[master] fix spurious error in rndc secroots

3977.	[cleanup]	"rndc secroots" reported a "not found" error when
			there were no negative trust anchors set. [RT #37506]

diff --git a/CHANGES b/CHANGES
index 3e8f70e21e969f3959d3462966251092ed61d4f7..90940798c3a6dd6ec35347e189820eaa594873bb 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+3977.  [cleanup]       "rndc secroots" reported a "not found" error when
+                       there were no negative trust anchors set. [RT #37506]
+
 3976.  [bug]           When refreshing managed-key trust anchors, clear
                        any cached trust so that they will always be
                        revalidated with the current set of secure

diff --git a/bin/named/server.c b/bin/named/server.c
index aed628fc82def91e0104fd9ada1148c8b3ec6b6b..11ba8efcce112765bbc079f49d9b65d8df40826b 100644 (file)
--- a/bin/named/server.c
+++ b/bin/named/server.c
@@ -7891,7 +7891,7 @@ ns_server_dumpsecroots(ns_server_t *server, char *args) {
                        }
                        fprintf(fp, "\n   Negative trust anchors:\n\n");
                        result = dns_ntatable_dump(ntatable, fp);
-                       if (result != ISC_R_SUCCESS)
+                       if (result != ISC_R_SUCCESS && result != ISC_R_NOTFOUND)
                                fprintf(fp, " dumpntatable failed: %s\n",
                                        isc_result_totext(result));
                }