From: Kees Monshouwer <mind04@monshouwer.org>
Date: Tue, 9 Jul 2019 16:07:25 +0000 (+0200)
Subject: auth: make sure the RRSIG freshness check is using the right zone
X-Git-Tag: dnsdist-1.4.0-rc3~12^2~7
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=1876dfb1736d97862123d5137fc1791741ff0704;p=pdns

auth: make sure the RRSIG freshness check is using the right zone
---

diff --git a/pdns/slavecommunicator.cc b/pdns/slavecommunicator.cc
index cc44b0d88..1b7c126c1 100644
--- a/pdns/slavecommunicator.cc
+++ b/pdns/slavecommunicator.cc
@@ -960,7 +960,7 @@ void CommunicatorClass::slaveRefresh(PacketHandler *P)
     else if(hasSOA && theirserial == ourserial) {
       uint32_t maxExpire=0, maxInception=0;
       if(dk.isPresigned(di.zone)) {
-        B->lookup(QType(QType::RRSIG), di.zone, -1); // can't use DK before we are done with this lookup!
+        B->lookup(QType(QType::RRSIG), di.zone, di.id); // can't use DK before we are done with this lookup!
         DNSZoneRecord zr;
         while(B->get(zr)) {
           auto rrsig = getRR<RRSIGRecordContent>(zr.dr);