]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
projects / thirdparty / bind9.git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | combined (merge: e748b6d 8a14413)
fix: usr: Treat an unusable NSEC3 chain as a verification failure
authorEvan Hunt <each@isc.org>
Wed, 22 Jul 2026 07:09:06 +0000 (07:09 +0000)
committerEvan Hunt <each@isc.org>
Wed, 22 Jul 2026 07:09:06 +0000 (07:09 +0000)
When transferring in a mirror zone, DNSSEC verification could incorrectly succeed when the zone had an invalid `NSEC3PARAM` record, leading to subsequent validation failures. This has been fixed.

Closes #6136

Merge branch '6136-zoneverify-nsec3param' into 'main'

See merge request isc-projects/bind9!12408


Trivial merge
Mirror of https://gitlab.isc.org/isc-projects/bind9.git