layer/validate: disable explicit RRSIG query if RRSIG for DS is missed
Compare changes
- Grigorii Demidov authored
+ 6
− 0
@@ -482,6 +482,12 @@ static int rrsig_not_found(kr_layer_t *ctx, const knot_rrset_t *rr)
Self sign-up has been disabled due to increased spam activity. If you want to get access, please send an email to a project owner (preferred) or at gitlab(at)nic(dot)cz. We apologize for the inconvenience.
Relates to #372 (closed) - forwarding mode.
Previously if an misconfigured upstream returned DS without RRSIG the kresd started a loop to ask for RRSIGs.
Even if RRSIG for DS exists, upstream will not return it because DS is parent-side RR so this query is meaningless.