Commit Graph

  • cd302a1e8e update iana portlist. wouter 2013-02-07 13:30:17 +0000
  • dd39221bde - add libunbound.ttl at end of result structure, version bump for libunbound and binary backwards compatible, but 1.4.19 is not forward compatible with 1.4.20. - updated configure scripts with newer versions. wouter 2013-02-07 13:23:48 +0000
  • f475681731 - detect endianness in lookup3 on BSD. wouter 2013-02-07 08:18:33 +0000
  • 3c02230855 more header change for nss. wouter 2013-01-30 15:35:23 +0000
  • 2643272560 - includes and have_ssl fixes for nss. wouter 2013-01-30 13:15:03 +0000
  • 01aedc3205 fix potential uninit variables. wouter 2013-01-29 12:58:50 +0000
  • 9285d02d4a - printout name of zone with duplicate fwd and hint errors. wouter 2013-01-29 08:13:57 +0000
  • 0265146e12 fixup for doxygen 1.8.3 wouter 2013-01-28 13:44:38 +0000
  • 334d6fe583 lint clean. wouter 2013-01-28 13:32:14 +0000
  • 3e363e5236 - updated fwd_zero for newer nc. Updated common.sh for newer netstat. wouter 2013-01-28 13:30:46 +0000
  • 269aee148c update test for new requirements. wouter 2013-01-17 11:58:30 +0000
  • 98a8c1c53c - update iana port list. wouter 2013-01-17 11:23:07 +0000
  • a80476d462 - unbound-anchors checks the emailAddress of the signer of the root.xml file, default is dnssec@iana.org. It also checks that the signer has the correct key usage for a digital signature. wouter 2013-01-17 11:17:04 +0000
  • f4f1a28239 fix treatment of certificates without subject. wouter 2013-01-03 15:48:35 +0000
  • e3c901233a fixup test and test name check. wouter 2013-01-03 15:37:54 +0000
  • 614abedfbd - Check the commonName of the signer of the root.xml file in unbound-anchor, default is dnssec@iana.org. wouter 2013-01-03 14:38:38 +0000
  • afb056f487 - Test that unbound can handle a CNAME at an intermediate node in the chain of trust (where it seeks a DS record). wouter 2013-01-03 12:25:48 +0000
  • 6f200f25f0 - Test that unbound-control checks client credentials. wouter 2013-01-03 10:58:31 +0000
  • 1b929d1f1c Even neater openssl callback removal code from Robert Fleischman. wouter 2013-01-02 14:44:34 +0000
  • 2267b8b267 - Tested that unbound implements the RFC5155 Technical Errata id 3441. Unbound already implements insecure classification of an empty nonterminal in NSEC3 optout zone. wouter 2013-01-02 14:42:20 +0000
  • a506ed09ab iana portlist updated. wouter 2013-01-02 11:15:49 +0000
  • 7244053f53 - Fix openssl lock free on exit (reported by Robert Fleischman). wouter 2013-01-02 10:53:57 +0000
  • eaba5edb38 - Fix unbound-anchor xml parse of entity declarations for safety. wouter 2012-12-20 08:22:39 +0000
  • 9243d9855f iana portlist updated. wouter 2012-12-19 10:55:18 +0000
  • f28ae598a5 iana portlist updated. wouter 2012-12-18 15:26:25 +0000
  • f1a5d98065 - Change of D.ROOT-SERVERS.NET A address in default root hints. wouter 2012-12-14 08:08:59 +0000
  • f4015ff912 - trunk has 1.4.20 under development. wouter 2012-12-12 09:17:08 +0000
  • 7331f55fd1 1.4.19 (svn:NO TEST) wouter 2012-12-12 08:43:16 +0000
  • 6eba5edc84 We turn out to support RFC 1123, 6.1 Requirements for DNS of internet hosts. wouter 2012-12-06 10:07:51 +0000
  • d2e35c5a50 - note support for AAAA RR type RFC. wouter 2012-12-06 10:02:02 +0000
  • 91cda02980 changelog (svn:NO TEST) wouter 2012-12-04 11:52:14 +0000
  • 41fbed4977 Typo inside a whitespace yuri 2012-12-04 10:18:00 +0000
  • f9aea48aa7 review, found nothing, except for layout and typo matje 2012-12-03 14:28:06 +0000
  • 08a311ddd2 - iana portlist updated. wouter 2012-11-30 09:50:29 +0000
