projects / systemd / .git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f73e6ee) | patch
resolved: make sure configured NTAs affect subdomains too
authorLennart Poettering <lennart@poettering.net>
Tue, 14 Feb 2017 16:28:17 +0000 (17:28 +0100)
committerLennart Poettering <lennart@poettering.net>
Fri, 17 Feb 2017 09:25:15 +0000 (10:25 +0100)
commitc775838ad7a1f33dcd2f1fac01d1a805bb96bc1f
tree6cf3983e99837c94e1b1cee0766495245a165688tree | snapshot
parentf73e6ee687213d8f78a93a9519901d0fe314c228commit | diff
resolved: make sure configured NTAs affect subdomains too

This ensures that configured NTAs exclude not only the listed domain but
also all domains below it from DNSSEC validation -- except if a positive
trust anchor is defined below (as suggested by RFC7647, section 1.1)

Fixes: #5048
src/resolve/resolved-dns-trust-anchor.c diff | blob | history
https://github.com/systemd/systemd.git