rpms/dnssec-trigger
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
133 commits 32 branches 0 tags 216 KiB
Commit graph

133 commits

This branch
This branch
All branches
Author SHA1 Message Date
Fedora Release Engineering
559a9eaee1 Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild 2025-07-23 19:24:40 +00:00
Fedora Release Engineering
6a978fe44e Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild 2025-01-16 16:01:04 +00:00
Petr Menšík
0c89edf730 Add recipe for adding custom server 
Related: RHEL-6597
 2024-11-20 17:07:11 +01:00
Petr Menšík
b0889c46e9 Mark explicitly server cert with CA flag 
Since OpenSSL 3.2 it did not connect from control to server cert. Create
server with indication is it CA.

Also use clientAuth trust for CA cert. That allows control cert to be
used for client authentication.

Resolves: rhbz#2310947
 2024-09-10 18:11:40 +02:00
Fedora Release Engineering
52d732d58d Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild 2024-07-17 21:12:32 +00:00
Fedora Release Engineering
848c0c938a Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-24 09:39:09 +00:00
Fedora Release Engineering
752566b521 Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-19 17:22:42 +00:00
Petr Menšík
428487f73d fixup! Reuse common parts in test 
[skip changelog]
 2023-07-25 20:52:31 +02:00
Petr Menšík
0e9e73b7fc fixup! Include basic test for dnssec-trigger 
[skip changelog]
 2023-07-25 19:20:38 +02:00
Petr Menšík
581364d032 Minimize changes to default config 
Use built-in defaults modified for Fedora instead.
 2023-07-25 18:59:52 +02:00
Petr Menšík
0c43f2ef12 Do not require whole systemd 
Systemd is not strictly required. Ensure just macros for its building
are present, but do not require whole systemd for building.
 2023-07-25 18:59:52 +02:00
Petr Menšík
97da47c209 Always use xdg-open as login tool 
Do not rely on autodetection at build-time. Instead set explicitly
default tool.
 2023-07-25 18:59:52 +02:00
Petr Menšík
c3df26f3bd Modify default configuration just with few changes 
Since we no longer provide special servers, use just modification to
upstream example.conf to create default and workstation variants of
configuration files.
 2023-07-25 17:51:55 +02:00
Petr Menšík
8e10af3061 Reuse common parts in test 
[skip changelog]
 2023-07-25 13:43:49 +02:00
Petr Menšík
3237bd51fd Fix error in HTTP and HTTPS workaround modes 2023-07-25 12:38:21 +02:00
Petr Menšík
5cfc17cd87 Make test_http and test_ssl working again 
Correct configuration were not allowed into unbound by error, which were
already fixed upstream. Backport the fix too.
 2023-07-25 12:32:56 +02:00
Petr Menšík
f2afacc02b Include basic test for dnssec-trigger 
Should ensure fallbacks provided in configuration are working.
Actually discovered regression in our version.

[skip changelog]
 2023-07-25 12:32:40 +02:00
Petr Menšík
ab9e2f0246 Update upstream servers to zus.nlnetlabs.nl. 
Upstream servers no longer have the original IP addresses or that hash.
Fix addresses to working set actually instead of uncommenting the very
old set. The set were changed in 2014 by upstream commit bafdcd5.
 2023-07-25 10:52:36 +02:00
Petr Menšík
b496e2cb00 Remove Paul's servers 
They seem to be offline as well.
 2023-07-24 17:14:50 +02:00
Petr Menšík
afbbb0cb5d Modernize spec a bit, use SPDX licenses 2023-07-24 17:07:23 +02:00
Petr Menšík
6625e05a2b Convert to %autorelease and %autochangelog 
[skip changelog]
 2023-07-24 16:20:41 +02:00
Petr Menšík
dd2de13ba0 Remove fedora specific servers 
These servers had not been actively maintained for years. Because we
even haven't found some of them had too strict firewall. Direct few
users that need them to upstream provided servers.
 2023-07-24 16:18:20 +02:00
Fedora Release Engineering
ce267980ac Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2023-07-19 17:41:57 +00:00
Todd Zullinger
6a16b9b9ea Remove execute bit on ssh_config.d snippet 
There is no need for the file to be executable.  It's installed without
the execute bit but the %attr() overrides that, unintentionally, I
presume.
 2023-06-15 23:59:16 -04:00
Fedora Release Engineering
a2c4f66b6b Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2023-01-19 01:37:04 +00:00
Florian Weimer
e3d1d48bb0 Port configure script to C99 
Related to:

