base on A C library for asynchronous DNS requests # [](https://c-ares.org/) [](https://cirrus-ci.com/github/c-ares/c-ares) [](https://ci.appveyor.com/project/c-ares/c-ares/branch/main) [](https://coveralls.io/github/c-ares/c-ares?branch=main) [](https://bestpractices.coreinfrastructure.org/projects/291) [](https://bugs.chromium.org/p/oss-fuzz/issues/list?sort=-opened&can=1&q=proj:c-ares) [](https://sonarcloud.io/summary/new_code?id=c-ares_c-ares) [](https://scan.coverity.com/projects/c-ares) - [Overview](#overview) - [Code](#code) - [Communication](#communication) - [Release Keys](#release-keys) - [Verifying signatures](#verifying-signatures) - [Features](#features) - [RFCs and Proposals](#supported-rfcs-and-proposals) ## Overview [c-ares](https://c-ares.org) is a modern DNS (stub) resolver library, written in C. It provides interfaces for asynchronous queries while trying to abstract the intricacies of the underlying DNS protocol. It was originally intended for applications which need to perform DNS queries without blocking, or need to perform multiple DNS queries in parallel. One of the goals of c-ares is to be a better DNS resolver than is provided by your system, regardless of which system you use. We recommend using the c-ares library in all network applications even if the initial goal of asynchronous resolution is not necessary to your application. c-ares will build with any C89 compiler and is [MIT licensed](LICENSE.md), which makes it suitable for both free and commercial software. c-ares runs on Linux, FreeBSD, OpenBSD, MacOS, Solaris, AIX, Windows, Android, iOS and many more operating systems. c-ares has a strong focus on security, implementing safe parsers and data builders used throughout the code, thus avoiding many of the common pitfalls of other C libraries. Through automated testing with our extensive testing framework, c-ares is constantly validated with a range of static and dynamic analyzers, as well as being constantly fuzzed by [OSS Fuzz](https://github.com/google/oss-fuzz). While c-ares has been around for over 20 years, it has been actively maintained both in regards to the latest DNS RFCs as well as updated to follow the latest best practices in regards to C coding standards. ## Code The full source code and revision history is available in our [GitHub repository](https://github.com/c-ares/c-ares). Our signed releases are available in the [release archives](https://c-ares.org/download/). See the [INSTALL.md](INSTALL.md) file for build information. ## Communication **Issues** and **Feature Requests** should be reported to our [GitHub Issues](https://github.com/c-ares/c-ares/issues) page. **Discussions** around c-ares and its use, are held on [GitHub Discussions](https://github.com/c-ares/c-ares/discussions/categories/q-a) or the [Mailing List](https://lists.haxx.se/mailman/listinfo/c-ares). Mailing List archive [here](https://lists.haxx.se/pipermail/c-ares/). Please, do not mail volunteers privately about c-ares. **Security vulnerabilities** are treated according to our [Security Procedure](SECURITY.md), please email c-ares-security at haxx.se if you suspect one. ## Release keys Primary GPG keys for c-ares Releasers (some Releasers sign with subkeys): * **Daniel Stenberg** <<[email protected]>> `27EDEAF22F3ABCEB50DB9A125CC908FDB71E12C2` * **Brad House** <<[email protected]>> `DA7D64E4C82C6294CB73A20E22E3D13B5411B7CA` To import the full set of trusted release keys (including subkeys possibly used to sign releases): ```bash gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys 27EDEAF22F3ABCEB50DB9A125CC908FDB71E12C2 # Daniel Stenberg gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys DA7D64E4C82C6294CB73A20E22E3D13B5411B7CA # Brad House ``` ### Verifying signatures For each release `c-ares-X.Y.Z.tar.gz` there is a corresponding `c-ares-X.Y.Z.tar.gz.asc` file which contains the detached signature for the release. After fetching all of the possible valid signing keys and loading into your keychain as per the prior section, you can simply run the command below on the downloaded package and detached signature: ```bash % gpg -v --verify c-ares-1.29.0.tar.gz.asc c-ares-1.29.0.tar.gz gpg: enabled compatibility flags: gpg: Signature made Fri May 24 02:50:38 2024 EDT gpg: using RSA key 27EDEAF22F3ABCEB50DB9A125CC908FDB71E12C2 gpg: using pgp trust model gpg: Good signature from "Daniel Stenberg <[email protected]>" [unknown] gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: 27ED EAF2 2F3A BCEB 50DB 9A12 5CC9 08FD B71E 12C2 gpg: binary signature, digest algorithm SHA512, key algorithm rsa2048 ``` ## SLSA Provenance This project generates [SLSA](https://slsa.dev/) provenance for its releases! This enables you to verify the integrity of the downloaded artifacts and ensure that the release was generated from the intended repository. To verify the provenance of the release, please follow the instructions [here](https://github.com/slsa-framework/slsa-github-generator#verify-provenance). Example: ``` $ curl -sO https://github.com/c-ares/c-ares/releases/download/v1.34.3/c-ares-1.34.3.intoto.jsonl $ curl -sO https://github.com/c-ares/c-ares/releases/download/v1.34.3/c-ares-1.34.3.tar.gz $ slsa-verifier verify-artifact c-ares-1.34.3.tar.gz \ --provenance-path c-ares-1.34.3.intoto.jsonl \ --source-uri github.com/c-ares/c-ares \ --source-tag v1.34.3 Verified signature against tlog entry index 147812470 at URL: https://rekor.sigstore.dev/api/v1/log/entries/108e9186e8c5677a9bfd5bc5181d05ada688a805f9a59cfd082dec27cb6d6567f85b7382eea39dc5 Verified build using builder "https://github.com/slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@refs/tags/v2.0.0" at commit c29e75d54c3743783d51a609980495cf553b4bca Verifying artifact c-ares-1.34.3.tar.gz: PASSED PASSED: SLSA verification passed ``` ## Features See [Features](FEATURES.md) ### Supported RFCs and Proposals - [RFC1035](https://datatracker.ietf.org/doc/html/rfc1035). Initial/Base DNS RFC - [RFC2671](https://datatracker.ietf.org/doc/html/rfc2671), [RFC6891](https://datatracker.ietf.org/doc/html/rfc6891). EDNS0 option (meta-RR) - [RFC3596](https://datatracker.ietf.org/doc/html/rfc3596). IPv6 Address. `AAAA` Record. - [RFC2782](https://datatracker.ietf.org/doc/html/rfc2782). Server Selection. `SRV` Record. - [RFC3403](https://datatracker.ietf.org/doc/html/rfc3403). Naming Authority Pointer. `NAPTR` Record. - [RFC6698](https://datatracker.ietf.org/doc/html/rfc6698). DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) Protocol. `TLSA` Record. - [RFC9460](https://datatracker.ietf.org/doc/html/rfc9460). General Purpose Service Binding, Service Binding type for use with HTTPS. `SVCB` and `HTTPS` Records. - [RFC7553](https://datatracker.ietf.org/doc/html/rfc7553). Uniform Resource Identifier. `URI` Record. - [RFC6844](https://datatracker.ietf.org/doc/html/rfc6844). Certification Authority Authorization. `CAA` Record. - [RFC2535](https://datatracker.ietf.org/doc/html/rfc2535), [RFC2931](https://datatracker.ietf.org/doc/html/rfc2931). `SIG0` Record. Only basic parser, not full implementation. - [RFC7873](https://datatracker.ietf.org/doc/html/rfc7873), [RFC9018](https://datatracker.ietf.org/doc/html/rfc9018). DNS Cookie off-path