BIND 10 #1582: auth::Query NSEC3 support: No Data, DS case
BIND 10 Development
do-not-reply at isc.org
Wed Jan 18 07:40:43 UTC 2012
#1582: auth::Query NSEC3 support: No Data, DS case
-------------------------------------+-------------------------------------
Reporter: jinmei | Owner:
Type: task | Status: new
Priority: major | Milestone: Next-
Component: b10-auth | Sprint-Proposed
Sensitive: 0 | Keywords:
Sub-Project: DNS | Defect Severity: N/A
Estimated Difficulty: 0 | Feature Depending on Ticket: NSEC3
Total Hours: 0 | Add Hours to Ticket: 0
| Internal?: 0
-------------------------------------+-------------------------------------
This task implements RFC5155 7.2.3 and updates ZoneFinder::NXRRSET case of
Query::process():
- call findNSEC3(recursive = true) for the returned rrset.getName()
(or qname). It will return the NSEC3 of the DS name (if exist)
or the NSEC3 of the provable closest enclosure.
- Check the # of label of the returned nsec.getName().
If it's smaller than that of qname, It's a provable closest
enclosure (different from the DS name). Construct the next closer
name and call findNSEC3(recursive = false). It will return the
NSEC3 covering the next closer.
- add the returned NSEC3s to the authority section
Depends on #1431 (and probably on #1570)
--
Ticket URL: <https://bind10.isc.org/ticket/1582>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development
More information about the bind10-tickets
mailing list