Commit graph

334 commits

Author SHA1 Message Date
Daniel Salzman
711dbe6088 distro/deb: add explicit libdnssec9 for libknot15 2025-07-19 18:35:05 +02:00
Jakub Ružička
39dc0a35cb distro/rpm: split keymgr into knot-keymgr package 2025-07-19 18:35:05 +02:00
Jakub Ružička
c3f8543a15 distro/deb: split keymgr into knot-keymgr package 2025-07-19 18:35:05 +02:00
Daniel Salzman
326525dbbe Merge branch 'knotd-cert-ca' into 'master'
remote/acl TLS certificate validation

See merge request knot/knot-dns!1779
2025-06-23 18:19:04 +02:00
Daniel Salzman
9f0f79779a server: purge sessticket_pool on server reload if creds changed 2025-06-23 17:55:14 +02:00
Jan Doskočil
261c378b74 conf: implemented certificate hostname validation 2025-06-23 17:55:14 +02:00
Jakub Ružička
86b02c4ad8 distro/tests: new python-libknot test 2025-06-13 19:39:15 +02:00
Jakub Ružička
e8f443c425 distro/tests: fix apkg test Depends
It's not possible to distro.match() against pkgstyles such as `rpm` or
`deb` with current apkg.
2025-06-13 13:32:32 +02:00
Jakub Ružička
119273e0f0 distro/rpm: remove %{_isa} from noarch packages' Requires
noarch packages shouldn't depend on specific architectures.
2025-06-13 13:32:32 +02:00
Jakub Ružička
c88205bf67 distro/rpm: use modern %pyproject_* macros
Support new %pyproject_* macros where they're supported, otherwise use
older %py3_* macros which work everywhere.

Introduce new %{PYPROJECT} var which is only set on distros supporting
new macros - Fedora >= 40 and EL >= 9.
2025-06-03 11:52:44 +02:00
Jakub Ružička
43ce8b74af distro/rpm: add knot-exporter and python3-libknot RPM subpackages 2025-06-03 11:52:34 +02:00
Libor Peltan
da0e3b0d95 dnskey sync: skip rrs with different keytag modulo 2025-05-26 10:17:42 +02:00
Daniel Salzman
8e9e021ff5 distro: adapt authoritative-server test for kzonecheck to autodetection 2025-05-23 17:35:29 +02:00
Daniel Salzman
fb9b2cc102 libknot: extend TLS API to be used for non-DNS communication 2025-05-19 08:19:15 +02:00
Daniel Salzman
0b82e73f63 libknot/tls: don't use %DISABLE_TLS13_COMPAT_MODE with old GnuTLS versions...
and allow TLS 1.2 in kdig.
2025-05-06 12:59:46 +02:00
Daniel Salzman
6dc07c8968 distro: relicense to GPL-2.0-or-later 2025-03-24 09:53:50 +01:00
Daniel Salzman
d18fcbf03a scripts: replace dashes with underscores for some scripts 2025-03-24 09:53:50 +01:00
David Vašek
ca6078bcd1 contrib: list ISC license as such, not as 0BSD license
These two licenses are different.
2025-01-27 18:09:02 +01:00
Daniel Salzman
4b65d9df62 contrib/ucw: clarify source licenses 2025-01-27 10:11:56 +01:00
Daniel Salzman
0f34c44d3f libknot: add EDNS ZONEVERSION support 2025-01-20 12:38:41 +01:00
Daniel Salzman
82c3dbbbcb libknot: add knot_dname_with_null() 2024-11-15 08:07:25 +01:00
Daniel Salzman
c3714c9d5b distro/rpm: install softhsm for make check 2024-11-01 18:31:29 +01:00
Daniel Salzman
04cf9709f6 distro/deb: replace pkg-config with pkgconf as suggested by debian 2024-09-11 09:39:22 +02:00
Libor Peltan
39d982eb3c DoT: implemented TLS session resumption 2024-09-10 19:47:07 +02:00
Daniel Salzman
ea16adda40 Remove unwanted /usr/sbin/knot-exporter dir
This was an incorrect entry in knot-exporter.install
2024-09-09 13:30:03 +02:00
Daniel Salzman
bf959befbf distro/deb: add missing dependency for test libdnssec/test_keystore_pkcs11 2024-09-08 00:44:39 +02:00
Daniel Salzman
918b2381be distro/deb: remove unused stuff from rules 2024-09-08 00:44:39 +02:00
Daniel Salzman
7813efd19a Revert "distro/deb: move python3-sphinx to Build-Depends for man pages generation"
This issue was fixed in 30442aa44e.

