Artem Boldariev b84fa122ce Make BIND refuse to serve XFRs over DoH ... We cannot use DoH for zone transfers. According to RFC8484 a DoH request contains exactly one DNS message (see Section 6: Definition of the "application/dns-message" Media Type, https://datatracker.ietf.org/doc/html/rfc8484#section-6). This makes DoH unsuitable for zone transfers as often (and usually!) these need more than one DNS message, especially for larger zones. As zone transfers over DoH are not (yet) standardised, nor discussed in RFC8484, the best thing we can do is to return "not implemented." Technically DoH can be used to transfer small zones which fit in one message, but that is not enough for the generic case. Also, this commit makes the server-side DoH code ensure that no multiple responses could be attempted to be sent over one HTTP/2 stream. In HTTP/2 one stream is mapped to one request/response transaction. Now the write callback will be called with failure error code in such a case.		2021-06-14 11:37:36 +03:00
..
startperf	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
system	Make BIND refuse to serve XFRs over DoH	2021-06-14 11:37:36 +03:00
testdata/wire	move all optional tests from bin/tests to bin/tests/optional	2018-03-09 14:12:47 -08:00
.gitignore	Refactor TLSDNS module to work with libuv/ssl directly	2021-01-25 09:19:22 +01:00
Makefile.am	Refactor TLSDNS module to work with libuv/ssl directly	2021-01-25 09:19:22 +01:00
named.conf	Remove a lot of obsoleted options	2021-01-19 10:12:40 +01:00
prepare-softhsm2.sh	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
test_client.c	Refactor the interface handling in the netmgr	2021-05-26 09:43:12 +02:00
test_server.c	Refactor the interface handling in the netmgr	2021-05-26 09:43:12 +02:00
wire_test.c	Silence CID 320481: Null pointer dereferences	2021-02-23 12:45:45 +00:00