f993a020d4Accepting request 1206395 from devel:languages:python
factory
Ana Guerrero
2024-10-09 20:03:19 +0000
a0a937dad6- Skip some tests * that require a working resolver and external DNS resolution * that require an openssl3 version with support for ECDSA with deterministic signature (RFC 6979)"
devel
Sebastian Wagner
2024-10-08 20:25:32 +0000
d9f18315ed- Update to version 2.7.0 * dns.query.https() and dns.asyncquery.https() now support HTTP/3 and the http_version parameter may be used to specify which version to use. * If the cryptography module is installed, then dnspython will now create deterministic ECDSA signatures by default. * The RESINFO and WALLET RdataTypes are now supported. * The COOKIE and Report-Channel EDNS0 options are now supported. * All supported RdataTypes can now be imported at a single time rather than lazily on first use by calling dns.rdata.load_all_types(). * The SVCB and HTTPS records now support the ohttp parameter. * xfr() and inbound_xfr() now share a common implementation. * Tokens are now supported for QUIC and HTTP/3. * dns.message.from_wire() now saves the input wire format in the Message’s “wire” attribute. Likewise, dns.message.Message.to_wire() now records the generated wire format in that attribute. * The dns.message.Message object now has a get_options() helper to retrieve EDNS0 options of a specified type, and an extended_errors() helper to retrieve the list of EDE options in a message (if any). * dns.message.make_response() now has a copy mode which controls how sections are copied. By default, a copy mode appropriate for the opcode is used. This is currently dns.message.CopyMode.QUESTION for all opcodes * If an IP address is used as the hostname in a URL, the https query code now passes the sni_hostname to httpx as this is required to get httpx to validate the certificate and check for an IP subject alternative name.
Sebastian Wagner
2024-10-06 07:18:04 +0000
460377d2b4Accepting request 1181942 from devel:languages:python
Ana Guerrero
2024-06-21 14:02:32 +0000
7b86e53169- Update to version 2.6.1 * The Tudoor fix ate legitimate Truncated exceptions, preventing the resolver from failing over to TCP and causing the query to timeout. - Update to version 2.6.0 * As mentioned in the “TuDoor” paper and the associated CVE-2023-29483, the dnspython stub resolver is vulnerable to a potential DoS if a bad-in-some-way response from the right address and port forged by an attacker arrives before a legitimate one on the UDP port dnspython is using for that query. This release addresses the issue by adopting the recommended mitigation, which is ignoring the bad packets and continuing to listen for a legitimate response until the timeout for the query has expired. * Added support for the NSID EDNS option. * Dnspython now looks for version metadata for optional packages and will not use them if they are too old. This prevents possible exceptions when a feature like DoH is not desired in dnspython, but an old httpx is installed along with dnspython for some other purpose. * The DoHNameserver class now allows GET to be used instead of the default POST, and also passes source and source_port correctly to the underlying query methods. - Update to version 2.5.0 * Dnspython now uses hatchling for builds. * Cython is no longer supported due to various typing issues. * Dnspython now explicitly canonicalizes IPv4 and IPv6 addresses. Previously it was possible for non-canonical IPv6 forms to be stored in a AAAA address, which would work correctly butMarkéta Machová2024-06-20 13:23:40 +0000
29a2710da5Accepting request 1115900 from devel:languages:python
Ana Guerrero
2023-10-06 19:12:46 +0000
2e7565f6abAccepting request 1107881 from devel:languages:python
Ana Guerrero
2023-08-30 08:18:21 +0000
69acff8396- update to version 2.4.2: * Async queries could wait forever instead of respecting the timeout if the timeout was 0 and a packet was lost. The timeout is now respected. * Restore HTTP/2 support which was accidentally broken during the https refactoring done as part of 2.4.0. * When an inception time and lifetime are specified, the signer now sets the expiration to the inception time plus lifetime, instead of the current time plus the lifetime. - update to version 2.4.1: * Importing dns.dnssecalgs without the cryptography module installed no longer causes an ImportError. * A number of timeout bugs with the asyncio backend have been fixed. * DNS-over-QUIC for the asyncio backend now works for IPv6. * Dnspython now enforces that the candidate DNSKEYs for DNSSEC signatures have protocol 3 and have the ZONE flag set. This is a standards compliance issue more than a security issue as the legitimate authority would have to have