From: Ondřej Surý <ondrej@isc.org>
Date: Tue, 5 May 2026 08:49:37 +0000 (+0200)
Subject: rem: dev: Remove obsolete KEY record flags deprecated by RFC 3445
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=1535b32dab8b58692bd3bcb6b97d2353af8bcb1a;p=thirdparty%2Fbind9.git

rem: dev: Remove obsolete KEY record flags deprecated by RFC 3445

KEY resource records originally defined NOAUTH, NOCONF, EXTENDED, and
ENTITY flags that were removed by RFC 3445 back in 2002. BIND still
carried code to parse and emit them, including the additional two-octet
flags field that followed when the EXTENDED bit was set. That handling
has been removed and the affected bit positions are now reserved.

Dropping the extended-flags handling also eliminates a possible crash
that could be reached when signing a zone containing an invalid key.

Closes #5900

Merge branch '5900-remove-keyflag-extended' into 'main'

See merge request isc-projects/bind9!11961
---

1535b32dab8b58692bd3bcb6b97d2353af8bcb1a