clones/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2024-09-21 14:47:09 +00:00
Code Issues Packages Projects Releases Wiki Activity
7,788 Commits 27 Branches 196 Tags 104 MiB
606e262fdd
Commit Graph

35 Commits

Author SHA1 Message Date
Dimitris Apostolou
c21d6af617
Fix typos 2021-11-13 16:56:15 +02:00
George Thessalonikefs
f9e3475776 - Fix unused-function warning when compiling with --enable-dnscrypt. 2021-03-22 14:31:58 +01:00
W.C.A. Wijngaards
4c4ca2433c - Fix #385: autoconf 2.70 impacts unbound build 2021-01-05 10:27:13 +01:00
W.C.A. Wijngaards
b6f0b1af86 - Fix compile error in dnscrypt. 2019-12-03 16:44:24 +01:00
W.C.A. Wijngaards
68027ab145 - Fix Client NONCE Generation used for Server NONCE, 
reported by X41 D-Sec.
 2019-12-03 16:42:14 +01:00
W.C.A. Wijngaards
4a7ebfabcf - Fix Bad Indentation, in dnscrypt.c, 
reported by X41 D-Sec.
 2019-12-03 16:34:53 +01:00
W.C.A. Wijngaards
d63ec2dfcb - Fix Terminating Quotes not Written, reported by X41 D-Sec. 2019-11-20 14:01:01 +01:00
W.C.A. Wijngaards
02080f6b18 - Fix Integer Overflows in Size Calculations, 
reported by X41 D-Sec.
 2019-11-19 16:32:40 +01:00
Maryse47
ce0e9bef45 Consistently use /dev/urandom instead of /dev/random in scripts and docs 
Unbound code call /dev/urandom (see below)  but various docs and scripts
mention /dev/random which may be confusing.

https://github.com/NLnetLabs/unbound/blob/release-1.9.3/compat/arc4random.c#L107
https://github.com/NLnetLabs/unbound/blob/release-1.9.3/compat/getentropy_linux.c#L251
https://github.com/NLnetLabs/unbound/blob/release-1.9.3/compat/getentropy_osx.c
https://github.com/NLnetLabs/unbound/blob/release-1.9.3/compat/getentropy_solaris.c#L116
 2019-09-19 17:40:49 +02:00
Wouter Wijngaards
b09cfb8fb1 - dnscrypt.c removed sizeof to get array bounds. 
git-svn-id: file:///svn/unbound/trunk@4921 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-10-02 10:47:12 +00:00
Wouter Wijngaards
6fc79a70a3 Fixup tests for checklocks. Add auth axfr test for socket code. 
git-svn-id: file:///svn/unbound/trunk@4511 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-02-05 15:33:32 +00:00
Wouter Wijngaards
35bd34f8e6 - Fix #2141 - for libsodium detect lack of entropy in chroot, print 
a message and exit.


git-svn-id: file:///svn/unbound/trunk@4398 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-11-03 15:08:14 +00:00
Wouter Wijngaards
8752326d8c Turn duplicates into warnings for dnscrypt, and 
fix declaration and code mix warning.


git-svn-id: file:///svn/unbound/trunk@4374 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-10-17 07:36:51 +00:00
Wouter Wijngaards
52e2331dd4 - [dnscrypt] prevent dnscrypt-secret-key, dnscrypt-provider-cert 
duplicates
- [dnscrypt] introduce dnscrypt-provider-cert-rotated option,
  from Manu Bretelle.
	This option allows handling multiple cert/key pairs while only
	distributing some of them.
	In order to reliably match a client magic with a given key without
	strong assumption as to how those were generated, we need both key and
	cert. Likewise, in order to know which ES version should be used.
	On the other hand, when rotating a cert, it can be desirable to only
	serve the new cert but still be able to handle clients that are still
	using the old certs's public key.
	The `dnscrypt-provider-cert-rotated` allow to instruct unbound to not
	publish the cert as part of the DNS's provider_name's TXT answer.



