From 987497474cd33b3a6ec246e52fa256ccafec0b36 Mon Sep 17 00:00:00 2001
From: Jakob Schlyter <jakob@kirei.se>
Date: Sun, 4 Jun 2023 18:52:37 +0200
Subject: [PATCH] pass policy to rrset_signer (#932)

---
 dns/dnssec.py | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/dns/dnssec.py b/dns/dnssec.py
index 0c19ee80..13b73133 100644
--- a/dns/dnssec.py
+++ b/dns/dnssec.py
@@ -1234,6 +1234,7 @@ def default_rrset_signer(
     inception: Optional[Union[datetime, str, int, float]] = None,
     expiration: Optional[Union[datetime, str, int, float]] = None,
     lifetime: Optional[int] = None,
+    policy: Optional[Policy] = None,
 ) -> None:
     """Default RRset signer"""
 
@@ -1257,6 +1258,7 @@ def default_rrset_signer(
             expiration=expiration,
             lifetime=lifetime,
             signer=signer,
+            policy=policy,
         )
         txn.add(rrset.name, rrset.ttl, rrsig)
 
@@ -1272,6 +1274,7 @@ def sign_zone(
     lifetime: Optional[int] = None,
     nsec3: Optional[NSEC3PARAM] = None,
     rrset_signer: Optional[RRsetSigner] = None,
+    policy: Optional[Policy] = None,
 ) -> None:
     """Sign zone.
 
@@ -1360,6 +1363,7 @@ def sign_zone(
                 inception=inception,
                 expiration=expiration,
                 lifetime=lifetime,
+                policy=policy,
             )
             return _sign_zone_nsec(zone, _txn, _rrset_signer)
 
-- 
2.47.3