]> git.ipfire.org Git - thirdparty/bind9.git/commit
projects / thirdparty / bind9.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6da379d) | patch
Update keymgr to allow transition to insecure mode
authorMatthijs Mekking <matthijs@isc.org>
Thu, 3 Dec 2020 15:04:28 +0000 (16:04 +0100)
committerMatthijs Mekking <matthijs@isc.org>
Wed, 23 Dec 2020 10:56:54 +0000 (11:56 +0100)
commitd564ad5f52d40948bd1e2e4c677c8c174cad973a
tree8ffd3263b8c252d912e092a9854d5476153580b1tree | snapshot
parent6da379d844e7d3e8a05faea2dafbbce22d4612d3commit | diff
Update keymgr to allow transition to insecure mode

The keymgr prevented zones from going to insecure mode. If we
have a policy with an empty key list this is a signal that the zone
wants to go back to insecure mode. In this case allow one extra state
transition to be valid when checking for DNSSEC safety.

(cherry picked from commit 913410006912984b49f9e8efa74e7c1f274cbe4d)
lib/dns/keymgr.c diff | blob | blame | history
Mirror of https://gitlab.isc.org/isc-projects/bind9.git