upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2025-12-20 23:00:56 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

- Fix #2882: Unbound behaviour changes (wrong) when domain-insecure is

Browse source 
set for stub zone.  It no longer searches for DNSSEC information.


git-svn-id: file:///svn/unbound/trunk@4404 be551aaa-1e26-0410-a405-d3ace91eadb9
This commit is contained in:
Wouter Wijngaards 2017-11-14 10:01:44 +00:00
parent 6c2fa12f10
commit 52aeaf4924
3 changed files with 10 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
doc/Changelog
View file

@ -1,3 +1,7 @@
14 November 2017: Wouter
- Fix #2882: Unbound behaviour changes (wrong) when domain-insecure is
set for stub zone. It no longer searches for DNSSEC information.
13 November 2017: Wouter 13 November 2017: Wouter
- Fix #2801: Install libunbound.pc. - Fix #2801: Install libunbound.pc.
- Fix qname minimisation to send AAAA queries at zonecut like type A. - Fix qname minimisation to send AAAA queries at zonecut like type A.

5
iterator/iter_utils.c
View file

@ -656,6 +656,11 @@ iter_indicates_dnssec(struct module_env* env, struct delegpt* dp,
/* a trust anchor exists with this name, RRSIGs expected */ /* a trust anchor exists with this name, RRSIGs expected */
if((a=anchor_find(env->anchors, dp->name, dp->namelabs, dp->namelen, if((a=anchor_find(env->anchors, dp->name, dp->namelabs, dp->namelen,
dclass))) { dclass))) {
if(a->numDS == 0 && a->numDNSKEY == 0) {
/* insecure trust point */
lock_basic_unlock(&a->lock);
return 0;
}
lock_basic_unlock(&a->lock); lock_basic_unlock(&a->lock);
return 1; return 1;
} }

2
iterator/iter_utils.h
View file

@ -193,7 +193,7 @@ int iter_indicates_dnssec_fwd(struct module_env* env,
* @param dp: delegation point. * @param dp: delegation point.
* @param msg: delegation message, with DS if a secure referral. * @param msg: delegation message, with DS if a secure referral.
* @param dclass: class of query. * @param dclass: class of query.
* @return 1 if dnssec is expected, 0 if not. * @return 1 if dnssec is expected, 0 if not or insecure point above qname.
*/ */
int iter_indicates_dnssec(struct module_env* env, struct delegpt* dp, int iter_indicates_dnssec(struct module_env* env, struct delegpt* dp,
struct dns_msg* msg, uint16_t dclass); struct dns_msg* msg, uint16_t dclass);