Skip to content

v0.6.0: DNS outcome typing and TLS hostname/chain validation

Choose a tag to compare

View all tags
@cyanheads cyanheads released this 30 Jul 21:25
v0.6.0
This tag was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.
c5866af
This commit was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.

DNS outcome typing and TLS hostname/chain validation

  • devops_check_dns: NXDOMAIN, SERVFAIL, and a missing record type are now distinguishable per resolver via a typed status, instead of collapsing to "no records found" (#31)
  • devops_check_dns: geo-steered/anycast domains are no longer flagged as a propagation mismatch — resolver disagreements are now split into partial_resolution (flagged) and value_variation (recorded, not flagged) (#35)
  • devops_check_certs: hostname mismatch and chain-trust failures (self-signed, untrusted root) now surface as critical instead of reporting ok (#26)
  • devops_check_certs: chain_depth is now number | null instead of a confident 1 for chains the runtime cannot traverse (#27)

CHANGELOG v0.6.0

Assets 3
Loading