upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2026-01-05 14:29:37 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
3748 commits 23 branches 209 tags 124 MiB
Commit graph

3748 commits

This branch
This branch
All branches
Author SHA1 Message Date
Ralph Dolmans
4f487cf746 Add DSA support for OpenSSL 1.1 
git-svn-id: file:///svn/unbound/trunk@3954 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-12-07 12:58:47 +00:00
George Thessalonikefs
87fd7da6d7 make depend 
git-svn-id: file:///svn/unbound/trunk@3953 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-12-06 15:29:35 +00:00
Wouter Wijngaards
f15350b776 Unused variable warnings. 
git-svn-id: file:///svn/unbound/trunk@3952 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-12-06 14:42:20 +00:00
George Thessalonikefs
3ac8cf0380 please lint again. 
git-svn-id: file:///svn/unbound/trunk@3951 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-12-06 14:41:14 +00:00
George Thessalonikefs
9323fa7688 please lint again. 
git-svn-id: file:///svn/unbound/trunk@3950 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-12-06 14:33:08 +00:00
George Thessalonikefs
c879fa1e79 please lint. 
git-svn-id: file:///svn/unbound/trunk@3949 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-12-06 14:15:49 +00:00
George Thessalonikefs
ba448fbd54 - Minor Python doc fix for testing commit post-hooks. 
git-svn-id: file:///svn/unbound/trunk@3948 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-12-06 14:04:42 +00:00
George Thessalonikefs
7b948b0647 - Added generic EDNS code for registering known EDNS option codes, 
bypassing the cache response stage and uniquifying mesh states. Four EDNS
  option lists were added to module_qstate (module_qstate.edns_opts_*) to
  store EDNS options from/to front/back side.
- Added two flags to module_qstate (no_cache_lookup, no_cache_store) that
  control the modules' cache interactions.
- Added code for registering inplace callback functions. The registered
  functions can be called just before replying with local data or Chaos,
  replying from cache, replying with SERVFAIL, replying with a resolved
  query, sending a query to a nameserver. The functions can inspect the
  available data and maybe change response/query related data (i.e. append
  EDNS options).
- Updated Python module for the above.
- Updated Python documentation.



git-svn-id: file:///svn/unbound/trunk@3947 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-12-06 13:42:51 +00:00
Ralph Dolmans
3e1ff464f1 add unset type to localzone_type enum, used for unset tag_action elements 
git-svn-id: file:///svn/unbound/trunk@3946 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-12-05 15:52:47 +00:00
Ralph Dolmans
3b96c4c9cd - Fix #1173: differ local-zone type deny from unset tag_actions element. 
git-svn-id: file:///svn/unbound/trunk@3945 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-12-05 14:48:49 +00:00
Wouter Wijngaards
b7a314a7dc - Fix #1170: document that 'inform' local-zone uses local-data. 
git-svn-id: file:///svn/unbound/trunk@3944 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-12-05 12:59:08 +00:00
Ralph Dolmans
3044b805b3 Remove bugzila reference 
git-svn-id: file:///svn/unbound/trunk@3943 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-12-01 14:49:54 +00:00
Ralph Dolmans
e500340621 - hyphen as minus fix, by Andreas Schulze 
git-svn-id: file:///svn/unbound/trunk@3942 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-12-01 09:34:02 +00:00
Ralph Dolmans
61b23e3811 - Added local-zones and local-data bulk addition and removal functionality in 
unbound-control (local_zones, local_zones_remove, local_datas and
  local_datas_remove).                                   
- iana portlist update


git-svn-id: file:///svn/unbound/trunk@3941 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-30 11:22:29 +00:00
Wouter Wijngaards
c604b9c6a9 Fixup for windows compile. 
git-svn-id: file:///svn/unbound/trunk@3940 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-29 15:49:37 +00:00
Wouter Wijngaards
6450a5b191 - braces in view.c around lock statements. 
git-svn-id: file:///svn/unbound/trunk@3939 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-29 15:28:25 +00:00
Wouter Wijngaards
e502757963 - version 1.6.0 is in the development branch. 
git-svn-id: file:///svn/unbound/trunk@3938 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-29 13:33:09 +00:00
Wouter Wijngaards
3815009cf1 - new install-sh. 
git-svn-id: file:///svn/unbound/trunk@3937 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-28 09:52:02 +00:00
Wouter Wijngaards
92bff79d3d - Fix that with openssl 1.1 control-use-cert: no uses less cpu, by 
using no encryption over the unix socket.


git-svn-id: file:///svn/unbound/trunk@3936 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-25 16:14:14 +00:00
Ralph Dolmans
2dce3856cd Check and free data allocated by fname_after_chroot 
git-svn-id: file:///svn/unbound/trunk@3935 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-23 11:21:10 +00:00
Wouter Wijngaards
a6e3ed1025 - patch from Dag-Erling Smorgrav that removes code that relies 
on sbrk().


git-svn-id: file:///svn/unbound/trunk@3934 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-22 15:50:07 +00:00
Ralph Dolmans
d3b85ed7d8 - Added unit test for QNAME minimisation + harden below nxdomain 
synergy.


git-svn-id: file:///svn/unbound/trunk@3933 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-22 13:53:51 +00:00
Ralph Dolmans
9581c39dcc - QNAME minimisation uses QTYPE=A, therefore always check cache for 
this type in harden-below-nxdomain functionality.


git-svn-id: file:///svn/unbound/trunk@3932 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-22 10:50:53 +00:00
Wouter Wijngaards
88e8fb1029 remove unused variables. 
git-svn-id: file:///svn/unbound/trunk@3931 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-22 10:18:33 +00:00
Ralph Dolmans
3e5cf4da0b - Make access-control-tag-data RDATA absolute. This makes the RDATA origin 
consistent between local-data and access-control-tag-data.
- Fix NSEC ENT wildcard check. Matching wildcard does not have to be a subdomain
  of the NSEC owner.



