[getdns-users] Candidate for the IETF94 hackathon results release version 0.5.1 of getdns

Willem Toorop willem at nlnetlabs.nl
Wed Nov 11 13:55:43 UTC 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Dear All,

We have a candidate for the special IETF94 hackathon results release;
version 0.5.1 of getdns.

This release contains all contributions added during the hackathon
helt at the IETF94 in Yokahama.

The included contributions are:

* EDNS(0) padding option
With this option, the query size will be padded to be a
multiple of a block size when queried over GETDNS_TRANSPORT_TLS
transport, to eliminate guessing the query by analyzing query
sizes. The block size can be set with
getdns_context_set_tls_query_padding_blocksize() function.

* An EDNS client subnet private option
With this option EDNS client subnet aware upstreams are asked
to not reveal the originating network of the query.

* The return_call_debugging extensions
This extension was already in the API, but had not been
implemented yet. It returns "meta" information about a query in
the response dict (under the name "call_debugging". On top of
the returned information which was already described in the API
spec, this version also returns information about the transport
eventually used to perform the query, and (if applicable)
whether authentication succeeded.

* A dnssec_roadblock_avoidance extension
When set, the library will work in stub resolution mode and try
to get a by DNSSEC validation assessed answer. On BOGUS answers
the library will retry recursive resolution mode. This is the
simplest form of passive roadblock detection and avoidance. For
a very extensive overview of the types of roadblock, see: draft-
ietf-dnsop-dnssec-roadblock-avoidance. Use the --enable-draft-
dnssec-roadblock-avoidance option to configure to compile with
this extension.

Please review this candidate carefully. If no issues arrise the actual
release will follow Wednesday the 18th of November 2015.


link: https://getdnsapi.net/dist/getdns-0.5.1rc1.tar.gz
md5 : cf4fa710cb733b90ae7d512dbb31c7d1
sha1: f3ca92884a9b0b5cd401b57ad9c5fa1c1646e9b6
pgp : https://getdnsapi.net/dist/getdns-0.5.1rc1.tar.gz.asc


ChangeLog
=========
* Bugfix: growing upstreams arrow.
* Bugfix: Segfault on timeout in specific conditions
* Bugfix: install getdns_extra.h from build location
* Bugfix: Don't let cookies overwrite existing EDNS0 options
* Don't link libdl
* The EDNS(0) Padding Option (draft-mayrhofer-edns0-padding).
When using DNS over TLS, query sizes will be padded to multiples
of a block size given with:
getdns_context_set_tls_query_padding_blocksize()
* An EDNS client subnet private option, that will ask a EDNS client
subnet aware resolver to not reveal any details about the
originating network. See: draft-ietf-dnsop-edns-client-subnet
Set with: getdns_context_set_edns_client_subnet_private()
* The return_call_debugging extension. The extension will also return
the transport used on top of the information about the request which
is described in the API spec.
* A dnssec_roadblock_avoidance extension. When set, the library will
work in stub resolution mode and try to get a by DNSSEC validation
assessed answer. On BOGUS answers the library will retry rescursive
resolution mode. This is the simplest form of passive roadblock
detection and avoidance: draft-ietf-dnsop-dnssec-roadblock-
avoidance. Use the --enable-draft-dnssec-roadblock-avoidance
option to configure to compile with this extension.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=mnL0
-----END PGP SIGNATURE-----



More information about the Users mailing list