From c1c3e5a4916d25d0328aa5981d2f702f3705255f Mon Sep 17 00:00:00 2001
From: Ruben d'Arco <cyclops@prof-x.net>
Date: Thu, 9 May 2013 21:44:44 +0200
Subject: [PATCH] Correct odername/auth when increasing serial

---
 pdns/rfc2136handler.cc | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/pdns/rfc2136handler.cc b/pdns/rfc2136handler.cc
index ff3e7c7711..7087c40964 100755
--- a/pdns/rfc2136handler.cc
+++ b/pdns/rfc2136handler.cc
@@ -856,11 +856,13 @@ void PacketHandler::increaseSerial(const string &msgPrefix, const DomainInfo *di
   L<<Logger::Notice<<msgPrefix<<"Increasing SOA serial ("<<oldSerial<<" -> "<<soa2Update.serial<<")"<<endl;
 
   //Correct ordername + auth flag
-  if(haveNSEC3) {
+  if (haveNSEC3 && narrow)
+    di->backend->nullifyDNSSECOrderNameAndUpdateAuth(di->id, newRec.qname, true);
+  else if (haveNSEC3) {
     string hashed;
-    if(!narrow) 
-      hashed=toLower(toBase32Hex(hashQNameWithSalt(ns3pr->d_iterations, ns3pr->d_salt, newRec.qname)));
-        
+    if (!narrow)
+      hashed = toLower(toBase32Hex(hashQNameWithSalt(ns3pr->d_iterations, ns3pr->d_salt, newRec.qname)));
+
     di->backend->updateDNSSECOrderAndAuthAbsolute(di->id, newRec.qname, hashed, true);
   }
   else // NSEC
-- 
2.47.3