From 1876dfb1736d97862123d5137fc1791741ff0704 Mon Sep 17 00:00:00 2001 From: Kees Monshouwer Date: Tue, 9 Jul 2019 18:07:25 +0200 Subject: [PATCH] auth: make sure the RRSIG freshness check is using the right zone --- pdns/slavecommunicator.cc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pdns/slavecommunicator.cc b/pdns/slavecommunicator.cc index cc44b0d88..1b7c126c1 100644 --- a/pdns/slavecommunicator.cc +++ b/pdns/slavecommunicator.cc @@ -960,7 +960,7 @@ void CommunicatorClass::slaveRefresh(PacketHandler *P) else if(hasSOA && theirserial == ourserial) { uint32_t maxExpire=0, maxInception=0; if(dk.isPresigned(di.zone)) { - B->lookup(QType(QType::RRSIG), di.zone, -1); // can't use DK before we are done with this lookup! + B->lookup(QType(QType::RRSIG), di.zone, di.id); // can't use DK before we are done with this lookup! DNSZoneRecord zr; while(B->get(zr)) { auto rrsig = getRR(zr.dr); -- 2.40.0