townforge/unbound
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
4,530 Commits 1 Branch 0 Tags 79 MiB
cc
Commit Graph

3214 Commits

Author SHA1 Message Date
wouter
f20f10dec4 - Fix ldns_wire2str_rdata_scan for malformed RRs. 
his line, and those below, will be ignored--

M    trunk/doc/Changelog
M    trunk/sldns/wire2str.c


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3507 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-10-15 09:51:30 +00:00
wouter
e31f10dda7 - Fix segfault in the dns64 module in the formaterror error path. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3506 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-10-15 09:02:01 +00:00
wouter
c666280ed1 - Fix manpage to suggest using SIGTERM to terminate the server. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3505 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-10-14 12:22:49 +00:00
wouter
1030490f5a - ANY responses include DNAME records if present, as per Evan Hunt's 
remark in dnsop.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3504 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-10-14 08:02:14 +00:00
wouter
d60f9800b2 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3503 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-10-09 08:08:31 +00:00
wouter
73ace4957c - Default for ssl-port is port 853, the temporary port assignment 
for secure domain name system traffic.
  If you used to rely on the older default of port 443, you have
  to put a clause in unbound.conf for that.  The new value is likely
  going to be the standardised port number for this traffic.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3502 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-10-09 07:55:21 +00:00
wouter
ad1097190e - trunk tracks the development of 1.5.6. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3500 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-10-06 09:57:08 +00:00
wouter
21001b4ca8 - makedist.sh: pgp sig echo commands. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3497 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-09-28 14:46:38 +00:00
wouter
adb3b2e503 prepare 1.5.5rc1 release. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3495 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-09-28 13:50:36 +00:00
wouter
18d55bcb86 - MAX_TARGET_COUNT increased to 64, to fix up sporadic resolution 
failures.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3494 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-09-28 07:21:48 +00:00
wouter
182c2d6cfb - Fix unbound-control flush that does not succeed in removing data. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3493 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-09-25 12:39:10 +00:00
wouter
2f41c1d568 - Fix unbound.conf(5) access-control description for precedence 
and default.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3492 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-09-22 13:04:53 +00:00
wouter
119aae5e4c - Fix minor error in unbound.conf.5.in 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3491 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-09-22 12:59:32 +00:00
wouter
d02e766e00 - testbound selftest also works in non-debug mode. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3490 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-09-22 09:52:17 +00:00
wouter
949509816f - Fix #705: ub_ctx_set_fwd() return value mishandled on windows. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3489 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-09-22 08:59:10 +00:00
wouter
553bf1df1e - Remove confusion comment from canonical_compare() function. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3488 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-09-22 08:43:56 +00:00
wouter
52a96d6510 - Fix #702: New IPs for for h.root-servers.net. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3487 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-09-22 08:35:03 +00:00
wouter
07b5c17bd3 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3486 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-09-22 08:04:45 +00:00
wouter
73d2ca61bf - Fix config globbed include chroot treatment, this fixes reload of 
globs (patch from Dag-Erling Smørgrav).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3485 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-09-22 08:04:19 +00:00
wouter
f9de753734 - changed windows setup compression to be more transparent. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3484 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-08-31 07:44:36 +00:00
wouter
9f1c38eeb4 - Feature #699: --enable-pie option to that builds PIE binary. 
- Feature #700: --enable-relro-now option that enables full read-only
  relocation.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3483 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-08-28 14:27:03 +00:00
wouter
39fee4ebb1 - Fix #697: Get PY_MAJOR_VERSION failure at configure for python 
2.4 to 2.6.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3480 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-08-28 06:56:27 +00:00
wouter
8230d6dc08 - Change default of harden-algo-downgrade to off. This is lenient 
for algorithm rollover.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3478 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-08-24 15:05:10 +00:00
wouter
095bbe40db - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3477 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-08-24 12:52:40 +00:00
wouter
1116189f7a - Fix deadlock for local data add and zone add when unbound-control 
list_local_data printout is interrupted.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3476 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-08-24 10:49:28 +00:00
wouter
dcb7d29d76 - Reap the child process that libunbound spawns. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3473 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-08-13 14:17:44 +00:00
wouter
7fc17c9a1f - 5011 implementation does not insist on all algorithms, when 
harden-algo-downgrade is turned off.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3471 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-08-13 12:03:53 +00:00
wouter
a3a0e0e274 - Fix #694: configure script does not detect LibreSSL 2.2.2 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3470 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-08-11 07:32:35 +00:00
wouter
23cd117f74 - Document that local-zone nodefault matches exactly and transparent 
can be used to release a subzone.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3468 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-08-04 07:10:26 +00:00
wouter
f242323707 - Fix mktime in unbound-anchor not using UTC. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3467 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-08-03 15:00:56 +00:00
wouter
7396d00ba0 - Fix 5011 anchor update timer after reload. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3466 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-08-03 11:56:37 +00:00
wouter
f6965de1e8 - Document in the manual more text about configuring locally served 
zones.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3465 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-08-03 10:34:29 +00:00
wouter
c58e83c3e1 - Added permit-small-holddown config to debug fast 5011 rollover. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3462 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-07-30 11:52:12 +00:00
wouter
59859f00f0 - please afl-gcc (llvm) for uninitialised variable warning. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3461 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-07-30 08:51:51 +00:00
wouter
7faeaaf3ed - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3459 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-07-24 11:54:08 +00:00
wouter
fbd9cf712d - Fix #690: Reload fails when so-reuseport is yes after changing 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3456 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-07-24 07:02:14 +00:00
wouter
8ab8309710 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3455 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-07-21 14:52:53 +00:00
wouter
7f99e7c795 - Fix configure to detect SSL_CTX_set_ecdh_auto. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3453 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-07-21 14:30:49 +00:00
wouter
e00efba037 - Enable ECDHE for servers. Where available, use 
SSL_CTX_set_ecdh_auto() for TLS-wrapped server configurations to
  enable ECDHE.  Otherwise, manually offer curve p256.
  Client connections should automatically use ECDHE when available.
  (thanks Daniel Kahn Gillmor)


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3452 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-07-20 06:56:01 +00:00
willem
221499af71 SSL_CTX_use_certificate_chain_file() should be used instead of the 
SSL_CTX_use_certificate_file() function in order to allow the use of
complete certificate chains even when no trusted CA storage is used or
when the CA issuing the certificate shall not be added to the trusted
CA storage.

Thanks Daniel Kahn Gillmore


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3451 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-07-18 12:34:37 +00:00
wouter
85d4c6ee70 - makedist produces sha1 and sha256 files for created binaries too. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3448 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-07-13 07:53:53 +00:00
wouter
4ae9e5a7cd - Fix #681: Setting forwarders with unbound-control forward 
implicitly turns on forward-first.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3447 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-07-09 09:45:08 +00:00
wouter
64a7f637f5 trunk has 1.5.5 in development. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3446 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-07-09 09:40:12 +00:00
wouter
27ff1a703c - Fix alloc with log for allocation size checks. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3442 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-06-29 10:19:42 +00:00
wouter
5bb325336a - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3440 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-06-29 07:09:04 +00:00
wouter
50b357376a - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3436 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-06-26 07:33:03 +00:00
wouter
8c62cad20d - Fix #677 Fix DNAME responses from cache that failed internal chain 
test.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3435 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-06-26 07:27:32 +00:00
wouter
9ee8380800 - Fix #677 Fix CNAME corresponding to a DNAME was checked incorrectly 
and was therefore always synthesized (thanks to Valentin Dietrich).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3434 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-06-22 09:23:43 +00:00
wouter
0e8b1e0111 - RFC 7553 RR type URI support, is now enabled by default. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3433 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-06-04 12:30:29 +00:00
wouter
0ad11968be - Fix #674: Do not free pointers given by getenv. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3432 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-06-02 07:31:43 +00:00
wouter
916b3a305d - SOA negative TTL is capped at minimumttl in its rdata section. 
- cache-max-negative-ttl config option, default 3600.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3431 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-05-29 14:51:36 +00:00
wouter
1c536612d7 - Fix that unparseable error responses are ratelimited. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3429 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-05-29 09:27:42 +00:00
wouter
5a5fb60def - Document that ratelimit works with unbound-control set_option. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3428 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-05-26 09:18:21 +00:00
wouter
6e918c13bf - documentation proposes ratelimit of 1000 (closer to what upstream 
servers expect from us).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3427 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-05-21 12:06:41 +00:00
wouter
9c69d25180 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3426 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-05-21 07:29:42 +00:00
wouter
c17574c81a - DLV is going to be decommissioned. Advice to stop using it, and 
put text in the example configuration and man page to that effect.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3424 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-05-20 06:24:06 +00:00
wouter
97ffe64ba3 - Change syntax of particular validator error to be easier for 
machine parse, swap rrset and ip adres info so it looks like:
  validation failure <www.example.nl. TXT IN>: signature crypto
  failed from 2001:DB8:7:bba4::53 for <*.example.nl. NSEC IN>


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3422 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-05-10 12:04:22 +00:00
wouter
a2f75d6c35 - caps-whitelist in unbound.conf allows whitelist of loadbalancers 
that cannot work with caps-for-id or its fallback.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3420 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-05-01 12:36:16 +00:00
wouter
c2ba182678 - Unit test for type ANY synthesis. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3419 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-30 10:27:27 +00:00
wouter
c309b27814 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3408 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-22 08:19:12 +00:00
wouter
258d561704 - Removed contrib/unbound_unixsock.diff, because it has been 
integrated, use control-interface: /path in unbound.conf.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3407 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-22 08:03:34 +00:00
wouter
9763997a7c - Synthesize ANY responses from cache. Does not search exhaustively, 
but MX,A,AAAA,SOA,NS also CNAME.
- Fix leaked dns64prefix configuration string.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3405 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-17 14:58:07 +00:00
wouter
a8a47f27dd #664: Fix issue with Python 3 mapping of FILE* using file_py3.i from ldns. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3403 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-16 14:41:14 +00:00
wouter
18a2a40a6b #664: libunbound-Python: libldns is not used anymore. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3402 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-16 14:38:38 +00:00
wouter
093ff749cc #664: libunbound examples: produce sorted output. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3401 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-16 14:37:12 +00:00
wouter
32aa5c4d0b - Fix bug#664: libunbound python3 related fixes (from Tomas Hozza) 
Use print_function also for Python2.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3400 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-16 14:35:55 +00:00
wouter
f77c2a06f1 - Ratelimit does not apply to prefetched queries, and ratelimit-factor 
is default 10.  Repeated normal queries get resolved and with
  prefetch stay in the cache.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3399 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-16 14:18:50 +00:00
wouter
31a8018d22 - Add local-zone type inform_deny, that logs query and drops answer. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3398 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-16 08:23:06 +00:00
wouter
33a25461fa manpage for ratelimit_list 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3397 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-10 14:07:25 +00:00
wouter
7f56755943 - Fix#663: ssl handshake fails when using unix socket because dh size 
is too small.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3396 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-10 13:56:12 +00:00
wouter
15ef4ccca1 - Fix that get_option for cache-sizes does not print double newline. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3395 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-10 13:43:44 +00:00
wouter
79c9a936cb - unbound-control ratelimit_list lists high rate domains. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3393 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-10 12:13:59 +00:00
wouter
d5e5296e40 Fixes. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3392 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-10 10:57:25 +00:00
wouter
7062b00d0b - ratelimit feature, ratelimit: 100, or some sensible qps, can be 
used to turn it on.  It ratelimits recursion effort per zone.
  For particular names you can configure exceptions in unbound.conf.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3391 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-10 09:59:57 +00:00
wouter
5b8cd39902 - Fix crash in dnstap: Do not try to log TCP responses after timeout. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3390 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-08 19:58:06 +00:00
wouter
0557760286 - unbound-control list_insecure command shows the negative trust 
anchors currently configured, patch from Jelte Jansen.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3389 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-07 13:50:09 +00:00
wouter
f420142028 typo fix. 
(svn:NO TEST)


