dd39221bde- add libunbound.ttl at end of result structure, version bump for libunbound and binary backwards compatible, but 1.4.19 is not forward compatible with 1.4.20. - updated configure scripts with newer versions.
wouter
2013-02-07 13:23:48 +0000
f475681731- detect endianness in lookup3 on BSD.
wouter
2013-02-07 08:18:33 +0000
3c02230855more header change for nss.
wouter
2013-01-30 15:35:23 +0000
2643272560- includes and have_ssl fixes for nss.
wouter
2013-01-30 13:15:03 +0000
3e363e5236- updated fwd_zero for newer nc. Updated common.sh for newer netstat.
wouter
2013-01-28 13:30:46 +0000
269aee148cupdate test for new requirements.
wouter
2013-01-17 11:58:30 +0000
98a8c1c53c- update iana port list.
wouter
2013-01-17 11:23:07 +0000
a80476d462- unbound-anchors checks the emailAddress of the signer of the root.xml file, default is dnssec@iana.org. It also checks that the signer has the correct key usage for a digital signature.
wouter
2013-01-17 11:17:04 +0000
f4f1a28239fix treatment of certificates without subject.
wouter
2013-01-03 15:48:35 +0000
e3c901233afixup test and test name check.
wouter
2013-01-03 15:37:54 +0000
614abedfbd- Check the commonName of the signer of the root.xml file in unbound-anchor, default is dnssec@iana.org.
wouter
2013-01-03 14:38:38 +0000
afb056f487- Test that unbound can handle a CNAME at an intermediate node in the chain of trust (where it seeks a DS record).
wouter
2013-01-03 12:25:48 +0000
6f200f25f0- Test that unbound-control checks client credentials.
wouter
2013-01-03 10:58:31 +0000
1b929d1f1cEven neater openssl callback removal code from Robert Fleischman.
wouter
2013-01-02 14:44:34 +0000
2267b8b267- Tested that unbound implements the RFC5155 Technical Errata id 3441. Unbound already implements insecure classification of an empty nonterminal in NSEC3 optout zone.
wouter
2013-01-02 14:42:20 +0000
320df09e27unbound-control -q option is quiet, patch from Mariano Absatz.
wouter
2012-09-27 09:32:35 +0000
5f7b92dd7a- include: directive in config file accepts wildcards. Patch from Paul Wouters. Suggested use: include: "/etc/unbound.d/conf.d/*"
wouter
2012-09-27 08:52:37 +0000
c3c53b07e3- chdir to / after chroot call (suggested by Camiel Dobbelaar).
wouter
2012-09-21 07:13:51 +0000
8964aebbfb- patch_rsamd5_enable.diff: this patch enables RSAMD5 validation otherwise it is treated as insecure. The RSAMD5 algorithm is deprecated (RFC6725). The MD5 hash is considered weak for some purposes, if you want to sign your zone, then RSASHA256 is an uncontested hash.
wouter
2012-09-17 13:15:12 +0000
62c729d59e- Fallback to 1472 and 1232, one fragment size without headers.
wouter
2012-08-22 08:46:30 +0000
8f83f70712- Fix timeouts so that when a server has been offline for a while and is probed to see it works, it becomes fully available for server selection again.
wouter
2012-08-21 07:17:48 +0000
e873bbbbe9- Add documentation to libunbound for default nonuse of resolv.conf.
wouter
2012-08-17 07:06:18 +0000
ac3c2e2310remove warnings on Solaris.
wouter
2012-08-01 13:18:19 +0000
a134a7edc7ifdef for NSS compile.
wouter
2012-08-01 13:08:58 +0000
efebff52f7- Fix openssl race condition, initializes openssl locks, reported by Einar Lonn and Patrik Wallstrom.
wouter
2012-08-01 11:31:29 +0000
162a1a29bb- added manpage links for libunbound calls (Thanks Paul Wouters).
wouter
2012-07-31 13:43:08 +0000
800da7f0fd- Fix forward-first option where it sets the RD flag wrongly.
wouter
2012-07-31 12:53:53 +0000
a77e89f1d0- Fix that enables modules to register twice for the same serviced_query, without race conditions or administration issues. This should not happen with the current codebase, but it is robust.
wouter
2012-07-31 11:33:06 +0000
543b5636de- Improved forward-first and stub-first documentation.
wouter
2012-07-31 08:08:43 +0000
4a9e53af6f- Fix bug#452 and another assertion failure in mesh.c, makes assertions in mesh.c resist duplicates. Fixes DS NS search to not generate duplicate sub queries.
wouter
2012-07-20 13:08:19 +0000
792a5b9f37- Fix bug#454: Remove ACX_CHECK_COMPILER_FLAG from configure.ac, if CFLAGS is specified at configure time then '-g -O2' is not appended to CFLAGS, so that the user can override them.
wouter
2012-07-19 08:51:35 +0000
4c31c87d01- Fix libunbound report of errors when in background mode.
wouter
2012-07-18 09:43:50 +0000
2a46be9b00- code review: return value of cache_store can be ignored for better performance in out of memory conditions.
wouter
2012-06-28 14:18:41 +0000
182250237f- detect if openssl has FIPS_mode.
wouter
2012-06-28 06:54:16 +0000
8cb9d852c0- disable RSAMD5 if in FIPS mode (for openssl and for libnss).
wouter
2012-06-25 15:13:44 +0000
4d012867f2- disable RSAMD5 if in FIPS mode (when compiled with openssl).
wouter
2012-06-25 15:02:52 +0000