git.ipfire.org Git - thirdparty/unbound.git/log

Wouter Wijngaards [Thu, 6 Aug 2015 11:54:53 +0000 (11:54 +0000)]

make depend.

git-svn-id: file:///svn/unbound/trunk@3469 be551aaa-1e26-0410-a405-d3ace91eadb9

Wouter Wijngaards [Tue, 4 Aug 2015 07:10:26 +0000 (07:10 +0000)]

- Document that local-zone nodefault matches exactly and transparent
can be used to release a subzone.

git-svn-id: file:///svn/unbound/trunk@3468 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 3 Aug 2015 15:00:56 +0000 (15:00 +0000)]

- Fix mktime in unbound-anchor not using UTC.

git-svn-id: file:///svn/unbound/trunk@3467 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 3 Aug 2015 11:56:37 +0000 (11:56 +0000)]

- Fix 5011 anchor update timer after reload.

git-svn-id: file:///svn/unbound/trunk@3466 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 3 Aug 2015 10:34:29 +0000 (10:34 +0000)]

- Document in the manual more text about configuring locally served
zones.

git-svn-id: file:///svn/unbound/trunk@3465 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 30 Jul 2015 14:01:04 +0000 (14:01 +0000)]

no zero waiting times.

git-svn-id: file:///svn/unbound/trunk@3464 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 30 Jul 2015 12:02:18 +0000 (12:02 +0000)]

fixup.

git-svn-id: file:///svn/unbound/trunk@3463 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 30 Jul 2015 11:52:12 +0000 (11:52 +0000)]

- Added permit-small-holddown config to debug fast 5011 rollover.

git-svn-id: file:///svn/unbound/trunk@3462 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 30 Jul 2015 08:51:51 +0000 (08:51 +0000)]

- please afl-gcc (llvm) for uninitialised variable warning.

git-svn-id: file:///svn/unbound/trunk@3461 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 24 Jul 2015 11:54:08 +0000 (11:54 +0000)]

- iana portlist update.

git-svn-id: file:///svn/unbound/trunk@3459 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 24 Jul 2015 11:49:35 +0000 (11:49 +0000)]

Fix lint.

git-svn-id: file:///svn/unbound/trunk@3458 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 24 Jul 2015 11:44:58 +0000 (11:44 +0000)]

And fix reponse generation when reducing the number of threads.

git-svn-id: file:///svn/unbound/trunk@3457 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 24 Jul 2015 07:02:14 +0000 (07:02 +0000)]

- Fix #690: Reload fails when so-reuseport is yes after changing

git-svn-id: file:///svn/unbound/trunk@3456 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 21 Jul 2015 14:52:53 +0000 (14:52 +0000)]

- iana portlist update.

git-svn-id: file:///svn/unbound/trunk@3455 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 21 Jul 2015 14:37:15 +0000 (14:37 +0000)]

Fixup #if

git-svn-id: file:///svn/unbound/trunk@3454 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 21 Jul 2015 14:30:49 +0000 (14:30 +0000)]

- Fix configure to detect SSL_CTX_set_ecdh_auto.

git-svn-id: file:///svn/unbound/trunk@3453 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 20 Jul 2015 06:56:01 +0000 (06:56 +0000)]

- Enable ECDHE for servers.  Where available, use
  SSL_CTX_set_ecdh_auto() for TLS-wrapped server configurations to
  enable ECDHE.  Otherwise, manually offer curve p256.
  Client connections should automatically use ECDHE when available.
  (thanks Daniel Kahn Gillmor)

git-svn-id: file:///svn/unbound/trunk@3452 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Willem Toorop [Sat, 18 Jul 2015 12:34:37 +0000 (12:34 +0000)]

SSL_CTX_use_certificate_chain_file() should be used instead of the
SSL_CTX_use_certificate_file() function in order to allow the use of
complete certificate chains even when no trusted CA storage is used or
when the CA issuing the certificate shall not be added to the trusted
CA storage.

