summaryrefslogtreecommitdiff
path: root/usr.sbin/unbound
AgeCommit message (Collapse)Author
2017-02-26Use mkdir -p instead of install -d to create the obj/util directory.Theo Buehler
The latter defaults to 755, which doesn't play nicely with BUILDUSER. Problem reported by jmc and Jan Stary; tested by myself and jmc. ok ajacoutot
2017-02-21update to unbound-1.6.1 release; only version string changes compared toStuart Henderson
the release candidate we had.
2017-02-17Update to unbound-1.6.1rc3 - thanks millert@ and Brad for tests.Stuart Henderson
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2017-01-28Back out make(obj) hack: it doesn't solve the problem entirely and mayTheo Buehler
interfere with read-only src tree setups.
2017-01-24Add a workaround for the fact that 'install -d' without explicit modeTheo Buehler
defaults to 755, which is incompatible with WOBJUMASK. Make sure that obj/util has permissions :wobj 770, as all other directories in obj/. Issue also found by jmc, actual reason tracked down by ajacoutot. ok ajacoutot
2016-12-14Remove a resource leak by closing the socket in all error cases.Ricardo Mestre
The patch was already committed upstream. OK tb@ and sthen@. jca@ has a valid point that the error would be fatal and most likely the socket would not leak, nevertheless create_tcp_accept_sock() close the socket everytime so for clarity apply the same principal here in create_local_accept_sock()
2016-10-05Rewriting USER gets in the way of the de-escalation mechanism as itMartin Natano
shadows the real user's identity. ok deraadt
2016-09-06Backport unbound r3830/3831 from upstreadm, fixing an issue where it canStuart Henderson
become unresponsive and need to be restarted following a connectivity outage. From Brad, ok florian@ r3831 | wouter | 2016-08-23 04:49:01 -0400 (Tue, 23 Aug 2016) | 3 lines - Fix #804: lower num_target_queries for iterator also for failed lookups. r3830 | wouter | 2016-08-23 04:30:12 -0400 (Tue, 23 Aug 2016) | 3 lines - Fix #804: unbound stops responding after outage. Fixes queries that attempt to wait for an empty list of subqueries.
2016-06-22backport r3782, fixing qname-minimisation with various broken DNS servers,Stuart Henderson
often found at CDNs. - Use QTYPE=A for QNAME minimisation. - Keep track of number of time-outs when performing QNAME minimisation. Stop minimising when number of time-outs for a QNAME/QTYPE pair is more than three.
2016-06-22backport r3781, fix segfault in -hStuart Henderson
2016-06-22update to unbound-1.5.9. (there will be a follow-up commit to cherrypick aStuart Henderson
couple of post-1.5.9 patches). tests from Mark Patruck, danj, matthieu, millert. reads ok to jung, ok florian.
2014-11-20update to Unbound 1.5.0, ok sthen@Brad Smith
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2016-03-05update to unbound 1.5.8, ok florian@ jung@Stuart Henderson
2014-11-20update to Unbound 1.5.0, ok sthen@Brad Smith
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2016-01-19Backport r3602 | wouter | 2016-01-19 15:37:54 +0000 (Tue, 19 Jan 2016) | 3 linesStuart Henderson
- Squelch 'cannot assign requested address' log messages unless verbosity is high, it was spammed after network down. (problem reported by Philippe Meunier)
2015-12-15update to Unbound 1.5.7, looks fine to deraadt@.Stuart Henderson
Notable addition: implements optional support for qname minimisation (a privacy improvement; see draft-ietf-dnsop-qname-minimisation-07)
2012-08-23update to unbound 1.4.18Stuart Henderson
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2015-12-10minor changes, mostly whitespace, from unbound 1.5.7Stuart Henderson
2015-12-10use echo rather than here documents for compat with some other shells;Stuart Henderson
from unbound 1.5.7 (reducing the main diff..)
2015-12-10typo fixes from 1.5.7Stuart Henderson
2015-12-10typo fix, from 1.5.7Stuart Henderson
2015-12-09typo fixes from unbound-1.5.7rc1Stuart Henderson
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2015-11-05mergeStuart Henderson
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2015-10-27Fix manpage for empty pidfile. Pointed out by millert@Stuart Henderson
2015-10-27Don't use a pidfile in unbound by default. Retain the ability in unbound.confStuart Henderson
to set one if needed. ok millert@
2015-10-27Fix nsd and unbound's error checking with SSL_CTX_set_options().Doug Hogan
LibreSSL, BoringSSL and OpenSSL have all been redefining SSL_OP_* flags to be 0 when support is removed. This breaks the error checking that nsd and unbound were doing. It should check against the flag value itself to allow for 0. input deraadt@, jsing@ tweak + ok miod@, guenther@
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2015-09-05Avoid unintended problems with operator precedence when doing anJonathan Gray
assignment and comparison. ok deraadt@ looks correct millert@ jung@
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2015-07-16remove dead files (moved from unbound/ldns/ to unbound/sldns/)Stuart Henderson
2015-07-16mergeStuart Henderson
2015-07-16update to Unbound 1.5.4, ok florian@, looks sane deraadt@Stuart Henderson
2014-03-16import unbound 1.4.22 upstream sources, ok brad@Stuart Henderson
2012-03-26Import ldns 1.6.12, needed for Unbound, to work on in-tree.Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: contrib doc/images examples packaging/fedora ok deraadt@ jakob@
2015-03-11Point people to local-zone and stub-zone in unbound.conf and explainFlorian Obser
when this can be used. tweaks ian@ OK ratchov@, sthen@ seems more useful to millert@
2015-03-08Fix crash on unbound-control reload introduced in update to 1.5.2.Florian Obser
Found the hard way be me and independently discovered and reported upstream at the same time in bug #651. OK sthen, krw; "looks reasonable" kettenis. OK to commit deraadt
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2015-02-17remove svn-only fileStuart Henderson
2015-02-17merge conflictsStuart Henderson
2015-02-17Update to unbound 1.5.2rc1, ok brad@Stuart Henderson
2015-02-17remove "EXAMPLE" section containing a minimal example unbound.conf; the sampleStuart Henderson
isn't suitable for OpenBSD and can cause confusion. ok jmc@ brad@
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2015-02-11Merge in a commit from upstream..Brad Smith
- Fix scrubber with harden-glue turned off to reject NS (and other not-address) records. ok sthen@
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-30 05:10:45 +0000