published the non-compliant keys as well as updated their DS record in order for the records to validate (the DS digest includes both flags and protocol). Dnspython will not make invalid keys by default, but does allow them to be created and used for testing purposes. * Dependency specifications for optional features in the package metadata have been improved. - update to version 2.4.0: * Python 3.8 or newer is required. * The stub resolver now uses instances of `dns.nameserver.Nameserver to represent remote recursive resolvers, and can communicate using DNS over UDP/TCP, HTTPS, TLS, and QUIC. In additional to being able to specify an IPv4, IPv6, or HTTPS URL as a nameserver, instances of dns.nameserver.Nameserver` are now permitted. * The DNS-over-HTTPS bootstrap address no longer causes URL rewriting. * DNS-over-HTTPS now only uses httpx; support for requests has been dropped. A source
Sebastian Wagner
2023-08-22 08:36:47 +0000
ddb517f14fAccepting request 1081944 from devel:languages:python
Dominique Leuenberger
2023-04-22 20:01:18 +0000
6f8d15c02cAccepting request 1081389 from home:dirkmueller:acdc:as_python3_moduleDirk Mueller2023-04-21 14:44:15 +0000
2fd927d40bAccepting request 1081254 from home:dirkmueller:acdc:as_python3_moduleMatej Cepl2023-04-21 12:21:08 +0000
cd54c926a6Accepting request 1063213 from devel:languages:python
Dominique Leuenberger
2023-02-05 18:20:08 +0000
dfccd9a196Accepting request 963789 from devel:languages:python
Dominique Leuenberger
2022-03-24 21:56:49 +0000
41d0748249- Update to version 2.2.1: * dns.zone.from_text failed if relativize was False and an origin was specified in the parameters. * A number of types permitted an empty "rest of the rdata". * L32, L64, LP, and NID were missing from dns/rdtypes/ANY/__init__.py * The type definition for dns.resolver.resolve_address() was incorrect. * dns/win32util.py erroneously had the executable bit set. * The type definition for a number of asynchronous query routines was missing the default of None for the backend parameter. * dns/tsigkeyring.py didn't import dns.tsig. * A number of rdata types that have a "rest of the line" behavior for the last field of the rdata erroneously permitted an empty string. * Timeout intervals are no longer reported with absurd precision in exception text.
Sebastian Wagner
2022-03-14 21:05:29 +0000
549410c9d9Accepting request 953817 from devel:languages:python
Dominique Leuenberger
2022-02-13 18:50:35 +0000
7a4e18afeeAccepting request 953815 from home:stroeder:iam
Sebastian Wagner
2022-02-11 20:17:49 +0000
70fcbc8ef2Accepting request 950808 from devel:languages:python
Dominique Leuenberger
2022-02-03 22:16:15 +0000
ad04294206Accepting request 950806 from home:bnavigator:branches:devel:languages:python
Sebastian Wagner
2022-02-02 19:46:33 +0000
f7a5df984f- Update dependencies to cover all optional features and dependencies in a more structured way and describe it in the package description.
Sebastian Wagner
2022-01-19 12:29:26 +0000
f4e7945622- update to version 2.2.0: - SVCB and HTTPS records have been updated to track the evolving draft standard. - The ZONEMD type has been added. - The resolver now returns a LifetimeTimeout exception which includes an error trace like the NoNameservers exception. This class is a subclass of dns.exception.Timeout for backwards compatibility. - DNS-over-HTTPS will try to use HTTP/2 if the httpx and h2 packages are installed. - DNS-over-HTTPS is now supported for asynchronous queries and resolutions. - dns.zonefile.read_rrsets() has been added, which allows rrsets in zonefile format, or a restrition of it, to be read. This function is useful for applications that want to read DNS data in text format, but do not want to use a Zone. - On Windows systems, if the WMI module is available, the resolver will retrieve the nameserver from WMI instead of trying to figure it out by reading the registry. This may lead to more accurate results in some cases. - The CERT rdatatype now supports certificate types IPKIX, ISPKI, IPGP, ACPKIX, and IACPKIX. - The CDS rdatatype now allows digest type 0. - Dnspython zones now enforces that a node is either a CNAME node or an “other data” node. A CNAME node contains only CNAME, RRSIG(CNAME), NSEC, RRSIG(NSEC), NSEC3, or RRSIG(NSEC3) rdatasets. An “other data” node contains any rdataset other than a CNAME or RRSIG(CNAME) rdataset. The enforcement is “last update wins”. For example, if you have a node which contains a CNAME rdataset, and then add an MX rdataset to it, then the CNAME rdataset will be deleted. Likewise if you have a node containing an MX rdataset and add a CNAME rdataset, the MX rdataset will be deleted. - Extended DNS Errors, as specified in RFC 8914, are now supported.
