svn commit: r323048 - vendor/unbound/dist/validator

[Dag-Erling Smørgrav]

Author: des
Date: Thu Aug 31 11:43:21 2017
New Revision: 323048
URL: https://svnweb.freebsd.org/changeset/base/323048

Log:
  Merge upstream r4302 to support multiple concurrently valid anchors.

Modified:
  vendor/unbound/dist/validator/autotrust.c

Modified: vendor/unbound/dist/validator/autotrust.c
==============================================================================
--- vendor/unbound/dist/validator/autotrust.c	Thu Aug 31 10:59:39 2017	(r323047)
+++ vendor/unbound/dist/validator/autotrust.c	Thu Aug 31 11:43:21 2017	(r323048)
@@ -1571,6 +1571,11 @@ key_matches_a_ds(struct module_env* env, struct val_en
 			verbose(VERB_ALGO, "DS match attempt failed");
 			continue;
 		}
+		/* match of hash is sufficient for bootstrap of trust point */
+		(void)reason;
+		(void)ve;
+		return 1;
+		/* no need to check RRSIG, DS hash already matched with source
 		if(dnskey_verify_rrset(env, ve, dnskey_rrset, 
 			dnskey_rrset, key_idx, &reason) == sec_status_secure) {
 			return 1;
@@ -1578,6 +1583,7 @@ key_matches_a_ds(struct module_env* env, struct val_en
 			verbose(VERB_ALGO, "DS match failed because the key "
 				"does not verify the keyset: %s", reason);
 		}
+		*/
 	}
 	return 0;
 }