]> git.ipfire.org Git - thirdparty/systemd.git/commit
resolve: always request records to validate negative answer 23114/head
authorYu Watanabe <watanabe.yu+github@gmail.com>
Mon, 18 Apr 2022 18:58:50 +0000 (03:58 +0900)
committerYu Watanabe <watanabe.yu+github@gmail.com>
Mon, 18 Apr 2022 18:58:58 +0000 (03:58 +0900)
commit26b23d11870185b2ddab51bb1684d6761e8aa553
tree51ff940e740dc5e5dd76e53ca9e6f4aff4767b29
parentcd2cdba2fedf2dc71ff6429157c2e3b39938a93d
resolve: always request records to validate negative answer

Otherwise, dns_transaction_requires_nsec() may not find no required
transaction, and return true. That sets
`answer_dnssec_result = DNSSEC_NO_SIGNATURE`, and the entire transaction fails.

Fixes #21414.
src/resolve/resolved-dns-transaction.c