Sara Dickinson
f8c95b4f15
Update Stubby to fix Windows build issues
2023-01-09 16:50:12 +00:00
Sara Dickinson
ee534d10bf
Fix typo preventing Windows build when Pkgconfig not available
2023-01-09 16:40:19 +00:00
Willem Toorop
6395fe43cc
Fix #536 Broken trust anchor files are silently ignored
2023-01-02 16:03:59 +01:00
Willem Toorop
d98d307e64
New 1.7.3 release with quickfix 1.4.3 stubby release
2022-12-22 15:22:09 +01:00
Willem Toorop
c8df60e67d
Merge pull request #532 from GabrielGanne/cmake-required-version-fix
...
Increase CMake required version 3.5 -> 3.20
2022-12-22 15:18:56 +01:00
Gabriel Ganne
037892739f
Increase CMake required version 3.5 -> 3.20
...
Commit 777e0b245c
introduced cmake_path
which has been added to Cmake in 3.20 onlyi [1], so this should only make
the error message more explicit.
[1] https://cmake.org/cmake/help/git-master/command/cmake_path.html
2022-11-09 11:51:55 +01:00
Willem Toorop
9c076ca34b
Issue #526 Some gldns files need stdlib
2022-08-22 10:41:05 +02:00
Willem Toorop
3a71bd350e
getdns-1.7.2 quickfix stubby release
2022-08-19 20:00:36 +02:00
Willem Toorop
8aa19255b8
Leave out some tests that fail to be reviewed later on
2022-08-19 15:42:13 +02:00
Willem Toorop
7eaf8454a2
Okay, assert detection with check is broken (at least with me)
2022-08-19 15:08:46 +02:00
Willem Toorop
2e04e9f8b6
Why do these tests destroy the context from a callback?
2022-08-19 14:46:15 +02:00
Willem Toorop
a19177d41e
Bump version for release
2022-08-19 13:27:06 +02:00
Willem Toorop
a1451df680
Fix #512 update README.md to show correct pgp key location
2022-08-19 11:36:34 +02:00
Willem Toorop
777e0b245c
Fix #517 Allow Absolute paths in pkg-config
2022-08-19 11:29:45 +02:00
Willem Toorop
2d48a3bd1b
Fix Issue #524 merge upstream ssl_dane into submodule
2022-08-19 11:01:57 +02:00
Willem Toorop
9bb533ab57
Update stubby (and no release yet)
2022-08-12 18:56:03 +02:00
Willem Toorop
86bd62cb40
Merge pull request #523 from getdnsapi/gnu_tls_alpn
...
Add support for `dot` ALPN for GnuTLS
2022-08-12 15:27:59 +02:00
Sara Dickinson
adcdf20289
Add support for dot ALPN for GnuTLS
2022-08-12 12:45:15 +01:00
Willem Toorop
aca15088e5
Update stubby
2022-08-11 16:48:23 +02:00
Willem Toorop
1ea92a68ad
Set version to first release candidate
2022-08-11 16:24:42 +02:00
Willem Toorop
142f616693
ChangeLog entry for issue getdnsapi/stubby#295
2022-08-11 16:21:14 +02:00
Willem Toorop
6b65aed443
Fix getdnsapi/stubby#295 set default build type to RelWithDebInfo
...
And expose CFLAGS through GETDNS_BUILD_CFLAGS define and via getdns_context_get_api_information()
2022-08-11 16:15:30 +02:00
Willem Toorop
0cb72000f8
Avoid using old OpenSSL HMAC functions
2022-08-11 12:26:41 +02:00
Willem Toorop
1748ca4c29
First step in dealing with OpenSSL 3.0 warnings
2022-08-11 11:30:53 +02:00
Willem Toorop
b181782e0e
Update gldns
2022-08-11 11:30:34 +02:00
Willem Toorop
f97ee14b69
Merge branch 'madebr-cmake_pkgconfig' into develop
2022-08-10 16:10:38 +02:00
Willem Toorop
1a1e79603c
Merge branch 'cmake_pkgconfig' of github.com:madebr/getdns into madebr-cmake_pkgconfig
2022-08-10 16:10:13 +02:00
Willem Toorop
875c03176e
Log uzlonewolf contribution
2022-08-10 14:58:38 +02:00
uzlonewolf
2d7d8a4ea5
Tighten up _getdns_ipaddr_dict_mf() so it does not grab random strings beginning with '*'
2022-08-10 14:53:43 +02:00
Willem Toorop
8e2accfd74
Log fix from Shikha
2022-08-10 14:32:35 +02:00
Willem Toorop
861ae30725
Merge pull request #520 from SharmaShikha-84/master
...
Fix for issue in UDP stream selection in case of timeouts.
2022-08-10 14:31:18 +02:00
Willem Toorop
dc5026f2c8
Merge pull request #515 from thesamesam/develop
...
CMakeLists.txt: use CMAKE_INSTALL_MANDIR too
2022-08-09 17:02:36 +02:00
Willem Toorop
10a000b916
Merge pull request #518 from amialkow/develop
...
Fixed allowed offset range during name compression.
2022-08-09 17:00:13 +02:00
Willem Toorop
893d4720c9
Merge pull request #519 from getdnsapi/use_dot_alpn
...
Update Stubby to always send the `dot` ALPN when using DoT
2022-08-09 16:54:30 +02:00
Willem Toorop
2bbac1163b
Merge branch 'develop' into use_dot_alpn
2022-08-09 16:54:20 +02:00
Sara Dickinson
9d8eea97a5
Fix typo in cmake module for libidn2
2022-07-21 14:17:53 +01:00
Sara Dickinson
c0e45395b8
Merge pull request #522 from jpbion/fixlibidn2
...
Category: Strengthen LibIDN2 version determination during cmake run
2022-07-21 14:14:35 +01:00
Joel Bion
ed7bfa107e
Category: Strengthen LibIDN2 version determination during cmake run
2022-07-20 16:01:25 -07:00
Shikha Sharma
94dbb8e916
Update stub.c
...
Fix for issue mentioned below:
Scenario: 4 UDP steams corresponding to 4 IP's configured.
Outbound query is always sent to 1st IP in the list unless there is a timeout.
If there is a timeout, the next outbound query is sent to the 2nd IP in the list.
If the 1st IP still times out then the next 2n queries (this increases in powers of 2) go to the 2nd IP.
If the 2nd IP times out at any point, then queries are sent to the 3rd IP (following the same algorithm of 2n queries before reverting to the 2nd IP)
Observation: Even if there is no timeout on 2nd IP, some queries are still sent to 3rd IP.
From code: The stream is switched whenever there is a timeout. If 10 messages were sent to first IP and they all timeout , the stream is switched 10 times in the current code.
Suggestion: Switch stream only on the first timeout on a stream or ignore when the timeout occurs on a stream which is not the current_udp stream.
2022-06-13 17:06:55 +02:00
Sara Dickinson
a5a1256adc
Update Stubby to always send the `dot` ALPN when using DoT
2022-06-07 10:27:39 +01:00
Andrzej Mialkowski
190dbe1b91
Fixed allowed offset range during name compression.
2022-05-22 23:12:28 -07:00
Sam James
c50288f71e
CMakeLists.txt: use CMAKE_INSTALL_MANDIR too
...
Signed-off-by: Sam James <sam@gentoo.org>
2022-03-30 05:27:54 +01:00
Willem Toorop
c2e085ee9e
Merge pull request #509 from thesamesam/change-docdir-variable
...
CMakeLists.txt: use canonical GNUInstallDirs variable for docdir
2022-03-29 15:00:27 +02:00
Willem Toorop
01715688d7
Sync crypto funcs from Unbound
2022-02-04 16:32:54 +01:00
Willem Toorop
ecb9de2c29
Sync gldns from Unbound sldns
2022-02-04 15:24:21 +01:00
Willem Toorop
b86f8e904c
Vim leftover
2022-02-04 14:55:39 +01:00
Willem Toorop
45683d3cfe
Fix for getdnsapi/stubby#295
...
rdata not correctly written for validation for certain RR types
2022-01-11 00:09:44 +01:00
Sam James
822166d7ad
CMakeLists.txt: use canonical GNUInstallDirs variable for docdir
...
We use the GNUInstallDir variables for the rest of the build system
locations, so let's use CMAKE_INSTALL_DOCDIR too to allow customisation
downstream.
(In Gentoo, we set it to the exact package version including downstream-only
revisions.)
Signed-off-by: Sam James <sam@gentoo.org>
2021-06-09 23:57:40 +00:00
Willem Toorop
e4661f957e
getdns-1.7.0 release
...
-----BEGIN PGP SIGNATURE-----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=iTYQ
-----END PGP SIGNATURE-----
Merge tag 'v1.7.0'
getdns-1.7.0 release
2021-06-04 20:57:12 +02:00
Willem Toorop
1f2aa585fc
getdns-1.7.0 release
2021-06-04 20:53:14 +02:00
Willem Toorop
2a0114591a
Resolve compile warnings
...
Thanks Andreas!
2021-06-03 20:45:55 +02:00
Anonymous Maarten
de2137562d
cmake: find libuv pkgconfig non-QUIET
2021-05-28 23:03:44 +02:00
Anonymous Maarten
6eb1a6790a
cmake: don't call find_package_handle_standard_args when using pkg_config + cache variables
2021-05-28 16:03:30 +02:00
Anonymous Maarten
f92f97bf1e
Findlibidn module is not available
2021-05-28 14:15:40 +02:00
Anonymous Maarten
cf2b805ef7
Try FindPkgConfig to find modules before going manual
2021-05-28 14:15:40 +02:00
Jim Hague
6dfbfa5dc5
Add header-present guards to include of sys/time.h.
...
I'm not sure why this hasn't been hit before - it breaks the build on
Windows. I guess that another change has started dragging in this file
where it wasn't used before.
2021-05-28 00:05:20 +01:00
Jim Hague
686285ef59
Re-remove strings.h include.
...
Again, looks like another copied-from-elsewhere problem.
2021-05-28 00:04:11 +01:00
Jim Hague
ae854a8650
Re-add include guards to parseutil.c.
...
The lack of them breaks the build on Windows.
I suspect we may have another copied-from-elsewhere problem.
2021-05-27 22:24:17 +01:00
Willem Toorop
ca97810ed6
Merge branch 'release/v1.7.0' into develop
2021-05-27 22:34:55 +02:00
Willem Toorop
df4c7ce4f9
Mention event extension rename (back to old names) in ChangeLog
2021-05-27 22:23:16 +02:00
Willem Toorop
359a44d336
Merge branch 'release/v1.7.0' into develop
2021-05-27 22:21:43 +02:00
Willem Toorop
48a7700fa9
Update ChangeLog
2021-05-27 22:21:03 +02:00
Willem Toorop
2b348b046d
Merge branch 'amialkow-develop4' into release/v1.7.0
2021-05-27 22:08:05 +02:00
Willem Toorop
50463c7480
Merge branch 'develop4' of https://github.com/amialkow/getdns into amialkow-develop4
2021-05-27 21:56:38 +02:00
Willem Toorop
1012e34441
update of ldns
2021-05-27 21:23:16 +02:00
Willem Toorop
3f07247e64
Merge branch 'develop' into release/v1.7.0
2021-05-27 20:41:23 +02:00
Willem Toorop
86aa356b48
Release version 1.7.0 tomorrow
2021-05-27 20:39:26 +02:00
Jim Hague
fc62f8877c
When cross-compiling, assume strptime() is POSIX unless told otherwise.
...
But issue a warning when making that assumption. Add new option
FORCE_COMPAT_STRPTIME to force the use of the compat version
when cross-compiling and the target platform strptime() is not
POSIX-compliant. Poster children for the latter are BSD platforms,
including MacOS, where %t is not handled POSIXly.
Fix #472
2021-05-27 12:11:49 +01:00
Jim Hague
f9c3a359ed
Revise recent lookup3.c update to restore building on Windows.
...
As we're now building with CMake, and CMake can supply endianness, just insist on using that.
2021-05-27 09:45:30 +01:00
Willem Toorop
a694080400
First release candidate tomorrow
2021-05-27 09:59:15 +02:00
Willem Toorop
fe79e7e633
Bump version
2021-05-26 23:29:44 +02:00
Willem Toorop
61f9ab4351
All tests again
2021-05-26 23:17:44 +02:00
Willem Toorop
6c3f75f4e9
Test transports with OpenSSL
2021-05-26 23:16:02 +02:00
Willem Toorop
d055caff44
Test only transports
2021-05-26 23:02:30 +02:00
Willem Toorop
880189367a
Make tcp_send_timeout work with GnuTLS
2021-05-26 23:01:45 +02:00
Willem Toorop
ed9ac22c66
Update stubby to develop branch
2021-05-26 22:47:19 +02:00
Willem Toorop
189be4b5a5
Try to improve travis results with tcp_send_timeout
2021-05-26 22:37:55 +02:00
amialkow
bfdba6d9d7
Merge branch 'getdnsapi:develop' into develop4
2021-05-26 09:55:16 -07:00
Willem Toorop
75b750b3f9
Merge pull request #506 from amialkow/develop3
...
Fixes #504
2021-05-26 16:11:01 +02:00
Willem Toorop
6a722f5d79
Merge pull request #496 from banburybill/develop
...
Some Windows behaviour fixes.
2021-05-26 16:09:35 +02:00
Willem Toorop
eeb460af8d
Merge branch 'develop' of github.com:getdnsapi/getdns into develop
2021-05-26 16:06:30 +02:00
Willem Toorop
e030b2525d
Merge branch 'maciejsszmigiero-tcp-send-timeout' into develop
2021-05-26 16:05:27 +02:00
Willem Toorop
45ef080bad
Changelog entry for getdns_context_set_tcp_send_timeout() contribution
...
Thanks a lot @maciejsszmigiero , this looks really valueable!
2021-05-26 16:03:56 +02:00
Willem Toorop
624f688967
Honour the claim from documentation: When not set (the default), the system default is left alone.
2021-05-26 15:57:52 +02:00
Willem Toorop
515127289c
Merge branch 'tcp-send-timeout' of https://github.com/maciejsszmigiero/getdns into maciejsszmigiero-tcp-send-timeout
2021-05-26 15:56:55 +02:00
Willem Toorop
ae090a29b1
Merge pull request #482 from neheb/patch-1
...
val_secalgo: add missing DSA header
2021-05-26 15:48:10 +02:00
Willem Toorop
7b388a1576
ChangeLog update for issue #480
2021-05-26 15:45:53 +02:00
Willem Toorop
df2997d9b7
Eliminate compiler warnings in tests
2021-05-26 15:44:24 +02:00
Willem Toorop
1184f2b8ea
Update components from Unbound
2021-05-26 15:43:40 +02:00
Willem Toorop
55be327f69
Fix wrong extension names from merge
2021-05-26 15:42:35 +02:00
Willem Toorop
d934b4129f
Merge branch 'banburybill-feature/installdlls' into develop
2021-05-26 15:13:11 +02:00
Willem Toorop
3966459fdb
Merge branch 'feature/installdlls' of https://github.com/banburybill/getdns into banburybill-feature/installdlls
2021-05-26 15:12:59 +02:00
Willem Toorop
c1b6903e58
Merge pull request #472 from cohall-2020/develop
...
Skip check_c_source_runs when cross-compiling.
2021-05-26 11:21:43 +02:00
Willem Toorop
8abc3b62b8
Merge pull request #468 from renaudallard/develop
...
Added checks for LibreSSL and OpenBSD
2021-05-26 11:18:20 +02:00
Willem Toorop
63e4d1a1ef
Merge pull request #474 from banburybill/feature/blocking-select
...
Observe blocking flag in select run_once.
2021-05-26 11:17:20 +02:00
Andrzej Mialkowski
8b558afde0
Fixes #505 . Disable packet size checking.
2021-05-15 13:20:30 -07:00
Andrzej Mialkowski
7f606ea14f
Add missing rr types: SVCB and HTTPS
2021-05-15 12:32:58 -07:00
Andrzej Mialkowski
fa282a59ec
Add missing rr types: SVCB and HTTPS
2021-05-15 12:32:58 -07:00
Andrzej Mialkowski
7b12e21ad0
Implement name compression during response packet generation. Compression is required by certain clients like UDP to fit response in packet size limit. While generating packet small cache stores recently used names (currently 4 entries) and uses relative references to previous instances of the same name. Each reused instance is just two bytes of relative reference (0xC000 + offset). Cache is currently performing lookup for query name, responses and CNAMEs.
2021-05-09 14:45:16 -07:00
Willem Toorop
291e001881
Merge pull request #497 from har-riz/develop
...
Fix typo in cmakeconfig.h.in files
2021-01-27 13:40:26 +01:00
har-riz
0a13e4dbd3
Fix typo in cmakeconfig.h.in files
...
Fix typo in CMAKE included files, so Stubby can use TLS v1.3 with chipersuites options ON.
This solve issue that's written in here :
https://github.com/getdnsapi/stubby/issues/240
2021-01-27 18:29:22 +07:00
Jim Hague
42e4cfc383
Windowqs mkstemp: open() needs more permissions.
...
Specifically:
1. The open must be for read only or read/write - use read/write.
2. The file permission must permit read and write.
2020-12-12 21:16:46 +00:00
Jim Hague
6439b0407a
Add platform functions for reporting file errors.
...
Windows socket error numbers are not reported using errno, but with
WSAGetLastError(). _getdns_errnostr() and friends as implemented on
Windows don't work for errors resulting from file open/close/read/write
etc.
So add a parallel set of functions specifically for file errors.
2020-12-11 16:08:02 +00:00
Jim Hague
7fe308f718
Merge pull request #492 from fcelda/fix-lib-naming
...
Fix naming of extension libraries
2020-11-04 10:13:10 +00:00
Jim Hague
4440a24352
Merge pull request #489 from fcelda/fix-lib-exports
...
Fix exporting symbols for extension libraries
2020-11-04 10:04:43 +00:00
Willem Toorop
ebeff97192
Merge pull request #486 from elindsey/eli
...
only check for and process read/write events if status is success
2020-10-05 12:34:28 +02:00
Jan Vcelak
03fc32984e
build: fix naming of extension libraries
2020-10-05 12:23:27 +02:00
Jan Vcelak
6507e4c469
build: fix exporting symbols for extension libraries
2020-09-18 14:02:30 +02:00
Eli Lindsey
71521626d9
only check for and process read/write events if status is success
2020-09-10 10:59:12 -04:00
Rosen Penev
80cdfb3bd0
fix compilation without deprecated OpenSSL APIs
...
Several cmake header checks were missing and added.
Added rsa.h include.
Remove ENGINE_load_dynamic. ENGINE_load_builtin_engines already does
this.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-08-04 19:54:18 -07:00
Willem Toorop
bda845ce43
Issue #430 listeners reply returned wireformat
...
So that proxies based on `getdns_set_listen_addresses()` reply with compression from the original response.
2020-08-04 00:05:04 +02:00
Maciej S. Szmigiero
606a88f9aa
Add "tcp_send_timeout" option to set a TCP send data timeout
...
When using Stubby as a system DNS over TLS resolver with a Internet
connection that disconnects and reconnects from time to time there is often
a long waiting time (~20 minutes) after the connection reconnects before
DNS queries start to work again.
This is because in this particular case all the upstream TLS TCP
connections in Stubby are stuck waiting for upstream server response.
Which will never arrive since the host external IP address might have
changed and / or NAT router connection tracking entries for these TCP
connections might have been removed when the Internet connection
reconnected.
By default Linux tries to retransmit data on a TCP connection 15 times
before finally terminating it.
This takes 16 - 20 minutes, which is obviously a very long time to wait for
system DNS resolving to work again.
This is a real problem on weak mobile connections.
Thankfully, there is a "TCP_USER_TIMEOUT" per-socket option that allows
explicitly setting how long the network stack will wait in such cases.
Let's add a matching "tcp_send_timeout" option to getdns that allows
setting this option on outgoing TCP sockets.
For backward compatibility the code won't try to set it by default.
With this option set to, for example, 15 seconds Stubby recovers pretty
much instantly in such cases.
Signed-off-by: Maciej S. Szmigiero <mail@maciej.szmigiero.name>
2020-07-13 00:21:16 +02:00
Willem Toorop
fc4eb466b9
Merge pull request #478 from banburybill/feature/static-openssl
...
Add system libraries when checking OpenSSL functions.
2020-06-25 12:18:15 +02:00
Jim Hague
c9072b2526
Add system libraries when checking OpenSSL functions.
...
If OpenSSL is a static library, linking the test programs will require
system libraries.
2020-06-24 22:07:29 +01:00
Jim Hague
1c97459ec3
Install the DLLs when installing on Windows.
2020-06-24 14:36:30 +01:00
Willem Toorop
7c767b1a5f
Merge pull request #476 from elindsey/develop
...
register only a single poll_t with libuv
2020-06-19 10:24:17 +02:00
Eli Lindsey
2673a5736c
register only a single poll_t with libuv
...
Most of the time we only need a read _or_ a write callback registered
with libuv - for example, on a UDP request a write callback is
registered, when executed the write callback performs the write,
deregisters itself, and registers a read callback.
However there is one case where getdns registers both read and write
callbacks: when a backlog of TCP requests is going to the same upstream
resolver, we use a single fd and queue the requests. In this instance we
want to listen for both read (to get responses for requests we've
already sent) and write (to continue to send our pending requests).
libuv, like most event libraries, only allows one callback to be
registered per fd. To get notification for both reads and writes, you
should examine the event flags and have appropriate conditional logic
within the single callback. Today getdns incorrectly tries to register
two separate poll_t with libuv, one for read and one for write - this
results in a crash (internal libuv assertion guaranteeing that only a
single poll_t is registered per fd).
Testing was done by using flamethrower
(https://github.com/DNS-OARC/flamethrower ) to toss queries at a program
that embeds getdns.
Note that a higher qps trigger a _different_ getdns/libuv crashing bug
that occurs when the TCP backlog grows so large that requests start to
time out. That crash is not addressed in this PR, and will be more
involved to fix.
2020-06-18 17:31:34 -04:00
Jim Hague
8a95f3d279
Observe blocking flag in select run_once.
...
Currently run_once always blocks.
2020-06-12 10:49:47 +01:00
Willem Toorop
f020cca206
Merge pull request #473 from rogers0/PR/fix_cmake
...
Fix install path for cmake build since we use GNUInstallDirs
2020-05-27 17:42:24 +02:00
Roger Shimizu
7c6188c53d
Fix install path for cmake build since we use GNUInstallDirs
...
So we use install path below since cmake v3.0 [1]:
- CMAKE_INSTALL_LIBDIR
- CMAKE_INSTALL_INCLUDEDIR
[1] https://cmake.org/cmake/help/v3.0/module/GNUInstallDirs.html
2020-05-27 00:30:33 +09:00
cohall-2020
5e7bf99a5f
Merge pull request #1 from cohall-2020/cohall-2020-patch-CMakeList
...
Update CMakeLists.txt
2020-05-08 13:27:00 +02:00
Willem Toorop
5c79e2c731
Merge pull request #471 from getdnsapi/feature/privacy-aware-cookies
...
Privacy aware DNS Cookies
2020-05-01 11:13:00 +02:00
cohall-2020
320dd098a8
Update CMakeLists.txt
2020-04-28 23:56:40 +02:00
Willem Toorop
8bd87c490e
Fix of const-info.c
2020-04-14 20:58:36 +02:00
Willem Toorop
9ecd3fde1c
Privacy aware DNS Cookies
...
Track source IP address in an efficient manner to make sure the same cookie will not be sent from different source IP addresses.
2020-04-09 16:24:34 +02:00
Willem Toorop
de13a0c32d
Better retry on badcookie flooding prevention
2020-04-08 19:16:51 +02:00
Willem Toorop
8b62970e0c
Response to BADCOOKIE extended rcode
2020-04-08 16:08:56 +02:00
Willem Toorop
563b2b113a
Show dns_root_servers setting in API information
2020-03-27 10:11:26 +01:00
Renaud Allard
31031d7c57
Added checks for LibreSSL and OpenBSD
2020-03-24 14:14:39 +01:00
Willem Toorop
73cee29f55
Make TLS Handshake timeout max 4/5th of timeout
...
for the query, just like connection setup timeout was, so fallback transport have a chance too when TCP connection setup is less well detectable (as with TCP_FASTOPEN on MacOS).
2020-03-16 14:50:59 +01:00
Jim Hague
0b01ad8e6f
Merge branch 'develop' of https://github.com/getdnsapi/getdns into develop
2020-03-16 11:23:52 +00:00
Willem Toorop
3c6756d68b
Issue #466 : Memory leak with retrying queries
...
(for examples with search paths).
Thanks doublez13.
2020-03-13 22:31:01 +01:00
Jim Hague
3f9e0f9671
Merge branch 'my-develop' into develop
...
Update Stubby and add small GnuTLS version fixup to signature selection.
2020-03-12 16:17:08 +00:00
Jim Hague
be09306567
Update Stubby to pick up latest Stubby release tag and Windows packaging details.
2020-03-12 16:13:11 +00:00
Jim Hague
cd386cd917
Merge commit '26a95b5b8a213096641654c5b97976e66ec32e5d' into my-develop
...
# Conflicts:
# src/gnutls/tls.c
2020-03-12 15:51:22 +00:00
Willem Toorop
2c51db610a
Merge pull request #465 from banburybill/develop
...
Relax GnuTLS priority strings slightly to allow getdns to work with T…
2020-03-05 14:52:55 +01:00
Willem Toorop
26a95b5b8a
Fix DoT with GnuTLS >= 3.6
2020-03-05 14:46:32 +01:00
Jim Hague
0078977ada
Merge branch 'develop' into my-develop
2020-03-05 13:25:24 +00:00
Jim Hague
9baf655a7b
Relax GnuTLS priority strings slightly to allow getdns to work with TLS1.3 servers.
...
Now GnuTLS 3.6.5 and later are in the field, we've run into problems handshaking with TLS1.3 servers with a GnuTLS build. OpenSSL works fine. Comparing the client handshake of GnuTLS and OpenSSL, we found GnuTLS was being considerably more restrictive. This change loosens the restriction so GnuTLS presents nearly the same set of cipher and other options and OpenSSL. OpenSSL provides more signature algorithms. The change gets GetDNS working against Quad1, Quad8, Quad9 and the getdnsapi servers.
2020-03-05 13:24:44 +00:00
Willem Toorop
c234865a80
Print GnuTLS debug messages
2020-03-05 13:39:30 +01:00
Willem Toorop
6972c99268
Merge pull request #464 from banburybill/develop
...
Various small fixes
2020-03-05 10:14:28 +01:00
Jim Hague
252d68e67a
Update stubby.
2020-03-04 16:06:14 +00:00
Jim Hague
37e33bc7f5
Merge branch 'develop' into my-develop
2020-03-04 15:30:47 +00:00
Jim Hague
e96e334932
Point ssl_dane submodule back at getdnsapi version.
2020-03-04 15:30:26 +00:00
Jim Hague
55ffca15ce
Merge branch 'develop' into my-develop
2020-03-04 15:13:57 +00:00
Jim Hague
1328fac5ae
Merge commit 'ef455471f4f1db778e7bcc58818fc780a280c16d' into develop
2020-03-04 15:13:02 +00:00
Willem Toorop
ef455471f4
Work around dnsmasq issue
2020-03-04 10:57:11 +00:00
Jim Hague
f01e7188c8
CMake libunbound fixups.
...
1. ub_ctx_set_stub is in unbound.h, not unbound-events.h.
2. Only bother looking for unbound event API if enabled.
3. If building stub only, ensure all libunbound items are off. This is necessary in case we first configure without stub only, and then change to stub only.
Fixes #463
2020-03-04 09:45:52 +00:00
Jim Hague
65f7d96678
Merge branch 'develop' into my-develop
2020-03-03 17:29:52 +00:00
Jim Hague
822d8ad703
Revise recent lookup3.c update to restore building on Windows.
...
As we're now building with CMake, and CMake can supply endianness, just insist on using that.
2020-03-03 17:28:34 +00:00
Jim Hague
2e4070a3cd
Merge branch 'develop' into my-develop
2020-03-03 14:51:17 +00:00
Willem Toorop
689415971a
Run all tests again
2020-03-03 13:14:45 +00:00
Willem Toorop
e7d435e426
Name only authentication with GNUTLS
2020-03-03 13:04:27 +00:00
Willem Toorop
9c8b70e4bc
Eliminate compile error
2020-03-03 13:03:58 +00:00
Jim Hague
38627fbb01
Merge branch 'develop' into my-develop
2020-03-03 11:30:13 +00:00
Jim Hague
3073d33560
Update stubby.
2020-03-02 18:13:47 +00:00
Willem Toorop
af46e20721
Fix reporting authentication failure
2020-03-02 15:51:46 +00:00
Willem Toorop
e17ed3938c
Fix: mem leak with gnutls
2020-03-02 15:12:18 +00:00
Willem Toorop
1067326bd0
Merge branch 'develop' of github.com:getdnsapi/getdns into develop
2020-03-02 15:31:28 +01:00
Willem Toorop
f05c0ad754
Testing GNUTLS DoT tests
2020-03-02 15:30:58 +01:00
Willem Toorop
16c20fe04d
Merge pull request #462 from doublez13/develop
...
Fix uninitialized value in tls_create_object
2020-03-02 15:20:51 +01:00
Willem Toorop
f73bf0dfa5
Dependencies for travis (+ testing...)
2020-03-02 15:17:03 +01:00
Willem Toorop
3b5d1a9353
Stub only links with GNUTLS
...
And valgrind check includes DoT session
2020-03-02 15:12:33 +01:00
Willem Toorop
f3a38e9a40
Sync tools shared with unbound
2020-03-02 15:11:58 +01:00
Jim Hague
5721c501c3
Point stubby at my repo.
2020-03-02 13:41:12 +00:00
Zane Zakraisek
b804b8effb
Fix uninitialized value in tls_create_object
...
On the first call to tls_create_object (stub.c), tls_fallback_ok is read
before being initialized. This patch initializes tls_fallback_ok to 0 in
upsteam_init (context.c)
Valgrind complains about the uninitialized value:
==14774== Conditional jump or move depends on uninitialised value(s)
==14774== at 0x1528C3: tls_create_object (stub.c:900)
==14774== by 0x1556AD: upstream_connect (stub.c:2065)
==14774== by 0x15582E: upstream_find_for_transport (stub.c:2109)
==14774== by 0x1558B7: upstream_find_for_netreq (stub.c:2130)
==14774== by 0x156027: _getdns_submit_stub_request (stub.c:2296)
==14774== by 0x1421C8: _getdns_submit_netreq (general.c:478)
==14774== by 0x14261D: getdns_general_ns (general.c:636)
==14774== by 0x142905: _getdns_general_loop (general.c:731)
==14774== by 0x1432FB: getdns_general (general.c:888)
==14774== by 0x118B94: incoming_request_handler (stubby.c:692)
==14774== by 0x14F46B: udp_read_cb (server.c:762)
==14774== by 0x15C86B: poll_read_cb (poll_eventloop.c:295)
==14774== Uninitialised value was created by a heap allocation
==14774== at 0x483877F: malloc (vg_replace_malloc.c:309)
==14774== by 0x123CCF: upstreams_create (context.c:581)
==14774== by 0x128B24: getdns_context_set_upstream_recursive_servers (context.c:2760)
==14774== by 0x12DBFE: _getdns_context_config_setting (context.c:4646)
==14774== by 0x12FF47: getdns_context_config (context.c:4769)
==14774== by 0x1178C2: parse_config (stubby.c:297)
==14774== by 0x117B24: parse_config_file (stubby.c:343)
==14774== by 0x11919F: main (stubby.c:833)
2020-03-01 14:13:27 -07:00
Willem Toorop
fe30672afa
shorten code with string conversion functions
2020-02-28 20:33:22 +01:00
Willem Toorop
e19e6bd464
getdns-1.6.0 release
...
-----BEGIN PGP SIGNATURE-----
iQJIBAABCgAyFiEE3DTuXbJBe8wVHlEA5fj4IS93pJgFAl5ZKkAUHHdpbGxlbUBu
bG5ldGxhYnMubmwACgkQ5fj4IS93pJjVeA/+MIMCZm0pSET6kAIauItpeA506/2a
U6Us1mQRKFu3kAq655CiCC2amXH+oPZg8ESKBqFn4AbbzSiWMcHEQh91v6vHGYe9
0V1CciUUScFW2PlodKg/Ulxy+COmrmonkz4X/NbepsikYXUu4xmVL+FgfGw1xvAu
mxLMWW3oZi7Rgr3zAixgNLE3t7KgjVVRXBNVDb9on3IyydAkgssUJQHAsupJJQy+
CCPrqpj4s3nLGSACVkCQPJIYewYKAnvTwLSy2+9mOP8clIgmVonoeEaYwM5x0RU/
boeqXR7A6iA6CvReeG/vQa/MVcVIIY/p7FSYZwtxrHef8cPXG9H8GVKy9s+xlNEO
7tEG6uhwGq52i9zDfVi36TXwWe/FW9ER5cytmlhcMOIkMnH6KHn3iZrx6mVhInob
93cwl+vVGd/MSt7JnDwsvRI1uUsdSapbqK58c/aCrC9aag9YWhwnGPMByqfyXJUf
5Yv43/AI9wI0UY2BPzvtZbtfwL+30VotZLUJRmoBtmKJQ6XQ98LG3NPeq83v5Wzd
DxRcCqLNwEBh0qADtdfEd07H+Hf5F7GT6xqJo+IWrTaZ+naZNMsVajGJtSpCthCq
k02naEtEMegc9C+fsrbFfQeuvvBPnFgUJKFVQJH6UrMG278tkEklmHmJwnZKtSFY
ZhNgm/04AG1hcdU=
=pOTk
-----END PGP SIGNATURE-----
Merge tag 'v1.6.0'
getdns-1.6.0 release
2020-02-28 16:03:59 +01:00
Willem Toorop
1b3f570792
Bump version for release
2020-02-28 15:39:53 +01:00
Willem Toorop
328903cb52
Merge pull request #459 from banburybill/release/1.6.0-rc.1
...
Tighten Nettle version checking, and fix build issue with Nettle >= 3.4.
2020-02-25 14:36:44 +01:00
Jim Hague
ab49db8aa5
Tighten Nettle version checking, and fix build issue with Nettle >= 3.4.
...
Nettle 3.4 introduced accessor functions for obtaining nettle_secp_256r1 and nettle_secp_384r1. Use them if present.
Fixes #458
2020-02-25 13:30:25 +00:00
Willem Toorop
e2cb4fc4ad
Typo in changelog
2020-02-21 14:27:47 +01:00
Willem Toorop
e3fbe4fb51
getdns-1.6.0-rc.1
2020-02-21 14:21:12 +01:00
Willem Toorop
d7099f6e30
Deal with DoT servers that take long to connect to
...
(because they might be under attack)
2020-02-21 14:17:00 +01:00
Willem Toorop
dadddb0d7b
Detect if __func__ can be used with debugging
2020-02-20 21:09:17 +01:00
Willem Toorop
4453febf2d
Build eventloop support libraries by default
...
Resolves issue #169
2020-02-20 20:25:35 +01:00
Willem Toorop
e2c6241964
Issue #175 : Include query in call_reporting dict
...
Thanks Tom Pusateri
2020-02-20 17:52:27 +01:00
Willem Toorop
56ca583fa6
Issue #407 run only offline tests
2020-02-14 16:49:45 +01:00
Willem Toorop
ed36240f19
Fix test
2020-02-13 17:26:18 +01:00
Willem Toorop
6cb15939ba
Issue #430 : Record and guard UDP max payload size with servers.
2020-02-13 17:02:24 +01:00
Willem Toorop
971c43c659
Fix #432 answer_ipv4_address and answer_ipv6_address
...
in reply and reponse dicts.
I realise we also do not have intermediate_aliases yet...
2020-02-13 15:33:13 +01:00
Willem Toorop
f33a4b2d4e
More worldly changes that influenced unit testing
2020-02-12 13:23:51 +01:00
Willem Toorop
770c0a1282
Fix unit tests (for changed world)
...
- Google started to respond NOTIMP on unknown RR types!
- willem.getdnsapi.net has been removed
2020-02-12 12:28:50 +01:00
Willem Toorop
a847d478ec
Update stubby
2020-02-11 15:54:44 +01:00
Willem Toorop
ad22492732
Merge pull request #455 from saradickinson/update_stubby_submodule
...
Update the stubby module to latest develop branch
2020-02-11 15:49:52 +01:00
Sara Dickinson
2b3a540fda
Update the stubby module to develop
2020-01-16 15:54:15 +00:00
Willem Toorop
9b9cecd35d
Merge pull request #453 from getdnsapi/release/1.6.0-beta.1
...
Release/1.6.0 beta.1
2019-12-20 14:19:54 +01:00
Willem Toorop
a6a2695fee
Update stubby release & Changelog
2019-12-20 14:02:23 +01:00
Willem Toorop
56c83b7d3e
What to install on FreeBSD
2019-12-20 13:44:26 +01:00
Willem Toorop
8b5c57bfcb
Also clear returned netreq when result came from LOCALNAMES namespace
2019-12-20 12:42:52 +01:00
Willem Toorop
24824bb413
Not string.h but strings.h!
2019-12-20 11:23:45 +00:00
Willem Toorop
4fdf3a8b2a
Stuff that came out of valgrind on FreeBSD 12
2019-12-20 11:09:24 +00:00
Willem Toorop
8da6fdb442
string.h not available on Windows
2019-12-20 11:08:32 +00:00
Willem Toorop
33633ea239
One more scan with extra argument
2019-12-20 10:46:59 +00:00
Willem Toorop
3345bb615d
One more gldns_wire2str_rr_scan fix
2019-12-20 10:29:54 +00:00
Willem Toorop
8cda9816e4
Merge branch 'release/1.6.0-beta.1' of github.com:getdnsapi/getdns into release/1.6.0-beta.1
2019-12-20 09:56:08 +00:00
Willem Toorop
3ad84d0a51
Updated gldns
2019-12-20 10:55:47 +01:00
Willem Toorop
651e5f7c3f
Work around FreeBSD12 FAST OPEN issue
...
Before (FreeBSD 11), poll could be used to wait for the socket to
be writeable immediately. Now (since FreeBSD 12) this results in
infinite wait, so we just have to write immediately to work around
this.
2019-12-19 15:00:53 +00:00
Willem Toorop
b446bfdf11
Enable debugging symbols for better valgrind output
2019-12-19 14:56:12 +00:00
Willem Toorop
61dffd0e35
Fail eventloop test on errors
2019-12-19 12:45:47 +00:00
Willem Toorop
8b2e8c2be3
Memory leak via libunbound in FreeBSD11.3
2019-12-19 11:29:40 +00:00
Willem Toorop
a78b963aa9
Make check timeout larger than getdns timeout
...
- when timeout should be expected
2019-12-19 10:44:22 +00:00
Willem Toorop
2cc4865b14
Merge pull request #451 from getdnsapi/feature/readme-polish
...
Feature/readme polish
2019-12-18 15:02:07 +01:00
Willem Toorop
f701af7508
Remove INSTALL from CMakeLists.txt too
2019-12-18 14:53:26 +01:00
Willem Toorop
30104f8bc3
Merge branch 'release/1.6.0b1' into release/1.6.0-beta.1
2019-12-18 14:49:39 +01:00
Willem Toorop
0d04d1f397
Merge pull request #449 from banburybill/release/1.6.0b1
...
Get tests passing on Bionic and OSX
2019-12-18 14:47:16 +01:00
Jim Hague
015d209387
README fixups.
...
1. Be consistent about the primary platforms including Ubuntu.
2. Note that the regression tests run on all non-WIndows primary platforms.
3. Windows support is for Windows 10.
4. Rename Platform Specific Build Reports to Platform Specific Build Notes and remove section on RHEL/CentOS. We don't talk about how packages get built for any other platform.
Quite probably build notes for RHEL will re-appear, once I've tried building on CentOS 8.
2019-12-18 13:17:59 +00:00
Jim Hague
05e9cbf5de
Correct CMake quick start URL.
2019-12-18 13:10:40 +00:00
Jim Hague
8b1cdd0fa8
Remove INSTALL. It's GNU boilerplate for an autoconf build.
2019-12-18 13:09:07 +00:00
Willem Toorop
6b1ba31334
Switch to semvers 2.0
2019-12-18 12:29:21 +01:00
Jim Hague
4f0f9c7eca
Merge branch 'release/1.6.0b1' of https://github.com/getdnsapi/getdns into release/1.6.0b1
2019-12-18 11:27:14 +00:00
Jim Hague
489022dcb9
Some tests that use valgrind aren't flagged as such. Fix this.
2019-12-18 11:14:12 +00:00
Jim Hague
0226096974
Suppress memory leak in libunbound to get test 125 passing on Bionic.
2019-12-18 10:23:45 +00:00
Willem Toorop
5c33130454
Include NEWS with included Stubby
2019-12-17 12:58:21 +01:00
Willem Toorop
9c3321cdfc
Merge branch 'feature/cmake_dist' into release/1.6.0b1
2019-12-16 16:44:11 +01:00
Willem Toorop
40bcf4cb4c
Updated makedist.sh
2019-12-16 16:43:25 +01:00
Willem Toorop
52cb444065
Update all submodules with .gitattributes
2019-12-16 16:27:28 +01:00
Willem Toorop
2ac84800af
Merge pull request #448 from k0ekk0ek/mailing-lists
...
Update mailing list references
2019-12-16 16:21:14 +01:00
Jeroen Koekkoek
bf29924d76
Update mailing lists
2019-12-16 16:10:15 +01:00
Willem Toorop
7d2e255ead
git-archive-all.sh based makedist file
2019-12-16 15:36:53 +01:00
Willem Toorop
293011c27f
Bump version + move CodeStyle to project-doc
2019-12-16 13:47:14 +01:00
Willem Toorop
60307d88fd
Merge pull request #447 from getdnsapi/feature/cmake
...
Feature/cmake
2019-12-16 12:33:12 +01:00
Willem Toorop
306110ab7e
Merge pull request #446 from saradickinson/feature/more_cmake
...
Feature/more cmake
2019-12-16 12:16:22 +01:00
Willem Toorop
3e373ab2af
Now with actual fix for multiple localhost addresses
2019-12-16 12:05:29 +01:00
Willem Toorop
aafdba690d
Server capabilities test, listen on single localhost IPv4 address
2019-12-16 11:54:00 +01:00
Willem Toorop
0fbe0dccc3
Debugging server capability testing
2019-12-16 11:47:40 +01:00
Willem Toorop
f1ea127e7a
NLnet Labs reversed space takes long to lookup...
2019-12-16 11:04:49 +01:00
Willem Toorop
e2813299ee
Target everything does not exist with me ...
...
.. but did exist in travis???
2019-12-13 16:19:29 +01:00
Willem Toorop
17d5627529
Make TCP_FASTOPEN work again for linux and FreeBSD
2019-12-13 16:18:53 +01:00
Willem Toorop
39e2c8a33e
replace '//' with #ifdef 0 / #endif
...
because my compiler complains about it for some reason
2019-12-13 11:34:14 +01:00
Willem Toorop
17784bd3f5
Try to fix yxml
2019-12-13 11:29:34 +01:00
Willem Toorop
e28ee2b0e0
New commits in yxml
2019-12-10 15:21:51 +01:00
Sara Dickinson
d92a91e771
Fix up unit tests for all the event loops.
...
Various housekeeping
2019-11-29 10:50:49 +00:00
Sara Dickinson
33774228a3
Missed one SOA that is not returned
2019-11-28 16:42:42 +00:00
Sara Dickinson
0fc75dfbaf
Work around issue in cmake (after 3.5 but fixed in 3.12) where object libraries could not be used with target_link_library().
...
Tweak libcheck/windows logic.
Hacks to make tests pass with strange bionic system resolver behaviour
Add to README that xenial doesn’t have libunbound-dev 1.5.9 packaged
2019-11-28 16:22:45 +00:00
Sara Dickinson
26d678b344
More update to README
...
v. minor updates to tests to clean up output
2019-11-18 20:41:28 +00:00
Jim Hague
6352419823
Correct typo.
2019-11-18 18:33:00 +00:00
Jim Hague
b8c7690df4
Add CMake build instructions for Windows and Visual Studio.
2019-11-18 18:31:41 +00:00
Sara Dickinson
b455c3feca
If we want to use only libidn2 then we need to move to bionic for the travis build (the libidn2 package for xenial is too old!). So update the travis build for this.
...
Fix the default mode for STUB_ONLY build for Windows vs linux
2019-11-18 16:59:29 +00:00
Sara Dickinson
38f59b7bea
Remove libidn support
...
More updates to README
2019-11-18 14:05:50 +00:00
Sara Dickinson
fa72271221
Add simple test to run stubby
2019-11-15 16:35:56 +00:00
Sara Dickinson
2925c7e80b
Add verbose on failure output to unit tests
2019-11-15 15:52:39 +00:00
Sara Dickinson
323e6a6ba6
Update submodules and fix issue with loading local hosts
2019-11-15 14:29:33 +00:00
Sara Dickinson
499555b8a5
More fixes for remaining tests..
