Michał Kępień b3bee6cd37 Treat records below a DNAME as out-of-zone data ...

DNAME records indicate bottom of zone and thus no records below a DNAME
should be DNSSEC-signed or included in NSEC(3) chains.  Add a helper
function, has_dname(), for detecting DNAME records at a given node.
Prevent signing DNAME-obscured records.  Check that DNAME-obscured
records are not signed.

(cherry picked from commit 9a4145168c)

2018-06-13 13:11:13 +02:00

..

optional

update file headers

2018-03-15 11:30:37 -07:00

startperf

update file headers to remove copyright years

2018-03-15 09:09:15 +01:00

system

Treat records below a DNAME as out-of-zone data

2018-06-13 13:11:13 +02:00

testdata/wire

move all optional tests from bin/tests to bin/tests/optional

2018-03-09 22:59:24 -08:00

virtual-time

update file headers

2018-03-15 11:30:37 -07:00

win32

…

.gitignore

migrate t_dst signature test to lib/dns/tests/dst_test

2018-03-09 23:22:04 -08:00

cfg_test.c

update file headers

2018-03-15 11:30:37 -07:00

compress_test.c

update file headers to remove copyright years

2018-03-15 09:09:15 +01:00

fromhex.pl

update file headers to remove copyright years

2018-03-15 09:09:15 +01:00

headerdep_test.sh.in

update file headers

2018-03-15 11:30:37 -07:00

Makefile.in

Alter distclean rule to prevent recursing into the same directory twice

2018-04-10 20:05:59 -07:00

mdig.c

fix shadowed global variables

2018-04-22 12:59:06 -07:00

named.conf

update file headers

2018-03-15 11:30:37 -07:00

wire_test.c

update file headers

2018-03-15 11:30:37 -07:00