This reverts commit 8408c2cb18.
2024-09-05 09:26:39 +02:00
Daniel Salzman
8408c2cb18 distro/deb: move python3-sphinx to Build-Depends for man pages generation 2024-09-02 13:24:03 +02:00
Libor Peltan
4468af58dd ctl: implemented multi-threaded (mutexted) CTL handling 2024-09-01 18:35:17 +02:00
Daniel Salzman
ba7435a040 distro/deb: add libknot to python3-libknot dependencies 2024-07-31 17:43:22 +02:00
Libor Peltan
41d251f492 DDNSoT: block connection when DDNS is queued 2024-07-15 22:12:04 +02:00
Daniel Salzman
b876346452 distro/rpm: update minimum knot-resolver version 2024-06-24 13:53:53 +02:00
Daniel Salzman
84b10cb049 configure: upgrade version to libknot15 (libdnssec and libzscanner unchanged) 2024-06-24 13:53:53 +02:00
Daniel Salzman
06109f3bb2 distro/deb: remove omitted debian/ufw/knot from knot.install 2024-06-02 19:41:55 +02:00
Daniel Salzman
7531e191db distro/deb: remove ufw configuration
No other nameserver packages contain this file either.
2024-05-28 15:13:14 +02:00
Daniel Salzman
460080ecf2 distro/rpm: add fix for OpenSUSE Tumbleweed 2024-05-14 10:07:50 +02:00
Daniel Salzman
659718030b knotd: update cert/key only if changed, slightly rework 2024-05-07 07:52:30 +02:00
Daniel Salzman
77f48b05bb tls: rework sending and receiving functions
- Better error reporting
- Full TLS handshake doesn't block when calling from tcp-handler
- IO timeout covers the whole send/recv operation
- DNS message length prefix isn't sent separately due to corking
2024-05-07 07:52:30 +02:00
Daniel Salzman
a73f9f7366 libknot: rename knot_quic_creds and related functions to knot_creds... 2024-05-07 07:52:29 +02:00
Daniel Salzman
305d8fcd17 distro/deb: add new symbol knot_xdp_socket_stats 2024-04-05 19:24:34 +02:00
Daniel Salzman
98827af92f libknot/quic: improve API, add new symbols 2023-12-08 13:09:47 +01:00
Daniel Salzman
f7577d5474 distro/deb: add missing symbol knot_quic_conn_block() 2023-11-29 18:18:30 +01:00
Daniel Salzman
b361b5b22f distro/deb: don't require python3-sphinx-panels for old distros 2023-11-27 13:16:43 +01:00
Daniel Salzman
1e198f170d docker: add (inter-container) support for D-Bus signaling 2023-10-15 21:06:50 +02:00
Daniel Salzman
160cc5a76b distro/deb: synchronize deb-nolibxdp/control with deb/control 2023-09-15 07:49:38 +02:00
Daniel Salzman
ee936d2e5c pkg: remove deprecated Debian Buster and Ubuntu Bionic 2023-09-14 12:45:43 +02:00
Daniel Salzman
a6a8781c46 pkg: remove deprecated el-7 2023-09-14 12:45:43 +02:00
Daniel Salzman
79db756fef distro/deb: remove redundant and move exclude from general to specific command 2023-09-14 12:45:43 +02:00
Daniel Salzman
4177c2cae9 distro/deb: remove "${shlibs:Depends}" from libknot-dev Depends
The variable applies to binary packages.

This fixes warning "dpkg-gencontrol: warning: Depends field of package \
libknot-dev: substitution variable ${shlibs:Depends} used, but is not defined"
2023-09-14 12:45:43 +02:00