letsencrypt / pebble

9%

master: 8%

LAST BUILD ON BRANCH tcp-retry

branch: tcp-retry

CHANGE BRANCH

x

Reset

• tcp-retry
• account-challgne-00
• add-dns-persist-support
• add-dns-persist-support-part-2
• already-replaced
• ari-override
• ari-response-type
• ari-truncate
• better-release
• challtestsrv-log-less
• cpu-custom-redirect-status-code
• cpu-docker-use-go12
• cpu-fix-cname-clear
• cpu-fix-keyrollover-err-check
• cpu-go-1-13
• cpu-go-1-13-now
• cpu-go-go-speed-racer
• cpu-go12
• cpu-mention-non-default-ports
• cpu-mock-servfail
• cpu-no-account-id-field-marshal
• cpu-no-clock-dep
• cpu-no-pebble-client
• cpu-pag-dir-and-nonce
• cpu-readme-subprobs
• cpu-repo-normalize
• cpu-stricter-than-your-gradeschool-teacher
• cpu-tls-one-three
• cpu-use-latest-docker
• dependabot/go_modules/github.com/go-jose/go-jose/v4-4.0.5
• dependabot/go_modules/github.com/miekg/dns-1.1.25
• dependabot/go_modules/golang.org/x/crypto-0.35.0
• dependabot/go_modules/golang.org/x/net-0.36.0
• dependabot/go_modules/golang.org/x/net-0.38.0
• dont-update-absent-parent-order
• ecdsa-chains
• fix-akid_certs
• fix-ci
• fix-lints-ci
• http-chunked-encoded-requests
• invalid-profile
• main
• master
• mattm-deps
• mattm-go-jose
• mattm-go-jose-4.1.3
• mattm-golangci-lint-2
• mattm-golangcilint
• mattm-golangcilint-2.9.0
• mldsa-chains
• newcert
• no-finalize-loc
• optional-comments-pr536
• order-for-display-race
• orders-not-deactivated
• parseTimeAlgoCheck
• rand-seed
• revoked-duplicate
• sslkeylog
• test-cpu-go-go-speed-racer
• update-dns-account-01
• user-action
• useragent
• v2.0.1
• v2.0.2
• v2.1.0
• v2.2.0
• v2.2.1
• v2.2.2
• v2.3.0
• v2.3.1
• vancluever-profile-default-promote

Build # 22118939529

Build Type

Pull #540

github

Committed by kanashimia

Commit Message

Always query DNS records over TCP instead of UDP

TXT records can be quite large, with is a problem for DNS challenges,
they don't fit in the 512 buffer especially if there are multiple.
DNS servers can increase the buffer size through EDNS0 extension,
and retry over TCP if that wasn't enough.

For the pebble purposes there isn't much reason to try UDP first,
it is possible to just always query DNS records over TCP, so we do.

Was originally found in
https://github.com/letsencrypt/pebble/pull/536#issuecomment-3901591399

Pull Request Pull Request #540: Always query DNS records over TCP instead of UDP

Run Details

0 of 1 new or added line in 1 file covered. (0.0%)

431 of 4657 relevant lines covered (9.25%)

1.7 hits per line