]> git.ipfire.org Git - thirdparty/bind9.git/commit
[9.20] fix: usr: Skip unsupported algorithms when looking for signing key
authorOndřej Surý <ondrej@isc.org>
Wed, 5 Nov 2025 04:16:21 +0000 (05:16 +0100)
committerOndřej Surý <ondrej@isc.org>
Wed, 5 Nov 2025 04:16:21 +0000 (05:16 +0100)
commitc346fe88a1bf30127f8cddd139dca1bca7bc13a2
tree4523cc37c144a9b21468eeb48a0767c8b5ddf4de
parent6098fd6abf43a2aa312e9e2f64264d6107acd1c8
parent619db66c47d413780e7ecd112a503ff9c0b43bbf
[9.20] fix: usr: Skip unsupported algorithms when looking for signing key

A mix of supported and unsupported DNSSEC algorithms in the same zone could have caused validation failures. Ignore the DNSSEC keys with unsupported algorithm when looking for the signing keys.

Closes #5622

Backport of MR !11208

Merge branch 'backport-5622-dont-fail-on-unsupported-algorithms-9.20' into 'bind-9.20'

See merge request isc-projects/bind9!11210