From: bert hubert <bert.hubert@netherlabs.nl>
Date: Wed, 22 Jun 2016 14:38:37 +0000 (+0200)
Subject: do EDNS over TCP/IP as well so we can actually get DNSSEC signatures. In 2016.
X-Git-Tag: auth-4.0.0-rc1~20^2~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a2e0174cc87822b45fc122a5570acc5aa24abb29;p=thirdparty%2Fpdns.git

do EDNS over TCP/IP as well so we can actually get DNSSEC signatures. In 2016.
---

diff --git a/pdns/lwres.cc b/pdns/lwres.cc
index 758296f8d0..fa2ee83fdb 100644
--- a/pdns/lwres.cc
+++ b/pdns/lwres.cc
@@ -79,7 +79,7 @@ int asyncresolve(const ComboAddress& ip, const DNSName& domain, int type, bool d
 
   string ping;
   bool weWantEDNSSubnet=false;
-  if(EDNS0Level && !doTCP) {
+  if(EDNS0Level) { 
     DNSPacketWriter::optvect_t opts;
     if(srcmask) {
       EDNSSubnetOpts eo;