Pi-Hole/dnsmasq
1
0
Fork 0
mirror of https://github.com/pi-hole/dnsmasq.git synced 2025-12-19 10:18:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Minor tweak to previous commit.

Browse Source
This commit is contained in:
Simon Kelley
2015-12-20 21:19:20 +00:00
parent 3e86d316c4
commit a86fdf437e
1 changed files with 2 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/dnssec.c
View File

@@ -1889,8 +1889,6 @@ static int zone_status(char *name, int class, char *keyname, time_t now)
} }
else else
{ {
int gotone = 0;
/* If all the DS records have digest and/or sig algos we don't support, /* If all the DS records have digest and/or sig algos we don't support,
then the zone is insecure. Note that if an algo then the zone is insecure. Note that if an algo
appears in the DS, then RRSIGs for that algo MUST appears in the DS, then RRSIGs for that algo MUST
@@ -1904,11 +1902,11 @@ static int zone_status(char *name, int class, char *keyname, time_t now)
if (crecp->uid == (unsigned int)class && if (crecp->uid == (unsigned int)class &&
hash_find(ds_digest_name(crecp->addr.ds.digest)) && hash_find(ds_digest_name(crecp->addr.ds.digest)) &&
verify_func(crecp->addr.ds.algo)) verify_func(crecp->addr.ds.algo))
gotone = 1; break;
} }
while ((crecp = cache_find_by_name(crecp, keyname, now, F_DS))); while ((crecp = cache_find_by_name(crecp, keyname, now, F_DS)));
if (!gotone) if (!crecp)
return STAT_INSECURE; return STAT_INSECURE;
} }