]> git.ipfire.org Git - thirdparty/unbound.git/log
thirdparty/unbound.git
5 years agoUse stored TCP address for callback.
W.C.A. Wijngaards [Wed, 9 Dec 2020 11:07:16 +0000 (12:07 +0100)] 
Use stored TCP address for callback.

5 years agoNo need for mk_local_addr, can pass the sockaddr structure.
W.C.A. Wijngaards [Wed, 9 Dec 2020 10:56:35 +0000 (11:56 +0100)] 
No need for mk_local_addr, can pass the sockaddr structure.

5 years agoUse calloc and freeaddrinfo
W.C.A. Wijngaards [Wed, 9 Dec 2020 10:43:16 +0000 (11:43 +0100)] 
Use calloc and freeaddrinfo

5 years agoconfigure test for struct sockaddr_in6 sin6_len member
W.C.A. Wijngaards [Wed, 9 Dec 2020 10:41:07 +0000 (11:41 +0100)] 
configure test for struct sockaddr_in6 sin6_len member

5 years agoRemove useless tcp_read_fd member from struct
W.C.A. Wijngaards [Wed, 9 Dec 2020 10:37:04 +0000 (11:37 +0100)] 
Remove useless tcp_read_fd member from struct

5 years agoFor TCP store picked outgoing interface and pass it.
W.C.A. Wijngaards [Wed, 9 Dec 2020 10:34:39 +0000 (11:34 +0100)] 
For TCP store picked outgoing interface and pass it.

5 years agoFor the DoH create_http_handler, also pass the socket.
W.C.A. Wijngaards [Wed, 9 Dec 2020 10:29:57 +0000 (11:29 +0100)] 
For the DoH create_http_handler, also pass the socket.

5 years agoFix that it passes the actual UDP address instead of first
W.C.A. Wijngaards [Wed, 9 Dec 2020 10:27:33 +0000 (11:27 +0100)] 
Fix that it passes the actual UDP address instead of first
and pass NULL to make tcp log compile.

5 years agoFix test code function declaration.
W.C.A. Wijngaards [Wed, 9 Dec 2020 10:27:14 +0000 (11:27 +0100)] 
Fix test code function declaration.

5 years agoRemove unused whitespace, add missing header change, make it compile
W.C.A. Wijngaards [Wed, 9 Dec 2020 10:13:58 +0000 (11:13 +0100)] 
Remove unused whitespace, add missing header change, make it compile

5 years agoImport the patches from the files in the tarball in
W.C.A. Wijngaards [Wed, 9 Dec 2020 10:00:51 +0000 (11:00 +0100)] 
Import the patches from the files in the tarball in
issue #365 https://github.com/NLnetLabs/unbound/files/5659923/patches.tar.gz
from iruzanov.  The merge conflicts are fixed, but no changes are made
to the patched code.

5 years ago- iana portlist updated.
W.C.A. Wijngaards [Thu, 3 Dec 2020 09:27:19 +0000 (10:27 +0100)] 
- iana portlist updated.

5 years ago- make depend.
W.C.A. Wijngaards [Thu, 3 Dec 2020 09:26:37 +0000 (10:26 +0100)] 
- make depend.

5 years agoCode repo continues for 1.13.1 in development.
W.C.A. Wijngaards [Thu, 3 Dec 2020 09:14:14 +0000 (10:14 +0100)] 
Code repo continues for 1.13.1 in development.

5 years ago- Fix update, with write event check with streamreuse and fastopen.
W.C.A. Wijngaards [Wed, 2 Dec 2020 15:17:26 +0000 (16:17 +0100)] 
- Fix update, with write event check with streamreuse and fastopen.

5 years ago- Fix for #283: fix stream reuse and tcp fast open.
W.C.A. Wijngaards [Wed, 2 Dec 2020 14:42:24 +0000 (15:42 +0100)] 
- Fix for #283: fix stream reuse and tcp fast open.

5 years ago- Fix on windows to ignore connection failure on UDP, unless verbose.
W.C.A. Wijngaards [Wed, 2 Dec 2020 10:58:24 +0000 (11:58 +0100)] 
- Fix on windows to ignore connection failure on UDP, unless verbose.

