As far as I understand the debug.sethook('call') descrption we are not
going to have any locals except function parameters so we can simplify
the code.

DNS-over-HTTP support (server side)

Closes #280

See merge request !799

Vladimír Čunát authored 5 years ago and Petr Špaček committed 5 years ago

Change handling of the inability to get address;
it happens occasionally and the traces were disruptive.

Vladimír Čunát authored 5 years ago and Petr Špaček committed 5 years ago

The problem is that C structures are not scanned by lua GC,
so we'd have to keep these alive in some other way; therefore
it's simpler to just use the mempool.

Vladimír Čunát authored 5 years ago and Petr Špaček committed 5 years ago

"Unfortunately", for FFI-bound C functions there it doesn't hold that
missing parameters would be converted to nil/NULL.
Still, this function seems unlikely to have been used outside the repo.

Vladimír Čunát authored 5 years ago and Petr Špaček committed 5 years ago

It caused crashes somewhere inside LuaJIT or the JIT-ed code.

The value is kind of arbitrary, as precaution. 64k value was causing
cqueues to close connections with GET requests with "Broken pipe"
and it seems to work with 1024 B.

This will allow modules like view etc. work in the same way with packets
received over HTTP.

We intentionally compute max-age header as minimum over all RRs, doing
so only over ANSWER section does not make sense (and RFC 8484 allows us
to do so).

This seems to be a limitation in cqueues but we have to confirm this.

Vladimír Čunát authored 6 years ago and Petr Špaček committed 5 years ago

It's a regression of b00ee5fa (v3.0.0).  Fortunately, since that
version we use cache for positive packets only when they are BOGUS
(see `bool want_pkt =`) so that they're available for +cd queries.
Therefore the impact was really negligible, until the DoT module.

First version which actually works with Firefox DoH in default
configuration.

Limitations:
- does not support HTTP GET method
- headers for HTTP cache are not generated
- error handling is largely missing
- no tests
- ACLs will not work, modules do not see source IP address of the HTTP
endpoint

Usability improvements for table_print

See merge request !790

This does not work with C functions etc. but it seems that we do not
expose them directly in Lua interface for users.

This makes it much easier to navigate in complex data structures.
AFAIK table_print is not used for anything except user interface so it
is not performance critical and we can re-sort table every time.

drop libkres9 and libkres-dev packages

See merge request !795

Daniel Kahn Gillmor authored 6 years ago and Tomas Krizek committed 5 years ago

Debian packaging as of 3.2.1-3 is no longer shipping libkres9 or
libkres-dev (see https://bugs.debian.org/923970

).  This brings the
upstream debian-style packaging in line with the Debian packaging on
that front.

Signed-off-by: Daniel Kahn Gillmor <dkg@fifthhorseman.net>

validate nitpick fix: unsupported algo edge case

See merge request !798

Vladimír Čunát authored 6 years ago and Petr Špaček committed 5 years ago

kr_dnskeys_trusted() semantics is changed, but I do NOT consider that
a part of public API.

Go insecure due to algorithm support even if DNSKEY is NODATA.
I can't see how that's relevant to practical usage, but I think this new
behavior makes more sense.  We still do try to fetch the DNSKEY even
though we have information about its un-usability beforehand.
I'd consider fixing that a premature optimization.
We'll still be affected if the DNSKEY query SERVFAILs or something.

Thanks to PowerDNS people for catching this!

pytests: check minimum required gnutls version

Closes #457

See merge request !796