mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-09-02 23:55:27 +00:00
Code Issues Releases Wiki Activity

Don't delete the NSEC3PARAM immediately

Browse Source 
Wait until the new NSEC or NSEC3 chain is generated then it should
be deleted.
This commit is contained in:
Mark Andrews
2023-12-15 16:07:46 +11:00
parent b248574f93
commit f3ae88d84e
1 changed files with 0 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
lib/dns/nsec3.c
View File

@@ -1133,12 +1133,6 @@ dns_nsec3param_deletechains(dns_db_t *db, dns_dbversion_t *ver,
dns_rdata_t private = DNS_RDATA_INIT; dns_rdata_t private = DNS_RDATA_INIT;
dns_rdataset_current(&rdataset, &rdata); dns_rdataset_current(&rdataset, &rdata);
CHECK(dns_difftuple_create(diff->mctx, DNS_DIFFOP_DEL, origin,
rdataset.ttl, &rdata, &tuple));
CHECK(do_one_tuple(&tuple, db, ver, diff));
INSIST(tuple == NULL);
dns_nsec3param_toprivate(&rdata, &private, privatetype, buf, dns_nsec3param_toprivate(&rdata, &private, privatetype, buf,
sizeof(buf)); sizeof(buf));
buf[2] = DNS_NSEC3FLAG_REMOVE; buf[2] = DNS_NSEC3FLAG_REMOVE;