Willem Toorop
37cced78fc
Merge branch 'develop' into release/1.1.0-alpha3
2016-12-09 13:27:55 +01:00
Willem Toorop
4345905a81
Address things that came out of VS static analysis
...
Except for the stack usage cases
2016-12-09 12:57:47 +01:00
Willem Toorop
3428412629
Some more minor merge fixes
2016-12-09 12:13:36 +01:00
Willem Toorop
5cc67ff554
Merge branch 'develop' into merge-develops
2016-12-09 12:05:42 +01:00
Willem Toorop
1a26b884ee
Check for -W* support before use
2016-12-09 00:16:24 +01:00
Willem Toorop
86341fea08
-Wpedantic -Werror via XTRA_CFLAGS and make
2016-12-08 23:41:49 +01:00
Willem Toorop
6e9b1b5f53
One more unused when no TCP_FASTOPEN
2016-12-08 23:25:53 +01:00
Willem Toorop
26db6202a5
-Werror fixes for clang
2016-12-08 23:15:56 +01:00
Willem Toorop
8de9976a2b
Some more unused variables in stub only mode
2016-12-08 22:56:02 +01:00
Willem Toorop
eeca7b32b1
One more unused variable
2016-12-08 22:46:53 +01:00
Willem Toorop
55cdd8fed3
Fix pedantic warnings in unit tests
2016-12-08 22:33:10 +01:00
Christian Huitema
26eaf255c5
Fixing the bulk of the compilation warnings in the GetDNS code
2016-12-08 12:37:35 -08:00
Willem Toorop
2281accd38
Extra fixes for pedantic warnings
2016-12-08 16:36:23 +01:00
Willem Toorop
9d48c47980
Merge branch 'develop' into release/1.1.0-alpha3
2016-12-08 16:31:47 +01:00
Willem Toorop
fbb4eb717a
Unit tests fail on pedantic warnings
2016-12-08 16:28:21 +01:00
Willem Toorop
39f854d2b3
Fixes for pedantic warnings
2016-12-08 16:27:43 +01:00
Willem Toorop
8f75e4ed8d
Few more things to work with CFLAGS=-Wextra
2016-12-08 15:17:27 +01:00
Willem Toorop
f31b2fa233
Merge branch 'develop' into release/1.1.0-alpha3
2016-12-08 15:06:25 +01:00
Willem Toorop
743e04bfd6
Replace ((uint64_t)-1) with TIMEOUT_FOREVER
2016-12-08 14:44:24 +01:00
Willem Toorop
3629d558cd
getdns_query fixes for CFLAGS=-Wextra
2016-12-08 14:40:06 +01:00
Willem Toorop
a5748be5fb
Unit test fixes for CFLAGS=-Wextra
2016-12-08 14:39:38 +01:00
Willem Toorop
473da8966b
Library fixed for CFLAGS=-Wextra
2016-12-08 14:05:58 +01:00
Willem Toorop
21303fa40a
Sync gldns with unbound's sldns
2016-12-08 11:07:37 +01:00
Christian Huitema
50b064a292
Fixing potential clipping of idle_timeout value in call to upstream_reschedule_events
2016-12-07 15:40:24 -08:00
huitema
702fe1f5d9
Update default_eventloop.c
2016-12-06 12:32:44 -08:00
Sara Dickinson
691d32cf80
Improve README entry on stubby. Add a link to dnsprivacy.org (Willem - is this set up yet?)
...
Add sample Strict config file into the source with a pointer from the README. Not sure about installing this yet as opportunistic seems a better default...?
2016-12-06 15:59:40 +00:00
Sara Dickinson
471e8725e2
Change the default profile for Stubby to use TLS then UDP/TCP
...
- this will only try over TLS a few times before backing off to clear text
- but makes the default for Stubby opportunistic privacy (Willem - WDYT?)
Also use padding and ECS privacy by default for Stubby.
More debugging to help users when there are failures or fallbacks.
Also remove a few help options from Stubby that don't apply
Add -v to output version on getdns_query/stubby
2016-12-06 14:44:40 +00:00
Christian Huitema
dee33f53b6
Reminder of changes required by the Windows port. This solves the issues 228, 229, 230 and 232.
2016-12-05 11:38:59 -08:00
Sara Dickinson
576e38977f
More logging changes to stubby to correctly report profile, transport and stats for TCP and UDP when used as fallbacks.
...
Reporting UDP stats every 100 responses or timeouts to give user some indication UDP is being used.
2016-12-05 18:05:04 +00:00
Christian Huitema
0d13ae6d72
Fixing several issues in function set_os_defaults_windows that prevent working on Windows.
2016-12-04 17:26:38 -08:00
Sara Dickinson
1ba2e5bf4d
Add stubby to readme.
