Commit Graph

  • 4a6204585e
    Merge 767cec23ec into 5e9b6296b7 #1081 Kaleb Reid 2024-09-18 23:09:30 -0700
  • 55910aa518
    Merge 828a15472c into 5e9b6296b7 #1109 Willem Toorop 2024-09-18 23:07:50 -0700
  • 5e9b6296b7 - Add redis-command-timeout: 20 and redis-connect-timeout: 200, that can set the timeout separately for commands and the connection set up to the redis server. If they are not specified, the redis-timeout value is used. master W.C.A. Wijngaards 2024-09-17 13:10:34 +0200
  • 606e262fdd Changelog comment for #1140. - Merge #1140: Fix spelling mistake in comments. W.C.A. Wijngaards 2024-09-16 12:15:04 +0200
  • 819764663b
    Fix spelling mistake in comments (#1140) Tochus 2024-09-16 18:14:28 +0800
  • 0e1b9645e6
    Merge 3212426574 into 6bf2b2ac56 #1087 R. Christian McDonald 2024-09-16 09:35:07 +0200
  • 03e35ac442
    Merge 2ffc17e826 into 6bf2b2ac56 #1111 Willem Toorop 2024-09-15 11:13:55 +0800
  • 2b684688c0
    Fix spelling mistake in comments #1140 Tochus 2024-09-15 11:10:49 +0800
  • 41b893c6fa
    Merge 026af6b0ce into 6bf2b2ac56 #884 Andrey Rys 2024-09-13 14:31:42 +0200
  • 6bf2b2ac56 - Fix and add comments in testdata/val_negcache_ttl.rpl. Yorgos Thessalonikefs 2024-09-11 12:16:02 +0200
  • 5767b0933f - Add unit test for ttl limit for aggressive nsec. W.C.A. Wijngaards 2024-09-10 10:17:31 +0200
  • 24e0f0ab7e - Fix to limit NSEC and NSEC3 TTL when aggressive nsec is enabled (RFC9077). W.C.A. Wijngaards 2024-09-10 10:13:48 +0200
  • 1e75aae943
    Merge fd4af23351 into d3fdbba877 #742 zebop117 2024-09-07 18:47:33 -0400
  • d3fdbba877 - Fix comment to not trigger doxygen unknown command. Yorgos Thessalonikefs 2024-09-06 16:03:20 +0200
  • c36ce2a390 - Fix alloc-size and calloc-transposed-args compiler warnings. Yorgos Thessalonikefs 2024-09-06 16:01:30 +0200
  • 7ecff4113c - Fix config file read for dnstap-sample-rate. W.C.A. Wijngaards 2024-09-05 09:35:54 +0200
  • c94e689c81
    Merge feb101bc70 into 99824bc0e6 #921 David Gwynne 2024-09-04 11:51:33 -0300
  • 99824bc0e6 Changelog note for #1135 - Merge #1135: Add new IANA trust anchor. W.C.A. Wijngaards 2024-09-02 09:25:44 +0200
  • 9f09c36401
    Add new IANA trust anchor (#1135) Keelan Cannoo 2024-09-02 11:24:55 +0400
  • 34351c49e3
    Merge a00c28790b into a887284703 #1042 Wouter Wijngaards 2024-08-31 23:56:17 +0800
  • cd4dc80299 Add new IANA trust anchor #1135 Keelan10 2024-08-31 19:14:33 +0400
  • a887284703 - Fix for #1132, comment about adjusted copy of reference check. W.C.A. Wijngaards 2024-08-30 08:56:00 +0200
  • fb198b96f1 Changelog note for #1132 and fix for #1132. - Merge #1132: b.root renumbering. - Fix for #1132, adjusted unit test for change in the test file. W.C.A. Wijngaards 2024-08-30 08:51:56 +0200
  • 30bf996f39
    b.root renumbering (#1132) Loganaden Velvindron 2024-08-30 10:48:31 +0400
  • 8fd3e207a5
    b.root renumbering #1132 Loganaden Velvindron 2024-08-30 10:36:14 +0400
  • 52154e658a - Fix to print port number in logs for auth zone transfer activities. W.C.A. Wijngaards 2024-08-29 13:04:03 +0200
  • c06d3646a9 - Unit test for auth zone transfer TLS, and TLS failure. W.C.A. Wijngaards 2024-08-29 10:40:31 +0200
  • 42d421a305 - Fix that stub-zone and forward-zone clauses do not exhaust memory for long content. W.C.A. Wijngaards 2024-08-28 13:16:29 +0200
  • b5951ce1fa - Fix that when rpz is applied the message does not get picked up by the validator. That stops validation failures for the message. W.C.A. Wijngaards 2024-08-28 10:51:22 +0200
