Daniel Salzman
711dbe6088
distro/deb: add explicit libdnssec9 for libknot15
2025-07-19 18:35:05 +02:00
Jakub Ružička
39dc0a35cb
distro/rpm: split keymgr into knot-keymgr package
2025-07-19 18:35:05 +02:00
Jakub Ružička
c3f8543a15
distro/deb: split keymgr into knot-keymgr package
2025-07-19 18:35:05 +02:00
Daniel Salzman
326525dbbe
Merge branch 'knotd-cert-ca' into 'master'
...
remote/acl TLS certificate validation
See merge request knot/knot-dns!1779
2025-06-23 18:19:04 +02:00
Daniel Salzman
9f0f79779a
server: purge sessticket_pool on server reload if creds changed
2025-06-23 17:55:14 +02:00
Jan Doskočil
261c378b74
conf: implemented certificate hostname validation
2025-06-23 17:55:14 +02:00
Jakub Ružička
86b02c4ad8
distro/tests: new python-libknot test
2025-06-13 19:39:15 +02:00
Jakub Ružička
119273e0f0
distro/rpm: remove %{_isa} from noarch packages' Requires
...
noarch packages shouldn't depend on specific architectures.
2025-06-13 13:32:32 +02:00
Jakub Ružička
c88205bf67
distro/rpm: use modern %pyproject_* macros
...
Support new %pyproject_* macros where they're supported, otherwise use
older %py3_* macros which work everywhere.
Introduce new %{PYPROJECT} var which is only set on distros supporting
new macros - Fedora >= 40 and EL >= 9.
2025-06-03 11:52:44 +02:00
Jakub Ružička
43ce8b74af
distro/rpm: add knot-exporter and python3-libknot RPM subpackages
2025-06-03 11:52:34 +02:00
Libor Peltan
da0e3b0d95
dnskey sync: skip rrs with different keytag modulo
2025-05-26 10:17:42 +02:00
Daniel Salzman
8e9e021ff5
distro: adapt authoritative-server test for kzonecheck to autodetection
2025-05-23 17:35:29 +02:00
Daniel Salzman
fb9b2cc102
libknot: extend TLS API to be used for non-DNS communication
2025-05-19 08:19:15 +02:00
Daniel Salzman
0b82e73f63
libknot/tls: don't use %DISABLE_TLS13_COMPAT_MODE with old GnuTLS versions...
...
and allow TLS 1.2 in kdig.
2025-05-06 12:59:46 +02:00
Daniel Salzman
6dc07c8968
distro: relicense to GPL-2.0-or-later
2025-03-24 09:53:50 +01:00
David Vašek
ca6078bcd1
contrib: list ISC license as such, not as 0BSD license
...
These two licenses are different.
2025-01-27 18:09:02 +01:00
Daniel Salzman
4b65d9df62
contrib/ucw: clarify source licenses
2025-01-27 10:11:56 +01:00
Daniel Salzman
0f34c44d3f
libknot: add EDNS ZONEVERSION support
2025-01-20 12:38:41 +01:00
Daniel Salzman
82c3dbbbcb
libknot: add knot_dname_with_null()
2024-11-15 08:07:25 +01:00
Daniel Salzman
c3714c9d5b
distro/rpm: install softhsm for make check
2024-11-01 18:31:29 +01:00
Daniel Salzman
04cf9709f6
distro/deb: replace pkg-config with pkgconf as suggested by debian
2024-09-11 09:39:22 +02:00
Libor Peltan
39d982eb3c
DoT: implemented TLS session resumption
2024-09-10 19:47:07 +02:00
Daniel Salzman
ea16adda40
Remove unwanted /usr/sbin/knot-exporter dir
...
This was an incorrect entry in knot-exporter.install
2024-09-09 13:30:03 +02:00
Daniel Salzman
bf959befbf
distro/deb: add missing dependency for test libdnssec/test_keystore_pkcs11
2024-09-08 00:44:39 +02:00
Daniel Salzman
918b2381be
distro/deb: remove unused stuff from rules
2024-09-08 00:44:39 +02:00
Daniel Salzman
7813efd19a
Revert "distro/deb: move python3-sphinx to Build-Depends for man pages generation"
...
