bind9/lib
Artem Boldariev 20d5a805e2
TLS: improve framing by assembling DNS message in one buffer
This commit improves TLS messages framing by avoiding an extra call to
SSL_write_ex(). Before that we would use an extra SSL_write_ex() call
to pass DNS message length to OpenSSL. That could create an extra TLS
frame, increasing number of bytes sent due to frame header and
padding.

This commit fixes that by making the code pass both DNS message length
and data at once, just like old TLS code did.

It should improve compatibility with some buggy clients that expect
both DNS message length and data to be in one TLS frame.

Older TLS DNS code worked like this, too.
2024-01-17 17:09:41 +02:00
..
dns Integrate TLS cipher suites support into BIND 2024-01-12 13:27:59 +02:00
isc TLS: improve framing by assembling DNS message in one buffer 2024-01-17 17:09:41 +02:00
isccc Defer control channel message invalidation 2024-01-10 15:48:25 +01:00
isccfg Add TLS cipher suites configuration option to BIND 2024-01-12 13:27:59 +02:00
ns Fix flawed logic when detecting same listener type 2024-01-12 17:59:53 +02:00
.gitignore The isc/platform.h header has been completely removed 2021-07-06 05:33:48 +00:00
Makefile.am Move irs_resconf into libdns and remove libirs 2023-02-24 09:38:59 +00:00