]> git.ipfire.org Git - thirdparty/knot-dns.git/commitdiff
conf: remove no longer needed check for deprecated algorithm
authorDaniel Salzman <daniel.salzman@nic.cz>
Tue, 19 Dec 2023 06:46:13 +0000 (07:46 +0100)
committerDaniel Salzman <daniel.salzman@nic.cz>
Tue, 19 Dec 2023 06:46:13 +0000 (07:46 +0100)
src/knot/conf/tools.c

index bc11b2ec6dfe420b6cad29fbe0236fea56d83b96..ab84809aa647a6e641d37f30d7add25f7a46085d 100644 (file)
@@ -704,10 +704,6 @@ int check_policy(
                                                    C_NSEC3_ITER, args->id, args->id_len);
 
        unsigned algorithm = conf_opt(&alg);
-       if (algorithm < DNSSEC_KEY_ALGORITHM_RSA_SHA256) {
-               CONF_LOG(LOG_NOTICE, "algorithm %u is deprecated and should not be used for DNSSEC signing",
-                        algorithm);
-       }
 
        int64_t ksk_size = conf_int(&ksk);
        if (ksk_size != YP_NIL && !dnssec_algorithm_key_size_check(algorithm, ksk_size)) {