]> git.ipfire.org Git - thirdparty/bind9.git/commit
projects / thirdparty / bind9.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 19f8033) | patch
Reduce the number of verifiations required
authorMark Andrews <marka@isc.org>
Thu, 24 Nov 2022 03:18:20 +0000 (14:18 +1100)
committerPetr Špaček <pspacek@isc.org>
Mon, 3 Apr 2023 15:48:31 +0000 (17:48 +0200)
commit3cb366b1e0003bbdf1988ebbd50c4c485d4bc776
tree2e7cf1a45fe1e32c05bf3537bfe967da25418614tree | snapshot
parent19f803384082b9e953dab1928e5463cb40f57880commit | diff
Reduce the number of verifiations required

In selfsigned_dnskey only call dns_dnssec_verify if the signature's
key id matches a revoked key, the trust is pending and the key
matches a trust anchor.  Previously named was calling dns_dnssec_verify
unconditionally resulted in busy work.

(cherry picked from commit e68fecbdaa0e7ad86322bfa5e977eb1944ba821e)
lib/dns/validator.c diff | blob | blame | history
Mirror of https://gitlab.isc.org/isc-projects/bind9.git