TechnitiumSoftware/DnsServer
1
0
Fork 0
mirror of https://github.com/TechnitiumSoftware/DnsServer.git synced 2026-10-12 02:09:51 +00:00
Code Issues Packages Projects Releases Wiki Activity
4,296 Commits 80 Branches 36 Tags
master
Commit Graph
4296 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Shreyas Zare 8d30bab46e updated change log for v15.6.1 release. v15.6.1 2026-10-11 20:42:39 +05:30
Shreyas Zare a570a2cbaf docker file version updated to v15.6.1 for release. 2026-10-11 20:42:14 +05:30
Shreyas Zare 54ad99faa5 inno: updated version to v15.6.1 for release 2026-10-11 20:41:53 +05:30
Shreyas Zare e46a2867b5 assembly version updated to v15.6.1 for release. 2026-10-11 20:41:28 +05:30
Shreyas Zare 19cf080bcf app store json updated for v15.6.1 release. 2026-10-11 20:41:02 +05:30
Shreyas Zare 694b25c023 app assembly version updated for release. 2026-10-11 20:40:38 +05:30
Shreyas Zare 25f53d290e webapp: updated LDAP auth instructions. 2026-10-10 15:48:23 +05:30
Shreyas Zare d6b8b971a3 LdapAuthProvider: Refactored implementation to use separate CreateBoundConnection() methods for windows and unix. Updated CreateBoundConnectionWindows() to do manual cert verification. 2026-10-10 15:36:47 +05:30
Roy Hagland 9e71588fca Fix LDAP StartTLS/LDAPS failing with "The LDAP server is unavailable" on Linux (#2171) 
libldap (OpenLDAP) does not support the managed VerifyServerCertificate
callback, and only connects on the first bind. On Linux this made every
StartTLS/LDAPS test fail immediately, with or without "ignore SSL errors".

LdapAuthProvider:
- On Linux, control certificate checking through libldap's global
  LDAP_OPT_X_TLS_REQUIRE_CERT option instead of the callback, and create a
  new TLS context (LDAP_OPT_X_TLS_NEWCTX) each time since libldap caches it
  after first use, which would otherwise ignore later setting changes.
- On Linux, open the connection with an anonymous bind before StartTLS
  (no credentials are sent), then bind with the service account over TLS.
- Set the certificate callback before StartTLS/LDAPS so it applies to the
  handshake; StartTLS with "ignore SSL errors" also failed on Windows.

Tested on Debian 13 against a Windows Server AD CS lab DC (StartTLS and
LDAPS, ignore on/off, toggled in both orders) and on Windows.
 2026-10-10 15:16:30 +05:30
Shreyas Zare 1d21774b7d LogManager: Updated ListLogFiles() to check if log folder exist. 2026-10-10 15:06:56 +05:30
Shreyas Zare c8d3018799 DnsWebService: Updated InspectAndFixZonePermissions() to save auth config only if it makes any changes. 2026-10-10 15:06:17 +05:30
Shreyas Zare e7963cf78f DnsServer: Updated ProcessUdpRequestAsync() to ensure that buffer size is never less than 512. Updated ProcessDoHRequestAsync() to suppress send timeout error. 2026-10-10 15:05:10 +05:30
Shreyas Zare 8922e650cd CacheZone: Updated QueryRecords() to fix bug related to CNAME negative cache. 2026-10-10 15:03:55 +05:30
Shreyas Zare 18890b45ef ApexZone: Fixed NOTIFY implementation to avoid cases of missed NOTIFY to secondary servers when one of them is down or not responding. 2026-10-10 15:03:09 +05:30
Shreyas Zare 62607a1dd7 BlockListZoneManager: Updated ReadConfigFrom() to prevent from reloading block list in case of config transfer to avoid unnecessary reload for each sync event. Updated ForceUpdateBlockLists() and StartBlockListUpdateTimer() to save lasts updated time lazily by settings pending save flag. 2026-10-10 15:01:43 +05:30
Shreyas Zare bd5434849d AuthZoneManager: Updated CondenseIncrementalZoneTransferRecords() to fix issue when IXFR difference has duplicate delete/add entries which Microsoft DNS Server is known to emit and causes secondary zone to miss records. 2026-10-10 14:59:31 +05:30
Shreyas Zare 1ed1f0ae5f AuthManager: Updated Dispose() to check for pending save. Updated CreateSessionAsync() and CreateSession() to set pending save flag so that the config is saved later. 2026-10-10 14:57:14 +05:30
Shreyas Zare fc287a6328 DnsServerApp: Updated console message to use HTTPS URL when available. 2026-10-10 14:56:16 +05:30
