Comments (5)
I'd be open to a PR that introduces the use of cargo-hack similar to what we have in the rustls repo. Might want a separate job for it since it could be pretty slow?
(If you just want to fix the dnssec-openssl
warnings, that might be a good start, too.)
@bluejekyll I think you've mentioned wanting to just get rid of OpenSSL-based stuff before, how are you feeling about that project now?
from hickory-dns.
I keep hesitating on the removal of OpenSSL because of some of the compliance it has that we're still waiting on for Rustle. I think we should just clean it up instead of fixing up testing related to it, but it wouldn't be hard to fix this.
Today we only test these feature flags directly with clippy:
clippy:
find {{justfile_directory()}} -name '*.rs' -exec touch {} \;
just clippy-inner --no-default-features
just clippy-inner
just clippy-inner --all-features
We could add this after --all-features
, just clippy-inner --features=dnssec-openssl
. OpenSSL generally doesn't get caught, because where they conflict, Rustls takes precedent.
from hickory-dns.
I keep hesitating on the removal of OpenSSL because of some of the compliance it has that we're still waiting on for Rustle. I think we should just clean it up instead of fixing up testing related to it, but it wouldn't be hard to fix this.
What kind of compliance are we waiting for? I think Rustls is in a pretty good place today.
from hickory-dns.
What kind of compliance are we waiting for?
Primarily, FIPS compliance, does this announcement mean that Rustls is FIPS compliant now? https://www.memorysafety.org/blog/rustls-with-aws-crypto-back-end-and-fips/
from hickory-dns.
Yes, Rustls from 0.22 onwards supports the aws-lc-rs crypto provider which has a FIPS mode available (on Linux only).
from hickory-dns.
Related Issues (20)
- DNS Test returns no logs from Hickory DNS instances upon instance termination
- Add a feature option to use `chrono` instead of `time`? HOT 4
- environment variable `CARGO_PKG_VERSION` not defined at compile time HOT 2
- Multiple round-trip encoding issues identified by fuzzer HOT 3
- Build arguments for hickory-dns recursor type
- Accept RRSIG records in zone file
- Please need more examples. How to properly enable resolver in my tokio project? HOT 1
- compiling hickory-resolver error HOT 4
- where is the type `A` in crate hickory-resolver ? HOT 2
- hickory fails to parse distro packaged dnssec trust anchor
- DNSSEC false positives HOT 2
- Randomize capitalization of queries for spoofing resistance
- dnssec: hickory responds with SERVFAIL when dealing with Insecure zones
- Conflict between `ResolverOpts` server selection options HOT 1
- Unexpected ANSWER and RCODE for non-existent SOA query HOT 2
- wrong answer (NOERROR or timeout) when referral includes a private IP address
- Unexpected ADDITIONAL section for CNAME-related queries HOT 1
- CAA RDATA should hold invalid issuer names as-is HOT 4
- Flaky conformance test: `resolver::dnssec::scenarios::ede::dnssec_bogus`
- `hickory-server` `+dnssec-ring` does not build with Rust 1.79 HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from hickory-dns.