git.ipfire.org Git - thirdparty/unbound.git/log

Wouter Wijngaards [Tue, 22 Sep 2015 13:04:53 +0000 (13:04 +0000)]

- Fix unbound.conf(5) access-control description for precedence
and default.

git-svn-id: file:///svn/unbound/trunk@3492 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 22 Sep 2015 12:59:32 +0000 (12:59 +0000)]

- Fix minor error in unbound.conf.5.in

git-svn-id: file:///svn/unbound/trunk@3491 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 22 Sep 2015 09:52:17 +0000 (09:52 +0000)]

- testbound selftest also works in non-debug mode.

git-svn-id: file:///svn/unbound/trunk@3490 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 22 Sep 2015 08:59:10 +0000 (08:59 +0000)]

- Fix #705: ub_ctx_set_fwd() return value mishandled on windows.

git-svn-id: file:///svn/unbound/trunk@3489 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 22 Sep 2015 08:43:56 +0000 (08:43 +0000)]

- Remove confusion comment from canonical_compare() function.

git-svn-id: file:///svn/unbound/trunk@3488 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 22 Sep 2015 08:35:03 +0000 (08:35 +0000)]

- Fix #702: New IPs for for h.root-servers.net.

git-svn-id: file:///svn/unbound/trunk@3487 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 22 Sep 2015 08:04:45 +0000 (08:04 +0000)]

- iana portlist update.

git-svn-id: file:///svn/unbound/trunk@3486 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 22 Sep 2015 08:04:19 +0000 (08:04 +0000)]

- Fix config globbed include chroot treatment, this fixes reload of
globs (patch from Dag-Erling Smørgrav).

git-svn-id: file:///svn/unbound/trunk@3485 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 31 Aug 2015 07:44:36 +0000 (07:44 +0000)]

- changed windows setup compression to be more transparent.

git-svn-id: file:///svn/unbound/trunk@3484 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 28 Aug 2015 14:27:03 +0000 (14:27 +0000)]

- Feature #699: --enable-pie option to that builds PIE binary.
- Feature #700: --enable-relro-now option that enables full read-only
relocation.

git-svn-id: file:///svn/unbound/trunk@3483 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 28 Aug 2015 06:56:27 +0000 (06:56 +0000)]

- Fix #697: Get PY_MAJOR_VERSION failure at configure for python
2.4 to 2.6.

git-svn-id: file:///svn/unbound/trunk@3480 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 24 Aug 2015 15:07:42 +0000 (15:07 +0000)]

fix test for new default.

git-svn-id: file:///svn/unbound/trunk@3479 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 24 Aug 2015 15:05:10 +0000 (15:05 +0000)]

- Change default of harden-algo-downgrade to off. This is lenient
for algorithm rollover.

git-svn-id: file:///svn/unbound/trunk@3478 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 24 Aug 2015 12:52:40 +0000 (12:52 +0000)]

- iana portlist update.

git-svn-id: file:///svn/unbound/trunk@3477 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 24 Aug 2015 10:49:28 +0000 (10:49 +0000)]

- Fix deadlock for local data add and zone add when unbound-control
list_local_data printout is interrupted.

git-svn-id: file:///svn/unbound/trunk@3476 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 14 Aug 2015 09:08:44 +0000 (09:08 +0000)]

fixup libressl detection on solaris.

git-svn-id: file:///svn/unbound/trunk@3475 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 13 Aug 2015 15:06:01 +0000 (15:06 +0000)]

fix windows portability

git-svn-id: file:///svn/unbound/trunk@3474 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 13 Aug 2015 14:17:44 +0000 (14:17 +0000)]

- Reap the child process that libunbound spawns.

git-svn-id: file:///svn/unbound/trunk@3473 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 13 Aug 2015 12:52:51 +0000 (12:52 +0000)]

configuration option affects autotrust.

git-svn-id: file:///svn/unbound/trunk@3472 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 13 Aug 2015 12:03:53 +0000 (12:03 +0000)]

- 5011 implementation does not insist on all algorithms, when
harden-algo-downgrade is turned off.

git-svn-id: file:///svn/unbound/trunk@3471 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 11 Aug 2015 07:32:35 +0000 (07:32 +0000)]

