BIND 10 #1581: auth::Query NSEC3 support: No Data, non DS case

[BIND 10 Development]

#1581: auth::Query NSEC3 support: No Data, non DS case
-------------------------------------+-------------------------------------
                   Reporter:         |                 Owner:
  jinmei                             |                Status:  new
                       Type:  task   |             Milestone:  Next-Sprint-
                   Priority:  major  |  Proposed
                  Component:         |            Resolution:
  b10-auth                           |             Sensitive:  0
                   Keywords:         |           Sub-Project:  DNS
            Defect Severity:  N/A    |  Estimated Difficulty:  0
Feature Depending on Ticket:  NSEC3  |           Total Hours:  0
        Add Hours to Ticket:  0      |
                  Internal?:  0      |
-------------------------------------+-------------------------------------
Description changed by jinmei:

Old description:

> This task implements RFC5155 7.2.3 and updates ZoneFinder::NXDOMAIN case
> of Query::process():
> - call findNSEC3(recursive = false) for the returned rrset.getName()
>   (or qname).  If it's not exact NSEC3, return SERVFAIL.  (this
>   shouldn't happen for a normally signed NSEC3 zone).
> - add the returned NSEC3 to the authority section
>
> Depends on #1431.

New description:

 This task implements RFC5155 7.2.3 and updates ZoneFinder::NXRRSET case of
 Query::process():
 - call findNSEC3(recursive = false) for the returned rrset.getName()
   (or qname).  If it's not exact NSEC3, return SERVFAIL.  (this
   shouldn't happen for a normally signed NSEC3 zone).
 - add the returned NSEC3 to the authority section

 Depends on #1431.

--

-- 
Ticket URL: <https://bind10.isc.org/ticket/1581#comment:1>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development