64 processing.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3275 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-19 08:43:08 +00:00
wouter
1100adad50 - iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3274 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-18 15:16:25 +00:00
wouter
0778829809 - Fix that CD flag disables DNS64 processing, returning the DNSSEC
signed AAAA denial.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3273 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-18 15:15:57 +00:00
wouter
d437febed1 - Fix #627: SSL_CTX_load_verify_locations return code not properly
checked.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3271 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-17 08:10:49 +00:00
wouter
12e488a497 - parser with bison 2.7
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3270 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-14 15:59:30 +00:00
wouter
e550629a45 - Patch from Stephanie Lapie that implements aaaa-filter, added
to contrib/aaaa-filter-iterator.patch.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3269 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-13 09:03:47 +00:00
wouter
dfa131be35 - trunk has 1.5.1 in development.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3268 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-12 21:17:12 +00:00
wouter
a1cf7d3817 - Patch from James Raftery, always print stats for rcodes 0..5.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3267 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-12 17:25:59 +00:00
wouter
f203aa89f4 - Removed 'increased limit open files' log message that is written
to console.  It is only written on verbosity 4 and higher.
  This keeps system bootup console cleaner.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3266 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-12 11:04:43 +00:00
wouter
5072f3026d - Patch from Robert Edmonds fixes hyphens in unbound-anchor man page.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3265 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-12 11:00:31 +00:00
wouter
dc2c95d2fd - Patch from Robert Edmonds to build pyunbound python module
differently.  No versioninfo, with -shared and without $(LIBS).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3264 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-12 10:58:33 +00:00
wouter
4f7379b3e9 - review fix from Ralph.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3262 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-11 14:27:35 +00:00
wouter
8cd66c6e1d tag 1.5.0rc1
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3260 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-11 14:18:32 +00:00
wouter
8af379fd54 - version number in svn trunk is 1.5.0
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3259 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-11 13:23:50 +00:00
wouter
21c836d58c - Fix bug where forward or stub addresses with same address but
different port number were not tried.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3258 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-11 13:10:44 +00:00
wouter
2a9d58f060 - iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3257 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-11 09:32:30 +00:00
wouter
f4aefeec79 - dnstap fixes by Robert Edmonds:
dnstap/dnstap.m4: cosmetic fixes
	dnstap/: Remove compiled protoc-c output files
	dnstap/dnstap.m4: Error out if required libraries are not found
	dnstap: Fix ProtobufCBufferSimple usage that is incorrect as of
		protobuf-c 1.0.0
	dnstap/: Adapt to API changes in latest libfstrm (>= 0.2.0)


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3254 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-07 09:09:04 +00:00
wouter
887c850601 - Redefine internal minievent symbols to unique symbols that helps
linking on platforms where the linker leaks names across modules.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3252 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-04 14:04:37 +00:00
wouter
cd08165992 - Add ub_ctx_add_ta_autr function to add a RFC5011 automatically
tracked trust anchor to libunbound.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3251 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-04 09:11:59 +00:00
wouter
9f6a5bcfc8 - iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3249 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-10-27 09:54:44 +00:00
wouter
6128ac971e - Disabled use of SSLv3 in remote-control and ssl-upstream.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3248 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-10-27 09:26:48 +00:00
wouter
4644ef143c - Documented dns64 configuration in unbound.conf man page.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3246 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-10-16 09:37:56 +00:00
wouter
e45a08b6f8 - Fix ctype invocation casts.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3241 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-10-13 08:22:34 +00:00
wouter
2145d24107 - Fix #617: in ldns in unbound, lowercase WKS services.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3240 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-10-13 07:11:16 +00:00
wouter
88f1956519 - Fix unbound capsforid fallback, it ignores TTLs in comparison.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3239 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-10-10 14:12:17 +00:00
wouter
6f6571c83f - Fix unbound-checkconf check for module config with dns64 module.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3238 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-10-10 07:07:58 +00:00
wouter
192cc2581b and name, of course
(svn:NO TEST)


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3237 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-10-06 12:49:08 +00:00
wouter
168bfe9373 changelog update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3236 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-10-06 12:35:02 +00:00
wouter
ab9873d79c - Fix #614: man page variable substitution bug.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3234 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-10-06 07:42:42 +00:00
wouter
9931c82271 - fix #613: Allow tab ws in var length last rdfs (in ldns str2wire).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3233 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-10-01 08:11:42 +00:00
wouter
0f23452b2a - Fix #612: create service with service.conf in present directory and
auto load it.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3232 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-09-29 09:27:22 +00:00
wouter
4f49e724d7 - updated configure and aclocal with newer autoconf 1.13.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3229 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-09-25 11:45:32 +00:00
wouter
ef10fe913b - Fix for mingw compile with openssl-1.0.1i.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3228 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-09-22 12:20:20 +00:00
wouter
5355258872 - Fix swig and python examples for Python 3.x.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3227 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-09-22 11:39:00 +00:00
wouter
607e515f5f - improve python configuration detection to build on Fedora 22.
from Pavel Simerda.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3226 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-09-19 09:57:20 +00:00
wouter
31bb511274 - patches to also build with Python 3.x (from Pavel Simerda).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3225 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-09-18 13:28:21 +00:00
wouter
7383fe8a62 - Updated the TCP_BACLOG from 5 to 256, so that the tcp accept queue
is longer and more tcp connections can be handled.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3224 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-09-16 13:49:21 +00:00
wouter
88e8ec11a6 - iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3223 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-09-16 13:08:38 +00:00
wouter
7352e5d7cc - Fix tcp timer waiting list removal code.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3222 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-09-16 13:08:27 +00:00
wouter
1ed44e7004 - Fix unit test for CDS typecode.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3221 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-09-15 12:49:37 +00:00
wouter
cac1443688 - type CDS and CDNSKEY types in sldns.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3220 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-09-05 09:25:31 +00:00
wouter
780855ae76 - Removed necessity for pkg-config from the dnstap.m4, new are
the --with-libfstrm and --with-protobuf-c configure options.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3216 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-08-25 13:04:32 +00:00
wouter
ff0382b5f0 - iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3215 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-08-25 12:05:52 +00:00
wouter
28dd736029 - Fixup checklock code for log lock and its mutual initialization
dependency.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3214 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-08-25 12:00:30 +00:00
wouter
c3144ef1ec - Update unbound manpage with more explanation (from Florian Obser).
- Removed .LP after .SH.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3212 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-08-19 10:32:17 +00:00
wouter
49fbea259b - Fixup doc/unbound.doxygen to remove obsolete 1.8.7 settings.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3210 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-08-18 14:50:59 +00:00
wouter
1fa8825030 - iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3208 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-08-18 07:46:48 +00:00
wouter
bc788b25d7 - Fix #603: unbound-checkconf -o <option> should skip verification
checks.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3207 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-08-18 07:21:01 +00:00
wouter
d74c01b712 - dnstap support, with a patch from Farsight Security, written by
Robert Edmonds. The --enable-dnstap needs libfstrm and protobuf-c.
  It is BSD licensed (see dnstap/dnstap.c).
  Building with --enable-dnstap needs pkg-config with this patch.
- Noted dnstap in doc/README and doc/CREDITS.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3206 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-08-05 07:57:52 +00:00
wouter
2968f08b2d - iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3204 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-08-01 13:30:39 +00:00
wouter
244de881ef - Patch add msg, rrset, infra and key cache sizes to stats command
from Maciej Soltysiak.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3203 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-08-01 13:24:46 +00:00
wouter
0cc9786752 - testdata/dns64_lookup.rpl for unit test for dns64 functionality.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3200 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-07-31 08:16:18 +00:00
wouter
a02144f04f - Changes from DNS64:
strcpy changed to memmove.
  arraybound check fixed from prefix_net/8/4 to prefix_net/8+4.
  allocation of result consistently in the correct region.
  time_t is now used for ttl in unbound (since the patch's version).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3199 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-07-31 08:00:38 +00:00
wouter
f8f0117ea9 - DNS64 from Viagenie (BSD Licensed), written by Simon Perrault.
Initial commit of the patch from the FreeBSD base (with its fixes).
  This adds a module (for module-config in unbound.conf) dns64 that
  performs DNS64 processing, see README.DNS64.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3198 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-07-31 07:15:33 +00:00
wouter
c4ef386ed9 - Patch from Dag-Erling Smorgrav that implements feature, unbound -dd
does not fork in the background and also logs to stderr.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3197 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-07-29 11:48:43 +00:00
wouter
f17ba9b11b - Fix endian.h include for OpenBSD.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3196 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-07-21 00:06:54 +00:00
wouter
f50092d51e - And Fix#596: Bail out of unbound-control dump_infra when ssl
write fails.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3195 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-07-16 10:07:26 +00:00
wouter
321a920e68 - iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3194 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-07-15 14:48:16 +00:00
wouter
c788e53800 - Fix #596: Bail out of unbound-control list_local_zones when ssl
write fails.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3193 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-07-15 14:42:57 +00:00
wouter
7064fd4e00 Configure tests if main can be linked to from getentropy compat.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3191 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-07-13 08:18:57 +00:00
wouter
1816535b88 - update compat/getentropy and arc4random to the most recent ones from OpenBSD.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3184 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-07-12 18:23:49 +00:00
wouter
e5d5340f1b - update compat/getentropy to the most recent ones from OpenBSD.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3183 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-07-12 18:03:27 +00:00
wouter
556c8f7752 - Fix bug in fix for log locks that caused deadlock in signal handler.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3182 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-07-12 17:34:37 +00:00
wouter
862e4bf306 - LibreSSL provides compat items, check for that in configure.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3180 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-07-12 14:13:45 +00:00
wouter
886fbdc54b - Fix to check openssl version number only for OpenSSL.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3179 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-07-12 12:54:50 +00:00
wouter
690b27c016 - Fix getentropy compat code, function refs were not portable.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3178 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-07-12 11:33:38 +00:00
matje
2c269921c6 malloc calloc patch
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3173 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-07-11 15:38:07 +00:00
wouter
1135921a07 - arc4random, getentropy and explicit_bzero compat for Windows.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3172 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-07-11 14:46:46 +00:00
wouter
5aa4e51f0e - fix strptime implicit declaration error on OpenBSD.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3171 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-07-11 14:27:14 +00:00
wouter
4b26592e42 - arc4random in compat/ and getentropy, explicit_bzero, chacha for
dependencies, from OpenBSD.  arc4_lock and sha512 in compat.
