From: Wouter Wijngaards Date: Mon, 8 Jun 2009 13:47:06 +0000 (+0000) Subject: TODO items. X-Git-Tag: release-1.3.1~66 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=6dd6542f04d613efdea7badc127b6af1736e5203;p=thirdparty%2Funbound.git TODO items. git-svn-id: file:///svn/unbound/trunk@1641 be551aaa-1e26-0410-a405-d3ace91eadb9 --- diff --git a/configure b/configure index f3bb45892..d6e4eceb7 100755 --- a/configure +++ b/configure @@ -1,6 +1,6 @@ #! /bin/sh # Guess values for system-dependent variables and create Makefiles. -# Generated by GNU Autoconf 2.61 for unbound 1.3.0. +# Generated by GNU Autoconf 2.61 for unbound 1.3.1. # # Report bugs to . # @@ -724,8 +724,8 @@ SHELL=${CONFIG_SHELL-/bin/sh} # Identity of this package. PACKAGE_NAME='unbound' PACKAGE_TARNAME='unbound' -PACKAGE_VERSION='1.3.0' -PACKAGE_STRING='unbound 1.3.0' +PACKAGE_VERSION='1.3.1' +PACKAGE_STRING='unbound 1.3.1' PACKAGE_BUGREPORT='unbound-bugs@nlnetlabs.nl' # Factoring default headers for most tests. @@ -1384,7 +1384,7 @@ if test "$ac_init_help" = "long"; then # Omit some internal or obsolete options to make the list less imposing. # This message is too long to be a string in the A/UX 3.1 sh. cat <<_ACEOF -\`configure' configures unbound 1.3.0 to adapt to many kinds of systems. +\`configure' configures unbound 1.3.1 to adapt to many kinds of systems. Usage: $0 [OPTION]... [VAR=VALUE]... @@ -1449,7 +1449,7 @@ fi if test -n "$ac_init_help"; then case $ac_init_help in - short | recursive ) echo "Configuration of unbound 1.3.0:";; + short | recursive ) echo "Configuration of unbound 1.3.1:";; esac cat <<\_ACEOF @@ -1592,7 +1592,7 @@ fi test -n "$ac_init_help" && exit $ac_status if $ac_init_version; then cat <<\_ACEOF -unbound configure 1.3.0 +unbound configure 1.3.1 generated by GNU Autoconf 2.61 Copyright (C) 1992, 1993, 1994, 1995, 1996, 1998, 1999, 2000, 2001, @@ -1606,7 +1606,7 @@ cat >config.log <<_ACEOF This file contains any messages produced by compilers while running configure, to aid debugging if configure makes a mistake. -It was created by unbound $as_me 1.3.0, which was +It was created by unbound $as_me 1.3.1, which was generated by GNU Autoconf 2.61. Invocation command line was $ $0 $@ @@ -1961,7 +1961,7 @@ ac_compiler_gnu=$ac_cv_c_compiler_gnu LIBUNBOUND_CURRENT=1 -LIBUNBOUND_REVISION=0 +LIBUNBOUND_REVISION=1 LIBUNBOUND_AGE=0 # 1.0.0 had 0:12:0 # 1.0.1 had 0:13:0 @@ -1971,6 +1971,7 @@ LIBUNBOUND_AGE=0 # 1.2.0 had 0:17:0 # 1.2.1 had 0:18:0 # 1.3.0 had 1:0:0 # ub_cancel and -export-symbols. +# 1.3.1 had 1:1:0 # Current -- the number of the binary API that we're implementing # Revision -- which iteration of the implementation of the binary @@ -6882,7 +6883,7 @@ ia64-*-hpux*) ;; *-*-irix6*) # Find out which ABI we are using. - echo '#line 6885 "configure"' > conftest.$ac_ext + echo '#line 6886 "configure"' > conftest.$ac_ext if { (eval echo "$as_me:$LINENO: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? @@ -8196,11 +8197,11 @@ else -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \ -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` - (eval echo "\"\$as_me:8199: $lt_compile\"" >&5) + (eval echo "\"\$as_me:8200: $lt_compile\"" >&5) (eval "$lt_compile" 2>conftest.err) ac_status=$? cat conftest.err >&5 - echo "$as_me:8203: \$? = $ac_status" >&5 + echo "$as_me:8204: \$? = $ac_status" >&5 if (exit $ac_status) && test -s "$ac_outfile"; then # The compiler can only warn and ignore the option if not recognized # So say no if there are warnings other than the usual output. @@ -8486,11 +8487,11 @@ else -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \ -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` - (eval echo "\"\$as_me:8489: $lt_compile\"" >&5) + (eval echo "\"\$as_me:8490: $lt_compile\"" >&5) (eval "$lt_compile" 2>conftest.err) ac_status=$? cat conftest.err >&5 - echo "$as_me:8493: \$? = $ac_status" >&5 + echo "$as_me:8494: \$? = $ac_status" >&5 if (exit $ac_status) && test -s "$ac_outfile"; then # The compiler can only warn and ignore the option if not recognized # So say no if there are warnings other than the usual output. @@ -8590,11 +8591,11 @@ else -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \ -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` - (eval echo "\"\$as_me:8593: $lt_compile\"" >&5) + (eval echo "\"\$as_me:8594: $lt_compile\"" >&5) (eval "$lt_compile" 2>out/conftest.err) ac_status=$? cat out/conftest.err >&5 - echo "$as_me:8597: \$? = $ac_status" >&5 + echo "$as_me:8598: \$? = $ac_status" >&5 if (exit $ac_status) && test -s out/conftest2.