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3388 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-07 12:10:37 +00:00
wouter
ba41e16d3c - Unbound exits with a fatal error when the auto-trust-anchor-file 
fails to be writable.  This is seconds after startup.  You can
  load a readonly auto-trust-anchor-file with trust-anchor-file.
  The file has to be writable to notice the trust anchor change,
  without it, a trust anchor change will be unnoticed and the system
  will then become unoperable.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3387 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-07 12:03:05 +00:00
wouter
73c16202a0 - Libunbound skips dos-line-endings from etc/hosts. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3384 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-07 07:51:43 +00:00
wouter
edc6c2102e - Fix #660: Fix interface-automatic broken in the presence of 
asymmetric routing.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3383 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-02 10:02:01 +00:00
wouter
410ac6cd67 - rename ldns subdirectory to sldns to avoid name collision. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3380 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-26 10:21:38 +00:00
wouter
2672fe9ea9 - remote.c probedelay line is easier to read. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3379 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-26 09:46:06 +00:00
wouter
6d0f96673d - If unknown trust anchor algorithm, and libressl is used, error 
message encourages upgrade of the libressl package.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3378 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-25 16:04:05 +00:00
wouter
ca0b049109 - Fix #657: libunbound(3) recommends deprecated 
CRYPTO_set_id_callback.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3377 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-25 08:06:35 +00:00
wouter
d8e38074d4 - Fix segfault on user not found at startup (from Maciej Soltysiak). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3375 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-23 20:20:15 +00:00
wouter
d1bf57dfd1 - Fixes to add integer overflow checks on allocation (defense in depth). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3372 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-20 15:36:25 +00:00
wouter
6478a1cbfd - Add ip-transparent config option for bind to non-local addresses. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3369 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-19 09:50:35 +00:00
wouter
9f56dc9102 - Use reallocarray for integer overflow protection, patch submitted 
by Loganaden Velvindron.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3365 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-17 08:24:24 +00:00
wouter
653053c1f9 - Fixup compile on cygwin, more portable openssl thread id. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3362 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-16 10:51:32 +00:00
wouter
2fae92734c - Updated default keylength in unbound-control-setup to 3k. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3361 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-12 15:34:03 +00:00
wouter
9f96c2b6be - Fix warning on sign compare in getentropy_linux. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3360 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-10 10:29:55 +00:00
wouter
2e18cfb209 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3359 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-10 10:17:45 +00:00
wouter
8df8b4f32e print svnroot for windows makedist. 1.5.4 in configure.ac 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3358 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-10 10:03:45 +00:00
wouter
8fbbf04b40 - Fix lintian warning in unbound-checkconf man page (from Andreas 
Schulze).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3356 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-10 08:00:40 +00:00
wouter
d6893f2e8c - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3355 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-09 13:39:27 +00:00
wouter
5a4a7863b6 - Fix #644: harden-algo-downgrade option, if turned off, fixes the 
reported excessive validation failure when multiple algorithms
  are present.  It allows the weakest algorithm to validate the zone.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3354 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-09 13:30:37 +00:00
wouter
4d50899043 - stats reports tcp usage, of incoming-num-tcp buffers. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3353 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-05 15:23:14 +00:00
wouter
78eba96a8b - Document that incoming-num-tcp increase is good for large servers. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3352 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-05 11:41:29 +00:00
wouter
d8b346e409 - contrib/unbound_smf22.tar.gz: Solaris SMF installation/removal 
scripts.  Contributed by Yuri Voinov.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3351 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-05 08:18:59 +00:00
wouter
1024b260d8 - Document windows 8 tests. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3350 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-04 13:24:27 +00:00
wouter
798e778410 - store caps_response with best response in case downgrade response 
happens to be the last one.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3348 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-04 09:31:26 +00:00
wouter
a0c81b8339 - many nameservers does not try to compare more than max-sent-count, 
parse failures start 0x20 fallback procedure.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3347 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-04 09:06:05 +00:00
wouter
2c4190b319 - 0x20 fallback improved, better handling of servfail responses, 
they do not count as missing comparisons (except if all are failed),
  and better handling of inability to find nameservers, no more
  nameservers can be found results in fallback acceptance.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3346 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-04 08:30:17 +00:00
wouter
279f75db29 - Patch from Brad Smith that syncs compat/getentropy_linux with 
OpenBSD's version (2015-03-04).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3345 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-04 07:18:09 +00:00
wouter
00e9db6ccf - tag 1.5.3rc1 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3344 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-03 13:37:53 +00:00
wouter
aa16f669d5 iana portlist update 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3342 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-02 11:03:14 +00:00
wouter
3233c052fe - Fix #647 crash in 1.5.2 because pwd.db no longer accessible after 
reload.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3341 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-02-20 14:48:04 +00:00
wouter
d42f4ad137 - Fix #646 Portability to Solaris, -lrt for getentropy_solaris. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3340 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-02-20 14:03:41 +00:00
wouter
a4674309ba - Portability to Solaris 10, use AF_LOCAL. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3339 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-02-20 13:55:09 +00:00
wouter
98d9836bb9 - Use the getrandom syscall introduced in Linux 3.17 (from Heiner Kallweit). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3338 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-02-20 09:19:32 +00:00
wouter
fe7698cc6a - 1.5.2 release tag. 
- svn trunk contains 1.5.3 under development.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3337 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-02-19 15:16:40 +00:00
wouter
f37eaf65ad - Fix #643: doc/example.conf.in: unnecessary whitespace. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3335 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-02-13 11:02:46 +00:00
wouter
f6f1839628 - tag 1.5.2rc1 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3334 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-02-12 15:33:20 +00:00
wouter
14726c8248 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3331 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-02-11 07:24:57 +00:00
wouter
62bd0e84f6 - Fix scrubber with harden-glue turned off to reject NS (and other 
not-address) records.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3330 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-02-10 14:01:45 +00:00
wouter
16b3909f91 - Fix validation failure in case upstream forwarder (ISC BIND) does 
not have the same trust anchors and decides to insert unsigned NS
  record in authority section.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3329 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-02-09 11:44:46 +00:00
wouter
6856b6a202 - infra-cache-min-rtt patch from Florian Riehm, for expected long 
uplink roundtrip times.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3328 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-02-02 08:46:22 +00:00
wouter
10e38ef90d - Portability fix for Solaris ('sun' is not usable for a variable). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3326 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-30 15:32:59 +00:00
wouter
674e12318a - Fix 0x20 capsforid fallback to omit gratuitous NS and additional 
section changes.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3323 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-30 09:35:38 +00:00
wouter
ff2cccec3d - Fix pyunbound byte string representation for python3. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3322 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-29 16:10:51 +00:00
wouter
f8c9f95aa9 - Fix unintended use of gcc extension for incomplete enum types, 
compile with pedantic c99 compliance (from Daniel Dickman).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3321 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-26 08:46:40 +00:00
wouter
5154b3406d - windows port fixes, no AF_LOCAL, no chown, no chmod(grp). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3319 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-23 15:23:58 +00:00
wouter
14416f4ca0 - unbound-checkconf -f prints chroot with pidfile path. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3316 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-16 14:31:02 +00:00
wouter
de842e85fe - unit test for local unix connection. Documentation and log_addr 
does not inspect port for AF_LOCAL.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3315 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-16 13:11:07 +00:00
wouter
b5373c8c4b iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3314 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-13 13:46:48 +00:00
wouter
84bdd4e765 - Fix pyunbound ord call, portable for python 2 and 3. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3313 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-12 15:20:20 +00:00
wouter
a5bed77fec - Cast sun_len sizeof to socklen_t. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3312 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-12 08:20:43 +00:00
wouter
cca6635a06 - Fix warnings in pythonmod changes. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3311 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-07 09:29:59 +00:00
wouter
d0b507bcdf fix attribution. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3310 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-07 07:49:46 +00:00
wouter
dd182a058c - coded the default of control-use-cert, to yes. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3309 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-06 14:54:38 +00:00
wouter
b4fd8fe3d7 - Fixup that patch and uid lookup (only for daemon). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3306 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-06 14:37:45 +00:00
wouter
9537cdfccf - patch for remote control over local sockets, from Dag-Erling 
Smorgrav, Ilya Bakulin.  Use control-interface: /path/sock and
  control-use-cert: no.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3304 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-06 14:12:59 +00:00
wouter
c2b7d31586 iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3303 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-06 08:02:41 +00:00
wouter
9d84c30040 - Patch from Philip Paeps to contrib/unbound_munin_ that uses 
type ABSOLUTE.  Allows munin.conf: [idleserver.example.net]
  unbound_munin_hits.graph_period minute


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3301 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-05 14:47:52 +00:00
wouter
ace7f8322b - Updated contrib warmup.cmd/sh to support two modes - load 
from pre-defined list of domains or (with filename as argument)
  load from user-specified list of domains, and updated contrib
  unbound_cache.sh/cmd to support loading/save/reload cache to/from
  default path or (with secondary argument) arbitrary path/filename,
  from Yuri Voinov.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3300 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-05 13:58:51 +00:00
wouter
632dac1f66 attribution. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3299 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-05 13:53:52 +00:00
wouter
a1a735dcde - Fix #634: fix fail to start on Linux LTS 3.14.X, ignores missing 
IP_MTU_DISCOVER OMIT option.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3298 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-05 13:51:22 +00:00
wouter
74d2262084 - patch from Brad Smith that fixes DESTDIR in unbound-control-setup 
for installs where config is not in the prefix location.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3297 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-05 13:20:04 +00:00
wouter
ad9a0833fe - print query name when max target count is exceeded. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3296 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-05 13:12:42 +00:00
wouter
5d02af5460 - patch from Stephane Lapie that adds to the python API, that 
exposes struct delegpt, and adds the find_delegation function.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3295 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-05 10:16:36 +00:00
wouter
502bdd5a3e - make strip works for unbound-host and unbound-anchor. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3294 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-05 09:33:31 +00:00
wouter
a3582f1bf5 - getauxval test for ppc64 linux compatibility. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3293 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-05 09:13:32 +00:00
wouter
b1061c10c8 - local-zone: example.com inform makes unbound log a message with 
client IP for queries in that zone.  Eg. for finding infected hosts.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3292 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-12-09 11:29:17 +00:00
wouter
e3a81d824f - svn trunk has 1.5.2 in development. 
- config.guess and config.sub update from libtoolize.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3291 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-12-09 08:24:27 +00:00
wouter
c89cf11661 - Fix CVE-2014-8602: denial of service by making resolver chase 
endless series of delegations.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3289 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-12-08 15:09:18 +00:00
wouter
0137e92031 - Fix bug#632: unbound fails to build on AArch64, protects 
getentropy compat code from calling sysctl if it is has been removed.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3287 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-12-02 00:19:42 +00:00
wouter
10095fe0dd - Add include to getentropy_linux.c, hopefully fixing debian build. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3286 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-30 02:00:29 +00:00
wouter
52f9c2bd44 - Fix makefile for build from noexec source tree. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3285 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-28 20:28:38 +00:00
wouter
f41c40ff4b Fix attribution and mention company (no restriction on use). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3282 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-27 10:54:05 +00:00
wouter
4b9ef41aee - Fix libunbound undefined symbol errors for main. 
Referencing main does not seem to be possible for libunbound.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3280 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-26 16:18:53 +00:00
wouter
d8e8de4760 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3279 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-24 08:46:24 +00:00
wouter
1af7cc2ff3 - Fix log at high verbosity and memory allocation failure. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3278 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-24 08:17:45 +00:00
wouter
02f99bb274 - Fix crash on multiple thread random usage on systems without 
arc4random.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3277 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-21 08:22:18 +00:00
wouter
95de7e9b8f - fix compat/getentropy_win.c check if CryptGenRandom works and no 
immediate exit on windows.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3276 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-20 12:44:00 +00:00
wouter
f9213eaf93 - Fix cdflag dns64 processing. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3275 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-19 08:43:08 +00:00
wouter
1100adad50 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3274 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-18 15:16:25 +00:00
wouter
0778829809 - Fix that CD flag disables DNS64 processing, returning the DNSSEC 
signed AAAA denial.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3273 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-18 15:15:57 +00:00
wouter
d437febed1 - Fix #627: SSL_CTX_load_verify_locations return code not properly 
checked.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3271 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-17 08:10:49 +00:00
wouter
12e488a497 - parser with bison 2.7 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3270 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-14 15:59:30 +00:00
wouter
e550629a45 - Patch from Stephanie Lapie that implements aaaa-filter, added 
to contrib/aaaa-filter-iterator.patch.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3269 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-13 09:03:47 +00:00
wouter
dfa131be35 - trunk has 1.5.1 in development. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3268 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-12 21:17:12 +00:00
wouter
a1cf7d3817 - Patch from James Raftery, always print stats for rcodes 0..5. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3267 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-12 17:25:59 +00:00
wouter
f203aa89f4 - Removed 'increased limit open files' log message that is written 
to console.  It is only written on verbosity 4 and higher.
  This keeps system bootup console cleaner.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3266 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-12 11:04:43 +00:00
wouter
5072f3026d - Patch from Robert Edmonds fixes hyphens in unbound-anchor man page. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3265 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-12 11:00:31 +00:00
wouter
dc2c95d2fd - Patch from Robert Edmonds to build pyunbound python module 
differently.  No versioninfo, with -shared and without $(LIBS).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3264 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-12 10:58:33 +00:00
wouter
4f7379b3e9 - review fix from Ralph. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3262 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-11 14:27:35 +00:00
wouter
8cd66c6e1d tag 1.5.0rc1 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3260 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-11 14:18:32 +00:00
wouter
8af379fd54 - version number in svn trunk is 1.5.0 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3259 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-11 13:23:50 +00:00
wouter
21c836d58c - Fix bug where forward or stub addresses with same address but 
different port number were not tried.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3258 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-11 13:10:44 +00:00
wouter
2a9d58f060 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3257 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-11 09:32:30 +00:00
wouter
f4aefeec79 - dnstap fixes by Robert Edmonds: 
dnstap/dnstap.m4: cosmetic fixes
	dnstap/: Remove compiled protoc-c output files
	dnstap/dnstap.m4: Error out if required libraries are not found
	dnstap: Fix ProtobufCBufferSimple usage that is incorrect as of
		protobuf-c 1.0.0
	dnstap/: Adapt to API changes in latest libfstrm (>= 0.2.0)


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3254 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-07 09:09:04 +00:00
wouter
887c850601 - Redefine internal minievent symbols to unique symbols that helps 
linking on platforms where the linker leaks names across modules.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3252 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-04 14:04:37 +00:00
wouter
cd08165992 - Add ub_ctx_add_ta_autr function to add a RFC5011 automatically 
tracked trust anchor to libunbound.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3251 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-04 09:11:59 +00:00
wouter
9f6a5bcfc8 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3249 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-10-27 09:54:44 +00:00
wouter
6128ac971e - Disabled use of SSLv3 in remote-control and ssl-upstream. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3248 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-10-27 09:26:48 +00:00
wouter
6f6226da8b Layout improvement of the nroff source. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3247 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-10-16 09:45:11 +00:00
wouter
4644ef143c - Documented dns64 configuration in unbound.conf man page. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3246 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-10-16 09:37:56 +00:00
wouter
e45a08b6f8 - Fix ctype invocation casts. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3241 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-10-13 08:22:34 +00:00
wouter
2145d24107 - Fix #617: in ldns in unbound, lowercase WKS services. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3240 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-10-13 07:11:16 +00:00
wouter
88f1956519 - Fix unbound capsforid fallback, it ignores TTLs in comparison. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3239 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-10-10 14:12:17 +00:00
wouter
6f6571c83f - Fix unbound-checkconf check for module config with dns64 module. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3238 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-10-10 07:07:58 +00:00
wouter
192cc2581b and name, of course 
(svn:NO TEST)


