Diff

net/resolvers/service.lua @ 12129:7a68d5828f3b

net.resolvers: Report DNSSEC validation errors instead of NoError Thanks Martin bringing this case to attention
author Kim Alvefur <zash@zash.se>
date Tue, 28 Dec 2021 14:58:09 +0100
parent 12025:6ed7fd28f5e3
child 12401:c029ddcad258
line wrap: on
line diff
--- a/net/resolvers/service.lua	Sun Dec 26 16:51:04 2021 +0100
+++ b/net/resolvers/service.lua	Tue Dec 28 14:58:09 2021 +0100
@@ -55,6 +55,10 @@
 		if answer then
 			if self.extra and not answer.secure then
 				self.extra.use_dane = false;
+			elseif answer.bogus then
+				self.last_error = "Validation error in SRV lookup";
+				ready();
+				return;
 			end
 
 			if #answer == 0 then