From aaef944c8a5b1448b824e14d740cc7d1ff0f2a8c Mon Sep 17 00:00:00 2001
From: Christoph Egger <christoph@christoph-egger.org>
Date: Mon, 16 Nov 2015 14:09:51 +0100
Subject: [PATCH] Also check NS record for validity

---
 dnssec-check | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/dnssec-check b/dnssec-check
index e88fc5d..162d77c 100755
--- a/dnssec-check
+++ b/dnssec-check
@@ -51,6 +51,10 @@ def check_zone_synced(resolver, name):
         ub_strerror(s)
         return 3
 
+    if not result.secure:
+        print("CRIT (does not verify) %s" % (name, ))
+        return 2
+
     nameservers = result.data.as_domain_list()
     nsips = []
     for nameserver in nameservers:
-- 
2.39.5