]> git.ipfire.org Git - thirdparty/bind9.git/commit
XoT: add support for client-side TLS parameters
authorArtem Boldariev <artem@boldariev.com>
Mon, 29 Nov 2021 21:09:51 +0000 (23:09 +0200)
committerArtem Boldariev <artem@boldariev.com>
Wed, 1 Dec 2021 10:00:28 +0000 (12:00 +0200)
commit7843fb4ece2c8f8e67c98118adf265164f1a3957
tree93fbd1c0214c8adc8537e5b0352b1f2f339f98d9
parent17d9a746814bbe4594e5fe247ab95ea2bd2ccfd3
XoT: add support for client-side TLS parameters

This commit adds support for client-side TLS parameters to XoT.

Prior to this commit all client-side TLS contexts were using default
parameters only, ignoring the options from the BIND's configuration
file.

Currently, the following 'tls' parameters are supported:

- protocols;
- ciphers;
- prefer-server-ciphers.
bin/named/transportconf.c
lib/dns/include/dns/transport.h
lib/dns/transport.c
lib/dns/xfrin.c