  • 6b37309705 - Fix #1130: Loads of logs: "validation failure: key for validation <domain>. is marked as invalid because of a previous" for non-DNSSEC signed zone. W.C.A. Wijngaards 2024-08-27 17:00:27 +0200
  • dc274fef9b - Fix documentation for cache_fill_missing function. W.C.A. Wijngaards 2024-08-23 13:19:15 +0200
  • db1167c8b3 - Fix #1127: error: "memory exhausted" when defining more than 9994 local-zones. W.C.A. Wijngaards 2024-08-23 09:22:07 +0200
  • 1e0cf1e86b - Merge patch to fix for glue that is outside of zone, with harden-unverified-glue, from Karthik Umashankar (Microsoft). Enabling this option protects the Unbound resolver against bad glue, that is unverified out of zone glue, by resolving them. It uses the records as last resort if there is no other working glue. W.C.A. Wijngaards 2024-08-23 08:56:48 +0200
  • 348df52e05 Enable ci back after debug. W.C.A. Wijngaards 2024-08-21 14:20:04 +0200
  • 6b3266aaf8 - Fix for char signedness warnings on NetBSD. W.C.A. Wijngaards 2024-08-21 14:15:23 +0200
  • 4f52461e81 - Add cross platform netbsd to github ci. W.C.A. Wijngaards 2024-08-21 14:03:11 +0200
  • 06d5031d22 - Add cross platform openbsd to github ci. W.C.A. Wijngaards 2024-08-21 13:50:55 +0200
  • 12119e2d3e ci for freebsd nicer, with libevent, faster without static compile, and with grouped output, also the pkg install is conditional on the platform. W.C.A. Wijngaards 2024-08-21 13:37:42 +0200
  • 19d53d5663 Fix for freebsd ci. W.C.A. Wijngaards 2024-08-21 13:24:54 +0200
  • 04e6f9e03b - Add cross platform freebsd to github ci. W.C.A. Wijngaards 2024-08-21 13:20:00 +0200
  • 3d350fa73d - Add iter-scrub-ns, iter-scrub-cname and max-global-quota configuration options. W.C.A. Wijngaards 2024-08-20 14:08:52 +0200
  • 015b2b0daf - Fix #1126: unbound-control-setup hangs while testing for openssl presence starting from version 1.21.0. W.C.A. Wijngaards 2024-08-19 15:51:47 +0200
  • a00c28790b Merge branch 'master' into fast-reload-option #1042 fast-reload-option W.C.A. Wijngaards 2024-08-16 09:14:19 +0200
  • 4b721dbc5d
    Merge 7d9f2c9694 into 5fa84d50bf #902 Willem Toorop 2024-08-15 11:36:35 +0200
  • 5fa84d50bf - Tag for release 1.21.0, the repository continues with 1.21.1 in development. W.C.A. Wijngaards 2024-08-15 11:01:41 +0200
  • 79e4c57851 - Fix spelling for the cache-min-negative-ttl entry in the example.conf. release-1.21.0 branch-1.21.0 W.C.A. Wijngaards 2024-08-09 14:04:25 +0200
  • 5abdd09095 - Fix that for windows the module startup is called and sets up the module-config. W.C.A. Wijngaards 2024-08-08 16:14:09 +0200
  • 158c1defe3 - Set version number to 1.21.0 for release. release-1.21.0rc1 W.C.A. Wijngaards 2024-08-08 09:30:53 +0200
  • b4519012dc - Fix CacheFlush issues with limit on NS RRs. Thanks to Yehuda Afek, Anat Bremler-Barr, Shoham Danino and Yuval Shavitt (Tel-Aviv University and Reichman University). W.C.A. Wijngaards 2024-08-08 09:28:44 +0200
  • ed883238fd - Fix CAMP issues with global quota. Thanks to Huayi Duan, Marco Bearzi, Jodok Vieli, and Cagin Tanir from NetSec group, ETH Zurich. W.C.A. Wijngaards 2024-08-08 09:27:45 +0200
  • 0f2f6025e7 - Fix that alloc stats for forwards and hints are printed, and when alloc stats is enabled, the unit test for unbound control waits for reloads to complete. W.C.A. Wijngaards 2024-08-02 15:51:40 +0200
  • 3cbf554e3b Changelog note for #1090 - Merge #1090: Cookie secret file. Adds cookie-secret-file: "unbound_cookiesecrets.txt" option to store cookie secrets for EDNS COOKIE secret rollover. The remote control add_cookie_secret, activate_cookie_secret and drop_cookie_secret commands can be used for rollover, the command print_cookie_secrets shows the values in use. W.C.A. Wijngaards 2024-08-02 13:36:06 +0200
