From: Remi Gacogne <remi.gacogne@powerdns.com>
Date: Tue, 23 Aug 2016 13:51:11 +0000 (+0200)
Subject: auth: Don't look up the packet cache for TSIG-enabled queries
X-Git-Tag: auth-3.4.11~9^2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=refs%2Fpull%2F4400%2Fhead;p=thirdparty%2Fpdns.git

auth: Don't look up the packet cache for TSIG-enabled queries

We are rightfully careful about not caching responses for TSIG-enabled
queries, but we would nevertheless happily serve cached entries for those.
---

diff --git a/pdns/dnspacket.cc b/pdns/dnspacket.cc
index 6da613967a..a070dc1c11 100644
--- a/pdns/dnspacket.cc
+++ b/pdns/dnspacket.cc
@@ -232,7 +232,7 @@ void DNSPacket::setCompress(bool compress)
 
 bool DNSPacket::couldBeCached()
 {
-  return d_ednsping.empty() && !d_wantsnsid && qclass==QClass::IN;
+  return d_ednsping.empty() && !d_wantsnsid && qclass==QClass::IN && !d_havetsig;
 }
 
 unsigned int DNSPacket::getMinTTL()