git-svn-id: file:///svn/unbound/trunk@3930 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-22 10:10:48 +00:00
Wouter Wijngaards
632e60eccd - Fix unit tests for DS hash processing for fake-dsa test option. 
git-svn-id: file:///svn/unbound/trunk@3929 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-22 08:23:24 +00:00
Wouter Wijngaards
f4673d87ce - iana portlist update. 
git-svn-id: file:///svn/unbound/trunk@3928 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-22 08:22:49 +00:00
Wouter Wijngaards
3132937112 - Fix #1158: reference RFC 8020 "NXDOMAIN: There Really Is Nothing 
Underneath" for the harden-below-nxdomain option.



git-svn-id: file:///svn/unbound/trunk@3927 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-21 09:53:43 +00:00
Ralph Dolmans
e6678abba6 - Fix #1155: test status code of unbound-control in 04-checkconf, not the status 
code from the tee command.


git-svn-id: file:///svn/unbound/trunk@3926 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-10 11:20:27 +00:00
Wouter Wijngaards
ba274dd312 - Note that for harden-below-nxdomain the nxdomain must be secure, 
this means nsec3 with optout is insufficient.


git-svn-id: file:///svn/unbound/trunk@3925 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-04 14:49:43 +00:00
Ralph Dolmans
11031a7d36 pass ssl_upstream as int to (lib)worker_send_query 
git-svn-id: file:///svn/unbound/trunk@3924 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-04 14:02:22 +00:00
Ralph Dolmans
efe248c46a - Added stub-ssl-upstream and forward-ssl-upstream options. 
git-svn-id: file:///svn/unbound/trunk@3923 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-04 12:07:52 +00:00
Wouter Wijngaards
68e4ef21db - Fix #1154: segfault when reading config with duplicate zones. 
git-svn-id: file:///svn/unbound/trunk@3922 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-04 08:16:55 +00:00
Wouter Wijngaards
fa81710d16 - configure detects ssl security level API function in the autoconf 
manner.  Every function on its own, so that other libraries (eg.
  LibreSSL) can develop their API without hindrance.


git-svn-id: file:///svn/unbound/trunk@3921 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-04 08:05:42 +00:00
Wouter Wijngaards
3b4cbcf631 Fixup #if at start of line, for portability. 
git-svn-id: file:///svn/unbound/trunk@3920 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-04 07:58:57 +00:00
Ralph Dolmans
589eabc0cb Set openssl security level to 0 when using aNULL ciphers 
git-svn-id: file:///svn/unbound/trunk@3919 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-03 16:59:00 +00:00
Wouter Wijngaards
c22f958152 Free log_identity config string. 
git-svn-id: file:///svn/unbound/trunk@3918 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-03 13:19:12 +00:00
Wouter Wijngaards
680e14cb65 - log-identity: config option to set sys log identity, patch from 
"Robin H. Johnson" <robbat2@gentoo.org>


git-svn-id: file:///svn/unbound/trunk@3917 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-03 08:51:40 +00:00
Wouter Wijngaards
b8cd36af89 - .gitattributes line for githubs code language display. 
git-svn-id: file:///svn/unbound/trunk@3916 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-03 08:29:29 +00:00
Wouter Wijngaards
680a504652 - iana portlist update. 
git-svn-id: file:///svn/unbound/trunk@3915 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-02 08:43:14 +00:00
Wouter Wijngaards
0e79c3ddc0 change to test cronjob-2. 
git-svn-id: file:///svn/unbound/trunk@3914 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-02 08:38:03 +00:00
Wouter Wijngaards
20888cfa59 Change to test commit cronjob. 
git-svn-id: file:///svn/unbound/trunk@3913 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-11-02 07:22:20 +00:00
Wouter Wijngaards
d2548b25f2 - iana portlist update. 
git-svn-id: file:///svn/unbound/trunk@3912 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-10-31 08:18:17 +00:00
Wouter Wijngaards
705e3e8d1c - Fix failure to build on arm64 with no sbrk. 
git-svn-id: file:///svn/unbound/trunk@3911 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-10-31 08:05:41 +00:00
Wouter Wijngaards
96961081b0 - Patch for server.num.zero_ttl stats for count of expired replies, 
from Pavel Odintsov.


git-svn-id: file:///svn/unbound/trunk@3910 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-10-28 15:08:32 +00:00
Wouter Wijngaards
27182d614b - Fix unit tests for openssl 1.1, with no DSA, by faking DSA, enabled 
with the undocumented switch 'fake-dsa'.  It logs a warning.


git-svn-id: file:///svn/unbound/trunk@3909 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-10-26 07:38:00 +00:00
Wouter Wijngaards
b76d5dfc5b - Fix #1134: unbound-control set_option -- val-override-date: -1 works 
immediately to ignore datetime, or back to 0 to enable it again.
  The -- is to ignore the '-1' as an option flag.


git-svn-id: file:///svn/unbound/trunk@3908 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-10-25 11:49:08 +00:00
Wouter Wijngaards
147a6c8548 - Fix #1134: unbound-control set_option val-date-override: -1 works 
immediately to ignore datetime, or back to 0 to enable it again.


git-svn-id: file:///svn/unbound/trunk@3907 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-10-25 11:44:03 +00:00
Wouter Wijngaards
6e2e8c047f g.root-servers.net has AAAA address. 
git-svn-id: file:///svn/unbound/trunk@3906 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-10-24 13:11:39 +00:00
Wouter Wijngaards
58cb15c52a Fixup cachedb for root prime module return. 
git-svn-id: file:///svn/unbound/trunk@3905 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-10-24 13:01:19 +00:00