summaryrefslogtreecommitdiffstats
path: root/usr.sbin/unbound (follow)
Commit message (Collapse)AuthorAgeFilesLines
* merge unbound-1.13.1sthen2021-03-1257-5380/+8023
|
* update to unbound-1.13.1, tested by gnezdo@sthen2021-03-1213-28/+99
|
* Backport "Squelch udp connect 'no route to host' errors" from upstream.sthen2021-01-211-3/+32
| | | | | | | | | | Problem reported and diff tested by danj@ From 5906811ff19f005110b2edbda5aa144ad5fa05b1 Mon Sep 17 00:00:00 2001 From: "W.C.A. Wijngaards" <wouter@nlnetlabs.nl> Date: Tue, 1 Dec 2020 09:09:13 +0100 Subject: [PATCH] - Fix #358: Squelch udp connect 'no route to host' errors on low verbosity.
* do not call log_addr() when the address is NULLanton2021-01-061-2/+3
| | | | ok florian@
* merge unbound 1.13.0sthen2020-12-1044-541/+2249
|
* import unbound 1.13.0, heavy lifting done by florian@sthen2020-12-1012-116/+282
|
* remove reference to non-existent pidfile;jmc2020-11-111-3/+0
| | | | | | issue raised by martin vahlensieck discussed with and ok sthen
* merge Unbound 1.12.0sthen2020-10-2860-1305/+2866
|
* import Unbound 1.12.0, ok tb@sthen2020-10-2815-229/+994
|
* The kernel provides sufficiently randomised ports.florian2020-08-241-2/+3
| | | | OK sthen
* merge unbound 1.11.0sthen2020-08-2465-2226/+4172
|
* update to unbound 1.11.0, tests tb@ dtucker@, ok tb@sthen2020-08-2419-41/+5477
|
* less convoluted Makefile, removes useless redirectionsespie2020-06-021-11/+4
| | | | okay tb@, florian@
* merge unbound 1.10.1sthen2020-05-1920-97/+273
|
* Use a union to ensure cmsg buffer is properly alignedjca2020-05-081-4/+10
| | | | | | Fix synced from unwind/libunbound. unwind(8) crash on landisk (strict alignement arch) reported by otto@, original diff ok deraadt@ otto@
* remove unbound files that aren't really useful here, pointed out by florian@sthen2020-03-202-22/+0
|
* merge update to Unbound 1.10.0sthen2020-03-1971-1400/+3439
|
* import Unbound 1.10.0, ok tb@sthen2020-03-197-25/+1351
|
* a few depend:-related thingies that were still in.espie2019-12-211-4/+1
| | | | okay millert@, tb@
* merge Unbound 1.9.6sthen2019-12-1864-1446/+2083
|
* import Unbound 1.9.6, ok tb floriansthen2019-12-1813-93/+165
|
* As found by tb@, the name of the temporary file used when updating thesthen2019-10-071-7/+9
| | | | | | | | | | | | root anchor changed in unbound 1.9.3, "Add hex print of trust anchor pointer to trust anchor file temp name to make it unique, for libunbound created multiple contexts". This isn't allowed by unbound-anchor's unveil; adjust to unveil the parent directory (typically /var/unbound/db, but generated from the filename). ok florian@ tb@
* merge in the rest of unbound-1.9.4 (we already had the only code change)sthen2019-10-0411-25/+27
|
* Fix CVE-2019-16866florian2019-10-031-2/+2
| | | | | | | | | --- Recent versions of Unbound contain a problem that may cause Unbound to crash after receiving a specially crafted query. This issue can only be triggered by queries received from addresses allowed by Unbound's ACL. --- tested by benno, tb
* merge unbound 1.9.3sthen2019-09-1140-380/+983
|
* import unbound 1.9.3, thanks gonzalo@ dtucker@ for tests.sthen2019-09-119-9/+515
|
* merge unbound 1.9.2sthen2019-06-2837-202/+896
|
* update to unbound-1.9.2, florian@ agreessthen2019-06-282-1/+39
|
* unbound-checkconf pledges "stdio rpath getpw", later narrowing to "stdio rpath".sthen2019-05-231-0/+8
| | | | | | | (File access is needed through the course of a run depending on which options are configured - e.g. for DNSSEC root keys, hints and zone files). Based on a diff from, and ok with, mestre@
* The way we merge libunbound from unbound(8) into unwind(8) we need to makeflorian2019-03-311-2/+4
| | | | | | | sure that we don't accidentally enable threading by accident. A threaded unwind(8) does not work since it's missing openssl locks. No config.h change. input & OK sthen
* merge unbound 1.9.1sthen2019-03-2733-242/+504
|
* Backport r5108 from unbound upstream, pointed out by florian@.sthen2019-02-081-0/+6
| | | | | | | | | Shouldn't affect unwind but keeping in sync. r5108 | wouter | 2019-02-08 15:05:24 +0000 (Fri, 08 Feb 2019) | 3 lines - Fix #4225: clients seem to erroneously receive no answer with DNS-over-TLS and qname-minimisation.
* merge unbound-1.9.0sthen2019-02-0855-226/+1607
|
* import unbound 1.9.0, ok florian@sthen2019-02-089-20/+109
|
* change order of pledge(2) promises to the canonical form.mestre2019-01-101-1/+1
| | | | | | | while here also use NULL as its second argument, instead of "", like it's done everywhere else in the tree. OK florian@
* unbound-anchor needs to talk to the internet and write to the trustflorian2019-01-101-0/+26
| | | | | | anchor file (create it if it doesn't exist). pledge & unveil accordingly OK sthen
* merge 1.8.3sthen2018-12-1112-25/+31
|
* Fix dns64 allocation in wrong region for returned internal queries.sthen2018-12-111-1/+1
| | | | (This is the only code change in upstream release 1.8.3).
* merge unbound 1.8.2sthen2018-12-0446-760/+1276
|
* import unbound 1.8.2sthen2018-12-045-2/+19
|
* merge 1.8.1sthen2018-10-0838-129/+375
|
* import unbound 1.8.1sthen2018-10-088-23/+41
| | | | tests on arm64 (danj@), sparc64 (kn@), amd64 (benno@ and me)
* merge unbound 1.8.0sthen2018-09-2072-640/+2282
|
* import unbound 1.8.0, tested by myself and benno@sthen2018-09-2017-51/+599
|
* remove binary doc files that aren't really useful to have in-treesthen2018-09-172-0/+0
|
* merge conflictssthen2018-09-1782-885/+3241
|
* import unbound 1.7.3, testing from benno@ and Brad.sthen2018-09-1741-3/+18944
|
* merge in some missed bits from 1.7.0 to simplify update prep.sthen2018-09-091-10/+3
|
* merge in some missed bits from 1.7.0 to simplify update prep.sthen2018-09-0910-25/+26
| | | | | | (I think we actually had slightly beyond 1.7.0, I've left code bits but there are some SSL->TLS changes which go away with this and will come back with the update).
* Check the result of strdup not the argument for NULL to report mallocflorian2018-03-291-1/+1
| | | | | | errors. Pointed out by benno