]> git.ipfire.org Git - thirdparty/bind9.git/commit
[9.18] fix: usr: Skip unsupported algorithms when looking for signing key
authorOndřej Surý <ondrej@isc.org>
Wed, 5 Nov 2025 10:50:42 +0000 (11:50 +0100)
committerOndřej Surý <ondrej@isc.org>
Wed, 5 Nov 2025 10:50:42 +0000 (11:50 +0100)
commit2882dbfc803944b3e7392d47dd618f0781adf8cc
tree88d94ca676ad883dc837339524a426790bf616da
parentfb04f67e5e09804b615e77208a4c9a088cf780d9
parente47f8104669ca9d3c608e2c6a76357326d482799
[9.18] fix: usr: Skip unsupported algorithms when looking for signing key

A mix of supported and unsupported DNSSEC algorithms in the same zone could have caused validation failures. Ignore the DNSSEC keys with unsupported algorithm when looking for the signing keys.

Closes #5622

Backport of MR !11208

Merge branch 'backport-5622-dont-fail-on-unsupported-algorithms-9.18' into 'bind-9.18'

See merge request isc-projects/bind9!11211