From: Remi Gacogne <remi.gacogne@powerdns.com>
Date: Tue, 23 Aug 2016 13:51:11 +0000 (+0200)
Subject: auth: Don't look up the packet cache for TSIG-enabled queries
X-Git-Tag: rec-4.0.2~3^2
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=9e79c2d4d0522e1f088eccdf6bf7dbb4bb851037;p=pdns

auth: Don't look up the packet cache for TSIG-enabled queries

We are rightfully careful about not caching responses for TSIG-enabled
queries, but we would nevertheless happily serve cached entries for those.
---

diff --git a/pdns/dnspacket.cc b/pdns/dnspacket.cc
index dd53ee7f0..21fa80617 100644
--- a/pdns/dnspacket.cc
+++ b/pdns/dnspacket.cc
@@ -246,7 +246,7 @@ void DNSPacket::setCompress(bool compress)
 
 bool DNSPacket::couldBeCached()
 {
-  return d_ednsping.empty() && !d_wantsnsid && qclass==QClass::IN;
+  return d_ednsping.empty() && !d_wantsnsid && qclass==QClass::IN && !d_havetsig;
 }
 
 unsigned int DNSPacket::getMinTTL()