| Commit message (Collapse) | Author | Age | Files | Lines |
| | |
|
| | |
|
| |
|
|
|
| |
Testing millert, brad and myself.
OK millert@
|
| |
|
|
|
| |
shadows the real user's identity.
ok deraadt
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
-----------------------------------------------------------------
BUG FIXES:
- Fix malformed edns query assertion failure, reported by
Michal Kepien (NASK).
-----------------------------------------------------------------
Does not effect OpenBSD since we are not running configure with
--enable-checking
OK sthen@
|
| | |
|
| |
|
|
|
| |
"Working fine here." millert@
OK dlg, sthen
|
| | |
|
| |
|
|
|
| |
Testing by millert@, sthen@ and me.
came up with the same diff & OK sthen@
|
| | |
|
| | |
|
| |
|
|
|
|
|
|
| |
but this also disables it for users who don't have that line. (It can be re-
enabled by explicit config in nsd.conf but it is suspected that it has issues
and performance seems totally OK with zone files even for quite large setups).
ok florian@
|
| | |
|
| | |
|
| | |
|
| |
|
|
|
|
|
|
|
|
| |
The main process handles zone transfers (inet, dns), writing and
creating of zone files (wpath, cpath) and starting of child
processes (proc).
Child processes answer queries from the internet.
"Looks good" to deraadt@
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
|
|
|
|
|
|
|
|
| |
LibreSSL, BoringSSL and OpenSSL have all been redefining SSL_OP_* flags to
be 0 when support is removed. This breaks the error checking that nsd and
unbound were doing. It should check against the flag value itself to allow
for 0.
input deraadt@, jsing@
tweak + ok miod@, guenther@
|
| |
|
|
| |
package is installed.
|
| | |
|
| | |
|
| |
|
|
|
|
|
| |
similar to what ssh does. Otherwise they need resolv.h including, which causes
problems on OS with newer resolv.h/nameser.h headers which cause conflicts with
NSD's T_xxx resource record #defines. autoconf bits adapted from tmux portable.
ok florian@
|
| |
|
|
|
|
| |
b64_{ntop,pton} remain for now, they are in libc as __b64_{ntop,pton}
but to use this we either need to pull in resolv.h (which does "#define
b64_ntop __b64_ntop") or access the __ versions directly (as done in ssh).
|
| | |
|
| | |
|
| |
|
|
|
|
|
| |
- Fix tcp waiting list for zone transfers where the bind and connect
calls fail.
ok sthen@
|
| | |
|
| | |
|
| | |
|
| |
|
|
|
|
| |
- Synthesize CNAMEs with same TTL as DNAME.
ok sthen@
|
| |
|
|
|
|
|
|
| |
- Fix bug#637: fix that nsd.db grows limitlessly, an off by one
on one megabyte free chunks, created during AXFRs of large zones,
that caused the one megabyte chunk to be leaked.
ok sthen@
|
| |
|
|
| |
trunk. OK doug@
|
| |
|
|
| |
more than an int can hold; ok krw@ deraadt@ and tedu@ (by implication)
|
| |
|
|
|
|
|
|
|
|
|
| |
- Fix that failure to add tcp to tcp base does not leak the socket.
- Fixes for wildcard addition and deletion, speedup for some cases.
- Fix that queries for noname CH TXT are REFUSED instead of nodata.
- Fix #616: retry xfer for zones with no content after command.
- Fix that expired zones stay expired after a server restart.
- RFC 7344: CDS and CDNSKEY (read in).
ok sthen@
|
| |
|
|
|
|
| |
autoconf script. It doesn't seem to serve any purpose.
ok sthen@
|
| |
|
|
|
| |
OpenBSD doesn't need a /dev/log socket in the chroot for syslog to work.
OK deraadt@ miod@ sthen@
|
| |
|
|
| |
ok deraadt@ millert@ tedu@
|
| | |
|
| | |
|
| | |
|
| |
|
|
|
|
| |
Submitted upstream by brad@ (and subsequently committed there).
ok jca@, mikeb@, brad@
|
| | |
|
| |
|
|
|
| |
corruption checks and avoid some causes of corruption. More details at
http://article.gmane.org/gmane.network.dns.nsd.general/1687
|
| | |
|
| | |
|
| | |
|