2019-11-14 17:58:11 +00:00
Sara Dickinson
80b0c7a45e
Add missing compile flags so JSON parsing of listen_addresses works!!!!
2019-11-14 17:43:26 +00:00
Sara Dickinson
d59380fca0
Start work on remaining tests
2019-11-14 14:40:24 +00:00
Sara Dickinson
1cca550799
Fix lib name on linux
2019-11-14 14:05:47 +00:00
Sara Dickinson
8b3e3412f5
Merge branch 'feature/cmake' of https://github.com/getdnsapi/getdns into feature/cmake_testfix
2019-11-14 12:38:15 +00:00
Sara Dickinson
ffbc49cc2d
Get all of the tests run by ‘run-all.sh’ working apart from those that require valgrind…….
...
update stubby commit and ymlx commit to remove build warnings
2019-11-14 11:36:18 +00:00
Jim Hague
277a4ae9c7
Add test for new libuv callback styles.
...
This fixes a build warning on Mac.
2019-11-13 18:07:31 +00:00
Jim Hague
4314f5dbf9
Be more generous about what constitutes a build directory name.
2019-11-13 18:06:36 +00:00
Sara Dickinson
cafd745383
More work on the README - some sections still to do
...
Also add build dir to .gitignore
2019-11-04 17:31:14 +00:00
Sara Dickinson
383a162bf4
update stubby submodule target
2019-11-04 14:07:26 +00:00
Willem Toorop
41e09259db
Merge pull request #438 from neheb/patch-1
...
platform: Prefer poll.h to sys/poll.h
2019-11-04 09:33:42 +01:00
Rosen Penev
3f6203bf0f
platform: Prefer poll.h to sys/poll.h
...
sys/poll.h seems to be some GNU extension. musl warns about this:
warning redirecting incorrect #include <sys/poll.h> to <poll.h>
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-11-03 14:30:34 -08:00
Jim Hague
beda65f262
Basic updates to README for cmake version.
2019-11-01 12:40:05 +00:00
Jim Hague
e00a79a240
Remove autoconf build and update to autoconf-less Stubby.
2019-11-01 12:27:10 +00:00
Jim Hague
7a1e72d51e
Increase minimum libunbound version to 1.5.9 to get pluggable event handling.
...
At Willem's suggestion.
2019-11-01 12:10:52 +00:00
Jim Hague
1cac86424e
Fix build problem with ENABLE_DEBUG_STUB when not using ENABLE_DEBUG_ALL.
2019-11-01 10:44:55 +00:00
Jim Hague
011b4c6099
Pick up stubby install fixes.
2019-10-31 18:03:48 +00:00
Jim Hague
5be26496ac
Update to pick up latest Stubby build fixes.
2019-10-31 16:19:45 +00:00
Jim Hague
0e432cc7c2
Add option to build Doxygen.
...
This requires a change to the Doxyfile. I can't see a way to avoid this.
2019-10-31 13:41:04 +00:00
Jim Hague
ba54c50779
Add options to build the example programs.
2019-10-31 12:59:28 +00:00
Jim Hague
c66d772c97
Add libidn2 to list of library names searched when looking for libidn2.
...
Other find packages do this, and omitting it stops it from finding vcpkg library.
2019-10-31 12:45:46 +00:00
Jim Hague
07a074c1b1
Add binary build dir as include interface for the getdns libraries.
...
Any library user will need that to find the getdns header files.
2019-10-30 18:12:23 +00:00
Jim Hague
a46ded25b6
Implement enabling and checking for TCP Fast Open.
2019-10-30 17:21:25 +00:00
Jim Hague
ffa5d6144f
Add manual enable/disable of the poll event loop.
...
And fix the detection of poll().
2019-10-30 14:40:11 +00:00
Jim Hague
cbed43ed59
Add ENABLE_EDNS_COOKIES.
2019-10-30 14:09:13 +00:00
Jim Hague
c75d8df399
Remove obsolete comment.
2019-10-30 14:02:49 +00:00
Jim Hague
74d9404759
FIrst pass at GnuTLS support.
2019-10-30 14:02:32 +00:00
Jim Hague
f34218d812
Correct comments.
2019-10-30 13:41:15 +00:00
Jim Hague
633724327f
Get CMake build working under MinGW.
...
The MinGW linker does not like -VERSION: one little bit.
I rearranged the order of the ifs hoping that MinGW and friends would be a UNIX, but it was not to be.
2019-10-29 18:10:04 +00:00
Jim Hague
ea09baf376
Fix Windows build failure when libunbound is present.
2019-10-29 17:42:21 +00:00
Jim Hague
b0ef0887db
Add libunbound dependencies where necessary.
...
I think it's only needed for getdns_query and getdns_server_mon because it gets included in config.h, of all places.
2019-10-29 16:53:19 +00:00
Jim Hague
5bab6921bd
Get libevent.c building under Windows.
2019-10-29 15:59:15 +00:00
Jim Hague
bb59275ba9
More Windows system libraries. These are used by libuv.
2019-10-29 15:46:04 +00:00
Jim Hague
4af076f5fb
Ensure include directories for external libraries are on the path.
2019-10-29 15:38:54 +00:00
Jim Hague
6a043d2fac
Add libuv extension.
2019-10-29 09:15:04 +00:00
Jim Hague
3604add64f
Correct header name.
2019-10-29 09:14:36 +00:00
Jim Hague
c359a0b65e
Add libev extension.
2019-10-29 09:13:57 +00:00
Jim Hague
02561c2d7e
Add building the libevent extension.
...
Insist on libevent2.
2019-10-28 18:11:42 +00:00
Jim Hague
4ab7f8f757
Shared libraries - move versioning and export list into functions.
...
Also for Windows add looking for a template .RC of the target name and adding that to the build too.
2019-10-28 17:11:00 +00:00
Jim Hague
7cf119fb6b
Only include libidn/idn2 includes on building getdns objects if they are set.
2019-10-28 11:05:54 +00:00
Jim Hague
8867e14e8c
As with ssl_dane, temporarily point at different upstream repo for stubby to get the required change.
2019-10-28 10:47:11 +00:00
Jim Hague
69ab8adb12
Allow user to disable use of libidn/idn2.
...
It's tempting to do the same for libunbound, but that's only pulled in if you're not building stub-only, and in that case there is no choice - you have to have libunbound.
2019-10-28 10:36:34 +00:00
Jim Hague
5df3bc4fce
Libidn/idn2 needs to be included in the library link, certainly for shared libs.
...
So might as well do the same for static libs.
2019-10-28 10:35:36 +00:00
Jim Hague
545916d347
Make building getdns_query and getdns_server_mon optional. Default is on.
2019-10-28 10:06:02 +00:00
Jim Hague
38bf04c86d
Small comment typo.
2019-10-28 09:57:49 +00:00
Jim Hague
1da968a35f
Detect and use libidn and libidn2 if present.
2019-10-28 09:57:29 +00:00
Jim Hague
164b089011
Add option to enable MDNS support.
2019-10-25 17:18:29 +01:00
Jim Hague
d9e5f405e7
Add option to build Stubby from subproject, and remove Stubby-only items from getdns config.
...
This requires the latest version of the Stubby CMake build to work.
2019-10-25 16:16:04 +01:00
Jim Hague
2fa1a184e4
Remove blanket include directory addition and make specific to individual targets.
...
This is best practice. We don't want that directory potentially contaminating other included builds.
2019-10-25 15:58:48 +01:00
Jim Hague
f1885cc4a6
Remove surplus entry on CMAKE_MODULE_PATH and verbosity put in there temporarily and accidentally committed.
2019-10-25 15:54:57 +01:00
Jim Hague
7adc1fc4ab
Remove copyright notices copied from existing files in error.
2019-10-25 15:51:30 +01:00
Jim Hague
dbad46c516
Correct ordering of project and includes.
2019-10-24 17:49:23 +01:00
Jim Hague
9dcd8482f5
Add stub only mode, on by default.
...
If disabled, it needs to drag in libunbound. So do all that.
2019-10-24 17:40:37 +01:00
Jim Hague
530c8c5e8e
Use BSD library we found directly, and mark its path as advanced, as per other libraries.
2019-10-24 17:32:05 +01:00
Jim Hague
072bdd9a6b
Pay attention to hint directories for Check.
...
Allow specifying a base hint directory, and look there and in include/libs underneath it.
2019-10-24 17:30:41 +01:00
Jim Hague
e8eafdfa44
Rearrange includes, to CTest and thus BUILD_TESTING is always present.
...
We can then use BUILD_TESTING to control whether to build the test executables or not.
2019-10-24 17:29:30 +01:00
Jim Hague
e4c2ddb401
Present more user friendly name for the native stub DNSSEC option.
2019-10-24 14:29:20 +01:00
Jim Hague
55a0456b67
Add cipher configuration options.
2019-10-24 14:21:25 +01:00
Jim Hague
def0f1d714
Ensure some option values get defined in the config header.
2019-10-24 14:07:43 +01:00
Jim Hague
e4333b13df
Add debug message options.
2019-10-24 13:43:20 +01:00
Jim Hague
7fd7bda000
Add current date option.
2019-10-24 12:19:51 +01:00
Jim Hague
74bbfc02fa
Ensure library locations are all marked as advanced options.
2019-10-24 12:04:27 +01:00
Jim Hague
3b44cd8f38
Minor formatting nit.
2019-10-24 11:57:34 +01:00
Jim Hague
b5f260376e
Expose file paths as options.
2019-10-24 11:57:16 +01:00
Jim Hague
07e617579d
Add fd setsize configuration.
2019-10-24 11:15:41 +01:00
Jim Hague
5f3d5191b0
Make visible existing options that are visible in autoconf.
...
Also punctuate option text consistently.
2019-10-24 11:14:20 +01:00
Jim Hague
60eb113770
Add options ENABLE_STATIC and ENABLE_SHARED.
...
Stick a cautious toe in the water of CMake options, and add enabling/disabling shared/static library builds, because that's easy.
2019-10-24 10:51:28 +01:00
Jim Hague
d447999c60
Add check for check library, and if found add the main test module.
...
Note that tests_dict/list/stub_async/namespaces are built, but not run. I don't know why.
2019-10-23 18:33:50 +01:00
Jim Hague
24e2d1acbf
Includes are specified by the library interfaces.
2019-10-23 18:30:26 +01:00
Jim Hague
9acdc1cbb5
Resolv.conf location mustn't have prefix. It's so the library can find the system resolver.
...
If you add a prefix, getdns doesn't get any upstreams configured and test failures abound.
2019-10-23 18:28:54 +01:00
Jim Hague
2414d31951
Properly sort out exporting the include directory for in-tree builds but not for out of tree builds.
2019-10-22 15:42:06 +01:00
Jim Hague
165078a50d
Improve manpage processing robustness.
...
Fix regex to expressly check for starting ., and switch to regex match for SH lines to stop any potential problems with training spaces or multiple spaces before section name.
2019-10-22 14:47:49 +01:00
Jim Hague
ea1111d899
Add installation of work done so far.
...
The install is equivalent to the autoconf install with no options.
Note that where the autoconf adds copies of manual pages renamed to individual APIs via a script manpgaltnames (in doc), this functionality is now done in pure CMake, to ensure it works on Windows.
Also note there is no 'make uninstall'. See https://gitlab.kitware.com/cmake/community/wikis/FAQ#can-i-do-make-uninstall-with-cmake .
2019-10-22 14:32:44 +01:00
Jim Hague
c6e5ef6330
Set SONAME matching autoconf build on shared library for GNU ld.
2019-10-21 17:25:48 +01:00
Jim Hague
2c06e8b8ac
Remove unused items.
2019-10-21 16:54:55 +01:00
Jim Hague
a884426c6e
Suggest C11 for the tools as well as the library.
2019-10-21 16:54:40 +01:00
Jim Hague
9682b4d41c
Do platform versioning from single version source.
...
Now I understand what dark stuff libtool gets up to, just do the same at the platform level.
2019-10-21 13:51:19 +01:00
Jim Hague
41741f6cc4
Rather than listing in a variable, list sources, libs etc directly on targets.
2019-10-21 13:32:05 +01:00
Jim Hague
87177cc103
Add a Windows implementation of getdns_context_set_resolvconf().
...
Have it return GETDNS_RETURN_NOT_IMPLEMENTED. This function is listed in the shared library exports, and it's part of the official API, so we need it.
2019-10-18 19:04:17 +01:00
Jim Hague
73e9c32655
First pass at adding shared libraries to the current static library build.
...
* I can't find out where the .so version number currently produced by the autoconf build comes from, so for the moment supply it explicitly.
* Include a version in the Windows DLL. But Windows can only grok major[.minor]. So also supply one of those.
* On Windows, we need a .lib for the .dll, and a static .lib. These, obviously, need different names. So add _static onto the name of the static lib.
* Only build the objects once, so explicitly build both with PIC.
* Only export the explicit list of symbols from the shared library. This has to be done a different way on GNU ld, Mac linker and Windows.
* Although I have left the tools being linked statically, I have tested with dynamic linking. getdns_query uses gettimeofday(), which isn't on Windows. With a static link, it just happens to find it in the getdns library, as the symbols aren't filtered. But this doesn't work for shared use, when they are. So explicitly add the compat implementation into the getdns_query sources.
2019-10-18 18:54:09 +01:00
Jim Hague
4304bb7017
Be a little more modern CMake.
2019-10-18 11:28:39 +01:00
Jim Hague
4df33630ea
Let CMake know about the target language.
2019-10-18 11:27:19 +01:00
Jim Hague
878fd0583f
Jump off the fence on policy CMP0075.
...
The new behaviour is benign for us, so go with it if available.
2019-10-17 17:22:51 +01:00
Jim Hague
11e621b758
Regularise use or not of space between else/endif and (). Always have a space.
2019-10-17 17:21:58 +01:00
Jim Hague
97227f9bd7
Temporarily (I hope) redirect ssl_dane submodule to my patched repo.
2019-10-16 11:25:07 +01:00
Jim Hague
4da88601d9
Add getdns_server_mon to the build.
2019-10-16 10:42:05 +01:00
Jim Hague
ec62d87fca
Correct target dependencies exported by the getdns library and used by getdns_query.
2019-10-16 10:35:18 +01:00
Jim Hague
effd229ef6
Don't dump includes of OpenSSL headers into config.h.
...
Where they are required, they are included in the source files.
2019-10-16 10:34:36 +01:00
Jim Hague
55d6b47ed1
Correct target dependencies.
...
And improve a variable name.
2019-10-16 10:29:29 +01:00
Jim Hague
cd62f2b716
Don't include OpenSSL headers in config.h.
...
Add an include of stdlib.h to various files that were relying on config.h to drag it in. I don't think config.h should be pulling in standard C headers.
2019-10-15 18:37:10 +01:00
Jim Hague
8362a183e8
Remove use of pkg-config to see if libbsd is present.
...
Instead check for the library directly.In the process, fix the detection of the declarations and functions in libbsd so they work.
2019-10-15 18:35:06 +01:00
Jim Hague
a2d09d2be5
Fix type warning on Windows.
2019-10-15 16:56:34 +01:00
Jim Hague
e45f569603
Add getdns_query to CMake build.
2019-10-15 16:56:12 +01:00
Jim Hague
73e8e4653d
Update to latest fix of ssl_dane.c for Windows.
2019-10-15 16:55:16 +01:00
Jim Hague
dd70108558
Windows does not have mkstemp(). Add compat version.
...
The compat version is Windows-specific.
2019-10-15 16:54:13 +01:00
Jim Hague
323d76d7ae
Add the rest of the compat functions to the build, if required.
...
Remove any preprocess guards from the sources, and only include them in the build if required. Add some additional required Windows libraries.
2019-10-15 16:53:03 +01:00
Jim Hague
5db0d03b13
Enable building on Windows with Visual Studio.
...
The change mostly consists of removing or replacing non-standard (usually POSIX) header includes.
Guards for replacements for inet_ntop(), inet_pton() and gettimeofday() are updated; the first two are macros on Windows, so the guards are changed to HAVE_DECL. gettimeofday() is present on MinGW builds but not Visual Studio, so that has a function check.
2019-10-15 10:09:17 +01:00
Jim Hague
b8df26194e
Add symbols for target endianness.
2019-10-14 09:47:03 +01:00
Jim Hague
d1dca186bc
Add Posix/XOpen support flags for Unix builds that aren't FreeBSD.
2019-10-14 09:45:38 +01:00
Jim Hague
7a0a2f712d
Add support for building on Windows.
...
This should support both native Visual Studio builds and MinGW builds.
2019-10-14 09:44:28 +01:00
Jim Hague
ffe626f5f3
Enable warnings when building.
2019-10-10 12:31:12 +01:00
Jim Hague
dc6cadebbc
Add OpenSSL function checks as per autoconf.
...
Well, those function checks that are actually used in the code, anyway.
2019-10-10 12:30:50 +01:00
Jim Hague
c367b39c13
Update build to get the current source building.
...
Hardwire OpenSSL and do the minimum necessary to get libgetdns building.
2019-10-09 17:19:18 +01:00
Jim Hague
1d712cfa45
Merge branch 'develop' into feature/cmake
2019-10-07 12:58:33 +00:00
Willem Toorop
9050f63d5b
Merge pull request #434 from bnoordhuis/readme-libuv-url
...
Update libuv URL in README
2019-09-18 11:01:57 +02:00
Ben Noordhuis
ad8ca06c57
Update libuv URL in README
...
I can state with some authority that the old URL hasn't been canonical
for almost five years now.
2019-09-17 23:27:31 +02:00
wtoorop
994466b3de
Merge pull request #428 from themiron/old-uclibc-fix
...
Optimize local addresses enumeration with old uClibc
2019-04-25 09:52:28 +02:00
Vladislav Grishenko
416c55734b
Optimize local addresses enumeration with old uClibc
...
uClibc 0.9.30rc1 - 0.9.32rc5 has bug - getaddrinfo() does not accept numeric
service without any hints. As the related side effect, hint struct with
ai_socktype == 0 (unspec) and ai_protocol == 0 (unpsec) gives the same
EAI_SERVICE error instead of same address with different proto enumebration.
For more details please refer https://bugs.busybox.net/show_bug.cgi?id=3841 and
https://git.uclibc.org/uClibc/commit/?id=bc3be18145e4d57e7268506f123c0f0f373a15e2
Since 0.9.3x uClibc versions are still not somewhat unique in embedded (issue
https://github.com/getdnsapi/stubby/issues/124 as example) and non-zero
ai_socktype allows to avoid address dups for each supported UDP/TCP/etc proto,
seems worth to have it specified, as a minor memory allocation optimization at
least.
SOCK_DGRAM vs SOCK_STREAM choice doesn't really matter here, both are actually
used for DNS and both are non-zero, no difference is expected on *nix. So
SOCK_DGRAM selected due original comment only.
2019-04-25 03:31:56 +05:00
wtoorop
c89b9d0796
Merge pull request #426 from themiron/typedef-redef-fixes
...
Fix build error with gnu99 compilers
2019-04-12 15:25:44 +02:00
Vladislav Grishenko
4f4ed98112
Fix build error with gnu99 compilers
...
Typedefs sha256_pin_t & getdns_log_config multiple declaration in context.h,
tls.h and tls_internal.h causes build error with some gnu99 compilers, even
if the redefinition is identical.
One possible way is to protect each occurence with ifdefs, but it seems too
brute, other one is to keep typedef in context.h only and use struct types
in recently added tls* scope.
Error example:
../libtool --quiet --tag=CC --mode=compile arm-brcm-linux-uclibcgnueabi-gcc
-std=gnu99 -I. -I. -I./util/auxiliary -I./tls -I./openssl -I./../stubby/src
-Wall -Wextra -D_BSD_SOURCE -D_DEFAULT_SOURCE ... -c ./convert.c -o convert.lo
In file included from ./context.h:53:0,
from ./util-internal.h:42,
from ./convert.c:50:
./tls.h:45:27: error: redefinition of typedef 'sha256_pin_t'
./openssl/tls-internal.h:57:27: note: previous declaration of 'sha256_pin_t' was here
In file included from ./util-internal.h:42:0,
from ./convert.c:50:
./context.h:133:3: error: redefinition of typedef 'sha256_pin_t'
./tls.h:45:27: note: previous declaration of 'sha256_pin_t' was here
./context.h:267:3: error: redefinition of typedef 'getdns_log_config'
./openssl/tls-internal.h:58:34: note: previous declaration of 'getdns_log_config' was here
2019-04-12 01:40:51 +05:00
Willem Toorop
f9db16a65e
Merge branch 'develop'
2019-04-03 16:19:31 +02:00
Willem Toorop
42ea03ef07
Release 1.5.2
...
-----BEGIN PGP SIGNATURE-----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=ECik
-----END PGP SIGNATURE-----
Merge tag 'v1.5.2' into develop
Release 1.5.2
2019-04-03 16:18:59 +02:00
Willem Toorop
ffe471543b
Bumb versions for 1.5.2 release
2019-04-03 12:36:04 +02:00
Willem Toorop
b22768709a
Runtime fallback and FreeBSD compatible TFO
2019-04-03 12:24:09 +02:00
Willem Toorop
b6e290f42a
Fix compiling for debugging
2019-04-03 11:51:35 +02:00
Willem Toorop
8a2b4e0aa0
Merge branch 'develop' into release/1.5.2
2019-04-03 11:15:50 +02:00
wtoorop
bc6adf01ca
Merge pull request #424 from maciejsszmigiero/anchor-fixes
...
Two small trust anchor fetcher fixes
2019-03-24 08:47:26 +01:00
Maciej S. Szmigiero
0a1883047d
Don't transmit an extra NULL byte in the anchor fetch HTTP request
...
When calculating HTTP request buffer size tas_connect() unnecessarily adds
an extra octet for the terminating NULL byte.
The terminating NULL was already accounted for by sizeof(fmt), however,
since sizeof("123") = 4.
The extra NULL byte at the end of the anchor fetch HTTP request resulted
in an extra "501 Not implemented" HTTP response from the trust anchor
server.
2019-03-24 00:51:20 +01:00
Maciej S. Szmigiero
99e32f1e46
Increase anchor fetch timeout in tas_doc_read()
...
tas_doc_read() uses a very short 50 msec network read timeout which makes
fetching trust anchors pretty much impossible on high-latency connections
like 3G.
Use a 2 second read timeout, just like the other tas_read_cb() callback
setter does.
2019-03-24 00:50:49 +01:00
Willem Toorop
1527979129
Release candidate need dashes before rc
2019-03-15 21:16:13 +01:00
Willem Toorop
5b20971464
Setup branch for the 1.5.2 release process
2019-03-15 20:45:04 +01:00
Willem Toorop
82b9f5781e
Take along new dirs in distributions
2019-03-15 20:28:41 +01:00
Willem Toorop
342b1090f8
Declarations are always defined
2019-03-15 17:22:31 +01:00
Willem Toorop
754d65eb6d
Correct dependencies
2019-03-15 16:58:10 +01:00
Willem Toorop
324370c537
GnuTLS with Zero configuration DNSSEC
2019-03-15 16:50:10 +01:00
Willem Toorop
7438de712a
Issue #422 : Update server & client TFO
...
Seems to work for TLS now too.
At least on Linux.
Thanks Craig Andrews
2019-03-15 12:13:38 +01:00
Willem Toorop
74e584cd61
Merge branch 'develop' of github.com:getdnsapi/getdns into develop
2019-03-13 14:21:51 +01:00
Willem Toorop
99d15b999c
Issue #423 : Fix insecure delegation detection while scheduling
2019-03-13 14:21:06 +01:00
wtoorop
acd94cbe20
Merge pull request #421 from banburybill/feature/windows-fixes
...
Update to latest Stubby develop.
2019-03-13 12:06:05 +01:00
Jim Hague
13976cca68
Update to latest Stubby develop.
2019-03-01 12:27:48 +00:00
Willem Toorop
0abd2345de
New commits in stubby
2019-02-28 16:07:11 +01:00
wtoorop
6b0ea5c47f
Merge pull request #420 from banburybill/feature/windows-fixes
...
Fix builds in mingw32.
2019-02-28 15:44:35 +01:00
Jim Hague
eebea43b84
Update README to document root anchor storage directory on Windows.
...
This fixes Stubby issue #153 .
2019-02-27 18:28:04 +00:00
Jim Hague
968e914e94
Avoid build errors if $sysconfdir or $runstatedir contain a space.
...
Building on Windows was failing if sysconfdir was, e.g. C:\Program Files.
2019-02-21 14:37:25 +00:00
Jim Hague
a7a17f3725
Fix builds in mingw32.
...
On mingw64, configure does not find declarations for inet_ntop() and inet_pton(), but does find implementations, and so does not try to compile the compat versions.
On mingw32, configure find neither declarations or implementations, and so tries to compile the compat versions. However, there are declarations in ws2tcpip.h, and these do not have the same prototype as compat. The build fails, complaining about conflicting types for inet_ntop().
The declarations in ws2tcpip.h are #defines to Windows functions InetNtopA() and InetPtonA(). Which is not good, but we're stuck with it. Try to work around this by including ws2tcpip.h in the headers while checking for declarations. Unfortunately it looks like you can't do that when checking for implementations and substituting compat versions when not found. So only do that if we don't find declarations; we're already making sure that ws2tcpip.h is included via config.h in source modules.
2019-02-20 11:06:21 +00:00
Willem Toorop
acc9b1cbd5
Typo and unused parameter warning
2019-02-15 13:46:28 +01:00
Willem Toorop
30367dada2
space needed for unit test to succeed
2019-02-15 13:43:28 +01:00
Willem Toorop
034b775e5c
DOA & AMTRELAY RR types implementation
2019-02-15 13:36:39 +01:00
Willem Toorop
71b773ab2f
'"' needs to be escaped too in json
2019-02-15 10:44:49 +01:00
Willem Toorop
c3d0afd47d
Issue #419 : Escape backslashes when printing json
...
Thanks boB Rudis
2019-02-15 10:29:39 +01:00
Willem Toorop
97ac5d3ddc
Merge branch 'develop' of github.com:getdnsapi/getdns into develop
2019-02-04 15:46:46 +01:00
Willem Toorop
0fef131e9b
bugfix #418 duplicate ,'s in Windows build
2019-02-04 15:46:10 +01:00
wtoorop
f5194a9118
Merge pull request #417 from he32/warn-fixes
...
Fix various build warnings uncovered on NetBSD w/pkgsrc.
2019-01-28 11:41:35 +01:00
Havard Eidnes
c68f5a7a8d
Fix various build warnings uncovered on NetBSD w/pkgsrc.
...
The isxxxx() and toxxxx() functions have a limited well-defined
input value range, namely that of "unsigned char" plus EOF. Cast
args accordingly.
Bring strncasecmp() into scope by including <strings.h>.
2019-01-28 11:24:10 +01:00
Willem Toorop
7c1b43b420
Fix sole pinset validation with ssl_dane library
2019-01-23 14:33:35 +00:00
Willem Toorop
cad7eb2461
Probably the strlcpy
2019-01-23 14:06:04 +01:00
Willem Toorop
f72fe60035
Cannot reuse qname (via name) after read_line_cb..
...
.. returns.
2019-01-23 13:55:29 +01:00
Willem Toorop
2206558376
Merge abstracted TLS API + GnuTLS alternative
...
Thank you Jim!
Merge branch 'devel/abstract-tls' into develop
2019-01-23 12:52:59 +01:00
Willem Toorop
e657024531
Run all unit tests again
2019-01-23 12:50:44 +01:00
Willem Toorop
35f2ce37c0
Restore original serve delays
2019-01-23 12:49:22 +01:00
Willem Toorop
c4bd91b196
Merge remote-tracking branch 'jim/feature/abstract-tls' into devel/abstract-tls
2019-01-23 12:46:07 +01:00
Willem Toorop
d71dccaf2c
- Nested getdns_context_runt() prevention
...
- Fix address query with qname and missing qtype for -I and -F too
- disable tiny delay again
2019-01-23 12:43:20 +01:00
Jim Hague
cdc0d43315
Correct auth state thinko. Spotter credit to Willem.
2019-01-23 11:34:02 +00:00
Willem Toorop
8980f5f5ee
Fix nested scheduling with getdns_query -F and -I
...
+ add 1 millisecond delay between batched queries, just because...
2019-01-23 11:41:00 +01:00
Willem Toorop
0af9a629f4
Does smaller delay make a difference?
2019-01-23 10:50:57 +01:00
Willem Toorop
ac379787a2
Reassure clang static analyzer that all is OK
2019-01-23 10:29:20 +01:00
Willem Toorop
79fbef07d8
type specifier misplaced by #ifdef unclarity
2019-01-23 10:27:17 +01:00
Willem Toorop
2bd853bda5
Merge remote-tracking branch 'jim/feature/abstract-tls' into devel/abstract-tls
2019-01-23 09:49:17 +01:00
Jim Hague
61cae868e3
Update ChangeLog to include changes in this branch.
2019-01-17 11:24:40 +00:00
Jim Hague
814ee2c4cf
Fix more gcc 8 warnings.
...
As warnings, these cause builds to fail when running the test suite.
2019-01-17 11:23:39 +00:00
Jim Hague
09ca9a826b
Fix gcc 8 warnings.
2019-01-15 17:13:13 +00:00
Jim Hague
9024fd7736
Fix build with INTERCEPT_COM_DS defined.
...
Decide that layout of handling write results is more readable, and use with read too.
2019-01-15 15:34:33 +00:00
Jim Hague
ee6bc7d978
Remove development test erroneously checked in.
2019-01-15 12:39:02 +00:00
Jim Hague
6553aa3aad
The new minimum OpenSSL version means that Travis must switch to Xenial.
2019-01-15 12:11:13 +00:00
Jim Hague
8609a35e5b
GnuTLS: Add support for TLS 1.3.
2019-01-15 11:31:22 +00:00
Jim Hague
ccd6c3592d
GnuTLS: Can't set priority for SSL3.
2019-01-15 11:30:56 +00:00
Jim Hague
24774fefd6
Remove 'upstream' association with connection, now unused.
2019-01-15 11:01:58 +00:00
Jim Hague
9e4add2219
Merge branch 'develop' into feature/abstract-tls
2019-01-14 19:15:53 +00:00
Jim Hague
3fe0c94357
Merge branch 'develop' into feature/abstract-tls
2019-01-14 19:09:20 +00:00
Willem Toorop
67b7a8c024
Release 1.5.1
...
-----BEGIN PGP SIGNATURE-----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=Nj+6
-----END PGP SIGNATURE-----
Merge tag 'v1.5.1'
Release 1.5.1
2019-01-11 16:31:45 +01:00
Willem Toorop
66f63b21bc
Stubby with dns.google in stubby.yml.example
2019-01-11 14:52:40 +01:00
Willem Toorop
78d6bc30f5
Update stubby to 0.2.5
2019-01-11 13:04:07 +01:00
Jim Hague
51cb570809
Re-add support for OpenSSL prior to 1.1, but now require at least 1.0.2 and drop LibreSSL support.
2019-01-11 11:16:48 +00:00
Willem Toorop
35077bdc6d
Update ChangeLog & bumb version
2019-01-11 12:08:38 +01:00
Willem Toorop
411c5cf571
Git rid of * if in libgetdns.symbols
2019-01-07 12:08:26 +01:00
Willem Toorop
a4020a6841
mk-symfiles.sh improvent
...
to filter out #defines as intended.
Thanks Zero King
2019-01-07 11:33:21 +01:00
Willem Toorop
014ac3d368
Stubby with trust_anchors_backoff_time example config
2019-01-03 11:19:13 +01:00
Willem Toorop
426b6f67dd
Merge branch 'devel/no-tls1.3-in-cipher_list' into develop
2018-12-31 16:14:26 +01:00
Willem Toorop
bbe7dff257
No TLS1.3 ciphers in cipher_list only when ...
...
SSL_set_ciphersuites in OpenSSL API.
2018-12-31 16:13:20 +01:00
Willem Toorop
c69a2f7806
Merge branch 'ArchangeGabriel-patch-1' into devel/no-tls1.3-in-cipher_list
2018-12-31 16:09:55 +01:00
Bruno Pagani
1962c03b79
context: remove TLS13 cipher from cipher_list
...
TLS 1.3 ciphers have to be set in ciphersuites instead.
2018-12-23 11:31:27 +00:00
Willem Toorop
215d553c0b
Merge branch 'release/1.5.0'
2018-12-21 17:22:17 +01:00
Willem Toorop
6f4d25e096
Merge branch 'release/1.5.0' into develop
2018-12-21 17:22:01 +01:00
Willem Toorop
309db67f8b
RFE getdnsapi/stubby#121 log re-instantiating TLS ...
...
... upstreams (because they reached tls_backoff_time) at log level 4 (WARNING)
2018-12-21 16:30:46 +01:00
Willem Toorop
345ed9a734
Final stubby update
2018-12-21 15:52:46 +01:00
Willem Toorop
4be406ce1f
Bump version
2018-12-21 15:40:13 +01:00
Willem Toorop
7c52883341
Remove truncated response from transport test
2018-12-21 12:44:51 +01:00
Willem Toorop
431f86f414
Make tests aware of NODATA == NO_NAME change
2018-12-21 12:10:19 +01:00
Willem Toorop
5247fc8de4
Mention RESPSTATUS_NO_NAME change in Changelog
2018-12-21 11:44:04 +01:00
Willem Toorop
13e1e36ba3
RESPSTATUS_NO_NAME when no answers found
...
(so for NODATA answers too)
2018-12-21 11:28:00 +01:00
Willem Toorop
ff1cdce6f8
s/explicitely/explicitly/g
...
Thanks Andreas Schulze
2018-12-20 15:06:01 +01:00
Jim Hague
65f4fbbc81
Make sure all connection deinits are only called if there is something to deinit.
2018-12-14 15:38:32 +00:00
Jim Hague
c1bf12c8a2
Update default GnuTLS cipher suite priority string to one that gives the same ciphers as the OpenSSL version.
...
Also fix deinit segfault.
./gnutls-ciphers "NONE:+AES-256-GCM:+AES-128-GCM:+CHACHA20-POLY1305:+ECDHE-RSA:+ECDHE-ECDSA:+SIGN-RSA-SHA384:+AEAD:+COMP-ALL:+VERS-TLS-ALL:+CURVE-ALL"
Cipher suites for NONE:+AES-256-GCM:+AES-128-GCM:+CHACHA20-POLY1305:+ECDHE-RSA:+ECDHE-ECDSA:+SIGN-RSA-SHA384:+AEAD:+COMP-ALL:+VERS-TLS-ALL:+CURVE-ALL
TLS_ECDHE_RSA_AES_256_GCM_SHA384 0xc0, 0x30 TLS1.2
TLS_ECDHE_RSA_AES_128_GCM_SHA256 0xc0, 0x2f TLS1.2
TLS_ECDHE_RSA_CHACHA20_POLY1305 0xcc, 0xa8 TLS1.2
TLS_ECDHE_ECDSA_AES_256_GCM_SHA384 0xc0, 0x2 TLS1.2
TLS_ECDHE_ECDSA_AES_128_GCM_SHA256 0xc0, 0x2b TLS1.2
TLS_ECDHE_ECDSA_CHACHA20_POLY1305 0xcc, 0xa9 TLS1.2
$ openssl ciphers -v TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256:TLS13-CHACHA20-POLY1305-SHA256:EECDH+AESGCM:EECDH+CHACHA20
ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH Au=RSA Enc=AESGCM(256) Mac=AEAD
ECDHE-ECDSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH Au=ECDSA Enc=AESGCM(256) Mac=AEAD
ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 Kx=ECDH Au=RSA Enc=AESGCM(128) Mac=AEAD
ECDHE-ECDSA-AES128-GCM-SHA256 TLSv1.2 Kx=ECDH Au=ECDSA Enc=AESGCM(128) Mac=AEAD
ECDHE-ECDSA-CHACHA20-POLY1305 TLSv1.2 Kx=ECDH Au=ECDSA Enc=ChaCha20-Poly1305 Mac=AEAD
ECDHE-RSA-CHACHA20-POLY1305 TLSv1.2 Kx=ECDH Au=RSA Enc=ChaCha20-Poly1305 Mac=AEAD
2018-12-14 15:24:13 +00:00
Willem Toorop
79459f5d1d
Merge branch 'release/1.5.0' into develop
2018-12-14 16:05:27 +01:00
Willem Toorop
36cb9b0243
We also always publish sha1 over tarballs
2018-12-14 13:45:22 +01:00
Willem Toorop
232f655663
trust_anchor_backoff_time also when appdata dir is not writable
2018-12-14 13:42:43 +01:00
Willem Toorop
e9060792dc
Merge branch 'release/1.5.0' into develop
2018-12-14 10:45:57 +01:00
Willem Toorop
990372329c
typo
2018-12-13 15:26:13 +01:00
Willem Toorop
dc6bb0fa52
Something wrong with /etc/hosts?
2018-12-13 15:24:37 +01:00
Willem Toorop
eecc18703a
Issue found with static analysis
2018-12-13 15:24:27 +01:00
Willem Toorop
154f98e321
Update consts
2018-12-13 15:24:19 +01:00
Willem Toorop
93b7cb6a01
ZONEMD rr-type
2018-12-13 14:53:41 +01:00
Jim Hague
a4590bafcb
Implement reading CAs from file or dir.
...
I found gnutls_certificate_set_x509_trust_(file|dir)(), so it's a lot
easier than I feared. Plus a little diggiing shows that if you're
loading the system defaults, GnuTLS on Windows does load them from the
Windows certificate store.
2018-12-13 13:33:54 +00:00
Willem Toorop
41f4940072
Log messages about trust anchor fetching and installing
2018-12-13 14:23:32 +01:00
Jim Hague
e8f34d48fb
Adjust default cipher list so required authentication works with getdnsapi.
...
The previous default cipher string wouldn't connect with getdnsapi.
Selection of cipher strings requires some deep study, I think.
So, taking working with getdnsapi.net as our target, discover that we
need SECURE128 as well as SECURE192. And rather than disable everything
except TLS1.2, disable TLS1.0 and TLS1.1. This should mean it connects
to TLS1.3.
2018-12-13 12:04:01 +00:00
Jim Hague
2759d727e5
Minor speeling fix.
2018-12-13 11:54:41 +00:00
Jim Hague
fa9d8885f0
Fix problems with GnuTLS pinset handling.
...
Pinset validation now seems to work.
2018-12-13 11:03:31 +00:00
Willem Toorop
91a3a3db36
More specific return codes, more logging
2018-12-12 16:12:07 +01:00
Jim Hague
45be26642b
Fix dane query handling and verify error reporting.
...
Verify error is flags, not values. And deiniting a dane_query that is
NULL segfaults.
2018-12-12 15:01:07 +00:00
Jim Hague
b51c7384e6
Implement _getdns_decode_base64() for GnuTLS.
...
Use primitives in libnettle.
2018-12-12 15:00:03 +00:00
Jim Hague
0dec4a6f21
Correct format string, fixing type error in specifier.
...
I was wondering why the error output did appear.
2018-12-12 14:59:13 +00:00
Jim Hague
35b4969216
Abstract out OpenSSL specific parts of getdns_pubkey_pin_create_from_string().
...
The only OpenSSL function is decoding Base64.
2018-12-11 18:03:00 +00:00
Jim Hague
bf011d9294
Add GnuTLS DANE library to configure detection when using GnuTLS.
2018-12-11 18:02:03 +00:00
Jim Hague
aa49a935c7
Fixed error detection in certificate verification.
2018-12-11 17:59:44 +00:00
Jim Hague
ab69a9a7da
Merge branch 'feature/abstract-tls' of https://github.com/banburybill/getdns into feature/abstract-tls
2018-12-11 15:01:44 +00:00
Jim Hague
0a9f155cc9
Merge pull request #4 from wtoorop/feature/abstract-tls-willem
...
Enable ed25519, ecdsa and cookies with gnutls/libnettle
2018-12-11 15:01:12 +00:00
Jim Hague
2c6ec5e0be
Implement setting up pinset for DANE. Verification to come.
2018-12-11 14:59:21 +00:00
Willem Toorop
ab700e70fe
DNS Cookies with libnettle too
2018-12-11 15:13:17 +01:00
Willem Toorop
a6ab7ffe41
ed25519 and ecdsa support with libnettle
2018-12-11 15:05:09 +01:00
Jim Hague
ff7ffc246c
Rename TLS Interface DANE init to pinset init. That's what it's actually used for.
2018-12-11 12:46:05 +00:00
Jim Hague
1acd880f26
Correct error return value from stub.
2018-12-07 17:56:12 +00:00
Jim Hague
fee864c25c
Implement setting cipher/curve lists.
...
Set the priority string to a concatenation of the connection cipher and curve strings, falling back to the context ones if the connection value isn't specified. Also get context.c to specify NULL for default context list and the opportunistic list for the connection, moving these library-specific quantities into the specific implementation.
2018-12-07 16:55:17 +00:00
Willem Toorop
bb99321e57
More constness for issue #410
2018-12-07 16:34:03 +01:00
Willem Toorop
8a7226baee
Move from debugging to logging for
...
- upstream_stats & stub system
2018-12-07 14:02:17 +01:00
Willem Toorop
bdfdd99645
Anticipate different openssl versions
2018-12-07 14:00:47 +01:00
Jim Hague
511dfc75ef
Implement _getdns_tls_context_set_min_proto_1_2().
...
Add a flag to the context (so, it's actually got something useful there!) and check the connection version on a successful handshake.
This means we need to access the context from a connection, so add a pointer to the context to the connection.
2018-12-07 11:11:33 +00:00
Jim Hague
64f0d6aaa8
Rename _getdns_tls_connection_verify() to _getdns_tls_connection_certificate_verify().
...
I managed to mislead myself about what it did, which suggests the name should be clearer.
2018-12-07 11:09:20 +00:00
Jim Hague
b0c057e8ae
Update dependencies for GnuTLS.
...
In practice a 'make depend' is required before building with either OpenSSL or GnuTLS.
2018-12-06 16:35:43 +00:00
Jim Hague
46c49cbcfe
Modify getdns_server_mon to use GnuTLS or OpenSSL.
...
Untested.
2018-12-06 16:32:20 +00:00
Jim Hague
72d9b91a2e
Extract non-OpenSSL specific code from pubkey-pinning.c, and move it back to common source.
...
OpenSSL-specific items are in pubkey-pinning-internal.c.
2018-12-06 14:09:30 +00:00
Jim Hague
e73ab48687
Extract non-OpenSSL specific code from anchor.c, and move it back to common source.
...
OpenSSL-specific items are in anchor-internal.c.
2018-12-06 14:07:32 +00:00
Jim Hague
91764fb6b0
Correct checking of connection validation result.
2018-12-06 11:04:00 +00:00
Jim Hague
c6dffa1239
Add use of libnettle, and enable val_secalgo routines from existing Nettle implementation.
...
Link to the openssl val_secalgo implementation and use that, after adjusting the source of Nettle includes.
GnuTLS uses Nettle itself, so this is not adding a new dependency.
2018-12-06 10:41:58 +00:00
Jim Hague
b2312aee12
Implement hostname authentication.
2018-12-05 17:20:28 +00:00
Jim Hague
f64aa8703d
First pass at a mostly stubbed GnuTLS implementation.
...
This works enough to do a TLS lookup.
2018-12-05 11:25:32 +00:00
Willem Toorop
46f0b06f24
Start release processes for getdns-1.5.0
2018-12-04 14:17:20 +01:00
Willem Toorop
c80aa72725
ED25519 & ED448 support
2018-12-03 15:35:03 +01:00
Willem Toorop
ea55b12a08
getdns_query for addresses with qname but no qtype
2018-12-03 14:52:58 +01:00
Willem Toorop
30a3a6b026
Longer timeout for recursing_6 test
2018-12-03 14:33:56 +01:00
Willem Toorop
390e383a1a
ED25519 & ED448 DNSSEC validation support
2018-12-03 14:33:21 +01:00
Willem Toorop
6d066f95f9
Merge branch 'features/trust_anchors_backoff_time' into develop
2018-12-03 12:51:00 +01:00
Willem Toorop
4b688443f4
Sync with unbound
2018-12-03 12:50:37 +01:00
Willem Toorop
a1692359f3
RFE #408 : Retry fetching of TA after backoff time
2018-12-03 12:27:31 +01:00
Willem Toorop
1e7da76901
Bugfix getdnsapi/stubby#140 fallback on getentropy failure
2018-11-30 14:50:06 +01:00
Willem Toorop
5986d0497f
Merge branch 'features/dnssec_extension' into develop
2018-11-30 14:23:49 +01:00
Willem Toorop
c1f51815ba
RFE #408 : "dnssec" extension requiring DNSSEC
...
When this extension is set, GETDNS_DNSSEC_INDETERMINATE status will no
longer be returned.
2018-11-30 14:20:12 +01:00
Jim Hague
153e766edf
tls.h uses struct mem_funcs in types-internal.h.
