]>
granicus.if.org Git - pdns/log
tcely [Sun, 6 Aug 2017 07:03:40 +0000 (03:03 -0400)]
Added address variable. Issue #2835.
Remi Gacogne [Tue, 25 Jul 2017 12:22:42 +0000 (14:22 +0200)]
Merge pull request #5543 from rgacogne/web-auto-ptr
Wrap the webserver's and Resolver::tryGetSOASerial objects into smart pointers
Remi Gacogne [Mon, 24 Jul 2017 13:29:15 +0000 (15:29 +0200)]
auth: Get rid of the webserver's connectionThreadData struct
Thanks to zeha for suggesting that the struct was not needed anymore
since `std::thread` takes a variable number of parameters.
Remi Gacogne [Thu, 20 Jul 2017 07:51:13 +0000 (09:51 +0200)]
Merge pull request #5541 from rgacogne/coverity-string-find-use
Clartify how we check the return value of std::string::find()
Remi Gacogne [Thu, 20 Jul 2017 07:50:44 +0000 (09:50 +0200)]
Remi Gacogne [Wed, 19 Jul 2017 14:10:09 +0000 (16:10 +0200)]
Clartify how we check the return value of std::string::find()
Making Coverity happier.
Remi Gacogne [Wed, 19 Jul 2017 13:32:31 +0000 (15:32 +0200)]
Update YaHTTP to
93e75d1412d7dafab54f68b7efb9a4e30fd8b9fe
Fix a warning reported by Coverity.
Remi Gacogne [Fri, 7 Jul 2017 16:56:17 +0000 (18:56 +0200)]
Wrap the dynamic FD array into a unique_ptr in Resolver::tryGetSOASerial
Remi Gacogne [Tue, 4 Jul 2017 13:51:12 +0000 (15:51 +0200)]
Wrap the webserver's objects into smart pointers
Remi Gacogne [Wed, 12 Jul 2017 12:02:04 +0000 (14:02 +0200)]
Make `WebServer::d_server` a shared pointer
Pieter Lexis [Tue, 18 Jul 2017 12:07:27 +0000 (14:07 +0200)]
Update pip etc. for the auth docs as well
Pieter Lexis [Tue, 18 Jul 2017 11:26:12 +0000 (13:26 +0200)]
Merge pull request #5533 from pieterlexis/rec-4.1.0-alpha1-changelog
Add latest recursor changelogs for alpha1
Pieter Lexis [Tue, 18 Jul 2017 11:05:00 +0000 (13:05 +0200)]
Merge pull request #5532 from pieterlexis/new-auth-docs
Add new Authoritative Server documentation.
Pieter Lexis [Tue, 18 Jul 2017 10:59:19 +0000 (12:59 +0200)]
Update to add a new changelog entry for the next alpha
Pieter Lexis [Tue, 18 Jul 2017 08:41:47 +0000 (10:41 +0200)]
Add latest recursor changelogs
Pieter Lexis [Wed, 12 Jul 2017 10:52:53 +0000 (12:52 +0200)]
Add new Authoritative Server documentation.
