Skip to content

Conversation

@rgacogne
Copy link
Member

@rgacogne rgacogne commented Aug 4, 2017

Short description

When DNSCrypt is enabled, we encrypt the answer in place, but we need to keep a copy of the DNS header of the original answer to be able to populate the responses ring buffer.

Fixes #5566.

Checklist

I have:

  • read the CONTRIBUTING.md document
  • compiled and tested this code
  • included documentation (including possible behaviour changes)
  • documented the code
  • added or modified regression test(s)
  • added or modified unit test(s)

When DNSCrypt is enabled, we encrypt the answer in place, but we
need to keep a copy of the DNS header of the original answer to
be able to populate the responses ring buffer.
@bjoe2k4
Copy link

bjoe2k4 commented Aug 10, 2017

Works for me. No Err#14 anymore. Thanks!

@rgacogne
Copy link
Member Author

@bjoe2k4 Thank you for reporting, testing and confirming!

@rgacogne rgacogne merged commit 286b8fa into PowerDNS:master Aug 10, 2017
@rgacogne rgacogne deleted the ddist-dnscrypt-ringbuffer-dnsheader branch August 10, 2017 21:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

dnsdist: grepq returns garbage for DNSCrypt-encrypted responses

2 participants