From 919c2ae05c829de6a2a478341c7133ccb5f594f1 Mon Sep 17 00:00:00 2001
From: Lennart Poettering <lennart@poettering.net>
Date: Sat, 26 Dec 2015 14:39:49 +0100
Subject: [PATCH] resolved: make sure we reset the DNSSEC result when we accept
 a response packet

---
 src/resolve/resolved-dns-transaction.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/resolve/resolved-dns-transaction.c b/src/resolve/resolved-dns-transaction.c
index e772004106..ba1f8cc7af 100644
--- a/src/resolve/resolved-dns-transaction.c
+++ b/src/resolve/resolved-dns-transaction.c
@@ -693,6 +693,7 @@ void dns_transaction_process_reply(DnsTransaction *t, DnsPacket *p) {
                 dns_answer_unref(t->answer);
                 t->answer = dns_answer_ref(p->answer);
                 t->answer_rcode = DNS_PACKET_RCODE(p);
+                t->answer_dnssec_result = _DNSSEC_RESULT_INVALID;
                 t->answer_authenticated = false;
 
                 r = dns_transaction_request_dnssec_keys(t);