1. 31 Oct, 2018 1 commit
  2. 04 Oct, 2018 1 commit
  3. 14 Sep, 2018 1 commit
    • Vladimír Čunát's avatar
      cache: improve out-of-disk condition · efc08a64
      Vladimír Čunát authored
      When suspect SIGBUS happens, print helpful error and try to remove
      the cache, so that the service might work again if auto-restarted.
      Theoretically we could longjmp() out of the SIGBUS handler,
      but that would be rather messy, so let the process die.
      efc08a64
  4. 17 Aug, 2018 4 commits
  5. 14 Aug, 2018 8 commits
  6. 03 Aug, 2018 1 commit
    • Vladimír Čunát's avatar
      lua cache bindings: error out if cache isn't open yet · b1a16801
      Vladimír Čunát authored
      The catch is that during configuration file processing,
      no cache is open (yet), as kresd can't know if the config
      does open it in some later part (with non-default path or size).
      Now we just throw an error.  Exceptions:
       - cache.open() and cache.backends(), of course :-)
       - cache.ns_tout() - not required, it's not really inside cache
       - cache.close() - it sounds reasonable to allow "closing a closed cache"
      
      This immediately caught a typo in cache metatable.
      b1a16801
  7. 02 Aug, 2018 1 commit
  8. 31 Jul, 2018 1 commit
  9. 27 Jul, 2018 1 commit
  10. 24 Jul, 2018 1 commit
  11. 03 Jul, 2018 1 commit
  12. 02 Jul, 2018 4 commits
  13. 29 Jun, 2018 1 commit
  14. 26 Jun, 2018 1 commit
  15. 25 Jun, 2018 1 commit
  16. 21 Jun, 2018 1 commit
  17. 15 Jun, 2018 1 commit
  18. 13 Jun, 2018 1 commit
  19. 01 Jun, 2018 1 commit
  20. 16 May, 2018 2 commits
  21. 23 Apr, 2018 2 commits
  22. 12 Apr, 2018 1 commit
    • Marek Vavruša's avatar
      fixed validation of root DS · b3785d71
      Marek Vavruša authored
      The root DS exists outside of DNS hierarchy, so its NSEC proving non-existence
      always contains the SOA, as that's the root of DNS and there's nothing above it.
      b3785d71
  23. 03 Apr, 2018 1 commit
  24. 28 Mar, 2018 1 commit
  25. 19 Mar, 2018 1 commit
    • Vladimír Čunát's avatar
      make: don't magically -D_FORTIFY_SOURCE=2 · b15476ec
      Vladimír Čunát authored
      This is just annoying for development.  You want -O0 or -Og,
      and consequently you get lots of warnings that are difficult to disable.
      
      I believe hardening options are more of a responsibility/choice of the
      caller, typically distributions have some general policies and pass the
      flags (almost) uniformly to all packages.  I can't see any part of kresd
      being so specific to warrant explicit hardening.
      b15476ec