From: Evan Hunt <each@isc.org>
Date: Tue, 25 Mar 2025 06:39:07 +0000 (+0000)
Subject: fix: usr: Don't enforce NOAUTH/NOCONF flags in DNSKEYs
X-Git-Tag: v9.21.7~30
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d18787b13424d9a4c29845cd02ec9c35896a45ab;p=thirdparty%2Fbind9.git

fix: usr: Don't enforce NOAUTH/NOCONF flags in DNSKEYs

All DNSKEY keys are able to authenticate. The `DNS_KEYTYPE_NOAUTH` (and `DNS_KEYTYPE_NOCONF`) flags were defined for the KEY rdata type, and are not applicable to DNSKEY. Previously, however, because the DNSKEY implementation was built on top of KEY, the `_NOAUTH` flag prevented authentication in DNSKEYs as well. This has been corrected.

Closes #5240

Merge branch '5240-ignore-noauth-flag' into 'main'

See merge request isc-projects/bind9!10261
---

d18787b13424d9a4c29845cd02ec9c35896a45ab