From: Kees Monshouwer <mind04@monshouwer.org>
Date: Thu, 4 Jul 2013 18:55:25 +0000 (+0200)
Subject: no rectify for presigned zones
X-Git-Tag: rec-3.6.0-rc1~587^2
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=9bd211e1d13e1840d2a699d376b131e4db9ef3eb;p=pdns

no rectify for presigned zones
---

diff --git a/pdns/pdnssec.cc b/pdns/pdnssec.cc
index dfbb32a6f..63906ec3c 100644
--- a/pdns/pdnssec.cc
+++ b/pdns/pdnssec.cc
@@ -165,6 +165,11 @@ void loadMainConfig(const std::string& configdir)
 // I think this has to do with interlocking transactions between B and DK, but unsure.
 bool rectifyZone(DNSSECKeeper& dk, const std::string& zone)
 {
+  if(dk.isPresigned(zone)){
+    cerr<<"Rectify presigned zone '"<<zone<<"' is not allowed/necessary."<<endl;
+    return false;
+  }
+
   UeberBackend B("default");
   bool doTransaction=true; // but see above
   SOAData sd;