Codebase list unbound / 27ee7c8
Imported Upstream version 1.3.4 Robert S. Edmonds 12 years ago
14 changed file(s) with 113 addition(s) and 45 deletion(s). Raw diff Collapse all Expand all
+23
-4
config.guess less more
33 # 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008
44 # Free Software Foundation, Inc.
55
6 timestamp='2008-11-15'
6 timestamp='2009-04-27'
77
88 # This file is free software; you can redistribute it and/or modify it
99 # under the terms of the GNU General Public License as published by
323323 case `/usr/bin/uname -p` in
324324 sparc) echo sparc-icl-nx7; exit ;;
325325 esac ;;
326 s390x:SunOS:*:*)
327 echo ${UNAME_MACHINE}-ibm-solaris2`echo ${UNAME_RELEASE}|sed -e 's/[^.]*//'`
328 exit ;;
326329 sun4H:SunOS:5.*:*)
327330 echo sparc-hal-solaris2`echo ${UNAME_RELEASE}|sed -e 's/[^.]*//'`
328331 exit ;;
336339 # Note that the Sun cc does not turn __LP64__ into 1 like gcc does.
337340 # This test works for both compilers.
338341 if [ "$CC_FOR_BUILD" != 'no_compiler_found' ]; then
339 if echo '\n#ifdef __amd64\nIS_64BIT_ARCH\n#endif' | \
342 if (echo '#ifdef __amd64'; echo IS_64BIT_ARCH; echo '#endif') | \
340343 (CCOPTS= $CC_FOR_BUILD -E - 2>/dev/null) | \
341344 grep IS_64BIT_ARCH >/dev/null
342345 then
11141117 pc:*:*:*)
11151118 # Left here for compatibility:
11161119 # uname -m prints for DJGPP always 'pc', but it prints nothing about
1117 # the processor, so we play safe by assuming i386.
1118 echo i386-pc-msdosdjgpp
1120 # the processor, so we play safe by assuming i586.
1121 # Note: whatever this is, it MUST be the same as what config.sub
1122 # prints for the "djgpp" host, or else GDB configury will decide that
1123 # this is a cross-build.
1124 echo i586-pc-msdosdjgpp
11191125 exit ;;
11201126 Intel:Mach:3*:*)
11211127 echo i386-pc-mach3
11531159 3[34]??:*:4.0:* | 3[34]??,*:*:4.0:*)
11541160 /bin/uname -p 2>/dev/null | grep 86 >/dev/null \
11551161 && { echo i486-ncr-sysv4; exit; } ;;
1162 NCR*:*:4.2:* | MPRAS*:*:4.2:*)
1163 OS_REL='.3'
1164 test -r /etc/.relid \
1165 && OS_REL=.`sed -n 's/[^ ]* [^ ]* \([0-9][0-9]\).*/\1/p' < /etc/.relid`
1166 /bin/uname -p 2>/dev/null | grep 86 >/dev/null \
1167 && { echo i486-ncr-sysv4.3${OS_REL}; exit; }
1168 /bin/uname -p 2>/dev/null | /bin/grep entium >/dev/null \
1169 && { echo i586-ncr-sysv4.3${OS_REL}; exit; }
1170 /bin/uname -p 2>/dev/null | /bin/grep pteron >/dev/null \
1171 && { echo i586-ncr-sysv4.3${OS_REL}; exit; } ;;
11561172 m68*:LynxOS:2.*:* | m68*:LynxOS:3.0*:*)
11571173 echo m68k-unknown-lynxos${UNAME_RELEASE}
11581174 exit ;;
13381354 exit ;;
13391355 i*86:rdos:*:*)
13401356 echo ${UNAME_MACHINE}-pc-rdos
1357 exit ;;
1358 i*86:AROS:*:*)
1359 echo ${UNAME_MACHINE}-pc-aros
13411360 exit ;;
13421361 esac
13431362
+14
-5
config.sub less more
33 # 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008
44 # Free Software Foundation, Inc.
55
6 timestamp='2008-09-08'
6 timestamp='2009-04-17'
77
88 # This file is (in principle) common to ALL GNU software.
