]> git.ipfire.org Git - thirdparty/bind9.git/commit
When signing with a new algorithm preserve NSEC/NSEC3 chains
authorMark Andrews <marka@isc.org>
Tue, 14 Mar 2023 02:13:14 +0000 (13:13 +1100)
committerMark Andrews <marka@isc.org>
Tue, 14 Mar 2023 13:18:54 +0000 (00:18 +1100)
commit7f13c9d3fa62bcdf128dd3914cfb7086a213e306
tree01ba098eeb5bd16f5400d9fca499e0cf4f50d4f2
parentf012549203f9191f07b1662ae65ee9579d693fa5
When signing with a new algorithm preserve NSEC/NSEC3 chains

If the zone already has existing NSEC/NSEC3 chains then zone_sign
needs to continue to use them.  If there are no chains then use
kasp setting otherwise generate an NSEC chain.

(cherry picked from commit 4b5520145969222e6482e4552e49e96cc7d9bd97)
bin/tests/system/nsec3/tests.sh
lib/dns/zone.c