From: Daniel Salzman <daniel.salzman@nic.cz>
Date: Tue, 19 Dec 2023 06:46:13 +0000 (+0100)
Subject: conf: remove no longer needed check for deprecated algorithm
X-Git-Tag: v3.4.0~212
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=9b024a0bcc1040581cddd79e8772dccc8ec4350b;p=thirdparty%2Fknot-dns.git

conf: remove no longer needed check for deprecated algorithm
---

diff --git a/src/knot/conf/tools.c b/src/knot/conf/tools.c
index bc11b2ec6d..ab84809aa6 100644
--- a/src/knot/conf/tools.c
+++ b/src/knot/conf/tools.c
@@ -704,10 +704,6 @@ int check_policy(
 	                                            C_NSEC3_ITER, args->id, args->id_len);
 
 	unsigned algorithm = conf_opt(&alg);
-	if (algorithm < DNSSEC_KEY_ALGORITHM_RSA_SHA256) {
-		CONF_LOG(LOG_NOTICE, "algorithm %u is deprecated and should not be used for DNSSEC signing",
-		         algorithm);
-	}
 
 	int64_t ksk_size = conf_int(&ksk);
 	if (ksk_size != YP_NIL && !dnssec_algorithm_key_size_check(algorithm, ksk_size)) {