diff options
| author | Tom Gundersen <teg@jklm.no> | 2016-01-01 23:07:34 +0100 |
|---|---|---|
| committer | Tom Gundersen <teg@jklm.no> | 2016-01-03 09:28:48 +0100 |
| commit | 146035b3bb2e9a60d82c8816de67c83691d6cbc4 (patch) | |
| tree | 1e9b153b42475f0be4295fdf7d550462840dd83e /src/resolve/resolved-dns-transaction.c | |
| parent | 964067666fbf7f4a5edc06d3eb4845c35457c858 (diff) | |
resolved: don't conclude NODATA if CNAME exists
Instead introduce the new return-code DNSSEC_NSEC_CNAME to indicate
this condition. See RFC 6840, Section 4.3.
Diffstat (limited to 'src/resolve/resolved-dns-transaction.c')
| -rw-r--r-- | src/resolve/resolved-dns-transaction.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/resolve/resolved-dns-transaction.c b/src/resolve/resolved-dns-transaction.c index fb95554db3..993db0dc69 100644 --- a/src/resolve/resolved-dns-transaction.c +++ b/src/resolve/resolved-dns-transaction.c @@ -2300,6 +2300,7 @@ int dns_transaction_validate_dnssec(DnsTransaction *t) { break; case DNSSEC_NSEC_FOUND: + case DNSSEC_NSEC_CNAME: /* NSEC says it needs to be there, but we couldn't find it? Bummer! */ t->answer_dnssec_result = DNSSEC_NSEC_MISMATCH; break; |