upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2026-02-01 19:29:27 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
6724 commits 25 branches 209 tags 133 MiB
Commit graph

6724 commits

This branch
This branch
All branches
Author SHA1 Message Date
mb
e27b160acd rpz: stubs for nsip triggers 2020-11-13 14:36:00 +01:00
W.C.A. Wijngaards
b891fe113c - Retry for interfaces with unused ports if possible. 2020-11-12 13:36:37 +01:00
W.C.A. Wijngaards
48b40b305a Changelog note. 2020-11-12 12:28:10 +01:00
W.C.A. Wijngaards
26aa550bd2 - Fix to connect() to UDP destinations, default turned on, 
this lowers vulnerability to ICMP side channels.
 2020-11-12 12:27:41 +01:00
Ralph Dolmans
a4342ceb3a Merge branch 'master' into edns-string 2020-11-11 11:38:06 +01:00
Ralph Dolmans
946ed23f73 Merge branch 'master' into edns-string 2020-11-11 11:37:32 +01:00
mb
9149a6d1e4 RPZ: stub nsip testbound scenario 2020-11-11 11:21:54 +01:00
W.C.A. Wijngaards
5385e2e094 - Fix #343: Fail to build --with-libnghttp2 with error: 'SSIZE_MAX' 
undeclared.
 2020-11-10 15:31:20 +01:00
W.C.A. Wijngaards
7977e1c4cb - Fix memory leak after fix for possible memory leak failure. 2020-11-10 13:51:56 +01:00
W.C.A. Wijngaards
72d7587138 Merge branch 'master' into zonemd 2020-11-10 08:10:27 +01:00
W.C.A. Wijngaards
3926035f30 Changelog note for #341 and layout change. 
- Fix #341: fixing a possible memory leak.
 2020-11-10 08:07:28 +01:00
Wouter Wijngaards
140ab1f701
Merge pull request #341 from ihsinme/patch-1 
fixing a possible memory leak.
 2020-11-10 08:06:46 +01:00
ihsinme
18226f1c17
fixing a possible memory leak. 2020-11-09 18:41:22 +03:00
mb
667863770f RPZ: refactor clientip to handle multiple rrsets 2020-11-09 15:59:00 +01:00
mb
9b4bbb49b4 RPZ: one more testcase 2020-11-09 12:08:06 +01:00
mb
731afdc924 RPZ: refactor clientip trigger 2020-11-06 13:42:48 +01:00
mb
80205ba133 RPZ: towards client ip trigger and local data action 2020-11-06 12:54:32 +01:00
mb
bd0c910830 RPZ: provide rpz-client-ip trigger and actions 2020-11-04 17:00:28 +01:00
mb
fc4de71fe0 RPZ: fix for c89 2020-11-03 15:45:26 +01:00
mb
1ab84a1d27 RPZ: testbound: add qname and respip tcp-only examples 2020-11-03 11:03:29 +01:00
mb
fb8c5a764d RPZ: provide tcp-only triggers for respip actions 2020-11-03 11:02:36 +01:00
mb
dd70c2ef9a RPZ: implement stubs for rpz-tcp-only actions. 2020-11-02 14:21:57 +01:00
W.C.A. Wijngaards
e573f55dcd zonemd, unit tests for insecure delegation zones. 2020-10-29 14:59:11 +01:00
W.C.A. Wijngaards
cd3d54b504 zonemd, unit test for failed zonemd hash after axfr with chain of trust, 
zone is written after axfr, but before check.  But zone is then rejected
after check completes..
 2020-10-29 10:13:01 +01:00
W.C.A. Wijngaards
2757e0ff51 zonemd, unit test for failed zonemd hash after axfr, zone is rejected and not 
written to file.
 2020-10-29 10:00:59 +01:00
W.C.A. Wijngaards
43e32eae33 zonemd, unit test for zonemd from axfr with trust anchor. 2020-10-29 09:55:03 +01:00
W.C.A. Wijngaards
3ab188ea21 zonemd, please doxygen 
zonemd, fix clang analyzer warning about null nsec3 salt pointer access.
