Skip to content

AhdCode v2.6.0 — DNS & TLS Inspection

Choose a tag to compare

@aliharundaldalli aliharundaldalli released this 29 Sep 09:21
· 2 commits to main since this release

AhdCode v2.6.0 adds bounded, typed network inspection. With it, a worker program can check where a domain points and what certificate it serves, without a shell or external tools.

DNS (new module)

  • DNS.lookup(host, timeoutSeconds) resolves a host name's addresses with the operating system's resolver
  • deterministic results: deduplicated, all IPv4 addresses first, then IPv6, each in ascending order
  • bounded timeouts (default 5 s, 1–60)
  • malformed input (URLs, host:port, control or shell-like characters) is refused before any network work
  • typed DNSResult (host(), addresses(), ipv4(), ipv6()) and DNSError

TLS (new module)

  • TLS.inspect(host, port, timeoutSeconds) inspects a TLS endpoint within a bounded timeout
  • the presented certificate chain is verified explicitly against the system trust roots and the requested hostname
  • expired, not-yet-valid, hostname-mismatched, and untrusted certificates are reported with their full metadata and valid() == false; they are never accepted
  • certificate subject, issuer, DNS names (SANs), and validity dates (notBefore()/notAfter() as DateTime)
  • negotiated TLS protocol and cipher suite
  • typed TLSInfo (valid(), verificationStatus(), …) and TLSError

Both modules behave identically in the REPL evaluator and in native builds, with editor completion, hover, and signature help. DNS and TLS are now standard module names.

Distribution
v2.6.0 is a source-only release: use the source code archives below. Complete platform packaging and installers return in v2.7, Distribution & Installer Polish.