git://blacka.com / captive-validator.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f28bf76) | patch
Issue #1. Fix opt-out ENT case in NSEC3 NODATA
authorDavid Blacka <davidb@verisign.com>
Thu, 2 Jul 2020 17:42:10 +0000 (17:42 +0000)
committerDavid Blacka <davidb@verisign.com>
Thu, 2 Jul 2020 17:42:10 +0000 (17:42 +0000)
commit5817ffcab73894aeb75e9d7a25ba72904e818a24
tree38c1bf0204ac34d6954f98e1a2d1345e7da18418tree | snapshot
parentf28bf76ae6467ae118e816a5c49412c7ac22913dcommit | diff
Issue #1. Fix opt-out ENT case in NSEC3 NODATA

This attempts to adjust the proof to match the errata filed back in
2012.  It turns out that the qtype=DS/qtype!=DS logic is the same either
in the case we find a matching NSEC3 or we do not and the "next closer"
NSEC3 has the opt-out bit set.
src/com/verisign/tat/dnssec/NSEC3ValUtils.java diff | blob | history
Captive Validator: Java code to validate DNSSEC DNS responses with minimal context