ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

Print a warning if we see a wildcard in a zone we're signing.

Browse Source
This commit is contained in:
Brian Wellington
2000-03-01 21:23:46 +00:00
parent 6c4d03a6ab
commit 2e9fe863e1
2 changed files with 16 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
bin/dnssec/dnssec-signzone.c
View File

@@ -577,7 +577,15 @@ signname(dns_db_t *db, dns_dbversion_t *version, dns_dbnode_t *node,
dns_rdataset_t rdataset, nsset;
dns_rdatasetiter_t *rdsiter;
isc_boolean_t isdelegation = ISC_FALSE;
static int warnwild = 0;
if (dns_name_iswildcard(name)) {
fprintf(stderr, "Warning: wildcard name seen: %s\n",
nametostr(name));
if (warnwild++ == 0)
fprintf(stderr, "\tBIND 9 doesn't completely handle "
"wildcards in secure zones\n");
}
if (!atorigin) {
dns_rdataset_init(&nsset);
result = dns_db_findrdataset(db, node, version,

8
bin/tests/signer.c
View File

@@ -577,7 +577,15 @@ signname(dns_db_t *db, dns_dbversion_t *version, dns_dbnode_t *node,
dns_rdataset_t rdataset, nsset;
dns_rdatasetiter_t *rdsiter;
isc_boolean_t isdelegation = ISC_FALSE;
static int warnwild = 0;
if (dns_name_iswildcard(name)) {
fprintf(stderr, "Warning: wildcard name seen: %s\n",
nametostr(name));
if (warnwild++ == 0)
fprintf(stderr, "\tBIND 9 doesn't completely handle "
"wildcards in secure zones\n");
}
if (!atorigin) {
dns_rdataset_init(&nsset);
result = dns_db_findrdataset(db, node, version,