2018-11-27 18:04:14 +00:00
Jim Hague
c4a3f75844
Correct make depend generation for TLS directory.
2018-11-27 18:03:27 +00:00
Jim Hague
e60d852637
Common OpenSSL digester selection.
2018-11-27 16:55:33 +00:00
Willem Toorop
e3b007a43a
Issue #410 : Document ownership with getdns_context_get_api_information()
...
+ const for extensions and namespaces
TODO: Look at other cases that are not const for no good reason.
Thanks Stefan Bühler
2018-11-27 16:59:47 +01:00
Jim Hague
c101a7a021
Abstract context DANE initialisation.
2018-11-27 15:41:23 +00:00
Jim Hague
26bcddd029
Abstract cookie SHA256 calculation.
2018-11-27 15:31:33 +00:00
Jim Hague
af962228fc
Abstract maximum digest length.
2018-11-27 15:31:05 +00:00
Jim Hague
0cdede21df
Abstract SHA1 calculation.
2018-11-27 15:29:48 +00:00
Jim Hague
5e390a4b23
Revise all TLS interfaces to pass in GetDNS memory functions where necessary.
...
This means we can remove OpenSSL_free() calls from request-internal.c and util-internal.c.
2018-11-27 14:41:46 +00:00
Jim Hague
bc3106af94
Abstract out HMAC functions in request-internal.c.
2018-11-27 11:49:12 +00:00
Jim Hague
4ec93a3df0
Add Doxygen for remaining tls.h functions.
2018-11-26 11:32:18 +00:00
Jim Hague
27a7e4e28f
Attempt minimal autoconf changes to use GnuTLS instead of OpenSSL.
...
I could waste the rest of the available time trying to turn configure.ac into something that cleanly ignores OpenSSL, uses GnuTLS instead and retains all the options. Or even better scrap the whole autoconf mess and start again.
But in the interests of prototyping, do something quick and dirty. This means GnuTLS must for now be configured thus:
$ CFLAGS="-g" ../configure --enable-stub-only --with-gnutls --disable-gost --disable-ecdsa --disable-edns-cookies
to evade other items with hardcoded OpenSSL checks in them.
2018-11-23 17:49:06 +00:00
Jim Hague
2267863a53
Attempt to improve the preprocessor horror that is util/val_secalgo.h.
...
Convert the main util/val_secalgo.h to a plain interface. Move the preprocessor redefines into validator/val_secalgo.h, and move THAT under openssl, because it is OpenSSL implementation specific at present - you can compile with NSS and Nettle if config allows.
2018-11-23 16:28:55 +00:00
Willem Toorop
2d76a5fd52
We had complaints for serving the root, so..
...
TCP only full recursion test now starting from K-root
(because other roots are unreliable TCP-wise)
2018-11-22 12:16:19 +01:00
Willem Toorop
b90ba236ae
tls_ciphersuites, tls_cipher_list, tls_curve_list,
...
tls_min_version & tls_max_version settings must cause
failure when not supported by the TLS library. Not during
configure time, but during connection setup so it doesn't
hamper alternative transports.
2018-11-22 11:37:28 +01:00
Willem Toorop
6b10570842
DNSSEC bugfix found with static analysis
...
* Fix for DNSSEC bug in finding most specific key when
trust anchor proves non-existance of one of the labels
along the authentication chain other than the non-
existance of a DS record on a zonecut.
2018-11-22 10:21:48 +01:00
Willem Toorop
4ff9816e39
google now supports DoT
2018-11-21 17:00:03 +01:00
Willem Toorop
73868643d2
Fix compile warnings
2018-11-21 16:07:47 +01:00
Willem Toorop
1904ee7318
Enhancement getdnsapi/stubby#56 & getdnsapi/stubby#130
...
Configurable TLS version
2018-11-21 15:02:28 +01:00
Jim Hague
e7593541ef
Ensure that compat/getentropy* don't get used, and so drag in OpenSSL.
2018-11-20 17:37:46 +00:00
Jim Hague
4f67491971
Remove unnecessary OpenSSL include in dnssec.c.
2018-11-20 17:36:56 +00:00
Jim Hague
05f9d30e89
Move anchor.c to under openssl.
2018-11-20 16:57:48 +00:00
Jim Hague
f3e0f2b9e6
Split OpenSSL specific bits of keyraw.hc into keyraw-internal.hc.
...
All usage is internal to val_secalgo.c, which is already in openssl.
2018-11-20 16:51:17 +00:00
Jim Hague
da94b52f74
Move val_secalgo.c to openssl.
...
It contains ports other than OpenSSL (NSS and NETTLE), but we're not worrying about those for our purposes at present.
2018-11-20 16:21:06 +00:00
Jim Hague
4eb845bc58
Move internal-only functions from public pubkey-pinning interface.
...
The interface now only exposes functions used by the main getdns code.
2018-11-20 15:55:34 +00:00
Jim Hague
ff9cde2087
Remove SSL type from pubkey-pinning interface.
2018-11-20 15:49:26 +00:00
Jim Hague
756eda96d8
Remove ssl_dane dir from dependency generation search.
2018-11-20 15:47:56 +00:00
Jim Hague
cfa78707a3
Add openssl subdir to distribution.
2018-11-20 15:35:59 +00:00
Willem Toorop
6a5e96d4e1
tls_ciphersuites + bugfix in strdup2!!
2018-11-20 16:13:57 +01:00
Jim Hague
52421be5f4
Correct error checking result of _getdns_tls_context_set_ca().
2018-11-20 15:12:10 +00:00
Jim Hague
1b0a09a23f
Wrap hostname/certificate verification.
...
This removes the last OpenSSL items from stub.c.
2018-11-20 14:53:31 +00:00
Willem Toorop
e5a53fb1d2
Bumb version
2018-11-20 13:57:13 +01:00
Jim Hague
fb73bcb77e
Correct return value error from _getdns_tls_connection_(read|write)().
2018-11-20 12:43:17 +00:00
Jim Hague
2e8c48544b
Move pubkey-pinning implementation under openssl/.
2018-11-19 13:55:02 +00:00
Jim Hague
aba0e2fb4c
Move non-TLS-library specific parts of tls.h to ~/src/tls.h and have it include lib-specific tls-internal.h.
...
Update dependencies.
2018-11-19 09:49:54 +00:00
Jim Hague
5d353d9efb
To aid proof-of-concept work, insist on OpenSSL 1.1.1 or later.
...
Remove ssl_dane as now surplus to requirements.
2018-11-16 17:58:29 +00:00
Jim Hague
0fd6fd4c5c
Replace (one instance of) SSL_get_peer_certificate().
2018-11-16 17:09:26 +00:00
Jim Hague
4b8c9d1bd7
Replace SSL_get_version().
2018-11-15 17:53:37 +00:00
Jim Hague
09019bee75
Replace SSL_write().
2018-11-15 17:53:29 +00:00
Jim Hague
e7453522d5
Replace SSL_read().
2018-11-15 17:51:52 +00:00
Jim Hague
e22c01e212
tls_do_handshake: move handshake and check for new session into abstraction layer.
2018-11-15 14:28:04 +00:00
Jim Hague
ffd1136e94
tls_create_object(): Move setting client state and auto-retry into connection_new and add setting connection session.
2018-11-15 13:23:00 +00:00
Jim Hague
d9fdd4c10d
Abstracting TLS; let's start with context only.
...
Change data types in context.h and fix up context.c. Do minimal fixups to stub.c.
2018-11-15 11:01:13 +00:00
Willem Toorop
12589d85c2
Wild guess at OpenSSL without engine support
2018-06-12 17:00:45 +02:00
Willem Toorop
9b4e8e9e91
X509_get_notAfter not in OpenSSL 1.1.1 anymore
2018-06-12 16:37:46 +02:00
Willem Toorop
884f6ddc5e
DS is always a delegation and never at the apex
2018-06-10 16:57:40 +02:00
Willem Toorop
25231aa686
Fix finding signer of NSEC and NSEC3s
...
Thanks Philip Homburg
2018-06-08 21:39:59 +02:00
Willem Toorop
000fa94ae2
Sync ldns & utils with unbound
2018-05-22 12:44:13 +02:00
Willem Toorop
799bd2f6b1
Bugfix #399 : Reinclude <linux/sysctl.h> in getentropy_linux.c
2018-05-15 08:11:55 +02:00
Willem Toorop
f9ab894936
Merge branch 'develop' of github.com:getdnsapi/getdns into develop
2018-05-11 13:29:59 +02:00
Willem Toorop
8c108fb761
Merge branch 'release/1.4.2'
2018-05-11 13:29:24 +02:00
Willem Toorop
e481273ff4
Last minute update
2018-05-11 13:20:08 +02:00
wtoorop
0510fb00d3
Merge pull request #397 from ehmry/tcp_sendto
...
No TCP sendto without TCP_FASTOPEN
2018-05-11 12:04:49 +01:00
wtoorop
fa133fcb92
Merge pull request #393 from saradickinson/bugfix/windows_certs
...
Temporary fix for https://github.com/getdnsapi/stubby/issues/87 . Dete…
2018-05-11 11:52:18 +01:00
wtoorop
7fe45a7012
Merge pull request #396 from saradickinson/bugfix/windows_certs
...
Temporary fix for https://github.com/getdnsapi/stubby/issues/87 . Dete…
2018-05-11 11:51:33 +01:00
Willem Toorop
86e5c39159
Release 1.4.2
...
-----BEGIN PGP SIGNATURE-----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=DfcS
-----END PGP SIGNATURE-----
Merge tag 'v1.4.2'
Release 1.4.2
2018-05-11 12:45:26 +02:00
Willem Toorop
0d283fc63f
1.4.2 release
2018-05-11 12:02:49 +02:00
Willem Toorop
48e0ea013c
Include Stubby - v0.2.3 release
2018-05-11 11:56:00 +02:00
Willem Toorop
6c99e7b8a6
Bugfix getdnsapi/stubby#106 : Core dump when ...
...
printing certain configuration. Thanks Han Vinke
2018-05-11 11:28:52 +02:00
Willem Toorop
98b1ff624a
Memory loss with empty string bindata's
2018-05-11 11:23:19 +02:00
Emery Hemingway
a6ec2b2449
No TCP sendto without TCP_FASTOPEN
2018-05-08 14:58:17 +02:00
Willem Toorop
5a816f3d51
Include systemd and contrib dir with stubby
2018-05-04 15:29:14 +02:00
Willem Toorop
9d48f1cf97
Update Stubby
2018-05-04 15:21:05 +02:00
Willem Toorop
9b7999ecf2
Update stubby
2018-05-04 15:19:33 +02:00
Willem Toorop
7331717990
Fix for Fallback to current (working) directory (for appdata_dir).
2018-05-04 15:30:27 +02:00
Willem Toorop
7e2a896410
Update stubby
2018-05-04 11:28:09 +02:00
Willem Toorop
99bfe4a287
Fallback to current (working) directory (for appdata_dir).
...
To improve integration with system and service managers like systemd
See also getdnsapi/stubby#106
2018-05-04 10:40:49 +02:00
Willem Toorop
caab2e8592
Bump versions and include release/0.2.3 Stubby release branch
2018-05-03 17:21:58 +02:00
Willem Toorop
23d2affebf
More ChangeLog entries
2018-05-03 15:14:12 +02:00
Willem Toorop
2a110043da
Just some notes about packages
2018-05-03 14:35:01 +02:00
Willem Toorop
3c355d425b
Warnings are errors :(
2018-05-03 12:15:48 +02:00
Willem Toorop
101d602739
Travis output showed it was a bracket issue
2018-05-03 11:48:07 +02:00
Willem Toorop
de7f007bf3
Without dl_iterate_phdr for now...
2018-05-03 11:40:44 +02:00
Willem Toorop
f5c588c955
Need _GNU_SOURCE before config.h
2018-05-03 11:30:28 +02:00
Willem Toorop
f0f101511b
_GNU_SOURCE needed for struct dl_phdr_info from link.h
2018-05-03 11:21:11 +02:00
Willem Toorop
4f050facc3
Bugfix #394 : Update src/compat/getentropy_linux.c
...
in order to handle ENOSYS (not implemented) fallback.
Thanks Brent Blood
2018-05-02 14:32:12 +02:00
Willem Toorop
6c075e2ad8
Bugfix #395 : Clarify that libidn2 dependency is for version 2.0.0 or higher
2018-05-02 14:01:00 +02:00
Willem Toorop
9c01968048
DS and DNSKEY lookups for tld and sld immediately
...
Resolves issue getdnsapi/stubby#99
2018-05-01 17:07:16 +02:00
Willem Toorop
7fecf5a93d
Allow NSEC spans starting from (unexpanded) wildcards
2018-05-01 13:19:24 +02:00
Willem Toorop
a834d32718
Fix negative reversed IPv4 test
...
which assumes 1.1.1.1.in-addr.arpa does not exist
2018-04-23 14:05:02 +02:00
Willem Toorop
1b5b0ca799
Force trailing '\0' with string config settings
...
Because even though it is added when parsing from JSON, it will be lost when the bindata is copied into a dict with getdns_dict_set_bindata.
2018-04-23 15:11:20 +02:00
saradickinson
ced112ca74
Temporary fix for https://github.com/getdnsapi/stubby/issues/87 . Detect and ignore duplicate certs in the root store.
2018-04-05 18:35:07 +01:00
Willem Toorop
a820c0124d
Merge branch 'develop'
2018-03-12 12:25:58 +01:00
Willem Toorop
81ea235d50
Merge branch 'release/1.4.1' into develop
2018-03-12 12:25:25 +01:00
Willem Toorop
75f59b9dfc
Bump version
2018-03-12 12:05:09 +01:00
Willem Toorop
3d2ac4c16c
Change git source for yxml submodule
...
Resolved issue getdnsapi/stubby#84
2018-03-09 11:37:37 +01:00
Willem Toorop
ef0a77e061
Forgot the dash before the rc1 again
2018-03-05 16:34:50 +01:00
Willem Toorop
7548b095bc
Doxygen fixes
2018-03-05 16:12:49 +01:00
Willem Toorop
1e9a7849de
Spelling corrections in the spec
2018-03-05 16:08:00 +01:00
Willem Toorop
06e1c741e8
PR #387 : Compile with OpenSSL with deprecated APIs disabled.
...
Thanks Rosen Penev
2018-03-05 15:40:16 +01:00
Willem Toorop
1bc056ee70
PR #386 in ChangeLog
2018-03-05 12:47:51 +01:00
Willem Toorop
c45b3ed9db
Merge branch 'release/1.4.1-max_udp_backoff_value' into release/1.4.1
2018-03-05 12:43:32 +01:00
Willem Toorop
8a2fc5f5a9
max_udp_backoff should not be public
...
At least, not with this point release
2018-03-05 12:42:27 +01:00
Robert Groenenberg
eec6ec29dd
[UDP] try upstreams in round-robin fashion when all yupstreams have failed
2018-03-05 12:03:20 +01:00
Robert Groenenberg
f787c87137
Reset back_off on successful query
2018-03-05 12:02:01 +01:00
Robert Groenenberg
a0fb2c8424
Limit back_off value to avoid very long retry interval
2018-03-05 12:01:52 +01:00
Willem Toorop
d1aa3922fe
Bugfix #388
2018-03-05 11:53:03 +01:00
Willem Toorop
fd5e0cdc02
Merge branch 'bugfix/388-endless-fallback-loop' into release/1.4.1
2018-03-05 11:52:36 +01:00
Willem Toorop
9da06230d9
DNSSEC issues from PR #389
2018-03-05 11:51:31 +01:00
Willem Toorop
e93b583a26
Merge branch 'devel/dnssec_issues' into release/1.4.1
2018-03-05 11:41:55 +01:00
Willem Toorop
1dd5f4dc16
PR #384 : Fix minor spelling and formatting. Thanks dkg
2018-03-05 11:34:32 +01:00
Willem Toorop
c057ca52e4
Merge remote-tracking branch 'dkg/spelling' into release/1.4.1
2018-03-05 11:30:33 +01:00
Willem Toorop
bedc4ba0bb
Bugfix #382 : Parallel install of getdns_query and getdns_server_mon
2018-03-05 11:30:18 +01:00
Willem Toorop
0d6b127684
Merge branch 'bugfix/382-parallel-install-tools' into release/1.4.1
2018-03-05 11:27:24 +01:00
Willem Toorop
984aeefab2
Setup branch for the 1.4.1 release
2018-03-05 11:26:20 +01:00
Willem Toorop
0ff1839a6f
Upstream reset on searchpath retry
2018-03-02 23:31:33 +01:00
Willem Toorop
b178f94505
Don't retry an already tried upstream
2018-03-02 15:56:00 +01:00
Willem Toorop
e29cfb6b6a
Query for DS i.s.o. SOA to find zonecuts
...
Because of broken setups that have zonecuts without SOA:
```
$ drill -T www.gslb.kpn.com A
. 518400 IN NS i.root-servers.net.
com. 172800 IN NS a.gtld-servers.net.
kpn.com. 172800 IN NS ns1.kpn.net.
kpn.com. 172800 IN NS ns2.kpn.net.
gslb.kpn.com. 3600 IN NS gss1.kpn.com.
gslb.kpn.com. 3600 IN NS gss2.kpn.com.
www.gslb.kpn.com. 10 IN A 145.7.170.135
```
but
```
$ drill gslb.kpn.com SOA
;; ->>HEADER<<- opcode: QUERY, rcode: NXDOMAIN, id: 48303
;; flags: qr rd ra ; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;; gslb.kpn.com. IN SOA
;; ANSWER SECTION:
;; AUTHORITY SECTION:
;; ADDITIONAL SECTION:
;; Query time: 8 msec
;; SERVER: 185.49.140.100
;; WHEN: Fri Mar 2 14:13:21 2018
;; MSG SIZE rcvd: 30
```
2018-03-02 14:14:28 +01:00
Willem Toorop
abc69f96fe
Follow unsigned SOA's as insecure zonecut indication
...
Should resolve issue #385
2018-03-02 11:15:45 +01:00
Daniel Kahn Gillmor
9301f8970c
Fix minor spelling and formatting.
...
These issues were found with the codespell tool.
2018-02-23 14:12:11 -08:00
Willem Toorop
1fbb022b88
Bugfix#382 Do not install tools in parallel
2018-02-22 16:05:34 +01:00
Willem Toorop
8797280429
Merge branch 'devel/tpkg-maintenance' into develop
2018-02-22 15:16:31 +01:00
Willem Toorop
e705109f22
Fix tpkg dependencies
2018-02-22 15:02:11 +01:00
Willem Toorop
75297b17ae
Fixes from running servers with valgrind
2018-02-22 14:45:56 +01:00
Willem Toorop
65e610f26e
Unit test maintenance, to:
...
- remove obsolete tests
- test better for parallel installs
- run custom servers through valgrind
2018-02-22 14:44:13 +01:00
Willem Toorop
21155d5aa9
Merge branch 'develop'
2018-02-22 10:24:43 +01:00
Willem Toorop
7bace705b1
Merge branch 'release/1.4.0' into develop
2018-02-21 16:59:40 +01:00
Willem Toorop
a037398156
Bump version
2018-02-21 16:45:26 +01:00
Willem Toorop
5f2add4c09
Merge branch 'bugfix/localhost-on-freebsd-jails' into release/1.4.0
2018-02-21 15:33:27 +01:00
Willem Toorop
6325dae563
Run localhost unit tests on local localhost address
2018-02-21 13:40:19 +01:00
Willem Toorop
a150c6d927
implied source ($<) not defined in explicit rules
2018-02-21 12:17:51 +01:00
Willem Toorop
f2c531265b
libidns2 doesn't detect locale that well...
2018-02-13 16:58:12 +01:00
Willem Toorop
9999907593
update Stubby + other dist tarball fixes
2018-02-13 15:05:29 +01:00
Willem Toorop
a1c30563bf
Update ChangeLog
2018-02-12 17:14:56 +01:00
Willem Toorop
5a420a2aed
Bump versions
2018-02-12 17:14:45 +01:00
Willem Toorop
223e85bc02
Merge branch 'features/tls_curves_list' into release/1.4.0
2018-02-12 16:04:49 +01:00
Willem Toorop
0c3b6fb2f6
Symbols & constants
2018-02-12 15:57:28 +01:00
Willem Toorop
1ebd54a1de
Utils from unbound update
2018-02-12 15:54:43 +01:00
Willem Toorop
31e5cd5ab6
sldns update
2018-02-12 15:54:01 +01:00
Willem Toorop
9a4e389946
Better #ifdef select when to use X509_check_host
2018-02-12 15:46:42 +01:00
Willem Toorop
401aa2e3b8
Specify the supported curves with TLS
2018-02-12 15:40:17 +01:00
Willem Toorop
c3e4061fe2
hostname auth with libressl
2018-02-09 15:18:44 +01:00
Willem Toorop
b914b63e18
Merge branch 'feature/monitor-tool' into release/1.4.0
2018-02-08 14:06:40 +01:00
Willem Toorop
c033e3f1a3
Merge branch 'libressl' into release/1.4.0
2018-02-08 14:04:02 +01:00
Jim Hague
088d775117
In Keepalive test, send the maximum possible timeout value to the server.
...
The response will then show the server's value.
2018-02-08 12:35:45 +00:00
Willem Toorop
f7278ca696
Make getdns_server_mon work with libressl
2018-02-08 12:38:50 +01:00
Willem Toorop
8e8dd34e85
Merge branch 'release/1.4.0-merge-PR-377' into release/1.4.0
2018-02-08 12:07:34 +01:00
Willem Toorop
bf1f01c87e
Syntactic mod to minimizing changes with before PR
...
So changes are highlighted in side-by-side views.
2018-02-08 12:02:48 +01:00
Willem Toorop
7af885396f
Merge branch 'release/1.4.0' into release/1.4.0-merge-PR-377
2018-02-08 11:46:28 +01:00
Willem Toorop
87fec7f9b4
Merge branch 'feature/monitor-tool' into release/1.4.0
2018-02-07 17:11:28 +01:00
Willem Toorop
a72359e058
Comply to new style transport logging
2018-02-07 17:08:55 +01:00
Willem Toorop
7d4ccabc7f
Merge branch 'bugfix/opportunistic_fallabck' into release/1.4.0-merge-PR-377
2018-02-07 17:00:25 +01:00
Willem Toorop
ca7c2fe00e
Merge branch 'devel/spki_pinset_via_tlsa_checking' into release/1.4.0
2018-02-07 16:50:43 +01:00
Willem Toorop
0eba73a945
LibreSSL like OpenSSL < 1.0.2
2018-02-07 16:42:11 +01:00
Willem Toorop
c28a293c9f
"Pinset validation failure" error when it occurred
2018-02-07 14:38:31 +01:00
Willem Toorop
9c5a93bbdf
Merge branch 'develop' into devel/spki_pinset_via_tlsa_checking
2018-02-07 14:12:24 +01:00
Willem Toorop
e944203e55
Merge branch 'develop' of github.com:getdnsapi/getdns into develop
2018-02-07 13:50:53 +01:00
Willem Toorop
82c00eb0a5
version.bind CH TXT for getdns_query
2018-02-07 13:50:29 +01:00
Jim Hague
13d7a730ee
Further mitigate cache effects for OOOR by adding random label to delay lookup.
...
It turns out that delay.getdnsapi.net only pays attention to the left-most label.
2018-02-07 12:41:24 +00:00
wtoorop
7e915b0601
Merge pull request #379 from getdnsapi/devel/tcp-server-stability
...
Devel/tcp server stability
Thanks @maddie & @ArchangeGabriel
2018-02-02 10:44:55 +01:00
Jim Hague
a25f832d8a
Remove timeout argument from keepalive test.
...
The client doesn't send a timeout value to the server, so there's no point having this argument.
2018-02-01 16:04:22 +00:00
Willem Toorop
ec8b8ba903
One more fixing the fixes fix that slipped through
2018-01-31 14:41:13 +01:00
Willem Toorop
9bc98272a1
Fixing the fixes
2018-01-31 14:33:31 +01:00
Willem Toorop
97b056c355
Prevent erred TCP connection to be rescheduled ...
...
for reading (or writing) when an reply comes in.
Thanks Maddie!
2018-01-30 15:21:46 +01:00
Willem Toorop
1f401f7253
Do not return freed netreqs!
2018-01-30 12:40:47 +01:00
Willem Toorop
2e03d3799c
Memory leak on some TLS creation error cases
2018-01-30 12:23:23 +01:00
Jim Hague
3b5657e580
Reduce delay on OOOR delayed lookup.
...
A delay of 1000ms was causing frequent lookup timeouts e.g. on 9.9.9.9. We hypothesise that the delay causes an internal timeout in the server to fire. So reduce the delay to a smaller value that seems to leave the test working but reduces the incidence of timeouts.
We observe this still leaves timeouts on TLS connections to 9.9.9.9. These seem to occur only on TLS connections, and reducing the delay much further does not alter the observed behaviour. We guess there is something else going on there.
2018-01-29 10:17:54 +00:00
Sara Dickinson
7e3439efbc
Improve handling of opportunistic back-off. If other transports are working, don’t forcibly promote failed upstreams just wait for the re-try timer.
...
Clean up logs.
2018-01-24 13:13:14 +00:00
Jim Hague
1d211013e6
Update top level README to include getdns_server_mon in its outline of tools.
2018-01-23 17:55:15 +00:00
Willem Toorop
4f37d2b933
No wildcard expansions allowed for RRs used in DNSSEC proofs
...
Signatures of DNSKEYs, DSs, NSECs and NSEC3s can not be wildcard expansions when used with DNSSEC proofs.
Only direct queries for those types are allowed to be wildcard expansions.
This in response to https://unbound.net/downloads/CVE-2017-15105.txt , although getdns was not vulnerable for this specific issue.
2018-01-23 16:50:05 +01:00
Jim Hague
037f6039c8
Improve AsciiDoc table formatting.
2018-01-23 13:53:08 +00:00
Jim Hague
01ea1d6a22
Note TLS 1.3 is experimental. At least until we find a stable test server.
2018-01-23 13:47:31 +00:00
Jim Hague
b0661b9d9f
Add a tool README.
...
Use AsciiDoc for this, as the GitHub table support in Markdown is woeful. But AsciiDoc is always better than Markdown anyway.
2018-01-23 13:45:55 +00:00
Jim Hague
8ba53f10b6
Correct RTT warning and critical default thresholds.
2018-01-23 13:45:09 +00:00
Jim Hague
fcaa4f9845
Reflow usage message entry.
2018-01-23 12:37:14 +00:00
Jim Hague
f3b2f83879
More output tittivating. Make verbose by default in non-monitoring mode.
2018-01-23 12:14:40 +00:00
Jim Hague
a4f17760ab
Revise rcode_text() to get text from getdns, and add rrtype_text().
2018-01-23 12:13:59 +00:00
Jim Hague
7e884e2cd0
Rename concurrent to OOOR (Out Of Order Responses).
2018-01-23 11:30:12 +00:00
Jim Hague
bedd3a02cf
Revise concurrency test to use <n>.delay.getdnsapi.net.
...
This gives more secure results than the previous method.
2018-01-22 17:39:25 +00:00
Jim Hague
1e774a95f5
Don't rely on GCC extensions.
2018-01-22 16:49:53 +00:00
Jim Hague
8c3047dbe0
Add 'concurrent' test
...
The concurrent test works by sending a known good query synchronously,
and then sending asynchronous queries for three random TLDs followed by
the known good query. The latter should be answerable from cache, and so
give a result before at least one of the random TLDs.
2018-01-22 16:49:53 +00:00
Willem Toorop
d38f233a80
Track readbuf free's
...
As tcp_connection_destroy() might be called more than once per connection (depending on outstanding work)
2018-01-22 16:56:48 +01:00
Jim Hague
f9e4c9f853
Revise output.
...
If in monitoring mode, make output conform to Nagios norms. This starts with the probe type and result, so we need to save output generated during the operation and print it at the end.
If not in monitoring mode, make the formatting more expansive.
2018-01-22 14:36:54 +00:00
Jim Hague
0291e205fd
Add TLS 1.3 test.
...
Add a new item tls_version to call_reporting, containing the OpenSSL version string for the name of the protocol used for the connection.
The test does a normal lookup, but first sets the cipher list to TLS1.3 only ciphers. This will cause a Bad Context error at search time, so we can tell if the underlying OpenSSL library lacks TLS 1.3. The check the call reporting for a TLS version of "TLSv1.3".
2018-01-19 15:56:40 +00:00
Jim Hague
62ad159f15
Update dnssec-validate. Check we can retrieve info for bogus domain, and remove must use TCP flag.
...
Run a second query with the CD bit set and check that succeeds.
2018-01-19 14:51:46 +00:00
Jim Hague
3fd4f7f240
Add 'dnssec-validate' test.
...
This test checks whether the server does DNSSEC validation. If it manages to find an A record for dnssec-failed.org, it doesn't.
2018-01-19 14:51:46 +00:00
Jim Hague
1a3025a405
If server does not return expected TXT in qname-min, return UNKNOWN not WARNING.
2018-01-18 17:17:16 +00:00
Jim Hague
ea035fa82e
Correct some code formatting.
2018-01-18 17:16:28 +00:00
Jim Hague
f5322c701d
Add more missing make targets causing test 105 to fail.
...
It's amazing how fiddly it is to add a single executable/source file to the build.
2018-01-18 11:49:16 +00:00
Jim Hague
add818fea2
Remove dependency on timegm() when using OpenSSL < 1.0.2.
...
Convert dates to Julian and diff. This is basically what ASN1_TIME_diff() does internally.
And that's quite enough near-pointless polishing here.
2018-01-18 10:55:44 +00:00
Jim Hague
00c17dca14
Add to certificate time conversion to cope with pre-1.0.2 OpenSSL. Also tag printed time with UTC.
...
The time parse with pre-1.0.2 is a best effort, and relies on timegm() to convert struct tm in UTC to time_t. There being attractive alternative. Isn't C time handling grotty?
2018-01-17 18:38:28 +00:00
Willem Toorop
155b035cd8
Forgot to surround surround yaml include with defines
2018-01-17 17:07:36 +01:00
Jim Hague
760269acbd
Make internal types POSIX-compliant by not naming them *_t.
...
See: http://pubs.opengroup.org/onlinepubs/9699919799/xrat/V4_xsh_chap02.html#tag_22_02_12_01
The change tacitly ignores the colossal number of coach and horses the entire world, including getdns, has stampeded through this POSIX hope for decades, but simply hopes for some small recognition when the Recording Angel tots up the damages.
2018-01-17 15:35:56 +00:00
Jim Hague
6bd0f8b980
Encode exit status words in () to make it clear that it's not part of the sentence.
...
'Server validates OK' -> 'Server validates (OK)'
2018-01-17 15:24:17 +00:00
Jim Hague
3666d994a7
Add 'keepalive' test and supporting changes to getdns library.
...
Checking for server support for keepalive means we need to know if the server did send a keepalive option to the client. This information is not currently exposed in getdns, so add a flag 'server_keepalive_received' to call_reporting. This is 0 if not received, 1 if received. If received, the actual timeout is in 'idle timeout in ms', though watch out for the overflow alternative.
2018-01-17 15:17:20 +00:00
Jim Hague
a4ff6de985
Add 'tls-padding' test.
2018-01-16 12:59:03 +00:00
Jim Hague
fdafb458ef
Decide we don't want return_both_v4_and_v6 on queries.
2018-01-16 12:19:33 +00:00
Jim Hague
b8424e494d
Fix up some small usage typos, and don't report result if issuing test usage message.
2018-01-16 11:05:16 +00:00
Jim Hague
5ea0edf262
Update usage.
2018-01-15 17:42:57 +00:00
Jim Hague
8dc3a84735
Add options specifying transport.
2018-01-15 17:42:43 +00:00
Jim Hague
3438c68591
Prefix TLS-only options with 'tls-'.
2018-01-15 13:26:09 +00:00
Jim Hague
08b5976f9c
Decouple from getdns config. This is now a pure getdns client.
2018-01-15 13:19:48 +00:00
Jim Hague
3298b5cd50
Extract common processing into search_check() and parse_search_check().
2018-01-15 12:37:57 +00:00
Jim Hague
cb7af33488
Some tests imply TLS. Explicitly make sure these always go over TLS.
2018-01-15 11:28:11 +00:00
Jim Hague
77a5a15cdf
Minor output corrections.
2018-01-15 11:02:14 +00:00
Jim Hague
22996bf07d
If TLS auth name given, lookup is to go over TLS.
2018-01-15 11:00:12 +00:00
Jim Hague
c0d7d2c279
Print exit status at end of main output line.
2018-01-15 10:27:10 +00:00
Jim Hague
5d4bc8bc96
Add rtt test.
2018-01-15 10:16:26 +00:00
Jim Hague
b9312e790f
Correct certificate expiry custom threshold handling.
2018-01-15 10:01:01 +00:00
Jim Hague
3258fdfd5a
Tabs? Spaces? Currently both, switch to spaces only.
2018-01-14 23:28:55 +00:00
Jim Hague
379662a3f3
Add plain lookup test.
2018-01-14 13:41:44 +00:00
Jim Hague
60118e9241
Improve cert-valid argument order to most likely first.
2018-01-13 14:56:55 +00:00
Jim Hague
e7618321ce
Add cert-valid test.
2018-01-12 18:21:38 +00:00
Jim Hague
e597daa4c0
Add 'auth' test.
2018-01-12 17:23:42 +00:00
Jim Hague
3152a4112e
Protect more #includes.
...
Somewhat illogical, really. A lot are standard headers.
2018-01-12 16:34:23 +00:00
Jim Hague
305daab9aa
Add first version of getdns_server_mon.
...
Currently only QNAME minimisation check is working.
2018-01-12 16:11:48 +00:00
Norbert Copones
0fa6d1fe2d
src/stub.c: LibreSSL has hostname verification turned on by default
2018-01-12 05:44:27 +08:00
Willem Toorop
d44237554d
No warnings from danessl allowed
2018-01-11 12:40:01 +01:00
Willem Toorop
dd433ede68
Merge branch 'develop' into devel/spki_pinset_via_tlsa_checking
2018-01-10 14:36:43 +01:00
Willem Toorop
a746ea5e08
Dependencies
2018-01-10 14:36:33 +01:00
Willem Toorop
6b4446c7cd
Suppress compiler warnings in danessl library
2018-01-10 14:34:25 +01:00
Willem Toorop
712617e568
Dead assignment (without stub debugging)
2018-01-10 13:54:18 +01:00
Willem Toorop
7c5bdd5431
Use danessl submodule when OpenSSL version between 1.0.0 and 1.1.0
2018-01-10 12:47:14 +01:00
Jim Hague
a906710269
Add missing function sufficient to compile Stubby on Xenial and Mac.
...
This includes the select and poll default event loops, some missing getdns source files and pleasingly now results in a warning-free build.
2018-01-08 18:59:54 +00:00
Jim Hague
1ecc7b3c26
Initial version of CMake build.
...
This is just a basic build of the library. No options are support, and the only builds tested are Xenial and MacOS (the latter using the Brew openssl package, and so requiring -DOPENSSL_ROOT_DIR=/usr/local/Cellar/openssl/1.0.2l option on the cmake command line).
Using the library is untested.
2018-01-08 15:36:35 +00:00
Willem Toorop
9e34588f19
logic error
2018-01-08 16:04:40 +01:00
Willem Toorop
546b75a9b1
libidn2 support. Thanks Paul Wouters
2018-01-08 12:54:48 +01:00
Willem Toorop
a1e5cc44a0
Add https://github.com/vdukhovni/ssl_dane submodule
2018-01-08 10:33:25 +01:00
Willem Toorop
608189710c
Log printing in getdns_query
2018-01-04 16:35:22 +01:00
Willem Toorop
2471f43dea
Less logging with successful authenticated upstreams
2018-01-04 16:15:50 +01:00
Willem Toorop
540735a956
Check pins with DANE functions when available
2018-01-04 15:58:09 +01:00
Willem Toorop
fe7d6678cf
Merge branch 'develop'
2017-12-22 12:43:06 +01:00
Willem Toorop
2ff1bf6152
Merge branch 'release/1.3.0' into develop
2017-12-22 12:42:47 +01:00
Willem Toorop
25a31e6b35
Bump version
2017-12-21 17:06:43 +01:00
Willem Toorop
03d4950470
We need to set transport list before first query
...
(this needs to be reviewed...)
2017-12-21 16:49:19 +01:00
Willem Toorop
9aa1d067d2
Detect dnsmasq and skip the unit test that fails with it
...
This actually resolves issue #300
Thanks Tim Rühsen and Konomi Kitten
2017-12-21 16:21:10 +01:00
Willem Toorop
aa419a88d0
Skip some more truncation issues with dnsmasq
2017-12-21 16:01:48 +01:00
Willem Toorop
81ffa2f48d
Skip test that breaks with dnsmasq
...
when SKIP_DNSMASQ_ISSUE variable is test.
Helps out a little with issue #300
2017-12-21 15:45:58 +01:00
Willem Toorop
0ef910b9ee
read_buf's may remain on canceled tcp requests
2017-12-21 14:53:54 +01:00
wtoorop
efb0539c15
Merge pull request #368 from getdnsapi/devel/tls_settings
...
TLS settings have tls_ prefixed name
2017-12-21 14:25:01 +01:00
Willem Toorop
97cc67d026
s/CApath/tls_ca_path/g s/CAfile/tls_ca_file/g
2017-12-21 13:08:01 +01:00
wtoorop
f173f4667f
Merge pull request #367 from getdnsapi/features/set_cipher_list
...
Features/set cipher list
2017-12-21 13:00:08 +01:00
Willem Toorop
ae38a29a50
Upstream specific tls_cipher_list's
2017-12-21 12:30:15 +01:00
Willem Toorop
8f88981efe
rename set_cipher_list() to set_tls_cipher_list()
2017-12-21 11:35:05 +01:00
Willem Toorop
7fe3bd6a1f
getdns_context_set_ciphers_list()
2017-12-20 13:13:02 +01:00
Willem Toorop
2bd5df4959
Update to Stubby v0.2.1
2017-12-20 09:53:11 +01:00
Willem Toorop
d35fae5038
Bump version (to 1.3.0-rc2), update ChangeLog
2017-12-20 09:43:45 +01:00
Willem Toorop
274bc9bc4a
Merge branch 'develop' into release/1.2.2
2017-12-20 09:37:56 +01:00
wtoorop
76d8f11b44
Merge pull request #366 from hardfalcon/develop
...
Add support for TLS 1.3 and Chacha20-Poly1305
2017-12-20 09:36:59 +01:00
wtoorop
7b20414ee0
Merge pull request #365 from saradickinson/fix_windows_build
...
Fix windows build
2017-12-19 11:25:33 +01:00
Pascal Ernster
65c7a738eb
Add support for TLS 1.3 and Chacha20-Poly1305
...
Add support for TLS 1.3 (requires OpenSSL 1.1.1) and Chacha20-Poly1305 (requires OpenSSL 1.1).
Older OpenSSL versions will simply ignore ciphersuite specifications they don't understand and use the subset which they do unterstand.
Note that "EECDH" does *not* select anonymous cipher suites (as opposed to "kECDHE").
2017-12-15 20:01:30 +00:00
Sara Dickinson
00d3232ba4
Fix windows build
2017-12-15 16:53:23 +00:00
Willem Toorop
ac17d4ebed
We need a specific install location for tests builds ...
...
to not load default library
2017-12-14 11:53:15 +01:00
wtoorop
9c35fa1643
Merge pull request #364 from saradickinson/move_macos_script
...
Update makefile because a file in Stubby was moved
2017-12-13 16:35:32 +01:00
Willem Toorop
2b5b59537f
Getting Stubby ready to merge PR #364
2017-12-13 16:33:37 +01:00
Willem Toorop
fd16d7b5eb
Bugfix in stubby.c (copy/paste error)
2017-12-13 15:59:42 +01:00
Willem Toorop
0615457dfa
Resolve constant conflict
2017-12-13 15:43:36 +01:00
Willem Toorop
9f566de65d
DNSSEC segfault issue
2017-12-13 15:41:08 +01:00
Sara Dickinson
d232353f93
Update makefile because a file in Stubby was moved
2017-12-13 14:22:52 +00:00
Willem Toorop
d7864ee0df
Stubby disabling DNSSEC validation update
2017-12-13 14:52:49 +01:00
Willem Toorop
2c66487635
Merge branch 'devel/dnssec_meta_queries' into release/1.2.2
2017-12-13 14:52:00 +01:00
Willem Toorop
5f1a2f8659
Merge branch 'features/CA_verify_locations' into release/1.2.2
2017-12-13 14:49:42 +01:00
Willem Toorop
cfeaefbe3f
Merge branch 'features/resolvconf' into release/1.2.2
2017-12-13 14:44:06 +01:00
Willem Toorop
825e2fd15f
Bump version
2017-12-13 14:42:18 +01:00
Willem Toorop
090b076d96
Zero configuration DNSSEC meta queries on existing transports
...
Should fix bug #356
2017-12-13 13:08:24 +01:00
Willem Toorop
a63e5edb86
trust-anchor meta queries need to be done opportunistic too
...
In anticipation of DANE authenticated upstreams
2017-12-13 12:58:24 +01:00
Willem Toorop
e691312a3f
Schedule DNSSEC meta queries against existing context
2017-12-13 12:50:03 +01:00
Willem Toorop
362d168380
no_dnssec_checking_disabled extension for internal use only
2017-12-13 12:36:02 +01:00
Willem Toorop
d4ec98ae6d
ChangeLog for previous commit
2017-12-13 11:55:49 +01:00
Willem Toorop
d5518bad67
Return which extensions are set
...
(for programs (Stubby) to know whether a context will do native dnssec validation or not)
2017-12-13 11:12:49 +01:00
Willem Toorop
da3f023d8f
set_CApath() and set_CAfile() for alt verify locs
2017-12-12 15:10:37 +01:00
Willem Toorop
26877d4494
Include sys/stat.h (from config.h) +
...
+ introduce GETDNS_RETURN_IO_ERROR return code
(forgot to mention that in previous commit)
2017-12-12 12:38:55 +01:00
Willem Toorop
96ed06c6a9
Initialize context with given resolv.conf and hosts files
...
- getdns_context_create with set_from_os set will simply call these
functions with the defaults
+ filechg_check is simplified somewhat (reducting memory management)
+ get OpenSSL version version via get_api_information()
2017-12-12 12:24:31 +01:00
Willem Toorop
01197f10ff
Merge branch 'develop' into features/resolvconf
2017-11-29 15:25:50 +01:00
wtoorop
b105faad7d
Merge pull request #360 from getdnsapi/bugfix/private_ecs_with_family
...
Bugfix #359 : edns_client_subnet_private should set family
2017-11-28 16:59:37 +01:00
Willem Toorop
17d23ddb99
Restore running all unit tests again
2017-11-28 16:58:58 +01:00
Willem Toorop
8c87028d77
Only get root-anchors.xml when BOGUS root dnskey...
...
did have signatures which did not validate
2017-11-28 16:58:12 +01:00
Willem Toorop
2a39b6e2e8
Handle the uninitialized memory error the brutal way
...
Because clang (or valgrind with clang) is just wrong here
2017-11-28 16:51:28 +01:00
Willem Toorop
72eb8628d0
Report on single unit tests too
2017-11-28 16:44:08 +01:00
Willem Toorop
543435d89d
Clang bitfield issue
2017-11-28 16:40:17 +01:00
Willem Toorop
025f1cdff3
set_from_os last to initialize ...
...
... because it is initialized with values from context itself!
I.e. context->tls_backoff_time, context->tls_connection_retries and context->log are used to initialize upstreams in upstreams_create() called from set_from_os
2017-11-28 16:04:23 +01:00
Willem Toorop
30e440d35c
Access of freed memory in stub DNSSEC cleanup code
...
Should fix the latest core dump reported in getdnsapi/stubby#34
2017-11-27 15:26:45 +01:00
Willem Toorop
323239be58
Scan valgrind logs for errors too
2017-11-27 15:02:32 +01:00
Willem Toorop
27847b9a0a
Initialize context->sys_ctxt!
2017-11-23 13:23:00 +01:00
Willem Toorop
6afb02b2f1
Bugfix #359 : edns_client_subnet_private should set family
...
Thanks Daniel Areiza
2017-11-23 13:20:42 +01:00
Willem Toorop
c3cdf496e3
Meta queries to upstreams from resolvconf setting
2017-11-23 12:48:48 +01:00
Willem Toorop
c0a3babe0a
Separate sys_ctxt for meta queries
2017-11-23 12:44:40 +01:00
Willem Toorop
3e16075563
Test getdns_context_create2 with getdns_query
2017-11-23 12:26:40 +01:00
Willem Toorop
ed6c7a6b58
getdns_context_create2 and family that set an ...
...
... alternative resolvconf file
2017-11-22 15:49:30 +01:00
Willem Toorop
a7a6240202
Set default resolvconf and hosts during configure
2017-11-22 15:01:38 +01:00
Willem Toorop
3a1cb30c28
BOGUS answer because unable to fetch root DNSKEY...
