]> git.ipfire.org Git - thirdparty/pdns.git/commit
DNSSEC: Actually follow RFC 7646 §2.1
authorPieter Lexis <pieter.lexis@powerdns.com>
Thu, 1 Sep 2016 09:04:05 +0000 (11:04 +0200)
committerPieter Lexis <pieter.lexis@powerdns.com>
Thu, 1 Sep 2016 09:04:05 +0000 (11:04 +0200)
commitf418a272a9b031ea1eddf031548a16e23a35bd82
tree4e27b4af3bef627a56fc025b53d405bc9d4c1a02
parenta6feb9056ec14014506e752eefcb7de81dae9dd4
DNSSEC: Actually follow RFC 7646 §2.1

We were off by one when counting labels, so when an NTA was added for a
name where a TA was configured, we would still attempt validation.

Reported by @jpmens
pdns/validate.cc