Skip to content
Snippets Groups Projects

FORWARD: don't validate NS in authority section

Merged Vladimír Čunát requested to merge forward-unsigned-NS into master

Fixes https://gitlab.labs.nic.cz/knot/knot-resolver/issues/248 Some (exotic?) resolvers add extra NS records but doesn't provide signatures for them even though we ask with +dnssec +cd. That lead to validation errors. Current example server: 198.101.242.72 Let's not try to validate them when FORWARDing, as we won't most likely need those records anyway (contrary to iteration mode).

Merge request reports

Loading
Loading

Activity

Filter activity
  • Approvals
  • Assignees & reviewers
  • Comments (from bots)
  • Comments (from users)
  • Commits & branches
  • Edits
  • Labels
  • Lock status
  • Mentions
  • Merge request status
  • Tracking
Please register or sign in to reply
Loading