]> git.ipfire.org Git - thirdparty/bind9.git/commit
Reduce the number of verifiations required
authorMark Andrews <marka@isc.org>
Thu, 24 Nov 2022 03:18:20 +0000 (14:18 +1100)
committerPetr Špaček <pspacek@isc.org>
Mon, 3 Apr 2023 15:43:43 +0000 (17:43 +0200)
commite68fecbdaa0e7ad86322bfa5e977eb1944ba821e
treec9a8f6c8c1ac087c7953a4bcdcf7363db9b77236
parent7278fff579333d8b334805771ce786a39d573d8c
Reduce the number of verifiations required

In selfsigned_dnskey only call dns_dnssec_verify if the signature's
key id matches a revoked key, the trust is pending and the key
matches a trust anchor.  Previously named was calling dns_dnssec_verify
unconditionally resulted in busy work.
lib/dns/validator.c