  This makes arc4random available on all platforms, except when
  compiled with LIBNSS (it uses libNSS crypto random).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3158 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-07-11 09:27:24 +00:00
wouter
9994fe8446 - Fix #593: segfault or crash upon rotating logfile.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3156 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-07-04 07:34:58 +00:00
wouter
36fd74972e - iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3155 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-07-03 09:18:17 +00:00
wouter
bcfb7595ac - DLV tests added.
- signit tool fixup for compile with libldns library.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3154 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-07-03 09:07:38 +00:00
wouter
b3c4bac3da - so-reuseport is available on BSDs(such as FreeBSD 10) and OS/X.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3153 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-06-27 14:11:57 +00:00
wouter
43713e48bc iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3151 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-06-26 09:17:13 +00:00
wouter
14e8b85111 - unbound-control status reports if so-reuseport was successful.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3150 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-06-26 08:48:51 +00:00
wouter
63221696ac Test commit hooks.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3148 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-06-24 10:34:48 +00:00
wouter
0b225540dc Fixup testsetup for VM tests (testcode/run_vm.sh).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3147 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-06-24 10:26:02 +00:00
wouter
c9c7f29161 - Fix caps-for-id fallback, and added fallback attempt when servers
drop 0x20 perturbed queries.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3146 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-06-24 08:24:28 +00:00
wouter
d41b54afd6 - iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3144 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-06-17 11:57:32 +00:00
wouter
21badea7ff - Add AAAA for B root server to default root hints.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3143 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-06-03 07:29:41 +00:00
wouter
efd392cf85 Remove unused define from iterator.h
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3142 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-06-02 10:03:21 +00:00
wouter
0b39721cf0 - Fixup sldns_enum_edns_option typedef definition.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3141 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-05-30 07:20:11 +00:00
wouter
037cb63ea7 From Dag-Erling Smorgrav: The prototype for libworker_event_done_cb()
needs to be moved from libunbound/libworker.h to libunbound/worker.h.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3140 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-05-28 08:20:44 +00:00
wouter
d9f5cc6e98 - make depend.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3139 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-05-28 08:19:06 +00:00
wouter
49e9d17591 - Fixup out-of-directory compile with unbound-control-setup.sh.in.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3138 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-05-28 08:15:20 +00:00
wouter
7c2248dd8c - Code cleanup patch from Dag-Erling Smorgrav, with compiler issue
fixes from FreeBSD's copy of Unbound, he notes:
  Generate unbound-control-setup.sh at build time so it respects
  prefix and sysconfdir from the configure script.  Also fix the
  umask to match the comment, and the comment to match the umask.
  Add const and static where needed.  Use unions instead of
  playing pointer poker.  Move declarations that are needed in
  multiple source files into a shared header.  Move sldns_bgetc()
  from parse.c to buffer.c where it belongs.  Introduce a new
  header file, worker.h, which declares the callbacks that
  all workers must define.  Remove those declarations from
  libworker.h.	Include the correct headers in the correct places.
  Fix a few dummy callbacks that don't match their prototype.
  Fix some casts.  Hide the sbrk madness behind #ifdef HAVE_SBRK.
  Remove a useless printf which breaks reproducible builds.
  Get rid of CONFIGURE_{TARGET,DATE,BUILD_WITH} now that they're
  no longer used.  Add unbound-control-setup.sh to the list of
  generated files.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3137 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-05-28 08:07:12 +00:00
wouter
1e0eb48c1f - unbound-host -D enabled dnssec and reads root trust anchor from
the default root key file that was compiled in.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3136 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-05-23 07:30:02 +00:00
wouter
8d9d4eea91 - Feature, unblock-lan-zones: yesno that you can use to make unbound
perform 10.0.0.0/8 and other reverse lookups normally, for use if
  unbound is running service for localhost on localhost.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3133 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-05-20 10:38:32 +00:00
wouter
fbe7321ea1 - Updated create_unbound_ad_servers and unbound_cache scripts from
Yuri Voinov in the source/contrib directory. Added
  warmup.cmd (and .sh): warm up the DNS cache with your MRU domains.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3131 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-05-16 14:40:38 +00:00
wouter
437d47515b - iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3130 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-05-09 14:42:02 +00:00
wouter
af4857922e - Implement draft-ietf-dnsop-rfc6598-rfc6303-01.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3129 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-05-09 14:33:10 +00:00
wouter
79b037c5aa - Contrib windows scripts from Yuri Voinov added to src/contrib:
create_unbound_ad_servers.cmd: enters anti-ad server lists.
  unbound_cache.cmd: saves and loads the cache.
- Added unbound-control-setup.cmd from Yuri Voinov to the windows
  unbound distribution set.  It requires openssl installed in %PATH%.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3128 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-05-08 13:39:03 +00:00
wouter
7d212de4bc - Change MAX_SENT_COUNT from 16 to 32 to resolve some cases easier.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3127 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-05-06 12:37:37 +00:00
wouter
6d8894f568 - More #567: remove : from output of stub and forward lists, this is
easier to parse.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3126 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-05-05 14:47:08 +00:00
wouter
0d5674b5a8 - Add unbound-control flush_negative that flushed nxdomains, nodata,
and errors from the cache.  For dnssec-trigger and NetworkManager,
  fixes cases where network changes have localdata that was already
  negatively cached from the previous network.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3125 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-04-29 08:47:33 +00:00
wouter
281ed362ff - iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3124 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-04-29 07:25:46 +00:00
wouter
0bdec8d939 And changelog.
(svn:NO TEST)


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3122 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-04-23 13:04:10 +00:00
wouter
ddb75f20db Different fix.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3119 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-04-15 11:25:36 +00:00
wouter
d293eece3c - If event2 is installed, include dir/include/event2 in compilation.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3115 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-04-15 11:14:50 +00:00
wouter
4494ffcbb2 - iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3114 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-04-11 09:02:01 +00:00
wouter
6f50ee0525 - Fix #502: explain that do-ip6 disable does not stop AAAA lookups,
but it stops the use of the ipv6 transport layer for DNS traffic.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3113 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-04-11 07:15:53 +00:00
wouter
7de5b0ec61 - Fix #545: improved logging, the ip address of the error is printed
on the same log-line as the error.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3112 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-04-10 14:40:20 +00:00
wouter
0b1ed0233c - Fix #558: failed prefetch lookup does not remove cached response
but delays next prefetch (in lieu of caching a SERVFAIL).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3111 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-04-10 13:56:16 +00:00
wouter
3ad592e37d - Fix #554: use unsigned long to print 64bit statistics counters on
64bit systems.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3110 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-04-10 11:20:41 +00:00
wouter
d292682b32 - Fix #567: unbound lists if forward zone is secure or insecure with
+i annotation in output of list_forwards, also for list_stubs
  (for NetworkManager integration.)


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3109 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-04-10 10:54:21 +00:00
wouter
7a5bad49e3 - unbound-control stats prints num.query.tcpout with number of TCP
outgoing queries made in the previous statistics interval.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3108 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-04-10 09:13:58 +00:00
wouter
e17025eee3 - Patch from Hannes Frederic Sowa for Linux 3.15 fragmentation
option for DNS fragmentation defense.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3107 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-04-10 08:35:45 +00:00
wouter
163fa6800a - iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3106 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-04-10 08:20:50 +00:00
wouter
89e1cf45fd iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3105 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-04-08 07:46:09 +00:00
wouter
eaab8cc117 - Fix #574: make test fails on Ubuntu 14.04. Disabled remote-control
in testbound scripts.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3104 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-04-08 07:13:49 +00:00
wouter
619d924803 - Fix #572: Fix unit test failure for systems with different
/etc/services.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3103 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-04-07 09:18:29 +00:00
wouter
82d8262980 - C.ROOT-SERVERS.NET has an IPv6 address, and we updated the root
hints (patch from Anand Buddhdev).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3102 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-04-07 08:18:39 +00:00
wouter
fc81bc1805 - Fix #569: do_tcp is do-tcp in unbound.conf man page.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3101 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-03-28 08:19:21 +00:00
wouter
97a4a444eb - Patch from Stuart Henderson to build unbound-host man from .1.in.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3100 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-03-25 08:09:33 +00:00
wouter
618bf78fa9 - Fix print filename of encompassing config file on read failure.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3099 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-03-24 13:13:42 +00:00
wouter
a8af8040c0 trunk has 1.4.23 in development.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3098 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-03-12 14:25:21 +00:00
wouter
cdf37ba2bb tag 1.4.22
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3096 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-03-12 12:30:23 +00:00
wouter
e3798d9aa0 - Fix bug#561: contrib/cacti plugin did not report SERVFAIL rcodes
because of spelling.  Patch from Chris Coates.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3095 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-03-10 10:42:49 +00:00
wouter
7332f5ddef 1.4.22rc1 tag created
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3094 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-02-27 08:02:24 +00:00
wouter
87f160f1db - iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3092 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-02-21 09:38:02 +00:00
wouter
959eef4c63 - Be lenient when a NSEC NameError response with RCODE=NXDOMAIN is
received. This is okay according 4035, but not after revising
  existence in 4592.  NSEC empty non-terminals exist and thus the
  RCODE should have been NOERROR. If this occurs, and the RRsets
  are secure, we set the RCODE to NOERROR and the security status
  of the reponse is also considered secure.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3091 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-02-20 12:36:05 +00:00
wouter
9df60e0263 Port to Minix 3.2.1.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3081 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-02-14 09:23:32 +00:00
wouter
a42199b6c0 Fix parse of #553(NSD) string in sldns, quotes without spaces.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3080 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-02-11 08:29:42 +00:00
wouter
7aac37f469 - Fix #551: License change "Regents" to "Copyright holder", matching
the BSD license on opensource.org.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3078 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-02-07 12:43:43 +00:00
wouter
e592a4e8db - add body to ifstatement if locks disabled.
