upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2026-02-01 11:19:27 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

- Small man page corrections for the 'disable-dnssec-lame-check' option.

Browse source
This commit is contained in:
Yorgos Thessalonikefs 2025-06-03 14:10:53 +02:00
parent ff7dfd52a2
commit 81f3de4da2
2 changed files with 5 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
doc/Changelog
View file

@ -1,3 +1,6 @@
3 June 2025: Yorgos
- Small manpage corrections for the 'disable-dnssec-lame-check' option.
21 May 2025: Wouter
- Fix #1288: [FR] Improve fuzzing of unbound by adapting the netbound
program.

4
doc/unbound.conf.rst
View file

@ -2025,8 +2025,8 @@ These options are part of the **server:** clause.
@@UAHL@unbound.conf@disable-dnssec-lame-check@@: *<yes or no>*
If true, disables the DNSSEC lameness check in the iterator.
This check sees if RRSIGs are present in the answer, when dnssec is
If yes, disables the DNSSEC lameness check in the iterator.
This check sees if RRSIGs are present in the answer, when DNSSEC is
expected, and retries another authority if RRSIGs are unexpectedly missing.
The validator will insist in RRSIGs for DNSSEC signed domains regardless of
this setting, if a trust anchor is loaded.