From: Christoph Egger <christoph@christoph-egger.org>
Date: Mon, 16 Nov 2015 13:09:51 +0000 (+0100)
Subject: Also check NS record for validity
X-Git-Url: https://git.siccegge.de//index.cgi?a=commitdiff_plain;h=aaef944c8a5b1448b824e14d740cc7d1ff0f2a8c;p=tools.git

Also check NS record for validity
---

diff --git a/dnssec-check b/dnssec-check
index e88fc5d..162d77c 100755
--- a/dnssec-check
+++ b/dnssec-check
@@ -51,6 +51,10 @@ def check_zone_synced(resolver, name):
         ub_strerror(s)
         return 3
 
+    if not result.secure:
+        print("CRIT (does not verify) %s" % (name, ))
+        return 2
+
     nameservers = result.data.as_domain_list()
     nsips = []
     for nameserver in nameservers: