BIND 10 #1807: support NSEC for empty non-terminal in in-memory (2/2)
BIND 10 Development
do-not-reply at isc.org
Sun Mar 18 08:39:08 UTC 2012
#1807: support NSEC for empty non-terminal in in-memory (2/2)
-------------------------------------+-------------------------------------
Reporter: jinmei | Owner:
Type: task | Status: new
Priority: medium | Milestone: New
Component: data source | Tasks
Sensitive: 0 | Keywords:
Sub-Project: DNS | Defect Severity: N/A
Estimated Difficulty: 0 | Feature Depending on Ticket: in-
Total Hours: 0 | memory NSEC
| Add Hours to Ticket: 0
| Internal?: 0
-------------------------------------+-------------------------------------
We'll update this case of InMemoryZoneFinder::find(). it's another empty
non terminal case (may or may not be wildcard)
{{{#!c++
// If there is an exact match but the node is empty, it's
equivalent
// to NXRRSET.
if (node->isEmpty()) {
LOG_DEBUG(logger, DBG_TRACE_DATA, DATASRC_MEM_DOMAIN_EMPTY).
arg(name);
return (createFindResult(NXRRSET, ConstRBNodeRRsetPtr(),
rename));
}
}}}
It uses getClosestNSEC() to get the NSEC for the previous name of the
empty name and includes it in the answer. Note that it shouldn't do
this extra work unless DNSSEC is required and the zone is known to be
NSEC-signed (because the cost is not zero).
Test both wildcard and non-wildcard cases.
Depends on #1803 and #1805 (no need for #1804).
--
Ticket URL: <http://bind10.isc.org/ticket/1807>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development
More information about the bind10-tickets
mailing list