- Fix #694: configure script does not detect LibreSSL 2.2.2

git-svn-id: file:///svn/unbound/trunk@3470 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 6 Aug 2015 11:54:53 +0000 (11:54 +0000)]

make depend.

git-svn-id: file:///svn/unbound/trunk@3469 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 4 Aug 2015 07:10:26 +0000 (07:10 +0000)]

- Document that local-zone nodefault matches exactly and transparent
can be used to release a subzone.

git-svn-id: file:///svn/unbound/trunk@3468 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 3 Aug 2015 15:00:56 +0000 (15:00 +0000)]

- Fix mktime in unbound-anchor not using UTC.

git-svn-id: file:///svn/unbound/trunk@3467 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 3 Aug 2015 11:56:37 +0000 (11:56 +0000)]

- Fix 5011 anchor update timer after reload.

git-svn-id: file:///svn/unbound/trunk@3466 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 3 Aug 2015 10:34:29 +0000 (10:34 +0000)]

- Document in the manual more text about configuring locally served
zones.

git-svn-id: file:///svn/unbound/trunk@3465 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 30 Jul 2015 14:01:04 +0000 (14:01 +0000)]

no zero waiting times.

git-svn-id: file:///svn/unbound/trunk@3464 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 30 Jul 2015 12:02:18 +0000 (12:02 +0000)]

fixup.

git-svn-id: file:///svn/unbound/trunk@3463 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 30 Jul 2015 11:52:12 +0000 (11:52 +0000)]

- Added permit-small-holddown config to debug fast 5011 rollover.

git-svn-id: file:///svn/unbound/trunk@3462 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 30 Jul 2015 08:51:51 +0000 (08:51 +0000)]

- please afl-gcc (llvm) for uninitialised variable warning.

git-svn-id: file:///svn/unbound/trunk@3461 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 24 Jul 2015 11:54:08 +0000 (11:54 +0000)]

- iana portlist update.

git-svn-id: file:///svn/unbound/trunk@3459 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 24 Jul 2015 11:49:35 +0000 (11:49 +0000)]

Fix lint.

git-svn-id: file:///svn/unbound/trunk@3458 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 24 Jul 2015 11:44:58 +0000 (11:44 +0000)]

And fix reponse generation when reducing the number of threads.

git-svn-id: file:///svn/unbound/trunk@3457 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 24 Jul 2015 07:02:14 +0000 (07:02 +0000)]

- Fix #690: Reload fails when so-reuseport is yes after changing

git-svn-id: file:///svn/unbound/trunk@3456 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 21 Jul 2015 14:52:53 +0000 (14:52 +0000)]

- iana portlist update.

git-svn-id: file:///svn/unbound/trunk@3455 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 21 Jul 2015 14:37:15 +0000 (14:37 +0000)]

Fixup #if

git-svn-id: file:///svn/unbound/trunk@3454 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 21 Jul 2015 14:30:49 +0000 (14:30 +0000)]

- Fix configure to detect SSL_CTX_set_ecdh_auto.

git-svn-id: file:///svn/unbound/trunk@3453 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 20 Jul 2015 06:56:01 +0000 (06:56 +0000)]

- Enable ECDHE for servers.  Where available, use
  SSL_CTX_set_ecdh_auto() for TLS-wrapped server configurations to
  enable ECDHE.  Otherwise, manually offer curve p256.
  Client connections should automatically use ECDHE when available.
  (thanks Daniel Kahn Gillmor)

git-svn-id: file:///svn/unbound/trunk@3452 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Willem Toorop [Sat, 18 Jul 2015 12:34:37 +0000 (12:34 +0000)]

SSL_CTX_use_certificate_chain_file() should be used instead of the
SSL_CTX_use_certificate_file() function in order to allow the use of
complete certificate chains even when no trusted CA storage is used or
when the CA issuing the certificate shall not be added to the trusted
CA storage.

