dnscrypt-proxy 1.4.0

[tomato.git] / release / src / router / dnscrypt / ChangeLog

* Thu Apr 24 22:25:06 2014 -0700

    Do not document --reinstall

* Thu Apr 24 22:24:41 2014 -0700

    Document how to open an elevated command prompt

* Thu Apr 24 17:44:37 2014 -0700

    Make dnscrypt-proxy half-decent on Windows

* Thu Apr 24 23:23:49 2014 +0000

    Add windows_service_registry_write_string(()

* Wed Apr 23 23:10:14 2014 -0700

    Quote dnscrypt-proxy

* Wed Apr 23 21:38:21 2014 -0700

    No need to check for inet_pton after all

* Wed Apr 23 21:37:49 2014 -0700

    Fu fu fu Windows, fu fu fuuuuu

* Wed Apr 23 21:24:49 2014 -0700

    Define a replacement inet_pton() function for Windows

* Wed Apr 23 21:10:17 2014 -0700

    Use inet_pton() instead of inet_aton()

* Wed Apr 23 12:56:00 2014 -0700

    Revert cf5a85b255f86db8b2c5ec4fe45aa383903a69bb

* Wed Apr 23 08:20:26 2014 -0700

    Update d0wn entries, requested by d0wn

* Tue Apr 22 22:17:05 2014 -0700

    Update dnscrypt-resolvers.csv signature

* Tue Apr 22 22:12:54 2014 -0700

    Update ns4.ca.dns.opennic.glue signature, via Nova King

* Tue Apr 22 20:08:48 2014 -0700

    Sign .csv file

* Tue Apr 22 20:06:13 2014 -0700

    Add CloudNS Tor addresses

* Tue Apr 22 08:12:15 2014 -0700

    Mention DNSCrypt-OSXClient, a new universal client for OSX.

* Mon Apr 21 21:12:31 2014 -0700

    Do not skip the last row of the CSV file.

* Mon Apr 21 14:04:08 2014 -0700

    Mention extra plugins

* Mon Apr 21 14:00:26 2014 -0700

    Markdown fixups

* Mon Apr 21 13:58:36 2014 -0700

    Update documentation

* Mon Apr 21 13:58:17 2014 -0700

    Do not recommend logging to /tmp

* Mon Apr 21 13:01:01 2014 -0700

    opennic-ca-ns17 is actually in Fremont, CA, US.

* Mon Apr 21 12:53:23 2014 -0700

    Full country names

* Mon Apr 21 12:50:16 2014 -0700

    for d0wn and OpenNIC servers, place the country code first to improve sorting

* Mon Apr 21 12:46:06 2014 -0700

    OK Turtles is okTurtles

* Mon Apr 21 12:44:53 2014 -0700

    opendns-ipv6 description should be unique

* Mon Apr 21 12:44:03 2014 -0700

    Sort, and add OpenDNS IPv6 and OpenDNS Familyshield

* Mon Apr 21 12:35:00 2014 -0700

    Complete d0wn servers

* Mon Apr 21 12:33:18 2014 -0700

    CSV is hard

* Mon Apr 21 12:32:21 2014 -0700

    Add missing version #

* Mon Apr 21 12:31:13 2014 -0700

    Missing ,

* Mon Apr 21 12:30:18 2014 -0700

    Fix CSV

* Mon Apr 21 12:28:38 2014 -0700

    More d0wn servers

* Mon Apr 21 12:17:31 2014 -0700

    Phew, NovaKing has so many resolvers...

* Mon Apr 21 12:10:01 2014 -0700

    Slowly complete the list of resolvers...

* Mon Apr 21 11:48:13 2014 -0700

    Add dnscrypt.eu IPv6 addresses

* Mon Apr 21 11:24:47 2014 -0700

    Remove unneeded quotes from CSV file

* Mon Apr 21 11:23:24 2014 -0700

    Remove empty records from CSV file

* Mon Apr 21 11:23:01 2014 -0700

    Cleanup CSV file

* Fri Apr 18 04:56:18 2014 -0700

    Plugins shouldn't be considered experimental any more

Merge: cadf94b d005fa4
* Thu Apr 17 08:18:14 2014 -0700

    Merge pull request #91 from pysiak/master
    
    Update GEO coordinates and pubkey for Soltysiak

* Thu Apr 17 13:31:21 2014 +0200

    Update GEO coordinates and pubkey for Soltysiak

* Thu Apr 17 00:21:22 2014 -0700

    Better usage()

* Thu Apr 17 00:06:43 2014 -0700

    Add ResolverName and ResolversList to the Windows registry keys

* Wed Apr 16 23:58:19 2014 -0700

    Install dnscrypt-resolvers.csv

* Wed Apr 16 23:48:43 2014 -0700

    Move the list of resolvers to $pkgdatadir

* Wed Apr 16 23:22:11 2014 -0700

    New option -R <resolver name> to automatically pick resolver config from a name

* Wed Apr 16 23:21:41 2014 -0700

    Initialize the default resolver name to NULL

* Wed Apr 16 21:30:20 2014 -0700

    Open the CSV file in binary mode.

* Wed Apr 16 21:27:50 2014 -0700

    Portably computing the size of a file in C is not a solved problem.
    https://www.securecoding.cert.org/confluence/display/seccode/FIO19-C.+Do+not+use+fseek()+and+ftell()+to+compute+the+size+of+a+regular+file

* Wed Apr 16 20:45:09 2014 -0700

    Define the path to dnscrypt-resolvers.csv

* Wed Apr 16 20:12:59 2014 -0700

    Use sodium_mlock() if available.

* Wed Apr 16 19:51:22 2014 -0700

    Check for sodium_mlock existence

* Wed Apr 16 00:28:33 2014 -0700

    MiniCSV: move macros to minicsv.h

* Wed Apr 16 00:23:27 2014 -0700

    Import MiniCSV

* Wed Apr 16 06:08:11 2014 -0700

    Downgrade "Received a resolver reply from a different resolver" to LOG_DEBUG

* Wed Apr 16 06:02:07 2014 -0700

    Next release will be 1.4.0

* Wed Apr 16 06:02:07 2014 -0700

    Fix buggy retry code. Issue #71

* Sat Apr 12 13:33:20 2014 -0700

    Fragmentation is allowed only if the packet size > the outgoing interface MTU.

* Wed Apr 9 19:44:42 2014 -0700

    Require provider information.

* Wed Apr 9 12:15:28 2014 -0700

    libevent: disable regress by default, as it requires network communications.

* Tue Apr 8 14:43:27 2014 -0700

    + DNSCrypt Tools

Merge: 72a9e48 4fac7f8
* Tue Apr 8 11:01:21 2014 -0700

    Merge pull request #81 from aureq/master
    
    package compliance with debian distribution

Merge: 6e646ad 9ee793f
* Mon Apr 7 09:37:11 2014 -0700

    Merge pull request #87 from Teknocrat/master
    
    New initd File for Gentoo allows configuration of different DNS servers

* Mon Apr 7 12:29:21 2014 -0400

    New initd File for Gentoo allows configuration of different DNS
    resolvers vid conf.d config file variables

* Sat Mar 29 21:34:48 2014 -0700

    Fix a crash in evdns related to shutting down evdns
    (Improved version to deal correctly with probe requests)
    Patch from YASUOKA Masahiko; fix for libevent github issue #113.

* Tue Mar 25 15:23:56 2014 -0700

    Fix documentation: --resolver-address not --server-address

* Tue Mar 25 08:06:03 2014 -0700

    Fix a crash in evdns related to shutting down evdns
    Patch from YASUOKA Masahiko; fix for libevent github issue #113.

* Sun Mar 23 19:15:19 2014 +1100

    return a fail if stop is request and the process wasn't running

* Sun Mar 23 19:10:47 2014 +1100

    pass the configuration to the argument parser
    added --brackground to start-stop-daemon so the process is started correctly in the background
    only retrieve the most recent pid for the daemon
    cosmetic changes with "echo"
    if process can't be killed, then return a fail (log_end_msg 1)

* Sun Mar 23 18:34:24 2014 +1100

    exclude 'resolvconf' from the upstart script when processing options

* Sun Mar 23 18:03:45 2014 +1100

    fixed syntax error in init script

* Sun Mar 23 17:56:12 2014 +1100

    debian init script as debian doesn't use upstart

* Sun Mar 23 17:28:01 2014 +1100

    removed --user=dnscrypt as moved to dnscrypt-proxy.default instead

* Sun Mar 23 17:27:24 2014 +1100

    added 'user=' to the default configuration file

* Sun Mar 23 16:59:05 2014 +1100

    added 'resolvconf' package dependency (Suggests only) for the init script to update /etc/resolv.connf

* Sun Mar 23 16:52:09 2014 +1100

    added 'resolvconf' variablee for the init script

* Sun Mar 23 11:56:48 2014 +1100

    (lintian) description-synopsis-starts-with-article

* Sun Mar 23 11:54:49 2014 +1100

    (lintian) dnscrypt-proxy: debian-revision-should-not-be-zero

* Fri Mar 21 13:43:45 2014 -0700

    OKTurtles does not support DNSSEC

* Fri Mar 21 13:28:21 2014 -0700

    Add OkTurtles to the list of providers.

* Fri Mar 21 13:20:43 2014 -0700

    DNSCrypt Winclient does more than OpenDNS and CloudNS now.

* Fri Mar 21 13:16:34 2014 -0700

    Prepare for removal of default settings.

* Wed Mar 5 17:14:11 2014 -0800

    libevent sync
    * Wed Feb 19 06:49:31 2014 +0100
    
        Add -Qunused-arguments for clang on macos
    
        The clang compiler provided with macosx emits warnings like:
    
          CC       bufferevent.lo
        clang: warning: argument unused during compilation: '-I .'
        clang: warning: argument unused during compilation: '-I ./compat'
        clang: warning: argument unused during compilation: '-I ./include'
        clang: warning: argument unused during compilation: '-I ./include'
    
        for each file being compiled. This generates a lot of noise during
        compilation making it hard to see "real" errors. This patch mute
        those warnings.

* Sun Feb 9 12:10:05 2014 -0800

    Simplify hostip example

* Sun Feb 9 12:04:33 2014 -0800

    dnscrypt-proxy has been available in Homebrew for a while

* Sun Feb 9 12:04:04 2014 -0800

    Update repository.

* Sun Feb 9 11:58:32 2014 -0800

    Display something as LOG_NOTICE when the service starts

* Sun Feb 9 11:58:22 2014 -0800

    Regen hostip

* Sun Feb 9 11:45:14 2014 -0800

    213.154.224.3 now only accepts connections over TLS.

* Sun Feb 9 11:36:26 2014 -0800

    One line for the version is enough.

* Sun Feb 9 11:33:51 2014 -0800

    Use LOG_NOTICE level for startup/shutdown messages

* Sun Feb 9 11:26:08 2014 -0800

    bufferevent_pair: don't call downcast(NULL)

* Thu Jan 30 13:06:04 2014 -0800

    Add dnscrypt.eu IPv6 address for resolver #2

* Thu Jan 30 10:07:50 2014 -0800

    Refer to Noxwizard's repository again.

Merge: e47ef88 627e26a
* Fri Jan 24 08:33:56 2014 -0800

    Merge pull request #62 from Shnatsel/master
    
    Fix applying AppArmor profile on startupp

Merge: f4c73e9 e3085a8
* Fri Jan 24 08:33:16 2014 -0800

    Merge pull request #63 from Shnatsel/fix-etc-defaults
    
    Fix /etc/default in Ubuntu package

* Fri Jan 24 19:34:02 2014 +0400

    Link to resolver lists in /etc/default and note that specifying multiple resolvers is not yet supported

* Fri Jan 24 19:29:33 2014 +0400

    Revert "Add OpenNIC alternative root servers to /etc/default/dnscrypt-proxy."
    

* Fri Jan 24 14:44:33 2014 +0400

    don't fail if loading of AppArmor profile from Upstart script failed for whatever reason

* Fri Jan 24 14:21:15 2014 +0400

    Fix a common bug with DNSCrypt having the AppArmor profile defined but not being confined by it

* Wed Jan 22 16:17:03 2014 -0800

    libevent: Check if arch has the epoll_create and __NR_epoll_wait syscalls.
    Some architectures (like AArch64) do not have deprecated syscalls.

* Wed Jan 15 11:34:02 2014 -0800

    New OpenNIC servers in Fremont, CA

* Mon Jan 13 14:53:54 2014 -0800

    Typo

* Mon Jan 13 14:52:13 2014 -0800

    Link DNSCrypt Windows Service Manager

* Mon Jan 13 14:47:29 2014 -0800

    Update dnscrypt.eu resolvers

Merge: 99ca5c8 57520bc
* Mon Jan 13 14:08:55 2014 -0800

    Merge pull request #56 from Kami/fix_readme_typo
    
    Fix typo in the README

* Mon Jan 13 22:50:53 2014 +0100

    Fix a typo, argument is called pidfile and not pid-file.

* Wed Jan 1 17:09:12 2014 +0100

    Year++

* Tue Dec 31 16:36:16 2013 +0100

    Remove the need for droid-gcc to compile for android

* Fri Dec 27 20:00:58 2013 +0100

    libevent typo fixes

Merge: a4cd640 5cdf433
* Wed Dec 18 13:14:44 2013 -0800

    Merge branch 'master' of github.com:jedisct1/dnscrypt-proxy
    
    * 'master' of github.com:jedisct1/dnscrypt-proxy:
      Add OpenNIC alternative root servers to /etc/default/dnscrypt-proxy.

* Wed Dec 18 13:13:15 2013 -0800

    Remove references to encryption.
    Make it clear that dnscrypt is about authentication, not privacy.

Merge: d243c7a 52d2c7c
* Fri Dec 13 09:20:46 2013 -0800

    Merge pull request #48 from pataquets/master
    
    Add OpenNIC alternative root servers to /etc/default/dnscrypt-proxy.

* Fri Dec 13 10:54:42 2013 +0100

    Add OpenNIC alternative root servers to /etc/default/dnscrypt-proxy.

Merge: c3942f2 e607279
* Thu Dec 12 20:58:13 2013 -0800

    Merge pull request #47 from pataquets/patch-2
    
    Add OpenNIC alternative DNS servers

* Fri Dec 13 03:12:40 2013 +0100

    Add OpenNIC alternative DNS servers

* Wed Dec 11 22:45:32 2013 -0800

    Fix hostip default -r arg

* Sat Dec 7 21:56:29 2013 -0800

    Update libevent ChangeLog

* Mon Nov 18 15:00:10 2013 -0800

    Target iOS 7.1

* Sun Nov 17 21:10:31 2013 -0800

    Remove unmaintained packages

Merge: 2b48929 f0a155d
* Tue Nov 5 23:24:36 2013 -0800

    Merge pull request #39 from Shnatsel/master
    
    Add Debian/Ubuntu packaging

Merge: 5535ff7 567c700
* Mon Nov 4 22:15:23 2013 -0800

    Merge branch 'master' of github.com:jedisct1/dnscrypt-proxy
    
    * 'master' of github.com:jedisct1/dnscrypt-proxy:
      Gentoo ebuild: Backport patch to fix always compiling plugins
      Bump libsodium Gentoo ebuild to version 0.4.5
      Update Gentoo ebuilds to use autotools-utils
      Add masters attribute to Gentoo overlay layout.conf

* Mon Nov 4 22:15:06 2013 -0800

    libevent: Avoid redundant invocations of init_extension_functions for IOCP

* Sun Nov 3 19:14:58 2013 +0400

    Added Debian/Ubuntu packaging

Merge: 34034ca c71e1e4
* Fri Nov 1 09:16:05 2013 -0700

    Merge pull request #38 from Strayer/gentoo-ebuild-fixes
    
    Gentoo ebuild fixes

* Thu Oct 31 21:31:04 2013 +0100

    Gentoo ebuild: Backport patch to fix always compiling plugins

* Wed Oct 30 21:26:01 2013 +0100

    Bump libsodium Gentoo ebuild to version 0.4.5

* Tue Oct 29 23:24:56 2013 +0100

    Update Gentoo ebuilds to use autotools-utils

* Tue Oct 29 23:20:59 2013 +0100

    Add masters attribute to Gentoo overlay layout.conf

Merge: 659f6cf 3bc5106
* Fri Nov 1 00:57:34 2013 -0700

    Merge pull request #37 from Strayer/fix-autotools-configure-arguments
    
    Handle --disable-plugins* correctly in configure.ac

* Thu Oct 31 21:06:11 2013 +0100

    Handle --disable-plugins* correctly in configure.ac

* Sun Oct 27 12:56:52 2013 -0700

    port 2053 for the new Polish server

* Sun Oct 27 12:50:16 2013 -0700

    Add the new DNSCrypt service in Poland

Merge: cfd5184 13e171f
* Fri Oct 25 19:35:00 2013 -0700

    Merge remote-tracking branch 'Shnatsel/master'
    
    * Shnatsel/master:
      bump AppArmor profile modification date
      Improve AppArmor profile:  - Use @{multiarch} tunable instead of *-linux-gnu* - they are the same on my system, but using the global tunable is more robust/portable  - Drop block_suspend capability because it requires Linux >= 3.5 and does not seem to be needed (as of my testing)  - Allow access to libpthread and librt, extensive testing indicates it is sometimes needed (libsodium multithreading?)  - Allow access to libsodium if it's installed in the system default path with multiarch support instead of just /usr/lib/ and /usr/local/lib

* Fri Oct 25 19:34:14 2013 +0400

    bump AppArmor profile modification date

* Fri Oct 25 19:30:18 2013 +0400

    Improve AppArmor profile:
     - Use @{multiarch} tunable instead of *-linux-gnu* - they are the same on my system, but using the global tunable is more robust/portable
     - Drop block_suspend capability because it requires Linux >= 3.5 and does not seem to be needed (as of my testing)
     - Allow access to libpthread and librt, extensive testing indicates it is sometimes needed (libsodium multithreading?)
     - Allow access to libsodium if it's installed in the system default path with multiarch support instead of just /usr/lib/ and /usr/local/lib

* Tue Oct 22 13:06:06 2013 -0700

    Update ChangeLog

* Tue Oct 22 13:05:32 2013 -0700

    Check for arc4random_addrandom() presence - Needed for OpenBSD-current.

