From 8951efca43f281b81dc3e8fc6a687bae57cae534 Mon Sep 17 00:00:00 2001 From: Miod Vallat Date: Thu, 3 Jul 2025 14:19:51 +0200 Subject: [PATCH] Only add NSEC3 record pairs in updateDNSSECOrderNameAndAuth() if doing NSEC3. Signed-off-by: Miod Vallat --- modules/lmdbbackend/lmdbbackend.cc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/modules/lmdbbackend/lmdbbackend.cc b/modules/lmdbbackend/lmdbbackend.cc index e305792df3..a8d768715b 100644 --- a/modules/lmdbbackend/lmdbbackend.cc +++ b/modules/lmdbbackend/lmdbbackend.cc @@ -2692,7 +2692,7 @@ bool LMDBBackend::getBeforeAndAfterNames(domainid_t domainId, const ZoneName& zo return true; } -bool LMDBBackend::updateDNSSECOrderNameAndAuth(domainid_t domain_id, const DNSName& qname, const DNSName& ordername, bool auth, const uint16_t qtype, bool /* isNsec3 */) +bool LMDBBackend::updateDNSSECOrderNameAndAuth(domainid_t domain_id, const DNSName& qname, const DNSName& ordername, bool auth, const uint16_t qtype, bool isNsec3) { // cout << __PRETTY_FUNCTION__<< ": "<< domain_id <<", '"< txn; @@ -2760,7 +2760,7 @@ bool LMDBBackend::updateDNSSECOrderNameAndAuth(domainid_t domain_id, const DNSNa // NSEC3 link to be removed: need to remove an existing pair, if any deleteNSEC3RecordPair(txn, domain_id, rel); } - else if (hasOrderName) { + else if (hasOrderName && isNsec3) { // NSEC3 link to be added or updated writeNSEC3RecordPair(txn, domain_id, rel, ordername); } -- 2.47.2