Pieter Lexis [Tue, 18 Jul 2017 09:34:46 +0000 (11:34 +0200)]
Merge pull request #5530 from rgacogne/rec-el-prid64
rec: Fix the recursor build
Pieter Lexis [Tue, 18 Jul 2017 08:39:05 +0000 (10:39 +0200)]
Merge pull request #5482 from rgacogne/rec-cpu-affinity
rec: Add a `cpu-map` directive to set CPU affinity per thread
Remi Gacogne [Tue, 18 Jul 2017 07:49:08 +0000 (09:49 +0200)]
rec: Fix the recursor cache unit tests
Remi Gacogne [Tue, 18 Jul 2017 07:21:14 +0000 (09:21 +0200)]
rec: Add missing <cinttypes> include for PRId64
Pieter Lexis [Tue, 18 Jul 2017 06:59:13 +0000 (08:59 +0200)]
Merge pull request #5529 from pieterlexis/more-rec-docs
Recursor documentation additions
Pieter Lexis [Tue, 18 Jul 2017 06:56:49 +0000 (08:56 +0200)]
Merge pull request #5406 from rgacogne/rec-netmask-ordering
rec: Make more specific Netmasks < to less specific ones
Pieter Lexis [Tue, 18 Jul 2017 06:54:59 +0000 (08:54 +0200)]
Merge pull request #5485 from rgacogne/rec-log-level
rec: Don't always override `loglevel` to 6
Pieter Lexis [Tue, 18 Jul 2017 06:53:40 +0000 (08:53 +0200)]
Merge pull request #5509 from zeha/f/ship-ldap-schema
Ship ldapbackend schema files in tarball
Pieter Lexis [Tue, 18 Jul 2017 06:53:24 +0000 (08:53 +0200)]
Merge pull request #5516 from zeha/getauth-no-dnspacket
Remove DNSPacket from getAuth() signature
Pieter Lexis [Tue, 18 Jul 2017 06:52:21 +0000 (08:52 +0200)]
Merge pull request #5523 from rubenk/fix-typos-in-logmessage
Fix typo in two log messages
Pieter Lexis [Tue, 18 Jul 2017 06:51:50 +0000 (08:51 +0200)]
Merge pull request #5525 from rgacogne/rec-sign-inception
rec: Fix validation at the exact RRSIG inception or expiration time
Pieter Lexis [Tue, 18 Jul 2017 06:51:14 +0000 (08:51 +0200)]
Merge pull request #5528 from rgacogne/rec-cname-aa-authority
rec: On an AA=1 CNAME answer, only the CNAME is necessarily authoritative
Pieter Lexis [Mon, 17 Jul 2017 20:08:12 +0000 (22:08 +0200)]
Recursor documentation additions
* Add MIB to docs
* Update some functions based on the changelog
* Update the changelog
Pieter Lexis [Mon, 17 Jul 2017 21:18:05 +0000 (23:18 +0200)]
Merge pull request #5527 from pieterlexis/dnsdist-python-six
dnsdist docs: Ensure pip and setup tools are updated when building docs.
Remi Gacogne [Mon, 17 Jul 2017 20:31:48 +0000 (22:31 +0200)]
rec: On an AA=1 CNAME answer, only the CNAME is necessarily authoritative
Pieter Lexis [Mon, 17 Jul 2017 20:16:56 +0000 (22:16 +0200)]
dnsdist docs: update setuptools
Remi Gacogne [Mon, 17 Jul 2017 20:03:57 +0000 (22:03 +0200)]
Merge pull request #5505 from pieterlexis/new-docs
New dnsdist documentation
Pieter Lexis [Mon, 17 Jul 2017 15:30:41 +0000 (17:30 +0200)]
Update dnsdist docs upload path
Pieter Lexis [Thu, 9 Feb 2017 17:06:19 +0000 (18:06 +0100)]
Add rst-based dnsdist documentation.
Remi Gacogne [Mon, 17 Jul 2017 12:23:19 +0000 (14:23 +0200)]
rec: Don't always override `loglevel` to 6
Pieter Lexis [Mon, 17 Jul 2017 12:01:06 +0000 (14:01 +0200)]
rec Add cpu-map setting to new docs
Remi Gacogne [Fri, 30 Jun 2017 21:36:54 +0000 (23:36 +0200)]
rec: Add a `cpu-map` directive to set CPU affinity per thread
Remi Gacogne [Mon, 17 Jul 2017 08:44:36 +0000 (10:44 +0200)]
Merge pull request #5504 from rgacogne/dnsdist-nmg-dest
dnsdist: Clarify that NetmaskGroupRule can match the destination
Remi Gacogne [Mon, 17 Jul 2017 08:44:04 +0000 (10:44 +0200)]
Merge pull request #5511 from pieterlexis/dump-cache-updates
Add more information to recursor cache dumps
Remi Gacogne [Mon, 17 Jul 2017 08:42:16 +0000 (10:42 +0200)]
Merge pull request #5514 from pieterlexis/rm-blockfilter
dnsdist: Remove BlockFilter
Remi Gacogne [Mon, 17 Jul 2017 08:29:45 +0000 (10:29 +0200)]
rec: Fix validation at the exact RRSIG inception or expiration time
Reported by Petr Špaček of cz.nic (thanks!).
