bugfix #471. Match code with documentation with ldns_resolver_push_dnssec_anchor.

Thanks Ondřej.

diff --git a/Changelog b/Changelog
index ff454158ed7bd0801fed05acf9c7cfde69c16594..778cb470b0c44ae926ae1539743212970da5a9b2 100644 (file)
--- a/Changelog
+++ b/Changelog
@@ -1,4 +1,5 @@
 1.6.14
+       * bugfix #471: Let ldns_resolver_push_dnssec_anchor accept DS RR's too.
        * Various bugfixes from code reviews from CZ.NIC and Paul Wouters
        * ldns-notify TSIG option argument checking
        * Let ldns_resolver_nameservers_randomize keep nameservers and rtt's

diff --git a/resolver.c b/resolver.c
index fd08d8e9a90ad5c790697f6ffbe5ed6875369da6..086814530eb4260b0b57d85c691f5d927283a103 100644 (file)
--- a/resolver.c
+++ b/resolver.c
@@ -392,7 +392,9 @@ ldns_resolver_push_dnssec_anchor(ldns_resolver *r, ldns_rr *rr)
 {
   ldns_rr_list * trust_anchors;
 
-  if ((!rr) || (ldns_rr_get_type(rr) != LDNS_RR_TYPE_DNSKEY)) {
+  if ((!rr) || (ldns_rr_get_type(rr) != LDNS_RR_TYPE_DNSKEY &&
+                ldns_rr_get_type(rr) != LDNS_RR_TYPE_DS)) {
+
     return LDNS_STATUS_ERR;
   }