...
... should not cause segfault
2017-11-21 15:38:49 +01:00
Willem Toorop
3098ed6fca
Merge branch 'develop'
2017-11-11 10:24:55 +08:00
Willem Toorop
8821c1c8cf
Merge branch 'release/1.2.1' into develop
2017-11-11 10:24:25 +08:00
Willem Toorop
f2f08514ce
Set date in ChangeLog
2017-11-11 00:42:25 +08:00
Willem Toorop
bf034eb3cd
Bump version
2017-11-11 00:28:17 +08:00
Willem Toorop
6aa732b54d
Update Stubby
2017-11-11 00:26:18 +08:00
Willem Toorop
260416a859
Ignore SIGPIPE signal (for not suddenly stopping)
2017-11-10 10:42:17 +01:00
Willem Toorop
6f20016889
default_trust_anchor_location in api_information
...
instead of trust_anchor_file
2017-11-10 10:35:41 +01:00
wtoorop
81bfa68440
Merge pull request #355 from saradickinson/bugfix/create_runstatedir
...
Add DESTDIR to runstatedir creation path
2017-11-08 12:48:50 +01:00
Sara Dickinson
26eb5b8969
Add DESTDIR to runstatedir creation path
2017-11-08 11:38:52 +00:00
Willem Toorop
5fe979c2e6
Update ChangeLog and configure.ac
2017-11-03 20:26:45 +01:00
Willem Toorop
f6517fd3e2
Update Stubby to v0.1.5
2017-11-03 20:12:28 +01:00
wtoorop
168d83ac19
Merge pull request #353 from getdnsapi/devel/errno_handling
...
Handle more harmless I/O error cases +
2017-11-03 20:00:40 +01:00
Willem Toorop
439f41149b
Last rename + explicit EMFILE check replacement
2017-11-03 16:42:38 +01:00
Willem Toorop
9b019b8c6e
Check errno is not 0 before testing errors
2017-11-03 16:29:43 +01:00
Willem Toorop
4508ec77fb
Few more renames
2017-11-03 16:26:19 +01:00
Willem Toorop
3b7b83e309
Review comments from Jim
2017-11-03 15:41:31 +01:00
Willem Toorop
a8fac29a66
Handle more harmless I/O error cases +
...
- never exit on I/O errors
- never stop listening on I/O errors
- extended platfrom.[ch] with _getdns_strerror()
2017-11-03 13:50:13 +01:00
wtoorop
b683cc4870
Merge pull request #352 from saradickinson/bugfix/make_runstatedir
...
Make sure the runstatedir exists
2017-11-03 13:42:52 +01:00
wtoorop
e078f3c51a
Merge pull request #351 from getdnsapi/devel/dnssec_maintenance
...
Devel/dnssec maintenance
2017-11-03 11:11:23 +01:00
Sara Dickinson
4b8ea64140
Make sure the runstatedir exists
2017-11-02 16:55:25 +00:00
wtoorop
c3b86ccc21
Merge pull request #350 from banburybill/features/piddir
...
Add configure --with-piddir. Use this for runstatedir.
2017-11-02 15:24:44 +01:00
Willem Toorop
546fc1d404
Update ChangeLog
2017-11-02 15:14:07 +01:00
Willem Toorop
843ba4b036
Merge branch 'develop' into devel/dnssec_maintenance
2017-11-02 15:07:16 +01:00
Willem Toorop
5dbfdd4ddb
Update ChangeLog
2017-11-02 15:06:56 +01:00
Jim Hague
2d0d1c9e6f
Add configure --with-piddir. Use this for runstatedir.
...
You need autoconf 2.70 (or 2.69 plus patch as in Debian) for runstatedir to be automatically in the configure script. This adds a always-present config option.
2017-11-02 13:21:50 +00:00
Willem Toorop
2434336ead
Include all RRSIGs in validation chain
...
Because we don't know algorithm support of other validators.
But still canonicalize the RRset with the one used to validate just because we can.
2017-11-02 12:42:26 +01:00
Willem Toorop
7e103217c6
unsigned RRs in authority section with BIND
...
when +CD flag is used
2017-11-01 16:47:28 +01:00
Willem Toorop
270c3d654f
Support DNSSEC validation without support records
2017-11-01 15:28:46 +01:00
Willem Toorop
b4ae4b7121
Cannot fetch DNSKEY when in DNSKEY callback ...
...
for the same name in full recursion
2017-11-01 15:01:58 +01:00
Willem Toorop
4669956391
retry full recursion bogus answers only when...
...
dnssec validation was requested in the first place
2017-11-01 10:59:55 +01:00
Willem Toorop
09b4f6d57d
One more _getdns_perror
2017-10-31 16:22:09 +01:00
Willem Toorop
e2b26609d4
Stubby back to develop branch
2017-10-27 13:03:49 +02:00
Willem Toorop
725f5d486a
Credit Remi Gacogne
2017-10-27 09:58:25 +02:00
wtoorop
24f7ae3ea6
Merge pull request #348 from rgacogne/stubby-libbsd-link
...
Fix a linking issue in stubby when libbsd is present
2017-10-27 09:57:48 +02:00
Remi Gacogne
8e12d86fc3
Fix a linking issue in stubby when libbsd is present
...
When libbsd is found on the system during the configure, the result
of `pkg-config --cflags libbsd-overlay` is added to `CFLAGS`:
`-DLIBBSD_OVERLAY -isystem /usr/include/bsd`
The result of `pkg-config --libs libbsd-overlay` is added to `LIBS`,
but not to `STUBBY_LIBS`, which is used when linking stubby.
Because of the new `CFLAGS`, the preprocessor replaces the call to
`getopt()` in stubby.c with a call to `bsd_getop()`:
```
#ifdef LIBBSD_OVERLAY
#undef getopt
#define getopt(argc, argv, optstr) bsd_getopt(argc, argv, optstr)
#endif
```
But since `-lbsd` has not been added to `STUBBY_LIBS`, the linking of
stubby fails with an unresolved symbol:
```
../libtool --tag=CC --mode=link gcc -o stubby stubby.lo convert_yaml_to_json.lo gbuffer.lo -lyaml libgetdns.la
libtool: link: gcc -o .libs/stubby .libs/stubby.o .libs/convert_yaml_to_json.o .libs/gbuffer.o -lyaml ./.libs/libgetdns.so
/usr/bin/ld: .libs/stubby.o: undefined reference to symbol 'bsd_getopt@@LIBBSD_0.0'
/usr/lib/libbsd.so.0: error adding symbols: DSO missing from command line
collect2: error: ld returned 1 exit status
```
Simply adding the result of `pkg-config --libs libbsd-overlay` to
`STUBBY_LIBS` in addition to `LIBS` fixes the issue.
2017-10-22 17:36:45 +02:00
Sara Dickinson
cb6af78944
Merge pull request #347 from saradickinson/update_stubby_commit
...
Update stubby to use the 0.1.4 release
2017-10-20 08:38:40 -07:00
Sara Dickinson
d3b13c2bc9
Update stubby to use the 0.1.4 release
2017-10-20 16:22:03 +01:00
Sara Dickinson
5d581baae1
Merge pull request #345 from getdnsapi/devel/robustness
...
Devel/robustness
2017-10-20 07:30:17 -07:00
Willem Toorop
12272dda36
Merge branch 'develop' into devel/robustness
2017-10-20 16:10:35 +02:00
Willem Toorop
f26fd6c8ee
Merge branch 'features/mingw-win10-perror' into develop
2017-10-20 16:07:46 +02:00
Willem Toorop
971d876c70
Dependencies
2017-10-20 15:59:42 +02:00
Willem Toorop
b2d32430f6
Merge branch 'develop' into features/mingw-win10-perror
2017-10-20 15:57:50 +02:00
Willem Toorop
fc073267f1
Dead assignment
2017-10-19 14:14:37 +02:00
Willem Toorop
f8e1ed78b8
Make upstream_reset static (and not shared between .c files)
2017-10-19 12:48:58 +02:00
Willem Toorop
5ce764ab70
Merge branch 'devel/robustness' into devel/robustness_bugfix
2017-10-19 12:37:53 +02:00
Willem Toorop
272d0cf0ef
Allow clearing of upstreams
2017-10-19 12:35:10 +02:00
Sara Dickinson
ddade192a3
Merge branch 'devel/robustness' of https://github.com/getdnsapi/getdns into devel/robustness_bugfix
2017-10-19 10:37:08 +01:00
Sara Dickinson
8886c5317d
Fix 2 bugs:
...
- backoff time was not incrementing correctly
- best authentication information state was not being kept for shutdowns during setup (needed if e.g. hostname authentication failed during handshake).
2017-10-19 10:36:46 +01:00
Willem Toorop
87879783ec
Postpone dealing with upstream derenferencing issue
2017-10-18 14:33:59 +02:00
Willem Toorop
eedd1a1448
Eat incoming garbage on statefull transports
...
Can deal with timed out queries that are answered anyway.
+ reset the upstream on failure always
(since requests are rescheduled for fallback by upstream_failed now anyway)
2017-10-17 16:58:01 +02:00
Willem Toorop
fa597399e2
Update stubby
2017-10-17 15:14:09 +02:00
Willem Toorop
dc5a78b154
Printing something which is not on stack
...
(causing segfault in some cases)
2017-10-17 14:19:59 +02:00
Willem Toorop
f83c8e217e
Decrease assumptions based on network_by_query_id
2017-10-17 13:47:29 +02:00
Willem Toorop
ee4feb0cc6
Clean parallel builds too
2017-10-17 13:32:56 +02:00
Willem Toorop
11e4635f2b
Dependencies
2017-10-17 13:32:41 +02:00
Willem Toorop
ce4c44830d
Unused variables
2017-10-16 15:26:00 +02:00
Willem Toorop
968d94d2be
atomic netreq removal from write_queue in upstream_write_cb
2017-10-16 14:17:49 +02:00
Jim Hague
a4fa9ad4eb
Merge branch 'develop' into features/mingw-win10-perror
2017-10-10 15:17:52 +01:00
wtoorop
6afcc97b87
Merge pull request #341 from banburybill/features/mingw-win10
...
Fix Stubby stopping listening to UDP on Win10 mingw64 builds
2017-10-09 15:53:10 +02:00
Jim Hague
4ca8ee008b
Add _getdns_perror(). On Windows this reports Winsock errors.
2017-10-06 18:15:18 +01:00
Jim Hague
34f4e13833
Have separate Windows DEBUG_NL() similar to DEBUG_ON().
...
This removes a build warning.
2017-10-06 16:24:56 +01:00
Jim Hague
4b5303e6fb
Merge branch 'features/mingw-win10' into features/mingw-win10-warnings
2017-10-06 15:28:10 +01:00
Jim Hague
5e415b60b6
Add missing platform.h include.
2017-10-06 15:04:49 +01:00
Jim Hague
74eaf4b03e
Previous commit omitted platform.h.
2017-10-06 14:38:59 +01:00
Jim Hague
eb6da94e25
Convert one more poll() to _getdns_poll().
2017-10-06 12:07:47 +01:00
Jim Hague
dc7daede40
Move Windows/Unix functions into new platform.h.
2017-10-06 12:07:15 +01:00
Jim Hague
0874a0a472
Use PRI format strings in wire2str.c and remove ARG_LL.
2017-10-05 19:17:12 +01:00
Jim Hague
8a291d4dce
Revise autoconf checking for sigset_t.
...
The previous strategy for Windows of checking for sigset_t and if it failed repeating the check with -D_POSIX did not work as expected. Autoconf found the second instance of the test, thought it was the same as the first, and used the cached result from the first. It was only because a typo did not reset CFLAGS back, so always adding _POSIX, that this worked with mingw.
Change instead to checking for sigset_t and if that fails for _sigset_t, and in config.h if sigset_t does not exist but _sigset_t does then typedef _sigset_t to sigset_t. Also amend the implementation of sigfillset() to cast to sigset_t not _sigset_t; it may not be just mingw that doesn't have sigfilleset().
Also, ensure signal.h is one of the headers included when checking for sigset_t. It's the header Posix says sigset_t is defined in...
2017-10-05 19:15:41 +01:00
Jim Hague
59e6ec80fe
Fix configure runtime error.
...
Error was:
checking for DSA_SIG_new... yes
../configure: line 13315: test: too many arguments
2017-10-05 15:04:40 +01:00
Jim Hague
ff7c85ab20
Fix build errors introduced by a0c3134
.
2017-10-05 12:43:35 +01:00
Jim Hague
a70efd118d
Fix build warnings about inet_ntop() not being declared on Win10/MinGW.
2017-10-05 12:36:03 +01:00
Jim Hague
0895522734
Merge branch 'develop' into features/mingw-win10
2017-10-05 10:52:06 +01:00
Jim Hague
1eae1ad96b
Fix problem where Stubby stops listening to UDP on Win10.
...
Winsock can return ECONNRESET when receiving UDP via recvfrom() if an ICMP Port Unreachable has been received. Rather than treat the socket as being in error and closing it, just ignore the error.
2017-10-04 17:42:06 +01:00
Jim Hague
757becc812
write() on a socket is equivalent to send() with flag value of 0.
2017-10-04 17:32:52 +01:00
Jim Hague
a0c313412d
Adjust Unix socket/Winsock handling.
...
Centralise it into util-internal.h, remove duplicate definitions from mdns, and add new pseudo-functions _getdns_closesocket(), _getdns_poll() and _getdns_socketerror(). Convert error values to simple values and convert error checking to use _getdns_socketerror() and the simple values. The simple values can also be used with the result from getsockopt() with SO_ERROR in stub.c.
2017-10-04 17:31:33 +01:00
Willem Toorop
ffc72ff253
Rearrange includes for finding inet_ntop on Windows
...
+ make sure stubby is linked with initial LDFLAGS (i.e. static) as well
2017-10-03 17:09:33 +02:00
wtoorop
d5efa01d06
Merge pull request #339 from banburybill/features/mingw-win10
...
Check for implementations of sigemptyset, sigfillset and sigaddset an…
2017-10-03 16:38:13 +02:00
Willem Toorop
3e221ebed5
Fix parallel make install's
2017-10-02 16:36:07 +02:00
Willem Toorop
b22666d667
Bump version
2017-10-02 16:34:12 +02:00
Jim Hague
4acce42720
Check for implementations of sigemptyset, sigfillset and sigaddset and add if not present.
...
mingw64 doesn't have them and compilation fails at link time.
2017-10-02 14:15:16 +01:00
Willem Toorop
8a4497ff4b
Merge branch 'release/1.2.0'
2017-09-29 22:47:39 +02:00
Willem Toorop
c786ba03d2
Merge branch 'release/1.2.0' into develop
2017-09-29 22:47:19 +02:00
Willem Toorop
8ddab4813b
Date and README.md update
2017-09-29 22:46:31 +02:00
Willem Toorop
7509f691f3
Update Stubby README.md
2017-09-29 22:16:16 +02:00
Willem Toorop
3f05242bce
yaml dir has moved
2017-09-29 11:47:15 +02:00
Willem Toorop
6aa73c9374
Thank Travis Burtrum for finding the auth bug
2017-09-29 11:41:58 +02:00
Willem Toorop
d1aebd3c24
Don't test hostname auth without support in libssl
2017-09-29 11:07:43 +02:00
Willem Toorop
6b04ed8551
Bumb version
2017-09-28 22:28:39 +02:00
Willem Toorop
23daf9aac3
Fix TLS authentication
2017-09-28 22:17:36 +02:00
Willem Toorop
a9ba50dff1
Fail transport test on failures
2017-09-28 22:17:06 +02:00
Willem Toorop
e75cf0b7a3
A missing symbol fails on macos
2017-09-28 20:21:10 +02:00
Willem Toorop
c3df13b27c
PATH_MAX can be in sys/limits.h too..
...
and must have a fallback value
2017-09-28 19:45:16 +02:00
Willem Toorop
a86e21b48a
Fix reading files on windows with stubby too
2017-09-28 15:19:07 +02:00
Willem Toorop
52a4500792
Signedness error
2017-09-28 15:13:57 +02:00
Willem Toorop
15eec724a5
Portable CR to CRLF conversion
2017-09-28 15:09:55 +02:00
Willem Toorop
078c50f1b2
fread with mingw32 compiled can return < file sz,
...
because it automatically converts \r\n into \n
2017-09-28 15:09:16 +02:00
Willem Toorop
b9260f8fca
Install Windows format stubby.yml on Windows
2017-09-27 16:24:32 +02:00
Willem Toorop
3ab01cf45d
Dont do yaml tpkg test
2017-09-27 13:27:24 +02:00
Willem Toorop
cefeed2b47
PRIsz usage like PRIu64 etc.
2017-09-27 13:15:12 +02:00
Willem Toorop
7ac289f726
dependencies
2017-09-27 13:07:11 +02:00
Willem Toorop
a7fc760141
Dependencies
2017-09-27 12:47:01 +02:00
Willem Toorop
bf2e08e2df
Move yaml config handling to Stubby
2017-09-27 12:45:13 +02:00
Willem Toorop
ca3f28843c
Comments from Andreas
2017-09-25 09:24:53 +02:00
Willem Toorop
0eda8e1deb
Today release candidate, not actual release
2017-09-22 14:56:18 +02:00
Willem Toorop
1ebbd8d52d
Include yaml in build tarball
2017-09-22 12:45:01 +02:00
Willem Toorop
f26669df68
Make a -rc1 tarball
2017-09-22 12:37:40 +02:00
Willem Toorop
e2f1c8d13c
Release today
2017-09-22 12:28:29 +02:00
Willem Toorop
114b5785f7
Doxygen documentation for Zero configuration DNSSEC
...
+ rename of getdns_context_(get|set)_trust_anchor_*()
to getdns_context_(get|set)_trust_anchors_*()
2017-09-22 12:25:56 +02:00
Willem Toorop
a3bfee7d0a
Issues from unit tests
2017-09-22 11:12:27 +02:00
Willem Toorop
da2aa634d3
Make appdata_dir configurable +
...
settings via getdns_context_config()
2017-09-21 17:06:29 +02:00
Willem Toorop
1b47ce4d10
Slightly different function prototypes
2017-09-21 12:38:49 +02:00
Willem Toorop
edba5b77f8
Updated ChangeLog
2017-09-21 12:33:44 +02:00
Willem Toorop
90a187a1ac
New recommendations regarding trust anchor management
2017-09-21 12:33:19 +02:00
Willem Toorop
712f62a4c1
Things that came out of compiling on Windows
2017-09-21 11:03:38 +02:00
Willem Toorop
8897bdf18f
dependencies
2017-09-20 15:55:24 +02:00
Willem Toorop
ac86b41fab
Update stubby
2017-09-20 15:46:35 +02:00
Willem Toorop
7c229c40cd
Merge branch 'features/zeroconf-dnssec' into release/v1.2.0
2017-09-20 15:45:27 +02:00
Willem Toorop
fbc1526f47
Merge branch 'devel/compile-on-windows' into release/v1.2.0
2017-09-20 15:40:31 +02:00
Willem Toorop
d880d4222b
Merge remote-tracking branch 'jim/features/yaml' into release/v1.2.0
2017-09-20 15:40:02 +02:00
Willem Toorop
905cf290d4
Bump version, update ChangeLog
2017-09-20 15:38:07 +02:00
Willem Toorop
e6536bb2ef
Typo
2017-09-20 15:18:43 +02:00
Willem Toorop
36943a4380
A dnsreq is bogus if any of its netreqs is
2017-09-20 14:42:35 +02:00
Willem Toorop
17d7ee79f2
Fix NULL pointer dereference
2017-09-20 12:44:14 +02:00
Willem Toorop
f0f2afbca7
Fetch TA before resolve for full recursion too
2017-09-20 12:40:59 +02:00
Willem Toorop
e2abb8aff4
Fetch TA when ZONE or APP TASRC and bogus answer
2017-09-20 11:44:21 +02:00
Willem Toorop
34d35f9e79
Track updating TA's with root DNSKEY rrset
2017-09-20 10:30:13 +02:00
Willem Toorop
e2ffaf3e07
Less activity to detect XML verify failure
2017-09-18 11:49:43 +02:00
Willem Toorop
737f49d2cc
Setup libunbound ta's after processing XML
2017-09-18 09:59:22 +02:00
Willem Toorop
463855d274
Writability test for application data
2017-09-16 18:16:21 +02:00
Willem Toorop
40295075ad
Update stubby submodule
2017-09-14 17:34:39 +02:00
Willem Toorop
8980929150
Check whether -D_POSIX is needed for sigset_t
2017-09-14 17:16:54 +02:00
Willem Toorop
aa74c0a3d5
One more pleasing travis fix
2017-09-14 16:43:10 +02:00
Willem Toorop
e6051976dd
travis specific fixed
2017-09-14 16:32:53 +02:00
Willem Toorop
57e6487d76
Some more fixes specific to travis
2017-09-14 16:02:37 +02:00
Willem Toorop
96c6e49ae5
Use the on windows compilable stubby
2017-09-14 15:26:40 +02:00
Willem Toorop
6d29f7fb65
Fix issues accumulated when tpkg didn't work
2017-09-14 15:14:00 +02:00
Willem Toorop
8c4ed6294e
Merge branch 'develop' into features/zeroconf-dnssec
2017-09-14 12:27:47 +02:00
Willem Toorop
836c651539
Initial fixes from John to compile getdns on Windows
2017-09-14 12:25:25 +02:00
Willem Toorop
f31eb517e0
Lazy TA and time checking
2017-09-14 11:47:02 +02:00
Jim Hague
dcc6cd36c6
Merge pull request #2 from saradickinson/features/yaml
...
Change extension from .yaml to .yml
2017-09-13 17:56:47 +01:00
Jim Hague
80b2eacc26
Merge branch 'develop' into features/yaml
2017-09-13 16:55:11 +00:00
Jim Hague
b20aedd182
Update the getdns_yaml2*() Doxygen comments.
2017-09-13 17:42:24 +01:00
Sara Dickinson
8618e4b731
Change extension from .yaml to .yml
2017-09-13 17:41:16 +01:00
Jim Hague
8139201f12
Allow YAML input to be just a list or scalar as well as a map.
...
This allows getdns_yaml2list(), getdns_yaml2bindata() and getdns_yaml2int() to work as expected.
Update the YAML test to check these.
2017-09-13 17:29:41 +01:00
wtoorop
22d1345491
Merge pull request #333 from saradickinson/variable_tls_backoff
...
Variable tls backoff
2017-09-13 17:00:56 +02:00
Jim Hague
019ce4afe5
Merge pull request #1 from saradickinson/features/yaml
...
Updates to makefiles for s/stubby.conf/stubby.yaml
2017-09-13 16:00:06 +01:00
Willem Toorop
92a0db58da
Merge remote-tracking branch 'upstream/develop' into features/zeroconf-dnssec
2017-09-13 16:56:33 +02:00
Sara Dickinson
8fab939d2c
Merge branch 'features/yaml' of https://github.com/banburybill/getdns into features/yaml
2017-09-13 15:53:47 +01:00
wtoorop
645c6f31cc
Merge pull request #335 from banburybill/develop
...
Add '-f' to tpkg usage message.
2017-09-13 16:52:12 +02:00
Jim Hague
0c39696b64
Add '-f' to tpkg usage message.
2017-09-13 15:50:20 +01:00
Sara Dickinson
8f683ef3c9
Merge branch 'develop' of https://github.com/getdnsapi/getdns into variable_tls_backoff
2017-09-13 15:50:17 +01:00
Sara Dickinson
8c331d580a
Improve usage of getdns to make file extension clearer
2017-09-13 15:48:42 +01:00
Jim Hague
9e47919f42
Merge commit 'a9029581bc18870e8a1b84f77e546500bad7ec0e' into features/yaml
2017-09-13 15:46:47 +01:00
wtoorop
a9029581bc
Merge pull request #334 from banburybill/develop
...
Fix capturing exit code of a test.
2017-09-13 16:13:08 +02:00
Jim Hague
57c40b147d
Fix capturing exit code of a test.
...
tpkg was not capturing the exit code of the test, but the exit code of the write_result actions.
2017-09-13 15:02:36 +01:00
Jim Hague
9683a64f73
Add test 255-yaml-config with basic test of getdns_yaml2dict.
2017-09-13 15:01:13 +01:00
Sara Dickinson
f0190e4f03
Add 2 missing parameters from the config output
2017-09-13 13:02:01 +01:00
Willem Toorop
8f3ce9af35
Configurable zero configuration DNSSEC parameters
2017-09-13 14:00:54 +02:00
Jim Hague
eabad34af9
Add libyaml dependency to README, and note how to remove it.
2017-09-13 12:51:16 +01:00
Jim Hague
c74e8353a8
Move to clang-friendly way of marking unused function parameters as used.
2017-09-13 12:50:18 +01:00
Jim Hague
6d6e66c5a8
Add libyaml to dependencies for Travis.
2017-09-13 12:49:39 +01:00
Sara Dickinson
453b94269b
Updates to makefiles for s/stubby.conf/stubby.yaml
2017-09-13 12:45:56 +01:00
Sara Dickinson
f53e5645d9
Improve the comments about the new backoff handling.
...
Remove unnecessary log.
2017-09-13 10:00:56 +01:00
Jim Hague
6c95f4177d
Add YAML configuration option.
...
Add new extra functions getdns_yaml2(dict|list|bindata|value)(). These are like their getdns_str2() counterparts, but take YAML input rather than JSON.
YAML introduces a new dependency, on libyaml. YAML can be disabled at configuration time, in which case the dependency is removed.
Modify getdns_query such that if a configuration file name includes ".yaml" it will be processed as a YAML configuration, not a JSON configuration.
Internally, getdns_yaml2*() work by passing the YAML string through a simple translation to JSON. At present, this translation assumes that configuration is the only use case, and so will error if the outer layer of the YAML input is not a map. This in effect means that at present all getdns_yaml2*() functions apart from getdns_yaml2dict() will give an error on the YAML translation to JSON.
2017-09-12 16:47:57 +01:00
Sara Dickinson
b760a2ced2
Refine the logging levels to match the errors given when backing off, etc.
2017-09-12 15:01:02 +01:00
Sara Dickinson
729af1d159
Allow backed-off upstreams to be re-instated if all our upstreams are unusable (e.g. if the network is down).
...
But limit re-tries for a given netreq to the total number of upstreams before failing. This should (roughly) allow 2 retries per upstream of the correct transport before bailing out. Otherwise we are stuck in a loop retrying forever!
2017-09-12 13:47:56 +01:00
Willem Toorop
8aa46b305d
Merge branch 'develop' into features/zeroconf-dnssec
2017-09-11 11:09:58 +02:00
Sara Dickinson
42945cfc08
Make the backoff time incrementally increase until the upstream starts working again
2017-09-08 17:28:37 +01:00
wtoorop
10133a71f3
Merge pull request #330 from saradickinson/1.2_stuff
...
First pass at fixing problems when connections to servers are lost.
2017-09-06 15:41:43 +02:00
Sara Dickinson
2e4e3873e4
First pass at fixing problems when connections to servers are lost.
...
Need to reset connection state if connections fail at setup and on read/write if there are no more messages queued.
This means we will back-off servers that fail, so we should think about using a shorter backoff default in stubby
because otherwise temporarily loss of the network connection will mean having to restart stubby.
Also some minor changes to logging.
2017-09-06 11:05:08 +01:00
Willem Toorop
c6d40d9adc
Merge branch 'develop' into features/zeroconf-dnssec
2017-09-04 16:43:37 +02:00
Willem Toorop
d2c685f3ca
Update ChangeLog, prepare for release today
2017-09-04 10:21:23 +02:00
Willem Toorop
d2c258158f
Flag for live logging
2017-09-04 10:04:17 +02:00
Willem Toorop
48209a038c
Fix things that came out of static analysis
2017-09-02 12:47:04 +02:00
Willem Toorop
084286513f
Fix permissions
2017-09-02 12:18:57 +02:00
Willem Toorop
f25ae85030
Get keys from correct position
2017-09-02 12:10:50 +02:00
Willem Toorop
d340305dcc
Show tpkg execution live
2017-09-02 11:38:20 +02:00
Willem Toorop
2b07f221c4
And actually copy over results
2017-09-02 11:22:01 +02:00
Willem Toorop
bf31b2f7db
Collect report from static analysis
2017-09-02 11:20:21 +02:00
Willem Toorop
21f538f60c
Forgot ;
2017-09-01 17:00:34 +02:00
Willem Toorop
bf23968226
Final for loop initializations elimination
2017-09-01 16:50:31 +02:00
Willem Toorop
70ec5ea4d0
Some more for loop initializations
2017-09-01 16:34:06 +02:00
Willem Toorop
5c8765fefe
No variable initializations in for loops
2017-09-01 16:23:26 +02:00
Willem Toorop
98379bbd38
Add RR type DOA
...
Without rdata yet, just to pass unit tests
2017-09-01 16:10:56 +02:00
Willem Toorop
062b88c991
Bumb version
2017-09-01 15:26:25 +02:00
Willem Toorop
2ed2871549
Merge branch 'develop' into features/zeroconf-dnssec
2017-08-30 15:09:39 +02:00
Willem Toorop
fe6d2c9749
/* fallthrough */ must be first comment before case
2017-08-24 13:58:13 +02:00
Willem Toorop
5a94081634
Make switch/case fallthroughs explicit
...
+1 fallthrough bugfix in getdns_query
2017-08-24 13:51:58 +02:00
Willem Toorop
1aef5fb3e4
Bumb version + ChangeLog
2017-08-24 13:29:16 +02:00
Willem Toorop
4ecf9ad8c6
The submodule update --init only for git checkouts
2017-08-24 11:36:20 +02:00
Willem Toorop
2084841fcf
Merge branch 'patch-1' of https://github.com/paulehoffman/getdns into devel/paulehoffman-patch-1
2017-08-24 11:35:09 +02:00
Willem Toorop
bef36d12f1
Stubby submodule on v0.1.2 release tag
2017-08-24 11:31:05 +02:00
Sara Dickinson
a6669482d8
Merge pull request #329 from getdnsapi/devel/without-stubby
...
Devel/without stubby
2017-08-23 15:25:27 +01:00
Willem Toorop
4ed82b6521
Tweak README
2017-08-23 16:12:18 +02:00
Willem Toorop
3e07bb519c
Remove systemd (because it moved to stubby repo)
2017-08-23 16:10:47 +02:00
Willem Toorop
f949f4a136
Sync with unbound
2017-08-22 12:42:52 +02:00
Willem Toorop
516570e1f8
Include stubby (building) in tpkg testing
2017-08-22 12:16:48 +02:00
wtoorop
c570114bf6
Merge pull request #328 from saradickinson/bugfix/fastopen_fallback
...
Fix issue on macOX 10.10 where TCP fast open is detected but not impl…
2017-08-22 12:05:41 +02:00
Willem Toorop
2c8e7461da
Update stubby module to develop branch
2017-08-22 11:47:04 +02:00
Willem Toorop
6024f9d72e
Merge branch 'develop' into devel/without-stubby
2017-08-22 11:27:11 +02:00
Willem Toorop
e57011a3ea
Compile without stubby by default
...
And with stubby from repo (as submodule) when --with-stubby is specified
2017-08-22 11:25:47 +02:00
Sara Dickinson
33ff6a95ac
Fix issue on macOX 10.10 where TCP fast open is detected but not implemented causing TCP to fail. The fix allows fallback to regular TCP in this case and is also more robust for cases where connectx() fails for some reason.
2017-08-18 17:59:49 +01:00
wtoorop
665c3f6fb5
Merge pull request #326 from saradickinson/docs/fix_wiki_links
...
Fix all the outdated links to wiki pages in the README.md
2017-08-18 15:57:20 +02:00
wtoorop
8e321a0e77
Merge pull request #325 from saradickinson/docs/fix_return_call_reporting
...
Minor updates on return_call_reporting. Fix the name in the API spec …
2017-08-18 15:56:24 +02:00
wtoorop
f03ac9ab7b
Merge pull request #324 from saradickinson/docs/fix_set_from_os
...
Remove mention of using the second bit in set_from_os to init OpenSSL…
2017-08-18 15:56:13 +02:00
wtoorop
da7083f55a
Merge pull request #316 from wtoorop/devel/roadblocks_and_valchains
...
Devel/roadblocks and valchains
2017-08-18 15:55:56 +02:00
wtoorop
5701fb99c9
Merge pull request #321 from neilcook/stub_fixes
...
Stub fixes
2017-08-18 15:53:23 +02:00
wtoorop
ae0dd866aa
Merge pull request #313 from MelindaShore/develop
...
Modified Dockerfile to check out getdns master
2017-08-18 15:52:49 +02:00
Sara Dickinson
9d86928900
Fix all the outdated links to wiki pages in the README.md
2017-08-04 14:50:04 +01:00
Sara Dickinson
8311dc9049
Minor updates on return_call_reporting. Fix the name in the API spec and add a know issue that it isn’t fully supported in recursive mode.
...
Also remove known issue that stub doesn’t limit in outstanding queries as this is now supported.
2017-08-04 14:31:05 +01:00
Sara Dickinson
05016e3a3a
Remove mention of using the second bit in set_from_os to init OpenSSL as this no longer applies
2017-08-04 14:17:50 +01:00
Neil Cook
1555c432f5
Fix array bounds bug in upstream_select
2017-07-31 22:51:24 +01:00
Neil Cook
2d7d6581b4
Ensure netreq->fd is set to -1 after close()/closesocket()
...
If netreq->fd is not set to -1, then multiple functions close the
same socket. This causes major issues in multithread code where the
socket must not be closed multiple times as it may be owned by a
different thread.
2017-07-31 22:48:09 +01:00
Paul Hoffman
c6c1b5cfa2
Make building instructions clearer
...
... and add packages for Ubuntu.
2017-07-16 10:53:56 +02:00
Willem Toorop
e11dc92df1
Hopefully the last warning
2017-07-15 18:38:31 +02:00
Willem Toorop
84430e02cd
Actually working roadblocks and getting validation chains
2017-07-15 17:48:24 +02:00
Willem Toorop
bceb6c8c87
Resubmit netreqs when roadblocks need to be avoided
2017-07-15 11:14:35 +02:00
Willem Toorop
c5acb3769b
Exit with error when answers were bogus
2017-07-06 21:28:34 +02:00
Willem Toorop
d589adf120
Use -V option in transport tests
2017-07-06 12:19:14 +02:00
Willem Toorop
d402603f4a
Merge branch 'develop' of github.com:getdnsapi/getdns into develop
2017-07-06 12:13:30 +02:00
Willem Toorop
4478745955
No output from getdns_query to stdout except the result (unless -V is used)
...
Resolves issue #315
2017-07-06 12:08:09 +02:00
Sara Dickinson
28c41c3495
Move the SYNC/ASYNC response text to after the dict so the dict is the first thing output and can be parsed without stripping this text (request from user).
2017-07-06 12:03:35 +02:00
Willem Toorop
44065bead8
Initial windows work
2017-07-06 00:26:21 +02:00
Willem Toorop
9c78f8ecc8
Merge branch 'develop' into features/zeroconf-dnssec
2017-07-03 22:43:47 +02:00
Willem Toorop
1b731271af
Bump version
2017-07-03 16:23:25 +02:00
Willem Toorop
7151e6fd44
Deal with leaking timeouts (between sync and async loop)
2017-07-01 01:01:17 +02:00
Willem Toorop
11138ff678
Also register application set trust anchors
2017-07-01 01:00:40 +02:00
Willem Toorop
59ff5e8178
0 terminate xml files
2017-07-01 00:45:09 +02:00
Willem Toorop
2b20f35e0e
Write fetched trust anchor
2017-07-01 00:05:20 +02:00
Willem Toorop
8ec1f8eae9
Happy Eyeballs
2017-06-30 22:51:03 +02:00
Willem Toorop
f9bdedbf84
Reconnect on pipelining failure
2017-06-30 22:00:14 +02:00
Willem Toorop
4a5f03ebbe
Anticipate surplus reads
2017-06-30 21:14:02 +02:00
Willem Toorop
77d13f885e
unused function warning
2017-06-30 11:08:20 +02:00
Willem Toorop
61561dd527
Fix warnings & dependencies
2017-06-30 10:45:51 +02:00
Willem Toorop
3e6c5775ff
Fetch and equip context with trust-anchors
2017-06-30 10:18:07 +02:00
Willem Toorop
742588dd6f
Merge branch 'develop' into hackathon/zeroconf-dnssec
2017-06-29 11:09:30 +02:00
Melinda Shore
146638ab94
Modified Dockerfile to check out getdns master and to use unbound-anchor to install dnssec trust root
2017-06-28 22:11:30 -08:00
wtoorop
45884a2dd7
Merge pull request #310 from getdnsapi/features/getdns_context_set_logfunc
...
A configurable log function
2017-06-28 22:55:45 +02:00
Willem Toorop
91ccbcd7df
Typo?
2017-06-28 21:45:54 +02:00
wtoorop
280e72a0fe
Merge pull request #311 from MelindaShore/develop
...
Basic Dockerfile for stubby.
2017-06-28 21:28:31 +02:00
Willem Toorop
78f027aaab
The event loop bugfix
2017-06-28 21:24:35 +02:00
Willem Toorop
19479d4089
Merge branch 'develop' into features/getdns_context_set_logfunc
2017-06-28 21:22:55 +02:00
Willem Toorop
f47606b643
Bump version
2017-06-28 21:21:15 +02:00
Willem Toorop
264135e799
Reintroduct timestamps and replace GETDNS_DAEMON: with STUBBY:
2017-06-28 21:09:40 +02:00
Willem Toorop
8235250fb6
Rename SYSTEM_DAEMON in LOG_UPSTREAM_STATS
2017-06-28 20:57:53 +02:00
Willem Toorop
fb267938c3
Start with fetching root-anchors remotely
...
Also lays the foundation for looking up upstreams by name and DANE authentication of upstreams.
2017-06-28 20:35:30 +02:00
Sara Dickinson
55acf6662c
Fix for outputting the address string in the DAEMON log
2017-06-28 17:58:38 +01:00
wtoorop
101f24a6da
Merge pull request #309 from getdnsapi/bugfix/detect_connection_reset
...
Respond to socket errors
2017-06-28 11:37:14 +02:00
Willem Toorop
195f4c59c8
Fix for the constants declaration issue
2017-06-27 07:49:01 +02:00
Melinda Shore
b0c55d540f
Basic Dockerfile for stubby.
2017-06-26 17:17:16 -08:00
Willem Toorop
04e554086a
A configurable log function
...
Currently used only for DAEMON_DEBUG
2017-06-27 00:23:22 +02:00
Willem Toorop
ce43942cbe
Respond to socket errors
2017-06-26 16:57:23 +02:00
Willem Toorop
ff1ebbf671
Hmmm... this time the warning does make sense
2017-06-22 13:09:45 +02:00
Willem Toorop
2962baa050
Old (not so smart) compiler warns for uninitialized variable
2017-06-22 12:48:22 +02:00
Willem Toorop
69b3f6f558
Remove unnecessary initialization (scan-build)
2017-06-22 12:43:33 +02:00
Willem Toorop
e2f1d3badb
Dependencies
2017-06-22 12:41:01 +02:00
Willem Toorop
4a1008e02c
New deps for anchor.lo
2017-06-22 12:28:07 +02:00
Willem Toorop
7ea3beaa6a
Equip context with xml read trust anchors
2017-06-22 12:27:20 +02:00
Willem Toorop
6b70160659
getdnsify function names, even though they're static
2017-06-22 10:30:13 +02:00
Willem Toorop
a2cf568190
RFC7958 root-anchors.xml parsing
2017-06-22 00:36:26 +02:00
Willem Toorop
631bf3fffc
Copy yxml in distributions too
2017-06-20 16:07:25 +02:00
Willem Toorop
a7ed88fbed
Add yxml as submodule
2017-06-20 16:00:37 +02:00
Willem Toorop
e496d13777
Start with getting files from user area
2017-06-20 15:38:32 +02:00
Willem Toorop
b0af051809
Initialize in correct order
2017-06-20 12:20:11 +02:00
Willem Toorop
4275ea6ffa
Merge branch 'develop' into hackathon/zeroconf-dnssec
2017-06-20 10:06:00 +02:00
Willem Toorop
ac084db231
Don't build libtool stubby if installed directly
2017-06-19 12:19:14 +02:00
Willem Toorop
5e1cceca82
Stubby is installed from getdns_query directly
2017-06-19 12:12:09 +02:00
Willem Toorop
a07290a9b0
Bugfix for parallel make install
2017-06-19 12:06:34 +02:00
Willem Toorop
606b83d857
Bump version
2017-06-15 21:43:23 +02:00
wtoorop
5fccd97d85
Merge pull request #308 from wtoorop/devel/issue-306
...
Devel/issue 306
2017-06-15 21:35:12 +02:00
Willem Toorop
9a273cf144
Get rid of superfluous struct member query_id
2017-06-15 21:24:40 +02:00
Willem Toorop
1d87437854
ERROR all outstanding netreqs whith a failed statefull upstream
...
Remove the currently processed netreq first, so it can be retries with another upstream/transport.
We MUST add netreq to the netreqs_by_query_id map even before we write to it, to have a reliable store of taken query ids.
2017-06-15 21:15:00 +02:00
Willem Toorop
d9158e639b
Clear netreq_by_query_id on upstream failure
...
But don't error the specific netreq then!
2017-06-15 17:21:05 +02:00
Willem Toorop
64d1063dec
Dashes in front of release candidates!
2017-06-14 16:31:45 +02:00
Willem Toorop
e2be41d352
Don't segfault on IPv6 unavailability
...
Resolved issue #306 ? Review needed!
Shoud upstream_failed cancel all the netreqs?
2017-06-14 15:36:53 +02:00
Willem Toorop
e00100b388
s/recieve/receive/
2017-06-09 11:24:51 +02:00
Willem Toorop
a34e4338ce
Find out what went wrong
2017-06-09 08:49:52 +02:00
Willem Toorop
9b548a76c9
Resync with Unbound
2017-06-08 14:48:22 +02:00
Willem Toorop
360f3bdc3c
Not certain when actual release is
2017-06-08 14:10:10 +02:00
Willem Toorop
878a229bea
Don't test OARC servers
2017-06-08 14:06:58 +02:00
Willem Toorop
4e52316704
Include systemd directives too
2017-06-08 12:11:43 +02:00
Willem Toorop
6f01d466dc
Update ChangeLog
2017-06-08 12:08:44 +02:00
Willem Toorop
874af14cea
Rename setup script in Makefile too
2017-06-08 11:45:49 +02:00
wtoorop
c76b977782
Merge pull request #307 from saradickinson/feature/stubby_homebrew
...
1) Add a stubby-setdns script (for MAC OS X only at the moment) to su…
2017-06-08 11:44:26 +02:00
Sara Dickinson
d2e8ac9e61
Change script name so it is specific for macOS (which is the new ‘official’ name for Mac OS X!)
...
Add the copyright statement to the stubby-setdns-macos.sh file
2017-06-07 17:00:21 +01:00
Sara Dickinson
305a6f6b6a
1) Add a stubby-setdns script (for MAC OS X only at the moment) to support Homebrew formula
...
2) Remove the OARC server from the default config. So now only include the servers that commit to not logging user data. Can make this clearer once we have a yaml config file.
3) Update makefile to include stubby.conf and stubby-setdns in dist tarball
2017-06-02 11:52:56 +01:00
Willem Toorop
a9464993dd
bugfix #286 reschedule reused listening addresses
2017-06-01 16:24:24 +02:00
Willem Toorop
8cef8b1f95
Use libtool from correct location
2017-06-01 15:32:50 +02:00
Willem Toorop
bc0052d4bb
Bumb version
2017-06-01 15:26:18 +02:00
Willem Toorop
d319e0a88b
Copy stubby config file too
2017-06-01 15:16:25 +02:00
Willem Toorop
c5d000b552
Merge branch 'develop' of github.com:getdnsapi/getdns into develop
2017-05-23 16:04:39 +02:00
Willem Toorop
8c27d285a8
Dependencies
2017-05-23 16:04:31 +02:00
wtoorop
9a48664b51
Merge pull request #305 from hodarh/coverage
...
Improve code coverage in unit tests
2017-05-23 15:29:10 +02:00
Hoda Rohani
1e99398576
travis doesn't support ipv6?
2017-05-22 16:59:07 +02:00
Hoda Rohani
69408816b4
Merge remote-tracking branch 'origin/develop' into coverage
2017-05-22 09:48:18 +02:00
wtoorop
3f8cdf19c2
Merge pull request #304 from getdnsapi/devel/parallel-builds
...
Devel/parallel builds
2017-05-19 12:54:05 +02:00
Hoda Rohani
21fe94c06e
copy transport test to tpkg and extend more to check tsig
...
add unit test for tls connection
2017-05-18 09:30:51 +02:00
Willem Toorop
67d787d74a
Merge branch 'develop' into hackathon/zeroconf-dnssec
2017-05-12 15:39:02 +02:00
Willem Toorop
3d4193fa41
Actually start building!
