3110. [bug] dnssec-signzone: Wrong error message could appear

			when attempting to sign with no KSK. [RT #24369]

diff --git a/CHANGES b/CHANGES
index 2e54e664c4004b0bb0129a0d1a261b2aa6de1098..c10c93c3a7ad2b460b966777ac51f01b6eb44469 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+3110.  [bug]           dnssec-signzone: Wrong error message could appear
+                       when attempting to sign with no KSK. [RT #24369]
+
 3107.  [bug]           dnssec-signzone: Report the correct number of ZSKs
                        when using -x. [RT #20852]
 

diff --git a/bin/dnssec/dnssec-signzone.c b/bin/dnssec/dnssec-signzone.c
index 0f6f3098e3891d85eadee6cab48eb94fb206d7a8..0e97e307bc63411143dee231d3e0311142d6d21b 100644 (file)
--- a/bin/dnssec/dnssec-signzone.c
+++ b/bin/dnssec/dnssec-signzone.c
@@ -29,7 +29,7 @@
  * IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
-/* $Id: dnssec-signzone.c,v 1.262.110.6 2011/05/06 21:07:49 each Exp $ */
+/* $Id: dnssec-signzone.c,v 1.262.110.7 2011/05/07 00:24:41 each Exp $ */
 
 /*! \file */
 
@@ -3830,6 +3830,8 @@ main(int argc, char *argv[]) {
                nokeys = ISC_TRUE;
        }
 
+       warnifallksk(gdb);
+
        if (IS_NSEC3) {
                unsigned int max;
                result = dns_nsec3_maxiterations(gdb, NULL, mctx, &max);
@@ -3839,8 +3841,6 @@ main(int argc, char *argv[]) {
                              "strength. Maximum iterations allowed %u.", max);
        }
 
-       warnifallksk(gdb);
-
        gversion = NULL;
        result = dns_db_newversion(gdb, &gversion);
        check_result(result, "dns_db_newversion()");