From: Mark Andrews <marka@isc.org>
Date: Thu, 22 Aug 2024 12:55:46 +0000 (+0000)
Subject: new: usr: Support restricted key tag range when generating new keys
X-Git-Tag: v9.21.1~19
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d40b722d462fbc2fdbb039503bd89746d10d1987;p=thirdparty%2Fbind9.git

new: usr: Support restricted key tag range when generating new keys

It is useful when multiple signers are being used
to sign a zone to able to specify a restricted
range of range of key tags that will be used by an
operator to sign the zone.  This adds controls to
named (dnssec-policy), dnssec-signzone, dnssec-keyfromlabel and
dnssec-ksr (dnssec-policy) to specify such ranges.

Closes #4830

Merge branch '4830-support-restricted-key-tag-range-when-generating-new-keys' into 'main'

Closes #4830

See merge request isc-projects/bind9!9258
---

d40b722d462fbc2fdbb039503bd89746d10d1987