summaryrefslogtreecommitdiff
path: root/dns
Commit message (Collapse)AuthorAgeFilesLines
* Deal with "in" changes for enums in python 3.12Bob Halley2023-05-061-8/+0
| | | | | | | | | In python 3.12, "in" for enums tests values as well, so something like "12345 in dns.rdatatype.RdataType" will now return True. This broke some logic guarding against registering a known-but-unimplmemented type code point with a class that didn't have the right name. We now just give up on this test as it will never be a real problem. We change a few related tests to be more sensible.
* Fix NSEC3 base32 processing. (#929)Brian Wellington2023-05-061-0/+5
| | | | | | | | | | The NSEC3 next name field is defined as base32 with no padding, but the code was doing base32 decoding with padding. This wouldn't have any effect in the normal case, since the only defined NSEC3 hashing algorithm is SHA1, and that generates a 160 bit hash that doesn't require padding when encoded in base32. This change removes generated padding after encode, rejects padded input on decode, and adds necessary padding for decode.
* resolve_at() type fixesBob Halley2023-04-192-3/+3
|
* Add make_resolver_at() and resolve_at(). (#926)Bob Halley2023-04-192-0/+158
|
* Remove unnecessary string concatenation.Brian Wellington2023-04-116-11/+7
|
* Add basic DDR support. (#919)Bob Halley2023-04-078-1/+268
| | | * Add basic DDR support.
* Message get_rrset() needs to pass idna_codec to find_rrset().Bob Halley2023-04-061-2/+9
| | | | Also removes some lint about "section = section" being a no-op.
* run black on enum.pyBob Halley2023-04-061-2/+2
|
* Enum typing (#923)Brian Wellington2023-04-0611-65/+77
| | | | | | | | | | | | | | | | | | | | | | * IntEnum improvements. This changes make() to always return an instance of the subclass, creating one on the fly if the value is not known, and updates the typ registration code to deal with this. It also adds typing annotations to make(). * Add missing int check. Some older versions of python weren't rejecting non-int values. * Fix int check. Raise TypeError for non-int, not ValueError, to make tests happy. * Annotate to_text/from_text. * Remove many the_ prefixed variables. These were needed in the past to work around typing issues.
* Improve get_rrset/find_rrset API. (#922)Brian Wellington2023-04-061-23/+45
| | | | | | | | | | | * Improve get_rrset/find_rrset API. This allows most of the parameters to be specified as strings, matching the interface for dns.message.make_query(). * Remove unneeded "the_section". There's no need to use a separate internal variable for the section; mypy doesn't complain about reuse.
* run blackBob Halley2023-03-304-8/+7
|
* Clean up the NoDOH exception.Brian Wellington2023-03-282-3/+3
| | | | | | The docstring/default should refer to httpx, not requests, and the callers should use it rather than providing alternate (and different) strings.
* Add server_hostname to DoQNameserver.Bob Halley2023-03-261-1/+10
|
* lintBob Halley2023-03-261-22/+23
|
* Optionally allow server hostname to be checked by QUIC.Bob Halley2023-03-266-9/+22
|
* Zone signer (#911)Jakob Schlyter2023-03-201-1/+226
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * first cut at NSEC support * use transactions, fix delegations * rename to add_nsec_to_zone * optimize NSEC generation * split out function to get all secure names (could be useful for NSEC3 later) * add `Bitmap.from_rdtypes()` and add missing typing * more typing * add missing import * add more typing * fix tok type * remove _get_secure_names, optimize * better zone testing (compare as text) add test example with delegation below other delegation * include NSEC itself in the bitmap * lint * Add names iteration to transactions via iterate_names(). Also make rdataset iteration more obvious by adding an explicit iterate_rdatasets() API. * use iterate_names() * typo * black * use single iteration * better type fix * add optional transaction to add_nsec_to_zone * idea for zone signer * do not sign RRSIGs * fix signer * correctly sign DS * simplify * simplify by passing rrset to signer * fix typing * nit * add DS * add more test * rewrite zone signer * compact * simplify * make easier to read * bring back rrset_signer * move default RRset signer * more * more * prettier context handling (mypy issue pending) * make NSEC zone signer less complex * update * fix txn, sign as defined by SEP * docs * add back missing dnskey_include * rename dnskey_include to add_dnskey * check KSK/ZSK key tags in signed zone --------- Co-authored-by: Bob Halley <halley@dnspython.org>
* linting + have asyncio HTTP code actually connect to right addressBob Halley2023-03-193-8/+37
|
* re-run blackBob Halley2023-03-197-26/+22
|
* Better DNS-over-HTTPS support. (#908)Bob Halley2023-03-196-91/+340
| | | | | | | | | | | | This change: Allows resolution hostnames in URLs using dnspython's resolver or via a bootstrap address, without rewriting URLs. Adds full support for source addresses and ports to httpx, except for asyncio I/O where only the source address can be specified. Removes support for requests.
* Add names iteration to transactions via iterate_names(). (#907)Bob Halley2023-03-143-6/+40
| | | | Also make rdataset iteration more obvious by adding an explicit iterate_rdatasets() API.
