4c29840040
Revert "Print an error if a block/allow rule contains more than a pattern"
...
This reverts commit 6e8628f796
2021-09-27 12:29:41 +02:00
b7704a05c5
Make return value explicit
2021-09-25 20:09:29 +02:00
d82021b545
Repair stale respones for DoH
2021-09-25 19:53:43 +02:00
e5608e08cf
Define a constant for the TTL of stale responses
2021-09-25 19:53:25 +02:00
2a3e59c4bf
Update plugin_cache.go ( #1900 )
2021-09-25 19:04:17 +02:00
3bae61dbe1
Properly round the TTL
2021-09-24 09:26:31 +02:00
5fedbe4c6e
// +build -> //go:build
2021-09-23 19:16:26 +02:00
b2f26192e1
gofmt
2021-09-23 19:16:12 +02:00
a4684d3bf5
Round TTLs
2021-09-23 19:10:40 +02:00
34f0caaa34
Merge branch 'master' of github.com:jedisct1/dnscrypt-proxy
...
* 'master' of github.com:jedisct1/dnscrypt-proxy:
Enable HTTP/2 pings
Remove leftovers from the daemonize option
DoH/ODoH: strip optional port number when caching a hostname
Bump actions/setup-go from 2.1.3 to 2.1.4 (#1843 )
fix minor typo in example config (#1847 )
2021-09-23 18:38:50 +02:00
75e917ae49
plugin_cache: update the response TTL, not the cached data
...
Fixes #1895
2021-09-23 18:37:40 +02:00
8fc0ffc35f
Enable HTTP/2 pings
2021-09-21 12:57:42 +02:00
97a983c6b3
Remove leftovers from the daemonize option
2021-09-09 11:26:17 +02:00
0f00cd27f9
DoH/ODoH: strip optional port number when caching a hostname
...
Fixes #1861
2021-09-06 12:02:56 +02:00
d8358b795f
fix minor typo in example config ( #1847 )
2021-08-29 11:11:52 +02:00
b8c5790716
Add captive portal entry for dual stack setups ( #1835 )
...
For users with a dual stack set up at home (IPv4+native IPv6), Windows 21H1 will report that there is no Internet connection if this entry is missing from their captive portals file.
Signed-off-by: Aaron <admin@datahoarder.dev>
2021-08-20 17:32:32 +02:00
9cb89ae410
odoh.md has been deprecated
2021-08-14 13:01:12 +02:00
e83cb28ef5
Split ODoH servers and relays
2021-08-14 12:33:10 +02:00
35c82e3dcf
Next will be 2.1.0
2021-08-13 19:20:27 +02:00
1052fa6323
serve-stale on overflow
2021-08-04 14:30:32 +02:00
c8a61abb79
Update comment
2021-08-04 14:27:58 +02:00
e64425b5e7
On overflow, only respond to cached/synthesized queries
2021-08-04 14:27:24 +02:00
da69583bd2
When we run out of connections, handle an extra one synchronously
2021-08-04 13:35:33 +02:00
d996e3424d
No need to get the time if the connection is refused
2021-08-04 13:23:21 +02:00
b4a073f54f
Typo
2021-08-03 11:24:16 +02:00
0ca90dd8cc
xtransport: set a default error status code
2021-07-31 13:21:45 +02:00
026c42424f
Workaround for ODoH relays not properly forwarding the status code
...
Some ODoH relays return a 200 status code even when the upstream
server returns something different. This is an issue after a key
update, where a 401 code is expected.
Handle empty responses with a 200 status code as a response with
a 401 code as a workaround until these relays are fixed.
2021-07-31 12:54:23 +02:00
cedd4f3b54
xtransport: properly forward the status code on error
2021-07-31 12:38:10 +02:00
796a7f6d31
Add an example for blocking private relay
2021-07-17 14:22:10 +02:00
d35c1c3cb2
Lower reject_ttl even more
2021-07-16 16:46:50 +02:00
8b3b7d38ac
Set ttl to reject_ttl for HINFO refused responses
...
