upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2025-12-26 09:39:43 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix check for NSEC3 signatures

Browse source 
git-svn-id: file:///svn/unbound/trunk@1865 be551aaa-1e26-0410-a405-d3ace91eadb9
This commit is contained in:
Wouter Wijngaards 2009-10-07 12:57:12 +00:00
parent 1a02ab895b
commit b07370a4c2
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
doc/Changelog
View file

@ -4,6 +4,9 @@
- retry for validation failure in DNSKEY in middle of chain of trust. - retry for validation failure in DNSKEY in middle of chain of trust.
unit test. unit test.
- retry for empty non terminals in chain of trust and unit test. - retry for empty non terminals in chain of trust and unit test.
- Fixed security bug where the signatures for NSEC3 records were not
checked when checking for absence of DS records. This could have
enabled the substitution of an insecure delegation.
6 October 2009: Wouter 6 October 2009: Wouter
- Test set updated to provide additional ns lookup result. - Test set updated to provide additional ns lookup result.