• Evan Hunt's avatar
    [master] fix incorrect nsec3 check · 9a0dd99a
    Evan Hunt authored
        - check for NSEC3 in empty nodes when not due to optout delegations
        - fixed typo in output ("Bad record NSEC record")
        - incidentally fixed an error in signzone that caused an
          incorrect warning about missing DNSKEYs when using -S
          and -3 together
    
    3473.	[bug]		dnssec-signzone/verify could incorrectly report
    			an error condition due to an empty node above an
    			opt-out delegation lacking an NSEC3. [RT #32072]
    9a0dd99a
dnssec-signzone.c 104 KB