From afbe695de3f85c3d5cfae1a555aeadf44b43a77e Mon Sep 17 00:00:00 2001
From: Mark Andrews <marka@isc.org>
Date: Tue, 9 Jun 2009 22:57:09 +0000
Subject: [PATCH] "got insecure response; parent indicates it should be secure"
 wrongly emitted [RT #19800]

---
 lib/dns/validator.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lib/dns/validator.c b/lib/dns/validator.c
index cef8a60712..88f661a76a 100644
--- a/lib/dns/validator.c
+++ b/lib/dns/validator.c
@@ -15,7 +15,7 @@
  * PERFORMANCE OF THIS SOFTWARE.
  */
 
-/* $Id: validator.c,v 1.176 2009/05/07 23:47:44 tbox Exp $ */
+/* $Id: validator.c,v 1.177 2009/06/09 22:57:09 marka Exp $ */
 
 #include <config.h>
 
@@ -3580,7 +3580,7 @@ validator_start(isc_task_t *task, isc_event_t *event) {
 
 		val->attributes |= VALATTR_INSECURITY;
 		result = proveunsecure(val, ISC_FALSE, ISC_FALSE);
-		if (result != DNS_R_NOTINSECURE)
+		if (result == DNS_R_NOTINSECURE)
 			validator_log(val, ISC_LOG_INFO,
 				      "got insecure response; "
 				      "parent indicates it should be secure");