Commit Graph

49 Commits

Author SHA1 Message Date
Dag-Erling Smørgrav
e8a699bb6e Merge upstream r4302 to support multiple concurrently valid anchors.
If an unpatched unbound-anchor is run without a preexisting root anchor
between 2017-09-11 and 2017-10-11, it will fail and Unbound will not be
able to start unless the validator is disabled.  An EN will be issued
with patches for existing systems and information on how to work around
the issue on new installations.
2017-08-31 12:02:14 +00:00
Dag-Erling Smørgrav
b5663de9eb Upgrade to Unbound 1.5.10. 2016-09-29 18:24:29 +00:00
Dag-Erling Smørgrav
e2d1500434 Upgrade to Unbound 1.5.9. 2016-09-04 12:17:57 +00:00
Dag-Erling Smørgrav
a2d0006e29 Apply upstream r3651: the IPv6 address of the L root has changed. 2016-03-11 14:57:40 +00:00
Dag-Erling Smørgrav
f61ef7f679 Upgrade to Unbound 1.5.8. 2016-03-05 19:29:18 +00:00
Dag-Erling Smørgrav
0de4f1bf64 Use the new insecure-lan-zones option instead of listing each AS112 zone
separately.

MFC after:	3 days
2016-02-11 17:37:02 +00:00
Maxim Sobolev
1d854f3d3e Root out files that don't really belong here and could in fact screw
you over if you happen to use git for FreeBSD development, as it is
the case with the unbound/.gitignore, which lits files that are
actually required for the buildworld.

MFC after:	1 day
2016-02-02 19:04:40 +00:00
Dag-Erling Smørgrav
05ab290102 Upgrade to Unbound 1.5.7. 2015-12-14 13:01:51 +00:00
Dag-Erling Smørgrav
c0096f20d0 Ask make(1) which compiler to use rather than rely on whatever is in $PATH. 2015-12-12 22:54:12 +00:00
Dag-Erling Smørgrav
8fd566ab3e Apply r3505 (s/SIGQUIT/SIGTERM/ in man page)
PR:		203580
2015-10-14 18:08:38 +00:00
Dag-Erling Smørgrav
b75612f8e7 Upgrade to Unbound 1.5.5. 2015-10-09 11:46:27 +00:00
Dag-Erling Smørgrav
e4c53d3bf0 When chrooted, we need to strip the chroot directory from the front of
included paths.  Don't forget to do it for globs as well.
2015-09-17 16:19:36 +00:00
Dag-Erling Smørgrav
09a3aaf3e0 Upgrade to Unbound 1.5.4. 2015-09-17 16:10:11 +00:00
Dag-Erling Smørgrav
6480faa8a2 Upgrade Unbound to 1.5.3. 2015-04-27 12:06:13 +00:00
Dag-Erling Smørgrav
748bd82957 MFV (r277045): merge upstream version of the local socket patch. 2015-01-12 09:46:49 +00:00
Dag-Erling Smørgrav
31099b506d mfv (r276698): support for remote control over local sockets. 2015-01-05 14:59:18 +00:00
Dag-Erling Smørgrav
c809460030 Add generated files. 2015-01-03 11:52:43 +00:00
Dag-Erling Smørgrav
ff8258499c Upgrade to Unbound 1.5.1. Almost all our local changes to date have been
adopted upstream, greatly reducing the diff.
2015-01-03 02:40:51 +00:00
Dag-Erling Smørgrav
7ca2a8903f Recognize the lexer and parser sources. 2015-01-03 00:31:52 +00:00
Xin LI
52df462f7f MFV r275844:
Fix unbound remote denial of service vulnerability.

Security:	FreeBSD-SA-14:30.unbound
Security:	CVE-2014-8602
2014-12-17 06:55:44 +00:00
Dag-Erling Smørgrav
e8263e185c Clean up the libunbound build to avoid accidentally regenerating the
configuration lexer and parser during buildworld.  Instead of being
included in the source as it is in the upstream distribution, the code is
now always generated (in ${.OBJDIR}) at build time.

PR:		190739
MFC after:	1 week
2014-07-19 18:38:48 +00:00
Dag-Erling Smørgrav
c536e4dc7a Import unblock-lan-zones feature backported from upstream svn trunk.
This is a partial fix for reverse lookups in RFC 1918 networks.  With
this option enabled, unbound no longer ignores these queries; however,
it will still reject the answer it gets from the forwarder, because
the RFC 1918 reverse zones are signed.

