townforge/unbound
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
4,530 Commits 1 Branch 0 Tags 79 MiB
cc
Commit Graph

3214 Commits

Author SHA1 Message Date
wouter
9b8e7776b7 - Fix auth https for libev. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4660 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-24 15:13:18 +00:00
wouter
54c261df08 - Fix contrib/fastrpz.patch for this release. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4659 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-24 14:26:21 +00:00
ralph
38b5b4c8c6 - Added root-key-sentinel support 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4652 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-24 09:03:49 +00:00
wouter
34247dd0ce - list_auth_zones unbound-control command. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4650 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-23 14:42:30 +00:00
wouter
a0252812fa - Fix cname classification with qname minimisation enabled. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4648 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-23 13:14:39 +00:00
wouter
76859ebf43 - Attempt for auth zone fix; add of callback in mesh gets from 
callback does not skip callback of result.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4647 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-23 12:51:00 +00:00
wouter
6d975fbd67 - Fix sldns parse failure for CDS alternate delete syntax empty hex. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4646 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-23 10:35:35 +00:00
wouter
c575ac1183 - auth zone http download stores exact copy of downloaded file, 
including comments in the file.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4645 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-23 10:13:50 +00:00
wouter
40de1a23fa - Fix #4092: libunbound: use-caps-for-id lacks colon in 
config_set_option.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4644 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-23 07:51:21 +00:00
wouter
671619c57e - makedist uses bz2 for expat code, instead of tar.gz. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4643 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-23 07:45:18 +00:00
wouter
ce7cef1724 - Delete auth zone when removed from config. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4642 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-20 14:40:07 +00:00
wouter
bded8be7c7 - Fix #4091: Fix that reload of auth-zone does not merge the zonefile 
with the previous contents.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4641 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-20 14:15:34 +00:00
wouter
589198d82e - removed free from failed parse case. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4640 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-20 14:10:55 +00:00
wouter
c0f78ead16 explain how to read the certificate. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4639 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-20 13:45:59 +00:00
wouter
b8a328a4c6 - man page documentation for dns-over-tls forward-addr '#' notation. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4638 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-20 11:50:41 +00:00
wouter
1586971688 - For addr with #authname and no @port notation, the default is 853. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4637 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-19 14:23:14 +00:00
wouter
8af2d107ce Note bugfix and RFC support. 
- Fix #658: unbound using TLS in a forwarding configuration does not
  verify the server's certificate (RFC 8310 support).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4636 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-19 12:45:27 +00:00
wouter
b8ee6c0ec8 note RFC. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4635 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-19 12:44:04 +00:00
wouter
759a266f4f Note example use of tls authentication. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4634 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-19 12:32:39 +00:00
wouter
50220ed991 - Can set tls authentication with forward-addr: IP#tls.auth.name 
And put the public cert bundle in tls-cert-bundle: "ca-bundle.pem".


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4631 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-19 12:10:05 +00:00
wouter
3254314eb5 - Fix auth-zone retry timer to be on schedule with retry timeout, 
with backoff.  Also time a refresh at the zone expiry.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4630 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-18 06:43:02 +00:00
wouter
dcae8decf0 - unit test for allow-notify 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4629 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-17 14:58:43 +00:00
wouter
329a8e105e - allow-notify: config statement for auth-zones. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4628 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-17 13:23:35 +00:00
wouter
625acbaaec - auth zone notify work. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4627 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-17 12:18:34 +00:00
wouter
705a0dfed8 - auth zone notify work. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4625 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-16 14:24:57 +00:00
wouter
c983bccafe - Fix auth zone target lookup iterator. 
- notify with prefix


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4624 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-16 13:14:24 +00:00
wouter
261197b7e8 - Fix memory free on fail for $INCLUDE in authzone. 
- Fix that an internal error to look up the wrong rr type for
  auth zone gets stopped, before trying to send there.
- auth zone notify work.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4623 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-13 13:04:26 +00:00
wouter
524a1465fd - Fix for max include depth for authzones. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4622 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-13 06:25:30 +00:00
wouter
96756438cf - auth zone notify work. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4619 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-10 14:57:38 +00:00
ralph
5ac4889669 - num.query.aggressive.NOERROR and num.query.aggressive.NXDOMAIN statistics 
counters


