]> git.ipfire.org Git - thirdparty/bind9.git/commit
2572. [func] Simplify DLV configuration, with a new option
authorEvan Hunt <each@isc.org>
Wed, 4 Mar 2009 02:42:31 +0000 (02:42 +0000)
committerEvan Hunt <each@isc.org>
Wed, 4 Mar 2009 02:42:31 +0000 (02:42 +0000)
commit3a30493983df83a3184dd1ecd39cf31ccdac3bad
tree6d7ae9a0b03cd9a2be2085e95b05ae4a845d0eef
parentffcd068f879349503183329a5c4527d7f6cc5989
2572. [func] Simplify DLV configuration, with a new option
"dnssec-lookaside auto;"  This is the equivalent
of "dnssec-lookaside . trust-anchor dlv.isc.org;"
plus setting a trusted-key for dlv.isc.org.

Note: The trusted key is hard-coded into named,
but is also stored in (and can be overridden
by) $sysconfdir/bind.keys.  As the ISC DLV key
rolls over it can be kept up to date by replacing
the bind.keys file with a key downloaded from
https://www.isc.org/solutions/dlv. [RT #18685]
15 files changed:
CHANGES
Makefile.in
bin/named/Makefile.in
bin/named/bind.keys.h [new file with mode: 0644]
bin/named/bindkeys.pl [new file with mode: 0755]
bin/named/config.c
bin/named/include/named/globals.h
bin/named/include/named/server.h
bin/named/main.c
bin/named/server.c
bind.keys [new file with mode: 0644]
doc/arm/Bv9ARM-book.xml
lib/bind9/check.c
lib/isccfg/include/isccfg/namedconf.h
lib/isccfg/namedconf.c