  • ad21dbd1c2
    Cookie secret file (#1090) Wouter Wijngaards 2024-08-02 13:32:08 +0200
  • efcba9e6cf
    Merge pull request #1116 from NLnetLabs/cookie-secret-file-review #1090 Wouter Wijngaards 2024-08-02 11:50:39 +0200
  • 50cf55bdac Update changelog. - Fix testbound for alloc stats strdup in util/alloc.c. W.C.A. Wijngaards 2024-08-02 08:59:47 +0200
  • 6106528a50 - Fix testbound for alloc stats strdup in util/alloc.c. W.C.A. Wijngaards 2024-08-02 08:58:22 +0200
  • befa7d8cd8 - Fix that alloc stats has strdup checks, it stops debuggers from complaining about mismatch at free time. W.C.A. Wijngaards 2024-08-02 08:54:54 +0200
  • 2e9e9f8201 Remove unshare and faketime dependencies for cookie_file test; documentation nits. #1116 Yorgos Thessalonikefs 2024-08-01 21:59:31 +0200
  • 92be76fb89 - Fix that the worker mem report with alloc stats does not attempt to print memory use of forwards and hints if they have been deleted already. W.C.A. Wijngaards 2024-08-01 17:15:07 +0200
  • 9a6b6765cc - Fix dnstap test program, cleans up to have clean memory on exit, for tap_data_free, does not delete NULL items. Also it does not try to free the tail, specifically in the free of the list since that picked up the next item in the list for its loop causing invalid free. Added internal unit test to unbound-dnstap-socket for that. W.C.A. Wijngaards 2024-08-01 16:12:04 +0200
  • 03b511b1a2 - Fix for #1114: Fix that cache fill for forward-host names is performed, so that with nonzero target-fetch-policy it fetches forwarder addresses and uses them from cache. Also updated that delegation point cache fill routines use CDflag for AAAA message lookups, so that its negative lookup stops a recursion since the cache uses the bit for disambiguation for dns64 but the recursion uses CDflag for the AAAA target lookups, so the check correctly stops a useless recursion by its cache lookup. W.C.A. Wijngaards 2024-07-31 11:42:44 +0200
  • 6af28bed08 - Fix to document parameters of auth_zone_verify_zonemd_with_key. W.C.A. Wijngaards 2024-07-30 13:47:53 +0200
  • 2ffc17e826 Shumon's invalid query type EDE return #1111 features/invalid-query-type Willem Toorop 2024-07-25 19:29:09 -0700
  • f094f4ea3c - Add root key 38696 from 2024 for DNSSEC validation. It is added to the default root keys in unbound-anchor. The content can be inspected with unbound-anchor -l. W.C.A. Wijngaards 2024-07-25 11:42:22 +0200
  • 498e51a256 - fast-reload, fix copy_cfg type casts and memory leak on config parse failure. W.C.A. Wijngaards 2024-07-24 15:09:32 +0200
  • fb448df1b8 - fast-reload, fix documentation for auth_zone_verify_zonemd_with_key. W.C.A. Wijngaards 2024-07-24 14:34:49 +0200
  • 8f904f2e09 Merge branch 'master' into fast-reload-option W.C.A. Wijngaards 2024-07-24 14:13:44 +0200
  • 238d9c6096 - fast-reload, additional test cases, cache change and tag changes. W.C.A. Wijngaards 2024-07-24 14:13:22 +0200
  • c717debace - For #935 and #1104, clarify RPZ order and semantics. Yorgos Thessalonikefs 2024-07-24 01:54:02 +0200
  • 7d4d21764a - Cleanup ede.tdir test. Yorgos Thessalonikefs 2024-07-23 20:22:25 +0200
  • e8703dbfe8 - fast-reload, extend lock checks for repeat thread ids. W.C.A. Wijngaards 2024-07-23 16:59:20 +0200
  • 4578def2c3 Merge branch 'master' into fast-reload-option W.C.A. Wijngaards 2024-07-23 15:07:36 +0200
