From: Peter van Dijk Date: Fri, 24 May 2013 14:11:23 +0000 (+0200) Subject: send extra NSEC3 because old BIND9 needs it, closes #814 X-Git-Tag: auth-3.3-rc1~8 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=a1d6b0c22ccb5b200bc24de2646b8235aad3786c;p=pdns send extra NSEC3 because old BIND9 needs it, closes #814 --- diff --git a/pdns/packethandler.cc b/pdns/packethandler.cc index ba5165768..549cac397 100644 --- a/pdns/packethandler.cc +++ b/pdns/packethandler.cc @@ -601,7 +601,9 @@ void PacketHandler::addNSEC3(DNSPacket *p, DNSPacket *r, const string& target, c } // add matching NSEC3 RR - if (mode != 3) { + // we used to skip this one for mode 3, but old BIND needs it + // see https://github.com/PowerDNS/pdns/issues/814 + // if (mode != 3) { unhashed=(mode == 0 || mode == 5) ? target : closest; hashed=hashQNameWithSalt(ns3rc.d_iterations, ns3rc.d_salt, unhashed); @@ -610,7 +612,7 @@ void PacketHandler::addNSEC3(DNSPacket *p, DNSPacket *r, const string& target, c getNSEC3Hashes(narrow, sd.db, sd.domain_id, hashed, false, unhashed, before, after); DLOG(L<<"Done calling for matching, hashed: '"<