5 years ago- Fix unbound-dnstap-socket to not use log routine from interrupt
W.C.A. Wijngaards [Wed, 2 Dec 2020 10:51:54 +0000 (11:51 +0100)] 
- Fix unbound-dnstap-socket to not use log routine from interrupt
  handler and not print so frequently when invoked in sequence.

5 years agoMerge branch 'master' into features/nsid
Willem Toorop [Wed, 2 Dec 2020 10:19:32 +0000 (11:19 +0100)] 
Merge branch 'master' into features/nsid

5 years agoDocument existence of option
Willem Toorop [Wed, 2 Dec 2020 09:58:05 +0000 (10:58 +0100)] 
Document existence of option

5 years ago- Fix #356: deadlock when listening tcp.
W.C.A. Wijngaards [Wed, 2 Dec 2020 09:10:27 +0000 (10:10 +0100)] 
- Fix #356: deadlock when listening tcp.

5 years ago- Fix #360: for the additionally reported TCP Fast Open makes TCP
W.C.A. Wijngaards [Wed, 2 Dec 2020 08:51:26 +0000 (09:51 +0100)] 
- Fix #360: for the additionally reported TCP Fast Open makes TCP
  connections fail, in that case we print a hint that this is
  happening with the error in the logs.

5 years agoNSID for Unbound
Willem Toorop [Tue, 1 Dec 2020 14:19:17 +0000 (15:19 +0100)] 
NSID for Unbound

5 years ago- Fix #358: Squelch udp connect 'no route to host' errors on low
W.C.A. Wijngaards [Tue, 1 Dec 2020 08:09:13 +0000 (09:09 +0100)] 
- Fix #358: Squelch udp connect 'no route to host' errors on low
  verbosity.

5 years agoChangelog entry for rc tags 1.13.0rc3 and rc4. release-1.13.0rc4
W.C.A. Wijngaards [Mon, 30 Nov 2020 11:52:04 +0000 (12:52 +0100)] 
Changelog entry for rc tags 1.13.0rc3 and rc4.

5 years ago- Fix assertion failure on double callback when iterator loses
W.C.A. Wijngaards [Mon, 30 Nov 2020 08:41:33 +0000 (09:41 +0100)] 
- Fix assertion failure on double callback when iterator loses
  interest in query at head of line that then has the tcp stream
  not kept for reuse.

5 years ago- Fix contrib/metrics.awk for FreeBSD awk compatibility. release-1.13.0rc3
W.C.A. Wijngaards [Fri, 27 Nov 2020 14:08:31 +0000 (15:08 +0100)] 
- Fix contrib/metrics.awk for FreeBSD awk compatibility.

5 years agorpz: fix local data lookup for nsdname 340/head
mb [Fri, 27 Nov 2020 11:22:56 +0000 (12:22 +0100)] 
rpz: fix local data lookup for nsdname

5 years agorpz: cleanups
mb [Fri, 27 Nov 2020 09:52:01 +0000 (10:52 +0100)] 
rpz: cleanups

5 years agorpz: continue nsdname and minor cleanups
mb [Fri, 27 Nov 2020 09:46:54 +0000 (10:46 +0100)] 
rpz: continue nsdname and minor cleanups

5 years ago- Fix compile warnings in rpz initialization.
W.C.A. Wijngaards [Fri, 27 Nov 2020 09:11:14 +0000 (10:11 +0100)] 
- Fix compile warnings in rpz initialization.

5 years agorpz: nsdname actions
mb [Fri, 27 Nov 2020 09:09:54 +0000 (10:09 +0100)] 
rpz: nsdname actions

5 years ago- Fix compile warnings for windows.
W.C.A. Wijngaards [Fri, 27 Nov 2020 09:01:55 +0000 (10:01 +0100)] 
- Fix compile warnings for windows.

5 years ago- Fix when use free buffer to initialize rbtree for stream reuse.
W.C.A. Wijngaards [Fri, 27 Nov 2020 08:57:08 +0000 (09:57 +0100)] 
- Fix when use free buffer to initialize rbtree for stream reuse.

