Commit Graph

3214 Commits

Author SHA1 Message Date
wouter
77d3988ed5 - Work on local root zone code.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4376 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-10-17 15:16:31 +00:00
wouter
8ea0120a1a - Better documentation for cache-max-negative-ttl.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4375 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-10-17 12:53:21 +00:00
wouter
cbb64b3ab6 - [dnscrypt] prevent dnscrypt-secret-key, dnscrypt-provider-cert
duplicates
- [dnscrypt] introduce dnscrypt-provider-cert-rotated option,
  from Manu Bretelle.
	This option allows handling multiple cert/key pairs while only
	distributing some of them.
	In order to reliably match a client magic with a given key without
	strong assumption as to how those were generated, we need both key and
	cert. Likewise, in order to know which ES version should be used.
	On the other hand, when rotating a cert, it can be desirable to only
	serve the new cert but still be able to handle clients that are still
	using the old certs's public key.
	The `dnscrypt-provider-cert-rotated` allow to instruct unbound to not
	publish the cert as part of the DNS's provider_name's TXT answer.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4373 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-10-17 07:34:49 +00:00
wouter
3110caa07e - Fix #1749: With harden-referral-path: performance drops, due to
circular dependency in NS and DS lookups.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4372 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-10-17 07:22:58 +00:00
wouter
9ebff362bf - trunk has version 1.6.8.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4371 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-10-10 07:38:56 +00:00
wouter
8a71dc5fc9 - tag 1.6.7
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4369 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-10-10 07:10:35 +00:00
wouter
ddc2388235 - Fix spelling in unbound-control man page.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4368 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-10-06 07:00:10 +00:00
wouter
486ac179d8 - tag 1.6.7rc1
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4366 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-10-05 14:31:39 +00:00
ralph
95863bf217 - Use RCODE from A response on DNS64 synthesized answer.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4365 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-10-05 13:55:04 +00:00
wouter
201305283a - Fix some more crpls in testdata for different signaling default.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4363 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-10-05 10:44:16 +00:00
wouter
c523378d4e - Fix trust-anchor-signaling works in libunbound.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4362 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-10-05 10:37:34 +00:00
ralph
c42f53614d - Set trust-anchor-signaling default to yes
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4360 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-10-05 10:17:25 +00:00
wouter
970f539bde - Fix param unused warning for windows exportsymbol compile.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4359 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-10-02 12:24:48 +00:00
ralph
8f05e958fa - Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch (by Danilo
G. Baio). 


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4358 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-09-25 12:49:47 +00:00
ralph
4d5b70bbb0 - Log name of looping module
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4357 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-09-21 08:19:47 +00:00
wouter
235b9c147e Spelling fixes are from Josh Soref.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4356 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-09-20 07:01:52 +00:00
wouter
f5d8f50530 - Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4355 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-09-19 11:54:58 +00:00
wouter
6c6d33763d - use a cachedb answer even if it's "expired" when serve-expired is yes
(patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4353 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-09-19 09:08:29 +00:00
ralph
c881f5fe5e - Fix #1400: allowing use of global cache on ECS-forwarding unless
always-forward.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4352 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-09-18 09:09:10 +00:00
wouter
87a108b346 - Fix #1440: [dnscrypt] client nonce cache.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4351 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-09-18 08:55:08 +00:00
wouter
e12160f6cc and man page.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4350 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-09-18 08:50:20 +00:00
wouter
e2aaf5e9a7 - Fix #1435: Please allow UDP to be disabled separately upstream and
downstream.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4349 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-09-18 08:42:24 +00:00
wouter
5251daea1e - Fix that looping modules always stop the query, and don't pass
control.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4348 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-09-18 07:54:24 +00:00
wouter
becbd20b1f - tag 1.6.6rc2, became 1.6.6 on 18 sep. trunk 1.6.7 in development.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4347 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-09-18 07:49:41 +00:00
wouter
39ba948040 - Spelling fixes, from Phil Porada.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4344 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-09-15 14:29:28 +00:00
wouter
ddd249d0df - Fix unbound-host to report error for DNSSEC state of failed lookups.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4343 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-09-15 14:11:43 +00:00
wouter
dfb5ebda09 - tag 1.6.6rc2
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4341 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-09-13 06:57:39 +00:00
wouter
86daa970ea - Add dns64 for client-subnet in unbound-checkconf.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4340 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-09-12 05:43:46 +00:00
wouter
6e590364b5 - Fix #1434: Fix windows openssl 1.1.0 linking.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4338 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-09-05 08:28:39 +00:00
ralph
6d18c7e23d - Fix #1412: QNAME minimisation strict mode not honored
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4337 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-09-04 15:15:27 +00:00
wouter
