W.C.A. Wijngaards 53499e4a88 - Fix handling of wildcard CNAMEs in the chain of trust. ...

An improper wildcard in the chain of trust would send
  the retries to the wrong upstream. Also it could label
  the step in the chain of trust as secure, when it was not.
  Thanks to Qifan Zhang, Palo Alto Networks for the report.

2026-04-21 13:24:40 +02:00

..

autotrust.c

Fast Reload Option (#1042)

2025-03-31 15:25:24 +02:00

autotrust.h

- Expose if a query (or a subquery) was ratelimited (not src IP

2018-08-03 14:00:46 +00:00

val_anchor.c

Fast Reload Option (#1042)

2025-03-31 15:25:24 +02:00

val_anchor.h

Fast Reload Option (#1042)

2025-03-31 15:25:24 +02:00

val_kcache.c

Review for #759:

2023-07-19 15:20:44 +02:00

val_kcache.h

Review for #759:

2023-07-19 15:20:44 +02:00

val_kentry.c

Review for #759:

2023-07-19 15:20:44 +02:00

val_kentry.h

Review for #759:

2023-07-19 15:20:44 +02:00

val_neg.c

- Fix that cachedb aggressive negative responses have the RA flag set.

2026-02-16 16:35:37 +01:00

val_neg.h

Fast Reload Option (#1042)

2025-03-31 15:25:24 +02:00

val_nsec3.c

- Fix negative cache NSEC3 parameter compares for zero length NSEC3

2024-09-30 09:25:51 +02:00

val_nsec3.h

- Fix that validation reason failure that uses string print uses

2024-07-08 15:29:20 +02:00

val_nsec.c

- Fix that validation reason failure that uses string print uses

2024-07-08 15:29:20 +02:00

val_nsec.h

- Fix that validation reason failure that uses string print uses

2024-07-08 15:29:20 +02:00

val_secalgo.c

- For #1110: Test for fallthrough attribute in configure and add

2024-07-23 09:47:42 +02:00

val_secalgo.h

zonemd, digest code calls, secalgo openssl sha384 and sha512.

2020-10-09 11:19:31 +02:00

val_sigcrypt.c

- Fix that signatures are not allowed with revoked dnskeys.

2026-04-21 13:07:34 +02:00

val_sigcrypt.h

- Fix header comment about EDE reference in validator/val_sigcrypt.h.

2025-12-01 16:04:41 +01:00

val_utils.c

- Fix that a DNAME with an unsigned CNAME is checked for

2026-04-21 13:19:13 +02:00

val_utils.h

- Fix that a DNAME with an unsigned CNAME is checked for

2026-04-21 13:19:13 +02:00

validator.c

- Fix handling of wildcard CNAMEs in the chain of trust.

2026-04-21 13:24:40 +02:00

validator.h

Fast Reload Option (#1042)

2025-03-31 15:25:24 +02:00