]> git.ipfire.org Git - thirdparty/knot-resolver.git/commitdiff
layer/iterate: use 'old' bechavior in STRICT mode when updating cut
authorGrigorii Demidov <grigorii.demidov@nic.cz>
Fri, 23 Dec 2016 08:28:29 +0000 (09:28 +0100)
committerOndřej Surý <ondrej@sury.org>
Wed, 11 Jan 2017 12:10:22 +0000 (13:10 +0100)
lib/layer/iterate.c

index 4b44b49396c2861777f93e93c5f9eb01caf10f1d..ef2536e114eb561ffdf331f3b426c9fbc087aee6 100644 (file)
@@ -243,13 +243,7 @@ static int update_cut(knot_pkt_t *pkt, const knot_rrset_t *rr,
                /* Choose when to use glue records. */
                if (qry->flags & QUERY_PERMISSIVE) {
                        fetch_glue(pkt, ns_name, req);
-               } else if ((qry->flags & (QUERY_STRICT | QUERY_DNSSEC_WANT)) ==
-                          QUERY_STRICT) {
-                       /* Strict mode uses only mandatory glue for unsecure query.
-                        * If secure, we'll got circular dependency ->
-                        * we need to fetch DNSKEY,
-                        * so we need to fetch glue from authoritative ns,
-                        * but we can't validate glue due to DNSKEY absense */
+               } else if (qry->flags & QUERY_STRICT) {
                        if (knot_dname_in(cut->name, ns_name))
                                fetch_glue(pkt, ns_name, req);
                } else {