src - OpenBSD base system

Age	Commit message (Collapse)	Author
2019-12-01	Allow forcing specific domains to be resolved by specific resolvers;	Otto Moerbeek
	Handles typical split-horzizon setups. ok florian@
2019-11-28	Track all elements of a forwarder configuration individually:	Florian Obser
	IP address, port and authentication name. This makes print_config less awkward and fixes a bug were an alternative port number was not printed.
2019-11-27	Move resolver preference storage to a struct which makes it easier to	Florian Obser
	reuse in the future. OK otto
2019-11-27	Nuke http captive portal detection; something better is coming.	Florian Obser
	OK otto
2019-11-09	Mechanically change the forwarder SIMPLEQ to a TAILQ. Needed for	Florian Obser
	future work to be able to easily delete elements while iterating. OK kn
2019-10-21	Optionally log blocked queries when using the block list.	Florian Obser
	OK benno
2019-05-13	Remove strict mode for now, it is in the way.	Florian Obser

2019-05-10	Implement DNS block lists. If unwind is queried for a domain	Florian Obser
	in the block list it answers with rcode REFUSED.
2019-04-02	Add a config option to specify the preference of name servers.	Florian Obser
	Unfortunately the nameserver types enums needed to be renamed to not collide with yacc tokens.
2019-04-01	Implement "Authentication Domain Names" configuration as per RFC 8310	Florian Obser
	section 7.1 for DoT servers. We are setting the CA cert bundle path (/etc/ssl/cert.pem) directly in libunbound so we need to losen pledge(2) a bit and allow rpath. At the same time we unveil only /etc/ssl/cert.pem. We can drop the chroot(2) since pledge(2) and unveil(2) give us more fine grained isolation. prodding by tb@. p.s. for portable it might be necessary to pass in a file descriptor from the parent, slurp in the file and then use X509_STORE_load_mem() (pointed out by sthen) in the guts of libunbound.
2019-02-17	s/unwind_/uw_/ to save screen real estate; fix style(9) issues while here	Florian Obser

2019-02-03	Captive portal detection for unwind(8).	Florian Obser

2019-01-29	notyet	Florian Obser

2019-01-27	Implement DNS over TLS (DoT).	Florian Obser

2019-01-27	unwind(8) traces its ancestry to rad(8) and inherited all of its include	Florian Obser
	directives, some of them no longer necessary. Cleanup by Caspar Schutijser, thank you very much!
2019-01-23	Import unwind(8).	Florian Obser
	unwind(8) is a hybrid validating stub & recursive resolver. It actively observes the local net to decide how to best resolve names. It can chose to recurse on it's own or talk to dhcp provided forwardes or statically defined forwarders in the config file. The intention is to be able to run it on localhost on every machine. "toss it in man" deraadt@