From: Evan Hunt <each@isc.org>
Date: Tue, 24 Mar 2026 20:24:58 +0000 (+0000)
Subject: rem: usr: Remove -C option from dnssec-keygen and dnssec-keyfromlabel
X-Git-Tag: v9.21.21~17
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=864932a15ecdd1eeabe29743990a1faf23145646;p=thirdparty%2Fbind9.git

rem: usr: Remove -C option from dnssec-keygen and dnssec-keyfromlabel

The -C option, introduced in BIND 9.7, caused a backward-compatible
key to be generated, using private key format version 1.2, omitting the
creation date and other timing metadata. This made it possible to
generate keys that could be loaded by older versions of BIND.

Those older versions having reached end of life many years ago, the
option can now be removed, along with the `dnssec-settime -f` option,
which caused old-style keys to be upgraded.

Merge branch 'each-remove-keygen-compat' into 'main'

See merge request isc-projects/bind9!11446
---

864932a15ecdd1eeabe29743990a1faf23145646