* Remove curio support.Bob Halley2023-03-123-130/+3
|
* lintBob Halley2023-03-121-25/+26
|
* add Bitmap.from_rdtypes() (#906)Jakob Schlyter2023-03-101-5/+10
| | | | | | | | | | | * add `Bitmap.from_rdtypes()` and add missing typing * more typing * add missing import * add more typing * fix tok type
* Add dns.resolver.resolve_name(). (#903)Brian Wellington2023-03-102-35/+219
| | | | | | | | | | | | | * Add dns.resolver.resolve_name(). * Add missing type annotations. * Add async resolve_name(). * Replace List[Answer] with HostAnswers. * Switch addresses_and_families() tuple order * Fix comment.
* Fix hangs when QUIC connection fails [#899]. (#900)Bob Halley2023-03-023-35/+62
| | | | | This also fixes problems with computing the wait_for() timeout for the sync and asyncio ports, and fixes delivery of the timeout for the sync port.
* Make a few nameserver changes that missed getting added to the PR.Bob Halley2023-02-251-4/+10
|
* Resolver "nameserver" object support. (#897)Bob Halley2023-02-253-98/+434
| | | | | | | | | | | | | | | | | | | | | | | | | * Resolver "nameserver" object support. This turns the list of nameserver strings in the resolver into a tuple of nameserver objects, which abstract away making queries to a nameserver of a given type. The resolver's legacy nameserver list is "enriched" into a tuple of nameserver objects whenever it is set. Note that you cannot mutate the object other than by setting, e.g. res.nameservers.append("1.2.3.4") will not work. Error message accumulation has been updated to refer to the nameservers using a descriptive text form. * doco fix * more doco fixes * do enrichment at Resolution time * require a later mypy, fix type issues * add nameserver doc
* Fix typos.Brian Wellington2023-02-173-3/+3
|
* add more minor typehints (#889)Mathias Ertl2023-02-051-15/+17
|
* The DS digest_type field is now made a DSDigest instance by the constructor ↵Dennis Værum2023-01-251-1/+1
| | | | | | | | | | (#890) Hey @rthalley I found another place in the code there, you may have gotten "distracted" 😉 as you phrased it in https://github.com/rthalley/dnspython/issues/888#issuecomment-1402198449 So, I just made a pull request this time
* The DNSKEY flags field is now made a Flag instance by the constructor.Bob Halley2023-01-241-1/+1
|
* Make Coverity happier [#882].Bob Halley2023-01-121-0/+4
|
* Use 'https' instead of 'http' for dnspython.org (#883)Rafael Guterres Jeffman2023-01-111-1/+1
| | | | | | | | These days, 'https' should be used instead of 'http' for almost anything, and Coverity is warning that dnspython.org URL in 'setup.cfg' uses 'http'. This patch changes the use of 'http' to 'https' on setup.cfg and documentation, where it does not affect module code, tests or examples.
* Remove obsolete comment (#873)sblondon2023-01-021-7/+1
|
* Update versions and CI post 2.3 branch.Bob Halley2022-12-271-1/+1
|
* lintBob Halley2022-12-231-3/+5
|
* DNSSEC doco fixes.Bob Halley2022-12-231-5/+5
|
* CDS/CDNSKEY utilities (#872)Jakob Schlyter2022-12-231-11/+239
| | | | | | | | | | | Add CDS and CDNSKEY utilities: make_cdnskey() make_cds() make_ds_rdataset() cds_rdataset_to_ds_rdataset() dnskey_rdataset_to_cds_rdataset() dnskey_rdataset_to_cdnskey_rdataset()
* Fix async quic() doco.Bob Halley2022-12-161-1/+1
|
* Properly pass source and source_port to connect() in the sync version of quic().Bob Halley2022-12-161-3/+3
|
* Fix misc. lint.Bob Halley2022-12-167-13/+22
|
* DNSSEC policy. (#869)Bob Halley2022-12-152-2/+106
|
* Improve DNSSEC _doco, minor DNSSEC and typing tweaks.Bob Halley2022-12-125-36/+25
|
* DNSSEC signer (#866)Jakob Schlyter2022-12-121-39/+380
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * first cut at key_to_dnskey * update docs * typo * use real test vectors for DNSKEY * comment * split * add test for large exponent size * rename to make_dnskey * no default algorithm * rename and add comment * split out function to create rrsig signature data * docs * add type for public key * more typing * make RSA exponent key test easier to read * work in progress for dns.dnssec.sign * better docs * docs * simplify * add test with RSASHA1 * initial support for DSA * update docs * clean up DSA, t still not clear * allow inception/expiration to be specified as datetime, string, float or in * allow rrset to be specified as a tuple * calculate dsa_t * reformat * more rrset tuple fixes * support DSA * improve exception handling * fix return type error * fix typing issue to silence mypy * make test case more verbose * ensure UTC and use sigtime_to_posixtime to convert text to timestamp
* Basic SVCB and HTTPS doco.Bob Halley2022-11-271-1/+1
|
* Fix type lint from latest mypy.Bob Halley2022-11-244-4/+4
|
* Merge pull request #842 from rthalley/quicBob Halley2022-11-249-1/+985
|\ | | | | Initial DoQ support.
| * fix doco typoBob Halley2022-10-121-1/+1
| |
| * Initial DoQ support.Bob Halley2022-10-099-1/+985
| |
* | For async send_udp(), return a length and clarify the expirationBob Halley2022-10-132-2/+7
|/ | | | | | | | | | is meaningless. For async receive_udp(), document that the return type is always a 3-tuple, as opposed to being either a pair or a 3-tuple as in the sync version. (I chose to document rather than change the behavior as changing it broke dnspython tests and might possibly break other code.) [#848]