townforge/unbound
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
4,530 Commits 1 Branch 0 Tags 79 MiB
cc
Commit Graph

3214 Commits

Author SHA1 Message Date
wouter
6bc02a32b2 - Fix #787: outgoing-interface netblock/64 ipv6 option to use linux 
freebind to use 64bits of entropy for every query with random local
  part.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3804 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-07-04 14:51:30 +00:00
wouter
0e0b34e6bd - For #787: prefer-ip6 option for unbound.conf prefers to send 
upstream queries to ipv6 servers.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3803 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-07-04 14:49:49 +00:00
wouter
50ad32a3ef - Document always_transparent, always_refuse, always_nxdomain types. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3802 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-30 07:36:36 +00:00
wouter
f418ba48cb - Fix static compile on windows missing gdi32. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3801 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-29 11:22:57 +00:00
wouter
f541b61b81 - Create a pkg-config file for libunbound in contrib. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3800 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-28 12:04:09 +00:00
wouter
3be84daf12 - Fix #784: Build configure assumess that having getpwnam means there 
is endpwent function available.
- Updated repository with newer flex and bison output.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3799 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-27 08:00:55 +00:00
ralph
88e5f3d21d - Possibility to specify local-zone types for an acl/tag pair 
- Possibility to specify (override) local-zone types for a source address block


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3797 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-24 19:08:58 +00:00
ralph
3977c7c8fb - Decrease dp attempts at each QNAME minimisation iteration 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3796 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-16 11:57:20 +00:00
wouter
5650ce9e0d - Fix tcp timeouts in tv.usec. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3795 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-16 07:21:07 +00:00
wouter
01fc612798 - If more than half of tcp connections are in use, a shorter timeout 
is used (200 msec, vs 2 minutes) to pressure tcp for new connects.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3794 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-15 14:41:23 +00:00
wouter
67f97d9f9a - TCP_TIMEOUT is specified in milliseconds. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3793 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-15 14:23:43 +00:00
ralph
62d1c755b2 - QNAME minimisation unit test for dropped QTYPE=A queries. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3792 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-14 12:36:22 +00:00
wouter
3c93de7e26 - Fix 781: prealloc() is an HP-UX system library call. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3791 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-14 10:31:47 +00:00
wouter
2d05999b8a - Fix 780: MAP_ANON not defined in HP-UX 11.31. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3790 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-14 10:27:34 +00:00
wouter
1a60ed8616 - Fix 779: Union casting is non-portable. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3789 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-14 10:23:56 +00:00
wouter
e42f202dd8 - Fix windows link of ssl with crypt32. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3787 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-14 10:04:15 +00:00
wouter
5f565a4928 Fixup attribution 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3786 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-14 08:07:31 +00:00
wouter
a612caef3b - Fix spelling in freebind option man page text. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3785 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-14 08:07:15 +00:00
wouter
b213ce97a9 - Fix 775: unbound-host and unbound-anchor crash on windows, ignore 
null delete for wsaevent.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3784 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-14 07:23:08 +00:00
wouter
9054d5f8da - Fix directory: fix for unbound-checkconf, it restores cwd. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3783 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-13 13:33:51 +00:00
ralph
d1646a497f - Use QTYPE=A for QNAME minimisation. 
- Keep track of number of time-outs when performing QNAME minimisation.
  Stop minimising when number of time-outs for a QNAME/QTYPE pair is
  more than three.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3782 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-13 13:06:35 +00:00
wouter
02de89e03c - Fix #778: unbound 1.5.9: -h segfault (null deref). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3781 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-13 07:06:23 +00:00
wouter
da8d72df98 - document directory immediate fix and allow EXECUTABLE syntax in it 
on windows.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3779 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-10 13:37:14 +00:00
wouter
3fd4902251 - do not delete service.conf on windows uninstall. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3778 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-10 09:33:27 +00:00
wouter
d6e1cccdb5 - keep debug symbols in windows build. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3777 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-10 08:19:29 +00:00
wouter
b6b992de8e - In unbound.conf directory: dir immediately changes to that directory, 
so that include: file below that is relative to that directory.
  With chroot, make the directory an absolute path inside chroot.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3775 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-09 22:59:07 +00:00
wouter
6115c98c8b - And delete service.conf.shipped on uninstall. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3774 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-09 22:54:35 +00:00
wouter
0b83edfe75 - Fix that windows install will not overwrite existing service.conf 
file (and ignore gui config choices if it exists).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3772 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-09 14:51:42 +00:00
wouter
b2e1fbbaea - Revert fix for NetworkService account on windows due to breakage 
it causes.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3771 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-09 14:30:37 +00:00
wouter
5b61840c67 - Trunk is called 1.5.10 (with previous fixes already in there to 2 
june).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3770 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-09 12:18:43 +00:00
ralph
852ea8802a - Possibility to lookup local_zone regardless the taglist. 
- Added local_zone/taglist/acl unit test.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3767 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-07 14:31:30 +00:00
wouter
4f8df458fc - Improve threadsafety for openssl 0.9.8 ecdsa dnssec signatures. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3766 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-07 13:02:02 +00:00
ralph
e4444eecc9 - Lookup localzones by taglist from acl. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3764 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-07 08:36:19 +00:00
wouter
18feecde03 - Fix #773: Non-standard Python location build failure with pyunbound. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3763 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-07 08:18:20 +00:00
wouter
9a6e4de566 - free acl-tags, acltag-action and acltag-data config lists during 
initialisation to free up memory for more entries.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3761 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-06 14:57:24 +00:00
wouter
2bdc9222e3 - access-control-tag-action and access-control-tag-data config 
directives.
- make depend


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3759 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-06 13:47:24 +00:00
wouter
7384cd8c71 - local-zone-override config directive. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3758 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-06 10:00:25 +00:00
wouter
484c38a0a4 move define-tags before access-control-tag in example config 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3757 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-06 08:53:18 +00:00
wouter
814e9c1cfb better example config 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3755 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-06 08:41:23 +00:00
wouter
31df915761 - access-control-tag config directive. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3754 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-06 08:33:59 +00:00
wouter
80be34d8bd - Better help text from -h (from Ray Griffith). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3753 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-06 07:38:34 +00:00
wouter
fe7792c174 - Fix to not ignore return value of chown() in daemon startup. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3752 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-03 07:38:53 +00:00
wouter
4caa839785 - re-documented localzone tags in example.conf. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3751 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-02 15:07:10 +00:00
wouter
46159cbca8 - Fix (for 1.5.10): Fix unbound-anchor.exe file location defaults to 
Program Files with (x86) appended.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3750 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-02 15:03:44 +00:00
wouter
2fab3c5c80 - tag for release 1.5.9rc1. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3749 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-02 13:00:20 +00:00
wouter
7ef1ed776a - un-document localzone tags. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3747 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-02 12:13:30 +00:00
wouter
0a811103cb - Fix #752: retry resource temporarily unavailable on control pipe. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3746 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-02 09:34:43 +00:00
wouter
45728bf2c1 - Fix distinction between free and CRYPTO_free in dsa and ecdsa alloc. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3745 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-02 08:31:17 +00:00
wouter
d9ce73c79e - Fix libubound for edns optlist feature. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3744 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-02 07:17:38 +00:00
wouter
9504853b86 - and also generic edns options for upstream messages (and replies). 
after parse use edns_opt_find(edns.opt_list, LDNS_EDNS_NSID),
  to insert use edns_opt_append(edns, region, code, len, bindata) on
  the opt_list passed to send_query, or in edns_opt_inplace_reply.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3742 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-05-31 16:55:22 +00:00
wouter
f3d914e425 - generic edns option parse and store code. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3740 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-05-31 15:08:05 +00:00
wouter
fe7a6167dc - compat strsep implementation. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3738 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-05-31 12:27:41 +00:00
wouter
bcdf937a9d - Fix windows service to be created run with limited rights, as a 
network service account, from Mario Turschmann.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3734 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-05-31 11:41:49 +00:00
wouter
33fe81ab58 - Attempted fix for #765: _unboundmodule missing for python3. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3733 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-05-30 14:26:45 +00:00
wouter
1ad184b5e2 - Fix time in case answer comes from cache in ub_resolve_event(). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3732 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-05-30 12:48:11 +00:00
wouter
665f715789 - Fix #768: Unbound Service Sometimes Can Not Shutdown 
Completely, WER Report Shown Up.  Close handle before closing WSA.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3731 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-05-27 13:49:54 +00:00
wouter
d65265678e - Document write permission to directory of trust anchor needed. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3730 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-05-27 07:51:35 +00:00
wouter
3e16023c94 - Fix #770: Small subgroup attack on DH used in unix pipe on localhost 
if unbound control uses a unix local named pipe.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3729 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-05-27 06:50:49 +00:00
wouter
f43aba4792 - Updated patch from Charles Walker. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3728 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-05-26 06:49:44 +00:00
wouter
94815f49b2 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3727 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-05-24 13:10:29 +00:00
wouter
8caa2f8f76 - remove memory leak from lame-check patch. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3726 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-05-24 13:07:13 +00:00
wouter
ac4562081c - disable-dnssec-lame-check config option from Charles Walker. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3725 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-05-24 12:17:42 +00:00
wouter
5a63d01b42 - Fix #767: Reference to an expired Internet-Draft in 
harden-below-nxdomain documentation.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3724 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-05-23 12:51:55 +00:00
ralph
6f1a304b44 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3723 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-05-20 14:13:04 +00:00
ralph
c33ba2b2c4 - No QNAME minimisation fall-back for NXDOMAIN answers from DNSSEC signed zones. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3722 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-05-20 14:04:27 +00:00
wouter
05188b4fc8 - Fix #766: dns64 should synthesize results on timeout/errors. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3721 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-05-20 06:35:49 +00:00
wouter
e99c41d4b6 - Fix #761: DNSSEC LAME false positive resolving nic.club. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3720 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-05-18 14:09:12 +00:00
wouter
c5303b37ba - trunk updated with output of flex 2.6.0. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3719 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-05-17 15:01:24 +00:00
wouter
d03179e264 - Fix memory leak in out-of-memory conditions of local zone add. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3717 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-05-06 06:56:51 +00:00
wouter
706088d4fb - Fix sldns with static checking fixes copied from getdns. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3716 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-04-29 15:02:00 +00:00
wouter
510f53edb9 - Fix #759: 0x20 capsforid no longer checks type PTR, for 
compatibility with cisco dns guard.  This lowers false positives.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3715 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-04-28 07:24:50 +00:00
wouter
09da84af77 define-tag and local-zone-tag configuration. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3708 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-04-21 09:49:02 +00:00
wouter
d71745a17e - Fix some malformed reponses to edns queries get fallback to nonedns. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3701 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-04-18 11:56:55 +00:00
wouter
6fd683c0aa - cachedb module event handling design. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3700 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-04-15 14:19:00 +00:00
wouter
32bea2003b - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3699 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-04-14 14:55:29 +00:00
wouter
704a4a7c48 - cachedb module framework (empty). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3698 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-04-14 14:50:18 +00:00
wouter
018d9e9265 - Fix #753: document dump_requestlist is for first thread. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3697 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-04-12 15:10:31 +00:00
wouter
6fa4d6f2a8 - Fix #749: unbound-checkconf gets SIGSEGV when use against a 
malformatted conf file.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3696 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-24 12:30:47 +00:00
wouter
7824663801 - Document permit-small-holddown for 5011 debug. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3695 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-24 08:10:40 +00:00
wouter
7b6e5dd9c7 - OpenSSL 1.1.0 portability, --disable-dsa configure option. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3689 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-23 08:19:49 +00:00
wouter
bb32d6f82c - OPENSSL_config is deprecated, removing. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3688 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-21 11:44:03 +00:00
wouter
bcc54c168d - ERR_remove_state deprecated since openssl 1.0.0. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3687 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-21 11:38:50 +00:00
wouter
a75003f99b - acx_nlnetlabs.m4 to v34, with -ldl -pthread test for libcrypto. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3686 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-21 10:22:40 +00:00
wouter
cb943bad34 - Fix test for openssl to use HMAC_Update for 1.1.0. 
- acx_nlnetlabs.m4 to v33, with HMAC_Update.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3685 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-21 10:10:10 +00:00
wouter
094f0f5d8f - Fix dnstap-log-resolver-response-messages, from Nikolay Edigaryev. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3684 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-21 09:04:21 +00:00
wouter
3002991ef1 - Fix compile of getentropy_linux for SLES11 servicepack 4. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3683 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-21 08:25:03 +00:00
ralph
dfff30e7ee - Validate QNAME minimised NXDOMAIN responses. 
- If QNAME minimisation is enabled, do cache lookup for QTYPE NS in
   harden-below-nxdomain.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3682 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-18 15:44:41 +00:00
ralph
8061e51f9b - Limit number of QNAME minimisation iterations. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3681 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-17 14:44:41 +00:00
wouter
18e05e8afb - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3680 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-17 14:07:33 +00:00
wouter
4ecf673365 - Fix #746: Fix unbound sets CD bit on all forwards. 
If no trust anchors, it'll not set CD bit when forwarding to another
  server.  If a trust anchor, no CD bit on the first attempt to a
  forwarder, but CD bit thereafter on repeated attempts to get DNSSEC.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3679 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-17 14:01:59 +00:00
wouter
d6c8fc8e04 - Fix ip-transparent for ipv6 on FreeBSD, thanks to Nick Hibma. 
Attribute fix.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3678 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-16 08:33:30 +00:00
wouter
23eed13fbe - Fix ip-transparent for tcp on freebsd. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3676 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-16 08:13:25 +00:00
wouter
60d06dae7c - Fix ip-transparent for ipv6 on FreeBSD. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3675 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-16 07:20:35 +00:00
wouter
6960c1f306 And documentation. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3674 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-15 09:42:56 +00:00
wouter
cc92e91d47 - ip_freebind: yesno option in unbound.conf sets IP_FREEBIND for 
binding to an IP address while the interface or address is down.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3673 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-15 09:35:48 +00:00
wouter
c6f9086908 Fix compile for ub_event code with older libev. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3672 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-14 13:45:51 +00:00
wouter
bc104354fd - Fix warnings in ifdef corner case, older or unknown libevent. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3671 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-14 11:30:44 +00:00
wouter
74a2747178 - For test put free in pluggable api in parenthesis. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3670 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-11 13:54:08 +00:00
wouter
3a7bd99cf2 - No side effects in tolower() call, in case it is a macro. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3669 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-11 13:46:46 +00:00
wouter
f1fdb9c958 - Fix libev usage of dispatch return value. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3668 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-11 12:57:09 +00:00
wouter
6e15a6d9fa - Remove warning about unused parameter in event_pluggable.c. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3663 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-11 08:09:18 +00:00
wouter
c20ef7f2ae - Fixup backend2str for libev. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3660 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-10 14:39:48 +00:00
wouter
7470ecfdca - Fixup of compile fix for pluggable event API from P.Y. Adi Prasaja. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3659 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-10 12:54:35 +00:00
wouter
aaf1ed9f3f Reverted wrong fix. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3658 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-10 12:53:56 +00:00
wouter
a5c620d824 - Compile fix for pluggable event API from P.Y. Adi Prasaja. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3654 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-10 11:04:52 +00:00
wouter
edb30a7f74 - Updated L root IPv6 address. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3652 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-10 08:23:46 +00:00
wouter
a56db8244f - Updated configure and ltmain.sh. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3651 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-10 08:20:52 +00:00
wouter
3f127a5019 - iana ports fetched via https. 
- iana portlist updated.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3649 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-08 08:00:42 +00:00
wouter
e93f50f768 - Fix #747: assert in outnet_serviced_query_stop. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3646 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-07 10:00:08 +00:00
wouter
787cdd6edf - configure tests for the weak attribute support by the compiler. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3645 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-03 15:59:25 +00:00
wouter
fb81dd7f57 - Fix #745: unbound.py - idn2dname throws UnicodeError when idnname 
contains trailing dot. (Fix from Ralph)