- add TXT string"string" test case to unit test.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3077 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-02-07 12:14:09 +00:00
wouter
289af9db17 iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3075 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-02-07 09:51:54 +00:00
wouter
fd6807c38f - code documentation on the module interface.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3074 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-02-06 13:18:32 +00:00
wouter
0d74f081a5 - sldns has type HIP.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3071 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-02-06 10:57:42 +00:00
wouter
2e369ae61d fix sldns parse tests on osx.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3070 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-02-05 13:40:55 +00:00
wouter
e0b84e80a2 - Fix parse in sldns of quoted parenthesized text strings.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3066 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-02-03 14:28:57 +00:00
wouter
da830563d2 - Fixup link with lib/event2 subdir.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3065 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-02-03 11:41:19 +00:00
wouter
2553b4fb9f - Detect libevent2 install automatically by configure.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3064 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-02-03 11:02:17 +00:00
wouter
56edfdf8d4 - fixup type EUI48 and EUI64, type APL and type IPSECKEY in string
parse sldns.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3063 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-01-31 13:50:57 +00:00
wouter
25bb623632 and commitlog
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3062 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-01-31 11:33:22 +00:00
wouter
5758551602 - unit test for ldns wire to str and back with zones, root, nlnetlabs
and types.sidnlabs.
- Fix for hex to string in unknown, atma and nsap.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3060 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-01-31 10:19:01 +00:00
wouter
5ad20035bd - delay-close does not act if there are udp-wait queries, so that
it does not make a socketdrain DoS easier.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3059 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-01-30 09:27:00 +00:00
wouter
d1cb31280e - delay-close: msec option that delays closing ports for which
the UDP reply has timed out.  Keeps the port open, only accepts
  the correct reply.  This correct reply is not used, but the port
  is open so that no port-denied ICMPs are generated.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3058 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-01-28 14:35:55 +00:00
wouter
8ce81b472f - iana portlist test updated so it does not touch the source
if there are no changes.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3057 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-01-28 10:12:13 +00:00
wouter
33a649c386 - iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3056 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-01-28 10:00:01 +00:00
wouter
1315093384 - reuseport is attempted, then fallback to without on failure.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3054 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-01-27 10:27:19 +00:00
wouter
03da1e8f35 - made lint clean.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3050 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-01-24 13:23:45 +00:00
wouter
36afba318e - so-reuseport: yesno option to distribute queries evenly over
threads on Linux (Thanks Robert Edmonds).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3049 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-01-24 11:43:38 +00:00
wouter
2920d0fa82 - speed up unbound (reports say it could be up to 10%), by reducing
lock contention on localzones.lock.  It is changed to an rwlock.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3048 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-01-24 11:21:15 +00:00
wouter
f19df3745f - unbound-event.h is installed if you configure --enable-event-api.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3047 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-01-24 10:55:28 +00:00
wouter
d80aaee750 - iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3046 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-01-24 10:42:42 +00:00
wouter
a60b5a4077 - Change unbound-event.h to use void* buffer, length idiom.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3045 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-01-24 08:16:56 +00:00
wouter
63354244f1 - Fix #547: no trustanchor written if filesystem full, fclose checked.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3044 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-01-21 10:14:55 +00:00
wouter
de91e9d4f2 - iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3043 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-01-17 15:29:04 +00:00
wouter
2ac9c97c73 - Fix isprint() portability in sldns, uses unsigned int.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3042 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-01-17 14:45:14 +00:00
wouter
511cfd92df - Windows port, adjust %lld to %I64d, and warning in win_event.c.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3040 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-01-16 16:01:37 +00:00
wouter
ba8b12b779 - fix #544: Fixed +i causes segfault when running with module conf "iterator".
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3038 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-01-16 13:04:34 +00:00
wouter
19b0244480 - iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3037 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-01-14 08:26:29 +00:00
wouter
cc9064d64e - update pythonmod for ldns_ to sldns_ name change.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3035 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-12-05 16:27:52 +00:00
wouter
8af85a6350 Fix bug in cachedump format after sldns changes.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3033 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-12-05 15:57:16 +00:00
wouter
6f31050bf8 - Fix windows compile to compile with sldns.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3024 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-12-03 13:51:11 +00:00
wouter
db8f72c4f7 - Fix sldns to use sldns_ prefix for all ldns_ variables.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3022 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-12-03 09:11:16 +00:00
wouter
884b06df55 Fix linking of sldns and ldns, unique identifiers for global variables.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3021 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-11-30 11:03:55 +00:00
wouter
992c74a70a - Fix bug#537: compile python plugin without ldns library.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3016 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-11-13 08:53:53 +00:00
wouter
2e1c6e061f - Fix bug#536: acl_deny_non_local and refuse_non_local added.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3015 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-11-12 10:08:54 +00:00
wouter
936b11a95e interface: and ip-address:
also includes for newer ldns in pythonmod. 


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3014 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-11-06 02:48:59 +00:00
wouter
116d59bef9 - Patch from Neel Goyal to fix async id assignment if callback
is called by libunbound in the mesh attach.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3013 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-11-05 21:16:02 +00:00
wouter
22dd467d26 - Patch from Neel Goyal to fix callback in libunbound.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3012 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-11-04 18:53:21 +00:00
wouter
c008161b94 - if configured --with-libunbound-only fix make install.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3010 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-11-03 23:12:55 +00:00
wouter
b641715036 portability fixes for new USE_SLDNS ldns subdir codebase.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3008 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-10-31 16:27:15 +00:00
wouter
72c68179a5 note bugzilla number.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3001 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-10-31 15:32:56 +00:00
wouter
8e6ee27eda - separate ldns into core ldns inside ldns/ subdirectory. No more
--with-ldns is needed and unbound does not rely on libldns.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2998 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-10-31 15:09:26 +00:00
wouter
c0c114ebeb - iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2997 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-10-31 15:06:24 +00:00
wouter
61ef2ac265 - Set SO_REUSEADDR so that the wildcard interface and a more specific
interface port 53 can be used at the same time, and one of the
  daemons is unbound.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2996 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-10-31 15:06:11 +00:00
wouter
e37c8fa8e9 - Fix #528: if very high logging (4 or more) segfault on allow_snoop.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2994 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-10-22 12:01:51 +00:00
wouter
d672c0066c - Patch from Neel Goyal: Add an API call to set an event base on an
existing ub_ctx.  This basically just destroys the current worker and
  sets the event base to the current.  And fix a deadlock in
  ub_resolve_event – the cfglock is held when libworker_create is
  called.  This ends up trying to acquire the lock again in
  context_obtain_alloc in the call chain.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2992 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-10-22 09:32:10 +00:00
wouter
a6234674fb - unbound-event.h is installed if configured --with-libevent. It
contains low-level library calls, that use libevent's event_base
  and an ldns_buffer for the wire return packet to perform async
  resolution in the client's eventloop.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2970 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-09-26 08:34:14 +00:00
wouter
4d385dc589 - acx_nlnetlabs.m4 to 26; improve FLTO help text.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2964 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-09-19 13:08:58 +00:00
wouter
3cb0e151cb iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2963 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-09-19 12:03:44 +00:00
wouter
44e821b59a - trunk has 1.4.22 number inside it.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2962 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-09-19 10:53:38 +00:00
wouter
8010bb2aa4 - Fix#524: max-udp-size not effective to non-EDNS0 queries, from
Daisuke HIGASHI.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2955 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-09-16 09:07:08 +00:00
wouter
00bfbae532 - tag 1.4.21rc1 made again.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2953 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-09-10 14:04:35 +00:00
wouter
2002f2427b more time_t.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2951 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-09-10 08:46:33 +00:00
wouter
4bd845dea6 - More fixes for bug#519: for the threaded case test if the bg
thread has been killed, on ub_ctx_delete, to avoid hangs.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2946 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-08-26 12:24:27 +00:00
wouter
658bd3bcf8 - review fixes from Willem.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2945 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-08-22 14:10:29 +00:00
wouter
b492e89a4d - more fixes that I overlooked.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2944 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-08-22 07:33:51 +00:00
wouter
1efe599073 - Fix#520: Errors found by static analysis from Tomas Hozza(redhat).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2942 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-08-21 13:31:09 +00:00
wouter
b4a007738c - Fix for 2038, with time_t instead of uint32_t.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2939 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-08-20 12:23:42 +00:00
wouter
60c16ee604 - Fix#519 ub_ctx_delete may hang in some scenarios (libunbound).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2937 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-08-19 12:02:17 +00:00
wouter
1402c87b39 Fix uninit variable in fix#516.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2934 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-08-14 07:53:33 +00:00
wouter
ef7be2ae15 - Fix#516 dnssec lameness detection for answers that are improper.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2933 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-08-08 09:29:33 +00:00
wouter
fe14e57752 tag 1.4.21rc1
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2932 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-07-30 14:42:20 +00:00
wouter
e484400f89 note down the bugzilla reference number.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2931 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-07-30 08:29:15 +00:00
wouter
08d0e4c6f6 - Fix memleak in testcode for testbound (if it fails).
