]> git.ipfire.org Git - thirdparty/bind9.git/commit
projects / thirdparty / bind9.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 2929290) | patch
Fail if there are non apex DNSKEYs
authorMark Andrews <marka@isc.org>
Tue, 9 Jan 2024 06:01:07 +0000 (17:01 +1100)
committerMark Andrews <marka@isc.org>
Thu, 16 May 2024 02:09:57 +0000 (12:09 +1000)
commit529fa790a90e2234abe726a135c0c1f5b66a8e65
treed8585c176fe1ed63b9d5150d1e0ac6e3ac5ae7a6tree | snapshot
parent29292902c06021cd51ee5fbd93a3432e3142faedcommit | diff
Fail if there are non apex DNSKEYs

DNSSEC only works when DNSKEYs are self signed.  This only occurs
when the DNSKEY RRset is at the apex.  Cause dnssec-signzone to
fail if it attempts to sign an non-apex DNSKEY RRset.

(cherry picked from commit b3efc15be429d940a98baa4715959071e2581502)
bin/dnssec/dnssec-signzone.c diff | blob | blame | history
Mirror of https://gitlab.isc.org/isc-projects/bind9.git