Skip non-signing keys

This commit is contained in:
Giovanni Bajo
2012-04-25 18:17:50 +02:00
committed by Simon Kelley
parent 4137b84e4e
commit 0d829ebc69

View File

@@ -299,6 +299,9 @@ int dnssec_parsekey(struct dns_header *header, size_t pktlen, char *owner, unsig
if (proto != 3) if (proto != 3)
return 0; return 0;
/* Skip non-signing keys (as specified in RFC4034 */
if (!(flags & 0x100))
return 0;
switch (alg) switch (alg)
{ {