- Fix NSS returned arrays out of setup function to be statics.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2930 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-07-29 07:32:35 +00:00
wouter
1539f33fd9 iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2929 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-07-26 13:26:51 +00:00
wouter
d0b6865a8a - max include of 100.000 files (depth and globbed at one time).
This is to preserve system memory in bug cases, or endless cases.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2928 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-07-26 13:11:53 +00:00
wouter
c697c00b08 - libunbound documentation on how to avoid openssl race conditions.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2926 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-07-19 11:48:22 +00:00
wouter
89c56f759c iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2925 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-07-19 10:51:11 +00:00
wouter
28d80a01ca - streamtcp man page, contributed by Tomas Hozza.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2924 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-07-19 10:46:16 +00:00
wouter
e06004ca04 - configure --disable-flto option (from Robert Edmonds).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2916 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-06-25 07:25:31 +00:00
wouter
457d21eb30 - Squelch sendto-permission denied errors when the network is
not connected, to avoid spamming syslog.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2915 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-06-25 07:03:03 +00:00
wouter
784ede12a6 - iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2914 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-06-18 07:34:00 +00:00
wouter
78a520b994 - Fix for const string literals in C++ for libunbound, from Karel
Slany.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2913 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-06-18 07:33:44 +00:00
wouter
a249574168 - Fixup manpage syntax.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2912 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-06-17 11:20:42 +00:00
wouter
05d71585ef - get_option and set_option support for log-time-ascii, python-script
val-sig-skew-min and val-sig-skew-max.  log-time-ascii takes effect
  immediately.  The others are mostly useful for libunbound users.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2911 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-06-14 08:03:52 +00:00
wouter
9db6acb660 - get_option, set_option, unbound-checkconf -o and libunbound
getoption and setoption support cache-min-ttl and cache-max-ttl.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2910 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-06-13 08:26:41 +00:00
wouter
57626b2e16 - Max include depth is unlimited.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2909 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-06-10 13:37:14 +00:00
wouter
6b1da4e103 - iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2908 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-06-10 12:25:34 +00:00
wouter
bcb1b4b1da - Fix#501: forward-first does not recurse, when forward name is ".".
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2907 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-06-10 12:25:10 +00:00
wouter
71da5d2023 - iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2905 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-05-27 13:11:11 +00:00
wouter
46108fac55 - Update acx_pthreads.m4 to ax_pthreads.4 (2013-03-29), and apply
patch to it to not fail when -Werror is also specified, from the
  autoconf-archives.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2904 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-05-27 08:22:40 +00:00
wouter
bf45bfd756 - Explain bogus and secure flags in libunbound more.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2903 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-05-21 09:06:21 +00:00
wouter
05e58e752c - Fix#500 use of non-initialised values on socket bind failures.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2901 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-05-16 08:14:03 +00:00
wouter
2a9f76b880 - Fix use-after-free in out-of-memory handling code (thanks Jake
Montgomery).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2900 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-05-16 07:36:37 +00:00
wouter
b7857366b8 - Fix round-robin doesn't work with some Windows clients (from Ilya Bakulin).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2899 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-05-15 11:56:22 +00:00
wouter
ea9a97d9b8 - update acx_nlnetlabs.m4 to v23, sleep w32 fix.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2898 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-05-03 09:35:55 +00:00
wouter
167e55b965 - add unbound-control insecure_add and insecure_remove for the
administration of negative trust anchors.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2895 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-04-26 14:14:07 +00:00
wouter
92e77546db - updated iana portlist.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2894 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-04-25 11:59:05 +00:00
wouter
d63f8ef809 - Implement max-udp-size config option, default 4096 (thanks
Daisuke Higashi).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2893 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-04-25 11:55:46 +00:00
wouter
48c72225d1 - Robust checks on dname validity from rdata for dname compare.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2892 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-04-25 10:28:25 +00:00
wouter
d3b8ff05ce - Fix snprintf return value usage, fixed libunbound_get_option.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2888 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-04-19 11:34:36 +00:00
wouter
6cff0e0270 - own implementation of compat/snprintf.c.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2887 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-04-18 14:28:21 +00:00
wouter
75c85eaa74 - fix bug #491: pick program name (0th argument) as syslog identity.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2885 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-04-18 12:14:40 +00:00
wouter
eeb1781327 - unbound-anchor review: BIO_write can return 0 successfully if it
has successfully appended a zero length string.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2884 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-04-15 15:08:24 +00:00
wouter
ce79ba4905 - Fix so that for a configuration line of include: "*.conf" it is not
an error if there are no files matching the glob pattern.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2883 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-04-15 07:57:08 +00:00
wouter
b838694589 - Fix queries leaking up for stubs and forwards, if the configured
nameservers all fail to answer.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2882 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-04-11 10:08:34 +00:00
wouter
b2d05e729e - code improve for minimal responses, small speed increase.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2881 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-04-10 14:29:35 +00:00
wouter
072b65caae - Fix crash in previous private address fixup of 22 March.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2880 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-04-09 07:38:24 +00:00
wouter
f703673eda - updated iana portlist.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2879 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-04-09 07:02:43 +00:00
wouter
d1e5c9f3b1 - Make reverse zones easier by documenting the nodefault statements
commented-out in the example config file.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2878 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-03-28 13:36:38 +00:00
wouter
3585fc9462 more fixes for endianness.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2877 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-03-26 08:14:06 +00:00
wouter
9a329656c7 And add detection for machine/endian.h to it.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2875 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-03-25 14:53:09 +00:00
wouter
92110dd306 - #492: Fix endianness detection, revert to older lookup3.c detection
and put new detect lines after previous tests, to avoid regressions
  but allow new detections to succeed.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2872 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-03-25 09:35:27 +00:00
wouter
b87787e4a1 - Fix makedist for new svn for -d option.
- unbound.h header file has UNBOUND_VERSION_MAJOR define.
- Fix windows RSRC version for long version numbers.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2870 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-03-22 12:41:13 +00:00
wouter
be9eda888c iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2869 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-03-22 10:00:55 +00:00
wouter
e306a8f384 - Fix resolve of names that use a mix of public and private addresses.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2868 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-03-22 09:36:33 +00:00
wouter
4c5695e1bf - install copy of unbound-control.8 man page for unbound-control-setup
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2866 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-03-21 12:48:12 +00:00
wouter
a5837b560b trunk has 1.4.21 version
committed libunbound version 4:1:2 for binary API updated in 1.4.20


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2865 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-03-21 12:24:42 +00:00
wouter
3800239c3c release changelog entry.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2863 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-03-21 11:17:00 +00:00
wouter
f20eabebee tag 1.4.20rc1
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2860 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-03-14 13:06:27 +00:00
wouter
6fbd251bbe iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2859 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-03-14 12:54:52 +00:00
wouter
1a0ac9ffd9 - Fixup makedist.sh for windows compile.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2858 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-03-12 13:44:59 +00:00
wouter
7be4f28631 - testcode/ldns-testpkts.c check for makedist is informational.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2856 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-03-11 15:11:56 +00:00
wouter
d310cb5644 - iana portlist update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2855 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-03-11 14:42:13 +00:00
wouter
4e13c3b57b - fix defines in lookup3 for bigendian bsd alpha
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2845 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-02-15 14:00:03 +00:00
wouter
537b023feb - Fixup openssl_thread init code to only run if compiled with SSL.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2843 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-02-11 16:03:51 +00:00
wouter
cd302a1e8e update iana portlist.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2835 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-02-07 13:30:17 +00:00
wouter
dd39221bde - add libunbound.ttl at end of result structure, version bump for
libunbound and binary backwards compatible, but 1.4.19 is not
  forward compatible with 1.4.20.
- updated configure scripts with newer versions.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2834 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-02-07 13:23:48 +00:00
wouter
f475681731 - detect endianness in lookup3 on BSD.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2833 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-02-07 08:18:33 +00:00
wouter
2643272560 - includes and have_ssl fixes for nss.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2830 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-01-30 13:15:03 +00:00
wouter
9285d02d4a - printout name of zone with duplicate fwd and hint errors.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2828 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-01-29 08:13:57 +00:00
wouter
3e363e5236 - updated fwd_zero for newer nc. Updated common.sh for newer netstat.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2825 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-01-28 13:30:46 +00:00
wouter
98a8c1c53c - update iana port list.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2808 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-01-17 11:23:07 +00:00
wouter
a80476d462 - unbound-anchors checks the emailAddress of the signer of the
root.xml file, default is dnssec@iana.org.  It also checks that
  the signer has the correct key usage for a digital signature.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2807 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-01-17 11:17:04 +00:00
wouter
614abedfbd - Check the commonName of the signer of the root.xml file in
unbound-anchor, default is dnssec@iana.org.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2804 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-01-03 14:38:38 +00:00
wouter
afb056f487 - Test that unbound can handle a CNAME at an intermediate node in
the chain of trust (where it seeks a DS record).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2803 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-01-03 12:25:48 +00:00
wouter
6f200f25f0 - Test that unbound-control checks client credentials.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2802 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-01-03 10:58:31 +00:00
wouter
2267b8b267 - Tested that unbound implements the RFC5155 Technical Errata id 3441.
