]> git.ipfire.org Git - thirdparty/unbound.git/log
thirdparty/unbound.git
11 months ago- Fix spelling for the cache-min-negative-ttl entry in the branch-1.21.0 release-1.21.0
W.C.A. Wijngaards [Fri, 9 Aug 2024 12:04:25 +0000 (14:04 +0200)] 
- Fix spelling for the cache-min-negative-ttl entry in the
  example.conf.

11 months ago- Fix that for windows the module startup is called and sets up
W.C.A. Wijngaards [Thu, 8 Aug 2024 14:14:09 +0000 (16:14 +0200)] 
- Fix that for windows the module startup is called and sets up
  the module-config.

11 months ago- Set version number to 1.21.0 for release. release-1.21.0rc1
W.C.A. Wijngaards [Thu, 8 Aug 2024 07:30:53 +0000 (09:30 +0200)] 
- Set version number to 1.21.0 for release.

11 months ago- Fix CacheFlush issues with limit on NS RRs. Thanks to Yehuda Afek,
W.C.A. Wijngaards [Thu, 8 Aug 2024 07:28:44 +0000 (09:28 +0200)] 
- Fix CacheFlush issues with limit on NS RRs. Thanks to Yehuda Afek,
  Anat Bremler-Barr, Shoham Danino and Yuval Shavitt (Tel-Aviv
  University and Reichman University).

11 months ago- Fix CAMP issues with global quota. Thanks to Huayi Duan, Marco
W.C.A. Wijngaards [Thu, 8 Aug 2024 07:27:45 +0000 (09:27 +0200)] 
- Fix CAMP issues with global quota. Thanks to Huayi Duan, Marco
  Bearzi, Jodok Vieli, and Cagin Tanir from NetSec group, ETH Zurich.

11 months ago- Fix that alloc stats for forwards and hints are printed, and when
W.C.A. Wijngaards [Fri, 2 Aug 2024 13:51:40 +0000 (15:51 +0200)] 
- Fix that alloc stats for forwards and hints are printed, and when
  alloc stats is enabled, the unit test for unbound control waits for
  reloads to complete.

11 months agoChangelog note for #1090
W.C.A. Wijngaards [Fri, 2 Aug 2024 11:36:06 +0000 (13:36 +0200)] 
Changelog note for #1090
- Merge #1090: Cookie secret file. Adds
  `cookie-secret-file: "unbound_cookiesecrets.txt"` option to store
  cookie secrets for EDNS COOKIE secret rollover. The remote control
  add_cookie_secret, activate_cookie_secret and drop_cookie_secret
  commands can be used for rollover, the command print_cookie_secrets
  shows the values in use.

11 months agoCookie secret file (#1090)
Wouter Wijngaards [Fri, 2 Aug 2024 11:32:08 +0000 (13:32 +0200)] 
Cookie secret file (#1090)

* - cookie-secret-file, define struct.

* - cookie-secret-file, add config option, create, read and delete struct.

* - cookie-secret-file, check cookie secrets for cookie validation.

* - cookie-secret-file, unbound-control add_cookie_secret, drop_cookie_secret,
  activate_cookie_secret and print_cookie_secrets.

* - cookie-secret-file, test and fix locks, renew writes a fresh cookie,
  staging cookies get a fresh cookie and spelling in error message.

* - cookie-secret-file, remove unused variable from cookie file unit test.

* Remove unshare and faketime dependencies for cookie_file test; documentation nits.

---------

Co-authored-by: Yorgos Thessalonikefs <yorgos@nlnetlabs.nl>
11 months agoUpdate changelog.
W.C.A. Wijngaards [Fri, 2 Aug 2024 06:59:47 +0000 (08:59 +0200)] 
Update changelog.
- Fix testbound for alloc stats strdup in util/alloc.c.

11 months ago- Fix testbound for alloc stats strdup in util/alloc.c.
W.C.A. Wijngaards [Fri, 2 Aug 2024 06:58:22 +0000 (08:58 +0200)] 
- Fix testbound for alloc stats strdup in util/alloc.c.

11 months ago- Fix that alloc stats has strdup checks, it stops debuggers from
W.C.A. Wijngaards [Fri, 2 Aug 2024 06:54:54 +0000 (08:54 +0200)] 
- Fix that alloc stats has strdup checks, it stops debuggers from
  complaining about mismatch at free time.

