]> git.ipfire.org Git - thirdparty/bind9.git/commit
Warn about deprecated DNSKEY and DS algorithms / digest types
authorMark Andrews <marka@isc.org>
Thu, 5 Jun 2025 04:49:10 +0000 (14:49 +1000)
committerMark Andrews <marka@isc.org>
Tue, 15 Jul 2025 13:53:57 +0000 (23:53 +1000)
commitcb6903c55e9ff6135a37c987fb6cee327967f0db
tree07d101ae59d76eb867c551ba8ef072f5e16b6f74
parent4248a5a4954b6ac518912dbd203b8c2f4dc9c355
Warn about deprecated DNSKEY and DS algorithms / digest types

DNSKEY algorithms RSASHA1 and RSASHA-NSEC3-SHA1 and DS digest type
SHA1 are deprecated.  Log when these are present in primary zone
files and when generating new DNSKEYs, DS and CDS records.
bin/dnssec/dnssec-dsfromkey.c
bin/dnssec/dnssec-keyfromlabel.c
bin/dnssec/dnssec-keygen.c
bin/tests/system/checkconf/tests.sh
lib/dns/dnssec.c
lib/dns/include/dns/ds.h
lib/dns/zone.c
lib/isccfg/kaspconf.c