layer/validate: disable explicit RRSIG query if RRSIG for DS is missed

diff --git a/lib/layer/validate.c b/lib/layer/validate.c
index c6ecf44089705da541253526c1b108ae044dd825..99d28c8dfb13bcce146ebb501e1610b579ebfaa3 100644 (file)
--- a/lib/layer/validate.c
+++ b/lib/layer/validate.c
@@ -482,6 +482,12 @@ static int rrsig_not_found(kr_layer_t *ctx, const knot_rrset_t *rr)
        struct kr_request *req = ctx->req;
        struct kr_query *qry = req->current_query;
 
+       /* Parent-side record, so don't ask for RRSIG.
+        * We won't receive it anyway. */
+       if (qry->stype == KNOT_RRTYPE_DS) {
+               return KR_STATE_FAIL;
+       }
+
        struct kr_zonecut *cut = &qry->zone_cut;
        const knot_dname_t *cut_name_start = qry->zone_cut.name;
        bool use_cut = true;