]> git.ipfire.org Git - thirdparty/bind9.git/commit
Change nsec3param salt config to saltlen
authorMatthijs Mekking <matthijs@isc.org>
Fri, 23 Oct 2020 13:02:19 +0000 (15:02 +0200)
committerMatthijs Mekking <matthijs@isc.org>
Thu, 26 Nov 2020 14:15:04 +0000 (14:15 +0000)
commit52d3bf5f317b6a7183cc2f6a86b61fe2b3edd2df
treedb95e445392ecbfda3f8236f3541e78774a5b8dc
parentd35dab3db88e8e80836fe39d61b94f2d4bc4cbb0
Change nsec3param salt config to saltlen

Upon request from Mark, change the configuration of salt to salt
length.

Introduce a new function 'dns_zone_checknsec3aram' that can be used
upon reconfiguration to check if the existing NSEC3 parameters are
in sync with the configuration. If a salt is used that matches the
configured salt length, don't change the NSEC3 parameters.

(cherry picked from commit 6f97bb6b1fae8031d9c6a1eb699d463a7369e672)
21 files changed:
bin/named/named.conf.rst
bin/named/zoneconf.c
bin/tests/system/checkconf/good-kasp.conf
bin/tests/system/checkconf/tests.sh
bin/tests/system/nsec3/ns3/named.conf.in
bin/tests/system/nsec3/ns3/named2.conf.in
bin/tests/system/nsec3/tests.sh
doc/arm/reference.rst
doc/man/named.conf.5in
doc/misc/dnssec-policy.grammar.rst
doc/misc/options
doc/misc/options.active
lib/dns/include/dns/kasp.h
lib/dns/include/dns/result.h
lib/dns/include/dns/zone.h
lib/dns/kasp.c
lib/dns/result.c
lib/dns/win32/libdns.def.in
lib/dns/zone.c
lib/isccfg/kaspconf.c
lib/isccfg/namedconf.c