]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
Restore DNSSEC validation by default
authorPetr Špaček <pspacek@isc.org>
Mon, 23 Jun 2025 11:22:52 +0000 (13:22 +0200)
committerPetr Špaček <pspacek@isc.org>
Mon, 23 Jun 2025 12:58:59 +0000 (12:58 +0000)
Meson generated 'dnssec-validation yes' into the built-in config, but
this config without an explicit trust anchor does not enable validation.
Change default to 'dnssec-validation auto' to use built-in key, as in
the autotools days.

meson.build

index 8d6b9c77a9187584fc79f5b14d0ae1653585446b..0168c071cade4cb57528d34225e1f85cc7a69fd1 100644 (file)
@@ -257,7 +257,7 @@ config.set_quoted('PACKAGE_SRCID', src_id)
 config.set_quoted('PACKAGE_CONFIGARGS', build_options)
 
 if get_option('auto-validation').allowed()
-    config.set_quoted('VALIDATION_DEFAULT', 'yes')
+    config.set_quoted('VALIDATION_DEFAULT', 'auto')
 else
     config.set_quoted('VALIDATION_DEFAULT', 'no')
 endif