]> git.ipfire.org Git - thirdparty/ldns.git/commitdiff
Canonicalize "Signer's Name" in RRSIG in ldns_rr2canonical too.
authorWillem Toorop <willem@NLnetLabs.nl>
Wed, 25 Jan 2012 15:58:43 +0000 (15:58 +0000)
committerWillem Toorop <willem@NLnetLabs.nl>
Wed, 25 Jan 2012 15:58:43 +0000 (15:58 +0000)
rr.c

diff --git a/rr.c b/rr.c
index b61e119309bc35eeee4e6009df200ba3438a727b..09f4ad86d9c29131345d2e1c4cc191222e2fa6d1 100644 (file)
--- a/rr.c
+++ b/rr.c
@@ -1736,6 +1736,9 @@ ldns_rr2canonical(ldns_rr *rr)
        /*
         * lowercase the rdata dnames if the rr type is one
         * of the list in chapter 7 of RFC3597
+        * Also added RRSIG, because a "Signer's Name" should be canonicalized
+        * too. See dnssec-bis-updates-16. We can add it to this list because
+        * the "Signer's Name"  is the only dname type rdata field in a RRSIG.
         */
        switch(ldns_rr_get_type(rr)) {
                case LDNS_RR_TYPE_NS:
@@ -1760,6 +1763,7 @@ ldns_rr2canonical(ldns_rr *rr)
                case LDNS_RR_TYPE_SRV:
                case LDNS_RR_TYPE_DNAME:
                case LDNS_RR_TYPE_A6:
+               case LDNS_RR_TYPE_RRSIG:
                        for (i = 0; i < ldns_rr_rd_count(rr); i++) {
                                ldns_dname2canonical(ldns_rr_rdf(rr, i));
                        }