ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
32,431 Commits 589 Branches 805 Tags
0c41c19cbf71f918625f218349fe5afa75c297f8
Commit Graph
32431 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Evan Hunt 0c41c19cbf fixup! nghttp2-based HTTP client with DoH support 2020-08-31 11:12:41 -07:00
Witold KręcickiandEvan Hunt bc3747f56b nghttp2-based HTTP client with DoH support 2020-08-31 11:12:41 -07:00
Witold KręcickiandEvan Hunt 213376b8fa Require libnghttp2 2020-08-31 11:12:41 -07:00
Witold KręcickiandEvan Hunt 9784baad54 XXX: disable -Wcast-qual for now 2020-08-31 11:12:41 -07:00
Witold KręcickiandEvan Hunt 7c01178369 netmgr/tls: call tls_do_bio in resumeread 
We might have some leftover data in bio buffer that we received
before pausing, we need to do tls_do_bio to make sure we call
the recv() callback on it.
 2020-08-31 11:12:41 -07:00
Evan Hunt 3b8e287994 fixup! netmgr/tls: logging 2020-08-31 11:12:41 -07:00
Witold KręcickiandEvan Hunt dbe5d42ff3 netmgr/tls: logging 2020-08-31 11:12:41 -07:00
Evan Hunt 469b7a5ecb fixup! isc_nm_cancelread returns true if the callback was called 2020-08-31 11:12:41 -07:00
Witold KręcickiandEvan Hunt ca3a5d1e52 isc_nm_cancelread returns true if the callback was called 2020-08-31 11:12:41 -07:00
Evan Hunt 2779c44e27 add "dig +tls" 
- add isc_nm_tlsdnsconnect() function
- add "+[no]tls" option to dig to enable TLS mode
- override the default port number in dig from 53 to 853 when using TLS
 2020-08-31 11:12:41 -07:00
Evan Hunt 3a09529d78 clean up some style nits 2020-08-31 11:12:41 -07:00
Witold KręcickiandEvan Hunt de0c3c3019 checkpoint/test: tcpdns always using TLS, to verify that dig can do DoT 2020-08-31 11:12:41 -07:00
Witold KręcickiandEvan Hunt f8ef33db6d post-merge-fixes 2020-08-31 11:12:41 -07:00
Witold KręcickiandEvan Hunt f43af328b6 tls connect: checkpoint 2020-08-31 11:12:41 -07:00
Witold KręcickiandEvan Hunt 090161e1fc CHANGES note 2020-08-31 11:12:41 -07:00
Witold KręcickiandEvan Hunt 1d32b9799e netmgr tcpdns: add support for DoT 
Add an optional SSL_CTX argument to isc_nm_listentcpdns - if not NULL,
use isc_nm_listentls instead of isc_nm_listentcp to listen on a TLS
socket for DoT.
 2020-08-31 10:58:37 -07:00
Witold KręcickiandEvan Hunt d7b441a1d5 netmgr: server-side TLS support 
Add server-side TLS support to netmgr - that includes moving some of the isc_nm_
functions from tcp.c to a wrapper in netmgr.c calling a proper tcp or tls
function, and a new isc_nm_listentls function.
 2020-08-31 10:58:37 -07:00
Witold KręcickiandEvan Hunt dc6811101a Add -lssl to OPENSSL_LIBS 2020-08-31 10:58:37 -07:00
Evan Hunt 5c52feb442 add more logging to the shutdown system test 2020-08-31 10:58:37 -07:00
Evan Hunt 7aa9bbb8ac clear sock->statichandle if it goes to 0 references 2020-08-31 10:58:37 -07:00
Evan Hunt 4c8f28f087 experiment: add cancelread support for UDP, tweak lookup locking 2020-08-31 10:58:37 -07:00
Evan Hunt 1817dadf5d limit the time we wait for netmgr to be destroyed 
if more than 10 seconds pass while we wait for netmgr
events to finish running on shutdown, something is almost
certainly wrong and we should assert and crash.
 2020-08-31 10:58:37 -07:00
Evan Hunt 34b0bb84ca fixup! checkpoint: convert dig to use netmgr for TCP 2020-08-31 10:58:37 -07:00
Evan Hunt eea946e741 fixup! checkpoint: convert dig to use netmgr for TCP 2020-08-31 10:58:37 -07:00
Evan Hunt d0f3d3f421 fixup! checkpoint: convert dig to use netmgr for UDP 2020-08-31 10:58:37 -07:00
Evan Hunt 9cefc63b4c fixup! checkpoint: convert dig to use netmgr for UDP 2020-08-31 10:58:37 -07:00
Evan Hunt 1cea2ede55 fixup! checkpoint: isc_nm_tcpdnsconnect 2020-08-31 10:58:37 -07:00
Evan Hunt 5316b99628 fixup! checkpoint: implement isc_nm_udpconnect() 2020-08-31 10:58:37 -07:00
Evan Hunt 77bedef71e checkpoint: convert dig to use netmgr for UDP 2020-08-31 10:58:37 -07:00
Evan Hunt db354895e7 checkpoint: implement isc_nm_read() for UDP 
isc_nm_read() on a UDP socket will now read a single datagram and
stop until next time.
 2020-08-31 10:58:37 -07:00
Evan Hunt 03009e7159 checkpoint: implement isc_nm_udpconnect() 
this function sets up a UDP socket, connected to a specified peer
address, then immediately calls a callback with a handle so that
the caller can begin sending.
 2020-08-31 10:58:37 -07:00
Evan Hunt c2adc2ac27 checkpoint: convert dig to use netmgr for TCP 2020-08-31 10:58:37 -07:00
Witold KręcickiandEvan Hunt cac6b52672 checkpoint: isc_nm_tcpdnsconnect 
add a function to establish outgoing TCPDNS connections.
 2020-08-31 10:58:37 -07:00
Witold KręcickiandEvan Hunt 9748d9f4d0 Rename isc_nmsocket_t->tcphandle to statichandle 2020-08-31 10:58:37 -07:00
Ondřej Surý 96c4010fe5 Merge branch '1996-deferred-system-test' into 'main' 
[CVE-2020-8620] Fix TCP DNS buffer sizes [TEST]