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3644 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-02 08:18:38 +00:00
wouter
40fd246b09 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3643 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-02 08:16:35 +00:00
wouter
d32ae1efcf - 1.5.8 release tag 
- trunk contains 1.5.9 in development.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3642 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-02 08:15:05 +00:00
wouter
93773aa8b2 - Fix that NSEC3 negative cache is used when there is no salt. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3639 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-02-24 15:02:35 +00:00
wouter
f446519985 - Fix OpenBSD asynclook lock free that gets used later (fix test code). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3638 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-02-24 14:52:28 +00:00
wouter
0236d2de1a Documentation for the ub_ctx_set_stub function. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3635 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-02-23 13:12:08 +00:00
wouter
ee22e96f85 - sorted ubsyms.def file with exported libunbound functions. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3634 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-02-23 13:05:34 +00:00
wouter
ad524d32ce - ub_ctx_set_stub() function for libunbound to config stub zones. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3632 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-02-23 10:43:10 +00:00
wouter
135242a7b0 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3631 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-02-19 14:38:48 +00:00
wouter
811692e34b - load gost algorithm if digest is seen before key algorithm. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3630 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-02-19 12:17:03 +00:00
wouter
65be72159e - load gost algorithm into unbound-host. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3628 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-02-19 12:11:36 +00:00
wouter
71e764c00d - Print understandable debug log when unusable DS record is seen. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3627 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-02-19 10:48:23 +00:00
wouter
271b8da762 - Fix that "make install" fails due to "text file busy" error. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3626 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-02-17 15:51:57 +00:00
wouter
5ad82c4e0b - Set IPPROTO_IP6 for ipv6 sockets otherwise invalid argument error. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3625 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-02-17 08:02:32 +00:00
wouter
033c8fe770 - wait for sendto to drain socket buffers when they are full. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3624 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-02-15 09:54:52 +00:00
wouter
985d70f311 - ip-transparent option for FreeBSD with IP_BINDANY socket option. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3623 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-02-15 08:17:54 +00:00
wouter
1459ca9220 - insecure-lan-zones: yesno config option, patch from Dag-Erling 
Smørgrav.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3619 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-02-09 13:25:59 +00:00
wouter
431da7609c - Test for type OPENPGPKEY. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3618 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-02-09 08:45:09 +00:00
wouter
596bdef685 - RR Type OPENPGPKEY support (draft-ietf-dane-openpgpkey-07). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3617 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-02-08 16:13:03 +00:00
wouter
662ac80377 - RR Type CSYNC support RFC 7477, in debug printout and config input. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3615 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-02-08 15:37:17 +00:00
wouter
8bc70ac10b - Fix patch typo in prevuous commit for 734 from Adi Prasaja. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3614 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-02-08 08:17:00 +00:00
wouter
f3ab2837c5 - Neater cmdline_verbose increment patch from Edgar Pettijohn. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3613 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-01-29 08:06:51 +00:00
wouter
ac992dd71a - Fix #741: log message for dnstap socket connection is more clear. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3612 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-01-27 17:12:26 +00:00
wouter
bbb8e0a1ce - Made netbsd sendmsg test nonfatal, in case of false positives. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3610 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-01-27 07:44:47 +00:00
wouter
91faa15b6c - fix netbsd interface_automatic complain about unimplemented. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3609 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-01-26 16:14:28 +00:00
wouter
89de1bdd21 - Fix cmsg alignment for argument to sendmsg on NetBSD. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3608 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-01-26 14:11:39 +00:00
wouter
cea70916c3 - Use arc4random instead of random in tests (because it is 
available, possibly as compat, anyway).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3607 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-01-26 09:15:22 +00:00
wouter
88fbc332f2 - Fix #734: chown the pidfile if it resides inside the chroot. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3604 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-01-26 08:05:04 +00:00
wouter
8012eab87c - Fix #738: Swig should not be invoked with CPPFLAGS. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3603 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-01-25 08:07:50 +00:00
wouter
e00935abbe - Squelch 'cannot assign requested address' log messages unless 
verbosity is high, it was spammed after network down.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3602 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-01-19 15:37:54 +00:00
wouter
5bb6c20a70 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3601 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-01-14 08:33:54 +00:00
wouter
eb39bf4782 - Fix to simplify empty string checking from Michael McConville. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3600 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-01-14 08:28:46 +00:00
wouter
d3aae30ae8 - Fix #734: Do not log an error when the PID file cannot be chown'ed. 
Patch from Simon Deziel.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3599 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-01-12 08:04:42 +00:00
wouter
c231f7696b - Fix test if -pthreads unused to use better grep for portability. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3598 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-01-11 13:44:02 +00:00
wouter
f76f8d0bad - Update aclocal, autoconf output with new versions (1.15, 2.4.6). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3596 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-01-07 10:34:46 +00:00
wouter
b994ac0b73 - Fix mingw crosscompile for recent mingw. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3594 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-01-07 10:16:22 +00:00
wouter
276cb19fc7 - Support RFC7686: handle ".onion" Special-Use Domain. It is blocked 
by default, and can be unblocked with "nodefault" localzone config.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3593 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-01-05 14:02:45 +00:00
wouter
e0bfcab5cc - #731: tcp-mss, outgoing-tcp-mss options for unbound.conf, patch 
from Daisuke Higashi.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3591 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-01-05 10:03:59 +00:00
wouter
2d7be779da - Fixup contrib/aaaa-filter-iterator.patch for moved contents in the 
source code, so it applies cleanly again.  Removed unused variable
  warnings.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3589 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-01-04 10:47:29 +00:00
wouter
ec29bd9578 - Define DEFAULT_SOURCE together with BSD_SOURCE when that is defined, 
for Linux glibc 2.20.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3588 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-01-04 09:52:48 +00:00
ralph
8abfb7f8fc Fix #729: omit use of escape sequences in echo since they are not portable (unbound-control-setup) 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3587 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-12-15 11:00:59 +00:00
wouter
6d8913fae3 - OSX clang new flto check. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3586 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-12-11 13:35:09 +00:00
wouter
923d9c7627 - OSX clang, stop -pthread unused during link stage warnings. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3583 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-12-11 13:15:40 +00:00
wouter
ad02262a06 - OSX portability, detect if sbrk is deprecated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3582 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-12-11 12:44:44 +00:00
wouter
b3cc4d978c - updated ax_pthread.m4 to version 21 with clang support, this 
removes a warning from compilation.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3581 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-12-11 12:19:12 +00:00
wouter
f8e0e6c54c - remove NULL-checks before free, patch from Michael McConville. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3580 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-12-11 10:26:15 +00:00
wouter
c6559fcf91 - trunk has 1.5.8 in development. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3579 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-12-10 08:38:20 +00:00
wouter
443a795676 Fixup name. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3577 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-12-08 08:25:42 +00:00
wouter
11d11feed4 - Fixup 724 for unbound-control. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3576 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-12-08 08:15:55 +00:00
ralph
bc65e486f3 Don't minimise forwarded requests. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3575 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-12-07 15:56:47 +00:00
wouter
d41ae726e2 - Removed unneeded whitespace from example.conf. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3574 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-12-04 08:01:37 +00:00
wouter
2f658f9d90 Note changelog after rc1. 
3 December 2015: Ralph
  - (after rc1 tag)
  - Committed fix to qname minimisation and unit test case for it.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3572 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-12-03 13:40:16 +00:00
wouter
d62a92e737 1.5.7rc1 tag 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3569 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-12-03 13:35:17 +00:00
wouter
c4e4d751ae iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3567 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-12-03 08:10:33 +00:00
wouter
ccc68bf4ea - For 724: Add Changelog to windows binary dist. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3566 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-12-02 17:55:03 +00:00
wouter
9541f636e4 - Fixup 724: Fix PCA prompt for unbound-service-install.exe. 
re-enable stdout printout.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3565 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-12-02 09:40:05 +00:00
wouter
772f2040e0 undo pointless change. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3564 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-12-01 15:18:51 +00:00
wouter
e42114a1eb pointless change for test. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3563 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-12-01 14:55:27 +00:00
wouter
a6e8826899 - .gitignore for git users. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3562 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-12-01 14:36:21 +00:00
ralph
d19a47950a Qname minimisation review fixes 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3561 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-12-01 13:14:00 +00:00
wouter
cbcdb5be09 - Remove stdout printout for unbound-service-install.exe 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3560 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-12-01 13:00:57 +00:00
wouter
b930a3d234 - Fixup 724 fix for fname_after_chroot() calls. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3557 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-12-01 08:54:53 +00:00
ralph
481e89ca4c Implemented qname minimisation 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3554 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-11-30 16:10:26 +00:00
wouter
4b0a905a32 - Fix for #724: conf syntax to read files from run dir (on Windows). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3551 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-11-30 15:05:26 +00:00
wouter
22c51617c0 - Fix for #720, fix unbound-control-setup windows batch file. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3550 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-11-25 07:22:05 +00:00
wouter
d34d1951d6 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3549 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-11-24 11:01:26 +00:00
wouter
f6252ed1e9 - Fix #720: add windows scripts to zip bundle. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3548 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-11-24 10:55:18 +00:00
wouter
1d60e4519e - Fix that malformed EDNS query gets a response without malformed EDNS. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3546 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-11-20 09:09:55 +00:00
wouter
2435cecb6f - Added assert on rrset cache correctness. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3545 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-11-20 08:08:11 +00:00
wouter
33c3822724 - spelling fixes from Igor Sobrado Delgado. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3544 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-11-18 14:11:46 +00:00
wouter
aa25b5de3a - newer acx_nlnetlabs.m4. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3543 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-11-18 07:45:41 +00:00
wouter
9fa96d25a0 - Fixup DER encoded DSA signatures for libnettle. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3540 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-11-17 13:31:22 +00:00
wouter
43fa7f193d - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3538 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-11-17 11:41:05 +00:00
wouter
0a8bb72c5d - refactor nsec3 hash implementation to be more library-portable. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3535 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-11-17 11:30:04 +00:00
wouter
984f91d1b4 - Fix #594. libunbound: optionally use libnettle for crypto. 
Contributed by Luca Bruno.  Added --with-nettle for use with
  --with-libunbound-only.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3533 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-11-17 09:43:07 +00:00
wouter
34b59b59f4 - Fix for lenient accept of reverse order DNAME and CNAME. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3530 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-11-16 09:48:51 +00:00
wouter
93a7ac5af3 - Change example.conf: ftp.internic.net to https://www.internic.net 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3529 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-11-06 09:00:01 +00:00
wouter
ebfac40823 - ACX_SSL_CHECKS no longer adds -ldl needlessly. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3528 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-11-04 23:16:36 +00:00
wouter
858b388d38 - Fix #718: Fix unbound-control-setup with support for env 
without HEREDOC bash support.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3527 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-11-03 08:13:05 +00:00
wouter
34ac46080c - Fix #716: nodata proof with empty non-terminals and wildcards. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3526 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-10-29 13:08:15 +00:00
wouter
b7b759b22d - patch from Doug Hogan for SSL_OP_NO_SSLvx options. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3525 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-10-29 08:32:58 +00:00
wouter
9b650c901d - Fix checklock testcode for linux threads on exit. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3522 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-10-28 10:28:26 +00:00
wouter
30d1ef6307 - portability, replace snprintf if return value broken. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3518 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-10-27 13:47:50 +00:00
wouter
8f7160cebb changelog entry. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3517 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-10-27 12:06:03 +00:00
wouter
ec2efc9fbf - detect libexpat without xml_StopParser function. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3515 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-10-27 10:22:05 +00:00
wouter
0eccf8950d - isblank() compat implementation. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3514 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-10-27 09:52:16 +00:00
wouter
a3978d1c30 - Fix #714: Document config to block private-address for IPv4 
mapped IPv6 addresses.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3513 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-10-23 07:13:45 +00:00
wouter
00b44c3aa0 - Fix #712: unbound-anchor appears to not fsync root.key. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3512 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-10-22 07:06:31 +00:00
wouter
3de5fea61f - trunk tracks development of 1.5.7. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3511 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-10-20 14:01:54 +00:00
wouter
792710cf18 1.5.6rc1 release tag has been created 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3509 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-10-15 11:44:24 +00:00
wouter
f20f10dec4 - Fix ldns_wire2str_rdata_scan for malformed RRs. 
his line, and those below, will be ignored--

