From: Kees Monshouwer <mind04@monshouwer.org>
Date: Mon, 30 Apr 2018 19:35:37 +0000 (+0200)
Subject: auth: ignore NSEC3PARAM records in a presigned zone
X-Git-Tag: dnsdist-1.3.1~91^2~2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=115dc31753296087cb21fa1c06b889796ab18556;p=thirdparty%2Fpdns.git

auth: ignore NSEC3PARAM records in a presigned zone
---

diff --git a/modules/bindbackend/bindbackend2.cc b/modules/bindbackend/bindbackend2.cc
index 3a1971fd25..c1935d892b 100644
--- a/modules/bindbackend/bindbackend2.cc
+++ b/modules/bindbackend/bindbackend2.cc
@@ -462,7 +462,7 @@ void Bind2Backend::parseZoneFile(BB2DomainInfo *bbd)
   DNSResourceRecord rr;
   string hashed;
   while(zpt.get(rr)) { 
-    if(rr.qtype.getCode() == QType::NSEC || rr.qtype.getCode() == QType::NSEC3)
+    if(rr.qtype.getCode() == QType::NSEC || rr.qtype.getCode() == QType::NSEC3 || rr.qtype.getCode() == QType::NSEC3PARAM)
       continue; // we synthesise NSECs on demand
 
     insertRecord(*bbd, rr.qname, rr.qtype, rr.content, rr.ttl, "");