bind9/lib
Ondřej Surý f983a64152
Fail DNSKEY validation when supported but invalid DS is found
A regression was introduced when adding the EDE code for unsupported
DNSKEY and DS algorithms.  When the parent has both supported and
unsupported algorithm in the DS record, the validator would treat the
supported DS algorithm as insecure when validating DNSKEY records
instead of BOGUS.  This has not security impact as the rest of the child
zone correctly ends with BOGUS status, but it is incorrect and thus the
regression has been fixed.
2026-02-23 11:34:43 +01:00
..
dns Fail DNSKEY validation when supported but invalid DS is found 2026-02-23 11:34:43 +01:00
isc Cleanup setting netmgr ports from isc_managers_create() 2026-02-20 16:37:44 +01:00
isccc switch isc_md_type_t to a proper enum 2026-02-02 11:12:55 +03:00
isccfg Minor logging improvements for key lifetime 2026-02-06 15:06:47 +00:00
ns Clear serve-stale flags when following the CNAME chains 2026-02-23 08:07:12 +01:00
.gitignore The isc/platform.h header has been completely removed 2021-07-06 05:33:48 +00:00
meson.build replace the build system with meson 2025-06-11 10:30:12 +03:00