No CD in forwarded queries unless dnssec-debug for TCP too.

This commit is contained in:
Simon Kelley
2014-02-13 16:42:02 +00:00
parent a0ab18f6eb
commit 2ecd9bd5c0

View File

@@ -1431,6 +1431,9 @@ unsigned char *tcp_request(int confd, time_t now,
if (option_bool(OPT_DNSSEC_VALID)) if (option_bool(OPT_DNSSEC_VALID))
{ {
size = add_do_bit(header, size, ((char *) header) + 65536); size = add_do_bit(header, size, ((char *) header) + 65536);
/* For debugging, set Checking Disabled, otherwise, have the upstream check too,
this allows it to select auth servers when one is returning bad data. */
if (option_bool(OPT_DNSSEC_DEBUG))
header->hb4 |= HB4_CD; header->hb4 |= HB4_CD;
} }
#endif #endif