* Tue Oct 22 13:05:11 2013 -0700

    Update man page date

* Mon Oct 14 15:29:13 2013 -0700

    Update hostip man page

* Mon Oct 14 15:22:25 2013 -0700

    Use 8.8.8.8 by default in hostip.

* Fri Oct 11 09:11:36 2013 -0700

    Ditch ldns-forward-after-nxdomain plugin.

* Fri Oct 11 09:22:21 2013 -0700

    Security: Never expose a private key in the process command-line args
    This was here as an alternative to using an environment variable only because
    the closed-source opendns user interface was (and probably still is) using
    that.

* Wed Oct 9 21:47:43 2013 -0700

    Disable dns test cases in regress_main

* Wed Oct 9 21:07:06 2013 -0700

    libevent: regress_dns needs a very specific DNS setup to pass. Disable it.

* Sun Oct 6 18:27:39 2013 -0700

    Fix provider name for OpenDNS

* Tue Sep 24 13:41:52 2013 -0700

    Check for inline vs __inline

* Mon Sep 23 15:50:00 2013 -0700

    Add DNSCrypt.eu

* Wed Sep 18 00:50:48 2013 -0700

    No logs

* Wed Sep 18 00:48:43 2013 -0700

    New public resolver in Japan, part of OpenNIC

* Tue Sep 17 20:02:34 2013 -0700

    Version bump

* Tue Sep 17 19:46:50 2013 -0700

    set-client-ip.c plugin: accept non-hex IP strings

* Tue Sep 17 18:35:56 2013 -0700

    Update winclient description

* Sun Sep 15 14:27:47 2013 -0700

    Update README-WINDOWS to mention .DLL files.

* Sun Sep 15 14:13:38 2013 -0700

    Don't compress executables by default, because of stupid antiviruses.

* Sun Sep 15 14:12:48 2013 -0700

    Change the package structure for Windows users

* Sun Sep 15 13:55:29 2013 -0700

    Put sbin and bin in the same basket on win32

* Sun Sep 15 13:46:13 2013 -0700

    msys: actually honor prefix

* Sun Sep 15 13:45:00 2013 -0700

    msys: remove --disable-ssp

* Sun Sep 15 13:43:51 2013 -0700

    msys.sh: install in $(pwd)/dnscrypt-proxy-win32

* Sun Sep 15 13:39:49 2013 -0700

    Update Win32 instructions. libsodium DLL is now shipped separately.

* Sun Sep 15 12:58:36 2013 -0700

    Move autoconf sync with libsodium

* Sun Sep 15 12:52:08 2013 -0700

    Move PROBES_SOURCE substitution

* Sun Sep 15 12:50:55 2013 -0700

    Sync some autoconf switches with libsodium's

* Sun Sep 15 12:44:18 2013 -0700

    Remove unused blocking-random autoconf switch

* Sun Sep 15 12:43:30 2013 -0700

    PIE is on by default, so document --disable-pie, not --enable-pie

* Sun Sep 15 12:17:20 2013 -0700

    Remove links to the OSX and Cydia packages.
    The OSX GUI ships with an old proxy, the Cydia package is dead old as well.

* Fri Sep 13 22:08:25 2013 -0700

    Ping timeout from Noxwizard, temporarily change dnscrypt-winclient URL

* Tue Sep 10 21:59:13 2013 -0700

    libevent: Avoid racy bufferevent activation
    
        The evhttp_send_reply method invokes evhttp_write_buffer with a
        callback that may release the underlying request object and
        bufferevent upon completion. This cleanup callback is invoked by the
        underlying bufferevent's write callback. Improperly enabling write
        events before referencing the bufferevent could lead to use after free
        and memory corruption.
    
    diff --git a/http.c b/http.c
    index 9b96ffb..377597e 100644
    --- a/http.c
    +++ b/http.c
    @@ -383,8 +383,6 @@ evhttp_write_buffer(struct evhttp_connection *evcon,
        evcon->cb = cb;
        evcon->cb_arg = arg;
    
    -   bufferevent_enable(evcon->bufev, EV_WRITE);
    -
        /* Disable the read callback: we don't actually care about data;
         * we only care about close detection.  (We don't disable reading,
         * since we *do* want to learn about any close events.) */
    @@ -393,6 +391,8 @@ evhttp_write_buffer(struct evhttp_connection *evcon,
            evhttp_write_cb,
            evhttp_error_cb,
            evcon);
    +
    +   bufferevent_enable(evcon->bufev, EV_WRITE);
     }
    
     static void

* Mon Sep 9 22:51:42 2013 -0700

    Disable PIE on MingW

* Wed Sep 4 00:17:30 2013 -0700

    Bump Android SDK version

* Mon Aug 26 23:37:36 2013 -0700

    Require at least autoconf 2.65

* Mon Aug 26 23:31:19 2013 -0700

    Explain that on CentOS/Fedora, ld.so.conf doesn't include /usr/local/lib

* Sun Aug 18 14:31:58 2013 -0600

    Update the version number in the file checking example

* Sun Aug 18 14:20:33 2013 -0600

    Update CloudNS resolvers

Merge: 48726db d071cfb
* Wed Aug 14 08:10:27 2013 -0700

    Merge pull request #17 from Strayer/gentoo-fix-ebuilds
    
    Fix Gentoo ebuilds

* Wed Aug 14 16:25:08 2013 +0200

    Added dnscrypt-proxy-1.3.3.ebuild
    
    - bumped dnscrypt-proxy to 1.3.3
    - fixed wrong digests in Manifest
    - removed old ebuilds which don't have official packages anymore

* Wed Aug 14 16:20:29 2013 +0200

    Fixed libsodium-0.4.2.ebuild
    
    - src_configure() missed econf
    - path of ChangeLog was wrong

* Tue Aug 13 20:39:50 2013 -0700

    Regen man pages

* Tue Aug 13 20:38:03 2013 -0700

    update ChangeLog

* Tue Aug 13 20:24:25 2013 -0700

    Get back to 512 bytes for DNS_MAX_PACKET_SIZE_UDP_NO_EDNS_SEND

* Tue Aug 13 20:22:42 2013 -0700

    Fix tests: apprently, www.opendns.com IPv6 address changed.

* Tue Aug 13 07:30:20 2013 -0700

    Update ChangeLog

* Mon Aug 12 22:38:54 2013 -0700

    Gradually increase the supported payload size.

* Mon Aug 12 20:55:07 2013 -0700

    Rename DNS_MAX_PACKET_SIZE_UDP_SEND to DNS_MAX_PACKET_SIZE_UDP_NO_EDNS_SEND

* Mon Aug 12 19:47:25 2013 -0700

    Update ChangeLog

* Mon Aug 12 19:44:06 2013 -0700

    Version bump

* Mon Aug 12 19:43:18 2013 -0700

    Explain that upgrading to 1.3.3 is highly recommended, and why.

* Mon Aug 12 19:29:47 2013 -0700

    Update NEWS

* Mon Aug 12 19:23:35 2013 -0700

    Force questions to be as big as the response can be.

* Wed Aug 7 00:31:21 2013 -0700

    Link to dnscrypt.
    Not to old GUIs.

Merge: 7aba22f 9a1e8ba
* Wed Aug 7 00:29:19 2013 -0700

    Merge pull request #15 from Teknocrat/master
    
    Add Gentoo Ebuilds for Libsodium dependency and new dnscrypt-proxy

* Mon Jul 29 23:14:47 2013 -0500

    1. Remove random blocking
    2. make default daemon use correct port number (53)

* Mon Jul 29 19:24:57 2013 -0500

    As per comments, removed ldflags autoconf should do this.. added use
    flag for plugins, left random.. need to check with @strayer on that
    one..

* Mon Jul 29 03:31:30 2013 -0500

    Oops, new files needed for dnscrypt-proxy ebuild and new libsodium
    ebuild

* Mon Jul 29 03:28:13 2013 -0500

    Added new ebuilds for dnscrypt-proxy 1.3.2 bump
    as well as libsodium dependency

* Sun Jul 21 11:55:36 2013 -0700

    Merge important fixes to levent
    
    * Sat Jul 20 14:02:49 2013 -0700
    
        libevent/win32_dealloc() : fix sizeof(pointer) vs sizeof(*pointer)
    
    * Mon Jun 10 10:38:12 2013 -0400
    
        Document that arc4random is not a great cryptographic PRNG.
    
    * Mon Jun 10 10:33:56 2013 -0400
    
        When we seed from /proc/sys/kernel/random/uuid, count it as success
    
        Found by Joseph Spadavecchia
    
    * Sat May 11 03:53:11 2013 +0400
    
        Fix SEGFAULT after evdns_base_resume if no nameservers installed.
    
        If there is no nameservers installed, using
        evdns_base_nameserver_ip_add(), than evdns_base_resume() will SEGFAULT,
        because of NULL dereference in evdns_requests_pump_waiting_queue()
    
        Conflicts:
                evdns.c
    
    * Wed May 29 13:30:56 2013 -0400
    
        Use windows vsnprintf fixup logic on all windows environments
    
        Previously I'd relied on mingw to provide a vsnprintf with a
        conformant return value.  But it appears that some mingw
        environments don't do that.
    
    * Mon May 6 18:15:03 2013 +0400
    
        Checking request nameserver for NULL, before using it.

* Sun Jul 21 09:56:37 2013 -0700

    + CloudNS

* Sat Jul 20 18:14:12 2013 -0700

    Enable subdir-objects

* Sat Jul 20 15:45:12 2013 -0700

    Update ChangeLog

* Sat Jul 20 13:58:58 2013 -0700

    ldns.h requires ws2tcpip.h on Windows

* Sat Jul 20 12:39:03 2013 -0700

    libevent/win32_dealloc() : fix sizeof(pointer) vs sizeof(*pointer)

* Fri Jul 19 12:58:11 2013 -0700

    Unfuck Windows build: MingW doesn't even seem to provide _gmtime_s()

* Fri Jul 19 12:56:00 2013 -0700

    Target iOS 7

* Fri Jul 19 12:17:58 2013 -0700

    Parallel compilation is unreliable on msys

* Fri Jul 19 09:59:41 2013 -0700

    Bump version

* Fri Jul 19 09:52:25 2013 -0700

    Update NEWS

* Fri Jul 19 09:41:15 2013 -0700

    Update ChangeLog

* Fri Jul 19 09:37:02 2013 -0700

    rules->profile

* Fri Jul 19 09:36:41 2013 -0700

    Ship the AppArmor profile

Merge: e70029a aa5411d
* Sat Jul 6 19:07:57 2013 -0700

    Merge pull request #11 from insanitybit/master
    
    xApparmor profile for DNSCrypt

* Sat Jul 6 20:08:10 2013 -0400

    Apparmor profile for DNSCrypt
    
    On systems that support apparmor this file can be dropped into /etc/apparmor.d/apparmor.profile.dnscrypt-proxy
    
    On reboot it should be active. aa-status to confirm,
    aa-enforce /etc/apparmor.d/apparmor.profile.dnscrypt-proxy
    if it doesn't enforce after reboot.

* Tue Jun 25 14:25:16 2013 -0700

    reword

* Tue Jun 25 14:24:30 2013 -0700

    Fix --test=

* Tue Jun 25 14:24:00 2013 -0700

    -t can now be used to specify a safety margin

* Mon Jun 24 16:29:00 2013 -0700

    Don't bind anything in test mode.

* Mon Jun 24 16:16:39 2013 -0700

    Add --test

* Mon Jun 24 14:54:27 2013 -0700

    Print the chosen cert validity period.

* Mon Jun 24 13:48:36 2013 -0700

    Update TECHNOTES

* Sun Jun 23 23:33:33 2013 -0700

    Explain how to check file integrity.

* Sat Jun 22 21:38:21 2013 -0700

    Fix typo

* Sat Jun 22 21:36:46 2013 -0700

    Sync Homebrew formula

* Sun Jun 9 22:42:09 2013 -0700

    Check that the list of supported protocol versions the client
    advertises is actually supported.
    The current proxy only supports version 2.

* Sun Jun 9 19:10:01 2013 -0700

    Use only portable implementations on iOS.

* Sun Jun 9 12:45:06 2013 -0700

    Update ChangeLog

* Sun Jun 9 12:27:56 2013 -0700

    Don't print "initializing for optimal performance" if we don't.

* Sun Jun 9 12:19:27 2013 -0700

    Add USE_ONLY_PORTABLE_IMPLEMENTATIONS

* Sun Jun 9 12:19:06 2013 -0700

    Disable PIE for Android builds.

* Sun Jun 9 10:50:54 2013 -0700

    Add mipsel-linux-static.sh to the distributed build scripts

* Sat Jun 8 22:55:51 2013 -0700

    Rename iPhone target to iOS, because it works fine on iPad and iPod, too.

* Sat Jun 8 22:54:33 2013 -0700

    Update iOS build script

* Fri Jun 7 23:25:16 2013 -0700

    Update Android build script to pick libsodium

Merge: 64c8ed6 96e8e19
* Thu Jun 6 23:07:21 2013 -0700

    Merge pull request #9 from Cofyc/master
    
    Clean libsodium submodule entry.

* Fri Jun 7 13:46:01 2013 +0800

    Remove .gitmodules (libsodium is not a submodule now).

* Wed Jun 5 20:56:13 2013 -0700

    Unfortunately, dtrace for Linux is still experimental to say the least.

* Wed Jun 5 16:45:49 2013 -0700

    Check for dtrace in /usr/local/sbin and /usr/sbin just in case these are
    not in $PATH, and enable dtrace on Linux, too.

* Mon Jun 3 12:41:53 2013 -0700

    `make -j2 check` in the `src/libsodium` is not required any more.
    Thanks to binaryparadox for spotting this.

* Fri May 31 09:41:01 2013 -0700

    Optimized implementations are available.

* Fri May 31 01:05:24 2013 -0700

    dist-build/osx.sh now produces an universal binary

* Fri May 31 00:04:47 2013 -0700

    Pass compilation environment variables to libevent's autoconf script
    through ac_configure_args in order to unfuck compilation on FreeBSD
    when CFLAGS have been set prior to compilation.

* Thu May 30 16:48:51 2013 -0700

    Statically linking libsodium with -static -Bdynamic is not portable. Screw it.

Merge: f654fc3 13c082d
* Thu May 30 14:01:03 2013 -0700

    Merge branch 'ext-sodium'
    
    * ext-sodium:
      Statically link libsodium for now
      Update .travis.yml to compile and install libsodium

* Thu May 30 14:00:42 2013 -0700

    Statically link libsodium for now

* Thu May 30 12:15:35 2013 -0700

    The Windows GUI by OpenDNS looks even more abandoned than other GUIs.

* Thu May 30 12:15:02 2013 -0700

    All the currently available GUIs only work with OpenDNS :(

* Thu May 30 09:38:39 2013 -0700

    Update .travis.yml to compile and install libsodium

* Sun May 26 00:17:52 2013 -0700

    Mention that libsodium is now required

* Sun May 26 00:15:33 2013 -0700

    Remove built-in libsodium

* Thu May 23 00:42:00 2013 -0700

    Sync libsodium

Merge: 41c52ff faa5cf7
* Thu May 16 14:03:07 2013 -0700

    Merge pull request #4 from Strayer/gentoo_ebuild_v1.3.0
    
    Gentoo ebuild v1.3.0

* Thu May 16 11:16:54 2013 -0700

    Check for ldns presence using ldns_wire2pkt(), not something that requires SSL.

* Thu May 16 19:19:26 2013 +0200

    Bumped Gentoo ebuild to 1.3.0

* Thu May 16 19:18:13 2013 +0200

    Fixed gentoo ebuild package links

* Sat May 11 21:32:11 2013 -0700

    Display an info message before calling crypto_init().

* Sat May 11 11:23:52 2013 -0700

    Export CC, LD, etc. for linux/mips/uclibc.

* Sat May 11 11:20:12 2013 -0700

    Add a compilation script to build a static Linux/Mips binary
    Which means no plugins, though. And this is sad.

