W.C.A. Wijngaards
72d7587138
Merge branch 'master' into zonemd
2020-11-10 08:10:27 +01:00
W.C.A. Wijngaards
3926035f30
Changelog note for #341 and layout change.
...
- Fix #341 : fixing a possible memory leak.
2020-11-10 08:07:28 +01:00
Wouter Wijngaards
140ab1f701
Merge pull request #341 from ihsinme/patch-1
...
fixing a possible memory leak.
2020-11-10 08:06:46 +01:00
ihsinme
18226f1c17
fixing a possible memory leak.
2020-11-09 18:41:22 +03:00
W.C.A. Wijngaards
e573f55dcd
zonemd, unit tests for insecure delegation zones.
2020-10-29 14:59:11 +01:00
W.C.A. Wijngaards
cd3d54b504
zonemd, unit test for failed zonemd hash after axfr with chain of trust,
...
zone is written after axfr, but before check. But zone is then rejected
after check completes..
2020-10-29 10:13:01 +01:00
W.C.A. Wijngaards
2757e0ff51
zonemd, unit test for failed zonemd hash after axfr, zone is rejected and not
...
written to file.
2020-10-29 10:00:59 +01:00
W.C.A. Wijngaards
43e32eae33
zonemd, unit test for zonemd from axfr with trust anchor.
2020-10-29 09:55:03 +01:00
W.C.A. Wijngaards
3ab188ea21
zonemd, please doxygen
...
zonemd, fix clang analyzer warning about null nsec3 salt pointer access.
2020-10-29 08:40:22 +01:00
W.C.A. Wijngaards
7ebb890a4a
zonemd, unit test for zonemd from file and trust anchor directly for DNSSEC.
2020-10-28 15:10:14 +01:00
W.C.A. Wijngaards
639a773c39
zonemd, unit test for chain of trust from recursion to check ZONEMD.
2020-10-27 13:44:44 +01:00
W.C.A. Wijngaards
d104727c91
- In man page note that tls-cert-bundle is read before permission
...
drop and chroot.
2020-10-27 09:00:26 +01:00
W.C.A. Wijngaards
94ac072f9b
zonemd, zonemd-reject-absence config for an auth-zone rejects the zone if
...
no ZONEMD is present.
2020-10-26 15:37:43 +01:00
W.C.A. Wijngaards
8e53f0b14f
zonemd, unit test with correct title.
2020-10-23 14:40:00 +02:00
W.C.A. Wijngaards
2b9569c7fe
zonemd, fix config_get_option for zonemd-permissive-mode and unit test
...
for zonemd-permissive-mode.
2020-10-23 14:38:57 +02:00
W.C.A. Wijngaards
165b048e07
zonemd, zonemd-permissive-mode: yes logs the failure but does not block
...
the zone after a ZONEMD verification failure.
2020-10-23 14:33:04 +02:00
W.C.A. Wijngaards
caee84d92e
zonemd, unit test for unbound-control auth_zone_reload with zonemd.
2020-10-23 12:10:30 +02:00
W.C.A. Wijngaards
89087ae294
zonemd, unbound-control auth_zone_reload errors when ZONEMD fails.
2020-10-23 11:47:00 +02:00
W.C.A. Wijngaards
c72ca35f08
unbound-control auth_zone_reload sets zone to nonexpired and
...
also updates the xfr soa values from the new zonefile contents.
2020-10-23 11:44:28 +02:00
W.C.A. Wijngaards
fb5f3f076d
zonemd, zonemds are checked when a zone is auth_zone_reload from file,
...
or reload with unbound-control.
2020-10-23 11:20:08 +02:00
W.C.A. Wijngaards
40e713e121
zonemd, unlock xfr lock for auth zone verify of zonemd for mesh new callback.
2020-10-23 10:14:21 +02:00
W.C.A. Wijngaards
1cb7d5a194
zonemd, unit test for auth zone zonemd axfr
...
zonemd, zonemds are checked after zone transfer.
2020-10-23 09:12:51 +02:00
W.C.A. Wijngaards
f854f4e867
zonemd, test for server start with zonemd from file.
2020-10-22 16:02:37 +02:00
W.C.A. Wijngaards
54d8473ec6
zonemd, pass module stack as function argument.
2020-10-22 13:31:37 +02:00
W.C.A. Wijngaards
6ea1ae17f7
zonemd, fix to harden against failure in pickup zonemd lookups.
