W.C.A. Wijngaards
4d009e19fc
- Fix #259 : Fix unbound-checkconf does not check view existence.
...
unbound-checkconf checks access-control-view, access-control-tags,
access-control-tag-actions and access-control-tag-datas.
- Fix offset of error printout for access-control-tag-datas.
2020-07-07 09:00:04 +02:00
W.C.A. Wijngaards
edcef18274
Merge branch 'master' of git://github.com/PMunch/unbound into PMunch-master
...
Fixed conflicts in Makefile.in and configparser.y
2020-05-15 14:52:53 +02:00
George Thessalonikefs
e430e95d30
- Add SNI support on more TLS connections ( fixes #193 ).
...
- Add SNI support to unbound-anchor.
2020-04-16 14:39:05 +02:00
Ralph Dolmans
51593d47ac
Make unbound-control error returned on missing domain name more user friendly.
2020-03-27 11:27:12 +01:00
Yaroslav K
cfddbcb5be
add setting IP DiffServ Codepoint (DSCP, previously TOS) on sockets
2020-03-23 19:37:43 +00:00
Jeffrey Walton
20dbd6339e
Sync with upstream
2020-03-17 06:32:13 -04:00
Ralph Dolmans
90040b24ce
- Fix link error when OpenSSL is configured with no-engine, thanks noloader.
2020-03-02 14:06:10 +01:00
W.C.A. Wijngaards
614ed2717b
Merge branch 'master' into framestreams
...
Fixed bison and flex conflicts by regenerating the files.
2020-02-28 14:31:24 +01:00
W.C.A. Wijngaards
b63032b4dd
dnstap io, fixup fptr_wlist for unbound_dnstap_socket tool.
2020-02-28 08:55:10 +01:00
W.C.A. Wijngaards
348e246b66
- Fix #169 : Fix warning for daemon/remote.c output may be truncated
...
from snprintf.
2020-02-27 15:08:10 +01:00
W.C.A. Wijngaards
4d3524f496
dnstap io, test for TLS and reconnect for that. And fix unused parameters
...
for dt_create and fix check of socket path when using IP address.
2020-02-14 14:44:02 +01:00
W.C.A. Wijngaards
e5e72eb398
Merge branch 'master' into framestreams
2020-02-12 11:58:01 +01:00
George Thessalonikefs
adda4f6ace
- Fix use after free on log-identity after a reload; Fixes #163 .
2020-02-10 13:56:22 +01:00
W.C.A. Wijngaards
58fdcf06e8
Merge branch 'master' into framestreams
2020-02-05 14:25:47 +01:00
gthess
f7fe95ad7b
Serve stale ( #159 )
...
- Added serve-stale functionality as described in
draft-ietf-dnsop-serve-stale-10. `serve-expired-*` options can be used
to configure the behavior.
- Updated cachedb to honor `serve-expired-ttl`; Fixes #107 .
- Renamed statistic `num.zero_ttl` to `num.expired` as expired replies
come with a configurable TTL value (`serve-expired-reply-ttl`).
- Fixed stats when replying with cached, cname-aliased records.
- Added missing default values for redis cachedb backend.
2020-02-05 14:20:27 +01:00
W.C.A. Wijngaards
9115eb88ed
Merge branch 'master' into framestreams
2020-02-04 09:40:00 +01:00
Ralph Dolmans
4fc622031d
- Reformat rpz disabled stats counter
2020-02-03 16:52:25 +01:00
W.C.A. Wijngaards
8dd683768b
Merge branch 'master' into framestreams
2020-01-30 16:22:12 +01:00
Ralph Dolmans
056176ec9a
Merge branch 'master' into rpz
2020-01-30 15:57:34 +01:00
W.C.A. Wijngaards
b1d8b549e0
Merge branch 'master' into framestreams
2020-01-30 15:49:24 +01:00
Ralph Dolmans
882741bf55
- Fix memory leak in do_auth_zone_transfer on success
2020-01-30 15:45:54 +01:00
Ralph Dolmans
4f5b934688
- Fix small memory leak in error condition remote.c
...
- Fix double free in error condition view.c
2020-01-30 14:56:48 +01:00
Ralph Dolmans
3609287344
- Fix RPZ stats RPZ_NO_OVERRIDE_ACTION check
2020-01-30 14:05:56 +01:00
W.C.A. Wijngaards
fa49fc77e3
fix dnstap io for lock checks, log identity (numworkers+1), and add locks
...
around protected area modification in the message queue.
2020-01-30 13:39:31 +01:00
W.C.A. Wijngaards
af252929e8
Merge branch 'master' into framestreams
2020-01-29 16:10:16 +01:00
Alexander Berkes
396d4223d9
Added unbound-control view_local_datas_remove command
2020-01-29 02:28:00 +01:00
W.C.A. Wijngaards
1e4165d25b
dnstap io, without threads, logs from the main event loop.