2017-05-10 23:04:31 +02:00
Willem Toorop
760b813333
Schedule resource depletion tpkg's sequentually
2017-05-10 23:01:57 +02:00
Hoda Rohani
053845332d
adding more get functions to the tests
2017-05-10 16:47:51 +02:00
Willem Toorop
b2d09e0171
Don't run resource depletion tests in parallel
2017-05-10 16:43:46 +02:00
Willem Toorop
6ca0b8b481
Run tpkg tests in parallel too
2017-05-10 16:35:32 +02:00
Willem Toorop
e152842573
Fail event-loops-unit-tests tpkg when tests fail
2017-05-10 14:39:59 +02:00
Willem Toorop
1eae032743
tpkg tests build in parallel
2017-05-10 14:35:01 +02:00
Willem Toorop
e127365900
Parallel testing support
2017-05-10 14:10:29 +02:00
Hoda Rohani
6ec0f2e021
add get functions to check the values
2017-05-08 12:49:59 +02:00
Hoda Rohani
2ac13e0807
Merge pull request #302 from getdnsapi/devel/rr-types
...
Devel/rr types
2017-05-02 17:58:03 +02:00
Willem Toorop
1ff6771c47
Merge branch 'develop' of github.com:getdnsapi/getdns into develop
2017-05-02 17:36:41 +02:00
Willem Toorop
db856f5227
Allow for simultaneous jobs
...
Resolves issue #166
2017-05-02 17:34:50 +02:00
Willem Toorop
ed08025c38
A better approach for the Windows strdup issue
2017-05-02 17:22:06 +02:00
Willem Toorop
dab93cd197
TSIG and TKEY parsing by gldns
2017-05-02 16:28:55 +02:00
Willem Toorop
1e44ea7bd8
NSAP-PTR rdata is STR after all
2017-05-02 16:10:08 +02:00
Willem Toorop
16d97b607c
Add missing RR types SMIMEA and AVC
...
+ fix rdata of TA RR type
2017-05-02 15:54:12 +02:00
Willem Toorop
352fef644e
Check for unimplemented RR types
2017-05-02 15:20:57 +02:00
Willem Toorop
37fa7a1f07
Test correct rr-types output
2017-05-02 15:08:25 +02:00
Willem Toorop
dbbf778ae8
TALINK
2017-05-02 15:04:57 +02:00
Willem Toorop
4c73b5e156
EID and NIMLOC
2017-05-02 14:59:02 +02:00
Willem Toorop
ad53010cd2
NSAP-PTR
2017-05-02 14:50:39 +02:00
Willem Toorop
3b465d3600
Another small bug in str2wire function
2017-05-02 14:29:47 +02:00
Hoda Rohani
628ac10ae7
Merge pull request #301 from getdnsapi/devel/empty-rdata
...
Devel/empty rdata
2017-05-02 14:26:11 +02:00
Willem Toorop
d1d95f4955
OPENPGPKEY support
2017-05-02 14:11:45 +02:00
Willem Toorop
066ef2ddaa
Fix TAG rdata type presentation format
2017-05-02 14:01:21 +02:00
Willem Toorop
cc9451d364
More rr-dict coverage by removing unused funcs
2017-05-02 12:55:51 +02:00
Willem Toorop
2a6c4b35cb
Fix unit tests to allow for fixed IPSECKEY
2017-05-02 12:14:20 +02:00
Willem Toorop
dbc1719206
Zero sized gateways with IPSECKEY gateway_type 0
2017-05-02 11:44:47 +02:00
wtoorop
e9183386f1
Merge pull request #299 from dkg/systemd
...
Provide guidance for integration with systemd
2017-05-01 10:34:26 +02:00
Daniel Kahn Gillmor
e845ef8968
Provide guidance for integration with systemd
...
Stubby needs to be able to bind to privileged ports, but otherwise
shouldn't need root capabilities.
systemd makes it easy to set the minimal capability set while
otherwise launching the daemon as a non-privileged user.
Ship these files upstream for distributors to deploy.
2017-04-27 12:10:41 -07:00
Hoda Rohani
80897d2b86
reorder rrs
2017-04-26 14:45:07 +02:00
Hoda Rohani
9438f5576c
Merge branch 'develop' of https://github.com/getdnsapi/getdns into develop
2017-04-26 14:33:24 +02:00
Hoda Rohani
62fa69c461
Issue 108: Create a test to check all RR types
2017-04-26 14:32:30 +02:00
Willem Toorop
23fc764411
getdns_context_set_follow_redirects() is supported since 1.0.0
2017-04-24 14:24:12 +02:00
wtoorop
3b9caec245
Merge pull request #298 from saradickinson/update_readme
...
Minor Update to README
2017-04-24 14:01:27 +02:00
Sara Dickinson
efea1a2506
Fix a couple of headers
2017-04-20 16:30:39 +01:00
Sara Dickinson
628bf7da47
Small updates to README to make Doxygen documentation more prominent and Update the Stubby text
2017-04-20 16:24:12 +01:00
Hoda Rohani
6f7f6046eb
Extend server capabilities with valgrind
2017-04-19 12:34:01 +02:00
Hoda Rohani
193bc618a5
Merge branch 'develop' of https://github.com/getdnsapi/getdns into develop
2017-04-19 12:09:10 +02:00
Hoda Rohani
6f3db561f3
Bugfix in converting IPs in str2dict
...
+ tpkg test for server capabilities
2017-04-19 12:07:55 +02:00
Willem Toorop
a670606849
Rearrange doxygen into subject groups
2017-04-13 20:30:59 +02:00
Willem Toorop
b4eecd59ab
Merge branch 'develop' into release/1.1.0
2017-04-13 15:46:24 +02:00
Willem Toorop
02516c4079
Two last warnings
2017-04-13 15:45:59 +02:00
Willem Toorop
05268f45b0
Bump version
2017-04-13 11:48:40 +02:00
Willem Toorop
eb8fe6184a
getdnsapi.net DNS over TLS ips to match the name
2017-04-13 11:47:44 +02:00
Willem Toorop
d5dcdac58c
Validate tls_auth_name
...
Deals with issue #270
2017-04-13 11:19:22 +02:00
Willem Toorop
691d1a77e6
Fix VS Code analysis warning
...
Should settle issue #239
2017-04-13 10:59:20 +02:00
Willem Toorop
eb69cc8695
Merge branch 'develop' into release/1.1.0
2017-04-13 10:50:27 +02:00
Hoda Rohani
6c4af3af93
unintiallized array
2017-04-13 09:44:08 +02:00
Willem Toorop
6026cb1450
1.1.0-rc3
2017-04-12 23:08:20 +02:00
Willem Toorop
0da79ae77a
Fix to compile with libressl. Thanks phicoh.
2017-04-12 23:05:17 +02:00
wtoorop
8dd37006c7
Merge pull request #284 from Hrish1/patch-1
...
Some mispelled words corrected
2017-04-12 22:53:36 +02:00
wtoorop
0857926965
Merge pull request #283 from wtoorop/devel/doxygen
...
Devel/doxygen
2017-04-12 22:53:21 +02:00
wtoorop
9aaafd8cca
Merge pull request #285 from saradickinson/feature/update_stubby.conf
...
Feature/update stubby.conf
2017-04-12 22:52:58 +02:00
Willem Toorop
8c45f1fded
All remaining doxygen documentation
...
Existing documentation needs to be reviewed too though...
2017-04-12 22:50:17 +02:00
Sara Dickinson
6e66754795
Nope - just add uncensored as the yeti servers would require a different trust anchor
2017-04-12 18:19:34 +01:00
Hrish1
b5739434ef
Some mispelled words corrected
2017-04-12 20:05:31 +05:30
Willem Toorop
2226c722a9
Extra context setters
2017-04-12 12:35:46 +02:00
Willem Toorop
68a87e4cee
Event loop extension functions documentation
2017-04-12 11:21:25 +02:00
Willem Toorop
708e520989
Spelling fixes from Andreas Schulze
2017-04-11 23:33:24 +02:00
Willem Toorop
a060e723f2
Doxygen documentation for everything in getdns.h
2017-04-11 23:29:33 +02:00
Sara Dickinson
ce7ee62355
Should we update stubby.conf to include 2 of the new test servers?
2017-04-11 15:24:10 +01:00
Willem Toorop
d28283a850
Merge remote-tracking branch 'upstream/develop' into devel/doxygen
2017-04-10 12:17:59 +02:00
Willem Toorop
e6696d9557
getdns_context_unset_edns_maximum_udp_payload_size
2017-04-06 20:53:18 +02:00
Willem Toorop
c9b3e3cf7b
Allow cleanup of naked idle timeouts
2017-04-06 20:50:34 +02:00
Willem Toorop
a27915ccc9
One more ChangeLog update
2017-04-06 19:47:15 +02:00
Willem Toorop
2d011e3d19
Merge branch 'features/unset_max_udp_payload_sz' into release/1.1.0
2017-04-06 19:40:35 +02:00
Willem Toorop
f0ee920227
Bump version, update ChangeLog
2017-04-06 16:13:15 +02:00
wtoorop
f251f8aeda
Merge pull request #282 from wtoorop/bugfix/issue-272
...
Bugfix/issue 272
2017-04-06 15:55:24 +02:00
Willem Toorop
c2edc94a3a
Clear timeout event when getting dnssec chain
...
With full recursion
2017-04-06 15:18:12 +02:00
Willem Toorop
e35a2182a9
missing #include
2017-04-06 12:24:27 +02:00
Willem Toorop
4ceec33d08
Do something about TLS renegotiation.
2017-04-06 11:46:10 +02:00
Willem Toorop
e08d3592a0
Schedule timeout when collecting for dnssec chain
2017-04-06 11:20:08 +02:00
Willem Toorop
f8c7d8b5d5
Network request submission and callback reporting
2017-04-05 22:43:27 +02:00
Willem Toorop
2220c1a48d
Options for request debugging
2017-04-05 17:53:39 +02:00
Willem Toorop
67baa1d651
getdns_context_unset_edns_maximum_udp_payload_size
2017-04-05 12:37:48 +02:00
Willem Toorop
edecca8b63
smime verification of root-anchors.xml in ~/.getdns
2017-03-27 09:21:29 -05:00
wtoorop
fe49bc1c69
Merge pull request #279 from dkg/feature/padding-policy
...
Implement sensible default padding policy.
2017-03-27 08:19:31 -05:00
wtoorop
d5005a8ac0
Merge pull request #278 from dkg/getdns-query-transport-cleanup
...
getdns-query: S is no longer a valid transport label.
2017-03-26 14:53:53 -05:00
Daniel Kahn Gillmor
f2a90925bc
getdns-query: S is no longer a valid transport label.
2017-03-26 14:38:43 -05:00
Daniel Kahn Gillmor
9de4d6537b
Implement sensible default padding policy.
...
This commit changes the semantics of tls_query_padding_blocksize()
slightly. Where previously both 0 and 1 meant "no padding", this
commit changes 1 to mean "pad using a sensible policy".
At NDSS 2017's DNS privacy workshop, I presented an empirical study of
DNS padding policies:
https://www.internetsociety.org/events/ndss-symposium/ndss-symposium-2017/dns-privacy-workshop-2017-programme#session3
The slide deck is here:
https://dns.cmrg.net/ndss2017-dprive-empirical-DNS-traffic-size.pdf
The resulting recommendation from the research is that a simple
padding policy is relatively cheap and still protective of metadata
when DNS traffic is encrypted:
* queries should be padded to a multiple of 128 octets
* responses should be padded to a multiple of 468 octets
Since getdns is only currently doing queries over tls, we only have to
implement the first part of this policy :)
2017-03-26 14:37:28 -05:00
Willem Toorop
f4fe2cb6c5
Merge branch 'develop' into hackathon/zeroconf-dnssec
2017-03-26 10:46:50 -05:00
wtoorop
148dfabf88
Merge pull request #276 from huitema/develop
...
Fixing the select and poll event loops for Windows
2017-03-26 10:20:48 -05:00
Willem Toorop
03efb66991
Keep connections open with sync requests too
2017-03-26 10:16:25 -05:00
huitema
6f0b08a400
Fixing the select event loop so it does not give up for naked timers in Windows.
...
Making sure the poll event loop works on windows.
Fixing the poll event loop so it does not give up for naked timers in Windows.
2017-03-26 10:07:44 -05:00
Willem Toorop
8864dfce92
Merge branch 'develop' into hackathon/zeroconf-dnssec
2017-03-25 20:37:36 -05:00
Willem Toorop
007208a122
Merge branch 'develop' of github.com:getdnsapi/getdns into develop
2017-03-25 20:22:54 -05:00
Willem Toorop
9fa6ab5994
Clang pragma's with clang only
2017-03-25 20:22:34 -05:00
Melinda Shore
01eedd5ea8
Merge pull request #275 from getdnsapi/devel/cert_in_call_reporting
...
Have the peer certificate in call_reporting
2017-03-25 19:58:16 -05:00
Willem Toorop
b3e5c5fb30
Merge branch 'develop' into hackathon/zeroconf-dnssec
2017-03-25 19:52:55 -05:00
Willem Toorop
b7d16e3c89
One more leak
2017-03-25 17:00:02 -05:00
Willem Toorop
6316c558bc
typo
2017-03-25 21:45:08 +01:00
Willem Toorop
3eb6ebf5e4
Fix memory leak
2017-03-25 21:33:30 +01:00
Willem Toorop
5f6e47d091
Only equip with peer cert when transport is TLS
2017-03-25 21:26:05 +01:00
Willem Toorop
a2efd8f6c1
Report peer certificate in call_reporting
2017-03-25 19:36:20 +01:00
Willem Toorop
767ca21bc0
Debugging for anchor management
2017-03-25 19:02:51 +01:00
Willem Toorop
ed0b655af0
Update doxygen
2017-03-25 06:45:02 -05:00
Willem Toorop
e4d4e97542
Suppress unused parameter warnings when we can't help it
2017-03-23 16:59:03 +01:00
huitema
0560500e34
Merge pull request #10 from wtoorop/devel/huitema-develop
...
Devel/huitema develop
2017-03-23 07:45:53 -07:00
Willem Toorop
15b451d71b
Recommit parts of "Minor fixes in MDNS code to make sure it does work after the recent loop tightening."
2017-03-23 13:09:34 +01:00
Willem Toorop
b32ee619f1
Merge branch 'develop' into devel/huitema-develop
2017-03-23 13:05:09 +01:00
Willem Toorop
b80ccba02c
Revert "Minor fixes in MDNS code to make sure it does work after the recent loop tightening."
...
This reverts commit c653e8502c
.
2017-03-23 13:04:11 +01:00
Willem Toorop
2a496969cd
Fixes for mdns
2017-03-23 12:53:44 +01:00
Willem Toorop
c275b205d3
Create doxygen tagfile
2017-03-23 10:58:18 +01:00
Christian Huitema
c653e8502c
Minor fixes in MDNS code to make sure it does work after the recent loop tightening.
...
Suppressing the warning about mapping the 64 bit timeout value to a 32 bit integer,
based on the comments that the "maximum timeout used in practice is 6553500ms." If that
really is the case, we do not need to support 64 bit integers in the dict structure.
2017-03-22 15:50:26 -07:00
huitema
95da0b46e0
Merge pull request #9 from getdnsapi/develop
...
Align with develop branch
2017-03-22 10:10:00 -07:00
Willem Toorop
f67314c1c1
Unbound event API without header compile fix
2017-03-22 14:36:16 +01:00
Willem Toorop
426fc238da
Fixes for FreeBSD warnings when compiling tests
...
/usr/local/include/check.h:454:75: warning: token pasting of ',' and __VA_ARGS__ is a GNU extension [-Wgnu-zero-variadic-macro-arguments]
_ck_assert_failed(__FILE__, __LINE__, "Assertion '"#expr"' failed" , ## __VA_ARGS__, NULL)
/usr/local/include/check.h:454:75: warning: token pasting of ',' and __VA_ARGS__ is a GNU extension [-Wgnu-zero-variadic-macro-arguments]
2017-03-22 14:10:15 +01:00
Willem Toorop
b2ac3849b7
Fxies for two NetBSD compiler warnings
...
ubkey-pinning.c -o pubkey-pinning.lo
./pubkey-pinning.c: In function '_getdns_verify_pinset_match':
./pubkey-pinning.c:385: warning: 'prev' may be used uninitialized in this function
IX_C_SOURCE=200112L -D_XOPEN_SOURCE=600 -c ./context.c -o context.lo
./context.c: In function '_getdns_upstream_shutdown':
./context.c:760: warning: comparison between signed and unsigned
2017-03-22 13:50:11 +01:00
Willem Toorop
3d45a77884
Mention how to enable MDNS in ChangeLog
2017-03-22 12:35:23 +01:00
Willem Toorop
b48a92c8f5
Max OS-X and FreeBSD multicast portability
2017-03-22 12:33:13 +01:00
Willem Toorop
29c1c9524e
Include unbound includes rerouting in dist tarball
...
+ don't try to install getdns-*.tgz spec anymore
2017-03-22 12:32:26 +01:00
Willem Toorop
a7c824c756
Update changelog and documentation
2017-03-22 11:52:07 +01:00
Willem Toorop
5d12545391
Bugfix in handling UDP backing off
2017-03-22 10:52:55 +01:00
Willem Toorop
fa99b206e8
Updated readme & new groups for doxygen
2017-03-21 12:28:48 +01:00
Willem Toorop
b838cbfe1c
Bumb version
2017-03-20 23:22:55 +01:00
Willem Toorop
fe446a0d66
Minor fixes
2017-03-20 23:17:44 +01:00
wtoorop
52e3d2e1b0
Merge pull request #265 from saradickinson/feature/new_settings
...
Feature/new settings
2017-03-20 22:25:52 +01:00
wtoorop
1ad8047443
Merge pull request #267 from wtoorop/features/mdns-client
...
Features/mdns client
2017-03-20 22:15:57 +01:00
Willem Toorop
a5876d57fe
Dependencies
2017-03-20 21:58:45 +01:00
Willem Toorop
a77a335370
Comment out dead assignement
...
To silence static code analysis
2017-03-20 21:57:57 +01:00
Willem Toorop
24abf43de1
Fit mdns code with pending dns netreqs on EMFILE
2017-03-20 21:33:19 +01:00
Willem Toorop
ed0d4d044c
Merge remote-tracking branch 'upstream/develop' into features/mdns-client
2017-03-20 16:42:24 +01:00
Willem Toorop
a3fe958387
Sync with unbound
2017-03-20 16:41:57 +01:00
wtoorop
b8c5f9131f
Merge pull request #266 from wtoorop/features/limit_outstanding_queries
...
Features/limit outstanding queries
2017-03-20 16:27:33 +01:00
Willem Toorop
0048066a2a
Test op coding practices
2017-03-20 16:15:02 +01:00
Willem Toorop
0891e16147
Pend netreqs when out of filedescriptors
2017-03-20 15:20:17 +01:00
Willem Toorop
8b09633c94
Bug and mem-leak fix
2017-03-20 11:03:15 +01:00
Christian Huitema
ed66edf52a
Making sure that the project compiles on Windows when HAVE_MDNS_SUPPORT is present.
...
Moving the 2 additional LRU functions from mdns.c to lruhash.c
Defining the 2 additional functions in lruhash.h
2017-03-17 12:19:54 -07:00
Sara Dickinson
1cf39c9134
Typo
2017-03-17 18:33:33 +00:00
Sara Dickinson
d8f4aebdee
Merge branch 'feature/parallel_upstreams' into feature/new_settings
2017-03-17 17:48:52 +00:00
Sara Dickinson
915689141b
Fix symbol order
2017-03-17 17:47:30 +00:00
Sara Dickinson
68eadedc10
Fix rogue bracket
2017-03-17 17:35:47 +00:00
Sara Dickinson
6f7bad5d73
Add new configuration parameters for TLS back off time and connection retries
2017-03-17 17:26:18 +00:00
Sara Dickinson
dd76132a92
Implement round robin for UDP. Not sure this is the best option though. Noticed it results in more timeouts if one resolver isn't responding because it is retried more frequently. Willem - please review.
2017-03-17 17:16:14 +00:00
Sara Dickinson
1d4e3dd790
Update the name of the new option to 'round_robin_upstreams'
2017-03-17 16:53:03 +00:00
Sara Dickinson
6734a00d59
Improve the logging
2017-03-17 11:25:47 +00:00
Sara Dickinson
2a1a6768cb
Add unit test and catch a typo
2017-03-16 16:26:34 +00:00
Sara Dickinson
f0f3c43552
- Add a new mode where for TLS (and infact TCP too) the upstream selection simply cycles over all the upstreams rather than treating them as an ordered list and always using the first open one.
...
- Make IP field in debug output fixed width
- Collect all the one line config options at the top of the stubby.conf file to make it easier to read
2017-03-16 14:51:46 +00:00
Willem Toorop
5ea181172a
Reschedule pending netreqs
2017-03-15 15:16:42 +01:00
Willem Toorop
14c9f3aafc
Track netreqs "in flight"
2017-03-14 17:17:56 +01:00
Willem Toorop
b8f43c8acd
Mention the number of simultaneous queries in error (and success)
2017-03-14 15:20:56 +01:00
Willem Toorop
0655a08fa7
Unit test for set_limit_outstanding_queries
2017-03-14 15:03:43 +01:00
huitema
d511ce24de
Merge pull request #8 from wtoorop/features/mdns-client
...
Features/mdns client
2017-03-13 13:44:54 -07:00
huitema
8365f40147
Merge pull request #7 from wtoorop/devel/huitema-develop
...
Update of your develop branch
2017-03-13 13:39:09 -07:00
Willem Toorop
639239f45c
Schedule dnsreqs with absolute timeout/expiry time
2017-03-13 14:20:47 +01:00
Willem Toorop
a4fa931e85
Merge branch 'devel/huitema-develop' into features/mdns-client
2017-03-09 15:20:30 +01:00
Willem Toorop
c4a93b2c53
Newline at end of mdns.c
2017-03-09 15:19:57 +01:00
Willem Toorop
79ce0cff85
Make mdns compile on Linux
2017-03-09 14:36:20 +01:00
Willem Toorop
f1968d1e2c
Merge branch 'devel/ub-symbol-mapping' into features/mdns-client
2017-03-09 13:09:56 +01:00
Willem Toorop
82c92f8dc7
Better dependency rewriting
2017-03-09 13:02:05 +01:00
Willem Toorop
f751de696a
Import lruhash and lookup3 from unbound
2017-03-09 12:08:53 +01:00
Willem Toorop
5b5123a79d
HAVE_PTHREAD instead of HAVE_PTHREADS like unbound
2017-03-09 11:46:15 +01:00
Willem Toorop
5a2ee50de3
Have a define for any debugging
2017-03-09 11:40:39 +01:00
Willem Toorop
dd656b7421
More comprehensible auxiliary directory names
...
(in src/util)
2017-03-09 10:44:38 +01:00
Willem Toorop
0ecaf163d9
Update original source directly
2017-03-08 23:14:24 +01:00
Willem Toorop
e02442eb98
Original val_secalgo files + symbol mapping
2017-03-08 23:04:52 +01:00
Willem Toorop
ec685e900d
Map rbtree symbols
2017-03-08 22:10:22 +01:00
Willem Toorop
028dd0bf3c
Configure option to enable draft mdns support
2017-03-08 21:25:39 +01:00
Willem Toorop
de1ab4c8a4
Merge branch 'develop' into huitema-develop
2017-03-06 16:07:12 +01:00
Christian Huitema
4058529081
First version of the MDNS multicast client that actually works.
2017-03-03 16:52:02 -08:00
Melinda Shore
5f3de12644
Merge pull request #262 from wtoorop/features/base64_bindata
...
Features/base64 bindata
2017-02-28 15:01:43 -09:00
Willem Toorop
09baade016
Print pinsets Bas64 too
...
+ bugfix in reading base64
+ base64 pinsets in stubby.conf
2017-02-28 07:28:18 -08:00
Willem Toorop
6a9e2f4a56
Base64 primitive in json input
2017-02-27 16:22:52 -08:00
Willem Toorop
bbd2fb8cf0
Although safe, a bit scary
2017-02-27 14:30:44 -08:00
wtoorop
94e1f48f58
Merge pull request #261 from saradickinson/feature/stubby_updates
...
Feature/stubby updates
2017-02-27 14:25:15 -08:00
Christian Huitema
03307a7b71
Code almost complete for the MDNS multicast + cache.
...
Of course, we still need a lot of testing.
2017-02-23 17:55:31 -08:00
Sara Dickinson
7c8605c3b1
And fix the whitespace...
2017-02-23 17:03:00 +00:00
Sara Dickinson
f71dd2bf71
Re-order so checks pass!
2017-02-23 16:50:29 +00:00
Sara Dickinson
ebdf657fd7
Change pins for IPv6 addresses for Sinodun privacy servers!
...
Improve logging of auth failure
2017-02-23 16:48:16 +00:00
Sara Dickinson
ff4ecd5b39
Couple of extra output messages so Stubby users in strict mode know why the authentication failed
2017-02-23 15:38:45 +00:00
Sara Dickinson
1b7aef5a88
Add a new GETDNS_RETURN code for the case where no upstream is considered valid and hence a query cannot even be scheduled. Only applies when using purely stateful transports. This can happen when using Stubby if there are problems with connections to upstreams.
2017-02-23 14:49:17 +00:00
Sara Dickinson
356408955d
Update the SPKI pin in the stubby.conf file for the Sinodun/Surfnet servers.
2017-02-23 13:55:43 +00:00
Sara Dickinson
09df4e2d5d
Fix spacing error in stubby help output
2017-02-23 13:55:43 +00:00
Willem Toorop
4b6962cd9a
Use __FUNC__ instead of function for protability
...
It is #defined to __FUNCTION__ or to __func__ depending on what configure detected.
2017-02-19 09:55:10 +01:00
Willem Toorop
b3a06f1944
A bit more consistency in user_callback usage
2017-02-19 09:47:41 +01:00
Willem Toorop
8fccd66813
cancel_outstanding_requests by transaction_id
...
to prevent double frees as side effect of getdns_dns_req being canceled by user callbacks.
2017-02-19 09:39:10 +01:00
Melinda Shore
c7ae2f5011
Merge pull request #260 from wtoorop/devel/fixed_eventloop
...
Devel/fixed eventloop
2017-02-18 12:59:18 -09:00
Willem Toorop
ba7dfbeec0
Misplaced event clear in stub.c
2017-02-18 15:56:06 +01:00
Willem Toorop
cbb407ae1e
Merge branch 'develop' into devel/fixed_eventloop
2017-02-18 13:32:17 +01:00
Willem Toorop
09a727eadb
git ignore tpkg tests cruft
2017-02-18 13:18:14 +01:00
Willem Toorop
74b1f77357
Cancel get validation chain getdns_dns_reqs
...
And miscellaneous little other scheduling fixes and optimizations
2017-02-18 13:16:25 +01:00
Willem Toorop
a453678094
Debug the call to poll
2017-02-18 10:07:04 +01:00
Willem Toorop
7e9956b19e
Call cancel callbacks only when callback exists
2017-02-17 23:39:35 +01:00
Willem Toorop
6ed3d77523
Cancel child validation chain dns_reqs on ...
...
parent dns_req cancelation.
2017-02-17 23:35:50 +01:00
Willem Toorop
990800d9f9
Bugfix poll_eventloop initialization error
2017-02-17 13:16:06 +01:00
Willem Toorop
df45a2f1c7
Dependencies
2017-02-16 23:03:31 +01:00
Willem Toorop
91dd991348
Cancel requests without callback
2017-02-16 22:55:15 +01:00
Willem Toorop
a6859a08d3
Remove getrlimit from poll_eventloop
...
No use to check for this limit, because the filedescriptor is already open.
2017-02-16 22:48:16 +01:00
Willem Toorop
d20bbde25e
Fixed time allocation and free for fd_events
2017-02-16 22:41:37 +01:00
Willem Toorop
f6d46689b6
Fixed time allocation and free for to_events
2017-02-16 16:26:41 +01:00
Willem Toorop
2d35993c83
Timeout events in array
2017-02-16 15:22:57 +01:00
Willem Toorop
e87e907128
Constants for Edward Curves
2017-02-16 11:01:48 +01:00
wtoorop
17a5a5db92
Merge pull request #258 from wtoorop/devel/_vfixed_gbuffers
...
A special bit for the snprintf style modus operandi of fixed gldns gbuffer's
2017-02-16 10:51:20 +01:00
Willem Toorop
445470d831
Rename a gldns function
2017-02-16 10:32:17 +01:00
Melinda Shore
c72d74a0fa
Merge pull request #259 from wtoorop/devel/fixed_eventloop
...
Devel/fixed eventloop
2017-02-15 10:25:45 -09:00
Willem Toorop
e4eddca259
Reference event_info directly
2017-02-15 15:10:11 +01:00
Willem Toorop
7b6b0ff642
No helper copy variables
2017-02-15 14:57:30 +01:00
Willem Toorop
c805d40585
Clean in place executed unit tests
2017-02-15 14:04:34 +01:00
Willem Toorop
b2fe9673de
Fix realloc pfds set error + callback order error
2017-02-15 13:08:47 +01:00
Willem Toorop
04f6a2b13b
Fixed dependencies
2017-02-15 12:47:55 +01:00
Willem Toorop
840ba8c85d
Reference fixes jsmn
2017-02-15 12:46:48 +01:00
Willem Toorop
b7c2e53a82
Off by one problem?
2017-02-15 12:21:29 +01:00
Willem Toorop
3e8822e0e2
Fix uninitialized data error in valgrind check
2017-02-15 11:43:07 +01:00
Willem Toorop
c936f0c51d
Other allocs and frees with custom mem funcs too
2017-02-15 10:56:19 +01:00
Willem Toorop
7484b8c37b
Initialize default eventloop with custom mem funcs
2017-02-15 10:22:41 +01:00
Christian Huitema
6d3e0c7ca2
Rewrote the continuous query organization to use the LRU cache instead of an RB tree.
2017-02-14 11:30:29 -10:00
Willem Toorop
549de0de60
Use of custom mem funcs by uthash
2017-02-14 13:41:58 +01:00
Christian Huitema
1587e2f8f5
Code to manage the MDNS cache using LRUHASH
2017-02-13 18:28:46 -10:00
Willem Toorop
30e1683d2f
Deal with windows vsnprintf in config.h
2017-02-13 12:32:10 +01:00
Willem Toorop
60443fb7fd
Choice of poll or select based default event loop
2017-02-13 11:56:25 +01:00
Willem Toorop
2b9987014d
Special _vfixed gbuffer property
...
For snprintf style buffers which position can go beyond capacity
2017-02-08 13:51:25 +01:00
Christian Huitema
93d6f2b18f
Intermediate commit, after definition of the MDNS context
2017-02-06 18:23:35 -10:00
Christian Huitema
4c71d6239f
Fixing potential bug for comparision function net_req_query_id_cmp on 64 bits architectures.
2017-01-21 14:49:58 -08:00
Christian Huitema
4ccfa2a781
Preparing fix for 64 bit warning in net_req_query_id_cmp
2017-01-21 14:46:38 -08:00
Christian Huitema
83ec9b74e9
Merge branch 'develop' of https://github.com/huitema/getdns into develop
...
Conflicts:
src/jsmn
2017-01-20 19:57:11 -08:00
Christian Huitema
31eee9c7d1
Intermediate commit of context.h, mdns.[ch]
2017-01-20 19:44:05 -08:00
Christian Huitema
abd0244aba
Fixing a potential bug in the RB tree for netreq_by_id
2017-01-20 19:33:12 -08:00
huitema
b72781a395
Merge pull request #6 from getdnsapi/develop
...
Aligning with main branch
2017-01-18 16:28:59 -08:00
Neil Cook
dad4aaf6d8
correctly allocate and free memory for eventloop hashes
2017-01-18 15:31:01 +00:00
Neil Cook
fd3e0c01f7
call default_time_cb with -1 instead of index
2017-01-18 15:12:56 +00:00
Neil Cook
69d1bd6de5
Merge pull request #2 from wtoorop/devel/fixed_eventloop
...
Devel/fixed eventloop
2017-01-18 13:44:40 +00:00
Willem Toorop
f1c44dc15c
Merge branch 'develop' into devel/1.1.0
2017-01-18 14:40:32 +01:00
Willem Toorop
17da80a828
Feed poll with millisecond timeout
2017-01-18 14:29:32 +01:00
Willem Toorop
45ee18e285
Merge branch 'fixed_eventloop' of https://github.com/neilcook/getdns into neilcook-fixed_eventloop
2017-01-18 12:05:32 +01:00
Willem Toorop
7bf953b2bd
Merge branch 'huitema-develop' into develop
2017-01-18 12:00:33 +01:00
Willem Toorop
f4cd8f6b47
Fix constants
2017-01-13 22:38:23 +01:00
Willem Toorop
7c1c4c52d6
Merge branch 'release/1.1.0-alpha3' into develop
2017-01-13 22:10:17 +01:00
Willem Toorop
9c9c52aacc
Merge branch 'develop' into release/1.1.0-alpha3
2017-01-13 22:08:59 +01:00
Willem Toorop
b564c8d96f
Few things for the scroll-spy README on the website
2017-01-13 21:34:06 +01:00
Willem Toorop
9320364053
Fix two more sign-compare warnings
2017-01-13 21:28:07 +01:00
Willem Toorop
bb369ec7d9
Document limits of syncronous functions
...
As agreed in conversation with pull request #246
2017-01-13 21:12:48 +01:00
Willem Toorop
155ceede4c
Unuser variables with --without-libidn
2017-01-13 20:49:26 +01:00
Willem Toorop
e80d3340c6
Coverage linking + missing constant in str2int
2017-01-13 20:43:04 +01:00
Willem Toorop
cf3d4a4b2e
Create SHA256 with distro
2017-01-13 20:29:19 +01:00
Willem Toorop
8a66ba0185
Bump version, update ChangeLog
2017-01-13 20:22:49 +01:00
Willem Toorop
cd199def68
Cookies and roadblock avoidance on by default
...
per RFC7873 and RFC8027
2017-01-13 19:45:54 +01:00
Willem Toorop
25849645d4
Don't crash with missing trust-anchors
2017-01-13 13:42:16 +01:00
Willem Toorop
bb0ad001e7
Fix non existant domain names
2017-01-13 12:59:16 +01:00
Willem Toorop
9a3b01ed62
DSA support with OpenSSL 1.1.0
2017-01-13 12:48:15 +01:00
Christian Huitema
53d73d2f90
Implementing the ARC4_LOCK/UNLOCK functions for Windows.
2017-01-13 12:24:46 +01:00
Willem Toorop
835eaa855b
autoclean for cleaning with autoconf initialization
2017-01-11 15:08:35 +01:00
Christian Huitema
99fb7100ea
Placing all MDNS code under ifdef HAVE MDNS SUPPORT to minimize risk in main branch.
2016-12-22 20:30:14 -08:00
Christian Huitema
1d24c90768
Fixing bad declaration in mdns.h
2016-12-22 20:07:31 -08:00
Christian Huitema
2e46a4b136
Adding missing directives for mdns.c, .o, .lo in make file.
2016-12-22 19:37:49 -08:00
Christian Huitema
f1b8b25afa
Implementation of basic MDNS support
2016-12-22 15:51:47 -08:00
Neil Cook
7ebf3924b5
Copy event pointer out of event hash table before callbacks, because it might be deleted
2016-12-16 10:36:21 +00:00
Neil Cook
5e26137eda
Fix default_eventloop_run OR instead of AND and hash table iteration safety
2016-12-15 13:40:40 +00:00
Neil Cook
efb50939bc
Merge pull request #1 from wtoorop/devel/fixed_eventloop
...
Devel/fixed eventloop
2016-12-15 11:20:45 +00:00
Willem Toorop
9b715d4743
Suppress compile warnings
2016-12-15 09:53:49 +01:00
Willem Toorop
da527358c0
Merge branch 'develop' into devel/fixed_eventloop
2016-12-15 09:45:16 +01:00
wtoorop
d3b7a30651
Merge pull request #218 from neilcook/openssl_init
...
call SSL_library_init() just once and lock with mutexes
2016-12-15 08:29:58 +01:00
wtoorop
7e1c8c59b7
Merge pull request #242 from wtoorop/bugfix/replace__FUNCTION__
...
Use __func__ var when supported
2016-12-15 08:26:01 +01:00
wtoorop
be29a01b20
Merge pull request #243 from wtoorop/bugfix/1.1.0-alpha3/replace__FUNCTION__
...
Use __func__ var when supported
2016-12-15 08:25:51 +01:00
Neil Cook
0d39563978
Consisten use of TIMEOUT_FOREVER
2016-12-14 17:50:39 +00:00
Neil Cook
c1d5ae9a25
set event id in add_event rather than calling function
2016-12-14 17:04:09 +00:00
Neil Cook
e9e6ff013b
Fix travis compiler warnings/errors
2016-12-14 16:49:24 +00:00
Neil Cook
326b6bb410
remove redundant debugging
2016-12-14 16:10:44 +00:00
Neil Cook
5cc4028d63
cleanup poll.h include for non-windows
2016-12-14 15:54:10 +00:00
Neil Cook
d3b097fffe
Rewrite default_eventloop to use hash tables instead of arrays
2016-12-14 15:52:44 +00:00
Neil Cook
a9386e621a
max_fds and max_timeouts part of default eventloop structure
2016-12-14 15:50:55 +00:00
Neil Cook
8b4c90eaf4
move default eventloop from select to poll, make max fds dependent on value from getrlimit not FD_SETSIZE
2016-12-14 15:50:55 +00:00
Christian Huitema
e01c85ef2f
Implementing the ARC4_LOCK/UNLOCK functions for Windows.
2016-12-12 12:25:10 -08:00
huitema
79b47028b1
Merge pull request #5 from getdnsapi/develop
...
Merge pull request #241 from huitema/develop
2016-12-12 11:34:51 -08:00
Willem Toorop
80219a4195
Merge branch 'bugfix/replace__FUNCTION__' into bugfix/1.1.0-alpha3/replace__FUNCTION__
2016-12-12 14:20:31 +01:00
Willem Toorop
5f6b93f7f2
Use __func__ var when supported
...
And let debugging messages compile with -Wpedantic -Werror too
2016-12-12 13:55:10 +01:00
Willem Toorop
600036da73
Merge branch 'develop' into release/1.1.0-alpha3
2016-12-12 12:08:49 +01:00
wtoorop
8f833c7000
Merge pull request #240 from saradickinson/bugfix/key_pinning
...
Bugfix/key pinning
2016-12-12 11:58:23 +01:00
wtoorop
4518a3d672
Merge pull request #241 from huitema/develop
...
Fixing VS code analysis issues in dnssec.c and in arc4random.c
2016-12-12 10:33:35 +01:00
Sara Dickinson
83a0b944b5
Fix another stupid error....
2016-12-11 17:10:44 +00:00
Sara Dickinson
d584c6e3f5
Clean more compile warnings.
2016-12-11 16:58:18 +00:00
Sara Dickinson
cfc7d18c85
Ug. Fix stupid mistake with string array.
2016-12-11 16:57:52 +00:00
Christian Huitema
b91e13b13b
Fixing VS studio analysis issues in Get DNS code.
2016-12-10 16:03:17 -08:00
huitema
a4badbb058
Merge pull request #4 from getdnsapi/develop
...
Sync the main branch fixes of Dec 9.
2016-12-09 17:32:41 -08:00
Sara Dickinson
ef12b0e764
Fix some compiler warnings on OS X
2016-12-09 17:15:28 +00:00
Sara Dickinson
5d8894495a
Remove unnecessary test
2016-12-09 17:03:41 +00:00
Sara Dickinson
7567869f2c
Improve transport tests by using the calll_reporting output to check the transport and authentication status
...
Add cases for self-signed certs.
2016-12-09 17:03:41 +00:00
Sara Dickinson
7b58dc25a6
- Fix bug where a self signed cert + only a pinset would not authenticate
...
- Add OARC servers with pinset only to stubby.conf
- Move Authentication strings to types_internal for use in call_debugging
- Add connection counts to call_debugging
-
2016-12-09 17:03:41 +00:00
Willem Toorop
1264099be7
Pedantic warnings and XTRA_CFLAGS for tools too
2016-12-09 14:02:27 +01:00
Willem Toorop
8b454afb80
dependencies
2016-12-09 13:57:42 +01:00
Willem Toorop
07c14dc1cc
Merge branch 'develop' into release/1.1.0-alpha3
2016-12-09 13:57:37 +01:00
Willem Toorop
bb9ae2dfa1
Fix use of potentially uninitialized variable next
2016-12-09 13:53:22 +01:00
Willem Toorop
9fb11368a5
dependencies
2016-12-09 13:52:00 +01:00
Willem Toorop
37cced78fc
Merge branch 'develop' into release/1.1.0-alpha3
2016-12-09 13:27:55 +01:00
Willem Toorop
4345905a81
Address things that came out of VS static analysis
...
Except for the stack usage cases
2016-12-09 12:57:47 +01:00
Willem Toorop
3428412629
Some more minor merge fixes
2016-12-09 12:13:36 +01:00
Willem Toorop
5cc67ff554
Merge branch 'develop' into merge-develops
2016-12-09 12:05:42 +01:00
Willem Toorop
9895486e5f
Merge branch 'develop' of git://github.com/huitema/getdns into huitema-develop
2016-12-09 11:21:43 +01:00
Willem Toorop
1a26b884ee
Check for -W* support before use
2016-12-09 00:16:24 +01:00
Willem Toorop
86341fea08
-Wpedantic -Werror via XTRA_CFLAGS and make
2016-12-08 23:41:49 +01:00
Willem Toorop
6e9b1b5f53
One more unused when no TCP_FASTOPEN
2016-12-08 23:25:53 +01:00
Willem Toorop
26db6202a5
-Werror fixes for clang
2016-12-08 23:15:56 +01:00
Willem Toorop
8de9976a2b
Some more unused variables in stub only mode
2016-12-08 22:56:02 +01:00
Willem Toorop
eeca7b32b1
One more unused variable
2016-12-08 22:46:53 +01:00
Willem Toorop
55cdd8fed3
Fix pedantic warnings in unit tests
2016-12-08 22:33:10 +01:00
Christian Huitema
26eaf255c5
Fixing the bulk of the compilation warnings in the GetDNS code
2016-12-08 12:37:35 -08:00
Willem Toorop
2281accd38
Extra fixes for pedantic warnings
2016-12-08 16:36:23 +01:00
Willem Toorop
9d48c47980
Merge branch 'develop' into release/1.1.0-alpha3
2016-12-08 16:31:47 +01:00
Willem Toorop
fbb4eb717a
Unit tests fail on pedantic warnings
2016-12-08 16:28:21 +01:00
Willem Toorop
39f854d2b3
Fixes for pedantic warnings
2016-12-08 16:27:43 +01:00
Willem Toorop
ce41258b14
Compile with extra warnings by default
2016-12-08 16:26:48 +01:00
Willem Toorop
8f75e4ed8d
Few more things to work with CFLAGS=-Wextra
2016-12-08 15:17:27 +01:00
Willem Toorop
f31b2fa233
Merge branch 'develop' into release/1.1.0-alpha3
2016-12-08 15:06:25 +01:00
Willem Toorop
743e04bfd6
Replace ((uint64_t)-1) with TIMEOUT_FOREVER
2016-12-08 14:44:24 +01:00
Willem Toorop
3629d558cd
getdns_query fixes for CFLAGS=-Wextra
2016-12-08 14:40:06 +01:00
Willem Toorop
a5748be5fb
Unit test fixes for CFLAGS=-Wextra
2016-12-08 14:39:38 +01:00
Willem Toorop
473da8966b
Library fixed for CFLAGS=-Wextra
2016-12-08 14:05:58 +01:00
wtoorop
984fbf5042
Merge pull request #237 from huitema/develop
...
Fix the potential clipping of idle_timeout value in calls to upstream_reschedule_events()
2016-12-08 12:21:16 +01:00
Willem Toorop
21303fa40a
Sync gldns with unbound's sldns
2016-12-08 11:07:37 +01:00
Christian Huitema
50b064a292
Fixing potential clipping of idle_timeout value in call to upstream_reschedule_events
2016-12-07 15:40:24 -08:00
huitema
4549bb5723
Merge pull request #2 from getdnsapi/develop
...
Merge pull request #233 from huitema/develop
2016-12-07 09:55:46 -08:00
wtoorop
1221171438
Merge pull request #234 from saradickinson/stubby_enhancements
...
Stubby enhancements
2016-12-07 14:41:59 +01:00
wtoorop
c824316340
Merge pull request #233 from huitema/develop
...
Remainder of changes for Christian's Windows port.
2016-12-07 10:32:33 +01:00
huitema
702fe1f5d9
Update default_eventloop.c
2016-12-06 12:32:44 -08:00
Sara Dickinson
691d32cf80
Improve README entry on stubby. Add a link to dnsprivacy.org (Willem - is this set up yet?)