99 # The presence of a machine in this file suggests that SOME GNU software
121121 case $maybe_os in
122122 nto-qnx* | linux-gnu* | linux-dietlibc | linux-newlib* | linux-uclibc* | \
123123 uclinux-uclibc* | uclinux-gnu* | kfreebsd*-gnu* | knetbsd*-gnu* | netbsd*-gnu* | \
124 kopensolaris*-gnu* | \
124125 storm-chaos* | os2-emx* | rtmk-nova*)
125126 os=-$maybe_os
126127 basic_machine=`echo $1 | sed 's/^\(.*\)-\([^-]*-[^-]*\)$/\1/'`
248249 | h8300 | h8500 | hppa | hppa1.[01] | hppa2.0 | hppa2.0[nw] | hppa64 \
249250 | i370 | i860 | i960 | ia64 \
250251 | ip2k | iq2000 \
252 | lm32 \
251253 | m32c | m32r | m32rle | m68000 | m68k | m88k \
252254 | maxq | mb | microblaze | mcore | mep | metag \
253255 | mips | mipsbe | mipseb | mipsel | mipsle \
269271 | mipsisa64sr71k | mipsisa64sr71kel \
270272 | mipstx39 | mipstx39el \
271273 | mn10200 | mn10300 \
274 | moxie \
272275 | mt \
273276 | msp430 \
274277 | nios | nios2 \
278281 | powerpc | powerpc64 | powerpc64le | powerpcle | ppcbe \
279282 | pyramid \
280283 | score \
281 | sh | sh[1234] | sh[24]a | sh[23]e | sh[34]eb | sheb | shbe | shle | sh[1234]le | sh3ele \
284 | sh | sh[1234] | sh[24]a | sh[24]aeb | sh[23]e | sh[34]eb | sheb | shbe | shle | sh[1234]le | sh3ele \
282285 | sh64 | sh64le \
283286 | sparc | sparc64 | sparc64b | sparc64v | sparc86x | sparclet | sparclite \
284287 | sparcv8 | sparcv9 | sparcv9b | sparcv9v \
330333 | hppa-* | hppa1.[01]-* | hppa2.0-* | hppa2.0[nw]-* | hppa64-* \
331334 | i*86-* | i860-* | i960-* | ia64-* \
332335 | ip2k-* | iq2000-* \
336 | lm32-* \
333337 | m32c-* | m32r-* | m32rle-* \
334338 | m68000-* | m680[012346]0-* | m68360-* | m683?2-* | m68k-* \
335339 | m88110-* | m88k-* | maxq-* | mcore-* | metag-* \
361365 | powerpc-* | powerpc64-* | powerpc64le-* | powerpcle-* | ppcbe-* \
362366 | pyramid-* \
363367 | romp-* | rs6000-* \
364 | sh-* | sh[1234]-* | sh[24]a-* | sh[23]e-* | sh[34]eb-* | sheb-* | shbe-* \
368 | sh-* | sh[1234]-* | sh[24]a-* | sh[24]aeb-* | sh[23]e-* | sh[34]eb-* | sheb-* | shbe-* \
365369 | shle-* | sh[1234]le-* | sh3ele-* | sh64-* | sh64le-* \
366370 | sparc-* | sparc64-* | sparc64b-* | sparc64v-* | sparc86x-* | sparclet-* \
367371 | sparclite-* \
442446 basic_machine=m68k-apollo
443447 os=-bsd
444448 ;;
449 aros)
450 basic_machine=i386-pc
451 os=-aros
452 ;;
445453 aux)
446454 basic_machine=m68k-apple
447455 os=-aux
11811189 we32k)
11821190 basic_machine=we32k-att
11831191 ;;
1184 sh[1234] | sh[24]a | sh[34]eb | sh[1234]le | sh[23]ele)
1192 sh[1234] | sh[24]a | sh[24]aeb | sh[34]eb | sh[1234]le | sh[23]ele)
11851193 basic_machine=sh-unknown
11861194 ;;
11871195 sparc | sparcv8 | sparcv9 | sparcv9b | sparcv9v)
12531261 -gnu* | -bsd* | -mach* | -minix* | -genix* | -ultrix* | -irix* \
12541262 | -*vms* | -sco* | -esix* | -isc* | -aix* | -sunos | -sunos[34]*\
12551263 | -hpux* | -unos* | -osf* | -luna* | -dgux* | -solaris* | -sym* \
1264 | -kopensolaris* \
12561265 | -amigaos* | -amigados* | -msdos* | -newsos* | -unicos* | -aof* \
1257 | -aos* \
1266 | -aos* | -aros* \
12581267 | -nindy* | -vxsim* | -vxworks* | -ebmon* | -hms* | -mvs* \
12591268 | -clix* | -riscos* | -uniplus* | -iris* | -rtu* | -xenix* \
12601269 | -hiux* | -386bsd* | -knetbsd* | -mirbsd* | -netbsd* \
+25
-24
configure less more
00 #! /bin/sh
11 # Guess values for system-dependent variables and create Makefiles.
