Skip non-signing keys

0d829ebc · Giovanni Bajo · Simon Kelley · 4137b84e · 0d829ebc
Commit 0d829ebc authored Apr 25, 2012 by Giovanni Bajo Committed by Simon Kelley Aug 20, 2013
Show whitespace changes
Inline Side-by-side

Showing with 3 additions and 0 deletions

src/dnssec.c src/dnssec.c +3 -0

No files found.
--- a/src/dnssec.c
+++ b/src/dnssec.c
@@ -299,6 +299,9 @@ int dnssec_parsekey(struct dns_header *header, size_t pktlen, char *owner, unsig
  if (proto != 3)
    return 0;
+  /* Skip non-signing keys (as specified in RFC4034 */
+  if (!(flags & 0x100))
+    return 0;
  switch (alg)
    {