AuthZoneManager: Fixed bug in InternalQuery() that caused dnssec validation issue for DS record when forwarder zone for the domain exists.

This commit is contained in:
Shreyas Zare
2025-02-15 12:38:31 +05:30
parent a54435a6c7
commit 5094e6a481

View File

@@ -1,6 +1,6 @@
/* /*
Technitium DNS Server Technitium DNS Server
Copyright (C) 2024 Shreyas Zare (shreyas@technitium.com) Copyright (C) 2025 Shreyas Zare (shreyas@technitium.com)
This program is free software: you can redistribute it and/or modify This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by it under the terms of the GNU General Public License as published by
@@ -2644,6 +2644,9 @@ namespace DnsServerCore.Dns.ZoneManagers
return null; //no authoritative parent side delegation zone available to answer for DS return null; //no authoritative parent side delegation zone available to answer for DS
zone = delegation; //switch zone to parent side sub domain delegation zone for DS record zone = delegation; //switch zone to parent side sub domain delegation zone for DS record
if (request.DnssecOk && (delegation.AuthoritativeZone is ApexZone delegationApex))
dnssecOk = delegationApex.DnssecStatus != AuthZoneDnssecStatus.Unsigned;
} }
} }
else if ((delegation is not null) && delegation.IsActive && (delegation.Name.Length > apexZone.Name.Length)) else if ((delegation is not null) && delegation.IsActive && (delegation.Name.Length > apexZone.Name.Length))