Minor tweak to previous commit.

diff --git a/src/dnssec.c b/src/dnssec.c
index 29848e1bd6ca7bdda4a5a8f6708b9e826882c73e..9fa64b6275931be08058eadaf5213608eb31e328 100644 (file)
--- a/src/dnssec.c
+++ b/src/dnssec.c
@@ -1889,8 +1889,6 @@ static int zone_status(char *name, int class, char *keyname, time_t now)
        }
       else
        {
-         int gotone = 0;
-
          /* If all the DS records have digest and/or sig algos we don't support,
             then the zone is insecure. Note that if an algo
             appears in the DS, then RRSIGs for that algo MUST
@@ -1904,11 +1902,11 @@ static int zone_status(char *name, int class, char *keyname, time_t now)
              if (crecp->uid == (unsigned int)class &&
                  hash_find(ds_digest_name(crecp->addr.ds.digest)) &&
                  verify_func(crecp->addr.ds.algo))
-               gotone = 1;
+               break;
            }
          while ((crecp = cache_find_by_name(crecp, keyname, now, F_DS)));
 
-         if (!gotone)
+         if (!crecp)
            return STAT_INSECURE;
        }