Add a 'dnssec'-field in the zonelist so we do not need to request the whole zone...

diff --git a/pdns/ws-auth.cc b/pdns/ws-auth.cc
index 5e10c8fffd8183ac2543ce22c01260b3d970fa8b..48f6a4e1f5e76644470656d3699f9c9970224806 100644 (file)
--- a/pdns/ws-auth.cc
+++ b/pdns/ws-auth.cc
@@ -549,6 +549,7 @@ static void apiZoneCryptokeys(HttpRequest* req, HttpResponse* resp) {
 
 static void apiServerZones(HttpRequest* req, HttpResponse* resp) {
   UeberBackend B;
+  DNSSECKeeper dk;
   if (req->method == "POST" && !::arg().mustDo("experimental-api-readonly")) {
     DomainInfo di;
     Document document;
@@ -687,6 +688,7 @@ static void apiServerZones(HttpRequest* req, HttpResponse* resp) {
     jdi.AddMember("url", jurl, doc.GetAllocator());
     jdi.AddMember("name", di.zone.c_str(), doc.GetAllocator());
     jdi.AddMember("kind", di.getKindString(), doc.GetAllocator());
+    jdi.AddMember("dnssec", dk.isSecuredZone(di.zone.c_str()), doc.GetAllocator());
     Value masters;
     masters.SetArray();
     BOOST_FOREACH(const string& master, di.masters) {