error_encode(r_buffer, LDNS_RCODE_SERVFAIL,
&m->s.qinfo, r->qid, r->qflags, &r->edns);
}
-
- /* Send along EDE BOGUS EDNS0 option when validation is bogus */
-
m->reply_list = NULL;
comm_point_send_reply(&r->query_reply);
m->reply_list = rlist;
# EDE with CD bit set (EDE but no SERVFAIL)
dig @127.0.0.1 -p $UNBOUND_PORT cd.dnskey-failures.test +cd > cd_bit_ede.txt
+if ! grep -q -e "NXDOMAIN" cd_bit_ede.txt
+then
+ echo "No NXDOMAIN reply with CD bit set"
+ cat cd_bit_ede.txt
+ exit 1
+fi
if ! grep -q -e "OPT=15: 00 09" -e "EDE: 9" cd_bit_ede.txt
then
echo "No EDE attached with CD bit set"
exit 1
fi
+# TODO EDE with CD bit set (EDE but no SERVFAIL) for a cached answer
# TODO DNSSEC indeterminate when implemented