Shreyas Zare ff7c0473bd BlockPage: Updated cert generation code to add Enhanced Key Usage extension. 2026-10-10 14:55:33 +05:30
Shreyas Zare 70495af5b3 updated changelog for v15.6 release. v15.6.0 2026-10-03 19:03:52 +05:30
Shreyas Zare 4ecee20f66 docker file version updated to v15.6.0 2026-10-03 19:03:25 +05:30
Shreyas Zare 1d2996cc53 inno: version updated to v15.6 2026-10-03 19:03:04 +05:30
Shreyas Zare 419d053775 assesmbly version updated to v15.6 for release. 2026-10-03 19:02:39 +05:30
Shreyas Zare a248ae8bc4 assembly version updated for release. 2026-10-03 19:02:07 +05:30
Shreyas Zare 8d75247a11 app store json updated for v15.6 release. 2026-10-03 19:01:47 +05:30
Shreyas Zare d68047b349 app asssembly version updated for release. 2026-10-03 19:01:15 +05:30
Shreyas Zare 3f23d518cf updated docker env var docs to include QUIC protocol option. 2026-10-03 14:21:54 +05:30
Shreyas Zare 366e3036cc updated docker compose documentation 2026-10-03 14:21:28 +05:30
Shreyas Zare 736bd562be updated APIDOCS. 2026-10-03 14:20:59 +05:30
Shreyas Zare 4235c974d8 webapp: updated html to add support for Enable Cache Prefetch option. 2026-10-03 14:19:58 +05:30
Shreyas Zare 1c1072d878 main.js: Updated code to add support for new Enable Cache Prefetch option. 2026-10-03 14:19:04 +05:30
Shreyas Zare b1d1db1d59 dhcp.js: Fixed multiple XSS issues. 2026-10-03 14:17:58 +05:30
Shreyas Zare 46818d6e87 cluster.js: updated code to add support for new version parameter. 2026-10-03 14:16:25 +05:30
Shreyas Zare af954e6fad WebServiceZonesApi: Updated ListZones() to add validation for filterName and matchTimeout to prevent abuse of regex option. 2026-10-03 14:03:49 +05:30
Shreyas Zare b499833aed WebServiceSettingsApi: updated setting API to add support for new "enableCachePrefetch" option. 2026-10-03 14:02:19 +05:30
Shreyas Zare 6d3421d04c WebServiceClusterApi: Updated WriteClusterNodes() to add new "version" parameter. 2026-10-03 13:59:39 +05:30
Shreyas Zare f4bfd94571 DnsWebService: Added version property. 2026-10-03 13:50:07 +05:30
Shreyas Zare a8af11be47 ClusterInfo: added version property. 2026-10-03 13:49:15 +05:30
Shreyas Zare 238558e7ef DnsServer: Added an explicit option to enable/disable Cache Prefetch feature. Fixed issue in ProcessZoneTransferQueryAsync() that caused including OPT in AXFR response parts when request did not support EDNS. Updated AuthoritativeQueryAsync() to consider FWD response from apps as final answer. Updated RecursiveResolveAsync() to add check to prevent triggering multiple prefetch tasks for the same qname, and added missing EDNS check in final server failure response. 2026-10-03 13:48:44 +05:30
Shreyas Zare 9e48dbddc2 CacheZone: Updated QueryRecords() to fix issue of failure record entry shadowing an CNAME record entry in cache. 2026-10-03 13:42:42 +05:30
Shreyas Zare 9ab3064ab4 AuthZoneManager: Updated GetAuthZoneInfo() and FindAuthZoneInfo() to add domain name validation to prevent log injection. 2026-10-03 13:41:28 +05:30
Shreyas Zare c33ef91315 DhcpServer: Updated GetScope() to add scope name validation to prevent log injection. 2026-10-03 13:36:39 +05:30
Shreyas Zare db8d8ad097 ClusterNode: Updated to implement add version parameter. 2026-10-03 13:35:53 +05:30
Shreyas Zare dbc1749e61 User: updated ChangePassword() to add limit on iterations to prevent abuse. 2026-10-03 13:35:05 +05:30
Shreyas Zare 13fab8a77f AuthManager: Updated GetUser() and GetGroup() to add validation checks to prevent log injection. 2026-10-03 13:31:03 +05:30
Shreyas Zare a64f5a23dd DnsServerApp: Updated code to include server version and start time stamp in output. 2026-10-03 13:28:36 +05:30
Shreyas Zare bb4bca44a2 BlockPage: Updated ServeDefaultPageAsync() to fix XSS issue. 2026-10-03 13:27:41 +05:30
Shreyas Zare 4323993c2d updated changelog for v15.5.1 release. v15.5.1 2026-09-26 16:30:06 +05:30
Shreyas Zare cdb772ea49 docker file: updated version to v15.5.1 2026-09-26 16:29:01 +05:30
Shreyas Zare dd383703ff inno: updated version to v15.5.1 2026-09-26 16:28:40 +05:30