3a1a576d65 - makedist fix for windows binaries, with openssl 1.1.0 windres fix,
and expat 2.2.4 install target fix.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4336 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-09-04 14:02:15 +00:00
wouter
526d1e88ac note tag 1.6.6rc1
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4335 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-09-04 12:55:25 +00:00
wouter
50941d679e and in man page.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4333 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-09-01 14:55:52 +00:00
wouter
d8d4c8c5e9 - Recommend 1472 buffer size in unbound.conf
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4332 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-09-01 14:54:37 +00:00
wouter
15de64688c - Fix #1418: [ip ratelimit] initialize slabhash using
ip-ratelimit-slabs.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4330 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-31 12:02:14 +00:00
wouter
dfb7048b28 dnscrypt cache size configuration option.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4328 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-31 11:58:29 +00:00
wouter
6a32cf0cc5 - make depend
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4327 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-31 08:08:45 +00:00
wouter
ce208bb8fe - Fix #1417: [dnscrypt] shared secret cache counters, and works when
dnscrypt is not enabled.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4326 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-31 08:06:17 +00:00
wouter
7e69f3e28c - but reverted that, tests fails with that escape.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4325 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-31 07:48:09 +00:00
wouter
74148f584a - For #1417: escape ; in dnscrypt tests.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4324 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-31 07:43:54 +00:00
wouter
99f7948a7b - Fix #1424: cachedb:testframe is not thread safe.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4323 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-31 07:35:08 +00:00
wouter
e7919c4128 - Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4322 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-30 13:13:43 +00:00
wouter
40e912fbf8 - updated contrib/fastrpz.patch to apply with configparser changes.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4321 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-30 11:12:03 +00:00
wouter
818ac2ab2e - fixup WKS test on buildhost without servicebyname.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4319 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-29 08:56:22 +00:00
wouter
1f650790ae - new keys and certs for dnscrypt tests.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4318 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-29 08:48:19 +00:00
wouter
a5990315f7 - zero qinfo in handle_request, this zeroes local_alias and also the
qname member.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4317 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-29 07:31:45 +00:00
wouter
9500dddad7 - Fix #1414: fix segfault on parse failure and log_replies.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4316 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-29 07:28:29 +00:00
wouter
d566f3c891 - Fix WKS records on kvm autobuild host, with default protobyname
entries for udp and tcp.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4314 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-28 13:00:45 +00:00
wouter
398021b8fd - Small fixes for the shared secret cache patch.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4313 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-28 11:05:51 +00:00
wouter
8e49ed87c3 - Fix #1415: [dnscrypt] shared secret cache, patch from
Manu Bretelle.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4312 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-28 10:55:41 +00:00
wouter
737cb7483b - iana portlist update
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4311 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-28 08:29:00 +00:00
wouter
8b3bfc6ca7 - Fix #1415: patch to free dnscrypt environment on reload.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4310 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-28 07:49:42 +00:00
wouter
6aa6c48e10 - Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
allocation failure.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4309 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-22 13:40:44 +00:00
wouter
51808a94ba - make depend
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4308 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-22 07:44:41 +00:00
wouter
a2f9551c88 - Fix #1407: Add ECS options check to unbound-checkconf.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4307 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-22 07:43:59 +00:00
wouter
489ad287a4 - Fix #1402: squelch invalid argument error for fd_set_block on windows.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4306 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-21 14:15:32 +00:00
wouter
2cbdee08dc Better text for change:
- Fix install of trust anchor when two anchors are present, makes both
	  valid. Checks hash of DS but not signature of new key. This fixes
	  the root.key file if created when unbound is installed between
	  sep11 and oct11 2017.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4305 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-21 12:48:05 +00:00
wouter
69cabf506e - Fix issue on macOX 10.10 where TCP fast open is detected but not
implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4304 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-21 11:44:46 +00:00
wouter
e682b0be06 - Fix install of trust anchor when two anchors are present, makes both
valid.  Checks hash of DS but not signature of new key.  This fixes
  installs between sep11 and oct11 2017.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4302 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-21 08:57:44 +00:00
wouter
aa09eec8a4 - Patch to show DNSCrypt status in help output, from Carsten
Strotmann.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4298 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-10 07:13:44 +00:00
wouter
36be78aae2 - Remove spaces from Makefile.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4297 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-08 09:43:51 +00:00
wouter
94f66ee00f - Fix #1398: make cachedb secret configurable.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4295 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-08 09:04:51 +00:00
wouter
df7d82a267 - Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4294 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-07 07:42:45 +00:00
