From: Libor Peltan <libor.peltan@nic.cz>
Date: Mon, 7 Jan 2019 14:18:55 +0000 (+0100)
Subject: dnssec: log ignored manual key rollover
X-Git-Tag: v2.8.0~117^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e916a98a9a052d23726eb05a1345f656c56e498f;p=thirdparty%2Fknot-dns.git

dnssec: log ignored manual key rollover
---

diff --git a/src/knot/dnssec/key-events.c b/src/knot/dnssec/key-events.c
index 4c5fef97a7..39adb99ddf 100644
--- a/src/knot/dnssec/key-events.c
+++ b/src/knot/dnssec/key-events.c
@@ -574,6 +574,10 @@ int knot_dnssec_key_rollover(kdnssec_ctx_t *ctx, zone_sign_roll_flags_t flags,
 		return KNOT_EINVAL;
 	}
 	if (ctx->policy->manual) {
+		if ((flags & (KEY_ROLL_FORCE_KSK_ROLL | KEY_ROLL_FORCE_ZSK_ROLL))) {
+			log_zone_notice(ctx->zone->dname, "DNSSEC, ignoring forced key rollover "
+							  "due to manual policy");
+		}
 		return KNOT_EOK;
 	}
 	int ret = KNOT_EOK;