]> git.ipfire.org Git - thirdparty/bind9.git/commit
Merge kasp.Key functionality into zone.FileZoneKey
authorNicki Křížek <nicki@isc.org>
Tue, 16 Jun 2026 12:34:48 +0000 (12:34 +0000)
committerNicki Křížek <nicki@isc.org>
Thu, 2 Jul 2026 12:51:41 +0000 (14:51 +0200)
commit35fc5ce8b4ddc71d032b634cd7a827b606742495
tree0ac5257eb05ad91b55111262614f8d15b3cb08e7
parent9dc039f735788d81f695dccac6ffad65e8547476
Merge kasp.Key functionality into zone.FileZoneKey

Make zone.FileZoneKey the single representation of a file-backed key
(typically generated by dnssec-keygen). Move the common key-related
functionality into zone.FileZoneKey, and extend that functionality in
kasp.Key to also add state and timing related operations on top. Remove
duplicate into_ta() function.

Note that is_ksk() is implemented differently for kasp.Key: with the
metadata file available, the KSK status is loaded from that file, as it
indicates the authoritative policy decision which makes the key a KSK.
In zone.FileZoneKey which doesn't work with the metadata file, the KSK
status if inferred from the DNSKEY SEP flag - the best information
available for that class.

Assisted-by: Claude:claude-opus-4-8
bin/tests/system/isctest/kasp.py
bin/tests/system/isctest/zone.py