]> git.ipfire.org Git - thirdparty/bind9.git/commit
[9.18] fix: usr: Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse
authorMark Andrews <marka@isc.org>
Fri, 21 Feb 2025 03:53:32 +0000 (03:53 +0000)
committerMark Andrews <marka@isc.org>
Fri, 21 Feb 2025 03:53:32 +0000 (03:53 +0000)
commitb601cb32ee08b002cfbe74fd297db53f3b8ca6eb
treef42483d324ad188d3451b04c6f32b8bbe099e536
parent7e24b9f6ecf89146b88688b8d9cc966abf2e12c5
parentfef505206799c6a7eb95318a54dae8dcd3761f0f
[9.18] fix: usr: Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse

Previously, when parsing responses, named incorrectly rejected responses without matching RRSIG records for NSEC/DS/NSEC3 records in the authority section. This rejection, if appropriate, should have been left for the validator to determine and has been fixed.

Closes #5185

Backport of MR !10125

Merge branch 'backport-5185-remove-rrsig-check-from-dns_message_parse-9.18' into 'bind-9.18'

See merge request isc-projects/bind9!10143