townforge/unbound
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
4,530 Commits 1 Branch 0 Tags 79 MiB
cc
Commit Graph

34 Commits

Author SHA1 Message Date
wouter
50220ed991 - Can set tls authentication with forward-addr: IP#tls.auth.name 
And put the public cert bundle in tls-cert-bundle: "ca-bundle.pem".


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4631 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-19 12:10:05 +00:00
ralph
865b0eb154 - Added mesh_add_sub to add detached mesh entries. 
- Use mesh_add_sub for key tag signaling queries.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4144 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-05-02 13:17:56 +00:00
ralph
9b5ca3ffd8 - Remove ECS option after REFUSED answer 
- Fix small memory leak in edns_opt_copy_alloc



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4100 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-04-10 09:12:04 +00:00
ralph
12728301d7 - Merge EDNS Client subnet implementation from feature branch into main branch, 
using new EDNS processing framework.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4074 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-03-21 12:08:17 +00:00
wouter
60a7029fcd - Fix to rename internally used types from _t to _type, because _t 
type names are reserved by POSIX.
- iana portlist update


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3989 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-01-19 10:25:41 +00:00
george
4812f02dd0 - Added generic EDNS code for registering known EDNS option codes, 
bypassing the cache response stage and uniquifying mesh states. Four EDNS
  option lists were added to module_qstate (module_qstate.edns_opts_*) to
  store EDNS options from/to front/back side.
- Added two flags to module_qstate (no_cache_lookup, no_cache_store) that
  control the modules' cache interactions.
- Added code for registering inplace callback functions. The registered
  functions can be called just before replying with local data or Chaos,
  replying from cache, replying with SERVFAIL, replying with a resolved
  query, sending a query to a nameserver. The functions can inspect the
  available data and maybe change response/query related data (i.e. append
  EDNS options).
- Updated Python module for the above.
- Updated Python documentation.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3947 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-12-06 13:42:51 +00:00
ralph
4097f78b84 pass ssl_upstream as int to (lib)worker_send_query 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3924 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-04 14:02:22 +00:00
ralph
3fb4900c0e - Added stub-ssl-upstream and forward-ssl-upstream options. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3923 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-04 12:07:52 +00:00
wouter
9504853b86 - and also generic edns options for upstream messages (and replies). 
after parse use edns_opt_find(edns.opt_list, LDNS_EDNS_NSID),
  to insert use edns_opt_append(edns, region, code, len, bindata) on
  the opt_list passed to send_query, or in edns_opt_inplace_reply.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3742 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-05-31 16:55:22 +00:00
wouter
0778829809 - Fix that CD flag disables DNS64 processing, returning the DNSSEC 
signed AAAA denial.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3273 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-18 15:15:57 +00:00
wouter
c9c7f29161 - Fix caps-for-id fallback, and added fallback attempt when servers 
drop 0x20 perturbed queries.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3146 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-06-24 08:24:28 +00:00
wouter
68b138cbd3 And fix #551 REGENT to COPYRIGHT HOLDER in license in file headings. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3079 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-07 13:28:39 +00:00
wouter
225b292ce7 - Fix for accept spinning reported by OpenBSD. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2663 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-05-08 12:08:55 +00:00
wouter
089b0e1649 fix export_all_symbols on osx. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2529 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-10-27 11:14:17 +00:00
wouter
8762da8720 infra cache consolidated and stores per zone, IP. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2525 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-10-26 15:46:23 +00:00
wouter
f7015af988 - fix --enable-allsymbols, fptr wlist is disabled on windows 
with this option enabled because of memory layout exe vs dll.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2521 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-10-21 12:33:46 +00:00
wouter
790c07b6d3 fix EXPORT_ALL_SYMBOLS. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2509 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-10-13 14:09:50 +00:00
wouter
911eba0f73 - openbsd-lint fixes: acl_list_get_mem used if debug-alloc enabled. 
iterator get_mem includes priv_get_mem.  delegpt nodup removed.
  listen_pushback, query_info_allocqname, write_socket, send_packet,
  comm_point_set_cb_arg and listen_resume removed.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2222 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-20 13:30:41 +00:00
wouter
963cb57146 - Fix EDNS probe for .de DNSSEC testbed failure, where the infra 
cache timeout coincided with a server update, the current EDNS 
  backoff is less sensitive, and does not cache the backoff unless 
  the backoff actually works and the domain is not expecting DNSSEC.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2063 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-06 08:35:37 +00:00
wouter
be64e9cc7e reopen and move of get_option to util. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1989 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-02-18 16:40:22 +00:00
wouter
e947c5b54f variable processing. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1795 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-31 15:58:38 +00:00
wouter
e666a96c36 mesh callbacks review, call error if deleted unfulfilled, check fptr wlist. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1652 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-06-12 07:53:36 +00:00
wouter
9d25fafcf4 - moved pipe actions to util/tube.c. easier porting and shared code. 
- check _raw() commpoint callbacks with fptr_wlist.
- iana port update.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1163 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-07-23 09:23:03 +00:00
wouter
e1209561f7 tube work for mingw port. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1159 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-07-18 15:06:59 +00:00
wouter
11c5d9d992 iana update. 
checklocks.c is not in the compile path for production code anymore.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1129 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-06-24 09:24:08 +00:00
wouter
38c018e539 - setup speec_cache for need-ldns-testns in dotests. 
- check number of queued replies on incoming queries to avoid overload
         on that account.
       - fptr whitelist checks are not disabled in optimize mode.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@971 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-02-20 07:18:42 +00:00
wouter
d186da5604 fptrwlist and remove oldhack with islocked param. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@805 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-12-04 21:34:53 +00:00
wouter
f748f45caa alloc id overflow handling. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@729 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-11-01 14:39:50 +00:00
wouter
4bcd6aac94 regional nicer, remove region-allocator. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@697 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-10-18 20:31:43 +00:00
wouter
d227190ff6 please gcc on BSD. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@662 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-10-05 12:57:24 +00:00
wouter
a4478ad648 function pointer whitelist for module operations. completing fptr work. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@661 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-10-05 12:42:25 +00:00
wouter
b5a046ad99 function pointer whitelists on data types. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@660 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-10-05 11:41:12 +00:00
wouter
317be8f466 fptr whitelist network code callbacks. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@659 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-10-05 08:05:06 +00:00
wouter
eb4d666bf5 security audit changes. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@657 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-10-04 15:10:11 +00:00