3631. [bug] Remove spurious warning about missing signatures when

                        qtype is SIG. [RT #34600]

(cherry picked from commit 06ace051e7522b153b487581c9439fc8c162fb18)

diff --git a/CHANGES b/CHANGES
index cc446dade67a98815fcf83a8cd1785747e2b9caf..f3e0e468fecbae9701bb0d3ad5c8ce2f5d8c48a5 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+3631.  [bug]           Remove spurious warning about missing signatures when
+                       qtype is SIG. [RT #34600]
+
 3630.  [bug]           Ensure correct ID computation for MD5 keys. [RT #33033]
 
 3627.  [bug]           RPZ changes were not effective on slaves. [RT #34450]

diff --git a/bin/named/query.c b/bin/named/query.c
index c3d63a2003b51449131ed9d32357117fb2451db7..a2617e08fa98ded55f7293d7e03a718e685d0c6e 100644 (file)
--- a/bin/named/query.c
+++ b/bin/named/query.c
@@ -7155,7 +7155,8 @@ query_find(ns_client_t *client, dns_fetchevent_t *event, dns_rdatatype_t qtype)
                                        goto addauth;
                                }
 
-                               if (dns_db_issecure(db)) {
+                               if (qtype == dns_rdatatype_rrsig &&
+                                   dns_db_issecure(db)) {
                                        char namebuf[DNS_NAME_FORMATSIZE];
                                        dns_name_format(client->query.qname,
                                                        namebuf,