11 months ago- Fix that the worker mem report with alloc stats does not attempt
W.C.A. Wijngaards [Thu, 1 Aug 2024 15:15:07 +0000 (17:15 +0200)] 
- Fix that the worker mem report with alloc stats does not attempt
  to print memory use of forwards and hints if they have been
  deleted already.

11 months ago- Fix dnstap test program, cleans up to have clean memory on exit,
W.C.A. Wijngaards [Thu, 1 Aug 2024 14:12:04 +0000 (16:12 +0200)] 
- Fix dnstap test program, cleans up to have clean memory on exit,
  for tap_data_free, does not delete NULL items. Also it does not try
  to free the tail, specifically in the free of the list since that
  picked up the next item in the list for its loop causing invalid
  free. Added internal unit test to unbound-dnstap-socket for that.

11 months ago- Fix for #1114: Fix that cache fill for forward-host names is
W.C.A. Wijngaards [Wed, 31 Jul 2024 09:42:44 +0000 (11:42 +0200)] 
- Fix for #1114: Fix that cache fill for forward-host names is
  performed, so that with nonzero target-fetch-policy it fetches
  forwarder addresses and uses them from cache. Also updated that
  delegation point cache fill routines use CDflag for AAAA message
  lookups, so that its negative lookup stops a recursion since the
  cache uses the bit for disambiguation for dns64 but the recursion
  uses CDflag for the AAAA target lookups, so the check correctly
  stops a useless recursion by its cache lookup.

12 months ago- Fix to document parameters of auth_zone_verify_zonemd_with_key.
W.C.A. Wijngaards [Tue, 30 Jul 2024 11:47:53 +0000 (13:47 +0200)] 
- Fix to document parameters of auth_zone_verify_zonemd_with_key.

12 months ago- Add root key 38696 from 2024 for DNSSEC validation. It is added
W.C.A. Wijngaards [Thu, 25 Jul 2024 09:42:22 +0000 (11:42 +0200)] 
- Add root key 38696 from 2024 for DNSSEC validation. It is added
  to the default root keys in unbound-anchor. The content can be
  inspected with `unbound-anchor -l`.

12 months ago- For #935 and #1104, clarify RPZ order and semantics.
Yorgos Thessalonikefs [Tue, 23 Jul 2024 23:54:02 +0000 (01:54 +0200)] 
- For #935 and #1104, clarify RPZ order and semantics.

12 months ago- Cleanup ede.tdir test.
Yorgos Thessalonikefs [Tue, 23 Jul 2024 18:22:25 +0000 (20:22 +0200)] 
- Cleanup ede.tdir test.

12 months ago- Fix link of unbound-dnstap-socket without openssl.
W.C.A. Wijngaards [Tue, 23 Jul 2024 13:06:54 +0000 (15:06 +0200)] 
- Fix link of unbound-dnstap-socket without openssl.

12 months ago- Fix link of dnstap without openssl.
W.C.A. Wijngaards [Tue, 23 Jul 2024 12:56:21 +0000 (14:56 +0200)] 
- Fix link of dnstap without openssl.

12 months ago- Fix uninitialized variable warning in create_tcp_accept_sock.
W.C.A. Wijngaards [Tue, 23 Jul 2024 08:42:36 +0000 (10:42 +0200)] 
- Fix uninitialized variable warning in create_tcp_accept_sock.

12 months ago- Fix to have empty definition when not supported for weak attribute.
W.C.A. Wijngaards [Tue, 23 Jul 2024 08:02:39 +0000 (10:02 +0200)] 
- Fix to have empty definition when not supported for weak attribute.

12 months ago- Fix compile when the compiler does not support the noreturn
W.C.A. Wijngaards [Tue, 23 Jul 2024 07:55:31 +0000 (09:55 +0200)] 
- Fix compile when the compiler does not support the noreturn
  attribute.

12 months ago- For #1110: Test for fallthrough attribute in configure and add
W.C.A. Wijngaards [Tue, 23 Jul 2024 07:47:42 +0000 (09:47 +0200)] 
- For #1110: Test for fallthrough attribute in configure and add
  fallthrough attribute annotations.

