Changes in example.com.zone http://nxr.netbsd.org/rss/src/external/bsd/unbound/dist/testdata/auth_https.tdir/127.0.0.1/example.com.zone en Copyright 2005 Java branches: 1.1.1;<br/>Initial revision /src/external/bsd/unbound/dist/testdata/auth_https.tdir/127.0.0.1/example.com.zone - 1.1 Mon Sep 03 14:09:34 UTC 2018 christos branches: 1.1.1.1.2; 1.1.1.1.4;<br/>Import unbound-1.7.3<br/><br/>19 June 2018: Wouter<br/> - Fix for unbound-control on Windows and set TCP socket parameters<br/> more closely.<br/> - Fix windows unbound-control no cert bad file descriptor error.<br/><br/>18 June 2018: Wouter<br/> - Fix that control-use-cert: no works for 127.0.0.1 to disable certs.<br/> - Fix unbound-checkconf for control-use-cert.<br/><br/>15 June 2018: Wouter<br/> - tag for 1.7.3rc1.<br/><br/>14 June 2018: Wouter<br/> - #4103: Fix that auth-zone does not insist on SOA record first in<br/> file for url downloads.<br/> - Fix that first control-interface determines if TLS is used. Warn<br/> when IP address interfaces are used without TLS.<br/> - Fix nettle compile.<br/><br/>12 June 2018: Ralph<br/> - Don't count CNAME response types received during qname minimisation as<br/> query restart.<br/><br/>12 June 2018: Wouter<br/> - #4102 for NSD, but for Unbound. Named unix pipes do not use<br/> certificate and key files, access can be restricted with file and<br/> directory permissions. The option control-use-cert is no longer<br/> used, and ignored if found in unbound.conf.<br/> - Rename tls-additional-ports to tls-additional-port, because every<br/> line adds one port.<br/> - Fix buffer size warning in unit test.<br/> - remade dependencies in the Makefile.<br/><br/>6 June 2018: Wouter<br/> - Patch to fix openwrt for mac os build darwin detection in configure.<br/><br/>5 June 2018: Wouter<br/> - Fix crash if ratelimit taken into use with unbound-control<br/> instead of with unbound.conf.<br/><br/>4 June 2018: Wouter<br/> - Fix deadlock caused by incoming notify for auth-zone.<br/> - tag for 1.7.2rc1, became 1.7.2 release on 11 June 2018,<br/> trunk is 1.7.3 in development from this point.<br/> - #4100: Fix stub reprime when it becomes useless.<br/><br/>1 June 2018: Wouter<br/> - Rename additional-tls-port to tls-additional-ports.<br/> The older name is accepted for backwards compatibility.<br/><br/>30 May 2018: Wouter<br/> - Patch from Syzdek: Add ability to ignore RD bit and treat all<br/> requests as if the RD bit is set.<br/><br/>29 May 2018: Wouter<br/> - in compat/arc4random call getentropy_urandom when getentropy fails<br/> with ENOSYS.<br/> - Fix that fallback for windows port.<br/><br/>28 May 2018: Wouter<br/> - Fix windows tcp and tls spin on events.<br/> - Add routine from getdns to add windows cert store to the SSL_CTX.<br/> - tls-win-cert option that adds the system certificate store for<br/> authenticating DNS-over-TLS connections. It can be used instead<br/> of the tls-cert-bundle option, or with it to add certificates.<br/><br/>25 May 2018: Wouter<br/> - For TCP and TLS connections that don't establish, perform address<br/> update in infra cache, so future selections can exclude them.<br/> - Fix that tcp sticky events are removed for closed fd on windows.<br/> - Fix close events for tcp only.<br/><br/>24 May 2018: Wouter<br/> - Fix that libunbound can do DNS-over-TLS, when configured.<br/> - Fix that windows unbound service can use DNS-over-TLS.<br/> - unbound-host initializes ssl (for potential DNS-over-TLS usage<br/> inside libunbound), when ssl upstream or a cert-bundle is configured.<br/><br/>23 May 2018: Wouter<br/> - Use accept4 to speed up incoming TCP (and TLS) connections,<br/> available on Linux, FreeBSD and OpenBSD.<br/><br/>17 May 2018: Ralph<br/> - Qname minimisation default changed to yes.<br/><br/>15 May 2018: Wouter<br/> - Fix low-rtt-pct to low-rtt-permil, as it is parts in one thousand.<br/><br/>11 May 2018: Wouter<br/> - Fix contrib/libunbound.pc for libssl libcrypto references,<br/> from https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=226914<br/><br/>7 May 2018: Wouter<br/> - Fix windows to not have sticky TLS events for TCP.