Submitted by:	"W.C.A. Wijngaards" <wouter@nlnetlabs.nl>
2014-07-18 11:32:44 +00:00
Dag-Erling Smørgrav
d8229aaf73 Move libworker_event_done_cb() from libworker.h to worker.h. 2014-05-27 23:39:28 +00:00
Dag-Erling Smørgrav
d107305190 regenerate 2014-05-15 19:48:52 +00:00
Dag-Erling Smørgrav
ba769e8b8f diff reduction 2014-05-15 19:48:13 +00:00
Dag-Erling Smørgrav
17d15b2511 Upgrade to latest ldns (1.6.17) and unbound (1.4.22).
MFC after:	3 weeks
2014-05-15 03:30:03 +00:00
Dag-Erling Smørgrav
a3096cc770 Regenerate
Approved by:	re (blanket)
2013-09-24 09:56:58 +00:00
Dag-Erling Smørgrav
8ba2dec2ce Regenerate the configure script before running it.
Set the default config file to /var/unbound/unbound.conf.

Approved by:	re (blanket)
2013-09-24 09:56:10 +00:00
Dag-Erling Smørgrav
68ab5d8f35 Don't include the build date or command-line arguments in the binary.
Approved by:	re (blanket)
2013-09-24 09:54:07 +00:00
Dag-Erling Smørgrav
c1d67563f6 Due to a missing command-line argument, yacc regenerated the parser but
not its header file, resulting in a mismatch between the lexer and parser
and strange errors when reading the configuration file.

Approved by:	re (blanket)
2013-09-22 19:09:43 +00:00
Dag-Erling Smørgrav
a6a726073f Set props and correct RCS ID tag.
Approved by:	re (blanket)
2013-09-21 23:29:02 +00:00
Dag-Erling Smørgrav
c775ab573d Previous commit accidentally left out the umask change.
Approved by:	re (blanket)
2013-09-15 13:50:56 +00:00
Dag-Erling Smørgrav
b502f8bfb3 Set the correct prefix and exec-prefix.
Approved by:	re (blanket)
2013-09-15 13:49:43 +00:00
Dag-Erling Smørgrav
e0f0c857db Regenerate.
Approved by:	re (blanket)
2013-09-15 13:49:23 +00:00
Dag-Erling Smørgrav
16efed0220 The unbound-control-setup script needs to be generated so it knows where
to place the keys.  Also, the correct umask is 027, not 026, although it's
not likely to make any difference.

Approved by:	re (blanket)
2013-09-15 13:48:08 +00:00
Dag-Erling Smørgrav
05ff931f41 Add unbound-control.
Approved by:	re (blanket)
2013-09-15 12:41:05 +00:00
Dag-Erling Smørgrav
8860c90c1c Final #include tweak.
Approved by:	re (blanket)
2013-09-15 11:58:07 +00:00
Dag-Erling Smørgrav
ebc5657f89 Massive constification + solve an alignment issue by using a union.
Approved by:	re (blanket)
2013-09-15 01:44:07 +00:00
Dag-Erling Smørgrav
39dd631a2c Add missing #includes and fix some incorrect definitions.
Approved by:	re (blanket)
2013-09-15 01:32:32 +00:00
Dag-Erling Smørgrav
5d649f2dc0 Wholesale constification.
Approved by:	re (blanket)
2013-09-15 01:31:55 +00:00
Dag-Erling Smørgrav
8a9587d773 Move more prototypes around, and remove one that wasn't used.
Approved by:	re (blanket)
2013-09-15 01:29:00 +00:00
Dag-Erling Smørgrav
49e6c5a26d Regenerated lexer and parser
Approved by:	re (blanket)
2013-09-15 00:40:46 +00:00
Dag-Erling Smørgrav
47ec2d313c Generated configuration and documentation
Approved by:	re (blanket)
2013-09-15 00:40:21 +00:00
Dag-Erling Smørgrav
69d86e3ff0 Forgotten in r255579: #include fixes.
Approved by:	re (blanket)
2013-09-15 00:37:30 +00:00
Dag-Erling Smørgrav
04b59eac33 Numerous fixes to make Unbound compile cleanly:
- cast through void * to silence alignment warnings (presumably false
   positives resulting from poor API design)

 - constify a few function arguments

 - move prototypes for callbacks into a common header

 - now that the prototypes are in scope, fix instances of function
   definitions that don't match the prototype or what the caller
   actually passes

 - hide a conditionally unused global variable behind the same #ifdef
   that controls its use

Approved by:	re (blanket)
2013-09-15 00:36:18 +00:00
Dag-Erling Smørgrav
f41b5392e6 Move prototypes into header.
Approved by:	re (blanket)
2013-09-15 00:07:51 +00:00
Dag-Erling Smørgrav
439fafc748 Two helper scripts for porting Unbound:
- freebsd-configure.sh runs ./configure with the correct parameters
   and regenerates the lex and yacc code.

 - freebsd-sources.pl untangles the upstream Makefile and generates
   source lists for our Makefiles.

Approved by:	re (blanket)
2013-09-15 00:05:16 +00:00
Dag-Erling Smørgrav
8ed2b5240c Upgrade to 1.4.20. 2013-04-05 09:51:31 +00:00
Dag-Erling Smørgrav
b7579f77d1 Minimal subset of the unbound sources. 2013-04-05 09:43:20 +00:00