ralph
e5513455fb Do not add rrset_bogus and query ratelimiting stats per thread.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4293 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-03 15:32:24 +00:00
ralph
d073e3e262 - Added stats for queries that have been ratelimited by domain recursion.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4292 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-03 12:52:33 +00:00
ralph
2fc821809c - Do not reset rrset.bogus stats when called using stats_noreset.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4291 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-03 10:50:46 +00:00
ralph
ebd76ef01f - Remove unused iter_env member (ip6arpa_dname)
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4290 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-03 09:29:21 +00:00
wouter
4b3602ba84 - Fix #1394: mix of serve-expired and response-ip could cause a crash.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4289 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-08-03 07:13:12 +00:00
wouter
436f873b63 - iana update
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4288 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-07-24 11:58:18 +00:00
wouter
8afb918284 - Fix #1365: Add Ed25519 support using libnettle.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4286 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-07-24 10:44:30 +00:00
wouter
cce1adf972 - Fix DSA configure switch (--disable dsa) for libnettle and libnss.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4285 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-07-24 10:09:05 +00:00
wouter
756034dbbe - Fix compile with libnettle
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4281 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-07-24 09:52:20 +00:00
wouter
daa625cfca - remove warning from windows compile.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4280 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-07-24 09:30:12 +00:00
wouter
6521d82bb4 - squelch TCP fast open error on FreeBSD when kernel has it disabled,
unless verbosity is high.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4279 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-07-24 09:14:42 +00:00
wouter
2f22e0e328 - upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4278 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-07-24 09:04:18 +00:00
wouter
55c6dcd7ad - Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
With the -p option unbound does not create a pidfile.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4276 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-07-17 08:26:49 +00:00
wouter
fe4f8851d3 - Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4275 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-07-17 08:21:19 +00:00
wouter
e946f2fe7e fix doc.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4274 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-07-11 14:31:32 +00:00
wouter
4ebb3f5a05 - Redirect all localhost names to localhost address for RFC6761.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4273 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-07-11 14:29:54 +00:00
wouter
7e2a0e920a - Fix #1344: RFC6761-reserved domains: test. and invalid.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4272 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-07-11 13:27:33 +00:00
wouter
f48dadeb86 test report again
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4270 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-07-06 14:21:52 +00:00
wouter
61e5213d35 Test -f report.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4269 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-07-06 14:16:47 +00:00
wouter
3562699ab7 run tests.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4267 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-07-06 13:41:13 +00:00
wouter
df993ad549 - Fix svn hooks for tdir (selected if testcode/mini_tdir.sh exists).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4266 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-07-06 13:39:28 +00:00
wouter
2ca4cc3a77 - Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4263 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-07-06 13:27:05 +00:00
wouter
b56b968400 - Fix 1332: Bump verbosity of failed chown'ing of the control socket.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4262 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-07-05 06:59:45 +00:00
wouter
c6925b28c4 - Fix openssl 1.1.0 load of ssl error strings from ssl init.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4260 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-07-03 13:37:37 +00:00
wouter
1b563e5696 - Fix pythonmod link line option flag.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4259 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-07-03 12:48:53 +00:00
wouter
4de115410e - Fix #1331: libunbound segfault in threaded mode when context is
deleted.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4258 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-07-03 11:41:32 +00:00
wouter
cc82f13e59 - Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
on.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4257 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-07-03 07:14:37 +00:00
wouter
ad5295b585 - enhancement for hardened-tls for DNS over TLS. Removed duplicated
security settings.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4255 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-29 11:45:43 +00:00
wouter
13034f04ab - iana portlist update
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4254 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-29 07:36:02 +00:00
wouter
f43c401e9a - Fix python example0 return module wait instead of error for pass.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4253 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-29 07:28:11 +00:00
wouter
4e5449c213 - Fix that infra cache host hash does not change after reconfig.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4252 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-27 15:23:17 +00:00
wouter
cea4abd035 - Remove signed unsigned warning from authzone.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4251 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-27 10:54:15 +00:00
wouter
32a5f8a4a4 - Trunk contains 1.6.5, with changes from 26, 27 june.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4250 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-27 10:53:52 +00:00
wouter
d55836727f - unbound-control dump_infra prints port number for address if not 53.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4248 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-26 12:31:49 +00:00
