From 0bbd558073fe9fb980f4196b19b0db1ae8bd397e Mon Sep 17 00:00:00 2001 From: =?utf8?q?Marek=20Vavru=C5=A1a?= Date: Wed, 21 Mar 2018 15:48:57 -0700 Subject: [PATCH] bindings: always set AD=1 in internal queries just like real clients The AD indicates validation request (but not request for DNSSEC records). If the response can't be validated, resolver flips the AD to 0. --- daemon/bindings.c | 1 + 1 file changed, 1 insertion(+) diff --git a/daemon/bindings.c b/daemon/bindings.c index f3c6e1cb7..17df57c9f 100644 --- a/daemon/bindings.c +++ b/daemon/bindings.c @@ -1540,6 +1540,7 @@ static int wrk_resolve(lua_State *L) } knot_pkt_put_question(pkt, dname, rrclass, rrtype); knot_wire_set_rd(pkt->wire); + knot_wire_set_ad(pkt->wire); /* Add OPT RR */ pkt->opt_rr = knot_rrset_copy(worker->engine->resolver.opt_rr, NULL); -- 2.47.2