From: Kees Monshouwer <mind04@monshouwer.org>
Date: Sun, 17 Jul 2022 19:18:30 +0000 (+0200)
Subject: auth: do not use the metadata cache for AXFR
X-Git-Tag: auth-4.8.0-alpha0~7^2~4
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b2f8657dd1a72e006c1a728aae2c5ef9c3be24bb;p=thirdparty%2Fpdns.git

auth: do not use the metadata cache for AXFR
---

diff --git a/pdns/slavecommunicator.cc b/pdns/slavecommunicator.cc
index 7c8d76af8e..6bd209aea5 100644
--- a/pdns/slavecommunicator.cc
+++ b/pdns/slavecommunicator.cc
@@ -718,10 +718,10 @@ void CommunicatorClass::suck(const DNSName &domain, const ComboAddress& remote,
 
 
     vector<DNSResourceRecord> rrs;
-    if(dk.isSecuredZone(domain)) {
+    if (dk.isSecuredZone(domain, false)) {
       hadDnssecZone=true;
-      hadPresigned=dk.isPresigned(domain);
-      if (dk.getNSEC3PARAM(domain, &zs.ns3pr, &zs.isNarrow)) {
+      hadPresigned = dk.isPresigned(domain, false);
+      if (dk.getNSEC3PARAM(domain, &zs.ns3pr, &zs.isNarrow, false)) {
         hadNSEC3 = true;
         hadNs3pr = zs.ns3pr;
         hadNarrow = zs.isNarrow;
@@ -779,7 +779,7 @@ void CommunicatorClass::suck(const DNSName &domain, const ComboAddress& remote,
     }
 
     if(!zs.isPresigned) {
-      DNSSECKeeper::keyset_t keys = dk.getKeys(domain);
+      DNSSECKeeper::keyset_t keys = dk.getKeys(domain, false);
       if(!keys.empty()) {
         zs.isDnssecZone = true;
         zs.isNSEC3 = hadNSEC3;