]> git.ipfire.org Git - thirdparty/bind9.git/commit
Prevent UDPATE deleting keys in dnssec-policy zones 5956-update-keydata 12020/head
authorEvan Hunt <each@isc.org>
Thu, 14 May 2026 03:03:43 +0000 (20:03 -0700)
committerEvan Hunt <each@isc.org>
Thu, 14 May 2026 05:02:52 +0000 (22:02 -0700)
commit9c35c96deeb7526b280e3c1e35fd4486a7a38d50
treeeb3f07f50212bb8ae81e6b7810d935adac19f5d8
parentb4e8e431eb1bcb2e4b7c6f568c49b7ec23b59cc1
Prevent UDPATE deleting keys in dnssec-policy zones

In dnssec-policy zones, DNSKEY, CDNSKEY and CDS data at the
zone apex should not be deleted by UPDATE. Previously, this was
prevented when deleting individual RRs. It is now also prevented
when deleting the entire RRset.
bin/tests/system/nsupdate/tests.sh
lib/ns/update.c