Address review comments for #759:

- Clear error text when an expected signature is missing.

diff --git a/validator/val_sigcrypt.c b/validator/val_sigcrypt.c
index 0ecd05f1391104a481523120b971807eb5fb9afb..bd4891e3b404e368babd3c558e0a536789735565 100644 (file)
--- a/validator/val_sigcrypt.c
+++ b/validator/val_sigcrypt.c
@@ -718,7 +718,7 @@ dnskey_verify_rrset(struct module_env* env, struct val_env* ve,
        }
        verbose(VERB_ALGO, "rrset failed to verify: all signatures are bogus");
        if(!numchecked) {
-               *reason = "signatures bogus";
+               *reason = "signature for expected key and algorithm missing";
                if(reason_bogus)
                        *reason_bogus = LDNS_EDE_DNSSEC_BOGUS;
        } else if(numchecked == numindeterminate) {