cf-dns: pass peer for result lookups

The DNS filter knows the peer it resolves and the code parts that want
the results know the peer as well. Pass it to lookup methods to make
sure results match.

Background: when tunneling, the resolved peer is not always the one that
other filters are looking for. Especially when HTTPS-RR results are
accessed in TLS filters, those will differ.

This prevents a HTTPS-RR for a proxy to be used for the origin when ECH
is activated. To make ECH work through a tunnel, we need to start an
additional resolve. Something to be fixed after 8.21.

Closes #22042
This commit is contained in:
Stefan Eissing 2026-06-16 12:07:08 +02:00 committed by Daniel Stenberg
parent 73d060950e
commit 92db819714
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
11 changed files with 96 additions and 54 deletions

View file

@ -48,6 +48,10 @@ Certain Windows installations may be missing CA roots.
[curl issue 20897](https://github.com/curl/curl/issues/20897)
[curl issue 12303](https://github.com/curl/curl/issues/12303)
## ECH not working through Proxy Tunnels
[curl issue 22043](https://github.com/curl/curl/issues/22043)
# Email protocols
## IMAP `SEARCH ALL` truncated response