Daniel Salzman
711dbe6088
distro/deb: add explicit libdnssec9 for libknot15
2025-07-19 18:35:05 +02:00
Jakub Ružička
c3f8543a15
distro/deb: split keymgr into knot-keymgr package
2025-07-19 18:35:05 +02:00
Daniel Salzman
326525dbbe
Merge branch 'knotd-cert-ca' into 'master'
...
remote/acl TLS certificate validation
See merge request knot/knot-dns!1779
2025-06-23 18:19:04 +02:00
Daniel Salzman
9f0f79779a
server: purge sessticket_pool on server reload if creds changed
2025-06-23 17:55:14 +02:00
Jan Doskočil
261c378b74
conf: implemented certificate hostname validation
2025-06-23 17:55:14 +02:00
Jakub Ružička
86b02c4ad8
distro/tests: new python-libknot test
2025-06-13 19:39:15 +02:00
Libor Peltan
da0e3b0d95
dnskey sync: skip rrs with different keytag modulo
2025-05-26 10:17:42 +02:00
Daniel Salzman
8e9e021ff5
distro: adapt authoritative-server test for kzonecheck to autodetection
2025-05-23 17:35:29 +02:00
Daniel Salzman
fb9b2cc102
libknot: extend TLS API to be used for non-DNS communication
2025-05-19 08:19:15 +02:00
Daniel Salzman
0b82e73f63
libknot/tls: don't use %DISABLE_TLS13_COMPAT_MODE with old GnuTLS versions...
...
and allow TLS 1.2 in kdig.
2025-05-06 12:59:46 +02:00
Daniel Salzman
6dc07c8968
distro: relicense to GPL-2.0-or-later
2025-03-24 09:53:50 +01:00
David Vašek
ca6078bcd1
contrib: list ISC license as such, not as 0BSD license
...
These two licenses are different.
2025-01-27 18:09:02 +01:00
Daniel Salzman
4b65d9df62
contrib/ucw: clarify source licenses
2025-01-27 10:11:56 +01:00
Daniel Salzman
0f34c44d3f
libknot: add EDNS ZONEVERSION support
2025-01-20 12:38:41 +01:00
Daniel Salzman
82c3dbbbcb
libknot: add knot_dname_with_null()
2024-11-15 08:07:25 +01:00
Daniel Salzman
04cf9709f6
distro/deb: replace pkg-config with pkgconf as suggested by debian
2024-09-11 09:39:22 +02:00
Libor Peltan
39d982eb3c
DoT: implemented TLS session resumption
2024-09-10 19:47:07 +02:00
Daniel Salzman
ea16adda40
Remove unwanted /usr/sbin/knot-exporter dir
...
This was an incorrect entry in knot-exporter.install
2024-09-09 13:30:03 +02:00
Daniel Salzman
bf959befbf
distro/deb: add missing dependency for test libdnssec/test_keystore_pkcs11
2024-09-08 00:44:39 +02:00
Daniel Salzman
918b2381be
distro/deb: remove unused stuff from rules
2024-09-08 00:44:39 +02:00
Daniel Salzman
7813efd19a
Revert "distro/deb: move python3-sphinx to Build-Depends for man pages generation"
...
This issue was fixed in 30442aa44e8408c2cb18
2024-09-05 09:26:39 +02:00
Daniel Salzman
8408c2cb18
distro/deb: move python3-sphinx to Build-Depends for man pages generation
2024-09-02 13:24:03 +02:00
Libor Peltan
4468af58dd
ctl: implemented multi-threaded (mutexted) CTL handling
2024-09-01 18:35:17 +02:00
Daniel Salzman
ba7435a040
distro/deb: add libknot to python3-libknot dependencies
2024-07-31 17:43:22 +02:00
Libor Peltan
41d251f492
DDNSoT: block connection when DDNS is queued
2024-07-15 22:12:04 +02:00
Daniel Salzman
84b10cb049
configure: upgrade version to libknot15 (libdnssec and libzscanner unchanged)
2024-06-24 13:53:53 +02:00
Daniel Salzman
06109f3bb2
distro/deb: remove omitted debian/ufw/knot from knot.install
2024-06-02 19:41:55 +02:00
Daniel Salzman
7531e191db
distro/deb: remove ufw configuration
...
