dnsruby 1.74.0 → 2.0.0

data/test/tcp_pipelining_server.rb

@@ -0,0 +1,150 @@
+# frozen_string_literal: true
+
+require 'socket'
+require 'resolv'
+require 'thread'
+
+module PipelineTest
+  # A deliberately small DNS-over-TCP peer. Using the stdlib codec keeps these
+  # transport tests independent of both Dnsruby's codec and RubyDNS's server API.
+  class Server
+    IP = '127.0.0.1'
+    ANSWER = '192.0.2.155'
+    MAX_REQUESTS = 4
+    IDLE_TIMEOUT = 1
+
+    attr_reader :port
+
+    def initialize
+      @listener = TCPServer.new(IP, 0)
+      @port = @listener.addr[1]
+      @wake_read, @wake_write = IO.pipe
+      @clients = {}
+      @mutex = Mutex.new
+      @stats = { accepts: 0, connections: 0, timeouts: 0, limits: 0 }
+      @worker = Thread.new do
+        Thread.current.abort_on_exception = false
+        Thread.current.report_on_exception = false
+        begin
+          run
+        rescue StandardError => error
+          # Other suites enable Thread.abort_on_exception globally. Capture
+          # errors here so those settings cannot abort the test process.
+          @error = error
+        end
+      end
+    end
+
+    def stats
+      # Surface fixture failures in the test thread instead of hiding them
+      # behind a resolver timeout or aborting the entire suite.
+      @worker.value unless @worker.alive?
+      raise @error if @error
+      @mutex.synchronize { @stats.dup }
+    end
+
+    def stop
+      @wake_write.close unless @wake_write.closed?
+      unless @worker.join(5)
+        @worker.kill
+        @worker.join
+        raise 'TCP pipelining server did not stop'
+      end
+      @worker.value
+      raise @error if @error
+    end
+
+    private
+
+    def now
+      Process.clock_gettime(Process::CLOCK_MONOTONIC)
+    end
+
+    def run
+      loop do
+        deadline = @clients.values.map { |client| client[:deadline] }.min
+        wait = deadline ? [deadline - now, 0].max : nil
+        readable = IO.select([@wake_read, @listener] + @clients.keys, nil, nil, wait)
+        if readable
+          break if readable.first.include?(@wake_read)
+          readable.first.each do |socket|
+            socket == @listener ? accept : receive(socket)
+          end
+        end
+        @clients.keys.each do |socket|
+          disconnect(socket, :timeouts) if @clients.fetch(socket)[:deadline] <= now
+        end
+      end
+    ensure
+      @clients.keys.each { |socket| disconnect(socket) }
+      @listener.close
+      @wake_read.close
+    end
+
+    def accept
+      socket = @listener.accept_nonblock(exception: false)
+      return if socket == :wait_readable
+
+      @clients[socket] = { buffer: ''.b, requests: 0, deadline: now + IDLE_TIMEOUT }
+      @mutex.synchronize do
+        @stats[:accepts] += 1
+        @stats[:connections] += 1
+      end
+    end
+
+    def receive(socket)
+      data = socket.read_nonblock(65_535, exception: false)
+      return if data == :wait_readable
+      return disconnect(socket) if data.nil?
+
+      client = @clients.fetch(socket)
+      client[:deadline] = now + IDLE_TIMEOUT
+      client[:buffer] << data
+
+      # TCP can split a length prefix or combine several DNS messages in a read.
+      while client[:buffer].bytesize >= 2
+        length = client[:buffer].unpack1('n')
+        break if client[:buffer].bytesize < length + 2
+
+        client[:buffer].slice!(0, 2)
+        query = client[:buffer].slice!(0, length)
+        client[:requests] += 1
+        if client[:requests] <= MAX_REQUESTS
+          response = answer(query)
+          socket.write([response.bytesize].pack('n') + response)
+          if client[:requests] == MAX_REQUESTS
+            @mutex.synchronize { @stats[:limits] += 1 }
+          end
+        end
+        # Drain excess requests before closing on timeout. Closing with unread
+        # input can cause a TCP reset instead of the EOF being tested.
+      end
+    rescue Errno::ECONNRESET, Errno::EPIPE
+      disconnect(socket)
+    end
+
+    def answer(bytes)
+      query = ::Resolv::DNS::Message.decode(bytes)
+      response = ::Resolv::DNS::Message.new(query.id)
+      response.qr = 1
+      response.aa = 1
+      response.rd = query.rd
+      response.ra = 1
+      query.each_question do |name, type|
+        response.add_question(name, type)
+        response.add_answer(name, 60, ::Resolv::DNS::Resource::IN::A.new(ANSWER))
+      end
+      response.encode
+    end
+
+    def disconnect(socket, reason = nil)
+      return unless @clients.delete(socket)
+
+      socket.close
+      @mutex.synchronize do
+        @stats[:connections] -= 1
+        @stats[reason] += 1 if reason
+      end
+    end
+  end
+end

