Willem Toorop
9ecd3fde1c
Privacy aware DNS Cookies
...
Track source IP address in an efficient manner to make sure the same cookie will not be sent from different source IP addresses.
2020-04-09 16:24:34 +02:00
Willem Toorop
de13a0c32d
Better retry on badcookie flooding prevention
2020-04-08 19:16:51 +02:00
Willem Toorop
8b62970e0c
Response to BADCOOKIE extended rcode
2020-04-08 16:08:56 +02:00
Willem Toorop
3c6756d68b
Issue #466 : Memory leak with retrying queries
...
(for examples with search paths).
Thanks doublez13.
2020-03-13 22:31:01 +01:00
Jim Hague
3fe0c94357
Merge branch 'develop' into feature/abstract-tls
2019-01-14 19:09:20 +00:00
Willem Toorop
c80aa72725
ED25519 & ED448 support
2018-12-03 15:35:03 +01:00
Willem Toorop
c1f51815ba
RFE #408 : "dnssec" extension requiring DNSSEC
...
When this extension is set, GETDNS_DNSSEC_INDETERMINATE status will no
longer be returned.
2018-11-30 14:20:12 +01:00
Willem Toorop
e3b007a43a
Issue #410 : Document ownership with getdns_context_get_api_information()
...
+ const for extensions and namespaces
TODO: Look at other cases that are not const for no good reason.
Thanks Stefan Bühler
2018-11-27 16:59:47 +01:00
Jim Hague
af962228fc
Abstract maximum digest length.
2018-11-27 15:31:05 +00:00
Jim Hague
5e390a4b23
Revise all TLS interfaces to pass in GetDNS memory functions where necessary.
...
This means we can remove OpenSSL_free() calls from request-internal.c and util-internal.c.
2018-11-27 14:41:46 +00:00
Jim Hague
bc3106af94
Abstract out HMAC functions in request-internal.c.
2018-11-27 11:49:12 +00:00
Willem Toorop
fd5e0cdc02
Merge branch 'bugfix/388-endless-fallback-loop' into release/1.4.1
2018-03-05 11:52:36 +01:00
Willem Toorop
0ff1839a6f
Upstream reset on searchpath retry
2018-03-02 23:31:33 +01:00
Willem Toorop
b178f94505
Don't retry an already tried upstream
2018-03-02 15:56:00 +01:00
Daniel Kahn Gillmor
9301f8970c
Fix minor spelling and formatting.
...
These issues were found with the codespell tool.
2018-02-23 14:12:11 -08:00
Jim Hague
0291e205fd
Add TLS 1.3 test.
...
Add a new item tls_version to call_reporting, containing the OpenSSL version string for the name of the protocol used for the connection.
The test does a normal lookup, but first sets the cipher list to TLS1.3 only ciphers. This will cause a Bad Context error at search time, so we can tell if the underlying OpenSSL library lacks TLS 1.3. The check the call reporting for a TLS version of "TLSv1.3".
2018-01-19 15:56:40 +00:00
Willem Toorop
a63e5edb86
trust-anchor meta queries need to be done opportunistic too
...
In anticipation of DANE authenticated upstreams
2017-12-13 12:58:24 +01:00
Willem Toorop
362d168380
no_dnssec_checking_disabled extension for internal use only
2017-12-13 12:36:02 +01:00
Willem Toorop
2a39b6e2e8
Handle the uninitialized memory error the brutal way
...
Because clang (or valgrind with clang) is just wrong here
2017-11-28 16:51:28 +01:00
Willem Toorop
f83c8e217e
Decrease assumptions based on network_by_query_id
2017-10-17 13:47:29 +02:00
Willem Toorop
23daf9aac3
Fix TLS authentication
2017-09-28 22:17:36 +02:00
Willem Toorop
f0f2afbca7
Fetch TA before resolve for full recursion too
2017-09-20 12:40:59 +02:00
Willem Toorop
fb267938c3
Start with fetching root-anchors remotely
...
