Viewing posts from: bind

BIND DNSSEC incorrect checks for malformed signatures

By Glen Lumanau|Unix|Be the first to comment!

The DSA_do_verify() function from OpenSSL is used to determine if a
DSA digital signature is valid.  When DNSSEC is used within BIND it
uses DSA_do_verify() to verify DSA signatures, but checks the function
return value incorrectly.

How to upgrade it?

(more…)