1. 19 Jun, 2017 4 commits
  2. 16 Jun, 2017 2 commits
  3. 15 Jun, 2017 3 commits
  4. 14 Jun, 2017 2 commits
  5. 13 Jun, 2017 4 commits
  6. 12 Jun, 2017 3 commits
  7. 09 Jun, 2017 2 commits
    • Vladimír Čunát's avatar
    • Vladimír Čunát's avatar
      validate: work around some SERVFAILs (iterating mode) · fe77cee9
      Vladimír Čunát authored
      - This affects the iterating mode only (except for a verbose message).
      - The problem was introduced when implementing forwarding in 651c5aad.
      - Example that was affected: *.org.ru.
      
      When the same server is authoritative for multiple consecutive zones,
      with a higher one being signed and a lower one being unsigned, we may
      get an unsigned answer even in case we *think* we're currently in a
      signed zone.
      
      In particular, DS (sub-)queries are important because of being used to
      prove the insecurity of zones - in that case the iterator can correctly
      determine the (unexpected) zone name from which the answer came, due to
      seeing the SOA record, but that is too late for zone_cut_check() to try
      getting a trust chain to it, so we need to YIELD for it to do it.
      fe77cee9
  8. 08 Jun, 2017 2 commits
  9. 07 Jun, 2017 3 commits
  10. 05 Jun, 2017 3 commits
  11. 01 Jun, 2017 12 commits