mirror of
https://github.com/isc-projects/bind9.git
synced 2026-05-28 04:34:54 -04:00
reversed previous change: data that is neither secure not pending
is assumed to be from insecure zones and therefore should have AD set per server policy
This commit is contained in:
parent
88e216c7b4
commit
0fd13c7aca
1 changed files with 1 additions and 1 deletions
|
|
@ -1664,7 +1664,7 @@ dns_message_rendersection(dns_message_t *msg, dns_section_t sectionid,
|
|||
* If we have rendered pending data, ensure
|
||||
* that the AD bit is not set.
|
||||
*/
|
||||
if (rdataset->trust < dns_trust_secure &&
|
||||
if (rdataset->trust == dns_trust_pending &&
|
||||
(sectionid == DNS_SECTION_ANSWER ||
|
||||
sectionid == DNS_SECTION_AUTHORITY))
|
||||
msg->flags &= ~DNS_MESSAGEFLAG_AD;
|
||||
|
|
|
|||
Loading…
Reference in a new issue