]> git.ipfire.org Git - thirdparty/bind9.git/commit
dnssec-dsfromkey should not convert revoked keys
authorTony Finch <dot@dotat.at>
Mon, 4 Oct 2021 23:01:54 +0000 (10:01 +1100)
committerMark Andrews <marka@isc.org>
Tue, 30 Nov 2021 11:11:03 +0000 (22:11 +1100)
commit3f7fa710d7744e0fa22d6743f42ae944b5a549ac
tree83d1461b3ee319ff26e5cee705beeee44107fe5d
parent7a6de3f830611d4796b16f0d98365ad56383117f
dnssec-dsfromkey should not convert revoked keys

it is pointless to convert revoked keys to DS or CDS records as
they cannot be used to provide a cryptographic link from the parent
zone.

(cherry picked from commit 04a5529c2da2187dde4cfce656fee023d55b1b47)
bin/dnssec/dnssec-dsfromkey.c
bin/dnssec/dnssec-dsfromkey.rst
doc/man/dnssec-dsfromkey.8in