M    trunk/doc/Changelog
M    trunk/sldns/wire2str.c


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3507 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-10-15 09:51:30 +00:00
wouter
e31f10dda7 - Fix segfault in the dns64 module in the formaterror error path. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3506 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-10-15 09:02:01 +00:00
wouter
c666280ed1 - Fix manpage to suggest using SIGTERM to terminate the server. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3505 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-10-14 12:22:49 +00:00
wouter
1030490f5a - ANY responses include DNAME records if present, as per Evan Hunt's 
remark in dnsop.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3504 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-10-14 08:02:14 +00:00
wouter
d60f9800b2 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3503 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-10-09 08:08:31 +00:00
wouter
73ace4957c - Default for ssl-port is port 853, the temporary port assignment 
for secure domain name system traffic.
  If you used to rely on the older default of port 443, you have
  to put a clause in unbound.conf for that.  The new value is likely
  going to be the standardised port number for this traffic.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3502 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-10-09 07:55:21 +00:00
wouter
ad1097190e - trunk tracks the development of 1.5.6. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3500 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-10-06 09:57:08 +00:00
wouter
21001b4ca8 - makedist.sh: pgp sig echo commands. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3497 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-09-28 14:46:38 +00:00
wouter
adb3b2e503 prepare 1.5.5rc1 release. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3495 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-09-28 13:50:36 +00:00
wouter
18d55bcb86 - MAX_TARGET_COUNT increased to 64, to fix up sporadic resolution 
failures.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3494 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-09-28 07:21:48 +00:00
wouter
182c2d6cfb - Fix unbound-control flush that does not succeed in removing data. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3493 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-09-25 12:39:10 +00:00
wouter
2f41c1d568 - Fix unbound.conf(5) access-control description for precedence 
and default.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3492 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-09-22 13:04:53 +00:00
wouter
119aae5e4c - Fix minor error in unbound.conf.5.in 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3491 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-09-22 12:59:32 +00:00
wouter
d02e766e00 - testbound selftest also works in non-debug mode. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3490 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-09-22 09:52:17 +00:00
wouter
949509816f - Fix #705: ub_ctx_set_fwd() return value mishandled on windows. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3489 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-09-22 08:59:10 +00:00
wouter
553bf1df1e - Remove confusion comment from canonical_compare() function. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3488 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-09-22 08:43:56 +00:00
wouter
52a96d6510 - Fix #702: New IPs for for h.root-servers.net. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3487 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-09-22 08:35:03 +00:00
wouter
07b5c17bd3 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3486 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-09-22 08:04:45 +00:00
wouter
73d2ca61bf - Fix config globbed include chroot treatment, this fixes reload of 
globs (patch from Dag-Erling Smørgrav).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3485 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-09-22 08:04:19 +00:00
wouter
f9de753734 - changed windows setup compression to be more transparent. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3484 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-08-31 07:44:36 +00:00
wouter
9f1c38eeb4 - Feature #699: --enable-pie option to that builds PIE binary. 
- Feature #700: --enable-relro-now option that enables full read-only
  relocation.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3483 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-08-28 14:27:03 +00:00
wouter
39fee4ebb1 - Fix #697: Get PY_MAJOR_VERSION failure at configure for python 
2.4 to 2.6.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3480 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-08-28 06:56:27 +00:00
wouter
8230d6dc08 - Change default of harden-algo-downgrade to off. This is lenient 
for algorithm rollover.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3478 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-08-24 15:05:10 +00:00
wouter
095bbe40db - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3477 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-08-24 12:52:40 +00:00
wouter
1116189f7a - Fix deadlock for local data add and zone add when unbound-control 
list_local_data printout is interrupted.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3476 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-08-24 10:49:28 +00:00
wouter
dcb7d29d76 - Reap the child process that libunbound spawns. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3473 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-08-13 14:17:44 +00:00
wouter
7fc17c9a1f - 5011 implementation does not insist on all algorithms, when 
harden-algo-downgrade is turned off.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3471 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-08-13 12:03:53 +00:00
wouter
a3a0e0e274 - Fix #694: configure script does not detect LibreSSL 2.2.2 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3470 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-08-11 07:32:35 +00:00
wouter
23cd117f74 - Document that local-zone nodefault matches exactly and transparent 
can be used to release a subzone.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3468 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-08-04 07:10:26 +00:00
wouter
f242323707 - Fix mktime in unbound-anchor not using UTC. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3467 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-08-03 15:00:56 +00:00
wouter
7396d00ba0 - Fix 5011 anchor update timer after reload. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3466 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-08-03 11:56:37 +00:00
wouter
f6965de1e8 - Document in the manual more text about configuring locally served 
zones.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3465 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-08-03 10:34:29 +00:00
wouter
c58e83c3e1 - Added permit-small-holddown config to debug fast 5011 rollover. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3462 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-07-30 11:52:12 +00:00
wouter
59859f00f0 - please afl-gcc (llvm) for uninitialised variable warning. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3461 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-07-30 08:51:51 +00:00
wouter
7faeaaf3ed - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3459 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-07-24 11:54:08 +00:00
wouter
fbd9cf712d - Fix #690: Reload fails when so-reuseport is yes after changing 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3456 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-07-24 07:02:14 +00:00
wouter
8ab8309710 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3455 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-07-21 14:52:53 +00:00
wouter
7f99e7c795 - Fix configure to detect SSL_CTX_set_ecdh_auto. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3453 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-07-21 14:30:49 +00:00
wouter
e00efba037 - Enable ECDHE for servers. Where available, use 
SSL_CTX_set_ecdh_auto() for TLS-wrapped server configurations to
  enable ECDHE.  Otherwise, manually offer curve p256.
  Client connections should automatically use ECDHE when available.
  (thanks Daniel Kahn Gillmor)


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3452 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-07-20 06:56:01 +00:00
willem
221499af71 SSL_CTX_use_certificate_chain_file() should be used instead of the 
SSL_CTX_use_certificate_file() function in order to allow the use of
complete certificate chains even when no trusted CA storage is used or
when the CA issuing the certificate shall not be added to the trusted
CA storage.

