set retry limit to 3 and some secure tracing stuff is added.

diff --git a/drill/securetrace.c b/drill/securetrace.c
index 98c00ab3216b5244516800a516c746af01037b2a..50f88bc31ad0536ad3f25a1992f7c6fde45ad5c4 100644 (file)
--- a/drill/securetrace.c
+++ b/drill/securetrace.c
@@ -293,9 +293,9 @@ do_secure_trace(ldns_resolver *local_res, ldns_rdf *name, ldns_rr_type t,
                        print_dnskey_list_abbr(stdout, key_list, NULL); 
                        print_rrsig_list_abbr(stdout, sig_list, NULL); 
                        print_rrsig_list_abbr(stdout, validated, NULL); 
-#if 0
+#if 1
                        if (sig_list) {
-                       if (ldns_verify(key_list, sig_list, key_list, validated) ==
+                       if (ldns_verify(key_list, sig_list, key_list, NULL) ==
                                        LDNS_STATUS_OK) {
                                print_dnskey_list_abbr(stdout, validated, "[Validated]"); 
                        }

diff --git a/resolver.c b/resolver.c
index a5cfe119e913825ee79d4334ed9bc835e15bfe10..d6fcf688903d63dbd504ba81e99af5bc13069818 100644 (file)
--- a/resolver.c
+++ b/resolver.c
@@ -515,7 +515,7 @@ ldns_resolver_new(void)
        ldns_resolver_set_port(r, LDNS_PORT);
        ldns_resolver_set_domain(r, NULL);
        ldns_resolver_set_defnames(r, false);
-       ldns_resolver_set_retry(r, 4);
+       ldns_resolver_set_retry(r, 3);
        ldns_resolver_set_retrans(r, 2);
        ldns_resolver_set_fail(r, false);
        ldns_resolver_set_edns_udp_size(r, 0);