]> git.ipfire.org Git - thirdparty/bind9.git/commit
Don't verify already trusted rdatasets
authorMatthijs Mekking <matthijs@isc.org>
Tue, 3 Mar 2026 10:17:25 +0000 (11:17 +0100)
committerMichał Kępień <michal@isc.org>
Fri, 13 Mar 2026 12:06:38 +0000 (13:06 +0100)
commit4ba3caff98f8d0ed585e6a30087202007e072ffb
treeb05a1e76305c34f3634eb50f572cee01d8efa99a
parentcd1f2fed56d8e93ddd1e0b7b240cb61f6774dcfd
Don't verify already trusted rdatasets

If we already marked an rdataset as secure (or it has even stronger
trust), there is no need to cryptographically verify it again.

(cherry picked from commit 0ec08c212022d08c9717f2bc6bd3e8ebd6f034ce)
lib/dns/include/dns/types.h
lib/dns/validator.c