git-svn-id: file:///svn/unbound/trunk@4373 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-10-17 07:34:49 +00:00
Wouter Wijngaards
ee8f07a686 - Fix #1440: [dnscrypt] client nonce cache. 
git-svn-id: file:///svn/unbound/trunk@4351 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-09-18 08:55:08 +00:00
Wouter Wijngaards
7d17a926ac - Spelling fixes, from Phil Porada. 
git-svn-id: file:///svn/unbound/trunk@4344 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-09-15 14:29:28 +00:00
Wouter Wijngaards
a17400b45e dnscrypt cache size configuration option. 
git-svn-id: file:///svn/unbound/trunk@4328 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-08-31 11:58:29 +00:00
Wouter Wijngaards
425dec3037 - Fix #1417: [dnscrypt] shared secret cache counters, and works when 
dnscrypt is not enabled.


git-svn-id: file:///svn/unbound/trunk@4326 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-08-31 08:06:17 +00:00
Wouter Wijngaards
cfcf5437f4 - new keys and certs for dnscrypt tests. 
git-svn-id: file:///svn/unbound/trunk@4318 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-08-29 08:48:19 +00:00
Wouter Wijngaards
9a44fc5142 - Small fixes for the shared secret cache patch. 
git-svn-id: file:///svn/unbound/trunk@4313 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-08-28 11:05:51 +00:00
Wouter Wijngaards
e3cc298ffd - Fix #1415: [dnscrypt] shared secret cache, patch from 
Manu Bretelle.


git-svn-id: file:///svn/unbound/trunk@4312 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-08-28 10:55:41 +00:00
Wouter Wijngaards
80f310e2a4 - Fix #1415: patch to free dnscrypt environment on reload. 
git-svn-id: file:///svn/unbound/trunk@4310 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-08-28 07:49:42 +00:00
Wouter Wijngaards
2288777334 - Fix dnscrypt chacha cert support ifdefs. 
- Fix dnscrypt chacha cert unit test escapes in grep.
- Remove asynclook tests that cause test and purifier problems.


git-svn-id: file:///svn/unbound/trunk@4233 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-06-16 08:20:44 +00:00
Wouter Wijngaards
33de42e729 - Detect chacha for dnscrypt at configure time. 
git-svn-id: file:///svn/unbound/trunk@4215 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-06-08 08:17:38 +00:00
Wouter Wijngaards
b9196d48d2 - Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher. 
git-svn-id: file:///svn/unbound/trunk@4208 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-06-06 12:52:26 +00:00
Ralph Dolmans
b93fd4e0c9 - Fix #1274: automatically trim chroot path from dnscrypt key/cert paths (from 
Manu Bretelle).


git-svn-id: file:///svn/unbound/trunk@4204 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-06-01 09:51:05 +00:00
Wouter Wijngaards
897635b32b - Fix #1217: Add metrics to unbound-control interface showing 
crypted, cert request, plaintext and malformed queries (from
  Manu Bretelle).


git-svn-id: file:///svn/unbound/trunk@4084 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-04-03 09:03:32 +00:00
Wouter Wijngaards
e56c63172c include for gettimeofday 
git-svn-id: file:///svn/unbound/trunk@4083 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-03-27 06:50:29 +00:00
Wouter Wijngaards
3f7af974a3 - Remove (now unused) event2 include from dnscrypt code. 
git-svn-id: file:///svn/unbound/trunk@4082 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-03-27 06:27:22 +00:00
Wouter Wijngaards
80029d63f0 - Fix doxygen for dnscrypt files. 
git-svn-id: file:///svn/unbound/trunk@4073 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-03-21 08:50:17 +00:00
Wouter Wijngaards
fadd01e93e nicer gettimeofday error handling. 
git-svn-id: file:///svn/unbound/trunk@4071 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-03-20 15:35:00 +00:00
Wouter Wijngaards
29ac62d7b0 Fixup compile without libsodium. 
git-svn-id: file:///svn/unbound/trunk@4070 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-03-20 15:30:53 +00:00
Wouter Wijngaards
451e1900a9 more fixups. 
git-svn-id: file:///svn/unbound/trunk@4067 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-03-20 15:16:19 +00:00
Wouter Wijngaards
86f0baf146 - make depend, autoconf, remove warnings about statement before var. 
git-svn-id: file:///svn/unbound/trunk@4066 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-03-20 15:09:06 +00:00
Wouter Wijngaards
7c9584e408 - #1217. DNSCrypt support, with --enable-dnscrypt, libsodium and then 
enabled in the config file from Manu Bretelle.


git-svn-id: file:///svn/unbound/trunk@4065 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-03-20 14:55:31 +00:00