summaryrefslogtreecommitdiffstats
path: root/usr.sbin/nsd (follow)
Commit message (Collapse)AuthorAgeFilesLines
* configyyrename.h is no longer needed with the switch to flex -P c_.florian2021-04-021-124/+0
| | | | | This was also removed upstream. OK sthen
* merge NSD 4.3.6rc1sthen2021-04-0138-653/+995
|
* import NSD 4.3.6rc1, tested by me and florian@sthen2021-04-012-15/+34
|
* nsd contains two yacc parsers, but predates "yacc -b". Instead aderaadt2021-01-271-0/+3
| | | | | | script renames the fields in one parser. Three additional variables (yysslim, yyssp, yystacksize) need to be renamed also. Yes it is worse than stepping out of bed on the wrong side into cat vomit.
* update to nsd 4.3.4florian2020-12-1023-56/+179
|
* Pid files? Where we're going, we don't need pid files.florian2020-11-241-2/+2
| | | | OK sthen
* More useless stuff snuck in.florian2020-10-131-139/+0
| | | | OK sthen
* remove dir useless for cvssthen2020-10-131-2/+0
|
* merge NSD 4.3.3sthen2020-10-1326-80/+506
|
* import NSD 4.3.3, ok florian@sthen2020-10-133-1/+142
|
* Fix strlcpy() usage. The size argument should be the full size ofmillert2020-07-232-26/+21
| | | | | | the buffer, not the number of bytes to copy. The strlcpy() return value should be checked to verify that truncation did not occur. OK florian@
* Update to 4.3.2.florian2020-07-2330-140/+581
|
* remove useless redirectionsespie2020-06-021-12/+4
| | | | okay tb@, florian@
* Update to 4.3.1florian2020-05-1448-544/+3123
| | | | Testing & OK sthen
* We forgot to keep ChangeLog in sync in previous updates.florian2020-05-142-0/+2013
| | | | | | | Bring in the mission changes up to 4.2.4. Also bring in doc/RELNOTES. Both changes ease the process of syncing with upstream. OK sthen
* a few depend:-related thingies that were still in.espie2019-12-211-4/+1
| | | | okay millert@, tb@
* add the changelogsthen2019-12-181-0/+4268
|
* remove, not useful heresthen2019-12-181-7/+0
|
* merge NSD 4.2.4sthen2019-12-1822-2088/+1872
|
* import NSD 4.2.4, ok floriansthen2019-12-181-0/+7
|
* merge 4.2.2sthen2019-09-1735-204/+1818
|
* Disableflorian2019-03-301-0/+2
| | | | | | | | | | | | - Deny ANY with only one RR in response, by default. Patch from Daisuke Higashi. The deny-any statement in nsd.conf sets ANY queries over UDP to be further moved to TCP as well. Also no additional section processig for type ANY, reducing the response size. with an ifdef NOTYET. It is too close to release and we want to let this sit for a bit. Pointed out / requested by sthen.
* Update to nsd 4.1.27florian2019-03-3024-45/+524
| | | | OK sthen
* Update to 4.1.26florian2018-12-1030-66/+2267
| | | | OK sthen
* update to 4.1.25florian2018-09-2929-188/+223
| | | | OK sthen (on a slightly different configure script version)
* I forgot to put this in with the 4.1.24 update.florian2018-09-291-0/+30
| | | | | | It is of course not relevant for us but introduces a diff when the configure script is regenerated on upgrades and this file is not arround.
* update to 4.1.24florian2018-08-1625-351/+800
| | | | OK sthen
* update to nsd 4.1.23, from the release notes:florian2018-07-303-11/+11
| | | | | | | | | | | | | | | | | | | | ------------------------------------------------------------------------ NSD versions 4.1.22 and before are vulnerable in comparing TSIG information and this can be used to discover a TSIG secret. NSD uses TSIG to protect zone transfers. The TSIG code uses a secret key to protect the data. The secret key is shared with both sides of the zone transfer connection. The comparison code in NSD was not time insensitive, causing the potential for an attacker to use timing information to discover data about the key contents. NSD versions from 2.2.0 to 4.1.22 are vulnerable. Upgrade to 4.1.23 or newer to get the fix. It was reported by Ondrej Sury (ISC). ------------------------------------------------------------------------ OK tb, sthen
* regenflorian2018-06-142-11/+14
|
* Update to nsd 4.1.22florian2018-06-149-13/+26
| | | | | | The improved refuse-any option that showed up in upstream 4.1.22 had already been cherry picked in OpenBSD. OK sthen
* Turn on minimal-reponses and refuse-any per default.florian2018-05-182-4/+4
| | | | OK sthen
* From upcomming nsd 4.1.22:florian2018-05-172-3/+6
| | | | | | | refuse-any sends truncation (+TC) in reply to ANY queries over UDP, and allows TCP queries like normal OK sthen
* update to nsd 4.1.21florian2018-05-1725-31/+74
| | | | OK sthen
* update to NSD 4.1.20, ok florian@sthen2018-03-0617-44/+210
| | | | | | - Fix memory leak in zone file read of unknown rr formatted RRs. - Fix memory leak when rehashing nsec3 after axfr or zonefile read, in the selectively allocated precompiled nsec3 hashes.
* merge configure.ac from NSD 4.1.19, previously we had an updatedsthen2018-02-201-1/+17
| | | | generated configure file, but old configure.ac.
* regenflorian2018-02-032-36/+110
|
* Update nsd to 4.1.19.florian2018-02-0326-198/+1054
| | | | | | OK sthen@, "so far so good" millert@ Obligatory commit from 33,000 ft.
* Add descriptions for HAVE_B64_NTOP and HAVE_B64_PTON so autoheadermillert2018-01-131-2/+2
| | | | will run. OK florian@
* Make ip-transparent option work by using SO_BINDANY.florian2017-11-011-1/+13
| | | | | | | | OK jca, benno jca also points out that Delan Azabani (delan _AT_ azabani.com) wrote exactly the same diff in 2016. It was OK bluhm but apparently never commited.
* missed in previousflorian2017-08-111-1/+3
|
* regenflorian2017-08-111-9/+9
|
* update to 4.1.17florian2017-08-118-8/+58
| | | | OK sthen
* Add prototypes for prototypes for __b64_pton and __b64_ntop; pointedflorian2017-07-271-0/+2
| | | | | | | | | out by clang. This is a local diff we have to carry so config.h.in is good a place as any and it's included everywhere. OK sthen
* destroy lint remnants.espie2017-06-121-4/+1
| | | | okay millert@ deraadt@
* regenflorian2017-04-151-9/+9
|
* update to 4.1.16rc1florian2017-04-1517-10/+55
| | | | | | | tests & OK sthen (if there are more changes coming for 4.1.16 release we will just commit them on top)
* regenflorian2017-02-171-9/+9
|
* Update to 4.1.15.florian2017-02-1740-867/+912
| | | | | | This contains a local patch to query.c (missed _t conversion) that has been submitted upstream. OK sthen
* regenflorian2017-01-171-9/+9
|
* Update to nsd 4.1.14florian2017-01-179-48/+105
| | | | OK sthen@