ci: make distro:epel-7 easier to debug in typical cases

See merge request !598

daemon/tls: use system CA with TLS_FORWARD policy

Closes #310

See merge request !586

Grigorii Demidov authored 6 years ago and Petr Špaček committed 6 years ago

daemon/tls: system CA's are used by default with TLS_FORWARD policy when ca_file parameter is omitted

Policy REFUSE; minot tweak

Closes #337

See merge request !549

Petr Špaček authored 6 years ago and Grigorii Demidov committed 6 years ago

For some weird reason kresd crashed on assert(false) if it cannot open
cache even though it handles this case properly without the assert.

Petr Špaček authored 6 years ago and Grigorii Demidov committed 6 years ago

Fixes: #337

Allow creating custom endpoints in the HTTP module

See merge request !527

Marek Vavruša authored 6 years ago and Grigorii Demidov committed 6 years ago

This allows other modules to add or modify custom metrics or labels.

Marek Vavruša authored 7 years ago and Grigorii Demidov committed 6 years ago

Previously the module was created on configuration time, so it wasn't
possible to inject custom endpoints to the default interface.

Marek Vavruša authored 7 years ago and Grigorii Demidov committed 6 years ago

The AD indicates validation request (but not request for DNSSEC records).
If the response can't be validated, resolver flips the AD to 0.

distro: packaging updates

See merge request !567

daemon: allow per-request variables in Lua

See merge request !533

The handlers in Lua can now store per-request variables that are automatically
GC'd when the request is finished. This is useful for stateful modules,
such as DNS64 that uses internal option flags for state tracking.

The layers can now get a variable table like so:

```
local vars = kres.request_t(r):vars()
vars.hello = true
```

The variables are persisted between different layers for each request.

cache/entry_rr: fixed undefined behavior

See merge request !595

Pointer arithmetic with 'void *' is undefined, it only works as GNU extension.

synchronize distro/deb with official debian packaging

See merge request !593

Daniel Kahn Gillmor authored 6 years ago and Tomas Krizek committed 6 years ago

Note that this is not an exact synchronization, just the salient parts
where i believe upstream wants to sync up with debian.

I've left alone indications of upstream package maintainership, and
I've left debhelper back at version 9, for example.  and i've left the
differences between the shipped debian/kresd.conf (debian package
ships a minimal kresd.conf that doesn't load those four modules, in
particular).

documentation nitpicks

See merge request !592

I don't think it's good to write that we "provide a library",
as it currently doesn't seem suitable for usage outside kresd.

It seems like implementation and docs got de-synchronized,
probably at some point very long ago (years).

doc: systemd -- clarify how to manually start all services.

See merge request !591

Daniel Kahn Gillmor authored 6 years ago and Tomas Krizek committed 6 years ago

See https://github.com/systemd/systemd/issues/9080 for
details/discussion.

ci: add pytest-xdist dependency for Deckard

See merge request !590