Don't include authority data if it would force us to unset the AD bit

2000-04-11 18:43:27 +00:00
parent 8426878e98
commit 8469ee3726
1 changed files with 4 additions and 0 deletions
@@ -1581,6 +1581,10 @@ query_addbestns(ns_client_t *client) {
 		zsigrdataset = NULL;
 	}

+	if ((client->message->flags & DNS_MESSAGEFLAG_CD) == 0 &&
+	    rdataset->trust == dns_trust_pending)
+		goto cleanup;
+
 	query_addrrset(client, &fname, &rdataset, &sigrdataset, dbuf,
 		       DNS_SECTION_AUTHORITY);