Willem Toorop
3e6c5775ff
Fetch and equip context with trust-anchors
2017-06-30 10:18:07 +02:00
Willem Toorop
742588dd6f
Merge branch 'develop' into hackathon/zeroconf-dnssec
2017-06-29 11:09:30 +02:00
Willem Toorop
fb267938c3
Start with fetching root-anchors remotely
...
Also lays the foundation for looking up upstreams by name and DANE authentication of upstreams.
2017-06-28 20:35:30 +02:00
Willem Toorop
04e554086a
A configurable log function
...
Currently used only for DAEMON_DEBUG
2017-06-27 00:23:22 +02:00
Willem Toorop
7ea3beaa6a
Equip context with xml read trust anchors
2017-06-22 12:27:20 +02:00
Willem Toorop
e496d13777
Start with getting files from user area
2017-06-20 15:38:32 +02:00
Willem Toorop
5d12545391
Bugfix in handling UDP backing off
2017-03-22 10:52:55 +01:00
wtoorop
52e3d2e1b0
Merge pull request #265 from saradickinson/feature/new_settings
...
Feature/new settings
2017-03-20 22:25:52 +01:00
Willem Toorop
ed0d4d044c
Merge remote-tracking branch 'upstream/develop' into features/mdns-client
2017-03-20 16:42:24 +01:00
Sara Dickinson
6f7bad5d73
Add new configuration parameters for TLS back off time and connection retries
2017-03-17 17:26:18 +00:00
Sara Dickinson
1d4e3dd790
Update the name of the new option to 'round_robin_upstreams'
2017-03-17 16:53:03 +00:00
Sara Dickinson
f0f3c43552
- Add a new mode where for TLS (and infact TCP too) the upstream selection simply cycles over all the upstreams rather than treating them as an ordered list and always using the first open one.
...
- Make IP field in debug output fixed width
- Collect all the one line config options at the top of the stubby.conf file to make it easier to read
2017-03-16 14:51:46 +00:00
Willem Toorop
5ea181172a
Reschedule pending netreqs
2017-03-15 15:16:42 +01:00
Willem Toorop
14c9f3aafc
Track netreqs "in flight"
2017-03-14 17:17:56 +01:00
Willem Toorop
79ce0cff85
Make mdns compile on Linux
2017-03-09 14:36:20 +01:00
Willem Toorop
de1ab4c8a4
Merge branch 'develop' into huitema-develop
2017-03-06 16:07:12 +01:00
Willem Toorop
74b1f77357
Cancel get validation chain getdns_dns_reqs
...
And miscellaneous little other scheduling fixes and optimizations
2017-02-18 13:16:25 +01:00
Christian Huitema
6d3e0c7ca2
Rewrote the continuous query organization to use the LRU cache instead of an RB tree.
2017-02-14 11:30:29 -10:00
Christian Huitema
1587e2f8f5
Code to manage the MDNS cache using LRUHASH
2017-02-13 18:28:46 -10:00
Christian Huitema
93d6f2b18f
Intermediate commit, after definition of the MDNS context
2017-02-06 18:23:35 -10:00
Christian Huitema
83ec9b74e9
Merge branch 'develop' of https://github.com/huitema/getdns into develop
...
Conflicts:
src/jsmn
2017-01-20 19:57:11 -08:00
Christian Huitema
31eee9c7d1
Intermediate commit of context.h, mdns.[ch]
2017-01-20 19:44:05 -08:00
Willem Toorop
2281accd38
Extra fixes for pedantic warnings
2016-12-08 16:36:23 +01:00
Willem Toorop
f31b2fa233
Merge branch 'develop' into release/1.1.0-alpha3
2016-12-08 15:06:25 +01:00
Willem Toorop
473da8966b
Library fixed for CFLAGS=-Wextra
2016-12-08 14:05:58 +01:00
Sara Dickinson
576e38977f
More logging changes to stubby to correctly report profile, transport and stats for TCP and UDP when used as fallbacks.
...
Reporting UDP stats every 100 responses or timeouts to give user some indication UDP is being used.
2016-12-05 18:05:04 +00:00
Sara Dickinson
a0ae9130cc
Fix issue with session re-use making authentication appear to fail
2016-10-21 14:18:24 +01:00
Sara Dickinson
fdbefa17ec
Add timer for back off on upstream (use 1 hr). Reset as new upstream when re-instated.
