always sign DS records - bit of an oddity, we normally assume that all records with...

git-svn-id: svn://svn.powerdns.com/pdns/trunk/pdns@1844 d19b8d6e-7fed-0310-83ef-9ca221ded41b

diff --git a/pdns/dnspacket.cc b/pdns/dnspacket.cc
index ae937be79096746d8d948779e030b819ae194479..34128b8c2f31f2b724673974ced84171fa2fc0df 100644 (file)
--- a/pdns/dnspacket.cc
+++ b/pdns/dnspacket.cc
@@ -303,7 +303,7 @@ void DNSPacket::wrapup(DNSSECKeeper* dk)
          signQType = pos ->qtype.getCode();
          signTTL = pos->ttl;
          signPlace = (DNSPacketWriter::Place) pos->d_place;
-         if(pos->auth)
+         if(pos->auth || pos->qtype.getCode() == QType::DS)
            toSign.push_back(drc);
        }