Frank Denis
093936f7ab
Check for dumb file permissions on startup
...
There's nothing special about "-service install".
On any system, executables shouldn't be modifiable by other system
users, no matter what the executable is and how it's run.
2024-02-20 02:39:39 +01:00
Frank Denis
7462961980
Warn if the executable of the service being installed could be overwritten by other system users
...
Fixes #2579
Until this is handled by `kardianos/service`
2024-02-20 02:23:49 +01:00
Frank Denis
0b559bb54f
Warn if the main config file could be written by other system users
2024-02-20 02:11:03 +01:00
Frank Denis
f2484f5bd5
Cache plugin: replace ARC cache with SIEVE
2024-01-19 00:05:33 +01:00
Xiaotong Liu
49e3570c2c
Support server refresh concurrency ( #2537 )
...
* simultaneously refresh all servers
* Add `cert_refresh_concurrency`
---------
Co-authored-by: YX Hao <lifenjoiner@163.com>
2023-12-18 19:25:54 +08:00
YX Hao
13e7077200
Optimize CaptivePortalHandler for clean code
2023-12-14 19:23:42 +08:00
keatonLiu
956a14ee21
add timeout for udp and tcp dialer
2023-12-10 23:56:13 +08:00
YX Hao
0d5e52bb16
Use blocking channel instead of looping sleep for less CPU usage
2023-12-03 23:00:10 +08:00
Frank Denis
0232870870
-list: only copy nofilter flag for ODoH relays
2023-09-23 22:52:43 +02:00
Frank Denis
1a9bf8a286
Omit DNSSEC flag for relays
2023-09-23 18:46:11 +02:00
Frank Denis
7fb58720fb
Add -include-relays option to include relays in -list and -list-all
2023-09-23 18:37:52 +02:00
Frank Denis
8bea679e7b
Unofficially support DoH/ODoH over HTTP
2023-09-05 22:37:11 +02:00
Frank Denis
87571d4a7f
Add an IPv6 forwarding example
...
Fixes #2474
2023-08-30 21:32:22 +02:00
Frank Denis
f531c8fffb
plugin_forward: parse more conventions for IPv6 addresses
2023-08-30 21:29:09 +02:00
Frank Denis
d48c811ea9
Don't use absolute paths in the example file
2023-08-17 14:44:47 +02:00
Frank Denis
f2b1edcec2
Add dnscry.pt servers
2023-08-17 14:43:33 +02:00
Frank Denis
1b65fe62b0
Bump
2023-08-11 18:56:31 +02:00
Frank Denis
7dd79d5f96
Add a little bit more delay when spinning
...
But we really shouldn't do it that way, if only because there's a race
between the last write to the channel and the close() call
2023-08-11 15:24:14 +02:00
Frank Denis
aff09648bb
Add support for extended error codes
2023-08-11 14:59:10 +02:00
Frank Denis
98d0938815
Make RefreshDelay match the documentation
2023-08-11 14:06:03 +02:00
Frank Denis
50780421a8
Remove ipv6.download.dnscrypt.info
...
IPv6 address has been added to download.dnscrypt.info
2023-08-11 14:04:20 +02:00
Frank Denis
c3dd761b81
Make error more explicit
2023-08-11 12:07:13 +02:00
Frank Denis
d8aec47a72
Revert "Make RefreshDelay match the documentation"
...
This reverts commit cfd6ced134
2023-08-11 11:48:30 +02:00
Frank Denis
cfd6ced134
Make RefreshDelay match the documentation
2023-08-11 11:42:12 +02:00
Frank Denis
bdf27330c9
Make fetchWithCache() more readable
2023-08-11 11:24:54 +02:00
Frank Denis
a108d048d8
A useless Chtimes() call is still required for the tests :/
2023-08-11 11:16:44 +02:00
Frank Denis
afcfd566c9
Make updateCache() more readable
2023-08-11 11:11:16 +02:00
Frank Denis
ce55d1c5bb
Get rid of named return parameters
2023-08-11 11:01:55 +02:00
Frank Denis
2481fbebd7
Revert b898e07066
2023-08-11 01:39:15 +02:00
Frank Denis
32aad7bb34
Format fix
2023-08-11 01:15:34 +02:00
Frank Denis
7033f242c0
Restore the cache update code from version 2.1.4 for now
2023-08-11 00:51:34 +02:00
Frank Denis
2675d73b13
Port changes from #2334
...
I'm not sure I follow, but I trust @lifenjoiner
Fixes #2334
2023-08-11 00:17:46 +02:00
Expertcoderz
63e414021b
Add note regarding block_unqualified
2023-07-25 12:36:07 +00:00
Expertcoderz
4114f032c3
Add .mail & .home.arpa undelegated names
...
Both names have been recognized for internal use in private networks.
2023-07-15 13:12:40 +00:00
YX Hao
be369a1f7a
Shorten a line
2023-07-06 21:01:41 +08:00
YX Hao
89ccc59f0e
Upgrade quic-go to v0.36.1
...
quic-go has made breaking changes since v0.35.0, includes implementing
`CloseIdleConnections`.
Now, the local listener UDPConn are reused, and don't pile up. But,
1 instance (IPv4/IPv6) persists for each connected server.
2023-07-05 21:19:54 +08:00
Frank Denis
16b2c84147
Tone down some errors
2023-06-24 22:38:59 +02:00
Carlo Teubner
b46775ae0c
Add some missing error checks ( #2420 )
...
I found these with the 'errcheck' tool (via 'golangci-lint').
I aimed to apply reasonable judgement when deciding which errors
actually need handling, and how to handle them.
2023-06-24 22:23:12 +02:00
Frank Denis
cef4b041d7
Don't call "bin" what is actually text
2023-06-24 22:11:47 +02:00
Carlo Teubner
d8b1f4e7cd
Fix miscellaneous style issues ( #2421 )
...
Found by running: golangci-lint run --enable-all
I have only addressed the reported issues that seemed relevant to me.
2023-06-24 21:56:03 +02:00
Frank Denis
23a6cd7504
Revert "Update quic-go"
...
This reverts commit f9f68cf0a3
2023-06-22 11:06:37 +02:00
Frank Denis
0f1e3b4ba8
error check all the rand.Read() calls
2023-06-06 09:16:44 +02:00
Frank Denis
f9f68cf0a3
Update quic-go
2023-05-30 18:17:27 +02:00
Frank Denis
0c26d1637a
Add suport for TLS key logging
2023-05-24 09:21:49 +02:00
lifenjoiner
9b2c674744
Base on clientProto value explicitly to dereference clientAddr ( #2393 )
...
There are variants local_doh and trampoline for internal flow.
2023-05-13 11:22:52 +02:00
Frank Denis
c66023c7d7
Clarify that TLS cipher suites are for TLS 1.2
...
Fixes #2377
2023-04-18 13:15:59 -06:00
Frank Denis
5b8e7d4114
Use the same command as on the wiki to create a local DoH cert
2023-04-14 23:08:10 +02:00
KOLANICH
f4007f709d
Add DOH certificate generation commands into the example config. ( #2367 )
2023-04-14 21:34:29 +02:00
Thad Guidry
fbc7817366
fix grammar in example file ( #2372 )
2023-04-14 21:19:55 +02:00
Frank Denis
af6340df09
Comment
2023-04-07 16:20:26 +02:00
