Commit a36b705a authored by Grigorii Demidov's avatar Grigorii Demidov

dnssec/nsec: fix wildcard_match_check() to allow processing of *. wildcard

parent 75905f63
Pipeline #3230 passed with stages
in 92 minutes and 48 seconds
......@@ -299,7 +299,7 @@ static int wildcard_match_check(const knot_pkt_t *pkt, const knot_pktsection_t *
int wcard_labels = knot_dname_labels(rrset->owner, NULL);
int common_labels = knot_dname_matched_labels(rrset->owner, sname);
int rrsig_labels = coverign_rrsig_labels(rrset, sec);
if (wcard_labels <= 1 ||
if (wcard_labels < 1 ||
common_labels != wcard_labels - 1 ||
common_labels != rrsig_labels) {
continue;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment