]> granicus.if.org Git - pdns/commit
implement four dnssec modes: off (3.x behaviour), process (ask for DNSSEC, give it...
authorbert hubert <bert.hubert@netherlabs.nl>
Mon, 14 Dec 2015 14:49:37 +0000 (15:49 +0100)
committerbert hubert <bert.hubert@netherlabs.nl>
Mon, 14 Dec 2015 14:49:37 +0000 (15:49 +0100)
commit12ce523e77d7738d78e436a9fe1dd25818a8f2cd
tree2cb33ba6ad838f597f7216b6231f7e863d5b0788
parentf758857a65412a3204d37699ff2820080bc4b420
implement four dnssec modes: off (3.x behaviour), process (ask for DNSSEC, give it when asked for, validate when asked to), validate (always validate), log-fail, always validate but log failures only.
Also, improve EDNS probing, plus make recursor packet cache DNSSEC aware.
pdns/lwres.cc
pdns/pdns_recursor.cc
pdns/rec-lua-conf.cc
pdns/recpacketcache.cc
pdns/recpacketcache.hh
pdns/syncres.cc
pdns/syncres.hh
pdns/validate-recursor.cc
pdns/validate-recursor.hh