Commit graph

20034 commits

Author SHA1 Message Date
Libor Peltan
245ea34981 libknot/rrset-dump/bugfix: ERANGE instead of enlarging output buffer if overflow inside base64_encode 2025-10-31 14:07:32 +01:00
David Vasek
71b97b5f0c Merge branch 'fix/PID' into 'master'
Fix: Reuse PID file if current PID matches

See merge request knot/knot-dns!1819
2025-10-31 12:30:07 +01:00
Berbe
70f3fa3d51
Fix: Reuse PID file if current PID matches
Co-Authored-By: David Vašek <david.vasek@nic.cz>
2025-10-31 10:51:08 +00:00
David Vašek
61c66c1a75
Doc: Fix boolean type 2025-10-31 10:51:03 +00:00
Libor Peltan
a9243dc33b Merge branch 'acl_catalog' into 'master'
Require 'query' ACL action for queries to catalog zone + improvements

See merge request knot/knot-dns!1823
2025-10-31 11:13:35 +01:00
Daniel Salzman
5a70954a95 Merge branch 'pinned_master_fixes' into 'master'
Improve refresh from a pinned master, fix master pinning related tests

See merge request knot/knot-dns!1821
2025-10-31 11:06:05 +01:00
David Vašek
efef4c7663 tests-extra: ixfr/master_pin2 -- align the servers at the start
Notice:
Both masters send their NOTIFY's to the slave. The slave makes
refresh from the last master which it received NOTIFY from
- it's the current state of Knot DNS design. If a NOTIFY
for lower serial arrives close enough after the previous NOTIFY
for a higher serial from another master, before the slave made
refresh from the first master, the first NOTIFY "knowledge" gets
"overwritten" by the second one with lower serial, resulting
in refresh from the lagging behind master and a rare test failure.
2025-10-31 10:57:27 +01:00
Libor Peltan
9e6e4a453c tests-extra: ixfr/master_pin -- provide the servers enough time
Especially needed with valgrind.
2025-10-31 10:57:27 +01:00
David Vašek
93978ee8d5 fix typos in comments 2025-10-31 10:57:27 +01:00
David Vašek
b30dcbb83b tests: refactor remaining server configuration routines 2025-10-31 10:57:27 +01:00
Libor Peltan
2fc1694097 refresh: with pinned master, refresh the zone when the tolerance period times out 2025-10-31 10:57:27 +01:00
Daniel Salzman
a019f4496e Merge branch 'ci-arm64-fork-disable' into 'master'
CI: Add rule to not run build:debian:arm64 on forked projects

See merge request knot/knot-dns!1822
2025-10-31 09:21:19 +01:00
Hynek Šabacký
fee3d63ea1 ci: Add rule to not run build:debian:arm64 on forked projects 2025-10-31 09:10:15 +01:00
Daniel Salzman
635bec86f7 internet: refactor ACL evaluation for catalog queries 2025-10-30 16:08:30 +01:00
Daniel Salzman
721385cd2e process_query: weaken the ACL action for catalog queries to 'query' 2025-10-30 16:08:30 +01:00
Daniel Salzman
bef8d0e4ef process_query: don't try to evaluate automatic ACL if disabled 2025-10-30 15:12:44 +01:00
Daniel Salzman
fc0d03b4cf process_query: move logging-related stuff to conditional debug section 2025-10-30 15:10:20 +01:00
Daniel Salzman
83c78d98e1 Merge branch 'zonemd_chain' into 'master'
zonemd: ignore ZONEMD removal within IXFR if zonemd-generate configured...

See merge request knot/knot-dns!1818
2025-10-29 19:25:36 +01:00
Libor Peltan
854612f682 zonemd: additional warning when signer verifies ZONEMD 2025-10-29 14:01:13 +01:00
Libor Peltan
d8690d9948 zonemd: ignore ZONEMD removal within IXFR if zonemd-generate configured...
...because it is overwritten anyway, causing semantic errors when applying incoming changeset
2025-10-29 14:01:13 +01:00
Libor Peltan
6f8ae7a0e9 Merge branch 'tests_refactor_conf' into 'master'
tests: refactor server configuration routines

See merge request knot/knot-dns!1816
2025-10-29 10:26:18 +01:00
Libor Peltan
251fcf5317 tests: refactor server configuration routines 2025-10-29 09:22:50 +01:00
Daniel Salzman
9d92c56379 doc: fix typo in operation 2025-10-27 09:10:23 +01:00
Jan Doskočil
96c2363dfd python/libknot: add documentation for zone-serial-set 2025-10-24 21:27:52 +02:00
Daniel Salzman
5bfafd9ce0 Merge branch 'libdnsec-libknot' into 'master'
Integrate libdnsec into libknot