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3237 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-10-06 12:49:08 +00:00
wouter
168bfe9373 changelog update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3236 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-10-06 12:35:02 +00:00
wouter
ab9873d79c - Fix #614: man page variable substitution bug. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3234 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-10-06 07:42:42 +00:00
wouter
9931c82271 - fix #613: Allow tab ws in var length last rdfs (in ldns str2wire). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3233 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-10-01 08:11:42 +00:00
wouter
0f23452b2a - Fix #612: create service with service.conf in present directory and 
auto load it.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3232 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-09-29 09:27:22 +00:00
wouter
4f49e724d7 - updated configure and aclocal with newer autoconf 1.13. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3229 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-09-25 11:45:32 +00:00
wouter
ef10fe913b - Fix for mingw compile with openssl-1.0.1i. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3228 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-09-22 12:20:20 +00:00
wouter
5355258872 - Fix swig and python examples for Python 3.x. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3227 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-09-22 11:39:00 +00:00
wouter
607e515f5f - improve python configuration detection to build on Fedora 22. 
from Pavel Simerda.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3226 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-09-19 09:57:20 +00:00
wouter
31bb511274 - patches to also build with Python 3.x (from Pavel Simerda). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3225 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-09-18 13:28:21 +00:00
wouter
7383fe8a62 - Updated the TCP_BACLOG from 5 to 256, so that the tcp accept queue 
is longer and more tcp connections can be handled.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3224 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-09-16 13:49:21 +00:00
wouter
88e8ec11a6 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3223 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-09-16 13:08:38 +00:00
wouter
7352e5d7cc - Fix tcp timer waiting list removal code. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3222 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-09-16 13:08:27 +00:00
wouter
1ed44e7004 - Fix unit test for CDS typecode. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3221 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-09-15 12:49:37 +00:00
wouter
cac1443688 - type CDS and CDNSKEY types in sldns. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3220 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-09-05 09:25:31 +00:00
wouter
780855ae76 - Removed necessity for pkg-config from the dnstap.m4, new are 
the --with-libfstrm and --with-protobuf-c configure options.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3216 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-08-25 13:04:32 +00:00
wouter
ff0382b5f0 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3215 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-08-25 12:05:52 +00:00
wouter
28dd736029 - Fixup checklock code for log lock and its mutual initialization 
dependency.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3214 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-08-25 12:00:30 +00:00
wouter
c3144ef1ec - Update unbound manpage with more explanation (from Florian Obser). 
- Removed .LP after .SH.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3212 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-08-19 10:32:17 +00:00
wouter
49fbea259b - Fixup doc/unbound.doxygen to remove obsolete 1.8.7 settings. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3210 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-08-18 14:50:59 +00:00
wouter
1fa8825030 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3208 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-08-18 07:46:48 +00:00
wouter
bc788b25d7 - Fix #603: unbound-checkconf -o <option> should skip verification 
checks.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3207 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-08-18 07:21:01 +00:00
wouter
d74c01b712 - dnstap support, with a patch from Farsight Security, written by 
Robert Edmonds. The --enable-dnstap needs libfstrm and protobuf-c.
  It is BSD licensed (see dnstap/dnstap.c).
  Building with --enable-dnstap needs pkg-config with this patch.
- Noted dnstap in doc/README and doc/CREDITS.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3206 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-08-05 07:57:52 +00:00
wouter
2968f08b2d - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3204 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-08-01 13:30:39 +00:00
wouter
244de881ef - Patch add msg, rrset, infra and key cache sizes to stats command 
from Maciej Soltysiak.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3203 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-08-01 13:24:46 +00:00
wouter
0cc9786752 - testdata/dns64_lookup.rpl for unit test for dns64 functionality. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3200 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-31 08:16:18 +00:00
wouter
a02144f04f - Changes from DNS64: 
strcpy changed to memmove.
  arraybound check fixed from prefix_net/8/4 to prefix_net/8+4.
  allocation of result consistently in the correct region.
  time_t is now used for ttl in unbound (since the patch's version).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3199 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-31 08:00:38 +00:00
wouter
f8f0117ea9 - DNS64 from Viagenie (BSD Licensed), written by Simon Perrault. 
Initial commit of the patch from the FreeBSD base (with its fixes).
  This adds a module (for module-config in unbound.conf) dns64 that
  performs DNS64 processing, see README.DNS64.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3198 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-31 07:15:33 +00:00
wouter
c4ef386ed9 - Patch from Dag-Erling Smorgrav that implements feature, unbound -dd 
does not fork in the background and also logs to stderr.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3197 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-29 11:48:43 +00:00
wouter
f17ba9b11b - Fix endian.h include for OpenBSD. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3196 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-21 00:06:54 +00:00
wouter
f50092d51e - And Fix#596: Bail out of unbound-control dump_infra when ssl 
write fails.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3195 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-16 10:07:26 +00:00
wouter
321a920e68 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3194 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-15 14:48:16 +00:00
wouter
c788e53800 - Fix #596: Bail out of unbound-control list_local_zones when ssl 
write fails.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3193 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-15 14:42:57 +00:00
wouter
7064fd4e00 Configure tests if main can be linked to from getentropy compat. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3191 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-13 08:18:57 +00:00
wouter
1816535b88 - update compat/getentropy and arc4random to the most recent ones from OpenBSD. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3184 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-12 18:23:49 +00:00
wouter
e5d5340f1b - update compat/getentropy to the most recent ones from OpenBSD. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3183 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-12 18:03:27 +00:00
wouter
556c8f7752 - Fix bug in fix for log locks that caused deadlock in signal handler. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3182 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-12 17:34:37 +00:00
wouter
862e4bf306 - LibreSSL provides compat items, check for that in configure. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3180 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-12 14:13:45 +00:00
wouter
886fbdc54b - Fix to check openssl version number only for OpenSSL. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3179 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-12 12:54:50 +00:00
wouter
690b27c016 - Fix getentropy compat code, function refs were not portable. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3178 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-12 11:33:38 +00:00
matje
2c269921c6 malloc calloc patch 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3173 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-11 15:38:07 +00:00
wouter
1135921a07 - arc4random, getentropy and explicit_bzero compat for Windows. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3172 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-11 14:46:46 +00:00
wouter
5aa4e51f0e - fix strptime implicit declaration error on OpenBSD. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3171 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-11 14:27:14 +00:00
wouter
4b26592e42 - arc4random in compat/ and getentropy, explicit_bzero, chacha for 
dependencies, from OpenBSD.  arc4_lock and sha512 in compat.
  This makes arc4random available on all platforms, except when
  compiled with LIBNSS (it uses libNSS crypto random).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3158 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-11 09:27:24 +00:00
wouter
9994fe8446 - Fix #593: segfault or crash upon rotating logfile. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3156 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-04 07:34:58 +00:00
wouter
36fd74972e - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3155 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-03 09:18:17 +00:00
wouter
bcfb7595ac - DLV tests added. 
- signit tool fixup for compile with libldns library.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3154 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-07-03 09:07:38 +00:00
wouter
b3c4bac3da - so-reuseport is available on BSDs(such as FreeBSD 10) and OS/X. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3153 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-06-27 14:11:57 +00:00
wouter
43713e48bc iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3151 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-06-26 09:17:13 +00:00
wouter
14e8b85111 - unbound-control status reports if so-reuseport was successful. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3150 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-06-26 08:48:51 +00:00
wouter
63221696ac Test commit hooks. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3148 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-06-24 10:34:48 +00:00
wouter
0b225540dc Fixup testsetup for VM tests (testcode/run_vm.sh). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3147 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-06-24 10:26:02 +00:00
wouter
c9c7f29161 - Fix caps-for-id fallback, and added fallback attempt when servers 
drop 0x20 perturbed queries.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3146 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-06-24 08:24:28 +00:00
wouter
883d18fc36 change to test post commit hooks. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3145 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-06-23 08:48:22 +00:00
wouter
d41b54afd6 - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3144 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-06-17 11:57:32 +00:00
wouter
21badea7ff - Add AAAA for B root server to default root hints. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3143 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-06-03 07:29:41 +00:00
wouter
efd392cf85 Remove unused define from iterator.h 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3142 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-06-02 10:03:21 +00:00
wouter
0b39721cf0 - Fixup sldns_enum_edns_option typedef definition. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3141 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-05-30 07:20:11 +00:00
wouter
037cb63ea7 From Dag-Erling Smorgrav: The prototype for libworker_event_done_cb() 
needs to be moved from libunbound/libworker.h to libunbound/worker.h.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3140 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-05-28 08:20:44 +00:00
wouter
d9f5cc6e98 - make depend. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3139 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-05-28 08:19:06 +00:00
wouter
49e9d17591 - Fixup out-of-directory compile with unbound-control-setup.sh.in. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3138 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-05-28 08:15:20 +00:00
wouter
7c2248dd8c - Code cleanup patch from Dag-Erling Smorgrav, with compiler issue 
fixes from FreeBSD's copy of Unbound, he notes:
  Generate unbound-control-setup.sh at build time so it respects
  prefix and sysconfdir from the configure script.  Also fix the
  umask to match the comment, and the comment to match the umask.
  Add const and static where needed.  Use unions instead of
  playing pointer poker.  Move declarations that are needed in
  multiple source files into a shared header.  Move sldns_bgetc()
  from parse.c to buffer.c where it belongs.  Introduce a new
  header file, worker.h, which declares the callbacks that
  all workers must define.  Remove those declarations from
  libworker.h.	Include the correct headers in the correct places.
  Fix a few dummy callbacks that don't match their prototype.
  Fix some casts.  Hide the sbrk madness behind #ifdef HAVE_SBRK.
  Remove a useless printf which breaks reproducible builds.
  Get rid of CONFIGURE_{TARGET,DATE,BUILD_WITH} now that they're
  no longer used.  Add unbound-control-setup.sh to the list of
  generated files.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3137 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-05-28 08:07:12 +00:00
wouter
1e0eb48c1f - unbound-host -D enabled dnssec and reads root trust anchor from 
the default root key file that was compiled in.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3136 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-05-23 07:30:02 +00:00
wouter
5ae31b1929 review fixes. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3134 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-05-20 11:39:41 +00:00
wouter
8d9d4eea91 - Feature, unblock-lan-zones: yesno that you can use to make unbound 
perform 10.0.0.0/8 and other reverse lookups normally, for use if
  unbound is running service for localhost on localhost.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3133 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-05-20 10:38:32 +00:00
wouter
fbe7321ea1 - Updated create_unbound_ad_servers and unbound_cache scripts from 
Yuri Voinov in the source/contrib directory. Added
  warmup.cmd (and .sh): warm up the DNS cache with your MRU domains.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3131 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-05-16 14:40:38 +00:00
wouter
437d47515b - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3130 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-05-09 14:42:02 +00:00
wouter
af4857922e - Implement draft-ietf-dnsop-rfc6598-rfc6303-01. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3129 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-05-09 14:33:10 +00:00
wouter
79b037c5aa - Contrib windows scripts from Yuri Voinov added to src/contrib: 
create_unbound_ad_servers.cmd: enters anti-ad server lists.
  unbound_cache.cmd: saves and loads the cache.
- Added unbound-control-setup.cmd from Yuri Voinov to the windows
  unbound distribution set.  It requires openssl installed in %PATH%.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3128 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-05-08 13:39:03 +00:00
wouter
7d212de4bc - Change MAX_SENT_COUNT from 16 to 32 to resolve some cases easier. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3127 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-05-06 12:37:37 +00:00
wouter
6d8894f568 - More #567: remove : from output of stub and forward lists, this is 
easier to parse.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3126 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-05-05 14:47:08 +00:00
wouter
0d5674b5a8 - Add unbound-control flush_negative that flushed nxdomains, nodata, 
and errors from the cache.  For dnssec-trigger and NetworkManager,
  fixes cases where network changes have localdata that was already
  negatively cached from the previous network.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3125 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-29 08:47:33 +00:00
wouter
281ed362ff - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3124 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-29 07:25:46 +00:00
wouter
0bdec8d939 And changelog. 
(svn:NO TEST)


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3122 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-23 13:04:10 +00:00
wouter
ddb75f20db Different fix. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3119 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-15 11:25:36 +00:00
wouter
d293eece3c - If event2 is installed, include dir/include/event2 in compilation. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3115 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-15 11:14:50 +00:00
wouter
4494ffcbb2 - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3114 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-11 09:02:01 +00:00
wouter
6f50ee0525 - Fix #502: explain that do-ip6 disable does not stop AAAA lookups, 
but it stops the use of the ipv6 transport layer for DNS traffic.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3113 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-11 07:15:53 +00:00
wouter
7de5b0ec61 - Fix #545: improved logging, the ip address of the error is printed 
on the same log-line as the error.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3112 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-10 14:40:20 +00:00
wouter
0b1ed0233c - Fix #558: failed prefetch lookup does not remove cached response 
but delays next prefetch (in lieu of caching a SERVFAIL).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3111 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-10 13:56:16 +00:00
wouter
3ad592e37d - Fix #554: use unsigned long to print 64bit statistics counters on 
64bit systems.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3110 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-10 11:20:41 +00:00
wouter
d292682b32 - Fix #567: unbound lists if forward zone is secure or insecure with 
+i annotation in output of list_forwards, also for list_stubs
  (for NetworkManager integration.)


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3109 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-10 10:54:21 +00:00
wouter
7a5bad49e3 - unbound-control stats prints num.query.tcpout with number of TCP 
outgoing queries made in the previous statistics interval.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3108 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-10 09:13:58 +00:00
wouter
e17025eee3 - Patch from Hannes Frederic Sowa for Linux 3.15 fragmentation 
option for DNS fragmentation defense.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3107 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-10 08:35:45 +00:00
wouter
163fa6800a - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3106 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-10 08:20:50 +00:00
wouter
89e1cf45fd iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3105 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-08 07:46:09 +00:00
wouter
eaab8cc117 - Fix #574: make test fails on Ubuntu 14.04. Disabled remote-control 
in testbound scripts.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3104 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-08 07:13:49 +00:00
wouter
619d924803 - Fix #572: Fix unit test failure for systems with different 
/etc/services.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3103 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-07 09:18:29 +00:00
wouter
82d8262980 - C.ROOT-SERVERS.NET has an IPv6 address, and we updated the root 
hints (patch from Anand Buddhdev).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3102 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-07 08:18:39 +00:00
wouter
fc81bc1805 - Fix #569: do_tcp is do-tcp in unbound.conf man page. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3101 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-03-28 08:19:21 +00:00
wouter
97a4a444eb - Patch from Stuart Henderson to build unbound-host man from .1.in. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3100 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-03-25 08:09:33 +00:00
wouter
618bf78fa9 - Fix print filename of encompassing config file on read failure. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3099 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-03-24 13:13:42 +00:00
wouter
a8af8040c0 trunk has 1.4.23 in development. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3098 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-03-12 14:25:21 +00:00
wouter
cdf37ba2bb tag 1.4.22 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3096 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-03-12 12:30:23 +00:00
wouter
e3798d9aa0 - Fix bug#561: contrib/cacti plugin did not report SERVFAIL rcodes 
because of spelling.  Patch from Chris Coates.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3095 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-03-10 10:42:49 +00:00
wouter
7332f5ddef 1.4.22rc1 tag created 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3094 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-27 08:02:24 +00:00
wouter
87f160f1db - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3092 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-21 09:38:02 +00:00
wouter
959eef4c63 - Be lenient when a NSEC NameError response with RCODE=NXDOMAIN is 
received. This is okay according 4035, but not after revising
  existence in 4592.  NSEC empty non-terminals exist and thus the
  RCODE should have been NOERROR. If this occurs, and the RRsets
  are secure, we set the RCODE to NOERROR and the security status
  of the reponse is also considered secure.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3091 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-20 12:36:05 +00:00
wouter
9df60e0263 Port to Minix 3.2.1. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3081 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-14 09:23:32 +00:00
wouter
a42199b6c0 Fix parse of #553(NSD) string in sldns, quotes without spaces. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3080 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-11 08:29:42 +00:00
wouter
68b138cbd3 And fix #551 REGENT to COPYRIGHT HOLDER in license in file headings. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3079 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-07 13:28:39 +00:00
wouter
7aac37f469 - Fix #551: License change "Regents" to "Copyright holder", matching 
the BSD license on opensource.org.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3078 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-07 12:43:43 +00:00
wouter
e592a4e8db - add body to ifstatement if locks disabled. 
- add TXT string"string" test case to unit test.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3077 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-07 12:14:09 +00:00
wouter
289af9db17 iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3075 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-07 09:51:54 +00:00
wouter
fd6807c38f - code documentation on the module interface. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3074 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-06 13:18:32 +00:00
wouter
0d74f081a5 - sldns has type HIP. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3071 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-06 10:57:42 +00:00
wouter
2e369ae61d fix sldns parse tests on osx. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3070 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-05 13:40:55 +00:00
wouter
e0b84e80a2 - Fix parse in sldns of quoted parenthesized text strings. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3066 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-03 14:28:57 +00:00
wouter
da830563d2 - Fixup link with lib/event2 subdir. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3065 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-03 11:41:19 +00:00
wouter
2553b4fb9f - Detect libevent2 install automatically by configure. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3064 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-03 11:02:17 +00:00
wouter
56edfdf8d4 - fixup type EUI48 and EUI64, type APL and type IPSECKEY in string 
parse sldns.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3063 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-31 13:50:57 +00:00
wouter
25bb623632 and commitlog 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3062 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-31 11:33:22 +00:00
wouter
5758551602 - unit test for ldns wire to str and back with zones, root, nlnetlabs 
and types.sidnlabs.
- Fix for hex to string in unknown, atma and nsap.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3060 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-31 10:19:01 +00:00
wouter
5ad20035bd - delay-close does not act if there are udp-wait queries, so that 
it does not make a socketdrain DoS easier.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3059 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-30 09:27:00 +00:00
wouter
d1cb31280e - delay-close: msec option that delays closing ports for which 
the UDP reply has timed out.  Keeps the port open, only accepts
  the correct reply.  This correct reply is not used, but the port
  is open so that no port-denied ICMPs are generated.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3058 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-28 14:35:55 +00:00
wouter
8ce81b472f - iana portlist test updated so it does not touch the source 
if there are no changes.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3057 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-28 10:12:13 +00:00
wouter
33a649c386 - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3056 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-28 10:00:01 +00:00
wouter
1315093384 - reuseport is attempted, then fallback to without on failure. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3054 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-27 10:27:19 +00:00
wouter
03da1e8f35 - made lint clean. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3050 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-24 13:23:45 +00:00
wouter
36afba318e - so-reuseport: yesno option to distribute queries evenly over 
threads on Linux (Thanks Robert Edmonds).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3049 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-24 11:43:38 +00:00
wouter
2920d0fa82 - speed up unbound (reports say it could be up to 10%), by reducing 
lock contention on localzones.lock.  It is changed to an rwlock.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3048 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-24 11:21:15 +00:00
wouter
f19df3745f - unbound-event.h is installed if you configure --enable-event-api. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3047 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-24 10:55:28 +00:00
wouter
d80aaee750 - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3046 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-24 10:42:42 +00:00
wouter
a60b5a4077 - Change unbound-event.h to use void* buffer, length idiom. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3045 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-24 08:16:56 +00:00
wouter
63354244f1 - Fix #547: no trustanchor written if filesystem full, fclose checked. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3044 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-21 10:14:55 +00:00
wouter
de91e9d4f2 - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3043 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-17 15:29:04 +00:00
wouter
2ac9c97c73 - Fix isprint() portability in sldns, uses unsigned int. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3042 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-17 14:45:14 +00:00
wouter
511cfd92df - Windows port, adjust %lld to %I64d, and warning in win_event.c. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3040 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-16 16:01:37 +00:00
wouter
ba8b12b779 - fix #544: Fixed +i causes segfault when running with module conf "iterator". 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3038 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-16 13:04:34 +00:00
wouter
19b0244480 - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3037 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-14 08:26:29 +00:00
wouter
cc9064d64e - update pythonmod for ldns_ to sldns_ name change. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3035 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-12-05 16:27:52 +00:00
wouter
8af85a6350 Fix bug in cachedump format after sldns changes. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3033 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-12-05 15:57:16 +00:00
wouter
6f31050bf8 - Fix windows compile to compile with sldns. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3024 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-12-03 13:51:11 +00:00
wouter
db8f72c4f7 - Fix sldns to use sldns_ prefix for all ldns_ variables. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3022 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-12-03 09:11:16 +00:00
wouter
884b06df55 Fix linking of sldns and ldns, unique identifiers for global variables. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3021 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-11-30 11:03:55 +00:00
wouter
992c74a70a - Fix bug#537: compile python plugin without ldns library. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3016 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-11-13 08:53:53 +00:00
wouter
2e1c6e061f - Fix bug#536: acl_deny_non_local and refuse_non_local added. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3015 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-11-12 10:08:54 +00:00
wouter
936b11a95e interface: and ip-address: 
also includes for newer ldns in pythonmod. 


