3631. [bug] Remove spurious warning about missing signatures when

                        qtype is SIG. [RT #34600]

diff --git a/CHANGES b/CHANGES
index da88366e32a243d47b4a247c23b5fae0133265a5..0bc62636cfade1f671df1c4434ac6e22facb8a24 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+3631.  [bug]           Remove spurious warning about missing signatures when
+                       qtype is SIG. [RT #34600]
+
 3630.  [bug]           Ensure correct ID computation for MD5 keys. [RT #33033]
 
 3629.  [func]          Allow the printing of cryptographic fields in DNSSEC

diff --git a/bin/named/query.c b/bin/named/query.c
index a592967f83b44fae0d63df2e7ad14be9df43fa62..27c2a3a1d6c250b3b222a20608152eb31e81d717 100644 (file)
--- a/bin/named/query.c
+++ b/bin/named/query.c
@@ -7597,7 +7597,8 @@ query_find(ns_client_t *client, dns_fetchevent_t *event, dns_rdatatype_t qtype)
                                        goto addauth;
                                }
 
-                               if (dns_db_issecure(db)) {
+                               if (qtype == dns_rdatatype_rrsig &&
+                                   dns_db_issecure(db)) {
                                        char namebuf[DNS_NAME_FORMATSIZE];
                                        dns_name_format(client->query.qname,
                                                        namebuf,