summaryrefslogtreecommitdiffstats
path: root/usr.sbin/unbound/iterator (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Backport unbound r3830/3831 from upstreadm, fixing an issue where it cansthen2016-09-061-5/+5
| | | | | | | | | | | | | | | become unresponsive and need to be restarted following a connectivity outage. From Brad, ok florian@ r3831 | wouter | 2016-08-23 04:49:01 -0400 (Tue, 23 Aug 2016) | 3 lines - Fix #804: lower num_target_queries for iterator also for failed lookups. r3830 | wouter | 2016-08-23 04:30:12 -0400 (Tue, 23 Aug 2016) | 3 lines - Fix #804: unbound stops responding after outage. Fixes queries that attempt to wait for an empty list of subqueries.
* backport r3782, fixing qname-minimisation with various broken DNS servers,sthen2016-06-222-8/+26
| | | | | | | | | often found at CDNs. - Use QTYPE=A for QNAME minimisation. - Keep track of number of time-outs when performing QNAME minimisation. Stop minimising when number of time-outs for a QNAME/QTYPE pair is more than three.
* update to unbound-1.5.9. (there will be a follow-up commit to cherrypick asthen2016-06-226-39/+138
| | | | | | couple of post-1.5.9 patches). tests from Mark Patruck, danj, matthieu, millert. reads ok to jung, ok florian.
* update to Unbound 1.5.7, looks fine to deraadt@.sthen2015-12-153-4/+195
| | | | | Notable addition: implements optional support for qname minimisation (a privacy improvement; see draft-ietf-dnsop-qname-minimisation-07)
* typo fixes from unbound-1.5.7rc1sthen2015-12-093-5/+5
|
* mergesthen2015-11-052-3/+3
|
* mergesthen2015-07-167-16/+213
|
* update to Unbound 1.5.4, ok florian@, looks sane deraadt@sthen2015-07-163-6/+6
|
* merge conflictssthen2015-02-171-4/+8
|
* Merge in a commit from upstream..brad2015-02-111-1/+3
| | | | | | | - Fix scrubber with harden-glue turned off to reject NS (and other not-address) records. ok sthen@
* Merge in a commit from upstream..brad2015-01-313-0/+48
| | | | | | | - Fix 0x20 capsforid fallback to omit gratuitous NS and additional section changes. ok sthen@
* Revert some $OpenBSD$ additions about which there are doubts.krw2015-01-201-1/+0
| | | | Suggested by deraadt@
* Missing $OpenBSD$'s.krw2015-01-201-0/+1
| | | | ok deraadt@
* Fix for CVE-2014-8602.florian2014-12-082-0/+50
| | | | | | | | | OK sthen@ Unfortunately you only get the dedication to support the infrastructure of the universally connected self-organizing Internet - and the autonomy of its participants iff you are a paying customer with a support contract.
* Merge in some commits from upstream..brad2014-11-203-14/+23
| | | | | | | | | | | | | - Removed 'increased limit open files' log message that is written to console. It is only written on verbosity 4 and higher. This keeps system bootup console cleaner. - Fix #627: SSL_CTX_load_verify_locations return code not properly checked. - Fix that CD flag disables DNS64 processing, returning the DNSSEC signed AAAA denial. - Fix cdflag dns64 processing. ok sthen@
* merge conflictsbrad2014-11-201-0/+2
|
* update to Unbound 1.5.0, ok sthen@brad2014-11-204-13/+42
|
* merge conflicts, remove old libldns filessthen2014-03-161-74/+73
|
* import unbound 1.4.22 upstream sources, ok brad@sthen2014-03-1617-266/+261
|
* merge unbound 1.4.21sthen2013-09-221-2/+4
|
* update to Unbound 1.4.21, ok brad@sthen2013-09-2210-84/+183
|
* new IPv4 address for D.ROOT-SERVERS.NETjakob2013-01-081-1/+1
|
* update to unbound 1.4.18sthen2012-08-235-58/+93
|
* update to unbound 1.4.17, testing by okan@ (not yet linked to build;sthen2012-08-2310-201/+767
| | | | 1.4.18 to follow later).
* Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).sthen2012-03-2618-0/+8377
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@