Ruben Kerkhof [Fri, 14 Jul 2017 17:55:53 +0000 (19:55 +0200)]
Fix typo in two log messages
Peter van Dijk [Thu, 13 Jul 2017 12:13:30 +0000 (14:13 +0200)]
Merge pull request #5426 from stasic/postgres-bigint
Postgres bigint
Christian Hofstaedtler [Thu, 13 Jul 2017 09:35:55 +0000 (11:35 +0200)]
Remove DNSPacket from getAuth() signature
Peter van Dijk [Thu, 13 Jul 2017 08:41:33 +0000 (10:41 +0200)]
Merge pull request #5506 from cmouse/goracle
goraclebackend: Add missing query for last key insert id
Pieter Lexis [Wed, 12 Jul 2017 16:03:10 +0000 (18:03 +0200)]
rec docs: Update tools in the venv
Peter van Dijk [Wed, 12 Jul 2017 14:26:28 +0000 (16:26 +0200)]
Merge pull request #5512 from zeha/soa-no-packet
Auth: drop broken support for packet-specific SOA replies from backends
Pieter Lexis [Wed, 12 Jul 2017 11:07:14 +0000 (13:07 +0200)]
Merge pull request #5481 from pieterlexis/new-recursor-docs
New recursor documentation (for 4.1 and up)
Pieter Lexis [Wed, 28 Jun 2017 22:04:33 +0000 (00:04 +0200)]
Split the Recursor documentation
Transform it to restructured text and use Sphinx to build it.
Pieter Lexis [Tue, 11 Jul 2017 22:03:55 +0000 (00:03 +0200)]
dnsdist: Remove BlockFilter
Closes #5513
Christian Hofstaedtler [Tue, 11 Jul 2017 14:08:19 +0000 (16:08 +0200)]
LUABackend: sync function signatures with DNSBackend
Christian Hofstaedtler [Thu, 6 Oct 2016 17:32:37 +0000 (19:32 +0200)]
Auth: drop broken support for packet-specific SOA replies from backends
Christian Hofstaedtler [Tue, 11 Jul 2017 13:12:07 +0000 (15:12 +0200)]
bindbackend: avoid inconsistent override usage warnings
Peter van Dijk [Tue, 11 Jul 2017 12:43:43 +0000 (14:43 +0200)]
Merge pull request #5468 from cmouse/drop-lua-policy
Remove all Lua Policy Engine code
Remi Gacogne [Tue, 11 Jul 2017 07:52:52 +0000 (09:52 +0200)]
Merge pull request #5508 from rgacogne/dnsdist-dnscrypt-timestamps
dnsdist: Fix the DNSCrypt timestamps returned by the Lua bindings
Pieter Lexis [Mon, 10 Jul 2017 12:24:00 +0000 (14:24 +0200)]
rec: print records and sigs in negcache dump
Pieter Lexis [Mon, 10 Jul 2017 11:45:42 +0000 (13:45 +0200)]
rec: Show auth state recursor cache dump
Pieter Lexis [Mon, 10 Jul 2017 11:36:43 +0000 (13:36 +0200)]
rec: Show validation state in recursor cache dump
Pieter Lexis [Mon, 10 Jul 2017 11:29:49 +0000 (13:29 +0200)]
rec: Dump RRSIGs from record cache
Christian Hofstaedtler [Mon, 10 Jul 2017 08:59:31 +0000 (10:59 +0200)]
Ship ldapbackend schema files in tarball
Remi Gacogne [Sun, 9 Jul 2017 10:29:08 +0000 (12:29 +0200)]
dnsdist: Fix the DNSCrypt timestamps returned by the Lua bindings
I completely forgot that they were stored in network by-order.
Thanks to bjoe2k4 for reporting the issue!
