]> git.ipfire.org Git - thirdparty/bind9.git/commit
projects / thirdparty / bind9.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(merge: 8e40f0b df21d3f)
fix: usr: Honor DNSSEC policy key tag ranges
authorMark Andrews <marka@isc.org>
Tue, 11 Aug 2026 05:09:31 +0000 (15:09 +1000)
committerMark Andrews <marka@isc.org>
Tue, 11 Aug 2026 05:09:31 +0000 (15:09 +1000)
commit05b463c2cc8e82a444f2efad94ded85bea2fe4a3
tree52b91244839a578c403ed468304becf3ed3c1e76tree | snapshot
parent8e40f0b39f9d0423a265157f792f501e7d6a8436commit | diff
parentdf21d3f7d5b1acf0867bf9ded0b95122ff8cdf3dcommit | diff
fix: usr: Honor DNSSEC policy key tag ranges

When a DNSSEC policy configured a non-default tag-range, dnssec-keygen
and dnssec-ksr could accept generated keys outside that range. Both tools
now honor the configured minimum and maximum key tags.

Closes #6091

Merge branch '6091-fix-dns-kasp-key-tagmax' into 'main'

See merge request isc-projects/bind9!12539
Mirror of https://gitlab.isc.org/isc-projects/bind9.git