...
Add transport to stubby log.
2016-11-20 11:19:08 +00:00
Sara Dickinson
b0e5f87984
Minor logging updates
2016-11-13 13:14:03 +09:00
Daniel Kahn Gillmor
73165b235f
Allow public key pins higher in the chain than the EE cert
...
This resolves an old TODO; we'd never tested pinning any certs higher
than the end-entity cert before.
2016-11-12 16:53:21 +09:00
Sara Dickinson
1593129b85
Fix mishandling of auth state for name mismatch
2016-11-09 16:41:40 +00:00
Neil Cook
b857e3d7f1
call SSL_library_init() just once and lock with mutexes
2016-11-08 11:51:27 +00:00
Willem Toorop
57e2a18f94
Minor fixes to make it compile on Windows again
2016-11-03 15:35:53 +01:00
Willem Toorop
4bf93de12b
More conventional function prototypes for servers
2016-11-02 13:40:02 +01:00
Willem Toorop
bc9ebd5ae2
RFC3986 IPv6 address/port parsing for str2dict
...
Resolves issue #215 , but does not deal with RFC3986 formatted IPv6 addresses in config files yet.
2016-10-31 13:47:22 +01:00
Willem Toorop
6e5b62c555
Allow conventional IPv6 address/port parsing
...
from getdns_query
2016-10-31 13:36:05 +01:00
Willem Toorop
6fe4b5a6d9
Merge remote-tracking branch 'upstream/develop' into develop
2016-10-31 11:24:06 +01:00
Willem Toorop
c0f20a9023
Merge branch 'develop' into release/1.1.0-alpha3
2016-10-31 11:12:26 +01:00
Willem Toorop
72788cb172
OpenSSL 1.1.0 version of CRYPTO_w_lock in pinning
...
Thanks volkommenheit
2016-10-31 11:04:36 +01:00
Willem Toorop
bb3d741f7a
OpenSSL 1.1 support
2016-10-31 10:24:07 +01:00
Willem Toorop
2b682bc3a9
Merge remote-tracking branch 'upstream/develop' into release/1.1.0-alpha3
2016-10-27 16:17:44 +02:00
wtoorop
45643b6da5
Merge pull request #213 from neilcook/arc4locks
...
pthread-based locking for arc4random
2016-10-27 15:55:38 +02:00
Neil Cook
393b24fe89
pthread-based locking for arc4random
2016-10-26 14:32:35 +00:00
Willem Toorop
4ea4f68467
Get_suffix, no '\0' in returned strings
...
Resolves issue #203
2016-10-26 15:29:07 +02:00
Sara Dickinson
a0ae9130cc
Fix issue with session re-use making authentication appear to fail
2016-10-21 14:18:24 +01:00
Willem Toorop
bc70b29416
Stubby release
2016-10-19 07:30:31 -05:00
Willem Toorop
732844eeaa
Correct default config
2016-10-16 09:46:02 -05:00
Willem Toorop
05fb6edfcb
Linking to allow running stubby from src/tools
2016-10-16 05:39:04 -05:00
Willem Toorop
838375fe66
Run stubby in foreground by default
2016-10-16 05:32:05 -05:00
Willem Toorop
ec04dc21ee
Stubby defaults in help text
2016-10-14 10:14:38 -05:00
Willem Toorop
3d356bd35e
Stubby runs in background by default
2016-10-14 09:51:17 -05:00
Willem Toorop
58b5ead67a
Make stubby act as stubby
2016-10-14 08:24:25 -05:00
Willem Toorop
3f965e68c0
Stubby is getdns_query with a different name
2016-10-14 12:02:23 +02:00
Willem Toorop
47e718eeb8
OpenSSL 1.1 support
2016-10-13 23:04:50 +02:00
Willem Toorop
c84ff93e4f
Anticipate Mac OS X glibtoolize
2016-08-25 12:40:02 +02:00
Sara Dickinson
f156f2f24a
Had to change some preprocessor checks to get all the options to compile
2016-08-08 17:07:46 +01:00
Sara Dickinson
6f9bfffe9f
Catch another error path for failed connections
2016-08-08 16:12:33 +01:00
Sara Dickinson
fdbefa17ec
Add timer for back off on upstream (use 1 hr). Reset as new upstream when re-instated.
