From 3251ac8f2d3de29af2a1584f427246ea702fdbd9 Mon Sep 17 00:00:00 2001 From: Kevin Darbyshire-Bryant Date: Sat, 9 Mar 2019 08:40:57 +0000 Subject: dnsmasq: bump to v2.81rc1 1st release candidate for v2.81 after 18 months. Refresh patches & remove all upstreamed leaving: 110-ipset-remove-old-kernel-support.patch Signed-off-by: Kevin Darbyshire-Bryant --- ...d-DNSKEY-queries-being-forwarded-the-same.patch | 32 ---------------------- 1 file changed, 32 deletions(-) delete mode 100644 package/network/services/dnsmasq/patches/0013-Treat-DS-and-DNSKEY-queries-being-forwarded-the-same.patch (limited to 'package/network/services/dnsmasq/patches/0013-Treat-DS-and-DNSKEY-queries-being-forwarded-the-same.patch') diff --git a/package/network/services/dnsmasq/patches/0013-Treat-DS-and-DNSKEY-queries-being-forwarded-the-same.patch b/package/network/services/dnsmasq/patches/0013-Treat-DS-and-DNSKEY-queries-being-forwarded-the-same.patch deleted file mode 100644 index 7053d032b8..0000000000 --- a/package/network/services/dnsmasq/patches/0013-Treat-DS-and-DNSKEY-queries-being-forwarded-the-same.patch +++ /dev/null @@ -1,32 +0,0 @@ -From 07e25da5bf26d46aad4f1d2eb19b260789182004 Mon Sep 17 00:00:00 2001 -From: Simon Kelley -Date: Sun, 16 Dec 2018 18:21:58 +0000 -Subject: [PATCH 13/32] Treat DS and DNSKEY queries being forwarded the same as - those locally originated. - -The queries will not be forwarded to a server for a domain, unless -there's a trust anchor provided for that domain. This allows, especially, -suitable proof of non-existance for DS records to come from -the parent domain for domains which are not signed. - -Signed-off-by: Kevin Darbyshire-Bryant ---- - src/rfc1035.c | 7 +++++++ - 1 file changed, 7 insertions(+) - ---- a/src/rfc1035.c -+++ b/src/rfc1035.c -@@ -916,6 +916,13 @@ unsigned int extract_request(struct dns_ - if (qtype == T_ANY) - return F_IPV4 | F_IPV6; - } -+ -+ /* F_DNSSECOK as agument to search_servers() inhibits forwarding -+ to servers for domains without a trust anchor. This make the -+ behaviour for DS and DNSKEY queries we forward the same -+ as for DS and DNSKEY queries we originate. */ -+ if (qtype == T_DS || qtype == T_DNSKEY) -+ return F_DNSSECOK; - - return F_QUERY; - } -- cgit v1.2.3