]> git.ipfire.org Git - thirdparty/bind9.git/commit
remove /etc/bind.keys
authorEvan Hunt <each@isc.org>
Fri, 3 Feb 2023 22:57:17 +0000 (14:57 -0800)
committerEvan Hunt <each@isc.org>
Mon, 6 Feb 2023 22:39:31 +0000 (14:39 -0800)
commit9bb46262af4d2d317efe45ddb964e191fd4637c4
tree2eb6b3901ac0e4eb4228d76d5cce8d7217eec004
parentf291b77cd234888f04bf9b5181d2a88249889874
remove /etc/bind.keys

the built-in trust anchors in named and delv are sufficent for
validation. named still needs to be able to load trust anchors from
a bind.keys file for testing purposes, but it doesn't need to be
the default behavior.

we now only load trust anchors from a file if explicitly specified
via the "bindkeys-file" option in named or the "-a" command line
argument to delv. documentation has been cleaned up to remove references
to /etc/bind.keys.

Closes #3850.
20 files changed:
Makefile.am
Makefile.docs
bin/check/named-checkconf.rst
bin/delv/delv.c
bin/delv/delv.rst
bin/named/config.c
bin/named/include/named/globals.h
bin/named/main.c
bin/named/server.c
doc/arm/conf.py
doc/arm/reference.rst
doc/dnssec-guide/troubleshooting.rst
doc/dnssec-guide/validation.rst
doc/man/conf.py
doc/man/delv.1in
doc/man/named-checkconf.1in
doc/man/named.conf.5in
doc/misc/options
lib/isccfg/namedconf.c
util/check-make-install.in