ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

[v9_9] fix incorrect nsec3 check

Browse Source 
- check for NSEC3 in empty nodes when not due to optout delegations
    - fixed typo in output ("Bad record NSEC record")
    - incidentally fixed an error in signzone that caused an
      incorrect warning about missing DNSKEYs when using -S
      and -3 together

3473.	[bug]		dnssec-signzone/verify could incorrectly report
			an error condition due to an empty node above an
			opt-out delegation lacking an NSEC3. [RT #32072]
(cherry picked from commit 9a0dd99a75)
This commit is contained in:
Evan Hunt
2013-01-23 14:57:18 -08:00
parent d2c5763ef4
commit bf9d2fd260
6 changed files with 149 additions and 43 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
bin/tests/system/verify/tests.sh
View File

@@ -69,7 +69,7 @@ do
expect1="unexpected NSEC RRset at"
;;
*.nsec.broken-chain)
expect1="Bad record NSEC record for.*, next name mismatch"
expect1="Bad NSEC record for.*, next name mismatch"
;;
*.bad-bitmap)
expect1="bit map mismatch"