Commits · 9251161549006926a06a4b0ecc2de3ea0b9877ec · Anbang Wen / Knot Resolver

Aug 11, 2016
- Removed global cookie control structure. · 92511615
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
```
The control structure is part of the resolver context.
```
  92511615
- Minor fixes. · 5042bbff
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  5042bbff
- Reduced amount of cookie control structures. · 5b014ec9
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  5b014ec9
- Using libknot lookup table to store and access cookie algorithms. · 3bd46b05
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  3bd46b05
- Basic cookiectl module documentation. · 11527016
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  11527016
- HMAC-SHA256-64 uses libnettle. · 4271dbb6
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  4271dbb6
- Modification to meet latest libknot changes. · cd1c75c6
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  cd1c75c6
- Cookie algorithms based on FNV-64 have been moved into libknot. · 55eb194a
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  55eb194a
- Using new cookies API from libknot. · 41d5b144
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  41d5b144
- Server cookie algorithm configuration via interactive interface. · 9b8559b4
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  9b8559b4
- Checking cookies in inbound requests. · b4a88628
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  b4a88628
- Started working on 'server' cookie code. · 639a486f
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  639a486f
- Moved cookie hash functions into separate unit. · 9e7ae9fd
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  9e7ae9fd
- Using modified cache interface without transactions. · 47a30119
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  47a30119
- Presence of libcrypto controls compilation od DNS cookies functionality. · 105cb8c2
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  105cb8c2
- Client cookie hash function can be specified using interactive interface. · 7d314fed
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  7d314fed
- Added HMAC-SHA256-64 hash function. · cab86aec
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  cab86aec
- Conditional compilation of DNS cookie code. · 5b52e0dd
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
```
Use ENABLE_cookies=yes variable to compile functionality.
```
  5b52e0dd
- Cookies cache TTL can be configured. · 13c9d9cf
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  13c9d9cf
- Renamed cookie related modules. Some code refactoring. · 4bc0c6d6
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  4bc0c6d6
- Using common cache for cookies. · e16793f3
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
```
Cookies are not stored in separate cache.
```
  e16793f3
- Moved cookies before iterate layer. · 6a98ba42
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  6a98ba42
- Fall back to TCP when receiving a valid BADCOOKIE response. · 3b33b0cb
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  3b33b0cb
- Cookie cache uses TTL to limit the cookie life span. · bb597059
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  bb597059
- Added support for TTL in cookies cache. · 6379e459
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  6379e459
- Checking reply source address against client cookie. · 5fbbf97b
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  5fbbf97b
- Response origin address is stored in the query context. · 7e491891
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
```
This simplifies the response source identification on the cookie module.
```
  7e491891
- Resolution fails when receiving invalid cookies. · 37e2f2c8
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
```
According to section 5.3 of the cookie draft the resolution should fail
if invalid cookie received.
```
  37e2f2c8
- Support for basic cookies configuration. · 7efad267
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  7efad267
- Added basic support for client secret rotation. · d360c2b4
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  d360c2b4
- Force fall-back to TCP when bad cookie received. · 09710e07
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  09710e07
- Use only those cookies that match the current client secret. · aa7c6951
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  aa7c6951
- Support for cookie options caching. · 871d1d0a
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  871d1d0a
- Checking received cookies against addresses in nsrep. · 6ad5fc91
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  6ad5fc91
- Preparations for using nsrep mechanism to guess response origin. · 86c030e3
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  86c030e3
- Trying to insert cookies into request form layer. · 1e3b61f3
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
```
Currently without success.
```
  1e3b61f3
- Introduced empty cookies module. · ef26b1a4
  Karel Slaný authored 8 years ago and Ondřej Surý committed 8 years ago
  
  ef26b1a4
Jul 20, 2016
- modules: deprecated tinyweb, superseded by http · 6887a4a2
  Marek Vavrusa authored 8 years ago
```
this module is superseded by http module, removing
```
  6887a4a2
Jul 18, 2016
- modules/http: limit graph to 1000 datapoints · 736ba7c7
  Marek Vavrusa authored 8 years ago
  
  736ba7c7
Jul 16, 2016
- move URLs from http to https where supported · b11d4d00
  Daniel Kahn Gillmor authored 8 years ago
  
  b11d4d00

Admin message

Admin message