* Sat May 11 11:04:41 2013 -0700

    Move sodium_init() call after reading the options.

* Sat May 11 09:59:43 2013 -0700

    No need to define CROSS_COMPILING any more. Twas for the libuv/nacl days.

* Sat May 4 13:48:39 2013 -0700

    Link external libsodium if installed.

* Thu May 2 00:17:41 2013 -0700

    Sodium doc update

* Sun Apr 28 09:57:55 2013 -0700

    Sync libsodium, for fenv.h checks

* Sat Apr 27 17:15:11 2013 -0700

    Sodium 0.4.1 final

* Sat Apr 27 13:16:55 2013 -0700

    Wipe OPENDNS_DEVICE_ID environment variable.

* Sat Apr 27 13:10:45 2013 -0700

    Do not recommend supplying the secret on the command-line ever.
    At least, use OPENDNS_DEVICE_ID for that.

* Sat Apr 27 11:47:16 2013 -0700

    Sodium up

* Sat Apr 27 11:15:45 2013 -0700

    Bump Android API to Gingerbread (because... seriously...)
    But downgrade the toolchain to 4.3.3 (or else it blows up, at least on OSX)

* Sat Apr 27 10:33:35 2013 -0700

    Sodium update

* Sat Apr 27 09:26:06 2013 -0700

    Don't ignore *.s

* Thu Apr 25 23:39:12 2013 -0700

    Move build status up

* Thu Apr 25 23:38:14 2013 -0700

    Add build status

* Thu Apr 25 23:32:59 2013 -0700

    Let Travis build dnscrypt with plugins support

* Thu Apr 25 23:26:25 2013 -0700

    -Wbounded is nice, but clang reports the same thing nowadays.

* Thu Apr 25 23:07:21 2013 -0700

    Add before_script for Travis

* Thu Apr 25 22:57:29 2013 -0700

    Bump Android NDK version

* Thu Apr 25 22:53:40 2013 -0700

    Sodium update

* Thu Apr 25 14:45:52 2013 -0700

    Switch to the read-only reference to libsodium

* Wed Apr 24 20:45:45 2013 -0700

    Sync

* Wed Apr 24 20:41:25 2013 -0700

    Import .travis.yml

* Wed Apr 24 13:52:57 2013 -0700

    Ship Sodium 0.4

* Wed Apr 24 08:49:20 2013 -0700

    Sodium update

* Tue Apr 23 20:51:27 2013 -0700

    Use sodium_memcmp() instead of a private version.

* Mon Apr 22 13:24:54 2013 -0700

    Sync libsodium

* Mon Apr 22 13:24:43 2013 -0700

    Disable ssp by default on MingW

* Mon Apr 22 13:01:58 2013 -0700

    Update NEWS & ChangeLog

* Mon Apr 22 11:25:15 2013 -0700

    Sync sodium

* Mon Apr 22 10:37:18 2013 -0700

    Sodium update

* Fri Apr 19 16:09:46 2013 +0200

    Sync libsodium. Now with curve25519_donna_c64

* Fri Apr 19 14:26:17 2013 +0200

    sodium_shutdown() is gone

* Fri Apr 19 11:24:21 2013 +0200

    Add missing #include <stdint.h> for SIZE_MAX

* Thu Apr 18 19:16:23 2013 +0200

    sodium_init() doesn't accept options any more.

* Thu Apr 18 15:39:02 2013 +0200

    Sync libsodium

* Thu Apr 18 14:32:03 2013 +0200

    Remove a useless function call

* Thu Apr 18 14:30:02 2013 +0200

    Call sodium_init() / sodium_shutdown()

* Thu Apr 18 13:58:31 2013 +0200

    Just use randombytes_salsa20_implementation

* Thu Apr 18 11:07:20 2013 +0200

    Pass the entire ac_config_args content to other autoconf scripts

* Wed Apr 17 21:46:12 2013 +0200

    Use Android toolchain 4.6

* Wed Apr 17 09:00:08 2013 +0200

    Save a line

* Wed Apr 17 08:57:51 2013 +0200

    Add a new --loglevel option to change the log verbosity.

* Wed Apr 17 08:44:16 2013 +0200

    Update libsodium

* Wed Apr 17 08:33:10 2013 +0200

    Redefine log levels for Win32

* Fri Apr 12 08:24:29 2013 +0200

    github.com -> github.io

* Tue Apr 2 20:20:09 2013 -0700

    Sync libsodium

* Tue Apr 2 20:19:11 2013 -0700

    Pass a few extra autoconf options form the main autoconf script to libsodium's

* Sun Mar 31 13:40:25 2013 -0700

    Typo

* Mon Mar 25 11:59:11 2013 -0700

    Update ChangeLog

* Mon Mar 25 11:58:36 2013 -0700

    Yay for better performance

* Mon Mar 25 11:51:07 2013 -0700

    Sync libsodium, with the ref10 implementation of ed25519

* Mon Mar 18 23:32:44 2013 -0700

    sync libsodium

* Mon Mar 18 21:52:08 2013 -0700

    Farewell, dnscrypt_memzero(). Sodium provides sodium_memzero() to do that.

* Sun Mar 17 16:08:33 2013 -0700

    Add libsodium as a submodule

* Sun Mar 17 16:08:01 2013 -0700

    Remove libsodium copy

* Sun Mar 17 16:00:40 2013 -0700

    Sync libsodium

* Sun Mar 17 15:55:27 2013 -0700

    Add test-script.sh

* Sun Mar 17 13:11:42 2013 -0700

    Resurrect example-ldns-opendns-set-client-ip, it's very useful for support

* Mon Mar 11 22:27:37 2013 -0700

    Remove -fcatch-undefined-c99-behavior, will be replaced by -fsanitize=integer

* Fri Mar 8 09:07:36 2013 -0800

    Define HAVE_* and CROSS_COMPILING to 1 instead of just defining them.

* Fri Mar 1 15:47:57 2013 -0800

    Fix include path to libsodium

* Fri Mar 1 14:11:39 2013 -0800

    Bump fpm package version

* Tue Feb 19 13:38:37 2013 -0800

    libevent update to b618204216235d5998080c659c8ad53185fdf206

* Fri Feb 8 01:26:47 2013 -0800

    Back to a stable Xcode version

* Fri Feb 8 01:24:15 2013 -0800

    Update Android NDK to r8d

* Fri Feb 8 01:12:38 2013 -0800

    Update NEWS

* Fri Feb 8 01:09:08 2013 -0800

    Update .gitignore

* Fri Feb 8 01:07:07 2013 -0800

    Update ChangeLog

* Fri Feb 8 01:06:07 2013 -0800

    Rename libevent to libevent-modified to avoid confusion.
    Our version of libevent ships with some changes required for dnscrypt-proxy to
    work. These will eventually be submitted upstream after libevent 2.1 gets
    released.

* Mon Feb 4 23:50:00 2013 -0800

    libsodium already provides crypto_box_MACBYTES

* Mon Feb 4 23:46:17 2013 -0800

    Next will be 1.3.0.

* Mon Feb 4 23:41:49 2013 -0800

    Switch to libsodium.

* Mon Feb 4 14:42:17 2013 -0800

    Paranoia

* Mon Jan 28 14:14:46 2013 -0800

    Update ChangeLog

* Mon Jan 28 14:10:26 2013 -0800

    autoconf 2.68 broke $(top_srcdir) for tests

* Mon Jan 28 14:03:46 2013 -0800

    AM_CONFIG_HEADER -> AC_CONFIG_HEADER

* Mon Jan 28 13:58:42 2013 -0800

    Update ChangeLog

* Mon Jan 28 13:57:35 2013 -0800

    Update iphone.sh

* Mon Jan 28 13:57:21 2013 -0800

    libevent c322c2077e2d16f64ed3a90f74ad714842600624

* Mon Jan 21 20:50:20 2013 -0800

    Add -Wsometimes-uninitialized

* Mon Jan 21 19:23:40 2013 -0800

    Check for HAVE_SECUREZEROMEMORY at compile-time.

* Mon Jan 21 11:54:19 2013 -0800

    Use SecureZeroMemory() on Windows

* Sun Jan 20 10:05:27 2013 -0800

    Update ChangeLog

* Sun Jan 20 09:51:46 2013 -0800

    Update URL. Github downloads are no more.

* Sat Jan 19 16:45:49 2013 -0800

    Remove cpp wrappers

* Sat Jan 19 16:41:39 2013 -0800

    Drop PROTOTYPES.cpp

* Sun Jan 6 21:49:09 2013 -0800

    Fix markdown link

* Sun Jan 6 21:47:35 2013 -0800

    Add a link to the home page

* Sun Jan 6 21:43:49 2013 -0800

    Mention dnscrypt-wrapper

* Sun Jan 6 21:40:52 2013 -0800

    Next version will be 1.2.1, I suppose.

* Sun Jan 6 21:38:39 2013 -0800

    Use size_t for TXT total size, remove extra parenthesis.

Merge: 0b31df8 3dc4690
* Sun Jan 6 21:29:40 2013 -0800

    Support merging txt strings into one.
    Some dns managers split long binary data into more than one strings
    (e.g. linode.com)
    Merge remote-tracking branch 'cofyc/merge_txts'
    By Yecheng Fu

* Sun Jan 6 20:47:51 2013 -0800

    Update OSX client link.

* Wed Jan 2 08:56:29 2013 -0800

    levent: configure.in files have been deprecated for a while. Rename.

* Wed Jan 2 08:50:03 2013 -0800

    A global COPYING file is enough

* Tue Jan 1 00:37:41 2013 -0800

    2013

* Sat Dec 22 17:14:04 2012 -0800

    levent: Avoid double-close on getsockname error in evutil_ersatz_socketpair
    Avoid leaking fds on evconnlistener with no callback set

* Fri Dec 7 08:31:02 2012 -0800

    levent - Fix compilation with WIN32_HAVE_CONDITION_VARIABLES enabled.

* Thu Nov 22 02:34:32 2012 +0800

    improve: support merging txt strings into one
    some dns manager split long binary data into more than one strings (e.g. linode.com)

* Mon Nov 19 09:10:24 2012 -0800

    Update libevent to 2.0.21-stable-dev.

* Thu Nov 15 22:15:32 2012 -0800

    Sync libevent2 - fix OpenSSL renegotiation test with old OpenSSL version.

Merge: c128bd9 ce9b890
* Tue Nov 13 14:17:21 2012 -0800

    Merge remote-tracking branch 'origin/master'
    
    * origin/master:
      Added profile/repo_name so the packages/gentoo folder can be used as a portage overlay
      Updated Gentoo ebuild for v1.2.0

Merge: 20e9dd1 57e0296
* Tue Nov 13 14:12:12 2012 -0800

    Merge pull request #38 from Strayer/gentoo_ebuild_v1.2.0
    
    Bumped Gentoo ebuild to v1.2.0

* Tue Nov 13 22:31:20 2012 +0100

    Added profile/repo_name so the packages/gentoo folder can be used as a portage overlay

* Tue Nov 13 21:33:10 2012 +0100

    Updated Gentoo ebuild for v1.2.0
    
    - updated conf and init script according to parameter changes in v1.1.0

* Sat Nov 3 12:46:52 2012 -0700

    Add a build script for 32-bit versions of OSX binaries.

* Sat Nov 3 10:34:07 2012 -0700

    levent updates, so that 64-bit versions for Windows can be built.

Merge: 23eaeeb 9f7c132
* Sun Oct 28 10:11:45 2012 -0700

    Merge remote-tracking branch 'marguerite/master'
    
    * marguerite/master:
      fix a hang-on-boot bug in systemd. update opensuse license

* Sun Oct 28 09:56:20 2012 -0700

    libevent2 updates.

* Wed Oct 24 01:01:15 2012 +0800

    fix a hang-on-boot bug in systemd. update opensuse license

* Sun Oct 21 22:21:21 2012 -0700

    Add Marguerite Su to the THANKS file.

* Sun Oct 21 22:17:20 2012 -0700

    Take the systemd service definition off the root directory.

* Sun Oct 21 22:16:56 2012 -0700

    Minor tweaks to the OpenSuSE description.

Merge: f0b3120 857f0cc
* Sun Oct 21 22:05:41 2012 -0700

    Merge pull request #36 from marguerite/master
    
    add opensuse package, and systemd service for dnscrypt

* Mon Oct 22 12:59:47 2012 +0800

    add opensuse pacages, systemd servce

* Fri Oct 19 16:35:07 2012 -0700

    The OSX GUI is mainly a collection of shell scripts, nowadays.

* Wed Oct 17 22:54:28 2012 -0700

    Insame => insane

* Sat Oct 13 22:13:25 2012 -0700

    Remove OpenBSD port, since it is now in the official ports tree.

* Fri Oct 12 08:29:42 2012 -0700

    Change the blurb to something closer to the awesome summary by sthen@

* Thu Oct 11 18:39:41 2012 -0700

    Update the Homebrew formula to 1.2.0

* Thu Oct 11 18:31:12 2012 -0700

    Update the OpenBSD package to 1.2.0

* Thu Oct 11 10:12:04 2012 -0700

    Mention that DCP_SYNC_FILTER_RESULT_DIRECT is only for a pre-filter.

* Thu Oct 11 08:23:37 2012 -0700

    Update ChangeLog

* Wed Oct 10 22:33:49 2012 -0700

    Set the RA flag in direct responses.

* Wed Oct 10 21:53:00 2012 -0700

    Set the QR bit when sending an empty AAAA reply.

* Wed Oct 10 21:49:25 2012 -0700

    Log short UDP replies

* Wed Oct 10 13:28:26 2012 -0700

    Group Windows changes together.

* Wed Oct 10 13:27:37 2012 -0700

    Whitespace.

* Wed Oct 10 13:26:55 2012 -0700

    Update link

* Wed Oct 10 13:25:55 2012 -0700

    1.2.0

* Wed Oct 10 13:22:28 2012 -0700

    Document that gcc 3.4.6 with a Mips target produces broken code with -Os

* Wed Oct 10 13:14:03 2012 -0700

    Add missing return statement in the ldns-blocking example.

* Wed Oct 10 12:19:19 2012 -0700

    Update NEWS/ChangeLog

* Wed Oct 10 12:15:13 2012 -0700

    The plugin API has changed, 1.1.1 sounds weird, so let's go 1.2.0.

* Wed Oct 10 11:51:24 2012 -0700

    Add a new plugin to return an empty response to AAAA queries.

* Tue Oct 9 23:12:41 2012 -0700

    Update ChangeLog

* Tue Oct 9 23:12:06 2012 -0700

    Document the new DIRECT return code for pre-filters.

* Tue Oct 9 23:06:08 2012 -0700

    Well, not all plugins have been removed.

* Tue Oct 9 22:58:09 2012 -0700

    Document the direct mode.

* Tue Oct 9 22:55:11 2012 -0700

    Implement direct mode for TCP.

* Tue Oct 9 22:42:07 2012 -0700

    Start sending direct replies.

* Tue Oct 9 17:54:35 2012 -0700

    Prepare proxy code for DCP_SYNC_FILTER_RESULT_DIRECT

* Tue Oct 9 17:37:25 2012 -0700

    Bump API version minor.

* Tue Oct 9 17:36:39 2012 -0700

    Prepare for DCP_SYNC_FILTER_RESULT_DIRECT.

* Tue Oct 9 17:11:26 2012 -0700

    Indent

* Tue Oct 9 16:51:56 2012 -0700

    Include Windows quirks in NaCl test, too.

* Tue Oct 9 13:47:59 2012 -0700

    Spaces, blah.

Merge: de7bb89 854e2c9
* Tue Oct 9 13:45:48 2012 -0700

    Merge branch 'master' of https://github.com/jedisct1/dnscrypt-proxy
    
    * 'master' of https://github.com/jedisct1/dnscrypt-proxy:
      Detect things like C:/x/y and C:\x\y as absolute paths to Windows plugins.

* Tue Oct 9 10:28:18 2012 -0700

    Resurect the deviceid plugin, as OpenDNS folks really need it.

* Tue Oct 9 10:28:18 2012 -0700

    Detect things like C:/x/y and C:\x\y as absolute paths to Windows plugins.

* Tue Oct 9 07:54:48 2012 -0700

    Revert "ldns requires socklen_t but Win32 doesn't have it."
    This has been fixed in ldns 1.6.14.

* Mon Oct 8 23:53:19 2012 -0700

    Update URL

* Mon Oct 8 23:51:40 2012 -0700

    Missing "the".

* Mon Oct 8 23:43:28 2012 -0700

    Check ldns_resolver_new_frm_file() return code.

* Mon Oct 8 23:42:54 2012 -0700

    If a new release ever sees the light, it will be 1.1.1.

* Mon Oct 8 23:29:45 2012 -0700

    Update ChangeLog

* Mon Oct 8 23:29:28 2012 -0700

    Update NEWS

* Mon Oct 8 23:28:56 2012 -0700

    Update URL.

* Mon Oct 8 23:18:47 2012 -0700

    Off-topic, but document how to compile ldns on Windows.

