ae7708b169
Git shortlog since test release #9: Speeling. Strip DNSSEC RRs when query doesn't have DO bit set. Return INSECURE when validation fails with proved non-existent DS. Negative caching for DS records. Check that unsigned replies come from unsigned zones if --dnssec-check-uns Tidy. Fix off-by-one overwrite. Don't free blockdata for negative DS cache entries. Handle replies with no answers and no NS in validate_reply. Tweak tuning params. Don't cache secure replies which we've messsed with. Mass edit of INSECURE->BOGUS returns for server failure/bad input. Can have local DS records (trust anchors). |
||
---|---|---|
.. | ||
files | ||
distinfo | ||
Makefile | ||
pkg-descr | ||
pkg-plist |