7 commits

Author	SHA1	Message	Date
Libor Peltan	4a2c9ed852	dnssec-validate: also verify that ent over non-opt-outed deleg is not opt-outed 2	2021-09-01 14:33:51 +02:00
Libor Peltan	55c218675f	dnssec validate: search for invalid redundant RRSIGs	2020-10-05 12:12:24 +02:00
Libor Peltan	b47f51d7e0	dnssec validation: dont crash if unsigned zone	2020-09-09 16:12:40 +02:00
Daniel Salzman	8f406b4387	dnssec: don't crash if no policy is configured	2020-09-09 16:05:43 +02:00
Libor Peltan	3a51170795	dnssec validation: disable AXFR failover if validation failed	2020-08-03 16:08:28 +02:00
Libor Peltan	9f53bb6cd5	DNSSEC validation: allow garbage NSEC3 nodes... ... ...more precisely, if zone has NSEC3 tree, allow any NSEC3 records with different salt this is useful for checking zones with slow-resalt	2020-08-03 16:08:28 +02:00
Libor Peltan	b8fe253f62	implemented dnssec validation of updates	2020-08-03 16:08:28 +02:00