summaryrefslogtreecommitdiff
path: root/src/resolve/resolved-dns-trust-anchor.c
diff options
context:
space:
mode:
authorLennart Poettering <lennart@poettering.net>2016-01-21 00:58:49 +0100
committerLennart Poettering <lennart@poettering.net>2016-01-25 17:19:18 +0100
commit352af30838f130bf7aaa36dd6174945c11f39d29 (patch)
tree0a2a54f72056b79a9cb46590eb30987615e6d22c /src/resolve/resolved-dns-trust-anchor.c
parent300a716dc416c7b06e9743fcad37e44e73e30549 (diff)
resolve: use different bitmap checking rules when we find an exact NSEC3 match, or just a covering enclosure
If we are looking for a DS RR we need to check the NSEC3 bitmap of the parent zone's NSEC3 RR, not the one from the child. For any other RR we need to look at the child's however, hence enforce this with the bitmaps. Note that not coverign checks only the lower zone's NSEC3 bitmaps matter, hence the existing check is fine.
Diffstat (limited to 'src/resolve/resolved-dns-trust-anchor.c')
0 files changed, 0 insertions, 0 deletions