wouter
f133b9c997 - First fix for zero b64 and hex text zone format in sldns.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4247 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-26 11:36:54 +00:00
wouter
51f724b6bb - Better fixup of dnscrypt_cert_chacha test for different escapes.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4246 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-26 09:06:42 +00:00
wouter
32dad468a8 - (for 1.6.5): fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4244 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-23 06:56:59 +00:00
wouter
5e080f7572 - Tag 1.6.4rc2
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4242 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-22 12:08:18 +00:00
ralph
a153480dc3 - Added fastrpz patch to contrib
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4241 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-22 12:03:32 +00:00
wouter
053cd7da44 - Fix #1316: heap read buffer overflow in parse_edns_options.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4240 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-21 11:50:39 +00:00
wouter
5695a40bfc - Fix lintian typo.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4239 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-20 13:34:01 +00:00
wouter
8e8844567b - Tag 1.6.4rc1
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4237 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-20 07:38:52 +00:00
wouter
42f0849d55 - Fix warning in pythonmod under clang compiler.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4236 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-20 07:05:30 +00:00
ralph
de47cbbb23 - Fix #1277: disable domain ratelimit by setting value to 0.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4235 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-16 13:22:43 +00:00
wouter
885c704e9f - Fix to unlock view in view test.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4234 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-16 11:16:31 +00:00
wouter
787f93a0f7 - Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Remove asynclook tests that cause test and purifier problems.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4233 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-16 08:20:44 +00:00
wouter
254bbfbb25 - Fix memory leak in dnscrypt config read.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4231 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-16 07:55:52 +00:00
wouter
af45e926d7 - Fix memory leak in sldns_buffer_new_frm_data.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4230 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-16 07:42:52 +00:00
wouter
89fcd3d300 - Free callback in edns-subnetmod on exit and restart.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4229 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-16 07:31:30 +00:00
wouter
056ed919da - Fix #1301: memory leak in respip and tests.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4228 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-16 07:27:49 +00:00
wouter
9beb7daffa - Fix query for refetch_glue of stub leaking to internet.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4227 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-15 15:00:07 +00:00
wouter
11a4c3b818 - Fix stub zone queries leaking to the internet for
harden-referral-path ns checks.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4226 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-15 07:59:05 +00:00
wouter
60d7c41f55 - More fixes in depth for buffer checks in 0x20 qname checks.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4225 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-13 14:34:44 +00:00
wouter
0826cc1278 - Fix #1280: Unbound fails assert when response from authoritative
contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- 1.6.3 tag created, with only #1280 fix, trunk is 1.6.4 development.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4224 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-13 14:25:47 +00:00
wouter
ec862f2591 - Fix #1279: Memory leak on reload when python module is enabled.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4220 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-13 07:10:58 +00:00
wouter
a45cc6ec21 - Fix #1278: Incomplete wildcard proof.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4218 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-12 10:11:28 +00:00
ralph
449e49f035 - Added domain name based ECS whitelist.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4217 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-08 14:44:55 +00:00
wouter
deae0ea058 - dnscrypt unit tests with chacha.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4216 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-08 08:27:49 +00:00
wouter
fcf637ada3 - Detect chacha for dnscrypt at configure time.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4215 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-08 08:17:38 +00:00
wouter
df9b92185e - Add dnscrypt XChaCha20 tests.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4213 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-07 11:39:02 +00:00
wouter
f509bb7928 - Fix that unbound-control can set val_clean_additional and val_permissive_mode.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4210 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-07 07:00:02 +00:00
wouter
6f850db329 - Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4208 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-06 12:52:26 +00:00
wouter
668abbad3d - Fix #1275: cached data in cachedb is never used.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4207 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-06 12:08:14 +00:00
wouter
2d77abbb5c - renumbering B-Root's IPv6 address to 2001:500:200::b.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4206 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-06 09:33:09 +00:00
wouter
f38d3d8395 - Add an explicit type cast for TCP FASTOPEN fix.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4205 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-06 07:59:32 +00:00
ralph
006f36fa5b - Fix #1274: automatically trim chroot path from dnscrypt key/cert paths (from
Manu Bretelle).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4204 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-01 09:51:05 +00:00
wouter
5e127ea83a - Fix fastopen EPIPE fallthrough to perform connect.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4203 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-01 09:06:14 +00:00
ralph
badd1be3bb - Also use global local-zones when there is a matching view that does not have
any local-zone specified. 


