From: Evan Hunt <each@isc.org>
Date: Wed, 22 Apr 2026 11:00:24 +0000 (+0000)
Subject: fix: dev: Remove unneeded options in dns_zonefetch
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a43a6cfba49dda6aa6126a7a10e9adfebc640337;p=thirdparty%2Fbind9.git

fix: dev: Remove unneeded options in dns_zonefetch

In the `dns_zonefetch` mechanism, some option flags for
`dns_resolver_createfetch()` were used for all fetches, but
were actually only needed by the `DNSKEY` refresh fetches.

(Specifially, these options were `DNS_FETCHOPT_UNSHARED`
and `DNS_FETCHOPT_NOCACHED`, which were used along with
`DNS_FETCHOPT_NOVALIDATE` to ensure we get a new copy of
the DNSKEY as it is currently published by the authority,
without prior validation.  Those conditions are needed
for RFC 5011 trust anchor maintenace, but not when looking
up parent-`NS` or `DSYNC` RRsets.)

Merge branch 'each-zonefetch-cleanup' into 'main'

See merge request isc-projects/bind9!11866
---

a43a6cfba49dda6aa6126a7a10e9adfebc640337