summaryrefslogtreecommitdiff
path: root/usr.sbin/unbound
AgeCommit message (Collapse)Author
2016-06-22backport r3782, fixing qname-minimisation with various broken DNS servers,Stuart Henderson
often found at CDNs. - Use QTYPE=A for QNAME minimisation. - Keep track of number of time-outs when performing QNAME minimisation. Stop minimising when number of time-outs for a QNAME/QTYPE pair is more than three.
2016-06-22backport r3781, fix segfault in -hStuart Henderson
2016-06-22update to unbound-1.5.9. (there will be a follow-up commit to cherrypick aStuart Henderson
couple of post-1.5.9 patches). tests from Mark Patruck, danj, matthieu, millert. reads ok to jung, ok florian.
2014-11-20update to Unbound 1.5.0, ok sthen@Brad Smith
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2016-03-05update to unbound 1.5.8, ok florian@ jung@Stuart Henderson
2014-11-20update to Unbound 1.5.0, ok sthen@Brad Smith
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2016-01-19Backport r3602 | wouter | 2016-01-19 15:37:54 +0000 (Tue, 19 Jan 2016) | 3 linesStuart Henderson
- Squelch 'cannot assign requested address' log messages unless verbosity is high, it was spammed after network down. (problem reported by Philippe Meunier)
2015-12-15update to Unbound 1.5.7, looks fine to deraadt@.Stuart Henderson
Notable addition: implements optional support for qname minimisation (a privacy improvement; see draft-ietf-dnsop-qname-minimisation-07)
2012-08-23update to unbound 1.4.18Stuart Henderson
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2015-12-10minor changes, mostly whitespace, from unbound 1.5.7Stuart Henderson
2015-12-10use echo rather than here documents for compat with some other shells;Stuart Henderson
from unbound 1.5.7 (reducing the main diff..)
2015-12-10typo fixes from 1.5.7Stuart Henderson
2015-12-10typo fix, from 1.5.7Stuart Henderson
2015-12-09typo fixes from unbound-1.5.7rc1Stuart Henderson
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2015-11-05mergeStuart Henderson
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2015-10-27Fix manpage for empty pidfile. Pointed out by millert@Stuart Henderson
2015-10-27Don't use a pidfile in unbound by default. Retain the ability in unbound.confStuart Henderson
to set one if needed. ok millert@
2015-10-27Fix nsd and unbound's error checking with SSL_CTX_set_options().Doug Hogan
LibreSSL, BoringSSL and OpenSSL have all been redefining SSL_OP_* flags to be 0 when support is removed. This breaks the error checking that nsd and unbound were doing. It should check against the flag value itself to allow for 0. input deraadt@, jsing@ tweak + ok miod@, guenther@
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2015-09-05Avoid unintended problems with operator precedence when doing anJonathan Gray
assignment and comparison. ok deraadt@ looks correct millert@ jung@
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2015-07-16remove dead files (moved from unbound/ldns/ to unbound/sldns/)Stuart Henderson
2015-07-16mergeStuart Henderson
2015-07-16update to Unbound 1.5.4, ok florian@, looks sane deraadt@Stuart Henderson
2014-03-16import unbound 1.4.22 upstream sources, ok brad@Stuart Henderson
2012-03-26Import ldns 1.6.12, needed for Unbound, to work on in-tree.Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: contrib doc/images examples packaging/fedora ok deraadt@ jakob@
2015-03-11Point people to local-zone and stub-zone in unbound.conf and explainFlorian Obser
when this can be used. tweaks ian@ OK ratchov@, sthen@ seems more useful to millert@
2015-03-08Fix crash on unbound-control reload introduced in update to 1.5.2.Florian Obser
Found the hard way be me and independently discovered and reported upstream at the same time in bug #651. OK sthen, krw; "looks reasonable" kettenis. OK to commit deraadt
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2015-02-17remove svn-only fileStuart Henderson
2015-02-17merge conflictsStuart Henderson
2015-02-17Update to unbound 1.5.2rc1, ok brad@Stuart Henderson
2015-02-17remove "EXAMPLE" section containing a minimal example unbound.conf; the sampleStuart Henderson
isn't suitable for OpenBSD and can cause confusion. ok jmc@ brad@
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2015-02-11Merge in a commit from upstream..Brad Smith
- Fix scrubber with harden-glue turned off to reject NS (and other not-address) records. ok sthen@
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2015-02-10Merge in a commit from upstream..Brad Smith
- Fix validation failure in case upstream forwarder (ISC BIND) does not have the same trust anchors and decides to insert unsigned NS record in authority section. ok sthen@
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2015-01-31Merge in a commit from upstream..Brad Smith
- Fix 0x20 capsforid fallback to omit gratuitous NS and additional section changes. ok sthen@
2015-01-20Revert some $OpenBSD$ additions about which there are doubts.Kenneth R Westerback
Suggested by deraadt@
2015-01-20Missing $OpenBSD$'s.Kenneth R Westerback
ok deraadt@
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2015-01-05zap file which is unused and already removed upstreamStuart Henderson
2015-01-05use new ub_conf_dir to set the directory for keys and certificatesStuart Henderson
ok brad@, committed upstream (r3297)
2015-01-05regenStuart Henderson