mirror of
https://github.com/isc-projects/bind9.git
synced 2026-04-15 22:09:31 -04:00
DNAME records indicate bottom of zone and thus no records below a DNAME should be DNSSEC-signed or included in NSEC(3) chains. Add a helper function, has_dname(), for detecting DNAME records at a given node. Prevent signing DNAME-obscured records. Check that DNAME-obscured records are not signed. |
||
|---|---|---|
| .. | ||
| zones | ||
| .gitignore | ||
| clean.sh | ||
| prereq.sh | ||
| setup.sh | ||
| tests.sh | ||