From 2a44bec4f62833222a85ad8c90054468dfa75013 Mon Sep 17 00:00:00 2001
From: Lennart Poettering <lennart@poettering.net>
Date: Thu, 3 Dec 2015 17:22:17 +0100
Subject: resolved: make expiration error recognizable

---
 src/resolve/resolved-dns-dnssec.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'src/resolve')

diff --git a/src/resolve/resolved-dns-dnssec.c b/src/resolve/resolved-dns-dnssec.c
index a32e938045..89833441fd 100644
--- a/src/resolve/resolved-dns-dnssec.c
+++ b/src/resolve/resolved-dns-dnssec.c
@@ -228,7 +228,7 @@ static int dnssec_rrsig_expired(DnsResourceRecord *rrsig, usec_t realtime) {
         inception = rrsig->rrsig.inception * USEC_PER_SEC;
 
         if (inception > expiration)
-                return -EINVAL;
+                return -EKEYREJECTED;
 
         /* Permit a certain amount of clock skew of 10% of the valid time range */
         skew = (expiration - inception) / 10;
-- 
cgit v1.2.3-54-g00ecf