[Opendnssec-develop] No RRSIG in .signed.sorted

Rickard Bellgrim rickard.bellgrim at iis.se
Thu Mar 25 16:20:00 UTC 2010


> Yes. The sorter drops RRSIGs and NSEC(3)s. Perhaps we should add a flag
> to the quicksorter that it should only drop these records when the flag
> isn't set?

Hmm, but this is the same behavior as in v1.0. That there is no RRSIG in .signed.sorted

> Beware of the zone reader, it expects RRSIGs always to be *after* the
> corresponding RRset

The RRSIG is not always after the corresponding RRset.

If the quicksorter would not drop the signatures, then any RR with a higher RR type number would get sorted after the RRSIG.

// Rickard


More information about the Opendnssec-develop mailing list