545866 - DNS: Need to query arbitrary DNS record types in Mozilla

Status: RESOLVED WONTFIX

(Core :: Networking, enhancement, P3)

Description

[Ben Bucksch (:BenB)]

Current status: To look up hostnames, Mozilla simply uses C lib function getaddrbyname() from the OS. That's enough so far, and a good idea.

However, there are other situations where we need to query other record types like SRV (bug 14328), TXT or MX (bug 342242). We need an IDL interface and implementation in Necko to do that, usable from C++ and chrome JS.

Implementation:
We don't need to write our own DNS resolver for that, the OS provides another function to make such lookups, namely dnsquerya() (Windows), res_query() (Unix) and friends. The patch in bug 14328 uses them, but restricts the API to SRV and TXT. The API in this bug should allow to query any DNS record type.

Comment 2

[Ben Bucksch (:BenB)]

Started working on it. API changes are done, implementation follows.

Comment 3

[Ben Bucksch (:BenB)]

Attachment: WIP v1 - API changes

Comment 4

[Ben Bucksch (:BenB)]

Attachment: WIP, v5

Comment 5

[Ben Bucksch (:BenB)]

Attachment: Fix, v6

Comment 6

[Simon Schubert]

What does it take to get this patch committed?

Comment 7

[Ben Bucksch (:BenB)]

It's a "work in progress", not done yet.

Comment 8

[Ben Bucksch (:BenB)]

Anybody feel free to adopt the patch.

Comment 9

[Bill McGonigle (not currently reading bugmail; please contact directly)]

@Ben: thanks for your work on this.  How would you characterize the state of your patch now - feature incomplete, needs testing, etc?

Comment 10

[Leen Besselink]

I don't know if this was mentioned in any of the other related bug-reports, but there is a paper on adding DNSSEC-checks to applications here:

http://conferences.npl.co.uk/satin/papers/satin2011-Hardaker.pdf it points to an existing patch on this page:

https://www.dnssec-tools.org/wiki/index.php/DNSSEC_Applications

I guess the patches are in the SVN-repository:

https://www.dnssec-tools.org/svn/dnssec-tools/trunk/dnssec-tools/apps/mozilla/

It got the last updates for Firefox 3.6. I haven't checked if it works for 4 or applies to the current code.

Comment 11

[Ben Bucksch (:BenB)]

Comment on attachment 437201 [details] [diff] [review]
Fix, v6

FWIW, IIRC, this was mostly working, but had one of the new, included tests failing unexpectedly. That would need to be investigated.

Comment 12

[Ben Bucksch (:BenB)]

:Fallen volunteered to take a look. I'm personally swamped at my day work currently.

Comment 13

[Philipp Kewisch [:Fallen][📱📆]]

Yes, I'll take a look and see what the state is on this. Calendar could make good use of this, detecting the server for a domain using DNS SRV and TEXT entries as in http://tools.ietf.org/html/draft-daboo-srv-caldav-10

Comment 14

[Steve Workman [:sworkman] (INACTIVE)]

All, thanks for the patches - please see my comment in bug 14328 about how these two mugs fit with other work we're planning to do for DNS. Thanks!

Comment 15

[Mike Taylor [:bear]]

ping - can I ask if this needs anything to be landed?  Is there something I can help agitate for?

As an XMPP person I would love to see this land so that Thunderbird can get proper XMPP client support.

thanks!

Comment 16

[Ben Bucksch (:BenB)]

Hey bear,

thank you very much for the offer!

The patches are pretty much finished. As far as I remember, there was one of the new testcases that I wrote which sometimes failed. I didn't have time to investigate, and I stopped.
Of course, the patch also has to be unbitrotted.

The code is should be all written and finished, though.

If you would like to adopt the patch and drive it to commit, I would be very grateful!

Ben

Comment 17

[Florian Quèze [:florian]]

(In reply to Mike Taylor [:bear] from comment #15)
> ping - can I ask if this needs anything to be landed?  Is there something I
> can help agitate for?

I think the most recent sign of activity on a related bug was in bug 735967, so it may be where you want to start if you want to find who would be most likely to make things move forward if you pinged them.

Comment 18

[Steve Workman [:sworkman] (INACTIVE)]

Hi all,

Florian is right - bug 735967 has a framework patch uploaded for feedback. Please take a look and comment.
Hoping to make some more progress on this in the next month.

Comment 19

[Philipp Kewisch [:Fallen][📱📆]]

sorry, as much as I'd like to I don't think I will be getting around to this any time soon.

Comment 20

[Firefox Bug Husbandry Bot]

Bulk change to priority: https://bugzilla.mozilla.org/show_bug.cgi?id=1399258

Comment 21

[Firefox Bug Husbandry Bot]

Bulk change to priority: https://bugzilla.mozilla.org/show_bug.cgi?id=1399258

Comment 22

[Ben Bucksch (:BenB)]

Compare bug 787369, which has a DNS.jsm that directly calls the native "resolv" library.

Comment 23

[Randell Jesup [:jesup] (needinfo me)]

Bug 1852900 has covered this for RR records for https; extending that to cover the request from this bug seems like a quite useful improvement

Comment 24

[Valentin Gosu [:valentin] (he/him)]

Webextensions are no longer allowed to do arbitrary dns resolutions, so wontfix.