]> git.ipfire.org Git - thirdparty/bind9.git/commit
When signing with a new algorithm preserve NSEC/NSEC3 chains
authorMark Andrews <marka@isc.org>
Tue, 14 Mar 2023 02:13:14 +0000 (13:13 +1100)
committerMark Andrews <marka@isc.org>
Tue, 14 Mar 2023 13:30:22 +0000 (00:30 +1100)
commit772cdf453d659a93e0be3dc3c94dcd222d32f4a8
treeacb3643fc86e8ebfdc203ca849b0986c9ecd7e9e
parent589a203f236a26af2128d682dc10386dd644ac31
When signing with a new algorithm preserve NSEC/NSEC3 chains

If the zone already has existing NSEC/NSEC3 chains then zone_sign
needs to continue to use them.  If there are no chains then use
kasp setting otherwise generate an NSEC chain.

(cherry picked from commit 4b5520145969222e6482e4552e49e96cc7d9bd97)
lib/dns/zone.c