  <https://fedoraproject.org/wiki/Changes/PortingToModernC>
  <https://fedoraproject.org/wiki/Toolchain/PortingToModernC>
 2022-12-16 14:57:06 +01:00
Fedora Release Engineering
c0c40e0df2 Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2022-07-21 00:42:31 +00:00
Fedora Release Engineering
1a86126f10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2022-01-20 00:52:16 +00:00
Sahana Prasad
3e06d303c3 Rebuilt with OpenSSL 3.0.0 2021-09-14 19:00:38 +02:00
Fedora Release Engineering
d1627a8237 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2021-07-21 20:58:48 +00:00
Zbigniew Jędrzejewski-Szmek
7dfad40f3c Rebuilt for updated systemd-rpm-macros 
See https://pagure.io/fesco/issue/2583.
 2021-03-02 16:13:57 +01:00
Fedora Release Engineering
825497bd45 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2021-01-26 03:36:29 +00:00
Adam Williamson
925e474068 Rebuild for libldns soname bump 2020-12-19 10:07:59 -08:00
Tom Stellard
fdbf20d763 Add BuildRequires: make 
https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot
 2020-12-17 04:39:29 +00:00
Petr Menšík
ea121786d6 Use /run directory for pid file 
Parts are still using /var/run, because they have no configure option to
change defaults.
 2020-10-16 21:14:11 +02:00
Christian Stadelmann
c36f3ebb97 dnssec-trigger.tmpfiles.d: Update path from /var/run to /run 2020-10-16 21:11:16 +02:00
Rick Elrod
73771c1a3b Replace unbound-tummy01.fpo IP with new unbound-cc-rdu01.fpo 
Signed-off-by: Rick Elrod <rick@elrod.me>
 2020-10-16 21:10:49 +02:00
Petr Menšík
0d30adfa94 Enable ssh fingerprint verification by default 
Because full local validation is provided, enable ssh validation over
DNSSEC. It should would out-of-the-box for any installation, where
systemd-resolved is installed.

Signed-off-by: Petr Menšík <pemensik@redhat.com>
 2020-10-13 09:32:54 +02:00
Petr Menšík
509bb751e4 Update to 0.17 
Adds also source verification on Fedora.

Upstream Changelog:
https://github.com/NLnetLabs/dnssec-trigger/blob/dnssec-trigger-0.17/Changelog
 2020-10-13 09:29:40 +02:00
Petr Menšík
d87b323e23 Add also trust-ad option 
More recent glibc squashes ad bit from remote network, unless trust-ad
is provided (visit rhbz#1878166). Add it for forward compatibility.
 2020-10-13 08:21:43 +02:00
Petr Menšík
4be478c5e9 Add options edns0 
Unbound fully supports DNS standards including EDNS. Enable it in
resol.conf.
 2020-10-12 23:32:43 +02:00
Fedora Release Engineering
7338a43ff7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2020-07-27 15:35:24 +00:00
Fedora Release Engineering
aa04a5bca0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2020-01-28 16:04:48 +00:00
Jeff Law
ac4b0cace6 Fix typo in last change 2020-01-06 11:52:13 -07:00
Lubomir Rintel
0acdca4ef0 Move the NetworkManager dispatcher script out of /etc 
It's not user configuration and shouldn't ever have been there. Except for that
it used to be the only location NetworkManager looked into. With NetworkManager
1.20 that is no longer the case and the dispatcher scripts can be moved to
/usr/lib.
 2019-08-22 17:47:59 +02:00
Fedora Release Engineering
5a3a7a164b - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2019-07-24 22:13:08 +00:00
Fedora Release Engineering
e84d3b2ce1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2019-01-31 17:25:26 +00:00
Fedora Release Engineering
12f9864ab2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2018-07-12 23:01:22 +00:00
Miro Hrončok
350253c5e5 Rebuilt for Python 3.7 2018-06-19 10:42:16 +02:00
Petr Menšík
bca75913c7 Accept NXDOMAIN for NSEC probe 
Signed-off-by: Petr Menšík <pemensik@redhat.com>
 2018-03-14 15:33:34 +01:00