bind9/bin
Ondřej Surý f983a64152
Fail DNSKEY validation when supported but invalid DS is found
A regression was introduced when adding the EDE code for unsupported
DNSKEY and DS algorithms.  When the parent has both supported and
unsupported algorithm in the DS record, the validator would treat the
supported DS algorithm as insecure when validating DNSKEY records
instead of BOGUS.  This has not security impact as the rest of the child
zone correctly ends with BOGUS status, but it is incorrect and thus the
regression has been fixed.
2026-02-23 11:34:43 +01:00
..
check cfg_parse_ API doesn't need memory context 2025-12-04 16:09:40 +01:00
confgen Change the 'isc_g_mctx' to be always available 2025-08-04 11:29:50 +02:00
delv Use const pointer with strchr of const pointer 2026-01-20 16:23:58 +11:00
dig Add examples to the dig man page 2026-02-22 11:03:10 -05:00
dnssec cleanup unused header in isc/md.h 2026-02-02 11:50:14 +03:00
include Enable minimal ANY answers by default 2026-01-28 15:38:18 +01:00
named Rename isc_net_getudpportrange() to isc_net_getportrange() 2026-02-20 14:06:23 +01:00
nsupdate Rename isc_net_getudpportrange() to isc_net_getportrange() 2026-02-20 14:06:23 +01:00
plugins Apply the dns_rdataset_cleanup patch through the codebase 2025-12-17 15:19:55 +01:00
rndc List 'rndc dnssec' arguments in alphabetic order 2026-02-16 16:28:47 +00:00
tests Fail DNSKEY validation when supported but invalid DS is found 2026-02-23 11:34:43 +01:00
tools Rename isc_net_getudpportrange() to isc_net_getportrange() 2026-02-20 14:06:23 +01:00
meson.build replace the build system with meson 2025-06-11 10:30:12 +03:00