dnsdist: Implement xchacha20 support for DNSCrypt #6045

rgacogne · 2017-12-04T14:23:10Z

Short description

This PR adds support for DNSCrypt's xchacha20 algorithm, as well as multiple actives DNSCrypt certificates. It also removes the getOldCertificate() and getCurrentCertificate() methods on DNSCrypt bind objects, because I couldn't find a meaningful way to emulate them with n active certificates. Sorry for breaking compatibility!

Checklist

I have:

read the CONTRIBUTING.md document
compiled and tested this code
included documentation (including possible behaviour changes)
documented the code
added or modified regression test(s)
added or modified unit test(s)

rgacogne added dnsdist enhancement labels Dec 4, 2017

rgacogne added this to the dnsdist-1.3.0 milestone Dec 4, 2017

rgacogne force-pushed the dnscrypt-xchacha20 branch from 90cfbf7 to 2d80773 Compare December 26, 2017 13:17

rgacogne force-pushed the dnscrypt-xchacha20 branch from 2d80773 to 8a4a6be Compare January 12, 2018 11:36

rgacogne added 5 commits March 8, 2018 10:05

dnsdist: Add support for DNSCrypt's xchacha20, n active certs

43234e7

DNSCrypt: Certificate serials should be in network byte order

b7bd031

DNSCrypt: Document certificates versions

433d64e

dnsdist: Document the new DNSCrypt calls, restore compatibility

55710b0

dnsdist: Remove functions that relied on only one active certificate

c2baf92

rgacogne force-pushed the dnscrypt-xchacha20 branch from 8a4a6be to c2baf92 Compare March 8, 2018 09:18

Small documentation fixes

50a387e

pieterlexis merged commit c4a1bba into PowerDNS:master Mar 22, 2018

rgacogne deleted the dnscrypt-xchacha20 branch March 22, 2018 09:57

dnsdist: Implement xchacha20 support for DNSCrypt #6045

dnsdist: Implement xchacha20 support for DNSCrypt #6045

Conversation

rgacogne commented Dec 4, 2017

Short description

Checklist