From: Kees Monshouwer <mind04@monshouwer.org>
Date: Tue, 25 Nov 2014 15:15:01 +0000 (+0100)
Subject: only zones with an active ksk are secure
X-Git-Tag: dnsdist-1.0.0-alpha1~59^2~6^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F1890%2Fhead;p=thirdparty%2Fpdns.git

only zones with an active ksk are secure
---

diff --git a/pdns/dbdnsseckeeper.cc b/pdns/dbdnsseckeeper.cc
index c1d3ba4f7b..0efb48a57e 100644
--- a/pdns/dbdnsseckeeper.cc
+++ b/pdns/dbdnsseckeeper.cc
@@ -53,21 +53,7 @@ bool DNSSECKeeper::isSecuredZone(const std::string& zone)
 {
   if(isPresigned(zone))
     return true;
-  
-  if(!((++s_ops) % 100000)) {
-    cleanup();
-  }
 
-  {
-    ReadLock l(&s_keycachelock);
-    keycache_t::const_iterator iter = s_keycache.find(zone);
-    if(iter != s_keycache.end() && iter->d_ttd > (unsigned int)time(0)) { 
-      if(iter->d_keys.empty())
-        return false;
-      else
-        return true;
-    }
-  }  
   keyset_t keys = getKeys(zone, true); // does the cache
   
   BOOST_FOREACH(keyset_t::value_type& val, keys) {