diff options
| author |   Lennart Poettering <lennart@poettering.net> | 2016-01-03 17:56:50 +0100 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2016-01-03 17:56:50 +0100 |
| commit | 28b8191e2f391f043d380d47eb79ed9ff66f14bd (patch) | |
| tree | e06b5d74a6f15fe487ff96439eeb93b91fd561f2 /src/resolve/resolved-dns-rr.h | |
| parent | resolved: print a log message when we ignore an NSEC3 RR with an excessive am... (diff) | |
| download | systemd-28b8191e2f391f043d380d47eb79ed9ff66f14bd.tar.gz systemd-28b8191e2f391f043d380d47eb79ed9ff66f14bd.tar.bz2 systemd-28b8191e2f391f043d380d47eb79ed9ff66f14bd.zip | |
resolved: never authenticate RRsets with revoked keys
Diffstat (limited to 'src/resolve/resolved-dns-rr.h')
| -rw-r--r-- | src/resolve/resolved-dns-rr.h | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/resolve/resolved-dns-rr.h b/src/resolve/resolved-dns-rr.h index 90c362916..72bded7d4 100644 --- a/src/resolve/resolved-dns-rr.h +++ b/src/resolve/resolved-dns-rr.h @@ -34,8 +34,9 @@ typedef struct DnsResourceRecord DnsResourceRecord; typedef struct DnsTxtItem DnsTxtItem; /* DNSKEY RR flags */ -#define DNSKEY_FLAG_ZONE_KEY (UINT16_C(1) << 8) #define DNSKEY_FLAG_SEP (UINT16_C(1) << 0) +#define DNSKEY_FLAG_REVOKE (UINT16_C(1) << 7) +#define DNSKEY_FLAG_ZONE_KEY (UINT16_C(1) << 8) /* mDNS RR flags */ #define MDNS_RR_CACHE_FLUSH (UINT16_C(1) << 15) |