6.3.0

CHANGES:

• dns-server: demote log level for various messages (#309 @hannesm)
• dns-zone: add additional glue: only add if authoritative for nameserver domain
  (#309 @hannesm)
• BUGFIX: dns-trie: fix lookup when delegations are present, add tests
  (#309 @hannesm)
• ozone: be more explicit when showing errors (#311 @psafont)
• dns: avoid polymorphic comparison (#314 @hannesm, reported by @RyanGibb)
• FEATURE: dns: add LOC resource records (RFC 1876) (#310 @RyanGibb)

6.2.2

CHANGES:

• BUGFIX dns-trie: the collect_entries function jumped over zone boundaries.
  This lead dns-primary-git to detect changes in zones with subdomains delegated
  to the same name servers, leading to dropping of zones (#308 @hannesm,
  reported by @reynir)
• BUGFIX dns-server.text: add address glue records for name servers out of the
  authority of this server. This is crucial since dns-primary-git supports
  such glue records to notify these about zone updates (#307 @hannesm)
• New functionality in dns-zone (dns-server.zone): decode_keys, decode_zones,
  and decode_zones_keys copied from dns-primary-git for reusing in other
  projects (#307 @hannesm)

6.2.1

CHANGES:

• BUGFIX dns: RTYPE is 16 bit, previously 15 bit were accepted, also check for
  being positive (#304, @hannesm @reynir)
• dns-server: dns-trie zone check no longer enforces that the nameserver is in
  the nameserve set of the zone, this enables hidden primary setups (fixes #303,
  @hannesm)

6.2.0

CHANGES:

• New opam package "dnssec" implementing dnssec validation (@reynir @hannesm)
• Use custom log sources, not the default one from Logs (@reynir @hannesm)
• BUGFIX dns-resolver: unlisten on the listen port, not the packet src_port
  (#290 @hannesm)
• dns-resolver: add IPv6 addresses of root servers (fixes #262, @hannesm)
• dns-resolver: preliminary support for DNSSec (#262 @reynir @hannesm)
• dns-client: when /etc/resolv.conf modifies, update the list of nameservers
  (#291 @hannesm @reynir)
• dns-cli: update to cmdliner 1.1.0 (#300 @hannesm)
• dns-client-mirage: add module type and nameserver_of_string and connect to
  allow creation of a MirageOS device (#297 @dinosaure)
• dns-cache: add size, capacity, and weight to metrics (#301, fixes #299,
  @hannesm)

6.1.4

CHANGES:

• dns-client-{mirage,lwt}: avoid multiple simultaneous connection attempts
  to the same resolver. Now, before a connection is initiated, a Lwt_condition
  is put into the client state which subsequent resolution requests wait for
  (#285 @hannesm, review by @reynir, reported by @kit-ty-kate in
  roburio/http-client-lwt#8)

6.1.3

CHANGES:

• dns-mirage: use tcpip >= 7.0.0 instead of deprecated mirage-stack and
  mirage-protocols (#283 @dinosaure)

6.1.2

CHANGES:

• dns: avoid exceptions when decoding resource records (#282 @reynir @hannesm)

6.1.1

CHANGES:

• dns-client: by default, do not send EDNS (#280 @reynir @hannesm)
• BREAKING dns-certify.mirage: treat key_data as base64 encoded data
  (#280 @reynir @hannesm)
• mirage: update to mirage-protocols 6.0.0 API (use TCP.listen / UDP.listen)
  resolver: unlisten on UDP port after response has been received (#280 @reynir
  @hannesm)

6.1.0

CHANGES:

• BUGFIX dns-client: avoid exception on TLS handshake failure (reported by @reynir)
• FEATURE dns-client: optionally send a edns in the query (reported by @orbitz #276)
• dns-client: combine send and recv, avoid resource leaks on timeout

6.0.2

CHANGES:

• dns: remove astring dependency (@hannesm)
• dns-client: adapt to happy-eyeballs 0.1.0 API (#274 @hannesm)
• dns-client: avoid List.concat_map, make it available on OCaml 4.08 (@hannesm)