Commit graph

2181 commits

Author SHA1 Message Date
Frank Denis
549426ace7 Reverse test for clarity; no behavioral change 2025-01-26 23:59:36 +01:00
Frank Denis
4c659acad9 Update quic-go 2025-01-26 23:29:11 +01:00
Frank Denis
0ba23128cc Improve comment 2025-01-26 23:28:21 +01:00
Frank Denis
3b75a4c6ac Fix undefined vs empty confusion for tls_cipher_suite
The documentation refers to tls_cipher_suite being empty in order
to use the default parameters, not undefined.

However, configuring an empty set of cipher suites did just that:
no cipher suites could be used, which is not very useful.

Fix the documentation: in order to use the default suites, the
parameter must be undefined, not empty.

And in code, make an empty set equivalent to the parameter being
undefined.
2025-01-26 23:18:03 +01:00
Frank Denis
eb2c1dc6b3 plugin_forward: silently skip '*.' prefixes 2025-01-17 23:01:40 +01:00
Frank Denis
8f2be59a82 Error out on domain names with wildcards in captive portals 2025-01-17 23:01:07 +01:00
Frank Denis
31e9a7d251 Remove obsolete badges 2025-01-17 16:32:33 +01:00
Frank Denis
6dd22becac More heuristics to detect valid plain DNS responses 2025-01-11 15:29:49 +01:00
Frank Denis
f332394c4b More heuristics to detect lying resolvers 2025-01-11 15:17:11 +01:00
Frank Denis
b74b46c6cd Indent generate-domains-blocklist.py 2025-01-11 14:24:18 +01:00
Frank Denis
d469ad1396 Update ChangeLog, bump 2025-01-11 13:23:00 +01:00
Frank Denis
e0ecfcf822 Update the ODoH relay used for test CI tests 2025-01-11 13:15:04 +01:00
Frank Denis
062dc53971 Revert "Remove support for xsalsapoly"
Apparently, a bunch of popular resolvers such as adguard, cleanbrowsing
and comodo still only support xsalsapoly o_O

Add a lying resolver check for old DNSCrypt servers.
2025-01-11 13:02:18 +01:00
Frank Denis
14af44d78a Add Windows ARM 2025-01-11 01:03:32 +01:00
Frank Denis
eccca90bbc Typo 2025-01-11 00:48:46 +01:00
Frank Denis
6df2cb97ad Add builds for windows-arm 2025-01-11 00:47:14 +01:00
Frank Denis
6319120c4b Update a few deps 2025-01-10 23:42:41 +01:00
Frank Denis
0208ecf35a Skip DHCP detectors that couldn't be started 2025-01-10 23:40:41 +01:00
Frank Denis
cff909aa6f Raise a critical error if the DHCP detector can't be started 2025-01-10 23:33:41 +01:00
Frank Denis
08fc560129 Change error levels 2025-01-10 23:30:41 +01:00
Frank Denis
65ada71a34 DHCP detection doesn't seem to work as non-root
Maybe it should be started before the uid switch
2025-01-10 23:27:41 +01:00
Frank Denis
5b8c65a42e Revert Quad9 example Minisign key 2025-01-10 23:22:41 +01:00
Frank Denis
1a3a68e899 Bump 2025-01-10 23:17:41 +01:00
Frank Denis
6bc7798a08 Update ChangeLog 2025-01-10 23:14:41 +01:00
Frank Denis
7d2eede907 Bump the refresh delay for sources by a hour
This allows for a better distribution
2025-01-10 23:09:41 +01:00
Frank Denis
c2cb7e6854 Use a non-lying resolver for CI 2025-01-10 23:03:41 +01:00
Frank Denis
956f16c107 Log the actual server IP 2025-01-10 23:02:41 +01:00
Frank Denis
5aa958e282 Fix sequence type for $DHCP 2025-01-10 12:52:52 +01:00
Frank Denis
021a46b203 DHCPDNS -> DHCP 2025-01-10 12:50:19 +01:00
Frank Denis
b5a50655de Go fixes 2025-01-10 12:46:26 +01:00
Frank Denis
6e1e5e3e68 Add test from #2460, import dhcpdns 2025-01-10 12:42:35 +01:00
Frank Denis
d7878615b2 Merge branch 'master' of github.com:DNSCrypt/dnscrypt-proxy
* 'master' of github.com:DNSCrypt/dnscrypt-proxy:
  Bump softprops/action-gh-release from 2.2.0 to 2.2.1
2025-01-10 12:40:13 +01:00
Frank Denis
eda26b4a79 Support $DHCP and $BOOTSTRAP keywords in forwarding rules
Ideally, that should also be supported by the captive portal
handler.

