summaryrefslogtreecommitdiff
path: root/src/resolve/resolved-dns-dnssec.c
diff options
context:
space:
mode:
authorLennart Poettering <lennart@poettering.net>2015-12-03 17:22:17 +0100
committerLennart Poettering <lennart@poettering.net>2015-12-03 21:17:49 +0100
commit2a44bec4f62833222a85ad8c90054468dfa75013 (patch)
tree06e08b937672d8ff333e427971a903f616975a5c /src/resolve/resolved-dns-dnssec.c
parentc9ad0edbab44123ad14767232c2d5a2c5641b459 (diff)
resolved: make expiration error recognizable
Diffstat (limited to 'src/resolve/resolved-dns-dnssec.c')
-rw-r--r--src/resolve/resolved-dns-dnssec.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/resolve/resolved-dns-dnssec.c b/src/resolve/resolved-dns-dnssec.c
index a32e938045..89833441fd 100644
--- a/src/resolve/resolved-dns-dnssec.c
+++ b/src/resolve/resolved-dns-dnssec.c
@@ -228,7 +228,7 @@ static int dnssec_rrsig_expired(DnsResourceRecord *rrsig, usec_t realtime) {
inception = rrsig->rrsig.inception * USEC_PER_SEC;
if (inception > expiration)
- return -EINVAL;
+ return -EKEYREJECTED;
/* Permit a certain amount of clock skew of 10% of the valid time range */
skew = (expiration - inception) / 10;