WEBDIENSTE/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2026-09-12 21:07:43 +02:00
Code Issues Packages Projects Releases Wiki Activity

- Abide RFC5155 section 9.2: no AD flag for replies with NSEC3 optout.

Browse Source 
git-svn-id: file:///svn/unbound/trunk@2233 be551aaa-1e26-0410-a405-d3ace91eadb9
This commit is contained in:
Wouter Wijngaards
2010-09-15 07:08:09 +00:00
parent bf3c0e07d6
commit c3f180eebb
4 changed files with 14 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testdata/val_nsec3_optout_ad.rpl
Vendored
+3 -2
View File
@@ -185,11 +185,12 @@ sub.example.com. IN DS
ENTRY_END
; recursion happens here.
; the same answer gives AD flag for DS, because the optout says no DS exists.
; no AD flag here because of RFC5155 9.2 section.
; even though we are sure there is no DS, this is what the RFC says.
STEP 30 CHECK_ANSWER
ENTRY_BEGIN
MATCH all
REPLY QR RD RA AD NOERROR
REPLY QR RD RA NOERROR
SECTION QUESTION
sub.example.com. IN DS
SECTION ANSWER