2 # Generated by GNU Autoconf 2.63 for unbound 1.3.3.
2 # Generated by GNU Autoconf 2.63 for unbound 1.3.4.
33 #
44 # Report bugs to <unbound-bugs@nlnetlabs.nl>.
55 #
744744 # Identity of this package.
745745 PACKAGE_NAME='unbound'
746746 PACKAGE_TARNAME='unbound'
747 PACKAGE_VERSION='1.3.3'
748 PACKAGE_STRING='unbound 1.3.3'
747 PACKAGE_VERSION='1.3.4'
748 PACKAGE_STRING='unbound 1.3.4'
749749 PACKAGE_BUGREPORT='unbound-bugs@nlnetlabs.nl'
750750
751751 # Factoring default headers for most tests.
14971497 # Omit some internal or obsolete options to make the list less imposing.
14981498 # This message is too long to be a string in the A/UX 3.1 sh.
14991499 cat <<_ACEOF
1500 \`configure' configures unbound 1.3.3 to adapt to many kinds of systems.
1500 \`configure' configures unbound 1.3.4 to adapt to many kinds of systems.
15011501
15021502 Usage: $0 [OPTION]... [VAR=VALUE]...
15031503
15621562
15631563 if test -n "$ac_init_help"; then
15641564 case $ac_init_help in
1565 short | recursive ) echo "Configuration of unbound 1.3.3:";;
1565 short | recursive ) echo "Configuration of unbound 1.3.4:";;
15661566 esac
15671567 cat <<\_ACEOF
15681568
17071707 test -n "$ac_init_help" && exit $ac_status
17081708 if $ac_init_version; then
17091709 cat <<\_ACEOF
1710 unbound configure 1.3.3
1710 unbound configure 1.3.4
17111711 generated by GNU Autoconf 2.63
17121712
17131713 Copyright (C) 1992, 1993, 1994, 1995, 1996, 1998, 1999, 2000, 2001,
17211721 This file contains any messages produced by compilers while
17221722 running configure, to aid debugging if configure makes a mistake.
17231723
1724 It was created by unbound $as_me 1.3.3, which was
1724 It was created by unbound $as_me 1.3.4, which was
17251725 generated by GNU Autoconf 2.63. Invocation command line was
17261726
17271727 $ $0 $@
20912091
20922092
20932093 LIBUNBOUND_CURRENT=1
2094 LIBUNBOUND_REVISION=3
2094 LIBUNBOUND_REVISION=4
20952095 LIBUNBOUND_AGE=0
20962096 # 1.0.0 had 0:12:0
20972097 # 1.0.1 had 0:13:0
21042104 # 1.3.1 had 1:1:0
21052105 # 1.3.2 had 1:2:0
21062106 # 1.3.3 had 1:3:0
2107 # 1.3.4 had 1:4:0
21072108
21082109 # Current -- the number of the binary API that we're implementing
21092110 # Revision -- which iteration of the implementation of the binary
72587259 else
72597260 lt_cv_nm_interface="BSD nm"
72607261 echo "int some_variable = 0;" > conftest.$ac_ext
7261 (eval echo "\"\$as_me:7262: $ac_compile\"" >&5)
7262 (eval echo "\"\$as_me:7263: $ac_compile\"" >&5)
72627263 (eval "$ac_compile" 2>conftest.err)
72637264 cat conftest.err >&5
7264 (eval echo "\"\$as_me:7265: $NM \\\"conftest.$ac_objext\\\"\"" >&5)
7265 (eval echo "\"\$as_me:7266: $NM \\\"conftest.$ac_objext\\\"\"" >&5)
72657266 (eval "$NM \"conftest.$ac_objext\"" 2>conftest.err > conftest.out)
72667267 cat conftest.err >&5
7267 (eval echo "\"\$as_me:7268: output\"" >&5)
7268 (eval echo "\"\$as_me:7269: output\"" >&5)
72687269 cat conftest.out >&5
72697270 if $GREP 'External.*some_variable' conftest.out > /dev/null; then
72707271 lt_cv_nm_interface="MS dumpbin"
84698470 ;;
84708471 *-*-irix6*)
84718472 # Find out which ABI we are using.