12 months agoMerge pull request #1110 from r-barnes/patch-1
Wouter Wijngaards [Tue, 23 Jul 2024 07:44:28 +0000 (09:44 +0200)] 
Merge pull request #1110 from r-barnes/patch-1

Make fallthrough explicit for libworker.c

12 months ago- Fix #1106: ratelimit-below-domain logs the wrong FROM address.
Yorgos Thessalonikefs [Tue, 23 Jul 2024 07:07:06 +0000 (09:07 +0200)] 
- Fix #1106: ratelimit-below-domain logs the wrong FROM address.

12 months agoMake fallthrough explicit for libworker.c 1110/head
Richard Barnes [Mon, 22 Jul 2024 23:37:38 +0000 (16:37 -0700)] 
Make fallthrough explicit for libworker.c

The code currently doesn't compile with LLVM's `-Wimplicit-fallthrough` flag, but the attribute works for both GCC (>=7) and LLVM.

12 months ago- Fix dnstap wakeup, a running wakeup timer is left to expire and not
W.C.A. Wijngaards [Fri, 19 Jul 2024 14:16:02 +0000 (16:16 +0200)] 
- Fix dnstap wakeup, a running wakeup timer is left to expire and not
  increased, a timer is started when the dtio thread is sleeping,
  the timer set disabled when the dtio thread goes to sleep, and
  after sleep the thread checks to see if there are messages to log
  immediately.

12 months ago- Add dnstap-sample-rate that logs only 1/N messages, for high volume
W.C.A. Wijngaards [Fri, 19 Jul 2024 08:04:40 +0000 (10:04 +0200)] 
- Add dnstap-sample-rate that logs only 1/N messages, for high volume
  server environments. Thanks Dan Luther.

12 months ago- For #1103: Fix to drop mesh state reference for the http2 stream
W.C.A. Wijngaards [Tue, 16 Jul 2024 12:23:10 +0000 (14:23 +0200)] 
- For #1103: Fix to drop mesh state reference for the http2 stream
  associated with the reply, not the currently active stream. And
  it does not remove it twice on a mesh_send_reply call. The reply
  h2_stream is NULL when not in use, for more initialisation.

12 months ago- For #1103: fix to also drop mesh state reference when the discard
W.C.A. Wijngaards [Mon, 15 Jul 2024 12:51:20 +0000 (14:51 +0200)] 
- For #1103: fix to also drop mesh state reference when the discard
  limit is reached, when there is an error making a new recursion
  state and when the connection is dropped with is_drop.

12 months agoMerge branch 'master' of github.com:NLnetLabs/unbound
W.C.A. Wijngaards [Fri, 12 Jul 2024 14:41:58 +0000 (16:41 +0200)] 
Merge branch 'master' of github.com:NLnetLabs/unbound

12 months ago- For #1103: fix to also drop mesh state reference when a h2 reply is
W.C.A. Wijngaards [Fri, 12 Jul 2024 14:41:46 +0000 (16:41 +0200)] 
- For #1103: fix to also drop mesh state reference when a h2 reply is
  dropped.

12 months ago- For #1102: clearer text for using interface-* options for the
Yorgos Thessalonikefs [Fri, 12 Jul 2024 14:29:44 +0000 (16:29 +0200)] 
- For #1102: clearer text for using interface-* options for the
  loopback interface.

12 months ago- Fix #1103: unbound 1.20.0 segmentation fault with nghttp2.
W.C.A. Wijngaards [Fri, 12 Jul 2024 14:11:29 +0000 (16:11 +0200)] 
- Fix #1103: unbound 1.20.0 segmentation fault with nghttp2.

12 months ago- Add RPZ tag tests in acl_interface.tdir.
Yorgos Thessalonikefs [Fri, 12 Jul 2024 13:38:12 +0000 (15:38 +0200)] 
- Add RPZ tag tests in acl_interface.tdir.

12 months ago- For #773: In contrib/unbound.service.in set unbound to start after
W.C.A. Wijngaards [Wed, 10 Jul 2024 12:05:43 +0000 (14:05 +0200)] 
- For #773: In contrib/unbound.service.in set unbound to start after
  network-online.target. Also for contrib/unbound_portable.service.in.

12 months ago- Update list of known EDE codes.
Yorgos Thessalonikefs [Tue, 9 Jul 2024 13:58:30 +0000 (15:58 +0200)] 
- Update list of known EDE codes.

12 months ago- Fix shadowed error string variable in validator dnskey handling.
W.C.A. Wijngaards [Mon, 8 Jul 2024 14:50:16 +0000 (16:50 +0200)] 
- Fix shadowed error string variable in validator dnskey handling.

