From: Matthijs Mekking <matthijs@isc.org>
Date: Fri, 19 Dec 2025 16:33:53 +0000 (+0000)
Subject: fix: usr: Reconfigure NSEC3 opt-out zone to NSEC causes zone to be invalid
X-Git-Tag: v9.21.17~19
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=65592874bd0b11a978109af907bacfb8fe421de4;p=thirdparty%2Fbind9.git

fix: usr: Reconfigure NSEC3 opt-out zone to NSEC causes zone to be invalid

A zone that is signed with NSEC3, opt-out enabled, and then reconfigured to use NSEC, causes the zone to be published with missing NSEC records. This has been fixed.

Closes #5679

Merge branch '5679-nsec3-optout-to-nsec' into 'main'

See merge request isc-projects/bind9!11359
---

65592874bd0b11a978109af907bacfb8fe421de4