From: Ondřej Surý <ondrej@isc.org>
Date: Wed, 18 Mar 2026 23:56:31 +0000 (+0100)
Subject: fix: usr: Fix NTA (Negative Trust Anchor) expiration issue
X-Git-Tag: v9.21.21~27
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7be7dbb7b3d6732735b0829d73cb638a1a14efcc;p=thirdparty%2Fbind9.git

fix: usr: Fix NTA (Negative Trust Anchor) expiration issue

When a configured NTA for a name expired, any possibly cached
data for the name (with "insecure" DNSSEC validation result)
was not flushed from the resolver's cache. This has been fixed.

Closes #5747

Merge branch '5747-nta-expiry-cache-flush-bug-fix' into 'main'

See merge request isc-projects/bind9!11597
---

7be7dbb7b3d6732735b0829d73cb638a1a14efcc