commit c65b77c87fbb411cfcbd770ac4a46b7a6560aaf9
author Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk> Sat May 11 17:05:23 2019 +0000
committer Simon Kelley <simon@thekelleys.org.uk> Tue Feb 11 21:32:56 2020 +0000
tree a2012231dc5c61a2e4f1d47172caf537f7d29d35
parent 8e3a5cba8be5c843828df3b06d2e665b6fd32e1c

dnssec: add hostname info to insecure DS warning

Make the existing "insecure DS received" warning more informative by
reporting the domain name reporting the issue.

This may help identify a problem with a specific domain or server
configuration.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>

src/dnssec.c

diff --git a/src/dnssec.c b/src/dnssec.c
index 6824e0a..53420e4 100644
--- a/src/dnssec.c
+++ b/src/dnssec.c
@@ -899,7 +899,7 @@
   
   if (rc == STAT_INSECURE)
     {
-      my_syslog(LOG_WARNING, _("Insecure DS reply received, do upstream DNS servers support DNSSEC?"));
+      my_syslog(LOG_WARNING, _("Insecure DS reply received for %s, check domain configuration and upstream DNS server DNSSEC support"), name);
       rc = STAT_BOGUS;
     }