See merge request knot/knot-dns!1817
2025-10-24 21:24:51 +02:00
Daniel Salzman
775929e110 Remove no longer existing libknot/dnssec/error.h 2025-10-24 21:17:43 +02:00
Daniel Salzman
83ea33afea libknot: merge dnssec/dnssec.h into libknot/libknot.h 2025-10-24 21:17:43 +02:00
Daniel Salzman
0b0821dc2e libknot: remove no longer needed knot_error_from_libdnssec() 2025-10-24 09:17:08 +02:00
Daniel Salzman
4b54add0f7 libknot: remove dnssec/error.{c,h} 2025-10-24 09:17:08 +02:00
Daniel Salzman
f6c9be4a34 Replace dnssec_errno_to_error() with knot_map_errno() 2025-10-24 09:17:08 +02:00
Daniel Salzman
1e8f6a6cd0 Replace DNSSEC_P11_TOKEN_NOT_AVAILABLE with KNOT_P11_ETOKEN 2025-10-24 09:17:08 +02:00
Daniel Salzman
3e67ef1226 Replace DNSSEC_P11_TOO_MANY_MODULES with KNOT_ERANGE 2025-10-24 09:17:08 +02:00
Daniel Salzman
908454a022 Replace DNSSEC_P11_FAILED_TO_LOAD_MODULE with KNOT_P11_ELOAD 2025-10-24 09:17:08 +02:00
Daniel Salzman
4f55f11b54 Replace DNSSEC_KEYSTORE_INVALID_CONFIG with KNOT_P11_ECONFIG 2025-10-24 09:17:08 +02:00
Daniel Salzman
180c98e6af Replace DNSSEC_INVALID_SIGNATURE with KNOT_INVALID_SIGNATURE 2025-10-24 09:17:08 +02:00
Daniel Salzman
342647c504 Replace DNSSEC_SIGN_ERROR with KNOT_ECRYPTO 2025-10-24 09:17:08 +02:00
Daniel Salzman
671134a19b Replace DNSSEC_DIGEST/DS_HASHING/NSEC3_HASHING_ERROR with KNOT_ECRYPTO 2025-10-24 09:17:08 +02:00
Daniel Salzman
c028becc07 Replace DNSSEC_ERROR with KNOT_ERROR 2025-10-24 09:17:08 +02:00
Daniel Salzman
060b7c361d Replace DNSSEC_INVALID_*_ALGORITHM with KNOT_EALGORITHM 2025-10-24 09:17:08 +02:00
Daniel Salzman
4cb2e94021 Replace DNSSEC_SIGN_INIT_ERROR with KNOT_ECRYPTO 2025-10-24 09:17:08 +02:00
Daniel Salzman
cd05972053 Replace DNSSEC_KEY_ALREADY_PRESENT with KNOT_EEXIST 2025-10-24 09:17:08 +02:00
Daniel Salzman
f84e984883 Replace DNSSEC_NO_PRIVATE_KEY with KNOT_NO_PRIVATE_KEY 2025-10-24 09:17:08 +02:00
Daniel Salzman
8044225eed Replace DNSSEC_NO_PUBLIC_KEY with KNOT_NO_PUBLIC_KEY 2025-10-24 09:17:08 +02:00
Daniel Salzman
a2d690afb8 Replace DNSSEC_INVALID_KEY_NAME with KNOT_INVALID_KEY_NAME 2025-10-24 09:17:08 +02:00
Daniel Salzman
f6910085a1 Replace DNSSEC_INVALID_KEY_ID with KNOT_INVALID_KEY_ID 2025-10-24 09:17:08 +02:00
Daniel Salzman
8694161c4c Replace DNSSEC_INVALID_KEY_SIZE with KNOT_INVALID_KEY_SIZE 2025-10-24 09:17:08 +02:00
Daniel Salzman
96475b8b1f Replace DNSSEC_INVALID_KEY_ALGORITHM with KNOT_INVALID_KEY_ALGORITHM 2025-10-24 09:17:08 +02:00
Daniel Salzman
fcdb13c3aa Replace DNSSEC_INVALID_PUBLIC_KEY with KNOT_INVALID_PUBLIC_KEY 2025-10-24 09:17:08 +02:00
Daniel Salzman
8d97430699 Replace DNSSEC_KEY_GENERATE_ERROR with KNOT_KEY_EGENERATE 2025-10-24 09:17:08 +02:00
Daniel Salzman
870759b5e5 Replace DNSSEC_KEY_EXPORT_ERROR with KNOT_KEY_EEXPORT 2025-10-24 09:17:08 +02:00