Michał Kępień
ff7015a0f8
Treat records below a DNAME as out-of-zone data
...
DNAME records indicate bottom of zone and thus no records below a DNAME
should be DNSSEC-signed or included in NSEC(3) chains. Add a helper
function, has_dname(), for detecting DNAME records at a given node.
Prevent signing DNAME-obscured records. Check that DNAME-obscured
records are not signed.
(cherry picked from commit 75c0d85fc4 )
2018-06-13 12:57:03 +02:00
..
2017-09-08 13:47:34 -07:00
2017-10-05 01:04:18 -07:00
2018-01-26 01:19:47 +00:00
2018-04-10 13:09:24 -07:00
2018-02-23 10:38:02 +01:00
2018-01-26 01:19:47 +00:00
2017-10-06 01:08:15 +00:00
2018-04-10 13:09:24 -07:00
2018-02-23 10:38:02 +01:00
2017-10-06 01:08:15 +00:00
2018-04-10 13:09:24 -07:00
2018-02-23 10:38:02 +01:00
2017-09-01 01:11:29 +00:00
2018-04-10 13:09:24 -07:00
2018-02-23 10:38:02 +01:00
2017-09-01 01:11:29 +00:00
2017-11-01 01:09:07 +00:00
2018-04-10 13:09:24 -07:00
2018-02-23 10:38:02 +01:00
2017-11-01 01:09:07 +00:00
2018-02-23 10:38:02 +01:00
2018-02-23 10:38:02 +01:00
2017-10-06 01:08:15 +00:00
2018-02-23 10:38:02 +01:00
2018-02-23 10:38:02 +01:00
2017-10-18 01:10:52 +00:00
2018-06-13 12:57:03 +02:00
2018-02-23 10:38:02 +01:00
2017-10-18 01:10:52 +00:00
2018-04-10 13:09:24 -07:00
2018-02-23 10:38:02 +01:00
2018-06-13 12:57:03 +02:00
2018-06-13 12:57:03 +02:00
2018-02-23 10:38:02 +01:00