W.C.A. Wijngaards
e5e72eb398
Merge branch 'master' into framestreams
2020-02-12 11:58:01 +01:00
George Thessalonikefs
adda4f6ace
- Fix use after free on log-identity after a reload; Fixes #163 .
2020-02-10 13:56:22 +01:00
W.C.A. Wijngaards
58fdcf06e8
Merge branch 'master' into framestreams
2020-02-05 14:25:47 +01:00
gthess
f7fe95ad7b
Serve stale ( #159 )
...
- Added serve-stale functionality as described in
draft-ietf-dnsop-serve-stale-10. `serve-expired-*` options can be used
to configure the behavior.
- Updated cachedb to honor `serve-expired-ttl`; Fixes #107 .
- Renamed statistic `num.zero_ttl` to `num.expired` as expired replies
come with a configurable TTL value (`serve-expired-reply-ttl`).
- Fixed stats when replying with cached, cname-aliased records.
- Added missing default values for redis cachedb backend.
2020-02-05 14:20:27 +01:00
W.C.A. Wijngaards
9115eb88ed
Merge branch 'master' into framestreams
2020-02-04 09:40:00 +01:00
Ralph Dolmans
4fc622031d
- Reformat rpz disabled stats counter
2020-02-03 16:52:25 +01:00
W.C.A. Wijngaards
8dd683768b
Merge branch 'master' into framestreams
2020-01-30 16:22:12 +01:00
Ralph Dolmans
056176ec9a
Merge branch 'master' into rpz
2020-01-30 15:57:34 +01:00
W.C.A. Wijngaards
b1d8b549e0
Merge branch 'master' into framestreams
2020-01-30 15:49:24 +01:00
Ralph Dolmans
882741bf55
- Fix memory leak in do_auth_zone_transfer on success
2020-01-30 15:45:54 +01:00
Ralph Dolmans
4f5b934688
- Fix small memory leak in error condition remote.c
...
- Fix double free in error condition view.c
2020-01-30 14:56:48 +01:00
Ralph Dolmans
3609287344
- Fix RPZ stats RPZ_NO_OVERRIDE_ACTION check
2020-01-30 14:05:56 +01:00
W.C.A. Wijngaards
fa49fc77e3
fix dnstap io for lock checks, log identity (numworkers+1), and add locks
...
around protected area modification in the message queue.
2020-01-30 13:39:31 +01:00
W.C.A. Wijngaards
af252929e8
Merge branch 'master' into framestreams
2020-01-29 16:10:16 +01:00
Alexander Berkes
396d4223d9
Added unbound-control view_local_datas_remove command
2020-01-29 02:28:00 +01:00
W.C.A. Wijngaards
1e4165d25b
dnstap io, without threads, logs from the main event loop.
2020-01-28 15:51:39 +01:00
W.C.A. Wijngaards
efc79beb2d
iothread work.
2020-01-21 17:01:25 +01:00
W.C.A. Wijngaards
57ad169605
the framestream queue.
2020-01-21 14:50:37 +01:00
Ralph Dolmans
9877e52161
Merge branch 'master' of github.com:NLnetLabs/unbound into rpz
2020-01-15 23:44:10 +01:00
W.C.A. Wijngaards
a8db52120b
- Fix the relationship between serve-expired and prefetch options,
...
patch from Saksham Manchanda from Secure64.
2020-01-10 10:04:50 +01:00
Ralph Dolmans
ae4f6a259b
Proccess more review feedback
2019-12-23 16:02:43 +01:00
W.C.A. Wijngaards
216747bb17
- Fix lock type for memory purify log lock deletion.
2019-12-04 09:44:31 +01:00
W.C.A. Wijngaards
da4d6ffee3
- Fix Bad Randomness in Seed, reported by X41 D-Sec.
2019-11-20 14:40:50 +01:00
W.C.A. Wijngaards
981fedea0e
- Fix NULL Pointer Dereference via Control Port,
...
reported by X41 D-Sec.
2019-11-20 14:37:13 +01:00
W.C.A. Wijngaards
3a49e683ed
- Fix Enum Name not Used, reported by X41 D-Sec.
2019-11-20 14:22:06 +01:00
W.C.A. Wijngaards
d8809c672a
- Fix Weak Entropy Used For Nettle,
...
reported by X41 D-Sec.
2019-11-20 11:28:53 +01:00
W.C.A. Wijngaards
79a6e9fbe2
- Fixes to please lint checks.
2019-11-19 12:10:03 +01:00
W.C.A. Wijngaards
d05d6b959a
- fixes for splint cleanliness, long vs int in SSL set_mode.
2019-11-13 15:16:27 +01:00
Maryse47
ce0e9bef45
Consistently use /dev/urandom instead of /dev/random in scripts and docs
...
