]> git.ipfire.org Git - thirdparty/bind9.git/commit
[9.20] fix: usr: rndc sign during ZSK rollover will now replace signatures
authorMatthijs Mekking <matthijs@isc.org>
Fri, 26 Sep 2025 13:11:45 +0000 (13:11 +0000)
committerMatthijs Mekking <matthijs@isc.org>
Fri, 26 Sep 2025 13:11:45 +0000 (13:11 +0000)
commitd2f551140cd008129f3a95e0f27d7e34f6aaa913
tree3aec7bf9a9055eda709d8acea94a3004a67b8a77
parentf48e42bb12657ced3868cffebc906352ed8204a3
parentbd13d0d2af7d697c3986f91d0610e73ea76ddedd
[9.20] fix: usr: rndc sign during ZSK rollover will now replace signatures

When performing a ZSK rollover, if the new DNSKEY is omnipresent, the :option:`rndc sign` command now signs the zone completely with the successor key, replacing all zone signatures from the predecessor key with new ones.

Closes #5483

Backport of MR !10867

Merge branch 'backport-5483-smooth-operator-bug-9.20' into 'bind-9.20'

See merge request isc-projects/bind9!11017