]> git.ipfire.org Git - thirdparty/bind9.git/commit
dnssec-dsfromkey should not convert revoked keys
authorTony Finch <dot@dotat.at>
Mon, 4 Oct 2021 23:01:54 +0000 (10:01 +1100)
committerMark Andrews <marka@isc.org>
Tue, 30 Nov 2021 10:48:17 +0000 (21:48 +1100)
commit04a5529c2da2187dde4cfce656fee023d55b1b47
tree4d04dd6462faa0d573625c44cb0398ac1eb3291f
parent3443938b991a774460df9dc6102d93ec957da11c
dnssec-dsfromkey should not convert revoked keys

it is pointless to convert revoked keys to DS or CDS records as
they cannot be used to provide a cryptographic link from the parent
zone.
bin/dnssec/dnssec-dsfromkey.c
bin/dnssec/dnssec-dsfromkey.rst
doc/man/dnssec-dsfromkey.1in