Thanks Daniel Kahn Gillmore

git-svn-id: file:///svn/unbound/trunk@3451 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 13 Jul 2015 08:20:29 +0000 (08:20 +0000)]

cleaner.

git-svn-id: file:///svn/unbound/trunk@3449 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 13 Jul 2015 07:53:53 +0000 (07:53 +0000)]

- makedist produces sha1 and sha256 files for created binaries too.

git-svn-id: file:///svn/unbound/trunk@3448 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 9 Jul 2015 09:45:08 +0000 (09:45 +0000)]

- Fix #681: Setting forwarders with unbound-control forward
implicitly turns on forward-first.

git-svn-id: file:///svn/unbound/trunk@3447 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 9 Jul 2015 09:40:12 +0000 (09:40 +0000)]

trunk has 1.5.5 in development.

git-svn-id: file:///svn/unbound/trunk@3446 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 29 Jun 2015 13:37:34 +0000 (13:37 +0000)]

nicer code for int_max.

git-svn-id: file:///svn/unbound/trunk@3443 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 29 Jun 2015 10:19:42 +0000 (10:19 +0000)]

- Fix alloc with log for allocation size checks.

git-svn-id: file:///svn/unbound/trunk@3442 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 29 Jun 2015 10:19:14 +0000 (10:19 +0000)]

Fixup

git-svn-id: file:///svn/unbound/trunk@3441 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 29 Jun 2015 07:09:04 +0000 (07:09 +0000)]

- iana portlist update.

git-svn-id: file:///svn/unbound/trunk@3440 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 26 Jun 2015 09:55:00 +0000 (09:55 +0000)]

Fix fwd_compress_c00c for FreeBSD xxd.

git-svn-id: file:///svn/unbound/trunk@3439 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 26 Jun 2015 07:47:47 +0000 (07:47 +0000)]

Test diff of hex.

git-svn-id: file:///svn/unbound/trunk@3438 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 26 Jun 2015 07:43:42 +0000 (07:43 +0000)]

and check ttls of CNAME and DNAME in cache response in unit test.

git-svn-id: file:///svn/unbound/trunk@3437 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 26 Jun 2015 07:33:03 +0000 (07:33 +0000)]

- iana portlist update.

git-svn-id: file:///svn/unbound/trunk@3436 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 26 Jun 2015 07:27:32 +0000 (07:27 +0000)]

- Fix #677 Fix DNAME responses from cache that failed internal chain
test.

git-svn-id: file:///svn/unbound/trunk@3435 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 22 Jun 2015 09:23:43 +0000 (09:23 +0000)]

- Fix #677 Fix CNAME corresponding to a DNAME was checked incorrectly
and was therefore always synthesized (thanks to Valentin Dietrich).

git-svn-id: file:///svn/unbound/trunk@3434 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 4 Jun 2015 12:30:29 +0000 (12:30 +0000)]

- RFC 7553 RR type URI support, is now enabled by default.

git-svn-id: file:///svn/unbound/trunk@3433 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 2 Jun 2015 07:31:43 +0000 (07:31 +0000)]

- Fix #674: Do not free pointers given by getenv.

git-svn-id: file:///svn/unbound/trunk@3432 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 29 May 2015 14:51:36 +0000 (14:51 +0000)]

- SOA negative TTL is capped at minimumttl in its rdata section.
- cache-max-negative-ttl config option, default 3600.

git-svn-id: file:///svn/unbound/trunk@3431 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 29 May 2015 09:32:14 +0000 (09:32 +0000)]

fix doxygen comment.

git-svn-id: file:///svn/unbound/trunk@3430 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 29 May 2015 09:27:42 +0000 (09:27 +0000)]

- Fix that unparseable error responses are ratelimited.

git-svn-id: file:///svn/unbound/trunk@3429 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 26 May 2015 09:18:21 +0000 (09:18 +0000)]

- Document that ratelimit works with unbound-control set_option.

git-svn-id: file:///svn/unbound/trunk@3428 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 21 May 2015 12:06:41 +0000 (12:06 +0000)]

- documentation proposes ratelimit of 1000 (closer to what upstream
servers expect from us).

git-svn-id: file:///svn/unbound/trunk@3427 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 21 May 2015 07:29:42 +0000 (07:29 +0000)]

- iana portlist update.

git-svn-id: file:///svn/unbound/trunk@3426 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Wed, 20 May 2015 06:24:06 +0000 (06:24 +0000)]

- DLV is going to be decommissioned. Advice to stop using it, and
put text in the example configuration and man page to that effect.

git-svn-id: file:///svn/unbound/trunk@3424 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Sun, 10 May 2015 12:04:22 +0000 (12:04 +0000)]

