]> git.ipfire.org Git - thirdparty/bind9.git/commit
Handle DNS_R_NCACHENXRRSET in fetch_callback_{dnskey,validator}()
authorMark Andrews <marka@isc.org>
Wed, 28 Oct 2020 00:58:38 +0000 (11:58 +1100)
committerMark Andrews <marka@isc.org>
Thu, 29 Oct 2020 21:25:03 +0000 (08:25 +1100)
commit4a4605fbefd74ae8417f4601950e313ea2977eba
treee3dc5f2d6c940f070c2da1e6f6fa27a141636fad
parent85fba4e36bba9b0d0ff09b3ea806e010213e23aa
Handle DNS_R_NCACHENXRRSET in fetch_callback_{dnskey,validator}()

DNS_R_NCACHENXRRSET can be return when zones are in transition state
from being unsigned to signed and signed to unsigned.  The validation
should be resumed and should result in a insecure answer.

(cherry picked from commit 718e597def1daaae7edf9b151f6b24e0acc5c87a)
lib/dns/validator.c