From: Kees Monshouwer <mind04@monshouwer.org>
Date: Fri, 15 Mar 2019 11:14:57 +0000 (+0100)
Subject: auth: small optimization in the rectify code for optout narrow zones
X-Git-Tag: dnsdist-1.4.0-alpha1~55^2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=refs%2Fpull%2F7580%2Fhead;p=thirdparty%2Fpdns.git

auth: small optimization in the rectify code for optout narrow zones
---

diff --git a/pdns/dbdnsseckeeper.cc b/pdns/dbdnsseckeeper.cc
index 1eef0fc882..e4aa0b5282 100644
--- a/pdns/dbdnsseckeeper.cc
+++ b/pdns/dbdnsseckeeper.cc
@@ -692,7 +692,7 @@ bool DNSSECKeeper::rectifyZone(const DNSName& zone, string& error, string& info,
   }
 
   set<DNSName> nsec3set;
-  if (haveNSEC3) {
+  if (haveNSEC3 && (!narrow || !isOptOut)) {
     for (auto &loopRR: rrs) {
       bool skip=false;
       DNSName shorter = loopRR.qname;