From: Mark Andrews <marka@isc.org>
Date: Tue, 11 Aug 2026 05:09:31 +0000 (+1000)
Subject: fix: usr: Honor DNSSEC policy key tag ranges
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=05b463c2cc8e82a444f2efad94ded85bea2fe4a3;p=thirdparty%2Fbind9.git

fix: usr: Honor DNSSEC policy key tag ranges

When a DNSSEC policy configured a non-default tag-range, dnssec-keygen
and dnssec-ksr could accept generated keys outside that range. Both tools
now honor the configured minimum and maximum key tags.

Closes #6091

Merge branch '6091-fix-dns-kasp-key-tagmax' into 'main'

See merge request isc-projects/bind9!12539
---

05b463c2cc8e82a444f2efad94ded85bea2fe4a3