upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2025-12-24 00:29:58 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

Remove REVOKE flag support.

Browse source 
git-svn-id: file:///svn/unbound/trunk@1639 be551aaa-1e26-0410-a405-d3ace91eadb9
This commit is contained in:
Wouter Wijngaards 2009-06-08 08:29:17 +00:00
parent b2ff49e4c4
commit 6451748967
3 changed files with 5 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
doc/Changelog
View file

@ -1,3 +1,7 @@
8 June 2009: Wouter
- Removed RFC5011 REVOKE flag support. Partial 5011 support may cause
inadvertant behaviour.
3 June 2009: Wouter 3 June 2009: Wouter
- fixup bad free() when wrongly encoded DSA signature is seen. - fixup bad free() when wrongly encoded DSA signature is seen.
Reported by Paul Wouters. Reported by Paul Wouters.

2
testdata/test_signatures.13 vendored
View file

@ -15,7 +15,7 @@ ENTRY_END
; entry to test ; entry to test
ENTRY_BEGIN ENTRY_BEGIN
SECTION QUESTION SECTION QUESTION
bogus.example.com. IN SOA secure.example.com. IN SOA
SECTION ANSWER SECTION ANSWER
example.com. 43200 IN SOA home.kuroiwa.eng.br. hostmaster.cesar.sec3.br. 2008040903 86400 86400 8640000 600 example.com. 43200 IN SOA home.kuroiwa.eng.br. hostmaster.cesar.sec3.br. 2008040903 86400 86400 8640000 600
example.com. 43200 IN RRSIG SOA 5 2 43200 20081010000000 20080410122550 31027 example.com. af7nqRak6cEeQLytqLHMIUKPsOECA4Cu/Zpm7vdnKSh2q2+/8ZwIxwHLyCEGdiu/mTYffZEHTZytJyzxnB0oxA== ;{id = 31027} example.com. 43200 IN RRSIG SOA 5 2 43200 20081010000000 20080410122550 31027 example.com. af7nqRak6cEeQLytqLHMIUKPsOECA4Cu/Zpm7vdnKSh2q2+/8ZwIxwHLyCEGdiu/mTYffZEHTZytJyzxnB0oxA== ;{id = 31027}

3
validator/val_sigcrypt.c
View file

@ -522,9 +522,6 @@ dnskeyset_verify_rrset_sig(struct module_env* env, struct val_env* ve,
tag != dnskey_calc_keytag(dnskey, i)) tag != dnskey_calc_keytag(dnskey, i))
continue; continue;
numchecked ++; numchecked ++;
/* skip revoked keys */
if(dnskey_get_flags(dnskey, i) & LDNS_KEY_REVOKE_KEY)
continue;
/* see if key verifies */ /* see if key verifies */
sec = dnskey_verify_rrset_sig(env->scratch, sec = dnskey_verify_rrset_sig(env->scratch,