]> git.ipfire.org Git - thirdparty/bind9.git/commit
Initial support for DNS-over-HTTP(S)
authorArtem Boldariev <artem@boldariev.com>
Mon, 7 Dec 2020 12:19:10 +0000 (14:19 +0200)
committerOndřej Surý <ondrej@sury.org>
Wed, 3 Feb 2021 11:06:17 +0000 (12:06 +0100)
commit08da09bc76c83e82c7aa19641ccda54eb24fa155
tree56f6d7b913d98651b2aba63ea0ea537cabdbc02e
parent7a9608136056f7cbe97a0a7888e7a2dcb2343f5e
Initial support for DNS-over-HTTP(S)

This commit completes the support for DNS-over-HTTP(S) built on top of
nghttp2 and plugs it into the BIND. Support for both GET and POST
requests is present, as required by RFC8484.

Both encrypted (via TLS) and unencrypted HTTP/2 connections are
supported. The latter are mostly there for debugging/troubleshooting
purposes and for the means of encryption offloading to third-party
software (as might be desirable in some environments to simplify TLS
certificates management).
25 files changed:
CHANGES
bin/named/include/named/globals.h
bin/named/named.rst
bin/named/server.c
bin/tests/system/conf.sh.common
bin/tests/system/get_ports.sh
bin/tests/system/run.sh.in
lib/isc/include/isc/netmgr.h
lib/isc/netmgr/http.c
lib/isc/netmgr/netmgr-int.h
lib/isc/netmgr/netmgr.c
lib/isc/netmgr/tcp.c
lib/isc/netmgr/tlsstream.c
lib/isc/tests/Makefile.am
lib/isc/tests/doh_test.c [new file with mode: 0644]
lib/isc/tests/tls_test_cert_key.h [new file with mode: 0644]
lib/isc/tls.c
lib/isc/url.c
lib/isc/win32/libisc.def.in
lib/ns/include/ns/interfacemgr.h
lib/ns/include/ns/listenlist.h
lib/ns/interfacemgr.c
lib/ns/listenlist.c
lib/ns/win32/libns.def
util/copyrights