Thanks Daniel Kahn Gillmore

git-svn-id: file:///svn/unbound/trunk@3451 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 13 Jul 2015 08:20:29 +0000 (08:20 +0000)]

cleaner.

git-svn-id: file:///svn/unbound/trunk@3449 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 13 Jul 2015 07:53:53 +0000 (07:53 +0000)]

- makedist produces sha1 and sha256 files for created binaries too.

git-svn-id: file:///svn/unbound/trunk@3448 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 9 Jul 2015 09:45:08 +0000 (09:45 +0000)]

- Fix #681: Setting forwarders with unbound-control forward
implicitly turns on forward-first.

git-svn-id: file:///svn/unbound/trunk@3447 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 9 Jul 2015 09:40:12 +0000 (09:40 +0000)]

trunk has 1.5.5 in development.

git-svn-id: file:///svn/unbound/trunk@3446 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 29 Jun 2015 13:37:34 +0000 (13:37 +0000)]

nicer code for int_max.

git-svn-id: file:///svn/unbound/trunk@3443 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 29 Jun 2015 10:19:42 +0000 (10:19 +0000)]

- Fix alloc with log for allocation size checks.

git-svn-id: file:///svn/unbound/trunk@3442 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 29 Jun 2015 10:19:14 +0000 (10:19 +0000)]

Fixup

git-svn-id: file:///svn/unbound/trunk@3441 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 29 Jun 2015 07:09:04 +0000 (07:09 +0000)]

- iana portlist update.

git-svn-id: file:///svn/unbound/trunk@3440 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 26 Jun 2015 09:55:00 +0000 (09:55 +0000)]

Fix fwd_compress_c00c for FreeBSD xxd.

git-svn-id: file:///svn/unbound/trunk@3439 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 26 Jun 2015 07:47:47 +0000 (07:47 +0000)]

Test diff of hex.

git-svn-id: file:///svn/unbound/trunk@3438 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 26 Jun 2015 07:43:42 +0000 (07:43 +0000)]

and check ttls of CNAME and DNAME in cache response in unit test.

git-svn-id: file:///svn/unbound/trunk@3437 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 26 Jun 2015 07:33:03 +0000 (07:33 +0000)]

- iana portlist update.

git-svn-id: file:///svn/unbound/trunk@3436 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 26 Jun 2015 07:27:32 +0000 (07:27 +0000)]

- Fix #677 Fix DNAME responses from cache that failed internal chain
test.

git-svn-id: file:///svn/unbound/trunk@3435 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 22 Jun 2015 09:23:43 +0000 (09:23 +0000)]

- Fix #677 Fix CNAME corresponding to a DNAME was checked incorrectly
and was therefore always synthesized (thanks to Valentin Dietrich).

git-svn-id: file:///svn/unbound/trunk@3434 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 4 Jun 2015 12:30:29 +0000 (12:30 +0000)]

- RFC 7553 RR type URI support, is now enabled by default.

git-svn-id: file:///svn/unbound/trunk@3433 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 2 Jun 2015 07:31:43 +0000 (07:31 +0000)]

- Fix #674: Do not free pointers given by getenv.

git-svn-id: file:///svn/unbound/trunk@3432 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 29 May 2015 14:51:36 +0000 (14:51 +0000)]

- SOA negative TTL is capped at minimumttl in its rdata section.
- cache-max-negative-ttl config option, default 3600.

git-svn-id: file:///svn/unbound/trunk@3431 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 29 May 2015 09:32:14 +0000 (09:32 +0000)]

fix doxygen comment.

git-svn-id: file:///svn/unbound/trunk@3430 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 29 May 2015 09:27:42 +0000 (09:27 +0000)]

- Fix that unparseable error responses are ratelimited.

git-svn-id: file:///svn/unbound/trunk@3429 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 26 May 2015 09:18:21 +0000 (09:18 +0000)]

- Document that ratelimit works with unbound-control set_option.

git-svn-id: file:///svn/unbound/trunk@3428 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 21 May 2015 12:06:41 +0000 (12:06 +0000)]

- documentation proposes ratelimit of 1000 (closer to what upstream
servers expect from us).

git-svn-id: file:///svn/unbound/trunk@3427 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 21 May 2015 07:29:42 +0000 (07:29 +0000)]

- iana portlist update.

git-svn-id: file:///svn/unbound/trunk@3426 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Wed, 20 May 2015 06:24:06 +0000 (06:24 +0000)]

- DLV is going to be decommissioned. Advice to stop using it, and
put text in the example configuration and man page to that effect.