Also lower the example TTL
2021-07-16 16:40:21 +02:00
4caa7b6d64
Verbose
2021-06-12 14:48:02 +02:00
9bea0e8f20
Nits
2021-06-12 14:16:20 +02:00
b472fb3b21
Bump
2021-06-12 14:03:26 +02:00
5fb2901dbc
Fuzz the stamps parser
2021-06-11 22:20:54 +02:00
ccddb18424
Time to start fuzzing
2021-06-11 22:13:58 +02:00
1b03ac817e
ODoH: supoprt config version 0x0001 in addition to 0xff06
2021-06-11 21:18:05 +02:00
95c9fa75f8
Bump
2021-06-08 11:00:01 +02:00
a85a003d2b
Filter relays by compatible type before selecting them
...
Fixes #1739
2021-06-08 10:52:06 +02:00
5a9a6467df
Correctly check for empty/wrong relays
2021-06-08 10:27:03 +02:00
ec581597a2
Require ODoH relays to be present
...
ODoH target stamps don't include certificate hashes; they are not
meant to be used directly.
2021-06-08 10:19:02 +02:00
33ed882efe
Warn if fallback_resolvers is still in use
2021-06-08 09:53:53 +02:00
b39232e996
this -> that
2021-06-08 01:14:11 +02:00
9ebb90b22e
fallback -> bootstrap
2021-06-08 00:44:06 +02:00
6076e2dd03
www.msftncsi.com IPs update
2021-06-07 18:47:31 +02:00
d0e27a1366
Update ChangeLog
2021-06-07 18:25:52 +02:00
d5e9ed3aa9
Don't hardcode the HPKE cipher
2021-06-07 18:16:15 +02:00
45d3afc8f9
Call ObliviousDoHQuery() on the initial test
2021-06-07 17:32:34 +02:00
e7f017c592
ODoH: try POST first, even without a relay
2021-06-07 17:19:56 +02:00
a2ebe0c4a4
dnscrypt-proxy/odoh.go -> dnscrypt-proxy/oblivious_doh.go
2021-06-07 15:53:11 +02:00
083fa0ad3c
Add an extra retry since ODoH servers are currently unstable
2021-06-07 13:49:37 +02:00
f5a69c3bdc
Reduce delay
2021-06-07 13:46:44 +02:00
9e96bbc20b
Continue, don't return
2021-06-07 13:44:08 +02:00
a181a23263
Send a dummy initial query before RTT measurement in ODoH
2021-06-07 13:42:33 +02:00
fad415f05a
Update example documentation
2021-06-07 13:37:08 +02:00
29613096da
ODoH servers should not require a static configuration
2021-06-07 13:21:58 +02:00
7980af6f46
Error propagation
2021-06-07 12:38:36 +02:00
94151f9f96
Use ODoH relays in probes
2021-06-07 12:23:26 +02:00
a11da2d4fb
ODoH: check certificate hashes
2021-06-07 12:09:27 +02:00
e0483bbb27
Pretend not to always use the first ODoH config
2021-06-07 12:06:36 +02:00
b35e27bd51
Shuffle ODoH target configs and use different NX queries
2021-06-07 12:05:42 +02:00
4a4f69edb7
ODoH: only store working configurations
...
Actually, we only store the first one right now.
We should at least randomize them.
2021-06-07 12:02:21 +02:00
96b05e57ca
Preliminary propoer ODoH initialization
2021-06-07 11:47:11 +02:00
56f2e9adcc
server_name is ignored for x509 certs
2021-06-07 11:27:33 +02:00
dc99f1bc2c
If you need this, implement it
2021-06-07 11:26:37 +02:00
0d81fa2796
Remove doh_client_x509_auth stuf from fetchServerInfo
...
It doesn't belong there, and that feature doesn't do what it's
documented to do. It sets client certificates globally instead of
doing it per server.