Thanks Daniel Kahn Gillmore


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3451 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-07-18 12:34:37 +00:00
wouter
85d4c6ee70 - makedist produces sha1 and sha256 files for created binaries too. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3448 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-07-13 07:53:53 +00:00
wouter
4ae9e5a7cd - Fix #681: Setting forwarders with unbound-control forward 
implicitly turns on forward-first.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3447 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-07-09 09:45:08 +00:00
wouter
64a7f637f5 trunk has 1.5.5 in development. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3446 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-07-09 09:40:12 +00:00
wouter
27ff1a703c - Fix alloc with log for allocation size checks. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3442 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-06-29 10:19:42 +00:00
wouter
5bb325336a - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3440 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-06-29 07:09:04 +00:00
wouter
50b357376a - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3436 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-06-26 07:33:03 +00:00
wouter
8c62cad20d - Fix #677 Fix DNAME responses from cache that failed internal chain 
test.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3435 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-06-26 07:27:32 +00:00
wouter
9ee8380800 - Fix #677 Fix CNAME corresponding to a DNAME was checked incorrectly 
and was therefore always synthesized (thanks to Valentin Dietrich).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3434 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-06-22 09:23:43 +00:00
wouter
0e8b1e0111 - RFC 7553 RR type URI support, is now enabled by default. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3433 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-06-04 12:30:29 +00:00
wouter
0ad11968be - Fix #674: Do not free pointers given by getenv. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3432 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-06-02 07:31:43 +00:00
wouter
916b3a305d - SOA negative TTL is capped at minimumttl in its rdata section. 
- cache-max-negative-ttl config option, default 3600.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3431 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-05-29 14:51:36 +00:00
wouter
1c536612d7 - Fix that unparseable error responses are ratelimited. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3429 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-05-29 09:27:42 +00:00
wouter
5a5fb60def - Document that ratelimit works with unbound-control set_option. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3428 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-05-26 09:18:21 +00:00
wouter
6e918c13bf - documentation proposes ratelimit of 1000 (closer to what upstream 
servers expect from us).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3427 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-05-21 12:06:41 +00:00
wouter
9c69d25180 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3426 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-05-21 07:29:42 +00:00
wouter
c17574c81a - DLV is going to be decommissioned. Advice to stop using it, and 
put text in the example configuration and man page to that effect.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3424 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-05-20 06:24:06 +00:00
wouter
97ffe64ba3 - Change syntax of particular validator error to be easier for 
machine parse, swap rrset and ip adres info so it looks like:
  validation failure <www.example.nl. TXT IN>: signature crypto
  failed from 2001:DB8:7:bba4::53 for <*.example.nl. NSEC IN>


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3422 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-05-10 12:04:22 +00:00
wouter
a2f75d6c35 - caps-whitelist in unbound.conf allows whitelist of loadbalancers 
that cannot work with caps-for-id or its fallback.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3420 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-05-01 12:36:16 +00:00
wouter
c2ba182678 - Unit test for type ANY synthesis. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3419 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-30 10:27:27 +00:00
wouter
c309b27814 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3408 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-22 08:19:12 +00:00
wouter
258d561704 - Removed contrib/unbound_unixsock.diff, because it has been 
integrated, use control-interface: /path in unbound.conf.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3407 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-22 08:03:34 +00:00
wouter
9763997a7c - Synthesize ANY responses from cache. Does not search exhaustively, 
but MX,A,AAAA,SOA,NS also CNAME.
- Fix leaked dns64prefix configuration string.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3405 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-17 14:58:07 +00:00
wouter
a8a47f27dd #664: Fix issue with Python 3 mapping of FILE* using file_py3.i from ldns. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3403 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-16 14:41:14 +00:00
wouter
18a2a40a6b #664: libunbound-Python: libldns is not used anymore. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3402 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-16 14:38:38 +00:00
wouter
093ff749cc #664: libunbound examples: produce sorted output. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3401 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-16 14:37:12 +00:00
wouter
32aa5c4d0b - Fix bug#664: libunbound python3 related fixes (from Tomas Hozza) 
Use print_function also for Python2.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3400 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-16 14:35:55 +00:00
wouter
f77c2a06f1 - Ratelimit does not apply to prefetched queries, and ratelimit-factor 
is default 10.  Repeated normal queries get resolved and with
  prefetch stay in the cache.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3399 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-16 14:18:50 +00:00
wouter
31a8018d22 - Add local-zone type inform_deny, that logs query and drops answer. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3398 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-16 08:23:06 +00:00
wouter
33a25461fa manpage for ratelimit_list 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3397 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-10 14:07:25 +00:00
wouter
7f56755943 - Fix#663: ssl handshake fails when using unix socket because dh size 
is too small.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3396 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-10 13:56:12 +00:00
wouter
15ef4ccca1 - Fix that get_option for cache-sizes does not print double newline. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3395 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-10 13:43:44 +00:00
wouter
79c9a936cb - unbound-control ratelimit_list lists high rate domains. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3393 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-10 12:13:59 +00:00
wouter
d5e5296e40 Fixes. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3392 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-10 10:57:25 +00:00
wouter
7062b00d0b - ratelimit feature, ratelimit: 100, or some sensible qps, can be 
used to turn it on.  It ratelimits recursion effort per zone.
  For particular names you can configure exceptions in unbound.conf.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3391 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-10 09:59:57 +00:00
wouter
5b8cd39902 - Fix crash in dnstap: Do not try to log TCP responses after timeout. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3390 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-08 19:58:06 +00:00
wouter
0557760286 - unbound-control list_insecure command shows the negative trust 
anchors currently configured, patch from Jelte Jansen.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3389 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-07 13:50:09 +00:00
wouter
f420142028 typo fix. 
(svn:NO TEST)


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3388 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-07 12:10:37 +00:00
wouter
ba41e16d3c - Unbound exits with a fatal error when the auto-trust-anchor-file 
fails to be writable.  This is seconds after startup.  You can
  load a readonly auto-trust-anchor-file with trust-anchor-file.
  The file has to be writable to notice the trust anchor change,
  without it, a trust anchor change will be unnoticed and the system
  will then become unoperable.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3387 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-07 12:03:05 +00:00
wouter
73c16202a0 - Libunbound skips dos-line-endings from etc/hosts. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3384 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-07 07:51:43 +00:00
wouter
edc6c2102e - Fix #660: Fix interface-automatic broken in the presence of 
asymmetric routing.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3383 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-02 10:02:01 +00:00
wouter
410ac6cd67 - rename ldns subdirectory to sldns to avoid name collision. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3380 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-26 10:21:38 +00:00
wouter
2672fe9ea9 - remote.c probedelay line is easier to read. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3379 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-26 09:46:06 +00:00
wouter
6d0f96673d - If unknown trust anchor algorithm, and libressl is used, error 
message encourages upgrade of the libressl package.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3378 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-25 16:04:05 +00:00
wouter
ca0b049109 - Fix #657: libunbound(3) recommends deprecated 
CRYPTO_set_id_callback.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3377 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-25 08:06:35 +00:00
wouter
d8e38074d4 - Fix segfault on user not found at startup (from Maciej Soltysiak). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3375 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-23 20:20:15 +00:00
wouter
d1bf57dfd1 - Fixes to add integer overflow checks on allocation (defense in depth). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3372 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-20 15:36:25 +00:00
wouter
6478a1cbfd - Add ip-transparent config option for bind to non-local addresses. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3369 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-19 09:50:35 +00:00
wouter
9f56dc9102 - Use reallocarray for integer overflow protection, patch submitted 
by Loganaden Velvindron.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3365 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-17 08:24:24 +00:00
wouter
653053c1f9 - Fixup compile on cygwin, more portable openssl thread id. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3362 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-16 10:51:32 +00:00
wouter
2fae92734c - Updated default keylength in unbound-control-setup to 3k. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3361 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-12 15:34:03 +00:00
wouter
9f96c2b6be - Fix warning on sign compare in getentropy_linux. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3360 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-10 10:29:55 +00:00
wouter
2e18cfb209 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3359 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-10 10:17:45 +00:00
wouter
8df8b4f32e print svnroot for windows makedist. 1.5.4 in configure.ac 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3358 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-10 10:03:45 +00:00
wouter
8fbbf04b40 - Fix lintian warning in unbound-checkconf man page (from Andreas 
Schulze).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3356 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-10 08:00:40 +00:00
wouter
d6893f2e8c - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3355 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-09 13:39:27 +00:00
wouter
5a4a7863b6 - Fix #644: harden-algo-downgrade option, if turned off, fixes the 
reported excessive validation failure when multiple algorithms
  are present.  It allows the weakest algorithm to validate the zone.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3354 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-09 13:30:37 +00:00
wouter
4d50899043 - stats reports tcp usage, of incoming-num-tcp buffers. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3353 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-05 15:23:14 +00:00
wouter
78eba96a8b - Document that incoming-num-tcp increase is good for large servers. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3352 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-05 11:41:29 +00:00
wouter
d8b346e409 - contrib/unbound_smf22.tar.gz: Solaris SMF installation/removal 
scripts.  Contributed by Yuri Voinov.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3351 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-05 08:18:59 +00:00
wouter
1024b260d8 - Document windows 8 tests. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3350 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-04 13:24:27 +00:00
wouter
798e778410 - store caps_response with best response in case downgrade response 
happens to be the last one.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3348 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-04 09:31:26 +00:00
wouter
a0c81b8339 - many nameservers does not try to compare more than max-sent-count, 
parse failures start 0x20 fallback procedure.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3347 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-04 09:06:05 +00:00
wouter
2c4190b319 - 0x20 fallback improved, better handling of servfail responses, 
they do not count as missing comparisons (except if all are failed),
  and better handling of inability to find nameservers, no more
  nameservers can be found results in fallback acceptance.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3346 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-04 08:30:17 +00:00
wouter
279f75db29 - Patch from Brad Smith that syncs compat/getentropy_linux with 
OpenBSD's version (2015-03-04).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3345 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-04 07:18:09 +00:00
wouter
00e9db6ccf - tag 1.5.3rc1 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3344 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-03 13:37:53 +00:00
wouter
aa16f669d5 iana portlist update 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3342 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-02 11:03:14 +00:00
wouter
3233c052fe - Fix #647 crash in 1.5.2 because pwd.db no longer accessible after 
reload.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3341 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-02-20 14:48:04 +00:00
wouter
d42f4ad137 - Fix #646 Portability to Solaris, -lrt for getentropy_solaris. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3340 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-02-20 14:03:41 +00:00
wouter
a4674309ba - Portability to Solaris 10, use AF_LOCAL. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3339 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-02-20 13:55:09 +00:00
wouter
98d9836bb9 - Use the getrandom syscall introduced in Linux 3.17 (from Heiner Kallweit). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3338 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-02-20 09:19:32 +00:00
wouter
fe7698cc6a - 1.5.2 release tag. 
- svn trunk contains 1.5.3 under development.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3337 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-02-19 15:16:40 +00:00
wouter
f37eaf65ad - Fix #643: doc/example.conf.in: unnecessary whitespace. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3335 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-02-13 11:02:46 +00:00
wouter
f6f1839628 - tag 1.5.2rc1 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3334 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-02-12 15:33:20 +00:00
wouter
14726c8248 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3331 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-02-11 07:24:57 +00:00
wouter
62bd0e84f6 - Fix scrubber with harden-glue turned off to reject NS (and other 
not-address) records.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3330 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-02-10 14:01:45 +00:00
wouter
16b3909f91 - Fix validation failure in case upstream forwarder (ISC BIND) does 
not have the same trust anchors and decides to insert unsigned NS
  record in authority section.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3329 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-02-09 11:44:46 +00:00
wouter
6856b6a202 - infra-cache-min-rtt patch from Florian Riehm, for expected long 
uplink roundtrip times.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3328 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-02-02 08:46:22 +00:00
wouter
10e38ef90d - Portability fix for Solaris ('sun' is not usable for a variable). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3326 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-30 15:32:59 +00:00
wouter
674e12318a - Fix 0x20 capsforid fallback to omit gratuitous NS and additional 
section changes.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3323 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-30 09:35:38 +00:00
wouter
ff2cccec3d - Fix pyunbound byte string representation for python3. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3322 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-29 16:10:51 +00:00
wouter
f8c9f95aa9 - Fix unintended use of gcc extension for incomplete enum types, 
compile with pedantic c99 compliance (from Daniel Dickman).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3321 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-26 08:46:40 +00:00
wouter
5154b3406d - windows port fixes, no AF_LOCAL, no chown, no chmod(grp). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3319 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-23 15:23:58 +00:00
wouter
14416f4ca0 - unbound-checkconf -f prints chroot with pidfile path. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3316 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-16 14:31:02 +00:00
wouter
de842e85fe - unit test for local unix connection. Documentation and log_addr 
does not inspect port for AF_LOCAL.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3315 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-16 13:11:07 +00:00
wouter
b5373c8c4b iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3314 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-13 13:46:48 +00:00
wouter
84bdd4e765 - Fix pyunbound ord call, portable for python 2 and 3. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3313 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-12 15:20:20 +00:00
wouter
a5bed77fec - Cast sun_len sizeof to socklen_t. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3312 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-12 08:20:43 +00:00
wouter
cca6635a06 - Fix warnings in pythonmod changes. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3311 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-07 09:29:59 +00:00
wouter
d0b507bcdf fix attribution. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3310 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-07 07:49:46 +00:00
wouter
dd182a058c - coded the default of control-use-cert, to yes. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3309 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-06 14:54:38 +00:00
wouter
b4fd8fe3d7 - Fixup that patch and uid lookup (only for daemon). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3306 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-06 14:37:45 +00:00
wouter
9537cdfccf - patch for remote control over local sockets, from Dag-Erling 
Smorgrav, Ilya Bakulin.  Use control-interface: /path/sock and
  control-use-cert: no.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3304 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-06 14:12:59 +00:00
wouter
c2b7d31586 iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3303 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-06 08:02:41 +00:00
wouter
9d84c30040 - Patch from Philip Paeps to contrib/unbound_munin_ that uses 
type ABSOLUTE.  Allows munin.conf: [idleserver.example.net]
  unbound_munin_hits.graph_period minute


