no rectify for presigned zones

PowerDNS · Jul 4, 2013 · 9bd211e · 9bd211e
1 parent ac4a2f1
commit 9bd211e
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/pdns/pdnssec.cc b/pdns/pdnssec.cc
@@ -165,6 +165,11 @@ void loadMainConfig(const std::string& configdir)
 // I think this has to do with interlocking transactions between B and DK, but unsure.
 bool rectifyZone(DNSSECKeeper& dk, const std::string& zone)
 {
+  if(dk.isPresigned(zone)){
+    cerr<<"Rectify presigned zone '"<<zone<<"' is not allowed/necessary."<<endl;
+    return false;
+  }
+
   UeberBackend B("default");
   bool doTransaction=true; // but see above
   SOAData sd;