diff options
| author | Florian Obser <florian@cvs.openbsd.org> | 2019-05-06 17:31:26 +0000 |
|---|---|---|
| committer | Florian Obser <florian@cvs.openbsd.org> | 2019-05-06 17:31:26 +0000 |
| commit | f48344aea512c714e5029c2f054327e0e59c49ff (patch) | |
| tree | a1ba697f732774ab5353b6ded4db2012b0cb2c07 | |
| parent | 0724c3098f010aa5ede8acc1450d222871ba7c30 (diff) | |
Only try to resolve the DNSSEC trust anchor if we have a validating
resolver context. Otherwise we will ignore the answer later on
anyway.
| -rw-r--r-- | sbin/unwind/resolver.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/sbin/unwind/resolver.c b/sbin/unwind/resolver.c index 191c4ff435e..54446a08594 100644 --- a/sbin/unwind/resolver.c +++ b/sbin/unwind/resolver.c @@ -1,4 +1,4 @@ -/* $OpenBSD: resolver.c,v 1.37 2019/04/02 08:28:20 florian Exp $ */ +/* $OpenBSD: resolver.c,v 1.38 2019/05/06 17:31:25 florian Exp $ */ /* * Copyright (c) 2018 Florian Obser <florian@openbsd.org> @@ -1423,7 +1423,7 @@ trust_anchor_resolve(void) res = best_resolver(); - if (res == NULL) { + if (res == NULL || res->state < VALIDATING) { evtimer_add(&trust_anchor_timer, &tv); return; } |