From e469d015af5df65342d5ed6072719e40a0f969df Mon Sep 17 00:00:00 2001
From: Kim Alvefur <zash@zash.se>
Date: Tue, 28 Dec 2021 14:58:09 +0100
Subject: net.resolvers: Report DNSSEC validation errors instead of NoError

Thanks Martin bringing this case to attention
---
 net/resolvers/service.lua | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'net/resolvers/service.lua')

diff --git a/net/resolvers/service.lua b/net/resolvers/service.lua
index b476cb2c..3810cac8 100644
--- a/net/resolvers/service.lua
+++ b/net/resolvers/service.lua
@@ -55,6 +55,10 @@ function methods:next(cb)
 		if answer then
 			if self.extra and not answer.secure then
 				self.extra.use_dane = false;
+			elseif answer.bogus then
+				self.last_error = "Validation error in SRV lookup";
+				ready();
+				return;
 			end
 
 			if #answer == 0 then
-- 
cgit v1.2.3