Commit Graph

56 Commits

Author SHA1 Message Date
wouter
8fa54ec661 - Add routine from getdns to add windows cert store to the SSL_CTX.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4697 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-05-28 13:22:10 +00:00
wouter
bb358ef952 - Fix fail to reject dead peers in forward-zone, with ssl-upstream.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4670 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-05-02 06:36:02 +00:00
wouter
50220ed991 - Can set tls authentication with forward-addr: IP#tls.auth.name
And put the public cert bundle in tls-cert-bundle: "ca-bundle.pem".


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4631 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-04-19 12:10:05 +00:00
wouter
c983bccafe - Fix auth zone target lookup iterator.
- notify with prefix


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4624 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-04-16 13:14:24 +00:00
wouter
1e7120e420 auth zone work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4512 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-06 09:32:41 +00:00
wouter
ad5295b585 - enhancement for hardened-tls for DNS over TLS. Removed duplicated
security settings.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4255 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-29 11:45:43 +00:00
wouter
7de5b0ec61 - Fix #545: improved logging, the ip address of the error is printed
on the same log-line as the error.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3112 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-04-10 14:40:20 +00:00
wouter
68b138cbd3 And fix #551 REGENT to COPYRIGHT HOLDER in license in file headings.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3079 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-02-07 13:28:39 +00:00
wouter
efebff52f7 - Fix openssl race condition, initializes openssl locks, reported
by Einar Lonn and Patrik Wallstrom.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2733 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-08-01 11:31:29 +00:00
wouter
ae03c65057 - Applied patch from Daisuke HIGASHI for rrset-roundrobin and
minimal-responses features.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2658 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-04-10 09:16:39 +00:00
wouter
1f9e9b78fe - dns over ssl support, ssl-service-pem and ssl-service-key files
can be given and then TCP queries are serviced wrapped in SSL.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2530 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-10-31 14:48:48 +00:00
wouter
aaefd15a0d addr_is_any
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2279 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-10-13 07:59:55 +00:00
wouter
911eba0f73 - openbsd-lint fixes: acl_list_get_mem used if debug-alloc enabled.
iterator get_mem includes priv_get_mem.  delegpt nodup removed.
  listen_pushback, query_info_allocqname, write_socket, send_packet,
  comm_point_set_cb_arg and listen_resume removed.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2222 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-08-20 13:30:41 +00:00
wouter
6f7205f522 add and fix doxygen comments for doxygen-1.7.1. (which reports lots of
spurious items as well, by the way).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2211 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-08-13 08:41:49 +00:00
wouter
8d375f0e28 - Squelch log message: sendto failed permission denied for
255.255.255.255, it is visible in VERB_DETAIL (verbosity 2).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2088 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-04-23 06:48:49 +00:00
wouter
71124621dc edns-buffer-size option.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1881 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-10-29 10:37:44 +00:00
wouter
404b2e7a85 Retry mode, DS and prime.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1860 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-10-07 07:52:02 +00:00
wouter
4ba1003f2c Data retry on validation failure.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1859 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-10-06 08:31:47 +00:00
wouter
e50bcb5bb3 suppress ipv4mapped errors from logs.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1570 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-04-01 10:01:43 +00:00
wouter
827f9bfef1 forward command for unbound-control.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1482 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-02-13 15:26:37 +00:00
wouter
6791fa38ec extended statistics.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1239 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-09-16 14:08:38 +00:00
wouter
ec5253b25a - mingw32 porting.
- test for sys/wait.h
          - WSAEWOULDBLOCK test after nonblocking TCP connect.
          - write_iov_buffer removed: unused and no struct iov on windows.
          - signed/unsigned warning fixup mini_event.
          - use ioctlsocket to set nonblocking I/O if fnctl is unavailable.
          - skip signals that are not defined
          - detect pwd.h.
          - detect getpwnam, getrlimit, setsid, sbrk, chroot.
          - default config has no chroot if chroot() unavailable.
          - if no kill() then no pidfile is read or written.
          - gmtime_r is replaced by nonthreadsafe alternative if unavail.
            used in rrsig time validation errors.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1097 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-05-23 14:13:07 +00:00
wouter
d64c4d8e4c logging nicer, removal of reply_iov.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@911 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-01-30 14:46:01 +00:00
wouter
f4ca0398b1 test for ancillary data and fixes for lint and doxygen.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@848 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-01-15 10:10:22 +00:00
wouter
4b1dc70de7 access-control
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@769 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-11-19 15:32:55 +00:00
wouter
b070c0b1f5 acl list setup. 8 to tab in net_help.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@753 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-11-16 16:25:37 +00:00
wouter
8f403c2842 Fixup tests.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@711 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-22 06:25:46 +00:00
wouter
eeaf9dbc97 errors have addresses with them.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@692 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-18 09:04:55 +00:00
wouter
8b95e7f068 assertions, zero termination for gethostname, log_hex without malloc.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@679 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-16 12:26:09 +00:00
wouter
8d21fe77ca fixup addr6 check.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@677 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-15 14:42:37 +00:00
wouter
4353a39c1b cname nxdomain fixup.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@576 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-03 09:13:27 +00:00
wouter
4ee83871c3 Returns and caches validated replies.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@536 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-21 13:12:10 +00:00
wouter
3cdba8352f verify unit test.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@522 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-15 13:18:32 +00:00
wouter
24c0426379 rrsig checks.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@502 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-09 09:58:04 +00:00
wouter
e7df442fe7 todo, plan.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@466 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-07-31 08:11:48 +00:00
wouter
00c08bc573 Do not query addresses and configuration.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@434 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-07-18 08:14:44 +00:00
wouter
904609c3de please doxygen
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@433 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-07-17 15:30:39 +00:00
wouter
418bac1638 Remove old forwarder mode, new @port option and tests ported over.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@432 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-07-17 15:26:45 +00:00
wouter
777fb87aa5 Tested serval targets, with CNAME's and indirection for recursion and
slumber list.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@374 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-06-07 13:21:04 +00:00
wouter
ce582a4765 query targets state.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@352 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-05-31 12:51:36 +00:00
wouter
7defbafe09 iterator work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@348 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-05-30 11:18:17 +00:00
wouter
650ac20298 partial busy
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@346 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-05-29 14:02:17 +00:00
wouter
af1c787ab9 iterator and dns cache work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@342 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-05-25 15:28:20 +00:00
wouter
56f5c84d57 - Acknowledge use of unbound-java code in iterator. Nicer readme.
- services/cache/dns.c DNS Cache. Hybrid cache uses msgcache and
         rrset cache from module environment.
       - packed rrset key has type and class as easily accessable struct
         members. They are still kept in network format for fast msg encode.
       - dns cache find_delegation routine.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@339 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-05-25 12:02:37 +00:00
wouter
e8b2e8ded2 root hints.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@335 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-05-23 14:05:36 +00:00
wouter
00352efb72 setup of state; delegation point setup.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@334 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-05-23 09:34:01 +00:00
wouter
c6b4fbb41c Serviced queries in outside network service get full EDNS, UDP retry and
TCP fallback attention.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@326 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-05-21 15:10:55 +00:00
wouter
768424d16b Moved log_addr.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@320 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-05-15 12:18:28 +00:00
wouter
bedc1c8df3 Host cache code.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@319 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-05-15 10:53:27 +00:00
wouter
401583e12b iterator module.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@311 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-05-11 14:16:42 +00:00