From be4e62d7f22a015b561adeadf1a0355fd8938bf7 Mon Sep 17 00:00:00 2001
From: Peter van Dijk <peter.van.dijk@powerdns.com>
Date: Mon, 11 Jan 2016 18:31:08 +0100
Subject: [PATCH] Mark servfail.nl as bogus

if we have keys, but could validate nothing, consider the situation Bogus.
---
 pdns/validate-recursor.cc | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pdns/validate-recursor.cc b/pdns/validate-recursor.cc
index 4b951d97e..2012ed620 100644
--- a/pdns/validate-recursor.cc
+++ b/pdns/validate-recursor.cc
@@ -68,5 +68,7 @@ vState validateRecords(const vector<DNSRecord>& recs)
   //  cerr<<"Took "<<sro.d_queries<<" queries"<<endl;
   if(validrrsets.size() == cspmap.size())
     return Secure;
+  if(keys.size())
+    return Bogus;
   return Insecure;
 }
-- 
2.40.0