Pi-Hole/dnsmasq
1
0
Fork 0
mirror of https://github.com/pi-hole/dnsmasq.git synced 2025-12-19 10:18:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Get AA flag right in DNSSEC answers from cache.

Browse Source
This commit is contained in:
Simon Kelley
2014-01-25 18:43:59 +00:00
parent b5dbfd142a
commit c92f0083a2
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
src/rfc1035.c
View File

@@ -1559,9 +1559,13 @@ size_t answer_request(struct dns_header *header, char *limit, size_t qlen,
if (crecp) if (crecp)
{ {
if (qtype == T_RRSIG) if (qtype == T_RRSIG)
ans = gotone = 1; {
ans = gotone = 1;
auth = 0;
}
else if (qtype == T_DS) else if (qtype == T_DS)
{ {
auth = 0;
crecp = NULL; crecp = NULL;
while ((crecp = cache_find_by_name(crecp, name, now, F_DS))) while ((crecp = cache_find_by_name(crecp, name, now, F_DS)))
if (crecp->uid == qclass) if (crecp->uid == qclass)
@@ -1587,6 +1591,8 @@ size_t answer_request(struct dns_header *header, char *limit, size_t qlen,
while ((crecp = cache_find_by_name(crecp, name, now, F_DNSKEY))) while ((crecp = cache_find_by_name(crecp, name, now, F_DNSKEY)))
if (crecp->uid == qclass) if (crecp->uid == qclass)
{ {
if (!(crecp->flags & F_CONFIG))
auth = 0;
ans = gotone = 1; ans = gotone = 1;
if (!dryrun && (keydata = blockdata_retrieve(crecp->addr.key.keydata, crecp->addr.key.keylen, NULL))) if (!dryrun && (keydata = blockdata_retrieve(crecp->addr.key.keydata, crecp->addr.key.keylen, NULL)))
{ {