data/test/ts_offline.rb

@@ -21,14 +21,61 @@ Dnsruby.log.level = Logger::FATAL
 # We'll prepend 'tc_' and append '.rb' to these:
 TESTS = %w(
     dnskey
+    cache_keys
+    attempt_configuration
+    caa
+    review_record_compatibility
+    review_validation_priming
+    review_cache
     escapedchars
+    edns_retry_regressions
     gpos
+    generic_cache
     hash
     header
     ipseckey
+    ipv6
+    malformed_tcp
+    pipeline_send
+    pipeline_retirement
+    pipeline_retry
+    resolver_concurrency
+    resolver_validation
+    release_transport
+    release_transport_fixes
+    v2_release_transport
+    v2_zone_transfer_native
+    release_negative_cache
+    release_recursor_cache
+    release_zone_ttls
+    release_zone_defaults
+    release_configuration_fixes
+    release_auxiliary_fixes
+    recursor_address_fallback
+    recursor_limits
+    resolver_configuration_contracts
+    release_review_transport
+    release_review_transport_native
+    review_transport_fixes
+    review_control_deadlines
+    review_followup_transport
+    review_transport_native
+    review_packet_contracts
+    final_review_fixes
+    final_transport_contracts
+    protocol_review_fixes
+    rrset_review_fixes
+    dnssec_recursor_review_fixes
+    cancelled_send_capacity
+    review_code_mapper
+    review_presentation
+    record_regressions
+    record_codec_contracts
+    selector_wakeup
     message
     misc
     name
+    nameserver_bootstrap
     naptr
     nsec
     nsec3
@@ -39,15 +86,27 @@ TESTS = %w(
     packet_unique_push
     ptrin
     question
+    query_control
     res_config
     res_file
     res_opt
+    scoped_ipv6
+    scoped_ipv6_select
+    scoped_ipv6_transport
     rr
     rr-txt
     rr-unknown
     rrset
+    rrset_grouping
     rrsig
+    svcb
+    svcb_transport
+    socket_helpers
+    tcp_pipelining
+    transport_fork
     tkey
+    tsig_api
+    tsig_rfc8945
     update
     zone_reader
 )
@@ -64,10 +123,8 @@ def have_open_ssl?
   have_open_ssl = true
   begin
     require "openssl"
-    OpenSSL::HMAC.digest(OpenSSL::Digest::MD5.new, "key", "data")
-    key = OpenSSL::PKey::RSA.new
-    key.e = 111
-  rescue
+    OpenSSL::Digest::SHA256.digest("data")
+  rescue LoadError, StandardError
     have_open_ssl = false
   end
   have_open_ssl
@@ -75,9 +132,23 @@ end
 