  • 016de304a8 - bug 481: fix python example0. wouter 2012-11-30 09:41:38 +0000
  • b96896deb0 iana portlist updated. wouter 2012-11-27 16:01:47 +0000
  • 87c60e499f - Fix unbound-control forward disables configured stubs below it. wouter 2012-11-09 15:35:18 +0000
  • 36a9c0af61 - iana portlist updated. wouter 2012-11-07 08:57:51 +0000
  • 666d355d7b - Fixup ldns-testpkts, identical to ldns/examples. wouter 2012-11-07 08:49:53 +0000
  • ba27940c44 - Fix bug #477: unbound-anchor segfaults if EDNS is blocked. wouter 2012-10-30 15:13:53 +0000
  • aae7a518bf Fix validation for responses with CNAME and wildcard expanded CNAME in ANSWER section. matje 2012-10-29 14:06:00 +0000
  • 206f968f10 - make clean and makerealclean remove generated python and docs. wouter 2012-10-08 12:31:16 +0000
  • 9508df7769 - fix build of pythonmod in objdir, for unbound.py. wouter 2012-10-08 12:07:51 +0000
  • 341bfc3adc - update ldns-testpkts.c to ldns 1.6.14 version. wouter 2012-10-08 10:24:50 +0000
  • e1c697fe2d - fix build of pythonmod in objdir (thanks Jakob Schlyter). wouter 2012-10-05 07:06:11 +0000
  • e68ce6d9be - fix text in unbound-anchor man page. wouter 2012-10-03 14:43:46 +0000
  • 97cc148487 - ignore trusted-keys globs that have no files (from Paul Wouters). wouter 2012-10-01 07:18:49 +0000
  • 05844e9c5c nicer documentation. wouter 2012-09-27 13:12:00 +0000
  • 6a9b0764e4 - updated contrib/unbound.spec, patch from Valentin Bud. wouter 2012-09-27 09:37:04 +0000
  • f10b82ac45 - iana portlist updated. wouter 2012-09-27 09:34:24 +0000
  • 320df09e27 unbound-control -q option is quiet, patch from Mariano Absatz. wouter 2012-09-27 09:32:35 +0000
  • 5f7b92dd7a - include: directive in config file accepts wildcards. Patch from Paul Wouters. Suggested use: include: "/etc/unbound.d/conf.d/*" wouter 2012-09-27 08:52:37 +0000
  • c3c53b07e3 - chdir to / after chroot call (suggested by Camiel Dobbelaar). wouter 2012-09-21 07:13:51 +0000
  • 8964aebbfb - patch_rsamd5_enable.diff: this patch enables RSAMD5 validation otherwise it is treated as insecure. The RSAMD5 algorithm is deprecated (RFC6725). The MD5 hash is considered weak for some purposes, if you want to sign your zone, then RSASHA256 is an uncontested hash. wouter 2012-09-17 13:15:12 +0000
  • 1d6cf41a6f - iana portlist updated. wouter 2012-08-30 12:12:58 +0000
  • ac7d3cdbde - RFC6725 deprecates RSAMD5: this DNSKEY algorithm is disabled. wouter 2012-08-30 12:02:53 +0000
  • 981720aa4c - Nicer comments outgoing-port-avoid, thanks Stu (bug #465). wouter 2012-08-29 07:13:36 +0000
  • 9041781fc0 Unix socket contribution yuri 2012-08-28 12:24:57 +0000
  • 62c729d59e - Fallback to 1472 and 1232, one fragment size without headers. wouter 2012-08-22 08:46:30 +0000
  • 8f83f70712 - Fix timeouts so that when a server has been offline for a while and is probed to see it works, it becomes fully available for server selection again. wouter 2012-08-21 07:17:48 +0000
  • e873bbbbe9 - Add documentation to libunbound for default nonuse of resolv.conf. wouter 2012-08-17 07:06:18 +0000
  • 4e802d7992 iana portlist updated. wouter 2012-08-02 08:08:27 +0000
  • b4208b16f9 - trunk has 1.4.19 under development (fixes from 1 aug and 31 july are for 1.4.19). wouter 2012-08-02 07:57:33 +0000
  • 77000db6bc note release date. wouter 2012-08-02 07:46:59 +0000
  • 677fa01bdc compile without warnings unthreaded. wouter 2012-08-01 14:07:04 +0000
  • 9614d02fb9 make depend. wouter 2012-08-01 13:19:33 +0000
  • ac3c2e2310 remove warnings on Solaris. wouter 2012-08-01 13:18:19 +0000
  • a134a7edc7 ifdef for NSS compile. wouter 2012-08-01 13:08:58 +0000