* Mon Oct 8 21:41:49 2012 -0700

    ldns requires socklen_t but Win32 doesn't have it.
    So, define it on Win32.

* Sat Oct 6 09:54:22 2012 -0700

    Remove OpenDNS-related plugins.

* Sat Oct 6 09:36:02 2012 -0700

    Remove some sample plugins.

* Fri Oct 5 10:34:35 2012 -0700

    Remove UDP_REQUEST_NO_RETRIES. Always support retries.

* Wed Oct 3 21:27:23 2012 -0700

    Enforce a 2 second timeout.

* Wed Oct 3 16:50:20 2012 -0700

    forward-after-nxdomain: allow 1 extra byte for the response if needed.

* Wed Oct 3 16:05:45 2012 -0700

    Initial forward-after-nxdomain plugin implementation.

* Tue Oct 2 20:24:38 2012 -0700

    Update ChangeLog

* Sat Sep 29 22:38:06 2012 +0200

    Thanks, RotBlitz

* Sat Sep 29 22:25:01 2012 +0200

    People are still running dnscrypt on old CPUs. Compile for Pentium 2 on Windows.

* Sat Sep 29 17:05:05 2012 +0200

    Trim down optimization flags for Windows

* Wed Sep 26 11:26:07 2012 +0200

    ChangeLog updates

* Tue Sep 25 21:00:12 2012 +0200

    Stick to PACKAGE_STRING for the version, it's easier to parse.

* Tue Sep 25 19:44:44 2012 +0200

    Remove the FreeBSD package.

* Tue Sep 25 19:35:06 2012 +0200

    Unfuck pkgsrc packages on Dragonfly BSD.

* Tue Sep 25 19:19:44 2012 +0200

    Update the NetBSD / Dragonfly BSD port. Plugin-less for now.

* Tue Sep 25 19:01:15 2012 +0200

    Factorize dependencies

* Tue Sep 25 17:51:25 2012 +0200

    PERMIT_PACKAGES => Yes

* Tue Sep 25 17:48:19 2012 +0200

    Major update to the OpenBSD package. Build plugins as a subpackage.

* Tue Sep 25 16:03:23 2012 +0200

    Improve the Homebrew formula after adamv@ review

* Tue Sep 25 15:35:27 2012 +0200

    Enable plugins in the Linux packages

* Tue Sep 25 15:31:26 2012 +0200

    Update fpm port

* Tue Sep 25 15:17:24 2012 +0200

    Switch from tar-pax to tar-ustar because OpenBSD's tar(1) is confused with
    POSIX archives.

* Tue Sep 25 15:07:55 2012 +0200

    Update the OpenBSD port to 1.1.0

* Tue Sep 25 13:55:34 2012 +0200

    Lion -> Mountain Lion

* Mon Sep 24 23:48:57 2012 +0200

    Allow reading an OpenDNS device id from an environment variable named
    OPENDNS_DEVICE_ID as an alternative to giving it as an argument to the
    opendns_deviceid plugin. This information shouldn't be visible in the
    process name.

* Mon Sep 24 23:03:18 2012 +0200

    Update the Homebrew package.

* Mon Sep 24 22:48:52 2012 +0200

    Use tar-pax because some plugins files names are > 99 chars long.

* Mon Sep 24 19:55:01 2012 +0200

    Don't use brackets in doxygen doc except for headers.

* Mon Sep 24 17:25:18 2012 +0200

    ChangeLog

* Mon Sep 24 17:24:40 2012 +0200

    Enable support for plugins in Windows builds.

* Mon Sep 24 17:20:08 2012 +0200

    Require plugins to mention DCPLUGIN_MAIN(__FILE__);

* Mon Sep 24 15:58:58 2012 +0200

    Update the ChangeLog, again.

* Mon Sep 24 15:56:18 2012 +0200

    Android and iPhone build scripts have been moved.

* Mon Sep 24 15:53:57 2012 +0200

    Update ChangeLog

* Mon Sep 24 15:53:38 2012 +0200

    Mention the example plugins.

* Mon Sep 24 15:28:25 2012 +0200

    Can you seriously expect Windows to implement putc_unlocked()? LOL.

* Mon Sep 24 15:04:32 2012 +0200

    Ensure that assertions are always turned on.

* Mon Sep 24 14:06:55 2012 +0200

    Add missing return statement.

* Mon Sep 24 13:55:07 2012 +0200

    Update the ChangeLog

* Mon Sep 24 13:54:24 2012 +0200

    Spaces vs tabs. Fu fu fu fu fuuuuuuuu

* Mon Sep 24 13:52:31 2012 +0200

    libevent: arc4random_buf() doesn't return a value. Fix ev_arc4random_buf().

* Sun Sep 23 21:49:27 2012 +0200

    logging plugin: display a dot for a query for dot (duh!).

* Sun Sep 23 21:45:48 2012 +0200

    Zap the final dot in a name before doing pattern matching on it.

* Sun Sep 23 21:31:56 2012 +0200

    Don't use ldns wildcard matching, match * everywhere instead.
    People want to filter things like *xxx*, so let them do that.

* Sun Sep 23 18:23:50 2012 +0200

    Init the locale.

* Sat Sep 22 23:14:05 2012 +0200

    example-logging: bump the minimal required length up.

* Sat Sep 22 23:11:46 2012 +0200

    Update the ChangeLog

* Sat Sep 22 23:05:53 2012 +0200

    Add a new plugin that logs queries.

* Sat Sep 22 21:56:09 2012 +0200

    Add WARNING for plugins.

* Sat Sep 22 21:46:56 2012 +0200

    Don't include the full path to a plugin in examples.

* Sat Sep 22 21:43:18 2012 +0200

    Use strcasecmp() in order to caselessly compare IPv6 addresses.

* Sat Sep 22 21:39:09 2012 +0200

    Rewrite the ldns-blocking plugin, so that it can block any name and IP address.
    This plugin can be very useful in order to block ads and buggy replies.

* Wed Sep 19 17:35:51 2012 +0200

    Move build scripts to a dist-build directory, add one for osx.

* Wed Sep 19 15:40:57 2012 +0200

    Update ChangeLog

* Wed Sep 19 15:38:55 2012 +0200

    Plugins can now be loaded from a default directory ($pkglibdir).
    In addition, a new configure flag, --enable-plugins-root, disallows loading
    plugins outside this directory.

* Tue Sep 18 04:05:18 2012 +0200

    README-WINDOWS: ...\dnscrypt-proxy\Parameters is confusing, as "parameters"
    can be understood as a variable. So, add an example.
    Explain how plugins should be specified by the way.

* Tue Sep 18 04:04:58 2012 +0200

    Indentatino :)

* Sun Sep 16 21:16:08 2012 +0200

    A new configure flag, --disable-pie, can disable position-independent executables.
    A bad idea, but required by some OS.

* Thu Sep 13 16:10:41 2012 -0700

    Merge 1.1.0 changelog, since there will probably be no more RC.

* Thu Sep 13 15:53:05 2012 -0700

    Import example-ldns-blocking.c

* Thu Sep 13 13:41:33 2012 -0700

    Update ChangeLog

* Thu Sep 13 13:30:16 2012 -0700

    -fdata-sections -ffunction-sections doesn't seem very useful on Windows

* Thu Sep 13 13:16:22 2012 -0700

    Having new lines in flags is a bad idea.

* Thu Sep 13 13:13:16 2012 -0700

    Import a script to build the proxy on Win32

* Thu Sep 13 12:42:32 2012 -0700

    Silent MingW.

* Thu Sep 13 11:59:51 2012 -0700

    Update ChangeLog

* Thu Sep 13 11:59:28 2012 -0700

    Introduce --enable-relaxed-plugins-permissions

* Thu Sep 13 11:42:07 2012 -0700

    If the proxy is run as root, refuse to load a plugin not owned by root.
    Yes, it's still totally racy, and not super useful, but better than nothing.

* Thu Sep 13 11:31:55 2012 -0700

    Xcode 4.5-GM is just called Xcode

* Thu Sep 13 11:25:34 2012 -0700

    Update ChangeLog

* Thu Sep 13 11:09:11 2012 -0700

    Use Xcode 4.5

* Thu Sep 13 10:52:20 2012 -0700

    Pick up the new name for the blocking plugin

* Thu Sep 13 10:51:33 2012 -0700

    Rename example-ldns example-ldns-blocking

* Thu Sep 13 08:59:19 2012 -0700

    1.1.0-RC1 also fixed lookups of multiple TXT records, and thus
    handling of multiple certificates.

* Thu Sep 13 08:55:41 2012 -0700

    Finally, the plugin API has been kinda documented.

* Thu Sep 13 08:40:25 2012 -0700

    Add a link to the API documentation.

* Thu Sep 13 08:34:46 2012 -0700

    Quote

* Thu Sep 13 08:28:09 2012 -0700

    More doc on plugins

* Thu Sep 13 01:05:31 2012 -0700

    Return REFUSED instead of NXDOMAIN when we get a blacklisted IP in a record of a
    response. It makes more sense, and OpenDNS can return the same IP for different
    reasons, not only NXDOMAIN.

* Wed Sep 12 22:54:35 2012 -0700

    Start documenting plugins

* Wed Sep 12 22:54:20 2012 -0700

    Untab README-WINDOWS

* Wed Sep 12 22:17:42 2012 -0700

    Update NEWS

* Wed Sep 12 21:12:58 2012 -0700

    Update ChangeLog

Merge: f568bce beac641
* Wed Sep 12 20:39:23 2012 -0700

    Merge branch 'master' of https://github.com/jedisct1/dnscrypt-proxy
    
    * 'master' of https://github.com/jedisct1/dnscrypt-proxy:
      In sendto_with_retry(), free()ing the timer beforehand is a good idea but turning that in a different use-after-free is not.
      Initialize dcps at the right place. I'm just totally unable to write a single line of code when I am at the office.
      The sendto_retry timer should be free()d before the callback, or else we end up with a big bad use after free and an even bigger and badder double free.
      Initialize dcps before using it, duh. It used to make virtually any plugin crash before it even had a chance to load on Linux, and on platforms it used to work on, it worked by accident. Reported by @transitorykris, confirmed by Valgrind.

* Wed Sep 12 20:32:07 2012 -0700

    Update ChangeLog

* Wed Sep 12 20:31:35 2012 -0700

    Sync libevent, fix two memory leaks in evdns.

* Wed Sep 12 22:19:42 2012 +0200

    In sendto_with_retry(), free()ing the timer beforehand is a good idea
    but turning that in a different use-after-free is not.

* Wed Sep 12 21:00:32 2012 +0200

    Initialize dcps at the right place. I'm just totally unable to write a
    single line of code when I am at the office.

* Wed Sep 12 20:55:05 2012 +0200

    The sendto_retry timer should be free()d before the callback, or else we
    end up with a big bad use after free and an even bigger and badder
    double free.

* Wed Sep 12 20:29:40 2012 +0200

    Initialize dcps before using it, duh.
    It used to make virtually any plugin crash before it even had a chance
    to load on Linux, and on platforms it used to work on, it worked by
    accident.
    Reported by @transitorykris, confirmed by Valgrind.

* Tue Sep 11 21:36:26 2012 -0700

    The set-client-ip plugin also allows applying network settings when using IPv6

* Tue Sep 11 21:06:51 2012 -0700

    set-client-ip: randomize the fodder

* Tue Sep 11 20:50:58 2012 -0700

    More data set-client-ip needs.

* Tue Sep 11 19:13:34 2012 -0700

    The set-client-ip plugin needs more data in order to properly apply the
    network settings.

* Mon Sep 10 13:12:47 2012 -0700

    Improve documentation for the set-client-ip plugin.

* Mon Sep 10 12:57:29 2012 -0700

    Update ChangeLog.

* Mon Sep 10 12:51:46 2012 -0700

    More descriptions

* Mon Sep 10 12:47:46 2012 -0700

    More descriptions

* Mon Sep 10 12:33:10 2012 -0700

    Document example-ldns-opendns-deviceid

* Mon Sep 10 10:51:45 2012 -0700

    Add a simple example plugin to change the client IP when talking to OpenDNS resolvers.

* Sun Sep 9 22:40:07 2012 -0700

    Thank you, Black Roland!

* Sun Sep 9 11:06:55 2012 -0700

    Move the GUIs section up

* Sun Sep 9 09:58:05 2012 -0700

    Reorder the Android build script so that TARGET_TOOLCHAIN_VERSION is defined
    before it is used :)

* Sun Sep 9 09:49:20 2012 -0700

    Add Android

* Sun Sep 9 09:42:23 2012 -0700

    That was --resolver-port

* Sun Sep 9 09:41:35 2012 -0700

    Mention that --local-port and --remote-port are gone for good.

* Sun Sep 9 00:12:12 2012 -0700

    Don't lie about why TCP is slow.

* Thu Sep 6 17:42:15 2012 -0700

    Dash

* Thu Sep 6 17:41:57 2012 -0700

    Update ChangeLog. It's 1.1.0-rc1 for now.

* Thu Sep 6 17:35:35 2012 -0700

    Bump revision to 1.1.0rc1

* Thu Sep 6 13:20:04 2012 -0700

    Don't cast uint32_t values to print them. That's retarded.

* Thu Sep 6 13:16:40 2012 -0700

    Grammar

* Thu Sep 6 10:55:18 2012 -0700

    Update ChangeLog/NEWS.

* Thu Sep 6 10:47:52 2012 -0700

    Rename the .plist file.

* Thu Sep 6 10:35:03 2012 -0700

    Use plugin_long_description() in the null plugin, too.

* Thu Sep 6 10:30:18 2012 -0700

    Add dcplugin_long_description()

* Thu Sep 6 10:16:01 2012 -0700

    Add basic probes for filters.

* Thu Sep 6 00:35:35 2012 -0700

    Retabify, try to match the initial code style.

* Thu Sep 6 00:17:32 2012 -0700

    Update ChangeLog

* Thu Sep 6 00:16:19 2012 -0700

    Check the RR length before any parsing, even if it's redundant.

* Wed Sep 5 23:59:08 2012 -0700

    evdns: store more than 1 TXT record.

* Wed Sep 5 23:58:46 2012 -0700

    Don't assume that only one TXT record will be received.

* Tue Sep 4 00:30:14 2012 -0700

    Add libltdl to SUBDIRS, if plugins are enabled.

* Mon Sep 3 23:35:24 2012 -0700

    80 cols

* Mon Sep 3 23:13:02 2012 -0700

    Windows nits

* Mon Sep 3 22:42:13 2012 -0700

    Add Plugins to the list of Windows registry keys, before I forget.

* Mon Sep 3 22:36:24 2012 -0700

    Parse the "Plugins" key if there is one in the Windows registry.

* Mon Sep 3 22:09:15 2012 -0700

    Windows: implement windows_service_registry_read_multi_sz()

* Mon Sep 3 19:14:15 2012 -0700

    Return NXDOMAIN for an IP that actually needs it.

* Mon Sep 3 17:21:24 2012 -0700

    Display the actual error when a plugin can't be loaded.

* Mon Sep 3 17:12:14 2012 -0700

    Remove example-ldns-opendns-bypass

* Mon Sep 3 17:08:37 2012 -0700

    Display the plugin description if we have one.

* Mon Sep 3 16:49:46 2012 -0700

    Check that a plugin either belongs to root, or would be writeable by whoever
    runs the current process (or at least, by whoever can write to the fs).
    It's not very useful, it's racy, but it's better than nothing.

* Mon Sep 3 13:04:17 2012 -0700

    Wipe the client nonce after uncurving a reply.
    Useful for debugging.

* Mon Sep 3 12:58:23 2012 -0700

    Add tcp post-filters.

* Sun Sep 2 22:13:27 2012 -0700

    No more dns_packet_len, stay consistent between udp_ & tcp_request.c

* Sun Sep 2 22:13:01 2012 -0700

    Regen man pages.

* Sun Sep 2 21:15:18 2012 -0700

    Add prefilters for TCP.

* Sun Sep 2 15:32:55 2012 -0700

    Don't use max_packet_size. When using TCP, the packet size is not the data
    size, so, use the 'packet' terminology to actually mean a packet size, and
    something different to mean a DNS packet.
    No change to the compiled code, but it will help to make things more
    consistent between udp_request.c and tcp_request.c.

* Sun Sep 2 15:23:06 2012 -0700

    Don't use dns_packet*, use dns_(query|reply)* in udp_request.c just like in
    tcp_request.c

* Sun Sep 2 14:21:52 2012 -0700

    The default resolver is 208.67.220.220, not .222.222

* Sun Sep 2 14:18:56 2012 -0700

    The OSX GUI probably works on 32-bit systems now, and the OpenDNS GUI for
    Windows is apparently labeled "OpenDNSCrypt".

* Sun Sep 2 14:18:45 2012 -0700

    Upcase

* Wed Aug 29 21:36:54 2012 -0700

    Add an optional function for describing a plugin.

* Wed Aug 29 21:36:43 2012 -0700

    Rename sample plugins

* Mon Aug 27 15:42:17 2012 -0700

    Rename example-ldns-2 to example-ldns-opendns-deviceid and add the ability
    to provide a device id on the command line.

