- Fix #1175: serve-expired does not adhere to secure-by-default
principle. The default value of serve-expired-client-timeout
is set to 1800 as suggested by RFC8767.
+ - For #1175, update serve-expired tests.
20 November 2024: Yorgos
- Fix comparison to help static analyzer.
qname-minimisation: no
minimal-responses: no
serve-expired: yes
+ serve-expired-client-timeout: 0
module-config: "cachedb iterator"
cachedb:
qname-minimisation: no
minimal-responses: no
serve-expired: yes
+ serve-expired-client-timeout: 0
serve-expired-reply-ttl: 30
module-config: "cachedb iterator"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: no
minimal-responses: no
- ;serve-expired: yes
+ serve-expired: no
module-config: "cachedb iterator"
cachedb:
qname-minimisation: no
minimal-responses: yes
serve-expired: yes
+ serve-expired-client-timeout: 0
;module-config: "subnetcache validator cachedb iterator"
module-config: "validator cachedb iterator"
do-not-query-localhost: no
local-zone: "example.net." redirect
local-data: "example.net. IN A 10.20.30.41"
- serve-expired: yes
- serve-expired-reply-ttl: 30
+ serve-expired: yes
+ serve-expired-client-timeout: 0
+ serve-expired-reply-ttl: 30
remote-control:
control-enable: yes
control-interface: 127.0.0.1
; config options go here.
server:
serve-expired: yes
+ serve-expired-client-timeout: 0
prefetch: yes
forward-zone: name: "." forward-addr: 216.0.0.1
CONFIG_END
qname-minimisation: "no"
minimal-responses: no
serve-expired: yes
+ serve-expired-client-timeout: 0
access-control: 127.0.0.1/32 allow_snoop
ede: yes
ede-serve-expired: yes
qname-minimisation: "no"
minimal-responses: no
serve-expired: yes
+ serve-expired-client-timeout: 0
log-servfail: yes
ede: yes
ede-serve-expired: yes
qname-minimisation: "no"
minimal-responses: no
serve-expired: yes
+ serve-expired-client-timeout: 0
log-servfail: yes
ede: yes
ede-serve-expired: yes
qname-minimisation: "no"
minimal-responses: no
serve-expired: yes
+ serve-expired-client-timeout: 0
log-servfail: yes
ede: yes
ede-serve-expired: yes
qname-minimisation: "no"
minimal-responses: no
serve-expired: yes
+ serve-expired-client-timeout: 0
serve-expired-reply-ttl: 123
log-servfail: yes
ede: yes
qname-minimisation: "no"
minimal-responses: no
serve-expired: yes
+ serve-expired-client-timeout: 0
serve-expired-reply-ttl: 123
log-servfail: yes
ede: yes
minimal-responses: no
serve-expired: yes
serve-expired-reply-ttl: 123
+ serve-expired-client-timeout: 0
ede: yes
ede-serve-expired: yes
qname-minimisation: "no"
minimal-responses: no
serve-expired: yes
+ serve-expired-client-timeout: 0
serve-expired-ttl: 10
stub-zone:
serve-expired-ttl: 1
serve-expired-ttl-reset: yes
serve-expired-reply-ttl: 123
+ serve-expired-client-timeout: 0
ede: yes
ede-serve-expired: yes
forward-zone: name: "." forward-addr: 216.0.0.1
minimal-responses: no
serve-expired: yes
+ serve-expired-client-timeout: 0
serve-expired-reply-ttl: 123
ede: yes
ede-serve-expired: yes
qname-minimisation: "no"
minimal-responses: no
serve-expired: yes
+ serve-expired-client-timeout: 0
serve-expired-reply-ttl: 123
ede: yes
ede-serve-expired: yes
cache-max-ttl: 1000
cache-min-ttl: 20
serve-expired: yes
+ serve-expired-client-timeout: 0
serve-expired-reply-ttl: 123
ede: yes
ede-serve-expired: yes
outbound-msg-retry: 0
root-key-sentinel: no
trust-anchor-signaling: no
+ serve-expired-client-timeout: 0
local-zone: local.zone static
local-data: "www.local.zone A 192.0.2.1"
qname-minimisation: no
minimal-responses: no
serve-expired: yes
+ serve-expired-client-timeout: 0
prefetch: yes
stub-zone:
trust-anchor-signaling: no
target-fetch-policy: "0 0 0 0 0"
serve-expired: yes
+ serve-expired-client-timeout: 0
client-subnet-always-forward: yes
module-config: "subnetcache iterator"
verbosity: 3
qname-minimisation: no
minimal-responses: no
serve-expired: yes
+ serve-expired-client-timeout: 0
serve-expired-ttl: 1
prefetch: yes