Issue #3. Fix direct wildcard match

[captive-validator.git] / src / com / verisign / tat / dnssec / ValUtils.java

diff --git a/src/com/verisign/tat/dnssec/ValUtils.java b/src/com/verisign/tat/dnssec/ValUtils.java
index 1df585f..4b8d1cf 100644 (file)
--- a/src/com/verisign/tat/dnssec/ValUtils.java
+++ b/src/com/verisign/tat/dnssec/ValUtils.java
@@ -424,7 +424,13 @@ public class ValUtils {
         int label_diff = (rrset.getName().labels() - 1) - rrsig.getLabels();
 
         if (label_diff > 0) {
-            return rrset.getName().wild(label_diff);
+            Name wc = rrset.getName().wild(label_diff);
+            // if the name was the wildcard itself, this isn't actually a
+            // wildcard expansion.
+            if (wc.equals(rrset.getName())) {
+                return null;
+            }
+            return wc;
         }
 
         return null;