summaryrefslogtreecommitdiff
path: root/usr.sbin/unbound
AgeCommit message (Collapse)Author
2019-02-08Backport r5108 from unbound upstream, pointed out by florian@.Stuart Henderson
Shouldn't affect unwind but keeping in sync. r5108 | wouter | 2019-02-08 15:05:24 +0000 (Fri, 08 Feb 2019) | 3 lines - Fix #4225: clients seem to erroneously receive no answer with DNS-over-TLS and qname-minimisation.
2019-02-08merge unbound-1.9.0Stuart Henderson
2019-02-08import unbound 1.9.0, ok florian@Stuart Henderson
2019-01-10change order of pledge(2) promises to the canonical form.Ricardo Mestre
while here also use NULL as its second argument, instead of "", like it's done everywhere else in the tree. OK florian@
2019-01-10unbound-anchor needs to talk to the internet and write to the trustFlorian Obser
anchor file (create it if it doesn't exist). pledge & unveil accordingly OK sthen
2018-12-11merge 1.8.3Stuart Henderson
2018-12-11Fix dns64 allocation in wrong region for returned internal queries.Stuart Henderson
(This is the only code change in upstream release 1.8.3).
2018-12-04merge unbound 1.8.2Stuart Henderson
2018-12-04import unbound 1.8.2Stuart Henderson
2018-10-08merge 1.8.1Stuart Henderson
2018-10-08import unbound 1.8.1Stuart Henderson
tests on arm64 (danj@), sparc64 (kn@), amd64 (benno@ and me)
2018-09-20merge unbound 1.8.0Stuart Henderson
2018-09-20import unbound 1.8.0, tested by myself and benno@Stuart Henderson
2018-09-17remove binary doc files that aren't really useful to have in-treeStuart Henderson
2018-09-17merge conflictsStuart Henderson
2018-09-17import unbound 1.7.3, testing from benno@ and Brad.Stuart Henderson
2018-09-09merge in some missed bits from 1.7.0 to simplify update prep.Stuart Henderson
2018-09-09merge in some missed bits from 1.7.0 to simplify update prep.Stuart Henderson
(I think we actually had slightly beyond 1.7.0, I've left code bits but there are some SSL->TLS changes which go away with this and will come back with the update).
2018-03-29Check the result of strdup not the argument for NULL to report mallocFlorian Obser
errors. Pointed out by benno
2018-03-29update to unbound 1.7.0Florian Obser
testing tb, sthen OK benno, sthen
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2018-02-07update to unbound 1.6.8, testing millert, OK sthenFlorian Obser
2017-11-01Extra space in previousJeremie Courreges-Anglas
2017-11-01Make ip-transparent option work by using SO_BINDANY.Florian Obser
OK jca, benno
2017-09-29update to unbound-1.6.6, ok florianStuart Henderson
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2017-08-23sync with upstream; unbound 1.6.5Stuart Henderson
2017-08-23Fix trust anchor installation when two anchors are present. Concretely, fixesStuart Henderson
root.key creation if unbound is installed between sep11 and oct11 2017. Looks good to jca. This is the only substantial change in Unbound 1.6.5; next commit will sync ancillary files.
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2017-08-12update to unbound 1.6.4, ok florian@Stuart Henderson
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2017-02-26Use mkdir -p instead of install -d to create the obj/util directory.Theo Buehler
The latter defaults to 755, which doesn't play nicely with BUILDUSER. Problem reported by jmc and Jan Stary; tested by myself and jmc. ok ajacoutot
2017-02-21update to unbound-1.6.1 release; only version string changes compared toStuart Henderson
the release candidate we had.
2017-02-17Update to unbound-1.6.1rc3 - thanks millert@ and Brad for tests.Stuart Henderson
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2017-01-28Back out make(obj) hack: it doesn't solve the problem entirely and mayTheo Buehler
interfere with read-only src tree setups.
2017-01-24Add a workaround for the fact that 'install -d' without explicit modeTheo Buehler
defaults to 755, which is incompatible with WOBJUMASK. Make sure that obj/util has permissions :wobj 770, as all other directories in obj/. Issue also found by jmc, actual reason tracked down by ajacoutot. ok ajacoutot
2016-12-14Remove a resource leak by closing the socket in all error cases.Ricardo Mestre
The patch was already committed upstream. OK tb@ and sthen@. jca@ has a valid point that the error would be fatal and most likely the socket would not leak, nevertheless create_tcp_accept_sock() close the socket everytime so for clarity apply the same principal here in create_local_accept_sock()
2016-10-05Rewriting USER gets in the way of the de-escalation mechanism as itMartin Natano
shadows the real user's identity. ok deraadt
2016-09-06Backport unbound r3830/3831 from upstreadm, fixing an issue where it canStuart Henderson
become unresponsive and need to be restarted following a connectivity outage. From Brad, ok florian@ r3831 | wouter | 2016-08-23 04:49:01 -0400 (Tue, 23 Aug 2016) | 3 lines - Fix #804: lower num_target_queries for iterator also for failed lookups. r3830 | wouter | 2016-08-23 04:30:12 -0400 (Tue, 23 Aug 2016) | 3 lines - Fix #804: unbound stops responding after outage. Fixes queries that attempt to wait for an empty list of subqueries.
2016-06-22backport r3782, fixing qname-minimisation with various broken DNS servers,Stuart Henderson
often found at CDNs. - Use QTYPE=A for QNAME minimisation. - Keep track of number of time-outs when performing QNAME minimisation. Stop minimising when number of time-outs for a QNAME/QTYPE pair is more than three.
2016-06-22backport r3781, fix segfault in -hStuart Henderson
2016-06-22update to unbound-1.5.9. (there will be a follow-up commit to cherrypick aStuart Henderson
couple of post-1.5.9 patches). tests from Mark Patruck, danj, matthieu, millert. reads ok to jung, ok florian.
2014-11-20update to Unbound 1.5.0, ok sthen@Brad Smith
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2016-03-05update to unbound 1.5.8, ok florian@ jung@Stuart Henderson
2014-11-20update to Unbound 1.5.0, ok sthen@Brad Smith
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2016-01-19Backport r3602 | wouter | 2016-01-19 15:37:54 +0000 (Tue, 19 Jan 2016) | 3 linesStuart Henderson
- Squelch 'cannot assign requested address' log messages unless verbosity is high, it was spammed after network down. (problem reported by Philippe Meunier)
2015-12-15update to Unbound 1.5.7, looks fine to deraadt@.Stuart Henderson
Notable addition: implements optional support for qname minimisation (a privacy improvement; see draft-ietf-dnsop-qname-minimisation-07)
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-30 12:22:50 +0000