upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-02-26 03:11:56 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

reviewed: marka

Browse source 
developer: bwelling
don't attempt to generate a wildcard proof unless the zone is secure.
This commit is contained in:
Mark Andrews 2002-08-19 21:32:56 +00:00
parent ab5d8edc1b
commit a2239239cf
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
bin/named/query.c
View file

@ -15,7 +15,7 @@
* WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
*/
/* $Id: query.c,v 1.232 2002/08/07 02:03:49 marka Exp $ */
/* $Id: query.c,v 1.233 2002/08/19 21:32:56 marka Exp $ */
#include <config.h>
@ -3320,7 +3320,7 @@ query_find(ns_client_t *client, dns_fetchevent_t *event, dns_rdatatype_t qtype)
* Add NXT records to the authority section if they're needed for
* DNSSEC wildcard proofs.
*/
if (need_wildcardproof)
if (need_wildcardproof && dns_db_issecure(db))
query_addwildcardproof(client, db,
dns_fixedname_name(&wildcardname),
ISC_TRUE);