diff --git a/CHANGES b/CHANGES index 213875a896..a89ea5f16b 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,6 @@ +1188. [bug] Dynamic updates of a signed zone would fail if + some of the zone private keys were unavailable. + 1187. [bug] named was incorrectly returning DNSSEC records in negative responses when the DO bit was not set. diff --git a/lib/dns/dnssec.c b/lib/dns/dnssec.c index 5b436265fb..0da3c69f85 100644 --- a/lib/dns/dnssec.c +++ b/lib/dns/dnssec.c @@ -16,7 +16,7 @@ */ /* - * $Id: dnssec.c,v 1.71 2002/01/21 11:00:17 bwelling Exp $ + * $Id: dnssec.c,v 1.72 2002/01/22 13:04:45 bwelling Exp $ */ @@ -511,7 +511,7 @@ dns_dnssec_findzonekeys2(dns_db_t *db, dns_dbversion_t *ver, DST_TYPE_PUBLIC|DST_TYPE_PRIVATE, directory, mctx, &keys[count]); - if (result == DST_R_INVALIDPRIVATEKEY) + if (result == ISC_R_FILENOTFOUND) goto next; if (result != ISC_R_SUCCESS) goto failure;