1
0
mirror of https://git.openwrt.org/openwrt/openwrt.git synced 2024-10-20 06:28:12 +02:00
openwrt/package/network/services/dnsmasq/files
Henrique de Moraes Holschuh 556b8581a1 dnsmasq: fix dnssec+ntp chicken-and-egg workaround (FS#2574)
Fix the test for an enabled sysntp initscript in dnsmasq.init, and get
rid of "test -o" while at it.

Issue reproduced on openwrt-19.07 with the help of pool.ntp.br and an
RTC-less ath79 router.  dnssec-no-timecheck would be clearly missing
from /var/etc/dnsmasq.conf.* while the router was still a few days in
the past due to non-working DNSSEC + DNS-based NTP server config.

The fix was tested with the router in the "DNSSEC broken state": it
properly started dnsmasq in dnssec-no-timecheck mode, and eventually ntp
was able to resolve the server name to an IP address, and set the system
time.  DNSSEC was then enabled by SIGINT through the ntp hotplug hook,
as expected.

A missing system.ntp.enabled UCI node is required for the bug to show
up.  The reasons for why it would be missing in the first place were not
investigated.

Signed-off-by: Henrique de Moraes Holschuh <henrique@nic.br>
Signed-off-by: Hans Dedecker <dedeckeh@gmail.com> [PKG_RELEASE increase]
2020-03-25 21:40:51 +01:00
..
50-dnsmasq-migrate-resolv-conf-auto.sh dnsmasq: fix uci-defaults script to exit 0 so it is cleaned up 2020-02-19 22:02:59 +01:00
dhcp-script.sh
dhcp.conf dnsmasq: switch to /tmp/resolv.conf.d/resolv.conf.auto 2020-01-07 15:37:22 +02:00
dhcpbogushostname.conf dnsmasq: add dhcp-ignore-names support - CERT VU#598349 2018-10-09 09:45:16 +01:00
dnsmasq_acl.json
dnsmasq.conf
dnsmasq.init dnsmasq: fix dnssec+ntp chicken-and-egg workaround (FS#2574) 2020-03-25 21:40:51 +01:00
dnsmasqsec.hotplug dnsmasq: use SIGINT for dnssec time valid 2018-01-15 22:34:51 +01:00
rfc6761.conf dnsmasq: remove example domains from rfc6761.conf (FS#1447) 2018-04-09 17:35:17 +02:00