jeremiejig 13e66918e3 plugin/dnssec: on delegation, sign DS or NSEC of no DS. (#5899) ...

* When returning NS for delegation point, we sign any DS Record or if not
  found we generate a NSEC proving absence of DS. This follow behaviour
  describe in rfc4035 (Section 3.1.4)
* DS request at apex behave as before.
* Fix edge case of requesting NSEC which prove that NSEC does not exist.

Signed-off-by: Jeremiejig <me@jeremiejig.fr>

2023-04-22 22:32:01 +02:00

5.0 KiB

Raw Blame History

View Raw