File dnscrypt-proxy2.changes of Package dnscrypt-proxy2
-------------------------------------------------------------------
Sun Jul 28 12:00:00 UTC 2019 - cunix@mail.de
- Scripts to find and install vendored licenses changed.
- Update to version 2.0.25
* Example configuration file updated
* Fallbackb resolver IP is now used when no netprobe address configured
- Update to version 2.0.24
* Query log now includes the time it took to complete the transaction,
the name of the resolver that sent the response and
if the response was served from the cache.
* List of resolvers, sorted by latency, is now printed after all
resolvers have been probed.
* "fastest" load-balancing strategy renamed to "first".
* Warning displayed for DoH requested when server doesn't speak HTTP/2.
* Crash with loaded-balanced sets of cloaked names fixed.
* Resolvers are now tried in random order to avoid favoring the first
ones at startup.
- Update to version 2.0.23
* .onion servers are now automatically ignored if Tor routing is not enabled.
* Caching of server addresses improved, especially when using proxies.
* DNSCrypt communications are now automatically forced to using TCP
when a SOCKS proxy has been set up.
- Update to version 2.0.22
* Issues with the .org TLD when used in conjunction with dnsmasq fixed.
- Update to version 2.0.20
* Startup is now faster, especially when using DoH servers.
* New action: CLOAK is logged when queries are being cloaked.
* Cloaking rule can map to multiple IPv4 and IPv6 addresses,
with load-balancing.
* New option: "refused_code_in_responses" to return (or not) a REFUSED
code on blacklisted queries (disabled by default)
-------------------------------------------------------------------
Thu Dec 13 20:00:00 UTC 2018 - cunix@bitmessage.ch
- Go needs to be at least 1.10 to build
- Update to version 2.0.19
* Bug Fix for: The value for "netprobe_timeout" was read from
the command line, but not from the configuration file.
* Default value for netprobe timeouts raised to 60 seconds.
* Hash of the body is added to query parameters when sending
DoH queries with the "POST" method in order to work around
badly configured proxies.
* Set "Content-Length" for "POST" queries.
- Update to version 2.0.18
* Support for TLS 1.3.
* Timeout for the initial connectivity check can now
be set from the command line.
* "Accept:" header is now always sent with "GET" queries.
* BOMs are now ignored in configuration files.
* HTTP and HTTPS proxies are now supported for DoH servers.
* quad9-resolvers added as example in example configuration
* Better error message for syscall exec failure
- Update to version 2.0.17
* Support for Go >= 1.11
* When dropping privileges, there is no supervisor
process any more.
* DNS options not cleared from DNS queries any more.
* DoH queries are smaller, since workarounds are not
required any more after Google updated their implementation.
* Better error messages for user lookup failures
-------------------------------------------------------------------
Tue Jul 10 20:00:00 UTC 2018 - cunix@bitmessage.ch
- Update to version 2.0.16
* Server can run as an unprivileged user, and the main
process will automatically restart if an error occurs.
* New "offline" mode to serve queries locally without
contacting any upstream servers.
* TTL of OPT records properly ignored by caching module.
* Proxy doesn't quit any more
if new TCP connections cannot be created.
* Fix systemd socket connections and improved logging
* Log invalid stamps
-------------------------------------------------------------------
Tue Jun 12 12:00:00 UTC 2018 - cunix@bitmessage.ch
- Update to version 2.0.15
* Added support for proxies (HTTP/SOCKS)
* Added new record to querylog files
indicating the outcome of each transaction
* Adapt to new systemd API
-------------------------------------------------------------------
Mon May 21 12:00:00 UTC 2018 - cunix@bitmessage.ch
- Update to version 2.0.14
* Changed netprobe address
* Changed datatype of DoH
-------------------------------------------------------------------
Wed May 16 15:00:00 UTC 2018 - cunix@bitmessage.ch
- Update to version 2.0.13
* Bugfix: fix crash when using DoH for queries whose size
were a multiple of the block size
-------------------------------------------------------------------
Sat May 12 12:00:00 UTC 2018 - cunix@bitmessage.ch
- Added (openSUSE specific) files downstream:
* dnscrypt-proxy.service
* dnscrypt-proxy.socket
- Update to version 2.0.12
* Upstream stopped maintenance of systemd files.
* New configuration settings: "netprobe_timeout"
To replace the dropped systemd network detection
features, this should help systems not online at boot.
* IPv6 blocking module now returns synthetic SOA records
-------------------------------------------------------------------
Fri Apr 27 12:00:00 UTC 2018 - cunix@bitmessage.ch
- Update to version 2.0.11
* New configuration settings: cache_neg_min_ttl and
cache_neg_max_ttl, to clamp the negative caching TTL
* Remove support for CSV files
* "After=network.target" in dnscrypt-proxy.service
replaced by "After=network-online.target" and
"Wants=network-online.target" added
-------------------------------------------------------------------
Mon Apr 16 12:00:00 UTC 2018 - cunix@bitmessage.ch
- Update to version 2.0.10
* Fix crash when incomplete size is sent by local client
for a query over TCP
* Performance improvement on non-Intel CPU (Raspberry Pi)
-------------------------------------------------------------------
Thu Apr 12 12:00:00 UTC 2018 - cunix@bitmessage.ch
- Update to version 2.0.9
* Whitelists implemented
* Lists load faster and require less memory
* New options: disable TLS session tickets and
use a specific cipher suite
* DoH: The "Cache-Control: max-age" header is now ignored
* Patterns prefixed with "=" do exact matching
* Patterns fully supported by the cloaking module
* Ephemeral keys mode reimplemented to create
unique key for every single query
* IPv6 listen addresses deleted from systemd socket unit
* Default cache size doubled to 512
-------------------------------------------------------------------
Thu Apr 11 12:00:00 UTC 2018 - cunix@bitmessage.ch
- Initial Package for dnscrypt-proxy version 2.0.8
