- For #802: Cleanup comments and add RCODE check for CD bit test case.

services/mesh.c

@@ -1479,9 +1479,6 @@ mesh_send_reply(struct mesh_state* m, int rcode, struct reply_info* rep,
 			error_encode(r_buffer, LDNS_RCODE_SERVFAIL,
 				&m->s.qinfo, r->qid, r->qflags, &r->edns);
 		}
-
-		/* Send along EDE BOGUS EDNS0 option when validation is bogus */
-
 		m->reply_list = NULL;
 		comm_point_send_reply(&r->query_reply);
 		m->reply_list = rlist;

testdata/ede.tdir/ede.test

@@ -71,6 +71,12 @@ fi
 # EDE with CD bit set (EDE but no SERVFAIL)
 dig @127.0.0.1 -p $UNBOUND_PORT cd.dnskey-failures.test +cd > cd_bit_ede.txt
 
+if ! grep -q -e "NXDOMAIN" cd_bit_ede.txt
+then
+	echo "No NXDOMAIN reply with CD bit set"
+	cat cd_bit_ede.txt
+	exit 1
+fi
 if ! grep -q -e "OPT=15: 00 09" -e "EDE: 9" cd_bit_ede.txt
 then
 	echo "No EDE attached with CD bit set"
@@ -78,4 +84,5 @@ then
 	exit 1
 fi
 
+# TODO EDE with CD bit set (EDE but no SERVFAIL) for a cached answer
 # TODO DNSSEC indeterminate when implemented