]> git.ipfire.org Git - thirdparty/bind9.git/commit
[master] tag initializing keys so they can't be used for normal validation
authorEvan Hunt <each@isc.org>
Thu, 12 Oct 2017 04:01:13 +0000 (21:01 -0700)
committerEvan Hunt <each@isc.org>
Thu, 12 Oct 2017 04:01:13 +0000 (21:01 -0700)
commit560d8b833edceb4b715fe46b45f2009dc09fdb5d
tree881deb969828c9cdb19972ce191267d003100bd7
parent77c7d1c5556dee0716a65065f4abf82bb15ccac4
[master] tag initializing keys so they can't be used for normal validation

4773. [bug] Keys specified in "managed-keys" statements
can now only be used when validating key refresh
queries during initialization of RFC 5011 key
maintenance. If initialization fails, DNSSEC
validation of normal queries will also fail.
Previously, validation of normal queries could
succeed using the initializing key, potentially
masking problems with managed-keys. [RT #46077]
24 files changed:
CHANGES
bin/named/server.c
bin/tests/system/mkeys/README
bin/tests/system/mkeys/clean.sh
bin/tests/system/mkeys/ns1/named1.conf
bin/tests/system/mkeys/ns1/named2.conf
bin/tests/system/mkeys/ns1/sign.sh
bin/tests/system/mkeys/ns2/named.args
bin/tests/system/mkeys/ns4/named.conf [new file with mode: 0644]
bin/tests/system/mkeys/ns5/named.conf [new file with mode: 0644]
bin/tests/system/mkeys/setup.sh
bin/tests/system/mkeys/tests.sh
bin/tests/system/runtime/ns2/named-alt2.conf
bin/tests/system/runtime/ns2/named-alt3.conf
bin/tests/system/runtime/ns2/named-alt4.conf
bin/tests/system/runtime/ns2/named-alt5.conf
bin/tests/system/runtime/tests.sh
doc/arm/notes.xml
lib/dns/client.c
lib/dns/include/dns/keytable.h
lib/dns/keytable.c
lib/dns/tests/keytable_test.c
lib/dns/validator.c
lib/dns/zone.c