]> git.ipfire.org Git - thirdparty/bind9.git/commit
2968. [security] Named could fail to prove a data set was insecure
authorMark Andrews <marka@isc.org>
Tue, 16 Nov 2010 04:17:44 +0000 (04:17 +0000)
committerMark Andrews <marka@isc.org>
Tue, 16 Nov 2010 04:17:44 +0000 (04:17 +0000)
commita407ead333eae4c65a4f0cfebc781feb06f3f944
tree781460ab4d26bab8b4e59709302a166af6af153d
parenta9c555038b407db5a08d90b616de68688b1f7c00
2968.   [security]      Named could fail to prove a data set was insecure
                        before marking it as insecure.  One set of conditions
                        that can trigger this occurs naturally when rolling
                        DNSKEY algorithms.  [RT #22309]

Had to adjust the test to use RSAMD5 -> RSASH1 as we need to use algorithms
supported by 9.4.
CHANGES
bin/tests/system/dnssec/ns1/root.db.in
bin/tests/system/dnssec/ns1/sign.sh
bin/tests/system/dnssec/ns2/algroll.db.in [new file with mode: 0644]
bin/tests/system/dnssec/ns2/named.conf
bin/tests/system/dnssec/ns2/sign.sh
bin/tests/system/dnssec/tests.sh
lib/dns/validator.c