12 months ago- Fixup algo_needs_reason string buffer length.
W.C.A. Wijngaards [Mon, 8 Jul 2024 13:38:27 +0000 (15:38 +0200)] 
- Fixup algo_needs_reason string buffer length.

12 months ago- Fix that validation reason failure that uses string print uses
W.C.A. Wijngaards [Mon, 8 Jul 2024 13:29:20 +0000 (15:29 +0200)] 
- Fix that validation reason failure that uses string print uses
  separate buffer that is passed, from the scratch validation buffer.

12 months ago- Don't check for message TTL changes if the RRsets remain the same.
Yorgos Thessalonikefs [Fri, 5 Jul 2024 17:58:19 +0000 (19:58 +0200)] 
- Don't check for message TTL changes if the RRsets remain the same.

12 months ago- Fix for #1099: Fix to check for deleted RRset when the contents
W.C.A. Wijngaards [Fri, 5 Jul 2024 15:54:46 +0000 (17:54 +0200)] 
- Fix for #1099: Fix to check for deleted RRset when the contents
  is updated and fetched after it is stored, and also check for a
  changed RRset.

12 months ago- Fix #1099: Unbound core dump on SIGSEGV.
W.C.A. Wijngaards [Fri, 5 Jul 2024 15:18:01 +0000 (17:18 +0200)] 
- Fix #1099: Unbound core dump on SIGSEGV.

12 months ago- Fix neater printout.
W.C.A. Wijngaards [Fri, 5 Jul 2024 12:11:26 +0000 (14:11 +0200)] 
- Fix neater printout.

12 months ago- Fix for neater printout for error for missing DS response.
W.C.A. Wijngaards [Fri, 5 Jul 2024 06:49:52 +0000 (08:49 +0200)] 
- Fix for neater printout for error for missing DS response.

12 months ago- Fix to print details about the failure to lookup a DNSKEY record
W.C.A. Wijngaards [Thu, 4 Jul 2024 12:51:18 +0000 (14:51 +0200)] 
- Fix to print details about the failure to lookup a DNSKEY record
  when validation fails due to the missing DNSKEY. Also for key prime
  and DS lookups.

12 months ago- Fix compile warnings in fptr_wlist.c.
W.C.A. Wijngaards [Wed, 3 Jul 2024 14:42:52 +0000 (16:42 +0200)] 
- Fix compile warnings in fptr_wlist.c.

12 months ago- Fix to remove unneeded linebreak in fptr_wlist.c.
W.C.A. Wijngaards [Wed, 3 Jul 2024 13:51:22 +0000 (15:51 +0200)] 
- Fix to remove unneeded linebreak in fptr_wlist.c.

12 months ago- Fix to use modstack_init in zonemd unit test.
W.C.A. Wijngaards [Wed, 3 Jul 2024 13:49:13 +0000 (15:49 +0200)] 
- Fix to use modstack_init in zonemd unit test.

12 months ago- Add unit test skip files and bison and flex output to gitignore.
W.C.A. Wijngaards [Wed, 3 Jul 2024 12:59:39 +0000 (14:59 +0200)] 
- Add unit test skip files and bison and flex output to gitignore.

12 months agoChangelog entry for #144 and #1098
W.C.A. Wijngaards [Wed, 3 Jul 2024 12:53:42 +0000 (14:53 +0200)] 
Changelog entry for #144 and #1098
- Fix #144: Port ipset to BSD pf tables.

12 months agoMerge pull request #1098 from NLnetLabs/ipset-pf-support
Wouter Wijngaards [Wed, 3 Jul 2024 12:49:16 +0000 (14:49 +0200)] 
Merge pull request #1098 from NLnetLabs/ipset-pf-support

Ipset pf support

12 months agoipset-pf-support, move startup and destartup to the front of the module 1098/head
W.C.A. Wijngaards [Wed, 3 Jul 2024 11:53:44 +0000 (13:53 +0200)] 
ipset-pf-support, move startup and destartup to the front of the module
func block functions, modstack call deinit function names, and detect
module change when no startup functions are needed.