8472 echo '#line 8473 "configure"' > conftest.$ac_ext
8473 echo '#line 8474 "configure"' > conftest.$ac_ext
84738474 if { (eval echo "$as_me:$LINENO: \"$ac_compile\"") >&5
84748475 (eval $ac_compile) 2>&5
84758476 ac_status=$?
98369837 -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
98379838 -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
98389839 -e 's:$: $lt_compiler_flag:'`
9839 (eval echo "\"\$as_me:9840: $lt_compile\"" >&5)
9840 (eval echo "\"\$as_me:9841: $lt_compile\"" >&5)
98409841 (eval "$lt_compile" 2>conftest.err)
98419842 ac_status=$?
98429843 cat conftest.err >&5
9843 echo "$as_me:9844: \$? = $ac_status" >&5
9844 echo "$as_me:9845: \$? = $ac_status" >&5
98449845 if (exit $ac_status) && test -s "$ac_outfile"; then
98459846 # The compiler can only warn and ignore the option if not recognized
98469847 # So say no if there are warnings other than the usual output.
1017510176 -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
1017610177 -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
1017710178 -e 's:$: $lt_compiler_flag:'`
10178 (eval echo "\"\$as_me:10179: $lt_compile\"" >&5)
10179 (eval echo "\"\$as_me:10180: $lt_compile\"" >&5)
1017910180 (eval "$lt_compile" 2>conftest.err)
1018010181 ac_status=$?
1018110182 cat conftest.err >&5
10182 echo "$as_me:10183: \$? = $ac_status" >&5
10183 echo "$as_me:10184: \$? = $ac_status" >&5
1018310184 if (exit $ac_status) && test -s "$ac_outfile"; then
1018410185 # The compiler can only warn and ignore the option if not recognized
1018510186 # So say no if there are warnings other than the usual output.
1028010281 -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
1028110282 -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
1028210283 -e 's:$: $lt_compiler_flag:'`
10283 (eval echo "\"\$as_me:10284: $lt_compile\"" >&5)
10284 (eval echo "\"\$as_me:10285: $lt_compile\"" >&5)
1028410285 (eval "$lt_compile" 2>out/conftest.err)
1028510286 ac_status=$?
1028610287 cat out/conftest.err >&5
10287 echo "$as_me:10288: \$? = $ac_status" >&5
10288 echo "$as_me:10289: \$? = $ac_status" >&5
1028810289 if (exit $ac_status) && test -s out/conftest2.$ac_objext
1028910290 then
1029010291 # The compiler can only warn and ignore the option if not recognized
1033510336 -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
1033610337 -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
1033710338 -e 's:$: $lt_compiler_flag:'`
10338 (eval echo "\"\$as_me:10339: $lt_compile\"" >&5)
10339 (eval echo "\"\$as_me:10340: $lt_compile\"" >&5)
1033910340 (eval "$lt_compile" 2>out/conftest.err)
1034010341 ac_status=$?
1034110342 cat out/conftest.err >&5
10342 echo "$as_me:10343: \$? = $ac_status" >&5
10343 echo "$as_me:10344: \$? = $ac_status" >&5
1034310344 if (exit $ac_status) && test -s out/conftest2.$ac_objext
1034410345 then
1034510346 # The compiler can only warn and ignore the option if not recognized
1313813139 lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2
1313913140 lt_status=$lt_dlunknown
1314013141 cat > conftest.$ac_ext <<_LT_EOF
13141 #line 13142 "configure"
13142 #line 13143 "configure"
1314213143 #include "confdefs.h"
1314313144
1314413145 #if HAVE_DLFCN_H
1323413235 lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2
1323513236 lt_status=$lt_dlunknown
1323613237 cat > conftest.$ac_ext <<_LT_EOF
13237 #line 13238 "configure"
13238 #line 13239 "configure"
1323813239 #include "confdefs.h"
1323913240
1324013241 #if HAVE_DLFCN_H
2280422805 # report actual input values of CONFIG_FILES etc. instead of their
2280522806 # values after options handling.
