From b2f8657dd1a72e006c1a728aae2c5ef9c3be24bb Mon Sep 17 00:00:00 2001
From: Kees Monshouwer <mind04@monshouwer.org>
Date: Sun, 17 Jul 2022 21:18:30 +0200
Subject: [PATCH] auth: do not use the metadata cache for AXFR

---
 pdns/slavecommunicator.cc | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pdns/slavecommunicator.cc b/pdns/slavecommunicator.cc
index 7c8d76af8e..6bd209aea5 100644
--- a/pdns/slavecommunicator.cc
+++ b/pdns/slavecommunicator.cc
@@ -718,10 +718,10 @@ void CommunicatorClass::suck(const DNSName &domain, const ComboAddress& remote,
 
 
     vector<DNSResourceRecord> rrs;
-    if(dk.isSecuredZone(domain)) {
+    if (dk.isSecuredZone(domain, false)) {
       hadDnssecZone=true;
-      hadPresigned=dk.isPresigned(domain);
-      if (dk.getNSEC3PARAM(domain, &zs.ns3pr, &zs.isNarrow)) {
+      hadPresigned = dk.isPresigned(domain, false);
+      if (dk.getNSEC3PARAM(domain, &zs.ns3pr, &zs.isNarrow, false)) {
         hadNSEC3 = true;
         hadNs3pr = zs.ns3pr;
         hadNarrow = zs.isNarrow;
@@ -779,7 +779,7 @@ void CommunicatorClass::suck(const DNSName &domain, const ComboAddress& remote,
     }
 
     if(!zs.isPresigned) {
-      DNSSECKeeper::keyset_t keys = dk.getKeys(domain);
+      DNSSECKeeper::keyset_t keys = dk.getKeys(domain, false);
       if(!keys.empty()) {
         zs.isDnssecZone = true;
         zs.isNSEC3 = hadNSEC3;
-- 
2.47.2