$ac_objext then # The compiler can only warn and ignore the option if not recognized @@ -10941,7 +10942,7 @@ else lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2 lt_status=$lt_dlunknown cat > conftest.$ac_ext < conftest.$ac_ext <&5) + (eval echo "\"\$as_me:13465: $lt_compile\"" >&5) (eval "$lt_compile" 2>conftest.err) ac_status=$? cat conftest.err >&5 - echo "$as_me:13468: \$? = $ac_status" >&5 + echo "$as_me:13469: \$? = $ac_status" >&5 if (exit $ac_status) && test -s "$ac_outfile"; then # The compiler can only warn and ignore the option if not recognized # So say no if there are warnings other than the usual output. @@ -13565,11 +13566,11 @@ else -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \ -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` - (eval echo "\"\$as_me:13568: $lt_compile\"" >&5) + (eval echo "\"\$as_me:13569: $lt_compile\"" >&5) (eval "$lt_compile" 2>out/conftest.err) ac_status=$? cat out/conftest.err >&5 - echo "$as_me:13572: \$? = $ac_status" >&5 + echo "$as_me:13573: \$? = $ac_status" >&5 if (exit $ac_status) && test -s out/conftest2.$ac_objext then # The compiler can only warn and ignore the option if not recognized @@ -15129,11 +15130,11 @@ else -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \ -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` - (eval echo "\"\$as_me:15132: $lt_compile\"" >&5) + (eval echo "\"\$as_me:15133: $lt_compile\"" >&5) (eval "$lt_compile" 2>conftest.err) ac_status=$? cat conftest.err >&5 - echo "$as_me:15136: \$? = $ac_status" >&5 + echo "$as_me:15137: \$? = $ac_status" >&5 if (exit $ac_status) && test -s "$ac_outfile"; then # The compiler can only warn and ignore the option if not recognized # So say no if there are warnings other than the usual output. @@ -15233,11 +15234,11 @@ else -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \ -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` - (eval echo "\"\$as_me:15236: $lt_compile\"" >&5) + (eval echo "\"\$as_me:15237: $lt_compile\"" >&5) (eval "$lt_compile" 2>out/conftest.err) ac_status=$? cat out/conftest.err >&5 - echo "$as_me:15240: \$? = $ac_status" >&5 + echo "$as_me:15241: \$? = $ac_status" >&5 if (exit $ac_status) && test -s out/conftest2.$ac_objext then # The compiler can only warn and ignore the option if not recognized @@ -17422,11 +17423,11 @@ else -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \ -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` - (eval echo "\"\$as_me:17425: $lt_compile\"" >&5) + (eval echo "\"\$as_me:17426: $lt_compile\"" >&5) (eval "$lt_compile" 2>conftest.err) ac_status=$? cat conftest.err >&5 - echo "$as_me:17429: \$? = $ac_status" >&5 + echo "$as_me:17430: \$? = $ac_status" >&5 if (exit $ac_status) && test -s "$ac_outfile"; then # The compiler can only warn and ignore the option if not recognized # So say no if there are warnings other than the usual output. @@ -17712,11 +17713,11 @@ else -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \ -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` - (eval echo "\"\$as_me:17715: $lt_compile\"" >&5) + (eval echo "\"\$as_me:17716: $lt_compile\"" >&5) (eval "$lt_compile" 2>conftest.err) ac_status=$? cat conftest.err >&5 - echo "$as_me:17719: \$? = $ac_status" >&5 + echo "$as_me:17720: \$? = $ac_status" >&5 if (exit $ac_status) && test -s "$ac_outfile"; then # The compiler can only warn and ignore the option if not recognized # So say no if there are warnings other than the usual output. @@ -17816,11 +17817,11 @@ else -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \ -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` - (eval echo "\"\$as_me:17819: $lt_compile\"" >&5) + (eval echo "\"\$as_me:17820: $lt_compile\"" >&5) (eval "$lt_compile" 2>out/conftest.err) ac_status=$? cat out/conftest.err >&5 - echo "$as_me:17823: \$? = $ac_status" >&5 + echo "$as_me:17824: \$? = $ac_status" >&5 if (exit $ac_status) && test -s out/conftest2.