Minor tweak to previous commit.

This commit is contained in:
Simon Kelley
2015-12-20 21:19:20 +00:00
parent 3e86d316c4
commit a86fdf437e

View File

@@ -1889,8 +1889,6 @@ static int zone_status(char *name, int class, char *keyname, time_t now)
}
else
{
int gotone = 0;
/* If all the DS records have digest and/or sig algos we don't support,
then the zone is insecure. Note that if an algo
appears in the DS, then RRSIGs for that algo MUST
@@ -1904,11 +1902,11 @@ static int zone_status(char *name, int class, char *keyname, time_t now)
if (crecp->uid == (unsigned int)class &&
hash_find(ds_digest_name(crecp->addr.ds.digest)) &&
verify_func(crecp->addr.ds.algo))
gotone = 1;
break;
}
while ((crecp = cache_find_by_name(crecp, keyname, now, F_DS)));
if (!gotone)
if (!crecp)
return STAT_INSECURE;
}