Fix DNSSEC and DNAME.

Do the correct things to validate replies which
include a DNAME record.

Thanks to Graham Clinch for pointing this out.
This commit is contained in:
Simon Kelley
2025-03-15 09:05:47 +00:00
parent 67e07b7fe8
commit 105c25e561
4 changed files with 117 additions and 18 deletions

View File

@@ -1248,7 +1248,7 @@ extern struct daemon {
char *namebuff; /* MAXDNAME size buffer */
char *workspacename;
#ifdef HAVE_DNSSEC
char *keyname; /* MAXDNAME size buffer */
char *keyname, *cname; /* MAXDNAME size buffer */
unsigned long *rr_status; /* ceiling in TTL from DNSSEC or zero for insecure */
int rr_status_sz;
int dnssec_no_time_check;