]> git.ipfire.org Git - thirdparty/systemd.git/commit
projects / thirdparty / systemd.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 54b778e) | patch
resolved: do not use NSEC RRs from the wrong zone for proofs
authorLennart Poettering <lennart@poettering.net>
Thu, 14 Jan 2016 16:28:58 +0000 (17:28 +0100)
committerLennart Poettering <lennart@poettering.net>
Sun, 17 Jan 2016 19:44:25 +0000 (20:44 +0100)
commit1827a1582cbd9dcd1ce337b2404ec4425cb0dfd0
tree252219a53e8794c7e51b05efa0f5a122da287104tree | snapshot
parent54b778e7d63ce0af0d5e9401b563c6dd28eff9d3commit | diff
resolved: do not use NSEC RRs from the wrong zone for proofs

When proving NODATA DS lookups we need to insist on looking at the parent zone's NSEC RR, not the child zone's.

When proving any other NODATA lookups we need to insist on looking at the child zone's NSEC RR, not the parent's.
src/resolve/resolved-dns-dnssec.c diff | blob | blame | history
Unnamed repository; edit this file 'description' to name the repository.