summaryrefslogtreecommitdiffstats
path: root/src/resolve/resolved-dns-dnssec.h
diff options
context:
space:
mode:
authorTom Gundersen <teg@jklm.no>2016-01-01 23:07:34 +0100
committerTom Gundersen <teg@jklm.no>2016-01-03 09:28:48 +0100
commit146035b3bb2e9a60d82c8816de67c83691d6cbc4 (patch)
tree1e9b153b42475f0be4295fdf7d550462840dd83e /src/resolve/resolved-dns-dnssec.h
parentresolved: dnssec - add reference to the algorithm we implement (diff)
downloadsystemd-146035b3bb2e9a60d82c8816de67c83691d6cbc4.tar.xz
systemd-146035b3bb2e9a60d82c8816de67c83691d6cbc4.zip
resolved: don't conclude NODATA if CNAME exists
Instead introduce the new return-code DNSSEC_NSEC_CNAME to indicate this condition. See RFC 6840, Section 4.3.
Diffstat (limited to 'src/resolve/resolved-dns-dnssec.h')
-rw-r--r--src/resolve/resolved-dns-dnssec.h1
1 files changed, 1 insertions, 0 deletions
diff --git a/src/resolve/resolved-dns-dnssec.h b/src/resolve/resolved-dns-dnssec.h
index d7aecbce13..57858d0c15 100644
--- a/src/resolve/resolved-dns-dnssec.h
+++ b/src/resolve/resolved-dns-dnssec.h
@@ -91,6 +91,7 @@ int dnssec_nsec3_hash(DnsResourceRecord *nsec3, const char *name, void *ret);
typedef enum DnssecNsecResult {
DNSSEC_NSEC_NO_RR, /* No suitable NSEC/NSEC3 RR found */
+ DNSSEC_NSEC_CNAME, /* Would be NODATA, but for the existence of a CNAME RR */
DNSSEC_NSEC_UNSUPPORTED_ALGORITHM,
DNSSEC_NSEC_NXDOMAIN,
DNSSEC_NSEC_NODATA,