Commit 0a3e2e1d authored by Brian Wellington's avatar Brian Wellington
Browse files

- added a call to dns_dnssec_verify

- swapped ISC_R_SUCCESS/DNS_R_CONTINUE in two places
- hitting the end of the list of SIGs without a verification is not success.
parent 587922e6
......@@ -338,15 +338,18 @@ validate(dns_validator_t *val, isc_boolean_t resume) {
if (!resume) {
result = get_key(val, &siginfo);
if (result != DNS_R_CONTINUE)
if (result != ISC_R_SUCCESS)
return (result);
}
INSIST(val->key != NULL);
result = dns_dnssec_verify(event->name, event->rdataset,
val->key, val->view->mctx, &rdata);
if (result == ISC_R_SUCCESS)
return (result);
result = dns_rdataset_next(event->sigrdataset);
} while (result == ISC_R_SUCCESS);
if (result == ISC_R_NOMORE)
result = ISC_R_SUCCESS;
return (result);
}
......@@ -371,7 +374,7 @@ validator_start(dns_validator_t *val) {
result = DNS_R_NOTIMPLEMENTED;
}
if (result != ISC_R_SUCCESS)
if (result != DNS_R_CONTINUE)
validator_done(val, result);
UNLOCK(&val->lock);
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment