Commit graph

19669 commits

Author SHA1 Message Date
Daniel Salzman
8bf5784202 docker 2025-07-29 18:30:55 +02:00
Daniel Salzman
be7b1e6bbf Dockerfile: fix LegacyKeyValueFormat warnings 2025-07-29 18:01:42 +02:00
Libor Peltan
96ee3484a3 Merge branch 'zone-reload-expired' into 'master'
Allow zone-reload on expired zone

See merge request knot/knot-dns!1794
2025-07-28 10:03:47 +02:00
Jan Doskočil
048c94982d libngtcp2: update embedded library to v1.14.0 2025-07-25 18:07:15 +02:00
Daniel Salzman
e365c348c6 ctl: allow zone-reload on expired zone
This operation is useful for resolving issues such as journal inconsistencies.
2025-07-25 13:34:39 +02:00
Daniel Salzman
6d79f78d3b doc: improve description of reverse-generate 2025-07-25 13:32:20 +02:00
Daniel Salzman
d7a4883482 server: fix possible use after free if member zone is reused when full reload 2025-07-25 08:19:50 +02:00
Daniel Salzman
00cccfd8c4 Merge branch 'key_for_auto_use' into 'master'
keymgr: implement key for-auto pregeneration

See merge request knot/knot-dns!1788
2025-07-21 14:33:57 +02:00
Daniel Salzman
3ba7c8677f keymgr: make log message more general 2025-07-21 14:24:21 +02:00
Daniel Salzman
4be0af187b keymgr: support colon separators in keyid 2025-07-21 14:24:21 +02:00
Daniel Salzman
ac4b4a9f33 keymgr: refactoring 2025-07-21 14:24:21 +02:00
Daniel Salzman
103e315fb1 keymgr: update help and documentation 2025-07-21 14:24:21 +02:00
Daniel Salzman
3edaf24f02 keymgr: interpret omitted bool argument as true 2025-07-21 14:20:48 +02:00
Libor Peltan
a47773cfe6 keymgr: implement key for-auto key pregeneration 2025-07-21 14:20:48 +02:00
Daniel Salzman
4bdf2f07e9 Merge branch 'pkg_keymgr' 2025-07-19 19:00:29 +02:00
Daniel Salzman
711dbe6088 distro/deb: add explicit libdnssec9 for libknot15 2025-07-19 18:35:05 +02:00
Jakub Ružička
39dc0a35cb distro/rpm: split keymgr into knot-keymgr package 2025-07-19 18:35:05 +02:00
Jakub Ružička
c3f8543a15 distro/deb: split keymgr into knot-keymgr package 2025-07-19 18:35:05 +02:00
Libor Peltan
d3bc2efdc7 Merge branch 'ctl_before_udp_tcp_v3' into 'master'
Start knotd control interface before query answering

See merge request knot/knot-dns!1792
2025-07-18 08:28:10 +02:00
Daniel Salzman
b4e2e48e79 systemd: remove no longer needed systemd_tasks_status_notify() 2025-07-17 18:37:53 +02:00
David Vašek
07ff168c50 knotd: cycle the interrupt-processing/start-detection loop faster 2025-07-17 18:37:53 +02:00
David Vašek
cb089b2123 knotd: update the wording of logs regarding server start 2025-07-17 18:37:53 +02:00
David Vašek
6149c8b850 knotd: don't log "starting server" berfore the server can answer queries 2025-07-17 18:37:53 +02:00
David Vašek
60d01eb363 knotd: start ctl early in server bootstrap 2025-07-17 18:37:53 +02:00
David Vašek
b6fd803bbc server: allow separate start of answering 2025-07-17 18:37:53 +02:00
David Vašek
be1db77fb5 server: discriminate between server running and answering (add the ServerAnswering state) 2025-07-17 18:37:53 +02:00
David Vašek
0857cf0b2d zone: optimize preferred_master allocation 2025-07-17 18:37:53 +02:00
Libor Peltan
d7d7cf66c1 Merge branch 'optional_timers' into 'master'
Skip empty timers when storing

See merge request knot/knot-dns!1791
2025-07-17 14:33:05 +02:00
Jan Hák
4a4337af8e knot: skip empty timers at lmdb key 2025-07-17 12:25:58 +02:00
Libor Peltan
6169020ec3 Merge branch 'notify-delay-new' into 'master'
Rework notify-delay to be more practical and consistent with Bind

See merge request knot/knot-dns!1789
2025-07-16 20:51:02 +02:00
David Vašek
749d3cde96 tests-extra: dnssec/dnskey_sync -- avoid infinite loop 2025-07-15 11:21:15 +02:00
Daniel Salzman
8c59b46adb conf: rework notify-delay to be more practical and consistent with Bind 2025-07-14 07:53:48 +02:00
David Vašek
6d628be655 doc/operation: update the XDP section to TCP and QUIC protocols 2025-07-10 13:40:49 +02:00
Daniel Salzman
f678afc03d tests-extra: improve stability of dnssec/keystores 2025-07-02 12:06:45 +02:00
Daniel Salzman
bbb4bb6c26 Merge branch 'keystore_multi' into 'master'
dnssec: implemented multi-keystore option...

See merge request knot/knot-dns!1787
2025-07-01 10:59:43 +02:00
Daniel Salzman
803947eb40 keymgr: print keystore name and its type when listing keys 2025-07-01 10:51:18 +02:00
Libor Peltan
34cb1aef7c dnssec/multi-keystore: implemented ksk-only keystore...
...so that KSKs and ZSKs can be in distinct keystores
2025-07-01 10:51:18 +02:00
Libor Peltan
415f5bf88e dnssec: implemented multi-keystore option...
...useful e.g. for hsm-to-pem migration
2025-07-01 08:42:04 +02:00
Daniel Salzman
626d062f54 conf: support default values for multivalued items 2025-06-30 11:28:09 +02:00
Daniel Salzman
eec9afaa65 requestor: avoid calling close(-1) (Coverity) 2025-06-30 06:55:48 +02:00
Daniel Salzman
0a7d0fd9ca libknot: avoid calling close(-1) (Coverity) 2025-06-30 06:55:48 +02:00
Daniel Salzman
6dce07a796 refresh: establish a new TCP connection for XFR if no-edns is set 2025-06-27 14:29:19 +02:00
Daniel Salzman
d10c345bf3 tests-extra: attempt to fix tls/quic xfr tests 2025-06-26 13:52:06 +02:00
Daniel Salzman
0b082c2673 Merge branch 'stop_in_multi_ctl' into 'master'
fix and improve server shutdown in multi-ctl

See merge request knot/knot-dns!1781
2025-06-24 11:26:16 +02:00
David Vašek
d0db6eac3b server: coding style 2025-06-24 11:09:04 +02:00
David Vašek
7857bc5089 ctl: after receiving the 'stop' command, interrupt the socket ctl thread immediately
This enables quick shutdown without waiting for timeouts in the socket ctl thread.
2025-06-24 11:09:04 +02:00
David Vašek
c07046a2cf ctl: link concurrent_ctl_ctx_t to the main socket control thread 2025-06-24 11:09:04 +02:00
David Vašek
4789dc2375 ctl: don't assign to a cctx thread that carries the 'stop' information
Otherwise the 'stop' information (KNOT_CTL_ESTOP) would be overwritten.
2025-06-24 11:09:04 +02:00
Daniel Salzman
342f4466a1 tests-extra: improve stability of quic/xfr under Valgrind 2025-06-24 10:27:41 +02:00
Daniel Salzman
326525dbbe Merge branch 'knotd-cert-ca' into 'master'
remote/acl TLS certificate validation

See merge request knot/knot-dns!1779
2025-06-23 18:19:04 +02:00