[PR #2436] [MERGED] conformance: unsigned leaf zone; other zones use NSEC #3035

New issue

Closed

opened 2026-03-16 11:21:46 +03:00 by kerem · 0 comments

kerem commented

2026-03-16 11:21:46 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/hickory-dns/hickory-dns/pull/2436
Author: @japaric
Created: 9/6/2024
Status: ✅ Merged
Merged: 9/24/2024
Merged by: @japaric

Base: main ← Head: ja-unsigned-nsec

📝 Commits (3)

a0ef6a0 dns-test: allow using NSEC instead of NSEC3
81b6b92 dns-test: parse NSEC
0900426 conformance: unsigned leaf zone; other zones use NSEC

📊 Changes

4 files changed (+142 additions, -20 deletions)

View changed files

📝 conformance/packages/conformance-tests/src/resolver/dnssec/scenarios/insecure.rs (+20 -7)
📝 conformance/packages/dns-test/src/record.rs (+94 -1)
📝 conformance/packages/dns-test/src/zone_file/mod.rs (+1 -1)
📝 conformance/packages/dns-test/src/zone_file/signer.rs (+27 -11)

📄 Description

this is an NSEC version of #2380 that confirms the existence of NSEC logic bugs in the resolver that are independent of the NSEC version being used

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/hickory-dns/hickory-dns/pull/2436 **Author:** [@japaric](https://github.com/japaric) **Created:** 9/6/2024 **Status:** ✅ Merged **Merged:** 9/24/2024 **Merged by:** [@japaric](https://github.com/japaric) **Base:** `main` ← **Head:** `ja-unsigned-nsec` --- ### 📝 Commits (3) - [`a0ef6a0`](https://github.com/hickory-dns/hickory-dns/commit/a0ef6a04811117b1b983e8218ac7b99b155627d6) dns-test: allow using NSEC instead of NSEC3 - [`81b6b92`](https://github.com/hickory-dns/hickory-dns/commit/81b6b92c2249a913529294d5a5de382786393a90) dns-test: parse NSEC - [`0900426`](https://github.com/hickory-dns/hickory-dns/commit/09004261ae9f6f875d9e12018355ffc81664ebd4) conformance: unsigned leaf zone; other zones use NSEC ### 📊 Changes **4 files changed** (+142 additions, -20 deletions) <details> <summary>View changed files</summary> 📝 `conformance/packages/conformance-tests/src/resolver/dnssec/scenarios/insecure.rs` (+20 -7) 📝 `conformance/packages/dns-test/src/record.rs` (+94 -1) 📝 `conformance/packages/dns-test/src/zone_file/mod.rs` (+1 -1) 📝 `conformance/packages/dns-test/src/zone_file/signer.rs` (+27 -11) </details> ### 📄 Description this is an NSEC version of #2380 that confirms the existence of NSEC logic bugs in the resolver that are independent of the NSEC version being used --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>