]> git.ipfire.org Git - thirdparty/knot-resolver.git/commit
projects / thirdparty / knot-resolver.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 807cfa0) | patch
layer/validate: handle unknown algorithms
authorVladimír Čunát <vladimir.cunat@nic.cz>
Mon, 26 Jun 2017 09:49:49 +0000 (11:49 +0200)
committerVladimír Čunát <vladimir.cunat@nic.cz>
Mon, 24 Jul 2017 09:36:06 +0000 (11:36 +0200)
commitcd8cd0a4ba0ae4cfb970ee52b7b77746800f46ca
tree66ee619639c5031f78b03f7ee9482f99d687384ftree
parent807cfa0b822a71ed493b57e7db548c3d7a030cf7commit | diff
layer/validate: handle unknown algorithms

i.e. downgrade a zone to insecure when *all* DNSKEYs of the apex are
unverifiable due to unimplemented DNSKEY or DS algorithms.
Fixes https://gitlab.labs.nic.cz/knot/resolver/issues/210
NEWS diff | blob | blame | history
lib/dnssec.c diff | blob | blame | history
lib/dnssec.h diff | blob | blame | history
lib/dnssec/signature.c diff | blob | blame | history
lib/dnssec/signature.h diff | blob | blame | history
lib/layer/validate.c diff | blob | blame | history
Mirror of https://gitlab.nic.cz/knot/knot-resolver.git