See merge request isc-projects/bind9!4038
 2020-08-31 10:04:42 +00:00
Ondřej Surý 2c796bb9c8 Add PoC for assertion failure on large TCP DNS messages 2020-08-31 12:04:01 +02:00
Ondřej Surý bd3d9f33dc Merge branch '1997-deferred-system-test' into 'main' 
[CVE-2020-8621] Ensure QNAME minimization is permanently disabled when forwarding [TEST]

See merge request isc-projects/bind9!4039
 2020-08-31 09:59:01 +00:00
Evan HuntandOndřej Surý dd8db89525 test whether DS chasing works correctly when forwarding 2020-08-31 11:21:22 +02:00
Ondřej Surý ed98f65479 Merge branch '2037-deferred-system-test' into 'main' 
Resolve "[CVE-2020-8623] A flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.c"

See merge request isc-projects/bind9!4037
 2020-08-31 08:58:03 +00:00
Ondřej SurýandOndřej Surý a69433ba40 Add PoC system test for pk11_numbits() assertion 2020-08-31 09:18:13 +02:00
Michał KępieńandOndřej Surý a7b78f3a40 Fix relative path to conf.sh in cleanpkcs11.sh 2020-08-31 09:18:13 +02:00
Ondřej Surý c3a351275b Merge branch '2028-deferred-system-test' into 'main' 
[CVE-2020-8622] Properly handle malformed truncated responses to TSIG queries [TEST]

See merge request isc-projects/bind9!4034
 2020-08-31 06:24:41 +00:00
Mark AndrewsandOndřej Surý 8bbf3eb5f3 check that a malformed truncated response to a TSIG query is handled 2020-08-31 08:19:13 +02:00
Ondřej Surý 9af47af0f7 Merge branch '1928-handle-EPROTO' into 'main' 
Resolve "error: socket.c:1540: unexpected error:"

Closes #1928

See merge request isc-projects/bind9!4023
 2020-08-28 18:47:43 +00:00
Ondřej Surý 4722196b13 Add CHANGES and release note for GL #1928 2020-08-28 20:46:34 +02:00
Ondřej Surý e0380d437d Handle EPROTO errno from recvmsg 
It was discovered, that some systems might set EPROTO instead of EACCESS
on recvmsg() call causing spurious syslog messages from the socket
code.  This commit returns soft handling of EPROTO errno code to the
socket code. [GL #1928]
 2020-08-28 20:45:52 +02:00
Ondřej Surý f59067807e Merge branch '2104-fix-off-by-one-error-in-rehash_bits' into 'main' 
Resolve "Bind 9.16.6 due to assertion failure"

Closes #2104

See merge request isc-projects/bind9!4030
 2020-08-28 15:42:13 +00:00
Ondřej Surý d47d2b3fe0 Add CHANGES and release notes for GL #2104 2020-08-28 16:21:56 +02:00
Ondřej Surý 78543ad5a7 Fix off-by-one error when calculating new hashtable size 
When calculating the new hashtable bitsize, there was an off-by-one
error that would allow the new bitsize to be larger than maximum allowed
causing assertion failure in the rehash() function.
 2020-08-28 16:21:21 +02:00
Michal Nowak 25d35029eb Merge branch 'mnowak/fix-tarball-test-suite.log-print' into 'main' 
Print test-suite.log correctly in tarball system test job

See merge request isc-projects/bind9!3990
 2020-08-28 12:38:32 +00:00