From: Matthijs Mekking Date: Thu, 10 Sep 2020 09:38:07 +0000 (+0200) Subject: Remove leftover 'dnssec-keys' references X-Git-Tag: v9.17.6~42^2~3 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=e6b335c2ab6ae106718c18595afbe5945b1cc905;p=thirdparty%2Fbind9.git Remove leftover 'dnssec-keys' references The option 'dnssec-keys' was introduced in 9.15 and also renamed to 'trust-anchors'. Rename the leftover references to 'trust-anchors'. --- diff --git a/doc/arm/managed-keys.rst b/doc/arm/managed-keys.rst index cf0f1867f0c..ac6424c6890 100644 --- a/doc/arm/managed-keys.rst +++ b/doc/arm/managed-keys.rst @@ -22,7 +22,7 @@ Validating Resolver ~~~~~~~~~~~~~~~~~~~ To configure a validating resolver to use :rfc:`5011` to maintain a trust -anchor, configure the trust anchor using a ``dnssec-keys`` statement and +anchor, configure the trust anchor using a ``trust-anchors`` statement and the ``initial-key`` keyword. Information about this can be found in :ref:`trust-anchors`. diff --git a/doc/arm/reference.rst b/doc/arm/reference.rst index 093abd607f1..1b357120ebc 100644 --- a/doc/arm/reference.rst +++ b/doc/arm/reference.rst @@ -1885,7 +1885,7 @@ Boolean Options ``trust-anchor-telemetry`` This causes ``named`` to send specially formed queries once per day to domains for which trust anchors have been configured via, e.g., - ``dnssec-keys`` or ``dnssec-validation auto``. + ``trust-anchors`` or ``dnssec-validation auto``. The query name used for these queries has the form ``_ta-xxxx(-xxxx)(...).``, where each "xxxx" is a group of four @@ -4654,7 +4654,7 @@ not used to validate answers; it is superseded by the key or keys stored in the managed-keys database. The next time ``named`` runs after an ``initial-key`` or ``initial-ds`` has been *removed* -from the ``dnssec-keys`` statement (or changed to a ``static-key`` or ``static-ds``), the +from the ``trust-anchors`` statement (or changed to a ``static-key`` or ``static-ds``), the corresponding zone is removed from the managed-keys database, and :rfc:`5011` key maintenance is no longer used for that domain.