Petr Mensik
33c8baaaba
Forward indeterminate status higher
...
Create a path where it can result in insecure.
2022-04-08 16:26:50 +02:00
Petr Mensik
6cfcf21451
Make SHA-1 signed domains insecure if openssl refuses the digest
...
RHEL9/CentOS 9 would fail in default crypto policy. If call to openssl
returns invalid digest then report the name insecure. If all tested
signatures return the same issue, then make the reply insecure.
2022-04-08 16:26:50 +02:00
W.C.A. Wijngaards
730a03e9bd
- Fix zonemd unsupported algo check.
2022-04-08 09:36:01 +02:00
W.C.A. Wijngaards
e4ca71e85b
- Fix zonemd check to allow unsupported algorithms to load.
...
If there are only unsupported algorithms, or unsupported schemes,
and no failed or successful other ZONEMD records, or malformed
or bad ZONEMD records, the unsupported records allow the zone load.
2022-04-08 09:29:37 +02:00
W.C.A. Wijngaards
8f8a8a341a
- Fix spelling error in comment in sldns_str2wire_svcparam_key_lookup.
2022-03-25 16:07:23 +01:00
W.C.A. Wijngaards
722391baf1
- Fix #651 : [FR] Better logging for refused queries.
2022-03-23 13:56:52 +01:00
George Thessalonikefs
ee63ac8f9b
- Minor formatting.
2022-03-18 16:04:16 +02:00
George Thessalonikefs
1e23c4a376
Merge PR #648 from eaglegai: fix -q doesn't work when use with
...
'unbound-control stats_shm'
2022-03-18 16:03:35 +02:00
eaglegai
c60bed8eef
fix -q doesn't work when use with 'unbound-control stats_shm'
...
Signed-off-by: eaglegai <eaglegai@163.com>
2022-03-18 19:08:50 +08:00
W.C.A. Wijngaards
9484ddee2e
- Fix to describe auth-zone and other configuration at the local-zone
...
configuration option, to allow for more broadly view of the options.
2022-03-17 14:24:37 +01:00
W.C.A. Wijngaards
402135b41a
- Fix to ensure uniform handling of spaces and tabs when parsing RRs.
2022-03-16 09:54:53 +01:00
W.C.A. Wijngaards
b0dbfa37f9
Changelog note for #644 , move commands together for library binary.
2022-03-09 09:43:07 +01:00
Wouter Wijngaards
79f8fc1472
Merge pull request #644 from FGasper/issue_643_pkgconfig_install_lib
...
Make `install-lib` make target install the pkg-config file.
2022-03-09 09:41:54 +01:00
Felipe Gasper
516f4f9cf4
Make install-lib make target install the pkg-config file.
...
Issue #643
2022-03-08 14:01:09 -05:00
W.C.A. Wijngaards
62c5039ab9
- Fix configure for python to use sysutils, because distutils is
...
deprecated. It uses sysutils when available, distutils otherwise.
2022-03-07 14:02:31 +01:00
W.C.A. Wijngaards
b202b0874c
- Fix for #637 : fix integer overflow checks in sldns_str2period.
2022-03-03 16:24:46 +01:00
W.C.A. Wijngaards
debe5c665f
- Fix #637 : Integer Overflow in sldns_str2period function.
2022-03-03 14:19:59 +01:00
W.C.A. Wijngaards
f81420d77f
- Fix compile warnings for printf ll format on mingw compile.
2022-03-02 14:34:36 +01:00
George Thessalonikefs
b8e7dfa01e
- Various fixes for #632 : variable initialisation, convert the qinfo
...
to str once, accept trailing dot in the local-zone ipset option.
2022-03-02 14:29:56 +01:00
George Thessalonikefs
f7ca447368
Changelog entry for #632
...
- Merge PR #632 from scottrw93: Match cnames in ipset.
2022-03-02 13:22:17 +01:00
gthess
a6880644aa
Merge pull request #632 from scottrw93/cnames-ipset
...
Match cnames in ipset
2022-03-02 13:17:35 +01:00
George Thessalonikefs
0b8e6dafe5
- Added tests for ipset.
2022-03-02 13:08:16 +01:00
W.C.A. Wijngaards
99a3f5ee85
- Fix pythonmod for change in iter_dp_is_useless function prototype.
2022-03-01 10:27:24 +01:00
W.C.A. Wijngaards
7749d98a14
- Fix for edns client subnet option add fix in removal code, from review.