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4202 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-31 11:45:39 +00:00
wouter
156f8c7582 - If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4201 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-31 11:09:15 +00:00
wouter
d2f8b3b9ba - Fix #1273: cachedb.c doesn't compile with -Wextra.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4200 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-31 05:42:23 +00:00
ralph
9babcab33c - Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using unbound-control.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4199 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-30 13:04:19 +00:00
wouter
5825c88452 - Support for openssl EVP_DigestVerify.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4198 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-30 12:28:25 +00:00
wouter
2747bc0ae4 - Fix assertion for low buffer size and big edns payload when worker
overrides udpsize.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4195 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-29 07:32:45 +00:00
ralph
c8ebc3394f - Added redirect-bogus.patch to contrib directory.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4194 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-26 12:09:38 +00:00
wouter
d2ae534d08 - printout localzone for duplicate local-zone warnings.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4193 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-26 11:09:16 +00:00
wouter
34d91aca25 - exec_prefix is by default equal to prefix.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4192 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-26 10:47:18 +00:00
wouter
e33b8e0c9f - Fix #1270: unitauth.c doesn't compile with higher warning level
and optimization


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4191 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-26 06:50:48 +00:00
wouter
b8e1e6cc10 - authzone cname chain, no rrset duplicates, wildcard doesn't change
rrsets added for cname chain.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4189 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-24 12:26:44 +00:00
wouter
973a59617e - iana portlist update
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4183 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-23 10:33:15 +00:00
wouter
e781fc07b4 - first services/authzone check in, it compiles and reads and writes
zonefiles.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4178 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-23 09:32:40 +00:00
wouter
c79f03f5dd - Fix #1268: SIGSEGV after log_reopen.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4177 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-22 07:20:59 +00:00
wouter
2761880332 and compatibility with BoringSSL.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4175 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-18 07:20:26 +00:00
wouter
45b027b371 - Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4174 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-18 07:15:16 +00:00
wouter
209fe3ebd1 - Fix #1265 to use /bin/kill.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4173 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-18 07:08:55 +00:00
wouter
fa6f7799e3 - Fix #1265: contrib/unbound.service contains hardcoded path.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4171 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-17 14:50:10 +00:00
george
af5c54a227 - Use qstate's region for IPSECKEY rrset (ipsecmod).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4169 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-17 13:22:06 +00:00
wouter
bff243b130 - Fix type AVC sldns RR definition.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4162 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-16 15:00:36 +00:00
wouter
c19a0cbb0d - better module memory lookup, fix of unbound-control shm names for
module memory printout of statistics.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4161 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-16 14:16:59 +00:00
wouter
28deb7c3de - updated configure, dependencies and flex output.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4159 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-16 13:21:10 +00:00
george
51e798d701 - Implemented opportunistic IPsec support module (ipsecmod).
- Some whitespace fixup.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4158 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-16 12:39:24 +00:00
wouter
4e579c3fd9 - document trust-anchor-signaling in example config file.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4157 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-16 07:50:42 +00:00
wouter
448be5e887 - updated dependencies in the makefile.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4155 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-16 07:28:50 +00:00
wouter
31e253e294 - Fix queries for nameservers under a stub leaking to the internet.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4154 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-12 15:10:10 +00:00
wouter
eebaef35c9 - Adjust servfail by iterator to not store in cache when serve-expired
is enabled, to avoid overwriting useful information there.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4153 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-12 12:16:41 +00:00
ralph
f7bb634c06 - Add 'c' to getopt() in testbound.
- iana portlist update.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4152 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-09 15:02:39 +00:00
wouter
f9c3b4b818 - Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4151 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-08 10:41:03 +00:00
wouter
c7dfc3053b - Fix tcp-mss failure printout text.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4150 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-08 07:15:48 +00:00
wouter
dbad074478 - sldns SMIMEA and AVC definitions, same as getdns definitions.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4148 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-02 14:48:52 +00:00
wouter
7c8e9d6cc1 - Fix sldns parse and printout of TSIG RRs.
