diff options
| author | Tom Gundersen <teg@jklm.no> | 2016-01-07 15:05:58 +0100 |
|---|---|---|
| committer | Tom Gundersen <teg@jklm.no> | 2016-01-07 15:05:58 +0100 |
| commit | 4b4310db942b56f5813ea6db68037cf4447e4aa0 (patch) | |
| tree | d6594eed934e46a50a41f0c93836cba45011723c /src/resolve/resolved-dns-dnssec.c | |
| parent | a2e9fd6233183b3dc439f9411709c62d11bfdc1c (diff) | |
| parent | 28bf03b5265be30079630b5bc2c3dafc13fce27b (diff) | |
Merge pull request #2276 from poettering/dnssec12
Twelfth DNSSEC PR
Diffstat (limited to 'src/resolve/resolved-dns-dnssec.c')
| -rw-r--r-- | src/resolve/resolved-dns-dnssec.c | 12 |
1 files changed, 4 insertions, 8 deletions
diff --git a/src/resolve/resolved-dns-dnssec.c b/src/resolve/resolved-dns-dnssec.c index 32d4834aa1..51fe710795 100644 --- a/src/resolve/resolved-dns-dnssec.c +++ b/src/resolve/resolved-dns-dnssec.c @@ -39,7 +39,10 @@ * - multi-label zone compatibility * - cname/dname compatibility * - nxdomain on qname - * - per-interface DNSSEC setting + * - workable hack for the .corp, .home, .box case + * - bus calls to override DNSEC setting per interface + * - log all DNSSEC downgrades + * - enable by default * * */ @@ -1566,13 +1569,6 @@ int dnssec_test_nsec(DnsAnswer *answer, DnsResourceKey *key, DnssecNsecResult *r return 0; } -static const char* const dnssec_mode_table[_DNSSEC_MODE_MAX] = { - [DNSSEC_NO] = "no", - [DNSSEC_DOWNGRADE_OK] = "downgrade-ok", - [DNSSEC_YES] = "yes", -}; -DEFINE_STRING_TABLE_LOOKUP(dnssec_mode, DnssecMode); - static const char* const dnssec_result_table[_DNSSEC_RESULT_MAX] = { [DNSSEC_VALIDATED] = "validated", [DNSSEC_INVALID] = "invalid", |