DNSSEC validation: allow garbage NSEC3 nodes...
...more precisely, if zone has NSEC3 tree, allow any NSEC3 records with different salt this is useful for checking zones with slow-resalt
parent
b8fe253f
No related branches found
No related tags found
Showing
- src/knot/dnssec/nsec-chain.c 36 additions, 16 deletionssrc/knot/dnssec/nsec-chain.c
- tests-extra/tests/dnssec/validate/data/ok.2nsec3.zone 19 additions, 0 deletionstests-extra/tests/dnssec/validate/data/ok.2nsec3.zone
- tests-extra/tests/dnssec/validate/data/ok.2nsec3.zone.2 25 additions, 0 deletionstests-extra/tests/dnssec/validate/data/ok.2nsec3.zone.2
- tests-extra/tests/dnssec/validate/test.py 1 addition, 1 deletiontests-extra/tests/dnssec/validate/test.py
Loading
Please register or sign in to comment