From: Miod Vallat <miod.vallat@powerdns.com>
Date: Fri, 19 Dec 2025 10:05:11 +0000 (+0100)
Subject: Slightly smarter DNSSEC cache purge logic.
X-Git-Tag: rec-5.5.0-alpha0~20^2~2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3bcfe21b113abcbe37549b7ff5fbf9612f463e14;p=thirdparty%2Fpdns.git

Slightly smarter DNSSEC cache purge logic.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>
---

diff --git a/pdns/dynhandler.cc b/pdns/dynhandler.cc
index 8403e6f732..fac61e53de 100644
--- a/pdns/dynhandler.cc
+++ b/pdns/dynhandler.cc
@@ -133,20 +133,29 @@ string DLPurgeHandler(const vector<string>& parts, Utility::pid_t /* ppid */)
 {
   ostringstream os;
   int ret=0;
+  bool clearAllDNSSECcaches{false};
 
   if(parts.size()>1) {
     for (vector<string>::const_iterator i=++parts.begin();i<parts.end();++i) {
       g_log<<Logger::Warning<<"Cache clear request for '"<<*i<<"' received from operator"<<endl;
       ret+=purgeAuthCaches(*i);
-      if(!boost::ends_with(*i, "$"))
-        DNSSECKeeper::clearCaches(ZoneName(*i));
-      else
-        DNSSECKeeper::clearAllCaches(); // at least we do what we promise.. and a bit more!
+      if (!boost::ends_with(*i, "$")) {
+        if (!clearAllDNSSECcaches) {
+          DNSSECKeeper::clearCaches(ZoneName(*i));
+        }
+      }
+      else {
+        clearAllDNSSECcaches = true; // at least we do what we promise.. and a bit more!
+      }
     }
   }
   else {
     g_log<<Logger::Warning<<"Cache clear request received from operator"<<endl;
     ret = purgeAuthCaches();
+    clearAllDNSSECcaches = true;
+  }
+
+  if (clearAllDNSSECcaches) {
     DNSSECKeeper::clearAllCaches();
   }