]> git.ipfire.org Git - thirdparty/bind9.git/commit
Reject primary zones with an DS record at the zone apex.
authorMark Andrews <marka@isc.org>
Tue, 28 Apr 2020 05:37:19 +0000 (15:37 +1000)
committerOndřej Surý <ondrej@isc.org>
Thu, 4 Jun 2020 14:00:33 +0000 (16:00 +0200)
commit35a58d30c9ddc0ce5c1b77b84f1708b277d5f29d
treecff228008a3a42e797354d6e000179df6209f449
parent2d6f3799353486afeb91283afe43b41eadea82a0
Reject primary zones with an DS record at the zone apex.

DS records only belong at delegation points and if present
at the zone apex are invariably the result of administrative
errors.  Additionally they can't be queried for with modern
resolvers as the parent servers will be queried.
bin/tests/system/checkzone/zones/bad-ds.db [new file with mode: 0644]
lib/dns/include/dns/result.h
lib/dns/master.c
lib/dns/result.c