Unbound already implements insecure classification of an empty
  nonterminal in NSEC3 optout zone.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2800 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-01-02 14:42:20 +00:00
wouter
a506ed09ab iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2799 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-01-02 11:15:49 +00:00
wouter
7244053f53 - Fix openssl lock free on exit (reported by Robert Fleischman).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2798 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-01-02 10:53:57 +00:00
wouter
eaba5edb38 - Fix unbound-anchor xml parse of entity declarations for safety.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2797 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-12-20 08:22:39 +00:00
wouter
9243d9855f iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2796 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-12-19 10:55:18 +00:00
wouter
f28ae598a5 iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2795 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-12-18 15:26:25 +00:00
wouter
f1a5d98065 - Change of D.ROOT-SERVERS.NET A address in default root hints.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2794 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-12-14 08:08:59 +00:00
wouter
f4015ff912 - trunk has 1.4.20 under development.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2793 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-12-12 09:17:08 +00:00
wouter
7331f55fd1 1.4.19
(svn:NO TEST)


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2791 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-12-12 08:43:16 +00:00
wouter
d2e35c5a50 - note support for AAAA RR type RFC.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2789 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-12-06 10:02:02 +00:00
wouter
91cda02980 changelog (svn:NO TEST)
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2788 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-12-04 11:52:14 +00:00
wouter
08a311ddd2 - iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2784 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-11-30 09:50:29 +00:00
wouter
016de304a8 - bug 481: fix python example0.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2783 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-11-30 09:41:38 +00:00
wouter
b96896deb0 iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2782 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-11-27 16:01:47 +00:00
wouter
87c60e499f - Fix unbound-control forward disables configured stubs below it.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2781 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-11-09 15:35:18 +00:00
wouter
36a9c0af61 - iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2780 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-11-07 08:57:51 +00:00
wouter
666d355d7b - Fixup ldns-testpkts, identical to ldns/examples.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2779 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-11-07 08:49:53 +00:00
wouter
ba27940c44 - Fix bug #477: unbound-anchor segfaults if EDNS is blocked.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2778 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-10-30 15:13:53 +00:00
matje
aae7a518bf Fix validation for responses with CNAME and wildcard expanded CNAME in
ANSWER section.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2777 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-10-29 14:06:00 +00:00
wouter
206f968f10 - make clean and makerealclean remove generated python and docs.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2776 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-10-08 12:31:16 +00:00
wouter
9508df7769 - fix build of pythonmod in objdir, for unbound.py.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2775 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-10-08 12:07:51 +00:00
wouter
341bfc3adc - update ldns-testpkts.c to ldns 1.6.14 version.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2774 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-10-08 10:24:50 +00:00
wouter
e1c697fe2d - fix build of pythonmod in objdir (thanks Jakob Schlyter).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2773 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-10-05 07:06:11 +00:00
wouter
e68ce6d9be - fix text in unbound-anchor man page.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2772 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-10-03 14:43:46 +00:00
wouter
97cc148487 - ignore trusted-keys globs that have no files (from Paul Wouters).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2770 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-10-01 07:18:49 +00:00
wouter
6a9b0764e4 - updated contrib/unbound.spec, patch from Valentin Bud.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2768 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-09-27 09:37:04 +00:00
wouter
f10b82ac45 - iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2767 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-09-27 09:34:24 +00:00
wouter
320df09e27 unbound-control -q option is quiet, patch from Mariano Absatz.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2766 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-09-27 09:32:35 +00:00
wouter
5f7b92dd7a - include: directive in config file accepts wildcards. Patch from
Paul Wouters.  Suggested use: include: "/etc/unbound.d/conf.d/*"


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2765 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-09-27 08:52:37 +00:00
wouter
c3c53b07e3 - chdir to / after chroot call (suggested by Camiel Dobbelaar).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2764 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-09-21 07:13:51 +00:00
wouter
8964aebbfb - patch_rsamd5_enable.diff: this patch enables RSAMD5 validation
otherwise it is treated as insecure.  The RSAMD5 algorithm is
  deprecated (RFC6725).  The MD5 hash is considered weak for some
  purposes, if you want to sign your zone, then RSASHA256 is an
  uncontested hash.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2760 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-09-17 13:15:12 +00:00
wouter
1d6cf41a6f - iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2754 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-08-30 12:12:58 +00:00
wouter
ac7d3cdbde - RFC6725 deprecates RSAMD5: this DNSKEY algorithm is disabled.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2753 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-08-30 12:02:53 +00:00
wouter
981720aa4c - Nicer comments outgoing-port-avoid, thanks Stu (bug #465).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2752 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-08-29 07:13:36 +00:00
wouter
62c729d59e - Fallback to 1472 and 1232, one fragment size without headers.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2746 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-08-22 08:46:30 +00:00
wouter
8f83f70712 - Fix timeouts so that when a server has been offline for a while
and is probed to see it works, it becomes fully available for
  server selection again.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2745 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-08-21 07:17:48 +00:00
wouter
e873bbbbe9 - Add documentation to libunbound for default nonuse of resolv.conf.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2744 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-08-17 07:06:18 +00:00
wouter
4e802d7992 iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2741 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-08-02 08:08:27 +00:00
wouter
b4208b16f9 - trunk has 1.4.19 under development (fixes from 1 aug and 31 july
are for 1.4.19).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2740 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-08-02 07:57:33 +00:00
wouter
77000db6bc note release date.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2739 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-08-02 07:46:59 +00:00
wouter
efebff52f7 - Fix openssl race condition, initializes openssl locks, reported
by Einar Lonn and Patrik Wallstrom.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2733 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-08-01 11:31:29 +00:00
wouter
162a1a29bb - added manpage links for libunbound calls (Thanks Paul Wouters).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2732 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-07-31 13:43:08 +00:00
wouter
800da7f0fd - Fix forward-first option where it sets the RD flag wrongly.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2731 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-07-31 12:53:53 +00:00
wouter
a77e89f1d0 - Fix that enables modules to register twice for the same
serviced_query, without race conditions or administration issues.
  This should not happen with the current codebase, but it is robust.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2730 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-07-31 11:33:06 +00:00
wouter
543b5636de - Improved forward-first and stub-first documentation.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2729 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-07-31 08:08:43 +00:00
wouter
a994a690c8 tag 1.4.18rc2
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2728 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-07-30 08:07:06 +00:00
wouter
1caf700c2e - fix bogus nodata cname chain not reported as bogus by validator,
(Thanks Peter van Dijk).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2727 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-07-27 13:38:00 +00:00
wouter
df02b64294 1.4.18rc1 tag.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2725 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-07-26 09:20:06 +00:00
wouter
7aaba2e725 - iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2724 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-07-26 09:10:36 +00:00
wouter
7f7f11f49e - review fix for libnss, check hash prefix allocation size.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2723 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-07-25 14:32:37 +00:00
wouter
f29947421f - implemented forward_first for the root.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2722 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-07-23 13:42:07 +00:00
wouter
724697a418 - fix missing break for GOST DS hash function.
- make depend


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2721 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-07-23 12:27:04 +00:00
wouter
4a9e53af6f - Fix bug#452 and another assertion failure in mesh.c, makes
assertions in mesh.c resist duplicates.  Fixes DS NS search to
  not generate duplicate sub queries.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2718 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-07-20 13:08:19 +00:00
wouter
792a5b9f37 - Fix bug#454: Remove ACX_CHECK_COMPILER_FLAG from configure.ac,
if CFLAGS is specified at configure time then '-g -O2' is not
  appended to CFLAGS, so that the user can override them.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2717 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-07-19 08:51:35 +00:00
wouter
4c31c87d01 - Fix libunbound report of errors when in background mode.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2716 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-07-18 09:43:50 +00:00
wouter
ff883c375f - updated iana ports list.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2714 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-07-11 09:31:39 +00:00
willem
d07b0c7c3b flush_bogus option for unbound-control
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2713 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-07-09 14:33:07 +00:00
wouter
109c3e384b - Fix validation of qtype DS queries that result in no data for
non-optout NSEC3 zones.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2712 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-07-06 13:56:44 +00:00
wouter
eba23b8235 - compile libunbound with libnss on Suse, passes regression tests.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2710 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-07-04 12:33:32 +00:00
wouter
9aba3e1991 - FIPS_mode openssl does not use arc4random but RAND_pseudo_bytes.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2709 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-07-03 09:32:16 +00:00
wouter
51d0b0edf7 - updated iana ports list.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2708 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-07-02 12:20:50 +00:00
wouter
4e1683e116 - patch for unbound_munin_ script to handle arbitrary thread count by
Sven Ulland.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2707 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-06-29 08:58:18 +00:00
wouter
7b4a84fda9 updated iana ports list.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2706 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-06-28 14:29:38 +00:00
wouter
900734a71b - fix edns-buffer-size and msg-buffer-size manpage documentation.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2705 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-06-28 14:25:10 +00:00
wouter
2a46be9b00 - code review: return value of cache_store can be ignored for better
performance in out of memory conditions.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2704 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-06-28 14:18:41 +00:00
wouter
182250237f - detect if openssl has FIPS_mode.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2703 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-06-28 06:54:16 +00:00
wouter
8cb9d852c0 - disable RSAMD5 if in FIPS mode (for openssl and for libnss).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2702 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-06-25 15:13:44 +00:00
wouter
4d012867f2 - disable RSAMD5 if in FIPS mode (when compiled with openssl).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2701 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-06-25 15:02:52 +00:00
wouter
2d5552262c implement DNSSEC with libNSS: NSEC3, RSA, DSA, ECDSA, and DS hashes.
