]> git.ipfire.org Git - thirdparty/pdns.git/commit
dnsdist: Fall back to libcrypto for authenticated encryption
authorRemi Gacogne <remi.gacogne@powerdns.com>
Mon, 18 Dec 2023 15:12:46 +0000 (16:12 +0100)
committerRemi Gacogne <remi.gacogne@powerdns.com>
Mon, 18 Dec 2023 15:26:03 +0000 (16:26 +0100)
commit44850d6e00bc7a7279d83971d5e1b4c67e6ed434
treea7fde5ed612f8fe96aedc48b97f14d02a14d5bff
parentaf62fb146d58a64da8c8c41e14da3d1ad2be3c3a
dnsdist: Fall back to libcrypto for authenticated encryption

We used to fall back to plain-text for console communications when
libsodium was not available, which was not great. Now that we are
also using the authenticated encryption module to secure our QUIC
tokens, let's fall back to OpenSSL's Chacha20 Poly 1305
implementation instead.
Note that, unfortunately, both implementations are not compatible
so the console communication format will be different depending on
whether libsodium is available. I believe this is still better than
plain-text :)
14 files changed:
.github/actions/spell-check/allow.txt
.not-formatted
pdns/dnsdist-console.cc
pdns/dnsdist-lua.cc
pdns/dnsdist.cc
pdns/dnsdistdist/Makefile.am
pdns/dnsdistdist/dnsdist-crypto.cc [moved from pdns/sodcrypto.cc with 56% similarity]
pdns/dnsdistdist/dnsdist-crypto.hh [moved from pdns/sodcrypto.hh with 68% similarity]
pdns/dnsdistdist/docs/guides/console.rst
pdns/dnsdistdist/docs/manpages/dnsdist.1.rst
pdns/dnsdistdist/doh3.cc
pdns/dnsdistdist/doq-common.cc
pdns/dnsdistdist/doq-common.hh
pdns/dnsdistdist/doq.cc