]> git.ipfire.org Git - thirdparty/pdns.git/commit
rec: Fix DNSSEC validation of completely empty NXDomain answers
authorRemi Gacogne <remi.gacogne@powerdns.com>
Fri, 24 Apr 2020 09:48:16 +0000 (11:48 +0200)
committerOtto Moerbeek <otto.moerbeek@open-xchange.com>
Wed, 13 May 2020 09:38:39 +0000 (11:38 +0200)
commit4bba0ec04aacbec08fe585ad790e2e8e0cb7b04a
treead4fbb3b6d22f17fe832f19b07588f496fafbbd3
parentee2a5356a256bf50b2b460ea6f2cea5404a78fa0
rec: Fix DNSSEC validation of completely empty NXDomain answers

If the answer has no SOA and no NSEC inside a DNSSEC-secure zone,
we should go Bogus.
pdns/recursordist/test-syncres_cc7.cc
pdns/syncres.cc