git-svn-id: file:///svn/unbound/trunk@3424 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Sun, 10 May 2015 12:04:22 +0000 (12:04 +0000)]

- Change syntax of particular validator error to be easier for
  machine parse, swap rrset and ip adres info so it looks like:
  validation failure <www.example.nl. TXT IN>: signature crypto
  failed from 2001:DB8:7:bba4::53 for <*.example.nl. NSEC IN>

git-svn-id: file:///svn/unbound/trunk@3422 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 1 May 2015 13:35:02 +0000 (13:35 +0000)]

Check for out of memory.

git-svn-id: file:///svn/unbound/trunk@3421 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 1 May 2015 12:36:16 +0000 (12:36 +0000)]

- caps-whitelist in unbound.conf allows whitelist of loadbalancers
that cannot work with caps-for-id or its fallback.

git-svn-id: file:///svn/unbound/trunk@3420 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 30 Apr 2015 10:27:27 +0000 (10:27 +0000)]

- Unit test for type ANY synthesis.

git-svn-id: file:///svn/unbound/trunk@3419 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 23 Apr 2015 14:04:46 +0000 (14:04 +0000)]

please lint.

git-svn-id: file:///svn/unbound/trunk@3411 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Wed, 22 Apr 2015 08:19:12 +0000 (08:19 +0000)]

- iana portlist update.

git-svn-id: file:///svn/unbound/trunk@3408 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Wed, 22 Apr 2015 08:03:34 +0000 (08:03 +0000)]

- Removed contrib/unbound_unixsock.diff, because it has been
integrated, use control-interface: /path in unbound.conf.

git-svn-id: file:///svn/unbound/trunk@3407 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 17 Apr 2015 14:58:07 +0000 (14:58 +0000)]

- Synthesize ANY responses from cache. Does not search exhaustively,
but MX,A,AAAA,SOA,NS also CNAME.
- Fix leaked dns64prefix configuration string.

git-svn-id: file:///svn/unbound/trunk@3405 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 16 Apr 2015 14:41:55 +0000 (14:41 +0000)]

and rerun autoconf.

git-svn-id: file:///svn/unbound/trunk@3404 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 16 Apr 2015 14:41:14 +0000 (14:41 +0000)]

#664: Fix issue with Python 3 mapping of FILE* using file_py3.i from ldns.

git-svn-id: file:///svn/unbound/trunk@3403 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 16 Apr 2015 14:38:38 +0000 (14:38 +0000)]

#664: libunbound-Python: libldns is not used anymore.

git-svn-id: file:///svn/unbound/trunk@3402 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 16 Apr 2015 14:37:12 +0000 (14:37 +0000)]

#664: libunbound examples: produce sorted output.

git-svn-id: file:///svn/unbound/trunk@3401 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 16 Apr 2015 14:35:55 +0000 (14:35 +0000)]

- Fix bug#664: libunbound python3 related fixes (from Tomas Hozza)
Use print_function also for Python2.

git-svn-id: file:///svn/unbound/trunk@3400 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 16 Apr 2015 14:18:50 +0000 (14:18 +0000)]

- Ratelimit does not apply to prefetched queries, and ratelimit-factor
is default 10. Repeated normal queries get resolved and with
prefetch stay in the cache.

git-svn-id: file:///svn/unbound/trunk@3399 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 16 Apr 2015 08:23:06 +0000 (08:23 +0000)]

- Add local-zone type inform_deny, that logs query and drops answer.

git-svn-id: file:///svn/unbound/trunk@3398 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 10 Apr 2015 14:07:25 +0000 (14:07 +0000)]

manpage for ratelimit_list

git-svn-id: file:///svn/unbound/trunk@3397 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 10 Apr 2015 13:56:12 +0000 (13:56 +0000)]

- Fix#663: ssl handshake fails when using unix socket because dh size
is too small.

git-svn-id: file:///svn/unbound/trunk@3396 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 10 Apr 2015 13:43:44 +0000 (13:43 +0000)]

- Fix that get_option for cache-sizes does not print double newline.

git-svn-id: file:///svn/unbound/trunk@3395 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 10 Apr 2015 12:19:30 +0000 (12:19 +0000)]

fixes for undeclared function.