$ac_objext then # The compiler can only warn and ignore the option if not recognized @@ -28561,7 +28562,7 @@ exec 6>&1 # report actual input values of CONFIG_FILES etc. instead of their # values after options handling. ac_log=" -This file was extended by unbound $as_me 1.3.0, which was +This file was extended by unbound $as_me 1.3.1, which was generated by GNU Autoconf 2.61. Invocation command line was CONFIG_FILES = $CONFIG_FILES @@ -28610,7 +28611,7 @@ Report bugs to ." _ACEOF cat >>$CONFIG_STATUS <<_ACEOF ac_cs_version="\\ -unbound config.status 1.3.0 +unbound config.status 1.3.1 configured by $0, generated by GNU Autoconf 2.61, with options \\"`echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`\\" diff --git a/configure.ac b/configure.ac index bee118141..8ad0cf5ba 100644 --- a/configure.ac +++ b/configure.ac @@ -6,10 +6,10 @@ sinclude(acx_pthread.m4) sinclude(acx_python.m4) sinclude(ac_pkg_swig.m4) -AC_INIT(unbound, 1.3.0, unbound-bugs@nlnetlabs.nl, unbound) +AC_INIT(unbound, 1.3.1, unbound-bugs@nlnetlabs.nl, unbound) LIBUNBOUND_CURRENT=1 -LIBUNBOUND_REVISION=0 +LIBUNBOUND_REVISION=1 LIBUNBOUND_AGE=0 # 1.0.0 had 0:12:0 # 1.0.1 had 0:13:0 @@ -19,6 +19,7 @@ LIBUNBOUND_AGE=0 # 1.2.0 had 0:17:0 # 1.2.1 had 0:18:0 # 1.3.0 had 1:0:0 # ub_cancel and -export-symbols. +# 1.3.1 had 1:1:0 # Current -- the number of the binary API that we're implementing # Revision -- which iteration of the implementation of the binary diff --git a/doc/Changelog b/doc/Changelog index 5f9ebb521..485083f94 100644 --- a/doc/Changelog +++ b/doc/Changelog @@ -1,6 +1,8 @@ 8 June 2009: Wouter - Removed RFC5011 REVOKE flag support. Partial 5011 support may cause inadvertant behaviour. + - 1.3.0 tarball for release created. + - 1.3.1 development in svn trunk. 3 June 2009: Wouter - fixup bad free() when wrongly encoded DSA signature is seen. diff --git a/doc/TODO b/doc/TODO index 8a23298cc..9d0fb46b0 100644 --- a/doc/TODO +++ b/doc/TODO @@ -35,7 +35,6 @@ o overhaul outside-network servicedquery to merge with udpwait and tcpwait, o check into rebinding ports for efficiency, configure time test. o EVP hardware crypto support. o option to ignore all inception and expiration dates for rrsigs. -o option to use builtin ldns explicitly. Or stop shipping builtin tarball. o cleaner code; return and func statements on newline. o memcached module that sits before validator module; checks for memcached data (on local lan), stores recursion lookup. Provides one cache for multiple resolver machines, coherent reply content in anycast setup. @@ -56,3 +55,35 @@ o local-zone directive with authority service, full authority server is a non-goal. o infra and lame cache: easier size config (in Mb), show usage in graphs. +1.3.1: +- spoofed delegpt fixes - if DNSKEY prime fails + - set DNSKEY bogus and DNSKEY query msg bogus. + - make NS set bogus too - if not validated as secure. + - check where queries go - otherwise reduce TTL on NS. + - also make DS NSEC bogus. Also DS msg cache entry. + - check BIT_DS in DS NSEC and do not take from cache if set. +- bogus exponential backoff cache. hash(name,t,c), size(1M, 5%). + TTL of 24h. Backoff from 200msec to 24h. + x2 on bogus(18 tries), x8 backoff on lameness(6 tries), + when servfail for DNSKEY. + remove entry when validated as secure. +- winevent - poll if too many fds +- ssl open apache style +- fwd above stub, make hole in fwds +- munin use ps to print total mem +- no swig, but ask python, configure fails. +- iter/priv 227 strict aliasing stop compiler complaints +- fix lint complains on ldns/sha1 +- fix indent # ifs +- flush_* remove msg cache entry if one. +- do not flush/delete callback queries or call error on callback at least. + +later +- selective verbosity; ubcontrol trace example.com +- option to log only bogus domainname encountered, for demos +- cache fork-dump, pre-load +- for fwds, send queries to N servers in fwd-list, use first reply. + document high scalable, high available unbound setup onepager. +- prefetch DNSKEY when DS in delegation seen (nonCD, underTA). +- use libevent if available on system by default(?), default outgoing 256to1024 +