From f02f830f47eeea6575c5062ef1114ffe40899ae1 Mon Sep 17 00:00:00 2001
From: Kees Monshouwer <mind04@monshouwer.org>
Date: Fri, 15 Mar 2019 12:14:57 +0100
Subject: [PATCH] auth: small optimization in the rectify code for optout
 narrow zones

(cherry picked from commit 2885750af64e945ba475fd02f7f3cd5194052202)
---
 pdns/dbdnsseckeeper.cc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pdns/dbdnsseckeeper.cc b/pdns/dbdnsseckeeper.cc
index b9fe44834..1c1bf3264 100644
--- a/pdns/dbdnsseckeeper.cc
+++ b/pdns/dbdnsseckeeper.cc
@@ -691,7 +691,7 @@ bool DNSSECKeeper::rectifyZone(const DNSName& zone, string& error, string& info,
   }
 
   set<DNSName> nsec3set;
-  if (haveNSEC3) {
+  if (haveNSEC3 && (!narrow || !isOptOut)) {
     for (auto &loopRR: rrs) {
       bool skip=false;
       DNSName shorter = loopRR.qname;
-- 
2.49.0