make test succeeds.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2699 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-06-22 14:31:29 +00:00
wouter
836c366bb4 RSA with nss.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2697 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-06-21 15:19:16 +00:00
wouter
1aac0639ef - nss check for verification failure.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2695 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-06-21 12:00:48 +00:00
wouter
6fa543ca4d - fix error handling of alloc failure during rrsig verification.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2693 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-06-21 07:22:01 +00:00
wouter
5373e6bec7 - work on --with-nss build option (for now, --with-libunbound-only).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2690 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-06-20 15:11:53 +00:00
wouter
d383074120 - --with-libunbound-only build option, only builds the library and
not the daemon and other tools.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2689 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-06-19 12:20:11 +00:00
wouter
ec417b19da code review.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2688 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-06-18 14:22:29 +00:00
wouter
e3f7381966 - code review.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2687 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-06-15 19:44:09 +00:00
wouter
57089323ec iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2686 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-06-15 12:33:10 +00:00
wouter
e673d893c7 - The key-cache bad key ttl is now 60 seconds.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2685 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-06-15 12:25:29 +00:00
wouter
69c422db01 - implement log-time-ascii on windows.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2684 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-06-15 08:24:44 +00:00
wouter
9c0e95b8a2 - bug #452: fix crash on assert in mesh_state_attachment.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2683 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-06-11 12:04:58 +00:00
wouter
2c087c0fef change to test commit hook.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2681 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-05-30 12:26:05 +00:00
wouter
e8a177224e - silence warning from swig-generated code (md set but not used in
swig initmodule, due to ifdefs in swig generated code).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2680 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-05-30 09:08:17 +00:00
wouter
df68bdcd08 - Fix debian-bugs-658021: Please enable hardened build flags.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2679 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-05-27 20:46:52 +00:00
wouter
27c547c0ff - updated iana ports list.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2678 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-05-25 14:29:20 +00:00
wouter
5363ac922e trunk is 1.4.18
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2677 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-05-24 09:00:26 +00:00
wouter
6fc724d1ed tag for 1.4.17 release.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2676 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-05-24 08:37:33 +00:00
wouter
a29ad4c7d0 - Review comments from Yuri, removed duplicate memset to zero in delegpt.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2675 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-05-18 15:04:08 +00:00
wouter
8b75500e11 tag 1.4.17rc1
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2674 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-05-16 12:31:08 +00:00
wouter
37c1ce272d spelling fixup. svn: NO TEST
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2673 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-05-16 12:02:34 +00:00
wouter
afcd09ab22 - Protect if statements in val_anchor for compilate without locks.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2670 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-05-16 10:54:52 +00:00
wouter
c0f03c1a05 - Updated doc/FEATURES with RFCs that are implemented but not listed.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2669 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-05-16 10:30:42 +00:00
wouter
ff407af506 - fix configure ECDSA support in ldns detection for windows compile.
- fix possible uninitialised variable in windows pipe implementation.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2667 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-05-15 14:50:21 +00:00
wouter
18934b4be5 fix alignment problem in util/random.c for sparc64/freebsd.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2666 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-05-09 09:13:57 +00:00
wouter
affaa5c882 iana portlist updated
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2664 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-05-08 12:40:04 +00:00
wouter
225b292ce7 - Fix for accept spinning reported by OpenBSD.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2663 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-05-08 12:08:55 +00:00
wouter
a6e01024c8 - Fix validation of nodata for DS query in NSEC zones, reported by
Ondrej Mikle.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2662 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-05-02 11:58:27 +00:00
wouter
cb699ceca7 - ECDSA support (RFC 6605) by default. Use --disable-ecdsa for older
openssl.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2661 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-04-13 16:21:04 +00:00
wouter
dd27194a44 iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2659 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-04-10 11:04:17 +00:00
wouter
ae03c65057 - Applied patch from Daisuke HIGASHI for rrset-roundrobin and
minimal-responses features.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2658 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-04-10 09:16:39 +00:00
wouter
f07e255e75 - fix bug #444: setusercontext was called too late (thanks Bjorn
Ketelaars).



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2657 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-04-05 09:30:04 +00:00
wouter
b0047e0dda - fix bug #443: --with-chroot-dir not honoured by configure.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2656 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-04-05 09:10:56 +00:00
wouter
8439c22d00 - fix bug #442: Fix that Makefile depends on pythonmod headers
even using --without-pythonmodule.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2654 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-03-27 07:31:22 +00:00
wouter
6555b3e55d - contrib/validation-reporter follows rotated log file (patch from
Augie Schwer).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2650 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-03-22 09:45:27 +00:00
wouter
28727b8b02 - new approach to NS fetches for DS lookup that works with
cornercases, and is more robust and considers forwarders.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2646 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-03-21 15:01:01 +00:00
wouter
e5d9f18a1c - fix to locate nameservers for DS lookup with NS fetches.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2645 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-03-19 15:44:21 +00:00
wouter
4404a61a75 - iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2644 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-03-19 11:10:35 +00:00
wouter
829b478e40 - Patch for access to full DNS packet data in unbound python module
from Ondrej Mikle.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2643 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-03-16 14:53:51 +00:00
wouter
8423644a4c - Applied line-buffer patch from Augie Schwer to validation.reporter.sh.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2642 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-03-10 08:28:42 +00:00
wouter
2d40ca1010 removed warning from --enable-ecdsa.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2641 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-03-02 12:17:09 +00:00
wouter
0c1759fb44 - flush_infra cleans timeouted servers from the cache too.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2639 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-03-02 09:05:36 +00:00
wouter
276300a61a - forward-first option. Tries without forward if a query fails.
Also stub-first option that is similar.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2637 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-03-01 13:16:40 +00:00
wouter
0bd934ca59 - Fix from code review, if EINPROGRESS not defined chain if statement differently.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2636 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-28 15:06:59 +00:00
wouter
33aee2e6cb - Fix bug#434: on windows check registry for config file location
for unbound-control.exe, and unbound-checkconf.exe.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2635 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-27 13:20:29 +00:00
wouter
c730f8194f - Fix to squelch 'network unreachable' errors from tcp connect in
logs, high verbosity will show them.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2634 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-23 09:01:46 +00:00
wouter
5a7af9871a Fix prefetch and stickyness.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2632 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-16 11:04:53 +00:00
wouter
6ffbc94b48 - iter_hints is now thread-owned in module env, and thus threadsafe.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2629 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-16 09:55:50 +00:00
wouter
d5150eafeb - unbound-control forward_add, forward_remove, stub_add, stub_remove
can modify stubs and forwards for running unbound (on mobile computer)
  they can also add and remove domain-insecure for the zone.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2623 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-15 14:35:28 +00:00
wouter
ad8753ad44 hints uses malloc for more dynamicity.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2622 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-15 09:38:34 +00:00
wouter
7fe22008d7 - Fix forward-zone memory, uses malloc and frees original root dp.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2621 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-15 08:50:17 +00:00
wouter
7d756333e8 - iter forwards uses malloc inside for more dynamicity.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2620 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-14 15:41:09 +00:00
wouter
4c9275628a - Fix sticky NS (ghost domain problem) if prefetch is yes.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2619 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-14 11:06:44 +00:00
wouter
7967a55716 iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2618 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-13 10:59:07 +00:00
wouter
e4ac9e9503 - RT#2955. Fix for cygwin compilation.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2617 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-13 10:42:22 +00:00
wouter
92c844ad08 - unit test fix for nomem_cnametopos.rpl race condition.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2614 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-10 12:54:27 +00:00
wouter
c8396f3878 - Fix timeouts to keep track of query type, A, AAAA and other, if
another has caused timeout blacklist, different type can still probe.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2613 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-10 12:17:25 +00:00
wouter
575e9face7 - Slightly smaller critical region in one case in infra cache.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2611 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-10 09:21:06 +00:00
wouter
3c2532e0ac - Fix AHX_BROKEN_MEMCMP for autoheader mess up of #undef in config.h.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2610 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-09 12:40:19 +00:00
wouter
778fd7476a - workaround for openssl 0.9.8 ecdsa sha2 and evp problem.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2608 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-08 16:40:46 +00:00
wouter
467b5e8f5c iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2607 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-08 13:31:47 +00:00
wouter
27329b8cc9 - implement draft-ietf-dnsext-ecdsa-04; which is in IETF LC; This
implementation is experimental at this time and not recommended
  for use on the public internet (the protocol numbers have not
  been assigned).  Needs recent ldns with --enable-ecdsa.