- Change syntax of particular validator error to be easier for
  machine parse, swap rrset and ip adres info so it looks like:
  validation failure <www.example.nl. TXT IN>: signature crypto
  failed from 2001:DB8:7:bba4::53 for <*.example.nl. NSEC IN>

git-svn-id: file:///svn/unbound/trunk@3422 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 1 May 2015 13:35:02 +0000 (13:35 +0000)]

Check for out of memory.

git-svn-id: file:///svn/unbound/trunk@3421 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 1 May 2015 12:36:16 +0000 (12:36 +0000)]

- caps-whitelist in unbound.conf allows whitelist of loadbalancers
that cannot work with caps-for-id or its fallback.

git-svn-id: file:///svn/unbound/trunk@3420 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 30 Apr 2015 10:27:27 +0000 (10:27 +0000)]

- Unit test for type ANY synthesis.

git-svn-id: file:///svn/unbound/trunk@3419 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 23 Apr 2015 14:04:46 +0000 (14:04 +0000)]

please lint.

git-svn-id: file:///svn/unbound/trunk@3411 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Wed, 22 Apr 2015 08:19:12 +0000 (08:19 +0000)]

- iana portlist update.

git-svn-id: file:///svn/unbound/trunk@3408 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Wed, 22 Apr 2015 08:03:34 +0000 (08:03 +0000)]

- Removed contrib/unbound_unixsock.diff, because it has been
integrated, use control-interface: /path in unbound.conf.

git-svn-id: file:///svn/unbound/trunk@3407 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 17 Apr 2015 14:58:07 +0000 (14:58 +0000)]

- Synthesize ANY responses from cache. Does not search exhaustively,
but MX,A,AAAA,SOA,NS also CNAME.
- Fix leaked dns64prefix configuration string.

git-svn-id: file:///svn/unbound/trunk@3405 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 16 Apr 2015 14:41:55 +0000 (14:41 +0000)]

and rerun autoconf.

git-svn-id: file:///svn/unbound/trunk@3404 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 16 Apr 2015 14:41:14 +0000 (14:41 +0000)]

#664: Fix issue with Python 3 mapping of FILE* using file_py3.i from ldns.

git-svn-id: file:///svn/unbound/trunk@3403 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 16 Apr 2015 14:38:38 +0000 (14:38 +0000)]

#664: libunbound-Python: libldns is not used anymore.

git-svn-id: file:///svn/unbound/trunk@3402 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 16 Apr 2015 14:37:12 +0000 (14:37 +0000)]

#664: libunbound examples: produce sorted output.

git-svn-id: file:///svn/unbound/trunk@3401 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 16 Apr 2015 14:35:55 +0000 (14:35 +0000)]

- Fix bug#664: libunbound python3 related fixes (from Tomas Hozza)
Use print_function also for Python2.

git-svn-id: file:///svn/unbound/trunk@3400 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 16 Apr 2015 14:18:50 +0000 (14:18 +0000)]

- Ratelimit does not apply to prefetched queries, and ratelimit-factor
is default 10. Repeated normal queries get resolved and with
prefetch stay in the cache.

git-svn-id: file:///svn/unbound/trunk@3399 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 16 Apr 2015 08:23:06 +0000 (08:23 +0000)]

- Add local-zone type inform_deny, that logs query and drops answer.

git-svn-id: file:///svn/unbound/trunk@3398 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 10 Apr 2015 14:07:25 +0000 (14:07 +0000)]

manpage for ratelimit_list

git-svn-id: file:///svn/unbound/trunk@3397 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 10 Apr 2015 13:56:12 +0000 (13:56 +0000)]

- Fix#663: ssl handshake fails when using unix socket because dh size
is too small.

git-svn-id: file:///svn/unbound/trunk@3396 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 10 Apr 2015 13:43:44 +0000 (13:43 +0000)]

- Fix that get_option for cache-sizes does not print double newline.

git-svn-id: file:///svn/unbound/trunk@3395 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 10 Apr 2015 12:19:30 +0000 (12:19 +0000)]

fixes for undeclared function.

git-svn-id: file:///svn/unbound/trunk@3394 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 10 Apr 2015 12:13:59 +0000 (12:13 +0000)]