2280622807 ac_log="
22807 This file was extended by unbound $as_me 1.3.3, which was
22808 This file was extended by unbound $as_me 1.3.4, which was
2280822809 generated by GNU Autoconf 2.63. Invocation command line was
2280922810
2281022811 CONFIG_FILES = $CONFIG_FILES
2286722868 _ACEOF
2286822869 cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
2286922870 ac_cs_version="\\
22870 unbound config.status 1.3.3
22871 unbound config.status 1.3.4
2287122872 configured by $0, generated by GNU Autoconf 2.63,
2287222873 with options \\"`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`\\"
2287322874
+3
-2
configure.ac less more
55 sinclude(acx_python.m4)
66 sinclude(ac_pkg_swig.m4)
77
8 AC_INIT(unbound, 1.3.3, unbound-bugs@nlnetlabs.nl, unbound)
8 AC_INIT(unbound, 1.3.4, unbound-bugs@nlnetlabs.nl, unbound)
99
1010 LIBUNBOUND_CURRENT=1
11 LIBUNBOUND_REVISION=3
11 LIBUNBOUND_REVISION=4
1212 LIBUNBOUND_AGE=0
1313 # 1.0.0 had 0:12:0
1414 # 1.0.1 had 0:13:0
2121 # 1.3.1 had 1:1:0
2222 # 1.3.2 had 1:2:0
2323 # 1.3.3 had 1:3:0
24 # 1.3.4 had 1:4:0
2425
2526 # Current -- the number of the binary API that we're implementing
2627 # Revision -- which iteration of the implementation of the binary
+7
-0
doc/Changelog less more
0 7 October 2009: Wouter
1 - release 1.3.4 tag.
2 - Fixed bug where NSEC3 signature was not checked. This meant that
3 a DS could be spoofed away by a carefully crafted packet.
4 A downgrade attack on existing secure delegations.
5 - updated iana port list.
6
07 4 August 2009: Wouter
18 - Added test that the examples from draft rsasha256-14 verify.
29 - iana portlist updated.
+1
-1
doc/README less more
0 README for Unbound 1.3.3
0 README for Unbound 1.3.4
11 Copyright 2007 NLnet Labs
22 http://unbound.net
33
+2
-2
doc/libunbound.3.in less more
0 .TH "libunbound" "3" "Aug 4, 2009" "NLnet Labs" "unbound 1.3.3"
0 .TH "libunbound" "3" "Oct 7, 2009" "NLnet Labs" "unbound 1.3.4"
11 .\"
22 .\" libunbound.3 -- unbound library functions manual
33 .\"
4040 .B ub_ctx_zone_remove,
4141 .B ub_ctx_data_add,
4242 .B ub_ctx_data_remove
43 \- Unbound DNS validating resolver 1.3.3 functions.
43 \- Unbound DNS validating resolver 1.3.4 functions.
4444 .SH "SYNOPSIS"
4545 .LP
4646 .B #include <unbound.h>
+1
-1
doc/unbound-checkconf.8.in less more
0 .TH "unbound-checkconf" "8" "Aug 4, 2009" "NLnet Labs" "unbound 1.3.3"
0 .TH "unbound-checkconf" "8" "Oct 7, 2009" "NLnet Labs" "unbound 1.3.4"
11 .\"
22 .\" unbound-checkconf.8 -- unbound configuration checker manual
33 .\"
+1
-1
doc/unbound-control.8.in less more
0 .TH "unbound-control" "8" "Aug 4, 2009" "NLnet Labs" "unbound 1.3.3"
0 .TH "unbound-control" "8" "Oct 7, 2009" "NLnet Labs" "unbound 1.3.4"
11 .\"
22 .\" unbound-control.8 -- unbound remote control manual
33 .\"
+1
-1
doc/unbound-host.1 less more
0 .TH "unbound\-host" "1" "Aug 4, 2009" "NLnet Labs" "unbound 1.3.3"
0 .TH "unbound\-host" "1" "Oct 7, 2009" "NLnet Labs" "unbound 1.3.4"
11 .\"
22 .\" unbound-host.1 -- unbound DNS lookup utility
33 .\"
+2
-2
doc/unbound.8.in less more
0 .TH "unbound" "8" "Aug 4, 2009" "NLnet Labs" "unbound 1.3.3"
0 .TH "unbound" "8" "Oct 7, 2009" "NLnet Labs" "unbound 1.3.4"
11 .\"
22 .\" unbound.8 -- unbound manual
33 .\"
99 .SH "NAME"
1010 .LP
1111 .B unbound
12 \- Unbound DNS validating resolver 1.3.3.