  • 83e6977f06 - Fix link of unbound-dnstap-socket without openssl. W.C.A. Wijngaards 2024-07-23 15:06:54 +0200
  • d7aec6eac9 Merge branch 'master' into fast-reload-option W.C.A. Wijngaards 2024-07-23 14:56:46 +0200
  • 671e11552c - Fix link of dnstap without openssl. W.C.A. Wijngaards 2024-07-23 14:56:21 +0200
  • f046ce2b39 - fast-reload, fix warnings and comm_point_internal for tcp wouldblock calls. W.C.A. Wijngaards 2024-07-23 13:41:42 +0200
  • ce876459c7 - fast-reload, fix warnings for call types in windows compile. W.C.A. Wijngaards 2024-07-23 11:56:55 +0200
  • 9973990e13 Merge branch 'master' into fast-reload-option W.C.A. Wijngaards 2024-07-23 11:22:13 +0200
  • c4541e634b - Fix uninitialized variable warning in create_tcp_accept_sock. W.C.A. Wijngaards 2024-07-23 10:42:36 +0200
  • 30da725e67 - Fix to have empty definition when not supported for weak attribute. W.C.A. Wijngaards 2024-07-23 10:02:39 +0200
  • 8de5ae3552 - Fix compile when the compiler does not support the noreturn attribute. W.C.A. Wijngaards 2024-07-23 09:55:31 +0200
  • 5bea29b01c - For #1110: Test for fallthrough attribute in configure and add fallthrough attribute annotations. W.C.A. Wijngaards 2024-07-23 09:47:42 +0200
  • 89c9eafa44
    Merge pull request #1110 from r-barnes/patch-1 Wouter Wijngaards 2024-07-23 09:44:28 +0200
  • 3512eaec48 - Fix #1106: ratelimit-below-domain logs the wrong FROM address. Yorgos Thessalonikefs 2024-07-23 09:07:06 +0200
  • f9bd35dcfa
    Make fallthrough explicit for libworker.c #1110 Richard Barnes 2024-07-22 16:37:38 -0700
  • 7d9f2c9694 - Bail out early if ede is not present. #902 features/error-reporting-poc Yorgos Thessalonikefs 2024-07-21 21:11:37 +0200
  • d5d7a62750 - Fix typo. Yorgos Thessalonikefs 2024-07-21 21:00:29 +0200
  • c47233766b - Update documentation. Yorgos Thessalonikefs 2024-07-21 20:32:03 +0200
  • 828a15472c Start with SVCB AliasMode processing #1109 ietf120-hackathon/svcb-alias-processing Willem Toorop 2024-07-21 10:11:11 -0700
  • e9a4f313c1 Use DNS Error Reporting instead of the eder nickname Yorgos Thessalonikefs 2024-07-21 04:49:49 +0200
  • d5093757ed Fix buffer protection and agent domain validity Yorgos Thessalonikefs 2024-07-21 00:27:47 +0200
  • ea17c0a105 - Remove NOERROR DNS Error Reporting; not part of final RFC. - Use assigned IANA EDNS0 Option Code for Report-Channel. Yorgos Thessalonikefs 2024-07-20 20:33:10 +0200
  • 308847a4a4 Generated configparser and configlexer are not versioned in master anymore Yorgos Thessalonikefs 2024-07-20 20:09:52 +0200
  • a3f3da4212 Merge branch 'master' into features/error-reporting-poc Yorgos Thessalonikefs 2024-07-20 19:39:37 +0200
  • 3af4e44646 - Fix dnstap wakeup, a running wakeup timer is left to expire and not increased, a timer is started when the dtio thread is sleeping, the timer set disabled when the dtio thread goes to sleep, and after sleep the thread checks to see if there are messages to log immediately. W.C.A. Wijngaards 2024-07-19 16:16:02 +0200
  • c3dd6a2dbd - Add dnstap-sample-rate that logs only 1/N messages, for high volume server environments. Thanks Dan Luther. W.C.A. Wijngaards 2024-07-19 10:04:40 +0200
  • 48a41ffe15
    Merge f085701975 into 8fca3e7c5b #1058 R. Christian McDonald 2024-07-18 09:09:51 +0800
  • 892a4ef2f4
    Merge 1aa8519b39 into 8fca3e7c5b #1057 R. Christian McDonald 2024-07-18 09:09:48 +0800
  • 5bf8dab401
    Merge d42138976d into 8fca3e7c5b #434 Ryan R Sundberg 2024-07-18 09:08:52 +0800
  • a70264926c
    Merge 6e87b5d281 into 8fca3e7c5b #967 dalegaard 2024-07-18 09:08:42 +0800