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4616 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-10 11:39:23 +00:00
wouter
9c7d10f248 Note default value. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4615 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-10 07:47:52 +00:00
wouter
4d362a2803 - documentation for low-rtt and low-rtt-pct. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4614 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-10 07:34:26 +00:00
wouter
a6494a30da - low-rtt and low-rtt-pct in unbound.conf enable the server selection 
of fast servers for some percentage of the time.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4612 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-09 13:27:28 +00:00
wouter
0e69ab1789 - Accept both option names with and without colon for get_option 
and set_option.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4611 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-09 10:42:48 +00:00
wouter
32d7d269e4 - num.query.authzone.up and num.query.authzone.down statistics counters. 
- Fix downstream auth zone, only fallback when auth zone fails to
  answer and fallback is enabled.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4610 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-09 10:15:06 +00:00
wouter
5718d70ee1 - Fix that flush_zone sets prefetch ttl expired, so that with 
serve-expired enabled it'll start prefetching those entries.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4609 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-09 07:39:59 +00:00
wouter
eb3fb269b0 - ED448 support. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4607 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-05 14:44:17 +00:00
wouter
7584b945fc - Fix unbound-control over pipe with openssl 1.1.1, the TLSv1.3 
tls_choose_sigalg routine does not allow the ciphers for the pipe,
  so use TLSv1.2.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4606 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-05 13:43:05 +00:00
wouter
6109798fea - Fix above stub queries for type NS and useless delegation point. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4604 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-05 09:53:27 +00:00
wouter
c79c0275c2 - nitpick fixes in example.conf. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4603 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-05 08:30:25 +00:00
wouter
7d87afac47 - Combine write of tcp length and tcp query for dns over tls. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4601 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-05 08:10:25 +00:00
wouter
1692bfd8c2 - Fix unable to resolve after new WLAN connection, due to auth-zone 
failing with a forwarder set.  Now, auth-zone is only used for
  answers (not referrals) when a forwarder is set.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4600 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-03 12:22:35 +00:00
wouter
b54babc7b6 - Fix #4043: make test fails due to v6 presentation issue in macOS. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4599 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-03 07:47:02 +00:00
ralph
f1cf9f9824 - Check "result" in dup_all(), by Florian Obser. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4598 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-29 08:02:26 +00:00
ralph
8d778e3a8d - Fix unbound-control get_option aggressive-nsec 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4597 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-23 12:23:02 +00:00
ralph
64cac94656 Changelog typo fix 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4595 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-21 15:42:25 +00:00
ralph
3d00933139 - Do use cached NSEC records to generate negative answers for domains under 
DNSSEC Negative Trust Anchors.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4593 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-21 14:34:17 +00:00
wouter
59cd6fd783 - iana port update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4592 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-19 13:19:53 +00:00
wouter
174c856621 - corrected a minor typo in the changelog. 
- move htobe64/be64toh portability code to cachedb.c.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4591 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-16 06:46:56 +00:00
wouter
747b0fe252 doc and flex and yacc. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4589 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-15 14:23:51 +00:00
wouter
c549551a6c - Create additional tls service interfaces by opening them on other 
portnumbers and listing the portnumbers as additional-tls-port: nr.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4588 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-15 14:19:02 +00:00
wouter
0700c011c6 - Fix #3817: core dump happens in libunbound delete, when queued 
servfail hits deleted message queue.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4587 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-15 13:32:19 +00:00
wouter
96979a9d6c - Add --with-libhiredis, unbound support for a new cached backend 
that uses a Redis server as the storage.  This implementation
  depends on the hiredis client library (https://redislabs.com/lp/hiredis/).
  And unbound should be built with both --enable-cachedb and
  --with-libhiredis[=PATH] (where $PATH/include/hiredis/hiredis.h
  should exist).  Patch from Jinmei Tatuya (Infoblox).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4586 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-15 12:33:51 +00:00
wouter
0a3417c0a2 1.7.1 in development 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4585 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-15 10:19:14 +00:00
wouter
e39ce268e3 - Fix #3736: Fix 0 TTL domains stuck on SERVFAIL unless manually 
flushed with serve-expired on.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4582 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-13 12:52:11 +00:00
wouter
03979f95a6 Fix 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4581 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-13 08:13:16 +00:00
wouter
d17c639867 - Fix typo in documentation. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4580 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-13 08:12:38 +00:00
wouter
e577f90bb8 - Check IXFR start serial. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4579 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-12 14:34:24 +00:00
wouter
e417dbf3ca - Fix #3727: Protocol name is TLS, options have been renamed but 
documentation is not consistent.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4578 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-12 12:35:53 +00:00
wouter
3786f4ac38 - tag 1.7.0rc3. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4576 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-12 09:22:16 +00:00
wouter
529514534f - Added documentation for aggressive-nsec: yes. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4575 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-12 08:21:44 +00:00
wouter
a3296c2da0 configure --disable-swig-version-check stops the swig version check. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4574 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-09 08:01:11 +00:00
wouter
a93a529845 - Fix #3598: Fix swig build issue on rhel6 based system. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4573 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-09 08:00:40 +00:00
wouter
7faeb8e311 1.7.0rc2 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4571 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-08 13:37:34 +00:00
wouter
12e74d064f - note when tag 1.7.0rc1 happened in the changelog. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4570 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-07 08:57:33 +00:00
