Displaying 6 results from an estimated 6 matches for "rrset_validated".
2003 Sep 08
1
please test (HEADER.ad)
...rrsetbyname.c 2003-09-08 10:08:28.004080003 -0700
@@ -243,9 +243,11 @@
rrset->rri_ttl = response->answer->ttl;
rrset->rri_nrdatas = response->header.ancount;
+#ifdef HAVE_HEADER_AD
/* check for authenticated data */
if (response->header.ad == 1)
rrset->rri_flags |= RRSET_VALIDATED;
+#endif
/* copy name from answer section */
length = strlen(response->answer->name);
2007 May 21
1
[PATCH] Add support for ldns
...ri_rdtype = ldns_rr_get_type(ldns_rr_list_rr(rrdata, 0));
+ rrset->rri_ttl = ldns_rr_ttl(ldns_rr_list_rr(rrdata, 0));
+
+ debug2("ldns: Got %u answers from DNS", rrset->rri_nrdatas);
+
+ /* Check for authenticated data */
+ if (ldns_pkt_ad(pkt)) {
+ rrset->rri_flags |= RRSET_VALIDATED;
+ } else { /* AD is not set, try autonomous validation */
+
+ ldns_rr_list * trusted_keys = ldns_rr_list_new();
+
+ debug2("ldns: trying to validate RRset");
+ /* Get eventual sigs */
+ rrsigs = ldns_pkt_rr_list_by_type(pkt, LDNS_RR_TYPE_RRSIG, LDNS_SECTION_ANSWER);
+ rrs...
2012 Jun 29
2
[Bug 2022] ssh segfaults when using ldns, SSHFP, a DNSSEC-enabled resolver and a CNAME
https://bugzilla.mindrot.org/show_bug.cgi?id=2022
--- Comment #2 from Darren Tucker <dtucker at zip.com.au> ---
Patch applied, thanks.
I still don't understand how it gets into this state since the space
should be allocated immediately beforehand:
if (rrset->rri_nsigs > 0) {
rrset->rri_sigs = calloc(rrset->rri_nsigs,
2003 May 15
2
Resolver changes broke AIX & HPUX
Hi All.
Haven't looked at this yet but it looks like the resolver changes broke
AIX and HP-UX.
-Daz.
AIX 4.3.3.11:
gcc -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I. -I..
-I../../openbsd-compat -I../../openbsd-compat/.. -I/usr/local/ssl/include
-I/usr/local/include -DHAVE_CONFIG_H -c
../../openbsd-compat/getrrsetbyname.c
../../openbsd-compat/getrrsetbyname.c:133: warning: static
2008 Apr 02
3
[Bug 1455] New: ssh client ignoring ad bit in dns response - OSX 10.5
https://bugzilla.mindrot.org/show_bug.cgi?id=1455
Summary: ssh client ignoring ad bit in dns response - OSX 10.5
Classification: Unclassified
Product: Portable OpenSSH
Version: 4.9p1
Platform: ix86
2012 May 09
4
feature request: modify getrrsetbyname() to use libunbound
Dear OpenSSH Developers,
I'm a member of the Debian System Administration (DSA) team. [1] We
manage the Debian Projects computing infrastructure.
Recently, DSA had the opportunity to address a member's request that we
begin using certificates to authenticate Debian Project machines to ssh
clients. We provided a lengthy reply, the summary of which is "we
publish SSHFP records; use