c0f78ead16explain how to read the certificate.
wouter
2018-04-20 13:45:59 +0000
b8a328a4c6- man page documentation for dns-over-tls forward-addr '#' notation.
wouter
2018-04-20 11:50:41 +0000
1586971688- For addr with #authname and no @port notation, the default is 853.
wouter
2018-04-19 14:23:14 +0000
8af2d107ceNote bugfix and RFC support. - Fix#658: unbound using TLS in a forwarding configuration does not verify the server's certificate (RFC 8310 support).
wouter
2018-04-19 12:45:27 +0000
50220ed991- Can set tls authentication with forward-addr: IP#tls.auth.name And put the public cert bundle in tls-cert-bundle: "ca-bundle.pem".
wouter
2018-04-19 12:10:05 +0000
3254314eb5- Fix auth-zone retry timer to be on schedule with retry timeout, with backoff. Also time a refresh at the zone expiry.
wouter
2018-04-18 06:43:02 +0000
dcae8decf0- unit test for allow-notify
wouter
2018-04-17 14:58:43 +0000
329a8e105e- allow-notify: config statement for auth-zones.
wouter
2018-04-17 13:23:35 +0000
625acbaaec- auth zone notify work.
wouter
2018-04-17 12:18:34 +0000
9f36d666b2- auth zone notify work.
wouter
2018-04-16 15:10:30 +0000
705a0dfed8- auth zone notify work.
wouter
2018-04-16 14:24:57 +0000
c983bccafe- Fix auth zone target lookup iterator. - notify with prefix
wouter
2018-04-16 13:14:24 +0000
261197b7e8- Fix memory free on fail for $INCLUDE in authzone. - Fix that an internal error to look up the wrong rr type for auth zone gets stopped, before trying to send there. - auth zone notify work.
wouter
2018-04-13 13:04:26 +0000
524a1465fd- Fix for max include depth for authzones.
wouter
2018-04-13 06:25:30 +0000
4d362a2803- documentation for low-rtt and low-rtt-pct.
wouter
2018-04-10 07:34:26 +0000
e0854f3847get_option and set_option for low-rtt and low-rtt-pct.
wouter
2018-04-09 13:39:29 +0000
a6494a30da- low-rtt and low-rtt-pct in unbound.conf enable the server selection of fast servers for some percentage of the time.
wouter
2018-04-09 13:27:28 +0000
0e69ab1789- Accept both option names with and without colon for get_option and set_option.
wouter
2018-04-09 10:42:48 +0000
32d7d269e4- num.query.authzone.up and num.query.authzone.down statistics counters. - Fix downstream auth zone, only fallback when auth zone fails to answer and fallback is enabled.
wouter
2018-04-09 10:15:06 +0000
5718d70ee1- Fix that flush_zone sets prefetch ttl expired, so that with serve-expired enabled it'll start prefetching those entries.
wouter
2018-04-09 07:39:59 +0000
196b6c65a5Removed unused files (from an editor?).
wouter
2018-04-06 06:16:03 +0000
7584b945fc- Fix unbound-control over pipe with openssl 1.1.1, the TLSv1.3 tls_choose_sigalg routine does not allow the ciphers for the pipe, so use TLSv1.2.
wouter
2018-04-05 13:43:05 +0000
7d87afac47- Combine write of tcp length and tcp query for dns over tls.
wouter
2018-04-05 08:10:25 +0000
1692bfd8c2- Fix unable to resolve after new WLAN connection, due to auth-zone failing with a forwarder set. Now, auth-zone is only used for answers (not referrals) when a forwarder is set.
wouter
2018-04-03 12:22:35 +0000
b54babc7b6- Fix#4043: make test fails due to v6 presentation issue in macOS.
wouter
2018-04-03 07:47:02 +0000
f1cf9f9824- Check "result" in dup_all(), by Florian Obser.
ralph
2018-03-29 08:02:26 +0000
8d778e3a8d- Fix unbound-control get_option aggressive-nsec
ralph
2018-03-23 12:23:02 +0000
747b0fe252doc and flex and yacc.
wouter
2018-03-15 14:23:51 +0000
c549551a6c- Create additional tls service interfaces by opening them on other portnumbers and listing the portnumbers as additional-tls-port: nr.
wouter
2018-03-15 14:19:02 +0000
0700c011c6- Fix#3817: core dump happens in libunbound delete, when queued servfail hits deleted message queue.
wouter
2018-03-15 13:32:19 +0000
96979a9d6c- Add --with-libhiredis, unbound support for a new cached backend that uses a Redis server as the storage. This implementation depends on the hiredis client library (https://redislabs.com/lp/hiredis/). And unbound should be built with both --enable-cachedb and --with-libhiredis[=PATH] (where $PATH/include/hiredis/hiredis.h should exist). Patch from Jinmei Tatuya (Infoblox).
wouter
2018-03-15 12:33:51 +0000
0a3417c0a21.7.1 in development
wouter
2018-03-15 10:19:14 +0000
7babf441eeTest and fix.
wouter
2018-03-13 13:14:56 +0000
e39ce268e3- Fix#3736: Fix 0 TTL domains stuck on SERVFAIL unless manually flushed with serve-expired on.
wouter
2018-03-13 12:52:11 +0000
12e74d064f- note when tag 1.7.0rc1 happened in the changelog.
wouter
2018-03-07 08:57:33 +0000
da69a014d2- Attempt to remove warning about trailing whitespace.
wouter
2018-03-07 08:52:49 +0000
2b00a5d314- Attempt to remove warning about trailing whitespace.
wouter
2018-03-07 08:52:18 +0000
1c8938d3a2- patch suggested by Debian lintian: allow to -> allow one to, from A. Schulze.
wouter
2018-03-07 08:40:09 +0000
06453716e5- patch to log creates keytag queries, from A. Schulze.
wouter
2018-03-07 08:39:10 +0000
d1ce267c04- Fixed contrib/fastrpz.patch, even though this already applied cleanly for me, now also for others.
wouter
2018-03-07 08:32:14 +0000
ed4f6f2c2f- Fix for windows compile.
wouter
2018-03-06 09:18:53 +0000
cf7ae9cac6- svn trunk contains 1.7.0, this is the number for the next release.
wouter
2018-03-06 09:07:22 +0000
692f648a6e- Reverted fix for #3512, this may not be the best way forward; although it could be changed at a later time, to stay similar to other implementations.
wouter
2018-03-06 08:22:33 +0000
0a65f973e9- Fix#3582: Squelch address already in use log when reuseaddr option causes same port to be used twice for tcp connections.
wouter
2018-03-05 15:45:34 +0000
ebe1d77ccd- iana port update.
wouter
2018-03-05 14:38:30 +0000