Unbound code call /dev/urandom (see below) but various docs and scripts
mention /dev/random which may be confusing.
https://github.com/NLnetLabs/unbound/blob/release-1.9.3/compat/arc4random.c#L107
https://github.com/NLnetLabs/unbound/blob/release-1.9.3/compat/getentropy_linux.c#L251
https://github.com/NLnetLabs/unbound/blob/release-1.9.3/compat/getentropy_osx.c
https://github.com/NLnetLabs/unbound/blob/release-1.9.3/compat/getentropy_solaris.c#L116
2019-09-19 17:40:49 +02:00
Ralph Dolmans
2b5cd8e9b4
Merge remote-tracking branch 'ralph/feature/rpz' into rpz
2019-09-09 17:11:26 +02:00
W.C.A. Wijngaards
0532cdd357
- (for later release): -V prints if TCP fastopen is available.
2019-08-15 17:04:38 +02:00
W.C.A. Wijngaards
8cb3656b3e
- Fix warning for unused variable for compilation without systemd.
2019-08-14 16:08:19 +02:00
George Thessalonikefs
a90f173875
- Fix #59 , when compiled with systemd support check that we can properly
...
communicate with systemd through the `NOTIFY_SOCKET`.
2019-08-14 15:51:28 +02:00
George Thessalonikefs
008813f0a2
- Introduce -V option to print the version number and build options.
...
Previously reported build options like linked libs and linked modules
are now moved from `-h` to `-V` as well for consistency.
- PACKAGE_BUGREPORT now also includes link to GitHub issues.
2019-08-12 17:52:43 +02:00
Ralph Dolmans
0987a82877
Add statistics support for disabled (action override) response IP RPZ
...
triggers.
2019-08-07 14:09:48 +02:00
W.C.A. Wijngaards
fa506e3cda
- Check repinfo in worker_handle_request, if null, drop it.
2019-08-01 16:57:36 +02:00
W.C.A. Wijngaards
df0c844eed
- Fix to timeval_add for remaining second in microseconds.
2019-08-01 16:48:41 +02:00
Ralph Dolmans
1c5d081853
- Add RPZ response IP override option, logging, and statistics
2019-08-01 14:31:37 +02:00
Ralph Dolmans
a8d6147ae4
- Added RPZ response IP support
2019-07-16 18:43:16 +02:00
Ralph Dolmans
d323e1bda8
- Fix for possible assertion failure when answering respip CNAME from cache.
2019-07-05 16:52:03 +02:00
W.C.A. Wijngaards
af6c5dea43
- Fix another spoolbuf storage code point, in prefetch.
2019-06-12 08:32:45 +02:00
Ralph Dolmans
268580f348
Added RPZ log name and stats
2019-06-03 15:46:39 +02:00
Ralph Dolmans
c66e47c372
Initial RPZ commit - now with all files
2019-04-05 17:39:10 +02:00
Wouter Wijngaards
937523285a
- Move goto label in answer_from_cache to the end of the function
...
where it is more visible.
git-svn-id: file:///svn/unbound/trunk@5145 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-03 05:32:28 +00:00
Wouter Wijngaards
b75c37252c
- Fix that tls-session-ticket-keys: "" on its own in unbound.conf
...
disables the tls session ticker key calls into the OpenSSL API.
git-svn-id: file:///svn/unbound/trunk@5140 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-03-25 08:47:14 +00:00
Wouter Wijngaards
3949bf2c82
- Print query name with ip_ratelimit exceeded log lines.
...
git-svn-id: file:///svn/unbound/trunk@5115 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-18 10:40:41 +00:00
Wouter Wijngaards
20d57ec58b
- Fix #4206 : OpenSSL 1.0.2 hostname verification for FreeBSD 11.2.
...
git-svn-id: file:///svn/unbound/trunk@5106 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-07 08:34:28 +00:00
Wouter Wijngaards
fe97f25b75
- Fix that log-replies prints the correct name for local-alias
...
names, for names that have a CNAME in local-data configuration.
It logs the original query name, not the target of the CNAME.
- Add local-zone type inform_redirect, which logs like type inform,
and redirects like type redirect.
git-svn-id: file:///svn/unbound/trunk@5099 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-02-04 09:51:27 +00:00
Wouter Wijngaards
b34a6defc1
- Fix OpenSSL without ENGINE support compilation.
...
git-svn-id: file:///svn/unbound/trunk@5096 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-31 12:33:28 +00:00
Wouter Wijngaards
8cf5eae166
- Fix OpenSSL without ENGINE support compilation.
...
git-svn-id: file:///svn/unbound/trunk@5095 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-31 11:34:11 +00:00