2021-06-07 11:23:48 +02:00
402860e2a6
ODoH broke DNSCrypt relays with wildcards - repair
2021-06-07 11:06:41 +02:00
cd45f64c18
ODoH: until relay auto selection is implemented, pick random ones
2021-06-07 11:00:21 +02:00
27a82c54c8
ODoH: handle relay IP addresses
2021-06-07 10:46:01 +02:00
dce4db4c86
Construct net.URL directly
2021-06-07 10:08:55 +02:00
525927e797
Don't use net/http
2021-06-07 10:05:20 +02:00
e57d5173e9
Support GET in ODoH targets
2021-06-06 01:22:48 +02:00
f542edacaa
ODoH: until detection is in place, without a relay, prefer GET
2021-06-06 01:15:28 +02:00
92792f0e8b
Prevent remotely triggerable crash in ODoH config parser
2021-06-06 01:05:14 +02:00
1cdb71cd7c
Avoid double slashes in ODoH relay URLs
2021-06-06 01:01:39 +02:00
d2947cad75
Unbreak compilation
2021-06-06 00:14:56 +02:00
3cf5c1ab8e
Limit the number of ODoH target configs
2021-06-05 18:35:45 +02:00
06135b6141
Reduce MaxHTTPBodyLength
2021-06-05 18:29:13 +02:00
44f3db31ee
Just a safeguard
2021-06-05 17:57:48 +02:00
0a1d3b725c
Rename ODoHTarget to ODoHTargetConfig for clarity
2021-06-05 17:49:19 +02:00
e27419f73d
x509.SystemCertPool() may fail
2021-06-03 20:59:05 +02:00
ddcc40c954
Hardcode Let's Encrypt ISRG X1 cert
...
Some operating systems don't include it yet.
Thanks to @rs for the heads up
2021-06-03 12:48:33 +02:00
14ef11447e
Pasto, thanks to @lifenjoiner
2021-05-13 10:30:57 +02:00
6e8628f796
Print an error if a block/allow rule contains more than a pattern
...
... and it is not a time range.
2021-05-12 17:43:13 +02:00
31f4d7aa03
Do not ignore ODoH encryption errors
2021-05-09 16:16:38 +02:00
367b5062ec
Add another IP block list
2021-04-30 20:51:22 +02:00
58e1410e66
Nits
2021-04-17 16:42:18 +02:00
e2e32406fb
Improve ODoH log messages
2021-04-17 16:41:10 +02:00
23588733ae
Synchronously update the target configuration upon failure. ( #1671 )
...
* Synchronously update the target configuration upon failure.
* Notice a serverInfo failure when key updates fail.
* Add server name to debug logs.
2021-04-17 16:35:55 +02:00
eda8dd5181
replace TrimFunc(s, IsSpace) with TrimSpace for ASCII optimization ( #1663 )
2021-04-05 11:46:57 +02:00
3efbacc0d4
Rename
2021-03-30 11:53:59 +02:00
c748f93752
Add ODoH support. ( #1653 )
2021-03-30 11:53:51 +02:00
54d85d7298
Filters don't apply to static entries
2021-03-12 20:05:58 +01:00
b1e96b69fd
Save 1.4 MiB of memory
2021-03-08 15:36:42 +01:00
34909babfb
Typo
2021-02-20 19:11:06 +01:00
c500287498
Rename fallback_resolvers to bootstrap_resolvers
...
Clarify what they are used for.
Remove the legacy `fallback_resolver`.
2021-02-20 18:50:42 +01:00
96ba551836
Revert "The source tests are completely brok4n :("
...
This reverts commit a76ffb0143
2021-01-22 17:50:01 +01:00
a9cf16b33e
Fix: Randomize source URLs ( #1593 )
2021-01-22 15:06:49 +01:00
0ab9e30fa9
Merge branch 'master' of github.com:DNSCrypt/dnscrypt-proxy
...
* 'master' of github.com:DNSCrypt/dnscrypt-proxy:
The source tests are completely brok4n :(
Explain how to listen to all IP addresses
In the query log, consider everything that's not UDP as TCP
2021-01-22 09:16:56 +01:00
d0f981156b
Add the base inherited fd to the application logging fd
...
Fixes #1585
2021-01-22 09:15:40 +01:00
Frank Denis
Frank Denis
livingentity
Alison Winters
Aaron
Christopher Wood
lifenjoiner