Handle DS records for unsupported crypto algorithms correctly.

Such a DS, as long as it is validated, should allow answers
in the domain is attests to be returned as unvalidated, and not
as a validation error.
This commit is contained in:
Simon Kelley
2022-11-16 16:49:30 +00:00
parent 1f9215f5f9
commit 9ed3ee67ec
3 changed files with 44 additions and 24 deletions

View File

@@ -44,8 +44,13 @@ version 2.88
cases where is can be useful. Thanks to Dominik Derigs for
the patch.
Handle DS records for unsupported crypto algorithms correctly.
Such a DS, as long as it is validated, should allow answers
in the domain is attests to be returned as unvalidated, and not
as a validation error.
(version 2.87
version 2.87
Allow arbitrary prefix lengths in --rev-server and
--domain=....,local