From: Heiko Schlittermann (HS12) <hs@schlittermann.de>
Date: Wed, 13 May 2015 21:50:23 +0000 (+0200)
Subject: Add DNS debug aid if we requested AD but got AA
X-Git-Tag: exim-4_86_RC1~18
X-Git-Url: https://vcs.fsf.org/?a=commitdiff_plain;h=cf3d165f21931fa83c4740a9fa90fecc3244e760;p=exim.git

Add DNS debug aid if we requested AD but got AA

If the resolver we ask is authoritive (AA) for some domain,
we never ever get the AD (authentic data) bit in the answer.
---

diff --git a/src/src/host.c b/src/src/host.c
index 19b5805b9..3c685b0e4 100644
--- a/src/src/host.c
+++ b/src/src/host.c
@@ -2305,7 +2305,7 @@ for (; i >= 0; i--)
     if ((dnssec_request || dnssec_require)
 	& !dns_is_secure(&dnsa)
 	& dns_is_aa(&dnsa))
-      debug_printf("DNS lookup of %.256s (A/AAA/A6) asked for AD, but got AA\n", host->name);
+      debug_printf("DNS lookup of %.256s (A/AAA/A6) requested AD, but got AA\n", host->name);
 
   /* We want to return HOST_FIND_AGAIN if one of the A, A6, or AAAA lookups
   fails or times out, but not if another one succeeds. (In the early
@@ -2628,7 +2628,7 @@ if (rc != DNS_SUCCEED && (whichrrs & HOST_FIND_BY_MX) != 0)
     if ((dnssec_request || dnssec_require)
 	& !dns_is_secure(&dnsa)
 	& dns_is_aa(&dnsa))
-      debug_printf("DNS lookup of %.256s (MX) asked for AD, but got AA\n", host->name);
+      debug_printf("DNS lookup of %.256s (MX) requested AD, but got AA\n", host->name);
 
   if (dnssec_request)
     {