]> git.ipfire.org Git - thirdparty/systemd.git/commit
projects / thirdparty / systemd.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6ff01a0) | patch
resolved: when processing auxiliary DNSSEC transactions, accept those with SERVFAIL 3594/head
authorLennart Poettering <lennart@poettering.net>
Thu, 23 Jun 2016 21:46:56 +0000 (23:46 +0200)
committerLennart Poettering <lennart@poettering.net>
Thu, 23 Jun 2016 21:46:56 +0000 (23:46 +0200)
commitb3c6b00a93cca0e9108cef0b63e11787c1e10fc3
tree18528b22923c5768a6e2eeddb8149f71d23ef048tree | snapshot
parent6ff01a0d645e21e44fb0d6222d9d098019bcbefdcommit | diff
resolved: when processing auxiliary DNSSEC transactions, accept those with SERVFAIL

Some upstream DNS servers return SERVFAIL if we ask them for DNSSEC RRs, which
some forwarding DNS servers pass on to us as SERVFAIL (other though as
NOERROR...). This is should not be considered a problem, as long as the domain
in question didn't have DNSSEC enabled. Hence: when making use of auxiliary
transactions accept those that return SERVFAIL.
src/resolve/resolved-dns-transaction.c diff | blob | blame | history
Unnamed repository; edit this file 'description' to name the repository.