]> git.ipfire.org Git - thirdparty/unbound.git/commit
projects / thirdparty / unbound.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 492a5ca) | patch
Be lenient when a NSEC NameError response with RCODE=NXDOMAIN is received.
authorMatthijs Mekking <matje@nlnetlabs.nl>
Thu, 20 Feb 2014 09:46:50 +0000 (09:46 +0000)
committerMatthijs Mekking <matje@nlnetlabs.nl>
Thu, 20 Feb 2014 09:46:50 +0000 (09:46 +0000)
commitdab0af8d87f6ba9cffeb6a36e447552fef8fd93c
tree78b436dde3b2a5cf1387b0e94194a99b75a99aeetree | snapshot
parent492a5ca68160d90a3593409558271d2f68f49733commit | diff
Be lenient when a NSEC NameError response with RCODE=NXDOMAIN is received.
This is okay according 4035, but not after revising existence in 4592.
NSEC empty non-terminals exist and thus the RCODE should have been NOERROR.

If this occurs, and the RRsets are secure, we set the RCODE to NOERROR and
the security status of the reponse is also considered secure.

git-svn-id: file:///svn/unbound/trunk@3089 be551aaa-1e26-0410-a405-d3ace91eadb9
validator/validator.c diff | blob | blame | history
Mirror of https://github.com/NLnetLabs/unbound.git