mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-31 14:35:26 +00:00
Code Issues Releases Wiki Activity

2773. [bug] In autosigned zones, the SOA could be signed

Browse Source 
with the KSK. [RT #20628]
This commit is contained in:
Evan Hunt
2009-11-18 21:22:31 +00:00
parent e83a7cabc3
commit b08325a7f3
3 changed files with 7 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
CHANGES
View File

@@ -1,3 +1,6 @@
2773. [bug] In autosigned zones, the SOA could be signed
with the KSK. [RT #20628]
--- 9.7.0b3 released --- --- 9.7.0b3 released ---
2772. [security] When validating, track whether pending data was from 2772. [security] When validating, track whether pending data was from

4
bin/named/update.c
View File

@@ -15,7 +15,7 @@
* PERFORMANCE OF THIS SOFTWARE. * PERFORMANCE OF THIS SOFTWARE.
*/ */
/* $Id: update.c,v 1.168 2009/11/09 01:28:32 each Exp $ */ /* $Id: update.c,v 1.169 2009/11/18 21:22:31 each Exp $ */
#include <config.h> #include <config.h>
@@ -1926,7 +1926,7 @@ add_sigs(ns_client_t *client, dns_zone_t *zone, dns_db_t *db,
if (type == dns_rdatatype_dnskey) { if (type == dns_rdatatype_dnskey) {
if (!KSK(keys[i]) && keyset_kskonly) if (!KSK(keys[i]) && keyset_kskonly)
continue; continue;
} else if (!KSK(keys[i])) } else if (KSK(keys[i]))
continue; continue;
} else if (REVOKE(keys[i]) && type != dns_rdatatype_dnskey) } else if (REVOKE(keys[i]) && type != dns_rdatatype_dnskey)
continue; continue;

4
lib/dns/zone.c
View File

@@ -15,7 +15,7 @@
* PERFORMANCE OF THIS SOFTWARE. * PERFORMANCE OF THIS SOFTWARE.
*/ */
/* $Id: zone.c,v 1.529 2009/11/12 23:47:59 tbox Exp $ */ /* $Id: zone.c,v 1.530 2009/11/18 21:22:31 each Exp $ */
/*! \file */ /*! \file */
@@ -4586,7 +4586,7 @@ add_sigs(dns_db_t *db, dns_dbversion_t *ver, dns_name_t *name,
if (type == dns_rdatatype_dnskey) { if (type == dns_rdatatype_dnskey) {
if (!KSK(keys[i]) && keyset_kskonly) if (!KSK(keys[i]) && keyset_kskonly)
continue; continue;
} else if (!KSK(keys[i])) } else if (KSK(keys[i]))
continue; continue;
} else if (REVOKE(keys[i]) && type != dns_rdatatype_dnskey) } else if (REVOKE(keys[i]) && type != dns_rdatatype_dnskey)
continue; continue;