X-Git-Url: https://git.siccegge.de//index.cgi?p=tools.git;a=blobdiff_plain;f=dnssec-check;fp=dnssec-check;h=162d77c01d5cdcf25232d289a9c5409868445269;hp=e88fc5da1b648a97430825f50e1c6ca0536e7923;hb=aaef944c8a5b1448b824e14d740cc7d1ff0f2a8c;hpb=3920ce68b13e847d07d30e43f6564570ef0504e1

diff --git a/dnssec-check b/dnssec-check
index e88fc5d..162d77c 100755
--- a/dnssec-check
+++ b/dnssec-check
@@ -51,6 +51,10 @@ def check_zone_synced(resolver, name):
         ub_strerror(s)
         return 3
 
+    if not result.secure:
+        print("CRIT (does not verify) %s" % (name, ))
+        return 2
+
     nameservers = result.data.as_domain_list()
     nsips = []
     for nameserver in nameservers: