more detailed logging during insecurity proofs

diff --git a/lib/dns/validator.c b/lib/dns/validator.c
index 97681d751b09e9767b5a726f9066d42d6554163c..dda97e2689e7d119664da46830f45b1fd3e91afa 100644 (file)
--- a/lib/dns/validator.c
+++ b/lib/dns/validator.c
@@ -1050,6 +1050,8 @@ proveunsecure(dns_validator_t *val, isc_boolean_t resume) {
             val->labels <= dns_name_depth(val->event->name);
             val->labels++)
        {
+               char namebuf[1024];
+
                if (val->labels == dns_name_depth(val->event->name)) {
                        if (val->event->type == dns_rdatatype_key)
                                break;
@@ -1063,6 +1065,11 @@ proveunsecure(dns_validator_t *val, isc_boolean_t resume) {
                                return (result);
                }
 
+               dns_name_format(tname, namebuf, sizeof(namebuf));
+               validator_log(val, ISC_LOG_DEBUG(3),
+                             "looking for null keyset at '%s'",
+                             namebuf);
+
                if (dns_rdataset_isassociated(&val->frdataset))
                        dns_rdataset_disassociate(&val->frdataset);
                if (dns_rdataset_isassociated(&val->fsigrdataset))