]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
[9.20] fix: usr: Reconfigure NSEC3 opt-out zone to NSEC causes zone to be invalid
authorMark Andrews <marka@isc.org>
Mon, 22 Dec 2025 05:09:08 +0000 (16:09 +1100)
committerMark Andrews <marka@isc.org>
Mon, 22 Dec 2025 05:09:08 +0000 (16:09 +1100)
A zone that is signed with NSEC3, opt-out enabled, and then reconfigured to use NSEC, causes the zone to be published with missing NSEC records. This has been fixed.

Closes #5679

Backport of MR !11359

Merge branch 'backport-5679-nsec3-optout-to-nsec-9.20' into 'bind-9.20'

See merge request isc-projects/bind9!11401


Trivial merge