|
|
|
@ -943,10 +943,8 @@ int dnssec_validate_by_ds(time_t now, struct dns_header *header, size_t plen, ch
|
|
|
|
|
|
|
|
|
|
if (!cache_insert(name, &a, class, now, ttl, F_FORWARD | F_DNSKEY | F_DNSSECOK))
|
|
|
|
|
{
|
|
|
|
|
/* cache_insert fails when the cache is too small, so error with STAT_ABANDONED which
|
|
|
|
|
will log this as a resource exhaustion problem, which it is. */
|
|
|
|
|
blockdata_free(key);
|
|
|
|
|
return STAT_ABANDONED;
|
|
|
|
|
return STAT_BOGUS;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
a.log.keytag = keytag;
|
|
|
|
@ -1093,10 +1091,8 @@ int dnssec_validate_ds(time_t now, struct dns_header *header, size_t plen, char
|
|
|
|
|
|
|
|
|
|
if (!cache_insert(name, &a, class, now, ttl, F_FORWARD | F_DS | F_DNSSECOK))
|
|
|
|
|
{
|
|
|
|
|
/* cache_insert fails when the cache is too small, so error with STAT_ABANDONED which
|
|
|
|
|
will log this as a resource exhaustion problem, which it is. */
|
|
|
|
|
blockdata_free(key);
|
|
|
|
|
return STAT_ABANDONED;
|
|
|
|
|
return STAT_BOGUS;
|
|
|
|
|
}
|
|
|
|
|
else
|
|
|
|
|
{
|
|
|
|
@ -1136,7 +1132,7 @@ int dnssec_validate_ds(time_t now, struct dns_header *header, size_t plen, char
|
|
|
|
|
|
|
|
|
|
/* Use TTL from NSEC for negative cache entries */
|
|
|
|
|
if (!cache_insert(name, NULL, class, now, neg_ttl, flags))
|
|
|
|
|
return STAT_ABANDONED;
|
|
|
|
|
return STAT_BOGUS;
|
|
|
|
|
|
|
|
|
|
cache_end_insert();
|
|
|
|
|
|
|
|
|
|