]> git.ipfire.org Git - thirdparty/knot-dns.git/commitdiff
libknot: add support for EDE code 33 (Negative Trust Anchor)
authorBabak Farrokhi <babak@quad9.net>
Wed, 1 Jul 2026 12:18:14 +0000 (14:18 +0200)
committerDaniel Salzman <daniel.salzman@nic.cz>
Wed, 1 Jul 2026 12:59:32 +0000 (14:59 +0200)
Let users know what a resolver returned an insecure answer, when an NTA
is in effect.

IANA has already assigned an Extended DNS Error INFO-CODE 33 "Negative Trust Anchor"

Link: https://datatracker.ietf.org/doc/draft-farrokhi-dnsop-ede-nta/
src/libknot/codes.c
src/libknot/consts.h

index 1b67daeeb99619482e26e56bad31abf31e4065d4..a37e41e92c7c6af3aa25796da2d63a55417f4be3 100644 (file)
@@ -82,6 +82,7 @@ const knot_lookup_t knot_edns_ede_names[] = {
        { KNOT_EDNS_EDE_NONCONF_POLICY,   "Unable to conform to policy" },
        { KNOT_EDNS_EDE_SYNTHESIZED,      "Synthesized" },
        { KNOT_EDNS_EDE_INV_QTYPE,        "Invalid Query Type" },
+       { KNOT_EDNS_EDE_NTA,              "Negative Trust Anchor" },
        { 0, NULL }
 };
 
index 533481f3047e9d3b1b42a681cd3c3f7ce1ed9dd8..fad5ade34aaae9af3796e78d2703acdb31db46a9 100644 (file)
@@ -124,6 +124,7 @@ typedef enum {
        KNOT_EDNS_EDE_NONCONF_POLICY   = 28,
        KNOT_EDNS_EDE_SYNTHESIZED      = 29,
        KNOT_EDNS_EDE_INV_QTYPE        = 30,
+       KNOT_EDNS_EDE_NTA              = 33,
 } knot_edns_ede_t;
 
 /*!