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3301 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-05 14:47:52 +00:00
wouter
ace7f8322b - Updated contrib warmup.cmd/sh to support two modes - load 
from pre-defined list of domains or (with filename as argument)
  load from user-specified list of domains, and updated contrib
  unbound_cache.sh/cmd to support loading/save/reload cache to/from
  default path or (with secondary argument) arbitrary path/filename,
  from Yuri Voinov.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3300 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-05 13:58:51 +00:00
wouter
632dac1f66 attribution. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3299 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-05 13:53:52 +00:00
wouter
a1a735dcde - Fix #634: fix fail to start on Linux LTS 3.14.X, ignores missing 
IP_MTU_DISCOVER OMIT option.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3298 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-05 13:51:22 +00:00
wouter
74d2262084 - patch from Brad Smith that fixes DESTDIR in unbound-control-setup 
for installs where config is not in the prefix location.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3297 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-05 13:20:04 +00:00
wouter
ad9a0833fe - print query name when max target count is exceeded. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3296 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-05 13:12:42 +00:00
wouter
5d02af5460 - patch from Stephane Lapie that adds to the python API, that 
exposes struct delegpt, and adds the find_delegation function.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3295 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-05 10:16:36 +00:00
wouter
502bdd5a3e - make strip works for unbound-host and unbound-anchor. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3294 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-05 09:33:31 +00:00
wouter
a3582f1bf5 - getauxval test for ppc64 linux compatibility. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3293 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-05 09:13:32 +00:00
wouter
b1061c10c8 - local-zone: example.com inform makes unbound log a message with 
client IP for queries in that zone.  Eg. for finding infected hosts.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3292 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-12-09 11:29:17 +00:00
wouter
e3a81d824f - svn trunk has 1.5.2 in development. 
- config.guess and config.sub update from libtoolize.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3291 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-12-09 08:24:27 +00:00
wouter
c89cf11661 - Fix CVE-2014-8602: denial of service by making resolver chase 
endless series of delegations.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3289 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-12-08 15:09:18 +00:00
wouter
0137e92031 - Fix bug#632: unbound fails to build on AArch64, protects 
getentropy compat code from calling sysctl if it is has been removed.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3287 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-12-02 00:19:42 +00:00
wouter
10095fe0dd - Add include to getentropy_linux.c, hopefully fixing debian build. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3286 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-30 02:00:29 +00:00
wouter
52f9c2bd44 - Fix makefile for build from noexec source tree. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3285 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-28 20:28:38 +00:00
wouter
f41c40ff4b Fix attribution and mention company (no restriction on use). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3282 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-27 10:54:05 +00:00
wouter
4b9ef41aee - Fix libunbound undefined symbol errors for main. 
Referencing main does not seem to be possible for libunbound.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3280 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-26 16:18:53 +00:00
wouter
d8e8de4760 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3279 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-24 08:46:24 +00:00
wouter
1af7cc2ff3 - Fix log at high verbosity and memory allocation failure. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3278 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-24 08:17:45 +00:00
wouter
02f99bb274 - Fix crash on multiple thread random usage on systems without 
arc4random.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3277 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-21 08:22:18 +00:00
wouter
95de7e9b8f - fix compat/getentropy_win.c check if CryptGenRandom works and no 
immediate exit on windows.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3276 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-20 12:44:00 +00:00
wouter
f9213eaf93 - Fix cdflag dns64 processing. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3275 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-19 08:43:08 +00:00
wouter
1100adad50 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3274 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-18 15:16:25 +00:00
wouter
0778829809 - Fix that CD flag disables DNS64 processing, returning the DNSSEC 
signed AAAA denial.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3273 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-18 15:15:57 +00:00
wouter
d437febed1 - Fix #627: SSL_CTX_load_verify_locations return code not properly 
checked.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3271 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-17 08:10:49 +00:00
wouter
12e488a497 - parser with bison 2.7 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3270 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-14 15:59:30 +00:00
wouter
e550629a45 - Patch from Stephanie Lapie that implements aaaa-filter, added 
to contrib/aaaa-filter-iterator.patch.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3269 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-13 09:03:47 +00:00
wouter
dfa131be35 - trunk has 1.5.1 in development. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3268 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-12 21:17:12 +00:00
wouter
a1cf7d3817 - Patch from James Raftery, always print stats for rcodes 0..5. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3267 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-12 17:25:59 +00:00
wouter
f203aa89f4 - Removed 'increased limit open files' log message that is written 
to console.  It is only written on verbosity 4 and higher.
  This keeps system bootup console cleaner.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3266 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-12 11:04:43 +00:00
wouter
5072f3026d - Patch from Robert Edmonds fixes hyphens in unbound-anchor man page. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3265 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-12 11:00:31 +00:00
wouter
dc2c95d2fd - Patch from Robert Edmonds to build pyunbound python module 
differently.  No versioninfo, with -shared and without $(LIBS).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3264 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-12 10:58:33 +00:00
wouter
4f7379b3e9 - review fix from Ralph. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3262 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-11 14:27:35 +00:00
wouter
8cd66c6e1d tag 1.5.0rc1 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3260 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-11 14:18:32 +00:00
wouter
8af379fd54 - version number in svn trunk is 1.5.0 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3259 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-11 13:23:50 +00:00
wouter
21c836d58c - Fix bug where forward or stub addresses with same address but 
different port number were not tried.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3258 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-11 13:10:44 +00:00
wouter
2a9d58f060 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3257 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-11 09:32:30 +00:00
wouter
f4aefeec79 - dnstap fixes by Robert Edmonds: 
dnstap/dnstap.m4: cosmetic fixes
	dnstap/: Remove compiled protoc-c output files
	dnstap/dnstap.m4: Error out if required libraries are not found
	dnstap: Fix ProtobufCBufferSimple usage that is incorrect as of
		protobuf-c 1.0.0
	dnstap/: Adapt to API changes in latest libfstrm (>= 0.2.0)


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3254 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-07 09:09:04 +00:00
wouter
887c850601 - Redefine internal minievent symbols to unique symbols that helps 
linking on platforms where the linker leaks names across modules.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3252 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-04 14:04:37 +00:00
wouter
cd08165992 - Add ub_ctx_add_ta_autr function to add a RFC5011 automatically 
tracked trust anchor to libunbound.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3251 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-04 09:11:59 +00:00
wouter
9f6a5bcfc8 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3249 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-10-27 09:54:44 +00:00
wouter
6128ac971e - Disabled use of SSLv3 in remote-control and ssl-upstream. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3248 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-10-27 09:26:48 +00:00
wouter
6f6226da8b Layout improvement of the nroff source. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3247 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-10-16 09:45:11 +00:00
wouter
4644ef143c - Documented dns64 configuration in unbound.conf man page. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3246 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-10-16 09:37:56 +00:00
wouter
e45a08b6f8 - Fix ctype invocation casts. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3241 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-10-13 08:22:34 +00:00
wouter
2145d24107 - Fix #617: in ldns in unbound, lowercase WKS services. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3240 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-10-13 07:11:16 +00:00
wouter
88f1956519 - Fix unbound capsforid fallback, it ignores TTLs in comparison. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3239 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-10-10 14:12:17 +00:00
wouter
6f6571c83f - Fix unbound-checkconf check for module config with dns64 module. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3238 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-10-10 07:07:58 +00:00
wouter
192cc2581b and name, of course 
(svn:NO TEST)


