From: Evan Hunt Date: Wed, 22 Jul 2026 07:09:06 +0000 (+0000) Subject: fix: usr: Treat an unusable NSEC3 chain as a verification failure X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c0a964549b9eb87c89fecfb1e91210c46ff06780;p=thirdparty%2Fbind9.git fix: usr: Treat an unusable NSEC3 chain as a verification failure When transferring in a mirror zone, DNSSEC verification could incorrectly succeed when the zone had an invalid `NSEC3PARAM` record, leading to subsequent validation failures. This has been fixed. Closes #6136 Merge branch '6136-zoneverify-nsec3param' into 'main' See merge request isc-projects/bind9!12408 --- c0a964549b9eb87c89fecfb1e91210c46ff06780