townforge/unbound
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
4,530 Commits 1 Branch 0 Tags 79 MiB
cc
Commit Graph

90 Commits

Author SHA1 Message Date
wouter
873b46f247 Put fixes in 1.7.3 for release. 
- Fix for unbound-control on Windows and set TCP socket parameters
  more closely.
- Fix windows unbound-control no cert bad file descriptor error.
- Fix unbound-checkconf for control-use-cert.


git-svn-id: https://unbound.nlnetlabs.nl/svn/tags/release-1.7.3@4749 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-06-21 07:38:14 +00:00
wouter
346ff9c3ff - Fix that control-use-cert: no works for 127.0.0.1 to disable certs. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/tags/release-1.7.3rc2@4740 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-06-18 09:46:01 +00:00
wouter
0f9b6582fa - Fix that first control-interface determines if TLS is used. Warn 
when IP address interfaces are used without TLS.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4730 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-06-14 08:14:43 +00:00
wouter
ed387e5f93 Fixup error print for unix pipe. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4720 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-06-12 08:15:44 +00:00
wouter
7ad84e32e0 - #4102 for NSD, but for Unbound. Named unix pipes do not use 
certificate and key files, access can be restricted with file and
  directory permissions.  The option control-use-cert is no longer
  used, and ignored if found in unbound.conf.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4718 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-06-12 07:43:52 +00:00
wouter
34247dd0ce - list_auth_zones unbound-control command. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4650 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-23 14:42:30 +00:00
ralph
5ac4889669 - num.query.aggressive.NOERROR and num.query.aggressive.NXDOMAIN statistics 
counters


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4616 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-10 11:39:23 +00:00
wouter
32d7d269e4 - num.query.authzone.up and num.query.authzone.down statistics counters. 
- Fix downstream auth zone, only fallback when auth zone fails to
  answer and fallback is enabled.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4610 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-09 10:15:06 +00:00
wouter
7584b945fc - Fix unbound-control over pipe with openssl 1.1.1, the TLSv1.3 
tls_choose_sigalg routine does not allow the ciphers for the pipe,
  so use TLSv1.2.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4606 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-05 13:43:05 +00:00
wouter
87a108b346 - Fix #1440: [dnscrypt] client nonce cache. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4351 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-09-18 08:55:08 +00:00
wouter
39ba948040 - Spelling fixes, from Phil Porada. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4344 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-09-15 14:29:28 +00:00
wouter
ce208bb8fe - Fix #1417: [dnscrypt] shared secret cache counters, and works when 
dnscrypt is not enabled.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4326 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-08-31 08:06:17 +00:00
ralph
d073e3e262 - Added stats for queries that have been ratelimited by domain recursion. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4292 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-08-03 12:52:33 +00:00
wouter
2f22e0e328 - upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02), 
config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4278 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-07-24 09:04:18 +00:00
wouter
c6925b28c4 - Fix openssl 1.1.0 load of ssl error strings from ssl init. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4260 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-07-03 13:37:37 +00:00
wouter
c19a0cbb0d - better module memory lookup, fix of unbound-control shm names for 
module memory printout of statistics.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4161 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-05-16 14:16:59 +00:00
wouter
4a7b0a0112 no lint for timeval. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4122 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-04-13 13:17:51 +00:00
wouter
6e6dc43b16 more lint. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4121 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-04-13 13:11:54 +00:00
wouter
6e077f9cf9 - (for 1.6.3:) unbound.h exports the shm stats structures. They use 
type long long and no ifdefs, and ub_ before the typenames.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4117 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-04-13 12:47:29 +00:00
ralph
c2cea9742b - Also display ECS module memory stats in stats_shm 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4107 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-04-11 13:37:39 +00:00
wouter
3ad4ef86b2 - Fix #1217: Add metrics to unbound-control interface showing 
crypted, cert request, plaintext and malformed queries (from
  Manu Bretelle).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4084 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-04-03 09:03:32 +00:00
wouter
e69494bdc0 - unbound-control list local zone and data commands listed in the 
help output.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4046 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-03-09 16:25:32 +00:00
wouter
2b84aceea9 fixed for lint 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4023 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-02-23 14:17:58 +00:00
wouter
f0a9c86a73 - Patch from Luiz Fernando Softov for Stats Shared Memory. 
- unbound-control stats_shm command prints stats using shared memory,
  which uses less cpu.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4020 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-02-23 12:05:05 +00:00
wouter
4bef018f2e complete ellipsis. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3987 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-01-12 15:57:22 +00:00
wouter
bc4d0a68d2 - Fix #1206: Some view-related commands are missing from 'unbound-control -h' 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3986 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-01-12 15:56:05 +00:00
wouter
3510c9fe88 - Fix #1185: Source IP rate limiting, patch from Larissa Feng. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3981 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-01-05 13:57:12 +00:00
wouter
1e2b467c73 - Fix unbound-control and ipv6 only. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3962 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-12-13 14:21:15 +00:00
ralph
4575fa9149 - Added local-zones and local-data bulk addition and removal functionality in 
unbound-control (local_zones, local_zones_remove, local_datas and
  local_datas_remove).                                   
- iana portlist update


