bind9/lib
Mark Andrews 4c6d03b0bb
Retry lookups with unsigned DNAME over TCP
To prevent spoofed unsigned DNAME responses being accepted retry
response with unsigned DNAMEs over TCP if the response is not TSIG
signed or there isn't a good DNS CLIENT COOKIE.

To prevent test failures, this required adding TCP support to the
ans3 and ans4 servers in the chain system test.

(cherry picked from commit 2e40705c06)
2025-10-02 13:07:06 +02:00
..
bind9 Remove redundant parentheses from the return statement 2024-11-19 16:06:16 +01:00
dns Retry lookups with unsigned DNAME over TCP 2025-10-02 13:07:06 +02:00
irs Reduce sizeof isc_sockaddr from 152 to 48 bytes 2025-01-22 14:12:38 +01:00
isc Add and use __attribute__((nonnull)) in dnssec-signzone.c 2025-08-28 16:27:00 +02:00
isccc Remove redundant parentheses from the return statement 2024-11-19 16:06:16 +01:00
isccfg Deprecate the "tkey-domain" statement 2025-09-01 22:04:28 +02:00
ns Reset DNS_{GETDB_STALEFIRST,DBFIND_STALETIMEOUT} in ns__query_start() 2025-07-03 14:24:55 +02:00
.gitignore The isc/platform.h header has been completely removed 2021-07-06 05:33:48 +00:00
Makefile.am move samples/resolve.c to bin/tests/system 2021-04-16 14:29:43 +02:00