 if have_open_ssl?
   require_relative 'tc_ds.rb'
+  require_relative 'tc_svcb_signed_target.rb'
+  require_relative 'tc_dnssec_trust_anchors.rb'
+  require_relative 'tc_release_dnssec_fixes.rb'
+  require_relative 'tc_release_dnssec_completion.rb'
+  require_relative 'tc_v2_release_dnssec.rb'
+  require_relative 'tc_dnssec_trust_races.rb'
+  require_relative 'tc_key_cache_identity.rb'
+  require_relative 'tc_dnssec_budget.rb'
+  require_relative 'tc_dnssec_recursion_limits.rb'
+  require_relative 'tc_supporting_lookup_limits.rb'
+  require_relative 'tc_dnssec_cache_lifetime.rb'
+  require_relative 'tc_dnssec_cache_bounds.rb'
+  require_relative 'tc_dnssec_wildcard_proofs.rb'
+  require_relative 'tc_dnssec_alias_validation.rb'
+  require_relative 'tc_dnssec_denial_proofs.rb'
 else
   puts "-----------------------------------------------------------------------"
-  puts "OpenSSL not present (with full functionality) - skipping DS digest test"
+  puts "OpenSSL SHA256 unavailable - skipping DS and DNSSEC trust-anchor tests"
   puts "-----------------------------------------------------------------------"
 end
-