<br/> - Fix read of DNS over TLS length and data in one read call.<br/> - Fix mesh state assertion failure due to callback removal.<br/><br/>3 May 2018: Wouter<br/> - Fix that configure --with-libhiredis also turns on cachedb.<br/> - Fix gcc 8 buffer warning in testcode.<br/> - Fix function type cast warning in libunbound context callback type.<br/><br/>2 May 2018: Wouter<br/> - Fix fail to reject dead peers in forward-zone, with ssl-upstream.<br/><br/>1 May 2018: Wouter<br/> - Fix that unbound-control reload frees the rrset keys and returns<br/> the memory pages to the system.<br/><br/>30 April 2018: Wouter<br/> - Fix spelling error in man page and note defaults as no instead of<br/> off.<br/><br/>26 April 2018: Wouter<br/> - Fix for crash in daemon_cleanup with dnstap during reload,<br/> from Saksham Manchanda.<br/> - Also that for dnscrypt.<br/> - tag for 1.7.1rc1 release. Became 1.7.1 release on 3 May, trunk<br/> is from here 1.7.2 in development.<br/><br/>25 April 2018: Ralph<br/> - Fix memory leak when caching wildcard records for aggressive NSEC use<br/><br/>24 April 2018: Wouter<br/> - Fix contrib/fastrpz.patch for this release.<br/> - Fix auth https for libev.<br/><br/>24 April 2018: Ralph<br/> - Added root-key-sentinel support<br/><br/>23 April 2018: Wouter<br/> - makedist uses bz2 for expat code, instead of tar.gz.<br/> - Fix #4092: libunbound: use-caps-for-id lacks colon in<br/> config_set_option.<br/> - auth zone http download stores exact copy of downloaded file,<br/> including comments in the file.<br/> - Fix sldns parse failure for CDS alternate delete syntax empty hex.<br/> - Attempt for auth zone fix; add of callback in mesh gets from<br/> callback does not skip callback of result.<br/> - Fix cname classification with qname minimisation enabled.<br/> - list_auth_zones unbound-control command.<br/><br/>20 April 2018: Wouter<br/> - man page documentation for dns-over-tls forward-addr '#' notation.<br/> - removed free from failed parse case.<br/> - Fix #4091: Fix that reload of auth-zone does not merge the zonefile<br/> with the previous contents.<br/> - Delete auth zone when removed from config.<br/><br/>19 April 2018: Wouter<br/> - Can set tls authentication with forward-addr: IP#tls.auth.name<br/> And put the public cert bundle in tls-cert-bundle: "ca-bundle.pem".<br/> such as forward-addr: 9.9.9.9@853#dns.quad9.net or<br/> 1.1.1.1@853#cloudflare-dns.com<br/> - Fix #658: unbound using TLS in a forwarding configuration does not<br/> verify the server's certificate (RFC 8310 support).<br/> - For addr with #authname and no @port notation, the default is 853.<br/><br/>18 April 2018: Wouter<br/> - Fix auth-zone retry timer to be on schedule with retry timeout,<br/> with backoff. Also time a refresh at the zone expiry.<br/><br/>17 April 2018: Wouter<br/> - auth zone notify work.<br/> - allow-notify: config statement for auth-zones.<br/> - unit test for allow-notify<br/><br/>16 April 2018: Wouter<br/> - Fix auth zone target lookup iterator.<br/> - auth zone notify with prefix<br/> - auth zone notify work.<br/><br/>13 April 2018: Wouter<br/> - Fix for max include depth for authzones.<br/> - Fix memory free on fail for $INCLUDE in authzone.<br/> - Fix that an internal error to look up the wrong rr type for<br/> auth zone gets stopped, before trying to send there.<br/> - auth zone notify work.<br/><br/>10 April 2018: Ralph<br/> - num.query.aggressive.NOERROR and num.query.aggressive.NXDOMAIN<br/> statistics counters.<br/><br/>10 April 2018: Wouter<br/> - documentation for low-rtt and low-rtt-pct.<br/> - auth zone notify work.<br/><br/>9 April 2018: Wouter<br/> - Fix that flush_zone sets prefetch ttl expired, so that with<br/> serve-expired enabled it'll start prefetching those entries.<br/> - num.query.authzone.up and num.query.authzone.down statistics counters.<br/> - Fix downstream auth zone, only fallback when auth zone fails to<br/> answer and fallback is enabled.<br/> - Accept both option names with and without colon for get_option<br/> and set_option.<br/> - low-rtt and low-rtt-pct in unbound.conf enable the server selection<br/> of fast servers for some percentage of the time.