From: Anton Tiurin Date: Mon, 2 Mar 2026 04:44:26 +0000 (+0000) Subject: resolved: use DNS_TYPE_DNSKEY for trust anchor support (#40850) X-Git-Tag: v260-rc2~45 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=ce1361d7b3c86eadb910bf02b77dccf28bfac265;p=thirdparty%2Fsystemd.git resolved: use DNS_TYPE_DNSKEY for trust anchor support (#40850) Fix typo: DNS_TYPE_DNSKEY should be used instead of DNS_TYPE_KEY. - DNS_TYPE_KEY is deprecated - Source code at resolved-dns-trust-anchor.c#L313 handles DNS_TYPE_DNSKEY records, but not DNS_TYPE_KEY So DNS_TYPE_KEY is not referenced anywhere --- diff --git a/src/resolve/resolved-dns-trust-anchor.c b/src/resolve/resolved-dns-trust-anchor.c index 0896dc870c3..f1ffee23b3f 100644 --- a/src/resolve/resolved-dns-trust-anchor.c +++ b/src/resolve/resolved-dns-trust-anchor.c @@ -581,7 +581,7 @@ int dns_trust_anchor_lookup_negative(DnsTrustAnchor *d, const char *name) { if (hashmap_contains(d->positive_by_key, &DNS_RESOURCE_KEY_CONST(DNS_CLASS_IN, DNS_TYPE_DS, name))) return false; - if (hashmap_contains(d->positive_by_key, &DNS_RESOURCE_KEY_CONST(DNS_CLASS_IN, DNS_TYPE_KEY, name))) + if (hashmap_contains(d->positive_by_key, &DNS_RESOURCE_KEY_CONST(DNS_CLASS_IN, DNS_TYPE_DNSKEY, name))) return false; /* And now, let's look at the parent, and check that too */