This issue was fixed in 30442aa44e8408c2cb18
2024-09-05 09:26:39 +02:00
Daniel Salzman
8408c2cb18
distro/deb: move python3-sphinx to Build-Depends for man pages generation
2024-09-02 13:24:03 +02:00
Libor Peltan
4468af58dd
ctl: implemented multi-threaded (mutexted) CTL handling
2024-09-01 18:35:17 +02:00
Daniel Salzman
ba7435a040
distro/deb: add libknot to python3-libknot dependencies
2024-07-31 17:43:22 +02:00
Libor Peltan
41d251f492
DDNSoT: block connection when DDNS is queued
2024-07-15 22:12:04 +02:00
Daniel Salzman
b876346452
distro/rpm: update minimum knot-resolver version
2024-06-24 13:53:53 +02:00
Daniel Salzman
84b10cb049
configure: upgrade version to libknot15 (libdnssec and libzscanner unchanged)
2024-06-24 13:53:53 +02:00
Daniel Salzman
06109f3bb2
distro/deb: remove omitted debian/ufw/knot from knot.install
2024-06-02 19:41:55 +02:00
Daniel Salzman
7531e191db
distro/deb: remove ufw configuration
...
No other nameserver packages contain this file either.
2024-05-28 15:13:14 +02:00
Daniel Salzman
460080ecf2
distro/rpm: add fix for OpenSUSE Tumbleweed
2024-05-14 10:07:50 +02:00
Daniel Salzman
659718030b
knotd: update cert/key only if changed, slightly rework
2024-05-07 07:52:30 +02:00
Daniel Salzman
77f48b05bb
tls: rework sending and receiving functions
...
- Better error reporting
- Full TLS handshake doesn't block when calling from tcp-handler
- IO timeout covers the whole send/recv operation
- DNS message length prefix isn't sent separately due to corking
2024-05-07 07:52:30 +02:00
Daniel Salzman
a73f9f7366
libknot: rename knot_quic_creds and related functions to knot_creds...
2024-05-07 07:52:29 +02:00
Daniel Salzman
305d8fcd17
distro/deb: add new symbol knot_xdp_socket_stats
2024-04-05 19:24:34 +02:00
Daniel Salzman
98827af92f
libknot/quic: improve API, add new symbols
2023-12-08 13:09:47 +01:00
Daniel Salzman
f7577d5474
distro/deb: add missing symbol knot_quic_conn_block()
2023-11-29 18:18:30 +01:00
Daniel Salzman
b361b5b22f
distro/deb: don't require python3-sphinx-panels for old distros
2023-11-27 13:16:43 +01:00
Daniel Salzman
160cc5a76b
distro/deb: synchronize deb-nolibxdp/control with deb/control
2023-09-15 07:49:38 +02:00
Daniel Salzman
ee936d2e5c
pkg: remove deprecated Debian Buster and Ubuntu Bionic
2023-09-14 12:45:43 +02:00
Daniel Salzman
a6a8781c46
pkg: remove deprecated el-7
2023-09-14 12:45:43 +02:00
Daniel Salzman
79db756fef
distro/deb: remove redundant and move exclude from general to specific command
2023-09-14 12:45:43 +02:00
Daniel Salzman
4177c2cae9
distro/deb: remove "${shlibs:Depends}" from libknot-dev Depends
...
The variable applies to binary packages.
This fixes warning "dpkg-gencontrol: warning: Depends field of package \
libknot-dev: substitution variable ${shlibs:Depends} used, but is not defined"
2023-09-14 12:45:43 +02:00
Daniel Salzman
1b05021f44
distro/rpm: update minimum compatible knot-resolver version
2023-08-28 10:56:14 +02:00
Vladimír Čunát
40c5113f35
distro/pkg/nix: synchronize from downstream nixpkgs
...
Some parts of the expression don't work so well due to the way
we use it with apkg separately from nixpkgs, but I don't think
it matters and it's nice to keep the .nix file diff minimal.
I re-tested that it's up to date for upcoming 3.3, too.
2023-08-26 09:06:33 +02:00
Daniel Salzman
d1c4b4b926
tcp_iobuf: unify some names to common prefix knot_tcp_inbufs_upd
2023-08-25 10:24:03 +02:00
