bind9/lib/dns/include
Ondřej Surý 585bf1bddc
Fail DNSKEY validation when supported but invalid DS is found
A regression was introduced when adding the EDE code for unsupported
DNSKEY and DS algorithms.  When the parent has both supported and
unsupported algorithm in the DS record, the validator would treat the
supported DS algorithm as insecure when validating DNSKEY records
instead of BOGUS.  This has not security impact as the rest of the child
zone correctly ends with BOGUS status, but it is incorrect and thus the
regression has been fixed.

(cherry picked from commit f983a64152)
2026-02-24 11:56:30 +01:00
..
dns Fail DNSKEY validation when supported but invalid DS is found 2026-02-24 11:56:30 +01:00
dst Minor refactor of dst code 2025-10-01 12:26:40 +00:00
irs Move irs_resconf into libdns and remove libirs 2023-02-24 09:38:59 +00:00
.clang-format Add separate .clang-format files for headers 2020-02-14 09:31:05 +01:00