Also tweak order of information when logging cache stash,
as it was rather unnatural.

ci/Dockerfile.debian: use new respdiff git repo

See merge request !602

It's possible the parser wouldn't let such RR through,
and it's most likely validator shouldn't let them through.
Even so, I feel better to check anyway.

daemon/tls: session resumption with tickets (client & server side)

See merge request !585

There is no GnuTLS version which would make this safe.
See https://gitlab.com/gnutls/gnutls/issues/477

api.c was growing too long.
Also a few other minor changes.

restrict TLS ciphers

See merge request knot/knot-resolver!601

Otherwise CentOS 7 enables those two "ciphers" by default.
Noticed in #355.

modules.policy: REFUSE, TC - clear AD flag in answers

See merge request knot/knot-resolver!599

ci: make distro:epel-7 easier to debug in typical cases

See merge request knot/knot-resolver!598

daemon/tls: use system CA with TLS_FORWARD policy

Closes #310

See merge request knot/knot-resolver!586

Grigorii Demidov authored 6 years ago and Petr Špaček committed 6 years ago

daemon/tls: system CA's are used by default with TLS_FORWARD policy when ca_file parameter is omitted

Policy REFUSE; minot tweak

Closes #337

See merge request knot/knot-resolver!549

Petr Špaček authored 6 years ago and Grigorii Demidov committed 6 years ago

For some weird reason kresd crashed on assert(false) if it cannot open
cache even though it handles this case properly without the assert.

Petr Špaček authored 6 years ago and Grigorii Demidov committed 6 years ago

Fixes: #337

Allow creating custom endpoints in the HTTP module

See merge request knot/knot-resolver!527