From: Remi Gacogne <remi.gacogne@powerdns.com>
Date: Mon, 29 Jun 2026 15:45:39 +0000 (+0200)
Subject: rec: Add more debug information to `getDenial()`
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=2a3e1e8b73b887de4aef928dcfd9dfb7156bd8da;p=thirdparty%2Fpdns.git

rec: Add more debug information to `getDenial()`

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>
---

diff --git a/pdns/validate.cc b/pdns/validate.cc
index 29d7abf43c..f52aca8a36 100644
--- a/pdns/validate.cc
+++ b/pdns/validate.cc
@@ -748,7 +748,7 @@ dState getDenial(const cspmap_t& validrrsets, const DNSName& qname, const uint16
         numberOfLabelsOfParentZone = std::min(numberOfLabelsOfParentZone, static_cast<uint8_t>(signer.countLabels()));
 
         if (!qname.isPartOf(signer)) {
-          VLOG(log, qname << ": is not part of the signer (" << signer << ")!" << endl);
+          VLOG(log, qname << ": Qname " << qname << " is not part of the signer " << signer << ", ignoring" << endl);
           continue;
         }
 
@@ -860,6 +860,7 @@ dState getDenial(const cspmap_t& validrrsets, const DNSName& qname, const uint16
             }
 
             if (!closestEncloser.isPartOf(signer)) {
+              VLOG(log, qname << ": Closest encloser " << closestEncloser << " is not part of the signer " << signer << ", ignoring" << endl);
               continue;
             }
 
@@ -970,6 +971,7 @@ dState getDenial(const cspmap_t& validrrsets, const DNSName& qname, const uint16
             }
 
             if (!nextCloser.isPartOf(signer)) {
+              VLOG(log, qname << ": Next closer " << nextCloser << " is not part of the signer " << signer << ", ignoring" << endl);
               continue;
             }