From: Matthijs Mekking <matthijs@isc.org>
Date: Fri, 26 Sep 2025 12:03:46 +0000 (+0000)
Subject: fix: usr: rndc sign during ZSK rollover will now replace signatures
X-Git-Tag: v9.21.14~21
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6246f9d7cb11ef2f1482a523dd541f201397ef71;p=thirdparty%2Fbind9.git

fix: usr: rndc sign during ZSK rollover will now replace signatures

When performing a ZSK rollover, if the new DNSKEY is omnipresent, the :option:`rndc sign` command now signs the zone completely with the successor key, replacing all zone signatures from the predecessor key with new ones.

Closes #5483

Merge branch '5483-smooth-operator-bug' into 'main'

See merge request isc-projects/bind9!10867
---

6246f9d7cb11ef2f1482a523dd541f201397ef71