]> git.ipfire.org Git - thirdparty/bind9.git/commit
projects / thirdparty / bind9.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(merge: e748b6d 8a14413)
fix: usr: Treat an unusable NSEC3 chain as a verification failure main 340464 340465
authorEvan Hunt <each@isc.org>
Wed, 22 Jul 2026 07:09:06 +0000 (07:09 +0000)
committerEvan Hunt <each@isc.org>
Wed, 22 Jul 2026 07:09:06 +0000 (07:09 +0000)
commitc0a964549b9eb87c89fecfb1e91210c46ff06780
tree318163968336ac48382df835fa17d1e0deef00d5tree | snapshot
parente748b6d2ab7cf4af432085d13451e2dba6463395commit | diff
parent8a14413aae7a065ce05cc4df91dada781240555ccommit | diff
fix: usr: Treat an unusable NSEC3 chain as a verification failure

When transferring in a mirror zone, DNSSEC verification could incorrectly succeed when the zone had an invalid `NSEC3PARAM` record, leading to subsequent validation failures. This has been fixed.

Closes #6136

Merge branch '6136-zoneverify-nsec3param' into 'main'

See merge request isc-projects/bind9!12408
Mirror of https://gitlab.isc.org/isc-projects/bind9.git