From: Kees Monshouwer <mind04@monshouwer.org>
Date: Mon, 9 Sep 2013 19:30:28 +0000 (+0200)
Subject: pdnssec check-all-zones now detect RRSIG records in non-presigned zones
X-Git-Tag: auth-3.3.1~34^2~14
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7eaa83ab0f7fb721f9b936ab2b1ec9a04f11de83;p=thirdparty%2Fpdns.git

pdnssec check-all-zones now detect RRSIG records in non-presigned zones
---

diff --git a/pdns/pdnssec.cc b/pdns/pdnssec.cc
index e280a13648..f2aeaf7daa 100644
--- a/pdns/pdnssec.cc
+++ b/pdns/pdnssec.cc
@@ -354,15 +354,18 @@ int checkZone(DNSSECKeeper &dk, UeberBackend &B, const std::string& zone)
     if (rr.qtype.getCode() == QType::CNAME) {
       if (!cnames.count(rr.qname))
         cnames.insert(rr.qname);
-      else
-      {
+      else {
         cout<<"[Error] Duplicate CNAME found at '"<<rr.qname<<"'. These do not belong in the database."<<endl;
         numerrors++;
         continue;
       }
-    }
-    else {
-      if (rr.qtype.getCode() != QType::RRSIG)
+    } else {
+      if (rr.qtype.getCode() == QType::RRSIG) {
+        if(!dk.isPresigned(zone)) {
+          cout<<"[Error] RRSIG found at '"<<rr.qname<<"' in non-presigned zone. These do not belong in the database."<<endl;
+          numerrors++;
+        }
+      } else
         noncnames.insert(rr.qname);
     }
 
@@ -387,8 +390,8 @@ int checkZone(DNSSECKeeper &dk, UeberBackend &B, const std::string& zone)
         }
         else
         {
-          cout<<"[Error] DNSKEY in non-presigned zone will mostly be ignored and can cause problems."<<endl;
-          numerrors++;
+          cout<<"[Warning] DNSKEY at '"<<rr.qname<<"' in non-presigned zone will mostly be ignored and can cause problems."<<endl;
+          numwarnings++;
         }
       }
     }