data/test/ts_online.rb

@@ -52,6 +52,7 @@ if online?
       resolver
       tcp
       tcp_pipelining
+      scoped_ipv6_transport
       single_resolver
       cache
       dns
@@ -114,7 +115,7 @@ if (server_up)
   have_openssl = false
   begin
     require "openssl"
-    OpenSSL::HMAC.digest(OpenSSL::Digest::MD5.new, "key", "data")
+    OpenSSL::HMAC.digest('SHA256', "key", "data")
     key = OpenSSL::PKey::RSA.new
     key.e = 111
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dnsruby
 version: !ruby/object:Gem::Version
-  version: 1.74.0
+  version: 2.0.0
 platform: ruby
 authors:
 - Alex Dalitz
@@ -114,19 +114,19 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '0.9'
 - !ruby/object:Gem::Dependency
-  name: coveralls
+  name: simplecov
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.8.23
+        version: 0.22.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.8.23
+        version: 0.22.0
 - !ruby/object:Gem::Dependency
   name: base64
   requirement: !ruby/object:Gem::Requirement
@@ -159,16 +159,22 @@ dependencies:
   name: simpleidn
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: 0.2.1
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: 0.4.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: 0.2.1
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: 0.4.0
 description: |-
   Dnsruby is a pure Ruby DNS client library which implements a
   stub resolver. It aims to comply with all DNS RFCs, including
@@ -182,7 +188,6 @@ extra_rdoc_files:
 - EXAMPLES
 - README.md
 files:
-- ".coveralls.yml"
 - ".github/FUNDING.yml"
 - ".github/dependabot.yml"
 - ".github/workflows/ci.yml"
@@ -219,6 +224,7 @@ files:
 - lib/dnsruby/code_mapper.rb
 - lib/dnsruby/code_mappers.rb
 - lib/dnsruby/config.rb
+- lib/dnsruby/deadline_queue.rb
 - lib/dnsruby/dnssec.rb
 - lib/dnsruby/hosts.rb
 - lib/dnsruby/ipv4.rb
@@ -232,6 +238,8 @@ files:
 - lib/dnsruby/message/section.rb
 - lib/dnsruby/name.rb
 - lib/dnsruby/packet_sender.rb
+- lib/dnsruby/presentation.rb
+- lib/dnsruby/query_control.rb
 - lib/dnsruby/recursor.rb
 - lib/dnsruby/resolv.rb
 - lib/dnsruby/resolver.rb
@@ -250,6 +258,7 @@ files:
 - lib/dnsruby/resource/GPOS.rb
 - lib/dnsruby/resource/HINFO.rb
 - lib/dnsruby/resource/HIP.rb
+- lib/dnsruby/resource/HTTPS.rb
 - lib/dnsruby/resource/IN.rb
 - lib/dnsruby/resource/IPSECKEY.rb
 - lib/dnsruby/resource/ISDN.rb
@@ -274,6 +283,7 @@ files:
 - lib/dnsruby/resource/SPF.rb
 - lib/dnsruby/resource/SRV.rb
 - lib/dnsruby/resource/SSHFP.rb
+- lib/dnsruby/resource/SVCB.rb
 - lib/dnsruby/resource/TKEY.rb
 - lib/dnsruby/resource/TLSA.rb
 - lib/dnsruby/resource/TSIG.rb
@@ -282,42 +292,75 @@ files:
 - lib/dnsruby/resource/X25.rb
 - lib/dnsruby/resource/domain_name.rb
 - lib/dnsruby/resource/generic.rb
+- lib/dnsruby/resource/generic_cache.rb
+- lib/dnsruby/resource/generic_constants.rb
 - lib/dnsruby/resource/resource.rb
 - lib/dnsruby/resource/type_bitmap.rb
 - lib/dnsruby/select_thread.rb
+- lib/dnsruby/serial_time.rb
 - lib/dnsruby/single_resolver.rb
 - lib/dnsruby/single_verifier.rb
 - lib/dnsruby/the_log.rb
+- lib/dnsruby/transport_clock.rb
 - lib/dnsruby/update.rb
+- lib/dnsruby/validation_budget.rb
 - lib/dnsruby/validator_thread.rb
 - lib/dnsruby/version.rb
 - lib/dnsruby/zone_reader.rb
 - lib/dnsruby/zone_transfer.rb
+- test/ci_watchdog.rb
 - test/custom.txt
+- test/fixtures/org-ds-2026-11-05.zone
+- test/fixtures/root-dnskey-2026-11-05.zone
+- test/fork_test_helper.rb
+- test/local_dns_server.rb
 - test/localdns.rb
 - test/resolv.conf
 - test/run-tests-individually
+- test/soak_server.rb
+- test/socket_helpers.rb
 - test/spec_helper.rb
+- test/tc_attempt_configuration.rb
 - test/tc_axfr.rb
 - test/tc_caa.rb
 - test/tc_cache.rb
+- test/tc_cache_keys.rb
+- test/tc_cancelled_send_capacity.rb
 - test/tc_dlv.rb
 - test/tc_dns.rb
 - test/tc_dnskey.rb
+- test/tc_dnssec_alias_validation.rb
+- test/tc_dnssec_budget.rb
+- test/tc_dnssec_cache_bounds.rb
+- test/tc_dnssec_cache_lifetime.rb
+- test/tc_dnssec_denial_proofs.rb