2020-01-28 15:51:39 +01:00
PMunch
b7e8dc1182
Merge branch 'master' into master
2020-01-28 13:18:01 +01:00
W.C.A. Wijngaards
efc79beb2d
iothread work.
2020-01-21 17:01:25 +01:00
W.C.A. Wijngaards
57ad169605
the framestream queue.
2020-01-21 14:50:37 +01:00
Ralph Dolmans
9877e52161
Merge branch 'master' of github.com:NLnetLabs/unbound into rpz
2020-01-15 23:44:10 +01:00
W.C.A. Wijngaards
a8db52120b
- Fix the relationship between serve-expired and prefetch options,
...
patch from Saksham Manchanda from Secure64.
2020-01-10 10:04:50 +01:00
Ralph Dolmans
ae4f6a259b
Proccess more review feedback
2019-12-23 16:02:43 +01:00
W.C.A. Wijngaards
216747bb17
- Fix lock type for memory purify log lock deletion.
2019-12-04 09:44:31 +01:00
W.C.A. Wijngaards
da4d6ffee3
- Fix Bad Randomness in Seed, reported by X41 D-Sec.
2019-11-20 14:40:50 +01:00
W.C.A. Wijngaards
981fedea0e
- Fix NULL Pointer Dereference via Control Port,
...
reported by X41 D-Sec.
2019-11-20 14:37:13 +01:00
W.C.A. Wijngaards
3a49e683ed
- Fix Enum Name not Used, reported by X41 D-Sec.
2019-11-20 14:22:06 +01:00
W.C.A. Wijngaards
d8809c672a
- Fix Weak Entropy Used For Nettle,
...
reported by X41 D-Sec.
2019-11-20 11:28:53 +01:00
W.C.A. Wijngaards
79a6e9fbe2
- Fixes to please lint checks.
2019-11-19 12:10:03 +01:00
W.C.A. Wijngaards
d05d6b959a
- fixes for splint cleanliness, long vs int in SSL set_mode.
2019-11-13 15:16:27 +01:00
PMunch
8eeb910e3d
Improve dynlib module and add documentation
...
Dynamic library module is now only a thin wrapper that loads dynamic
libraries and forwards all function calls directly to the loaded module.
This meant adding get_mem and clear, and get_mem calls have been added
in the expected places.
Documentation has also been added to the example.conf and the
unbound.conf manpage.
2019-10-21 14:20:33 +02:00
Maryse47
ce0e9bef45
Consistently use /dev/urandom instead of /dev/random in scripts and docs
...
Unbound code call /dev/urandom (see below) but various docs and scripts
mention /dev/random which may be confusing.
https://github.com/NLnetLabs/unbound/blob/release-1.9.3/compat/arc4random.c#L107
https://github.com/NLnetLabs/unbound/blob/release-1.9.3/compat/getentropy_linux.c#L251
https://github.com/NLnetLabs/unbound/blob/release-1.9.3/compat/getentropy_osx.c
https://github.com/NLnetLabs/unbound/blob/release-1.9.3/compat/getentropy_solaris.c#L116
2019-09-19 17:40:49 +02:00
Ralph Dolmans
2b5cd8e9b4
Merge remote-tracking branch 'ralph/feature/rpz' into rpz
2019-09-09 17:11:26 +02:00
W.C.A. Wijngaards
0532cdd357
- (for later release): -V prints if TCP fastopen is available.
2019-08-15 17:04:38 +02:00
W.C.A. Wijngaards
8cb3656b3e
- Fix warning for unused variable for compilation without systemd.
2019-08-14 16:08:19 +02:00
George Thessalonikefs
a90f173875
- Fix #59 , when compiled with systemd support check that we can properly
...
communicate with systemd through the `NOTIFY_SOCKET`.
2019-08-14 15:51:28 +02:00
George Thessalonikefs
008813f0a2
- Introduce -V option to print the version number and build options.
...
Previously reported build options like linked libs and linked modules
are now moved from `-h` to `-V` as well for consistency.
- PACKAGE_BUGREPORT now also includes link to GitHub issues.
2019-08-12 17:52:43 +02:00
Ralph Dolmans
0987a82877
Add statistics support for disabled (action override) response IP RPZ
...
triggers.
2019-08-07 14:09:48 +02:00
W.C.A. Wijngaards
fa506e3cda
- Check repinfo in worker_handle_request, if null, drop it.
2019-08-01 16:57:36 +02:00
W.C.A. Wijngaards
df0c844eed
- Fix to timeval_add for remaining second in microseconds.
2019-08-01 16:48:41 +02:00