Check the SEP bit in a key (KSK/ZSK split)

2012-09-17 18:05:46 +02:00 · 2012-09-17 18:05:46 +02:00 · a8ab2145e0
parent 23852ba311
commit a8ab2145e0
1 changed files with 1 additions and 1 deletions
--- a/zone.go
+++ b/zone.go
@ -404,7 +404,7 @@ func (node *ZoneData) Sign(next *ZoneData, keys map[*RR_DNSKEY]PrivateKey, keyta
 		node.RR[TypeNSEC] = []RR{nsec}
 		for k, p := range keys {
 			if k.Flags&SEP == SEP {
-				// KSK
+				// only sign keys with SEP keys
 				continue
 			}
 			s := new(RR_RRSIG)