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3014 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-11-06 02:48:59 +00:00
wouter
116d59bef9 - Patch from Neel Goyal to fix async id assignment if callback 
is called by libunbound in the mesh attach.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3013 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-11-05 21:16:02 +00:00
wouter
22dd467d26 - Patch from Neel Goyal to fix callback in libunbound. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3012 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-11-04 18:53:21 +00:00
wouter
c008161b94 - if configured --with-libunbound-only fix make install. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3010 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-11-03 23:12:55 +00:00
wouter
b641715036 portability fixes for new USE_SLDNS ldns subdir codebase. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3008 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-10-31 16:27:15 +00:00
wouter
72c68179a5 note bugzilla number. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3001 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-10-31 15:32:56 +00:00
wouter
8e6ee27eda - separate ldns into core ldns inside ldns/ subdirectory. No more 
--with-ldns is needed and unbound does not rely on libldns.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2998 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-10-31 15:09:26 +00:00
wouter
c0c114ebeb - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2997 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-10-31 15:06:24 +00:00
wouter
61ef2ac265 - Set SO_REUSEADDR so that the wildcard interface and a more specific 
interface port 53 can be used at the same time, and one of the
  daemons is unbound.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2996 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-10-31 15:06:11 +00:00
wouter
e37c8fa8e9 - Fix #528: if very high logging (4 or more) segfault on allow_snoop. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2994 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-10-22 12:01:51 +00:00
wouter
d672c0066c - Patch from Neel Goyal: Add an API call to set an event base on an 
existing ub_ctx.  This basically just destroys the current worker and
  sets the event base to the current.  And fix a deadlock in
  ub_resolve_event – the cfglock is held when libworker_create is
  called.  This ends up trying to acquire the lock again in
  context_obtain_alloc in the call chain.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2992 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-10-22 09:32:10 +00:00
wouter
a6234674fb - unbound-event.h is installed if configured --with-libevent. It 
contains low-level library calls, that use libevent's event_base
  and an ldns_buffer for the wire return packet to perform async
  resolution in the client's eventloop.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2970 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-09-26 08:34:14 +00:00
wouter
4d385dc589 - acx_nlnetlabs.m4 to 26; improve FLTO help text. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2964 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-09-19 13:08:58 +00:00
wouter
3cb0e151cb iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2963 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-09-19 12:03:44 +00:00
wouter
44e821b59a - trunk has 1.4.22 number inside it. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2962 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-09-19 10:53:38 +00:00
wouter
8010bb2aa4 - Fix#524: max-udp-size not effective to non-EDNS0 queries, from 
Daisuke HIGASHI.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2955 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-09-16 09:07:08 +00:00
wouter
00bfbae532 - tag 1.4.21rc1 made again. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2953 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-09-10 14:04:35 +00:00
wouter
2002f2427b more time_t. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2951 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-09-10 08:46:33 +00:00
wouter
4bd845dea6 - More fixes for bug#519: for the threaded case test if the bg 
thread has been killed, on ub_ctx_delete, to avoid hangs.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2946 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-08-26 12:24:27 +00:00
wouter
658bd3bcf8 - review fixes from Willem. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2945 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-08-22 14:10:29 +00:00
wouter
b492e89a4d - more fixes that I overlooked. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2944 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-08-22 07:33:51 +00:00
wouter
1efe599073 - Fix#520: Errors found by static analysis from Tomas Hozza(redhat). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2942 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-08-21 13:31:09 +00:00
wouter
b4a007738c - Fix for 2038, with time_t instead of uint32_t. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2939 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-08-20 12:23:42 +00:00
wouter
60c16ee604 - Fix#519 ub_ctx_delete may hang in some scenarios (libunbound). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2937 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-08-19 12:02:17 +00:00
wouter
1402c87b39 Fix uninit variable in fix#516. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2934 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-08-14 07:53:33 +00:00
wouter
ef7be2ae15 - Fix#516 dnssec lameness detection for answers that are improper. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2933 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-08-08 09:29:33 +00:00
wouter
fe14e57752 tag 1.4.21rc1 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2932 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-07-30 14:42:20 +00:00
wouter
e484400f89 note down the bugzilla reference number. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2931 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-07-30 08:29:15 +00:00
wouter
08d0e4c6f6 - Fix memleak in testcode for testbound (if it fails). 
- Fix NSS returned arrays out of setup function to be statics.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2930 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-07-29 07:32:35 +00:00
wouter
1539f33fd9 iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2929 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-07-26 13:26:51 +00:00
wouter
d0b6865a8a - max include of 100.000 files (depth and globbed at one time). 
This is to preserve system memory in bug cases, or endless cases.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2928 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-07-26 13:11:53 +00:00
wouter
c697c00b08 - libunbound documentation on how to avoid openssl race conditions. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2926 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-07-19 11:48:22 +00:00
wouter
89c56f759c iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2925 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-07-19 10:51:11 +00:00
wouter
28d80a01ca - streamtcp man page, contributed by Tomas Hozza. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2924 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-07-19 10:46:16 +00:00
wouter
e06004ca04 - configure --disable-flto option (from Robert Edmonds). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2916 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-06-25 07:25:31 +00:00
wouter
457d21eb30 - Squelch sendto-permission denied errors when the network is 
not connected, to avoid spamming syslog.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2915 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-06-25 07:03:03 +00:00
wouter
784ede12a6 - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2914 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-06-18 07:34:00 +00:00
wouter
78a520b994 - Fix for const string literals in C++ for libunbound, from Karel 
Slany.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2913 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-06-18 07:33:44 +00:00
wouter
a249574168 - Fixup manpage syntax. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2912 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-06-17 11:20:42 +00:00
wouter
05d71585ef - get_option and set_option support for log-time-ascii, python-script 
val-sig-skew-min and val-sig-skew-max.  log-time-ascii takes effect
  immediately.  The others are mostly useful for libunbound users.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2911 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-06-14 08:03:52 +00:00
wouter
9db6acb660 - get_option, set_option, unbound-checkconf -o and libunbound 
getoption and setoption support cache-min-ttl and cache-max-ttl.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2910 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-06-13 08:26:41 +00:00
wouter
57626b2e16 - Max include depth is unlimited. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2909 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-06-10 13:37:14 +00:00
wouter
6b1da4e103 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2908 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-06-10 12:25:34 +00:00
wouter
bcb1b4b1da - Fix#501: forward-first does not recurse, when forward name is ".". 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2907 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-06-10 12:25:10 +00:00
wouter
71da5d2023 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2905 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-05-27 13:11:11 +00:00
wouter
46108fac55 - Update acx_pthreads.m4 to ax_pthreads.4 (2013-03-29), and apply 
patch to it to not fail when -Werror is also specified, from the
  autoconf-archives.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2904 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-05-27 08:22:40 +00:00
wouter
bf45bfd756 - Explain bogus and secure flags in libunbound more. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2903 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-05-21 09:06:21 +00:00
wouter
05e58e752c - Fix#500 use of non-initialised values on socket bind failures. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2901 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-05-16 08:14:03 +00:00
wouter
2a9f76b880 - Fix use-after-free in out-of-memory handling code (thanks Jake 
Montgomery).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2900 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-05-16 07:36:37 +00:00
wouter
b7857366b8 - Fix round-robin doesn't work with some Windows clients (from Ilya Bakulin). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2899 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-05-15 11:56:22 +00:00
wouter
ea9a97d9b8 - update acx_nlnetlabs.m4 to v23, sleep w32 fix. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2898 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-05-03 09:35:55 +00:00
wouter
ac5cb1ea58 we comply with RFC 6944: DNSKEY algorithm status 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2896 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-05-01 12:18:48 +00:00
wouter
167e55b965 - add unbound-control insecure_add and insecure_remove for the 
administration of negative trust anchors.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2895 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-04-26 14:14:07 +00:00
wouter
92e77546db - updated iana portlist. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2894 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-04-25 11:59:05 +00:00
wouter
d63f8ef809 - Implement max-udp-size config option, default 4096 (thanks 
Daisuke Higashi).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2893 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-04-25 11:55:46 +00:00
wouter
48c72225d1 - Robust checks on dname validity from rdata for dname compare. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2892 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-04-25 10:28:25 +00:00
wouter
d3b8ff05ce - Fix snprintf return value usage, fixed libunbound_get_option. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2888 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-04-19 11:34:36 +00:00
wouter
6cff0e0270 - own implementation of compat/snprintf.c. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2887 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-04-18 14:28:21 +00:00
wouter
75c85eaa74 - fix bug #491: pick program name (0th argument) as syslog identity. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2885 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-04-18 12:14:40 +00:00
wouter
eeb1781327 - unbound-anchor review: BIO_write can return 0 successfully if it 
has successfully appended a zero length string.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2884 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-04-15 15:08:24 +00:00
wouter
ce79ba4905 - Fix so that for a configuration line of include: "*.conf" it is not 
an error if there are no files matching the glob pattern.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2883 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-04-15 07:57:08 +00:00
wouter
b838694589 - Fix queries leaking up for stubs and forwards, if the configured 
nameservers all fail to answer.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2882 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-04-11 10:08:34 +00:00
wouter
b2d05e729e - code improve for minimal responses, small speed increase. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2881 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-04-10 14:29:35 +00:00
wouter
072b65caae - Fix crash in previous private address fixup of 22 March. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2880 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-04-09 07:38:24 +00:00
wouter
f703673eda - updated iana portlist. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2879 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-04-09 07:02:43 +00:00
wouter
d1e5c9f3b1 - Make reverse zones easier by documenting the nodefault statements 
commented-out in the example config file.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2878 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-28 13:36:38 +00:00
wouter
3585fc9462 more fixes for endianness. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2877 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-26 08:14:06 +00:00
wouter
9a329656c7 And add detection for machine/endian.h to it. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2875 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-25 14:53:09 +00:00
wouter
92110dd306 - #492: Fix endianness detection, revert to older lookup3.c detection 
and put new detect lines after previous tests, to avoid regressions
  but allow new detections to succeed.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2872 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-25 09:35:27 +00:00
wouter
b87787e4a1 - Fix makedist for new svn for -d option. 
- unbound.h header file has UNBOUND_VERSION_MAJOR define.
- Fix windows RSRC version for long version numbers.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2870 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-22 12:41:13 +00:00
wouter
be9eda888c iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2869 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-22 10:00:55 +00:00
wouter
e306a8f384 - Fix resolve of names that use a mix of public and private addresses. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2868 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-22 09:36:33 +00:00
wouter
4c5695e1bf - install copy of unbound-control.8 man page for unbound-control-setup 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2866 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-21 12:48:12 +00:00
wouter
a5837b560b trunk has 1.4.21 version 
committed libunbound version 4:1:2 for binary API updated in 1.4.20


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2865 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-21 12:24:42 +00:00
wouter
3800239c3c release changelog entry. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2863 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-21 11:17:00 +00:00
wouter
f20eabebee tag 1.4.20rc1 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2860 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-14 13:06:27 +00:00
wouter
6fbd251bbe iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2859 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-14 12:54:52 +00:00
wouter
1a0ac9ffd9 - Fixup makedist.sh for windows compile. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2858 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-12 13:44:59 +00:00
wouter
7be4f28631 - testcode/ldns-testpkts.c check for makedist is informational. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2856 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-11 15:11:56 +00:00
wouter
d310cb5644 - iana portlist update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2855 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-03-11 14:42:13 +00:00
wouter
4e13c3b57b - fix defines in lookup3 for bigendian bsd alpha 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2845 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-02-15 14:00:03 +00:00
wouter
537b023feb - Fixup openssl_thread init code to only run if compiled with SSL. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2843 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-02-11 16:03:51 +00:00
wouter
cd302a1e8e update iana portlist. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2835 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-02-07 13:30:17 +00:00
wouter
dd39221bde - add libunbound.ttl at end of result structure, version bump for 
libunbound and binary backwards compatible, but 1.4.19 is not
  forward compatible with 1.4.20.
- updated configure scripts with newer versions.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2834 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-02-07 13:23:48 +00:00
wouter
f475681731 - detect endianness in lookup3 on BSD. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2833 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-02-07 08:18:33 +00:00
wouter
2643272560 - includes and have_ssl fixes for nss. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2830 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-30 13:15:03 +00:00
wouter
9285d02d4a - printout name of zone with duplicate fwd and hint errors. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2828 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-29 08:13:57 +00:00
wouter
0265146e12 fixup for doxygen 1.8.3 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2827 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-28 13:44:38 +00:00
wouter
3e363e5236 - updated fwd_zero for newer nc. Updated common.sh for newer netstat. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2825 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-28 13:30:46 +00:00
wouter
98a8c1c53c - update iana port list. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2808 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-17 11:23:07 +00:00
wouter
a80476d462 - unbound-anchors checks the emailAddress of the signer of the 
root.xml file, default is dnssec@iana.org.  It also checks that
  the signer has the correct key usage for a digital signature.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2807 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-17 11:17:04 +00:00
wouter
614abedfbd - Check the commonName of the signer of the root.xml file in 
unbound-anchor, default is dnssec@iana.org.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2804 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-03 14:38:38 +00:00
wouter
afb056f487 - Test that unbound can handle a CNAME at an intermediate node in 
the chain of trust (where it seeks a DS record).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2803 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-03 12:25:48 +00:00
wouter
6f200f25f0 - Test that unbound-control checks client credentials. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2802 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-03 10:58:31 +00:00
wouter
2267b8b267 - Tested that unbound implements the RFC5155 Technical Errata id 3441. 
Unbound already implements insecure classification of an empty
  nonterminal in NSEC3 optout zone.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2800 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-02 14:42:20 +00:00
wouter
a506ed09ab iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2799 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-02 11:15:49 +00:00
wouter
7244053f53 - Fix openssl lock free on exit (reported by Robert Fleischman). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2798 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-02 10:53:57 +00:00
wouter
eaba5edb38 - Fix unbound-anchor xml parse of entity declarations for safety. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2797 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-12-20 08:22:39 +00:00
wouter
9243d9855f iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2796 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-12-19 10:55:18 +00:00
wouter
f28ae598a5 iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2795 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-12-18 15:26:25 +00:00
wouter
f1a5d98065 - Change of D.ROOT-SERVERS.NET A address in default root hints. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2794 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-12-14 08:08:59 +00:00
wouter
f4015ff912 - trunk has 1.4.20 under development. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2793 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-12-12 09:17:08 +00:00
wouter
7331f55fd1 1.4.19 
(svn:NO TEST)


