Skip to content

tsig: move signature validity period check after the signature validity check

Ondřej Surý requested to merge 1.6-tsig-fix into 1.6

When the signature validity period check returned KNOT_TSIG_EBADTIME, the itself signature validity check was omitted and the response TSIG contained a non-empty signature, based on the unverified data.

Thanks to Synacktiv!

(cherry picked from commit 74862ce0)

Merge request reports