Commit Graph

4530 Commits

Author SHA1 Message Date
wouter
327d22ff3e - Fix nettle compile.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4555 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-27 13:03:54 +00:00
wouter
7cb6d24fad - Fix compile with staticexe and python module.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4554 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-27 10:53:49 +00:00
wouter
340efc3a79 - Fix compile without threads, and remove unused variable.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4553 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-27 10:36:12 +00:00
wouter
325fc0651c - Fixup contrib/fastrpz.patch so that it applies.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4552 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-27 10:18:28 +00:00
ralph
e3ee8c66e2 - use existing code to find signer on positive wildcard answers
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4551 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-22 15:32:18 +00:00
ralph
3377e6f8ee - Save wildcard RRset from answer with original owner for use in aggressive
NSEC.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4550 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-22 15:12:31 +00:00
wouter
3c305c6934 - more robust cachedump rrset routine.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4549 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-21 15:25:19 +00:00
wouter
6270fb6d50 fix spelling error
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4548 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-21 14:07:12 +00:00
wouter
ffa1194628 - Fix validation for CNAME loops. When it detects a cname loop,
by finding the cname, cname in the existing list, it returns
  the partial result with the validation result up to then.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4547 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-21 14:04:02 +00:00
wouter
a68512c00f neater code.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4546 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-21 13:19:49 +00:00
wouter
8c37d1058a comment to explain it.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4545 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-21 13:17:27 +00:00
wouter
eb1adcf378 - Fix #3512: unbound incorrectly reports SERVFAIL for CAA query
when there is a CNAME loop.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4544 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-21 13:13:58 +00:00
wouter
2c129d2a5c fix noview.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4543 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-19 13:30:38 +00:00
wouter
67f76f85dc - Fix for more maintainable code in localzone.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4542 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-19 13:21:57 +00:00
wouter
5a0f6206c8 bug ref nr.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4541 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-19 12:14:43 +00:00
wouter
80ab137e03 - local-zone noview can be used to break out of the view to the
global local zone contents, for queries for that zone.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4540 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-19 12:13:23 +00:00
wouter
aaf91e2491 - Fix #3505: Documentation for default local zones references
wrong RFC.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4539 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-19 08:43:23 +00:00
wouter
1a9d913ee5 - Fixes for clang static analyzer, the missing ; in
edns-subnet/addrtree.c after the assert made clang analyzer
  produce a failure to analyze it.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4538 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-16 10:31:48 +00:00
ralph
c217a69c57 - Aggressive NSEC tests
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4537 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-13 14:40:29 +00:00
wouter
fcd9b8c448 auth zone: default is https if no 'http://' given.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4536 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-13 14:28:51 +00:00
wouter
b52ca6417e auth zone whitespace fixes and input validation.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4535 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-13 14:26:20 +00:00
wouter
2b221f3140 auth zone review fixes
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4534 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-13 14:09:57 +00:00
wouter
4ddbf8aed9 - iana port update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4533 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-13 10:35:31 +00:00
wouter
4d4669b2cc - tls-cert-bundle option in unbound.conf enables TLS authentication.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4532 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-13 10:35:09 +00:00
wouter
0e2c3c5adf - Unit test for auth zone https url download.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4531 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-12 15:40:05 +00:00
ralph
6408197b21 - Fix the ce_len+2 fix (Aggressive NSEC review)
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4530 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-12 12:22:29 +00:00
ralph
42255fcad3 - Processed aggressive NSEC code review remarks Wouter
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4529 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-12 12:14:01 +00:00
ralph
2d5fc74a3e - Added tests with wildcard expanded NSEC records (CVE-2017-15105 test)
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4528 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-12 11:39:03 +00:00
wouter
2076e1e2f8 auth zone work, nicer debug output.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4527 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-09 08:23:20 +00:00
wouter
647c958d76 auth zone stop sending packets when the application quits.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4526 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-09 08:14:06 +00:00
wouter
f928cde035 - auth zone url config.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4525 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-08 16:11:27 +00:00
wouter
b8a397affc auth zone http work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4524 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-08 15:14:51 +00:00
wouter
7c5497d3b4 auth zone work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4523 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-08 14:37:36 +00:00
ralph
35bc8a1ecc - Aggressive use of NSEC implementation. Use cached NSEC records to generate
NXDOMAIN, NODATA and positive wildcard answers.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4522 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-08 13:16:36 +00:00
wouter
2de81e0fef auth zone work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4521 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-08 11:59:30 +00:00
wouter
7a30b4aaf2 auth zone review.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4520 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-08 10:43:58 +00:00
wouter
6342b7928f - iana port update.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4519 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-08 10:14:34 +00:00
wouter
42818256c3 fix for doxygen and lint.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4518 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-08 10:00:10 +00:00
wouter
40286955e2 auth zone work on http feature.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4517 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-07 16:10:31 +00:00
wouter
1cb6bd9051 fix for doxygen
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4516 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-06 16:00:10 +00:00
wouter
e48156c64c auth zone work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4515 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-06 15:54:49 +00:00
wouter
5caf1aee13 fix lint warning
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4514 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-06 11:17:29 +00:00
wouter
081cdce096 fix lint warning
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4513 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-06 11:16:23 +00:00
wouter
1e7120e420 auth zone work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4512 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-06 09:32:41 +00:00
wouter
19c3997e15 Fixup tests for checklocks. Add auth axfr test for socket code.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4511 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-05 15:33:32 +00:00
wouter
db621d92d7 - auth-zone provides a way to configure RFC7706 from unbound.conf,
eg. with auth-zone: name: "." for-downstream: no for-upstream: yes
  fallback-enabled: yes and masters or a zonefile with data.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4510 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-05 14:21:46 +00:00
wouter
c172f0dfe1 make depend.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4509 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-05 12:18:44 +00:00
wouter
e7a76a8a64 - Fix #3451: dnstap not building when you have a separate build dir.
And removed protoc warning, set dnstap.proto syntax to proto2.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4508 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-05 12:14:51 +00:00
wouter
98bf7184b6 auth zone fixup lock protection, it wrongly covered the rbtree node.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4507 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-05 10:57:15 +00:00
wouter
8c4be29561 auth zone test probe of SOA
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4506 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-05 09:59:53 +00:00