2020-10-22 13:20:00 +02:00
W.C.A. Wijngaards
e09873e0c8
zonemd, zonemds are checked at start
2020-10-22 12:10:46 +02:00
W.C.A. Wijngaards
5d7e001c63
Merge branch 'master' into zonemd
2020-10-22 09:49:27 +02:00
W.C.A. Wijngaards
4990dae87d
- Fix that minimal-responses does not remove addresses from a priming
...
query response.
2020-10-22 09:26:27 +02:00
W.C.A. Wijngaards
ca39cfd6ae
- Fix #333 : Unbound Segmentation Fault w/ log_info Functions From
...
Python Mod.
2020-10-22 08:47:40 +02:00
George Thessalonikefs
0272889c44
- Fix #320 : potential memory corruption due to size miscomputation upton
...
custom region alloc init.
2020-10-21 17:44:04 +02:00
George Thessalonikefs
7c39cbc0a9
- Fix #327 : net/if.h check fails on some darwin versions; contribution by
...
Joshua Root.
2020-10-21 16:45:18 +02:00
W.C.A. Wijngaards
4ba45c34ed
zonemd, result of dnssec failures includes rrset and dnssec bogus reason.
2020-10-21 16:18:28 +02:00
W.C.A. Wijngaards
92eb12d26b
zonemd, unit test remove debug.
2020-10-21 15:59:29 +02:00
W.C.A. Wijngaards
7ac4eb229d
zonemd, unit tests for verifying DNSKEY with trust anchor failures.
2020-10-21 15:58:47 +02:00
W.C.A. Wijngaards
3c86bf51de
zonemd, unit tests for wrong NSEC RRSIGs.
2020-10-21 15:04:06 +02:00
W.C.A. Wijngaards
58d91646f1
zonemd, unit tests for DNSSEC type bitmaps.
2020-10-21 14:23:44 +02:00
W.C.A. Wijngaards
e1d119af7e
zonemd, unit tests for wrong DNSSEC signatures.
2020-10-21 13:17:42 +02:00
W.C.A. Wijngaards
c32c9a0ae2
zonemd, zonemd unit test in own file.
2020-10-21 12:04:53 +02:00
W.C.A. Wijngaards
1245457967
zonemd, fix that zonemd absence in unsigned zone does not invalidate zone.
2020-10-21 11:56:41 +02:00
W.C.A. Wijngaards
e8d29f973d
zonemd, fix that dnssec denial does not invalidate zone.
...
zonemd, unit test of nsec and nsec3 denial.
2020-10-21 11:51:30 +02:00
W.C.A. Wijngaards
2ebc4eae2f
Merge branch 'master' into zonemd
2020-10-21 10:59:32 +02:00
W.C.A. Wijngaards
ee3f26bb3d
Add verbosity to debug occasional missing q1-10.example.net, from timer.
2020-10-21 10:56:51 +02:00
W.C.A. Wijngaards
725d4822e7
Changelog note for #228
...
- Merge PR #228 : infra-keep-probing option to probe hosts that are
down. Add infra-keep-probing: yes option. Hosts that are down are
probed more frequently.
With the option turned on, it probes about every 120 seconds,
eventually after exponential backoff, and that keeps that way. If
traffic keeps up for the domain. It probes with one at a time, eg.
one query is allowed to probe, other queries within that 120 second
interval are turned away.
2020-10-21 10:35:47 +02:00
Wouter Wijngaards
5ec15bc333
Merge pull request #228 from NLnetLabs/infra-keep-probing
...
infra-keep-probing option to probe hosts that are down
2020-10-21 10:34:40 +02:00
W.C.A. Wijngaards
37354c8927
Merge branch 'master' into infra-keep-probing
2020-10-21 10:13:10 +02:00
W.C.A. Wijngaards
f675077502
zonemd, unit test improved debug output and unit test dnssec verify zonemd
2020-10-20 16:49:49 +02:00
W.C.A. Wijngaards
89618ff9ba
zonemd, unit test more zones.
2020-10-19 16:26:22 +02:00
George Thessalonikefs
6fdc822aa0
- Changelog entry for PR #324 : Add modern X.509v3 extensions to
...
unbound-control TLS certificates, by James Renken.
2020-10-19 15:10:17 +02:00
George Thessalonikefs
736a298eac
Merge branch 'master' of github.com:NLnetLabs/unbound
2020-10-19 15:04:15 +02:00
George Thessalonikefs
2527ad1d46
Merge branch 'jprenken-master'; fixes #316 .
2020-10-19 15:01:15 +02:00