2
0
mirror of https://github.com/jedisct1/encrypted-dns-server synced 2024-11-10 19:10:25 +00:00
Commit Graph

97 Commits

Author SHA1 Message Date
Frank Denis
1fbdd39937 up 2019-09-20 12:10:59 +02:00
Frank Denis
4b470222c4 Update the documentation 2019-09-20 12:03:49 +02:00
Frank Denis
1dd5ed07c1 Import from dnscrypt-wrapper 2019-09-20 11:25:24 +02:00
Frank Denis
e681e43070 ADd a key cache and improve logging 2019-09-20 10:39:42 +02:00
Frank Denis
f0c6235d33 Save states asynchronously 2019-09-20 02:31:31 +02:00
Frank Denis
360172601f Nits 2019-09-20 01:44:03 +02:00
Frank Denis
bc4b10f637 Save resolver keys and certificates in the state 2019-09-19 21:08:49 +02:00
Frank Denis
0592855b25 kaboom the compiler 2019-09-19 20:47:44 +02:00
Frank Denis
77a5878a52 Remove unused things 2019-09-19 16:40:08 +02:00
Frank Denis
97de11bb71 Only serve the freshest certificate 2019-09-19 16:28:14 +02:00
Frank Denis
8268f4d241 Better auto renewal 2019-09-19 16:23:04 +02:00
Frank Denis
6c10602af6 Automatic cert renewal 2019-09-19 15:51:27 +02:00
Frank Denis
6ba5f9d41f up 2019-09-19 13:24:50 +02:00
Frank Denis
0343dc396d WIP 2019-09-19 13:23:51 +02:00
Frank Denis
93774a892f Set Unix permissions on the state file 2019-09-19 13:08:07 +02:00
Frank Denis
00cab788b8 Drop privileges 2019-09-19 12:57:24 +02:00
Frank Denis
e31363e926 Move everything to a configuration file 2019-09-19 12:30:31 +02:00
Frank Denis
2c519a2b46 Move to TOML (1) 2019-09-19 12:09:00 +02:00
Frank Denis
d8d8757c74 TLS proxy return code 2019-09-18 23:55:16 +02:00
Frank Denis
a62b4a0cf7 Add TLS proxying 2019-09-18 23:49:54 +02:00
Frank Denis
ec91355e74 Padding length tweak 2019-09-18 15:23:50 +02:00
Frank Denis
a0454b8aff Detect TLS connections 2019-09-18 14:52:36 +02:00
Frank Denis
89704db220 Be less restrictive regarding packet sizes 2019-09-18 13:50:32 +02:00
Frank Denis
7c76ee9a13 Clean a few things 2019-09-18 13:40:05 +02:00
Frank Denis
6b30d567a6 Update .gitignore 2019-09-18 12:35:05 +02:00
Frank Denis
a135814891 Persist the provider key
Of course we also need to persist the resolver keys
2019-09-18 12:34:19 +02:00
Frank Denis
67a935f291 Padding 2019-09-18 11:53:13 +02:00
Frank Denis
0505f886e5 Handle truncated responses when len(query)<len(response) 2019-09-18 09:53:23 +02:00
Frank Denis
f673f8497b up 2019-09-18 02:04:04 +02:00
Frank Denis
159cf743c2 Pre-reserve enough room for responses 2019-09-18 01:57:15 +02:00
Frank Denis
59ba64d946 Avoid useless allocation 2019-09-18 01:53:17 +02:00
Frank Denis
eb1b857274 Send encrypted DNS responses 2019-09-18 01:44:47 +02:00
Frank Denis
65c2bba989 Keep the shared secret around 2019-09-18 01:23:03 +02:00
Frank Denis
337eb4924d Refactor a bit, remove question padding 2019-09-18 01:06:44 +02:00
Frank Denis
5f0bb6daf5 Start decrypting DNSCrypt queries 2019-09-17 22:33:15 +02:00
Frank Denis
58c5452084 Set TCP source address for outgoing connections 2019-09-17 20:02:09 +02:00
Frank Denis
e1bd1f52dc Recycle old connections 2019-09-09 14:01:10 +02:00
Frank Denis
236b424fbe Keep track of the number of clients 2019-09-09 01:16:29 +02:00
Frank Denis
82924686d9 Check the peer address
Just for paranoia, as it is redundant with the connect() call, but
cheap enough and the connect() call may eventually be removed.
2019-09-09 00:36:17 +02:00
Frank Denis
0c1ba485f4 merge 2019-09-09 00:32:28 +02:00
Frank Denis
0b3eabb488 Retry truncated responses over TCP 2019-09-09 00:30:48 +02:00
Frank Denis
35819a2375 Proxying 2019-09-08 22:21:01 +02:00
Frank Denis
f7b2a1777a up 2019-09-08 20:08:20 +02:00
Frank Denis
46c933e398 Print the DNS stamp at startup 2019-09-03 01:33:46 +02:00
Frank Denis
8689469722 up 2019-09-03 01:10:35 +02:00
Frank Denis
1dc7ce9a05 up 2019-09-02 23:02:23 +02:00
Frank Denis
9693c990a2
Initial commit 2019-09-01 22:07:19 +02:00