| Commit message (Collapse) | Author | Age | Files | Lines |
| ... | |
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
a bit of hand massaging:
define HAVE_EVP_SHA256
define HAVE_EVP_SHA384
define HAVE_EVP_SHA512
undef HAVE_FIPS_MODE
undef HAVE_OPENSSL_AES
define HAVE_OPENSSL_ECDSA
undef HAVE_OPENSSL_ED25519
undef HAVE_OPENSSL_ED448
define HAVE_OPENSSL_EVP_AES
undef HAVE_OPENSSL_GOST
define ISC_PLATFORM_OPENSSLHASH
define OPENSSL_VERSION_NUMBER 0x20000000L
define USE_EVP
define ECDSA_R_RANDOM_NUMBER_GENERATION_FAILED
define OPENSSL
Guidance & OK tb
|
| | |
|
| |
|
|
| |
ok florian
|
| | |
|
| |
|
|
|
|
|
|
| |
of the isc-provided ones. Get rid of most LIBRESSL_VERSION_NUMBER
checks in the C code to avoid hacky workarounds that were implemented
for old LibreSSL versions.
ok florian
|
| |
|
|
|
|
|
|
|
| |
(bind, dig, nslookup, host..) the library is being used by, this flag is cleared
using a constructor-like mechanism in a .c file which is not compiled nor called.
if the flag is cleared, the library acts differently in 40+ functions.
Imagine if our libc had such a global variable??
delete all of that.
ok florian
|
| |
|
|
|
| |
parser.c. One less conflicting .o file generated.
OK deraadt
|
| | |
|
| |
|
|
| |
OK otto
|
| |
|
|
|
| |
strtoull(3) and then get rid of lib/isc/string.c
OK millert
|
| |
|
|
| |
OK millert
|
| |
|
|
|
| |
It's not installed anyway.
OK millert
|
| |
|
|
| |
input & OK millert
|
| |
|
|
| |
OK millert
|
| |
|
|
| |
OK millert
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
dig_serverlist.
In one of the first shredding commits lwres unintentionally lost the
ability to track if the user requested IPv4 only or IPv6 only
operations. Parsing of /etc/resolv.conf would add all nameservers,
ignoring their address family.
When dig(1) later populated server_list it would pay attention to
the address family.
If /etc/resolv.conf contains only IPv4 nameservers and it has 3 or
more and the user requests IPv6 only operations dig would fail with
"add_nameserver failed". This happens because lwres_conf already
contains 3 nameservers but server_list is empty so dig tries to add
::1 to lwres_conf.
It feels like this is very convoluted but it restores previous
behavoir the way it was implemented before. Thus sidestepping some
refactoring.
OK millert
|
| |
|
|
|
|
| |
server side support and keyrings. This allows us to get rid of a
red-black-tree implementation.
OK millert
|
| |
|
|
| |
OK millert
|
| |
|
|
|
| |
won't use in the tools.
OK sthen
|
| | |
|
| |
|
|
|
|
|
| |
Minus 3k lines.
Input deraadt
OK millert
|
| |
|
|
| |
previous commit.
|
| |
|
|
| |
OK millert
|
| |
|
|
| |
OK millert
|
| |
|
|
|
|
|
| |
of assembly code. It's used for various statistics gathering in the
bind daemon which we won't need in dig etc.
OK millert
|
| | |
|
| |
|
|
|
|
| |
calls to libc's arc4random. Minus about 3k lines.