5 years ago- Fix compile warning for type cast in http2_submit_dns_response.
W.C.A. Wijngaards [Fri, 27 Nov 2020 08:08:48 +0000 (09:08 +0100)] 
- Fix compile warning for type cast in http2_submit_dns_response.

5 years agorpz: add testbound nsdname script (stub)
mb [Thu, 26 Nov 2020 11:26:23 +0000 (12:26 +0100)] 
rpz: add testbound nsdname script (stub)

5 years ago- Clear readagain upon decommission of pending tcp structure.
W.C.A. Wijngaards [Thu, 26 Nov 2020 11:23:18 +0000 (12:23 +0100)] 
- Clear readagain upon decommission of pending tcp structure.

5 years agorpz: strip .rpz-nsdname suffix when inserting trigger
mb [Thu, 26 Nov 2020 11:16:33 +0000 (12:16 +0100)] 
rpz: strip .rpz-nsdname suffix when inserting trigger

5 years ago- Fix that after failed read, the readagain cannot activate.
W.C.A. Wijngaards [Thu, 26 Nov 2020 11:12:52 +0000 (12:12 +0100)] 
- Fix that after failed read, the readagain cannot activate.

5 years agorpz: nsdname stubs
mb [Thu, 26 Nov 2020 10:33:49 +0000 (11:33 +0100)] 
rpz: nsdname stubs

5 years ago- For #352: contrib/metrics.awk for Prometheus style metrics output.
W.C.A. Wijngaards [Thu, 26 Nov 2020 10:00:48 +0000 (11:00 +0100)] 
- For #352: contrib/metrics.awk for Prometheus style metrics output.

5 years ago- Fix to omit UDP receive errors from log, if verbosity low.
W.C.A. Wijngaards [Thu, 26 Nov 2020 08:39:54 +0000 (09:39 +0100)] 
- Fix to omit UDP receive errors from log, if verbosity low.
  These happen because of udp-connect.

5 years ago- tag for the 1.13.0rc2 release. release-1.13.0rc2
W.C.A. Wijngaards [Wed, 25 Nov 2020 13:03:32 +0000 (14:03 +0100)] 
- tag for the 1.13.0rc2 release.

5 years ago- Fix readagain and writeagain callback functions for comm point
W.C.A. Wijngaards [Wed, 25 Nov 2020 12:46:28 +0000 (13:46 +0100)] 
- Fix readagain and writeagain callback functions for comm point
  cleanup.

5 years ago- Attempt fix for libevent state in tcp reuse cases after a packet
W.C.A. Wijngaards [Wed, 25 Nov 2020 11:12:35 +0000 (12:12 +0100)] 
- Attempt fix for libevent state in tcp reuse cases after a packet
  is written.

5 years ago- Fix memory leak for edns client tag opcode config element.
W.C.A. Wijngaards [Wed, 25 Nov 2020 11:04:38 +0000 (12:04 +0100)] 
- Fix memory leak for edns client tag opcode config element.

5 years ago- Remove debug commands from reuse tests.
W.C.A. Wijngaards [Wed, 25 Nov 2020 11:02:51 +0000 (12:02 +0100)] 
- Remove debug commands from reuse tests.

5 years agorpz: minor cleanups
mb [Wed, 25 Nov 2020 10:45:33 +0000 (11:45 +0100)] 
rpz: minor cleanups

5 years ago- Better fix for reuse tree comparison for is-tls sockets. Where
W.C.A. Wijngaards [Wed, 25 Nov 2020 09:22:11 +0000 (10:22 +0100)] 
- Better fix for reuse tree comparison for is-tls sockets.  Where
  the tree key identity is preserved after cleanup of the TLS state.

5 years ago- Fix udp-connect on FreeBSD, do send calls on connected UDP socket.
W.C.A. Wijngaards [Wed, 25 Nov 2020 08:55:01 +0000 (09:55 +0100)] 
- Fix udp-connect on FreeBSD, do send calls on connected UDP socket.