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3237 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-10-06 12:49:08 +00:00
wouter
168bfe9373 changelog update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3236 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-10-06 12:35:02 +00:00
wouter
ab9873d79c - Fix #614: man page variable substitution bug. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3234 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-10-06 07:42:42 +00:00
wouter
9931c82271 - fix #613: Allow tab ws in var length last rdfs (in ldns str2wire). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3233 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-10-01 08:11:42 +00:00
wouter
0f23452b2a - Fix #612: create service with service.conf in present directory and 
auto load it.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3232 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-09-29 09:27:22 +00:00
wouter
4f49e724d7 - updated configure and aclocal with newer autoconf 1.13. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3229 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-09-25 11:45:32 +00:00
wouter
ef10fe913b - Fix for mingw compile with openssl-1.0.1i. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3228 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-09-22 12:20:20 +00:00
wouter
5355258872 - Fix swig and python examples for Python 3.x. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3227 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-09-22 11:39:00 +00:00
wouter
607e515f5f - improve python configuration detection to build on Fedora 22. 
from Pavel Simerda.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3226 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-09-19 09:57:20 +00:00
wouter
31bb511274 - patches to also build with Python 3.x (from Pavel Simerda). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3225 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-09-18 13:28:21 +00:00
wouter
7383fe8a62 - Updated the TCP_BACLOG from 5 to 256, so that the tcp accept queue 
is longer and more tcp connections can be handled.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3224 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-09-16 13:49:21 +00:00
wouter
88e8ec11a6 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3223 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-09-16 13:08:38 +00:00
wouter
7352e5d7cc - Fix tcp timer waiting list removal code. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3222 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-09-16 13:08:27 +00:00
wouter
1ed44e7004 - Fix unit test for CDS typecode. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3221 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-09-15 12:49:37 +00:00
wouter
cac1443688 - type CDS and CDNSKEY types in sldns. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3220 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-09-05 09:25:31 +00:00
wouter
780855ae76 - Removed necessity for pkg-config from the dnstap.m4, new are 
the --with-libfstrm and --with-protobuf-c configure options.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3216 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-08-25 13:04:32 +00:00
wouter
ff0382b5f0 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3215 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-08-25 12:05:52 +00:00
wouter
28dd736029 - Fixup checklock code for log lock and its mutual initialization 
dependency.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3214 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-08-25 12:00:30 +00:00
wouter
c3144ef1ec - Update unbound manpage with more explanation (from Florian Obser). 
- Removed .LP after .SH.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3212 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-08-19 10:32:17 +00:00
wouter
49fbea259b - Fixup doc/unbound.doxygen to remove obsolete 1.8.7 settings. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3210 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-08-18 14:50:59 +00:00
wouter
1fa8825030 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3208 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-08-18 07:46:48 +00:00
wouter
bc788b25d7 - Fix #603: unbound-checkconf -o <option> should skip verification 
checks.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3207 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-08-18 07:21:01 +00:00
wouter
d74c01b712 - dnstap support, with a patch from Farsight Security, written by 
Robert Edmonds. The --enable-dnstap needs libfstrm and protobuf-c.
  It is BSD licensed (see dnstap/dnstap.c).
  Building with --enable-dnstap needs pkg-config with this patch.
- Noted dnstap in doc/README and doc/CREDITS.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3206 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-08-05 07:57:52 +00:00
wouter
2968f08b2d - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3204 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-08-01 13:30:39 +00:00
wouter
244de881ef - Patch add msg, rrset, infra and key cache sizes to stats command 
from Maciej Soltysiak.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3203 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-08-01 13:24:46 +00:00
wouter
0cc9786752 - testdata/dns64_lookup.rpl for unit test for dns64 functionality. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3200 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-31 08:16:18 +00:00
wouter
a02144f04f - Changes from DNS64: 
strcpy changed to memmove.
  arraybound check fixed from prefix_net/8/4 to prefix_net/8+4.
  allocation of result consistently in the correct region.
  time_t is now used for ttl in unbound (since the patch's version).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3199 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-31 08:00:38 +00:00
wouter
f8f0117ea9 - DNS64 from Viagenie (BSD Licensed), written by Simon Perrault. 
Initial commit of the patch from the FreeBSD base (with its fixes).
  This adds a module (for module-config in unbound.conf) dns64 that
  performs DNS64 processing, see README.DNS64.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3198 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-31 07:15:33 +00:00
wouter
c4ef386ed9 - Patch from Dag-Erling Smorgrav that implements feature, unbound -dd 
does not fork in the background and also logs to stderr.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3197 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-29 11:48:43 +00:00
wouter
f17ba9b11b - Fix endian.h include for OpenBSD. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3196 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-21 00:06:54 +00:00
wouter
f50092d51e - And Fix#596: Bail out of unbound-control dump_infra when ssl 
write fails.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3195 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-16 10:07:26 +00:00
wouter
321a920e68 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3194 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-15 14:48:16 +00:00
wouter
c788e53800 - Fix #596: Bail out of unbound-control list_local_zones when ssl 
write fails.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3193 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-15 14:42:57 +00:00
wouter
7064fd4e00 Configure tests if main can be linked to from getentropy compat. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3191 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-13 08:18:57 +00:00
wouter
1816535b88 - update compat/getentropy and arc4random to the most recent ones from OpenBSD. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3184 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-12 18:23:49 +00:00
wouter
e5d5340f1b - update compat/getentropy to the most recent ones from OpenBSD. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3183 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-12 18:03:27 +00:00
wouter
556c8f7752 - Fix bug in fix for log locks that caused deadlock in signal handler. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3182 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-12 17:34:37 +00:00
wouter
862e4bf306 - LibreSSL provides compat items, check for that in configure. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3180 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-12 14:13:45 +00:00
wouter
886fbdc54b - Fix to check openssl version number only for OpenSSL. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3179 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-12 12:54:50 +00:00
wouter
690b27c016 - Fix getentropy compat code, function refs were not portable. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3178 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-12 11:33:38 +00:00
matje
2c269921c6 malloc calloc patch 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3173 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-11 15:38:07 +00:00
wouter
1135921a07 - arc4random, getentropy and explicit_bzero compat for Windows. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3172 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-11 14:46:46 +00:00
wouter
5aa4e51f0e - fix strptime implicit declaration error on OpenBSD. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3171 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-11 14:27:14 +00:00
wouter
4b26592e42 - arc4random in compat/ and getentropy, explicit_bzero, chacha for 
dependencies, from OpenBSD.  arc4_lock and sha512 in compat.
  This makes arc4random available on all platforms, except when
  compiled with LIBNSS (it uses libNSS crypto random).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3158 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-11 09:27:24 +00:00
wouter
9994fe8446 - Fix #593: segfault or crash upon rotating logfile. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3156 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-04 07:34:58 +00:00
wouter
36fd74972e - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3155 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-03 09:18:17 +00:00
wouter
bcfb7595ac - DLV tests added. 
- signit tool fixup for compile with libldns library.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3154 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-03 09:07:38 +00:00
wouter
b3c4bac3da - so-reuseport is available on BSDs(such as FreeBSD 10) and OS/X. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3153 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-06-27 14:11:57 +00:00
wouter
43713e48bc iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3151 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-06-26 09:17:13 +00:00
wouter
14e8b85111 - unbound-control status reports if so-reuseport was successful. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3150 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-06-26 08:48:51 +00:00
wouter
63221696ac Test commit hooks. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3148 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-06-24 10:34:48 +00:00
wouter
0b225540dc Fixup testsetup for VM tests (testcode/run_vm.sh). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3147 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-06-24 10:26:02 +00:00
wouter
c9c7f29161 - Fix caps-for-id fallback, and added fallback attempt when servers 
drop 0x20 perturbed queries.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3146 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-06-24 08:24:28 +00:00
wouter
883d18fc36 change to test post commit hooks. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3145 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-06-23 08:48:22 +00:00
wouter
d41b54afd6 - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3144 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-06-17 11:57:32 +00:00
wouter
21badea7ff - Add AAAA for B root server to default root hints. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3143 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-06-03 07:29:41 +00:00
wouter
efd392cf85 Remove unused define from iterator.h 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3142 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-06-02 10:03:21 +00:00
wouter
0b39721cf0 - Fixup sldns_enum_edns_option typedef definition. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3141 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-05-30 07:20:11 +00:00
wouter
037cb63ea7 From Dag-Erling Smorgrav: The prototype for libworker_event_done_cb() 
needs to be moved from libunbound/libworker.h to libunbound/worker.h.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3140 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-05-28 08:20:44 +00:00
wouter
d9f5cc6e98 - make depend. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3139 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-05-28 08:19:06 +00:00
wouter
49e9d17591 - Fixup out-of-directory compile with unbound-control-setup.sh.in. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3138 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-05-28 08:15:20 +00:00
wouter
7c2248dd8c - Code cleanup patch from Dag-Erling Smorgrav, with compiler issue 
fixes from FreeBSD's copy of Unbound, he notes:
  Generate unbound-control-setup.sh at build time so it respects
  prefix and sysconfdir from the configure script.  Also fix the
  umask to match the comment, and the comment to match the umask.
  Add const and static where needed.  Use unions instead of
  playing pointer poker.  Move declarations that are needed in
  multiple source files into a shared header.  Move sldns_bgetc()
  from parse.c to buffer.c where it belongs.  Introduce a new
  header file, worker.h, which declares the callbacks that
  all workers must define.  Remove those declarations from
  libworker.h.	Include the correct headers in the correct places.
  Fix a few dummy callbacks that don't match their prototype.
  Fix some casts.  Hide the sbrk madness behind #ifdef HAVE_SBRK.
  Remove a useless printf which breaks reproducible builds.
  Get rid of CONFIGURE_{TARGET,DATE,BUILD_WITH} now that they're
  no longer used.  Add unbound-control-setup.sh to the list of
  generated files.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3137 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-05-28 08:07:12 +00:00
wouter
1e0eb48c1f - unbound-host -D enabled dnssec and reads root trust anchor from 
the default root key file that was compiled in.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3136 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-05-23 07:30:02 +00:00
wouter
5ae31b1929 review fixes. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3134 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-05-20 11:39:41 +00:00
wouter
8d9d4eea91 - Feature, unblock-lan-zones: yesno that you can use to make unbound 
perform 10.0.0.0/8 and other reverse lookups normally, for use if
  unbound is running service for localhost on localhost.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3133 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-05-20 10:38:32 +00:00
wouter
fbe7321ea1 - Updated create_unbound_ad_servers and unbound_cache scripts from 
Yuri Voinov in the source/contrib directory. Added
  warmup.cmd (and .sh): warm up the DNS cache with your MRU domains.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3131 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-05-16 14:40:38 +00:00
wouter
437d47515b - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3130 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-05-09 14:42:02 +00:00
wouter
af4857922e - Implement draft-ietf-dnsop-rfc6598-rfc6303-01. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3129 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-05-09 14:33:10 +00:00
wouter
79b037c5aa - Contrib windows scripts from Yuri Voinov added to src/contrib: 
create_unbound_ad_servers.cmd: enters anti-ad server lists.
  unbound_cache.cmd: saves and loads the cache.
- Added unbound-control-setup.cmd from Yuri Voinov to the windows
  unbound distribution set.  It requires openssl installed in %PATH%.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3128 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-05-08 13:39:03 +00:00
wouter
7d212de4bc - Change MAX_SENT_COUNT from 16 to 32 to resolve some cases easier. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3127 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-05-06 12:37:37 +00:00
wouter
6d8894f568 - More #567: remove : from output of stub and forward lists, this is 
easier to parse.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3126 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-05-05 14:47:08 +00:00
wouter
0d5674b5a8 - Add unbound-control flush_negative that flushed nxdomains, nodata, 
and errors from the cache.  For dnssec-trigger and NetworkManager,
  fixes cases where network changes have localdata that was already
  negatively cached from the previous network.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3125 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-29 08:47:33 +00:00
wouter
281ed362ff - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3124 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-29 07:25:46 +00:00
wouter
0bdec8d939 And changelog. 
(svn:NO TEST)


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3122 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-23 13:04:10 +00:00
wouter
ddb75f20db Different fix. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3119 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-15 11:25:36 +00:00
wouter
d293eece3c - If event2 is installed, include dir/include/event2 in compilation. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3115 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-15 11:14:50 +00:00
wouter
4494ffcbb2 - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3114 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-11 09:02:01 +00:00
wouter
6f50ee0525 - Fix #502: explain that do-ip6 disable does not stop AAAA lookups, 
but it stops the use of the ipv6 transport layer for DNS traffic.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3113 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-11 07:15:53 +00:00
wouter
7de5b0ec61 - Fix #545: improved logging, the ip address of the error is printed 
on the same log-line as the error.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3112 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-10 14:40:20 +00:00
wouter
0b1ed0233c - Fix #558: failed prefetch lookup does not remove cached response 
but delays next prefetch (in lieu of caching a SERVFAIL).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3111 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-10 13:56:16 +00:00
wouter
3ad592e37d - Fix #554: use unsigned long to print 64bit statistics counters on 
64bit systems.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3110 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-10 11:20:41 +00:00
wouter
d292682b32 - Fix #567: unbound lists if forward zone is secure or insecure with 
+i annotation in output of list_forwards, also for list_stubs
  (for NetworkManager integration.)


