diff options
| author | Dag-Erling Smørgrav <des@FreeBSD.org> | 2018-05-12 11:56:38 +0000 |
|---|---|---|
| committer | Dag-Erling Smørgrav <des@FreeBSD.org> | 2018-05-12 11:56:38 +0000 |
| commit | 197f1a0fe3e81cde0cd25a3a1f37ebedf9a99488 (patch) | |
| tree | 9a121ad4cef31a32608c065400c31246d549c0dc /iterator/iter_utils.c | |
| parent | b5c63b395d5df7ff6ee4d41a7dfecd938d894037 (diff) | |
Diffstat (limited to 'iterator/iter_utils.c')
| -rw-r--r-- | iterator/iter_utils.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/iterator/iter_utils.c b/iterator/iter_utils.c index 0b1b456113f7a..70cab40faa801 100644 --- a/iterator/iter_utils.c +++ b/iterator/iter_utils.c @@ -656,6 +656,11 @@ iter_indicates_dnssec(struct module_env* env, struct delegpt* dp, /* a trust anchor exists with this name, RRSIGs expected */ if((a=anchor_find(env->anchors, dp->name, dp->namelabs, dp->namelen, dclass))) { + if(a->numDS == 0 && a->numDNSKEY == 0) { + /* insecure trust point */ + lock_basic_unlock(&a->lock); + return 0; + } lock_basic_unlock(&a->lock); return 1; } |