5 years ago- with udp-connect ignore connection refused with UDP timeouts.
W.C.A. Wijngaards [Wed, 25 Nov 2020 08:41:06 +0000 (09:41 +0100)] 
- with udp-connect ignore connection refused with UDP timeouts.

5 years agoUse size_t in place of int for length 355/head
Jeffrey Walton [Wed, 25 Nov 2020 00:24:48 +0000 (19:24 -0500)] 
Use size_t in place of int for length

5 years agoMake ICANN Update CA and DS Trust Key static data
Jeffrey Walton [Wed, 25 Nov 2020 00:23:08 +0000 (19:23 -0500)] 
Make ICANN Update CA and DS Trust Key static data

5 years ago- Fix padding of struct regional for 32bit systems.
W.C.A. Wijngaards [Tue, 24 Nov 2020 16:06:54 +0000 (17:06 +0100)] 
- Fix padding of struct regional for 32bit systems.

5 years ago- Fix crash when TLS connection is closed prematurely, when
W.C.A. Wijngaards [Tue, 24 Nov 2020 15:58:51 +0000 (16:58 +0100)] 
- Fix crash when TLS connection is closed prematurely, when
  reuse tree comparison is not properly identical to insertion.

5 years agorpz: fix forged response
mb [Tue, 24 Nov 2020 15:29:15 +0000 (16:29 +0100)] 
rpz: fix forged response

5 years ago- tag for the 1.13.0rc1 release. release-1.13.0rc1
W.C.A. Wijngaards [Tue, 24 Nov 2020 14:01:44 +0000 (15:01 +0100)] 
- tag for the 1.13.0rc1 release.

5 years ago- Fix one port unit test for udp-connect.
W.C.A. Wijngaards [Tue, 24 Nov 2020 13:16:06 +0000 (14:16 +0100)] 
- Fix one port unit test for udp-connect.

5 years ago- iana portlist updated.
W.C.A. Wijngaards [Tue, 24 Nov 2020 12:17:15 +0000 (13:17 +0100)] 
- iana portlist updated.

5 years agorpz: fix forged messages
mb [Tue, 24 Nov 2020 11:02:59 +0000 (12:02 +0100)] 
rpz: fix forged messages

5 years agorpz: update ext_state in the iterator
mb [Tue, 24 Nov 2020 10:33:16 +0000 (11:33 +0100)] 
rpz: update ext_state in the iterator

5 years agorpz: forge responses
mb [Tue, 24 Nov 2020 10:25:01 +0000 (11:25 +0100)] 
rpz: forge responses

5 years agorpz: apply trigger at query time not response time
mb [Tue, 24 Nov 2020 08:33:08 +0000 (09:33 +0100)] 
rpz: apply trigger at query time not response time

5 years ago- set version of main branch to 1.13.0 for upcoming release.
Wouter Wijngaards [Tue, 24 Nov 2020 07:28:08 +0000 (08:28 +0100)] 
- set version of main branch to 1.13.0 for upcoming release.

5 years agoChangelog note for #283.
Wouter Wijngaards [Tue, 24 Nov 2020 07:23:24 +0000 (08:23 +0100)] 
Changelog note for #283.
- Merge PR #283 : Stream reuse.  This implements upstream stream
  reuse for performing several queries over the same TCP or TLS
  channel.

5 years agoMerge pull request #283 from NLnetLabs/stream-reuse
Wouter Wijngaards [Tue, 24 Nov 2020 07:21:07 +0000 (08:21 +0100)] 
Merge pull request #283 from NLnetLabs/stream-reuse

Stream reuse

5 years agoMerge branch 'master' into stream-reuse 283/head
Wouter Wijngaards [Tue, 24 Nov 2020 07:20:07 +0000 (08:20 +0100)] 
Merge branch 'master' into stream-reuse

5 years agoChangelog note for #313:
George Thessalonikefs [Mon, 23 Nov 2020 16:37:46 +0000 (17:37 +0100)] 
Changelog note for #313:
- Merge PR #313 from Ralph Dolmans: Replace edns-client-tag with
  edns-client-string option.

