• Matthijs Mekking's avatar
    Harden grep key ID calls · 83473b97
    Matthijs Mekking authored
    Key IDs may accidentally match dig output that is not the key ID (for
    example the RRSIG inception or expiration time, the query ID, ...).
    Search for key ID + signer name should prevent that, as that is what
    only should occur in the RRSIG record, and signer name always follows
    the key ID.
tests.sh 152 KB