summaryrefslogtreecommitdiffstats
path: root/usr.sbin/unbound/iterator/iterator.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Backport unbound r3830/3831 from upstreadm, fixing an issue where it cansthen2016-09-061-5/+5
| | | | | | | | | | | | | | | become unresponsive and need to be restarted following a connectivity outage. From Brad, ok florian@ r3831 | wouter | 2016-08-23 04:49:01 -0400 (Tue, 23 Aug 2016) | 3 lines - Fix #804: lower num_target_queries for iterator also for failed lookups. r3830 | wouter | 2016-08-23 04:30:12 -0400 (Tue, 23 Aug 2016) | 3 lines - Fix #804: unbound stops responding after outage. Fixes queries that attempt to wait for an empty list of subqueries.
* backport r3782, fixing qname-minimisation with various broken DNS servers,sthen2016-06-221-8/+18
| | | | | | | | | often found at CDNs. - Use QTYPE=A for QNAME minimisation. - Keep track of number of time-outs when performing QNAME minimisation. Stop minimising when number of time-outs for a QNAME/QTYPE pair is more than three.
* update to unbound-1.5.9. (there will be a follow-up commit to cherrypick asthen2016-06-221-37/+82
| | | | | | couple of post-1.5.9 patches). tests from Mark Patruck, danj, matthieu, millert. reads ok to jung, ok florian.
* update to Unbound 1.5.7, looks fine to deraadt@.sthen2015-12-151-4/+124
| | | | | Notable addition: implements optional support for qname minimisation (a privacy improvement; see draft-ietf-dnsop-qname-minimisation-07)
* typo fixes from unbound-1.5.7rc1sthen2015-12-091-2/+2
|
* mergesthen2015-07-161-8/+138
|
* merge conflictssthen2015-02-171-4/+8
|
* Merge in a commit from upstream..brad2015-01-311-0/+3
| | | | | | | - Fix 0x20 capsforid fallback to omit gratuitous NS and additional section changes. ok sthen@
* Fix for CVE-2014-8602.florian2014-12-081-0/+44
| | | | | | | | | OK sthen@ Unfortunately you only get the dedication to support the infrastructure of the universally connected self-organizing Internet - and the autonomy of its participants iff you are a paying customer with a support contract.
* Merge in some commits from upstream..brad2014-11-201-10/+17
| | | | | | | | | | | | | - Removed 'increased limit open files' log message that is written to console. It is only written on verbosity 4 and higher. This keeps system bootup console cleaner. - Fix #627: SSL_CTX_load_verify_locations return code not properly checked. - Fix that CD flag disables DNS64 processing, returning the DNSSEC signed AAAA denial. - Fix cdflag dns64 processing. ok sthen@
* update to Unbound 1.5.0, ok sthen@brad2014-11-201-4/+31
|
* import unbound 1.4.22 upstream sources, ok brad@sthen2014-03-161-19/+22
|
* update to Unbound 1.4.21, ok brad@sthen2013-09-221-11/+57
|
* update to unbound 1.4.18sthen2012-08-231-22/+45
|
* update to unbound 1.4.17, testing by okan@ (not yet linked to build;sthen2012-08-231-38/+168
| | | | 1.4.18 to follow later).
* Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).sthen2012-03-261-0/+2767
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@