next closer is already done in ldns_dnssec_nsec3_closest_encloser

svn:NO TEST

diff --git a/dnssec_verify.c b/dnssec_verify.c
index 4e35afe14cf9539a0d16d908e97e62470de7eae8..18af5d2f0527bb28aab7e20ff6742b5224366a05 100644 (file)
--- a/dnssec_verify.c
+++ b/dnssec_verify.c
@@ -1644,8 +1644,6 @@ ldns_dnssec_verify_denial_nsec3_match(ldns_rr *rr,
                } else {
                        result = LDNS_STATUS_DNSSEC_NSEC_RR_NOT_COVERED;
                }
-
-               /* still need to check covering next closer */
        } else if (packet_nodata && packet_qtype != LDNS_RR_TYPE_DS) {
                /* section 8.5 */
                hashed_name = ldns_nsec3_hash_name_frm_nsec3(
@@ -1712,8 +1710,6 @@ ldns_dnssec_verify_denial_nsec3_match(ldns_rr *rr,
                }
                ldns_rdf_deep_free(closest_encloser);
                ldns_rdf_deep_free(wildcard);
-
-               /* still need to check covering next closer */
        } else if (packet_nodata && packet_qtype == LDNS_RR_TYPE_DS) {
                /* section 8.6 */
                /* note: up to XXX this is the same as for 8.5 */