]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
[9.18] fix: usr: Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse
authorMark Andrews <marka@isc.org>
Fri, 21 Feb 2025 03:53:32 +0000 (03:53 +0000)
committerMark Andrews <marka@isc.org>
Fri, 21 Feb 2025 03:53:32 +0000 (03:53 +0000)
Previously, when parsing responses, named incorrectly rejected responses without matching RRSIG records for NSEC/DS/NSEC3 records in the authority section. This rejection, if appropriate, should have been left for the validator to determine and has been fixed.

Closes #5185

Backport of MR !10125

Merge branch 'backport-5185-remove-rrsig-check-from-dns_message_parse-9.18' into 'bind-9.18'

See merge request isc-projects/bind9!10143


Trivial merge