<br/><br/>5 April 2018: Wouter<br/> - Combine write of tcp length and tcp query for dns over tls.<br/> - nitpick fixes in example.conf.<br/> - Fix above stub queries for type NS and useless delegation point.<br/> - Fix unbound-control over pipe with openssl 1.1.1, the TLSv1.3<br/> tls_choose_sigalg routine does not allow the ciphers for the pipe,<br/> so use TLSv1.2.<br/> - ED448 support.<br/><br/>3 April 2018: Wouter<br/> - Fix #4043: make test fails due to v6 presentation issue in macOS.<br/> - Fix unable to resolve after new WLAN connection, due to auth-zone<br/> failing with a forwarder set. Now, auth-zone is only used for<br/> answers (not referrals) when a forwarder is set.<br/><br/>29 March 2018: Ralph<br/> - Check "result" in dup_all(), by Florian Obser.<br/><br/>23 March 2018: Ralph<br/> - Fix unbound-control get_option aggressive-nsec<br/><br/>21 March 2018: Ralph<br/> - Do not use cached NSEC records to generate negative answers for<br/> domains under DNSSEC Negative Trust Anchors.<br/><br/>19 March 2018: Wouter<br/> - iana port update.<br/><br/>16 March 2018: Wouter<br/> - corrected a minor typo in the changelog.<br/> - move htobe64/be64toh portability code to cachedb.c.<br/><br/>15 March 2018: Wouter<br/> - Add --with-libhiredis, unbound support for a new cachedb backend<br/> that uses a Redis server as the storage. This implementation<br/> depends on the hiredis client library (https://redislabs.com/lp/hiredis/).<br/> And unbound should be built with both --enable-cachedb and<br/> --with-libhiredis[=PATH] (where $PATH/include/hiredis/hiredis.h<br/> should exist). Patch from Jinmei Tatuya (Infoblox).<br/> - Fix #3817: core dump happens in libunbound delete, when queued<br/> servfail hits deleted message queue.<br/> - Create additional tls service interfaces by opening them on other<br/> portnumbers and listing the portnumbers as additional-tls-port: nr.<br/><br/>13 March 2018: Wouter<br/> - Fix typo in documentation.<br/> - Fix #3736: Fix 0 TTL domains stuck on SERVFAIL unless manually<br/> flushed with serve-expired on.<br/><br/>12 March 2018: Wouter<br/> - Added documentation for aggressive-nsec: yes.<br/> - tag 1.7.0rc3. That became the 1.7.0 release on 15 Mar, trunk<br/> now has 1.7.1 in development.<br/> - Fix #3727: Protocol name is TLS, options have been renamed but<br/> documentation is not consistent.<br/> - Check IXFR start serial.<br/><br/>9 March 2018: Wouter<br/> - Fix #3598: Fix swig build issue on rhel6 based system.<br/> configure --disable-swig-version-check stops the swig version check.<br/><br/>8 March 2018: Wouter<br/> - tag 1.7.0rc2.<br/><br/>7 March 2018: Wouter<br/> - Fixed contrib/fastrpz.patch, even though this already applied<br/> cleanly for me, now also for others.<br/> - patch to log creates keytag queries, from A. Schulze.<br/> - patch suggested by Debian lintian: allow to -> allow one to, from<br/> A. Schulze.<br/> - Attempt to remove warning about trailing whitespace.<br/><br/>6 March 2018: Wouter<br/> - Reverted fix for #3512, this may not be the best way forward;<br/> although it could be changed at a later time, to stay similar to<br/> other implementations.<br/> - svn trunk contains 1.7.0, this is the number for the next release.<br/> - Fix for windows compile.<br/> - tag 1.7.0rc1.<br/><br/>5 March 2018: Wouter<br/> - Fix to check define of DSA for when openssl is without deprecated.<br/> - iana port update.<br/> - Fix #3582: Squelch address already in use log when reuseaddr option<br/> causes same port to be used twice for tcp connections.<br/><br/>27 February 2018: Wouter<br/> - Fixup contrib/fastrpz.patch so that it applies.<br/> - Fix compile without threads, and remove unused variable.<br/> - Fix compile with staticexe and python module.<br/> - Fix nettle compile.<br/><br/>22 February 2018: Ralph<br/> - Save wildcard RRset from answer with original owner for use in<br/> aggressive NSEC.<br/><br/>21 February 2018: Wouter<br/> - Fix #3512: unbound incorrectly reports SERVFAIL for CAA query<br/> when there is a CNAME loop.