mirror of
https://github.com/isc-projects/bind9.git
synced 2026-06-28 04:50:23 -04:00
Add a system test that verifies the resolver rejects DS records whose owner name does not match the delegation (NS) name in a referral response. A custom authoritative server (ans4) serves the parent zone sibling-ds. from zone file with delegations for child and sibling subzones. Its DomainHandler injects a DS record for sibling.sibling-ds into referrals for child.sibling-ds. The resolver must detect the mismatch, log "DS doesn't match referral (NS)", and return SERVFAIL. Assisted-by: Claude:claude-opus-4-8 |
||
|---|---|---|
| .. | ||
| check | ||
| confgen | ||
| delv | ||
| dig | ||
| dnssec | ||
| include | ||
| named | ||
| nsupdate | ||
| plugins | ||
| rndc | ||
| tests | ||
| tools | ||
| meson.build | ||