resolved: make expiration error recognizable

diff --git a/src/resolve/resolved-dns-dnssec.c b/src/resolve/resolved-dns-dnssec.c
index a32e938045422a0d8d5f014655b29e672e8b564a..89833441fdbb9dab9f5866c052ef2ba70fca8629 100644 (file)
--- a/src/resolve/resolved-dns-dnssec.c
+++ b/src/resolve/resolved-dns-dnssec.c
@@ -228,7 +228,7 @@ static int dnssec_rrsig_expired(DnsResourceRecord *rrsig, usec_t realtime) {
         inception = rrsig->rrsig.inception * USEC_PER_SEC;
 
         if (inception > expiration)
-                return -EINVAL;
+                return -EKEYREJECTED;
 
         /* Permit a certain amount of clock skew of 10% of the valid time range */
         skew = (expiration - inception) / 10;