More verbose on signer name error.

git-svn-id: file:///svn/unbound/trunk@1322 be551aaa-1e26-0410-a405-d3ace91eadb9

diff --git a/doc/Changelog b/doc/Changelog
index 1a9ad9c01e52860e33ece1b95e8eff2f7e3f1607..2f454eb415d1ce9ca1e753f98ed7bb4e5ef0a0e3 100644 (file)
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -1,3 +1,6 @@
+23 October 2008: Wouter
+       - a little more debug info for failure on signer names. prints names.
+
 22 October 2008: Wouter
        - CFLAGS are picked up by configure from the environment.
        - iana portlist updated.

diff --git a/validator/val_sigcrypt.c b/validator/val_sigcrypt.c
index d4d2e52b5b05f1adaa1f2a6cd3f0d073a5976b7f..e033fdc0d55cc0185818f5cafe3239a67e078e08 100644 (file)
--- a/validator/val_sigcrypt.c
+++ b/validator/val_sigcrypt.c
@@ -1492,6 +1492,10 @@ dnskey_verify_rrset_sig(struct regional* region, ldns_buffer* buf,
        /* verify key dname == sig signer name */
        if(query_dname_compare(signer, dnskey->rk.dname) != 0) {
                verbose(VERB_QUERY, "verify: wrong key for rrsig");
+               log_nametypeclass(VERB_QUERY, "RRSIG signername is", 
+                       signer, 0, 0);
+               log_nametypeclass(VERB_QUERY, "the key name is", 
+                       dnskey->rk.dname, 0, 0);
                return sec_status_bogus;
        }