for purposes of clearing the AD bit, consider all trust levels below dns_trust_secure to be 'pending'
This commit is contained in:
@@ -1664,7 +1664,7 @@ dns_message_rendersection(dns_message_t *msg, dns_section_t sectionid,
|
||||
* If we have rendered pending data, ensure
|
||||
* that the AD bit is not set.
|
||||
*/
|
||||
if (rdataset->trust == dns_trust_pending &&
|
||||
if (rdataset->trust < dns_trust_secure &&
|
||||
(sectionid == DNS_SECTION_ANSWER ||
|
||||
sectionid == DNS_SECTION_AUTHORITY))
|
||||
msg->flags &= ~DNS_MESSAGEFLAG_AD;
|
||||
|
||||
Reference in New Issue
Block a user