mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-31 14:35:26 +00:00
Code Issues Releases Wiki Activity

better keytag collision handling with trusted keys

Browse Source
This commit is contained in:
Brian Wellington
2000-05-19 18:39:49 +00:00
parent ea14aa24aa
commit ba393f380e
1 changed files with 17 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
lib/dns/validator.c
View File

@@ -877,22 +877,28 @@ validate(dns_validator_t *val, isc_boolean_t resume) {
} }
while (result == ISC_R_SUCCESS) { do {
result = dns_dnssec_verify(event->name, result = dns_dnssec_verify(event->name,
event->rdataset, event->rdataset,
val->key, ISC_FALSE, val->key, ISC_FALSE,
val->view->mctx, &rdata); val->view->mctx, &rdata);
/*
* If val->keynode != NULL, this should get other keys
* from the list of keynodes.
*/
if (result == ISC_R_SUCCESS || val->keynode != NULL)
break;
validator_log(val, ISC_LOG_DEBUG(3), validator_log(val, ISC_LOG_DEBUG(3),
"key failed to verify rdataset"); "verify rdataset: %s",
result = get_dst_key(val, val->siginfo, isc_result_totext(result));
event->rdataset); if (result == ISC_R_SUCCESS)
}; break;
if (val->keynode != NULL) {
val->keynode = dns_keynode_next(val->keynode);
if (val->keynode == NULL)
break;
val->key = dns_keynode_key(val->keynode);
}
else
if (get_dst_key(val, val->siginfo,
event->rdataset)
!= ISC_R_SUCCESS)
break;
} while (1);
if (result != ISC_R_SUCCESS) if (result != ISC_R_SUCCESS)
validator_log(val, ISC_LOG_DEBUG(3), validator_log(val, ISC_LOG_DEBUG(3),
"failed to verify rdataset"); "failed to verify rdataset");