2022-02-28 14:51:35 +01:00
W.C.A. Wijngaards
8e8ccfe3c3
- Fix edns client subnet to add the option based on the option list,
...
so that it is not state dependent, after the state fix of #605 for
double EDNS options.
2022-02-28 14:39:48 +01:00
George Thessalonikefs
ad158ed5cc
Changelog entry for #623 :
...
- Merge #623 from rex4539: Fix typos.
2022-02-28 12:37:59 +01:00
gthess
6e79237dc8
Merge pull request #623 from rex4539/typos
...
Fix typos
2022-02-28 12:36:11 +01:00
George Thessalonikefs
82adcfb971
- Fix #630 : Unify the RPZ log messages.
2022-02-28 12:07:25 +01:00
W.C.A. Wijngaards
6e64356175
- Fix for #633 : updated fix with new text.
2022-02-28 09:56:30 +01:00
W.C.A. Wijngaards
e11cf2d964
- Fix #633 : Document unix domain socket support for unbound-control.
2022-02-28 09:39:33 +01:00
W.C.A. Wijngaards
c084c27b39
- Fix check interface existence for support detection in remote lookup.
2022-02-25 15:24:40 +01:00
W.C.A. Wijngaards
2c3225e6c7
- update Makefile dependencies.
2022-02-25 10:29:33 +01:00
W.C.A. Wijngaards
4b772ed571
- Fix to detect that no IPv6 support means that IPv6 addresses are
...
useless for delegation point lookups.
2022-02-25 10:27:56 +01:00
scottrw93
4f3df7ee86
Match cnames in ipset
2022-02-20 22:37:49 +00:00
Dimitris Apostolou
c7be51a11b
Fix typos
2022-02-18 15:51:03 +02:00
W.C.A. Wijngaards
c4d8104db3
Changelog note for #631 .
...
- Merge #631 from mollyim: Replace OpenSSL's ERR_PACK with
ERR_GET_REASON.
2022-02-18 09:37:44 +01:00
Wouter Wijngaards
fbbb42c9d4
Merge pull request #631 from mollyim/boringssl-compat
...
Replace OpenSSL's ERR_PACK with ERR_GET_REASON
2022-02-18 09:37:34 +01:00
W.C.A. Wijngaards
a746d9693a
- Fix that address not available is squelched from the logs for
...
udp connect failures. It is visible on verbosity 4 and more.
2022-02-18 09:03:56 +01:00
Oscar Mira
78aee89201
Replace OpenSSL's ERR_PACK with ERR_GET_REASON
2022-02-17 20:20:18 +01:00
W.C.A. Wijngaards
6de5310728
- Fix for #628 : fix rpz-passthru for qname trigger by localzone type.
2022-02-16 09:51:25 +01:00
W.C.A. Wijngaards
2b90181d3a
- Fix #628 : A rpz-passthru action is not ending RPZ zone processing.
2022-02-15 16:20:12 +01:00
W.C.A. Wijngaards
91a5cc9a08
- Remove debug info from #618 fix.
2022-02-11 16:34:24 +01:00
W.C.A. Wijngaards
a0feea393a
- Fix #618 : enabling interface-automatic disables DNS-over-TLS.
...
Adds the option to list interface-automatic-ports.
2022-02-11 10:58:53 +01:00
W.C.A. Wijngaards
4c6b59fa47
- Fix #624 : Unable to stop Unbound in Windows console (does not
...
respond to CTRL+C command).
2022-02-11 08:53:24 +01:00
W.C.A. Wijngaards
ed4ce7b398
Release 1.15.0 on 10 feb 2022.
...
The repository continues with version 1.15.1.
And Changelog note.
2022-02-10 09:54:51 +01:00
W.C.A. Wijngaards
58ac43c754
Note 1.15.0rc1 tag creation in Changelog.
...
- Tag for 1.15.0rc1 created.
2022-02-07 11:31:41 +01:00
W.C.A. Wijngaards
5f724da8c5
- Fix that TCP interface does not use TLS when TLS is also configured.
2022-02-07 09:31:10 +01:00
W.C.A. Wijngaards
c44fe07a07
- Fix #412 : cache invalidation issue with CNAME+A.
2022-02-04 14:27:01 +01:00
W.C.A. Wijngaards
c29b0e0a96
- Fix for #611 : Integer overflow in sldns_wire2str_pkt_scan.
2022-02-03 09:03:09 +01:00
W.C.A. Wijngaards
50a312b8da
- Update contrib/aaaa-filter-iterator.patch with diff for current
...
software version.
2022-02-02 15:35:19 +01:00