Aki Tuomi [Sat, 8 Jul 2017 17:28:21 +0000 (20:28 +0300)]
goraclebackend: Add missing query for last key insert id
Forgotten in
63de53119e80fa93c6374f0db0c4cd5b2712f37c
Remi Gacogne [Fri, 7 Jul 2017 15:00:29 +0000 (17:00 +0200)]
dnsdist: Clarify that NetmaskGroupRule can match the destination
Remi Gacogne [Fri, 7 Jul 2017 15:05:45 +0000 (17:05 +0200)]
Merge pull request #5353 from rgacogne/dnsdist-statnode-labels
dnsdist: Add labels count to StatNode, only set the name once
Remi Gacogne [Fri, 7 Jul 2017 15:04:42 +0000 (17:04 +0200)]
Merge pull request #5490 from rgacogne/dnsdist-certificate-rotation
dnsdist: Add Lua bindings to be able to rotate `DNSCrypt` keys
Remi Gacogne [Fri, 7 Jul 2017 15:04:05 +0000 (17:04 +0200)]
Merge pull request #5496 from rgacogne/dnsdist-lua-spoof-multi
dnsdist: Add support for returning several IPs to spoof from Lua
Remi Gacogne [Fri, 7 Jul 2017 15:03:15 +0000 (17:03 +0200)]
Merge pull request #5497 from rgacogne/dnsdist-dnsrule-tostring
dnsdist: Add `DNSRule::toString()`, fix dtors for rules and actions
Remi Gacogne [Fri, 7 Jul 2017 15:02:13 +0000 (17:02 +0200)]
Merge pull request #5502 from rgacogne/luawrapper-dont-move-sharedptr
LuaWrapper: Don't move the content of vectors, maps and unordered_maps
Aki Tuomi [Fri, 7 Jul 2017 09:53:19 +0000 (12:53 +0300)]
docs: Note that experimental-lua-policy-script has been dropped
Aki Tuomi [Tue, 27 Jun 2017 04:43:21 +0000 (07:43 +0300)]
docs: Drop unused documentation
This never was actually used anywhere, so it's
safe to drop.
Peter van Dijk [Fri, 7 Jul 2017 09:42:32 +0000 (11:42 +0200)]
Merge pull request #5493 from pieterlexis/disable-snmp-stretch
Don't build with SNMP on Debian Stretch
Remi Gacogne [Fri, 7 Jul 2017 08:27:07 +0000 (10:27 +0200)]
LuaWrapper: Don't move the content of vectors, maps and unordered_maps
They might hold shared pointers, and moving them cause the source
to become empty.
luawrapper
f9c686e2fa3ad5cf5593265dda491239e32e2955
Aki Tuomi [Tue, 27 Jun 2017 04:42:58 +0000 (07:42 +0300)]
lua-auth: Remove police and policycmd
Aki Tuomi [Tue, 27 Jun 2017 04:42:46 +0000 (07:42 +0300)]
Remove Lua Policy Engine calls from code
Aki Tuomi [Tue, 27 Jun 2017 04:42:32 +0000 (07:42 +0300)]
Remove Lua Policy Engine tests
bert hubert [Thu, 6 Jul 2017 23:35:59 +0000 (01:35 +0200)]
Merge pull request #5487 from rgacogne/rec-fix-socket-per-thread
rec: Fix all work threads listening on all 'per thread' sockets
bert hubert [Thu, 6 Jul 2017 23:35:08 +0000 (01:35 +0200)]
Merge pull request #5488 from rgacogne/fix-no-packet-error
rec: Only increase `no-packet-error` on the first read
bert hubert [Thu, 6 Jul 2017 23:34:07 +0000 (01:34 +0200)]
Merge pull request #5501 from rgacogne/dnsdist-tcp-short-writes
dnsdist: Fix TCP short writes handling
Remi Gacogne [Thu, 6 Jul 2017 22:11:49 +0000 (00:11 +0200)]
dnsdist: Fix TCP short writes handling
Peter van Dijk [Thu, 6 Jul 2017 19:31:51 +0000 (21:31 +0200)]
Merge pull request #5245 from rgacogne/auth-sql-connection-reset
auth: Reconnect to the server if the My/Pg connection has been closed
Peter van Dijk [Thu, 6 Jul 2017 08:50:48 +0000 (10:50 +0200)]
