]> git.ipfire.org Git - thirdparty/systemd.git/commit
resolved: make sure configured NTAs affect subdomains too
authorLennart Poettering <lennart@poettering.net>
Tue, 14 Feb 2017 16:28:17 +0000 (17:28 +0100)
committerLennart Poettering <lennart@poettering.net>
Fri, 17 Feb 2017 09:25:15 +0000 (10:25 +0100)
commitc775838ad7a1f33dcd2f1fac01d1a805bb96bc1f
tree6cf3983e99837c94e1b1cee0766495245a165688
parentf73e6ee687213d8f78a93a9519901d0fe314c228
resolved: make sure configured NTAs affect subdomains too

This ensures that configured NTAs exclude not only the listed domain but
also all domains below it from DNSSEC validation -- except if a positive
trust anchor is defined below (as suggested by RFC7647, section 1.1)

Fixes: #5048
src/resolve/resolved-dns-trust-anchor.c