mirror of
https://github.com/isc-projects/bind9.git
synced 2026-06-15 21:08:52 -04:00
The validator starts a DS fetch from three places while building or proving a trust chain. Only validate_dnskey() handed the resolver the parent zone cut as a delegation hint; the other two started the fetch with no hint at all. Factor the shared setup into create_ds_fetch() and route all three through it, so every validator DS fetch is created identically and carries the parent zone cut. DS is an at-parent type, so the resolver already anchors such a query at the parent on its own; supplying the zone cut explicitly also lets the resolver's fetch loop detection match the fetch by domain, which it cannot do for a fetch with no hint. Assisted-by: Claude:claude-opus-4-8 |
||
|---|---|---|
| .. | ||
| dns | ||
| isc | ||
| isccc | ||
| isccfg | ||
| ns | ||
| .gitignore | ||
| meson.build | ||