]> git.ipfire.org Git - thirdparty/systemd.git/commit
resolved: properly implement RRSIG validation of wildcarded RRsets
authorLennart Poettering <lennart@poettering.net>
Mon, 21 Dec 2015 18:57:34 +0000 (19:57 +0100)
committerLennart Poettering <lennart@poettering.net>
Sat, 26 Dec 2015 18:09:10 +0000 (19:09 +0100)
commite7ff0e0b391341bdc4d9c08dff1c477e1df6a682
tree03852136cb91d95a6549b74a983f295abdc8c250
parentd38d5ca65b3f8fd19348a7919cf1f1f07c955393
resolved: properly implement RRSIG validation of wildcarded RRsets

Note that this is still not complete, one additional step is still
missing: when we verified that a wildcard RRset is properly signed, we
still need to do an NSEC/NSEC3 proof that no more specific RRset exists.
src/resolve/resolved-dns-dnssec.c
src/shared/dns-domain.c
src/shared/dns-domain.h
src/test/test-dns-domain.c