Simon Kelley
a69b017902
Change HAVE_NETTLEHASH compile-time to HAVE_CRYPTOHASH.
...
HAVE_NETTLEHASH is retained for backwards compatibility, but deprecated.
2021-01-24 21:53:28 +00:00
Petr Menšík
2024f97297
Support hash function from nettle (only)
...
Unlike COPTS=-DHAVE_DNSSEC, allow usage of just sha256 function from
nettle, but keep DNSSEC disabled at build time. Skips use of internal
hash implementation without support for validation built-in.
2020-12-16 15:49:03 +00:00
Simon Kelley
2d765867c5
Use SHA-256 to provide security against DNS cache poisoning.
...
Use the SHA-256 hash function to verify that DNS answers
received are for the questions originally asked. This replaces
the slightly insecure SHA-1 (when compiled with DNSSEC) or
the very insecure CRC32 (otherwise). Refer: CERT VU#434904.
2020-12-16 15:49:02 +00:00
Fabrice Fontaine
240da59f73
Makefile: fix i18n build with ubus
...
Commit caf4d571e6 forgot adding
ubus_libs to build_libs for all-i18n target
Fixes:
- http://autobuild.buildroot.org/results/c0b27754b7ede024c095bdf0b3616e6f6be48c6d
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
2019-08-16 16:31:41 +01:00
Simon Kelley
3a5a84cdd1
Fix Makefile lines generating UBUS linker config.
...
If arg2 of pkg-wrapper is "--copy", then arg1 is NOT the name of
the package manager (--copy doesn't invoke it) it's a secondary
config string that inhibts the copy if found. This patch allows that
to be the empty string, for unconditional copy, and modifies the
ubus linker config to use it. It worked by coincidence before, because
there was no config string called "pkg-config".
2018-10-31 21:30:13 +00:00
Julian Kornberger
aba8bbb6e3
Add collection of metrics
...
Data can be retreived via D-Bus und U-Bus
2018-07-21 21:55:08 +01:00
Julian Kornberger
caf4d571e6
Add OpenWRT ubus patch
...
Originally written by John Crispin <john@phrozen.org >
2018-07-21 21:45:03 +01:00
Simon Kelley
6b17335209
Add packet-dump debugging facility.
2018-05-08 18:32:14 +01:00
Kevin Darbyshire-Bryant
6d37924b86
Makefile: Stop creating '-d' directory
...
Install-common section was creating superfluous '-d' directory in build
location.
Split the directory creation into individual install commands to cope
with cross platform differences of interpreting subsequent '-d'
arguments. e.g. GNU appears to be fine. Apple creates the stray
directory.
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk >
2018-04-07 23:00:56 +01:00
Simon Kelley
ad9c6f06c5
Add support for Ed25519 DNSSEC signature algorithm.
2017-10-27 22:13:49 +01:00
Simon Kelley
43cdf1c3d0
Remove automatic IDN support when building i18n.
...
Remove historic automatic inclusion of IDN support when
building internationalisation support. This doesn't
fit now there is a choice of IDN libraries. Be sure
to include either -DHAVE_IDN or _DHAVE_LIBIDN2 for
IDN support
2017-05-21 22:12:44 +01:00
Petr Menšík
d203af4a02
Add optional support for libidn2 and therefore IDNA2008.
2017-05-10 21:41:57 +01:00
Simon Kelley
5ac813cb86
Bump Lua version to 5.2.
2017-04-16 20:47:11 +01:00
Josh Soref
730c6745f0
Comprehensive spelling/typo fixes.
...
Thanks to Josh Soref for generating these fixes.
2017-02-06 16:14:04 +00:00
Simon Kelley
c49778df4a
Update copyright notices. Happy new year!
2016-01-06 18:52:33 +00:00
Simon Kelley
11867dc28c
Cache access to the kernel's ARP table.
2015-12-23 16:15:58 +00:00
Simon Kelley
1d03016bbc
Split EDNS0 stuff into its own source file.
2015-12-21 14:17:06 +00:00
Simon Kelley
c2bcd1e183
Generalise RR-filtering code, for use with EDNS0.
2015-12-15 17:25:21 +00:00
Simon Kelley
b842bc97bb
Use poll() instead of select() to remove limits on open file descriptors.
