Add new EDNS0 extended error codes from IANA registry

ibauersachs · ibauersachs · commit 6b94314268e7 · 2023-11-05T19:52:17.000+01:00
diff --git a/src/main/java/org/xbill/DNS/ExtendedErrorCodeOption.java b/src/main/java/org/xbill/DNS/ExtendedErrorCodeOption.java
@@ -150,6 +150,50 @@ public class ExtendedErrorCodeOption extends EDNSOption {
    */
   public static final int INVALID_DATA = 24;
 
+  /**
+   * The signature expired before it started to become valid.
+   *
+   * @since 3.6
+   * @see <a href="https://github.com/NLnetLabs/unbound/pull/604#discussion_r802678343">Unbound
+   *     PR#604</a>
+   */
+  public static final int SIGNATURE_EXPIRED_BEFORE_VALID = 25;
+
+  /**
+   * DNS over QUIC session resumption error.
+   *
+   * @since 3.6
+   * @see <a href="https://www.rfc-editor.org/rfc/rfc9250.html#section-4.5-3">RFC9250, 4.5</a>
+   */
+  public static final int TOO_EARLY = 26;
+
+  /**
+   * The NSEC3 iterations value is not supported.
+   *
+   * @since 3.6
+   * @see <a href="https://www.rfc-editor.org/rfc/rfc9276.html#section-3.2">RFC9276, 3.2</a>
+   */
+  public static final int UNSUPPORTED_NSEC3_ITERATIONS_VALUE = 27;
+
+  /**
+   * Unable to conform to policy.
+   *
+   * @since 3.6
+   * @see <a
+   *     href="https://datatracker.ietf.org/doc/draft-homburg-dnsop-codcp/01/">draft-homburg-dnsop-codcp,
+   *     12</a>
+   */
+  public static final int UNABLE_TO_CONFORM_TO_POLICY = 28;
+
+  /**
+   * Result synthesized from aggressive NSEC cache.
+   *
+   * @since 3.6
+   * @see <a href="https://github.com/PowerDNS/pdns/pull/12334">PowerDNS PR#12334</a>
+   * @see <a href="https://datatracker.ietf.org/doc/html/rfc8198">RFC8198</a>
+   */
+  public static final int SYNTHESIZED = 29;
+
   @Getter private int errorCode;
   @Getter private String text;
 
@@ -184,6 +228,11 @@ public class ExtendedErrorCodeOption extends EDNSOption {
     codes.add(NO_REACHABLE_AUTHORITY, "NO_REACHABLE_AUTHORITY");
     codes.add(NETWORK_ERROR, "NETWORK_ERROR");
     codes.add(INVALID_DATA, "INVALID_DATA");
+    codes.add(SIGNATURE_EXPIRED_BEFORE_VALID, "SIGNATURE_EXPIRED_BEFORE_VALID");
+    codes.add(TOO_EARLY, "TOO_EARLY");
+    codes.add(UNSUPPORTED_NSEC3_ITERATIONS_VALUE, "UNSUPPORTED_NSEC3_ITERATIONS_VALUE");
+    codes.add(UNABLE_TO_CONFORM_TO_POLICY, "UNABLE_TO_CONFORM_TO_POLICY");
+    codes.add(SYNTHESIZED, "SYNTHESIZED");
   }
 
   /**
