bind9/lib
Ondřej Surý dc3e15d7a6 Funnel the validator's DS fetches through a single helper
The validator starts a DS fetch from three places while building or
proving a trust chain.  Only validate_dnskey() handed the resolver the
parent zone cut as a delegation hint; the other two started the fetch
with no hint at all.

Factor the shared setup into create_ds_fetch() and route all three
through it, so every validator DS fetch is created identically and
carries the parent zone cut.  DS is an at-parent type, so the resolver
already anchors such a query at the parent on its own; supplying the
zone cut explicitly also lets the resolver's fetch loop detection match
the fetch by domain, which it cannot do for a fetch with no hint.

Assisted-by: Claude:claude-opus-4-8
2026-05-30 05:59:31 +02:00
..
dns Funnel the validator's DS fetches through a single helper 2026-05-30 05:59:31 +02:00
isc Add system test for delegdb size preservation across rndc flush 2026-05-28 13:59:38 +02:00
isccc switch isc_md_type_t to a proper enum 2026-02-02 11:12:55 +03:00
isccfg Check options in templates that must be non-zero 2026-05-28 14:25:48 +00:00
ns Stop treating SIG and NXT records specially 2026-05-28 13:21:00 +02:00
.gitignore The isc/platform.h header has been completely removed 2021-07-06 05:33:48 +00:00
meson.build replace the build system with meson 2025-06-11 10:30:12 +03:00