From: Marek Vavruša <mvavrusa@cloudflare.com>
Date: Wed, 21 Mar 2018 22:48:57 +0000 (-0700)
Subject: bindings: always set AD=1 in internal queries just like real clients
X-Git-Tag: v2.4.0~30^2~4
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=0bbd558073fe9fb980f4196b19b0db1ae8bd397e;p=thirdparty%2Fknot-resolver.git

bindings: always set AD=1 in internal queries just like real clients

The AD indicates validation request (but not request for DNSSEC records).
If the response can't be validated, resolver flips the AD to 0.
---

diff --git a/daemon/bindings.c b/daemon/bindings.c
index f3c6e1cb7..17df57c9f 100644
--- a/daemon/bindings.c
+++ b/daemon/bindings.c
@@ -1540,6 +1540,7 @@ static int wrk_resolve(lua_State *L)
 	}
 	knot_pkt_put_question(pkt, dname, rrclass, rrtype);
 	knot_wire_set_rd(pkt->wire);
+	knot_wire_set_ad(pkt->wire);
 
 	/* Add OPT RR */
 	pkt->opt_rr = knot_rrset_copy(worker->engine->resolver.opt_rr, NULL);