Great work by @lifenjoiner

Fixes #2460
2025-01-10 12:38:27 +01:00
Frank Denis
cd3cb2e98b Update deps 2025-01-10 12:16:20 +01:00
Frank Denis
4fbdf2cfcc Skip lying resolvers instead of just warning about them 2025-01-10 12:12:20 +01:00
Frank Denis
c4879a21f7 Trim unneeded entries
These servers never supported the DNSCrypt v2 protocol, and have
been a pain to maintain compatibility with. But the main issue
is that in some countries, they are now lying resolvers, *except*
for the certificate.

That makes it difficult to reliably detect that they are lying
resolvers. From a user perspective in these countries, it appears
that DNS queries randomly fail, when they are hitting these servers.

I tried to think of different ways to detect this, but couldn't
find anything satisfactory.

Maybe if they properly implement the DNSCrypt protocol some day,
they will take it as an opportunity to also fix that bug, and
return consistent error codes, even for the certificates.
2025-01-10 12:10:20 +01:00
Frank Denis
8987906653 Remove support for xsalsapoly 2025-01-10 12:07:20 +01:00
Frank Denis
b1d74dcd28
Merge pull request #2751 from DNSCrypt/dependabot/github_actions/softprops/action-gh-release-2.2.1
Bump softprops/action-gh-release from 2.2.0 to 2.2.1
2025-01-10 11:00:09 +01:00
dependabot[bot]
bc87a8c508
Bump softprops/action-gh-release from 2.2.0 to 2.2.1
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2.2.0 to 2.2.1.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](7b4da11513...c95fe14893)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-08 03:44:27 +00:00
Frank Denis
699a6a1ebc go get -u ./...; go mod tidy 2025-01-06 17:30:45 +01:00
Frank Denis
efe8b7824c 2025 2025-01-03 12:01:20 +01:00
Frank Denis
57c69937a0 Update x/net 2024-12-19 08:45:12 +01:00
Frank Denis
fe9c704eb5 Update deps 2024-12-12 11:31:52 +01:00
Frank Denis
97aad99b67 Update x/crypto 2024-12-12 10:28:01 +01:00
Frank Denis
9813abfa23
Merge pull request #2736 from DNSCrypt/dependabot/github_actions/softprops/action-gh-release-2.2.0
Bump softprops/action-gh-release from 2.0.8 to 2.2.0
2024-12-11 17:05:42 +01:00
Frank Denis
da833f65bb Update deps 2024-12-11 17:05:11 +01:00
dependabot[bot]
5775a248c8
Bump softprops/action-gh-release from 2.0.8 to 2.2.0
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2.0.8 to 2.2.0.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](c062e08bd5...7b4da11513)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-12-11 03:44:22 +00:00
Frank Denis
ee400254ac Update deps 2024-11-08 08:07:43 +01:00
Frank Denis
55b2ed9851 Improve error message when no servers can be used 2024-10-30 20:12:55 +01:00
Frank Denis
8d43ebf120 EmptyResponseFromMessage: always set the RA flag, copy the RD flag 2024-10-28 23:59:01 +01:00