...
Add sample Strict config file into the source with a pointer from the README. Not sure about installing this yet as opportunistic seems a better default...?
2016-12-06 15:59:40 +00:00
Sara Dickinson
471e8725e2
Change the default profile for Stubby to use TLS then UDP/TCP
...
- this will only try over TLS a few times before backing off to clear text
- but makes the default for Stubby opportunistic privacy (Willem - WDYT?)
Also use padding and ECS privacy by default for Stubby.
More debugging to help users when there are failures or fallbacks.
Also remove a few help options from Stubby that don't apply
Add -v to output version on getdns_query/stubby
2016-12-06 14:44:40 +00:00
Christian Huitema
dee33f53b6
Reminder of changes required by the Windows port. This solves the issues 228, 229, 230 and 232.
2016-12-05 11:38:59 -08:00
huitema
598d7d103e
Merge pull request #1 from getdnsapi/develop
...
Merge pull request #231 from huitema/develop
2016-12-05 10:57:43 -08:00
Sara Dickinson
576e38977f
More logging changes to stubby to correctly report profile, transport and stats for TCP and UDP when used as fallbacks.
...
Reporting UDP stats every 100 responses or timeouts to give user some indication UDP is being used.
2016-12-05 18:05:04 +00:00
wtoorop
fd97d2724d
Merge pull request #231 from huitema/develop
...
Fixing several issues in function set_os_defaults_windows that preven…
2016-12-05 11:02:07 +01:00
Christian Huitema
0d13ae6d72
Fixing several issues in function set_os_defaults_windows that prevent working on Windows.
2016-12-04 17:26:38 -08:00
Sara Dickinson
1ba2e5bf4d
Add stubby to readme.
...
Add transport to stubby log.
2016-11-20 11:19:08 +00:00
wtoorop
133426b7db
Merge pull request #221 from saradickinson/hackathon
...
Minor logging updates
2016-11-13 13:19:15 +09:00
Sara Dickinson
b0e5f87984
Minor logging updates
2016-11-13 13:14:03 +09:00
saradickinson
4ebe5411ec
Merge pull request #219 from dkg/pinning-non-ee-cert
...
Allow public key pins higher in the chain than the EE cert
2016-11-12 18:59:24 +09:00
Daniel Kahn Gillmor
73165b235f
Allow public key pins higher in the chain than the EE cert
...
This resolves an old TODO; we'd never tested pinning any certs higher
than the end-entity cert before.
2016-11-12 16:53:21 +09:00
Willem Toorop
c2bcd1ca72
Line up OPT rdata names with add_opt_parameters
2016-11-12 14:31:27 +09:00
Sara Dickinson
1593129b85
Fix mishandling of auth state for name mismatch
2016-11-09 16:41:40 +00:00
Neil Cook
b857e3d7f1
call SSL_library_init() just once and lock with mutexes
2016-11-08 11:51:27 +00:00
Willem Toorop
57e2a18f94
Minor fixes to make it compile on Windows again
2016-11-03 15:35:53 +01:00
Willem Toorop
258e59242b
Merge remote-tracking branch 'upstream/develop' into release/1.1.0-alpha3
2016-11-03 14:27:50 +01:00
Willem Toorop
cef2e3e5d4
Merge remote-tracking branch 'upstream/develop' into develop
2016-11-03 14:25:23 +01:00
wtoorop
ef80f463c2
Update README.md
...
Properly format MS-Windows build instructions.
Thanks Christian Huitema
2016-11-03 14:19:49 +01:00
Willem Toorop
c54a22d95b
Binary API changed
2016-11-02 13:43:09 +01:00
Willem Toorop
4bf93de12b
More conventional function prototypes for servers
2016-11-02 13:40:02 +01:00
Willem Toorop
bc9ebd5ae2
RFC3986 IPv6 address/port parsing for str2dict
...
Resolves issue #215 , but does not deal with RFC3986 formatted IPv6 addresses in config files yet.
2016-10-31 13:47:22 +01:00
Willem Toorop
6e5b62c555
Allow conventional IPv6 address/port parsing
...
from getdns_query
2016-10-31 13:36:05 +01:00
wtoorop
9569e3607e
Merge pull request #216 from wtoorop/develop
...
Openssl 1.1.0 support (for the 1.0.0 release)
2016-10-31 11:36:58 +01:00
Willem Toorop
6fe4b5a6d9
Merge remote-tracking branch 'upstream/develop' into develop
2016-10-31 11:24:06 +01:00
Willem Toorop
f66bb6a812
Ignore stubby ;)
2016-10-31 11:22:16 +01:00
Willem Toorop
c0f20a9023
Merge branch 'develop' into release/1.1.0-alpha3
2016-10-31 11:12:26 +01:00
Willem Toorop
72788cb172
OpenSSL 1.1.0 version of CRYPTO_w_lock in pinning
...
Thanks volkommenheit
2016-10-31 11:04:36 +01:00
Willem Toorop
bb3d741f7a
OpenSSL 1.1 support
2016-10-31 10:24:07 +01:00
Willem Toorop
2b682bc3a9
Merge remote-tracking branch 'upstream/develop' into release/1.1.0-alpha3
2016-10-27 16:17:44 +02:00
wtoorop
45643b6da5
Merge pull request #213 from neilcook/arc4locks
...
pthread-based locking for arc4random
2016-10-27 15:55:38 +02:00
Neil Cook
db6cee94fa
Fix HAVE_PTHREADS define in configure.ac
2016-10-26 15:47:44 +00:00
Neil Cook
393b24fe89
pthread-based locking for arc4random
2016-10-26 14:32:35 +00:00
Willem Toorop
3fa34dcfca
Mention the actual missing dependencies
2016-10-26 15:52:22 +02:00
Willem Toorop
4ea4f68467
Get_suffix, no '\0' in returned strings
...
Resolves issue #203
2016-10-26 15:29:07 +02:00
Willem Toorop
cbe451274b
Bump version
2016-10-25 11:09:37 +02:00
Willem Toorop
24de66e6ce
Merge branch 'bugfix/auth_retry' into release/1.1.0-alpha3
2016-10-25 11:09:07 +02:00
Sara Dickinson
a0ae9130cc
Fix issue with session re-use making authentication appear to fail
2016-10-21 14:18:24 +01:00
Willem Toorop
bc70b29416
Stubby release
2016-10-19 07:30:31 -05:00
Willem Toorop
732844eeaa
Correct default config
2016-10-16 09:46:02 -05:00
Willem Toorop
05fb6edfcb
Linking to allow running stubby from src/tools
2016-10-16 05:39:04 -05:00
Willem Toorop
838375fe66
Run stubby in foreground by default
2016-10-16 05:32:05 -05:00
saradickinson
3cea710dc5
Merge pull request #210 from wtoorop/features/stubby
...
Features/stubby
2016-10-16 10:24:25 +01:00
Willem Toorop
0fa8152bb6
Bump version to alpha 2
...
-a2 (with dash) to be semver format compliant
2016-10-15 06:07:33 -05:00
Willem Toorop
ec04dc21ee
Stubby defaults in help text
2016-10-14 10:14:38 -05:00
Willem Toorop
3d356bd35e
Stubby runs in background by default
2016-10-14 09:51:17 -05:00
Willem Toorop
58b5ead67a
Make stubby act as stubby
2016-10-14 08:24:25 -05:00
Willem Toorop
3f965e68c0
Stubby is getdns_query with a different name
2016-10-14 12:02:23 +02:00
Willem Toorop
47e718eeb8
OpenSSL 1.1 support
2016-10-13 23:04:50 +02:00
Willem Toorop
c84ff93e4f
Anticipate Mac OS X glibtoolize
2016-08-25 12:40:02 +02:00
saradickinson
1d34fcbdd5
Merge pull request #206 from saradickinson/feature/upstream_handling
...
Feature/upstream handling
2016-08-10 18:48:00 +02:00
Sara Dickinson
f156f2f24a
Had to change some preprocessor checks to get all the options to compile
2016-08-08 17:07:46 +01:00
Sara Dickinson
6f9bfffe9f
Catch another error path for failed connections
2016-08-08 16:12:33 +01:00
Sara Dickinson
fdbefa17ec
Add timer for back off on upstream (use 1 hr). Reset as new upstream when re-instated.
2016-08-05 17:25:27 +01:00
Sara Dickinson
a1461d51ec
Add abbreviated logging mode for daemon
2016-08-05 14:10:55 +01:00
Sara Dickinson
0432fe37c4
Tinker with upstream keepalive
2016-08-04 16:10:23 +01:00
saradickinson
7f2fcca80d
Merge pull request #205 from saradickinson/merge/doc_changes
...
Merge/doc changes
2016-08-04 17:08:10 +02:00
Sara Dickinson
b1cc7750df
Merge commit '5c6f03632613aaa3b29972844b16ff0b11f8f8d8' into merge/doc_changes
2016-08-04 16:02:44 +01:00
Sara Dickinson
5c6f036326
Further updates
2016-07-21 20:25:31 +02:00
Willem Toorop
8ba8f774a9
Merge branch 'develop' into release/v1.1.0a1
2016-07-21 12:30:01 +02:00
Willem Toorop
96060ed6ae
Update README, credit Andrew
2016-07-21 12:24:41 +02:00
Willem Toorop
3372f6cf26
update release-procedure.txt
2016-07-21 12:19:39 +02:00
Willem Toorop
a1e73b98a6
Merge remote-tracking branch 'upstream/release/v1.1.0a1' into release/v1.1.0a1
2016-07-21 11:38:37 +02:00
Willem Toorop
a7e5f65f65
Merge branch 'develop' into release/v1.1.0a1
2016-07-21 11:35:03 +02:00
Willem Toorop
412c9190f8
Merge branch 'andrew-develop' into develop
2016-07-21 11:31:15 +02:00
Willem Toorop
5389a84173
Merge remote-tracking branch 'upstream/develop' into develop
2016-07-18 15:27:35 +02:00
wtoorop
b4a6fe0499
Merge pull request #201 from jelu/h-type-fix
...
Use type and not struct
2016-07-18 15:02:50 +02:00
Jerry Lundström
8c54142790
Use type and not struct
2016-07-17 11:44:34 +02:00
Andrew Sullivan
17670cbf97
Reorganise README for a new user to the project. Remove some things that are fixed/altered.
2016-07-16 14:13:34 -04:00
Willem Toorop
a7dc50f865
Merge branch 'release/v1.0.0b2' into release/v1.1.0a1
2016-07-14 20:09:07 +02:00
Willem Toorop
22c1eb7f3f
Update list of contributors
2016-07-14 20:08:02 +02:00
Melinda Shore
0a030bd8ae
Merge pull request #199 from wtoorop/release/v1.1.0a1
...
Release/v1.1.0a1
2016-07-14 09:22:17 -07:00
Melinda Shore
ac6e50f24a
Merge pull request #198 from wtoorop/release/v1.0.0b2
...
Release/v1.0.0b2
2016-07-14 09:13:42 -07:00
Willem Toorop
903605570b
Doxygen documentation of the new prototypes
2016-07-14 17:57:17 +02:00
Willem Toorop
c57f8874ec
Lib versioning for 1.1.0
2016-07-14 16:25:32 +02:00
Willem Toorop
612c4b1547
Merge branch 'release/v1.0.0b2' into release/v1.1.0a1
2016-07-14 16:24:52 +02:00
Willem Toorop
d67507fff8
Actually do lib versioning too!
2016-07-14 16:24:02 +02:00
Willem Toorop
94292f5bc7
Merge branch 'release/v1.0.0b2' into release/v1.1.0a1
2016-07-14 16:22:53 +02:00
Willem Toorop
f685a0c8b8
Unsigned expression >= 0 is always true
2016-07-14 16:18:50 +02:00
Willem Toorop
d9a089a6a0
Update .so versioning
2016-07-14 16:00:55 +02:00
Willem Toorop
0736453bed
Doxygen fixes
2016-07-14 15:53:53 +02:00
Willem Toorop
255cc9ab36
First bit of set_from_os loads OS defaults
2016-07-14 15:42:49 +02:00
Willem Toorop
7c7c58604f
Update ChangeLog
2016-07-14 15:24:59 +02:00
Willem Toorop
65a46e1026
Update ChangeLog
2016-07-14 15:20:13 +02:00
Willem Toorop
84458d68c4
Merge branch 'release/v1.0.0b2' into release/v1.1.0a1
2016-07-14 15:19:28 +02:00
Willem Toorop
9cb38bc822
Release today
2016-07-14 15:18:27 +02:00
Willem Toorop
e857f680ce
Dependencies (but this time good)
2016-07-14 15:05:46 +02:00
Willem Toorop
0340b74604
Dependencies
2016-07-14 15:04:19 +02:00
Willem Toorop
8b31ad5df1
Logic error
2016-07-14 15:03:47 +02:00
Willem Toorop
80ea8637d1
Recover src/tools
2016-07-14 14:50:26 +02:00
Willem Toorop
ebba1d4cce
Merge branch 'release/v1.0.0b2' into release/v1.1.0a1
2016-07-14 14:45:16 +02:00
Willem Toorop
d59dfb6609
New commits in src/test/jsmn
2016-07-14 14:33:24 +02:00
Willem Toorop
99d8672bee
Fix few possible NULL dereference issues
2016-07-14 14:24:32 +02:00
Willem Toorop
689fc02fd2
Allow errors while setting up listeners
2016-07-14 14:14:15 +02:00
Willem Toorop
bae426a0e2
Unread assignment
2016-07-14 14:09:08 +02:00
Willem Toorop
906a8d68c2
fix for converting empty lists and dicts
2016-07-14 14:06:00 +02:00
Willem Toorop
2485c11e32
Include jsmn in dist tarball
2016-07-14 14:02:29 +02:00
Willem Toorop
ea69d31dba
move getdns_query to src/tools
2016-07-14 13:54:58 +02:00
Willem Toorop
af70671641
parentheses around comparison in operand of ‘&’
2016-07-14 13:46:12 +02:00
Willem Toorop
b4e7a82e11
EDNS0 padding is RFC
2016-07-14 13:40:49 +02:00
Willem Toorop
74b57d4679
Resync utils with unbound source
2016-07-14 13:33:11 +02:00
Willem Toorop
470fb7a5fb
!0 is not necessarily 1
2016-07-14 11:42:21 +02:00
Willem Toorop
fed4818c27
Fix idle_timeout without keepalive for TLS
2016-07-14 11:03:33 +02:00
wtoorop
79f92cedd2
Merge pull request #197 from saradickinson/feature/upstream_handling
...
Feature/upstream handling
2016-07-14 10:58:32 +02:00
Sara Dickinson
6c73144b50
Minor logging updates
2016-07-13 17:39:26 +01:00
saradickinson
d25d60cc3e
Merge pull request #195 from wtoorop/release/v1.1.0a1
...
Release/v1.1.0a1
2016-07-13 16:46:54 +01:00
saradickinson
9a81791bc9
Merge pull request #196 from wtoorop/release/v1.0.0b2
...
Release/v1.0.0b2
2016-07-13 16:40:15 +01:00
Willem Toorop
504cb8a783
Merge branch 'develop' into release/v1.1.0a1
2016-07-13 15:55:17 +02:00
Willem Toorop
b26d69384f
Merge branch 'develop' into release/v1.0.0b2
2016-07-13 15:52:14 +02:00
Willem Toorop
31f1375b8e
Merge branch 'release/v1.0.0b2' into release/v1.1.0a1
2016-07-13 15:30:28 +02:00
Willem Toorop
9f7ceeded3
Don't SSL_library_init() on every context create
...
It will not be called when the second bit from the set_from_os parameter is set.
This deals with issue #117
2016-07-13 15:28:08 +02:00
Willem Toorop
be97bd1d71
Mv getdns_context_set_listen_addresses in the lib
...
Also, check for request_id +
cancel a reply by specifying NULL as response to getdns_reply
2016-07-13 14:50:44 +02:00
Willem Toorop
69b607176c
Move getdns_context_config into the library
2016-07-11 20:42:50 +02:00
Willem Toorop
7cbbad67aa
Merge branch 'release/v1.0.0b2' into release/v1.1.0a1
2016-07-11 16:06:52 +02:00
Willem Toorop
a523838cc6
set_listen_addresses does not change listen_list
2016-07-11 16:05:05 +02:00
Willem Toorop
b98d91f745
Daemon edns0 handling bugfix
2016-07-11 15:43:42 +02:00
Willem Toorop
7e614bc534
More conventional server DNSSEC behaviour
...
+ documentation of behaviour
2016-07-11 15:13:40 +02:00
Willem Toorop
d0f01b6bc4
Default values for extensions in context
2016-07-07 14:47:38 +02:00
Sara Dickinson
105d7acfa9
Just re-read RFC7858 and realised that TLS does support idle connections without keepalive. It is just TCP that doesn't.
2016-07-04 17:02:18 +01:00
Sara Dickinson
5e1575dabc
Correct the logic for upstream back off
2016-07-04 17:02:18 +01:00
Sara Dickinson
8fa84c836a
Initial re-work of stateful transport selection and timeout/error handling. Also update transport test to avoid timeout.
2016-07-04 17:02:14 +01:00
Willem Toorop
e0eb39a295
Move str2getdns type functions in the library
2016-07-04 16:57:27 +02:00
Willem Toorop
df540ad5ca
Bumb version
2016-07-04 16:13:30 +02:00
Willem Toorop
f1b2dbeaa7
Merge branch 'devel/str2dict-maintenance' into release/v1.0.0b2
2016-07-04 15:54:49 +02:00
Willem Toorop
cc104320e8
Get RR types and classes from constant names
2016-07-04 15:54:05 +02:00
Willem Toorop
92fd79ff55
Update Changelog
2016-07-04 14:50:02 +02:00
Willem Toorop
91f3494a8a
Bumb version to 1.0.0b2
2016-07-04 14:49:45 +02:00
Willem Toorop
b99b7511ec
Generalize str2ipaddr_dict conversion
2016-07-04 12:58:23 +02:00
wtoorop
a55c8ab377
Merge pull request #194 from saradickinson/documentation/doxygen_updates2
...
Make just the src/getdns files part of doxygen by default.
2016-07-04 12:47:57 +02:00
wtoorop
4e6e6e314a
Merge pull request #193 from saradickinson/bugfix/transport_test2
...
Bugfix/transport test2
2016-07-04 12:43:26 +02:00
Sara Dickinson
ecb169c705
Add notes on transport implementation irregularities
2016-07-02 15:44:32 +01:00
Melinda Shore
0e36a3b852
Merge pull request #192 from wtoorop/bugfix/transport_test
...
Bugfix/transport test
2016-07-01 16:26:26 -08:00
Sara Dickinson
ec09d6b8a4
Make just the src/getdns files part of doxygen by default.
...
Add documentation to cover getdns_extra.h. Re-org of functions to align better with getdns.h Also some work on the README.
2016-07-01 17:53:45 +01:00
Sara Dickinson
03a994af50
Fix recursing_6 test
2016-06-30 15:10:41 +01:00
saradickinson
3f29bfa212
Merge pull request #1 from wtoorop/bugfix/transport_test
...
Own root server with TCP only full recursion test
2016-06-29 11:36:46 +01:00
Willem Toorop
080b338a8f
Explain own root server necessity in transport_7
...
Also query for the consistently large record and not the DNSKEY (which is sometimes large and sometimes not)
2016-06-29 12:32:51 +02:00
Melinda Shore
8318766593
Merge pull request #191 from wtoorop/devel/decompose-getdns_query
...
Devel/decompose getdns query
2016-06-28 16:36:13 -08:00
Willem Toorop
cfaf15f54c
When reply comes before request schedule ...
...
... transaction_id will not be set.
Is this problematic?
2016-06-28 16:53:26 +02:00
Willem Toorop
dd03a29b00
Small memory leak fix in set_listen_addresses
2016-06-28 16:34:17 +02:00
Willem Toorop
ed9912fae2
On the fly listen_addresses with getdns_query
2016-06-28 15:48:31 +02:00
Willem Toorop
ce415a6e2a
setup server debugging messages
2016-06-28 15:06:02 +02:00
Willem Toorop
62750b505f
Own root server with TCP only full recursion test
2016-06-28 14:39:51 +02:00
wtoorop
61bcf0e5b7
Merge pull request #186 from saradickinson/documentation/doxygen_updates
...
Initial pass at updating Doxygen modules for getdns.h. Also add info …
2016-06-28 12:05:54 +02:00
wtoorop
66b7bb2ca1
Merge pull request #190 from saradickinson/bugfix/transport_test
...
Split the recursive transport test 6 into 3 and add a shorter timeout…
2016-06-28 11:54:58 +02:00
wtoorop
771a7dd43c
Merge pull request #189 from wtoorop/devel/codebase-maintenance
...
s/inline static/static inline/g
Small change and "static inline" is the only portable (C99) construct
2016-06-28 11:49:14 +02:00
Willem Toorop
dc7bc4d116
Add and remove listen addresses
...
Following the algorithm suggested by Shane Kerr:
# figure out the new addresses to add and the old ones to remove
to_add, to_remove = compare_addresses(current_set, new_set)
# add our new addresses
added = []
for address in to_add:
if set_up_address(address) == SUCCESS:
added.add(address)
else:
# if we have an error, remove any of those addresses
# that we have added so far and return error
for address in added:
tear_down_address(address)
return BIG_FAT_FAILURE
# git rid of our old addresses
for address in to_remove:
tear_down_address(address)
cancel_current_io(address)
return SUCCESS
2016-06-28 11:03:25 +02:00
Sara Dickinson
b277aef435
Remove build warnings
2016-06-27 11:53:39 +01:00
Sara Dickinson
75b0fef741
Update some type/value names and revert to original order of declarations with manual ordering within the page
2016-06-25 18:09:56 +01:00
Sara Dickinson
d3309e89e8
Initial pass at updating Doxygen modules for getdns.h. Also add info on using context_create multithreaded.
...
- this is a rough first pass at making the oxygen Modules page more consistent and user navigable
as a handy index into getdns
- I think a further re-org is needed in a later update, also haven't touched getdns_extra.h yet
- Added a few functions descriptions too, but still many functions without comments... a WIP
- Updated man page for context_create with multi-threaded instructions as a short term fix
2016-06-25 18:09:56 +01:00
Sara Dickinson
3ee5cf32b6
Split the recursive transport test 6 into 3 and add a shorter timeout to the fail case to stop the overall test timing out.
2016-06-25 15:57:14 +01:00
Willem Toorop
a57b19332a
track connections per listener
...
so they can be dealt with when a listener has to go.
Connections are kept in a double linked list.
Prev links are pointers to the next pointer, to deal with the list handle (i.e. the first next pointer) in a uniform way.
2016-06-23 17:05:32 +02:00
Willem Toorop
9c7f6faf76
Don't TCP idle timeout with queries to be answered
2016-06-23 16:26:20 +02:00
Willem Toorop
50416ecc7f
Make getdns_query daemon work again
2016-06-23 15:26:19 +02:00
Willem Toorop
32c6e1fdee
Merge branch 'develop' into devel/decompose-getdns_query
2016-06-23 15:06:20 +02:00
Willem Toorop
734a6625c4
s/inline static/static inline/g
2016-06-23 15:03:46 +02:00
wtoorop
b56fbbb604
Merge pull request #187 from rwgroenenberg/call_reporting_timeout
...
Return call_reporting info in case of timeout, so that we can see which server did not respond.
2016-06-23 14:11:32 +02:00
wtoorop
a435932b04
Features/call reporting timeout ( #1 )
...
* Timed out and canceled netreqs are finished too
* Minor code duplication elemination
* Blah typo
* Embarrassing logic error
2016-06-23 14:02:55 +02:00
wtoorop
11f5eac21f
Merge pull request #188 from rwgroenenberg/CentOS6_build
...
Build fails with autoconf 2.63, works with 2.68.
Muchas gracias
2016-06-23 13:58:32 +02:00
Robert Groenenberg
03fcfc006f
Build fails with autoconf 2.63, works with 2.68.
...
Found on CentOS 6.6. With autoconf268 (available from EPEL repo) it works.
Looking at the update description of autoconf 2.64, the problem _might_ be fixed with that version already.
2016-06-22 14:40:21 +02:00
Willem Toorop
f5d31cd93c
Some minor getdns_query memory leak fixes
2016-06-21 16:31:07 +02:00
Willem Toorop
3cc369a27d
Move serving requests out of getdns_query
2016-06-21 16:14:54 +02:00
Robert Groenenberg
60c6c8d8ca
Fixed build
2016-06-21 13:19:11 +02:00
Robert Groenenberg
3634fff4dd
Return call_reporting info in case of timeout, so that we can see
...
which server did not respond.
2016-06-20 18:39:15 +02:00
Willem Toorop
09b4ef9e9c
Let getdns_query use the default eventloop
...
instead of a custom eventloop
2016-06-17 17:07:41 +02:00
Willem Toorop
2555980b41
Forgot to update symbols
2016-06-17 17:07:26 +02:00
Willem Toorop
2873645068
get current (pluggable) eventloop from context
...
So applications can schedule events against it...
2016-06-17 16:50:47 +02:00
Willem Toorop
22095f23f6
Bugfix: cannot override targets in Makefile
2016-06-17 16:37:41 +02:00
Willem Toorop
0f16860dbd
Move configuring contexts with a dict out
2016-06-17 16:01:36 +02:00
wtoorop
6d63f74d18
Merge pull request #185 from saradickinson/feature/transport_testing
...
Minor testing updates:
2016-06-17 12:32:28 +02:00
Sara Dickinson
497d87a028
Correct the name to resolution_type
2016-06-17 11:25:21 +01:00
Sara Dickinson
3c7758fdbc
Minor testing updates:
...
- add option to use IPv6 for manual transport tests
- add recursion mode to call_reporting
2016-06-16 10:47:43 +01:00
Willem Toorop
4fde05380f
Yet another pass at fixing dependencies
...
pretty sure it will work this time though...
2016-06-16 11:12:11 +02:00
wtoorop
ddf69b4883
Merge pull request #184 from saradickinson/bugfix/tls_connection_timeout
...
Quick fix for TLS timeouts not re-using a connection. Better solutio is needed.
Also minor fixes in getdns_query:
spurious semicolon (caused build warning)
build warning for initialised variable
have getdns_query honour the CLASS in the incoming query
2016-06-16 11:07:26 +02:00
Willem Toorop
d70bd5e637
A dependency fix that actually works!
2016-06-16 11:01:46 +02:00
Sara Dickinson
c0187a19ea
Quick fix for TLS timeouts not re-using a connection. Better solution is needed.
...
Also minor fixes in getdns_query:
- spurious semicolon (caused build warning)
- build warning for initialised variable
- have getdns_query honour the CLASS in the incoming query
2016-06-15 17:15:13 +01:00
Willem Toorop
1608244556
Dependency fix
2016-06-15 16:56:20 +02:00
Willem Toorop
8eea955f56
Dependencies
...
Including the decomposed getdns_str2dict
2016-06-15 16:47:40 +02:00
Willem Toorop
ff77af148e
Move str2dict conversion out of getdns_query
2016-06-15 15:53:43 +02:00
Willem Toorop
c74bfb5339
Pass NULL to select when timeout is infinite
2016-06-15 11:04:11 +02:00
Willem Toorop
ea226b882d
To run tpkg tests directly from clean git repo
2016-06-14 12:52:54 +02:00
Melinda Shore
20ba3958fa
Merge pull request #181 from wtoorop/features/getdns_service
...
Features/getdns service
2016-06-09 10:03:34 -08:00
Willem Toorop
2ed28badfd
Replies without answer don't have a canonical name
2016-06-09 16:47:00 +02:00
Willem Toorop
e228f526a3
when nothing else, result[canonical_name] is qname
2016-06-09 16:12:06 +02:00
wtoorop
3b1d7a3b26
Merge pull request #182 from guillemj/libbsd
...
Use libbsd when available
Tested on Linux/OS-X/FreeBSD/NetBSD
Works perfectly. Thanks!
2016-06-09 15:39:17 +02:00
Willem Toorop
49840c9a85
Some more uniform _getdns_rrset usage
2016-06-09 15:03:51 +02:00
Willem Toorop
e27bfcedb6
Merge branch 'develop' into devel/getdns_rrset
2016-06-09 14:13:11 +02:00
wtoorop
cdc0fc04e2
Merge pull request #183 from wtoorop/develop
...
DNSSEC wildcard validation issue
2016-06-09 11:03:15 +02:00
Willem Toorop
27110e0943
DNSSEC wildcard validation issue
2016-06-09 10:44:25 +02:00
Guillem Jover
1fb763761b
Use libbsd when available
...
Use the libbsd (https://libbsd.freedesktop.org/ ) overlay to transparently
use the bsd compatibility layer without needing any actual code changes.
Remove now unnecessary direct access to libbsd includes. And remove
checks for unused functions.
2016-06-09 02:42:22 +02:00
Willem Toorop
8679633cd9
One more _getdns_rrset caused dnssec fix
2016-06-08 16:03:45 +02:00
Willem Toorop
6e7f66b216
Sorting of SRVs according to RFC2782
...
Could be optimized... but alas
2016-06-08 12:44:23 +02:00
Willem Toorop
457a4bec92
develop merge fix
2016-06-08 10:57:03 +02:00
Willem Toorop
490aac1b48
Merge branch 'develop' into features/getdns_service
2016-06-08 10:21:29 +02:00
Willem Toorop
2d22b8729d
Locks must be >= 0
2016-06-07 17:21:10 +02:00
Willem Toorop
e16efbbeee
Small bugs from the _getdns_rrset move
2016-06-07 17:08:35 +02:00
Willem Toorop
cf675a9284
Add srv_addresses when query was for SRV
...
Moved _getdns_rrset iterators to rr-iter.[ch] in the process
2016-06-07 16:52:10 +02:00
Melinda Shore
15a2c1b591
Merge pull request #179 from getdnsapi/features/create_dict_with_json
...
A daemon mode for getdns_query
2016-06-06 19:42:24 -08:00
Willem Toorop
3af8a917a2
TSIG spec contains colon too
2016-06-01 17:00:05 +02:00
Willem Toorop
a100aff4de
Free allocated qname after query
2016-05-31 16:55:59 +02:00
Willem Toorop
cc39d51a4c
Query with the correct extensions!
2016-05-31 15:40:22 +02:00
Willem Toorop
ff4545dae0
Listening sockets should use SO_REUSEADDR
2016-05-31 15:14:50 +02:00
Willem Toorop
6781899247
Allow keys without quotes in json dicts
2016-05-31 15:02:17 +02:00
Willem Toorop
2bb254c898
A DNSSEC resolver validates without DO too
2016-05-31 13:17:16 +02:00
Willem Toorop
40477d3f00
CNAME loops protection
2016-05-30 17:02:28 +02:00
Willem Toorop
2b81be8859
Better servfail serving in getdns_query daemon
2016-05-30 16:37:38 +02:00
Willem Toorop
aedf4454f5
Configure options for tracing messages
...
(and a secret hidden one to keep connections open)
2016-05-30 16:36:43 +02:00
Willem Toorop
2c43afe338
SERVFAIL should contain the query name...
2016-05-30 11:25:07 +02:00
Willem Toorop
1fb91028ad
Oopsy
2016-05-26 17:05:06 +02:00
Willem Toorop
89d2f74d24
First fixes that came out of deckard testing
2016-05-26 17:02:21 +02:00
Willem Toorop
e01211d6b4
Debug setting that keeps connections open
2016-05-25 15:57:37 +02:00
Willem Toorop
e25e697970
Merge remote-tracking branch 'upstream/develop' into features/create_dict_with_json
2016-05-25 15:12:48 +02:00
Willem Toorop
4334da370e
Recursing available on bogus answer too
...
provided the resolution mode is RECURSING
2016-05-25 14:53:33 +02:00
wtoorop
5e74185327
Merge pull request #172 from saradickinson/feature/unit_test_updates_2
...
Feature/unit test updates 2
2016-05-25 13:49:00 +02:00
Willem Toorop
888cba625c
DNSSEC extensions overwrite curtom headers
...
to make roadblock avoidance work in daemon mode
2016-05-23 16:40:26 +02:00
Willem Toorop
9e0127e74c
Don't allow primitive keys (yet)
...
They cannot handle the colon very well (yet)
2016-05-23 15:54:53 +02:00
Willem Toorop
5b832e457c
Allow dns_root_servers to be given by bindata too
2016-05-23 15:53:36 +02:00
Willem Toorop
95718c9474
Mention format of the settings
2016-05-23 15:03:51 +02:00
Willem Toorop
77af32d121
Two more missing unofficial settings options
2016-05-23 14:43:05 +02:00
Willem Toorop
eef421fb63
Allow configuration passed on command line too
2016-05-23 14:33:56 +02:00
Willem Toorop
7b861ecbbc
Allow arbitrary bindata with json dict primitives
2016-05-23 12:41:46 +02:00
Willem Toorop
acad529654
Default extensions settings via config file
2016-05-23 12:22:23 +02:00
Willem Toorop
584193eb39
Stub daemon mode forwards the request header
2016-05-23 11:35:50 +02:00
Willem Toorop
4479d06ebd
Allow keys without quotes in config file
...
+ help text that show config file option
2016-05-23 11:27:27 +02:00
Willem Toorop
938eef1b00
String bindata's secretly contain final '\0'
2016-05-22 21:58:50 +02:00
Willem Toorop
7b47e82eae
DNSSEC in server working with recursive mode too
2016-05-22 20:49:52 +02:00
Willem Toorop
382a5ec452
getdns_query daemon pass through header options
...
(Enables DNSSEC for stub mode, but not for recursive)
2016-05-22 18:23:15 +02:00
Willem Toorop
959f1e5496
listen_addresses setting in config file
2016-05-22 17:35:14 +02:00
Willem Toorop
14a950bc29
getdns_query -C for settings via config file
2016-05-22 15:35:32 +02:00
Sara Dickinson
9c8e07a06a
Merge branch 'develop' of https://github.com/getdnsapi/getdns into feature/unit_test_updates_2
2016-05-20 16:07:52 +01:00
Sara Dickinson
84d6da8ef6
Fix ups after Willems review
2016-05-20 16:01:23 +01:00
Willem Toorop
e8db20a722
Merge branch 'develop' into features/create_dict_with_json
2016-05-20 15:04:08 +02:00
Melinda Shore
0fa3f09ca2
Merge pull request #176 from getdnsapi/devel/bsd-fixes
...
Devel/bsd fixes
2016-05-19 20:12:42 -08:00
Willem Toorop
7f30aba6bd
Only merge non empty lcov info files
2016-05-19 21:15:24 +02:00
Willem Toorop
028ceb7ebf
Merge branch 'develop' into devel/bsd-fixes
2016-05-19 21:13:47 +02:00
Willem Toorop
b4fceaa008
Enable setting FD_SETSIZE
2016-05-19 17:05:41 +02:00
Willem Toorop
f806ffdc70
Anticipate BSD make in tpkg's
2016-05-19 15:56:19 +02:00
Willem Toorop
0bc8eb65b3
Sort symbols the same on all systems
2016-05-19 15:24:01 +02:00
Willem Toorop
4c3888b18e
jsmn.h is relative to $(srcdir) too
2016-05-18 15:56:54 +02:00
Willem Toorop
7fd9d1e342
const-info.h is relative to $(srcdir)
2016-05-18 15:47:57 +02:00
Willem Toorop
11a063bad0
Parse IPv4, IPv6 and dnames as primitives
2016-05-18 15:21:24 +02:00
Sara Dickinson
98d636b99d
Updates to unit tests and tpkg
2016-05-16 17:56:48 +01:00
Sara Dickinson
5f225d6be3
Add TLS session resumption
2016-05-16 17:41:55 +01:00
Melinda Shore
d8b2b776a8
Merge pull request #171 from wtoorop/devel/tpkg-xtra-configure-params
...
Devel/tpkg xtra configure params
2016-05-13 21:00:16 -08:00
Melinda Shore
35f639faf1
Merge pull request #170 from wtoorop/devel/clang-static-checking
...
Static checking
2016-05-13 20:42:21 -08:00
Willem Toorop
1d5446f117
First pass at parsing getdns dicts in text format
2016-05-11 12:07:27 +02:00
Willem Toorop
22328703cc
Convert constant name to value
2016-05-09 15:17:26 +02:00
Willem Toorop
4159360ee5
Pass run-all.sh params to tpkg's configure calls
2016-05-09 14:13:37 +02:00
Willem Toorop
4b7e79cc35
TCP server now also working
2016-05-06 17:30:05 +02:00
Willem Toorop
78a6a47b05
Anticipate new pretty print format in tpkg tests
2016-05-04 15:25:18 +02:00
Willem Toorop
e6b5a29196
jsmn submodule via https
2016-05-04 11:11:30 +02:00
Willem Toorop
a80afd357e
Initial UDP only server for getdns_query
...
Provide listening addresses in the same way as upstreams,
but with the initial character '~' instead of '@'.
2016-05-04 09:38:26 +02:00
Willem Toorop
5085af0d28
Abit more leniency in what to accept for upstreams
...
address_type no longer necessary
instead of address dicts, just bindata is now also ok
2016-05-03 14:52:30 +02:00
Willem Toorop
9f3ad7d603
Add our version of jsmn as submodule
2016-05-03 13:38:40 +02:00
Willem Toorop
c14c6fe993
Print dname's as primitive type
2016-05-03 13:35:01 +02:00
Willem Toorop
240bb76bd5
Merge branch 'develop' into devel/clang-static-checking
2016-04-29 16:33:06 +02:00
Willem Toorop
066c0b3837
Merge branch 'features/canonical_dnssec_chain' into upstream/develop
2016-04-29 16:24:58 +02:00
Willem Toorop
a8dbb3dd51
Static checking fixes
2016-04-29 12:00:17 +02:00
Willem Toorop
9ac9e0e6d0
Need target everything for tpkg 340
2016-04-29 11:48:39 +02:00
Willem Toorop
84570a5f0a
Static checking with the clang analyzer
2016-04-29 11:47:20 +02:00
Melinda Shore
65fe25dcd6
Merge pull request #167 from wtoorop/features/send_query_packet
...
Set header bits (and opcode) with a header extension
2016-04-28 11:06:55 -08:00
Willem Toorop
d09698496d
Fail on scheduling errors
2016-04-28 15:02:27 +02:00
Willem Toorop
234d6d1b06
Dependencies
2016-04-28 14:39:26 +02:00
Willem Toorop
6e0d8de885
tpkg for the header extension
2016-04-28 14:28:22 +02:00
Willem Toorop
b12aeb80fb
Allow for tpkg test with configured srcdir
...
By temporarily moving the configured files aside while building
2016-04-28 14:26:29 +02:00
Willem Toorop
04b3830fb6
Set OPCODE in header too
2016-04-28 13:44:28 +02:00
Willem Toorop
d841582d67
Setting header bits through extensions working
2016-04-26 15:54:58 +02:00
Willem Toorop
25cc88e1a2
First pass at sending packets
2016-04-25 17:21:04 +02:00
Willem Toorop
8fc89d01cb
Post devel/scheduling_bug_detection merge cleanups
2016-04-22 14:43:17 +02:00
Willem Toorop
af8e27f059
Merge branch 'devel/scheduling_bug_detection' into features/canonical_dnssec_chain
2016-04-22 14:42:25 +02:00
Willem Toorop
d61e64c9c7
Fix callbacks during scheduling in DNSSEC code too
2016-04-22 14:09:18 +02:00
Willem Toorop
15271d0438
Account for callbacks fired during scheduling
2016-04-21 15:16:38 +02:00
Willem Toorop
0bd4026898
Detect freed memory usage with recursive queries
...
Only when using unbound-event-api and doing queries for names in /etc/hosts
2016-04-21 12:37:09 +02:00
Willem Toorop
c05f963719
Fail on debugging detected errors
2016-04-21 12:24:53 +02:00
Willem Toorop
4849329818
dnssec_return_full_validation_chain extension
...
That also returns all records that had to be proofed secure in canonical form in the "validation_chain".
2016-04-18 22:06:12 +02:00
Willem Toorop
e1126c9cf8
Canonicalize dnssec chain
...
When validated
2016-04-18 15:36:39 +02:00
Melinda Shore
102d55d4a5
Merge pull request #163 from wtoorop/devel/issue-160-bugfix
...
Devel/issue 160 bugfix
2016-04-13 19:56:30 -08:00
Willem Toorop
516f211843
Fire idle timeouts immediately with sync requests
2016-04-13 12:06:51 +02:00
Willem Toorop
57954ad41e
Small bugfix in checking complete requests async
2016-04-11 15:33:08 +02:00
Willem Toorop
da577a463d
set upstream loop to the sync loop for sync reqs
...
And reset to the async loop when sync request was finished, rescheduling the upstream->event.
Note that finished_event is scheduled against the async loop always.
2016-04-11 14:49:44 +02:00
wtoorop
8c97e67ceb
Merge pull request #162 from pusateri/develop
...
Add a pkg-config file for the getdns_ext_event library.
2016-04-08 10:26:45 -03:00
Tom Pusateri
a4b641790b
Add a pkg-config file for the getdns_ext_event library.
2016-04-07 16:22:56 -03:00
Melinda Shore
0a7f80ccbe
Merge pull request #161 from wtoorop/develop
...
minor openssl 1.1.0 bugfix
2016-04-05 16:06:29 -08:00
Willem Toorop
d2d4a849f4
Merge remote-tracking branch 'upstream/develop' into develop
2016-04-05 15:50:50 -03:00
Willem Toorop
e4b0d08fad
Minor bugfix for use with openssl 1.1.0
2016-04-05 13:15:59 -03:00
wtoorop
bbb498c680
Merge pull request #159 from shane-kerr/coverage
...
Modified version of the "run-all.sh" which collects coverage information and produces a report.
2016-04-02 16:49:02 -03:00
Shane Kerr
af8139e957
Modified version of the "run-all.sh" which collects coverage information and produces a report.
2016-04-02 15:44:46 -03:00
wtoorop
ef03943c35
Merge pull request #158 from shane-kerr/patch-1
...
Update README.md
2016-04-02 12:47:58 -03:00
Shane Kerr
575b53ab03
Update README.md
...
Reversed order of one flag to remove dependency in documentation.
2016-04-02 11:48:22 -03:00
Willem Toorop
c53b15bd9a
target-fetch-policy only with unbound-event-api
2016-03-31 07:49:40 -03:00
Willem Toorop
cab13ce32a
Rename version into 1.0.0b1
2016-03-31 06:22:14 -03:00
Willem Toorop
d0ff4c9d6b
Update ChangeLog
2016-03-30 12:33:49 -03:00
Willem Toorop
8d05fd7c1b
FD_SETSIZE can be unsigned
2016-03-30 11:57:01 -03:00
Willem Toorop
79e44053d3
Don't include ub event defs twice
2016-03-30 11:43:11 -03:00
Willem Toorop
f3bc6360bf
Do definitions once
2016-03-30 11:37:16 -03:00
Willem Toorop
c9fab8c242
target-fetch-policy for more resilient recursion
2016-03-30 10:56:46 -03:00
Willem Toorop
64dfed2a07
Merge branch 'develop' into release/v1.0.0beta
2016-03-29 20:40:50 +02:00
Willem Toorop
fc32b300f3
Start with beta release
2016-03-29 20:37:06 +02:00
wtoorop
4e0073ae6f
Merge pull request #157 from gmadkat/develop
...
Added code to read the domain from the registry and use it if search …
2016-03-29 16:13:04 +02:00
gmadkat
af7f384cf3
Added code to read the domain from the registry and use it if search suffixes are missing
2016-03-27 22:37:54 -07:00
Melinda Shore
1f45bf7e43
Merge pull request #154 from wtoorop/devel/no-sync-side-effects
...
No more side effects with synchronous calls
2016-03-24 10:53:05 -08:00
Melinda Shore
4b033c766b
Merge pull request #156 from wtoorop/devel/std-suffix-handling
...
Devel/std suffix handling
2016-03-24 10:52:36 -08:00
Melinda Shore
5b41c67d7a
Merge pull request #155 from wtoorop/devel/codebase-maintenance2
...
Devel/codebase maintenance2
2016-03-24 10:03:15 -08:00
Willem Toorop
7df26b6068
Merge branch 'devel/codebase-maintenance2' into release/v1.0.0beta
2016-03-24 16:53:15 +01:00
Willem Toorop
4187636f41
Merge branch 'devel/std-suffix-handling' into release/v1.0.0beta
2016-03-24 16:53:05 +01:00
Willem Toorop
4298e7dce6
Merge branch 'devel/no-sync-side-effects' into release/v1.0.0beta
2016-03-24 16:52:49 +01:00
Willem Toorop
fdd3992f65
openssl 1.1 support
2016-03-24 14:02:18 +01:00
Willem Toorop
e10e774d32
Reversed IPv6 lookup can take a while
2016-03-24 11:46:42 +01:00
Willem Toorop
e4955d69ef
Updates from unbound
2016-03-24 11:14:14 +01:00
Willem Toorop
0d66f91c91
getdns_query option for APPEND_NAME_TO_SINGLE_LABEL_FIRST
2016-03-23 23:31:23 +01:00
Willem Toorop
e7c77290cc
GETDNS_APPEND_NAME_TO_SINGLE_LABEL_FIRST
2016-03-23 23:27:27 +01:00
Willem Toorop
b0ecda5d2e
No more side effects with synchronous calls
...
(and upstreams that keep connections open)
2016-03-23 22:13:31 +01:00
Melinda Shore
efc42481d5
Merge pull request #153 from wtoorop/features/follow_redirects
...
getdns_context_set_follow_redirects()
2016-03-23 07:11:19 -08:00
Willem Toorop
09476f1ca9
getdns_context_set_follow_redirects()
2016-03-23 11:32:38 +01:00
Melinda Shore
735892cb99
Merge pull request #152 from wtoorop/devel/codebase-maintenance
...
Devel/codebase maintenance
2016-03-22 20:42:57 -08:00
Willem Toorop
e934c100a2
Merge branch 'develop' into devel/codebase-maintenance
2016-03-22 13:22:13 +01:00
wtoorop
17ba786cea
Merge pull request #151 from gmadkat/develop
...
Added search suffix for Windows from registry
Thank you Gowri!
2016-03-22 13:17:29 +01:00
Willem Toorop
091d41dfe0
5th time's a charm
2016-03-22 10:16:15 +01:00
Willem Toorop
255e60cdcd
Old valgrind travis-ci (test mode 4)
2016-03-22 10:07:59 +01:00
Willem Toorop
532c26d7c8
Old valgrind travis-ci (test mode 3)
2016-03-22 10:00:56 +01:00
Willem Toorop
ede4afc7b6
Old valgrind travis-ci (test mode 2)
2016-03-22 09:53:40 +01:00
Willem Toorop
213a3dc5d8
Old version valgrind tpkg (test mode)
2016-03-22 09:37:01 +01:00
gmadkat
5d2a05f5e0
Added search suffix for Windows from registry
2016-03-21 21:10:57 -07:00
Willem Toorop
d2e62acf0d
What options can I use with travis valgrind?
2016-03-21 17:03:53 +01:00
Willem Toorop
620de476df
Don't show all leak kinds
2016-03-21 16:51:40 +01:00
Willem Toorop
d35b7ff174
Small memory leak in getdns_query
2016-03-21 16:42:53 +01:00
Willem Toorop
29323f8d94
valgrind unit tests
2016-03-21 16:35:13 +01:00
Willem Toorop
0d9d5a5eb7
Bugfix unitialized memory access with root lookups
2016-03-21 15:39:33 +01:00
Willem Toorop
468f2997ff
dependencies update
2016-03-21 15:32:55 +01:00
Willem Toorop
c057f65b28
list_append_list not used
2016-03-21 15:15:55 +01:00
Willem Toorop
90beaaff1d
Use non-copying list_append_this_dict
2016-03-21 14:56:09 +01:00
Willem Toorop
ba2da45819
Non copying list_append functions
2016-03-21 14:19:37 +01:00
Willem Toorop
eea6ad7beb
append_bindata was also used marginally
2016-03-21 13:13:48 +01:00
Willem Toorop
4e0ee15b73
dict_set_this_bindata not used anywhere
2016-03-21 13:07:20 +01:00
Willem Toorop
4551f0850b
Use non-copying dict_set_list
2016-03-21 12:50:43 +01:00
Willem Toorop
6f157854ce
Use non-copying dict_set_dict
2016-03-21 11:55:21 +01:00
Willem Toorop
fc5f16dbcb
Non copying dict_set functions
2016-03-21 11:54:55 +01:00
wtoorop
b687a97334
Merge pull request #150 from gmadkat/develop
...
Update README.md
2016-03-21 09:53:55 +01:00
wtoorop
d9bcc26c36
Merge pull request #149 from saradickinson/feature/stub-debug-cleanup
...
Feature/stub debug cleanup
2016-03-18 17:22:55 +01:00
Willem Toorop
e4e3dde61f
Don't breakup the sync vs async schedule
...
to accentuate changes.
2016-03-18 13:30:49 +01:00
Sara Dickinson
c1f15fc0ac
Minor tweaks
2016-03-18 12:02:40 +00:00
Sara Dickinson
c08371ebb0
First pass at updating DEBUG_STUB output
2016-03-18 11:34:51 +00:00
Willem Toorop
5469442eaa
Execute all tests allways (even if one fails)
2016-03-17 17:13:20 +01:00
Willem Toorop
186dbca7ce
Dependencies
2016-03-17 17:02:17 +01:00
Willem Toorop
ab742b34b6
Miscelaneous scheduling fixes and improvements
2016-03-17 16:49:05 +01:00
Willem Toorop
94c73b6ec8
Write libcheck logfiles via env variables
2016-03-17 16:40:30 +01:00
Willem Toorop
e36ece2b88
Configure option to disable the unbound event API
2016-03-17 16:37:31 +01:00
Willem Toorop
e241101c12
ldns and bc not needed anymore for travis tests
2016-03-16 14:10:12 +01:00
Melinda Shore
8c335522e1
Merge pull request #148 from wtoorop/features/dnssec_return_all_statuses
...
A dnssec_return_all_statuses extension
2016-03-14 20:09:08 -08:00
Melinda Shore
28edb1dc5a
Merge pull request #147 from wtoorop/devel/check_separate_logfiles
...
Write unit test log's to separate log files
2016-03-14 20:08:10 -08:00
Melinda Shore
cf451d2b2b
Merge pull request #146 from wtoorop/devel/direct_root_servers
...
Devel/direct root servers
2016-03-14 20:06:07 -08:00
Melinda Shore
69a7c1f9ba
Merge pull request #145 from wtoorop/features/wire2reply
...
Features/wire2reply
2016-03-14 20:04:52 -08:00
Melinda Shore
4b5c61145a
Merge pull request #144 from wtoorop/devel/default_eventloop
...
Devel/default eventloop
2016-03-14 20:02:57 -08:00
Willem Toorop
4fca5fe08c
A dnssec_return_all_statuses extension
...
that returns all all dnssec replies regardless their status.
When used on its own or in combination with just dnssec_return_status,
it will return BOGUS replies, but those replies will have "dnssec_status": GETDNS_DNSSEC_BOGUS
The response dict "status" will be GETDNS_RESPSTATUS_GOOD then.
When used on in combination with dnssec_return_only_secure,
it will return BOGUS and INSECURE replies (reflected in their "dnssec_status")
The response dict "status" can be any of the status that the dnssec_return_only_secure extenstion returns,
so either GETDNS_RESPSTATUS_GOOD when at least one reply was secure,
GETDNS_RESPSTATUS_NO_SECURE_ANSWERS when all replies were insecure,
or GETDNS_RESPSTATUS_ALL_BOGUS_ANSWERS when all replies were bogus.
2016-03-14 12:23:12 +01:00
Willem Toorop
8ccba5e204
Write unit test log's to separate log files
...
For each tested event loop
2016-03-14 11:59:05 +01:00
Willem Toorop
d938c433ab
Set root servers without temporary file
2016-03-14 11:33:06 +01:00
Willem Toorop
f95a052e55
Rewrite DNS proxy in transport/timeout test suites
...
To use the new DNS packet conversion functions.
This looses the dependency on ldns for unit tests too.
2016-03-14 10:41:32 +01:00
Willem Toorop
02d14351fc
Convert pkts wireformat <-> getdns_dict <-> string
2016-03-14 10:02:01 +01:00
Willem Toorop
7550980be8
Loose bc dependency with tpkg
2016-03-10 14:37:00 +01:00
Willem Toorop
36e620d769
TCP handling on windows
2016-03-09 15:37:47 +01:00
Willem Toorop
a83c54387d
Reuse sync eventloop per context
...
So recursive resolution can depend on and continue with outstanding queries it depends on
2016-03-09 11:16:19 +01:00
Willem Toorop
70cc65f786
Replace default append_name setting
...
to GETDNS_APPEND_NAME_ONLY_TO_SINGLE_LABEL_AFTER_FAILURE
2016-03-09 10:37:05 +01:00
Willem Toorop
aeeadde299
Synchronous with pluggable event APIs again
2016-03-07 16:35:43 +01:00
Willem Toorop
ebb892def1
Revert "Run context's event loop when doing sync requests"
...
This reverts commit d50860c089
.
2016-03-04 12:08:46 +01:00
Willem Toorop
75ee40b98f
Small improvements for ub_loop's
2016-03-04 11:52:50 +01:00
Willem Toorop
8e4dd05379
Anticipate magic number
2016-03-02 12:38:29 +01:00
Willem Toorop
4230961e9f
Basic usage of unbound pluggable event loop
2016-03-01 16:29:37 +01:00
wtoorop
8f66d69286
Merge pull request #143 from wtoorop/bugfix/memory_leaks
...
Fix memory leak with getdns_get_api_information()
2016-02-26 12:26:53 +01:00
wtoorop
c70a5b108f
Merge pull request #142 from wtoorop/bugfix/load_gost
...
load gost algorithm if digest is seen before key algorithm
2016-02-26 12:26:42 +01:00
Willem Toorop
6fd05675aa
Fix memory leak with getdns_get_api_information()
...
Thanks Robert Groenenberg.
2016-02-26 12:24:45 +01:00
Willem Toorop
4a4339f023
load gost algorithm if digest is seen before key algorithm
2016-02-26 12:20:16 +01:00
gmadkat
f5e9640ee8
Update README.md
...
For OS X, libtool already exists, it is installed in OS X as glibtool to avoid a name conflict with an existing OS X tool.
2016-02-24 11:03:01 -05:00
wtoorop
0a7acff783
Merge pull request #141 from wtoorop/features/validate_at_specified_moment
...
Offline dnssec validation at a given point in time
2016-02-11 12:08:47 +01:00
Willem Toorop
707b0d21c8
bugfix: don't reset skew
2016-02-11 11:27:03 +01:00
Willem Toorop
045d0d481c
Offline dnssec validation at a given point in time
2016-02-11 11:24:22 +01:00
wtoorop
e5e2cbfd86
Merge pull request #140 from ln5/docu
...
Correct return value in documentation for getdns_pretty_print_dict().
2016-02-05 16:06:04 +01:00
Linus Nordberg
f837e32204
Correct return value in documentation for getdns_pretty_print_dict().
2016-02-05 15:47:26 +01:00
Willem Toorop
a0896ac4bf
Rearange link lib order for mingw
2016-02-04 15:25:01 +01:00
Willem Toorop
e6f5cdb45b
Merge branch 'develop' into devel/default_eventloop
2016-02-04 15:17:25 +01:00
wtoorop
60be402062
Merge pull request #139 from ln5/parsing-resolvconf
...
Don't treat "domain" or "search" as a nameserver.
Thank you Linus
2016-02-04 10:06:40 +01:00
Linus Nordberg
466302131e
Don't treat "domain" or "search" as a nameserver.
...
Continue the while fgets() loop as soon as we're done with "domain" or
"search".
Simplify the logic of the function by removing the if else constructs.
2016-02-03 14:57:09 +01:00
gmadkat
8336500585
Update README.md
...
Add more detailed build directions for Windows and mingw
2016-02-03 00:17:07 -05:00
wtoorop
9424eed85a
Merge pull request #138 from gmadkat/develop
...
Added a wincrypt adapter to read CA trust certs from Windows CA store(with review changes by Sara (and Willem)
2016-02-01 17:13:38 +01:00
unknown
db4207f60d
More review changes and made comments C style, req Willem.
2016-02-01 11:02:24 -05:00
unknown
170795ad06
More review changes and made comments C style, req Willem.
2016-02-01 10:56:45 -05:00
unknown
f5290b6a68
add change from Sara to return if a cert conversion or add to store fails
2016-01-31 00:13:09 -05:00
unknown
504881fc6f
Minor fixes to compile and run the CA trust store adapter from Windows to openopenSSL
2016-01-27 16:30:50 -05:00
gmadkat
9d7fcba575
Merge pull request #1 from saradickinson/feature/wincrypt
...
Improve Windows CA handling code
2016-01-27 10:42:30 -05:00
Sara Dickinson
111794158c
Improve Windows CA handling code
2016-01-27 12:50:16 +00:00
unknown
7e9563faed
Added a wincrypt adapter to read CA trust certs from Windows CA store and feed them into openssl for TLS hostname authentication
2016-01-23 18:47:03 -05:00
Willem Toorop
7fe2d5b346
Linking order matters on Windows
2016-01-20 15:16:03 +01:00
Willem Toorop
24b58074bf
Prevent chain checks to be performed too early
2016-01-20 13:09:18 +01:00
Willem Toorop
d50860c089
Run context's event loop when doing sync requests
2016-01-20 11:10:53 +01:00
Willem Toorop
ca36c879a0
Set unbound target fetch policy to on demand only
2016-01-20 10:21:05 +01:00
Willem Toorop
ae2b16665b
Setup getdns eventloop in libunbound
...
When unbound supports this
2016-01-19 16:52:11 +01:00
Willem Toorop
0c0868517c
Remove leftover debugging printfs
2016-01-12 16:57:17 +01:00
Willem Toorop
fed8cc51ed
Initial TCP support for Windows
2016-01-12 16:54:42 +01:00
Willem Toorop
61c0a51ec5
Disable clearing ub_fd too (for windows)
2016-01-12 16:43:25 +01:00
Willem Toorop
2a6318afd2
Disable scheduling ub_fd()
2016-01-12 16:38:10 +01:00
Willem Toorop
4fd8d3dddd
Replace mini_event extension by default_eventloop
...
* default_eventloop was prototyped in getdns_query and is still in there as my_eventloop
* It interfaces directly with the scheduling primitives of getdns.
* It can operate entirely from stack and does not have to do
any memory allocations or deallocations.
* Adapted configure.ac to allow libunbound to be linked with Windows
(with the removal of winsock_event.c we have no symbol clashed anymore)
* Added STUB_TCP_WOULDBLOCK return code in stub_resolving helper functions,
to anticipate dealing with edge triggered event loops (versus level triggered). (i.e. Windows)
2016-01-12 15:52:14 +01:00
Willem Toorop
39f7e87f1a
Get rid of unkown format specifiers on windows
2016-01-11 12:11:17 +01:00
Willem Toorop
a970dd420f
Deal with Windows vsnprintf behaviour
...
+ a better situated DEBUG_STUB statement in getdns_query
2016-01-10 12:29:37 +01:00
Willem Toorop
6d7645705a
Increase FD_SETSIZE on windows
2016-01-10 12:28:30 +01:00
saradickinson
b39ddf01d0
Merge pull request #136 from saradickinson/bugfix/pinsets
...
Bug fix for segmentation fault when using NULL pin. Unit test to come…
2016-01-07 17:25:22 +00:00
Sara Dickinson
f8b041cd40
Bug fix for segmentation fault when using NULL pin. Unit test to come in later update.
2016-01-07 17:17:09 +00:00
Willem Toorop
cf387ca3f2
Fixes for cross compiling
2016-01-07 15:32:23 +01:00
wtoorop
fa1fa55110
Merge pull request #134 from wtoorop/devel/sync_ldns
...
Bring gldns in sync with upstream unbound's sldns
2016-01-05 15:25:03 +01:00
Willem Toorop
4d67db5b83
Bring gldns in sync with upstream unbound's sldns
2016-01-05 14:17:28 +01:00
wtoorop
6dba2b98a0
Merge pull request #133 from wtoorop/features/stub-only-getdns_query
...
Features/stub only getdns query
2016-01-05 13:25:18 +01:00
Willem Toorop
16a82eede2
Deal with roadblock avoid. + stub-only at run time
...
And make the single usage function validate_extension static
2016-01-05 12:38:35 +01:00
Willem Toorop
a58037904f
Default is stub when compiling stub only
2016-01-05 12:30:58 +01:00
wtoorop
b5d1dfd9e7
Merge pull request #132 from saradickinson/bugfix/api_info
...
Fix output of get_api_settings functions
2016-01-05 10:39:27 +01:00
Sara Dickinson
1f9424ccf2
Fix output of get_api_settings functions
2016-01-05 09:25:49 +00:00
Willem Toorop
f0bd64d57a
Pretty print "bad_dns" list with constant names
2015-12-31 12:40:20 +01:00
Willem Toorop
03425d192d
Miscellaneous Makefile issues
2015-12-31 11:53:46 +01:00
Willem Toorop
6b2d9a2d70
Unused var compile warning in certain conditions
2015-12-31 11:26:29 +01:00
wtoorop
867d4d0db6
Update README.md
2015-12-30 15:42:24 +01:00
Willem Toorop
84c40ca464
Update README, ChangeLog and bumb version
2015-12-30 15:36:28 +01:00
Willem Toorop
08c0c4d6e4
Fixes from testing on different platforms
2015-12-30 14:39:11 +01:00
Willem Toorop
9b97eb9361
Update dependencies
2015-12-30 14:18:19 +01:00
Willem Toorop
1128ebdd54
Unit test fail with unimplemented follow_redirect
2015-12-30 14:10:36 +01:00
Willem Toorop
68fbb93cd6
Release candidate 2
2015-12-30 13:56:53 +01:00
Willem Toorop
8c46e969d6
Notify for not implemented namespaces and ...
...
follow_redirects.
2015-12-30 13:55:45 +01:00
Willem Toorop
2a9dd53d8d
Complement getdns_query documentation
...
+ +specify_class extension
2015-12-30 13:38:14 +01:00
Willem Toorop
11b0346ded
Miscelaneous TSIG bugfixes
2015-12-30 12:25:58 +01:00
Willem Toorop
853bc6c150
Merge branch 'features/suffix_handling' into develop
2015-12-30 10:51:37 +01:00
Willem Toorop
f84c67282d
Merge branch 'features/add_warning_for_bad_dns' into develop
2015-12-30 10:51:26 +01:00
Willem Toorop
d85d395770
Options to getdns_query to test suffix appending
2015-12-30 10:44:08 +01:00
Willem Toorop
875ef3f9d4
Successive suffix append retries
2015-12-29 23:06:02 +01:00
Willem Toorop
89b6c04d4f
First query append
2015-12-29 17:34:14 +01:00
Willem Toorop
54498cd556
Distinct between suffix and suffixes more clearly
2015-12-29 16:23:04 +01:00
Willem Toorop
ebe3d361ea
Returning strings does include the null byte
2015-12-29 16:17:17 +01:00
Willem Toorop
5a388386b4
Store suffixes in wireformat
2015-12-29 16:00:15 +01:00
Willem Toorop
f91e263f09
Simplify _set_string functions
2015-12-29 15:57:55 +01:00
Willem Toorop
f3e3e47e15
Implement bad_dns extension
2015-12-29 14:10:18 +01:00
Willem Toorop
ad23c446b6
Complement ChangeLog and bump versions
2015-12-24 16:57:48 +01:00
Willem Toorop
d79884f10a
Replace ssize_t with int in conversion funcs tpkg
2015-12-24 16:22:38 +01:00
Willem Toorop
240b34e215
Missing file removals with distclean
2015-12-24 16:22:03 +01:00
Willem Toorop
0b1e0e6d0f
Definite December 2015 version of spec
2015-12-24 16:05:04 +01:00
Willem Toorop
2fa7fbefa4
Update spec to December 2015 version
2015-12-24 15:47:55 +01:00
Willem Toorop
3e2464af6d
Changes that came out of portability tests
2015-12-24 15:28:12 +01:00
Willem Toorop
a09a051ed5
New code, new dependencies...
2015-12-24 15:01:45 +01:00
Willem Toorop
a2bdfb2f22
Merge branch 'features/windows-support' into develop
2015-12-24 14:44:18 +01:00
Willem Toorop
9d3905459e
Miscellaneous fixes to compile on windows
...
Also without warnings.
2015-12-24 14:41:50 +01:00
saradickinson
b777552f34
Merge pull request #131 from saradickinson/feature/pubkey-pinning
...
Feature/pubkey pinning
2015-12-24 10:13:53 +00:00
Willem Toorop
caba5f19d5
Merge branch 'develop' into features/windows-support
2015-12-24 11:01:26 +01:00
Sara Dickinson
f94798b237
Final mixups
2015-12-24 10:00:15 +00:00
Willem Toorop
05efbd79de
Merge branch 'features/dns_root_servers' into develop
2015-12-24 10:51:50 +01:00
Willem Toorop
8bde787703
Use mkstemp instead of tmpnam to eliminate warning
2015-12-24 10:50:58 +01:00
Willem Toorop
71b2a44945
Remove root_servers comment leftovers
2015-12-23 21:19:52 +01:00
Sara Dickinson
3afba25dad
Update test case and changeling
2015-12-23 18:00:44 +00:00
Sara Dickinson
a5027981d9
Change how the aliasing is done so the tpkg tests will pass
2015-12-23 18:00:43 +00:00
Daniel Kahn Gillmor
2a50f4d2ac
Set tls_auth_failed when any present authentication mechanism fails
...
We used to only have hostnames available. now we have pubkey_pinsets
available as well.
We want upstream->tls_auth_failed to be 1 when any authentication
mechanism we've been asked for fails (and also when we haven't been
given any authentication mechanism at all).
2015-12-23 18:00:43 +00:00
Daniel Kahn Gillmor
57a04f61db
Allow AUTHENTICATION_REQUIRED w/o hostname when pubkey pinset is available
2015-12-23 18:00:43 +00:00
Daniel Kahn Gillmor
77802808ce
rename GETDNS_AUTHENTICATION_HOSTNAME with GETDNS_AUTHENTICATION_REQUIRED
2015-12-23 18:00:43 +00:00
Sara Dickinson
792ecd65b8
Add missing constant to const-info.c
2015-12-23 18:00:43 +00:00
Sara Dickinson
2ce806c05b
Tinker with debug statements/comments.
2015-12-23 18:00:43 +00:00
Daniel Kahn Gillmor
a9eb9ccca9
Check that the pinset matches if it is configured
...
if the upstream is configured to allow fallback, this will not be a
fatal error, but it will still be checked.
Future work:
* verify any certs higher in the chain than the end-entity cert
* deal with raw public keys
* in the fallback case, report to the user whether the pinset match failed
2015-12-23 18:00:43 +00:00
Daniel Kahn Gillmor
d09675539e
Provide access to the pinsets during the TLS verification callback
...
We do this by associating a getdns_upstream object with the SSL object
handled by that upstream.
This allows us to collapse the verification callback code to a single
function.
Note that if we've agreed that fallback is ok, we are now willing to
accept *any* cert verification error, not just HOSTNAME_MISMATCH.
This is fine, because the alternative is falling back to cleartext,
which would be worse.
We also always set SSL_VERIFY_PEER, since we might as well try to do
so; we'll drop the verification error ourselves if we know we're OK
with falling back.
2015-12-23 18:00:43 +00:00
Daniel Kahn Gillmor
614d317fd8
getdns_query: add -K option to attach pinsets to getdns_contexts.
2015-12-23 18:00:43 +00:00
Daniel Kahn Gillmor
0d2256df09
set and return the pubkey_pinsets on the upstream resolvers
2015-12-23 17:59:50 +00:00
Daniel Kahn Gillmor
b305f073fe
add functions to translate between getdns_list and sha256_pin linked list
2015-12-23 17:59:50 +00:00
Daniel Kahn Gillmor
4dbe1813e4
added simple sha256 public key pinning linked list to getdns_upstream
2015-12-23 17:59:50 +00:00
Daniel Kahn Gillmor
5e64f1262b
add getdns_pubkey_pinset_sanity_check()
2015-12-23 17:59:50 +00:00
Daniel Kahn Gillmor
91f04ecd5e
add getdns_pubkey_pin_create_from_string()
2015-12-23 17:59:50 +00:00
Daniel Kahn Gillmor
4047bd09da
define _DEFAULT_SOURCE as well as _BSD_SOURCE for glibc version 2.20 and up
...
in recent versions of feature_test_macros(7), it says of _BSD_SOURCE:
Since glibc 2.20, this macro is deprecated. It now has the same
effect as defining _DEFAULT_SOURCE, but generates a compile-time
warning (unless _DEFAULT_SOURCE is also defined). Use
_DEFAULT_SOURCE instead. To allow code that requires
_BSD_SOURCE in glibc 2.19 and earlier and _DEFAULT_SOURCE in
glibc 2.20 and later to compile without warnings, define both
_BSD_SOURCE and _DEFAULT_SOURCE.
2015-12-23 17:57:49 +00:00
Willem Toorop
ce1185166c
Merge branch 'features/dns_root_servers' into develop
2015-12-23 17:41:40 +01:00
Willem Toorop
29b033c14c
off-by-one bugfixes
2015-12-23 17:38:36 +01:00
Willem Toorop
fbae577a54
Setting of root servers
...
test with
getdns_query -f yeti.key -R yeti.hints nlnetlabs.nl A +dnssec_return_status
where yeti.key comes from:
https://raw.githubusercontent.com/BII-Lab/Yeti-Project/master/domain/named.cache
and yeti.hints from:
https://raw.githubusercontent.com/BII-Lab/Yeti-Project/master/domain/KSK.pub
2015-12-23 17:15:45 +01:00
Willem Toorop
746c26dafc
Update Makefile dependencies
2015-12-23 12:26:39 +01:00
Willem Toorop
8ebb047693
Merge branch 'features/conversion_functions' into develop
2015-12-23 12:13:44 +01:00
Willem Toorop
f9c2f96996
Fixes for miscelanous little zone parse errors
...
Hopefully the tpkg test is more deterministic now too...
2015-12-23 12:06:09 +01:00
Willem Toorop
11cd892662
Clean boundries on wireformat scans
2015-12-22 19:14:18 +01:00
Willem Toorop
e4fa06a57b
getdns_fp2rr_list conversion function
...
+ private conversion functions that respect custom memory handlers
+ converage of more different example functions in 260-conversion-functions test package
2015-12-22 18:37:24 +01:00
Willem Toorop
0cb513e9b7
Doc of (|_buf|_scan) style conversion funcs
...
+ (|_buf|_scan) versions of most of the conversion directions.
+ mk-const-info handles new return_t's defines
2015-12-22 16:04:43 +01:00
Willem Toorop
6519a05780
all debug config option for broadest src coverage
...
With the 300 tpkg test
2015-12-22 11:43:06 +01:00
Willem Toorop
fe7a1e89e3
Constify new work
2015-12-22 11:32:15 +01:00
Willem Toorop
5bbcbb97a1
Merge branch 'develop' into features/conversion_functions
2015-12-22 11:28:27 +01:00
Willem Toorop
0a809cb7d8
Allow truncated answers to be returned
2015-12-22 10:56:20 +01:00
Willem Toorop
ee2a1fbfe6
Merge branch 'features/tsig' into develop
2015-12-22 01:08:25 +01:00
Willem Toorop
8a8a017fc5
Validate received TSIG reply
2015-12-22 01:03:31 +01:00
Willem Toorop
6c1e00fc3f
Send TSIG
2015-12-21 22:11:16 +01:00
wtoorop
8eeb3a6650
Merge pull request #129 from saradickinson/feature/edns-tcp-keepalive
...
Implement client side edns-tcp-keepalive
Great work! Thanks!
2015-12-21 20:20:27 +01:00
Sara Dickinson
f55721d261
Update unit test. Since 0 is the default, it can be set via the function.
2015-12-21 17:36:59 +00:00
Sara Dickinson
746a827baa
Implement client side edns-tcp-keepalive
2015-12-21 17:05:56 +00:00
wtoorop
eb6c6e3f67
Merge pull request #128 from saradickinson/feature/STARTTLS_removal2
...
Feature/starttls removal2
Excellent! Thanks!
2015-12-21 16:38:10 +01:00
Willem Toorop
98dc4018c3
Setting & getting of tsig info per upstream
2015-12-21 12:22:59 +01:00
Sara Dickinson
91a73ab3d0
cleanup
2015-12-18 16:22:09 +00:00
Sara Dickinson
4165e874de
Fix tests
2015-12-18 16:14:54 +00:00
Sara Dickinson
13ddf9ad83
Update constants
2015-12-18 16:14:54 +00:00
Sara Dickinson
3e97e1f032
Fix make file
2015-12-18 16:14:54 +00:00
Sara Dickinson
c5b839bda8
remove STARTTLS
2015-12-18 16:14:54 +00:00
gmadkat
7c766e5284
Update configure.ac
2015-12-18 10:40:12 -05:00
Willem Toorop
bc2ec7cee3
Specify TSIG parameters with getdns_query
2015-12-18 15:16:48 +01:00
Willem Toorop
95e9fa1f35
Better/shorter tpkg descriptions
2015-12-18 14:09:30 +01:00
Willem Toorop
0129550130
Dependencies
2015-12-18 14:04:16 +01:00
Willem Toorop
54f3179c0e
Fix libmini_event getting context's mem funcs
2015-12-18 13:57:20 +01:00
Willem Toorop
c8a9da69ea
Fix libuv.c dependencies
2015-12-18 13:50:17 +01:00
Willem Toorop
5663f914fb
Mode debug marco's to own header
...
To reduce dependency location fixes in test directory.
2015-12-18 13:40:52 +01:00
Willem Toorop
e60afbdf0c
Leave space with builddir recplacements
...
in make depend
2015-12-18 13:21:14 +01:00
Willem Toorop
296491f906
tpkg tests do their own autoreconf & libtoolize
2015-12-18 13:15:45 +01:00
Willem Toorop
8eab1530bf
Fix make depend from builddir != srcdir
2015-12-18 13:14:27 +01:00
Willem Toorop
0d156abf5a
Dependencies
2015-12-18 12:24:06 +01:00
Willem Toorop
638b841855
tpkg for dependencies checking
2015-12-18 12:22:54 +01:00
Willem Toorop
17d44a769c
Test & fix installing
2015-12-18 11:13:22 +01:00
Willem Toorop
34af4a22f2
Get rid of tpkg help files
...
The fewer files to maintain the better
2015-12-18 11:03:54 +01:00
Willem Toorop
94cc17ff16
Wrong help text of symbols checkining tpkg
2015-12-18 10:46:11 +01:00
gmadkat
8da3775e22
Update README.md
2015-12-17 21:13:40 -05:00
Willem Toorop
5a65d2b693
Look further then you nose Willem!
2015-12-17 15:46:31 +01:00
Willem Toorop
d3d2dbc1d3
inet_ntop and inet_pton from compat
2015-12-17 15:36:43 +01:00
Willem Toorop
b839b97ac2
Oops... reverted syntax/style to agressively
2015-12-17 13:07:39 +01:00
Willem Toorop
a2e15a169d
Revert syntactic/style changes
...
So actual changes aren't obfuscated
2015-12-17 12:37:33 +01:00
Willem Toorop
4f37fb1e93
Fix mk-const-info problem with travis
2015-12-16 16:19:50 +01:00
Willem Toorop
71d8a50519
tpkg to warn if consts and symbols are out of sync
2015-12-16 15:48:09 +01:00
wtoorop
46ad6a82ed
Merge pull request #127 from saradickinson/feature/rename_call_debugging
...
Rename return_call_debugging to return_call_reporting. Update index.h…
2015-12-16 15:29:16 +01:00
Sara Dickinson
fc4e4f23df
Rename return_call_debugging to return_call_reporting. Update index.html with change of content.
2015-12-16 14:20:35 +00:00
Willem Toorop
16b62f43eb
Merge branch 'develop' into features/conversion_functions
2015-12-16 13:53:25 +01:00
wtoorop
69b54be99c
Merge pull request #126 from saradickinson/feature/mac_tfo
...
Enable TFO by default if possible, add MAC OSX TFO support
Looks good, thanks.
2015-12-16 13:45:14 +01:00
Willem Toorop
e747efe415
Merge branch 'develop' into features/conversion_functions
2015-12-16 12:42:32 +01:00
Willem Toorop
1ef4db8e9d
Unique NSEC and NSEC3 rrsets in "validation_chain"
2015-12-16 12:40:32 +01:00
Willem Toorop
d09e892285
Convert rr_dict with missing rdata to wire format
...
In wireformat this then means no rdata.
This is needed with the zonecut indicating DSes returned in the validation chain.
2015-12-16 12:02:53 +01:00
Willem Toorop
2c2359af61
Remove duplicate records in RRset before verifying
...
As suggested in RFC4034 section 6.3
2015-12-16 10:47:15 +01:00
Sara Dickinson
438870785a
Improve config check for TFO
2015-12-15 18:11:45 +00:00
Willem Toorop
b0aae6b51d
Repeating and special rdata field 2 wireformat
2015-12-15 00:07:05 +01:00
Willem Toorop
0433c47466
Fix memory leak when deleting list items
2015-12-15 00:04:33 +01:00
Willem Toorop
de269a4695
Wireformat writing for special rdata fields
2015-12-14 15:25:37 +01:00
Willem Toorop
4ae24761c7
Rename special wireformat parsing funcs
...
in aticipation of the special writing to wireformat functions
2015-12-14 12:38:25 +01:00
Willem Toorop
7baec89d4c
Don't misuse getdns_data_type for something else
2015-12-14 12:13:06 +01:00
Sara Dickinson
736d9f20bf
Enable TCP FastOpen by default and add support for OSX implementation of TFO.
2015-12-13 17:44:31 +00:00
Willem Toorop
aadd4dc8bb
Add conversion functions test package
2015-12-13 15:59:36 +01:00
Willem Toorop
5ae854b8bf
Fix dict to wire of repeating rdata fields
2015-12-13 15:58:45 +01:00
Willem Toorop
75b0ae669a
Fix rdf iter of single RR wireformat
2015-12-13 15:58:21 +01:00
Willem Toorop
61cd25d862
Merge branch 'develop' into features/conversion_functions
2015-12-11 12:22:34 +01:00
Willem Toorop
f88214ab76
Correct include path on json pointer test
2015-12-11 12:21:58 +01:00
Willem Toorop
3752bf0a46
Merge branch 'develop' into features/conversion_functions
2015-12-11 11:59:27 +01:00
Willem Toorop
c0831dd598
Move json pointers test to tpkg test
2015-12-11 11:56:44 +01:00
Willem Toorop
c1b4694931
Setup test env from individually ran test packages
2015-12-11 11:05:52 +01:00
Willem Toorop
aa1c38eb4f
Merge branch 'features/tpkg' into develop
2015-12-10 17:34:01 +01:00
Willem Toorop
426d59d767
Disable IPv6 only test, because travis containers
...
don't support IPv6 :-(.
See: https://blog.travis-ci.com/2015-11-27-moving-to-a-more-elastic-future
Disabled test: getdns_context_set_upstream_recursive_servers_10
2015-12-10 16:49:55 +01:00
Willem Toorop
de490408cd
Use the verisign IPv6 upstream
...
google's sometimes timeouts...
2015-12-10 16:26:40 +01:00
Willem Toorop
69aed75d57
Travid in containers
2015-12-10 15:53:43 +01:00
Willem Toorop
1bb5320957
What am I thinking!
2015-12-10 15:39:26 +01:00
Willem Toorop
155b2b0d7a
Small path mistake
2015-12-10 15:35:34 +01:00
Willem Toorop
2675554f6a
Don't configure before running tests
...
+ run tests in a separate directory
2015-12-10 15:32:29 +01:00
Willem Toorop
45d12a9f0b
travis doesn't have libuv-dev
2015-12-10 14:14:43 +01:00
Willem Toorop
5a4628e6fe
tpkg based testing
2015-12-10 11:55:32 +01:00
Willem Toorop
91d638e4cd
ignore getdns.pc
2015-12-09 16:13:32 +01:00
Willem Toorop
47dc07e940
First go at conversion to and from rr_dicts
2015-12-09 12:04:00 +01:00
Willem Toorop
c53f074fdf
Propagate consts with debugging symbols
2015-12-08 09:39:28 +01:00
Willem Toorop
d67949d1e7
iterators go over const wireformat data
2015-12-07 16:43:41 +01:00
gmadkat
0d6d8116bc
Update README.md
2015-12-04 17:01:10 -05:00
gmadkat
e582f0f23e
Update README.md
2015-12-04 16:23:05 -05:00
unknown
22a8550caa
Bug fix in get_os_defaults, clean up code in winsock_event, add code to handle event handling differences in Winsock2
2015-12-04 16:12:43 -05:00
Willem Toorop
dd836b2a11
Conversion functions prototypes
2015-12-03 14:54:38 +01:00
Willem Toorop
9eae0968a7
Merge branch 'neilcook-pkg-config' into develop
2015-12-03 14:11:14 +01:00
Willem Toorop
5c5feeed05
Merge branch 'pkg-config' of https://github.com/neilcook/getdns into neilcook-pkg-config
2015-12-03 14:10:34 +01:00
Neil Cook
acf2fea365
pkg-config support
2015-12-02 13:15:16 -05:00
Claus Assmann
93f9f4c7d3
configure problem with getdns-0.5.1 on OpenBSD
...
Sorry for not using "github" to report a problem but I don't have
an account there...
Anyway, it seems the order of the libraries ssl and crypto is wrong:
with -lcrypto -lssl configure fails to find ub_fd():
: undefined reference to `SRP_Calc_A'
changing it to
-lssl -lcrypto
resolves the problem (and matches the order elsewhere,
e.g., unbound).
2015-11-26 11:42:02 +01:00
Willem Toorop
10a28817d0
Bumb versions, but 0.5.1 should have been 0.6.0
2015-11-26 11:19:22 +01:00
unknown
2d58ed465c
Changes for Windows, Fix configure.ac to take in a winsock option to configure and generafigure, add ifdef's to stub out windows code for other platforms.
2015-11-22 22:38:13 -05:00
Willem Toorop
157f988791
Bumb versions, set release date
2015-11-18 17:32:50 +02:00
Willem Toorop
08bf613cde
Prevent segfault with failed TLS handshake?
...
Need proper review for this patch! Sara?
2015-11-15 12:46:21 -05:00
Willem Toorop
95618bb3a7
Merge branch 'release/v0.5.1' of github.com:getdnsapi/getdns into release/v0.5.1
2015-11-14 20:01:48 -05:00
Willem Toorop
afe5db6b55
Get validation chain avoiding roadblocks
2015-11-14 20:00:13 -05:00
wtoorop
dace6f2453
Merge pull request #123 from saradickinson/bugfix/call_debugging_and_transports
...
Fix bug with call_debugging reporting of UDP and add a getter for tls…
2015-11-13 16:42:57 +01:00
Sara Dickinson
508127a856
Add missing file....
2015-11-13 14:47:03 +00:00
Sara Dickinson
d75ba83013
Fix bug with call_debugging reporting of UDP and add a getter for tls_authentication
2015-11-13 13:28:43 +00:00
Willem Toorop
1bb2daff1e
ub_setup_recursing not used without libunbound
2015-11-11 14:03:16 +01:00
Willem Toorop
f3f854b35f
Few more ChangeLog thins
2015-11-11 13:52:02 +01:00
Willem Toorop
b9f8f94361
Update ChangeLog and check versions
2015-11-11 12:40:23 +01:00
wtoorop
b3ce2cd897
Merge pull request #122 from dkg/develop
...
move EDNS_PADDING_OPCODE to assigned codepoint
2015-11-06 06:53:26 +09:00
Daniel Kahn Gillmor
69de906746
move EDNS_PADDING_OPCODE to assigned codepoint
...
in
https://www.ietf.org/mail-archive/web/dns-privacy/current/msg01067.html
, Tim Wicinski says:
> The EDNS Option Code for padding (aka draft-mayrhofer-edns0-padding)
> is '12'
2015-11-06 06:29:01 +09:00
wtoorop
638bc9f7b1
Merge pull request #121 from saradickinson/feature/hackathon1
...
Fix seg fault on timeout
2015-11-05 17:37:43 +09:00
saradickinson
1a72454b88
Remove debug
2015-11-05 14:41:23 +09:00
saradickinson
5f60683f57
Fix seg fault on timeout
2015-11-05 14:41:23 +09:00
Willem Toorop
e7439cdaae
Revert "Revert "why do we link libgetdns.so to dlopen?""
...
This reverts commit 8b96cd2f40
.
2015-11-05 09:25:17 +09:00
Willem Toorop
8b96cd2f40
Revert "why do we link libgetdns.so to dlopen?"
...
This reverts commit c0bd844403
.
2015-11-05 07:56:38 +09:00
Daniel Kahn Gillmor
c0bd844403
why do we link libgetdns.so to dlopen?
...
i noticed that libgetdns.so is being linked against libdl, but i don't
think we're using dlopen or any of the other functions exported from
ldl.
fwict, ./configure is adding -ldl because of m4/acx_openssl.m4, which
claims:
# openssl engine functionality needs dlopen().
BAKLIBS="$LIBS"
AC_SEARCH_LIBS([dlopen], [dl])
if test "$LIBS" != "$BAKLIBS"; then
LIBSSL_LIBS="$LIBSSL_LIBS -ldl"
fi
However, we're not using OpenSSL Engine support directly. If some
library user wants to initialize openssl's engine support, they should
be able to do that with OpenSSL itself, and then they should be able to
get libcrypto and/or libssl to use libdl directly.
On some minimal systems, libcrypto and libssl might be built without
engine support at all; in that case, libgetdns is adding a superfluous
dependency to the linker.
I don't know the what the getdns policy is about tweaking the files in
m4/, but maybe the following patch can be safely applied?
2015-11-05 07:54:47 +09:00
Willem Toorop
c7f4fc3625
Fix disabling roadblock avoidance with configure
2015-11-05 07:43:33 +09:00
Willem Toorop
26566a3b00
Merge branch 'develop' of github.com:getdnsapi/getdns into develop
2015-11-04 23:25:49 +01:00
Willem Toorop
7f4bdc0868
Bumb versions
2015-11-04 23:25:38 +01:00
Willem Toorop
eb4ba438f7
return_validation_chain + roadblock_avoidance bug
2015-11-05 07:11:51 +09:00
Willem Toorop
8a6f7d5b90
Merge branch 'develop' into features/dnssec_roadblock_avoidance
2015-11-04 17:49:21 +09:00
Willem Toorop
0c3eb08f4d
Merge branch 'features/call_debug' into develop
2015-11-04 16:23:22 +09:00
Willem Toorop
3a19050413
Code review changes
...
Commented inline on github
2015-11-04 16:18:22 +09:00
wtoorop
7230031c0a
Merge pull request #119 from dkg/ietf94-privacy-hackathon
...
Thank you dkg! Great work!
Interestingly you've put the configuration of those two features at "context" level. Since both options (just like cookies) relate to upstreams, I think they should be configurable per upstream as well (perhaps using the context settings as the defaults, over-loadable by those upstream options). With my cookie implementation, I've implemented activation with an extension, but cookies also relate to upstreams, so perhaps they should be enableable per upstream as well (and have a global over-loadable setting in context).
Cheers,
-- Willem
2015-11-02 16:26:25 +09:00
Gowri
1bccd56244
Name change on test server certificate
2015-11-02 03:05:17 +01:00
Daniel Kahn Gillmor
c322a8a330
add -P flag to getdns_query for EDNS padding policy
2015-11-01 15:49:56 +09:00
Daniel Kahn Gillmor
83bf5ab08b
actually implement tls_query_padding_blocksize
...
since no DNS OPT value has been allocated, i chose a random value in
the experimental/local range.
2015-11-01 15:49:56 +09:00
Daniel Kahn Gillmor
1457c1a2b5
stash tls_query_padding_blocksize in the dns_req from the context
2015-11-01 15:49:56 +09:00
Daniel Kahn Gillmor
b3128652f4
add tls_query_padding_blocksize property for getdns_context
...
This is a parameter to the getdns_context that tells the context how
much to pad queries that go out over TLS.
It is not yet functional in this commit, but the idea is to pad each
outbound query over TLS to a multiple of the requested blocksize.
Because we only have a set amount of pre-allocated space for dynamic
options (MAXIMUM_UPSTREAM_OPTION_SPACE), we limit the maximum
padding blocksize.
This is a simplistic padding policy. Suggestions for improved padding
policies are welcome!
2015-11-01 15:49:56 +09:00
Daniel Kahn Gillmor
8291cdb455
add -c flag for EDNS Client Subnet privacy to getdns_query
2015-11-01 15:49:56 +09:00
Daniel Kahn Gillmor
05585281eb
add test for context update callback for edns_client_subnet_private
2015-11-01 15:49:56 +09:00
Daniel Kahn Gillmor
df3725e635
added edns_client_subnet_private to getdns_context
...
https://tools.ietf.org/html/draft-ietf-dnsop-edns-client-subnet-04
Using the above spec, an intermediate resolver may forward a chunk of
the client's IP address to the authoritative resolver.
Setting edns_client_subnet_private to a getdns_context in stub mode
will indicate to the next-hop recursive resolver that the client
wishes to keep their address information private.
2015-11-01 15:49:50 +09:00
Willem Toorop
b062974fb1
ub_setup_recursion also for non roadblock avoidance
2015-11-01 15:48:31 +09:00
Daniel Kahn Gillmor
0b388872ea
clarify per-query options vs. per-upstream options
...
