Ronan Pigott
414a9b8e5e
resolved: validate authentic insecure delegation to CNAME
...
If the parent zone uses a non-opt-out method that provides authenticated
negative DS replies, we still can't expect signatures from the child
zone. sd-resolved was using the authenticated status of the DS reply to
require signatures for CNAMEs, even though it had already proved that no
signature exists.
Fixes: 47690634f1 ("resolved: don't request the SOA for every dns label")
2024-05-01 20:34:08 +02:00
..
2024-04-25 17:06:43 +02:00
2024-05-01 04:41:06 +09:00
2024-04-25 17:06:43 +02:00
2024-04-30 18:11:10 +02:00
2024-05-01 04:41:06 +09:00
2024-05-02 00:52:06 +09:00
2024-05-01 04:41:06 +09:00
2024-05-01 04:41:06 +09:00
2024-05-01 04:41:06 +09:00
2024-05-01 04:41:06 +09:00
2024-04-25 17:06:43 +02:00
2024-04-19 05:58:46 -07:00
2024-04-25 17:06:43 +02:00
2024-05-01 04:41:06 +09:00
2024-05-01 04:41:06 +09:00
2024-04-25 17:06:43 +02:00
2024-04-26 17:14:07 +02:00
2024-04-30 14:19:55 +02:00
2024-04-25 17:06:43 +02:00
2024-04-22 22:38:11 +02:00
2024-05-01 04:41:06 +09:00
2024-04-28 11:47:55 +09:00
2024-05-02 00:52:06 +09:00
2024-04-29 22:56:49 +02:00
2024-04-25 17:06:43 +02:00
2024-04-25 17:06:43 +02:00
2024-04-26 17:14:07 +02:00
2024-05-01 16:15:20 +02:00
2024-05-01 04:41:06 +09:00
2024-04-25 17:06:43 +02:00
2024-04-25 17:06:43 +02:00
2024-05-01 04:41:06 +09:00
2024-04-25 17:06:43 +02:00
2024-04-22 12:40:09 +02:00
2024-05-01 04:41:06 +09:00
2024-04-25 17:06:42 +02:00
2024-05-01 20:34:08 +02:00
2024-04-25 17:06:43 +02:00
2024-05-02 00:52:06 +09:00
2024-04-25 21:29:34 +02:00
2024-05-01 04:41:06 +09:00
2024-04-25 17:06:43 +02:00
2024-04-25 17:06:43 +02:00
2024-04-25 17:06:43 +02:00
2024-04-25 17:06:43 +02:00
2024-04-23 16:15:55 +02:00
2024-05-01 17:13:10 +09:00
2024-04-22 18:40:10 +09:00
2024-05-01 04:41:06 +09:00
2024-05-01 04:41:06 +09:00
2024-04-20 09:15:07 +09:00
2024-04-22 12:40:09 +02:00
2024-05-01 04:41:06 +09:00
2024-04-27 12:11:13 +02:00
2024-04-20 12:10:42 +02:00
2024-04-25 17:06:43 +02:00