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3109 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-10 10:54:21 +00:00
wouter
7a5bad49e3 - unbound-control stats prints num.query.tcpout with number of TCP 
outgoing queries made in the previous statistics interval.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3108 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-10 09:13:58 +00:00
wouter
e17025eee3 - Patch from Hannes Frederic Sowa for Linux 3.15 fragmentation 
option for DNS fragmentation defense.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3107 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-10 08:35:45 +00:00
wouter
163fa6800a - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3106 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-10 08:20:50 +00:00
wouter
89e1cf45fd iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3105 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-08 07:46:09 +00:00
wouter
eaab8cc117 - Fix #574: make test fails on Ubuntu 14.04. Disabled remote-control 
in testbound scripts.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3104 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-08 07:13:49 +00:00
wouter
619d924803 - Fix #572: Fix unit test failure for systems with different 
/etc/services.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3103 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-07 09:18:29 +00:00
wouter
82d8262980 - C.ROOT-SERVERS.NET has an IPv6 address, and we updated the root 
hints (patch from Anand Buddhdev).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3102 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-07 08:18:39 +00:00
wouter
fc81bc1805 - Fix #569: do_tcp is do-tcp in unbound.conf man page. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3101 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-03-28 08:19:21 +00:00
wouter
97a4a444eb - Patch from Stuart Henderson to build unbound-host man from .1.in. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3100 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-03-25 08:09:33 +00:00
wouter
618bf78fa9 - Fix print filename of encompassing config file on read failure. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3099 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-03-24 13:13:42 +00:00
wouter
a8af8040c0 trunk has 1.4.23 in development. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3098 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-03-12 14:25:21 +00:00
wouter
cdf37ba2bb tag 1.4.22 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3096 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-03-12 12:30:23 +00:00
wouter
e3798d9aa0 - Fix bug#561: contrib/cacti plugin did not report SERVFAIL rcodes 
because of spelling.  Patch from Chris Coates.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3095 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-03-10 10:42:49 +00:00
wouter
7332f5ddef 1.4.22rc1 tag created 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3094 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-27 08:02:24 +00:00
wouter
87f160f1db - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3092 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-21 09:38:02 +00:00
wouter
959eef4c63 - Be lenient when a NSEC NameError response with RCODE=NXDOMAIN is 
received. This is okay according 4035, but not after revising
  existence in 4592.  NSEC empty non-terminals exist and thus the
  RCODE should have been NOERROR. If this occurs, and the RRsets
  are secure, we set the RCODE to NOERROR and the security status
  of the reponse is also considered secure.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3091 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-20 12:36:05 +00:00
wouter
9df60e0263 Port to Minix 3.2.1. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3081 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-14 09:23:32 +00:00
wouter
a42199b6c0 Fix parse of #553(NSD) string in sldns, quotes without spaces. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3080 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-11 08:29:42 +00:00
wouter
68b138cbd3 And fix #551 REGENT to COPYRIGHT HOLDER in license in file headings. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3079 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-07 13:28:39 +00:00
wouter
7aac37f469 - Fix #551: License change "Regents" to "Copyright holder", matching 
the BSD license on opensource.org.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3078 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-07 12:43:43 +00:00
wouter
e592a4e8db - add body to ifstatement if locks disabled. 
- add TXT string"string" test case to unit test.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3077 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-07 12:14:09 +00:00
wouter
289af9db17 iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3075 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-07 09:51:54 +00:00
wouter
fd6807c38f - code documentation on the module interface. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3074 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-06 13:18:32 +00:00
wouter
0d74f081a5 - sldns has type HIP. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3071 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-06 10:57:42 +00:00
wouter
2e369ae61d fix sldns parse tests on osx. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3070 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-05 13:40:55 +00:00
wouter
e0b84e80a2 - Fix parse in sldns of quoted parenthesized text strings. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3066 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-03 14:28:57 +00:00
wouter
da830563d2 - Fixup link with lib/event2 subdir. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3065 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-03 11:41:19 +00:00
wouter
2553b4fb9f - Detect libevent2 install automatically by configure. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3064 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-03 11:02:17 +00:00
wouter
56edfdf8d4 - fixup type EUI48 and EUI64, type APL and type IPSECKEY in string 
parse sldns.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3063 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-31 13:50:57 +00:00
wouter
25bb623632 and commitlog 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3062 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-31 11:33:22 +00:00
wouter
5758551602 - unit test for ldns wire to str and back with zones, root, nlnetlabs 
and types.sidnlabs.
- Fix for hex to string in unknown, atma and nsap.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3060 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-31 10:19:01 +00:00
wouter
5ad20035bd - delay-close does not act if there are udp-wait queries, so that 
it does not make a socketdrain DoS easier.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3059 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-30 09:27:00 +00:00
wouter
d1cb31280e - delay-close: msec option that delays closing ports for which 
the UDP reply has timed out.  Keeps the port open, only accepts
  the correct reply.  This correct reply is not used, but the port
  is open so that no port-denied ICMPs are generated.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3058 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-28 14:35:55 +00:00
wouter
8ce81b472f - iana portlist test updated so it does not touch the source 
if there are no changes.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3057 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-28 10:12:13 +00:00
wouter
33a649c386 - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3056 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-28 10:00:01 +00:00
wouter
1315093384 - reuseport is attempted, then fallback to without on failure. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3054 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-27 10:27:19 +00:00
wouter
03da1e8f35 - made lint clean. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3050 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-24 13:23:45 +00:00
wouter
36afba318e - so-reuseport: yesno option to distribute queries evenly over 
threads on Linux (Thanks Robert Edmonds).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3049 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-24 11:43:38 +00:00
wouter
2920d0fa82 - speed up unbound (reports say it could be up to 10%), by reducing 
lock contention on localzones.lock.  It is changed to an rwlock.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3048 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-24 11:21:15 +00:00
wouter
f19df3745f - unbound-event.h is installed if you configure --enable-event-api. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3047 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-24 10:55:28 +00:00
wouter
d80aaee750 - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3046 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-24 10:42:42 +00:00
wouter
a60b5a4077 - Change unbound-event.h to use void* buffer, length idiom. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3045 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-24 08:16:56 +00:00
wouter
63354244f1 - Fix #547: no trustanchor written if filesystem full, fclose checked. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3044 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-21 10:14:55 +00:00
wouter
de91e9d4f2 - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3043 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-17 15:29:04 +00:00
wouter
2ac9c97c73 - Fix isprint() portability in sldns, uses unsigned int. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3042 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-17 14:45:14 +00:00
wouter
511cfd92df - Windows port, adjust %lld to %I64d, and warning in win_event.c. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3040 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-16 16:01:37 +00:00
wouter
ba8b12b779 - fix #544: Fixed +i causes segfault when running with module conf "iterator". 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3038 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-16 13:04:34 +00:00
wouter
19b0244480 - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3037 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-14 08:26:29 +00:00
wouter
cc9064d64e - update pythonmod for ldns_ to sldns_ name change. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3035 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-12-05 16:27:52 +00:00
wouter
8af85a6350 Fix bug in cachedump format after sldns changes. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3033 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-12-05 15:57:16 +00:00
wouter
6f31050bf8 - Fix windows compile to compile with sldns. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3024 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-12-03 13:51:11 +00:00
wouter
db8f72c4f7 - Fix sldns to use sldns_ prefix for all ldns_ variables. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3022 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-12-03 09:11:16 +00:00
wouter
884b06df55 Fix linking of sldns and ldns, unique identifiers for global variables. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3021 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-11-30 11:03:55 +00:00
wouter
992c74a70a - Fix bug#537: compile python plugin without ldns library. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3016 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-11-13 08:53:53 +00:00
wouter
2e1c6e061f - Fix bug#536: acl_deny_non_local and refuse_non_local added. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3015 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-11-12 10:08:54 +00:00
wouter
936b11a95e interface: and ip-address: 
also includes for newer ldns in pythonmod. 


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3014 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-11-06 02:48:59 +00:00
wouter
116d59bef9 - Patch from Neel Goyal to fix async id assignment if callback 
is called by libunbound in the mesh attach.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3013 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-11-05 21:16:02 +00:00
wouter
22dd467d26 - Patch from Neel Goyal to fix callback in libunbound. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3012 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-11-04 18:53:21 +00:00
wouter
c008161b94 - if configured --with-libunbound-only fix make install. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3010 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-11-03 23:12:55 +00:00
wouter
b641715036 portability fixes for new USE_SLDNS ldns subdir codebase. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3008 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-10-31 16:27:15 +00:00
wouter
72c68179a5 note bugzilla number. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3001 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-10-31 15:32:56 +00:00
wouter
8e6ee27eda - separate ldns into core ldns inside ldns/ subdirectory. No more 
--with-ldns is needed and unbound does not rely on libldns.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2998 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-10-31 15:09:26 +00:00
wouter
c0c114ebeb - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2997 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-10-31 15:06:24 +00:00
wouter
61ef2ac265 - Set SO_REUSEADDR so that the wildcard interface and a more specific 
interface port 53 can be used at the same time, and one of the
  daemons is unbound.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2996 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-10-31 15:06:11 +00:00
wouter
e37c8fa8e9 - Fix #528: if very high logging (4 or more) segfault on allow_snoop. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2994 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-10-22 12:01:51 +00:00
wouter
d672c0066c - Patch from Neel Goyal: Add an API call to set an event base on an 
existing ub_ctx.  This basically just destroys the current worker and
  sets the event base to the current.  And fix a deadlock in
  ub_resolve_event – the cfglock is held when libworker_create is
  called.  This ends up trying to acquire the lock again in
  context_obtain_alloc in the call chain.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2992 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-10-22 09:32:10 +00:00
wouter
a6234674fb - unbound-event.h is installed if configured --with-libevent. It 
contains low-level library calls, that use libevent's event_base
  and an ldns_buffer for the wire return packet to perform async
  resolution in the client's eventloop.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2970 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-09-26 08:34:14 +00:00
wouter
4d385dc589 - acx_nlnetlabs.m4 to 26; improve FLTO help text. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2964 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-09-19 13:08:58 +00:00
wouter
3cb0e151cb iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2963 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-09-19 12:03:44 +00:00
wouter
44e821b59a - trunk has 1.4.22 number inside it. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2962 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-09-19 10:53:38 +00:00
wouter
8010bb2aa4 - Fix#524: max-udp-size not effective to non-EDNS0 queries, from 
Daisuke HIGASHI.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2955 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-09-16 09:07:08 +00:00
wouter
00bfbae532 - tag 1.4.21rc1 made again. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2953 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-09-10 14:04:35 +00:00
wouter
2002f2427b more time_t. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2951 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-09-10 08:46:33 +00:00
wouter
4bd845dea6 - More fixes for bug#519: for the threaded case test if the bg 
thread has been killed, on ub_ctx_delete, to avoid hangs.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2946 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-08-26 12:24:27 +00:00
wouter
658bd3bcf8 - review fixes from Willem. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2945 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-08-22 14:10:29 +00:00
wouter
b492e89a4d - more fixes that I overlooked. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2944 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-08-22 07:33:51 +00:00
wouter
1efe599073 - Fix#520: Errors found by static analysis from Tomas Hozza(redhat). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2942 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-08-21 13:31:09 +00:00
wouter
b4a007738c - Fix for 2038, with time_t instead of uint32_t. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2939 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-08-20 12:23:42 +00:00
wouter
60c16ee604 - Fix#519 ub_ctx_delete may hang in some scenarios (libunbound). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2937 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-08-19 12:02:17 +00:00
wouter
1402c87b39 Fix uninit variable in fix#516. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2934 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-08-14 07:53:33 +00:00
wouter
ef7be2ae15 - Fix#516 dnssec lameness detection for answers that are improper. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2933 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-08-08 09:29:33 +00:00
wouter
fe14e57752 tag 1.4.21rc1 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2932 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-07-30 14:42:20 +00:00
wouter
e484400f89 note down the bugzilla reference number. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2931 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-07-30 08:29:15 +00:00
wouter
08d0e4c6f6 - Fix memleak in testcode for testbound (if it fails). 
- Fix NSS returned arrays out of setup function to be statics.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2930 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-07-29 07:32:35 +00:00
wouter
1539f33fd9 iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2929 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-07-26 13:26:51 +00:00
wouter
d0b6865a8a - max include of 100.000 files (depth and globbed at one time). 
This is to preserve system memory in bug cases, or endless cases.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2928 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-07-26 13:11:53 +00:00
wouter
c697c00b08 - libunbound documentation on how to avoid openssl race conditions. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2926 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-07-19 11:48:22 +00:00
wouter
89c56f759c iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2925 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-07-19 10:51:11 +00:00
wouter
28d80a01ca - streamtcp man page, contributed by Tomas Hozza. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2924 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-07-19 10:46:16 +00:00
wouter
e06004ca04 - configure --disable-flto option (from Robert Edmonds). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2916 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-06-25 07:25:31 +00:00
wouter
457d21eb30 - Squelch sendto-permission denied errors when the network is 
not connected, to avoid spamming syslog.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2915 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-06-25 07:03:03 +00:00
wouter
784ede12a6 - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2914 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-06-18 07:34:00 +00:00
wouter
78a520b994 - Fix for const string literals in C++ for libunbound, from Karel 
Slany.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2913 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-06-18 07:33:44 +00:00
wouter
a249574168 - Fixup manpage syntax. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2912 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-06-17 11:20:42 +00:00
wouter
05d71585ef - get_option and set_option support for log-time-ascii, python-script 
val-sig-skew-min and val-sig-skew-max.  log-time-ascii takes effect
  immediately.  The others are mostly useful for libunbound users.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2911 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-06-14 08:03:52 +00:00
wouter
9db6acb660 - get_option, set_option, unbound-checkconf -o and libunbound 
getoption and setoption support cache-min-ttl and cache-max-ttl.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2910 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-06-13 08:26:41 +00:00
wouter
57626b2e16 - Max include depth is unlimited. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2909 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-06-10 13:37:14 +00:00
wouter
6b1da4e103 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2908 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-06-10 12:25:34 +00:00
wouter
bcb1b4b1da - Fix#501: forward-first does not recurse, when forward name is ".". 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2907 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-06-10 12:25:10 +00:00
wouter
71da5d2023 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2905 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-05-27 13:11:11 +00:00
wouter
46108fac55 - Update acx_pthreads.m4 to ax_pthreads.4 (2013-03-29), and apply 
patch to it to not fail when -Werror is also specified, from the
  autoconf-archives.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2904 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-05-27 08:22:40 +00:00
wouter
bf45bfd756 - Explain bogus and secure flags in libunbound more. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2903 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-05-21 09:06:21 +00:00
wouter
05e58e752c - Fix#500 use of non-initialised values on socket bind failures. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2901 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-05-16 08:14:03 +00:00
wouter
2a9f76b880 - Fix use-after-free in out-of-memory handling code (thanks Jake 
Montgomery).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2900 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-05-16 07:36:37 +00:00
wouter
b7857366b8 - Fix round-robin doesn't work with some Windows clients (from Ilya Bakulin). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2899 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-05-15 11:56:22 +00:00
wouter
ea9a97d9b8 - update acx_nlnetlabs.m4 to v23, sleep w32 fix. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2898 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-05-03 09:35:55 +00:00
wouter
ac5cb1ea58 we comply with RFC 6944: DNSKEY algorithm status 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2896 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-05-01 12:18:48 +00:00
wouter
167e55b965 - add unbound-control insecure_add and insecure_remove for the 
administration of negative trust anchors.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2895 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-04-26 14:14:07 +00:00
wouter
92e77546db - updated iana portlist. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2894 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-04-25 11:59:05 +00:00
wouter
d63f8ef809 - Implement max-udp-size config option, default 4096 (thanks 
Daisuke Higashi).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2893 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-04-25 11:55:46 +00:00
wouter
48c72225d1 - Robust checks on dname validity from rdata for dname compare. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2892 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-04-25 10:28:25 +00:00
wouter
d3b8ff05ce - Fix snprintf return value usage, fixed libunbound_get_option. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2888 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-04-19 11:34:36 +00:00
wouter
6cff0e0270 - own implementation of compat/snprintf.c. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2887 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-04-18 14:28:21 +00:00
wouter
75c85eaa74 - fix bug #491: pick program name (0th argument) as syslog identity. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2885 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-04-18 12:14:40 +00:00
wouter
eeb1781327 - unbound-anchor review: BIO_write can return 0 successfully if it 
has successfully appended a zero length string.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2884 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-04-15 15:08:24 +00:00
wouter
ce79ba4905 - Fix so that for a configuration line of include: "*.conf" it is not 
an error if there are no files matching the glob pattern.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2883 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-04-15 07:57:08 +00:00
wouter
b838694589 - Fix queries leaking up for stubs and forwards, if the configured 
nameservers all fail to answer.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2882 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-04-11 10:08:34 +00:00
wouter
b2d05e729e - code improve for minimal responses, small speed increase. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2881 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-04-10 14:29:35 +00:00
wouter
072b65caae - Fix crash in previous private address fixup of 22 March. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2880 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-04-09 07:38:24 +00:00
wouter
f703673eda - updated iana portlist. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2879 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-04-09 07:02:43 +00:00
wouter
d1e5c9f3b1 - Make reverse zones easier by documenting the nodefault statements 
commented-out in the example config file.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2878 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-28 13:36:38 +00:00
wouter
3585fc9462 more fixes for endianness. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2877 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-26 08:14:06 +00:00
wouter
9a329656c7 And add detection for machine/endian.h to it. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2875 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-25 14:53:09 +00:00
wouter
92110dd306 - #492: Fix endianness detection, revert to older lookup3.c detection 
and put new detect lines after previous tests, to avoid regressions
  but allow new detections to succeed.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2872 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-25 09:35:27 +00:00
wouter
b87787e4a1 - Fix makedist for new svn for -d option. 
- unbound.h header file has UNBOUND_VERSION_MAJOR define.
- Fix windows RSRC version for long version numbers.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2870 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-22 12:41:13 +00:00
wouter
be9eda888c iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2869 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-22 10:00:55 +00:00
wouter
e306a8f384 - Fix resolve of names that use a mix of public and private addresses. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2868 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-22 09:36:33 +00:00
wouter
4c5695e1bf - install copy of unbound-control.8 man page for unbound-control-setup 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2866 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-21 12:48:12 +00:00
wouter
a5837b560b trunk has 1.4.21 version 
committed libunbound version 4:1:2 for binary API updated in 1.4.20