<br/> - Fix validation for CNAME loops. When it detects a cname loop,<br/> by finding the cname, cname in the existing list, it returns<br/> the partial result with the validation result up to then.<br/> - more robust cachedump rrset routine.<br/><br/>19 February 2018: Wouter<br/> - Fix #3505: Documentation for default local zones references<br/> wrong RFC.<br/> - Fix #3494: local-zone noview can be used to break out of the view<br/> to the global local zone contents, for queries for that zone.<br/> - Fix for more maintainable code in localzone.<br/><br/>16 February 2018: Wouter<br/> - Fixes for clang static analyzer, the missing ; in<br/> edns-subnet/addrtree.c after the assert made clang analyzer<br/> produce a failure to analyze it.<br/><br/>13 February 2018: Ralph<br/> - Aggressive NSEC tests<br/><br/>13 February 2018: Wouter<br/> - tls-cert-bundle option in unbound.conf enables TLS authentication.<br/> - iana port update.<br/><br/>12 February 2018: Wouter<br/> - Unit test for auth zone https url download.<br/><br/>12 February 2018: Ralph<br/> - Added tests with wildcard expanded NSEC records (CVE-2017-15105 test)<br/> - Processed aggressive NSEC code review remarks Wouter<br/><br/>8 February 2018: Ralph<br/> - Aggressive use of NSEC implementation. Use cached NSEC records to<br/> generate NXDOMAIN, NODATA and positive wildcard answers.<br/><br/>8 February 2018: Wouter<br/> - iana port update.<br/> - auth zone url config.<br/><br/>5 February 2018: Wouter<br/> - Fix #3451: dnstap not building when you have a separate build dir.<br/> And removed protoc warning, set dnstap.proto syntax to proto2.<br/> - auth-zone provides a way to configure RFC7706 from unbound.conf,<br/> eg. with auth-zone: name: "." for-downstream: no for-upstream: yes<br/> fallback-enabled: yes and masters or a zonefile with data.<br/><br/>2 February 2018: Wouter<br/> - Fix unfreed locks in log and arc4random at exit of unbound.<br/> - unit test with valgrind<br/> - Fix lock race condition in dns cache dname synthesis.<br/> - lock subnet new item before insertion to please checklocks,<br/> no modification of critical regions outside of lock region.<br/><br/>1 February 2018: Wouter<br/> - fix unaligned structure making a false positive in checklock<br/> unitialised memory.<br/><br/>29 January 2018: Ralph<br/> - Use NSEC with longest ce to prove wildcard absence.<br/> - Only use *.ce to prove wildcard absence, no longer names.<br/><br/>25 January 2018: Wouter<br/> - ltrace.conf file for libunbound in contrib.<br/><br/>23 January 2018: Wouter<br/> - Fix that unbound-checkconf -f flag works with auto-trust-anchor-file<br/> for startup scripts to get the full pathname(s) of anchor file(s).<br/> - Print fatal errors about remote control setup before log init,<br/> so that it is printed to console.<br/><br/>22 January 2018: Wouter<br/> - Accept tls-upstream in unbound.conf, the ssl-upstream keyword is<br/> also recognized and means the same. Also for tls-port,<br/> tls-service-key, tls-service-pem, stub-tls-upstream and<br/> forward-tls-upstream.<br/> - Fix #3397: Fix that cachedb could return a partial CNAME chain.<br/> - Fix #3397: Fix that when the cache contains an unsigned DNAME in<br/> the middle of a cname chain, a result without the DNAME could<br/> be returned. /src/external/bsd/unbound/dist/testdata/auth_https.tdir/127.0.0.1/example.com.zone - 1.1.1.1 Mon Sep 03 14:09:34 UTC 2018 christos Sync with HEAD /src/external/bsd/unbound/dist/testdata/auth_https.tdir/127.0.0.1/example.com.zone - 1.1.1.1.4.2 Mon Jun 10 21:51:46 UTC 2019 christos file example.com.zone was added on branch phil-wifi on 2019-06-10 21:51:46 +0000 /src/external/bsd/unbound/dist/testdata/auth_https.tdir/127.0.0.1/example.com.zone - 1.1.1.1.4.1 Mon Sep 03 14:09:34 UTC 2018 christos Sync with HEAD<br/><br/>Resolve a couple of conflicts (result of the uimin/uimax changes) /src/external/bsd/unbound/dist/testdata/auth_https.tdir/127.0.0.1/example.com.zone - 1.1.1.1.2.2 Thu Sep 06 06:51:54 UTC 2018 pgoyette file example.com.zone was added on branch pgoyette-compat on 2018-09-06 06:51:54 +0000 /src/external/bsd/unbound/dist/testdata/auth_https.tdir/127.0.0.1/example.com.zone - 1.1.1.1.2.1 Mon Sep 03 14:09:34 UTC 2018 pgoyette