1247. [bug] The validator would incorrectly mark data as insecure

                        when seeing a bogus signature before a correct
                        signature.

diff --git a/CHANGES b/CHANGES
index 5f7bf664bf07c301b9aaed60524625d94ae7c361..661afcbd41b7739e330bddc5a72dd2e45cecb61c 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+1247.  [bug]           The validator would incorrectly mark data as insecure
+                       when seeing a bogus signature before a correct
+                       signature.
+
 1246.  [bug]           DNAME/CNAME signatures were not being cached when
                        validation was not being performed. [RT #3284]
 

diff --git a/lib/dns/validator.c b/lib/dns/validator.c
index 4c86539ad5fe2525ddfc28d39c6e74e897b2d5e2..e1b261a8245d151299fd58a9c604bc705c9270e8 100644 (file)
--- a/lib/dns/validator.c
+++ b/lib/dns/validator.c
@@ -15,7 +15,7 @@
  * WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
-/* $Id: validator.c,v 1.106 2002/06/19 04:15:12 marka Exp $ */
+/* $Id: validator.c,v 1.107 2002/07/15 02:57:14 marka Exp $ */
 
 #include <config.h>
 
@@ -1044,11 +1044,12 @@ validate(dns_validator_t *val, isc_boolean_t resume) {
                        validator_log(val, ISC_LOG_DEBUG(3),
                                      "marking as secure");
                        return (result);
-               }
-               else
+               } else {
                        validator_log(val, ISC_LOG_DEBUG(3),
                                      "verify failure: %s",
                                      isc_result_totext(result));
+                       resume = ISC_FALSE;
+               }
        }
        if (result != ISC_R_NOMORE) {
                validator_log(val, ISC_LOG_DEBUG(3),