5 years agoMerge pull request #313 from NLnetLabs/edns-string
gthess [Mon, 23 Nov 2020 16:34:42 +0000 (17:34 +0100)] 
Merge pull request #313 from NLnetLabs/edns-string

Replace edns-client-tag with edns-client-string option

5 years agoMerge branch 'master' into edns-string 313/head
George Thessalonikefs [Mon, 23 Nov 2020 15:58:30 +0000 (16:58 +0100)] 
Merge branch 'master' into edns-string

5 years agoMerge branch 'master' into edns-string
George Thessalonikefs [Mon, 23 Nov 2020 15:35:58 +0000 (16:35 +0100)] 
Merge branch 'master' into edns-string

5 years ago- Update manpage.
George Thessalonikefs [Mon, 23 Nov 2020 15:32:00 +0000 (16:32 +0100)] 
- Update manpage.

5 years agoFix writepid for retvalue 0.
W.C.A. Wijngaards [Mon, 23 Nov 2020 13:17:58 +0000 (14:17 +0100)] 
Fix writepid for retvalue 0.

5 years agoFurther fix for CVE-2020-28935, so the chown is omitted when the pidfile
W.C.A. Wijngaards [Mon, 23 Nov 2020 12:48:04 +0000 (13:48 +0100)] 
Further fix for CVE-2020-28935, so the chown is omitted when the pidfile
fails due to a symlink.

5 years ago- Fix for #303 CVE-2020-28935 : Fix that symlink does not interfere
W.C.A. Wijngaards [Mon, 23 Nov 2020 12:42:11 +0000 (13:42 +0100)] 
- Fix for #303 CVE-2020-28935 : Fix that symlink does not interfere
  with chown of pidfile.

5 years ago- Option to toggle udp-connect, default is enabled.
W.C.A. Wijngaards [Mon, 23 Nov 2020 10:06:53 +0000 (11:06 +0100)] 
- Option to toggle udp-connect, default is enabled.

5 years agostream reuse, up connection reuse time to 60 seconds.
W.C.A. Wijngaards [Mon, 23 Nov 2020 09:36:22 +0000 (10:36 +0100)] 
stream reuse, up connection reuse time to 60 seconds.

5 years ago+ - Fix #347: IP_DONTFRAG broken on Apple xcode 12.2.
W.C.A. Wijngaards [Mon, 23 Nov 2020 08:56:01 +0000 (09:56 +0100)] 
+       - Fix #347: IP_DONTFRAG broken on Apple xcode 12.2.

5 years agoMerge branch 'master' into stream-reuse
W.C.A. Wijngaards [Mon, 23 Nov 2020 08:49:26 +0000 (09:49 +0100)] 
Merge branch 'master' into stream-reuse

5 years agostream reuse, fix review comments.
W.C.A. Wijngaards [Mon, 23 Nov 2020 08:46:26 +0000 (09:46 +0100)] 
stream reuse, fix review comments.

5 years agostream reuse, fix review comments.
W.C.A. Wijngaards [Mon, 23 Nov 2020 08:44:56 +0000 (09:44 +0100)] 
stream reuse, fix review comments.

5 years agostream reuse, review comments.
W.C.A. Wijngaards [Mon, 23 Nov 2020 08:40:15 +0000 (09:40 +0100)] 
stream reuse, review comments.

5 years agostream reuse, fix review comments.
W.C.A. Wijngaards [Mon, 23 Nov 2020 08:37:26 +0000 (09:37 +0100)] 
stream reuse, fix review comments.

5 years agostream reuse, rename ssl_reuse test to tls_reuse test.
W.C.A. Wijngaards [Mon, 23 Nov 2020 08:35:58 +0000 (09:35 +0100)] 
stream reuse, rename ssl_reuse test to tls_reuse test.

5 years agostream reuse, renamed ssl_reuse.tdir to tls_reuse.tdir.
W.C.A. Wijngaards [Mon, 23 Nov 2020 08:33:28 +0000 (09:33 +0100)] 
stream reuse, renamed ssl_reuse.tdir to tls_reuse.tdir.

