]> git.ipfire.org Git - thirdparty/bind9.git/commit
Set "dnssec-validation auto" by default
authorEvan Hunt <each@isc.org>
Wed, 16 May 2018 18:58:15 +0000 (11:58 -0700)
committerOndřej Surý <ondrej@sury.org>
Thu, 31 May 2018 16:22:32 +0000 (18:22 +0200)
commitbef18ecac6d2ef5d74faadd212e9e45d87047f32
treeb683588ba0a18e62730fb5a9d876f655834d3513
parent1f743fe0da0a8efb4c39772b92d0c9c25fd36b7f
Set "dnssec-validation auto" by default

- the default setting for dnssec-validation is now "auto", which
  activates DNSSEC validation using the IANA root key.  The old behavior
  can be restored by explicitly setting "dnssec-validation yes", which
  "yes", which activates DNSSEC validation only if keys are explicitly
  configured in named.conf.
- the ARM has been updated to describe the new behavior
bin/named/Makefile.in
bin/named/config.c
bind.keys
bind.keys.h
configure
configure.in
doc/arm/Bv9ARM-book.xml