[Opendnssec-develop] No RRSIG in .signed.sorted
rickard.bellgrim at iis.se
Thu Mar 25 16:20:00 UTC 2010
> Yes. The sorter drops RRSIGs and NSEC(3)s. Perhaps we should add a flag
> to the quicksorter that it should only drop these records when the flag
> isn't set?
Hmm, but this is the same behavior as in v1.0. That there is no RRSIG in .signed.sorted
> Beware of the zone reader, it expects RRSIGs always to be *after* the
> corresponding RRset
The RRSIG is not always after the corresponding RRset.
If the quicksorter would not drop the signatures, then any RR with a higher RR type number would get sorted after the RRSIG.
More information about the Opendnssec-develop