12 months agoApply suggestions from code review
Wouter Wijngaards [Wed, 3 Jul 2024 11:08:51 +0000 (13:08 +0200)] 
Apply suggestions from code review

Co-authored-by: Yorgos Thessalonikefs <yorgos@nlnetlabs.nl>
12 months ago- Fix for repeated use of a DNAME record: first overallocate and then
Yorgos Thessalonikefs [Wed, 3 Jul 2024 08:08:44 +0000 (10:08 +0200)] 
- Fix for repeated use of a DNAME record: first overallocate and then
  move the exact size of the init value to avoid false positive heap
  overflow reads from address sanitizers.

12 months ago- Fix compile warning in worker pthread id printout.
W.C.A. Wijngaards [Tue, 2 Jul 2024 07:44:58 +0000 (09:44 +0200)] 
- Fix compile warning in worker pthread id printout.

12 months ago- Fix unused variable warning in do_cache_remove.
W.C.A. Wijngaards [Tue, 2 Jul 2024 07:33:22 +0000 (09:33 +0200)] 
- Fix unused variable warning in do_cache_remove.

12 months ago- Fix to remove unused include from the readzone test program.
W.C.A. Wijngaards [Tue, 2 Jul 2024 07:31:34 +0000 (09:31 +0200)] 
- Fix to remove unused include from the readzone test program.

12 months agoipset-pf-support, simplification of code.
W.C.A. Wijngaards [Tue, 2 Jul 2024 07:08:27 +0000 (09:08 +0200)] 
ipset-pf-support, simplification of code.

12 months ago- ipset-pf-support, fix to skip unit test if no pf dev.
W.C.A. Wijngaards [Mon, 1 Jul 2024 15:11:20 +0000 (17:11 +0200)] 
- ipset-pf-support, fix to skip unit test if no pf dev.

12 months agoipset-pf-support, fix to log error on failure to open pf.
W.C.A. Wijngaards [Mon, 1 Jul 2024 15:06:11 +0000 (17:06 +0200)] 
ipset-pf-support, fix to log error on failure to open pf.

12 months agoipset-pf-support, fix to remove unused include, free at end, adjust
W.C.A. Wijngaards [Mon, 1 Jul 2024 15:02:49 +0000 (17:02 +0200)] 
ipset-pf-support, fix to remove unused include, free at end, adjust
qname for comparison.

12 months agoCall module init init again, and new function startup and destartup.
W.C.A. Wijngaards [Mon, 1 Jul 2024 14:10:07 +0000 (16:10 +0200)] 
Call module init init again, and new function startup and destartup.
NULL can be used if the function is not used. Open shared ports during
reload. Deinit is called during reload.

12 months agoipset-pf-support, fix compilation, close of pf socket.
W.C.A. Wijngaards [Mon, 1 Jul 2024 12:54:45 +0000 (14:54 +0200)] 
ipset-pf-support, fix compilation, close of pf socket.

12 months agoMerge branch 'master' of https://github.com/madroach/unbound into ipset-pf-support
W.C.A. Wijngaards [Mon, 1 Jul 2024 12:36:33 +0000 (14:36 +0200)] 
Merge branch 'master' of https://github.com/madroach/unbound into ipset-pf-support

13 months ago- Fix ip-ratelimit-cookie setting, it was not applied.
W.C.A. Wijngaards [Thu, 27 Jun 2024 12:51:58 +0000 (14:51 +0200)] 
- Fix ip-ratelimit-cookie setting, it was not applied.

13 months ago- Explicitly set the RD bit for the mesh query flags when prefetching.
Yorgos Thessalonikefs [Wed, 26 Jun 2024 13:51:58 +0000 (15:51 +0200)] 
- Explicitly set the RD bit for the mesh query flags when prefetching.
  These queries have no waiting client but they need to be treated as
  recursive.

13 months ago- Fix pkg-config availability check in dnstap/dnstap.m4 and
Yorgos Thessalonikefs [Fri, 21 Jun 2024 12:34:12 +0000 (14:34 +0200)] 
- Fix pkg-config availability check in dnstap/dnstap.m4 and
  systemd.m4.
- autoconf.

13 months ago- Fix #1092: Ubuntu 22.04 Jammy fails to compile unbound 1.20.0; by
Yorgos Thessalonikefs [Wed, 19 Jun 2024 13:27:50 +0000 (15:27 +0200)] 
- Fix #1092: Ubuntu 22.04 Jammy fails to compile unbound 1.20.0; by
  adding helpful text for the Python interpreter version and allowing
  the default pkg-config unavailability error message to be shown.
- autoconf.