git-svn-id: file:///svn/unbound/trunk@3394 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 10 Apr 2015 12:13:59 +0000 (12:13 +0000)]

- unbound-control ratelimit_list lists high rate domains.

git-svn-id: file:///svn/unbound/trunk@3393 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 10 Apr 2015 10:57:25 +0000 (10:57 +0000)]

Fixes.

git-svn-id: file:///svn/unbound/trunk@3392 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 10 Apr 2015 09:59:57 +0000 (09:59 +0000)]

- ratelimit feature, ratelimit: 100, or some sensible qps, can be
used to turn it on. It ratelimits recursion effort per zone.
For particular names you can configure exceptions in unbound.conf.

git-svn-id: file:///svn/unbound/trunk@3391 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Wed, 8 Apr 2015 19:58:06 +0000 (19:58 +0000)]

- Fix crash in dnstap: Do not try to log TCP responses after timeout.

git-svn-id: file:///svn/unbound/trunk@3390 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 7 Apr 2015 13:50:09 +0000 (13:50 +0000)]

- unbound-control list_insecure command shows the negative trust
anchors currently configured, patch from Jelte Jansen.

git-svn-id: file:///svn/unbound/trunk@3389 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 7 Apr 2015 12:10:37 +0000 (12:10 +0000)]

typo fix.
(svn:NO TEST)

git-svn-id: file:///svn/unbound/trunk@3388 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 7 Apr 2015 12:03:05 +0000 (12:03 +0000)]

- Unbound exits with a fatal error when the auto-trust-anchor-file
  fails to be writable.  This is seconds after startup.  You can
  load a readonly auto-trust-anchor-file with trust-anchor-file.
  The file has to be writable to notice the trust anchor change,
  without it, a trust anchor change will be unnoticed and the system
  will then become unoperable.

git-svn-id: file:///svn/unbound/trunk@3387 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 7 Apr 2015 08:01:22 +0000 (08:01 +0000)]

Fixup test; icann root cert has not changed.

git-svn-id: file:///svn/unbound/trunk@3386 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 7 Apr 2015 07:54:30 +0000 (07:54 +0000)]

And skip dos-newlines for only addrs on line.

git-svn-id: file:///svn/unbound/trunk@3385 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 7 Apr 2015 07:51:43 +0000 (07:51 +0000)]

- Libunbound skips dos-line-endings from etc/hosts.

git-svn-id: file:///svn/unbound/trunk@3384 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 2 Apr 2015 10:02:01 +0000 (10:02 +0000)]

- Fix #660: Fix interface-automatic broken in the presence of
asymmetric routing.

git-svn-id: file:///svn/unbound/trunk@3383 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Wed, 1 Apr 2015 08:40:52 +0000 (08:40 +0000)]

Fix pythonmod.

git-svn-id: file:///svn/unbound/trunk@3382 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 26 Mar 2015 13:15:55 +0000 (13:15 +0000)]

Fixup rrset unlock in case of allocation failure.

git-svn-id: file:///svn/unbound/trunk@3381 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 26 Mar 2015 10:21:38 +0000 (10:21 +0000)]

- rename ldns subdirectory to sldns to avoid name collision.

git-svn-id: file:///svn/unbound/trunk@3380 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 26 Mar 2015 09:46:06 +0000 (09:46 +0000)]

- remote.c probedelay line is easier to read.

git-svn-id: file:///svn/unbound/trunk@3379 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Wed, 25 Mar 2015 16:04:05 +0000 (16:04 +0000)]

- If unknown trust anchor algorithm, and libressl is used, error
message encourages upgrade of the libressl package.

git-svn-id: file:///svn/unbound/trunk@3378 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Wed, 25 Mar 2015 08:06:35 +0000 (08:06 +0000)]

- Fix #657: libunbound(3) recommends deprecated
CRYPTO_set_id_callback.

git-svn-id: file:///svn/unbound/trunk@3377 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 23 Mar 2015 20:42:47 +0000 (20:42 +0000)]

Fixed like Maciej did.

git-svn-id: file:///svn/unbound/trunk@3376 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 23 Mar 2015 20:20:15 +0000 (20:20 +0000)]

- Fix segfault on user not found at startup (from Maciej Soltysiak).

