pdnsutil: Fix rectify message for non-DNSSEC zones

Closes: #3392

diff --git a/pdns/pdnsutil.cc b/pdns/pdnsutil.cc
index 1e5b1c08adbf905d51c4cc4736c948dff5f1bfeb..ffb2c34fa8ba5849a061bb168a741947eac11012 100644 (file)
--- a/pdns/pdnsutil.cc
+++ b/pdns/pdnsutil.cc
@@ -179,7 +179,7 @@ bool rectifyZone(DNSSECKeeper& dk, const DNSName& zone)
   bool narrow;
   bool haveNSEC3=dk.getNSEC3PARAM(zone, &ns3pr, &narrow);
   bool isOptOut=(haveNSEC3 && ns3pr.d_flags);
-  if(sd.db->doesDNSSEC())
+  if(dk.isSecuredZone(zone))
   {
     if(!haveNSEC3)
       cerr<<"Adding NSEC ordering information "<<endl;