2015-07-12 21:09:11 +01:00
Simon Kelley
f7bfbdc872
Merge messages and fix makefile process to do this.
2015-06-10 22:31:02 +01:00
Simon Kelley
1062667618
BSD make support
2015-02-01 00:15:16 +00:00
Simon Kelley
aff3396280
Update copyrights for dawn of 2015.
2015-01-31 20:13:40 +00:00
Yousong Zhou
d8dbd903d0
Fix race condition issue in makefile.
2015-01-05 17:03:35 +00:00
Yousong Zhou
81c538efce
Implement makefile dependencies on COPTS variable.
2015-01-03 16:36:14 +00:00
Simon Kelley
193de4abf5
Use inotify instead of polling on Linux.
...
This should solve problems people are seeing when a file changes
twice within a second and thus is missed for polling.
2014-12-10 17:32:16 +00:00
Simon Kelley
b5ea1cc255
Add --dns-loop-detect feature.
2014-07-29 16:34:14 +01:00
Simon Kelley
063efb330a
Build config: add -DNO_GMP for use with nettle/mini-gmp
2014-06-17 19:49:31 +01:00
Simon Kelley
10d8540f62
Makefile typo.
2014-06-11 20:51:27 +01:00
Simon Kelley
c4a0937683
ipsets equivalent in *BSD, using pf tables.
2014-06-02 20:30:07 +01:00
Simon Kelley
b98d22c191
Linking stuff. Latest Debian/Ubuntu don't automatically link gmp.
2014-02-04 18:09:30 +00:00
Simon Kelley
00ec693db8
Debian package with DNSSEC now possible.
...
DNSSEC will eventually become opt-out and when that happens
I'll add libnettle build-depends. For now, build with
fakeroot debian/rules DEB_BUILD_OPTIONS=usednssec
to get DNSSEC support.
2014-01-28 11:08:57 +00:00
Simon Kelley
cc111e0bab
Add ip6addr.h to Makefile list.
2014-01-13 21:38:19 +00:00
Simon Kelley
86bec2d399
Swap crypto library from openSSL to nettle.
2014-01-13 21:31:20 +00:00
Simon Kelley
98c098bfc7
Move blockdata to it's own file.
2014-01-08 17:31:16 +00:00
Simon Kelley
c47e3ba446
Update copyright for 2014.
2014-01-08 17:07:54 +00:00
Simon Kelley
65d1e3bb9b
Tweak libraries and make DNSSEC compile optional.
2014-01-08 11:00:01 +00:00
Simon Kelley
5a4120dbfb
Merge branch 'master' into dnssec
...
Conflicts:
src/dnsmasq.h
src/forward.c
src/option.c
2013-10-25 13:16:27 +01:00
Simon Kelley
b7f666ff09
Add *.po target to cannonicalise .po files received from translators.
2013-10-02 11:48:43 +01:00
Simon Kelley
ceae52df15
Add "baseline" and "bloatcheck" makefile targets
2013-09-12 15:05:47 +01:00
Simon Kelley
687bac22db
Tidy rebase
2013-08-20 15:41:26 +01:00
Giovanni Bajo
9940aba9f6
Initial openssl RSASHA1 implementation (only SHA1 for now).
2013-08-20 15:41:18 +01:00
Giovanni Bajo
7e846b9858
Add openssl support to build machinery.
2013-08-20 15:41:18 +01:00
Giovanni Bajo
e292e93d35
Initial dnssec structure.
2013-08-20 15:41:18 +01:00
Simon Kelley
2bb73af7d1
Add --synth-domain
2013-04-24 20:35:43 +01:00
Jason A. Donenfeld
13d86c7372
Add --ipset option.
2013-02-22 21:44:08 +00:00
Simon Kelley
61744359de
Change copyright messages to include 2013.
2013-01-31 14:34:40 +00:00
Simon Kelley
4f7b304f53
Initial code to do authoritative DNS.
2012-11-28 21:27:02 +00:00
Simon Kelley
8e4b87918f
Header-file dependency checking in Makefile.
2012-11-14 14:12:56 +00:00
Simon Kelley
353ae4d270
Check assumed SLAAC addresses by pinging them.
2012-03-19 20:07:51 +00:00
Simon Kelley
c46c7c7584
tweak portable get-cwd trick code to work on GNU-make 3.82
2012-02-29 21:37:14 +00:00