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3941 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-30 11:22:29 +00:00
wouter
c4d8a8858a - Fix that with openssl 1.1 control-use-cert: no uses less cpu, by 
using no encryption over the unix socket.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3936 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-25 16:14:14 +00:00
wouter
7e9e2bfb99 - configure detects ssl security level API function in the autoconf 
manner.  Every function on its own, so that other libraries (eg.
  LibreSSL) can develop their API without hindrance.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3921 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-04 08:05:42 +00:00
wouter
22f6a8f7a4 Fixup #if at start of line, for portability. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3920 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-04 07:58:57 +00:00
ralph
c1f7eb0ce5 Set openssl security level to 0 when using aNULL ciphers 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3919 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-03 16:59:00 +00:00
wouter
5c55df0e04 - Test for openssl init_crypto and init_ssl functions. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3860 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-09-15 12:03:10 +00:00
wouter
7caf19b386 please lint but also allow larger structure 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3855 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-09-13 11:38:16 +00:00
wouter
2e4d094696 - Fix for new splint on FreeBSD. Fix cast for sockaddr_un.sun_len. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3854 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-09-13 11:35:33 +00:00
wouter
9b0f30e072 - Fix incomplete prototypes reported by Dag-Erling Smørgrav. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3848 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-09-05 07:23:23 +00:00
wouter
56909f9efb Fixup for defines not funcs 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3845 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-09-02 11:20:21 +00:00
wouter
fcad92b021 - Fix compile with openssl 1.1.0 with api=1.1.0. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3844 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-09-02 09:59:09 +00:00
wouter
018d9e9265 - Fix #753: document dump_requestlist is for first thread. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3697 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-04-12 15:10:31 +00:00
wouter
11d11feed4 - Fixup 724 for unbound-control. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3576 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-12-08 08:15:55 +00:00
wouter
b7b759b22d - patch from Doug Hogan for SSL_OP_NO_SSLvx options. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3525 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-10-29 08:32:58 +00:00
willem
221499af71 SSL_CTX_use_certificate_chain_file() should be used instead of the 
SSL_CTX_use_certificate_file() function in order to allow the use of
complete certificate chains even when no trusted CA storage is used or
when the CA issuing the certificate shall not be added to the trusted
CA storage.

Thanks Daniel Kahn Gillmore


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3451 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-07-18 12:34:37 +00:00
wouter
79c9a936cb - unbound-control ratelimit_list lists high rate domains. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3393 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-10 12:13:59 +00:00
wouter
0557760286 - unbound-control list_insecure command shows the negative trust 
anchors currently configured, patch from Jelte Jansen.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3389 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-07 13:50:09 +00:00
wouter
0cb32cd3a0 Solaris portability fix. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3327 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-30 15:34:27 +00:00
wouter
a5bed77fec - Cast sun_len sizeof to socklen_t. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3312 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-12 08:20:43 +00:00
wouter
2fa6bb55ef please lint on FreeBSD 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3308 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-06 14:49:34 +00:00
wouter
5387d573cf please lint. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3305 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-06 14:18:03 +00:00
wouter
9537cdfccf - patch for remote control over local sockets, from Dag-Erling 
Smorgrav, Ilya Bakulin.  Use control-interface: /path/sock and
  control-use-cert: no.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3304 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-06 14:12:59 +00:00