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2791 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-12-12 08:43:16 +00:00
wouter
6eba5edc84 We turn out to support RFC 1123, 6.1 Requirements for DNS of internet hosts. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2790 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-12-06 10:07:51 +00:00
wouter
d2e35c5a50 - note support for AAAA RR type RFC. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2789 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-12-06 10:02:02 +00:00
wouter
91cda02980 changelog (svn:NO TEST) 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2788 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-12-04 11:52:14 +00:00
wouter
08a311ddd2 - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2784 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-11-30 09:50:29 +00:00
wouter
016de304a8 - bug 481: fix python example0. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2783 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-11-30 09:41:38 +00:00
wouter
b96896deb0 iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2782 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-11-27 16:01:47 +00:00
wouter
87c60e499f - Fix unbound-control forward disables configured stubs below it. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2781 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-11-09 15:35:18 +00:00
wouter
36a9c0af61 - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2780 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-11-07 08:57:51 +00:00
wouter
666d355d7b - Fixup ldns-testpkts, identical to ldns/examples. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2779 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-11-07 08:49:53 +00:00
wouter
ba27940c44 - Fix bug #477: unbound-anchor segfaults if EDNS is blocked. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2778 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-10-30 15:13:53 +00:00
matje
aae7a518bf Fix validation for responses with CNAME and wildcard expanded CNAME in 
ANSWER section.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2777 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-10-29 14:06:00 +00:00
wouter
206f968f10 - make clean and makerealclean remove generated python and docs. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2776 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-10-08 12:31:16 +00:00
wouter
9508df7769 - fix build of pythonmod in objdir, for unbound.py. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2775 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-10-08 12:07:51 +00:00
wouter
341bfc3adc - update ldns-testpkts.c to ldns 1.6.14 version. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2774 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-10-08 10:24:50 +00:00
wouter
e1c697fe2d - fix build of pythonmod in objdir (thanks Jakob Schlyter). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2773 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-10-05 07:06:11 +00:00
wouter
e68ce6d9be - fix text in unbound-anchor man page. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2772 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-10-03 14:43:46 +00:00
wouter
97cc148487 - ignore trusted-keys globs that have no files (from Paul Wouters). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2770 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-10-01 07:18:49 +00:00
wouter
05844e9c5c nicer documentation. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2769 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-09-27 13:12:00 +00:00
wouter
6a9b0764e4 - updated contrib/unbound.spec, patch from Valentin Bud. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2768 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-09-27 09:37:04 +00:00
wouter
f10b82ac45 - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2767 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-09-27 09:34:24 +00:00
wouter
320df09e27 unbound-control -q option is quiet, patch from Mariano Absatz. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2766 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-09-27 09:32:35 +00:00
wouter
5f7b92dd7a - include: directive in config file accepts wildcards. Patch from 
Paul Wouters.  Suggested use: include: "/etc/unbound.d/conf.d/*"


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2765 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-09-27 08:52:37 +00:00
wouter
c3c53b07e3 - chdir to / after chroot call (suggested by Camiel Dobbelaar). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2764 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-09-21 07:13:51 +00:00
wouter
8964aebbfb - patch_rsamd5_enable.diff: this patch enables RSAMD5 validation 
otherwise it is treated as insecure.  The RSAMD5 algorithm is
  deprecated (RFC6725).  The MD5 hash is considered weak for some
  purposes, if you want to sign your zone, then RSASHA256 is an
  uncontested hash.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2760 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-09-17 13:15:12 +00:00
wouter
1d6cf41a6f - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2754 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-08-30 12:12:58 +00:00
wouter
ac7d3cdbde - RFC6725 deprecates RSAMD5: this DNSKEY algorithm is disabled. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2753 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-08-30 12:02:53 +00:00
wouter
981720aa4c - Nicer comments outgoing-port-avoid, thanks Stu (bug #465). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2752 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-08-29 07:13:36 +00:00
wouter
62c729d59e - Fallback to 1472 and 1232, one fragment size without headers. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2746 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-08-22 08:46:30 +00:00
wouter
8f83f70712 - Fix timeouts so that when a server has been offline for a while 
and is probed to see it works, it becomes fully available for
  server selection again.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2745 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-08-21 07:17:48 +00:00
wouter
e873bbbbe9 - Add documentation to libunbound for default nonuse of resolv.conf. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2744 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-08-17 07:06:18 +00:00
wouter
4e802d7992 iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2741 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-08-02 08:08:27 +00:00
wouter
b4208b16f9 - trunk has 1.4.19 under development (fixes from 1 aug and 31 july 
are for 1.4.19).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2740 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-08-02 07:57:33 +00:00
wouter
77000db6bc note release date. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2739 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-08-02 07:46:59 +00:00
wouter
efebff52f7 - Fix openssl race condition, initializes openssl locks, reported 
by Einar Lonn and Patrik Wallstrom.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2733 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-08-01 11:31:29 +00:00
wouter
162a1a29bb - added manpage links for libunbound calls (Thanks Paul Wouters). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2732 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-07-31 13:43:08 +00:00
wouter
800da7f0fd - Fix forward-first option where it sets the RD flag wrongly. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2731 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-07-31 12:53:53 +00:00
wouter
a77e89f1d0 - Fix that enables modules to register twice for the same 
serviced_query, without race conditions or administration issues.
  This should not happen with the current codebase, but it is robust.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2730 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-07-31 11:33:06 +00:00
wouter
543b5636de - Improved forward-first and stub-first documentation. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2729 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-07-31 08:08:43 +00:00
wouter
a994a690c8 tag 1.4.18rc2 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2728 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-07-30 08:07:06 +00:00
wouter
1caf700c2e - fix bogus nodata cname chain not reported as bogus by validator, 
(Thanks Peter van Dijk).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2727 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-07-27 13:38:00 +00:00
wouter
df02b64294 1.4.18rc1 tag. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2725 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-07-26 09:20:06 +00:00
wouter
7aaba2e725 - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2724 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-07-26 09:10:36 +00:00
wouter
7f7f11f49e - review fix for libnss, check hash prefix allocation size. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2723 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-07-25 14:32:37 +00:00
wouter
f29947421f - implemented forward_first for the root. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2722 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-07-23 13:42:07 +00:00
wouter
724697a418 - fix missing break for GOST DS hash function. 
- make depend


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2721 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-07-23 12:27:04 +00:00
wouter
4a9e53af6f - Fix bug#452 and another assertion failure in mesh.c, makes 
assertions in mesh.c resist duplicates.  Fixes DS NS search to
  not generate duplicate sub queries.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2718 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-07-20 13:08:19 +00:00
wouter
792a5b9f37 - Fix bug#454: Remove ACX_CHECK_COMPILER_FLAG from configure.ac, 
if CFLAGS is specified at configure time then '-g -O2' is not
  appended to CFLAGS, so that the user can override them.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2717 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-07-19 08:51:35 +00:00
wouter
4c31c87d01 - Fix libunbound report of errors when in background mode. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2716 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-07-18 09:43:50 +00:00
wouter
ff883c375f - updated iana ports list. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2714 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-07-11 09:31:39 +00:00
willem
d07b0c7c3b flush_bogus option for unbound-control 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2713 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-07-09 14:33:07 +00:00
wouter
109c3e384b - Fix validation of qtype DS queries that result in no data for 
non-optout NSEC3 zones.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2712 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-07-06 13:56:44 +00:00
wouter
eba23b8235 - compile libunbound with libnss on Suse, passes regression tests. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2710 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-07-04 12:33:32 +00:00
wouter
9aba3e1991 - FIPS_mode openssl does not use arc4random but RAND_pseudo_bytes. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2709 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-07-03 09:32:16 +00:00
wouter
51d0b0edf7 - updated iana ports list. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2708 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-07-02 12:20:50 +00:00
wouter
4e1683e116 - patch for unbound_munin_ script to handle arbitrary thread count by 
Sven Ulland.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2707 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-29 08:58:18 +00:00
wouter
7b4a84fda9 updated iana ports list. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2706 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-28 14:29:38 +00:00
wouter
900734a71b - fix edns-buffer-size and msg-buffer-size manpage documentation. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2705 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-28 14:25:10 +00:00
wouter
2a46be9b00 - code review: return value of cache_store can be ignored for better 
performance in out of memory conditions.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2704 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-28 14:18:41 +00:00
wouter
182250237f - detect if openssl has FIPS_mode. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2703 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-28 06:54:16 +00:00
wouter
8cb9d852c0 - disable RSAMD5 if in FIPS mode (for openssl and for libnss). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2702 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-25 15:13:44 +00:00
wouter
4d012867f2 - disable RSAMD5 if in FIPS mode (when compiled with openssl). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2701 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-25 15:02:52 +00:00
wouter
2d5552262c implement DNSSEC with libNSS: NSEC3, RSA, DSA, ECDSA, and DS hashes. 
make test succeeds.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2699 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-22 14:31:29 +00:00
wouter
836c366bb4 RSA with nss. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2697 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-21 15:19:16 +00:00
wouter
1aac0639ef - nss check for verification failure. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2695 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-21 12:00:48 +00:00
wouter
6fa543ca4d - fix error handling of alloc failure during rrsig verification. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2693 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-21 07:22:01 +00:00
wouter
5373e6bec7 - work on --with-nss build option (for now, --with-libunbound-only). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2690 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-20 15:11:53 +00:00
wouter
d383074120 - --with-libunbound-only build option, only builds the library and 
not the daemon and other tools.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2689 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-19 12:20:11 +00:00
wouter
ec417b19da code review. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2688 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-18 14:22:29 +00:00
wouter
e3f7381966 - code review. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2687 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-15 19:44:09 +00:00
wouter
57089323ec iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2686 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-15 12:33:10 +00:00
wouter
e673d893c7 - The key-cache bad key ttl is now 60 seconds. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2685 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-15 12:25:29 +00:00
wouter
69c422db01 - implement log-time-ascii on windows. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2684 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-15 08:24:44 +00:00
wouter
9c0e95b8a2 - bug #452: fix crash on assert in mesh_state_attachment. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2683 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-11 12:04:58 +00:00
wouter
2c087c0fef change to test commit hook. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2681 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-05-30 12:26:05 +00:00
wouter
e8a177224e - silence warning from swig-generated code (md set but not used in 
swig initmodule, due to ifdefs in swig generated code).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2680 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-05-30 09:08:17 +00:00
wouter
df68bdcd08 - Fix debian-bugs-658021: Please enable hardened build flags. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2679 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-05-27 20:46:52 +00:00
wouter
27c547c0ff - updated iana ports list. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2678 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-05-25 14:29:20 +00:00
wouter
5363ac922e trunk is 1.4.18 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2677 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-05-24 09:00:26 +00:00
wouter
6fc724d1ed tag for 1.4.17 release. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2676 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-05-24 08:37:33 +00:00
wouter
a29ad4c7d0 - Review comments from Yuri, removed duplicate memset to zero in delegpt. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2675 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-05-18 15:04:08 +00:00
wouter
8b75500e11 tag 1.4.17rc1 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2674 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-05-16 12:31:08 +00:00
wouter
37c1ce272d spelling fixup. svn: NO TEST 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2673 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-05-16 12:02:34 +00:00
wouter
afcd09ab22 - Protect if statements in val_anchor for compilate without locks. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2670 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-05-16 10:54:52 +00:00
wouter
c0f03c1a05 - Updated doc/FEATURES with RFCs that are implemented but not listed. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2669 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-05-16 10:30:42 +00:00
wouter
ff407af506 - fix configure ECDSA support in ldns detection for windows compile. 
- fix possible uninitialised variable in windows pipe implementation.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2667 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-05-15 14:50:21 +00:00
wouter
18934b4be5 fix alignment problem in util/random.c for sparc64/freebsd. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2666 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-05-09 09:13:57 +00:00
wouter
affaa5c882 iana portlist updated 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2664 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-05-08 12:40:04 +00:00
wouter
225b292ce7 - Fix for accept spinning reported by OpenBSD. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2663 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-05-08 12:08:55 +00:00
wouter
a6e01024c8 - Fix validation of nodata for DS query in NSEC zones, reported by 
Ondrej Mikle.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2662 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-05-02 11:58:27 +00:00
wouter
cb699ceca7 - ECDSA support (RFC 6605) by default. Use --disable-ecdsa for older 
openssl.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2661 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-04-13 16:21:04 +00:00
wouter
dd27194a44 iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2659 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-04-10 11:04:17 +00:00
wouter
ae03c65057 - Applied patch from Daisuke HIGASHI for rrset-roundrobin and 
minimal-responses features.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2658 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-04-10 09:16:39 +00:00
wouter
f07e255e75 - fix bug #444: setusercontext was called too late (thanks Bjorn 
Ketelaars).