 2020-10-29 08:40:22 +01:00
W.C.A. Wijngaards
7ebb890a4a zonemd, unit test for zonemd from file and trust anchor directly for DNSSEC. 2020-10-28 15:10:14 +01:00
Florian Obser
9fb65e2b9e Sprinkle in some static to prevent missing prototype warnings. 2020-10-28 14:15:23 +01:00
W.C.A. Wijngaards
639a773c39 zonemd, unit test for chain of trust from recursion to check ZONEMD. 2020-10-27 13:44:44 +01:00
W.C.A. Wijngaards
d104727c91 - In man page note that tls-cert-bundle is read before permission 
drop and chroot.
 2020-10-27 09:00:26 +01:00
W.C.A. Wijngaards
94ac072f9b zonemd, zonemd-reject-absence config for an auth-zone rejects the zone if 
no ZONEMD is present.
 2020-10-26 15:37:43 +01:00
W.C.A. Wijngaards
8e53f0b14f zonemd, unit test with correct title. 2020-10-23 14:40:00 +02:00
W.C.A. Wijngaards
2b9569c7fe zonemd, fix config_get_option for zonemd-permissive-mode and unit test 
for zonemd-permissive-mode.
 2020-10-23 14:38:57 +02:00
W.C.A. Wijngaards
165b048e07 zonemd, zonemd-permissive-mode: yes logs the failure but does not block 
the zone after a ZONEMD verification failure.
 2020-10-23 14:33:04 +02:00
W.C.A. Wijngaards
caee84d92e zonemd, unit test for unbound-control auth_zone_reload with zonemd. 2020-10-23 12:10:30 +02:00
W.C.A. Wijngaards
89087ae294 zonemd, unbound-control auth_zone_reload errors when ZONEMD fails. 2020-10-23 11:47:00 +02:00
W.C.A. Wijngaards
c72ca35f08 unbound-control auth_zone_reload sets zone to nonexpired and 
also updates the xfr soa values from the new zonefile contents.
 2020-10-23 11:44:28 +02:00
W.C.A. Wijngaards
fb5f3f076d zonemd, zonemds are checked when a zone is auth_zone_reload from file, 
or reload with unbound-control.
 2020-10-23 11:20:08 +02:00
W.C.A. Wijngaards
40e713e121 zonemd, unlock xfr lock for auth zone verify of zonemd for mesh new callback. 2020-10-23 10:14:21 +02:00
W.C.A. Wijngaards
1cb7d5a194 zonemd, unit test for auth zone zonemd axfr 
zonemd, zonemds are checked after zone transfer.
 2020-10-23 09:12:51 +02:00
W.C.A. Wijngaards
f854f4e867 zonemd, test for server start with zonemd from file. 2020-10-22 16:02:37 +02:00
W.C.A. Wijngaards
54d8473ec6 zonemd, pass module stack as function argument. 2020-10-22 13:31:37 +02:00
W.C.A. Wijngaards
6ea1ae17f7 zonemd, fix to harden against failure in pickup zonemd lookups. 2020-10-22 13:20:00 +02:00
W.C.A. Wijngaards
e09873e0c8 zonemd, zonemds are checked at start 2020-10-22 12:10:46 +02:00
W.C.A. Wijngaards
5d7e001c63 Merge branch 'master' into zonemd 2020-10-22 09:49:27 +02:00
W.C.A. Wijngaards
4990dae87d - Fix that minimal-responses does not remove addresses from a priming 
query response.
 2020-10-22 09:26:27 +02:00
W.C.A. Wijngaards
ca39cfd6ae - Fix #333: Unbound Segmentation Fault w/ log_info Functions From 
Python Mod.
 2020-10-22 08:47:40 +02:00
George Thessalonikefs
0272889c44 - Fix #320: potential memory corruption due to size miscomputation upton 
custom region alloc init.
 2020-10-21 17:44:04 +02:00
George Thessalonikefs
7c39cbc0a9 - Fix #327: net/if.h check fails on some darwin versions; contribution by 
Joshua Root.
 2020-10-21 16:45:18 +02:00