dns poisoning and amplification mitigation. - [draft-vixie-dnsext-dns0x20-00](https://datatracker.ietf.org/doc/html/draft-vixie-dnsext-dns0x20-00). DNS 0x20 query name case randomization to prevent cache poisioning attacks. - [RFC7686](https://datatracker.ietf.org/doc/html/rfc7686). Reject queries for `.onion` domain names with `NXDOMAIN`. - [RFC2606](https://datatracker.ietf.org/doc/html/rfc2606), [RFC6761](https://datatracker.ietf.org/doc/html/rfc6761). Special case treatment for `localhost`/`.localhost`. - [RFC2308](https://datatracker.ietf.org/doc/html/rfc2308), [RFC9520](https://datatracker.ietf.org/doc/html/rfc9520). Negative Caching of DNS Resolution Failures. - [RFC6724](https://datatracker.ietf.org/doc/html/rfc6724). IPv6 address sorting as used by `ares_getaddrinfo()`. - [RFC7413](https://datatracker.ietf.org/doc/html/rfc7413). TCP FastOpen (TFO) for 0-RTT TCP Connection Resumption. - [RFC3986](https://datatracker.ietf.org/doc/html/rfc3986). Uniform Resource Identifier (URI). Used for server configuration. ", Assign "at most 3 tags" to the expected json: {"id":"4414","tags":[]} "only from the tags list I provide: [{"id":77,"name":"3d"},{"id":89,"name":"agent"},{"id":17,"name":"ai"},{"id":54,"name":"algorithm"},{"id":24,"name":"api"},{"id":44,"name":"authentication"},{"id":3,"name":"aws"},{"id":27,"name":"backend"},{"id":60,"name":"benchmark"},{"id":72,"name":"best-practices"},{"id":39,"name":"bitcoin"},{"id":37,"name":"blockchain"},{"id":1,"name":"blog"},{"id":45,"name":"bundler"},{"id":58,"name":"cache"},{"id":21,"name":"chat"},{"id":49,"name":"cicd"},{"id":4,"name":"cli"},{"id":64,"name":"cloud-native"},{"id":48,"name":"cms"},{"id":61,"name":"compiler"},{"id":68,"name":"containerization"},{"id":92,"name":"crm"},{"id":34,"name":"data"},{"id":47,"name":"database"},{"id":8,"name":"declarative-gui "},{"id":9,"name":"deploy-tool"},{"id":53,"name":"desktop-app"},{"id":6,"name":"dev-exp-lib"},{"id":59,"name":"dev-tool"},{"id":13,"name":"ecommerce"},{"id":26,"name":"editor"},{"id":66,"name":"emulator"},{"id":62,"name":"filesystem"},{"id":80,"name":"finance"},{"id":15,"name":"firmware"},{"id":73,"name":"for-fun"},{"id":2,"name":"framework"},{"id":11,"name":"frontend"},{"id":22,"name":"game"},{"id":81,"name":"game-engine "},{"id":23,"name":"graphql"},{"id":84,"name":"gui"},{"id":91,"name":"http"},{"id":5,"name":"http-client"},{"id":51,"name":"iac"},{"id":30,"name":"ide"},{"id":78,"name":"iot"},{"id":40,"name":"json"},{"id":83,"name":"julian"},{"id":38,"name":"k8s"},{"id":31,"name":"language"},{"id":10,"name":"learning-resource"},{"id":33,"name":"lib"},{"id":41,"name":"linter"},{"id":28,"name":"lms"},{"id":16,"name":"logging"},{"id":76,"name":"low-code"},{"id":90,"name":"message-queue"},{"id":42,"name":"mobile-app"},{"id":18,"name":"monitoring"},{"id":36,"name":"networking"},{"id":7,"name":"node-version"},{"id":55,"name":"nosql"},{"id":57,"name":"observability"},{"id":46,"name":"orm"},{"id":52,"name":"os"},{"id":14,"name":"parser"},{"id":74,"name":"react"},{"id":82,"name":"real-time"},{"id":56,"name":"robot"},{"id":65,"name":"runtime"},{"id":32,"name":"sdk"},{"id":71,"name":"search"},{"id":63,"name":"secrets"},{"id":25,"name":"security"},{"id":85,"name":"server"},{"id":86,"name":"serverless"},{"id":70,"name":"storage"},{"id":75,"name":"system-design"},{"id":79,"name":"terminal"},{"id":29,"name":"testing"},{"id":12,"name":"ui"},{"id":50,"name":"ux"},{"id":88,"name":"video"},{"id":20,"name":"web-app"},{"id":35,"name":"web-server"},{"id":43,"name":"webassembly"},{"id":69,"name":"workflow"},{"id":87,"name":"yaml"}]" returns me the "expected json"