From 0838b3c02f79e1a3f1bf7b12e49c0f9fdf41bf56 Mon Sep 17 00:00:00 2001 From: Mark Andrews Date: Thu, 8 Oct 2009 23:55:57 +0000 Subject: [PATCH] Recompute check_ksk as it may have changed --- lib/dns/zone.c | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/lib/dns/zone.c b/lib/dns/zone.c index 1dc5a5fb2c..2511d319b3 100644 --- a/lib/dns/zone.c +++ b/lib/dns/zone.c @@ -15,7 +15,7 @@ * PERFORMANCE OF THIS SOFTWARE. */ -/* $Id: zone.c,v 1.511 2009/10/08 23:48:10 tbox Exp $ */ +/* $Id: zone.c,v 1.512 2009/10/08 23:55:57 marka Exp $ */ /*! \file */ @@ -6515,6 +6515,13 @@ zone_sign(dns_zone_t *zone) { first = ISC_TRUE; } + /* + * Recompute check_ksk as it may have changed. + */ + check_ksk = DNS_ZONE_OPTION(zone, DNS_ZONEOPT_UPDATECHECKKSK); + if (check_ksk) + check_ksk = ksk_sanity(db, version); + if (secureupdated) { /* * We have changed the NSEC RRset above so we need to update