From: Petr Špaček <pspacek@isc.org>
Date: Mon, 23 Jun 2025 11:22:52 +0000 (+0200)
Subject: Restore DNSSEC validation by default
X-Git-Tag: v9.21.10~36^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3d1733b936db37415c933df0e870d4c014dc8a57;p=thirdparty%2Fbind9.git

Restore DNSSEC validation by default

Meson generated 'dnssec-validation yes' into the built-in config, but
this config without an explicit trust anchor does not enable validation.
Change default to 'dnssec-validation auto' to use built-in key, as in
the autotools days.
---

diff --git a/meson.build b/meson.build
index 8d6b9c77a91..0168c071cad 100644
--- a/meson.build
+++ b/meson.build
@@ -257,7 +257,7 @@ config.set_quoted('PACKAGE_SRCID', src_id)
 config.set_quoted('PACKAGE_CONFIGARGS', build_options)
 
 if get_option('auto-validation').allowed()
-    config.set_quoted('VALIDATION_DEFAULT', 'yes')
+    config.set_quoted('VALIDATION_DEFAULT', 'auto')
 else
     config.set_quoted('VALIDATION_DEFAULT', 'no')
 endif