Sending DNS cookies was overwriting any existing options (DNS OPT) in
the outbound query.
Also, DNS cookies may not be the only option that gets set
per-upstream (instead of per-query).
This changeset establishes a set of per-query options (established at
the time of the query), and a buffer of additional space for adding
options based on the upstream is in use.
The size of this buffer is defined at configure time (defaults to 3000
octets).
Just before a query is sent out, we add the per-upstream options to
the query.
Note: we're also standardizing the query in tls too, even though we're
not sending any upstream options in that case at the moment
(edns_cookies are much weaker than TLS itself)
2015-11-01 15:47:22 +09:00
Daniel Kahn Gillmor
3e90795680
enable talking to servers with ECDSA certs
...
There is no clear reason to reject servers that don't have RSA certs.
We should accept ECDSA certs as well.
(also, clean up comments about opportunistic TLS)
2015-11-01 15:47:03 +09:00
Willem Toorop
af6947cbb3
Merge branch 'develop' into features/dnssec_roadblock_avoidance
2015-11-01 15:34:21 +09:00
Willem Toorop
8b9041325b
Bugfix don't grow upstreams memory
...
upstreams have internal references and cannot be realloc'ed easily
2015-11-01 15:23:26 +09:00
jad
30043d2ba5
corrected name
2015-11-01 13:09:18 +09:00
jad
51eb2fdf55
working prototype 6
2015-11-01 12:47:49 +09:00
Willem Toorop
ae2cc39a36
Full roadblock avoidance functionality
2015-11-01 12:28:43 +09:00
jad
f5662bbf32
working prototype 5
2015-11-01 11:43:12 +09:00
jad
2d20e18b8a
working prototype 4
2015-11-01 11:14:45 +09:00
jad
25f7f2182b
working prototype 3
2015-11-01 11:04:03 +09:00
jad
80864655d7
Working prototype 2
2015-11-01 10:51:00 +09:00
jad
a85b17c885
working prototype 1
2015-11-01 10:24:02 +09:00
Willem Toorop
58885e04d7
dnssec_roadblock_avoidance extension
2015-10-31 21:04:08 +09:00
Willem Toorop
35c803208b
Bit more concise and clear confusing code text
2015-10-31 18:24:24 +09:00
Willem Toorop
fb6642d6a5
Print response dict when there is one
2015-10-31 17:59:14 +09:00
Willem Toorop
521e46879b
Document that thing that we keep forgetting about
2015-10-31 17:15:36 +09:00
Willem Toorop
9ce441e59a
--enable-debug-sched for getdns_query too
2015-10-31 16:24:49 +09:00
Willem Toorop
de59b700ce
Fix libidn really absent + NetBSD fixes
2015-10-29 19:13:39 +01:00
Willem Toorop
0a717f5d51
Warning with older (less intelligent) compiles
2015-10-29 16:25:07 +01:00
Willem Toorop
d691973571
Bumb versions for 0.5.0 release
2015-10-29 15:43:00 +01:00
Willem Toorop
8c3d348f05
Help text typo
2015-10-27 16:43:25 +01:00
Willem Toorop
3c5f2d4c4d
Merge branch 'v0.5.0' of github.com:getdnsapi/getdns into v0.5.0
2015-10-27 16:39:09 +01:00
wtoorop
a8351f80e6
Merge pull request #117 from saradickinson/bugfix/tls_ciphers
...
Fix error that was not allowing cipher suite fallback for opportunist…
2015-10-27 16:38:25 +01:00
Sara Dickinson
e397d1e020
Fix error that was not allowing cipher suite fallback for opportunistic TLS.
2015-10-25 15:28:20 +00:00
Willem Toorop
4cbdfde0e6
Typo fix
2015-10-22 16:26:32 +02:00
Willem Toorop
c613743644
Update spec to 0.701
2015-10-22 15:12:15 +02:00
Willem Toorop
973fcbddcc
Don't assume mini_event loop
2015-10-22 14:38:34 +02:00
Willem Toorop
47b77c948a
Fix small memory leak when switching event loops
2015-10-22 14:16:53 +02:00
Willem Toorop
98a2c497d2
ldns CFLAGS for tests (+ make deps)
2015-10-22 13:46:23 +02:00
Willem Toorop
fbc3b2d6a8
Use the NOT_IMPLEMENTED return code!
2015-10-22 12:13:40 +02:00
Willem Toorop
b88c74b4c8
Synchronize with October 2015 spec
2015-10-22 12:02:04 +02:00
Willem Toorop
276b4c6cd8
Update dependencies and add Andrew Cathrow to team
2015-10-22 11:32:20 +02:00
Willem Toorop
d601443c7e
Bump versions and ChangeLog for 0.5.0rc1
2015-10-21 17:19:50 +02:00
Willem Toorop
31a07752f0
New non API functions + consts in getdns_extra.h
2015-10-21 17:02:50 +02:00
Willem Toorop
ebd94f48cf
Anticipate missing X509_V_ERR_HOSTNAME_MISMATCH
2015-10-21 16:01:40 +02:00
Willem Toorop
7647005285
Report memory errors in json-pointers test
2015-10-21 16:01:16 +02:00
Willem Toorop
3cc44ffcb1
Merge remote-tracking branch 'sara/feature/tls_auth_api' into features/tls_auth_api
2015-10-21 15:34:57 +02:00
Sara Dickinson
3be47edbb3
More cleanup
2015-10-16 18:40:33 +01:00
Sara Dickinson
b74c62066c
Cleanup
2015-10-16 18:31:57 +01:00
Sara Dickinson
689447509a
Change port used for TLS to 853
2015-10-16 17:00:14 +01:00
Sara Dickinson
28ffb2fdf6
Add ls_authentication to API
2015-10-16 17:00:14 +01:00
Sara Dickinson
6b4ee4ed31
Block authenticated requests on unauthenticated connection
2015-10-16 17:00:14 +01:00
Sara Dickinson
af617e92a7
Implement authenticaiton fallback on a given upstream (needs more work). Also need API option to set auth requirement.
2015-10-16 17:00:14 +01:00
Sara Dickinson
e710286e45
Start work on better authentication
2015-10-16 16:57:13 +01:00
Willem Toorop
d859e93c7e
Don't fail on missing tgz in spec
2015-10-08 13:39:24 +02:00
Willem Toorop
d0a80925c2
Bugfixes for setting with json pointers
...
+ scratchpad for developing/debugging
2015-10-08 12:54:30 +02:00
Willem Toorop
3373ed5056
Merge json pointer branch from spec repo
...
(including examples)
2015-10-07 13:15:07 +02:00
Willem Toorop
5e269b69fa
Reverse example
2015-10-06 23:07:57 +02:00
Willem Toorop
820a657297
Check getdns_dict_remove_name parameters
2015-10-06 13:12:33 +02:00
Willem Toorop
f632ef8939
The tree example with json pointers
2015-10-06 12:29:15 +02:00
Willem Toorop
51bfa9c86a
Simple example rewritten
2015-10-06 11:57:18 +02:00
Willem Toorop
3aca772220
Off-by-one error
2015-10-06 09:46:59 +02:00
Willem Toorop
e3947d7110
getdns_dict_remove_name with json pointers
...
+ improved json pointers symantics
2015-10-05 17:18:32 +02:00
Willem Toorop
f6619d28d8
JSON pointer setters
2015-10-02 15:26:05 +02:00
Willem Toorop
40269a241c
Merge branch 'develop' into features/json-pointers
2015-10-02 12:47:10 +02:00
Willem Toorop
65663e6da8
DNSSEC zonecut finding issues
...
Thanks Theogene Bucuti
2015-10-02 12:45:32 +02:00
Willem Toorop
6a0d1a968d
Multi-level json pointers (retry)
...
+ synchronous-concise example
2015-10-01 15:43:17 +02:00
Willem Toorop
074344fbf9
Multi level json pointer lookups + example
2015-10-01 15:16:12 +02:00
Willem Toorop
ca50a984c8
1 level JSON pointer reference lookup
2015-09-30 16:05:19 +02:00
Willem Toorop
3bec89bee5
Native crypto, no ldns dependency anymore
...
Except for the unit tests.
libexpat was never a dependency for libunbound (it is for unbound-anchor).
Extend contributors section in README.md to mention everyone who has contributed to the repository too.
2015-09-29 14:03:48 +02:00
Willem Toorop
8dfb7454d6
Signature inception and expiry checking
2015-09-28 13:48:51 +02:00
Willem Toorop
7bf481d812
ldns still (but only) needed for unit tests
2015-09-28 11:44:39 +02:00
Willem Toorop
59f4feb5e6
Native DS with DNSKEY compare + rm ldns dependency
2015-09-25 14:28:47 +02:00
Willem Toorop
d8cc7b1ba3
Native signature verification
2015-09-25 11:48:58 +02:00
Willem Toorop
2e4c0928f7
Import unbound's crypto
2015-09-23 16:48:54 +02:00
Willem Toorop
fda5394540
Verify raw buffer (still with ldns)
2015-09-23 16:03:59 +02:00
Willem Toorop
8b414c8570
Sort RR's to validate
2015-09-22 12:27:17 +02:00
Willem Toorop
e47bd33ec0
Determine validation buffer size
2015-09-21 17:13:44 +02:00
Willem Toorop
bf7f44dcb7
Put rrs to validate in rrset
2015-09-21 12:59:30 +02:00
Willem Toorop
f673e12106
Memory management for _getdns_verify_rrsig
2015-09-21 12:36:41 +02:00
Willem Toorop
5db5a8b5e6
Correct some comment text
2015-09-18 09:53:27 +02:00
Willem Toorop
145e6928bd
develop branch is always one version further
2015-09-09 12:48:10 +02:00
Willem Toorop
505bcf028b
Merge branch 'v0.3.3' into develop
2015-09-09 12:46:05 +02:00
Willem Toorop
dbc53e773d
0.3.3 quickfix release
2015-09-09 12:45:29 +02:00
Willem Toorop
bb29789d24
Merge branch 'v0.3.3' into develop
2015-09-08 12:01:08 +02:00
Willem Toorop
a543c23926
Spelling
2015-09-08 11:24:45 +02:00
Willem Toorop
84ad5850c9
get_api_information():version_string also for RCs
2015-09-08 11:20:52 +02:00
Willem Toorop
46ea366f5f
Fix dnssec validation of direct CNAME queries
...
Thanks Simson L. Garfinkel.
2015-09-08 10:52:04 +02:00
Willem Toorop
560f168460
Have a release candidate first
2015-09-08 10:31:06 +02:00
Willem Toorop
6c7c5c9281
Bumb version
2015-09-04 16:20:21 +02:00
Willem Toorop
15cda6a21d
Fix readme
2015-09-04 16:19:33 +02:00
Willem Toorop
c3b59e76fa
Merge branch 'v0.3.3' into develop
2015-09-04 16:14:41 +02:00
Willem Toorop
b5ac8c1b50
Don't alter events before clearing...
2015-09-04 16:13:49 +02:00
Willem Toorop
87b7c6a834
Merge branch 'v0.3.2' into develop
2015-09-04 11:04:08 +02:00
Willem Toorop
75f1aa6ccd
Typo
2015-09-04 11:02:39 +02:00
Willem Toorop
53e23f1358
Revert "Revert "Merge pull request #112 from saradickinson/features/tls_auth""
...
This reverts commit 6d29e6044e
.
2015-09-04 10:56:30 +02:00
Willem Toorop
22f48c3cda
Merge branch 'v0.3.2' into develop
2015-09-04 10:52:02 +02:00
Willem Toorop
b7b90cafaf
Mention libtoolize -ci in README.md
2015-09-04 10:37:02 +02:00
Willem Toorop
a3f02905b0
thread instead of a process for ub_fd() signalling
2015-09-04 10:33:08 +02:00
Willem Toorop
afdf25340c
Prepare for 0.3.2 release
2015-09-03 15:39:44 +02:00
Willem Toorop
0e66d28be8
Set processing flag around user callbacks
...
To fix destroying contexts from user callbacks in stub mode.
The complete test suite runs in stub mode now too.
2015-09-03 15:07:29 +02:00
Willem Toorop
9586418522
Merge branch 'shane-kerr-master' into v0.3.2
2015-09-03 14:21:09 +02:00
Willem Toorop
7793629515
Merge branch 'shane-kerr-master' into develop
2015-09-03 14:20:13 +02:00
Willem Toorop
5f73fded75
Simplify list creation a little bit
2015-09-03 13:14:34 +02:00
Willem Toorop
b1489eac1f
One more priv_ name renamed to _
2015-09-03 13:13:57 +02:00
Shane Kerr
0f1dd9cdd2
Fix directory creation documentation for anchor file
2015-09-03 10:31:41 +00:00
Willem Toorop
cbb668379f
One more string2bindata case...
2015-09-03 12:15:22 +02:00
Willem Toorop
cbc8b1e303
Let travis make libtool too
2015-08-28 13:44:36 +02:00
Willem Toorop
d8d57ab9ad
ignore libtoolize generated files
2015-08-28 13:42:14 +02:00
Willem Toorop
c41627ae0d
Remove libtool generated files too
...
Reinstall with libtoolize -cif
2015-08-28 13:40:41 +02:00
Willem Toorop
6d13ec19cd
--with-getdns_query configure option +
...
make pub target (for signing and hashing dist tarball) +
make megaclean target (for erasing all source and git reset --hard)
2015-08-28 13:33:02 +02:00
Willem Toorop
2347d7d775
This is 0.3.2 release candidate 1
2015-08-28 11:18:07 +02:00
Willem Toorop
8ca93a22de
--enable-stub-only configure option
2015-08-28 11:09:32 +02:00
Willem Toorop
15943b1b49
Bump versions
2015-08-27 14:40:19 +02:00
Willem Toorop
d58d90752b
HAVE_LIB* only after include "config.h"
2015-08-27 14:38:23 +02:00
Willem Toorop
a8d2e489ad
Allow --without-libidn configure option
2015-08-27 14:24:01 +02:00
Willem Toorop
3034e0c62a
Mention new contributors in README
2015-08-27 13:59:20 +02:00
Willem Toorop
15efffb625
Document changes since 0.3.1
2015-08-27 13:53:02 +02:00
Willem Toorop
6d29e6044e
Revert "Merge pull request #112 from saradickinson/features/tls_auth"
...
This reverts commit d436165a88
, reversing
changes made to 7c902bf73c
.
2015-08-27 13:31:22 +02:00
Willem Toorop
55aa759730
Don't spawn extra process for recursion calls
2015-08-27 13:22:24 +02:00
Willem Toorop
6446643396
Get lines via custom eventloop
2015-08-26 22:25:42 +02:00
Willem Toorop
32e4e8fa9d
Debug custom event loop
2015-08-26 17:01:28 +02:00
Willem Toorop
4ecf6b23dc
First round of bugfixes in custom eventloop
2015-08-26 16:13:25 +02:00
Willem Toorop
c86df63b7a
Custom event loop in getdns_query
2015-08-26 14:32:46 +02:00
Willem Toorop
f312a6cfc5
Revert "plain_mem_funcs_user_arg need not be exposed"
...
This reverts commit d0ff5d8fea
.
It does need to be exposed and is used inderectly through GETDNS_MALLOC which uses MF_PLAIN which is an alias for plain_mem_funcs_user_arg.
2015-08-24 14:37:02 +02:00
Willem Toorop
d0ff5d8fea
plain_mem_funcs_user_arg need not be exposed
2015-08-24 14:15:31 +02:00
Willem Toorop
015e387ea5
Final internal symbols rename to _getdns prefix
2015-08-19 16:33:19 +02:00
Willem Toorop
b9e8455e27
Internal symbols always prefixed with _getdns
2015-08-19 16:30:15 +02:00
Willem Toorop
1f638ccd0b
Internal getdns_mini_event to _getdns_mini_event
2015-08-19 16:26:39 +02:00
Willem Toorop
fcd595298a
Rename all priv_getdns internal symbols to _getdns
2015-08-19 16:22:38 +02:00
Willem Toorop
7971152742
Make all private functions static
2015-08-19 16:15:26 +02:00
Willem Toorop
450aabefcc
Make util symbols private (i.e. prefix _getdns)
2015-08-19 16:07:01 +02:00
Willem Toorop
09492cbf46
_getdns_nsec3_hash_label without ldns
2015-08-19 15:19:02 +02:00
Willem Toorop
6350b4fad4
--without-libunbound option to configure
2015-08-19 10:47:46 +02:00
Willem Toorop
972ebf55d0
Merge branch 'features/str_without0byte' into develop
2015-08-17 16:30:54 +02:00
wtoorop
d436165a88
Merge pull request #112 from saradickinson/features/tls_auth
...
Features/tls auth
2015-08-17 12:53:38 +02:00
Willem Toorop
7c902bf73c
Fix fallback failures fix ;)
2015-08-17 12:35:10 +02:00
wtoorop
9476263b1b
Merge pull request #111 from saradickinson/bugfix/transport_timeouts
...
Fix transport fallback failures. Add manual regression test script.
2015-08-17 12:30:53 +02:00
Sara Dickinson
dc7d7e7689
Fix openssl dependancy
2015-08-15 16:35:30 +01:00
Sara Dickinson
2404cc2c8e
Extend regression test
2015-08-15 15:27:58 +01:00
Sara Dickinson
262263dbf4
More detail in documentation
2015-08-15 15:11:29 +01:00
Sara Dickinson
45de1f65b3
Update docs with details of OS X certificate handling.
2015-08-15 14:40:16 +01:00
Sara Dickinson
dbad8a9003
Restrict transport list to 1 entry for each valid transport
2015-08-15 14:40:16 +01:00
saradickinson
cb1dff1ac7
Add ability to verify server certificate using hostname for TLS/STARTTLS
...
NOTE: This implementation will only work for OpenSSL v1.0.2 and later.
Doing it for earlier versions is totally insane:
https://wiki.openssl.org/index.php/Hostname_validation
2015-08-15 14:40:15 +01:00
Sara Dickinson
8beace7036
Fix location in manual test script. Add build/ to .gitignore
2015-08-15 14:36:36 +01:00
Sara Dickinson
ab60211020
Fix fallback failures. Add manual regression test script.
2015-08-12 11:42:02 +01:00
Willem Toorop
3cbef7ee9e
Fix make distclean
2015-07-19 17:52:09 +02:00
Willem Toorop
37880d6869
second attemt fixing travis
2015-07-19 17:39:54 +02:00
Willem Toorop
f302102301
Try to make travis work...
2015-07-19 17:35:27 +02:00
wtoorop
75352891e7
Merge pull request #109 from dkg/develop
...
improve documentation
Looks good! Thanks!
2015-07-19 17:26:27 +02:00
Willem Toorop
488820286e
Let travis do autoreconf
2015-07-19 17:22:24 +02:00
Daniel Kahn Gillmor
55b7ebac48
ignore autoconf-generated files
2015-07-19 12:22:11 +02:00
Daniel Kahn Gillmor
0dc08a30ce
tell emacs users how to follow coding conventions
2015-07-19 12:22:11 +02:00
Daniel Kahn Gillmor
540ffb8a4a
report manpage date based on the name of the API
...
This links the manual pages to the API "string version", and avoids
problems with reproducibility (the man pages should not get modified
simply because they are built in a different month, or because they
were built with a different locale).
Gbp-Pq: Name 0001-report-manpage-date-based-on-the-name-of-the-API.patch
2015-07-19 12:22:10 +02:00
Daniel Kahn Gillmor
319a20a66c
improve documentation
...
improve the documentation of the getdns_upstream objects.
2015-07-19 12:22:10 +02:00
Willem Toorop
d52b10e703
Fix builddir/srcdir for tests
2015-07-19 12:15:28 +02:00
Willem Toorop
e91f7d53b5
Correct getdns_extra.h location for tests too
2015-07-19 11:48:24 +02:00
Willem Toorop
ac6e0b641d
rm autoconf generated files from repo
2015-07-19 11:40:03 +02:00
Willem Toorop
44b8e44c07
Fix srcdir/buildir locations for version.lo
2015-07-19 11:35:29 +02:00
Willem Toorop
e2170cb115
Fix srcdir/buildir locations
2015-07-19 11:28:42 +02:00
Willem Toorop
0c5dd59035
Fix upstream/transport array in 1 upstream dict
2015-07-19 09:43:12 +02:00
Willem Toorop
898fc15b6b
Zero size only for non-repeating remaining data
2015-07-18 18:04:11 +02:00
Willem Toorop
16da0a01b5
Prepare for emergency release
2015-07-18 17:39:19 +02:00
Willem Toorop
276e9fa5f3
Zero size only allowed for non repeating rdfs
2015-07-18 16:59:00 +02:00
Willem Toorop
4f0cf62d37
Set release date
2015-07-17 18:10:57 +02:00
Willem Toorop
433daf7f53
0.3.0 in configure
2015-07-17 18:10:02 +02:00
Willem Toorop
7c83d0f295
{API 0.604] July 2015 release
2015-07-17 18:07:36 +02:00
Willem Toorop
9daaa1638c
One more event callback setting before clearance
2015-07-14 13:42:40 +02:00
Willem Toorop
d4e932890a
Do not reset event callbacks before clearing
2015-07-14 11:54:25 +02:00
Willem Toorop
3c80a8a1af
Check destruction of upstreams in correct way
2015-07-14 11:11:06 +02:00
Willem Toorop
587b320d95
DNS tree was upside down (wording in comments)
...
According to RFC1034 Section 4.2.1., the zone's apex is at the top and delegations at the bottom.
2015-07-14 10:49:00 +02:00
Willem Toorop
554f015931
Deschedule idle_timeouts on context destroy
2015-07-14 10:44:15 +02:00
Willem Toorop
6f21d89e2a
Lookup DS only, for no sigs INSECURE
2015-07-14 10:22:42 +02:00
Willem Toorop
a8adf662d1
Fix memory leak setting transports
2015-07-13 16:39:43 +02:00
Willem Toorop
5c61954427
Fix geting recursive_upstream_servers
2015-07-13 16:22:39 +02:00
Willem Toorop
17faffa664
Ignore 2 more autoconf generated files
2015-07-13 15:42:48 +02:00
Willem Toorop
c7d40e2cbc
Strings in bindata's without '\0' byte
2015-07-13 15:41:40 +02:00
Willem Toorop
12567f5338
Fix compiling with --enable-debug-sched
2015-07-13 11:09:56 +02:00
Willem Toorop
431415bd3d
rm debugging fprintf leftover
2015-07-10 10:18:00 +02:00
Willem Toorop
0d2f3a5bd9
functions and defines to get versions
...
About the library and the API
In both strings and in numbers
2015-07-10 00:57:58 +02:00
Willem Toorop
2884abe870
Allow alternative trust anchors + ...
...
Switch freely between stub and recursive resolving
2015-07-10 00:05:26 +02:00
Willem Toorop
4987a27264
Pretty print TLDs
2015-07-10 00:04:14 +02:00
Willem Toorop
2dab8dd4d6
Fix handling of non specific trust anchors and ...
...
unsported DS digest types
2015-07-09 23:11:56 +02:00
Willem Toorop
254699ad8b
Constants must be in searchable order
2015-07-09 23:11:28 +02:00
Willem Toorop
cacd8951ff
getdns_query -k to test for root trust anchor
...
has exit status 0 on success, 1 otherwise.
2015-07-09 23:10:22 +02:00
Willem Toorop
70857ccc74
Proper handling of system stub query timeouts
2015-07-09 23:09:39 +02:00
Willem Toorop
4135f633ac
Fix invalid memory reads
2015-07-09 15:40:00 +02:00
Willem Toorop
d9fca20f18
Update consts, symbols and dependencies
2015-07-09 14:40:13 +02:00
Willem Toorop
bb20de43bd
Update EDNS0 COOKIE option code
2015-07-09 14:30:11 +02:00
Willem Toorop
c30f64497e
Update ChangeLog
2015-07-09 14:27:22 +02:00
Willem Toorop
423fbdf546
Prepare for 0.3.0 release
2015-07-09 14:05:45 +02:00
Willem Toorop
cea8ae4d11
[API 0.602] getdns_context_set_dns_transport_list
...
And the getdns_context_set_idle_timeout() functions.
2015-07-09 14:00:26 +02:00
Willem Toorop
ec476a9129
getdns_root_trust_anchor up in getdns.h.in
...
So it is on the same spot as where it is in the original specification.
This to ease comparing getdns.h with the API's getdns_code_only.h
2015-07-09 10:37:02 +02:00
Willem Toorop
098e0f19c4
Don't skip points zone cuts with trusted keys
...
A new keyset must be authenticated at every zone cut.
A keyset from an ancecter of the immediate zone may never be used
to authenticate RRsets within a zone.
(Review from Wouter)
2015-07-09 08:15:38 +02:00
Willem Toorop
d87d951874
set ds_signer only when actually signed
2015-07-08 17:15:27 +02:00
Willem Toorop
d4849dc0ba
Fix read of uninitialized memory
...
Not a dangerous one though, but still...
2015-07-08 15:36:39 +02:00
Willem Toorop
e8030b34d2
query_len not used
2015-07-08 15:05:40 +02:00
Willem Toorop
201b6af9a2
clang compiler warnings + 1 bug!
...
Bug is countring insecure answers in util-internal.c
found by clang warning reporting
2015-07-08 13:07:24 +02:00
Willem Toorop
2918c8b472
DSes with best digest + INSECURE on unsupportd alg
...
Adaptations to function ds_authenticates_keys.
With multiple DSes, only the ones with the highest (supported)
digest type will be used to authenticate DNSKEYs.
NO_SUPPORTED_ALGORITHMS will be returned if there were
DSes for a key in the DNSKEY set, but none of them has a supported
digest or algorithm. This leads to dnssec_status INSECURE.
2015-07-08 12:21:04 +02:00
Willem Toorop
a5bacfefcf
memory leak fixes
2015-07-08 11:07:44 +02:00
Willem Toorop
51a04f8f6c
RSAMD5 is deprecated
2015-07-08 00:18:19 +02:00
Willem Toorop
3b45255d1e
Try only closest trust anchors
2015-07-08 00:10:10 +02:00
Willem Toorop
e48b0c7fd7
INSECURE when NSEC3 iteration count too high
...
Fix from Wouter's review
2015-07-07 22:33:53 +02:00
Willem Toorop
4b53d70199
Review from Wouter minor issues
2015-07-07 14:52:32 +02:00
Willem Toorop
e571883811
Fix test for NODATA address_sync lookup
...
hampster.com no longer suitable anymore.
2015-07-07 11:46:52 +02:00
Willem Toorop
83425f959e
Review comments from Wouter
...
Thanks!
2015-07-07 11:15:38 +02:00
Willem Toorop
43980e9020
[API 0.601] CSYNC RR type
2015-07-06 14:14:46 +02:00
Willem Toorop
af23930725
CSYNC rr type
2015-07-06 12:45:08 +02:00
Willem Toorop
55444d07a2
Documentation in comments as a review guideline
2015-07-06 11:57:16 +02:00
Willem Toorop
70edb60f09
Some comment about google public dns
2015-07-04 13:14:16 +02:00
Willem Toorop
0e977ee4fb
rearrangements for documentational reasons
...
+ a fix for opt_out bug
2015-07-04 13:01:16 +02:00
Willem Toorop
7e3fbe547a
Check NSEC3 CE to be without delegations
...
(no DNAME, no NS or, if NS then also SOA)
2015-07-04 10:53:31 +02:00
Willem Toorop
f59b32414c
Three NSEC3 related things:
...
- Better checking for type bits
- NSEC3 Insecure proofs for opt-out on head's
- NSEC3 wildcard NODATA proof
2015-07-04 10:23:02 +02:00
Willem Toorop
99f0026961
Allow remaining data RDF to be zero size
...
Usefull for NSECs on empty non terminals!
2015-07-04 08:09:50 +02:00
Willem Toorop
682f10b271
NSEC3s on empty non terminals
...
bitmap might even not be present.
2015-07-04 00:08:03 +02:00
Willem Toorop
2c09ff2541
Deal with synthesized CNAMEs from DNAMEs
2015-07-03 23:44:15 +02:00
Willem Toorop
4d4f235f76
NSEC handling complete
2015-07-03 22:50:29 +02:00
Willem Toorop
a66232153a
Some more NSEC conditional checks
...
(from studying unbound code)
2015-07-03 00:44:53 +02:00
Willem Toorop
af49184fd5
A single RRSIG per RRSET in validation_chain
2015-07-02 17:30:37 +02:00
Willem Toorop
d47c533b64
getdns_validate_dnssec validate replies in turn
2015-07-02 15:31:31 +02:00
Willem Toorop
ae580575d0
Only validate NOERROR & NXDOMAIN
2015-07-02 12:59:28 +02:00
Willem Toorop
e3fe89c802
Turn on specific debugging with configure options
2015-07-02 12:49:50 +02:00
Willem Toorop
f066d5ef73
Merge branch 'features/native-stub-dnssec' into develop
...
Conflicts:
configure.ac
src/stub.c
2015-07-02 10:27:27 +02:00
Willem Toorop
6cffc4792b
Validate replies with getdns_validate_dnssec
...
You can feed it the replies_tree as the records to validate list
2015-07-02 00:25:41 +02:00
Willem Toorop
f92dd5ac0d
getdns_validate_dnssec with new DNSSEC code
2015-07-01 21:50:47 +02:00
Willem Toorop
2b3aa84337
getdns_query show output of getdns_validate_dnssec
2015-07-01 14:38:24 +02:00
Willem Toorop
41cf772fb3
Trust anchors in wireformat in context
2015-06-30 14:43:52 +02:00
Willem Toorop
996b09ba2b
Reminder for single RRSIG per RRSET return
...
With the dnssec_return_validation_chain extension
2015-06-30 00:12:30 +02:00
Willem Toorop
3cd9caa704
Evaluate DNSSEC only with stub resolution
2015-06-29 23:48:46 +02:00
Willem Toorop
8d5ac3afde
Store dnsreq->name in wire format
2015-06-29 23:32:49 +02:00
Willem Toorop
407ecffb67
dnssec_status in netreqs
2015-06-29 22:23:01 +02:00
wtoorop
93e0237273
Merge pull request #106 from saradickinson/features/transport_fixups
...
Features/transport fixups
2015-06-29 21:09:47 +02:00
Sara Dickinson
8bb01c46ad
Turn TFO off by default. Strange crash found if TCP is not available.
2015-06-29 17:39:14 +01:00
Sara Dickinson
e5a80943e2
Turn fast open on by default. Fix build warning.
2015-06-29 11:54:31 +01:00
Sara Dickinson
e20d679bc8
Improve TCP close handling and sync connection closing
2015-06-29 09:09:13 +01:00
wtoorop
9ac1ea39b8
Merge pull request #105 from saradickinson/features/transport_fallback
...
Features/transport fallback
2015-06-29 09:21:31 +02:00
Willem Toorop
2b83bddd4d
More sense making parameter names for is_subdomain
2015-06-29 09:18:53 +02:00
Willem Toorop
4e45d31413
No wildcard NSEC3 check on opt-out
2015-06-28 13:41:48 +02:00
Willem Toorop
170218c350
Expand dname rdata fields before compare
2015-06-27 23:47:47 +02:00
Willem Toorop
f6c1a48b6e
Validaton of wildcard answers
2015-06-27 23:28:23 +02:00
Sara Dickinson
8c61ecd024
Finally fix problem with upstream walking that was causing intermittent crash. And fix sync idle timeouts. Again.
2015-06-26 16:14:04 +01:00
Sara Dickinson
8925fb22fc
More bug fixes and tidy up
2015-06-26 14:27:21 +01:00
Willem Toorop
0411668cb4
blah
2015-06-26 11:39:44 +02:00
Sara Dickinson
ddd90e29c5
Fix idle_timeout bug
2015-06-26 08:19:22 +01:00
Willem Toorop
fe4b7095b3
Set has_ta before unbound context initialization
2015-06-26 00:29:20 +02:00
Willem Toorop
19b79b066f
NSEC NXDOMAIN + NSEC3 denial of exist. validation
2015-06-26 00:26:40 +02:00
Sara Dickinson
cb5bbac26d
Do better with unbound transport mapping and fix problems with sync fallback
2015-06-25 20:21:00 +01:00
Willem Toorop
ea69d30e64
Validation of signed responses
...
+ start with unsigned responses (only the NSEC NOERROR case)
2015-06-25 10:04:19 +02:00
Sara Dickinson
8819d29535
Implement TCP fallback and hack for lack of sync idle timeout.
2015-06-24 18:49:34 +01:00
Sara Dickinson
c9a0ffc7a5
Improve error reporting in getdns_query.
2015-06-23 17:01:43 +01:00
Willem Toorop
c7c7884350
Generalize getdns_rrset for raw pkt, not netreq
2015-06-23 16:41:34 +02:00
Willem Toorop
1babc715b7
Init context->dnssec_trust_anchors with default
2015-06-23 16:40:47 +02:00
Sara Dickinson
c425f96e0b
Fix TLS handshake for sync messages.
2015-06-23 15:39:56 +01:00
Willem Toorop
5c01df226c
Init netreq dnssec status at netreq init time
2015-06-23 16:39:30 +02:00
Willem Toorop
3631cd658a
get_val_chain for all possible scenarios
2015-06-23 00:00:20 +02:00
Sara Dickinson
67e282edd1
More work on transport/upstream fallback. TLS and UDP fallback not working yet.... Probably need to maintain a current upstream for each transport to get this working properly
2015-06-22 18:02:28 +01:00
Sara Dickinson
57b163c790
Fix bug in STARTTLS timeout
2015-06-22 14:31:19 +01:00
Sara Dickinson
b73b5b2792
Fix some bugs...
2015-06-21 16:55:12 +01:00
Sara Dickinson
635cf9e182
Re-factor of internal handing of transport list.
2015-06-19 18:28:29 +01:00
Willem Toorop
e328f848eb
getdns_rrset and iterators
2015-06-19 18:02:16 +02:00
wtoorop
d819bc901b
Merge pull request #104 from saradickinson/features/transport_api
...
Commit addition of transport list to the API.
2015-06-18 22:02:46 +02:00
Sara Dickinson
0acdcc34b0
Changelog, idle_timeout test, formatting
2015-06-18 17:29:23 +01:00
Sara Dickinson
68dfb15706
Add context idle timeout
2015-06-18 17:11:11 +01:00
Sara Dickinson
8dd8d90e74
Commit addition of transport list to the API.
...
- set and get functions are added.
- Existing transport functions retained for backwards compatibility.
- Basic combinations work as before, but underlying functional changes and cleanup are not complete yet...
- Context level options for timeouts and max_transactions_per_tcp_connection coming soon...
2015-06-17 17:18:09 +01:00
Willem Toorop
129e340e8e
Collect validation chains for RRs without sigs
2015-06-17 14:46:44 +02:00
Willem Toorop
39639a86c4
Make dname_equal reusable
...
+ some symbol renames
2015-06-16 16:11:51 +02:00
Willem Toorop
4445a5f9cc
Include rdata size with compressed names
2015-06-12 15:45:50 +02:00
Willem Toorop
731cc37434
Another redundant ldns reference
2015-06-12 15:45:37 +02:00
Willem Toorop
97f0dddb1e
remove ldns dependency from rr-dict.c
...
Only dnssec.c left
2015-06-12 13:51:36 +02:00
Willem Toorop
4f78dbfe7d
fix --disable-native-stub-dnssec option
2015-06-11 15:47:39 +02:00
Willem Toorop
ae1db39a33
Native stub validation
2015-06-11 15:40:44 +02:00
Willem Toorop
c28f6ee595
rm of superfluous ldns_rr to getdns_dict funcs
2015-06-11 12:17:47 +02:00
Willem Toorop
fd385454b4
rm a few more leftover ldns references
2015-06-11 12:04:59 +02:00
Willem Toorop
e820452aaa
Rm 2 outdated ldns usage cases
2015-06-11 11:21:12 +02:00
Willem Toorop
cc970b8a8d
Merge branch 'master' into develop
2015-06-11 11:15:24 +02:00
wtoorop
b0715161ff
Merge pull request #103 from getdnsapi/homebrew-docs
...
Update README to reflect homebrew updates
2015-06-11 11:13:56 +02:00
ngoyal
ed4f049524
Update README to reflect homebrew updates
2015-06-03 15:39:16 -04:00
Willem Toorop
d5f70ab904
rm spurious execute bits +unit test to detect them
...
Thanks Paul Wouters
2015-05-26 14:16:27 +02:00
Willem Toorop
42bdaaa69d
We already redefined minievent symbols
2015-05-21 15:02:51 +02:00
Willem Toorop
c2c1a4d1bf
Credit Anthony Kirby for the manpage fixes
2015-05-21 12:29:04 +02:00
Willem Toorop
596ea19fdf
Merge branch 'develop' into v0.2.0
2015-05-21 12:28:05 +02:00
Willem Toorop
ccca2e237a
Merge branch 'master' into develop
2015-05-21 12:27:36 +02:00
wtoorop
7d83d63236
Merge pull request #100 from anthonykirby/master
...
docs: fix index param for getdns_list_set_xxx
Acknowledged! Thanks again
2015-05-21 12:25:57 +02:00
Willem Toorop
77393a3da3
Bumb version to 0.2.0
2015-05-21 11:24:16 +02:00
Willem Toorop
8983e33fac
Mention Benno as a contributer
2015-05-20 16:14:08 +02:00
Anthony Kirby
198e8baf69
docs: fix index param for getdns_list_set_xxx
...
the second parameter for these 4 functions is an index, not a name
(looks like cut'n'paste from getdns_dict_set_xxx)
2015-05-19 15:17:00 +01:00
Willem Toorop
aaebeff9e2
Merge branch 'develop' into v0.2.0
2015-05-19 12:30:20 +02:00
Willem Toorop
0ac1a0da82
Merge branch 'master' into develop
2015-05-19 12:29:52 +02:00
wtoorop
6475e5d0ea
Merge pull request #99 from anthonykirby/master
...
docs: clarify how extensions are specified
Absolutely, thanks Anthony
2015-05-19 12:29:16 +02:00
Anthony Kirby
7c0268b42c
docs: clarify how extensions are specified
...
The way that extensions are described in documentation can make it appear to a naive user that they are function names. Quoting the strings makes it clearer that they are just strings.
(it's obvious in retrospect, but I needed to look at the source to get this)
2015-05-19 11:07:20 +01:00
Willem Toorop
71fa069f3b
Enlist Rushi in contributors section.
2015-05-14 09:13:06 +02:00
Willem Toorop
f78ad93853
Update Makefile's, constants and symbols
2015-05-13 23:30:14 +02:00
Willem Toorop
e6f28d62b3
Stable native stub, so version 0.2.0
2015-05-13 23:24:36 +02:00
wtoorop
06a3105dd6
Merge pull request #98 from saradickinson/bugfix/starttls
...
Fix intermittent crash for STARTTLS
2015-05-13 19:41:38 +02:00
Sara Dickinson
894cb1555b
Fix intermittent crash for STARTTLS
2015-05-13 17:15:56 +01:00
Willem Toorop
98b3364b65
uniform debugging method + disable stub debugging
2015-05-13 12:47:17 +02:00
Willem Toorop
011b504496
Fix misplaced freeaddrinfo
2015-05-13 12:39:24 +02:00
Willem Toorop
5d97f9d496
Thanks Robert Edmonds
2015-05-12 21:15:35 +02:00
Willem Toorop
80865e0e88
Preparing for a new minor release...
2015-05-12 20:53:03 +02:00
Willem Toorop
b89b625321
autoreconf -fi on FreeBSD to get libtool 2.4.6
2015-05-12 20:47:23 +02:00
Willem Toorop
a6f2a0c6c4
libversion based on ABI not API
2015-05-12 17:09:25 +02:00
wtoorop
802c693ee5
Merge pull request #97 from saradickinson/features/async_tls
...
Features/async tls
Thank you Sara!
2015-05-12 17:05:10 +02:00
saradickinson
3ac5e660f9
Address few minor bugs pointed out by willem
2015-05-11 22:01:31 +02:00
Willem Toorop
35b73f5107
Mention run once
2015-05-11 13:24:39 +02:00
Willem Toorop
01d4275336
Run once with libevent!
2015-05-08 13:12:06 +02:00
Sara Dickinson
9a7bfdd45b
Add trivial stub_debug functions.
2015-05-03 15:39:21 +01:00
Sara Dickinson
9d967317d3
Improve the timeout handling for TLS.
2015-05-03 15:11:46 +01:00
Sara Dickinson
01adce8299
Organise code in stub.c and add some utility methods.
2015-05-02 18:08:45 +01:00
Sara Dickinson
d6d83b219d
Make sure UDP only uses 1 upstream per IP address. Fix a couple of other bugs.
2015-04-30 19:07:49 +01:00
Sara Dickinson
450a3bc6ff
Fix STARTTLS fallback.
2015-04-30 14:52:16 +01:00
Sara Dickinson
7905eda8b7
Some clean up of connection handling. Still a problem with STARTTLS fallback that needs fixing.
2015-04-30 12:24:13 +01:00
Willem Toorop
393b847668
autoreconf + ChangeLog for Daniel's libversion fix
2015-04-30 11:57:32 +02:00
Daniel Kahn Gillmor
f61a3d0fce
Fix libversion numbering
...
Version 0.1.7 built libgetdns.so.0 instead of libgetdns.so.1. This
broke anything depending on the package keeping the same SONAME from
0.1.6 to 0.1.7.
The problem stems from a broken libversion in upstream's configure.ac.
This is worked around in 0.1.8 by another change to GETDNS_LIBVERSION,
but the change isn't correct either, since interfaces have been added
again (in partcular, the GETDNS_TRANSPORT_TLS_* constants have been
added, which affects the API at least, for tools trying to compile
against the newer version).
Note that the commentary in configure.ac about how to update
libversion is correct up to a point, but then breaks things badly.
This patch removes that as well.
Here is the canonical reference for how to update libversion:
https://www.gnu.org/software/libtool/manual/libtool.html#Updating-version-info
2015-04-30 11:33:39 +02:00
Sara Dickinson
79b3412fbf
Add another transport option as proof of concept for STARTTLS.
2015-04-29 19:20:25 +01:00
Sara Dickinson
b533bc59c5
Fix bug when fallback not available
2015-04-27 16:37:16 +01:00
Sara Dickinson
4e6e66fc77
Get sync messages working with new async code.
2015-04-27 15:32:57 +01:00
Sara Dickinson
3de15ad782
Change internal transport handling to use a list, not a fixed type
2015-04-24 16:29:08 +01:00
Sara Dickinson
f2ae55858f
First pass at making handshake async. Lots of issues with this code still
...
- timeouts are not being rescheduled on fallback
- several error cases are not being handled correctly (e.g. 8.8.8.8) and a user callback is not always called
- the fallback mechanism is not generic (specific to tls to tcp)
2015-04-23 17:46:31 +01:00
Willem Toorop
29b378ab16
release v0.1.8
...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=qFXQ
-----END PGP SIGNATURE-----
Merge tag 'v0.1.8'
release v0.1.8
2015-04-19 23:28:49 +02:00
Willem Toorop
6d4c0afdeb
Correct library version bump
...
Also the mistake in the last version
2015-04-19 22:07:11 +02:00
Willem Toorop
034150cb42
Bump version & update ChangeLog for 0.1.8 release
2015-04-19 21:36:24 +02:00
Willem Toorop
2a6fc74314
netinet/in.h and openssl/ssl.h from config.h
2015-04-18 22:30:56 +02:00
Willem Toorop
0ba6af3523
upstreams_cleanup from upstreams_dereference
2015-04-18 22:17:28 +02:00
Willem Toorop
84c5b67ee0
Re-enable printing of json with getdns_query
2015-04-18 09:53:50 +02:00
Willem Toorop
b26f09d1aa
autoreconf -if # For convenience...
2015-04-18 09:35:46 +02:00
Sara Dickinson
6c7ffc4e4e
1) Fix enum mapping error.
...
2) Also add detection of TLS 1.2 in openssl during configure and warn that it if not available then TLS will not be available. Using TLS_ONLY in stub mode will then error with BAD_CONTEXT. TLS/TCP will fallback to TCP.
3) Explicitly disallow use of TLS_ONLY in RECURSIVE mode since it isn't supported yet. TLS/TCP will fallback to TCP.
4) Fix for MAC OS X build where openssl not linked correctly
2015-04-17 18:38:13 +01:00
Sara Dickinson
ab4fb8d9e9
Enable GETDNS_TRANSPORT_TLS_ONLY_KEEP_CONNECTIONS_OPEN for libunbound. Should only be used in stub mode.
...
GETDNS_TRANSPORT_TLS_FIRST_AND_FALL_BACK_TO_TCP_KEEP_CONNECTIONS_OPEN still just does TCP.
Also some tidy up of new transport types.
2015-04-17 15:50:08 +01:00
Sara Dickinson
99c1973fae
Cleanup of TLS code
2015-04-16 18:05:51 +01:00
saradickinson
99aa79b48f
First pass at TLS implementation - needs work!
2015-04-16 18:05:27 +01:00