From 2e82dcf14a398ee0772ad48c95d73b17cb7adba8 Mon Sep 17 00:00:00 2001 From: Willem Toorop Date: Wed, 25 Jan 2012 15:58:43 +0000 Subject: [PATCH] Canonicalize "Signer's Name" in RRSIG in ldns_rr2canonical too. --- rr.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/rr.c b/rr.c index b61e1193..09f4ad86 100644 --- a/rr.c +++ b/rr.c @@ -1736,6 +1736,9 @@ ldns_rr2canonical(ldns_rr *rr) /* * lowercase the rdata dnames if the rr type is one * of the list in chapter 7 of RFC3597 + * Also added RRSIG, because a "Signer's Name" should be canonicalized + * too. See dnssec-bis-updates-16. We can add it to this list because + * the "Signer's Name" is the only dname type rdata field in a RRSIG. */ switch(ldns_rr_get_type(rr)) { case LDNS_RR_TYPE_NS: @@ -1760,6 +1763,7 @@ ldns_rr2canonical(ldns_rr *rr) case LDNS_RR_TYPE_SRV: case LDNS_RR_TYPE_DNAME: case LDNS_RR_TYPE_A6: + case LDNS_RR_TYPE_RRSIG: for (i = 0; i < ldns_rr_rd_count(rr); i++) { ldns_dname2canonical(ldns_rr_rdf(rr, i)); } -- 2.47.3