wouter
2b00a5d314 - Attempt to remove warning about trailing whitespace. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4568 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-07 08:52:18 +00:00
wouter
1c8938d3a2 - patch suggested by Debian lintian: allow to -> allow one to, from 
A. Schulze.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4567 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-07 08:40:09 +00:00
wouter
06453716e5 - patch to log creates keytag queries, from A. Schulze. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4566 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-07 08:39:10 +00:00
wouter
d1ce267c04 - Fixed contrib/fastrpz.patch, even though this already applied 
cleanly for me, now also for others.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4565 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-07 08:32:14 +00:00
wouter
ed4f6f2c2f - Fix for windows compile. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4563 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-06 09:18:53 +00:00
wouter
cf7ae9cac6 - svn trunk contains 1.7.0, this is the number for the next release. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4561 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-06 09:07:22 +00:00
wouter
692f648a6e - Reverted fix for #3512, this may not be the best way forward; 
although it could be changed at a later time, to stay similar to
  other implementations.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4560 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-06 08:22:33 +00:00
wouter
0a65f973e9 - Fix #3582: Squelch address already in use log when reuseaddr option 
causes same port to be used twice for tcp connections.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4559 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-05 15:45:34 +00:00
wouter
ebe1d77ccd - iana port update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4558 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-05 14:38:30 +00:00
wouter
f9f010890f - Fix to check define of DSA for when openssl is without deprecated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4556 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-03-05 14:28:21 +00:00
wouter
327d22ff3e - Fix nettle compile. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4555 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-02-27 13:03:54 +00:00
wouter
7cb6d24fad - Fix compile with staticexe and python module. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4554 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-02-27 10:53:49 +00:00
wouter
340efc3a79 - Fix compile without threads, and remove unused variable. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4553 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-02-27 10:36:12 +00:00
wouter
325fc0651c - Fixup contrib/fastrpz.patch so that it applies. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4552 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-02-27 10:18:28 +00:00
ralph
3377e6f8ee - Save wildcard RRset from answer with original owner for use in aggressive 
NSEC.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4550 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-02-22 15:12:31 +00:00
wouter
3c305c6934 - more robust cachedump rrset routine. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4549 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-02-21 15:25:19 +00:00
wouter
ffa1194628 - Fix validation for CNAME loops. When it detects a cname loop, 
by finding the cname, cname in the existing list, it returns
  the partial result with the validation result up to then.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4547 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-02-21 14:04:02 +00:00
wouter
eb1adcf378 - Fix #3512: unbound incorrectly reports SERVFAIL for CAA query 
when there is a CNAME loop.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4544 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-02-21 13:13:58 +00:00
wouter
67f76f85dc - Fix for more maintainable code in localzone. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4542 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-02-19 13:21:57 +00:00
wouter
5a0f6206c8 bug ref nr. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4541 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-02-19 12:14:43 +00:00
wouter
80ab137e03 - local-zone noview can be used to break out of the view to the 
global local zone contents, for queries for that zone.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4540 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-02-19 12:13:23 +00:00
wouter
aaf91e2491 - Fix #3505: Documentation for default local zones references 
wrong RFC.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4539 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-02-19 08:43:23 +00:00
wouter
1a9d913ee5 - Fixes for clang static analyzer, the missing ; in 
edns-subnet/addrtree.c after the assert made clang analyzer
  produce a failure to analyze it.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4538 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-02-16 10:31:48 +00:00
ralph
c217a69c57 - Aggressive NSEC tests 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4537 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-02-13 14:40:29 +00:00
wouter
4ddbf8aed9 - iana port update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4533 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-02-13 10:35:31 +00:00
wouter
4d4669b2cc - tls-cert-bundle option in unbound.conf enables TLS authentication. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4532 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-02-13 10:35:09 +00:00
wouter
0e2c3c5adf - Unit test for auth zone https url download. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4531 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-02-12 15:40:05 +00:00
ralph
42255fcad3 - Processed aggressive NSEC code review remarks Wouter 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4529 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-02-12 12:14:01 +00:00
ralph
2d5fc74a3e - Added tests with wildcard expanded NSEC records (CVE-2017-15105 test) 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4528 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-02-12 11:39:03 +00:00
wouter
f928cde035 - auth zone url config. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4525 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-02-08 16:11:27 +00:00
ralph
35bc8a1ecc - Aggressive use of NSEC implementation. Use cached NSEC records to generate 
NXDOMAIN, NODATA and positive wildcard answers.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4522 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-02-08 13:16:36 +00:00
wouter
6342b7928f - iana port update. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4519 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-02-08 10:14:34 +00:00
wouter
db621d92d7 - auth-zone provides a way to configure RFC7706 from unbound.conf, 
eg. with auth-zone: name: "." for-downstream: no for-upstream: yes
  fallback-enabled: yes and masters or a zonefile with data.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4510 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-02-05 14:21:46 +00:00
wouter
e7a76a8a64 - Fix #3451: dnstap not building when you have a separate build dir. 
And removed protoc warning, set dnstap.proto syntax to proto2.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4508 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-02-05 12:14:51 +00:00
wouter
6b49cdd1d8 - lock subnet new item before insertion to please checklocks, 
no modification of critical regions outside of lock region.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4497 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-02-02 10:52:44 +00:00