2016-08-05 17:25:27 +01:00
Sara Dickinson
a1461d51ec
Add abbreviated logging mode for daemon
2016-08-05 14:10:55 +01:00
Sara Dickinson
0432fe37c4
Tinker with upstream keepalive
2016-08-04 16:10:23 +01:00
wtoorop
79f92cedd2
Merge pull request #197 from saradickinson/feature/upstream_handling
...
Feature/upstream handling
2016-07-14 10:58:32 +02:00
Willem Toorop
be97bd1d71
Mv getdns_context_set_listen_addresses in the lib
...
Also, check for request_id +
cancel a reply by specifying NULL as response to getdns_reply
2016-07-13 14:50:44 +02:00
Willem Toorop
d0f01b6bc4
Default values for extensions in context
2016-07-07 14:47:38 +02:00
Sara Dickinson
8fa84c836a
Initial re-work of stateful transport selection and timeout/error handling. Also update transport test to avoid timeout.
2016-07-04 17:02:14 +01:00
Sara Dickinson
98d636b99d
Updates to unit tests and tpkg
2016-05-16 17:56:48 +01:00
Sara Dickinson
5f225d6be3
Add TLS session resumption
2016-05-16 17:41:55 +01:00
Willem Toorop
da577a463d
set upstream loop to the sync loop for sync reqs
...
And reset to the async loop when sync request was finished, rescheduling the upstream->event.
Note that finished_event is scheduled against the async loop always.
2016-04-11 14:49:44 +02:00
Willem Toorop
b0ecda5d2e
No more side effects with synchronous calls
...
(and upstreams that keep connections open)
2016-03-23 22:13:31 +01:00
Willem Toorop
ab742b34b6
Miscelaneous scheduling fixes and improvements
2016-03-17 16:49:05 +01:00
Willem Toorop
d938c433ab
Set root servers without temporary file
2016-03-14 11:33:06 +01:00
Willem Toorop
a83c54387d
Reuse sync eventloop per context
...
So recursive resolution can depend on and continue with outstanding queries it depends on
2016-03-09 11:16:19 +01:00
Willem Toorop
4230961e9f
Basic usage of unbound pluggable event loop
2016-03-01 16:29:37 +01:00
Willem Toorop
ae2b16665b
Setup getdns eventloop in libunbound
...
When unbound supports this
2016-01-19 16:52:11 +01:00
Willem Toorop
4fd8d3dddd
Replace mini_event extension by default_eventloop
...
* default_eventloop was prototyped in getdns_query and is still in there as my_eventloop
* It interfaces directly with the scheduling primitives of getdns.
* It can operate entirely from stack and does not have to do
any memory allocations or deallocations.
* Adapted configure.ac to allow libunbound to be linked with Windows
(with the removal of winsock_event.c we have no symbol clashed anymore)
* Added STUB_TCP_WOULDBLOCK return code in stub_resolving helper functions,
to anticipate dealing with edge triggered event loops (versus level triggered). (i.e. Windows)
2016-01-12 15:52:14 +01:00
Willem Toorop
89b6c04d4f
First query append
2015-12-29 17:34:14 +01:00
Willem Toorop
54498cd556
Distinct between suffix and suffixes more clearly
2015-12-29 16:23:04 +01:00
Willem Toorop
5a388386b4
Store suffixes in wireformat
2015-12-29 16:00:15 +01:00
saradickinson
b777552f34
Merge pull request #131 from saradickinson/feature/pubkey-pinning
...
Feature/pubkey pinning
2015-12-24 10:13:53 +00:00
Willem Toorop
8bde787703
Use mkstemp instead of tmpnam to eliminate warning
2015-12-24 10:50:58 +01:00
Daniel Kahn Gillmor
d09675539e
Provide access to the pinsets during the TLS verification callback
...
We do this by associating a getdns_upstream object with the SSL object
handled by that upstream.
This allows us to collapse the verification callback code to a single
function.
Note that if we've agreed that fallback is ok, we are now willing to
accept *any* cert verification error, not just HOSTNAME_MISMATCH.
This is fine, because the alternative is falling back to cleartext,
which would be worse.
We also always set SSL_VERIFY_PEER, since we might as well try to do
so; we'll drop the verification error ourselves if we know we're OK
with falling back.
2015-12-23 18:00:43 +00:00