The printout text format is the same as dig uses.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4145 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-02 13:53:06 +00:00
ralph
865b0eb154 - Added mesh_add_sub to add detached mesh entries.
- Use mesh_add_sub for key tag signaling queries.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4144 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-02 13:17:56 +00:00
wouter
68faf5f1b7 - Fix sldns int16_data parse.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4143 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-02 12:15:06 +00:00
wouter
31f0f438e1 - Fix sldns wire2str printout of RR type CAA tags.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4142 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-02 12:05:10 +00:00
wouter
b8fff5236f - Added test for leak of stub information.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4141 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-02 09:16:54 +00:00
wouter
0c37eb95a7 Fix #1258: 64bit getting installed in C:\Program Files (x86).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4140 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-01 14:57:36 +00:00
wouter
12aadd1da8 - Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4139 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-01 14:41:40 +00:00
wouter
de5995245a - iana portlist update
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4138 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-01 13:29:48 +00:00
wouter
216dce82e4 - Fix #1259: "--disable-ecdsa" argument overwritten
by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4137 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-01 07:34:48 +00:00
ralph
0be5e03a03 - Implemented trust anchor signaling using key tag query.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4134 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-26 12:58:13 +00:00
wouter
30af680c75 - Based on #1257: check parse limit before t increment in sldns RR
string parse routine.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4133 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-26 09:03:15 +00:00
wouter
56fa55c4c2 - trunk contains 1.6.3 version number (changes from 1.6.2 back from
when the 1.6.2rc1 tag has been created).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4132 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-24 12:30:55 +00:00
wouter
0a217826f9 variables get_option and set_option also for dnscrypt.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4130 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-24 09:00:45 +00:00
wouter
9c78af8fd0 - unbound-checkconf -o allows query of dnstap config variables.
Also unbound-control get_option.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4129 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-24 08:30:32 +00:00
ralph
2c2c4f6c2a - iana portlist update
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4128 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-21 10:26:01 +00:00
ralph
4a6a87e6c3 - Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4127 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-21 10:20:35 +00:00
ralph
85a5a277c6 - Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4126 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-18 13:25:09 +00:00
ralph
e61bcbfd71 - Fix #1252: more indentation inconsistencies.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4125 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-18 09:00:52 +00:00
wouter
6e077f9cf9 - (for 1.6.3:) unbound.h exports the shm stats structures. They use
type long long and no ifdefs, and ub_ before the typenames.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4117 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-13 12:47:29 +00:00
ralph
7ab393f952 - Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle). 


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4116 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-13 08:49:32 +00:00
wouter
ca3bbbaf26 - tag for 1.6.2rc1
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4114 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-13 07:37:07 +00:00
wouter
059c3b9f93 - Fix #1250: inconsistent indentation in services/listen_dnsport.c.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4113 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-13 07:17:05 +00:00
wouter
91dc0c2527 - subnet mem value is available in shm, also when not enabled,
to make the struct easier to memmap by other applications,
  independent of the configuration of unbound.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4112 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-12 15:01:11 +00:00
ralph
09aa92b446 - Set SHM ECS memory usage to 0 when module not loaded.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4111 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-12 13:51:34 +00:00
ralph
ec8e746c14 - Fix #1249: unbound doesn't return FORMERR to bogus ECS.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4110 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-12 13:12:21 +00:00
ralph
6bb149e7b9 - Properly check for allocation failure in local_data_find_tag_datas.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4109 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-12 12:44:53 +00:00
ralph
9c39f97933 - Fix #1247: unbound does not shorten source prefix length when forwarding ECS.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4108 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-12 11:47:18 +00:00
ralph
630d010b05 - Display ECS module memory usage.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4106 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-11 13:10:30 +00:00
wouter
69b95138b8 better description.
- harden-algo-downgrade: no also makes unbound more lenient about
	  digest algorithms in DS records.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4105 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-10 13:56:31 +00:00
wouter
606e079e89 - harden algo downgrade also makes unbound more lenient about digest
algorithms in DS records.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4104 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-10 13:38:50 +00:00
ralph
1d3e451335 - Use correct identifier for SHM destroy.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4103 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-10 12:58:26 +00:00
ralph
d8a0ad2f75 - Zero initialize addrtree allocation.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4102 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-10 10:46:54 +00:00
ralph
957c97805b Respip dereference after NULL check.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4101 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-10 10:18:22 +00:00
ralph
9b5ca3ffd8 - Remove ECS option after REFUSED answer
- Fix small memory leak in edns_opt_copy_alloc



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4100 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-10 09:12:04 +00:00
george
fb883575c5 - Fix pythonmod for cb changes.