- fix memory leak in errorcase for DSA signatures.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2606 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-08 13:22:44 +00:00
wouter
05f82d8e99 - fix for windows, rename() is not posix compliant on windows.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2605 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-03 14:56:09 +00:00
wouter
6ca7eac6ef iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2604 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-02 09:47:02 +00:00
wouter
2d7d2aae07 trunk is 1.4.17 in development.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2603 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-02 09:21:11 +00:00
wouter
42066148e1 changelog.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2601 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-02 09:05:29 +00:00
wouter
23acd425f0 - Fix validation failures (like: validation failure xx: no NSEC3
closest encloser from yy for DS zz. while building chain of trust,
         because of a bug in the TTL-fix in 1.4.15, it picked the wrong rdata
         for an NSEC3.  Now it does not change rdata, and fixes TTL.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2599 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-01 11:18:07 +00:00
wouter
365d5a6792 - Fix version-number in libtool to be version-info so it produces
libunbound.so.2 like it should.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2598 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-01-30 08:46:25 +00:00
wouter
599ef77ce5 - applied patch to support outgoing-interface with ub_ctx_set_option.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2596 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-01-26 10:37:10 +00:00
wouter
8803d008fa tag 1.4.15, trunk is now 1.4.16 development.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2595 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-01-26 09:04:28 +00:00
wouter
4be1c7a6b9 fix memset in test code.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2593 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-01-23 10:51:57 +00:00
wouter
de4714806f fix bug #424.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2591 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-01-20 14:30:56 +00:00
wouter
50a47fc8b4 - Fix to write key files completely to a temporary file, and if that
succeeds, replace the real key file.  So failures leave a useful file.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2590 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-01-19 14:17:22 +00:00
wouter
5afeba0e96 add symbol.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2588 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-01-18 12:23:06 +00:00
wouter
ccf5139b0e tag 1.4.15rc1
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2587 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-01-18 12:09:18 +00:00
wouter
cc265b7ce4 - Fix bug where canonical_compare of RRSIG did not downcase the
signer-name.  This is mostly harmless because RRSIGs do not have
  to be sorted in canonical order, usually.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2586 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-01-17 09:06:18 +00:00
wouter
6369cf4aa2 fix changelog
svn:NO TEST


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2585 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-01-12 13:53:52 +00:00
wouter
11bd495b61 - Added ub_version(). API version increase, with (binary) backwards
compatibility for the previous version.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2584 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-01-12 13:52:38 +00:00
wouter
63cfba3607 - uninitialised variable in reprobe for rtt blocked domains fixed.
- lintfix and new flex output.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2583 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-01-10 15:07:16 +00:00
wouter
b00a290ff2 iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2582 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-01-10 09:42:55 +00:00
wouter
25fbc19b64 - Fix bug #425: unbound reports wrong TTL in reply, it reports a TTL
that would be permissible by the RFCs but it is not the TTL in the
  cache.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2581 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-01-10 09:42:32 +00:00
wouter
3911955af7 - Fix to randomize hash function, based on 28c3 congress, reported
by Peter van Dijk.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2580 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-01-02 13:16:18 +00:00
wouter
b87870dc07 iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2579 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-12-24 11:28:14 +00:00
wouter
40900e9e41 - Fix for memory leak (about 20 bytes when a tcp or udp send
operation towards authority servers failed, takes about 50.000
such failures to leak one Mb, such failures are also
usually logged), reported by Robert Fleischmann.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2578 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-12-24 11:27:53 +00:00
wouter
2e25dea379 - trunk has 1.4.15 in development.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2577 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-12-19 11:37:15 +00:00
wouter
50a8288ce6 - Fix for VU#209659 CVE-2011-4528: Unbound denial of service
vulnerabilities from nonstandard redirection and denial of existence
http://www.unbound.net/downloads/CVE-2011-4528.txt
- robust checks for next-closer NSEC3s.
- tag 1.4.14 created.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2574 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-12-19 10:55:32 +00:00
wouter
a4c3aed0f8 - Fix parse error on negative SOA RRSIGs if badly ordered in the packet.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2573 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-12-15 13:37:13 +00:00
wouter
6375c13714 - remove uninit warning from cachedump code.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2572 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-12-15 10:55:59 +00:00
wouter
9bf6080a27 - Fix to constrain signer_name to be a parent of the lookupname.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2571 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-12-13 12:37:47 +00:00
wouter
035362e901 fix infra cache comparison.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2570 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-12-13 12:14:40 +00:00
wouter
4fe2ce80c6 1.4.14rc1 tag.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2569 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-12-13 08:57:29 +00:00
wouter
b7690ed0fc iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2568 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-12-13 08:50:26 +00:00
wouter
44109b0eea changelog for malloc fix.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2565 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-12-05 15:38:41 +00:00
wouter
4f8880d6a5 - Fix warning unused in compat/strptime.c.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2563 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-12-05 14:59:24 +00:00
wouter
525b8dabe1 - Fix warnings with gcc 4.6 in compat/inet_ntop.c.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2562 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-12-05 14:25:01 +00:00
wouter
51976138fe - Fix getaddrinfowithincludes on windows with fedora16 mingw32-gcc.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2561 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-12-05 13:49:30 +00:00
wouter
c7b727654f configure generated with autoconf 2.68
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2560 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-12-02 13:43:24 +00:00
wouter
6e6171f9ae - Fix for tcp-upstream and ssl-upstream for if a laptop sleeps,
causes SERVFAILs.  Also fixed for UDP (but less likely).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2559 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-11-30 13:39:11 +00:00
wouter
333b54ae2a iana ports updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2558 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-11-28 14:59:41 +00:00
wouter
67f10a7c5f - Fix quartile time estimate, it was too low, (thanks Jan Komissar).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2557 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-11-28 14:22:29 +00:00
wouter
b6a8696c84 makefile compat, ports updated and remove unused substitutions.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2551 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-11-11 13:02:48 +00:00
wouter
a1f677fcac - Makefile changed for BSD make compatibility.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2544 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-11-10 18:44:06 +00:00
wouter
5b6c722315 unit test for SSL upstream.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2543 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-11-09 13:20:30 +00:00
wouter
99adf554e3 iana portlists updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2542 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-11-08 15:47:05 +00:00
wouter
f64162cd8e - Fix double free in unbound-host, reported by Steve Grubb.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2541 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-11-08 15:41:21 +00:00
wouter
c947a7e4e3 fixup windows compile with ssl support.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2540 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-11-08 14:27:16 +00:00
wouter
1b8de9916c ssl_port setting, so that the dnssec-trigger server can be on one host machine.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2539 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-11-08 10:56:42 +00:00
wouter
6523279008 - fix -flto detection on Lion for llvm-gcc.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2537 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-11-01 13:39:38 +00:00
wouter
e0ea207957 iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2534 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-11-01 09:54:57 +00:00
wouter
cf055b1d04 - documentation for new options: ssl-upstream, ssl-service-key and
ssl-service.pem.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2533 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-11-01 09:44:40 +00:00
wouter
a7ef3f7bc4 support for ssl-upstream (works from unbound-control).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2532 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-11-01 09:26:58 +00:00
wouter
1f9e9b78fe - dns over ssl support, ssl-service-pem and ssl-service-key files
can be given and then TCP queries are serviced wrapped in SSL.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2530 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-10-31 14:48:48 +00:00
wouter
089b0e1649 fix export_all_symbols on osx.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2529 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-10-27 11:14:17 +00:00
wouter
73b90266eb iana update and gzip compression.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2528 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-10-27 08:46:32 +00:00
wouter
3a4da9849c - lame-ttl and lame-size options no longer exist, it is integrated
with the host info.  They are ignored (with verbose warning) if
  encountered to keep the config file backwards compatible.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2527 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-10-27 08:33:02 +00:00
wouter
1827a3a42d fix iana update check for gzipped file.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2526 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-10-26 16:00:58 +00:00
wouter
8762da8720 infra cache consolidated and stores per zone, IP.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2525 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-10-26 15:46:23 +00:00
wouter
9b79cf1fe9 iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2524 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-10-26 09:49:14 +00:00
wouter
f33c5178d7 - Fix make_new_space function so that the incoming query is not
overwritten if a jostled out query causes a waiting query to be
  resumed that then fails and sends an error message.  (Thanks to
  Matthew Lee).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2523 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-10-24 13:49:59 +00:00
wouter
da47b4231b - Fix resolve of partners.extranet.microsoft.com with a fix for the
server selection for choosing out of a (particular) list of bad choices.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2522 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-10-24 08:34:59 +00:00
wouter
f7015af988 - fix --enable-allsymbols, fptr wlist is disabled on windows
with this option enabled because of memory layout exe vs dll.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2521 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-10-21 12:33:46 +00:00
wouter
c6ce2400a5 - Implement ipv6%interface notation for scope_id usage.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2519 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-10-19 14:34:11 +00:00
wouter
4b5380d06d detect if GOST works.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2518 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-10-19 13:18:25 +00:00
wouter
fda1776d96 fix strptime detection.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2513 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-10-19 12:16:41 +00:00
wouter
5e9f5cad61 - better documentation for inform_super (Thanks Yang Zhe).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2512 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-10-17 13:11:58 +00:00
wouter
a7f08f8023 - Fix for out-of-memory condition in libunbound (thanks Robert Fleischman).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2511 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-10-14 07:15:41 +00:00
wouter
8fbf229c4e changelog entry
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2510 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-10-13 14:11:27 +00:00
wouter
cc169527ff fix install name and fix error report by munin autoconf.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2508 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-10-12 08:37:15 +00:00
wouter
8a709e7c1e - updated contrib/unbound_munin_ to family=auto so that it works
with munin-node-configure automatically (if installed as
/usr/local/share/munin/plugins/unbound_ ).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2507 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-10-12 08:25:38 +00:00
matje
594c764863 revert dynlinking
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2506 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-10-10 08:56:23 +00:00
matje
2537bedab5 comment svn:NO TEST
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2505 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-10-06 08:58:55 +00:00
matje
2f8e3cb245 link unbound against unbound library
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2504 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-10-06 08:27:31 +00:00
wouter
9a28841410 unbound windows option to start and stop the service.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2503 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-09-27 13:22:04 +00:00
wouter
446aecff27 - TCP-upstream calculates tcp-ping so server selection works if there
are alternatives.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2502 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-09-23 12:56:28 +00:00
wouter
d4603fe66c - Fix classification of NS set in answer section, where there is a
parent-child server, and the answer has the AA flag for dir.slb.com.
