mirror of
https://github.com/hickory-dns/hickory-dns.git
synced 2026-04-25 03:05:51 +03:00
[PR #2506] [MERGED] Update the NSEC/NSEC3 Truth Table to correctly log responses with NSEC and NSEC3 records #3092
Labels
No labels
blocked
breaking-change
bug
bug:critical
bug:tests
cleanup
compliance
compliance
compliance
crate:all
crate:client
crate:native-tls
crate:proto
crate:recursor
crate:resolver
crate:resolver
crate:rustls
crate:server
crate:util
dependencies
docs
duplicate
easy
easy
enhance
enhance
enhance
feature:dns-over-https
feature:dns-over-quic
feature:dns-over-tls
feature:dnsssec
feature:global_lb
feature:mdns
feature:tsig
features:edns
has workaround
ops
perf
platform:WASM
platform:android
platform:fuchsia
platform:linux
platform:macos
platform:windows
pull-request
question
test
tools
tools
trust
unclear
wontfix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/hickory-dns#3092
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
📋 Pull Request Information
Original PR: https://github.com/hickory-dns/hickory-dns/pull/2506
Author: @marcus0x62
Created: 10/13/2024
Status: ✅ Merged
Merged: 10/14/2024
Merged by: @bluejekyll
Base:
main← Head:nsec_truth_table📝 Commits (1)
0548013fix nsec/nsec3 truth table📊 Changes
1 file changed (+7 additions, -2 deletions)
View changed files
📝
crates/proto/src/xfer/dnssec_dns_handle/mod.rs(+7 -2)📄 Description
The NSEC/NSEC3 truth table returns Bogus if there are no NSEC/NSEC3 records at all, and if both record types are present. That is fine, however the detection logic is backwards. This fixes the matching logic so the 'both record types detected' log is fired in the correct condition.
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.