From: Ondřej Surý <ondrej@isc.org>
Date: Wed, 1 Apr 2026 07:38:55 +0000 (+0200)
Subject: chg: usr: Implement RFC 3645 Section 4.1.1 key expiry check in TKEY
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6b6913c83b8eda8aa83226fcd1cc4d6383b4aa8e;p=thirdparty%2Fbind9.git

chg: usr: Implement RFC 3645 Section 4.1.1 key expiry check in TKEY

Check for existing TSIG keys before accepting a new
GSS-API negotiation and delete the key if it has expired.
Previously, an expired GSS key would permanently block
re-negotiation for that name until the server was restarted.

Merge branch 'ondrej/cleanup-gssapi-and-tkey-api' into 'main'

See merge request isc-projects/bind9!11713
---

6b6913c83b8eda8aa83226fcd1cc4d6383b4aa8e