NSEC rdata not lowercased.

git-svn-id: file:///svn/unbound/trunk@623 be551aaa-1e26-0410-a405-d3ace91eadb9

diff --git a/doc/Changelog b/doc/Changelog
index bdd30189ece899c5bc5341856d6d79b0e6b39a29..8d0425108b82cb48e58bd736b60a62f1ce2a14bc 100644 (file)
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -5,6 +5,7 @@
          and for failed prime when missing glue.
        - fixup so useless delegation points are not returned from the
          cache. Also the safety belt is used if priming fails to complete.
+       - fixup NSEC rdata not to be lowercased, bind compat.
 
 18 September 2007: Wouter
        - wildcard nsec3 testcases, and fixup to get correct wildcard name.

diff --git a/validator/val_sigcrypt.c b/validator/val_sigcrypt.c
index 3b9c2d8e226cd21dcf549b50b60969c4a215588b..54c80ea464d719c1de3ca39433701045f8fea16b 100644 (file)
--- a/validator/val_sigcrypt.c
+++ b/validator/val_sigcrypt.c
@@ -899,7 +899,6 @@ canonicalize_rdata(ldns_buffer* buf, struct ub_packed_rrset_key* rrset,
        uint8_t* datstart = ldns_buffer_current(buf)-len+2;
        switch(ntohs(rrset->rk.type)) {
                case LDNS_RR_TYPE_NXT: 
-               case LDNS_RR_TYPE_NSEC: /* type starts with the name */
                case LDNS_RR_TYPE_NS:
                case LDNS_RR_TYPE_MD:
                case LDNS_RR_TYPE_MF:
@@ -987,6 +986,10 @@ canonicalize_rdata(ldns_buffer* buf, struct ub_packed_rrset_key* rrset,
                        datstart += 6;
                        query_dname_tolower(datstart);
                        return;
+
+               /* do not canonicalize NSEC rdata name, compat with bug
+                * from bind 9.4 signer, where it does not do so */
+               case LDNS_RR_TYPE_NSEC: /* type starts with the name */
                /* A6 not supported */
                default:        
                        /* nothing to do for unknown types */