13 months ago- Fix #1091: Build fails with OpenSSL >= 3.0 built with
W.C.A. Wijngaards [Mon, 17 Jun 2024 10:28:45 +0000 (12:28 +0200)] 
- Fix #1091: Build fails with OpenSSL >= 3.0 built with
  OPENSSL_NO_DEPRECATED.

13 months ago- Add unit test for validation of repeated use of a DNAME record.
W.C.A. Wijngaards [Fri, 7 Jun 2024 09:56:19 +0000 (11:56 +0200)] 
- Add unit test for validation of repeated use of a DNAME record.

13 months ago- Fix validation for repeated use of a DNAME record.
W.C.A. Wijngaards [Thu, 6 Jun 2024 13:28:21 +0000 (15:28 +0200)] 
- Fix validation for repeated use of a DNAME record.

13 months ago- Fix typos for 'the the' in text.
W.C.A. Wijngaards [Thu, 6 Jun 2024 07:35:57 +0000 (09:35 +0200)] 
- Fix typos for 'the the' in text.

13 months ago- Fix memory leak in setup of dsa sig.
W.C.A. Wijngaards [Thu, 6 Jun 2024 07:30:09 +0000 (09:30 +0200)] 
- Fix memory leak in setup of dsa sig.

13 months ago- Merge #1080: AddressSanitizer detection in tdir tests and memory leak
Yorgos Thessalonikefs [Tue, 4 Jun 2024 15:30:43 +0000 (17:30 +0200)] 
- Merge #1080: AddressSanitizer detection in tdir tests and memory leak
  fixes.

13 months ago- Skip unbound-dnstap-socket unit test when not compiled with 1080/head
Yorgos Thessalonikefs [Tue, 4 Jun 2024 14:59:58 +0000 (16:59 +0200)] 
- Skip unbound-dnstap-socket unit test when not compiled with
  --enable-debug.

13 months ago- Fix to squelch connection reset by peer errors from log. And fix
W.C.A. Wijngaards [Mon, 3 Jun 2024 10:14:51 +0000 (12:14 +0200)] 
- Fix to squelch connection reset by peer errors from log. And fix
  that the tcp read errors are labeled as initial for the first calls.

14 months ago- Fix memory leak on exit for unbound-dnstap-socket; creates false negatives
Yorgos Thessalonikefs [Fri, 31 May 2024 10:11:17 +0000 (12:11 +0200)] 
- Fix memory leak on exit for unbound-dnstap-socket; creates false negatives
  during testing.

14 months ago- Fix memory leak when reload_keep_cache is used and num-threads changes.
Yorgos Thessalonikefs [Fri, 31 May 2024 10:09:35 +0000 (12:09 +0200)] 
- Fix memory leak when reload_keep_cache is used and num-threads changes.

14 months ago- Enable AddressSanitizer error detection in tdir tests.
Yorgos Thessalonikefs [Fri, 31 May 2024 10:08:43 +0000 (12:08 +0200)] 
- Enable AddressSanitizer error detection in tdir tests.

14 months ago- Fix for #1079: fix RPZ taglist in iterator callback that no client
W.C.A. Wijngaards [Thu, 30 May 2024 10:44:26 +0000 (12:44 +0200)] 
- Fix for #1079: fix RPZ taglist in iterator callback that no client
  info is like no taglist intersection.

14 months ago- Fix #1079: tags from tagged rpz zones are no longer honored after
W.C.A. Wijngaards [Thu, 30 May 2024 10:11:30 +0000 (12:11 +0200)] 
- Fix #1079: tags from tagged rpz zones are no longer honored after
  upgrade from 1.19.3 to 1.20.0.

14 months agoChangelog note for #1078.
W.C.A. Wijngaards [Wed, 29 May 2024 12:45:01 +0000 (14:45 +0200)] 
Changelog note for #1078.
- Merge #1078: Only check old pid if no username.

14 months agoMerge pull request #1078 from vopatek/master
Wouter Wijngaards [Wed, 29 May 2024 12:44:31 +0000 (14:44 +0200)] 
Merge pull request #1078 from vopatek/master

Only check old pid if no username

14 months agoOnly check old pid if no username 1078/head
Martin Vopatek [Wed, 29 May 2024 12:14:09 +0000 (14:14 +0200)] 
Only check old pid if no username

Do as the comment says and only check old pid if there is no username
configured.

