]> git.ipfire.org Git - thirdparty/bind9.git/commit
Don't verify already trusted rdatasets
authorMatthijs Mekking <matthijs@isc.org>
Tue, 3 Mar 2026 10:17:25 +0000 (11:17 +0100)
committerMichał Kępień <michal@isc.org>
Wed, 25 Mar 2026 08:51:26 +0000 (09:51 +0100)
commite1d47d57e4cb496a8b64ea292467cd05a769d1e6
treeb980a0f77545c150bb4a92ba1234e2d998eab93d
parent0d8f3d0b22fb23c5a9138cc48e72ef8ab3d603df
Don't verify already trusted rdatasets

If we already marked an rdataset as secure (or it has even stronger
trust), there is no need to cryptographically verify it again.

(cherry picked from commit 0ec08c212022d08c9717f2bc6bd3e8ebd6f034ce)
lib/dns/include/dns/types.h
lib/dns/validator.c