Sebastian Wagner
2022-01-18 20:12:31 +0000
4d3191bd23Accepting request 861794 from devel:languages:python
Dominique Leuenberger
2021-01-15 18:43:30 +0000
2ef41d0eea- update to version 2.1.0: * End-of-line comments are now associated with rdata when read from text. For backwards compatibility with prior versions of dnspython, they are only emitted in to_text() when requested. * Synchronous I/O is a bit more efficient, as we now try the I/O and only use poll() or select() if the I/O would block. * The resolver cache classes now offer basic hit and miss statistics, and the LRUCache can also provide hits for every cache key. * The resolver has a canonical_name() method. * There is now a registration mechanism for EDNS option types. * The default EDNS payload size has changed from 1280 to 1232. * The SVCB, HTTPS, and SMIMEA RR types are now supported. * TSIG has been enhanced with TKEY and GSS-TSIG support. Thanks to Nick Hall for writing this. * Zones now can be updated via transactions. * A new zone subclass, dns.versioned.Zone is available which has a thread-safe transaction implementation and support for keeping many versions of a zone. * The zone file reading code has been adapted to use transactions, and is now a public API. * Inbound zone transfer support has been rewritten and is available as dns.query.inbound_xfr() and dns.asyncquery.inbound_xfr(). It uses the transaction mechanism, and fully supports IXFR and AXFR.
Sebastian Wagner
2021-01-08 20:13:39 +0000
aa1a3b6a55Accepting request 855345 from devel:languages:python
Dominique Leuenberger
2020-12-16 09:59:06 +0000
5d2969f406Accepting request 855332 from home:mcepl:branches:devel:tools:scmMatej Cepl2020-12-12 12:11:41 +0000
2e4e881e04Accepting request 824769 from devel:languages:python
Dominique Leuenberger
2020-08-13 08:11:57 +0000
e1f4dde5cbAccepting request 824695 from home:jayvdb:dnspython-master
Tomáš Chvátal
2020-08-07 05:09:57 +0000
0883a800f7- remove test depending on trio, which depends on Python 3.7 if python >= 3.7 is not available.
Sebastian Wagner
2020-07-18 11:09:48 +0000
fb99f93dac- update to 2.0.0: - Python 3.6 or newer is required. - The license is now the ISC license. - Rdata is now immutable. Use dns.rdata.Rdata.replace() to make a new Rdata based on an existing one. - dns.resolver.resolve() has been added, allowing control of whether search lists are used. dns.resolver.query() is retained for backwards compatibility, but deprecated. The default for search list behavior can be set at in the resolver object with the use_search_by_default parameter. The default is False. - DNS-over-TLS is supported with dns.query.tls(). - DNS-over-HTTPS is supported with dns.query.https(), and the resolver will use DNS-over-HTTPS for a nameserver which is an HTTPS URL. - Basic query and resolver support for the Trio, Curio, and asyncio asynchronous I/O libraries has been added in dns.asyncquery and dns.asyncresolver. This API should be viewed as experimental as asynchronous I/O support in dnspython is still evolving. - TSIG now defaults to using SHA-256. - Basic type info has been added to some functions. Future releases will have comprehensive type info. - from_text() functions now have a relativize_to parameter. - python-cryptography is now used for DNSSEC. - Ed25519 and Ed448 signatures are now supported. - A helper for NSEC3 generating hashes has been added. - SHA384 DS records are supported. - Rdatasets and RRsets are much faster. - dns.resolver.resolve_address() has been added, allowing easy address-to-name lookups. - dns.reversename functions now allow an alternate origin to be specified. - The repr form of Rdatasets and RRsets now includes the rdata. - A number of standard resolv.conf options are now parsed. - The nameserver and port used to get a response are now part of the resolver’s Answer object. - The NINFO record is supported. - The dns.hash module has been removed; just use Python’s native hashlib module. - Rounding is done in the standard python 3 fashion; dnspython 1.x rounded in the python 2 style on both python 2 and 3. - The resolver will now do negative caching if a cache has been configured. - TSIG and OPT now have rdata types. - The class for query messages is now QueryMessage. Class Message is now a base class, and is also used for messages for which we don’t have a better class. Update messages are now class UpdateMessage, though class Update is retained for compatibility. - Support for Windows 95, 98, and ME has been removed.
