Michał Kępień c6bf43a821 Make NTAs work with validating forwarders ... If named is configured to perform DNSSEC validation and also forwards all queries ("forward only;") to validating resolvers, negative trust anchors do not work properly because the CD bit is not set in queries sent to the forwarders. As a result, instead of retrieving bogus DNSSEC material and making validation decisions based on its configuration, named is only receiving SERVFAIL responses to queries for bogus data. Fix by ensuring the CD bit is always set in queries sent to forwarders if the query name is covered by an NTA. (cherry picked from commit 5e80488270)		2019-05-09 20:37:37 -07:00
..
dns	Make NTAs work with validating forwarders	2019-05-09 20:37:37 -07:00
dst	Update keyfetch_done compute_tag check	2019-02-20 17:45:47 -08:00
Makefile.in	Remove $Id markers, Principal Author and Reviewed tags from the full source tree	2018-05-11 13:17:46 +02:00