summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* ctl: replace cmd_zone_ctl() with cmd_zone_filter_ctl()Daniel Salzman2024-10-111-44/+7
|
* Merge branch 'kxdpgun_client_only' into 'master'Daniel Salzman2024-10-114-1/+11
|\ | | | | | | | | kxdpgun: block eventual creation of conns when recvd initial... See merge request knot/knot-dns!1719
| * quic/requestor: block hypothetical conn creation upon recv InitialLibor Peltan2024-10-111-0/+1
| |
| * kxdpgun: block eventual creation of conns when recvd initial...Libor Peltan2024-10-113-1/+10
|/ | | | ...just to make sure
* Merge branch 'doc_retire_ksk' into 'master'Daniel Salzman2024-10-111-1/+1
|\ | | | | | | | | doc/keymgr: align description of 'retire' with current behavior See merge request knot/knot-dns!1720
| * doc/keymgr: align description of 'retire' with current behaviorLibor Peltan2024-10-111-1/+1
| |
* | kxdpgun: bugfix: allow multiple recvs til 1-rtt handshake doneLibor Peltan2024-10-111-2/+0
| |
* | tests: stabilize modules/test_rrlDaniel Salzman2024-10-111-1/+1
|/
* tests-extra: stabilize dnssec/expireDaniel Salzman2024-10-101-0/+4
|
* Merge branch 'refresh_expire'Daniel Salzman2024-10-075-11/+75
|\
| * nameserver: refactor EDNS EXPIRE settingDaniel Salzman2024-10-071-9/+12
| |
| * dnssec: fix zone expiration based on EXPIRE if zone signing results in ↵Daniel Salzman2024-10-075-3/+64
|/ | | | up-to-date
* Dockerfile: expose 853/TCP port for DoTDaniel Salzman2024-10-071-0/+1
|
* contrib: upgrade embedded library ngtcp2 to v1.8.0Daniel Salzman2024-10-0581-2210/+2026
|
* rrl: fix zero increment in KRULukáš Ondráček2024-10-031-3/+4
|
* tests-extra: fix generation of random DDNS updates to not exceed dname limitDavid Vašek2024-10-021-2/+4
|
* Merge branch 'thread_create_nosignal' into 'master'Daniel Salzman2024-09-278-23/+85
|\ | | | | | | | | threads: safely disable signals on threads launched by main thr except srv startup See merge request knot/knot-dns!1716
| * threads: safely disable signals on threads launched by main thr except srv ↵Libor Peltan2024-09-278-23/+85
|/ | | | startup
* Merge branch 'acl_proto'Daniel Salzman2024-09-2711-34/+353
|\
| * tests-extra: add test for ACL configurationDaniel Salzman2024-09-272-0/+214
| |
| * acl: add protocol option to the configurationJan Hák2024-09-279-34/+139
|/
* Merge branch 'ctl_uni'Daniel Salzman2024-09-259-120/+132
|\
| * ctl: add benevolent filter to the zone-begin commandJan Hák2024-09-244-5/+18
| |
| * ctl: rename KNOT_CTL_IDX_FILTER to KNOT_CTL_IDX_FILTERSDaniel Salzman2024-09-245-19/+19
| |
| * ctl: change filters to strings to be consistent with flagsDaniel Salzman2024-09-244-42/+41
| |
| * ctl: move command-specific flags to filtersDaniel Salzman2024-09-245-62/+62
|/ | | | This affects conf-list, conf-diff, zone-diff, and zone-status.
* Merge branch 'dnskey_sync_log' into 'master'Daniel Salzman2024-09-172-1/+62
|\ | | | | | | | | multi-signer: log rem/added *DNSKEYs upon DNSKEY sync See merge request knot/knot-dns!1715
| * multi-signer: log rem/added *DNSKEYs upon DNSKEY syncLibor Peltan2024-09-172-1/+62
|/
* asan: silence a faulty GCC warningJan Doskočil2024-09-161-9/+24
| | | | fixes #933
* Merge branch 'link_local_ipv6'Daniel Salzman2024-09-164-33/+139
|\ | | | | | | fixes #936
| * yparser: add support for link-local IPv6 addressesJan Hák2024-09-163-32/+128
| |
| * contrib: add support for link local IPv6 in sockaddr_tostr()Daniel Salzman2024-09-161-1/+11
|/
* quic: remove already unused QUIC_ macros谢致邦 (XIE Zhibang)2024-09-151-4/+0
| | | | | Fixes: bd75c1fe3 (tls: unification of TLS priority settings, 2024-04-26) Signed-off-by: 谢致邦 (XIE Zhibang) <Yeking@Red54.com>
* knsupdate: fix memory leak if rdata parsing failsDaniel Salzman2024-09-131-0/+1
|
* libknot/QUIC/DDNS: fix race when unblocking conn after sent DDNS replyLibor Peltan2024-09-132-2/+3
|
* tests: flush before random_ddns() to ensure clean zonefile formatLibor Peltan2024-09-121-0/+1
|
* Merge branch 'keysonly_test' into 'master'Libor Peltan2024-09-121-0/+47
|\ | | | | | | | | Test zone-backup/zone-restore '+keysonly' checking of data availability See merge request knot/knot-dns!1714
| * tests-extra: zone/backup_lock -- check '+keysonly' backup/restoreDavid Vašek2024-09-121-0/+47
| |
* | fix: prevent coredump in zone-reload by introducing semaphore protection...solidcc22024-09-121-0/+2
| | | | | | | | | | | | when generating new zone_contents_t for newzone fixes #939
* | libknot/TLS: unify flags for TLS and QUICLibor Peltan2024-09-121-1/+1
|/
* doc: add info about DS generation during key rolloverDaniel Salzman2024-09-121-1/+8
|
* doc: add an example for CSK importDaniel Salzman2024-09-121-3/+7
|
* Merge branch 'keymgr_check_keys' into 'master'Daniel Salzman2024-09-121-7/+26
|\ | | | | | | | | In keymgr, report configured keys that are inaccessible See merge request knot/knot-dns!1713
| * keymgr: report configured keys that are inaccessibleDavid Vašek2024-09-121-7/+26
|/
* Merge branch 'fix_backup_keysonly' into 'master'Daniel Salzman2024-09-111-1/+1
|\ | | | | | | | | FIx 'zone-backup +keysonly' to really switch off other defaults See merge request knot/knot-dns!1712
| * backup: fix '+keysonly' to really switch off other defaultsDavid Vašek2024-09-111-1/+1
|/ | | | This fixes commit 48868e1b3a287ad937dbebe9f43ed682b1509657
* Merge branch 'nxname-rrtype' into 'master'Daniel Salzman2024-09-112-6/+9
|\ | | | | | | | | libknot: add NXNAME meta type See merge request knot/knot-dns!1711
| * libknot: add NXNAME meta typeJan Včelák2024-09-112-6/+9
|/
* distro/deb: replace pkg-config with pkgconf as suggested by debianDaniel Salzman2024-09-112-2/+2
|
* Merge branch 'tls_session_resump' into 'master'Daniel Salzman2024-09-1013-24/+149
|\ | | | | | | | | DoT: implemented TLS session resumption See merge request knot/knot-dns!1710