* Mon Aug 27 11:04:07 2012 -0700

    Add two new OpenDNS-specific example plugins

* Sun Aug 26 09:55:42 2012 -0700

    Regen dnscrypt-proxy man page.

* Sun Aug 26 09:55:30 2012 -0700

    Update ChangeLog

* Fri Aug 24 19:55:48 2012 -0700

    Shrink the default max payload size to 1252 bytes.

* Fri Aug 24 08:47:52 2012 -0700

    Update libevent to 2.0.20

* Mon Aug 20 20:31:54 2012 -0700

    Include the port number in default IPs.
    Restore support for specifying IP addresses without ports.

* Tue Aug 21 10:48:36 2012 -0700

    Update email.

* Fri Aug 17 22:52:24 2012 -0700

    Don't use backtrace on Bitrig

* Thu Aug 16 15:37:58 2012 -0700

    -P and -t are gone for good.

* Tue Aug 7 09:06:03 2012 -0700

    Typo

* Mon Aug 6 10:57:49 2012 -0700

    DP4

Merge: 1128c06 357d1be
* Fri Aug 3 15:10:00 2012 -0700

    Merge branch '1.0.x'
    
    * 1.0.x:
      livevent: Add explicit AC_PROG_SED to configure.in so all autoconfs will expose $(SED) + avoid unused variable declaration.
      When running the proxy as a Windows service, options have to be specified using the registry.
      Bump dnscrypt-proxy homebrew formula

* Fri Aug 3 15:07:56 2012 -0700

    livevent: Add explicit AC_PROG_SED to configure.in so all autoconfs will expose $(SED)
    + avoid unused variable declaration.

* Wed Aug 1 23:21:01 2012 -0700

    When running the proxy as a Windows service, options have to be specified
    using the registry.

* Tue Jul 31 12:41:21 2012 -0700

    Actually install LTDL

* Tue Jul 31 12:08:44 2012 -0700

    Bump dnscrypt-proxy homebrew formula

Merge: 0016faf 18e9180
* Tue Jul 31 11:46:28 2012 -0700

    Merge branch '1.0.x'
    
    * 1.0.x:
      Export droid-gcc variables
      fpm -> 1.0.1
      Update ChangeLog
      If an evdns_getaddrinfo timeout happens while pending_cb is set, and a callback is about to run, but we get a call to evdns_getaddrinfo_gotresolve before it finishes. libevent dc3207767d4f06b31

* Tue Jul 31 11:30:42 2012 -0700

    Export droid-gcc variables

* Tue Jul 31 11:07:24 2012 -0700

    fpm -> 1.0.1

* Tue Jul 31 11:05:11 2012 -0700

    Update ChangeLog

* Tue Jul 31 10:55:50 2012 -0700

    If an evdns_getaddrinfo timeout happens while pending_cb is set, and a
    callback is about to run, but we get a call to evdns_getaddrinfo_gotresolve
    before it finishes.
    libevent dc3207767d4f06b31

* Tue Jul 31 10:55:50 2012 -0700

    If an evdns_getaddrinfo timeout happens while pending_cb is set, and a
    callback is about to run, but we get a call to evdns_getaddrinfo_gotresolve
    before it finishes.
    libevent dc3207767d4f06b31

* Mon Jul 30 19:14:56 2012 -0700

    Always install ltdl

* Mon Jul 30 19:04:18 2012 -0700

    Merge 1.1 to master.

Merge: 0d07695 24e697c
* Mon Jul 30 19:02:01 2012 -0700

    Merge branch 'master' into 1.1
    
    * master:
      Cut the crap. DNS using TCP can actually be faster than UDP. Provided that the resolver supports pipelining.
      Bump NDK to r8b

* Sun Jul 29 13:26:32 2012 -0700

    Cut the crap. DNS using TCP can actually be faster than UDP.
    Provided that the resolver supports pipelining.

* Sun Jul 29 13:16:35 2012 -0700

    Bump NDK to r8b

Merge: c260e87 b12196d
* Sun Jul 29 13:12:24 2012 -0700

    Merge branch 'master' into 1.1
    
    * master:
      Regen man pages
      Mention that in hostip, --resolver-address can include a port number.
      sort
      The --resolver-ip command-line switch is gone. Pointed out by awfulhak@

* Sun Jul 29 13:12:08 2012 -0700

    Regen man pages

* Sun Jul 29 13:01:00 2012 -0700

    Mention that in hostip, --resolver-address can include a port number.

* Sun Jul 29 12:40:45 2012 -0700

    sort

* Sun Jul 29 12:23:43 2012 -0700

    The --resolver-ip command-line switch is gone. Pointed out by awfulhak@

Merge: 51a5d57 2ac78d9
* Thu Jul 26 21:36:31 2012 -0700

    Merge branch 'master' into 1.1
    
    * master:
      Bring libevent patches up to a0912e32068621eb776d678224e4108511d281e3

* Thu Jul 26 21:29:10 2012 -0700

    Bring libevent patches up to a0912e32068621eb776d678224e4108511d281e3
    
        Check more setsockopt return values when binding sockets. Found by coverity
    
        memset sockaddr_in before using it. Found by coverity.
    
        Move assignment outside tt_assert in ssl unit tests. Appeases coverity.
    
        Add checks to various return values in unit tests. Found by coverity
    
        Avoid possible needless call to writev. Found by coverity.
    
        Remove unused variable; spotted by coverity
    
        Avoid more crashes/bad calls in unit tests; found by coverity
    
        Add some missing null checks to unit tests; found by coverity
    
        Fix resource leaks in the unit tests; found by coverity
    
        Fix various check-after-dereference issues in unit tests: found by coverity
    
        Set umask before calling mkstemp in unit tests. Found by coverity
    
        Fix possible uninitialized read in dns regression tests. Found by coverity.
    
        Remove deadcode in http regression tests. Found by coverity.

Merge: 5e7e8a5 82cd026
* Thu Jul 26 14:30:08 2012 -0700

    Merge branch 'master' into 1.1
    
    * master:
      Update ChangeLog
      Gentoo ebuild for dnscrypt-proxy 1.0.
      Grammar
      use --enable-nonblocking-random as suggested by Frank DENIS.
      dnscrypt-proxy 0.9.4.

* Thu Jul 26 13:27:04 2012 -0700

    Update ChangeLog

* Thu Jul 26 16:08:59 2012 -0400

    Gentoo ebuild for dnscrypt-proxy 1.0.

Merge: f3f8357 86d764e
* Thu Jul 26 16:02:19 2012 -0400

    Merge remote-tracking branch 'upstream/master' into lebel

* Thu Jul 26 12:28:58 2012 -0700

    Grammar

Merge: 682ea2d fe1cc6a
* Thu Jul 26 12:27:29 2012 -0700

    Merge branch 'master' into 1.1
    
    * master:
      More links and docs.
      / => \
      Add a README file for Windows.
      Actually start the service.
      Don't parse the command-line if the service is run as a... service.
      Remove Logfile from the registry.
      Support settings pretty much everything through the registry
      Reorder variables
      xor what we get from the system PRG with a HMAC of it. If the system PRG is truly random, it's a no-op. If a way to recover a state given a few CryptGenRandom() stream samples is found, leaked dnscrypt keys will still require breaking SHA2 in order take advantage of this.
      Start reading the configuration from the registry
      Don't bother registering the command-line, since we will use the registry.
      Auto-start the service, and add what it takes to read the registry.
      Read 952 bits (a full SHA256 block + a final one) from the system RNG
      Add code for having a dynamic argv, so that we can use the registry to update it
      Keep the command line switches
      CreateService() dependencies should be an actual NULL string.
      Document the new command-line switches for running the proxy as a service.
      WINDOWS_SERVICE_NAME
      Add --install, --reinstall and --uninstall switches to install as a service.

* Thu Jul 26 12:22:32 2012 -0700

    More links and docs.

* Thu Jul 26 12:17:02 2012 -0700

    / => \

* Thu Jul 26 12:15:22 2012 -0700

    Add a README file for Windows.

* Thu Jul 26 11:59:50 2012 -0700

    Actually start the service.

* Thu Jul 26 11:53:26 2012 -0700

    Don't parse the command-line if the service is run as a... service.

* Thu Jul 26 11:52:58 2012 -0700

    Remove Logfile from the registry.

* Thu Jul 26 11:33:45 2012 -0700

    Support settings pretty much everything through the registry

* Thu Jul 26 00:44:04 2012 -0700

    Reorder variables

* Wed Jul 25 23:32:14 2012 -0700

    xor what we get from the system PRG with a HMAC of it.
    If the system PRG is truly random, it's a no-op.
    If a way to recover a state given a few CryptGenRandom() stream samples is
    found, leaked dnscrypt keys will still require breaking SHA2 in order take
    advantage of this.

* Wed Jul 25 18:23:38 2012 -0700

    Start reading the configuration from the registry

* Wed Jul 25 18:09:09 2012 -0700

    Don't bother registering the command-line, since we will use the registry.

* Wed Jul 25 18:06:49 2012 -0700

    Auto-start the service, and add what it takes to read the registry.

* Wed Jul 25 20:57:42 2012 -0700

    Read 952 bits (a full SHA256 block + a final one) from the system RNG

* Wed Jul 25 08:54:25 2012 -0700

    Allow empty options.

* Wed Jul 25 08:52:20 2012 -0700

    Add code for having a dynamic argv, so that we can use the registry to update it

* Wed Jul 25 00:09:13 2012 -0700

    Keep the command line switches

* Tue Jul 24 22:42:24 2012 -0700

    CreateService() dependencies should be an actual NULL string.

* Tue Jul 24 22:29:39 2012 -0700

    Document the new command-line switches for running the proxy as a service.

* Tue Jul 24 22:19:19 2012 -0700

    WINDOWS_SERVICE_NAME

* Tue Jul 24 22:17:37 2012 -0700

    Add --install, --reinstall and --uninstall switches to install as a service.

Merge: 1966e98 f3dd2c4
* Mon Jul 23 16:54:36 2012 -0700

    Merge branch 'master' into 1.1
    
    * master:
      Head towards 1.0.1
      gitignore libltdl
      Update ChangeLog
      Update NEWS
      WINAPI
      Make the service name overridable
      Make dnscrypt-proxy work as a Windows service.
      Add dnscrypt_proxy_loop_break()

* Mon Jul 23 16:53:37 2012 -0700

    Head towards 1.0.1

* Mon Jul 23 16:51:34 2012 -0700

    gitignore libltdl

* Mon Jul 23 16:51:06 2012 -0700

    Update ChangeLog

* Mon Jul 23 16:49:38 2012 -0700

    Update NEWS

* Mon Jul 23 16:36:59 2012 -0700

    WINAPI

* Mon Jul 23 16:27:02 2012 -0700

    Make the service name overridable

* Mon Jul 23 15:58:51 2012 -0700

    Make dnscrypt-proxy work as a Windows service.

* Mon Jul 23 15:32:29 2012 -0700

    Add dnscrypt_proxy_loop_break()

Merge: b675340 4d62957
* Sun Jul 22 12:56:10 2012 -0700

    Merge branch 'master' into 1.1
    
    * master:
      Add Solaris support.
      Don't define _XPG4_2

* Sun Jul 22 12:37:05 2012 -0700

    Add Solaris support.

* Sun Jul 22 12:31:25 2012 -0700

    Don't define _XPG4_2

Merge: ffa0fa2 d443b5d
* Sat Jul 21 18:14:48 2012 -0700

    Merge branch 'master' into 1.1
    
    * master:
      Update NEWS / ChangeLog
      Target Gingerbread.
      Threads? We don't need threads any more.
      Add a compilation script for Android
      Bump to -j3 :)
      Don't use dtrace when cross-compiling.
      nacl: always include <stdlib.h> when rand*() is needed.
      ensure that libnacl/do is always executable
      Don't use a hardcoded "ranlib" command. It doesn't play well with cross-compilation.
      arpa/inet.h is required for htonl() in cert.c

* Sat Jul 21 18:14:19 2012 -0700

    Update NEWS / ChangeLog

* Sat Jul 21 18:09:57 2012 -0700

    Target Gingerbread.

* Sat Jul 21 18:06:10 2012 -0700

    Threads? We don't need threads any more.

* Sat Jul 21 17:57:48 2012 -0700

    Add a compilation script for Android

* Sat Jul 21 17:56:09 2012 -0700

    Bump to -j3 :)

* Sat Jul 21 17:47:33 2012 -0700

    Don't use dtrace when cross-compiling.

* Sat Jul 21 17:45:01 2012 -0700

    nacl: always include <stdlib.h> when rand*() is needed.

* Sat Jul 21 17:44:50 2012 -0700

    ensure that libnacl/do is always executable

* Sat Jul 21 17:43:20 2012 -0700

    Don't use a hardcoded "ranlib" command. It doesn't play well with cross-compilation.

* Sat Jul 21 17:26:06 2012 -0700

    arpa/inet.h is required for htonl() in cert.c

Merge: f1fa600 be57332
* Fri Jul 20 14:21:42 2012 -0700

    Merge branch 'master' into 1.1
    
    * master:
      Update FreeBSD port
      Update Dragonfly BSD / NetBSD pkg
      Update Homebrew formula
      Update OpenBSD package
      Bump fpm package to 1.0
      Version 1.0

* Fri Jul 20 14:21:10 2012 -0700

    Update FreeBSD port

* Fri Jul 20 14:19:56 2012 -0700

    Update Dragonfly BSD / NetBSD pkg

* Fri Jul 20 14:15:22 2012 -0700

    Update Homebrew formula

* Fri Jul 20 14:12:37 2012 -0700

    Update OpenBSD package

* Fri Jul 20 13:47:35 2012 -0700

    Bump fpm package to 1.0

* Fri Jul 20 13:01:23 2012 -0700

    Version 1.0

* Fri Jul 20 12:12:15 2012 -0700

    Add a second sample plugin

Merge: 0a6a1d6 4747092
* Fri Jul 20 10:58:53 2012 -0700

    Merge branch 'master' into 1.1
    
    * master:
      Update .gitignore to reflect the dnscrypt-proxy->proxy changes

* Fri Jul 20 10:58:43 2012 -0700

    Ignore Doxyfile for now

* Fri Jul 20 10:57:42 2012 -0700

    Update .gitignore to reflect the dnscrypt-proxy->proxy changes

* Fri Jul 20 10:57:12 2012 -0700

    Move plugin code in proxy/ as well.

Merge: 124c97b 4a87920
* Fri Jul 20 10:49:18 2012 -0700

    Merge branch 'master' into 1.1
    
    * master:
      Update autoconf again :)

* Fri Jul 20 10:48:35 2012 -0700

    Update autoconf again :)

Merge: 486243a 165facb
* Fri Jul 20 10:45:54 2012 -0700

    Merge branch 'master' into 1.1
    
    * master:
      Update autoconf

* Fri Jul 20 10:42:45 2012 -0700

    Update autoconf

* Fri Jul 20 10:42:25 2012 -0700

    Prepare another plugin

Merge: b9d22cd 5761595
* Fri Jul 20 09:17:25 2012 -0700

    Merge branch 'master' into 1.1
    
    * master:
      The "dnscrypt-proxy" dir just becomes "proxy" to reduce diff w/ dns-proxy.

* Fri Jul 20 09:16:47 2012 -0700

    The "dnscrypt-proxy" dir just becomes "proxy" to reduce diff w/ dns-proxy.

Merge: d7be569 649fa34
* Fri Jul 20 08:43:14 2012 -0700

    Merge branch 'master' into 1.1
    
    * master:
      Remove uv_alloc_buffer_size leftover from the libuv days.

* Fri Jul 20 08:42:46 2012 -0700

    Remove uv_alloc_buffer_size leftover from the libuv days.

* Fri Jul 20 00:43:52 2012 -0700

    Grammar

* Fri Jul 20 00:02:37 2012 -0700

    Add an example that uses ldns.

* Thu Jul 19 23:54:38 2012 -0700

    Make headers C++-friendly and add a macro for copying a raw packet.

* Thu Jul 19 21:58:13 2012 -0700

    KNF

* Thu Jul 19 21:49:41 2012 -0700

    Ignore unused arguments, in order to keep the example as small as possible.

* Thu Jul 19 15:28:59 2012 -0700

    Use dns_packet_len in TCP code, to reduce the diff with the UDP code.

* Thu Jul 19 15:20:44 2012 -0700

    Typoz

* Thu Jul 19 15:10:30 2012 -0700

    Doxygen the plugin API

* Thu Jul 19 14:35:21 2012 -0700

    UDP post filter

* Thu Jul 19 13:42:41 2012 -0700

    Export version.

* Thu Jul 19 12:48:15 2012 -0700

    Keep libtool up until the plugin context is released.

* Thu Jul 19 12:34:11 2012 -0700

    Add headers to get size_t defined.

* Thu Jul 19 12:32:31 2012 -0700

    Call the first pre-filter.

* Thu Jul 19 12:19:25 2012 -0700

    Looks like duplicate code, but if --tcp-only has been enabled, we don't
    want to call pre-filters.

* Thu Jul 19 12:11:36 2012 -0700

    Prepare pre- and post- filters.