  Thanks to Amanda Constant from Secure64.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2501 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-09-20 07:42:04 +00:00
wouter
fe21693eb9 - max sent count. EDNS1480 only for rtt < 5000. No promiscuous
fetch if sentcount > 3, stop query if sentcount > 16.  Count is
reset when referral or CNAME happens.  This makes unbound better
at managing large NS sets, they are explored when there is continued
interest (in the form of queries).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2499 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-09-16 14:11:12 +00:00
wouter
fac34aa3d7 - fix various compiler warnings (reported by Paul Wouters).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2497 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-09-16 11:35:01 +00:00
wouter
07375399e5 fix EDNS1480.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2496 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-09-16 10:04:08 +00:00
wouter
13d179ff41 iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2495 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-09-16 09:59:59 +00:00
wouter
30223a545a - fix bug #408: accept patch from Steve Snyder that comments out
unused functions in lookup3.c.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2494 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-09-16 07:09:11 +00:00
wouter
22e627c381 After UDP timeout EDNS1480 probe, stop fragmentation caused trouble.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2492 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-09-15 14:32:17 +00:00
wouter
292c480108 trunk has 1.4.14.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2491 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-09-15 08:54:25 +00:00
wouter
4ee8b1d0b4 tag 1.4.13rc2
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2489 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-09-12 11:58:29 +00:00
wouter
950c3c067c revert earlier commit.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2488 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-09-12 11:28:14 +00:00
wouter
c109a8828f - Fix operation in ipv6 only (do-ip4: no) mode.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2487 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-09-07 14:34:10 +00:00
wouter
8578cfa7d0 fedora specfile updated (from Paul Wouters).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2486 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-09-07 05:34:22 +00:00
wouter
3ebc76b1fb tag 1.4.13rc1
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2485 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-09-05 11:48:26 +00:00
wouter
58ae17c3cb iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2484 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-09-02 15:05:31 +00:00
wouter
97a89720c9 - Fix validation failures due to EDNS backoff retries, the retry
for fetch of data has want_dnssec because the iter_indicate_dnssec
         function returns true when validation failure retry happens, and
         then the serviced query code does not fallback to noEDNS, even if
         the cache says it has this.  This helps for DLV deployment when
         the DNSSEC status is not known for sure before the lookup concludes.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2483 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-08-26 09:00:43 +00:00
wouter
b35812d486 Fix numthreads 0 handling.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2482 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-08-26 06:50:23 +00:00
wouter
24291e9e6c - Applied patch from Karel Slany that fixes a memory leak in the
unbound python module, in string conversions.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2481 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-08-24 11:03:29 +00:00
wouter
a28362a7fc tcp upstream option.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2480 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-08-22 13:58:40 +00:00
wouter
532fa455ab - Documented the options that work with control set_option command.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2479 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-08-22 13:22:05 +00:00
wouter
2eb1b8dc1a - Fix that internally, CNAMEs with NXDOMAIN have that as rcode.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2478 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-08-22 12:11:54 +00:00
wouter
44008de0f5 Fix validation of qtype ANY responses with CNAMEs (thanks Cathy Zhang and Luo Ce).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2477 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-08-22 12:02:50 +00:00
wouter
13bd54fa64 Fix autoconf for makedist crosscompile RC or snapshot.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2476 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-08-18 16:01:42 +00:00
wouter
f92ad06062 iana portlist updated.
new xml format at iana.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2475 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-08-17 15:12:39 +00:00
wouter
56a4ca7adc - Fix validation of . DS query.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2474 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-08-17 14:28:32 +00:00
wouter
9ed763a49e - fix memory and fd leak after out-of-memory condition.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2473 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-08-10 14:03:06 +00:00
wouter
a4ed88a35a updated patch from Tom.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2472 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-08-10 07:37:57 +00:00
wouter
bd35b9c00a - Fix python site-packages path to /usr/lib64.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2471 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-08-10 06:05:09 +00:00
wouter
46d0aaf95c - patch from Tom Hendrikx fixes load of python modules.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2470 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-08-09 07:28:22 +00:00
wouter
4ecc0a8a0f - make clean had ldns-src reference, removed.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2469 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-08-08 13:17:37 +00:00
wouter
48049d7c1e Fix autoconf 2.68 warnings
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2467 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-08-01 11:14:33 +00:00
wouter
6e4c06a047 iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2466 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-07-14 09:10:26 +00:00
wouter
cba8c049f9 release 1.4.12 noted. 1.4.13 developed in svn trunk.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2465 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-07-14 08:33:12 +00:00
wouter
9dd4ca67ba - Unbound implements RFC6303 (since version 1.4.7).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2463 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-07-14 08:17:11 +00:00
wouter
ee3c3d5724 - Quick fix for contrib/unbound.spec example, no ldns-builtin
any more.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2462 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-07-13 12:17:13 +00:00
wouter
b05d47d4a5 - Fix wildcard expansion no-data reply under an optout NSEC3 zone is
validated as insecure, reported by Jia Li (lijia@cnnic.cn).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2461 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-07-11 09:03:18 +00:00
wouter
762ab77941 changelog entry tag.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2460 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-07-04 10:44:10 +00:00
wouter
7d4a3d270b - fix that --enable-static-exe does not complain about it unknown.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2458 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-07-01 08:58:34 +00:00
wouter
d3f9810a23 version number in example config file.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2457 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-07-01 07:12:08 +00:00
wouter
6536795e10 - removed ldns-src tarball inside the unbound tarball.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2447 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-06-30 12:59:27 +00:00
wouter
8b34270a58 - fix comment about rndc port, that referred to the old port number.
- fix that the listening socket is not closed when too many remote
  control connections are made at the same time.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2446 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-06-30 12:13:55 +00:00
wouter
9461231d6b - fix replyaddr count wrong after jostled queries, which leads to
eventual starvation where the daemon has no replyaddrs left to use.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2445 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-06-30 11:01:44 +00:00
wouter
4386a794eb fix bug#395: id bits of other query may leak out under conditions
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2444 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-06-30 09:42:20 +00:00
wouter
5cf7ccad78 iana portlist updated
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2443 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-06-30 09:10:53 +00:00
wouter
35d80338fb 1.4.12 in trunk and configure updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2442 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-06-30 08:56:56 +00:00
wouter
5e9ee74ac4 tag rc3
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2439 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-06-23 11:49:15 +00:00
wouter
ecceefa52e - Changed -flto check to support clang compiler.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2438 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-06-23 09:00:05 +00:00
wouter
41b53f7142 changelog
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2435 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-06-17 12:00:47 +00:00
wouter
b976d0e4b0 changelogentry
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2432 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-06-17 09:43:22 +00:00
wouter
ba1ecfe130 - version is 1.4.11.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2430 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-06-16 13:27:57 +00:00
wouter
307c9d186f - log-queries: yesno option, default is no, prints querylog.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2429 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-06-16 13:15:57 +00:00
wouter
aec4985fd6 iana portlist updated.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2428 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-06-14 09:01:45 +00:00
wouter
444efde101 - Use -flto compiler flag for link time optimization, if supported.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2427 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-06-14 08:39:53 +00:00
wouter
97ed63e801 IPv6 service address for d.root-servers.net (2001:500:2D::D)
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2426 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-06-12 09:51:00 +00:00
wouter
d86e061287 - statistics-interval prints the number of jostled queries to log.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2425 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-06-10 10:41:40 +00:00
wouter
fc57d8487c - unbound-control has version number in the header,
UBCT[version]_space_ is the header sent by the client now.
- Unbound control port number is registered with IANA:
  ub-dns-control  8953/tcp    unbound dns nameserver control
  This is the new default for the control-port config setting.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2424 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-06-10 10:11:38 +00:00
wouter
6423aaf904 updated ldns tarball.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2423 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-05-30 12:09:05 +00:00
wouter
f591686276 iana portlist updated
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2422 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-05-30 12:04:31 +00:00
wouter
15d433440f - Fix Makefile for U in environment, since wrong U is more common than
deansification necessity.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2421 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-05-30 11:52:14 +00:00
wouter
1cb1dc50d9 - defense in depth against the above bug, an error is printed to log
instead of an assertion failure.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2420 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-05-25 11:32:05 +00:00
wouter
8fd660253f 1.4.10 tag created.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2419 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-05-25 06:09:01 +00:00
wouter
f7ad48b8ca - Fix TTL of SOA so negative TTL is separately cached from normal TTL.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2416 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-05-10 12:34:47 +00:00