From a2239239cf22c68445bbc85ed5ab663f8bcedc1b Mon Sep 17 00:00:00 2001 From: Mark Andrews Date: Mon, 19 Aug 2002 21:32:56 +0000 Subject: [PATCH] reviewed: marka developer: bwelling don't attempt to generate a wildcard proof unless the zone is secure. --- bin/named/query.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/bin/named/query.c b/bin/named/query.c index 894f49e1cf..1c7f74a82b 100644 --- a/bin/named/query.c +++ b/bin/named/query.c @@ -15,7 +15,7 @@ * WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */ -/* $Id: query.c,v 1.232 2002/08/07 02:03:49 marka Exp $ */ +/* $Id: query.c,v 1.233 2002/08/19 21:32:56 marka Exp $ */ #include @@ -3320,7 +3320,7 @@ query_find(ns_client_t *client, dns_fetchevent_t *event, dns_rdatatype_t qtype) * Add NXT records to the authority section if they're needed for * DNSSEC wildcard proofs. */ - if (need_wildcardproof) + if (need_wildcardproof && dns_db_issecure(db)) query_addwildcardproof(client, db, dns_fixedname_name(&wildcardname), ISC_TRUE);