Commit Graph

296 Commits

Author SHA1 Message Date
Frank Denis fe8ff9dcbb Spaces 2018-01-31 20:07:52 +01:00
Frank Denis 7a8deebaf1 DoH: implement support for multiples cert hashes 2018-01-31 18:16:54 +01:00
Frank Denis 22e63774a1 Fix cert expiration warnings
Spotted by @CommanderRoot -- thanks!
2018-01-31 17:11:08 +01:00
Frank Denis e91ce9eb3d Nits 2018-01-31 15:08:58 +01:00
Frank Denis d7ec318945 Accept sources without an URL; use v2 format by default for remote sources 2018-01-31 14:24:21 +01:00
Frank Denis 2d291ecad6 Add some comments 2018-01-31 12:17:14 +01:00
Frank Denis 1bbc7e9540 Update dlog to master which just calls time.Local()
maybe
fixes #57
2018-01-31 10:14:06 +01:00
Frank Denis 148d900a72 Legacy format: store server descriptions 2018-01-31 09:45:10 +01:00
Frank Denis f8a6e56026 -list -json now prints the list of available servers as JSON
Can be useful for GUIs, especially since this includes the description
2018-01-31 09:42:56 +01:00
Frank Denis d42ab83184 ServerConfig -> StaticConfig to match the config file 2018-01-31 08:43:49 +01:00
Frank Denis cdb8faba75 Nits 2018-01-31 08:40:20 +01:00
Frank Denis f6571af24f Nits 2018-01-31 08:38:22 +01:00
Frank Denis 5e8925523f Split ConfigLoad a bit more 2018-01-31 08:32:44 +01:00
Frank Denis 16fc6b74e9 Split ConfigLoad() 2018-01-31 08:27:59 +01:00
Frank Denis bbfcb0c5bd nits 2018-01-31 00:37:56 +01:00
Frank Denis c3414329b3 Warn about certificates that are about to expire 2018-01-31 00:33:00 +01:00
Frank Denis 86adb438e0 Set cert refresh delay default to 240 (4h) 2018-01-31 00:21:25 +01:00
Frank Denis 0cc76b8a77 Lower the log level for already registered servers 2018-01-31 00:19:53 +01:00
Frank Denis a364e51d9e Increase the cert refresh delay; make D1n0Bot happy
Decrease this for more reliability.
2018-01-30 23:53:33 +01:00
Frank Denis 76e5a99a5c Move "refreshing certificates" to debug, display RTT even for 1 server 2018-01-30 23:50:42 +01:00
Frank Denis b741a62aab Start moving things to the wiki 2018-01-30 20:23:37 +01:00
Frank Denis 5e1f09a9d1 DoH doesn't require a working DNS configuration any more 2018-01-30 20:09:04 +01:00
Frank Denis 8f72a82b13 Don't forget to prepend prefixes to names in v2 lists 2018-01-30 19:47:29 +01:00
Frank Denis 788e97cf86 Clarify 2018-01-30 19:47:26 +01:00
Frank Denis a7d75c7923 Implement the nofilter filter 2018-01-30 19:16:38 +01:00
Frank Denis 3448b5b170 Add a -list option to display the list of available resolvers 2018-01-30 17:51:47 +01:00
Frank Denis 330d265dc2 CRLF 2018-01-30 17:43:15 +01:00
Frank Denis e9b3a0e0b0 Space 2018-01-30 17:40:38 +01:00
Frank Denis 1d35e249c9 Add an option to always ignore the system resolver
This makes startup faster when DoH resolvers without a static IP
are used (Google).
2018-01-30 17:37:35 +01:00
Frank Denis 931916097e Remove daemonize, at least from the configuration file example
daemonize only works on Linux so far, and it might not be secure not reliable
2018-01-30 16:12:36 +01:00
Frank Denis ce2a730ab7 Remove unneeded port numbers 2018-01-30 16:10:46 +01:00
Frank Denis c39197f7b2 Prepare for beta12 2018-01-30 15:58:13 +01:00
Frank Denis 61bad01726 Import xtransport 2018-01-30 15:51:07 +01:00
Frank Denis ecaf18f614 Use a fallback resolver if the local DNS configuration doesn't work
This should fix all chicken-and-egg issues
2018-01-30 15:47:39 +01:00
Frank Denis 24c21d5eb2 Start moving things to a custom transport 2018-01-30 13:29:47 +01:00
Frank Denis 367f7fd675 iradix update 2018-01-30 11:20:41 +01:00
Frank Denis c2494cfc40 Make file paths relative to the path of the configuration file 2018-01-29 23:57:20 +01:00
Frank Denis b6e5f55870 Move the proxy struct to its own file 2018-01-29 23:47:04 +01:00
Frank Denis 479d9d14fd Reduce verbosity 2018-01-29 04:03:59 +01:00
Frank Denis cf12fb170a Use a custom transport and a host->ip cache
maybe
Fixes #45
2018-01-29 03:58:39 +01:00
Frank Denis 16928b9954 Recommend adding the IP addresses of the DoH servers for now 2018-01-28 00:30:11 +01:00
Frank Denis 7acc38663b Add Yandex to show that explicit server_names override require_* 2018-01-27 19:46:50 +01:00
Frank Denis 7a5484d983 Include Google cert hash 2018-01-27 19:14:08 +01:00
Frank Denis f8ec5bb2ed Add mipsle binaries 2018-01-27 18:26:07 +01:00
Frank Denis 9eeb68f3a1 beta11 2018-01-27 18:18:28 +01:00
Frank Denis a7fe2aacb8 Show how to use two servers 2018-01-27 18:16:55 +01:00
Frank Denis aff683a56d HTTP2 -> HTTP/2 2018-01-27 18:08:22 +01:00
Frank Denis 333a64e250 up 2018-01-27 18:07:14 +01:00
Frank Denis 3c2cf2a1dc Validate DoH certificate hashes 2018-01-27 17:48:53 +01:00
Frank Denis 5e3e66ac71 Of course Google DNS supports DNSSEC 2018-01-27 17:05:39 +01:00