even if we do opt-out, the NSEC3PARAM flags field should be 0

git-svn-id: svn://svn.powerdns.com/pdns/trunk/pdns@1940 d19b8d6e-7fed-0310-83ef-9ca221ded41b

diff --git a/pdns/packethandler.cc b/pdns/packethandler.cc
index 02b703abf891407b8194ff1fe26c56c3f5f423ca..1bbfa48770d2639f885a979d4971954ad700d6a1 100644 (file)
--- a/pdns/packethandler.cc
+++ b/pdns/packethandler.cc
@@ -233,6 +233,7 @@ int PacketHandler::doNSEC3PARAMRequest(DNSPacket *p, DNSPacket *r, const SOAData
     rr.qtype=QType::NSEC3PARAM;
     rr.ttl=sd.default_ttl;
     rr.qname=p->qdomain;
+    ns3prc.d_flags = 0; // for unknown reasons, the NSEC3PARAM 'flag' always needs to be zero.
     rr.content=ns3prc.getZoneRepresentation(); 
     rr.auth = true;
     r->addRecord(rr);