Also lays the foundation for looking up upstreams by name and DANE authentication of upstreams.
2017-06-28 20:35:30 +02:00
Willem Toorop
9a273cf144
Get rid of superfluous struct member query_id
2017-06-15 21:24:40 +02:00
Willem Toorop
e08d3592a0
Schedule timeout when collecting for dnssec chain
2017-04-06 11:20:08 +02:00
Willem Toorop
6316c558bc
typo
2017-03-25 21:45:08 +01:00
Willem Toorop
3eb6ebf5e4
Fix memory leak
2017-03-25 21:33:30 +01:00
Willem Toorop
a2efd8f6c1
Report peer certificate in call_reporting
2017-03-25 19:36:20 +01:00
Willem Toorop
24abf43de1
Fit mdns code with pending dns netreqs on EMFILE
2017-03-20 21:33:19 +01:00
Willem Toorop
5ea181172a
Reschedule pending netreqs
2017-03-15 15:16:42 +01:00
Willem Toorop
14c9f3aafc
Track netreqs "in flight"
2017-03-14 17:17:56 +01:00
Willem Toorop
639239f45c
Schedule dnsreqs with absolute timeout/expiry time
2017-03-13 14:20:47 +01:00
Willem Toorop
74b1f77357
Cancel get validation chain getdns_dns_reqs
...
And miscellaneous little other scheduling fixes and optimizations
2017-02-18 13:16:25 +01:00
Willem Toorop
6ed3d77523
Cancel child validation chain dns_reqs on ...
...
parent dns_req cancelation.
2017-02-17 23:35:50 +01:00
Willem Toorop
445470d831
Rename a gldns function
2017-02-16 10:32:17 +01:00
Willem Toorop
2b9987014d
Special _vfixed gbuffer property
...
For snprintf style buffers which position can go beyond capacity
2017-02-08 13:51:25 +01:00
Willem Toorop
f1c44dc15c
Merge branch 'develop' into devel/1.1.0
2017-01-18 14:40:32 +01:00
Willem Toorop
80219a4195
Merge branch 'bugfix/replace__FUNCTION__' into bugfix/1.1.0-alpha3/replace__FUNCTION__
2016-12-12 14:20:31 +01:00
Willem Toorop
5f6b93f7f2
Use __func__ var when supported
...
And let debugging messages compile with -Wpedantic -Werror too
2016-12-12 13:55:10 +01:00
Willem Toorop
37cced78fc
Merge branch 'develop' into release/1.1.0-alpha3
2016-12-09 13:27:55 +01:00
Willem Toorop
5cc67ff554
Merge branch 'develop' into merge-develops
2016-12-09 12:05:42 +01:00
Willem Toorop
26db6202a5
-Werror fixes for clang
2016-12-08 23:15:56 +01:00
Christian Huitema
26eaf255c5
Fixing the bulk of the compilation warnings in the GetDNS code
2016-12-08 12:37:35 -08:00
Willem Toorop
c2bcd1ca72
Line up OPT rdata names with add_opt_parameters
2016-11-12 14:31:27 +09:00
wtoorop
79f92cedd2
Merge pull request #197 from saradickinson/feature/upstream_handling
...
Feature/upstream handling
2016-07-14 10:58:32 +02:00
Willem Toorop
69b607176c
Move getdns_context_config into the library
2016-07-11 20:42:50 +02:00
Willem Toorop
d0f01b6bc4
Default values for extensions in context
2016-07-07 14:47:38 +02:00
Sara Dickinson
8fa84c836a
Initial re-work of stateful transport selection and timeout/error handling. Also update transport test to avoid timeout.
2016-07-04 17:02:14 +01:00
Willem Toorop
490aac1b48
Merge branch 'develop' into features/getdns_service
2016-06-08 10:21:29 +02:00
Willem Toorop
cf675a9284
Add srv_addresses when query was for SRV
...
Moved _getdns_rrset iterators to rr-iter.[ch] in the process
2016-06-07 16:52:10 +02:00