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2657 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-04-05 09:30:04 +00:00
wouter
b0047e0dda - fix bug #443: --with-chroot-dir not honoured by configure. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2656 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-04-05 09:10:56 +00:00
wouter
8439c22d00 - fix bug #442: Fix that Makefile depends on pythonmod headers 
even using --without-pythonmodule.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2654 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-03-27 07:31:22 +00:00
wouter
6555b3e55d - contrib/validation-reporter follows rotated log file (patch from 
Augie Schwer).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2650 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-03-22 09:45:27 +00:00
wouter
28727b8b02 - new approach to NS fetches for DS lookup that works with 
cornercases, and is more robust and considers forwarders.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2646 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-03-21 15:01:01 +00:00
wouter
e5d9f18a1c - fix to locate nameservers for DS lookup with NS fetches. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2645 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-03-19 15:44:21 +00:00
wouter
4404a61a75 - iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2644 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-03-19 11:10:35 +00:00
wouter
829b478e40 - Patch for access to full DNS packet data in unbound python module 
from Ondrej Mikle.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2643 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-03-16 14:53:51 +00:00
wouter
8423644a4c - Applied line-buffer patch from Augie Schwer to validation.reporter.sh. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2642 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-03-10 08:28:42 +00:00
wouter
2d40ca1010 removed warning from --enable-ecdsa. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2641 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-03-02 12:17:09 +00:00
wouter
0c1759fb44 - flush_infra cleans timeouted servers from the cache too. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2639 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-03-02 09:05:36 +00:00
wouter
276300a61a - forward-first option. Tries without forward if a query fails. 
Also stub-first option that is similar.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2637 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-03-01 13:16:40 +00:00
wouter
0bd934ca59 - Fix from code review, if EINPROGRESS not defined chain if statement differently. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2636 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-28 15:06:59 +00:00
wouter
33aee2e6cb - Fix bug#434: on windows check registry for config file location 
for unbound-control.exe, and unbound-checkconf.exe.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2635 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-27 13:20:29 +00:00
wouter
c730f8194f - Fix to squelch 'network unreachable' errors from tcp connect in 
logs, high verbosity will show them.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2634 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-23 09:01:46 +00:00
wouter
5a7af9871a Fix prefetch and stickyness. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2632 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-16 11:04:53 +00:00
wouter
6ffbc94b48 - iter_hints is now thread-owned in module env, and thus threadsafe. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2629 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-16 09:55:50 +00:00
wouter
d5150eafeb - unbound-control forward_add, forward_remove, stub_add, stub_remove 
can modify stubs and forwards for running unbound (on mobile computer)
  they can also add and remove domain-insecure for the zone.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2623 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-15 14:35:28 +00:00
wouter
ad8753ad44 hints uses malloc for more dynamicity. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2622 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-15 09:38:34 +00:00
wouter
7fe22008d7 - Fix forward-zone memory, uses malloc and frees original root dp. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2621 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-15 08:50:17 +00:00
wouter
7d756333e8 - iter forwards uses malloc inside for more dynamicity. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2620 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-14 15:41:09 +00:00
wouter
4c9275628a - Fix sticky NS (ghost domain problem) if prefetch is yes. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2619 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-14 11:06:44 +00:00
wouter
7967a55716 iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2618 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-13 10:59:07 +00:00
wouter
e4ac9e9503 - RT#2955. Fix for cygwin compilation. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2617 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-13 10:42:22 +00:00
wouter
92c844ad08 - unit test fix for nomem_cnametopos.rpl race condition. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2614 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-10 12:54:27 +00:00
wouter
c8396f3878 - Fix timeouts to keep track of query type, A, AAAA and other, if 
another has caused timeout blacklist, different type can still probe.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2613 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-10 12:17:25 +00:00
wouter
6700b06105 gmake no longer needed. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2612 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-10 10:34:15 +00:00
wouter
575e9face7 - Slightly smaller critical region in one case in infra cache. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2611 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-10 09:21:06 +00:00
wouter
3c2532e0ac - Fix AHX_BROKEN_MEMCMP for autoheader mess up of #undef in config.h. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2610 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-09 12:40:19 +00:00
wouter
778fd7476a - workaround for openssl 0.9.8 ecdsa sha2 and evp problem. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2608 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-08 16:40:46 +00:00
wouter
467b5e8f5c iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2607 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-08 13:31:47 +00:00
wouter
27329b8cc9 - implement draft-ietf-dnsext-ecdsa-04; which is in IETF LC; This 
implementation is experimental at this time and not recommended
  for use on the public internet (the protocol numbers have not
  been assigned).  Needs recent ldns with --enable-ecdsa.
- fix memory leak in errorcase for DSA signatures.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2606 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-08 13:22:44 +00:00
wouter
05f82d8e99 - fix for windows, rename() is not posix compliant on windows. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2605 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-03 14:56:09 +00:00
wouter
6ca7eac6ef iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2604 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-02 09:47:02 +00:00
wouter
2d7d2aae07 trunk is 1.4.17 in development. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2603 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-02 09:21:11 +00:00
wouter
42066148e1 changelog. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2601 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-02 09:05:29 +00:00
wouter
23acd425f0 - Fix validation failures (like: validation failure xx: no NSEC3 
closest encloser from yy for DS zz. while building chain of trust,
         because of a bug in the TTL-fix in 1.4.15, it picked the wrong rdata
         for an NSEC3.  Now it does not change rdata, and fixes TTL.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2599 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-01 11:18:07 +00:00
wouter
365d5a6792 - Fix version-number in libtool to be version-info so it produces 
libunbound.so.2 like it should.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2598 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-01-30 08:46:25 +00:00
wouter
599ef77ce5 - applied patch to support outgoing-interface with ub_ctx_set_option. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2596 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-01-26 10:37:10 +00:00
wouter
8803d008fa tag 1.4.15, trunk is now 1.4.16 development. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2595 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-01-26 09:04:28 +00:00
wouter
4be1c7a6b9 fix memset in test code. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2593 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-01-23 10:51:57 +00:00
wouter
de4714806f fix bug #424. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2591 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-01-20 14:30:56 +00:00
wouter
50a47fc8b4 - Fix to write key files completely to a temporary file, and if that 
succeeds, replace the real key file.  So failures leave a useful file.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2590 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-01-19 14:17:22 +00:00
wouter
5afeba0e96 add symbol. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2588 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-01-18 12:23:06 +00:00
wouter
ccf5139b0e tag 1.4.15rc1 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2587 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-01-18 12:09:18 +00:00
wouter
cc265b7ce4 - Fix bug where canonical_compare of RRSIG did not downcase the 
signer-name.  This is mostly harmless because RRSIGs do not have
  to be sorted in canonical order, usually.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2586 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-01-17 09:06:18 +00:00
wouter
6369cf4aa2 fix changelog 
svn:NO TEST


