wtoorop
802c693ee5
Merge pull request #97 from saradickinson/features/async_tls
...
Features/async tls
Thank you Sara!
2015-05-12 17:05:10 +02:00
saradickinson
3ac5e660f9
Address few minor bugs pointed out by willem
2015-05-11 22:01:31 +02:00
Willem Toorop
01d4275336
Run once with libevent!
2015-05-08 13:12:06 +02:00
Sara Dickinson
9a7bfdd45b
Add trivial stub_debug functions.
2015-05-03 15:39:21 +01:00
Sara Dickinson
9d967317d3
Improve the timeout handling for TLS.
2015-05-03 15:11:46 +01:00
Sara Dickinson
01adce8299
Organise code in stub.c and add some utility methods.
2015-05-02 18:08:45 +01:00
Sara Dickinson
d6d83b219d
Make sure UDP only uses 1 upstream per IP address. Fix a couple of other bugs.
2015-04-30 19:07:49 +01:00
Sara Dickinson
450a3bc6ff
Fix STARTTLS fallback.
2015-04-30 14:52:16 +01:00
Sara Dickinson
7905eda8b7
Some clean up of connection handling. Still a problem with STARTTLS fallback that needs fixing.
2015-04-30 12:24:13 +01:00
Sara Dickinson
79b3412fbf
Add another transport option as proof of concept for STARTTLS.
2015-04-29 19:20:25 +01:00
Sara Dickinson
b533bc59c5
Fix bug when fallback not available
2015-04-27 16:37:16 +01:00
Sara Dickinson
4e6e66fc77
Get sync messages working with new async code.
2015-04-27 15:32:57 +01:00
Sara Dickinson
3de15ad782
Change internal transport handling to use a list, not a fixed type
2015-04-24 16:29:08 +01:00
Sara Dickinson
f2ae55858f
First pass at making handshake async. Lots of issues with this code still
...
- timeouts are not being rescheduled on fallback
- several error cases are not being handled correctly (e.g. 8.8.8.8) and a user callback is not always called
- the fallback mechanism is not generic (specific to tls to tcp)
2015-04-23 17:46:31 +01:00
Willem Toorop
2a6fc74314
netinet/in.h and openssl/ssl.h from config.h
2015-04-18 22:30:56 +02:00
Willem Toorop
0ba6af3523
upstreams_cleanup from upstreams_dereference
2015-04-18 22:17:28 +02:00
Willem Toorop
84c5b67ee0
Re-enable printing of json with getdns_query
2015-04-18 09:53:50 +02:00
Willem Toorop
b26f09d1aa
autoreconf -if # For convenience...
2015-04-18 09:35:46 +02:00
Sara Dickinson
6c7ffc4e4e
1) Fix enum mapping error.
...
2) Also add detection of TLS 1.2 in openssl during configure and warn that it if not available then TLS will not be available. Using TLS_ONLY in stub mode will then error with BAD_CONTEXT. TLS/TCP will fallback to TCP.
3) Explicitly disallow use of TLS_ONLY in RECURSIVE mode since it isn't supported yet. TLS/TCP will fallback to TCP.
4) Fix for MAC OS X build where openssl not linked correctly
2015-04-17 18:38:13 +01:00
Sara Dickinson
ab4fb8d9e9
Enable GETDNS_TRANSPORT_TLS_ONLY_KEEP_CONNECTIONS_OPEN for libunbound. Should only be used in stub mode.
...
GETDNS_TRANSPORT_TLS_FIRST_AND_FALL_BACK_TO_TCP_KEEP_CONNECTIONS_OPEN still just does TCP.
Also some tidy up of new transport types.
2015-04-17 15:50:08 +01:00
Sara Dickinson
99c1973fae
Cleanup of TLS code
2015-04-16 18:05:51 +01:00
saradickinson
99aa79b48f
First pass at TLS implementation - needs work!
2015-04-16 18:05:27 +01:00
Willem Toorop
b163ad1870
Doxygen documentation for the new functions
2015-04-08 15:36:12 +02:00
Willem Toorop
830e0267b3
Fix ASSERT_RC macro with check_getdns
2015-04-03 00:15:32 +02:00
Willem Toorop
c63bbd1399
s/getdns_strerror/getdns_get_errorstr_by_id/g
...
In the unit tests make use of the newly exposed error string getter
2015-04-02 23:08:35 +02:00
Willem Toorop
87eb9307a7
A getter for context update callbacks
2015-04-02 22:01:30 +02:00
Willem Toorop
498dedbb8d
typo :(
2015-04-02 15:56:13 +02:00
Willem Toorop
a0aabc3543
getdns_get_errorstr_by_id replaces getdns_strerror
...
In the future maybe. Discuss on list.
2015-04-02 15:33:10 +02:00
Willem Toorop
56bb9dbbdc
Pass along a userarg with context update callbacks
2015-04-02 14:42:26 +02:00
Willem Toorop
18381e7753
Get rid of +sit option in getdns_query
2015-04-02 13:59:10 +02:00
Willem Toorop
eb7920a4a6
Issue #84 getdns_address modifies extensions param
2015-04-02 13:58:27 +02:00
Willem Toorop
c9a61bd91e
Query for AAAA first with getdns_address
...
They were already sent out simultaneously and then listened for, but A went out on the wire first. Now AAAA.
2015-04-02 13:32:00 +02:00
Willem Toorop
c0bc799c3e
Fix some C99 compat issues with FreeBSD
2015-03-26 17:03:55 -05:00
Willem Toorop
b5d6180506
enlarge timeouts for hostname_12 unit tests
2015-03-26 13:40:39 -05:00
Willem Toorop
3c816b0c86
Emberassing mistake (dont look)
2015-03-23 15:38:50 -05:00
Willem Toorop
526c3a3491
Fix stub validation key rollover issue
2015-03-22 15:41:55 -05:00
Willem Toorop
8b5b8519aa
Merge branch 'print_json' into release-0.1.7
2015-03-22 11:01:58 -05:00
Willem Toorop
19547536ac
arc4random in secret generation
2015-03-22 11:01:37 -05:00
Willem Toorop
d06d94a0c7
Merge branch 'arc4random' into release-0.1.7
...
Conflicts:
src/config.h.in
2015-03-22 10:55:03 -05:00
Willem Toorop
00f047816d
EDNS cookies processing as stub
2015-03-22 10:50:48 -05:00
Willem Toorop
4683208fd1
First go at using arc4random 4 random numbers
2015-03-21 04:41:25 -05:00
Willem Toorop
3aea9da626
edns_cookies extension
2015-03-20 21:37:54 +01:00
Willem Toorop
5da3bf1af2
Check for libcrypto (required with cookies)
2015-03-20 21:17:14 +01:00
Willem Toorop
e6462aa0e4
JSON output
2015-03-20 19:55:17 +01:00
Willem Toorop
3ca69266d1
getdns_query target
2015-03-20 18:25:21 +01:00
Willem Toorop
a5e8f22246
snprintf style fixed buffers
2015-03-20 18:19:06 +01:00
Willem Toorop
a53f50b530
Minor stub validation fixes and improvements
2015-03-19 10:55:34 +01:00
Willem Toorop
d2345285a6
dnssec_return_validation_chain with stub resolving
2015-03-18 23:45:26 +01:00
Willem Toorop
7fc18e8c35
Anticipate older libldns with travis
2015-03-18 21:43:41 +01:00
Willem Toorop
fa782d1043
--enable-broken-native-stub-dnssec
...
Still needs a little more work for wildcards and NODATA answers...
2015-03-18 14:45:06 +01:00