From: Ondřej Surý <ondrej@isc.org>
Date: Tue, 4 Nov 2025 19:30:08 +0000 (+0100)
Subject: fix: usr: Skip unsupported algorithms when looking for signing key
X-Git-Tag: v9.21.15~4
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7ca069e28fa3973d87169f99cdf3ff3fcd4ae00e;p=thirdparty%2Fbind9.git

fix: usr: Skip unsupported algorithms when looking for signing key

A mix of supported and unsupported DNSSEC algorithms in the same zone could have caused validation failures. Ignore the DNSSEC keys with unsupported algorithm when looking for the signing keys.

Closes #5622

Merge branch '5622-dont-fail-on-unsupported-algorithms' into 'main'

See merge request isc-projects/bind9!11208
---

7ca069e28fa3973d87169f99cdf3ff3fcd4ae00e