Age | Commit message (Collapse) | Author |
|
|
|
These are the direct sources from NLnet Labs upstream, minus these:
compat contrib libunbound/python pythonmod testcode testdata winrc
ok deraadt@ jakob@
|
|
|
|
to set one if needed. ok millert@
|
|
LibreSSL, BoringSSL and OpenSSL have all been redefining SSL_OP_* flags to
be 0 when support is removed. This breaks the error checking that nsd and
unbound were doing. It should check against the flag value itself to allow
for 0.
input deraadt@, jsing@
tweak + ok miod@, guenther@
|
|
These are the direct sources from NLnet Labs upstream, minus these:
compat contrib libunbound/python pythonmod testcode testdata winrc
ok deraadt@ jakob@
|
|
assignment and comparison.
ok deraadt@ looks correct millert@ jung@
|
|
These are the direct sources from NLnet Labs upstream, minus these:
compat contrib libunbound/python pythonmod testcode testdata winrc
ok deraadt@ jakob@
|
|
|
|
|
|
|
|
|
|
These are the direct sources from NLnet Labs upstream, minus these:
contrib doc/images examples packaging/fedora
ok deraadt@ jakob@
|
|
when this can be used.
tweaks ian@
OK ratchov@, sthen@
seems more useful to millert@
|
|
Found the hard way be me and independently discovered and reported
upstream at the same time in bug #651.
OK sthen, krw; "looks reasonable" kettenis.
OK to commit deraadt
|
|
These are the direct sources from NLnet Labs upstream, minus these:
compat contrib libunbound/python pythonmod testcode testdata winrc
ok deraadt@ jakob@
|
|
|
|
|
|
|
|
isn't suitable for OpenBSD and can cause confusion. ok jmc@ brad@
|
|
These are the direct sources from NLnet Labs upstream, minus these:
compat contrib libunbound/python pythonmod testcode testdata winrc
ok deraadt@ jakob@
|
|
- Fix scrubber with harden-glue turned off to reject NS (and other
not-address) records.
ok sthen@
|
|
These are the direct sources from NLnet Labs upstream, minus these:
compat contrib libunbound/python pythonmod testcode testdata winrc
ok deraadt@ jakob@
|
|
- Fix validation failure in case upstream forwarder (ISC BIND) does
not have the same trust anchors and decides to insert unsigned NS
record in authority section.
ok sthen@
|
|
These are the direct sources from NLnet Labs upstream, minus these:
compat contrib libunbound/python pythonmod testcode testdata winrc
ok deraadt@ jakob@
|
|
- Fix 0x20 capsforid fallback to omit gratuitous NS and additional
section changes.
ok sthen@
|
|
Suggested by deraadt@
|
|
ok deraadt@
|
|
These are the direct sources from NLnet Labs upstream, minus these:
compat contrib libunbound/python pythonmod testcode testdata winrc
ok deraadt@ jakob@
|
|
|
|
ok brad@, committed upstream (r3297)
|
|
|
|
ok brad@, committed upstream (r3297)
|
|
These are the direct sources from NLnet Labs upstream, minus these:
compat contrib libunbound/python pythonmod testcode testdata winrc
ok deraadt@ jakob@
|
|
|
|
|
|
OK sthen@
Unfortunately you only get the dedication to support the infrastructure
of the universally connected self-organizing Internet - and the
autonomy of its participants iff you are a paying customer with a
support contract.
|
|
These are the direct sources from NLnet Labs upstream, minus these:
compat contrib libunbound/python pythonmod testcode testdata winrc
ok deraadt@ jakob@
|
|
autoconf script. It doesn't seem to serve any purpose.
ok sthen@
|
|
noticed by deraadt@
|
|
|
|
your software on noexec filesystems...
|
|
- Removed 'increased limit open files' log message that is written
to console. It is only written on verbosity 4 and higher.
This keeps system bootup console cleaner.
- Fix #627: SSL_CTX_load_verify_locations return code not properly
checked.
- Fix that CD flag disables DNS64 processing, returning the DNSSEC
signed AAAA denial.
- Fix cdflag dns64 processing.
ok sthen@
|
|
|
|
|
|
These are the direct sources from NLnet Labs upstream, minus these:
compat contrib libunbound/python pythonmod testcode testdata winrc
ok deraadt@ jakob@
|
|
While there fix some nits.
Problem pointed out by deraadt@
Input jmc@, schwarze@
wouter@ committed a slightly different diff upstream. Pull that on out
of svn and hand merge it.
OK schwarze@
|
|
These are the direct sources from NLnet Labs upstream, minus these:
compat contrib libunbound/python pythonmod testcode testdata winrc
ok deraadt@ jakob@
|
|
Feedback and ok guenther@ deraadt@
Discussed with upstream, who is preparing an arc4random backend.
|
|
These are the direct sources from NLnet Labs upstream, minus these:
compat contrib libunbound/python pythonmod testcode testdata winrc
ok deraadt@ jakob@
|