Sebastian Wagner
2020-07-18 10:31:03 +0000
d781c905f4Accepting request 682862 from devel:languages:python
Dominique Leuenberger
2019-03-12 08:45:45 +0000
9994273251- Update to 1.16.0: * various fixes for wheel/cryptodome/etc - Remove all patches, merged upstream: * 210.patch * pycryptodome.patch * readme.patch
Tomáš Chvátal
2019-03-08 14:25:29 +0000
400252d8a5Accepting request 654018 from devel:languages:python
Dominique Leuenberger
2018-12-13 18:43:07 +0000
ef92039401Remove superfluous devel dependency for noarch packageMatej Cepl2018-12-04 13:23:59 +0000
f41dc1a4ddAccepting request 607507 from devel:languages:python
Dominique Leuenberger
2018-05-19 13:41:11 +0000
c88eff2daf- require python-pycryptodome instead of recommending it
Sebastian Wagner
2018-05-15 10:56:38 +0000
eace8d8b46Accepting request 605770 from devel:languages:python
Dominique Leuenberger
2018-05-11 09:28:55 +0000
ad27d482f0- Add patch pycryptodome.patch to work with pycryptodome: * pycryptodome.patch
Tomáš Chvátal
2018-05-09 13:46:46 +0000
43e5337e4bAccepting request 493313 from devel:languages:python
Dominique Leuenberger
2017-05-16 12:29:35 +0000
faf3b28fddAccepting request 493310 from home:XRevan86
Sebastian Wagner
2017-05-07 12:18:28 +0000
f2efa5e5e1Accepting request 435073 from devel:languages:python
Dominique Leuenberger
2016-10-18 08:42:46 +0000
052b0d6736Accepting request 433898 from devel:languages:python
Dominique Leuenberger
2016-10-13 09:30:21 +0000
45e3067bc6use and recommend python-ecdsa and python-pycrypto for dnssec support
Sebastian Wagner
2016-10-09 09:41:36 +0000
8a7ed01b5e- New upstream release 1.15.0 * IDNA 2008 support is now available if the "idna" module has been installed and IDNA 2008 is requested. The default IDNA behavior is still IDNA 2003. The new IDNA codec mechanism is currently only useful for direct calls to dns.name.from_text() or dns.name.from_unicode(), but in future releases it will be deployed throughout dnspython, e.g. so that you can read a masterfile with an IDNA 2008 codec in force. * By default, dns.name.to_unicode() is not strict about which version of IDNA the input complies with. Strictness can be requested by using one of the strict IDNA codecs. * Add AVC RR support. * Some problems with newlines in various output modes have been addressed. * dns.name.to_text() now returns text and not bytes on Python 3.x * More miscellaneous fixes for the Python 2/3 codeline merge. - Include readme with readme.patch as not included in upstream tarball - Fix a bug in the tests code with 210.patch with upstream pull request #210
Sebastian Wagner
2016-10-08 13:21:45 +0000
756ff706b0Accepting request 403573 from devel:languages:python
Dominique Leuenberger
2016-06-21 09:30:55 +0000
4253a76058Accepting request 402074 from home:sebix:branches:devel:languages:pythonDirk Mueller2016-06-19 21:06:25 +0000
4776dcb4c8Accepting request 263157 from devel:languages:python
Dominique Leuenberger
2014-11-28 07:44:37 +0000
14c00b2f98Accepting request 262966 from Cloud:OpenStack:Master
Denisart Benjamin
2014-11-26 17:44:20 +0000
3d7c6a7d36Accepting request 257912 from devel:languages:python
Stephan Kulow
2014-10-25 06:33:11 +0000
d0f1e9e933Accepting request 257297 from home:lrupp:branches:devel:languages:pythonDirk Mueller2014-10-21 20:23:48 +0000
99fcf96030Accepting request 198876 from devel:languages:python
Tomáš Chvátal
2013-09-13 12:46:16 +0000
896c53764dAccepting request 198593 from home:dirkmueller:branches:devel:languages:python
Sascha Peilicke
2013-09-13 09:46:22 +0000
34f8eeecdeAccepting request 183064 from devel:languages:python
Stephan Kulow
2013-07-16 14:14:48 +0000
6a702ac166- Package LICENSE, use proper upstream URL - Run testsuite - Cleanup macro usage
Sascha Peilicke
2013-07-15 11:34:47 +0000
c93d773243Accepting request 182832 from home:dirkmueller:branches:devel:languages:python
Sascha Peilicke
2013-07-11 15:02:49 +0000
b43466029eAccepting request 123105 from devel:languages:python
Stephan Kulow
2012-06-01 20:32:05 +0000
747361f207Accepting request 123084 from home:babelworx:ldig:branches:devel:languages:python
Todd R
2012-05-31 14:50:45 +0000
Ana Guerrero
Sebastian Wagner
Markéta Machová
Matej Cepl
Dominique Leuenberger
Dirk Mueller
Tomáš Chvátal
Denisart Benjamin
Stephan Kulow
Tomáš Chvátal
Sascha Peilicke
Todd R
Jan Engelhardt
Marcus Rueckert
Ruediger Oertel
Alexandre Rogoski