Merge: 7337e74 cb06b13
* Wed Jul 18 23:35:46 2012 -0700

    Merge branch 'master' into 1.1
    
    * master:
      Use CPPFLAGS, not AM_CFLAGS.

* Wed Jul 18 12:36:53 2012 -0700

    Use CPPFLAGS, not AM_CFLAGS.

* Wed Jul 18 22:47:44 2012 -0700

    dcps->argc should always be > 0 now.

* Wed Jul 18 22:45:06 2012 -0700

    Set argv[0] to the plugin path

* Wed Jul 18 22:40:39 2012 -0700

    Don't link ldns, that will only be for some specific plugins.

* Wed Jul 18 22:28:20 2012 -0700

    Disable static libraries for plugins

* Wed Jul 18 22:21:07 2012 -0700

    Log when parsing a --plugin switch fails.

* Wed Jul 18 22:02:07 2012 -0700

    Remove module version.

* Wed Jul 18 21:02:41 2012 -0700

    Fix plugin args

* Wed Jul 18 21:00:42 2012 -0700

    Fix dcplugin_init() prototype.

* Wed Jul 18 20:24:38 2012 -0700

    No need to check for LibLoaderApi.h and WinBase.h any more.

* Wed Jul 18 20:23:53 2012 -0700

    Check if libldns is available.

* Wed Jul 18 19:54:32 2012 -0700

    Add dcplugin_destroy()

* Wed Jul 18 18:20:56 2012 -0700

    Start actually calling plugins.

* Wed Jul 18 18:04:55 2012 -0700

    Start resolving symbols

* Wed Jul 18 17:52:50 2012 -0700

    Load dynamic libraries.

* Wed Jul 18 16:56:33 2012 -0700

    Link plugins with -module

* Wed Jul 18 16:51:16 2012 -0700

    Prepare for loading plugins.

* Wed Jul 18 16:17:41 2012 -0700

    plugin_name -> plugin_file

* Wed Jul 18 16:15:30 2012 -0700

    Store plugin-specific options.

* Wed Jul 18 15:48:49 2012 -0700

    Create and insert plugins.

* Wed Jul 18 14:53:20 2012 -0700

    Use DCPluginSupportContext to handle multiple DCPluginSupport objects.

* Wed Jul 18 14:37:03 2012 -0700

    More infrastructure for plugins.

* Wed Jul 18 13:06:20 2012 -0700

    Document PLUGIN_REVISION

* Wed Jul 18 12:36:53 2012 -0700

    Use CPPFLAGS, not AM_CFLAGS.

* Wed Jul 18 12:06:37 2012 -0700

    <dnscrypt/plugin.h> is what developers should include for writing plugins.

* Wed Jul 18 11:52:36 2012 -0700

    Install dnscrypt headers for plugin developers.

Merge: b3e9707 9c1197d
* Tue Jul 17 21:59:33 2012 -0700

    Merge branch 'master' into 1.1
    
    * master:
      tab

* Tue Jul 17 21:59:14 2012 -0700

    tab

Merge: fb2a7f0 2799372
* Tue Jul 17 21:58:17 2012 -0700

    Merge branch 'master' into 1.1
    
    * master:
      Add explicit dependencies.
      Update autoconf script.

* Tue Jul 17 21:53:08 2012 -0700

    Prepare a simple plugin.

* Tue Jul 17 21:18:53 2012 -0700

    Only build and link ltdl if plugins are enabled.

* Tue Jul 17 21:02:38 2012 -0700

    Add explicit dependencies.

* Tue Jul 17 21:01:20 2012 -0700

    Add some explicit dependencies

* Tue Jul 17 20:55:19 2012 -0700

    Replace dl.[ch] with libltdl

* Tue Jul 17 20:36:13 2012 -0700

    Update autoconf script.

* Tue Jul 17 20:32:30 2012 -0700

    Add libltdl

* Tue Jul 17 20:09:50 2012 -0700

    Add a basic dynamic library loader.

* Tue Jul 17 17:39:25 2012 -0700

    Remove TRIM_PADDING_FROM_REPLIES. We always do.

* Tue Jul 17 17:38:36 2012 -0700

    Move to version 1.0

* Tue Jul 17 17:33:03 2012 -0700

    libevent: Fix a memory leak on error in evhttp_uriencode.
    Not used in dnscrypt-proxy, but we should keep that up to date.

* Tue Jul 17 17:18:45 2012 -0700

    Update ChangeLog

* Tue Jul 17 17:16:59 2012 -0700

    Reenable --enable-debug

* Tue Jul 17 16:58:19 2012 -0700

    Don't double quote CFLAGS.

* Tue Jul 17 16:22:32 2012 -0700

    Change the way we pass the autoconf args to the libevent autoconf script.

* Tue Jul 17 13:05:16 2012 -0700

    fpm -> 0.12

* Tue Jul 17 12:33:08 2012 -0700

    Update ChangeLog for 0.12

* Tue Jul 17 12:01:17 2012 -0700

    Bind UDP listeners first.

* Tue Jul 17 11:56:50 2012 -0700

    Update ChangeLog

* Tue Jul 17 11:48:02 2012 -0700

    Reset ac_configure_args before configuring libevent.
    This fixes the issue with the OpenBSD port, that was reseting both CC and
    CFLAGS.

* Tue Jul 17 11:21:02 2012 -0700

    Use both -fPIE (cc) and -pie (linker) or none.

* Tue Jul 17 11:11:29 2012 -0700

    Restore -pie.
    It breaks the OpenBSD-current port, but unbreaks Linux, aaahhhhhh.

* Tue Jul 17 10:30:58 2012 -0700

    No more rlimit for now.

* Tue Jul 17 09:08:09 2012 -0700

    Don't strip symbols on Debian packages. Screw you, stupid Debian policies.

* Tue Jul 17 08:40:41 2012 -0700

    Start UDP listeners first. They provide an error message when they fail.

* Tue Jul 17 08:37:00 2012 -0700

    Linux doesn't like RLIMIT_NPROC = 0.

* Mon Jul 16 22:47:26 2012 -0700

    Use nonexistent.local instead of nonexistent.example.com
    or else OpenDNS servers can return the "guide" IP instead of NXDOMAIN.

* Mon Jul 16 21:40:01 2012 -0700

    Invert the ifdef logic for retries.

* Mon Jul 16 21:32:45 2012 -0700

    Enable retries.

* Mon Jul 16 21:26:01 2012 -0700

    DNSCrypt 0.12

* Mon Jul 16 21:22:38 2012 -0700

    Fix UDP retries: ditch the retry timer after a successful sendto().

* Mon Jul 16 18:16:39 2012 -0700

    Update FreeBSD port.

* Mon Jul 16 18:14:16 2012 -0700

    Update NetBSD / Dragonfly BSD packages again.

* Mon Jul 16 18:11:02 2012 -0700

    Update OpenBSD package.

* Mon Jul 16 18:01:31 2012 -0700

    Update Homebrew formula.

* Mon Jul 16 17:51:31 2012 -0700

    Bring back _FORTIFY_SOURCE.

* Mon Jul 16 17:49:36 2012 -0700

    Prepare OpenBSD package update.

* Mon Jul 16 17:42:56 2012 -0700

    Add -fwrapv

* Mon Jul 16 17:34:44 2012 -0700

    Update ChangeLog

* Mon Jul 16 17:33:48 2012 -0700

    Nuke -pie for now. It breaks the OpenBSD-current port.

* Mon Jul 16 16:15:02 2012 -0700

    Update NetBSD / Dragonfly BSD package

* Mon Jul 16 16:00:25 2012 -0700

    Bump Homebrew package

* Mon Jul 16 15:07:56 2012 -0700

    Cleanup dist-files

* Mon Jul 16 15:00:38 2012 -0700

    Bump fpm packages to 0.11

* Mon Jul 16 14:53:24 2012 -0700

    Screw you, gcc

* Mon Jul 16 14:49:47 2012 -0700

    gcc nits

* Mon Jul 16 14:40:01 2012 -0700

    Disable UDP sendto() retries for now.

* Mon Jul 16 14:21:26 2012 -0700

    0.11

* Mon Jul 16 14:05:59 2012 -0700

    Check for -W combos, not for individual switches.

* Mon Jul 16 14:05:46 2012 -0700

    Add config.guess patch for bitrig to the tree.

* Mon Jul 16 13:50:15 2012 -0700

    Try harder to trigger the gcc warning bug.

* Mon Jul 16 13:44:38 2012 -0700

    Move clang detection

* Mon Jul 16 13:39:33 2012 -0700

    Update Changelog

* Mon Jul 16 13:38:48 2012 -0700

    Improve ax_check_compile_flag by adding an unused variable in order to
    always trigger a non-fatal compiler warning.

* Mon Jul 16 13:31:01 2012 -0700

    Ignore unknown warnings only if we are using clang.

* Mon Jul 16 13:23:00 2012 -0700

    Remove -Wno-unknown-warning-option because of this stupid gcc.

* Mon Jul 16 12:57:59 2012 -0700

    libevent Win32: avoid crash when waiting forever on zero fds.

* Mon Jul 16 12:57:21 2012 -0700

    Explicitly mention libtool in the autoconf script.

* Mon Jul 16 12:41:46 2012 -0700

    Run sandbox_init() only if it's not a stub.

* Mon Jul 16 11:55:57 2012 -0700

    Update Changelog

* Mon Jul 16 11:55:40 2012 -0700

    Xcode 4.5DP3

* Mon Jul 16 11:53:58 2012 -0700

    Test --tcp-only

* Mon Jul 16 11:36:48 2012 -0700

    Update dist-files

* Mon Jul 16 11:35:42 2012 -0700

    opendnscache-proxy was the name of dnscrypt 1 year ago.
    Rename it to dnscrypt-proxy.

* Mon Jul 16 11:32:24 2012 -0700

    Mention PowerDNS.

* Mon Jul 16 11:29:54 2012 -0700

    And Gemfile and more tests.

* Mon Jul 16 11:01:52 2012 -0700

    Exit with 1 when an invalid option is given in hostip, too.

* Mon Jul 16 10:43:52 2012 -0700

    Exit with 1 when an unknown option is given.

* Mon Jul 16 00:34:06 2012 -0700

    Revert to always using -fstack-protector-all on Windows.
    If it fails outside the MingW environment, either do some magic to
    statically link it, or use --disable-ssp if you're desperate.

* Sun Jul 15 23:58:37 2012 -0700

    Statically link libssp on Windows.

* Sun Jul 15 23:12:15 2012 -0700

    Windoz nitz

* Sun Jul 15 22:58:29 2012 -0700

    Add --disable-ssp option for platforms lacking libssp. (sad)

* Sun Jul 15 21:50:18 2012 -0700

    Ignore deprecated declarations warnings for sandbox*()

* Sun Jul 15 21:50:08 2012 -0700

    Reorder

* Sun Jul 15 21:42:14 2012 -0700

    Try to better detect Windows targets.

* Sun Jul 15 21:00:24 2012 -0700

    Copy with Winsock2 prototypes.

* Sun Jul 15 21:00:10 2012 -0700

    Use ev_socklen_t everywhere.

* Sun Jul 15 20:50:42 2012 -0700

    Update noops for systems without dtrace.

* Sun Jul 15 17:23:58 2012 -0700

    Update NEWS / ChangeLog

* Sun Jul 15 17:17:52 2012 -0700

    Deprecate --local-port and --resolver-port

* Sun Jul 15 17:08:11 2012 -0700

    Use some crazy heuristics to support ip:port addresses as well as the old
    format --x-address and --x-port.

* Sun Jul 15 17:02:50 2012 -0700

    Export evutil_format_sockaddr_port()

* Sun Jul 15 16:04:47 2012 -0700

    Update NEWS/ChangeLog

* Sun Jul 15 15:58:19 2012 -0700

    Remove pwnam comments.

* Sun Jul 15 15:39:29 2012 -0700

    Rename SendtoWithRetryCbCtx to SendtoWithRetryCtx

* Sun Jul 15 15:24:12 2012 -0700

    Retries is zero, already, thanks to calloc().

* Sun Jul 15 15:23:29 2012 -0700

    Support retries on Windows.

* Sun Jul 15 14:46:41 2012 -0700

    Retry every second. On relevant errors only. At least on !_WIN32.
    Windows roots are the DOS, anyway.

* Sun Jul 15 14:20:55 2012 -0700

    Retry on UDP sendto() error.
    We should only do that on non-fatal errors only.
    Which means testing for different error codes on Windows. Bleh.

* Sun Jul 15 12:50:51 2012 -0700

    Factorize sendto() calls and pave the way for retrying on non-fatal errors.

* Fri Jul 13 10:26:58 2012 -0700

    Port 443 is already the default.

* Thu Jul 12 15:04:18 2012 -0700

    Don't assert(! TAILQ_EMPTY()) unless the request has actually been inserted in
    the list of queued requests.
    Should fix issue #19.

* Thu Jul 12 14:24:45 2012 -0700

    hostip: add things Windows needs in order to get the in6_addr structure defined

* Wed Jul 11 14:26:54 2012 -0700

    Check for setrlimit() existence.

* Wed Jul 11 14:25:42 2012 -0700

    Restrict a bit more what processes can do.

* Mon Jul 9 18:14:08 2012 -0700

    Build hostip last.

* Fri Jul 6 21:37:12 2012 -0700

    Indentation nits...

* Fri Jul 6 21:31:55 2012 -0700

    Update ChangeLog, bump version to 0.11

* Fri Jul 6 21:28:30 2012 -0700

    Introduce hostip(8), a tool for resolving a name before dnscrypt-proxy starts.
    It should help fighting the chicken-and-egg issue seen on routers, where
    dnscrypt-proxy requires a working NTP server, but the NTP server requires
    a working resolver.

* Fri Jul 6 19:38:26 2012 -0700

    Useless indentation nits.

* Mon Jul 2 23:35:17 2012 -0700

    Use ioctl() instead of fnctl(fnctl()) as much as possible. Saves 1 syscall.

* Mon Jul 2 16:10:30 2012 -0700

    Define getpwnam() and struct passwd if getpwnam(3) exists but the headers don't.

* Tue Jun 26 13:59:34 2012 -0700

    Xcode 4.5 DP2

* Sun Jun 24 23:55:10 2012 -0700

    Bump Linux packages to 10.0.1

* Sun Jun 24 23:47:40 2012 -0700

    Update ChangeLog

* Sun Jun 24 15:45:48 2012 -0700

    Current dev version is 0.10.1

* Sun Jun 24 15:12:42 2012 -0700

    chroot() as soon as we can again. Drop libevent2's evdns arc4random() to use
    our chroot()-proof salsa20_random() function instead.

* Sun Jun 24 15:08:11 2012 -0700

    libevent: resurrect evdns_set_random_bytes_fn() and add evdns_set_random_init_fn().
    Using the provided RC4 generator is nice, but we maybe want to use something
    else, in particular if we need something that is guaranteed to work in a
    chroot jail, without a /dev/*random device.

* Sun Jun 24 14:19:35 2012 -0700

    libevent: don't use memset(<something on the stack>) to securely wipe a buffer,
    because it's prone to compiler optimization.

* Sun Jun 24 14:15:13 2012 -0700

    libevent: do not close /dev/*random and /proc/**/uuid descriptors, in order to
    keep them accessible after chroot(), when reseeding is needed.

* Sun Jun 24 13:59:07 2012 -0700

    Revoke privileges after cert_updater_start() for systems without arc4random().
    Pointed out by Ben Kibbey.

* Sun Jun 24 11:46:27 2012 -0700

    Change arc4random_uniform() to calculate ``2**32 % upper_bound'' as
    ``-upper_bound % upper_bound''.
    From OpenBSD.

* Thu Jun 21 10:47:36 2012 -0700

    Update pkgsrc packages.

* Thu Jun 21 10:46:24 2012 -0700

    Update FreeBSD package.

Merge: f04c9ed 7a99603
* Thu Jun 21 13:45:33 2012 -0400

    Merge remote branch 'upstream/master' into lebel

* Thu Jun 21 10:45:06 2012 -0700

    Update Homebrew formula.

* Thu Jun 21 10:44:23 2012 -0700

    Update OpenBSD port.

* Thu Jun 21 02:18:36 2012 -0700

    Update ChangeLog

* Thu Jun 21 02:18:13 2012 -0700

    Don't install libevent.

* Thu Jun 21 00:36:44 2012 -0700

    Compile with -fPIC if possible.

* Thu Jun 21 00:26:28 2012 -0700

    Make some type conversions explicit.

* Thu Jun 21 00:13:33 2012 -0700

    Typo

* Wed Jun 20 21:41:59 2012 -0700

    Fix IOC diagnostic with a left shift.

* Wed Jun 20 08:45:58 2012 -0700

    mingw defines cygwin32 as a host OS.

* Tue Jun 19 14:12:30 2012 -0700

    Update NetBSD / Dragonfly BSD package.

* Tue Jun 19 14:10:17 2012 -0700

    Update Homebrew formula

* Tue Jun 19 14:09:40 2012 -0700

    Update OpenBSD package

* Tue Jun 19 14:07:52 2012 -0700

    Update the FreeBSD port

* Tue Jun 19 13:43:20 2012 -0700

    We officially support Bitrig.

