Overview

Request 821505 accepted

- update to 4.3.3
* Validate cached DNSKEYs against the DSs, not the RRSIGs only.
* Ignore cache-only for DNSKEYs and DS retrieval.
* A ServFail while retrieving DS/DNSKEY records is just that.
* Refuse DS records received from child zones.
* Better exception handling in houseKeeping/handlePolicyHit.
* Take initial refresh time from loaded zone.

Request History
Michael Ströder's avatar

stroeder created request

- update to 4.3.3
* Validate cached DNSKEYs against the DSs, not the RRSIGs only.
* Ignore cache-only for DNSKEYs and DS retrieval.
* A ServFail while retrieving DS/DNSKEY records is just that.
* Refuse DS records received from child zones.
* Better exception handling in houseKeeping/handlePolicyHit.
* Take initial refresh time from loaded zone.


Adam Majer's avatar

adamm accepted request

Thank you!

openSUSE Build Service is sponsored by