2016-08-05 17:25:27 +01:00
Sara Dickinson
a1461d51ec
Add abbreviated logging mode for daemon
2016-08-05 14:10:55 +01:00
Sara Dickinson
0432fe37c4
Tinker with upstream keepalive
2016-08-04 16:10:23 +01:00
Willem Toorop
a7e5f65f65
Merge branch 'develop' into release/v1.1.0a1
2016-07-21 11:35:03 +02:00
Jerry Lundström
8c54142790
Use type and not struct
2016-07-17 11:44:34 +02:00
Willem Toorop
903605570b
Doxygen documentation of the new prototypes
2016-07-14 17:57:17 +02:00
Willem Toorop
94292f5bc7
Merge branch 'release/v1.0.0b2' into release/v1.1.0a1
2016-07-14 16:22:53 +02:00
Willem Toorop
f685a0c8b8
Unsigned expression >= 0 is always true
2016-07-14 16:18:50 +02:00
Willem Toorop
0736453bed
Doxygen fixes
2016-07-14 15:53:53 +02:00
Willem Toorop
255cc9ab36
First bit of set_from_os loads OS defaults
2016-07-14 15:42:49 +02:00
Willem Toorop
e857f680ce
Dependencies (but this time good)
2016-07-14 15:05:46 +02:00
Willem Toorop
0340b74604
Dependencies
2016-07-14 15:04:19 +02:00
Willem Toorop
8b31ad5df1
Logic error
2016-07-14 15:03:47 +02:00
Willem Toorop
80ea8637d1
Recover src/tools
2016-07-14 14:50:26 +02:00
Willem Toorop
ebba1d4cce
Merge branch 'release/v1.0.0b2' into release/v1.1.0a1
2016-07-14 14:45:16 +02:00
Willem Toorop
99d8672bee
Fix few possible NULL dereference issues
2016-07-14 14:24:32 +02:00
Willem Toorop
689fc02fd2
Allow errors while setting up listeners
2016-07-14 14:14:15 +02:00
Willem Toorop
bae426a0e2
Unread assignment
2016-07-14 14:09:08 +02:00
Willem Toorop
906a8d68c2
fix for converting empty lists and dicts
2016-07-14 14:06:00 +02:00
Willem Toorop
ea69d31dba
move getdns_query to src/tools
2016-07-14 13:54:58 +02:00
Willem Toorop
af70671641
parentheses around comparison in operand of ‘&’
2016-07-14 13:46:12 +02:00
Willem Toorop
b4e7a82e11
EDNS0 padding is RFC
2016-07-14 13:40:49 +02:00
Willem Toorop
74b57d4679
Resync utils with unbound source
2016-07-14 13:33:11 +02:00
Willem Toorop
470fb7a5fb
!0 is not necessarily 1
2016-07-14 11:42:21 +02:00
Willem Toorop
fed4818c27
Fix idle_timeout without keepalive for TLS
2016-07-14 11:03:33 +02:00
wtoorop
79f92cedd2
Merge pull request #197 from saradickinson/feature/upstream_handling
...
Feature/upstream handling
2016-07-14 10:58:32 +02:00
Sara Dickinson
6c73144b50
Minor logging updates
2016-07-13 17:39:26 +01:00
Willem Toorop
504cb8a783
Merge branch 'develop' into release/v1.1.0a1
2016-07-13 15:55:17 +02:00
Willem Toorop
b26d69384f
Merge branch 'develop' into release/v1.0.0b2
2016-07-13 15:52:14 +02:00
Willem Toorop
31f1375b8e
Merge branch 'release/v1.0.0b2' into release/v1.1.0a1
2016-07-13 15:30:28 +02:00
Willem Toorop
9f7ceeded3
Don't SSL_library_init() on every context create
...
It will not be called when the second bit from the set_from_os parameter is set.
This deals with issue #117
2016-07-13 15:28:08 +02:00
Willem Toorop
be97bd1d71
Mv getdns_context_set_listen_addresses in the lib
...
Also, check for request_id +
cancel a reply by specifying NULL as response to getdns_reply
2016-07-13 14:50:44 +02:00
Willem Toorop
69b607176c
Move getdns_context_config into the library
2016-07-11 20:42:50 +02:00
Willem Toorop
7cbbad67aa
Merge branch 'release/v1.0.0b2' into release/v1.1.0a1
2016-07-11 16:06:52 +02:00
Willem Toorop
a523838cc6
set_listen_addresses does not change listen_list
2016-07-11 16:05:05 +02:00
Willem Toorop
b98d91f745
Daemon edns0 handling bugfix
2016-07-11 15:43:42 +02:00
Willem Toorop
7e614bc534
More conventional server DNSSEC behaviour
...
+ documentation of behaviour
2016-07-11 15:13:40 +02:00
Willem Toorop
d0f01b6bc4
Default values for extensions in context
2016-07-07 14:47:38 +02:00
Sara Dickinson
105d7acfa9
Just re-read RFC7858 and realised that TLS does support idle connections without keepalive. It is just TCP that doesn't.
2016-07-04 17:02:18 +01:00
Sara Dickinson
5e1575dabc
Correct the logic for upstream back off
2016-07-04 17:02:18 +01:00