lib/resolve: forwarding; special processing for explicit DS queries

diff --git a/lib/resolve.c b/lib/resolve.c
index 85aeb1db2568fcdacb46140e17c962bbf3c2d253..7e3d817191ba985a4378dbed80060f6fa6c90691 100644 (file)
--- a/lib/resolve.c
+++ b/lib/resolve.c
@@ -1030,13 +1030,13 @@ static int forward_trust_chain_check(struct kr_request *request, struct kr_query
                        nods = true;
                } else if (resume && !ds_req) {
                        nods = false;
-               } else if (!minimized) {
+               } else if (!minimized && qry->stype != KNOT_RRTYPE_DNSKEY) {
                        nods = true;
                } else {
                        nods = ds_req;
                }
                name_offset += 1;
-       } while (ds_req && ns_req /* && !resume */ && minimized);
+       } while (ds_req && ns_req && minimized);
 
        /* Disable DNSSEC if it enters NTA. */
        if (kr_ta_get(negative_anchors, wanted_name)){