- Some whitespace fixup.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4099 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-07 17:07:16 +00:00
ralph
1acd41add5 Unlock view in respip unit test
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4098 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-07 08:57:05 +00:00
wouter
b4ee3a800a - Fix pythonmod for cb changes.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4097 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-06 14:17:37 +00:00
ralph
9d03b5781d - remove malloc from inplace_cb_register
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4095 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-06 13:41:49 +00:00
ralph
4113eb0a41 - Generalise inplace callback (de)registration
- (de)register inplace callbacks for module id
- No unbound-control set_option for ECS options
- Deprecated client-subnet-opcode config option
- Introduced client-subnet-always-forward config option
- Changed max-client-subnet-ipv6 default to 56 (as in RFC)
- Removed extern ECS config options
- module_restart_next now calls clear on all following modules
- Also create ECS module qstate on module_event_pass event


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4092 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-06 13:13:06 +00:00
wouter
3ff65cf677 - Fix respip for braces when locks arent used.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4091 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-06 11:57:27 +00:00
wouter
532e7adc95 - iana portlist update
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4090 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-06 07:04:34 +00:00
wouter
9951a634b9 - Small fixup for documentation.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4089 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-06 06:55:55 +00:00
wouter
f3b334c5f2 - iana portlist update
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4088 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-04 13:46:45 +00:00
wouter
5262f39894 - Fix #1244: document that use of chroot requires trust anchor file to
be under chroot.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4087 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-04 13:39:33 +00:00
ralph
5db6e95520 - Do not add current time twice to TTL before ECS cache store.
- Do not touch rrset cache after ECS cache message generation.
- Use LDNS_EDNS_CLIENT_SUBNET as default ECS opcode.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4086 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-03 09:36:18 +00:00
wouter
34de886973 - iana portlist update
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4085 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-03 09:07:17 +00:00
wouter
3ad4ef86b2 - Fix #1217: Add metrics to unbound-control interface showing
crypted, cert request, plaintext and malformed queries (from
  Manu Bretelle).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4084 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-04-03 09:03:32 +00:00
wouter
7d2b8dcf4c - Remove (now unused) event2 include from dnscrypt code.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4082 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-27 06:27:22 +00:00
george
e8104361b1 - Update Changelog.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4081 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-24 11:02:26 +00:00
wouter
ac4f0b210f - Fix #1239: configure fails to find python distutils if python
prints warning.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4079 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-23 10:23:38 +00:00
wouter
0380b96b0a - Fix #1229: Systemd service sandboxing, options in wrong sections.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4078 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-22 07:22:34 +00:00
wouter
b56b1d258a - Fix #1238: segmentation fault when adding through the remote
interface a per-view local zone to a view with no previous
  (configured) local zones.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4077 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-22 07:19:38 +00:00
ralph
12728301d7 - Merge EDNS Client subnet implementation from feature branch into main branch,
using new EDNS processing framework.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4074 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-21 12:08:17 +00:00
wouter
072eb0621c - Fix doxygen for dnscrypt files.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4073 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-21 08:50:17 +00:00
wouter
e385b865d5 - fixup for lruhash (whitespace and header file comment).
