Tom <tomtux...@gmail.com> wrote: > > DNSSEC is working fine on the zone "example.com", but as I mentioned: The > severity is "error" and it's not clear why.
It looks to me like the code is re-using its error path clean-up in a case where there is nothing to do, and if it is as simple as that then the patch below should suppress the unwanted logging. diff --git a/lib/dns/zone.c b/lib/dns/zone.c index df39dfb4d0..09d7528711 100644 --- a/lib/dns/zone.c +++ b/lib/dns/zone.c @@ -14528,9 +14528,10 @@ receive_secure_serial(isc_task_t *task, isc_event_t *event) { result = sync_secure_journal(zone, zone->rss_raw, rjournal, start, end, &soatuple, &zone->rss_diff); - if (result == DNS_R_UNCHANGED) + if (result == DNS_R_UNCHANGED) { + result = ISC_R_SUCCESS; goto failure; - else if (result != ISC_R_SUCCESS) + } else if (result != ISC_R_SUCCESS) CHECK(sync_secure_db(zone, zone->rss_raw, zone->rss_db, zone->rss_oldver, &soatuple, &zone->rss_diff)); Tony. -- f.anthony.n.finch <d...@dotat.at> http://dotat.at/ public services available on equal terms to all _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users