]> git.ipfire.org Git - thirdparty/systemd.git/commit - src/resolve/resolved-dns-dnssec.c
resolved: tighten search for NSEC3 RRs a bit
authorLennart Poettering <lennart@poettering.net>
Mon, 21 Dec 2015 20:06:29 +0000 (21:06 +0100)
committerLennart Poettering <lennart@poettering.net>
Sat, 26 Dec 2015 18:09:10 +0000 (19:09 +0100)
commitdb5b0e92b3c23e6f360bd0f44a655b35921a6c98
treefd0e65c2ffbb98361882c76bbbabd6408ec91a2d
parent13b78323bad1e41e0474b833da2a0b72aab56f09
resolved: tighten search for NSEC3 RRs a bit

Be stricter when searching suitable NSEC3 RRs for proof: generalize the
check we use to find suitable NSEC3 RRs, in nsec3_is_good(), and add
additional checks, such as checking whether all NSEC3 RRs use the same
parameters, have the same suffix and so on.
src/resolve/resolved-dns-dnssec.c
src/resolve/resolved-dns-transaction.c
src/shared/dns-domain.c
src/shared/dns-domain.h
src/test/test-dns-domain.c