From: Grigorii Demidov <grigorii.demidov@nic.cz>
Date: Mon, 18 Jun 2018 09:17:01 +0000 (+0200)
Subject: layer/validate: disable explicit RRSIG query if RRSIG for DS is missed
X-Git-Tag: v2.4.0~16^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=415388aec13a4dc0626f6e61417c86ebb8f4f82e;p=thirdparty%2Fknot-resolver.git

layer/validate: disable explicit RRSIG query if RRSIG for DS is missed
---

diff --git a/lib/layer/validate.c b/lib/layer/validate.c
index c6ecf4408..99d28c8df 100644
--- a/lib/layer/validate.c
+++ b/lib/layer/validate.c
@@ -482,6 +482,12 @@ static int rrsig_not_found(kr_layer_t *ctx, const knot_rrset_t *rr)
 	struct kr_request *req = ctx->req;
 	struct kr_query *qry = req->current_query;
 
+	/* Parent-side record, so don't ask for RRSIG.
+	 * We won't receive it anyway. */
+	if (qry->stype == KNOT_RRTYPE_DS) {
+		return KR_STATE_FAIL;
+	}
+
 	struct kr_zonecut *cut = &qry->zone_cut;
 	const knot_dname_t *cut_name_start = qry->zone_cut.name;
 	bool use_cut = true;