mirror of
https://github.com/pi-hole/dnsmasq.git
synced 2025-12-19 10:18:25 +00:00
Skip non-signing keys
This commit is contained in:
committed by
Simon Kelley
parent
4137b84e4e
commit
0d829ebc69
@@ -299,6 +299,9 @@ int dnssec_parsekey(struct dns_header *header, size_t pktlen, char *owner, unsig
|
||||
|
||||
if (proto != 3)
|
||||
return 0;
|
||||
/* Skip non-signing keys (as specified in RFC4034 */
|
||||
if (!(flags & 0x100))
|
||||
return 0;
|
||||
|
||||
switch (alg)
|
||||
{
|
||||
|
||||
Reference in New Issue
Block a user