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2865 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-21 12:24:42 +00:00
wouter
3800239c3c release changelog entry. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2863 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-21 11:17:00 +00:00
wouter
f20eabebee tag 1.4.20rc1 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2860 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-14 13:06:27 +00:00
wouter
6fbd251bbe iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2859 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-14 12:54:52 +00:00
wouter
1a0ac9ffd9 - Fixup makedist.sh for windows compile. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2858 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-12 13:44:59 +00:00
wouter
7be4f28631 - testcode/ldns-testpkts.c check for makedist is informational. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2856 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-11 15:11:56 +00:00
wouter
d310cb5644 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2855 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-11 14:42:13 +00:00
wouter
4e13c3b57b - fix defines in lookup3 for bigendian bsd alpha 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2845 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-02-15 14:00:03 +00:00
wouter
537b023feb - Fixup openssl_thread init code to only run if compiled with SSL. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2843 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-02-11 16:03:51 +00:00
wouter
cd302a1e8e update iana portlist. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2835 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-02-07 13:30:17 +00:00
wouter
dd39221bde - add libunbound.ttl at end of result structure, version bump for 
libunbound and binary backwards compatible, but 1.4.19 is not
  forward compatible with 1.4.20.
- updated configure scripts with newer versions.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2834 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-02-07 13:23:48 +00:00
wouter
f475681731 - detect endianness in lookup3 on BSD. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2833 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-02-07 08:18:33 +00:00
wouter
2643272560 - includes and have_ssl fixes for nss. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2830 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-30 13:15:03 +00:00
wouter
9285d02d4a - printout name of zone with duplicate fwd and hint errors. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2828 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-29 08:13:57 +00:00
wouter
0265146e12 fixup for doxygen 1.8.3 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2827 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-28 13:44:38 +00:00
wouter
3e363e5236 - updated fwd_zero for newer nc. Updated common.sh for newer netstat. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2825 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-28 13:30:46 +00:00
wouter
98a8c1c53c - update iana port list. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2808 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-17 11:23:07 +00:00
wouter
a80476d462 - unbound-anchors checks the emailAddress of the signer of the 
root.xml file, default is dnssec@iana.org.  It also checks that
  the signer has the correct key usage for a digital signature.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2807 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-17 11:17:04 +00:00
wouter
614abedfbd - Check the commonName of the signer of the root.xml file in 
unbound-anchor, default is dnssec@iana.org.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2804 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-03 14:38:38 +00:00
wouter
afb056f487 - Test that unbound can handle a CNAME at an intermediate node in 
the chain of trust (where it seeks a DS record).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2803 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-03 12:25:48 +00:00
wouter
6f200f25f0 - Test that unbound-control checks client credentials. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2802 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-03 10:58:31 +00:00
wouter
2267b8b267 - Tested that unbound implements the RFC5155 Technical Errata id 3441. 
Unbound already implements insecure classification of an empty
  nonterminal in NSEC3 optout zone.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2800 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-02 14:42:20 +00:00
wouter
a506ed09ab iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2799 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-02 11:15:49 +00:00
wouter
7244053f53 - Fix openssl lock free on exit (reported by Robert Fleischman). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2798 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-02 10:53:57 +00:00
wouter
eaba5edb38 - Fix unbound-anchor xml parse of entity declarations for safety. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2797 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-12-20 08:22:39 +00:00
wouter
9243d9855f iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2796 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-12-19 10:55:18 +00:00
wouter
f28ae598a5 iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2795 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-12-18 15:26:25 +00:00
wouter
f1a5d98065 - Change of D.ROOT-SERVERS.NET A address in default root hints. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2794 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-12-14 08:08:59 +00:00
wouter
f4015ff912 - trunk has 1.4.20 under development. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2793 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-12-12 09:17:08 +00:00
wouter
7331f55fd1 1.4.19 
(svn:NO TEST)


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2791 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-12-12 08:43:16 +00:00
wouter
6eba5edc84 We turn out to support RFC 1123, 6.1 Requirements for DNS of internet hosts. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2790 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-12-06 10:07:51 +00:00
wouter
d2e35c5a50 - note support for AAAA RR type RFC. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2789 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-12-06 10:02:02 +00:00
wouter
91cda02980 changelog (svn:NO TEST) 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2788 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-12-04 11:52:14 +00:00
wouter
08a311ddd2 - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2784 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-11-30 09:50:29 +00:00
wouter
016de304a8 - bug 481: fix python example0. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2783 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-11-30 09:41:38 +00:00
wouter
b96896deb0 iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2782 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-11-27 16:01:47 +00:00
wouter
87c60e499f - Fix unbound-control forward disables configured stubs below it. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2781 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-11-09 15:35:18 +00:00
wouter
36a9c0af61 - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2780 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-11-07 08:57:51 +00:00
wouter
666d355d7b - Fixup ldns-testpkts, identical to ldns/examples. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2779 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-11-07 08:49:53 +00:00
wouter
ba27940c44 - Fix bug #477: unbound-anchor segfaults if EDNS is blocked. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2778 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-10-30 15:13:53 +00:00
matje
aae7a518bf Fix validation for responses with CNAME and wildcard expanded CNAME in 
ANSWER section.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2777 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-10-29 14:06:00 +00:00
wouter
206f968f10 - make clean and makerealclean remove generated python and docs. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2776 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-10-08 12:31:16 +00:00
wouter
9508df7769 - fix build of pythonmod in objdir, for unbound.py. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2775 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-10-08 12:07:51 +00:00
wouter
341bfc3adc - update ldns-testpkts.c to ldns 1.6.14 version. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2774 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-10-08 10:24:50 +00:00
wouter
e1c697fe2d - fix build of pythonmod in objdir (thanks Jakob Schlyter). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2773 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-10-05 07:06:11 +00:00
wouter
e68ce6d9be - fix text in unbound-anchor man page. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2772 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-10-03 14:43:46 +00:00
wouter
97cc148487 - ignore trusted-keys globs that have no files (from Paul Wouters). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2770 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-10-01 07:18:49 +00:00
wouter
05844e9c5c nicer documentation. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2769 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-09-27 13:12:00 +00:00
wouter
6a9b0764e4 - updated contrib/unbound.spec, patch from Valentin Bud. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2768 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-09-27 09:37:04 +00:00
wouter
f10b82ac45 - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2767 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-09-27 09:34:24 +00:00
wouter
320df09e27 unbound-control -q option is quiet, patch from Mariano Absatz. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2766 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-09-27 09:32:35 +00:00
wouter
5f7b92dd7a - include: directive in config file accepts wildcards. Patch from 
Paul Wouters.  Suggested use: include: "/etc/unbound.d/conf.d/*"


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2765 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-09-27 08:52:37 +00:00
wouter
c3c53b07e3 - chdir to / after chroot call (suggested by Camiel Dobbelaar). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2764 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-09-21 07:13:51 +00:00
wouter
8964aebbfb - patch_rsamd5_enable.diff: this patch enables RSAMD5 validation 
otherwise it is treated as insecure.  The RSAMD5 algorithm is
  deprecated (RFC6725).  The MD5 hash is considered weak for some
  purposes, if you want to sign your zone, then RSASHA256 is an
  uncontested hash.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2760 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-09-17 13:15:12 +00:00
wouter
1d6cf41a6f - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2754 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-08-30 12:12:58 +00:00
wouter
ac7d3cdbde - RFC6725 deprecates RSAMD5: this DNSKEY algorithm is disabled. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2753 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-08-30 12:02:53 +00:00
wouter
981720aa4c - Nicer comments outgoing-port-avoid, thanks Stu (bug #465). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2752 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-08-29 07:13:36 +00:00
wouter
62c729d59e - Fallback to 1472 and 1232, one fragment size without headers. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2746 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-08-22 08:46:30 +00:00
wouter
8f83f70712 - Fix timeouts so that when a server has been offline for a while 
and is probed to see it works, it becomes fully available for
  server selection again.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2745 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-08-21 07:17:48 +00:00