+- test/tc_dnssec_recursion_limits.rb
+- test/tc_dnssec_recursor_review_fixes.rb
+- test/tc_dnssec_trust_anchors.rb
+- test/tc_dnssec_trust_races.rb
+- test/tc_dnssec_wildcard_proofs.rb
 - test/tc_ds.rb
 - test/tc_ecdsa.rb
+- test/tc_edns_retry_regressions.rb
 - test/tc_encoding.rb
 - test/tc_escapedchars.rb
+- test/tc_final_review_fixes.rb
+- test/tc_final_transport_contracts.rb
+- test/tc_generic_cache.rb
 - test/tc_gpos.rb
 - test/tc_hash.rb
 - test/tc_header.rb
 - test/tc_hip.rb
 - test/tc_hs.rb
 - test/tc_ipseckey.rb
+- test/tc_ipv6.rb
+- test/tc_key_cache_identity.rb
 - test/tc_long_labels.rb
+- test/tc_malformed_tcp.rb
 - test/tc_message.rb
 - test/tc_misc.rb
 - test/tc_name.rb
+- test/tc_nameserver_bootstrap.rb
 - test/tc_naptr.rb
 - test/tc_nsec.rb
 - test/tc_nsec3.rb
@@ -325,35 +368,87 @@ files:
 - test/tc_nxt.rb
 - test/tc_packet.rb
 - test/tc_packet_unique_push.rb
+- test/tc_pipeline_retirement.rb
+- test/tc_pipeline_retry.rb
+- test/tc_pipeline_send.rb
+- test/tc_protocol_review_fixes.rb
 - test/tc_ptrin.rb
+- test/tc_query_control.rb
 - test/tc_question.rb
 - test/tc_queue.rb
+- test/tc_record_codec_contracts.rb
+- test/tc_record_regressions.rb
 - test/tc_recur.rb
+- test/tc_recursor_address_fallback.rb
+- test/tc_recursor_limits.rb
+- test/tc_release_auxiliary_fixes.rb
+- test/tc_release_configuration_fixes.rb
+- test/tc_release_dnssec_completion.rb
+- test/tc_release_dnssec_fixes.rb
+- test/tc_release_negative_cache.rb
+- test/tc_release_recursor_cache.rb
+- test/tc_release_review_transport.rb
+- test/tc_release_review_transport_native.rb
+- test/tc_release_transport.rb
+- test/tc_release_transport_fixes.rb
+- test/tc_release_zone_defaults.rb
+- test/tc_release_zone_ttls.rb
 - test/tc_res_config.rb
 - test/tc_res_env.rb
 - test/tc_res_file.rb
 - test/tc_res_opt.rb
 - test/tc_resolv.rb
 - test/tc_resolver.rb
+- test/tc_resolver_concurrency.rb
+- test/tc_resolver_configuration_contracts.rb
+- test/tc_resolver_validation.rb
+- test/tc_review_cache.rb
+- test/tc_review_code_mapper.rb
+- test/tc_review_control_deadlines.rb
+- test/tc_review_followup_transport.rb
+- test/tc_review_packet_contracts.rb
+- test/tc_review_presentation.rb
+- test/tc_review_record_compatibility.rb
+- test/tc_review_transport_fixes.rb
+- test/tc_review_transport_native.rb
+- test/tc_review_validation_priming.rb
 - test/tc_rr-opt.rb
 - test/tc_rr-txt.rb
 - test/tc_rr-unknown.rb
 - test/tc_rr.rb
 - test/tc_rrset.rb
+- test/tc_rrset_grouping.rb
+- test/tc_rrset_review_fixes.rb
 - test/tc_rrsig.rb
+- test/tc_scoped_ipv6.rb
+- test/tc_scoped_ipv6_select.rb
+- test/tc_scoped_ipv6_transport.rb
+- test/tc_selector_wakeup.rb
 - test/tc_single_resolver.rb
 - test/tc_soak.rb
 - test/tc_soak_base.rb
+- test/tc_socket_helpers.rb
 - test/tc_sshfp.rb
+- test/tc_supporting_lookup_limits.rb
+- test/tc_svcb.rb
+- test/tc_svcb_signed_target.rb
+- test/tc_svcb_transport.rb
 - test/tc_tcp.rb
 - test/tc_tcp_pipelining.rb
 - test/tc_tkey.rb
 - test/tc_tlsa.rb
+- test/tc_transport_fork.rb
 - test/tc_tsig.rb
+- test/tc_tsig_api.rb
+- test/tc_tsig_rfc8945.rb
 - test/tc_update.rb
+- test/tc_v2_release_dnssec.rb
+- test/tc_v2_release_transport.rb
+- test/tc_v2_zone_transfer_native.rb
 - test/tc_validator.rb
 - test/tc_verifier.rb
 - test/tc_zone_reader.rb
+- test/tcp_pipelining_server.rb
 - test/test_dnsserver.rb
 - test/test_utils.rb
 - test/ts_dnsruby.rb
@@ -361,7 +456,7 @@ files:
 - test/ts_online.rb
 homepage: https://github.com/alexdalitz/dnsruby
 licenses:
-- Apache License, Version 2.0
+- Apache-2.0
 metadata:
   yard.run: yard
   bug_tracker_uri: https://github.com/alexdalitz/dnsruby/issues
@@ -380,14 +475,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 2.8.0
+      version: 3.0.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.7.2
+rubygems_version: 4.0.19
 specification_version: 4
 summary: Ruby DNS(SEC) implementation
 test_files:

data/.coveralls.yml

@@ -1,2 +0,0 @@
-service_name: travis-ci
-repo_token: 99b5l6CKFt3CC4rxYUetvDQvKtaTgCJW2