{ LDNS_STATUS_CRYPTO_NO_DNSKEY, "No DNSSEC public key(s)" },
{ LDNS_STATUS_CRYPTO_NO_TRUSTED_DNSKEY, "No signatures found for trusted DNSSEC public key(s)" },
{ LDNS_STATUS_CRYPTO_NO_MATCHING_KEYTAG_DNSKEY, "No keys with the keytag from the RRSIG found" },
- { LDNS_STATUS_CRYPTO_VALIDATED, "validated" },
+ { LDNS_STATUS_CRYPTO_VALIDATED, "Valid DNSSEC signature" },
{ LDNS_STATUS_CRYPTO_BOGUS, "Bogus DNSSEC signature" },
{ LDNS_STATUS_CRYPTO_SIG_EXPIRED, "DNSSEC signature has expired" },
{ LDNS_STATUS_CRYPTO_SIG_NOT_INCEPTED, "DNSSEC signature not incepted yet" },
return status;
}
- /* ttl should not be printed if it is a question,
- * but we don't know that anymore... (do we?)*/
- /* TODO: better way */
+ /* TTL should NOT be printed if it is a question,
+ * but we don't know that anymore... (do we?)
+ * if the rd count is 0 we deal with a question sec. RR
+ */
if (ldns_rr_rd_count(rr) > 0) {
ldns_buffer_printf(output, "\t%d", ldns_rr_ttl(rr));
}