]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
fix: usr: Reconfigure NSEC3 opt-out zone to NSEC causes zone to be invalid
authorMatthijs Mekking <matthijs@isc.org>
Fri, 19 Dec 2025 16:33:53 +0000 (16:33 +0000)
committerMatthijs Mekking <matthijs@isc.org>
Fri, 19 Dec 2025 16:33:53 +0000 (16:33 +0000)
A zone that is signed with NSEC3, opt-out enabled, and then reconfigured to use NSEC, causes the zone to be published with missing NSEC records. This has been fixed.

Closes #5679

Merge branch '5679-nsec3-optout-to-nsec' into 'main'

See merge request isc-projects/bind9!11359


Trivial merge