W.C.A. Wijngaards
e99b5046eb
- Fix to use SSL_CTX_set_tlsext_ticket_key_evp_cb in OpenSSL
...
3.0.0-alpha4.
- Longer keys for the test set, this avoids weak crypto errors.
2020-07-08 16:22:39 +02:00
W.C.A. Wijngaards
2c8ebe6206
- Fixed conflicts for PR #93 and make configure, yacc, lex.
2020-05-15 14:55:36 +02:00
W.C.A. Wijngaards
edcef18274
Merge branch 'master' of git://github.com/PMunch/unbound into PMunch-master
...
Fixed conflicts in Makefile.in and configparser.y
2020-05-15 14:52:53 +02:00
W.C.A. Wijngaards
bcdc13514a
- Fixes on #200 . and rerun autoconf.
2020-03-24 09:32:04 +01:00
Ralph Dolmans
87474563ff
Merge branch 'kernel-random-port' of https://github.com/fobser/unbound into fobser-kernel-random-port
2020-03-19 15:48:12 +01:00
W.C.A. Wijngaards
50bc604586
Changelog for #188 and configure script created. Removed unneeded whitespace.
2020-03-11 08:41:56 +01:00
Ralph Dolmans
90040b24ce
- Fix link error when OpenSSL is configured with no-engine, thanks noloader.
2020-03-02 14:06:10 +01:00
Florian Obser
5aaa5e253d
Allow the kernel to provide random source ports.
...
On some operating systems, for example OpenBSD since some decades, the
kernel binds to a random source port if asked for any port (port
number 0). There is no need to replicate this functionality in
userland.
2020-02-20 14:54:06 +01:00
W.C.A. Wijngaards
079de39b46
- Fix #157 : undefined reference to `htobe64'.
2020-01-29 11:56:29 +01:00
PMunch
b7e8dc1182
Merge branch 'master' into master
2020-01-28 13:18:01 +01:00
Ralph Dolmans
41621fb1df
- Add changelog entry for RP#154
...
- autoconf after PR#154
2020-01-27 15:50:12 +01:00
W.C.A. Wijngaards
226298bbd3
- Fix Integer Overflow in Regional Allocator,
...
reported by X41 D-Sec.
2019-11-19 15:38:05 +01:00
W.C.A. Wijngaards
442e95620e
- Portable grep usage for reuseport configure test.
...
- Check return type of HMAC_Init_ex for openssl 0.9.8.
2019-11-18 15:53:47 +01:00
PMunch
1762437121
Add dynamic library support
2019-10-21 09:34:51 +02:00
W.C.A. Wijngaards
ab53baa6f5
- Fix for oss-fuzz build warning.
2019-09-19 10:09:49 +02:00
W.C.A. Wijngaards
e45e9f1ce0
- Fix #72 : configure --with-syslog-facility=LOCAL0-7 with default
...
LOG_DAEMON (as before) can set the syslog facility that the server
uses to log messages.
2019-09-09 14:27:55 +02:00
George Thessalonikefs
008813f0a2
- Introduce -V option to print the version number and build options.
...
Previously reported build options like linked libs and linked modules
are now moved from `-h` to `-V` as well for consistency.
- PACKAGE_BUGREPORT now also includes link to GitHub issues.
2019-08-12 17:52:43 +02:00
W.C.A. Wijngaards
ed95b07764
Merge branch 'master' of git://github.com/k9982874/unbound into k9982874-master
2019-06-18 13:52:52 +02:00
W.C.A. Wijngaards
a4f4d7b6ba
- Fix to guard _OPENBSD_SOURCE from redefinition.
2019-05-29 13:28:03 +02:00
W.C.A. Wijngaards
14b11384a4
- Fix to define _OPENBSD_SOURCE to get reallocarray on NetBSD.
2019-05-28 11:12:05 +02:00
Kevin Chu
1a48bdebb5
Add support for ipset
2019-05-02 19:43:30 +08:00
Wouter Wijngaards
2b47ca080e
- Fix to use event_assign with libevent for thread-safety.
...
git-svn-id: file:///svn/unbound/trunk@5149 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-04-08 11:02:34 +00:00
Wouter Wijngaards
8092cd6331
- Fix for #4233 : guard use of NDEBUG, so that it can be passed in
...
CFLAGS into configure.
git-svn-id: file:///svn/unbound/trunk@5133 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-03-07 08:34:00 +00:00
Wouter Wijngaards
df8f236b62
- For openssl 1.0.2 use the CRYPTO_THREADID locking callbacks,
...
still supports the set_id_callback previous API. And for 1.1.0
no locking callbacks are needed.
git-svn-id: file:///svn/unbound/trunk@5094 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-31 11:31:55 +00:00
Wouter Wijngaards
510606dd1c
- Patch for TLS session resumption from Manabu Sonoda,
...
enable with tls-session-ticket-keys in unbound.conf.
git-svn-id: file:///svn/unbound/trunk@5059 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-23 09:35:52 +00:00
Wouter Wijngaards
4e59c8344f
- Fix configure to detect SSL_CTX_set_ciphersuites, for better
...
library compatibility when compiling.
git-svn-id: file:///svn/unbound/trunk@5058 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-23 08:57:49 +00:00
Wouter Wijngaards
71b078611f
- Fix #4206 : support openssl 1.0.2 for TLS hostname verification,
...
alongside the 1.1.0 and later support that is already there.
git-svn-id: file:///svn/unbound/trunk@5018 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-12-10 14:27:24 +00:00
Wouter Wijngaards
fece182cf5
- Set default for so-reuseport to no for FreeBSD. It is enabled
...
by default for Linux and DragonFlyBSD. The setting can
be configured in unbound.conf to override the default.
git-svn-id: file:///svn/unbound/trunk@4932 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-05 15:07:19 +00:00
Wouter Wijngaards
8e20d628e8
- Fix compile on Mac for unbound, provide explicit_bzero when libc
...
does not have it.
git-svn-id: file:///svn/unbound/trunk@4907 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-17 07:06:57 +00:00
Wouter Wijngaards
9a82526b91
- exit log routine is annotated as noreturn function.
