Releases: buffrr/letsdane
Releases · buffrr/letsdane
v0.5.0
- New custom tunneler/proxy that is more suitable for letsdane
- Negotiate a mutually supported ALPN (if available) between client and target server for DANE tunnels.
- Enable name checks for DANE-EE by default, and add flag
-skip-namechecks
to allow disabling it. - Parallel A, AAAA and TLSA lookups to minimize latency.
- Allow either ipv4 or ipv6 lookups to fail to avoid breaking some websites.
- Make logging format more consistent.
- Add back the
-pass
flag andDANE_CA_PASS
environment variable for decrypting CA file if encrypted. - Set edns to 4096 bytes in the ad resolver
- Check servfail rcode even if response is not bogus in libunbound resolver
- Add version flag
-v
v0.3.0
v0.2.0
- Add parameter to the resolver's LookupIP method to exclude non authenticated responses.
- Switch to goproxy it appears to be more maintained, and doesn't break web sockets.
- Send the authenticated response via proxy context to dialTLS in HTTP transport.
- Move proxy details to proxy.go and use the cmd app only to configure and start godane.