BIND 10 #1176: RRSIG support in new data source

BIND 10 Development do-not-reply at isc.org
Tue Sep 6 09:03:44 UTC 2011


#1176: RRSIG support in new data source
-------------------------------------+-------------------------------------
                   Reporter:         |                 Owner:  jelte
  jinmei                             |                Status:  reviewing
                       Type:  task   |             Milestone:
                   Priority:  major  |  Sprint-20110830
                  Component:  data   |            Resolution:
  source                             |             Sensitive:  0
                   Keywords:         |           Sub-Project:  DNS
            Defect Severity:  N/A    |  Estimated Difficulty:  0
Feature Depending on Ticket:         |           Total Hours:  0
        Add Hours to Ticket:  0      |
                  Internal?:  0      |
-------------------------------------+-------------------------------------
Changes (by vorner):

 * owner:  vorner => jelte


Comment:

 Hello

 Replying to [comment:8 jelte]:
 > Hmm, I understand why it is, but it seems weird at initial glance that
 > some of the FindOptions are specified in the constructor, some in the
 actual
 > call to findAddrs, and findAddrs then puts them together again. But I
 guess it
 > would look less bad without those casts :)

 Well, one of the option is global per the query and comes from the user,
 while the other is different across different sub-queries. So I don't
 think there's a different way to do it.

 > About using an enum for bitflags; there are several solutions to the
 > problem, one is casting as you did, another could be to overload
 operator|() for
 > it (which initially seems a bit of a hack, but looks much cleaner on the
 caller
 > side, and then we can hide all the casts there (technically you are now
 > implicitely casting FindOptions to int now too)). e.g. something like:

 Yes, that seems to work and is probably the least evil option. I put it
 there.

 > Regarding the RRSIG for wildcards; it is included unmodified except for
 the
 > owner name, which should match the reconstructed owner name of the
 wildcard
 > rrset. The validator can then see it was a wildcard because the label
 count is
 > not equal to the number of labels in the name.

 Yes, I talked about the Rdata of them, the RRsets are created on the fly
 by the database backends, so it is created with the correct name (I just
 checked to make sure the correct name is checked).

 > Just to make sure, do we have an explicit test to check that DNSSEC data
 is NOT
 > included in the final answer when not asked for?

 Hmm, tested where? On the database backend or on the query? Not that there
 would be one in any of them, but the database backend has returning them
 allowed.

 With regards

-- 
Ticket URL: <http://bind10.isc.org/ticket/1176#comment:9>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development


More information about the bind10-tickets mailing list