2
0
mirror of https://github.com/jedisct1/encrypted-dns-server synced 2024-11-10 19:10:25 +00:00
Commit Graph

109 Commits

Author SHA1 Message Date
Frank Denis
f3663622c7 CRLF 2019-09-21 01:07:50 +02:00
Frank Denis
a5fb37329e Clarify 2019-09-21 01:07:19 +02:00
Frank Denis
3104aa3382 Bump 2019-09-21 01:01:58 +02:00
Frank Denis
2135af9610 up 2019-09-21 00:58:16 +02:00
Frank Denis
c98a202f80 Add a simple built-in DNS cache
(TTL is not handled yet)
2019-09-21 00:53:20 +02:00
Frank Denis
cf1cbdb51d Split the resolution part 2019-09-20 21:03:15 +02:00
Frank Denis
f764abaf1a Mention where the file is 2019-09-20 12:29:25 +02:00
Frank Denis
7d3a944434 Add README.md 2019-09-20 12:22:41 +02:00
Frank Denis
426e0b2186 Use the crate 2019-09-20 12:21:34 +02:00
Frank Denis
a04d6e1d23 Less keywords 2019-09-20 12:18:44 +02:00
Frank Denis
2366456eb0 up 2019-09-20 12:15:45 +02:00
Frank Denis
aa8d6f22d1 Update .gitignore 2019-09-20 12:11:25 +02:00
Frank Denis
1fbdd39937 up 2019-09-20 12:10:59 +02:00
Frank Denis
4b470222c4 Update the documentation 2019-09-20 12:03:49 +02:00
Frank Denis
1dd5ed07c1 Import from dnscrypt-wrapper 2019-09-20 11:25:24 +02:00
Frank Denis
e681e43070 ADd a key cache and improve logging 2019-09-20 10:39:42 +02:00
Frank Denis
f0c6235d33 Save states asynchronously 2019-09-20 02:31:31 +02:00
Frank Denis
360172601f Nits 2019-09-20 01:44:03 +02:00
Frank Denis
bc4b10f637 Save resolver keys and certificates in the state 2019-09-19 21:08:49 +02:00
Frank Denis
0592855b25 kaboom the compiler 2019-09-19 20:47:44 +02:00
Frank Denis
77a5878a52 Remove unused things 2019-09-19 16:40:08 +02:00
Frank Denis
97de11bb71 Only serve the freshest certificate 2019-09-19 16:28:14 +02:00
Frank Denis
8268f4d241 Better auto renewal 2019-09-19 16:23:04 +02:00
Frank Denis
6c10602af6 Automatic cert renewal 2019-09-19 15:51:27 +02:00
Frank Denis
6ba5f9d41f up 2019-09-19 13:24:50 +02:00
Frank Denis
0343dc396d WIP 2019-09-19 13:23:51 +02:00
Frank Denis
93774a892f Set Unix permissions on the state file 2019-09-19 13:08:07 +02:00
Frank Denis
00cab788b8 Drop privileges 2019-09-19 12:57:24 +02:00
Frank Denis
e31363e926 Move everything to a configuration file 2019-09-19 12:30:31 +02:00
Frank Denis
2c519a2b46 Move to TOML (1) 2019-09-19 12:09:00 +02:00
Frank Denis
d8d8757c74 TLS proxy return code 2019-09-18 23:55:16 +02:00
Frank Denis
a62b4a0cf7 Add TLS proxying 2019-09-18 23:49:54 +02:00
Frank Denis
ec91355e74 Padding length tweak 2019-09-18 15:23:50 +02:00
Frank Denis
a0454b8aff Detect TLS connections 2019-09-18 14:52:36 +02:00
Frank Denis
89704db220 Be less restrictive regarding packet sizes 2019-09-18 13:50:32 +02:00
Frank Denis
7c76ee9a13 Clean a few things 2019-09-18 13:40:05 +02:00
Frank Denis
6b30d567a6 Update .gitignore 2019-09-18 12:35:05 +02:00
Frank Denis
a135814891 Persist the provider key
Of course we also need to persist the resolver keys
2019-09-18 12:34:19 +02:00
Frank Denis
67a935f291 Padding 2019-09-18 11:53:13 +02:00
Frank Denis
0505f886e5 Handle truncated responses when len(query)<len(response) 2019-09-18 09:53:23 +02:00
Frank Denis
f673f8497b up 2019-09-18 02:04:04 +02:00
Frank Denis
159cf743c2 Pre-reserve enough room for responses 2019-09-18 01:57:15 +02:00
Frank Denis
59ba64d946 Avoid useless allocation 2019-09-18 01:53:17 +02:00
Frank Denis
eb1b857274 Send encrypted DNS responses 2019-09-18 01:44:47 +02:00
Frank Denis
65c2bba989 Keep the shared secret around 2019-09-18 01:23:03 +02:00
Frank Denis
337eb4924d Refactor a bit, remove question padding 2019-09-18 01:06:44 +02:00
Frank Denis
5f0bb6daf5 Start decrypting DNSCrypt queries 2019-09-17 22:33:15 +02:00
Frank Denis
58c5452084 Set TCP source address for outgoing connections 2019-09-17 20:02:09 +02:00
Frank Denis
e1bd1f52dc Recycle old connections 2019-09-09 14:01:10 +02:00
Frank Denis
236b424fbe Keep track of the number of clients 2019-09-09 01:16:29 +02:00