git-svn-id: file:///svn/unbound/trunk@3375 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 20 Mar 2015 16:03:14 +0000 (16:03 +0000)]

Do not divide by zero.

git-svn-id: file:///svn/unbound/trunk@3374 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 20 Mar 2015 15:58:55 +0000 (15:58 +0000)]

Check before storing value.

git-svn-id: file:///svn/unbound/trunk@3373 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Fri, 20 Mar 2015 15:36:25 +0000 (15:36 +0000)]

- Fixes to add integer overflow checks on allocation (defense in depth).

git-svn-id: file:///svn/unbound/trunk@3372 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 19 Mar 2015 14:47:42 +0000 (14:47 +0000)]

fixup compiler warning on OpenBSD.

git-svn-id: file:///svn/unbound/trunk@3371 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 19 Mar 2015 09:58:49 +0000 (09:58 +0000)]

comment spelling improvement.

git-svn-id: file:///svn/unbound/trunk@3370 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 19 Mar 2015 09:50:35 +0000 (09:50 +0000)]

- Add ip-transparent config option for bind to non-local addresses.

git-svn-id: file:///svn/unbound/trunk@3369 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 17 Mar 2015 16:22:04 +0000 (16:22 +0000)]

extra sanity check for integer overflow.

git-svn-id: file:///svn/unbound/trunk@3368 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 17 Mar 2015 09:44:57 +0000 (09:44 +0000)]

please lint.

git-svn-id: file:///svn/unbound/trunk@3367 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 17 Mar 2015 09:38:47 +0000 (09:38 +0000)]

please lint.

git-svn-id: file:///svn/unbound/trunk@3366 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 17 Mar 2015 08:24:24 +0000 (08:24 +0000)]

- Use reallocarray for integer overflow protection, patch submitted
by Loganaden Velvindron.

git-svn-id: file:///svn/unbound/trunk@3365 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 17 Mar 2015 08:20:25 +0000 (08:20 +0000)]

Reallocarray compat source from OpenBSD.

git-svn-id: file:///svn/unbound/trunk@3364 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 16 Mar 2015 11:51:30 +0000 (11:51 +0000)]

please lint.

git-svn-id: file:///svn/unbound/trunk@3363 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 16 Mar 2015 10:51:32 +0000 (10:51 +0000)]

- Fixup compile on cygwin, more portable openssl thread id.

git-svn-id: file:///svn/unbound/trunk@3362 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 12 Mar 2015 15:34:03 +0000 (15:34 +0000)]

- Updated default keylength in unbound-control-setup to 3k.

git-svn-id: file:///svn/unbound/trunk@3361 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 10 Mar 2015 10:29:55 +0000 (10:29 +0000)]

- Fix warning on sign compare in getentropy_linux.

git-svn-id: file:///svn/unbound/trunk@3360 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 10 Mar 2015 10:17:45 +0000 (10:17 +0000)]

- iana portlist update.

git-svn-id: file:///svn/unbound/trunk@3359 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 10 Mar 2015 10:03:45 +0000 (10:03 +0000)]

print svnroot for windows makedist. 1.5.4 in configure.ac

git-svn-id: file:///svn/unbound/trunk@3358 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Tue, 10 Mar 2015 08:00:40 +0000 (08:00 +0000)]

- Fix lintian warning in unbound-checkconf man page (from Andreas
Schulze).

git-svn-id: file:///svn/unbound/trunk@3356 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 9 Mar 2015 13:39:27 +0000 (13:39 +0000)]

- iana portlist update.

git-svn-id: file:///svn/unbound/trunk@3355 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Mon, 9 Mar 2015 13:30:37 +0000 (13:30 +0000)]

- Fix #644: harden-algo-downgrade option, if turned off, fixes the
reported excessive validation failure when multiple algorithms
are present. It allows the weakest algorithm to validate the zone.

git-svn-id: file:///svn/unbound/trunk@3354 be551aaa-1e26-0410-a405-d3ace91eadb9

commit | commitdiff | tree

Wouter Wijngaards [Thu, 5 Mar 2015 15:23:14 +0000 (15:23 +0000)]

- stats reports tcp usage, of incoming-num-tcp buffers.

git-svn-id: file:///svn/unbound/trunk@3353 be551aaa-1e26-0410-a405-d3ace91eadb9