]> git.ipfire.org Git - thirdparty/pdns.git/commit
rec: Add unit tests for the NSEC3 Opt-Out case
authorRemi Gacogne <remi.gacogne@powerdns.com>
Mon, 20 Jan 2020 18:24:13 +0000 (19:24 +0100)
committerRemi Gacogne <remi.gacogne@powerdns.com>
Mon, 20 Jan 2020 18:24:13 +0000 (19:24 +0100)
commitc179741988b9273b12c15a6b318ff0a43fe50081
tree7fca069382d89e9717cfa442b32d50f9d88fa1e5
parentceec969b55a353cd3e6f4015229ed98eeede9c5d
rec: Add unit tests for the NSEC3 Opt-Out case

An Opt-Out NSEC3 only proves that there is no delegation, so we
should not consider a DS NODATA or a NXDOMAIN proved by that RR
secure but insecure.
This was fixed in 18c8faae6c67f734583c5c881d0d083d3253b49e and this
commit adds a few unit tests to cover the fix.
pdns/recursordist/test-syncres_cc.cc
pdns/recursordist/test-syncres_cc.hh
pdns/recursordist/test-syncres_cc6.cc
pdns/validate.cc