14 months ago- Update patch to remove 'command' shell builtin and update error
Yorgos Thessalonikefs [Mon, 27 May 2024 15:17:48 +0000 (17:17 +0200)] 
- Update patch to remove 'command' shell builtin and update error
  text.

14 months agounbound-control-setup: check openssl
Michael Tokarev [Tue, 19 Apr 2022 15:14:01 +0000 (18:14 +0300)] 
unbound-control-setup: check openssl

Before doing anything, check if openssl binary (which we will use)
is available, and print a useful error message if it is not found.

14 months ago- Fix unused variable warning on compilation with no thread support.
Yorgos Thessalonikefs [Mon, 27 May 2024 12:56:52 +0000 (14:56 +0200)] 
- Fix unused variable warning on compilation with no thread support.

14 months ago- Fix spelling of tcp-idle-timeout docs, from Michael Tokarev.
W.C.A. Wijngaards [Mon, 27 May 2024 12:36:35 +0000 (14:36 +0200)] 
- Fix spelling of tcp-idle-timeout docs, from Michael Tokarev.

14 months ago- Fix to enable that SERVFAIL is cached, for a short period, for more
W.C.A. Wijngaards [Mon, 27 May 2024 11:53:16 +0000 (13:53 +0200)] 
- Fix to enable that SERVFAIL is cached, for a short period, for more
  cases. In the cases where limits are exceeded.

14 months agoChangelog entry for #1059:
Yorgos Thessalonikefs [Fri, 24 May 2024 13:24:52 +0000 (15:24 +0200)] 
Changelog entry for #1059:
- Fix #1059: Intermittent DNS blocking failure with local-zone and
  always_nxdomain. Addition of local_zones dynamically via
  unbound-control was not finding the zone's parent correctly.

14 months agoProper parent identification for dynamically entered local zones (#1076)
Yorgos Thessalonikefs [Fri, 24 May 2024 13:21:40 +0000 (15:21 +0200)] 
Proper parent identification for dynamically entered local zones (#1076)

- Fix #1059: Intermittent DNS blocking failure with local-zone and
  always_nxdomain. Addition of local_zones dynamically via
  unbound-control was not finding the zone's parent correctly.

14 months ago- Fix #1064: Unbound 1.20 Cachedb broken?
W.C.A. Wijngaards [Fri, 24 May 2024 07:06:48 +0000 (09:06 +0200)] 
- Fix #1064: Unbound 1.20 Cachedb broken?
Add unit test for validation status commit.

14 months ago- Fix for #1064: Fix that cachedb expired messages are considered
W.C.A. Wijngaards [Tue, 21 May 2024 15:06:18 +0000 (17:06 +0200)] 
- Fix for #1064: Fix that cachedb expired messages are considered
  insecure, and thus can be served to clients when dnssec is enabled.

14 months ago- Fix for parse end of forward-zone, stub-zone and view.
W.C.A. Wijngaards [Tue, 21 May 2024 10:04:57 +0000 (12:04 +0200)] 
- Fix for parse end of forward-zone, stub-zone and view.

14 months ago- Fix to print a parse error when config is read with no name for
W.C.A. Wijngaards [Tue, 21 May 2024 09:54:18 +0000 (11:54 +0200)] 
- Fix to print a parse error when config is read with no name for
  a forward-zone, stub-zone or view.

14 months agoChangelog note for #1073.
W.C.A. Wijngaards [Tue, 21 May 2024 09:52:47 +0000 (11:52 +0200)] 
Changelog note for #1073.
- Merge #1073: fix null pointer dereference issue in function
  ub_ctx_set_fwd.

14 months agoMerge pull request #1073 from xiaoxiaoafeifei/master
Wouter Wijngaards [Tue, 21 May 2024 09:51:52 +0000 (11:51 +0200)] 
Merge pull request #1073 from xiaoxiaoafeifei/master

fix null pointer dereference issue in function ub_ctx_set_fwd

14 months agofix null pointer dereference issue in function ub_ctx_set_fwd of file libunbound... 1073/head
zhailiangliang [Tue, 21 May 2024 08:40:16 +0000 (08:40 +0000)] 
fix null pointer dereference issue in function ub_ctx_set_fwd of file libunbound/libunbound.c