Romain Labolle authored 3 years ago and Daniel Salzman committed 3 years ago

fixes #774

This avoids problems with future changes and reduces overhead of conf_clone()

David Vasek authored 3 years ago and Daniel Salzman committed 3 years ago

While there, fix the use of space containing paths in this operation.

Robert Edmonds authored 3 years ago and Daniel Salzman committed 3 years ago

Previously, mod-dnstap would log query messages with downcased QNAMEs,
because knotd had already downcased the QNAME in the query packet buffer
passed to the dnstap module. This is not necessarily the same as the
original DNS wire query message if any uppercase letters were used in
the QNAME.

The knotd_qdata_t object already stores the original QNAME before
downcasing in the 'extra' field, which is inaccessible to query modules.
This commit introduces a new 'knotd_qdata_orig_qname()' function that
query modules can call to access the original QNAME.

This commit updates the mod-dnstap message logging code to patch the
buffer used for the wire message behind the 'query_message' field in the
dnstap protobuf message by copying the original QNAME back into the
query packet buffer, and then re-downcasing the QNAME in the query
packet buffer after the dnstap protobuf message has been serialized.
(This avoids the overhead of allocating space for a copy of the query
packet, making a copy of the packet, and performing the QNAME
restoration on the copy.)

fixes #773

The original \W and \S are non-portable extensions to regular expressions in GNU sed.
The extra (the third) brackets are needed here as m4 escape characters for the character
class brackets.

catalog: fail zone-update if failed cat interpret

See merge request knot/knot-dns!1383

Robert Edmonds authored 3 years ago and Daniel Salzman committed 3 years ago

This commit adds a 'responses-with-queries' option to the dnstap module.
When enabled, it also adds the original query message to AUTH_RESPONSE
type dnstap message payloads in addition to the response message.

The dnstap protobuf definition has separate 'query_message' and
'response_message' fields for dnstap message objects, and for
AUTH_RESPONSE messages the 'query_message' field can optionally be
filled in.

closes #764

catalog/generate: plan catz reload when changed

Closes #772

See merge request knot/knot-dns!1384

dnssec/logging: sort keys by timestamp

See merge request knot/knot-dns!1381

Zonemd flush2

See merge request knot/knot-dns!1379

doc: updated Automatic signing section

See merge request knot/knot-dns!1380

David Vasek authored 3 years ago and Daniel Salzman committed 3 years ago

fixes #770

Kjournalprint enoent

See merge request knot/knot-dns!1378

closes #767