* Tue Jun 19 12:00:14 2012 -0700

    Update ChangeLog

* Tue Jun 19 11:59:16 2012 -0700

    More dtrace probes.

* Tue Jun 19 11:46:02 2012 -0700

    Update TCP dtrace probes

* Tue Jun 19 11:16:19 2012 -0700

    Bump Linux packages to 0.10

* Tue Jun 19 11:07:18 2012 -0700

    Update libevent to be7a95c62995a679ee24146b0d641b7392cbab51

* Tue Jun 19 10:57:09 2012 -0700

    Cast txtlen to size_t

* Tue Jun 19 10:37:56 2012 -0700

    Fix txt size check

* Tue Jun 19 10:29:16 2012 -0700

    Update date & changelog.

* Tue Jun 19 08:48:23 2012 -0700

    IPPROTO_TCP is defined in netinet/in.h on Dragonfly BSD

* Tue Jun 19 00:56:23 2012 -0700

    More gwurglz zindoz needz

* Tue Jun 19 00:32:04 2012 -0700

    Shit Windows needs.

* Tue Jun 19 00:02:39 2012 -0700

    Some fixes for Windows...

* Mon Jun 18 21:38:47 2012 -0700

    Allow 64K packets on TCP, use a different definition for UDP.

* Mon Jun 18 21:30:05 2012 -0700

    Spacing, blank lines, etc.

* Mon Jun 18 21:25:48 2012 -0700

    Test for big endianness in configure.ac
    Change the first part of the client nonce to little endian on a big endian
    system. Add 10 extra bits of randomness by the way.

* Mon Jun 18 17:55:48 2012 -0700

    Update ChangeLog

* Mon Jun 18 17:55:08 2012 -0700

    Disable the Nagle algorithm when sending a query to a resolver.

* Mon Jun 18 17:39:46 2012 -0700

    If we need a free slot and there's none for the current protocol, steal one from the other protocol.
    Having distinct knobs for UDP and TCP makes sense now, but it will not make
    sense once OpenDNS will properly support TCP persistent connections.

* Mon Jun 18 17:21:41 2012 -0700

    Factorize.

* Mon Jun 18 12:54:22 2012 -0700

    Update ChangeLog

* Mon Jun 18 12:04:41 2012 -0700

    Only resolve local_sockaddr once.

* Mon Jun 18 10:41:29 2012 -0700

    Unfuck libevent on Win32 when threading support has been disabled.

* Mon Jun 18 08:23:26 2012 -0700

    Run libevent's autogen.sh along with the top-level one.

* Mon Jun 18 01:26:51 2012 -0700

    Unfuck compilation on Linux.

* Mon Jun 18 01:04:52 2012 -0700

    Update ChangeLog

* Mon Jun 18 01:03:14 2012 -0700

    Remove free() leftover.

* Mon Jun 18 00:48:26 2012 -0700

    Use -Oz for the iOS build.

* Thu Jun 14 16:50:34 2012 -0700

    Rewrite using libevent instead of libuv.

* Wed Jun 13 17:10:05 2012 -0700

    libuv update

* Wed Jun 13 17:06:37 2012 -0700

    Update Xcode

* Sun May 20 21:27:15 2012 -0700

    Unbreak libuv compilation with mingw32.

* Sun May 20 19:15:17 2012 -0700

    This libuv code is scary and we don't use it, but check at least the strdup() output.

* Wed May 16 07:13:49 2012 -0700

    Change #if FIONBIO to #ifdef FIONBIO. Fixes compilation on Debian/ppc 6.0.4.
    Reported by Sebastian Sjoholm.

* Thu Feb 9 14:57:31 2012 -0800

    Don't malloc(0). If we don't have any interfaces, return OK / null.

* Thu Feb 9 14:53:18 2012 -0800

    Rewrite uv_hrtime() for Darwin in a portable way.

* Thu Feb 9 14:33:05 2012 -0800

    rename() requires <stdio.h> on OSX. Don't ask why.

* Wed Jun 13 16:59:43 2012 -0700

    Resync libuv

* Wed Jun 13 16:31:44 2012 -0700

    Remove overzealous assertion.

* Wed Jun 13 11:34:44 2012 -0700

    Typo

* Wed Jun 13 11:23:35 2012 -0700

    OpenDNS finally sends zero-padded replies. Define TRIM_PADDING_FROM_REPLIES.

* Tue Jun 5 16:58:17 2012 -0700

    Update Homebrew formula.

* Tue Jun 5 16:55:01 2012 -0700

    Update the OpenBSD package to 0.9.5

* Tue Jun 5 16:30:34 2012 -0700

    Update ChangeLog

* Tue Jun 5 16:30:10 2012 -0700

    Implement dnscrypt_memzero() instead of using a volatile cast.

* Tue Jun 5 16:12:26 2012 -0700

    Update ChangeLog

* Tue Jun 5 16:11:18 2012 -0700

    Send the initial query through ares to whatever port has been specified
    using --resolver-port even using UDP.

* Tue Jun 5 16:00:43 2012 -0700

    More libuv cherrypicks

* Mon Jun 4 22:09:50 2012 -0700

    libuv cherrypicks

* Mon Jun 4 21:57:22 2012 -0700

    Update ChangeLog

* Mon Jun 4 21:50:46 2012 -0700

    Revert libuv to 3f0833eec07b5fbea2057c47e1c9014d3b347d35
    Something looks broken on Linux between this revision and 75565907073055dd717fb6a6074518cafdd9355d.

* Mon Jun 4 15:52:28 2012 -0700

    libuv update to 7d2ea316183ba29a8ab5883593d1f6ee6f8f8ae3
    unix: fix event loop stall

* Mon Jun 4 12:28:03 2012 -0700

    ChangeLog update.

* Mon Jun 4 12:02:10 2012 -0700

    Update libuv to 0dff0e7d47453fafb72a287c0acdddd6e3f2d9de
    A big and scary update.

* Tue May 29 22:39:36 2012 -0700

    Avoid compiler optimizations.

* Mon May 28 23:11:34 2012 -0700

    Update the plist file to use port 443 by default.

* Mon May 28 22:39:56 2012 -0700

    libuv update to 75565907073055dd717fb6a6074518cafdd9355d

* Mon May 28 22:25:18 2012 -0700

    Make sure that the event loop is always NULL before parsing options.

* Mon May 28 22:17:24 2012 -0700

    Don't call anything from libuv before fork()ing.
    Since libuv will never be fork()-safe.

* Mon May 28 22:01:48 2012 -0700

    Initialize options one by one. Fixes dnscrypt on iOS.

* Mon May 28 21:49:59 2012 -0700

    Log when uv_loop_new() fails.

* Sun May 27 10:56:45 2012 -0700

    Remove libc6 dependency for RPMs because Fedora apparently doesn't like it.

* Sun May 27 01:16:08 2012 -0700

    We need to somehow call WSAStartup before trying to perform any lookups on Win32.

* Sun May 27 00:57:48 2012 -0700

    Unfuck Win32 build

* Sat May 26 19:32:53 2012 -0700

    Fix Cygwin test

* Sat May 26 14:13:48 2012 -0700

    Update NEWS

* Sat May 26 14:11:17 2012 -0700

    Bump version to 0.9.5, but don't tag yet.

* Sat May 26 14:04:08 2012 -0700

    Introduce ares_set_servers_any()

* Sat May 26 12:23:38 2012 -0700

    Remove useless prototype.

* Sat May 26 12:21:41 2012 -0700

    Remove STORAGE_PORT4 and STORAGE_PORT6. All we want is STORAGE_PORT_ANY.

* Sat May 26 12:13:05 2012 -0700

    Complete IPv6 support.

* Sat May 26 11:30:03 2012 -0700

    Support IPv6 for retrieving a certificate.

* Sat May 26 00:49:24 2012 -0700

    Wrap some libuv functions to work both with IPv4 and IPv6.

* Fri May 25 21:11:26 2012 -0700

    Don't use proxy_context->(ud|tc)p_listener_handle in a function where a handle
    is explicitly given.

* Fri May 25 20:49:13 2012 -0700

    Trim padding from replies.
    Not supported by OpenDNS yet, so #ifdef'd.

* Fri May 25 20:37:11 2012 -0700

    libuv update to 3f0833eec07b5fbea2057c47e1c9014d3b347d35

* Fri May 25 14:28:33 2012 -0700

    Ignore log_fd on Windows.

* Wed May 23 12:47:45 2012 -0400

    Gentoo ebuiild for dnscrypt-proxy 0.9.4.

* Wed May 23 13:18:48 2012 -0400

    use --enable-nonblocking-random as suggested by Frank DENIS.

* Wed May 23 12:47:45 2012 -0400

    dnscrypt-proxy 0.9.4.

* Tue May 22 08:04:24 2012 -0700

    libuv update to d1665792ca22d30b60319199662a0399be9f1352

* Tue May 22 07:48:30 2012 -0700

    Revert USE_NONBLOCKING_RANDOM since gathering enough entropy can be way too slow on Linux.
    Turn this switch on if your OS doesn't correctly seed /dev/urandom at boot and
    at install time, or use a better operating system.

* Sun May 20 23:04:48 2012 -0700

    Update the Linux fpm package

* Sun May 20 23:04:23 2012 -0700

    Update the FreeBSD package

* Sun May 20 23:02:30 2012 -0700

    Update the NetBSD/Dragonfly BSD package.

* Sun May 20 23:00:10 2012 -0700

    Update Homebrew formula.

* Sun May 20 22:58:59 2012 -0700

    Update OpenBSD port.

* Sun May 20 22:41:42 2012 -0700

    Unfuck libuv on Dragonfly... Again...

* Sun May 20 21:27:15 2012 -0700

    Unbreak libuv compilation with mingw32.

* Sun May 20 21:06:06 2012 -0700

    Update the OpenBSD port

* Sun May 20 19:30:44 2012 -0700

    Update dist-files, dist-dirs

* Sun May 20 19:22:36 2012 -0700

    Update ChangeLog

* Sun May 20 19:22:12 2012 -0700

    Mention the new Gentoo packages and credit David Lebel.

* Sun May 20 19:17:20 2012 -0700

    Doc update

* Sun May 20 19:15:17 2012 -0700

    This libuv code is scary and we don't use it, but check at least the strdup() output.

* Sun May 20 18:55:36 2012 -0700

    Use --enable-debug instead of --with-debug

* Sun May 20 18:53:58 2012 -0700

    Provide --use-nonblocking-random if you really need to use /dev/urandom
    but use /dev/random by default.
    /dev/arandom has been removed from OpenBSD a long time ago, but I'm attached to it.

* Sun May 20 18:30:47 2012 -0700

    Don't recommend DNS caches that are unable to perform DNSSec validation.

* Sun May 20 18:22:54 2012 -0700

    Rename section title.

* Sun May 20 18:19:34 2012 -0700

    Drop the --tcp-port= switch, and introduce --resolver-port= and --tcp-only switches instead.

* Sun May 20 15:43:15 2012 -0700

    Update libuv to e82d46452e3db141d3875286cf90be0de6d724e0

* Thu May 17 22:26:29 2012 -0700

    Use Xcode4.4-DP5

* Wed May 16 07:35:45 2012 -0700

    Provide a link to github for bug reports.

* Wed May 16 07:16:15 2012 -0700

    Credit Sebastian Sjoholm.

* Wed May 16 07:13:49 2012 -0700

    Change #if FIONBIO to #ifdef FIONBIO. Fixes compilation on Debian/ppc 6.0.4.
    Reported by Sebastian Sjoholm.

* Wed May 16 07:12:41 2012 -0700

    libuv - test: prevent accidental division by zero

* Wed May 9 12:51:06 2012 -0700

    Mention the official GUI for Windows, now that it's officially out.

* Sun May 6 15:16:48 2012 -0700

    Update Xcode Path to 4.4DP4, and mention that iOS binaries have to be signed.

* Sat May 5 21:43:04 2012 -0700

    Sync ChangeLog

* Sat May 5 19:07:29 2012 -0700

    Move all checks for linker flags to the same place, and     always use -Wl.

* Sat May 5 18:56:25 2012 -0700

    Add pass -z,noexecstack to the linker if it accepts it.

Merge: 00af2e8 7c77d94
* Sat May 5 18:51:16 2012 -0700

    Merge remote-tracking branch 'lebel/lebel'
    
    * lebel/lebel:
      Add gentoo's portage files.

* Sat May 5 12:25:14 2012 -0700

    Sync libuv to 985b961d4eab778857101b17b62f9e521d43a157

* Tue May 1 13:54:54 2012 -0700

    Switch the iOS SDK to 5.1

* Tue May 1 13:26:19 2012 -0700

    Update libuv to 6367da25b38274c31b42097056b2995c2696caef.
    Pretty sure it breaks non-Linux & OSX platforms as usual.

* Tue May 1 12:17:31 2012 -0700

    Pad with 0x80...0

* Fri Apr 20 09:59:05 2012 -0400

    Add gentoo's portage files.

* Wed Mar 21 22:07:54 2012 -0700

    Sync libuv up to c9c9d805dae321a7bdf0077547c2da2dbe70f2a2

* Mon Mar 19 16:43:59 2012 -0700

    Sync libuv up to 49d4e1884ba5ea135f68c8b17fdf2c5d5bf0f91e

* Tue Mar 13 15:30:47 2012 -0700

    Give fpm a list of directories to package.

* Mon Mar 12 13:41:14 2012 -0700

    libuv does support Openwall Linux by default, now.
    The libuv guys are very reactive when it comes to merging patches.

* Mon Mar 12 12:09:36 2012 -0700

    Sync libuv up to db413f3806356a632774b8a589546fc6788debd6

* Wed Mar 7 17:02:30 2012 -0800

    Update ChangeLog

* Wed Mar 7 17:01:06 2012 -0800

    --daemonize has been fixed.

* Wed Mar 7 16:38:01 2012 -0800

    Update packages

* Wed Mar 7 16:24:10 2012 -0800

    Update ChangeLog

* Wed Mar 7 16:21:33 2012 -0800

    Initialize the event loop after having parse the options
    so that the event loop works fine after a possible fork() when the proxy
    is started with the --daemonize switch.

* Wed Mar 7 15:10:57 2012 -0800

    sync libuv to d07f2466d0a10ab02db588374dd97c2edd54c7fc

* Tue Mar 6 16:54:16 2012 -0800

    Update Dragonfly BSD & NetBSD package.

* Tue Mar 6 16:52:47 2012 -0800

    Fix FreeBSD distinfo.

* Tue Mar 6 16:51:43 2012 -0800

    Update FreeBSD package.

* Tue Mar 6 16:49:47 2012 -0800

    Update OpenBSD package to 0.9.3

* Tue Mar 6 16:47:50 2012 -0800

    Update Homebrew formula.

* Tue Mar 6 16:47:07 2012 -0800

    Bump Linux package version to 0.9.3

* Tue Mar 6 14:11:02 2012 -0800

    cygwin: we need to include uv-common.h for uv__set_sys_error()

* Tue Mar 6 12:22:52 2012 -0800

    Add windows quirks to the distribution.

* Tue Mar 6 12:20:11 2012 -0800

    Don't include sys/sysctl.h without sys/param.h first.

* Tue Mar 6 12:10:22 2012 -0800

    Update ChangeLog

* Tue Mar 6 11:57:46 2012 -0800

    Remove command-line switches that are unsupported on Win32.

* Mon Mar 5 15:26:53 2012 -0800

    Add missing break so that comments in fingerprints work.

* Mon Mar 5 13:18:17 2012 -0800

    Check for an actual library symbol in order to link Win32-specific libs.

* Mon Mar 5 12:46:00 2012 -0800

    Update libuv to 5505f2e9063aaf9b52d47315ae4324efbb5834be

* Sat Mar 3 23:26:11 2012 -0800

    Mention Noxwizard's dnscrypt-winclient

* Sat Mar 3 23:25:28 2012 -0800

    <stdlib.h> is required for NULL to be defined in safe_rw.c

* Fri Mar 2 16:40:12 2012 -0800

    Now, that's a super ugly way of linking ws2_32, psapi and iphlpapi.

* Fri Mar 2 15:41:50 2012 -0800

    Mark some unused variables on Win32.

* Fri Mar 2 15:36:30 2012 -0800

    Compile out more pid_file.c code on Win32.

* Fri Mar 2 15:33:39 2012 -0800

    Use _WIN32 instead of __MINGW32__ just in case we want to support Visual Studio.

* Fri Mar 2 15:24:58 2012 -0800

    Unfuck daemonization on Cygwin builds.

* Fri Mar 2 13:52:14 2012 -0800

    Bump version to 0.9.3, featuring native support for Windows.
    Now, back to serious work.

* Fri Mar 2 13:37:11 2012 -0800

    Native Windows builds are now supported.
    Sigh.

* Fri Mar 2 13:32:16 2012 -0800

    Provide some logging on Windows, and disable unsupported options.