12 \- Unbound DNS validating resolver 1.3.4.
1313 .SH "SYNOPSIS"
1414 .LP
1515 .B unbound
+1
-1
doc/unbound.conf.5.in less more
0 .TH "unbound.conf" "5" "Aug 4, 2009" "NLnet Labs" "unbound 1.3.3"
0 .TH "unbound.conf" "5" "Oct 7, 2009" "NLnet Labs" "unbound 1.3.4"
11 .\"
22 .\" unbound.conf.5 -- unbound.conf manual
33 .\"
+10
-1
util/iana_ports.inc less more
11521152 1488,
11531153 1489,
11541154 1490,
1155 1491,
11561155 1492,
11571156 1493,
11581157 1494,
40134012 5011,
40144013 5012,
40154014 5013,
4015 5014,
40164016 5020,
40174017 5021,
40184018 5022,
40234023 5027,
40244024 5029,
40254025 5030,
4026 5031,
40264027 5042,
40274028 5043,
40284029 5044,
40334034 5055,
40344035 5056,
40354036 5057,
4037 5058,
40364038 5059,
40374039 5060,
40384040 5061,
40714073 5152,
40724074 5154,
40734075 5155,
4076 5164,
40744077 5165,
40754078 5166,
40764079 5167,
46064609 7967,
46074610 7979,
46084611 7980,
4612 7998,
46094613 7999,
46104614 8000,
46114615 8001,
48414845 9618,
48424846 9628,
48434847 9629,
4848 9632,
48444849 9667,
48454850 9668,
4851 9694,
4852 9695,
48464853 9700,
48474854 9747,
48484855 9750,
50935100 23003,
50945101 23004,
50955102 23005,
5103 23272,
50965104 23333,
50975105 23400,
50985106 23401,
51505158 29167,
51515159 30001,
51525160 30002,
5161 30260,
51535162 30999,
51545163 31416,
51555164 31457,
+22
-0
validator/val_nsec3.c less more
12361236 return sec_status_secure;
12371237 }
12381238
1239 /** test if list is all secure */
1240 static int
1241 list_is_secure(struct module_env* env, struct val_env* ve,
1242 struct ub_packed_rrset_key** list, size_t num,
1243 struct key_entry_key* kkey)
1244 {
1245 size_t i;
1246 enum sec_status sec;
1247 for(i=0; i<num; i++) {
1248 if(list[i]->rk.type != htons(LDNS_RR_TYPE_NSEC3))
1249 continue;
1250 sec = val_verify_rrset_entry(env, ve, list[i], kkey);
1251 if(sec != sec_status_secure) {
1252 verbose(VERB_ALGO, "NSEC3 did not verify");
1253 return 0;
1254 }
1255 }
1256 return 1;
1257 }
1258
12391259 enum sec_status
12401260 nsec3_prove_nods(struct module_env* env, struct val_env* ve,
12411261 struct ub_packed_rrset_key** list, size_t num,
12501270
12511271 if(!list || num == 0 || !kkey || !key_entry_isgood(kkey))
12521272 return sec_status_bogus; /* no valid NSEC3s, bogus */
1273 if(!list_is_secure(env, ve, list, num, kkey))
1274 return sec_status_bogus; /* not all NSEC3 records secure */
12531275 rbtree_init(&ct, &nsec3_hash_cmp); /* init names-to-hash cache */
12541276 filter_init(&flt, list, num, qinfo); /* init RR iterator */
12551277 if(!flt.zone)