No other nameserver packages contain this file either.
2024-05-28 15:13:14 +02:00
Daniel Salzman
659718030b
knotd: update cert/key only if changed, slightly rework
2024-05-07 07:52:30 +02:00
Daniel Salzman
77f48b05bb
tls: rework sending and receiving functions
...
- Better error reporting
- Full TLS handshake doesn't block when calling from tcp-handler
- IO timeout covers the whole send/recv operation
- DNS message length prefix isn't sent separately due to corking
2024-05-07 07:52:30 +02:00
Daniel Salzman
a73f9f7366
libknot: rename knot_quic_creds and related functions to knot_creds...
2024-05-07 07:52:29 +02:00
Daniel Salzman
305d8fcd17
distro/deb: add new symbol knot_xdp_socket_stats
2024-04-05 19:24:34 +02:00
Daniel Salzman
98827af92f
libknot/quic: improve API, add new symbols
2023-12-08 13:09:47 +01:00
Daniel Salzman
f7577d5474
distro/deb: add missing symbol knot_quic_conn_block()
2023-11-29 18:18:30 +01:00
Daniel Salzman
79db756fef
distro/deb: remove redundant and move exclude from general to specific command
2023-09-14 12:45:43 +02:00
Daniel Salzman
4177c2cae9
distro/deb: remove "${shlibs:Depends}" from libknot-dev Depends
...
The variable applies to binary packages.
This fixes warning "dpkg-gencontrol: warning: Depends field of package \
libknot-dev: substitution variable ${shlibs:Depends} used, but is not defined"
2023-09-14 12:45:43 +02:00
Daniel Salzman
d1c4b4b926
tcp_iobuf: unify some names to common prefix knot_tcp_inbufs_upd
2023-08-25 10:24:03 +02:00
Daniel Salzman
baf99d7ed3
distro/deb: add missing symbol knot_edns_opt_names
2023-08-21 16:52:06 +02:00
Jakub Ružička
6eb5e39a87
distro/deb: add knot-exporter sub-package
2023-08-21 16:07:35 +02:00
Libor Peltan
ecac2584fb
kdig: implemented EDNS presentation format
2023-08-21 15:59:42 +02:00
Daniel Salzman
89b90ce5fc
Add python-sphinx-panels to dependencies where necessary
2023-08-17 09:10:56 +02:00
Daniel Salzman
bcad814f22
configure: upgrade version to libknot14 (libdnssec and libzscanner unchanged)
2023-08-13 21:56:07 +02:00
Daniel Salzman
0640365aa4
libknot: rename knot_xdp_info() to knot_xdp_socket_info()
...
This change solves collision with type knot_xdp_info.
2023-08-13 20:22:14 +02:00
Libor Peltan
59b911f863
kxdpgun: implemented reusing connections (QUIC, TCP)
2023-08-09 16:17:57 +02:00
Libor Peltan
6043d063e4
quic/requestor: implemented remote pool for session tickets...
...
...remote pool refactored t be more general
...saving QUIC(TLS) session tickets into it for faster
outgoing QUIC handshakes
2023-07-19 19:24:36 +02:00
Daniel Salzman
fbdf0707ae
pkg/deb: add libxdp-dev build dependency
2023-06-21 20:12:59 +02:00
Daniel Salzman
c90f1a47c5
distro/deb: add missing symbol 'knot_quic_init_creds_peer'
2023-05-26 19:55:25 +02:00
Daniel Salzman
b9bd4f9280
quic: rename 'xquic' and 'XQUIC' to 'xquic' and 'QUIC'
2023-03-21 09:45:15 +01:00
Jan Hák
52e54ee877
contrib/musl: take implementation of 'inet_ntop' from musl
...
The reason is that the glibc implementation returns wrong IPv6-mapped-IPv4 addresses.
Source:
https://git.musl-libc.org/cgit/musl/tree/src/network/inet_ntop.c
(as of 2023-03-01, musl v1.2.3, blob: 4bfef2c557ab4478afeb5c22f5d548fd69e51d3c)
Homepage:
https://musl.libc.org/
2023-03-07 12:07:46 +01:00
Daniel Salzman
099cdbbef9
distro/deb: update copyright
2023-02-09 08:34:01 +01:00