prodding deraadt@
|
| |
|
|
|
|
|
|
|
| |
#define OPENSSL
#undef OPENSSL_LEAKS
#undef USE_ENGINE
#undef DNS_CRYPTO_LEAKS
prodding deraadt@
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
#define ISC_PLATFORM_NEEDSYSSELECTH 1
#define ISC_PLATFORM_HAVESTATNSEC 1
#define ISC_PLATFORM_RLIMITTYPE rlim_t
#define ISC_PLATFORM_HAVELONGLONG 1
#undef ISC_PLATFORM_BRACEPTHREADONCEINIT
#undef ISC_PLATFORM_USEDECLSPEC
#define ISC_PLATFORM_HAVESYSUNH 1
#define ISC_PLATFORM_HAVESTRINGSH 1
#define ISC_PLATFORM_WANTAES 1
#define ISC_PLATFORM_USESIT 1
#define LIBISC_EXTERNAL_DATA
#define LIBDNS_EXTERNAL_DATA
#define LIBISCCFG_EXTERNAL_DATA
#define LIBBIND9_EXTERNAL_DATA
#define LIBTESTS_EXTERNAL_DATA
prodding deraadt@
|
| |
|
|
|
|
|
|
|
|
| |
#undef GSSAPI
#undef HAVE_GSSAPI_GSSAPI_H
#undef HAVE_GSSAPI_GSSAPI_KRB5_H
#undef HAVE_GSSAPI_H
#undef HAVE_GSSAPI_KRB5_H
prodding deraadt
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
#undef USE_PKCS11
#undef PKCS11_TOOLS
#undef PKCS11CRYPTO
#undef HAVE_PKCS11_GOST
#undef HAVE_PKCS11_ECDSA
#undef HAVE_PKCS11_ED25519
#undef HAVE_PKCS11_ED448
#define PK11_DH_DISABLE
#define PK11_DSA_DISABLE
#define PK11_FLAVOR
#define PK11_MD5_DISABLE
#undef PK11_SOFTHSMV2_FLAVOR
prodding deraadt@
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
#undef ISC_PLATFORM_NEEDVSNPRINTF
#undef ISC_PLATFORM_NEEDSPRINTF
#undef ISC_PLATFORM_NEEDPRINTF
#undef ISC_PLATFORM_NEEDFPRINTF
#define ISC_PLATFORM_QUADFORMAT "ll"
#undef ISC_PLATFORM_NEEDSTRSEP
#undef ISC_PLATFORM_NEEDSTRLCPY
#undef ISC_PLATFORM_NEEDSTRLCAT
#undef ISC_PLATFORM_NEEDSTRTOUL
#undef ISC_PLATFORM_NEEDMEMMOVE
#undef ISC_PLATFORM_NEEDSTRCASESTR
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
#define ISC_PLATFORM_HAVESALEN 1
#define ISC_PLATFORM_HAVEIPV6 1
#undef ISC_PLATFORM_NEEDIN6ADDRANY
#undef ISC_PLATFORM_NEEDIN6ADDRLOOPBACK
#define ISC_PLATFORM_HAVEIN6PKTINFO 1
#undef ISC_PLATFORM_HAVEINADDR6
#define ISC_PLATFORM_HAVESCOPEID 1
#undef ISC_PLATFORM_NEEDNTOP
#undef ISC_PLATFORM_NEEDPTON
#undef ISC_PLATFORM_NEEDPORTT
#undef ISC_PLATFORM_HAVELIFCONF
#undef ISC_PLATFORM_HAVEIF_LADDRCONF
#undef ISC_PLATFORM_HAVEIF_LADDRREQ
#define ISC_NET_BSD44MSGHDR 1
#define ISC_PLATFORM_HAVEIFNAMETOINDEX 1
#undef ISC_PLATFORM_FIXIN6ISADDR
#define ISC_PLATFORM_HAVESOCKADDRSTORAGE 1
#define ISC_PLATFORM_HAVEKQUEUE 1
#undef ISC_PLATFORM_HAVEEPOLL
#undef ISC_PLATFORM_HAVEDEVPOLL
prodding deraadt@
|
| |
|
|
| |
OK millert
|
| |
|
|
| |
OK millert
|
| |
|
|
| |
OK millert
|
| |
|
|
| |
OK millert
|
| |
|
|
|
| |
and move the remaining bits to dighost.c. Minus 4k lines.
OK sthen
|
| |
|
|
| |
OK sthen
|
| |
|
|
|
|
|
|
|
|
|
|
| |
This pulls out the config object (lwres_conf_t) from the context
(lwres_context_t), switches to libc functions (lwres_net_ntop vs
inet_ntop etc ) and removes a lwres_ prefix from number types
(lwres_uint8_t vs uint8_t etc).
With that we can nearly empty out lib/lwres and lose about 20k lines in
the process.
OK sthen
|
| |
|
|
| |
OK sthen
|
| | |
|
| |
|
|
|
|
| |
crazy random port allocation for dns 'security' in USERLAND because the
KERNEL has automatically done port-randomization since 1996 (wow the year
of BSE in Britain)
|
| | |
|
| |
|
|
|
|
|
|
| |
defines, but is trying to determine if the kernel has it enabled/disabled,
mostly by performing tests against localhost. instead, just declare dscp
works.
since dscp probing happens late, it runs into problems with pledge. we
prefer pledge over this lovecraftian horror.
|
| | |
|
| |
|
|
| |
here (since this codebase will only support dig & nslookup)
|
| | |
|
| | |
|
| |
|
|
|
| |
(last ISC licensed release) but that has an issue with dig -6 so I'm breaking
it out for now
|