]> git.ipfire.org Git - thirdparty/bind9.git/commit
Change checkconf to include built-in dnssec-policy
authorMatthijs Mekking <matthijs@isc.org>
Thu, 28 Aug 2025 12:48:07 +0000 (14:48 +0200)
committerMatthijs Mekking <matthijs@isc.org>
Wed, 24 Sep 2025 15:03:06 +0000 (17:03 +0200)
commitdcd49f2eadcff03d7eab11a6aa371c4a62b7c67a
tree5c7af994688b9e50252cfa86ac81cc42765d9421
parent3918a8ca4cb5aa7ce665a7813913ff8f63656a07
Change checkconf to include built-in dnssec-policy

The configuration should also take into account the built-in
DNSSEC policies when verifying the keys in the key-directory match the
given policy. Update the code accordingly and add some good and
failure test cases.
bin/tests/system/checkconf-keys/bad-default-algorithm.conf.j2 [new file with mode: 0644]
bin/tests/system/checkconf-keys/bad-default-kz.conf.j2 [new file with mode: 0644]
bin/tests/system/checkconf-keys/named.conf.j2
bin/tests/system/checkconf-keys/setup.sh
bin/tests/system/checkconf-keys/tests_checkconf_keys.py
lib/isccfg/check.c
lib/isccfg/include/isccfg/kaspconf.h
lib/isccfg/kaspconf.c