bindings: always set AD=1 in internal queries just like real clients

The AD indicates validation request (but not request for DNSSEC records).
If the response can't be validated, resolver flips the AD to 0.

diff --git a/daemon/bindings.c b/daemon/bindings.c
index f3c6e1cb7521e5bff74ad006c824ea2e23fda2f5..17df57c9fe4c6f9effb4fe4317f42c48efde9cf7 100644 (file)
--- a/daemon/bindings.c
+++ b/daemon/bindings.c
@@ -1540,6 +1540,7 @@ static int wrk_resolve(lua_State *L)
        }
        knot_pkt_put_question(pkt, dname, rrclass, rrtype);
        knot_wire_set_rd(pkt->wire);
+       knot_wire_set_ad(pkt->wire);
 
        /* Add OPT RR */
        pkt->opt_rr = knot_rrset_copy(worker->engine->resolver.opt_rr, NULL);