]> git.ipfire.org Git - thirdparty/pdns.git/commit
rec: implement a way to disable specific DNSSEC algorithms
authorOtto Moerbeek <otto.moerbeek@open-xchange.com>
Tue, 6 Jun 2023 14:11:59 +0000 (16:11 +0200)
committerOtto Moerbeek <otto.moerbeek@open-xchange.com>
Tue, 6 Jun 2023 14:11:59 +0000 (16:11 +0200)
commit04cee9810cab8a785e381fd636dc674bbef9c959
tree646d3707b3c0e84b8397fd01d7beadaf8297b80c
parenta1a0f9ee3293c27fce7f54ab4865839ebee7b3d4
rec: implement a way to disable specific DNSSEC algorithms

This could be needed when runing RHEL9, to avoid having zones signed
with algo 5 or 7 going Bogus. RHEL9 does not support these algorithms,
unless the globalsecurity policy is modified.
pdns/dnssecinfra.cc
pdns/dnssecinfra.hh
pdns/recursordist/rec-main.cc