- unbound-control ratelimit_list lists high rate domains.

git-svn-id: file:///svn/unbound/trunk@3393 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 10 Apr 2015 10:57:25 +0000 (10:57 +0000)]

Fixes.

git-svn-id: file:///svn/unbound/trunk@3392 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 10 Apr 2015 09:59:57 +0000 (09:59 +0000)]

- ratelimit feature, ratelimit: 100, or some sensible qps, can be
used to turn it on. It ratelimits recursion effort per zone.
For particular names you can configure exceptions in unbound.conf.

git-svn-id: file:///svn/unbound/trunk@3391 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Wed, 8 Apr 2015 19:58:06 +0000 (19:58 +0000)]

- Fix crash in dnstap: Do not try to log TCP responses after timeout.

git-svn-id: file:///svn/unbound/trunk@3390 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 7 Apr 2015 13:50:09 +0000 (13:50 +0000)]

- unbound-control list_insecure command shows the negative trust
anchors currently configured, patch from Jelte Jansen.

git-svn-id: file:///svn/unbound/trunk@3389 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 7 Apr 2015 12:10:37 +0000 (12:10 +0000)]

typo fix.
(svn:NO TEST)

git-svn-id: file:///svn/unbound/trunk@3388 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 7 Apr 2015 12:03:05 +0000 (12:03 +0000)]

- Unbound exits with a fatal error when the auto-trust-anchor-file
  fails to be writable.  This is seconds after startup.  You can
  load a readonly auto-trust-anchor-file with trust-anchor-file.
  The file has to be writable to notice the trust anchor change,
  without it, a trust anchor change will be unnoticed and the system
  will then become unoperable.

git-svn-id: file:///svn/unbound/trunk@3387 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 7 Apr 2015 08:01:22 +0000 (08:01 +0000)]

Fixup test; icann root cert has not changed.

git-svn-id: file:///svn/unbound/trunk@3386 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 7 Apr 2015 07:54:30 +0000 (07:54 +0000)]

And skip dos-newlines for only addrs on line.

git-svn-id: file:///svn/unbound/trunk@3385 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 7 Apr 2015 07:51:43 +0000 (07:51 +0000)]

- Libunbound skips dos-line-endings from etc/hosts.

git-svn-id: file:///svn/unbound/trunk@3384 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 2 Apr 2015 10:02:01 +0000 (10:02 +0000)]

- Fix #660: Fix interface-automatic broken in the presence of
asymmetric routing.

git-svn-id: file:///svn/unbound/trunk@3383 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Wed, 1 Apr 2015 08:40:52 +0000 (08:40 +0000)]

Fix pythonmod.

git-svn-id: file:///svn/unbound/trunk@3382 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 26 Mar 2015 13:15:55 +0000 (13:15 +0000)]

Fixup rrset unlock in case of allocation failure.

git-svn-id: file:///svn/unbound/trunk@3381 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 26 Mar 2015 10:21:38 +0000 (10:21 +0000)]

- rename ldns subdirectory to sldns to avoid name collision.

git-svn-id: file:///svn/unbound/trunk@3380 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 26 Mar 2015 09:46:06 +0000 (09:46 +0000)]

- remote.c probedelay line is easier to read.

git-svn-id: file:///svn/unbound/trunk@3379 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Wed, 25 Mar 2015 16:04:05 +0000 (16:04 +0000)]

- If unknown trust anchor algorithm, and libressl is used, error
message encourages upgrade of the libressl package.

git-svn-id: file:///svn/unbound/trunk@3378 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Wed, 25 Mar 2015 08:06:35 +0000 (08:06 +0000)]

- Fix #657: libunbound(3) recommends deprecated
CRYPTO_set_id_callback.

git-svn-id: file:///svn/unbound/trunk@3377 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 23 Mar 2015 20:42:47 +0000 (20:42 +0000)]

Fixed like Maciej did.

git-svn-id: file:///svn/unbound/trunk@3376 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 23 Mar 2015 20:20:15 +0000 (20:20 +0000)]

- Fix segfault on user not found at startup (from Maciej Soltysiak).

git-svn-id: file:///svn/unbound/trunk@3375 be551aaa-1e26-0410-a405-d3ace91eadb9