From c05615b783b1124f594438bca8a42705ff3ce223 Mon Sep 17 00:00:00 2001
From: Peter van Dijk <peter.van.dijk@netherlabs.nl>
Date: Fri, 10 Feb 2012 09:19:00 +0100
Subject: [PATCH] fix RRSIG wildcard checking

---
 dnssec.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/dnssec.go b/dnssec.go
index f5de155b..13f891f0 100644
--- a/dnssec.go
+++ b/dnssec.go
@@ -494,7 +494,7 @@ func rawSignatureData(rrset []RR, s *RR_RRSIG) (buf []byte) {
 		// 6.2. Canonical RR Form. (4) - wildcards
 		if len(labels) > int(s.Labels) {
 			// Wildcard
-			h.Name = strings.Join(labels[len(labels)-int(s.Labels):], ".") + "."
+			h.Name = "*."+strings.Join(labels[len(labels)-int(s.Labels):], ".") + "."
 		}
 		// RFC 4034: 6.2.  Canonical RR Form. (2) - domain name to lowercase
 		h.Name = strings.ToLower(h.Name)