Skip to content

Releases: buffrr/letsdane

v0.5.0

21 Dec 14:26
Compare
Choose a tag to compare
v0.5.0 Pre-release
Pre-release
  • New custom tunneler/proxy that is more suitable for letsdane
  • Negotiate a mutually supported ALPN (if available) between client and target server for DANE tunnels.
  • Enable name checks for DANE-EE by default, and add flag -skip-namechecks to allow disabling it.
  • Parallel A, AAAA and TLSA lookups to minimize latency.
  • Allow either ipv4 or ipv6 lookups to fail to avoid breaking some websites.
  • Make logging format more consistent.
  • Add back the -pass flag and DANE_CA_PASS environment variable for decrypting CA file if encrypted.
  • Set edns to 4096 bytes in the ad resolver
  • Check servfail rcode even if response is not bogus in libunbound resolver
  • Add version flag -v

v0.3.0

25 Jul 14:14
Compare
Choose a tag to compare
v0.3.0 Pre-release
Pre-release
  • Use default proxy logger for debug logs (can be enabled with -verbose option)
  • Avoid disabling logs in main when verbose option is not set.

v0.2.0

22 Jul 14:20
Compare
Choose a tag to compare
v0.2.0 Pre-release
Pre-release
  • Add parameter to the resolver's LookupIP method to exclude non authenticated responses.
  • Switch to goproxy it appears to be more maintained, and doesn't break web sockets.
  • Send the authenticated response via proxy context to dialTLS in HTTP transport.
  • Move proxy details to proxy.go and use the cmd app only to configure and start godane.

v0.1.0

08 Apr 19:44
Compare
Choose a tag to compare
v0.1.0 Pre-release
Pre-release
first commit