Commit Graph

289 Commits

Author SHA1 Message Date
Frank Denis
148d900a72 Legacy format: store server descriptions 2018-01-31 09:45:10 +01:00
Frank Denis
f8a6e56026 -list -json now prints the list of available servers as JSON
Can be useful for GUIs, especially since this includes the description
2018-01-31 09:42:56 +01:00
Frank Denis
d42ab83184 ServerConfig -> StaticConfig to match the config file 2018-01-31 08:43:49 +01:00
Frank Denis
cdb8faba75 Nits 2018-01-31 08:40:20 +01:00
Frank Denis
f6571af24f Nits 2018-01-31 08:38:22 +01:00
Frank Denis
5e8925523f Split ConfigLoad a bit more 2018-01-31 08:32:44 +01:00
Frank Denis
16fc6b74e9 Split ConfigLoad() 2018-01-31 08:27:59 +01:00
Frank Denis
bbfcb0c5bd nits 2018-01-31 00:37:56 +01:00
Frank Denis
c3414329b3 Warn about certificates that are about to expire 2018-01-31 00:33:00 +01:00
Frank Denis
86adb438e0 Set cert refresh delay default to 240 (4h) 2018-01-31 00:21:25 +01:00
Frank Denis
0cc76b8a77 Lower the log level for already registered servers 2018-01-31 00:19:53 +01:00
Frank Denis
a364e51d9e Increase the cert refresh delay; make D1n0Bot happy
Decrease this for more reliability.
2018-01-30 23:53:33 +01:00
Frank Denis
76e5a99a5c Move "refreshing certificates" to debug, display RTT even for 1 server 2018-01-30 23:50:42 +01:00
Frank Denis
b741a62aab Start moving things to the wiki 2018-01-30 20:23:37 +01:00
Frank Denis
5e1f09a9d1 DoH doesn't require a working DNS configuration any more 2018-01-30 20:09:04 +01:00
Frank Denis
8f72a82b13 Don't forget to prepend prefixes to names in v2 lists 2018-01-30 19:47:29 +01:00
Frank Denis
788e97cf86 Clarify 2018-01-30 19:47:26 +01:00
Frank Denis
a7d75c7923 Implement the nofilter filter 2018-01-30 19:16:38 +01:00
Frank Denis
3448b5b170 Add a -list option to display the list of available resolvers 2018-01-30 17:51:47 +01:00
Frank Denis
330d265dc2 CRLF 2018-01-30 17:43:15 +01:00
Frank Denis
e9b3a0e0b0 Space 2018-01-30 17:40:38 +01:00
Frank Denis
1d35e249c9 Add an option to always ignore the system resolver
This makes startup faster when DoH resolvers without a static IP
are used (Google).
2018-01-30 17:37:35 +01:00
Frank Denis
931916097e Remove daemonize, at least from the configuration file example
daemonize only works on Linux so far, and it might not be secure not reliable
2018-01-30 16:12:36 +01:00
Frank Denis
ce2a730ab7 Remove unneeded port numbers 2018-01-30 16:10:46 +01:00
Frank Denis
c39197f7b2 Prepare for beta12 2018-01-30 15:58:13 +01:00
Frank Denis
61bad01726 Import xtransport 2018-01-30 15:51:07 +01:00
Frank Denis
ecaf18f614 Use a fallback resolver if the local DNS configuration doesn't work
This should fix all chicken-and-egg issues
2018-01-30 15:47:39 +01:00
Frank Denis
24c21d5eb2 Start moving things to a custom transport 2018-01-30 13:29:47 +01:00
Frank Denis
367f7fd675 iradix update 2018-01-30 11:20:41 +01:00
Frank Denis
c2494cfc40 Make file paths relative to the path of the configuration file 2018-01-29 23:57:20 +01:00
Frank Denis
b6e5f55870 Move the proxy struct to its own file 2018-01-29 23:47:04 +01:00
Frank Denis
479d9d14fd Reduce verbosity 2018-01-29 04:03:59 +01:00
Frank Denis
cf12fb170a Use a custom transport and a host->ip cache
maybe
Fixes #45
2018-01-29 03:58:39 +01:00
Frank Denis
16928b9954 Recommend adding the IP addresses of the DoH servers for now 2018-01-28 00:30:11 +01:00
Frank Denis
7acc38663b Add Yandex to show that explicit server_names override require_* 2018-01-27 19:46:50 +01:00
Frank Denis
7a5484d983 Include Google cert hash 2018-01-27 19:14:08 +01:00
Frank Denis
f8ec5bb2ed Add mipsle binaries 2018-01-27 18:26:07 +01:00
Frank Denis
9eeb68f3a1 beta11 2018-01-27 18:18:28 +01:00
Frank Denis
a7fe2aacb8 Show how to use two servers 2018-01-27 18:16:55 +01:00
Frank Denis
aff683a56d HTTP2 -> HTTP/2 2018-01-27 18:08:22 +01:00
Frank Denis
333a64e250 up 2018-01-27 18:07:14 +01:00
Frank Denis
3c2cf2a1dc Validate DoH certificate hashes 2018-01-27 17:48:53 +01:00
Frank Denis
5e3e66ac71 Of course Google DNS supports DNSSEC 2018-01-27 17:05:39 +01:00
Frank Denis
d2f6c69a2c More checks on the response 2018-01-27 16:59:45 +01:00
Frank Denis
7dde2f4a37 Request DNSSEC signature in the DoH probe 2018-01-27 16:53:57 +01:00
Frank Denis
be1e99ea32 DoH: send a dummy query before measuring the RTT to ignore the handshake 2018-01-27 16:48:22 +01:00
Frank Denis
4f0c29047d + DoH 2018-01-27 15:31:28 +01:00
Frank Denis
50d0c0449f Initial support for DNS-over-HTTP2 -- Yes, it works with Google. 2018-01-27 15:26:08 +01:00
Frank Denis
85f8aa1000 Fix stamp proto initialization 2018-01-26 22:59:16 +01:00
Frank Denis
eca7a078dd Do not blindly execute /sbin/init to detect upstart 2018-01-26 22:19:58 +01:00