]> git.ipfire.org Git - thirdparty/bind9.git/commit
fix: usr: Don't synthesize negative responses with pending NSEC
authorMatthijs Mekking <matthijs@isc.org>
Wed, 8 Jul 2026 12:05:26 +0000 (12:05 +0000)
committerMatthijs Mekking <matthijs@isc.org>
Wed, 8 Jul 2026 12:05:26 +0000 (12:05 +0000)
commit10b8edb27f50bc7da254cbc29a75fba5ecb82cc4
tree57151a37d2c90dd05fda1150534a286f432bfe4d
parentdfefde8481ae6469740dfceeae17b1fe4dcdc256
parentdc0273288323c91a64dd63576b920bfdfd67e7f8
fix: usr: Don't synthesize negative responses with pending NSEC

If an NSEC record has not yet been validated and is cached with trust
pending, don't use it to synthesize negative responses.

Closes #5872

Closes #5887

Closes #5977

Merge branch '5977-validate-synth-from-dnssec' into 'main'

See merge request isc-projects/bind9!12281