bind9/lib
Artem Boldariev b84fa122ce Make BIND refuse to serve XFRs over DoH
We cannot use DoH for zone transfers.  According to RFC8484 a DoH
request contains exactly one DNS message (see Section 6: Definition of
the "application/dns-message" Media Type,
https://datatracker.ietf.org/doc/html/rfc8484#section-6).  This makes
DoH unsuitable for zone transfers as often (and usually!) these need
more than one DNS message, especially for larger zones.

As zone transfers over DoH are not (yet) standardised, nor discussed
in RFC8484, the best thing we can do is to return "not implemented."

Technically DoH can be used to transfer small zones which fit in one
message, but that is not enough for the generic case.

Also, this commit makes the server-side DoH code ensure that no
multiple responses could be attempted to be sent over one HTTP/2
stream. In HTTP/2 one stream is mapped to one request/response
transaction. Now the write callback will be called with failure error
code in such a case.
2021-06-14 11:37:36 +03:00
..
bind9 Completely remove BIND 9 Windows support 2021-06-09 14:35:14 +02:00
dns Update the source code formatting using clang-format-12 2021-06-13 08:46:28 +02:00
irs Completely remove BIND 9 Windows support 2021-06-09 14:35:14 +02:00
isc Make BIND refuse to serve XFRs over DoH 2021-06-14 11:37:36 +03:00
isccc Completely remove BIND 9 Windows support 2021-06-09 14:35:14 +02:00
isccfg Completely remove BIND 9 Windows support 2021-06-09 14:35:14 +02:00
ns Make BIND refuse to serve XFRs over DoH 2021-06-14 11:37:36 +03:00
.gitignore Provide unit test driver 2020-05-21 12:13:01 +02:00
Makefile.am move samples/resolve.c to bin/tests/system 2021-04-16 14:29:43 +02:00
unit-test-driver.sh.in Enforce a run time limit on unit test binaries 2021-04-07 11:41:45 +02:00