]> git.ipfire.org Git - thirdparty/systemd.git/commit - src/resolve/resolved-dns-dnssec.c
resolved: some RR types may appear only or not at all in a zone apex
authorLennart Poettering <lennart@poettering.net>
Thu, 14 Jan 2016 16:25:06 +0000 (17:25 +0100)
committerLennart Poettering <lennart@poettering.net>
Sun, 17 Jan 2016 19:44:25 +0000 (20:44 +0100)
commit588c53d0441ee33b617582429434b47492f51744
treec5d91bae40f4a45d295a7d350e4cb4677c274bed
parent3d39e6e5d475461c20d0300da80ff8cae5780ccf
resolved: some RR types may appear only or not at all in a zone apex

Add extra checks when validating with RRSIGs. This follows recommendations from:

http://www.george-barwood.pwp.blueyonder.co.uk/DnsServer/NotesOnDNSSSEC.htm
src/resolve/dns-type.c
src/resolve/dns-type.h
src/resolve/resolved-dns-dnssec.c