- dnscrypt tests.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4072 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-20 15:51:34 +00:00
wouter
d1cd3545e2 - lru_demote and lruhash_insert_or_retrieve functions for getdns.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4068 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-20 15:25:06 +00:00
wouter
25d0a7279d - make depend, autoconf, remove warnings about statement before var.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4066 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-20 15:09:06 +00:00
wouter
a48c8c5ba0 - #1217. DNSCrypt support, with --enable-dnscrypt, libsodium and then
enabled in the config file from Manu Bretelle.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4065 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-20 14:55:31 +00:00
wouter
8eb62715cf - Fix #1237 - Wrong resolving in chain, for norec queries that get
SERVFAIL returned.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4064 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-17 14:32:25 +00:00
wouter
7230af0dcb - Patch for view functionality for local-data-ptr from Björn Ketelaars.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4063 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-17 08:01:40 +00:00
wouter
1e6a871864 - trustanchor tags are sorted. reusable routine to fetch taglist.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4056 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-16 15:04:18 +00:00
wouter
bd9bcfa75f - Fix that looped DNAMEs do not cause unbound to spend effort.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4055 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-16 14:32:58 +00:00
wouter
27d8c63674 - Add trustanchor.unbound CH TXT that gets a response with a number
of TXT RRs with a string like "example.com. 2345 1234" with
  the trust anchors and their keytags.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4051 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-16 09:17:58 +00:00
wouter
838e7b0434 - Fix #1235: Fix too long DNAME expansion produces SERVFAIL instead
of YXDOMAIN + query loop, reported by Petr Spacek.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4049 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-13 08:27:01 +00:00
wouter
78b0cf1216 - testbound understands Deckard MATCH rcode question answer commands.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4048 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-13 08:15:07 +00:00
wouter
7d444915c1 - Fix #1234: shortening DNAME loop produces duplicate DNAME records
in ANSWER section.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4047 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-10 13:04:24 +00:00
wouter
e69494bdc0 - unbound-control list local zone and data commands listed in the
help output.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4046 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-09 16:25:32 +00:00
wouter
7dd4463598 - --disable-sha1 disables SHA1 support in RRSIG, so from DNSKEY and
DS records.  NSEC3 is not disabled.
- fake-sha1 test option; print warning if used.  To make unit tests.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4043 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-09 13:18:08 +00:00
wouter
277b6ba85c - fix enum conversion warnings
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4038 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-08 08:21:51 +00:00
wouter
3988f19986 - swig version 2.0.1 required.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4037 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-08 07:57:06 +00:00
wouter
3220b2ae3b - make depend for build dependencies.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4036 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-08 07:54:41 +00:00
wouter
099cd16231 - Response actions based on IP address from Jinmei Tatuya (Infoblox).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4035 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-07 14:58:51 +00:00
wouter
3b1a3fa1ff - Fix #1230: swig version 2.0.0 is required for pythonmod, with
1.3.40 it crashes when running repeatly unbound-control reload.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4034 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-07 10:40:45 +00:00
wouter
87794fb647 - iana portlist update
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4033 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-06 15:33:30 +00:00
wouter
69efb2698b - Fix #1229: Systemd service sandboxing in contrib/unbound.service.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4032 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-06 15:27:36 +00:00
ralph
403fa84b7e - Fix testpkts.c, check if DO bit is set, not only if there is an OPT record.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4031 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-02-28 13:11:05 +00:00
wouter
78563f1b2c - For #1227: if we have sha256, set the cipher list to have no
known vulns.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4030 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-02-28 08:23:25 +00:00
wouter
13c6a464c9 - Fix #1226: provide official 32bit binary for windows.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4028 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-02-27 15:05:52 +00:00
wouter
fe989a1dbc - Fix #1227: Fix that Unbound control allows weak ciphersuits.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4027 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-02-27 14:40:30 +00:00
wouter
dd06544e6e meant NetBSD.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4026 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-02-24 15:53:34 +00:00
wouter
01244ec53e - include sys/time.h for new shm code on OpenBSD.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4025 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-02-24 15:51:19 +00:00
wouter
f219044e98 - make depend, autoconf, doxygen and lint fixed up.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4024 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-02-23 16:27:47 +00:00
wouter
f0a9c86a73 - Patch from Luiz Fernando Softov for Stats Shared Memory.
- unbound-control stats_shm command prints stats using shared memory,
  which uses less cpu.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4020 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-02-23 12:05:05 +00:00
wouter
aa13e3c345 - Fix doc/CNAME-basedRedirectionDesignNotes.pdf zone static to
redirect.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4019 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-02-23 08:27:31 +00:00
wouter
32e6e2640a - Fix #1224: Fix that defaults should not fall back to "Program Files
(x86) if Unbound is 64bit by default on windows.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4018 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-02-22 07:31:32 +00:00
wouter
a58f1fde37 - iana portlist update
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4017 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-02-21 14:15:05 +00:00
wouter
c2d23741b0 trunk has 1.6.2
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4016 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-02-21 14:06:48 +00:00
wouter
d56005b252 - sldns updated for vfixed and buffer resize indication from getdns.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4014 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-02-16 09:48:03 +00:00
wouter
a344dce639 - sldns has ED25519 and ED448 algorithm number and name for display.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4013 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-02-15 09:38:15 +00:00