  • efebff52f7 - Fix openssl race condition, initializes openssl locks, reported by Einar Lonn and Patrik Wallstrom. wouter 2012-08-01 11:31:29 +0000
  • 162a1a29bb - added manpage links for libunbound calls (Thanks Paul Wouters). wouter 2012-07-31 13:43:08 +0000
  • 800da7f0fd - Fix forward-first option where it sets the RD flag wrongly. wouter 2012-07-31 12:53:53 +0000
  • a77e89f1d0 - Fix that enables modules to register twice for the same serviced_query, without race conditions or administration issues. This should not happen with the current codebase, but it is robust. wouter 2012-07-31 11:33:06 +0000
  • 543b5636de - Improved forward-first and stub-first documentation. wouter 2012-07-31 08:08:43 +0000
  • a994a690c8 tag 1.4.18rc2 wouter 2012-07-30 08:07:06 +0000
  • 1caf700c2e - fix bogus nodata cname chain not reported as bogus by validator, (Thanks Peter van Dijk). wouter 2012-07-27 13:38:00 +0000
  • 62e5b45ab5 fix so that make unbound-host works when compiled with libnss. wouter 2012-07-27 13:17:14 +0000
  • df02b64294 1.4.18rc1 tag. wouter 2012-07-26 09:20:06 +0000
  • 7aaba2e725 - iana portlist updated. wouter 2012-07-26 09:10:36 +0000
  • 7f7f11f49e - review fix for libnss, check hash prefix allocation size. wouter 2012-07-25 14:32:37 +0000
  • f29947421f - implemented forward_first for the root. wouter 2012-07-23 13:42:07 +0000
  • 724697a418 - fix missing break for GOST DS hash function. - make depend wouter 2012-07-23 12:27:04 +0000
  • b81ee386d2 make depend. wouter 2012-07-20 14:10:04 +0000
  • a2ff93b150 fixup warning. wouter 2012-07-20 14:08:51 +0000
  • 4a9e53af6f - Fix bug#452 and another assertion failure in mesh.c, makes assertions in mesh.c resist duplicates. Fixes DS NS search to not generate duplicate sub queries. wouter 2012-07-20 13:08:19 +0000
  • 792a5b9f37 - Fix bug#454: Remove ACX_CHECK_COMPILER_FLAG from configure.ac, if CFLAGS is specified at configure time then '-g -O2' is not appended to CFLAGS, so that the user can override them. wouter 2012-07-19 08:51:35 +0000
  • 4c31c87d01 - Fix libunbound report of errors when in background mode. wouter 2012-07-18 09:43:50 +0000
  • ff883c375f - updated iana ports list. wouter 2012-07-11 09:31:39 +0000
  • d07b0c7c3b flush_bogus option for unbound-control willem 2012-07-09 14:33:07 +0000
  • 109c3e384b - Fix validation of qtype DS queries that result in no data for non-optout NSEC3 zones. wouter 2012-07-06 13:56:44 +0000
  • a3b7ea3d3b fix compile with --enable-alloc-lite wouter 2012-07-04 15:49:48 +0000
  • eba23b8235 - compile libunbound with libnss on Suse, passes regression tests. wouter 2012-07-04 12:33:32 +0000
  • 9aba3e1991 - FIPS_mode openssl does not use arc4random but RAND_pseudo_bytes. wouter 2012-07-03 09:32:16 +0000
  • 51d0b0edf7 - updated iana ports list. wouter 2012-07-02 12:20:50 +0000
  • 4e1683e116 - patch for unbound_munin_ script to handle arbitrary thread count by Sven Ulland. wouter 2012-06-29 08:58:18 +0000
  • 7b4a84fda9 updated iana ports list. wouter 2012-06-28 14:29:38 +0000
  • 900734a71b - fix edns-buffer-size and msg-buffer-size manpage documentation. wouter 2012-06-28 14:25:10 +0000
  • 2a46be9b00 - code review: return value of cache_store can be ignored for better performance in out of memory conditions. wouter 2012-06-28 14:18:41 +0000
  • 182250237f - detect if openssl has FIPS_mode. wouter 2012-06-28 06:54:16 +0000
  • 8cb9d852c0 - disable RSAMD5 if in FIPS mode (for openssl and for libnss). wouter 2012-06-25 15:13:44 +0000
  • 4d012867f2 - disable RSAMD5 if in FIPS mode (when compiled with openssl). wouter 2012-06-25 15:02:52 +0000