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2585 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-01-12 13:53:52 +00:00
wouter
11bd495b61 - Added ub_version(). API version increase, with (binary) backwards 
compatibility for the previous version.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2584 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-01-12 13:52:38 +00:00
wouter
63cfba3607 - uninitialised variable in reprobe for rtt blocked domains fixed. 
- lintfix and new flex output.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2583 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-01-10 15:07:16 +00:00
wouter
b00a290ff2 iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2582 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-01-10 09:42:55 +00:00
wouter
25fbc19b64 - Fix bug #425: unbound reports wrong TTL in reply, it reports a TTL 
that would be permissible by the RFCs but it is not the TTL in the
  cache.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2581 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-01-10 09:42:32 +00:00
wouter
3911955af7 - Fix to randomize hash function, based on 28c3 congress, reported 
by Peter van Dijk.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2580 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-01-02 13:16:18 +00:00
wouter
b87870dc07 iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2579 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-12-24 11:28:14 +00:00
wouter
40900e9e41 - Fix for memory leak (about 20 bytes when a tcp or udp send 
operation towards authority servers failed, takes about 50.000
such failures to leak one Mb, such failures are also
usually logged), reported by Robert Fleischmann.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2578 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-12-24 11:27:53 +00:00
wouter
2e25dea379 - trunk has 1.4.15 in development. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2577 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-12-19 11:37:15 +00:00
wouter
50a8288ce6 - Fix for VU#209659 CVE-2011-4528: Unbound denial of service 
vulnerabilities from nonstandard redirection and denial of existence
http://www.unbound.net/downloads/CVE-2011-4528.txt
- robust checks for next-closer NSEC3s.
- tag 1.4.14 created.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2574 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-12-19 10:55:32 +00:00
wouter
a4c3aed0f8 - Fix parse error on negative SOA RRSIGs if badly ordered in the packet. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2573 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-12-15 13:37:13 +00:00
wouter
6375c13714 - remove uninit warning from cachedump code. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2572 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-12-15 10:55:59 +00:00
wouter
9bf6080a27 - Fix to constrain signer_name to be a parent of the lookupname. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2571 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-12-13 12:37:47 +00:00
wouter
035362e901 fix infra cache comparison. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2570 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-12-13 12:14:40 +00:00
wouter
4fe2ce80c6 1.4.14rc1 tag. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2569 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-12-13 08:57:29 +00:00
wouter
b7690ed0fc iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2568 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-12-13 08:50:26 +00:00
wouter
44109b0eea changelog for malloc fix. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2565 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-12-05 15:38:41 +00:00
wouter
4f8880d6a5 - Fix warning unused in compat/strptime.c. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2563 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-12-05 14:59:24 +00:00
wouter
525b8dabe1 - Fix warnings with gcc 4.6 in compat/inet_ntop.c. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2562 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-12-05 14:25:01 +00:00
wouter
51976138fe - Fix getaddrinfowithincludes on windows with fedora16 mingw32-gcc. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2561 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-12-05 13:49:30 +00:00
wouter
c7b727654f configure generated with autoconf 2.68 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2560 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-12-02 13:43:24 +00:00
wouter
6e6171f9ae - Fix for tcp-upstream and ssl-upstream for if a laptop sleeps, 
causes SERVFAILs.  Also fixed for UDP (but less likely).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2559 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-11-30 13:39:11 +00:00
wouter
333b54ae2a iana ports updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2558 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-11-28 14:59:41 +00:00
wouter
67f10a7c5f - Fix quartile time estimate, it was too low, (thanks Jan Komissar). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2557 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-11-28 14:22:29 +00:00
wouter
b6a8696c84 makefile compat, ports updated and remove unused substitutions. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2551 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-11-11 13:02:48 +00:00
wouter
a1f677fcac - Makefile changed for BSD make compatibility. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2544 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-11-10 18:44:06 +00:00
wouter
5b6c722315 unit test for SSL upstream. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2543 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-11-09 13:20:30 +00:00
wouter
99adf554e3 iana portlists updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2542 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-11-08 15:47:05 +00:00
wouter
f64162cd8e - Fix double free in unbound-host, reported by Steve Grubb. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2541 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-11-08 15:41:21 +00:00
wouter
c947a7e4e3 fixup windows compile with ssl support. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2540 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-11-08 14:27:16 +00:00
wouter
1b8de9916c ssl_port setting, so that the dnssec-trigger server can be on one host machine. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2539 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-11-08 10:56:42 +00:00
wouter
6523279008 - fix -flto detection on Lion for llvm-gcc. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2537 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-11-01 13:39:38 +00:00
wouter
e0ea207957 iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2534 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-11-01 09:54:57 +00:00
wouter
cf055b1d04 - documentation for new options: ssl-upstream, ssl-service-key and 
ssl-service.pem.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2533 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-11-01 09:44:40 +00:00
wouter
a7ef3f7bc4 support for ssl-upstream (works from unbound-control). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2532 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-11-01 09:26:58 +00:00
wouter
1f9e9b78fe - dns over ssl support, ssl-service-pem and ssl-service-key files 
can be given and then TCP queries are serviced wrapped in SSL.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2530 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-10-31 14:48:48 +00:00
wouter
089b0e1649 fix export_all_symbols on osx. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2529 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-10-27 11:14:17 +00:00
wouter
73b90266eb iana update and gzip compression. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2528 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-10-27 08:46:32 +00:00
wouter
3a4da9849c - lame-ttl and lame-size options no longer exist, it is integrated 
with the host info.  They are ignored (with verbose warning) if
  encountered to keep the config file backwards compatible.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2527 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-10-27 08:33:02 +00:00
wouter
1827a3a42d fix iana update check for gzipped file. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2526 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-10-26 16:00:58 +00:00
wouter
8762da8720 infra cache consolidated and stores per zone, IP. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2525 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-10-26 15:46:23 +00:00
wouter
9b79cf1fe9 iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2524 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-10-26 09:49:14 +00:00
wouter
f33c5178d7 - Fix make_new_space function so that the incoming query is not 
overwritten if a jostled out query causes a waiting query to be
  resumed that then fails and sends an error message.  (Thanks to
  Matthew Lee).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2523 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-10-24 13:49:59 +00:00
wouter
da47b4231b - Fix resolve of partners.extranet.microsoft.com with a fix for the 
server selection for choosing out of a (particular) list of bad choices.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2522 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-10-24 08:34:59 +00:00
wouter
f7015af988 - fix --enable-allsymbols, fptr wlist is disabled on windows 
with this option enabled because of memory layout exe vs dll.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2521 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-10-21 12:33:46 +00:00
wouter
c6ce2400a5 - Implement ipv6%interface notation for scope_id usage. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2519 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-10-19 14:34:11 +00:00
wouter
4b5380d06d detect if GOST works. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2518 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-10-19 13:18:25 +00:00
wouter
fda1776d96 fix strptime detection. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2513 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-10-19 12:16:41 +00:00
wouter
5e9f5cad61 - better documentation for inform_super (Thanks Yang Zhe). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2512 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-10-17 13:11:58 +00:00
wouter
a7f08f8023 - Fix for out-of-memory condition in libunbound (thanks Robert Fleischman). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2511 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-10-14 07:15:41 +00:00
wouter
8fbf229c4e changelog entry 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2510 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-10-13 14:11:27 +00:00
wouter
cc169527ff fix install name and fix error report by munin autoconf. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2508 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-10-12 08:37:15 +00:00
wouter
8a709e7c1e - updated contrib/unbound_munin_ to family=auto so that it works 
with munin-node-configure automatically (if installed as
/usr/local/share/munin/plugins/unbound_ ).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2507 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-10-12 08:25:38 +00:00
matje
594c764863 revert dynlinking 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2506 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-10-10 08:56:23 +00:00
matje
2537bedab5 comment svn:NO TEST 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2505 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-10-06 08:58:55 +00:00
matje
2f8e3cb245 link unbound against unbound library 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2504 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-10-06 08:27:31 +00:00
wouter
9a28841410 unbound windows option to start and stop the service. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2503 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-09-27 13:22:04 +00:00
wouter
446aecff27 - TCP-upstream calculates tcp-ping so server selection works if there 
are alternatives.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2502 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-09-23 12:56:28 +00:00
wouter
d4603fe66c - Fix classification of NS set in answer section, where there is a 
parent-child server, and the answer has the AA flag for dir.slb.com.
  Thanks to Amanda Constant from Secure64.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2501 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-09-20 07:42:04 +00:00
wouter
fe21693eb9 - max sent count. EDNS1480 only for rtt < 5000. No promiscuous 
fetch if sentcount > 3, stop query if sentcount > 16.  Count is
reset when referral or CNAME happens.  This makes unbound better
at managing large NS sets, they are explored when there is continued
interest (in the form of queries).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2499 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-09-16 14:11:12 +00:00
wouter
fac34aa3d7 - fix various compiler warnings (reported by Paul Wouters). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2497 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-09-16 11:35:01 +00:00
wouter
07375399e5 fix EDNS1480. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2496 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-09-16 10:04:08 +00:00
wouter
13d179ff41 iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2495 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-09-16 09:59:59 +00:00
wouter
30223a545a - fix bug #408: accept patch from Steve Snyder that comments out 
unused functions in lookup3.c.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2494 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-09-16 07:09:11 +00:00
wouter
22e627c381 After UDP timeout EDNS1480 probe, stop fragmentation caused trouble. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2492 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-09-15 14:32:17 +00:00
wouter
292c480108 trunk has 1.4.14. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2491 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-09-15 08:54:25 +00:00
wouter
4ee8b1d0b4 tag 1.4.13rc2 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2489 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-09-12 11:58:29 +00:00
wouter
950c3c067c revert earlier commit. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2488 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-09-12 11:28:14 +00:00
wouter
c109a8828f - Fix operation in ipv6 only (do-ip4: no) mode. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2487 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-09-07 14:34:10 +00:00
wouter
8578cfa7d0 fedora specfile updated (from Paul Wouters). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2486 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-09-07 05:34:22 +00:00
wouter
3ebc76b1fb tag 1.4.13rc1 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2485 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-09-05 11:48:26 +00:00
wouter
58ae17c3cb iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2484 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-09-02 15:05:31 +00:00
wouter
97a89720c9 - Fix validation failures due to EDNS backoff retries, the retry 
for fetch of data has want_dnssec because the iter_indicate_dnssec
         function returns true when validation failure retry happens, and
         then the serviced query code does not fallback to noEDNS, even if
         the cache says it has this.  This helps for DLV deployment when
         the DNSSEC status is not known for sure before the lookup concludes.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2483 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-08-26 09:00:43 +00:00
wouter
b35812d486 Fix numthreads 0 handling. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2482 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-08-26 06:50:23 +00:00
wouter
24291e9e6c - Applied patch from Karel Slany that fixes a memory leak in the 
unbound python module, in string conversions.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2481 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-08-24 11:03:29 +00:00
wouter
a28362a7fc tcp upstream option. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2480 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-08-22 13:58:40 +00:00
wouter
532fa455ab - Documented the options that work with control set_option command. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2479 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-08-22 13:22:05 +00:00
wouter
2eb1b8dc1a - Fix that internally, CNAMEs with NXDOMAIN have that as rcode. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2478 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-08-22 12:11:54 +00:00
wouter
44008de0f5 Fix validation of qtype ANY responses with CNAMEs (thanks Cathy Zhang and Luo Ce). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2477 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-08-22 12:02:50 +00:00
wouter
13bd54fa64 Fix autoconf for makedist crosscompile RC or snapshot. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2476 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-08-18 16:01:42 +00:00
wouter
f92ad06062 iana portlist updated. 
new xml format at iana.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2475 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-08-17 15:12:39 +00:00
wouter
56a4ca7adc - Fix validation of . DS query. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2474 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-08-17 14:28:32 +00:00
wouter
9ed763a49e - fix memory and fd leak after out-of-memory condition. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2473 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-08-10 14:03:06 +00:00
wouter
a4ed88a35a updated patch from Tom. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2472 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-08-10 07:37:57 +00:00
wouter
bd35b9c00a - Fix python site-packages path to /usr/lib64. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2471 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-08-10 06:05:09 +00:00
wouter
46d0aaf95c - patch from Tom Hendrikx fixes load of python modules. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2470 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-08-09 07:28:22 +00:00
wouter
4ecc0a8a0f - make clean had ldns-src reference, removed. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2469 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-08-08 13:17:37 +00:00
wouter
48049d7c1e Fix autoconf 2.68 warnings 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2467 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-08-01 11:14:33 +00:00
wouter
6e4c06a047 iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2466 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-07-14 09:10:26 +00:00
wouter
cba8c049f9 release 1.4.12 noted. 1.4.13 developed in svn trunk. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2465 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-07-14 08:33:12 +00:00
wouter
9dd4ca67ba - Unbound implements RFC6303 (since version 1.4.7). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2463 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-07-14 08:17:11 +00:00
wouter
ee3c3d5724 - Quick fix for contrib/unbound.spec example, no ldns-builtin 
any more.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2462 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-07-13 12:17:13 +00:00
wouter
b05d47d4a5 - Fix wildcard expansion no-data reply under an optout NSEC3 zone is 
validated as insecure, reported by Jia Li (lijia@cnnic.cn).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2461 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-07-11 09:03:18 +00:00
wouter
762ab77941 changelog entry tag. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2460 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-07-04 10:44:10 +00:00
wouter
7d4a3d270b - fix that --enable-static-exe does not complain about it unknown. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2458 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-07-01 08:58:34 +00:00
wouter
d3f9810a23 version number in example config file. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2457 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-07-01 07:12:08 +00:00
wouter
6536795e10 - removed ldns-src tarball inside the unbound tarball. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2447 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-06-30 12:59:27 +00:00
wouter
8b34270a58 - fix comment about rndc port, that referred to the old port number. 
- fix that the listening socket is not closed when too many remote
  control connections are made at the same time.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2446 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-06-30 12:13:55 +00:00
wouter
9461231d6b - fix replyaddr count wrong after jostled queries, which leads to 
eventual starvation where the daemon has no replyaddrs left to use.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2445 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-06-30 11:01:44 +00:00
wouter
4386a794eb fix bug#395: id bits of other query may leak out under conditions 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2444 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-06-30 09:42:20 +00:00
wouter
5cf7ccad78 iana portlist updated 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2443 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-06-30 09:10:53 +00:00
wouter
35d80338fb 1.4.12 in trunk and configure updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2442 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-06-30 08:56:56 +00:00
wouter
5e9ee74ac4 tag rc3 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2439 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-06-23 11:49:15 +00:00
wouter
ecceefa52e - Changed -flto check to support clang compiler. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2438 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-06-23 09:00:05 +00:00
wouter
41b53f7142 changelog 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2435 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-06-17 12:00:47 +00:00
wouter
b976d0e4b0 changelogentry 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2432 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-06-17 09:43:22 +00:00
wouter
ba1ecfe130 - version is 1.4.11. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2430 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-06-16 13:27:57 +00:00
wouter
307c9d186f - log-queries: yesno option, default is no, prints querylog. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2429 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-06-16 13:15:57 +00:00
wouter
aec4985fd6 iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2428 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-06-14 09:01:45 +00:00
wouter
444efde101 - Use -flto compiler flag for link time optimization, if supported. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2427 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-06-14 08:39:53 +00:00
wouter
97ed63e801 IPv6 service address for d.root-servers.net (2001:500:2D::D) 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2426 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-06-12 09:51:00 +00:00
wouter
d86e061287 - statistics-interval prints the number of jostled queries to log. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2425 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-06-10 10:41:40 +00:00
wouter
fc57d8487c - unbound-control has version number in the header, 
UBCT[version]_space_ is the header sent by the client now.
- Unbound control port number is registered with IANA:
  ub-dns-control  8953/tcp    unbound dns nameserver control
  This is the new default for the control-port config setting.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2424 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-06-10 10:11:38 +00:00
wouter
6423aaf904 updated ldns tarball. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2423 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-05-30 12:09:05 +00:00
wouter
f591686276 iana portlist updated 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2422 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-05-30 12:04:31 +00:00
wouter
15d433440f - Fix Makefile for U in environment, since wrong U is more common than 
deansification necessity.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2421 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-05-30 11:52:14 +00:00
wouter
1cb1dc50d9 - defense in depth against the above bug, an error is printed to log 
instead of an assertion failure.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2420 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-05-25 11:32:05 +00:00
wouter
8fd660253f 1.4.10 tag created. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2419 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-05-25 06:09:01 +00:00
wouter
f7ad48b8ca - Fix TTL of SOA so negative TTL is separately cached from normal TTL. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2416 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-05-10 12:34:47 +00:00
wouter
e10188837d iana portlist updated 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2415 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-05-10 11:22:32 +00:00
wouter
923921f02d - feature, ignore-cd-flag: yesno to provide dnssec to legacy servers. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2414 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-05-10 11:20:14 +00:00
wouter
c923e7dd6d - bug#386: --enable-allsymbols option links all binaries to libunbound 
and reduces install size significantly.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2413 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-05-10 10:57:42 +00:00
wouter
4b24e1d6aa - configure created with newer autoconf 2.66. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2412 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-04-14 10:59:57 +00:00
wouter
388b7b3850 - bug#378: Fix that configure checks for ldns_get_random presence. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2411 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-04-12 07:01:18 +00:00
wouter
0210c9c214 val-override-date: -1 ignores dates entirely, for NTP usage. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2410 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-04-08 14:06:46 +00:00
wouter
b25dcb3a41 - iana portlist updated. 
- queries with CD flag set cause DNSSEC validation, but the answer is
  not withheld if it is bogus.  Thus, unbound will retry if it is bad
  and curb the TTL if it is bad, thus protecting the cache for use by
  downstream validators.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2409 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-04-08 13:58:41 +00:00
wouter
a7e8b9b507 fix test 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2408 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-03-29 10:38:59 +00:00
wouter
ca7c48625c - harden-below-nxdomain: changed so that it activates when the 
cached nxdomain is dnssec secure.  This avoids backwards
         incompatibility because those old servers do not have dnssec.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2407 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-03-29 09:47:54 +00:00
wouter
f5fd7fe46f trunk to 1.5.0 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2406 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-03-24 10:35:17 +00:00
wouter
8149f2eada iana portlist updated. 
1.4.9 release.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2404 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-03-24 10:08:43 +00:00
wouter
024e893acb -#370 new unbound.spec for CentOS 5.x from Harold Jones. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2403 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-03-17 08:18:00 +00:00
wouter
e49dd1a19d tag 1.4.9rc1 created. svn:NO TEST 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2402 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-03-14 09:38:42 +00:00
wouter
04990088ae updated ldns tarball to 1.6.9rc1. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2400 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-03-03 08:57:17 +00:00
wouter
b1e4a84d72 updated ldns tarball to 1.6.9. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2399 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-03-01 13:06:38 +00:00
wouter
ae1d9e955d - give config parse error for multiple names on a stub or forward zone. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2398 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-03-01 12:59:27 +00:00
wouter
fa30bf953f - Fix no ADflag for NXDOMAIN in NSEC3 optout. And wildcard in optout. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2397 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-03-01 12:48:45 +00:00
wouter
f3bcbeb81d - bug #361: Fix, time.elapsed variable not reset with stats_noreset. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2396 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-02-24 12:16:12 +00:00
wouter
305d01e195 version 3 for common.sh 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2395 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-02-23 15:17:49 +00:00
wouter
fe4d92c4e2 iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2394 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-02-23 10:27:53 +00:00
wouter
cc0601deb5 common.sh to version 2. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2392 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-02-18 16:11:21 +00:00
wouter
931a77af17 - Added explicit note on unbound-anchor usage: 
Please note usage of unbound-anchor root anchor is at your own risk
  and under the terms of our LICENSE (see that file in the source).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2391 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-02-15 12:58:37 +00:00
wouter
e82024f8d0 use common functionality file. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2390 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-02-11 12:30:42 +00:00
wouter
a4ce55fa61 iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2389 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-02-11 12:28:30 +00:00
wouter
987652fe4a iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2388 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-02-07 13:24:50 +00:00
wouter
51bdc5a082 - Added regression test for addition of a .net DS to the root, and 
cache effects with different TTL for glue and DNSKEY.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2387 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-02-07 12:07:46 +00:00
wouter
58774c8fad - Fix remove private address does not throw away entire response. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2386 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-28 16:11:49 +00:00
wouter
14d0b634cd Note release point. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2383 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-21 08:53:14 +00:00
wouter
cf47814714 fix bug 349 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2381 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-19 06:59:24 +00:00
wouter
22a3c37677 ldns tarball updated 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2380 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-18 08:35:20 +00:00
wouter
d5abd8fbab iana portlist updated 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2379 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-17 14:49:09 +00:00
wouter
cd4124e91e - add get and set option for harden-below-nxdomain feature. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2377 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-17 12:31:28 +00:00
wouter
e40c702c96 - Fix so a changed NS RRset does not get moved name stuck on old 
server, for type NS the TTL is not increased.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2373 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-14 13:56:25 +00:00
wouter
fb7fa5c347 - Fix prefetch so it does not get stuck on old server for moved names. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2372 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-13 10:13:01 +00:00
wouter
bd5d117f93 doxygen compat with version 1.6.3, and splint compat. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2371 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-12 09:17:59 +00:00
wouter
d5c76c145e iana portlist updated 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2370 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-12 08:55:27 +00:00
wouter
3925e949de - Fix insecure CNAME sequence marked as secure, reported by Bert Hubert. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2369 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-11 12:32:29 +00:00
wouter
4d3f7cab4d - faster lruhash get_mem routine. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2366 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-10 13:28:48 +00:00
wouter
9197a66017 iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2364 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-04 07:28:36 +00:00
wouter
d8b8bdaf33 Fix bug #346: itar is discontinued. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2363 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-04 06:53:57 +00:00
wouter
9a2bf1bb83 - Fix in infra cache that could cause rto larger than TOP_TIMEOUT kept. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2361 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-12-23 10:49:47 +00:00
wouter
95a1dab906 iana portlist updated 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2359 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-12-21 14:43:29 +00:00
wouter
f5be858e6b - algorithm compromise protection using the algorithms signalled in 
the DS record.  Also, trust anchors, DLV, and RFC5011 receive this,
         and thus, if you have multiple algorithms in your trust-anchor-file
         then it will now behave different than before.  Also, 5011 rollover
         for algorithms needs to be double-signature until the old algorithm
         is revoked.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2358 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-12-21 14:19:55 +00:00
wouter
d0d27bd296 - fix validation in this case: CNAME to nodata for co-hosted opt-in 
NSEC3 insecure delegation, was bogus, fixed to be insecure.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2355 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-12-17 10:05:56 +00:00
wouter
33deac63f2 squelch 'tcp connect: bla' errors in logfile. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2354 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-12-17 09:10:46 +00:00
wouter
fc13deb6d3 - Fix our 'BDS' license (typo reported by Xavier Belanger). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2353 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-12-16 16:18:30 +00:00
wouter
8b86a03bcd - iana portlist updated. 
- review changes for unbound-anchor.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2351 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-12-10 15:01:39 +00:00
wouter
6ec3338023 - feature typetransparent localzone, does not block other RR types. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2350 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-12-02 12:39:33 +00:00
wouter
3bc987f0d0 - Fix bug#338: print address when socket creation fails. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2349 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-12-01 09:59:39 +00:00
wouter
72de97c816 Fix storage of noEDNS in the infra cache. 
iana portlist updated.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2348 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-30 12:55:48 +00:00
wouter
b5252fabaa harden-below-nxdomain option taken from draft-vixie-dnsext-resimprove. 
Default off (for now), as some older software that gives nxdomain for ENT
would be incompatible.  But that would only happen in the reverse tree, and
such software (nonDNSSEC) may go out of style, so in the future a default yes
could be possible.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2347 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-18 08:49:15 +00:00
wouter
eabb7aeb89 - make test output nicer. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2346 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-17 15:50:52 +00:00
wouter
49067d5c18 - implement draft-vixie-dnsext-resimprove-00, we stop on NXDOMAIN. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2345 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-17 10:02:34 +00:00
wouter
3709f579a0 - so-sndbuf option for very busy servers, a bit like so-rcvbuf. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2344 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-15 14:30:34 +00:00
wouter
07b8abede0 errno filtering better: sendto and sendmsg filtered in the same way. Also 
ENETDOWN and ENETUNREACH for tcp (already had EHOSTDOWN and EHOSTUNREACH).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2343 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-15 14:00:20 +00:00
wouter
4c07c23e21 iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2342 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-15 13:16:09 +00:00
wouter
61c86db724 - silence 'tcp connect: broken pipe' at low verbosity. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2341 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-15 13:15:23 +00:00
wouter
8f65243365 unbound-anchor portable with openssl 0.9.7. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2340 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-09 16:05:02 +00:00
wouter
7df2b532a4 - Be lenient and accept imgw.pl malformed packet (like BIND). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2339 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-08 18:32:55 +00:00
wouter
08c86fc31e move to version 1.4.8 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2338 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-08 13:22:54 +00:00
wouter
fe16a014a3 - do not synthesize a CNAME message from cache for qtype DS. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2335 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-05 15:29:50 +00:00
wouter
ae017e9bd0 use central entropy to seed threads. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2330 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-04 11:38:23 +00:00
wouter
87de02a9f0 - Change the rtt used to probe EDNS-timeout hosts to 1000 msec. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2329 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-03 09:06:49 +00:00
wouter
09cfbb7d44 code review. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2327 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-02 10:03:18 +00:00
wouter
4b4845d797 GOST code enabled by default (RFC 5933) 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2323 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-01 11:24:07 +00:00
wouter
210d64fcb0 - Configure detects libev-4.00. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2322 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-29 15:03:20 +00:00
wouter
206d95e87a - Fix validation failure for parent and child on same server with an 
insecure childzone and a CNAME from parent to child.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2321 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-29 13:10:26 +00:00
wouter
eabdaa2eb4 - Fix uninit value in dump_infra print. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2320 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-29 10:20:40 +00:00
wouter
682e6f70c0 - Change of timeout code. No more lost and backoff in blockage. 
At 12sec timeout (and at least 2x lost before) one probe per IP
  is allowed only.  At 120sec, the IP is blocked.  After 15min, a
  120sec entry has a single retry packet.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2311 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-26 15:02:08 +00:00
wouter
ee39f03318 - no timeout backoff if meanwhile a query succeeded. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2308 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-26 12:15:00 +00:00
wouter
786b9481fa dump_infra and flush_infra commands for unbound-control. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2306 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-26 09:08:33 +00:00
wouter
26c5c1a18a + - Configure errors if ldns is not found. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2305 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-25 07:44:33 +00:00
wouter
b3100c3820 - Windows 7 fix for installer. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2304 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-22 07:34:28 +00:00
wouter
c126a3de01 - Fix bug where fallback_tcp causes wrong roundtrip and edns 
observation to be noted in cache.  Fix bug where EDNSprobe halted
  exponential backoff if EDNS status unknown.
- new unresponsive host method, exponentially increasing block backoff.
- iana portlist updated.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2303 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-21 15:11:39 +00:00
wouter
0a2b76bc0e Enable interface-automatic for people for whom it works. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2300 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-20 05:36:00 +00:00
wouter
b8349423f9 Fix for request list growth. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2298 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-19 14:53:29 +00:00
wouter
5c1bd79bed iana portlist updated 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2296 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-18 08:45:46 +00:00
wouter
acaf52ab72 - unbound-anchor handles ADDPEND keystate. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2281 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-13 12:04:37 +00:00
wouter
4f575ff3dc - Fix TCP so it uses a random outgoing-interface. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2280 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-13 08:52:29 +00:00
wouter
18492b32bb ldns tarball updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2277 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-11 13:07:44 +00:00
wouter
7dd2a09155 iana portlist updated 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2276 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-11 12:30:57 +00:00
wouter
fc57d16d98 - Fix bug when DLV below a trust-anchor that uses NSEC3 optout where 
the zone has a secure delegation hosted on the same server did not
         verify as secure (it was insecure by mistake).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2275 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-11 12:21:19 +00:00
wouter
33d8166041 no override time, works on Minix and not needed for the tpkg. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2271 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-01 12:14:05 +00:00
wouter
f769c516a7 - Fix alloc_reg_release for longer uptime in out of memory conditions. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2270 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-01 12:04:12 +00:00
wouter
606f9cfc43 list builtin. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2269 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-01 11:47:53 +00:00
wouter
594bd74284 Test for unbound-anchor. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2268 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-01 11:31:35 +00:00
wouter
a6c8d88b41 unbound-anchor work, -P option and test tpkg. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2259 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-28 12:30:38 +00:00
wouter
ee33c17851 configure options for unbound-anchor files 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2257 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-28 10:27:49 +00:00
wouter
46a0145270 Build documentation in the file. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2256 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-28 09:46:08 +00:00
wouter
8f397cdcd5 nicer docs 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2255 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-28 09:39:36 +00:00
wouter
4078c27e1b unbound-anchor: no pem updates, do not download .pem file (no stable url), 
and date nicer to maintain in code.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2254 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-28 09:22:22 +00:00
wouter
8bb1905e0b unbound-anchor work 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2251 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-27 14:54:22 +00:00
wouter
3866601a38 Documentation doxygen warnings removed. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2250 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-27 11:54:11 +00:00
wouter
61973e036c Exit code can do manual check output. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2249 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-27 09:50:10 +00:00
wouter
a67e23793d manual page 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2248 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-27 09:31:53 +00:00
wouter
06b97ca356 - bug#329: in example.conf show correct ipv4 link-local 169.254/16. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2244 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-24 07:04:37 +00:00
wouter
2baea4bf44 unbound-anchor work 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2242 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-23 13:51:29 +00:00
wouter
bdc0cd7ad2 iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2241 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-22 07:01:20 +00:00
wouter
18bbcaea97 - compliance with draft-ietf-dnsop-default-local-zones-14, removed 
reverse ipv6 orchid prefix from builtin list.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2240 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-22 06:53:32 +00:00
wouter
84f1a19a39 iana portlist updated 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2239 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-17 12:43:49 +00:00
wouter
47f65c133a - DLV has downgrade protection again, because the RFC says so. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2238 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-17 08:54:16 +00:00
wouter
874ce84c9f - Fix reported validation error in out of memory condition. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2237 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-16 13:57:22 +00:00
wouter
2480f50bf0 iana portlist updated 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2236 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-16 13:47:51 +00:00
wouter
db4944a21d - Algorithm rollover operational reality intrudes, for trust-anchor, 
5011-store, and DLV-anchor if one key matches it's good enough.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2235 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-16 13:40:26 +00:00
wouter
2b05eb39ec - Abide RFC5155 section 9.2: no AD flag for replies with NSEC3 optout. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2233 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-15 07:08:09 +00:00
wouter
c505d74cd7 comment for iana portlist update 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2232 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-14 09:31:20 +00:00
wouter
b9f844650b - increased mesh-max-activation from 1000 to 3000 for crazy domains 
like _tcp.slb.com with 262 servers.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2229 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-14 08:27:23 +00:00
wouter
66d2b51494 - bug#327: Fix for cannot access stub zones until the root is primed. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2228 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-13 09:25:52 +00:00
wouter
30481e6e83 iana portlist updated 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2226 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-09 15:07:47 +00:00
wouter
e03ed46f4e - unresponsive servers are not completely blacklisted (because of 
firewalls), but also not probed all the time (because of the request
            list size it generates).  The probe rate is 1%.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2225 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-09 14:56:51 +00:00
wouter
911eba0f73 - openbsd-lint fixes: acl_list_get_mem used if debug-alloc enabled. 
iterator get_mem includes priv_get_mem.  delegpt nodup removed.
  listen_pushback, query_info_allocqname, write_socket, send_packet,
  comm_point_set_cb_arg and listen_resume removed.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2222 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-20 13:30:41 +00:00
wouter
4b4dd73f89 iana portlist updated 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2221 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-19 19:34:43 +00:00
wouter
f1026decf4 - example.conf notes how to do DNSSEC validation and track the root. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2220 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-19 19:16:03 +00:00
wouter
8774983f7d - Fix bug#321: resolution of rs.ripe.net artifacts with 0x20. 
Delegpt structures checked for duplicates always.
         No more nameserver lookups generated when depth is full anyway.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2219 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-19 13:00:21 +00:00
wouter
f3fdb20593 better readme svn:NO TEST 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2217 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-18 10:46:28 +00:00
wouter
5a642ab0ba Fix bug #322. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2216 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-18 10:44:27 +00:00
wouter
784734f3e3 README for new test setup and testbound selftest. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2215 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-16 13:30:37 +00:00
wouter
1acd6be484 - make test more portable (make longtest needs special support programs, 
ldns, wdiff, dig, port-numbers).
  - moved not-always-portable testbound scripts to names .crpl.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2214 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-16 12:59:37 +00:00
wouter
c2ed6f2f28 - Fix acx_nlnetlabs.m4 configure output for autoconf-2.66 AS_TR_CPP 
changes, uses m4_bpatsubst now.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2213 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-16 08:59:14 +00:00
wouter
d7052709d7 iana portlist updated 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2212 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-13 09:12:02 +00:00
wouter
6f7205f522 add and fix doxygen comments for doxygen-1.7.1. (which reports lots of 
spurious items as well, by the way).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2211 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-13 08:41:49 +00:00
wouter
9cb5d00f5f More pleasant remote control command name parsing. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2210 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-13 08:14:14 +00:00
wouter
98fd439163 Fix name of rrset printed that fails validation. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2209 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-09 11:58:57 +00:00
wouter
9cfff4e70d - Return NXDOMAIN after chain of CNAMEs ends at name-not-found. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2208 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-05 14:31:52 +00:00
wouter
358a2108de - Fix validation in case a trust anchor enters into a zone with 
unsupported algorithms.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2205 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-04 08:36:27 +00:00
wouter
e6348e4f06 - release tag 1.4.6. 
- trunk becomes 1.4.7 develop.
       - iana portlist updated.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2204 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-03 12:30:45 +00:00
wouter
3d52d5c199 ldns tarball updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2202 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-03 11:11:45 +00:00
wouter
ac39fd59a8 more error details on failed remote control connection. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2201 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-22 11:50:28 +00:00
wouter
07d7f2243e fix rlimit adjustments. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2199 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-15 13:08:45 +00:00
wouter
4454cb499b - Fix integer underflow in prefetch ttl creation from cache. This 
fixes a potential negative prefetch ttl.
-This line, and those below, will be ignored--

