From: Pieter Lexis <pieter.lexis@powerdns.com>
Date: Thu, 14 Jul 2016 15:50:12 +0000 (+0200)
Subject: Add missing DNSSEC trace message
X-Git-Tag: auth-4.0.1~37^2~6
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=f79cb80093ce57e7d273ae02ca3e644ce4d65ffb;p=pdns

Add missing DNSSEC trace message
---

diff --git a/pdns/validate.cc b/pdns/validate.cc
index bb90f41dd..679571045 100644
--- a/pdns/validate.cc
+++ b/pdns/validate.cc
@@ -390,8 +390,10 @@ vState getKeysFor(DNSRecordOracle& dro, const DNSName& zone, keyset_t &keyset)
               LOG("\t"<<r->getZoneRepresentation()<<endl);
               auto nsec = std::dynamic_pointer_cast<NSECRecordContent>(r);
               if(nsec) {
-                if(v.first.first == qname && !nsec->d_set.count(QType::DS))
+                if(v.first.first == qname && !nsec->d_set.count(QType::DS)) {
+                  LOG("Denies existence of DS!"<<endl);
                   return Insecure;
+                }
                 else if(v.first.first.canonCompare(qname) && qname.canonCompare(nsec->d_next) ) {
                   LOG("Did not find DS for this level, trying one lower"<<endl);
                   goto skipLevel;