From 1b1694a959e1f5503849f1cf5ee2b313240a6b91 Mon Sep 17 00:00:00 2001 From: Wouter Wijngaards Date: Thu, 23 Oct 2008 10:54:03 +0000 Subject: [PATCH] More verbose on signer name error. git-svn-id: file:///svn/unbound/trunk@1322 be551aaa-1e26-0410-a405-d3ace91eadb9 --- doc/Changelog | 3 +++ validator/val_sigcrypt.c | 4 ++++ 2 files changed, 7 insertions(+) diff --git a/doc/Changelog b/doc/Changelog index 1a9ad9c01..2f454eb41 100644 --- a/doc/Changelog +++ b/doc/Changelog @@ -1,3 +1,6 @@ +23 October 2008: Wouter + - a little more debug info for failure on signer names. prints names. + 22 October 2008: Wouter - CFLAGS are picked up by configure from the environment. - iana portlist updated. diff --git a/validator/val_sigcrypt.c b/validator/val_sigcrypt.c index d4d2e52b5..e033fdc0d 100644 --- a/validator/val_sigcrypt.c +++ b/validator/val_sigcrypt.c @@ -1492,6 +1492,10 @@ dnskey_verify_rrset_sig(struct regional* region, ldns_buffer* buf, /* verify key dname == sig signer name */ if(query_dname_compare(signer, dnskey->rk.dname) != 0) { verbose(VERB_QUERY, "verify: wrong key for rrsig"); + log_nametypeclass(VERB_QUERY, "RRSIG signername is", + signer, 0, 0); + log_nametypeclass(VERB_QUERY, "the key name is", + dnskey->rk.dname, 0, 0); return sec_status_bogus; }