Merge pull request #5492 from Habbie/rec-4.0.6-changelog
changelog+secpoll for recursor 4.0.6
Remi Gacogne [Wed, 5 Jul 2017 15:49:42 +0000 (17:49 +0200)]
dnsdist: Add support for returning several IPs to spoof from Lua
Remi Gacogne [Tue, 28 Mar 2017 07:48:54 +0000 (09:48 +0200)]
dnsdist: Add virtual dtors for DNSRule, DNSAction and DNSResponseAction
Remi Gacogne [Tue, 28 Mar 2017 07:47:49 +0000 (09:47 +0200)]
dnsdist: Add `DNSRule::toString()` Lua binding
Peter van Dijk [Tue, 4 Jul 2017 13:37:32 +0000 (15:37 +0200)]
changelog+secpoll for recursor 4.0.6
Pieter Lexis [Tue, 4 Jul 2017 14:13:07 +0000 (16:13 +0200)]
rec: Add a test for multiple libcrypto linking
Pieter Lexis [Tue, 4 Jul 2017 12:55:53 +0000 (14:55 +0200)]
Don't build with SNMP on Debian Stretch
As net snmp is linked to OpenSSL 1.0 and we link against 1.1, users get
'interesting' crashes.
Pieter Lexis [Tue, 4 Jul 2017 09:16:12 +0000 (11:16 +0200)]
Merge pull request #5466 from zeha/rec-ws-exception
API: Clean up auth/recursor code mismatches
Pieter Lexis [Tue, 4 Jul 2017 09:15:57 +0000 (11:15 +0200)]
Merge pull request #5483 from rgacogne/rec-ecs-cache-scope-test
rec: Add ECS scope handling by the cache to our regression tests
Pieter Lexis [Tue, 4 Jul 2017 09:15:46 +0000 (11:15 +0200)]
Merge pull request #5484 from rgacogne/rec-ecs-update-validation-state
rec: Use ECS when updating the validation state if needed
Pieter Lexis [Tue, 4 Jul 2017 09:15:19 +0000 (11:15 +0200)]
Merge pull request #5486 from rgacogne/rec-dnssec-skipped-sec-to-insec
rec: Handle Secure to Insecure cut on the same auth servers
Remi Gacogne [Mon, 3 Jul 2017 18:42:17 +0000 (20:42 +0200)]
dnsdist: Add Lua bindings to be able to rotate `DNSCrypt` keys
Remi Gacogne [Mon, 3 Jul 2017 11:04:58 +0000 (13:04 +0200)]
rec: Only increase `no-packet-error` on the first read
We try to read as many messages as possible after being woken up,
but only the first read can count as a no-packet error.
Remi Gacogne [Mon, 3 Jul 2017 10:59:33 +0000 (12:59 +0200)]
rec: Fix all work threads listening on all 'per thread' sockets
Remi Gacogne [Mon, 3 Jul 2017 09:16:51 +0000 (11:16 +0200)]
rec: Handle Secure to Insecure cut on the same auth servers
Meaning the NS answer for the Insecure zone won't be signed and
won't have a DS denial. We will pick that up with the following
DS query, but we need to make sure the NS answer isn't considered
Bogus even though it's not signed.
Remi Gacogne [Mon, 3 Jul 2017 08:56:19 +0000 (10:56 +0200)]
rec: Fix invalid test for Secure to Insecure on the same auth servers
The answer for the NS of the insecure sub-zone have neither RRSIG nor
secure DS denial.
Remi Gacogne [Sat, 1 Jul 2017 22:12:05 +0000 (00:12 +0200)]
rec: Use ECS when updating the validation state if needed
If `use-incoming-ecs` is set and an actual ECS value was received.
Remi Gacogne [Fri, 30 Jun 2017 18:27:50 +0000 (20:27 +0200)]
rec: Add ECS scope handling by the cache in our regression tests
bert hubert [Thu, 29 Jun 2017 18:54:33 +0000 (20:54 +0200)]
Merge pull request #5477 from rgacogne/rec-ecs-tests
rec: Add ECS regression tests