From: Lennart Poettering <lennart@poettering.net>
Date: Thu, 3 Dec 2015 16:22:17 +0000 (+0100)
Subject: resolved: make expiration error recognizable
X-Git-Tag: v229~235^2~10
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=2a44bec4f62833222a85ad8c90054468dfa75013;p=thirdparty%2Fsystemd.git

resolved: make expiration error recognizable
---

diff --git a/src/resolve/resolved-dns-dnssec.c b/src/resolve/resolved-dns-dnssec.c
index a32e9380454..89833441fdb 100644
--- a/src/resolve/resolved-dns-dnssec.c
+++ b/src/resolve/resolved-dns-dnssec.c
@@ -228,7 +228,7 @@ static int dnssec_rrsig_expired(DnsResourceRecord *rrsig, usec_t realtime) {
         inception = rrsig->rrsig.inception * USEC_PER_SEC;
 
         if (inception > expiration)
-                return -EINVAL;
+                return -EKEYREJECTED;
 
         /* Permit a certain amount of clock skew of 10% of the valid time range */
         skew = (expiration - inception) / 10;