* Fri Jan 27 2012 Paul Wouters <pwouters@redhat.com> - 1.4.15-1

- Upgraded to 1.4.15
- Updated unbound.conf to show how to configure listening on tls443
This commit is contained in:
Paul Wouters 2012-01-27 11:46:03 -05:00
parent 1b9b4dc191
commit 3bde9d279c
4 changed files with 26 additions and 13 deletions

1
.gitignore vendored
View File

@ -18,3 +18,4 @@ unbound-1.4.5.tar.gz
/unbound-1.4.12.tar.gz /unbound-1.4.12.tar.gz
/unbound-1.4.13.tar.gz /unbound-1.4.13.tar.gz
/unbound-1.4.14.tar.gz /unbound-1.4.14.tar.gz
/unbound-1.4.15.tar.gz

View File

@ -1,2 +1 @@
7e3b27dee2b97640dd2e1783253317ab unbound-1.4.13.tar.gz 99173a6548e0e2ec9bfac7a5d025f79e unbound-1.4.15.tar.gz
cd69fdaaa6af01ea0b6fbc59802f74ba unbound-1.4.14.tar.gz

View File

@ -40,12 +40,20 @@ server:
# interface: 192.0.2.153 # interface: 192.0.2.153
# interface: 192.0.2.154 # interface: 192.0.2.154
# interface: 2001:DB8::5 # interface: 2001:DB8::5
#
# for dns over tls and raw dns over port 80
# interface: 0.0.0.0@443
# interface: ::0@443
# interface: 0.0.0.0@80
# interface: ::0@80
# enable this feature to copy the source address of queries to reply. # enable this feature to copy the source address of queries to reply.
# Socket options are not supported on all platforms. experimental. # Socket options are not supported on all platforms. experimental.
# interface-automatic: yes
#
# NOTE: Enable this option when specifying interface 0.0.0.0 or ::0 # NOTE: Enable this option when specifying interface 0.0.0.0 or ::0
# NOTE: Disabled per Fedora policy not to listen to * on default install # NOTE: Disabled per Fedora policy not to listen to * on default install
# interface-automatic: yes # NOTE: If deploying on non-default port, eg 80/443, this needs to be disabled
interface-automatic: no interface-automatic: no
# port to answer queries from # port to answer queries from
@ -146,6 +154,8 @@ server:
# do-ip6: yes # do-ip6: yes
# Enable UDP, "yes" or "no". # Enable UDP, "yes" or "no".
# NOTE: if setting up an unbound on tls443 for public use, you might want to
# disable UDP to avoid being used in DNS amplification attacks.
# do-udp: yes # do-udp: yes
# Enable TCP, "yes" or "no". # Enable TCP, "yes" or "no".
@ -448,8 +458,8 @@ server:
# service clients over SSL (on the TCP sockets), with plain DNS inside # service clients over SSL (on the TCP sockets), with plain DNS inside
# the SSL stream. Give the certificate to use and private key. # the SSL stream. Give the certificate to use and private key.
# default is "" (disabled). requires restart to take effect. # default is "" (disabled). requires restart to take effect.
# ssl-service-key: "path/to/privatekeyfile.key" # ssl-service-key: "/etc/unbound/unbound_server.key"
# ssl-service-pem: "path/to/publiccertfile.pem" # ssl-service-pem: "/etc/unbound/unbound_server.pem"
# ssl-port: 443 # ssl-port: 443
# request upstream over SSL (with plain DNS inside the SSL stream). # request upstream over SSL (with plain DNS inside the SSL stream).

View File

@ -1,4 +1,3 @@
# not ready yet
%{?!with_python: %global with_python 1} %{?!with_python: %global with_python 1}
%if %{with_python} %if %{with_python}
@ -8,8 +7,8 @@
Summary: Validating, recursive, and caching DNS(SEC) resolver Summary: Validating, recursive, and caching DNS(SEC) resolver
Name: unbound Name: unbound
Version: 1.4.14 Version: 1.4.15
Release: 2%{?dist} Release: 1%{?dist}
License: BSD License: BSD
Url: http://www.nlnetlabs.nl/unbound/ Url: http://www.nlnetlabs.nl/unbound/
Source: http://www.unbound.net/downloads/%{name}-%{version}.tar.gz Source: http://www.unbound.net/downloads/%{name}-%{version}.tar.gz
@ -220,6 +219,10 @@ fi
/bin/systemctl try-restart unbound-keygen.service >/dev/null 2>&1 || : /bin/systemctl try-restart unbound-keygen.service >/dev/null 2>&1 || :
%changelog %changelog
* Fri Jan 27 2012 Paul Wouters <pwouters@redhat.com> - 1.4.15-1
- Upgraded to 1.4.15
- Updated unbound.conf to show how to configure listening on tls443
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.14-2 * Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.14-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild