]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
fix: usr: rndc sign during ZSK rollover will now replace signatures
authorMatthijs Mekking <matthijs@isc.org>
Fri, 26 Sep 2025 12:03:46 +0000 (12:03 +0000)
committerMatthijs Mekking <matthijs@isc.org>
Fri, 26 Sep 2025 12:03:46 +0000 (12:03 +0000)
When performing a ZSK rollover, if the new DNSKEY is omnipresent, the :option:`rndc sign` command now signs the zone completely with the successor key, replacing all zone signatures from the predecessor key with new ones.

Closes #5483

Merge branch '5483-smooth-operator-bug' into 'main'

See merge request isc-projects/bind9!10867


Trivial merge