...
- free memory leaks in config strlist and str2list insert functions.
- do not move unused argv variable after getopt.
- Remove unused if clause in testcode.
git-svn-id: file:///svn/unbound/trunk@4896 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-13 08:58:21 +00:00
Wouter Wijngaards
261bf354b7
- Use accept4 to speed up incoming TCP (and TLS) connections,
...
available on Linux and FreeBSD.
git-svn-id: file:///svn/unbound/trunk@4686 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-05-23 13:55:09 +00:00
Wouter Wijngaards
f39e39ed47
- For addr with #authname and no @port notation, the default is 853.
...
git-svn-id: file:///svn/unbound/trunk@4637 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-04-19 14:23:14 +00:00
Wouter Wijngaards
1f9caf5805
- ED448 support.
...
git-svn-id: file:///svn/unbound/trunk@4607 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-04-05 14:44:17 +00:00
Wouter Wijngaards
e784758a21
- Add --with-libhiredis, unbound support for a new cached backend
...
that uses a Redis server as the storage. This implementation
depends on the hiredis client library (https://redislabs.com/lp/hiredis/ ).
And unbound should be built with both --enable-cachedb and
--with-libhiredis[=PATH] (where $PATH/include/hiredis/hiredis.h
should exist). Patch from Jinmei Tatuya (Infoblox).
git-svn-id: file:///svn/unbound/trunk@4586 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-03-15 12:33:51 +00:00
Wouter Wijngaards
54bd1fdd62
- tls-cert-bundle option in unbound.conf enables TLS authentication.
...
git-svn-id: file:///svn/unbound/trunk@4532 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-13 10:35:09 +00:00
Wouter Wijngaards
30891d6fff
- Fix unfreed locks in log and arc4random at exit of unbound.
...
git-svn-id: file:///svn/unbound/trunk@4491 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-02-02 09:27:16 +00:00
Wouter Wijngaards
35bd34f8e6
- Fix #2141 - for libsodium detect lack of entropy in chroot, print
...
a message and exit.
git-svn-id: file:///svn/unbound/trunk@4398 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-11-03 15:08:14 +00:00
Wouter Wijngaards
e396684a54
- Fix #1365 : Add Ed25519 support using libnettle.
...
git-svn-id: file:///svn/unbound/trunk@4286 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-07-24 10:44:30 +00:00
Wouter Wijngaards
33de42e729
- Detect chacha for dnscrypt at configure time.
...
git-svn-id: file:///svn/unbound/trunk@4215 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-06-08 08:17:38 +00:00
Wouter Wijngaards
8c4e7ffb14
- Support for openssl EVP_DigestVerify.
...
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
git-svn-id: file:///svn/unbound/trunk@4198 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-30 12:28:25 +00:00
Wouter Wijngaards
7641f23f87
- updated configure, dependencies and flex output.
...
git-svn-id: file:///svn/unbound/trunk@4159 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-16 13:21:10 +00:00
George Thessalonikefs
491b0a26e4
- Implemented opportunistic IPsec support module (ipsecmod).
...
- Some whitespace fixup.
git-svn-id: file:///svn/unbound/trunk@4158 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-16 12:39:24 +00:00
Ralph Dolmans
b0fd814975
- Merge EDNS Client subnet implementation from feature branch into main branch,
...
using new EDNS processing framework.
git-svn-id: file:///svn/unbound/trunk@4074 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-21 12:08:17 +00:00
Wouter Wijngaards
7c9584e408
- #1217 . DNSCrypt support, with --enable-dnscrypt, libsodium and then
...
enabled in the config file from Manu Bretelle.
git-svn-id: file:///svn/unbound/trunk@4065 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-20 14:55:31 +00:00
Wouter Wijngaards
05215e8e7d
- --disable-sha1 disables SHA1 support in RRSIG, so from DNSKEY and
...
DS records. NSEC3 is not disabled.
- fake-sha1 test option; print warning if used. To make unit tests.
git-svn-id: file:///svn/unbound/trunk@4043 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-09 13:18:08 +00:00
Wouter Wijngaards
35ae8ef313
- Patch from Luiz Fernando Softov for Stats Shared Memory.
...
- unbound-control stats_shm command prints stats using shared memory,
which uses less cpu.
git-svn-id: file:///svn/unbound/trunk@4020 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-02-23 12:05:05 +00:00
Wouter Wijngaards
cd7db58ce3
- configure --enable-systemd and lets unbound use systemd sockets if
...
you enable use-systemd: yes in unbound.conf.
Also there are contrib/unbound.socket and contrib/unbound.service:
systemd files for unbound, install them in /usr/lib/systemd/system.
Contributed by Sami Kerola and Pavel Odintsov.
git-svn-id: file:///svn/unbound/trunk@3975 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-01-03 13:43:29 +00:00
Wouter Wijngaards
db2cf53e7b
- Fix inet_ntop and inet_pton warnings in windows compile.
...
git-svn-id: file:///svn/unbound/trunk@3969 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-12-15 13:10:58 +00:00
Wouter Wijngaards
e28903cb6d
autoconf
...
git-svn-id: file:///svn/unbound/trunk@3955 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-12-07 13:04:46 +00:00
Wouter Wijngaards
a6e3ed1025
- patch from Dag-Erling Smorgrav that removes code that relies
...
on sbrk().
git-svn-id: file:///svn/unbound/trunk@3934 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-11-22 15:50:07 +00:00