5 years agostream reuse, debug output with verbose level instead of number.
W.C.A. Wijngaards [Mon, 23 Nov 2020 08:29:26 +0000 (09:29 +0100)] 
stream reuse, debug output with verbose level instead of number.

5 years agoChangelog notes for #350 and #351
W.C.A. Wijngaards [Mon, 23 Nov 2020 07:58:41 +0000 (08:58 +0100)] 
Changelog notes for #350 and #351
- Merge #351 from dvzrv: Add AF_NETLINK to set of allowed socket
  address families.
- Fix #350: with the AF_NETLINK permission, to fix 1.12.0 error:
  failed to list interfaces: getifaddrs: Address family not
  supported by protocol.

5 years agoMerge pull request #351 from dvzrv/issues/350
Wouter Wijngaards [Mon, 23 Nov 2020 07:57:23 +0000 (08:57 +0100)] 
Merge pull request #351 from dvzrv/issues/350

Add AF_NETLINK to set of allowed socket address families

5 years agoAdd AF_NETLINK to set of allowed socket address families 351/head
David Runge [Sat, 21 Nov 2020 13:10:39 +0000 (14:10 +0100)] 
Add AF_NETLINK to set of allowed socket address families

contrib/unbound{,_portable}.service.in:
With the changes introduced in f6a527c25ad2e60e2dc129fff3605e6ec48c30f2
it is now necessary to also allow access to the AF_NETLINK socket
address family to be able to get information from interfaces.

Without the AF_NETLINK address family the systemd service errors with:

```
error: failed to list interfaces: getifaddrs: Address family not
supported by protocol
```

Fixes #350

5 years agorpz: continue work on the nsip trigger
mb [Mon, 16 Nov 2020 11:42:23 +0000 (12:42 +0100)] 
rpz: continue work on the nsip trigger

5 years agorpz: more nsip
mb [Mon, 16 Nov 2020 08:49:06 +0000 (09:49 +0100)] 
rpz: more nsip

5 years agorpz: stubs for nsip triggers
mb [Fri, 13 Nov 2020 13:33:11 +0000 (14:33 +0100)] 
rpz: stubs for nsip triggers

5 years ago- Retry for interfaces with unused ports if possible.
W.C.A. Wijngaards [Thu, 12 Nov 2020 12:36:37 +0000 (13:36 +0100)] 
- Retry for interfaces with unused ports if possible.

5 years agoChangelog note.
W.C.A. Wijngaards [Thu, 12 Nov 2020 11:28:10 +0000 (12:28 +0100)] 
Changelog note.

5 years ago- Fix to connect() to UDP destinations, default turned on,
W.C.A. Wijngaards [Thu, 12 Nov 2020 11:27:41 +0000 (12:27 +0100)] 
- Fix to connect() to UDP destinations, default turned on,
  this lowers vulnerability to ICMP side channels.

5 years agoMerge branch 'master' into edns-string
Ralph Dolmans [Wed, 11 Nov 2020 10:38:06 +0000 (11:38 +0100)] 
Merge branch 'master' into edns-string

5 years agoMerge branch 'master' into edns-string
Ralph Dolmans [Wed, 11 Nov 2020 10:37:32 +0000 (11:37 +0100)] 
Merge branch 'master' into edns-string

5 years agoRPZ: stub nsip testbound scenario
mb [Wed, 11 Nov 2020 10:21:54 +0000 (11:21 +0100)] 
RPZ: stub nsip testbound scenario

5 years ago- Fix #343: Fail to build --with-libnghttp2 with error: 'SSIZE_MAX'
W.C.A. Wijngaards [Tue, 10 Nov 2020 14:31:20 +0000 (15:31 +0100)] 
- Fix #343: Fail to build --with-libnghttp2 with error: 'SSIZE_MAX'
  undeclared.

5 years ago- Fix memory leak after fix for possible memory leak failure.
W.C.A. Wijngaards [Tue, 10 Nov 2020 12:51:56 +0000 (13:51 +0100)] 
- Fix memory leak after fix for possible memory leak failure.