* Fri Mar 2 13:03:07 2012 -0800

    Pass CRYPT_VERIFYCONTEXT to CryptAcquireContext().

* Fri Mar 2 12:20:21 2012 -0800

    Use the CryptoAPI on Win32.

* Thu Mar 1 20:41:31 2012 -0800

    Fascinating whitespace changes.

* Thu Mar 1 20:06:11 2012 -0800

    Sync libuv.
    test: make pipe_connect_to_file succeed with ECONNREFUSED
    windows: return UV_ENOTSOCK when doing uv_pipe_connect to a file

* Thu Mar 1 18:19:33 2012 -0800

    Windows: we need to zero the loop structure when we initialize it
    or else the ares list of handles is uninitialized and bad things can happen
    when we try to perform async lookups.

* Thu Mar 1 17:14:15 2012 -0800

    Oh course, there will be no /dev/*random on zindoz.

* Thu Mar 1 17:13:59 2012 -0800

    Force line buffering for stdout, for zindoz

* Thu Mar 1 16:36:37 2012 -0800

    Yes, it now natively compiles on Win32.
    Fortunately, it crashes.

* Thu Mar 1 16:33:38 2012 -0800

    Shit Win32 needs.

* Thu Mar 1 16:30:42 2012 -0800

    Link with Winsock2 on Windows.

* Thu Mar 1 16:26:20 2012 -0800

    Unfuck MingW detection.

* Wed Feb 29 21:46:22 2012 -0800

    libuv - unix: fix fs_event refcount bug on darwin

* Wed Feb 29 21:45:30 2012 -0800

    libuv - unix: don't rely on libev to track timer state

* Tue Feb 28 23:54:17 2012 -0800

    Bump year & remove empty line.
    (wow, awesome and useful commit)

* Fri Feb 24 16:26:20 2012 -0800

    The beginning of the end.

* Fri Feb 24 16:19:27 2012 -0800

    *sigh*

* Thu Feb 23 18:14:09 2012 -0800

    There are so many random() calls that having just one hack for Win32 will never fit the bill.

* Thu Feb 23 18:12:13 2012 -0800

    More disgusting changes Windows requires. Not having random()/srandom() is going to be a PITA.

* Thu Feb 23 18:03:17 2012 -0800

    setrlimit() on Win32? LOL.

* Thu Feb 23 17:03:51 2012 -0800

    <windows.h> is needed, even for Sleep().

* Thu Feb 23 16:53:31 2012 -0800

    Jeez, Win32 doesn't even provide sleep().

* Thu Feb 23 14:52:53 2012 -0800

    Fix memory leak in uv_exepath() on OSX.

* Thu Feb 23 14:07:08 2012 -0800

    Sync libuv
    Share inotify fd across event loop.

* Thu Feb 23 13:24:46 2012 -0800

    chmod +x do

* Thu Feb 23 12:59:41 2012 -0800

    Update ChangeLog for version 0.9.2

* Thu Feb 23 12:54:51 2012 -0800

    Mention iOS support, bump version to 0.9.2

* Thu Feb 23 12:46:15 2012 -0800

    Some distributions don't provide a "hostname" command.
    Always use the same name for a compilation directory.

* Thu Feb 23 12:41:30 2012 -0800

    Improve detection of -fPIE support.

* Thu Feb 23 12:22:42 2012 -0800

    Unbreak libuv on iPhone.

* Thu Feb 23 12:15:54 2012 -0800

    Don't benchmark functions at compile-time.
    That should be done at run-time.

* Thu Feb 23 10:05:50 2012 -0800

    Test /dev/urandom with -r, not -f

* Thu Feb 23 10:00:43 2012 -0800

    Run less executables at compile-time in order to make cross-compilation for iPhone & Android possible.

* Thu Feb 23 09:48:07 2012 -0800

    Don't run test-c - It breaks cross-compilation.

* Wed Feb 22 16:04:48 2012 -0800

    Add some extra info to the Debian packages so that lintian stops whining.

* Tue Feb 21 19:28:08 2012 -0800

    libuv - linux: fix signedness issue in uv_exepath()

* Fri Feb 17 22:05:19 2012 -0800

    Yup

* Fri Feb 17 15:59:27 2012 -0800

    Add URL / maintainer / category to the Linux packages.

* Fri Feb 17 14:41:13 2012 -0800

    Update NetBSD and Dragonfly BSD packages.

* Fri Feb 17 14:39:56 2012 -0800

    Update FreeBSD & Homebrew packages

* Fri Feb 17 14:19:11 2012 -0800

    Update the dnscrypt package for OpenBSD to 0.9.1
    It should now work on non-Intel architectures.

* Fri Feb 17 13:51:43 2012 -0800

    Bump version to 0.9.1

* Fri Feb 17 13:51:25 2012 -0800

    untab

* Fri Feb 17 13:46:20 2012 -0800

    Both the compiler and the linker have to accept -fstack-protector

* Fri Feb 17 13:27:57 2012 -0800

    Try to compile something that performs some stack allocation in order to
    make the AX_CHECK_COMPILE_FLAG work with -fstack-protector

* Fri Feb 17 12:16:02 2012 -0800

    We actually need uclibc 0.9.32 to use ifaddrs.h

* Thu Feb 16 23:53:50 2012 -0800

    Thanks, Lance Fredrickson.

* Thu Feb 16 23:36:00 2012 -0800

    uClibc < 0.9.30 didn't have ifaddrs.h

* Thu Feb 16 17:14:12 2012 -0800

    Regen OpenBSD distinfo.

* Thu Feb 16 17:08:05 2012 -0800

    Update NEWS

* Thu Feb 16 16:58:32 2012 -0800

    Replace cpucycles with a no-op.
    We're favoring portability for now, and we're not benchmarking functions.
    And cpucycles seems to be causing a lot of trouble on some architectures.

* Thu Feb 16 13:51:14 2012 -0800

    Update Dragonfly BSD / NetBSD package.

* Thu Feb 16 13:49:00 2012 -0800

    Update Homebrew formula.

* Thu Feb 16 13:48:11 2012 -0800

    execinfo is *not* required on OpenBSD.

* Thu Feb 16 13:46:58 2012 -0800

    Update OpenBSD packages

* Thu Feb 16 13:28:34 2012 -0800

    Bump FreeBSD package to 0.9

* Thu Feb 16 13:18:25 2012 -0800

    Update the documentation to mention where the tarballs can be downloaded from.

* Thu Feb 16 12:46:56 2012 -0800

    Update Linux packages to 0.9

* Thu Feb 16 12:39:48 2012 -0800

    Regen ChangeLog

* Thu Feb 16 12:37:58 2012 -0800

    Set version to 0.9
    Trying to keep the version number in sync with the Mac GUI doesn't make any
    sense, especially with a Windows GUI on the way.

* Thu Feb 16 12:13:41 2012 -0800

    2012 & regen man page

* Thu Feb 16 12:10:27 2012 -0800

    Remove test-ipc-threads.c and regen uv/dist-files.

* Thu Feb 16 12:07:18 2012 -0800

    Resync libuv

* Thu Feb 9 14:59:55 2012 -0800

    Explicitly NULLify app_context.proxy_context

* Thu Feb 9 14:57:50 2012 -0800

    libuv: plug memleak on error path

* Thu Feb 9 14:57:31 2012 -0800

    Don't malloc(0). If we don't have any interfaces, return OK / null.

* Thu Feb 9 14:53:18 2012 -0800

    Rewrite uv_hrtime() for Darwin in a portable way.

* Thu Feb 9 14:33:05 2012 -0800

    rename() requires <stdio.h> on OSX. Don't ask why.

* Thu Feb 9 14:32:33 2012 -0800

    Resync libuv

* Wed Jan 25 16:36:24 2012 -0800

    Next version will be 0.11.
    (yeah, people are having a hard time figuring out that the OSX GUI is a
    different product, so let's try to keep version numbers more or less in sync)

* Wed Jan 25 16:27:57 2012 -0800

    libuv cherrypick: unix: set SO_REUSEADDR before binding

* Wed Jan 25 16:27:12 2012 -0800

    libuv cherrypick: unix: don't close kqueue fd in kqueue_fork()

* Wed Jan 25 16:26:42 2012 -0800

    libuv cherrypick: unix: clean up udp read/write watchers

* Wed Jan 25 16:26:14 2012 -0800

    libuv cherrypick: unix: clean up udp shutdown sequence

* Wed Jan 25 16:25:32 2012 -0800

    libuv cherrypick: unix: don't retry close() on EINTR

* Wed Jan 25 16:24:50 2012 -0800

    libuv cherrypick: unix: fix segfault in uv_guess_handle()

* Wed Jan 25 16:24:14 2012 -0800

    libuv cherrypick: unix: fix udp recv_start refcount

* Wed Jan 25 16:23:35 2012 -0800

    libuv cherrypick: remove unused #define

* Wed Jan 25 16:22:05 2012 -0800

    libuv cherrypick: docs: add c-ares license note

* Sat Dec 31 22:29:59 2011 -0800

    2012

* Wed Dec 21 23:21:29 2011 -0800

    Cherry-pick 6a9cb902ae25efa6f853dc10b20cd657b8a1f809

* Wed Dec 21 23:20:42 2011 -0800

    Cherrypick libuv 3cbe7c3f7952aa249450438b21cf4f346bb88e22

* Wed Dec 21 23:10:26 2011 -0800

    Revert "Update libuv" - libuv is still b0rk3d on OpenBSD, DragonflyBSD and NetBSD.
    

* Wed Dec 21 23:10:24 2011 -0800

    Revert "Unbreak libuv on Dragonfly BSD."
    

* Wed Dec 21 18:36:43 2011 -0800

    Unbreak libuv on Dragonfly BSD.

* Wed Dec 21 17:27:10 2011 -0800

    Update libuv

* Thu Dec 15 09:06:20 2011 -0800

    Set TZ even if strftime() fails.

* Wed Dec 14 21:52:33 2011 -0800

    Update libuv - Except the obviously untested patch provided by Microsoft that totally breaks libuv on BSD.

* Wed Dec 14 21:37:42 2011 -0800

    Revert - libuv is now totally b0rk3d on FreeBSD/DragonflyBSD.

* Wed Dec 14 21:14:18 2011 -0800

    Big and scary update to libuv

* Wed Dec 14 09:30:48 2011 -0800

    Add --disable-dependency-tracking to the Homebrew formula.

* Tue Dec 13 22:44:06 2011 -0800

    Update Dragonfly BSD / NetBSD package.

* Tue Dec 13 22:41:28 2011 -0800

    Update Homebrew package

* Tue Dec 13 22:40:07 2011 -0800

    Update FreeBSD package.

* Tue Dec 13 22:36:40 2011 -0800

    Update OpenBSD package.

* Tue Dec 13 17:50:32 2011 -0800

    Update ChangeLog.

* Tue Dec 13 17:48:14 2011 -0800

    We can detect accept4() while SOCK_CLOEXEC and SOCK_NONBLOCK are unavailable.
    Fixes compilation on Openwall-current.

* Tue Dec 13 17:37:48 2011 -0800

    Redirect compile-time tests to an errors file.

* Tue Dec 13 17:16:39 2011 -0800

    Update for Dragonfly BSD.

* Tue Dec 13 17:13:37 2011 -0800

    -fstack-protector-all is causing trouble with Dragonfly BSD and NaCl.
    Use -fstack-protector only on Dragonfly BSD for now.

* Tue Dec 13 15:55:53 2011 -0800

    Update packages to 0.8 - distinfo files have to be regenerated though.

* Tue Dec 13 15:51:52 2011 -0800

    Update NEWS / ChangeLog

* Mon Dec 12 22:20:06 2011 -0800

    Rename C_ASSERT, because Windows defines a macro with the same name.

* Mon Dec 12 17:21:57 2011 -0800

    Don't use substitution in a $(shell) statement.

* Mon Dec 12 17:18:18 2011 -0800

    Unfortunately, ULONG_LONG_MAX isn't always defined.

* Mon Dec 12 17:00:32 2011 -0800

    Sync dist files

* Mon Dec 12 16:03:33 2011 -0800

    Fix autoconf test.

* Mon Dec 12 16:03:19 2011 -0800

    Don't include crypto_int32.h

* Mon Dec 12 15:47:20 2011 -0800

    Missing quote

* Mon Dec 12 15:40:08 2011 -0800

    Sync libuv

* Sun Dec 11 23:06:09 2011 -0800

    assert() -> C_ASSERT()

* Sun Dec 11 23:01:22 2011 -0800

    Ignore .DS_Store

* Sun Dec 11 22:53:12 2011 -0800

    Typo

* Sun Dec 11 20:18:38 2011 -0800

    Make getword() a bit faster by using all the output bytes.

* Sun Dec 11 19:30:19 2011 -0800

    Rephrase.

* Sun Dec 11 19:28:20 2011 -0800

    Introduce a C_ASSERT() macro instead of repeating (void) sizeof(char[X?1:-1])

* Sun Dec 11 19:17:28 2011 -0800

    Switch to salsa20/20 as a stream cipher.

* Sun Dec 11 17:02:48 2011 -0800

    curvecp is fantastic but we don't use it for now. So don't ship a copy of it.

* Sat Dec 10 21:30:20 2011 -0800

    Move Linux packages to /usr

* Sat Dec 10 16:12:06 2011 -0800

    Provide better detection for Mingw when used on Windows.

* Sat Dec 10 15:35:08 2011 -0800

    Disable -fstack-protector-all on Windows but enable specific flags for ASLR & DEP.

* Sat Dec 10 15:21:39 2011 -0800

    Enable ASLR and DEP on Win32.

* Sat Dec 10 14:42:33 2011 -0800

    Works out of the box on Windows using Cygwin (for now, native port is coming).

* Sat Dec 10 11:33:06 2011 -0800

    Mention do-not-query-localhost: no for Unbound.

* Fri Dec 9 14:05:38 2011 -0800

    We do support Openwall Linux now.

* Fri Dec 9 13:58:13 2011 -0800

    Don't try compiling inotify-related functions on Linux distros without inotify.

* Fri Dec 9 13:57:34 2011 -0800

    Provide compatibility with glibc versions that don't provide pipe2()/O_CLOEXEC

* Fri Dec 9 13:24:20 2011 -0800

    resync dist-files.

* Fri Dec 9 13:19:40 2011 -0800

    Moving on.

* Fri Dec 9 12:17:41 2011 -0800

    Add the default public key for ed25519-signed certs.

* Thu Dec 8 17:41:15 2011 -0800

    Switch to 2.dnscrypt-cert.opendns.com

* Thu Dec 8 17:38:24 2011 -0800

    Switch to ed25519

* Thu Dec 8 12:47:55 2011 -0800

    Sync libuv

* Thu Dec 8 12:35:30 2011 -0800

    Import ed25519 - thanks to djb for his feedback.

* Wed Dec 7 21:25:08 2011 -0800

    Add a sample .plist file.

* Wed Dec 7 20:43:33 2011 -0800

    Add a formula for Homebrew

* Wed Dec 7 12:41:28 2011 -0800

    Nits

* Wed Dec 7 12:29:12 2011 -0800

    Nits

* Wed Dec 7 12:25:23 2011 -0800

    Nits

* Wed Dec 7 12:21:26 2011 -0800

    Downcase + remove some redundant stuff.

* Wed Dec 7 12:13:59 2011 -0800

    Spacing

* Wed Dec 7 12:08:21 2011 -0800

    Per popular request, add a description of the protocol + implementation details.

* Wed Dec 7 08:44:02 2011 -0800

    Add links & credits for NaCl and libuv.

* Wed Dec 7 08:36:55 2011 -0800

    Add THANKS file, credit sthen@ for his help on the OpenBSD port.

* Wed Dec 7 08:35:01 2011 -0800

    dnscrypt has been written by humans.

* Wed Dec 7 00:51:45 2011 -0800

    Test presence of 6Jack, that will be required for new tests.

Merge: 2a196e1 cfbb34c
* Tue Dec 6 15:32:15 2011 -0800

    Merge pull request #1 from sthen/master
    
    OpenBSD port tweaks

* Tue Dec 6 23:19:11 2011 +0000

    add ONLY_FOR_ARCH, NaCl needs more work on !i386/amd64

* Tue Dec 6 23:17:10 2011 +0000

    picks up libexecinfo if installed; add dep

* Tue Dec 6 23:16:40 2011 +0000

    add OpenBSD cvs id

* Tue Dec 6 23:14:00 2011 +0000

    needs a homedir to chroot to; use /var/empty

* Tue Dec 6 23:13:24 2011 +0000

    daemonize in rc script, add cvs id for OpenBSD

* Tue Dec 6 12:25:52 2011 -0800

    Fix MASTER_SITE and HOMEPAGE

* Tue Dec 6 11:57:21 2011 -0800

    Switch back to using the .tar.gz file since the github CDN finally has it.

* Tue Dec 6 11:55:18 2011 -0800

    Update the OpenBSD package.

* Tue Dec 6 11:45:28 2011 -0800

    OpenBSD uid 685/686 were taken by other ports already. Switch to uid 688, reserved by sthen@

* Tue Oct 18 21:33:26 2011 -0700

    Initial public release.