From: Otto Moerbeek <otto.moerbeek@open-xchange.com>
Date: Mon, 24 Feb 2025 11:39:41 +0000 (+0100)
Subject: rec: add new root trust anchor
X-Git-Tag: rec-5.0.10~3^2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=refs%2Fpull%2F15214%2Fhead;p=thirdparty%2Fpdns.git

rec: add new root trust anchor
---

diff --git a/pdns/root-dnssec.hh b/pdns/root-dnssec.hh
index 3ee5e9bbb7..6d43818be7 100644
--- a/pdns/root-dnssec.hh
+++ b/pdns/root-dnssec.hh
@@ -22,4 +22,7 @@
 
 #pragma once
 
-static const char* const rootDSs[]={"20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d"};
+static const char* const rootDSs[] = {
+  "20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d",
+  "38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16"
+};
diff --git a/regression-tests.recursor-dnssec/test_TrustAnchors.py b/regression-tests.recursor-dnssec/test_TrustAnchors.py
index f44497881a..ca6dfa15b2 100644
--- a/regression-tests.recursor-dnssec/test_TrustAnchors.py
+++ b/regression-tests.recursor-dnssec/test_TrustAnchors.py
@@ -22,7 +22,7 @@ addNTA("example.com", "some reason")
     def testTrustanchorDotServer(self):
         expected = dns.rrset.from_text_list(
             'trustanchor.server.', 86400, dns.rdataclass.CH, 'TXT',
-            ['". 20326"', '"powerdns.com. 44030"'])
+            ['". 20326 38696"', '"powerdns.com. 44030"'])
         query = dns.message.make_query('trustanchor.server', 'TXT',
                                        dns.rdataclass.CH)
         result = self.sendUDPQuery(query)