M    trunk/services/cache/dns.c
M    trunk/doc/Changelog


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2198 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-14 11:13:30 +00:00
wouter
c25086d8b3 New text 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2197 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-14 08:38:07 +00:00
wouter
68d952dfe9 donation text. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2196 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-14 07:41:39 +00:00
wouter
763051d2ab - Changed the defaults for num-queries-per-thread/outgoing-range. 
For builtin-select: 512/960, for libevent 1024/4096 and for
         windows 24/48 (because of win api).  This makes the ratio this way
         to improve resilience under heavy load.  For high performance, use
         libevent and possibly higher numbers.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2191 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-12 13:59:39 +00:00
wouter
70170bf148 - GOST enabled if SSL is recent and ldns has GOST enabled too. 
- ldns tarball updated.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2190 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-10 08:13:19 +00:00
wouter
c9e13c5160 - iana portlist updated. 
- Fix validation of qtype DNSKEY when a key-cache entry exists but
  no rr-cache entry is used (it expired or prefetch), it then goes
  back up to the DS or trust-anchor to validate the DNSKEY.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2189 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-09 15:00:35 +00:00
wouter
34fef67b47 - Neat function prototypes, unshadowed local declarations. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2188 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-07 13:13:36 +00:00
wouter
92808f082a ldns tarball updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2187 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-06 11:03:56 +00:00
wouter
4a181655d6 testbound uses UTC timezone. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2186 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-06 10:44:03 +00:00
wouter
c89c623b52 Failure to chown pidfile is not fatal any more. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2182 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-06 09:10:12 +00:00
wouter
bb6f5ea246 - wdiff is not actually required by make test, updated requirements. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2176 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-05 13:34:01 +00:00
wouter
c4b4b1ab3b - added feature to print configure date, target and options with -h. 
- added feature to print event backend system details with -h.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2175 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-05 13:10:49 +00:00
wouter
573c9093ed - log if a server is skipped because it is on the donotquery list, 
at verbosity 4, to enable diagnosis why no queries to 127.0.0.1.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2174 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-05 07:45:20 +00:00
wouter
796d87d213 Fix 4035 compliance for algorithms from the DS rrset that MUST sign the DNSKEY. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2172 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-01 12:08:48 +00:00
wouter
6bcdb68292 - Fix the max number of reply-address count 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2171 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-28 12:50:04 +00:00
wouter
0c64df2802 - Fix jostle list bug found by Vince (luoce@cnnic), it caused the qps 
in overload situations to be about 5 qps for the class of shortly
  serviced queries.
  The capacity of the resolver is then about (numqueriesperthread / 2)
  / (average time for such long queries) qps for long queries.
  And about (numqueriesperthread / 2)/(jostletimeout in whole seconds)
  qps for short queries, per thread.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2170 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-28 11:42:21 +00:00
wouter
49be076e35 - unbound.h has extern "C" statement for easier include in c++. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2169 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-25 13:23:03 +00:00
wouter
10747c9f68 Fix for lame reply corner case. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2168 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-25 08:32:51 +00:00
wouter
3ff0a4c5f8 -wssl feature for makedist. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2166 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-23 14:01:05 +00:00
wouter
d54e2c0b71 iana portlist updated 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2165 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-23 08:05:41 +00:00
wouter
48fffdadf5 Fix to unload gost dynamic library module for leak test. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2161 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-22 12:27:19 +00:00
wouter
ce663dc4b9 libev vs libevent printout. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2160 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-22 07:57:52 +00:00
wouter
cbeddaee08 iana portlist updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2159 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-18 07:29:36 +00:00
wouter
b9567686f3 - Add AAAA to root hints for I.ROOT-SERVERS.NET. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2157 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-17 19:17:09 +00:00
wouter
491378f6a1 updated ldns tarball 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2156 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-16 15:26:30 +00:00
wouter
a7696cb817 - Fix assertion failure reported by Kai Storbeck from XS4ALL, the 
assertion was wrong.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2155 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-16 15:05:22 +00:00
wouter
2539f4e135 Added documentation for the histogram printout to syslog. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2153 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-15 11:35:27 +00:00
wouter
b5d71246b1 - Max referral count from 30 to 130, because 128 one character domains 
is valid DNS.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2152 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-15 10:50:20 +00:00
wouter
a7883d167a - makedist crosscompile to windows uses builtin ldns not host ldns. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2151 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-15 09:57:34 +00:00
wouter
bd2b31b430 - Fix to use one pointer less for iterator query state store_parent_NS. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2150 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-15 09:47:11 +00:00
wouter
d138643964 - Fix TCPreply on systems with no writev, if just 1 byte could be sent. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2149 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-15 09:40:36 +00:00
wouter
d6b66a0eaf version 1.4.6 in trunk. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2148 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-15 07:45:55 +00:00
wouter
33e1ed3440 tag 1.4.5 created 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2147 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-15 07:16:50 +00:00
wouter
0aaf9f53aa - When retry to parent the retrycount is not wiped, so failed 
nameservers are not tried again.
       - iana portlist updated.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2145 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-11 14:09:56 +00:00
wouter
53c0abfaef - Fix bug where a long loop could be entered, now cycle detection 
has a loop-counter and maximum search amount.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2144 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-10 14:10:17 +00:00
wouter
574f5dd27a changelog entry. (svn:NO TEST) 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2143 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-04 07:16:14 +00:00
wouter
4604785ee4 iana portlist updated 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2141 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-04 06:47:32 +00:00
wouter
a2d3f0bbcc more last resort lookup options. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2139 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-03 15:06:50 +00:00
wouter
4a23528c8c ldns tarball updated 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2137 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-03 12:51:16 +00:00
wouter
46f3abdf2a GOST disabled-by-default, also ldns tarball update with same change. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2131 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-02 08:18:55 +00:00
wouter
2713538ddf - Fix compile warning if compiled without threads. 
- updated ldns-tarball with current ldns svn (pre 1.6.5).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2130 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-02 07:36:11 +00:00
wouter
fbc4465cf0 Autoconf 2.65 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2128 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-01 13:47:11 +00:00
wouter
fe6503be38 - Fix storage of negative parent glue if that last resort fails. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2127 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-01 09:33:25 +00:00