]> git.ipfire.org Git - thirdparty/systemd.git/commit - src/resolve/resolved-dns-packet.c
resolved: apparently not all names are used in canonical form for DNSSEC validation
authorLennart Poettering <lennart@poettering.net>
Fri, 11 Dec 2015 19:19:05 +0000 (20:19 +0100)
committerLennart Poettering <lennart@poettering.net>
Mon, 14 Dec 2015 20:28:39 +0000 (21:28 +0100)
commita3db237b8f1b97867395e1419f39b8ba5749b777
tree413e86bcae6402e48c65141756d73c1845540c4f
parent654d1b335030acccf0894a58b7a30e3130b05383
resolved: apparently not all names are used in canonical form for DNSSEC validation

Specifically, it appears as if the NSEC next domain name should be in
the original casing rather than canonical form, when validating.
src/resolve/resolved-dns-packet.c
src/resolve/resolved-dns-packet.h
src/resolve/test-dnssec.c