Changelog:
=============
- Documentation issue for Net::DNS::RR::RRSIG::verify()
- Denial of Service via long DNS compression chains
- Remote code injection via EDNS EXTENDED ERROR
- UNIX.pm: Unreachable code warning using Apache/mod_perl
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Also fix ptests.
Changelog:
1.26:
-Avoid test failure on RedHat by requiring DSA-SHA1 opt-in.
-Fix: Rocky linux 9: libcrypto error
1.25:
-Suppress AUTOLOAD for Net::DNS::SEC::Private::_index.
-Abandon support for OpenSSL pre-1.1.1 API.
-Fix: Tests exhibiting signatures with SHA-1 fail since Fedora 41
-Fix: Net::DNS minimum version dependency
1.24:
-Eliminate deprecated RSA CRT parameter names.
-Add support for SM3 digest.
1.23:
-Code refactoring of XS component.
1.22:
-Enable Ed25519 sign/verify for BoringSSL & LibreSSL.
-Use EC curve names instead of literal NIDs.
-Circumvent sign/verify test failures on EBCDIC platforms.
-Fix: openssl-SNAP-20230831 breaks RSA sign/verify
1.21:
-Add new t/TestToolkit.pm
-Rework pre-installation test scripts.
- Fix: libressl-3.7.1 breaks DSA verify
1.20:
-Improve Net::DNS::SEC::Keyset tests and error reporting.
-Avoid test failures if/when DSA|MD5|SHA1 become unsupported.
1.19:
-Discontinue support for obsolete ECC-GOST.
-Add LICENSE file to comply with Fedora/RedHat announcement
and WARNING of restrictions on use of strong cryptography.
1.18:
-Eliminate bareword filehandle usage.
-Eliminate indirect object syntax.
-Eliminate grep/map <expression>.
1.17:
-Recognise BIND private key accessed via symbolic link.
1.16:
-Improve testing of verify() functions.
-Rework code in Digest.pm
-SEC.xs code reduction.
1.15:
-Provide access to OpenSSL message digest implementations.
1.14:
-Improve exception capture in test scripts.
-Support more efficient algorithm mapping in Net::DNS.
1.13:
-Tweaks to resolve compilation errors with BoringSSL.
1.12:
-Avoid use of EC_POINT_set_affine_coordinates_GFp which is
deprecated in OpenSSL 3.0.0
-Reduce level of support for OpenSSL non-LTS releases.
1.11:
-Explain why compilation aborted in Net::DNS::SEC::DSA et al.
-Fix Makefile.PL to suppress parallel test execution.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Also fix ptests.
Changelog:
-Suppress autovivified undefined $rr->{class} and $rr->{ttl}.
-Rework test scripts for SVCB and DELEG.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
- Refactor SVCB to avoid internal use of generic keyNN.
- DELEG documentation and code improvement.
- Fix rt.cpan.org: bug in resolver base selection on non-Unix/Linux platforms
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Please see
https://git.yoctoproject.org/poky/commit/?id=4dd321f8b83afecd962393101b2a6861275b5265
for what changes are needed, and sed commands that can be used to make them en masse.
I've verified that bitbake -c patch world works with these, but did not run a world
build; the majority of recipes shouldn't need further fixups, but if there are
some that still fall out, they can be fixed in followups.
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
=============
- Minor code improvements in Resolver::Base.
- Add RESINFO package for resolver information.
- Documentation revision and reformatting.
- Fix rt.cpan.org:
Fedora41: IPv4 loopback disabled in IPv6-only configuration
Use of uninitialized value [in _send_udp]
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
- Restore current domain name following $INCLUDE in zone file.
- Update RFC and other document referneces.
- Fix rt.cpan.org for issue with parallel run of TSIG tests
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
- Resync with IANA DNS Parameters registry.
- Revise documentation for Packet.pm and Header.pm.
- Random ID cache moved from header->id to packet->encode.
- Restructure resolver method inheritance tree.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The command "bitbake universe -c fetch" currently throws a ton of warnings
as there are many 'impossible' dependencies.
In some cases these variants may never have worked and were just added by copy
and paste of recipes. In some cases they once clearly did work but became
broken somewhere along the way. Users may also be carrying local bbappend files
which add further BBCLASSEXTEND.
Having universe fetch work without warnings is desireable so clean up the broken
variants. Anyone actually needing something dropped here can propose adding it
and the correct functional dependencies back quite easily. This also then
ensures we're not carrying or fixing things nobody uses.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Add missing rdep on perl-module-encode-encoding
fixes
Can't locate Encode/Encoding.pm in @INC (you may need to install the Encode::Encoding module)
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
============
Add support for SVCB dohpath and ohttp parameters.
More robust test of bgbusy() SpamAssassin workaround.
Fix rt.cpan.org #149456
Fix rt.cpan.org #149280
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
Adopt JSON as presentation notation for EDNS options.
Zero packet->id not allowed in outbound packet.
Remove deprecated 2-argument TSIG->create() method.
Revise TSIG test scripts and documentation.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The create_spdx bbclass does not currently handle the lack of
spaces around the op (| or &). For now fix the LICENSE string.
Signed-off-by: Saul Wold <saul.wold@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The create_spdx bbclass does not currently handle the lack of
spaces around the op (| or &). For now fix the LICENSE string.
Signed-off-by: Saul Wold <saul.wold@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
License-Update:
change "the above copyright" to "the original copyright"
Changelog:
=========
Fix rt.cpan.org #137768
Test t/05-SVCB.t on Perl 5.18.0 fails with deep recursion.
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This is the result of automated script (0.9.1) conversion:
oe-core/scripts/contrib/convert-overrides.py .
converting the metadata to use ":" as the override character instead of "_".
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
**** 1.32 Jul 16, 2021
Text: Offer both Unicode and escaped-ASCII strings.
Add LICENSE file to comply with Fedora/RedHat announcement.
Fix rt.cpan.org #136666
Net::DNS::RR::ZoneFile parser erroneously strips line
terminators in quoted string forming part of multiline RR.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
**** 1.31 May 2, 2021
Improve implementation of SVCB record.
**** 1.30 Mar 30, 2021
Simplify parsing of multi-line RRs in zone file.
Improve robustness of "dry" resolver tests.
Avoid deep recursion in non-fatal test report.
**** 1.29 Nov 18, 2020
Include test number in summary of failed non-fatal tests.
Remove Net::DNS::SEC specific tests.
Fix faulty test plan in t/08-recurse.t.
**** 1.28 Oct 23, 2020
Eliminate indirect object syntax.
Eliminate grep/map <expression>.
**** 1.27 Sep 11, 2020
Fix rt.cpan.org #133203
Net::DNS::RR::LOC erroneously strips non default values from
string representation
Signed-off-by: Tim Orling <timothy.t.orling@intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Wang Mingyu
Khem Raj
Jason Schonberg
Liu Yiding
Gyorgy Sarvari
Alexander Kanavin
Richard Purdie
Khem Raj
Saul Wold
zhengruoqin
Martin Jansa
Tim Orling