Frank Denis
|
4a4f69edb7
|
ODoH: only store working configurations
Actually, we only store the first one right now.
We should at least randomize them.
|
2021-06-07 12:02:21 +02:00 |
|
Frank Denis
|
96b05e57ca
|
Preliminary propoer ODoH initialization
|
2021-06-07 11:47:11 +02:00 |
|
Frank Denis
|
56f2e9adcc
|
server_name is ignored for x509 certs
|
2021-06-07 11:27:33 +02:00 |
|
Frank Denis
|
dc99f1bc2c
|
If you need this, implement it
|
2021-06-07 11:26:37 +02:00 |
|
Frank Denis
|
0d81fa2796
|
Remove doh_client_x509_auth stuf from fetchServerInfo
It doesn't belong there, and that feature doesn't do what it's
documented to do. It sets client certificates globally instead of
doing it per server.
|
2021-06-07 11:23:48 +02:00 |
|
Frank Denis
|
402860e2a6
|
ODoH broke DNSCrypt relays with wildcards - repair
|
2021-06-07 11:06:41 +02:00 |
|
Frank Denis
|
cd45f64c18
|
ODoH: until relay auto selection is implemented, pick random ones
|
2021-06-07 11:00:21 +02:00 |
|
Frank Denis
|
27a82c54c8
|
ODoH: handle relay IP addresses
|
2021-06-07 10:46:01 +02:00 |
|
Frank Denis
|
dce4db4c86
|
Construct net.URL directly
|
2021-06-07 10:08:55 +02:00 |
|
Frank Denis
|
525927e797
|
Don't use net/http
|
2021-06-07 10:05:20 +02:00 |
|
Frank Denis
|
3159bc3191
|
CI: use odoh-crypto-sx and odohrelay-fastly for testing ODoH
|
2021-06-06 22:42:33 +02:00 |
|
Frank Denis
|
e57d5173e9
|
Support GET in ODoH targets
|
2021-06-06 01:22:48 +02:00 |
|
Frank Denis
|
f542edacaa
|
ODoH: until detection is in place, without a relay, prefer GET
|
2021-06-06 01:15:28 +02:00 |
|
Frank Denis
|
92792f0e8b
|
Prevent remotely triggerable crash in ODoH config parser
|
2021-06-06 01:05:14 +02:00 |
|
Frank Denis
|
1cdb71cd7c
|
Avoid double slashes in ODoH relay URLs
|
2021-06-06 01:01:39 +02:00 |
|
Frank Denis
|
d2947cad75
|
Unbreak compilation
|
2021-06-06 00:14:56 +02:00 |
|
Frank Denis
|
3cf5c1ab8e
|
Limit the number of ODoH target configs
|
2021-06-05 18:35:45 +02:00 |
|
Frank Denis
|
06135b6141
|
Reduce MaxHTTPBodyLength
|
2021-06-05 18:29:13 +02:00 |
|
Frank Denis
|
44f3db31ee
|
Just a safeguard
|
2021-06-05 17:57:48 +02:00 |
|
Frank Denis
|
0a1d3b725c
|
Rename ODoHTarget to ODoHTargetConfig for clarity
|
2021-06-05 17:49:19 +02:00 |
|
Frank Denis
|
2cf29f9fab
|
CI: check the tests after running them
The ODoH tests don't seem to pass.
|
2021-06-05 17:04:35 +02:00 |
|
Frank Denis
|
e27419f73d
|
x509.SystemCertPool() may fail
|
2021-06-03 20:59:05 +02:00 |
|
Frank Denis
|
ddcc40c954
|
Hardcode Let's Encrypt ISRG X1 cert
Some operating systems don't include it yet.
Thanks to @rs for the heads up
|
2021-06-03 12:48:33 +02:00 |
|
Frank Denis
|
14ef11447e
|
Pasto, thanks to @lifenjoiner
|
2021-05-13 10:30:57 +02:00 |
|
Frank Denis
|
6e8628f796
|
Print an error if a block/allow rule contains more than a pattern
... and it is not a time range.
|
2021-05-12 17:43:13 +02:00 |
|
Frank Denis
|
31f4d7aa03
|
Do not ignore ODoH encryption errors
|
2021-05-09 16:16:38 +02:00 |
|
Frank Denis
|
f9cecd1215
|
Update miekg/dns
|
2021-05-07 20:28:25 +02:00 |
|
Frank Denis
|
30779a40a6
|
Remove sysctl list, which is now updated any more
Fixes #1694
|
2021-05-01 01:16:35 +02:00 |
|
Frank Denis
|
367b5062ec
|
Add another IP block list
|
2021-04-30 20:51:22 +02:00 |
|
Frank Denis
|
d751781996
|
Update deps
|
2021-04-27 14:28:39 +02:00 |
|
Frank Denis
|
58e1410e66
|
Nits
|
2021-04-17 16:42:18 +02:00 |
|
Frank Denis
|
e2e32406fb
|
Improve ODoH log messages
|
2021-04-17 16:41:10 +02:00 |
|
Christopher Wood
|
23588733ae
|
Synchronously update the target configuration upon failure. (#1671)
* Synchronously update the target configuration upon failure.
* Notice a serverInfo failure when key updates fail.
* Add server name to debug logs.
|
2021-04-17 16:35:55 +02:00 |
|
Frank Denis
|
9759dd90a2
|
Limit the number of dependabot pull requests
|
2021-04-14 18:26:38 +02:00 |
|
milgradesec
|
754c2bdb93
|
Create dependabot.yml (#1670)
|
2021-04-14 18:25:51 +02:00 |
|
Alison Winters
|
eda8dd5181
|
replace TrimFunc(s, IsSpace) with TrimSpace for ASCII optimization (#1663)
|
2021-04-05 11:46:57 +02:00 |
|
Christopher Wood
|
03413eae2f
|
Add ODoH test files. (#1656)
|
2021-03-30 15:11:09 +02:00 |
|
Frank Denis
|
81692a3a80
|
Update xsecretbox again
|
2021-03-30 13:38:50 +02:00 |
|
Frank Denis
|
8213a96cd5
|
Revert "Remove the need for two chacha20 implementations"
This reverts commit 8e8a4bd024 .
|
2021-03-30 12:29:07 +02:00 |
|
Frank Denis
|
cee31b646e
|
Update Go version in CI
|
2021-03-30 11:57:10 +02:00 |
|
Frank Denis
|
8e8a4bd024
|
Remove the need for two chacha20 implementations
|
2021-03-30 11:54:04 +02:00 |
|
Frank Denis
|
3efbacc0d4
|
Rename
|
2021-03-30 11:53:59 +02:00 |
|
Christopher Wood
|
c748f93752
|
Add ODoH support. (#1653)
|
2021-03-30 11:53:51 +02:00 |
|
Frank Denis
|
f7219b2bfa
|
Recommend discussions
|
2021-03-30 10:56:01 +02:00 |
|
Frank Denis
|
09e5812a23
|
Send info messages to stdout if an output file has been specified
Fixes #1651
|
2021-03-27 18:39:24 +01:00 |
|
Frank Denis
|
873522c7f7
|
Add discussions link
|
2021-03-27 01:57:20 +01:00 |
|
Frank Denis
|
789e5bf162
|
...
|
2021-03-27 01:51:44 +01:00 |
|
Frank Denis
|
795c56f518
|
Shorten
|
2021-03-27 01:31:24 +01:00 |
|
Frank Denis
|
4201e7f373
|
Rename
|
2021-03-27 01:28:53 +01:00 |
|
Frank Denis
|
1e3f03ab0c
|
...
|
2021-03-27 01:19:01 +01:00 |
|