Mark Andrews 5252985a21 Look for covering NSEC under two more conditions ... 1) when after processing a node there where no headers that contained active records. When if (check_stale_header(node, header, &locktype, lock, &search, &header_prev); succeeds or if (EXISTS(header) && !ANCIENT(header)) fails for all entries in the list leading to 'empty_node' remaining true. If there is are no active records we know nothing about the current state of the name so we treat is as ISC_R_NOTFOUND. 2) when there was a covering NOQNAME proof found or all the active headers where negative. When if (header->noqname != NULL && header->trust == dns_trust_secure) succeeds or if (!NEGATIVE(header)) never succeeds. Under these conditions there could (should be for found_noqname) be a covering NSEC earlier in the tree.		2021-12-02 14:24:37 +01:00
..
bind9	Add 'tls' validation for XoT enabled primaries	2021-12-01 12:00:29 +02:00
dns	Look for covering NSEC under two more conditions	2021-12-02 14:24:37 +01:00
irs	Check parsed resconf values	2021-08-12 09:52:52 -07:00
isc	Improve the logging on failed TCP accept	2021-12-02 13:50:00 +01:00
isccc	Use #pragma once as header guards	2021-10-13 00:49:15 -07:00
isccfg	Integrate extended ACLs syntax featuring 'port' and 'transport' opts	2021-11-30 12:20:22 +02:00
ns	Add synthesis of NODATA at wildcard	2021-12-02 14:24:37 +01:00
.gitignore	The isc/platform.h header has been completely removed	2021-07-06 05:33:48 +00:00
Makefile.am	move samples/resolve.c to bin/tests/system	2021-04-16 14:29:43 +02:00
unit-test-driver.sh.in	Enforce a run time limit on unit test binaries	2021-04-07 11:41:45 +02:00