581e27697e
Features: * implement log-time-ascii on windows. * --with-libunbound-only build option, only builds the library and not the daemon and other tools. * --with-nss build option (for now, --with-libunbound-only), uses libNSS for crypto operations. * disable RSAMD5 if in FIPS mode (for openssl and for libnss). * Add flush_bogus option for unbound-control. Bug Fixes: * Fix libunbound report of errors when in background mode. * fix bogus nodata cname chain not reported as bogus by validator * [bugzilla: 454 ] Fix for ACX_CHECK_COMPILER_FLAG from configure.ac, if CFLAGS is specified at configure time then '-g -O2' is not appended to CFLAGS, so that the user can override them. * FIPS_mode openssl does not use arc4random but RAND_pseudo_bytes. * fix missing break for GOST DS hash function. * implemented forward_first for the root. * code review: return value of cache_store can be ignored for better performance in out of memory conditions. * patch for unbound_munin_ script to handle arbitrary thread count by Sven Ulland. * Fix validation of qtype DS queries that result in no data for non-optout NSEC3 zones. * fix edns-buffer-size and msg-buffer-size manpage documentation. * fix error handling of alloc failure during rrsig verification. * The key-cache bad key ttl is now 60 seconds. * [bugzilla: 452 ] fix crash on assert in mesh_state_attachment. Fixes DS NS search to not generate duplicate sub queries. * silence warning from swig-generated code (md set but not used in swig initmodule, due to ifdefs in swig-generated code). * Fix debian-bugs-658021: Please enable hardened build flags. * update iana ports list |
||
|---|---|---|
| .. | ||
| files | ||
| DESCR | ||
| distinfo | ||
| Makefile | ||
| options.mk | ||
| PLIST | ||