Ondřej Surý 7ced319c66 Restrict the alias-chain deadlock check to chaining CNAMEs ... check_deadlock() aborted any fetch whose name equals the owner of a chaining rdataset, assuming nothing the validator needs can live at an alias. That is true for a CNAME, but a DNAME aliases only the names below its owner: with a DNAME at a zone apex, the DNSKEY signing the DNAME lives at the owner name itself, so every answer synthesized from a signed apex DNAME failed validation whenever that key was not already validated in the cache. Chaining CNAMEs, including those synthesized from a DNAME, still cover the self-join case the check was added for. (cherry picked from commit 057ae0adb8)		2026-07-08 12:23:45 +02:00
..
dns	Restrict the alias-chain deadlock check to chaining CNAMEs	2026-07-08 12:23:45 +02:00
isc	Include the brackets when parsing a URI with a IPv6 address	2026-07-07 13:24:33 +00:00
isccc	Remove redundant parentheses from the return statement	2024-11-19 14:26:52 +01:00
isccfg	Add the tcp-reuse-timeout option	2026-06-25 11:37:51 +02:00
ns	Add DNS_PRIVATE_BUFFERSIZE and use it	2026-07-03 04:07:30 +10:00
.gitignore	The isc/platform.h header has been completely removed	2021-07-06 05:33:48 +00:00
Makefile.am	Move irs_resconf into libdns and remove libirs	2023-02-24 09:38:59 +00:00