From: Pieter Lexis <pieter.lexis@powerdns.com>
Date: Fri, 22 Sep 2017 08:17:12 +0000 (+0200)
Subject: Auth: Publish inactive KSK/CSK as CDNSKEY/CDS
X-Git-Tag: auth-4.0.5~1^2~12^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3b01ca13b82716da3cc3ceafad5431c45d38a0c1;p=thirdparty%2Fpdns.git

Auth: Publish inactive KSK/CSK as CDNSKEY/CDS

Closes #5721

(cherry picked from commit c74f51e221b8ef9194604afa1aeabc46a5dd7018)
---

diff --git a/pdns/dbdnsseckeeper.cc b/pdns/dbdnsseckeeper.cc
index b8662b8e97..29cbd690b6 100644
--- a/pdns/dbdnsseckeeper.cc
+++ b/pdns/dbdnsseckeeper.cc
@@ -394,7 +394,7 @@ DNSSECKeeper::keyset_t DNSSECKeeper::getEntryPoints(const DNSName& zname)
   DNSSECKeeper::keyset_t keys = getKeys(zname);
 
   for(auto const &keymeta : keys)
-    if(keymeta.second.active && (keymeta.second.keyType == KSK || keymeta.second.keyType == CSK))
+    if(keymeta.second.keyType == KSK || keymeta.second.keyType == CSK)
       ret.push_back(keymeta);
   return ret;
 }